last executing test programs: 2m17.361174625s ago: executing program 0 (id=14563): ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'ip6_vti0\x00', &(0x7f0000000000)=@ethtool_rxfh_indir={0x39, 0x7, [0x4, 0x4, 0x6e1, 0x7, 0x2, 0x100, 0xec62]}}) (async) r0 = accept4$tipc(0xffffffffffffffff, 0x0, &(0x7f0000000080), 0x80000) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f00000000c0), &(0x7f0000000100)=0x30) (async) socketpair(0x23, 0xa, 0x4, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_udp_int(r2, 0x11, 0x66, &(0x7f0000000180)=0xf, 0x4) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r2, 0x894b, &(0x7f00000001c0)) (async) setsockopt$IP_VS_SO_SET_DEL(r1, 0x0, 0x484, &(0x7f0000000200)={0x33, @empty, 0x4e23, 0x0, 'none\x00', 0xd2c8f20c4242bfc8, 0x4, 0x1f}, 0x2c) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f0000000240)=[@in6={0xa, 0x4e23, 0x8, @mcast2, 0x9}, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x2a}}, @in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x3c) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000300)={'ip_vti0\x00', &(0x7f0000000280)={'syztnl2\x00', 0x0, 0x10, 0x8000, 0x0, 0xf, {{0x9, 0x4, 0x2, 0x3c, 0x24, 0x68, 0x0, 0x6, 0x29, 0x0, @local, @multicast1, {[@lsrr={0x83, 0xf, 0x44, [@multicast1, @rand_addr=0x64010101, @multicast2]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r3, 0x4, 0x0, 0x2, 0x3, 0x40, @dev={0xfe, 0x80, '\x00', 0x21}, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7, 0x7800, 0x9, 0xe17}}) (async) ioctl$SIOCAX25NOUID(r2, 0x89e3, &(0x7f0000000400)=0x1) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000440), 0x480800, 0x0) ioctl$TUNSETCARRIER(r4, 0x400454e2, &(0x7f0000000480)=0x1) (async) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000004c0)={'vxcan0\x00', 0x0}) ioctl$sock_SIOCADDRT(r5, 0x890b, &(0x7f0000000540)={0x0, @can={0x1d, r6}, @llc={0x1a, 0x325, 0x0, 0x7, 0xfc, 0xa, @multicast}, @ax25={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}}, 0x5af9, 0x0, 0x0, 0x0, 0xe, &(0x7f0000000500)='lo\x00', 0xff, 0x1, 0xd3}) (async) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000005c0)={'veth1_macvtap\x00', 0x1000}) (async) ioctl$F2FS_IOC_FLUSH_DEVICE(r5, 0x4008f50a, &(0x7f0000000600)={0x7fffffff, 0x3}) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000680)={0x0, {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x4e20, @local}, {0x2, 0x4e24, @rand_addr=0x64010100}, 0x1c0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000640)='vlan0\x00', 0x0, 0x4, 0x6}) (async) r7 = socket$phonet(0x23, 0x2, 0x1) connect$pppl2tp(r2, &(0x7f0000000700)=@pppol2tpv3={0x18, 0x1, {0x0, r7, {0x2, 0x4e23, @empty}, 0x1, 0x0, 0x0, 0x2}}, 0x2e) (async) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f0000000740)={0x0, 0x8}, &(0x7f0000000780)=0x8) setsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f00000007c0)={r8, 0x6}, 0x8) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000840), r2) sendmsg$NL80211_CMD_REQ_SET_REG(r9, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x1c, r10, 0x800, 0x70bd2d, 0x25dfdbfb, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x58}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async) getsockopt$inet_sctp6_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000940)={r8, 0xffff, 0xf, 0x9, 0xe, 0x2, 0x0, 0x3, {r8, @in={{0x2, 0x4e24, @rand_addr=0x64010101}}, 0x39c5, 0x3, 0x146e, 0x1, 0x9}}, &(0x7f0000000a00)=0xb0) setsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000a40)={r11, 0x7}, 0x8) (async) socket$kcm(0x29, 0x2, 0x0) (async) setsockopt$netlink_NETLINK_RX_RING(r1, 0x10e, 0x6, &(0x7f0000000a80)={0x995, 0x6, 0x9, 0x8}, 0x10) 2m17.024451365s ago: executing program 0 (id=14567): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x34, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x2}, @RTA_ENCAP={0x10, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0xc, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_GENEVE={0x8, 0x1, 0x0, 0x1, @LWTUNNEL_IP_OPT_GENEVE_DATA={0x4}}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x54, 0x10, 0x405, 0xfffffffc, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x45502, 0x4}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x2}, @IFLA_IPVLAN_MODE={0x6, 0x1, 0x2}]}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x54}, 0x1, 0x0, 0x0, 0x4001}, 0x0) 2m16.760430188s ago: executing program 0 (id=14571): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) (async) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (rerun: 64) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000940)=@newqdisc={0x64, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x34, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}, [@TCA_NETEM_DELAY_DIST={0x6, 0x2, "6888"}, @TCA_NETEM_CORR={0x10, 0x1, {0x24b7, 0x2, 0x80000000}}]}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) (async, rerun: 64) r4 = socket$packet(0x11, 0x3, 0x300) (rerun: 64) sendto$packet(r4, &(0x7f00000005c0)="bad330fbc9b55400040000ea0756", 0xe, 0x40, &(0x7f00000001c0)={0x11, 0x88a8, r3, 0x1, 0xd8, 0x6, @multicast}, 0x14) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) (async, rerun: 64) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r5, 0x84, 0x6c, &(0x7f0000000280)={0x0, 0x82, "981f8afc7408e6515dca0a62aaef1724134a7ad4cc7309014cbdd6b7740bad602f209cf8249855841fb3b6563b64fefbbc3983c9edbc3fd552b8a8ef70b9551b8b819a8e1cfb0d9add5fcc9dfd46d8a9ac924a474309c3ec0c0f40958381f1c3e300001c7dccec4d4b75219b8fc2b0eb2c1c245042790d88c1b4d5e4ebb34bf785fe"}, &(0x7f0000000080)=0x8a) (rerun: 64) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r5, 0x84, 0x77, &(0x7f00000000c0)={r6, 0x1, 0x7, [0x0, 0x1, 0x7ff, 0xff, 0x9, 0x8, 0x5]}, 0x16) (async, rerun: 64) sendmmsg$inet6(r5, &(0x7f0000000740)=[{{&(0x7f0000000200)={0xa, 0x4e23, 0x11, @loopback, 0x8000002}, 0x1c, &(0x7f0000001b40)=[{&(0x7f0000001200)="01", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f0000001400)="cf", 0x1}], 0x1}}], 0x2, 0x24000005) (async, rerun: 64) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r5, 0x84, 0x6, &(0x7f0000000100)={0x0, @in6={{0xa, 0x4e23, 0x2, @loopback}}}, 0x84) (async) r7 = socket$inet_sctp(0x2, 0x1, 0x84) (async) r8 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r8, 0x84, 0x23, &(0x7f0000000240)={r9, 0x2}, 0x8) (async, rerun: 64) setsockopt$inet_sctp_SCTP_MAXSEG(r7, 0x84, 0xd, &(0x7f0000000000)=@assoc_id=r9, 0x4) (rerun: 64) 2m16.531486601s ago: executing program 0 (id=14579): r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000380)=ANY=[@ANYBLOB="01000000000000000a00000000000000ff01000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000002"], 0x190) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x18, 0x26, 0x1, 0x7fffd, 0x1000, {0x4}, [@nested={0x4, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008090) close(0x3) 2m16.347534381s ago: executing program 0 (id=14582): socketpair$unix(0x1, 0x5, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001700)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffffe}, 0x48) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f0000000040)=0x1, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x702, 0xe, 0x0, &(0x7f0000000100)="e4604f89ecdb33440008d480eb00", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2m16.091824622s ago: executing program 0 (id=14587): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x24000004}, 0x20048000) sendmsg$NFT_BATCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a84000000060a0b0400000000000000000200000058000480540001800a0001006d617463680000004400028008000240000000002c00030026ad3dc548f0d8e54d23edfcbe6d55b57cb15e63c10080000000000000abc3d6ce2316334e8278ad0a0001006c696d69740000000900010073797a30000000000900020073797a32"], 0xac}, 0x1, 0x0, 0x0, 0x2000094}, 0x40448c1) 21.043625136s ago: executing program 4 (id=16036): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = accept(r0, &(0x7f0000000080)=@rc={0x1f, @fixed}, &(0x7f0000000100)=0x80) socket(0xb, 0x3, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r1) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) r2 = socket(0xa, 0x3, 0x3a) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x89e1, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYRESOCT=r2], 0x2c}, 0x1, 0x0, 0x0, 0x8811}, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000000)="ad56b6c5820f0000f4ff0e0000000000a059bfda8fec4fbb", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x80000) sendmmsg$alg(r2, &(0x7f00000002c0)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}], 0x1, 0x40800) recvmsg$unix(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)}, 0x40) r5 = socket$vsock_stream(0x28, 0x1, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="64000000020605000a0000000000000000000000100003006269746d61703a706f72740005000400010000000900020073797a3000000000050005000000000005000100060000001c0007800600044000000000060005400000000008000640"], 0x64}}, 0x0) recvmsg(r6, 0x0, 0x40002143) bind$vsock_stream(r5, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r5, 0x0) accept(r5, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x8100, 0x0) socket(0x40000000015, 0x5, 0x0) socket$inet6(0xa, 0x3, 0x7) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$inet6_sctp(0xa, 0x5, 0x84) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x7f}, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000100), r7) getsockopt$IPT_SO_GET_REVISION_TARGET(r2, 0x0, 0x43, &(0x7f0000000280)={'ah\x00'}, &(0x7f0000000340)=0x1e) 21.000584722s ago: executing program 4 (id=16038): r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000600)={0x4c, r0, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_LEVEL={0x1c, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_FRAME={0x8}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x81}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x5}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x600c046}, 0x20044c80) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2b}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c001e"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) r2 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000040)={0x1d, r3, 0x8000000000000003}, 0x18) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000980)={0x2070, 0x19, 0x1, 0x70bd2d, 0x25dfdbfb, {0x2}, [@typed={0xc, 0x10c, 0x0, 0x0, @u64=0x9}, @typed={0xa, 0x131, 0x0, 0x0, @str='vcan0\x00'}, @generic="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", @nested={0x1255, 0x96, 0x0, 0x1, [@typed={0x8, 0x60, 0x0, 0x0, @u32=0x3}, @generic="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", @nested={0x4, 0x132}, @typed={0x8, 0xb1, 0x0, 0x0, @u32=0x2}, @generic="a0f95a3b544fa6e72627b669bfc4517affc35533d3620c695f760f097544323b5427bd1666cb5f8ff4cfe8550c3535b9e29a0a4be6fdcd30de4f8222d5cb80869d2bcf3cf2313dd69e293a24e00e4ddd224a2c622b900869426f17a7497ce303ad6d3c187333e1e639651f11", @generic="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", @generic="ea3956933b1b0595c34d80c0e787036b85e41e52cb17439dec444659e24c9873d6c601a08b8702e0e46e4eec61c6ed75326a0a2ecbc7171fa4177a8c0efe409d108321472bf0d81bab140716b6c2ad02da1949ea4f9485e96381a535559fe92b8c0d619860abdbdb07a5f89d97f16ae2d3d9044a80e6b31f837f0c5b1e598388b4736a991136dfe21c88202d62571d0beaf96884bba03f758c0f5b3e7ac53d1e3c29608b00cc10e0c677a044684b276962a6852c0f1dfb921acdba22343a", @typed={0x14, 0x118, 0x0, 0x0, @ipv6=@remote}]}, @generic="935510d862d66faab93b0f9f89dfa897211bd1f473a6672ee9d8f4f7f75488617de40196e43580a119d5b81281750c16722242a4a00e071385c98de754d902a4546658f1ba2db9baabab4b214db2eb24addebba8f41ad46f7ddf308fbb644c0e678e0fd22b2389ab1a2f0cc4cc42f77ab1aa310f355987ff1ca37847baaf1fc42a1d2b808a0277e473a2ded918865e8c2eb5c567d89229ec02ee28d29b68126d96cf98a8f9ece3ba1f4b359aa79e1eed37af97a4884edced86a86bc9eac772f7891a52c32b016e843203403e585b5152b2bd8474bd67fe5240f32068e71edc2125916b76d79280f2af2cc1c8dd21b60aead1e6", @generic="d903073f2814863caa6ed5419a0f33d19f4118e665b4df3b43138d6d56ba264b2a65c4276caa91f7db5dc265cc0279aa59c8228b3cd395164cbd2d97293d15cbc143d44ca7d4a6cf1c3452fd1bfe06c6100a33df8567a25a50ff8efbf7671bee6fe488abccabbdb9a1010d076260c9f953c6d6d9d77fddd8bf63bbdb23aa08c3c4441e40e512cfeba6020e2876f06dfc891be248870e089f9295b8ad2111fa3017c32444c0bdf7d0dfe05502e4c06504f56eeb5122c5c9992828ab1fb883de2dad1cbb6d233033793e6a554ab094c5543be2ef6f2a784e0b320b3afb4c23ddb5b47a0253cfca4457ade6c1b4fd39e444a33fbeff5c1bb5aa71d71909ed50c9fcd8533fdf17a9493ab6b81fc010bb54f5b1e434a8e5337659ac988b7e777cce76a0067d98c5083b67957738c37ef27fd0f0dbd7948a7119d3f1d5d92168be5480a719d8bfdf18d89a2363caf5588b1955664661a8daa2a218747226463d051ef36b3d8e3233d2796e4ee3559fd4593d8a98281f984b558a6650c21ddffbd50630273c9ecbd0ced365393d48bd7207e08964de19d7536787dc01182551cd17ff74100fe47030dce70b43e6fb109edb3eb4ebc26e6f650d6fe2f48dbf10abd8da3a74734e1ce0de2916a88fb7baf2e3a667d9c84cc832ef722bf3f0158659e6ee4d54578568b7e4286ecf5d28657cd7255599271de02de750a3e4db9c861cd6cb0d31a62de7d1f883c81707a7b1b1e73cacb6f89e757abf476827ee68b665990930e2378d9f71cffbe85136b2dd41a37e3dfad20abdd61e638dba4734bd373b5a7e2231cef7fd7290f5f5176744973f51d57256459a87bc398fa50d35b0ec9d4af2586d8589bc60de4c8749b4c05570d6bd348423f3e6130dbd82db51ab59faa567ef5c508c42dc4d65c31328e9e1748060f94ac7da9e66e51f2267d472fb88d3a2cd382bc1abfa36a41053154050d3dd107f44ee6ad7d336370bd2e2f277bac9ae98736e3a1a23c711e40294217175d22e004a4c259cbdb6e979636bda65fba76bacf70831da02da182d02188b77c7e3786936a00d76c083ba03880a497677083d19be6bde9e24b82f8439de814782dbc17c1df750ac9b91acf0c3275f359015e9c87265c1a6ad3885d37d38184b2bee4412d2a7b718c0da2df38c32ff001f5832b8fd26d9881b7511737bfc31f61c7ffdbde1302b13b21c02cd0e205594613b2928b2365d43d1f7ef48c4ce456b4193fbd78c156bbd33ba8be512c72b3d24e776c4b11ce9fc227aa234ba9fcf9ed8ca9542c7f1dbfd5cb03f3b9c3590a835f4287ad209a7f277010883ed5d2cfd14dd39e82ee105634d12aa17369a53456ec7494d0d77213c5041851b6071b64cb54461d7b80bb990a58918d401e18ff778a6f96b9f161df37023f026c221dee245840b4ac5ce5c9862dedb315254e6a2763cf4874ea6d0e95dcbc7a1ff99a824b52cf300872ed1eb0d07adbc434a895a21bd5034ca3ad82ed6b1393ba87d1943dcf8eeb1143b98b018d92c76e80391ff3a78429c983a5e9b402eaa8a1bf1aed72674f259d6de53c1d8bf59ec10021807c22ab1a3ebc80223977b340974bfd23cd10ef221c728b01d8a391fddb07b33df75717633642c873ab81b0cc298ef08cebb62e148cf6ff3075faf35e96877d70af857edc611bfee4d8e52a556a3e1cdcff90b677ec06d91642c07a616b99e49ca480736a76eb89e66429a99f3cbf7efc41c2cfbcd70005d35490dc4616c0bcab1f11c34be27444e95de0b4d2cfcebc20378d99f433379b484d9904658fb341c66b5e8524475867a56ce06ee2f4793a4ba8086bb3875b87ea32095d69a83f11163ee63c5676ec249f4b31febaf5165bcff2c50bd9a80efd696e5c02b9da782e315ea47a4e6ba46159a8b31062e8f737b59e2b2e1793ca5b11f1ffb323394656725df638db0c5b47c7879084493ca92499be283a6ce9b3b749db5436cf731d4f56252bad7658789ce5e56100c9c16c9c75fcdba8448db1c444815e60e98f498f02727ed1adf6fa8f70e7d7123b1e69a6ef48af614cef73dd2a16a9020b377f9762f0b233419b41eb0625b1b4f6be4fe0a8b5e44dfc2bcd976d121ce7facbaf73414ab92f1ade959fd80afec427e003caaa37c875ffbb00342ab461d47ea628d93f8f7a053724dda6c2c85e11334b528323144efd081257aeac769791d25c99ad81381c9d4c9af97f4cfe5a5b0370b3a3ec6a7503a7d732753ee7ecbf3ed91e05c34a526bb5cb19ee346b9d6e7edbf8564289af59169b517df7778666359827516f295d6392f200d8e0feae69c31cc3d8a1c51d26315de96a08a7f26c587de54ec6b5832b77108736a4b4fee7e14754b17d15a406ceba02039e7378286f4a0a8c801d710561c8339b78576c0702a89a26f179c1946f0bdc26acfced75d34b3ffa2311e3c9a0096f960691c9e9a95734936473dfd44fb42653b3b9c7bf900e718de7ffdd47744ef44142fec2d90189bc3c5ef768ddbc01cdc615d2fe5d6aaf6d846a3fa694e71ba9e51d0fdeb73eacb2f5d8c035e1f14dfdf3e98332bf7ccd2fff37a387a963e39c3e02c61036ce91db95ef5407c9645ca0dcc3edda9061c43d6eb2fe3dc0f62c1c1bd31f9ccf8f0d853e3d40d4569eed66522bcd6002ee322dcec1a10ec3a06f02f6eae7e6795aaec272f9679510eafe89eb1aea4c1801f22dda078801739d2d8278b53a96bd616ec9a5418bb15cd3861df094f0b7a8c269658600218ff272732b5bac5193eb115681b01abb4b98993c13559d780a8f3058ff1c84e7b2ac90ba5393be3d8126a28c6fc9a85b4c50a353b0b9715ad8995cb6968ac88021463cc8411c3914ba91710c9ae77ab39811d5260338c2a15fbc684b08cebecdd906c4a6914ebdfce5396bc4465ccd1990f3846ae8d3fbb601d9feae4425f68af3878d33290429ab48396dccbdc8a51be183d5318af9502fae1af27e051cd0a87312a7f9fc78d7c2b1f280758ed7a67b743d8bf65036d034e40b65a7d6b4cdb7561b7b7c84392a79eea34e40c540d3009e16d5f81daf7d7279c8c5e44c53bb05f4d1abe46dd6e965454f88c5a60a348c9bb94acf92b160a1f9d5967f649cef93e76727ed74425c325f2674babfb81fbf8aa68dc3e112d332b7c97348a7f0d9781ede9aaa1504443bd1cd9bf43190e1a21de3fa8a245c3bb0a9d9a497db268f2b86c3613a8a556e6042b9d0a17813907c96f0003ecbef8fa14d29eb8b892b04fbc909da18c18b803ea8626502720a387062381290dd3e4b9b62b8749bbe696eb0e330fce3f0ff75c59fbb212341a899c66f433bb386ecbde15ae837df4aa5b8726365c2c982ddf812f8afa4beba641439763f1465c0024bc6101c91fdf9f9074d106b4935db6d46aeec12b8289daf8503a9475979607dcc5d396b706e3ffce46aba020a723620759da9485a917a3ba7b2df692e4cb121c4b405b713b6345908725d81d556eb75c0fd6178d32bbda1edc3fa86449e4f901fcc354d58a27971591e732b1590cadc0ac9ac126845bb91686e8909dd14852ffe8053e3cfc9de4928f315ab117d02e996c27e1b487e3d1cb230885a497f2b2f561609052346378835206f19632b9a7831138c5e706d3ba3e640845245fd6e5ef39abde8cb642ef6e1eb1cf2f276348b7bccb21544d46556b4bb018694bdad724a4e5efc71c7be0a38cb1c9c1b8ccfcff17872dbe4d2c6b5695094389bc602457f47df60faad7d6931ed403ad5b5b47e0f20ff7be0e85ac712984094c62209d7235888eac0fc4e843a888b368a827d9a290486a7283e26e518d5ee9f43857b864023a8abc66fbe5ae42ac577531ab588e476a6962c929ddac48cafd978359dcbaaa508c710b9e07b6933df6602d8c77a19fe6f738e1de34c81f73559232340384e748271f6b4a966a75d4024fe3afb7e9533dfecb965d412d5b4ac507ab42e638b80a8048abd0b2ca0a9a7b047cdc18751a53c8dbfd2fe4737bfd6fcdd544e7dbaf8ed0f97286e151bf52f2efc5b01b29ad55859ecfd0500a8ffdf077d26c2603c25a666ad100ae4823b7e72c12f130bd29d083fade9db5e76dfbb1ccae77c5f613e925e577dfdcbb1226a7e515d41927427ba44636ca7a5d9942562dba2e3f01961e974179f51b977f5d93d78b7117facc303ba1e02a4e85aa9cbc6ea116f2b7b73fcce8672d3ef677c3ba168c65363a948c34d5a70c3d2845a59e9ed132cf15f04934884269b9527d4e7e90f53a2d46a96c7b0ffbe69657f028b38ef634693c74359efe1be0ad7a74bf93fcb5953b5c5f7cced1370f0412976c66e61af6cb0229afae3a"]}, 0x2070}, 0x1, 0x0, 0x0, 0x8054}, 0x80) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf, 0x9}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) 20.854612911s ago: executing program 4 (id=16041): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000680)=@newtfilter={0x43c, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, 0x0, {0x0, 0x7}, {}, {0xffff, 0x8}}, [@filter_kind_options=@f_flow={{0x9}, {0x40c, 0x2, [@TCA_FLOW_POLICE={0x408, 0xa, 0x0, 0x1, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x81, 0xffffffff, 0xda, 0x3, 0x0, 0x2a, 0x100, 0x73d, 0x3509, 0x3, 0x10000, 0x7, 0x1000, 0x9, 0x3, 0x3, 0x882e, 0x8, 0x8, 0x2, 0x9, 0xfffffffb, 0x2, 0x6, 0x80000000, 0x400, 0x9, 0xffff, 0x7a, 0x6, 0x7, 0x7fff, 0xffffff40, 0x9, 0x6, 0x8, 0x2, 0x57, 0x0, 0x4, 0x80, 0x9, 0xfffffffb, 0x2, 0xcf9f, 0x0, 0x1, 0x8, 0x1, 0x5, 0xfffffff9, 0x8, 0x80000001, 0x8, 0x4, 0x9, 0x8, 0xfffffffd, 0x15, 0x7, 0xc, 0x8, 0x4, 0x3, 0xfffffe00, 0x7, 0x3, 0x800, 0x1, 0x4, 0x2, 0x1, 0x1, 0x801e, 0x7, 0x4, 0x0, 0x8, 0x5, 0x8001, 0x5, 0x1, 0x1000, 0x9, 0x3, 0x7ff, 0xd0, 0x8, 0x0, 0x3, 0x1, 0x9, 0x401, 0x7fff, 0xfffffff8, 0x7, 0x0, 0xb1, 0x3, 0xffffff40, 0x1, 0x8, 0xf, 0x6, 0x556, 0x1, 0x2c, 0x5, 0x80000001, 0x1, 0x0, 0x200, 0x3, 0x2, 0x6, 0x9, 0x1c00, 0x5, 0xa2, 0x3, 0x8, 0x0, 0x5, 0x8001, 0xbfffffff, 0x7, 0x80, 0xb, 0x0, 0x743, 0x5, 0x3, 0x0, 0x200, 0x5, 0x0, 0x8, 0x3, 0x100, 0x2, 0x8, 0x1, 0x6, 0x8, 0xe, 0x4, 0x6, 0x4, 0x7ff, 0x5, 0xfffffffe, 0x7, 0xf80, 0x7, 0x1, 0x2302, 0x9, 0x3ff, 0x2, 0x5, 0x1, 0x6, 0x3, 0x4, 0x10001, 0x512d, 0x1, 0x5, 0x2, 0xa3c0, 0x4, 0x8000, 0x10001, 0x15a, 0x6, 0x120000, 0x9, 0x7fffffff, 0x7, 0x9, 0x80000004, 0x5, 0x7e5, 0x48, 0x9, 0x7, 0x0, 0x5, 0x6, 0xf, 0xff, 0xd, 0x6, 0x9, 0x0, 0x200, 0x9, 0xff, 0x4, 0x8, 0x7, 0x8, 0x4, 0x56, 0x4a82, 0xffff0000, 0x7ff, 0x3e1, 0x6, 0x80000000, 0x4c0, 0x5, 0xa, 0x6, 0x2, 0x1000000a, 0x8, 0x48, 0x1a, 0x2000000, 0x1ff, 0x844, 0x6, 0x3ff, 0x2, 0x100, 0x6, 0xffffffff, 0x200, 0xc26, 0x4, 0x5, 0x1, 0x7fff, 0xf, 0x401, 0x401, 0x4, 0x7, 0x3565, 0x2, 0x2, 0xebf, 0x9, 0x1000, 0x1, 0x71f, 0x2, 0xc59, 0x6e8, 0x8, 0x101, 0x80000000, 0x6, 0xc, 0x2]}]}]}}]}, 0x43c}, 0x1, 0x0, 0x0, 0x1}, 0x800) r1 = bpf$ITER_CREATE(0x21, &(0x7f00000005c0), 0x8) setsockopt$ax25_SO_BINDTODEVICE(r1, 0x101, 0x19, &(0x7f0000000600)=@netrom={'nr', 0x0}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="7000000010000304000080000000000000007400", @ANYRES32=r4, @ANYBLOB="0000000003120100500012800b000100627269646765000040000280080005000100000006002700000000000800010015000800050025000000000008000400000000000c002e"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000004000000000000000000000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000c000000000000000000000000000000000000001be43fa11fb74fca5bd12e44023845f6c4b79b68ee9cc7710ead2ec7d2f6d87e88024e77f8011f907ecfde85274fbfe0c975a8d35881bd8e5559f4777aa9c9078b9df694078bd30cf3f7dd7470e6b2d23424e195dd59a7a2852c2fd52eef9ad3ef8db484f169fd01a2ad947e210889280937c73844dcdcc0035b590bd7c24cd5641658b8e9511ec6a44837a5afe5839d76d59a28cd475cbf0c9613ad6398985dec78fb4a"], 0x48) sendmsg$NFNL_MSG_CTHELPER_GET(r5, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x20, 0x1, 0x9, 0x5, 0x0, 0x0, {0x3, 0x0, 0x6}, [@NFCTH_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4008005}, 0xc616c4994afd16c7) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000700000aa0000000060a0b0400000000000000000200000074000480700001800a0001256d617463680000006000028008000240000000000c0001007068797364657600460003007e6b92c43235dc7e977221f83c3f179e65022fc067b787cd67b6d9983b1bddafbdf6a37da5ed332cd2ee94b31d2ec330ce34cc676c0783a4bcc1e966554b0470582e00000900010073797a30000000000900020073797a3200000000140000001100200000000000000000000a00000a"], 0xc8}, 0x1, 0x0, 0x0, 0x4008011}, 0x4000800) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r3) sendmsg$NL80211_CMD_ASSOCIATE(r6, &(0x7f0000000580)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000540)={&(0x7f0000000480)={0xc0, r7, 0x200, 0x70bd27, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x2, 0x26}}}}, [@NL80211_ATTR_FILS_KEK={0x1b, 0xf2, "07d682d5a541d6f582fa606c1c6374e7768799efa10e43"}, @crypto_settings=[@NL80211_ATTR_SAE_PASSWORD={0x7f, 0x115, "c97d7436c0f2ffc8044435a8291997fa75d64967715116d23b6d5cbbd5e4a49cdf404aeea310321b783ed1cac330c5d3e064fee9644f0fd70d9e60eab00a347d86385c334a76b965617a88d0af4529e186ae7c0e76b0886b57a882261d1a26b31983252fee4fbe5727d2986715696b123f1d541ce88ea1e79d73b1"}], @crypto_settings=[@NL80211_ATTR_CONTROL_PORT_NO_PREAUTH={0x4}]]}, 0xc0}, 0x1, 0x0, 0x0, 0x40}, 0x40800) 20.698479596s ago: executing program 4 (id=16042): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'xfrm0\x00', 0x0}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000000)="ad56b6c5820f0000f4ff0e0000000000a059bfda8fec4fbb", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x80000) sendmmsg$alg(r3, &(0x7f00000002c0)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}], 0x1, 0x40800) recvmsg$unix(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000180)=""/106, 0x6a}], 0x1}, 0x40) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000400)) sendmmsg(0xffffffffffffffff, &(0x7f0000000140)=[{{&(0x7f0000000240)=@isdn={0x22, 0x4, 0x4d, 0xf8, 0xd4}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000040)="0c003a3be2008ecda84fd8ac24715bed8b01a6b0", 0x14}], 0x1}}], 0x1, 0x240400c5) r4 = accept4$inet(0xffffffffffffffff, &(0x7f0000000180), &(0x7f00000001c0)=0x10, 0x80800) setsockopt$inet_int(r4, 0x0, 0x0, &(0x7f0000000200)=0x6, 0x4) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) r6 = socket(0x10, 0x4, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080)="ca", 0x1) poll(&(0x7f0000000040), 0x55, 0x2) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000440), r8) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x63, 0x11, 0x23}, [@ldst={0x6}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) r10 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000340), 0x202, 0x0) ioctl$int_out(r10, 0x5462, &(0x7f0000000380)) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xf, "0000000000000000000100000e00"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2000000}, 0x0) r11 = socket$inet6_sctp(0xa, 0x1, 0x84) r12 = socket(0x10, 0x80003, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000300)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r12, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r13, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xb, "0000000000020400"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000080)={'ip6_vti0\x00', r1, 0x2f, 0xd5, 0x7f, 0xa, 0x3b, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast1, 0x8, 0x80, 0xe, 0x5}}) 20.512805007s ago: executing program 4 (id=16049): r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r0, &(0x7f0000001640), 0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="380000001800010000000000000000000a8000000003000000000000140007000000000000000000000000000000000108000c0001000000"], 0x38}}, 0x20000000) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_getanyicast={0x14, 0x3e, 0x536511c7e10367d, 0x70bd29, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x48094}, 0x240400c0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) socket$inet6(0xa, 0xa, 0x8) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), r0) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x13, r6, 0x0) (async) ioctl$RFKILL_IOCTL_NOINPUT(r6, 0x5201) (async) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000300)={&(0x7f0000000040), 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="000427bd7000fcdbdf250500001b06000200000000001400080070696d7265670000000000000000000008000b003cf2d139adfb073cc572bd80"], 0x40}, 0x1, 0x0, 0x0, 0xc000}, 0x40805) getsockopt$inet6_tcp_int(r4, 0x6, 0x2b, 0x0, &(0x7f00000003c0)) (async) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYRESOCT=r4, @ANYRES32=r0, @ANYRESDEC=r0, @ANYBLOB="52a41aa7b259415d8c739e302848992b83a97a763744295e64c11e86eae07f10799ed6fe48a69270b4d9449913c9d94d6469aa849d26dfaa8b8a392a429868b5", @ANYRESOCT=r4, @ANYRES64=r4], 0x14}, 0x1, 0x0, 0x0, 0x20000040}, 0x810) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002b40)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x4000084) 20.148505675s ago: executing program 4 (id=16055): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net/syz0\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000005b80)='tasks\x00', 0x2, 0x0) r2 = getpid() write$cgroup_pid(r1, &(0x7f0000000000)=r2, 0x12) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a300000000040000000030a09020000000000000000020000000900010073797a30000000000900030073797a3200000000140004800800014000000000080002400000000014000000110001"], 0x88}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_MATCH_INFO={0x5, 0x3, '\x00'}, @NFTA_MATCH_NAME={0xb, 0x1, 'socket\x00'}, @NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x88}, 0x1, 0x0, 0x0, 0x24044800}, 0x0) listen(r3, 0x3) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x67, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x30, r8, 0x105, 0xffffffff, 0xa, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @crypto_settings=[@NL80211_ATTR_CIPHER_SUITE_GROUP={0x8, 0x4a, 0xfac00}]]}, 0x30}, 0x1, 0x0, 0x0, 0x8800}, 0x40) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r6, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x28, r8, 0x200, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x4) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net/syz0\x00', 0x200002, 0x0) (async) openat$cgroup_procs(r0, &(0x7f0000005b80)='tasks\x00', 0x2, 0x0) (async) getpid() (async) write$cgroup_pid(r1, &(0x7f0000000000)=r2, 0x12) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a300000000040000000030a09020000000000000000020000000900010073797a30000000000900030073797a3200000000140004800800014000000000080002400000000014000000110001"], 0x88}}, 0x0) (async) sendmsg$NFT_BATCH(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_MATCH_INFO={0x5, 0x3, '\x00'}, @NFTA_MATCH_NAME={0xb, 0x1, 'socket\x00'}, @NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x88}, 0x1, 0x0, 0x0, 0x24044800}, 0x0) (async) listen(r3, 0x3) (async) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) (async) syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x67, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000640)={'wlan0\x00'}) (async) sendmsg$NL80211_CMD_CONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x30, r8, 0x105, 0xffffffff, 0xa, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @crypto_settings=[@NL80211_ATTR_CIPHER_SUITE_GROUP={0x8, 0x4a, 0xfac00}]]}, 0x30}, 0x1, 0x0, 0x0, 0x8800}, 0x40) (async) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r6, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x28, r8, 0x200, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x4) (async) 5.077913176s ago: executing program 32 (id=16055): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net/syz0\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000005b80)='tasks\x00', 0x2, 0x0) r2 = getpid() write$cgroup_pid(r1, &(0x7f0000000000)=r2, 0x12) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a300000000040000000030a09020000000000000000020000000900010073797a30000000000900030073797a3200000000140004800800014000000000080002400000000014000000110001"], 0x88}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_MATCH_INFO={0x5, 0x3, '\x00'}, @NFTA_MATCH_NAME={0xb, 0x1, 'socket\x00'}, @NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x88}, 0x1, 0x0, 0x0, 0x24044800}, 0x0) listen(r3, 0x3) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x67, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x30, r8, 0x105, 0xffffffff, 0xa, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @crypto_settings=[@NL80211_ATTR_CIPHER_SUITE_GROUP={0x8, 0x4a, 0xfac00}]]}, 0x30}, 0x1, 0x0, 0x0, 0x8800}, 0x40) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r6, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x28, r8, 0x200, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x4) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net/syz0\x00', 0x200002, 0x0) (async) openat$cgroup_procs(r0, &(0x7f0000005b80)='tasks\x00', 0x2, 0x0) (async) getpid() (async) write$cgroup_pid(r1, &(0x7f0000000000)=r2, 0x12) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a300000000040000000030a09020000000000000000020000000900010073797a30000000000900030073797a3200000000140004800800014000000000080002400000000014000000110001"], 0x88}}, 0x0) (async) sendmsg$NFT_BATCH(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_MATCH_INFO={0x5, 0x3, '\x00'}, @NFTA_MATCH_NAME={0xb, 0x1, 'socket\x00'}, @NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x88}, 0x1, 0x0, 0x0, 0x24044800}, 0x0) (async) listen(r3, 0x3) (async) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) (async) syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x67, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000640)={'wlan0\x00'}) (async) sendmsg$NL80211_CMD_CONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x30, r8, 0x105, 0xffffffff, 0xa, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @crypto_settings=[@NL80211_ATTR_CIPHER_SUITE_GROUP={0x8, 0x4a, 0xfac00}]]}, 0x30}, 0x1, 0x0, 0x0, 0x8800}, 0x40) (async) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r6, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x28, r8, 0x200, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x4) (async) 880.410484ms ago: executing program 1 (id=16275): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x808000}, 0x8) (async) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x808000}, 0x8) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000280)=ANY=[@ANYBLOB="050000000000000071116200000000008510000002000000a50000000500000095000000000000009500a5050000000078432dd442f68ba7fe2d282dc5bd6363a98aecd4b0deda447fc21574f82c7ff3eac5b814f85708ac7765aba5cb99845d8d1de7b9aefaa8b749ef36251fbe292c7e339c9d436dbdd3bcfa4c0b42413a1b5693c9ab00b0973b57cbf344499e932f11ea0126896b99df066fc1"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) getsockopt$bt_hci(r1, 0x84, 0x7f, &(0x7f0000000080)=""/4057, &(0x7f0000000000)=0xfd9) (async) getsockopt$bt_hci(r1, 0x84, 0x7f, &(0x7f0000000080)=""/4057, &(0x7f0000000000)=0xfd9) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x5c}, [@ldst={0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd96, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)=@newqdisc={0xa4, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x4}, {0x4c, 0x2, [@TCA_TBF_PRATE64={0xc, 0x5, 0x13a260736e98a861}, @TCA_TBF_PBURST={0x8, 0x7, 0x1cdf}, @TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x766c, 0x81}}, @TCA_TBF_PRATE64={0xc, 0x5, 0xcb59372f370e8465}]}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x2}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x2, 0x6, 0x3, 0x9, 0x1, 0x54, 0x101}}, {0x4}}]}]}, 0xa4}}, 0x24000814) 873.25765ms ago: executing program 3 (id=16276): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r3, @ANYBLOB="10007d80"], 0x2c}, 0x1, 0x0, 0x0, 0x440c0}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x60, 0x10, 0x401, 0x0, 0x3, {0x0, 0x0, 0x0, 0x0, 0xe59bca127d81b0fa, 0xc574450d1af3b5bc}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x14, 0x5, 0x0, 0x1, [@IFLA_BRPORT_GROUP_FWD_MASK={0x6, 0x1f, 0xdd0d}, @IFLA_BRPORT_GUARD={0x5}]}}}, @IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x20044010}, 0x40) 787.190589ms ago: executing program 1 (id=16278): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000600)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd6002003800080000fe800000000000000000000000000000fe8000000000000000000000000000aa73000103000008"], 0x0) (async) syz_emit_ethernet(0x3e, &(0x7f0000000600)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd6002003800080000fe800000000000000000000000000000fe8000000000000000000000000000aa73000103000008"], 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0x2, 0xa, 0x2) (async) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_sfeatures={0x33}}) socket$inet6(0xa, 0x2, 0x0) (async) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_udp_int(r3, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socket$kcm(0x2, 0xa, 0x2) (async) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) setsockopt$inet6_udp_encap(r3, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) write$tun(r4, &(0x7f0000000380)=ANY=[@ANYBLOB="0a000000bbbbbbbbbbbbaaaa73aaaabb86dd6d002000001111ff00000000000000000000000000000000ff0200000000000000000000000000014f194e20f511907800000000000000064a5c5b81d030831d261b2b64259bc7657957b2b15687f9dca4cae0805c56145b91b96d0de51ab479d27ba5a0e9e8585d"], 0x4b) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000c80)={'lo\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=@newqdisc={0x148, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8}, {0x11c, 0x2, [@TCA_RED_STAB={0x104, 0x2, "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"}, @TCA_RED_PARMS={0x14, 0x1, {0x9, 0x400, 0x8001, 0x1, 0x3, 0x1c, 0x4}}]}}]}, 0x148}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r4) sendmsg$NL80211_CMD_SET_INTERFACE(r8, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0xa8, r9, 0x200, 0x70bd28, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x15b, 0x32}}}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "cbfb6f35f2f302fdb4f5a1505a02235885412245773d809d"}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}], @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x4}]}, 0xa8}, 0x1, 0x0, 0x0, 0xc000054}, 0x90) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}}, 0x4008840) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f00000004c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8000}, 0xfffffffffffffea2, &(0x7f0000000500)={&(0x7f0000000440)=@getroute={0x14, 0x1a, 0x300, 0x70bd2a, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000055}, 0x4000) 687.853094ms ago: executing program 3 (id=16279): r0 = accept$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @local}, &(0x7f0000000040)=0x1c) getsockopt$inet6_buf(r0, 0x29, 0xcd, &(0x7f0000000080)=""/162, &(0x7f0000000140)=0xa2) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000180)={0x9, 0xf9, 0xfd, 0x0, 0x6, 0x1, 0x0, 0x1, 0xd, 0x40, 0x5, 0x0, 0x29, 0x3}, 0xe) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'wg1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000280)={'wg1\x00', 0x0}) sendmsg$ETHTOOL_MSG_RINGS_SET(r1, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x48, r2, 0x8, 0x70bd2d, 0x25dfdbfb, {}, [@ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0x8}, @ETHTOOL_A_RINGS_TX={0x8, 0x9, 0x101}, @ETHTOOL_A_RINGS_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0xf7}]}, 0x48}, 0x1, 0x0, 0x0, 0x24008090}, 0x1) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f00000003c0)={r0, 0xfffffffffffffffa, 0x1, 0x8}) (async) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000440)={{{@in6=@local, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in6=@empty}}, &(0x7f0000000540)=0xe8) sendmsg$nl_xfrm(r5, &(0x7f0000000800)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000580)=@delsa={0x224, 0x11, 0x400, 0x70bd2c, 0x25dfdbfb, {@in=@remote, 0x4d2, 0xa, 0x2b}, [@algo_crypt={0xa2, 0x2, {{'cbc-aes-ce\x00'}, 0x2d0, "ead6625803c75c2879c9f4ab1048270596837db027cc631bc18bffb59f8ee35b7ec63089a619d1da3a708c2e8f35db3ef7884aa477ae8a31916b573d5cec3bcca321c0603632e54858f5d0ddbeafb90fb7701f6219a69d7ba6cb"}}, @algo_auth={0x51, 0x1, {{'sha384-ssse3\x00'}, 0x48, "ffdf0c20715ac9b4a7"}}, @policy={0xac, 0x7, {{@in=@dev={0xac, 0x14, 0x14, 0xe}, @in=@broadcast, 0x4e24, 0x6, 0x4e21, 0x1, 0x2, 0x20, 0x20, 0x0, 0x0, r7}, {0x101, 0x10000, 0x0, 0x0, 0x1ff, 0x6, 0xf, 0xe3d2}, {0xb, 0xa, 0xef59, 0x9}, 0xff, 0x6e6bb0, 0x1, 0x0, 0x0, 0x3}}, @XFRMA_IF_ID={0x8, 0x1f, 0x1}, @extra_flags={0x8, 0x18, 0xdd2}, @lifetime_val={0x24, 0x9, {0x746a, 0x31cd27dc, 0x7, 0xffffffffffffffff}}, @lifetime_val={0x24, 0x9, {0x7, 0x2, 0xfffffffffffffb42, 0xfffffffffffff04e}}]}, 0x224}, 0x1, 0x0, 0x0, 0x44}, 0x4000010) (async) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r5, 0x84, 0x65, &(0x7f0000000840)=[@in6={0xa, 0x4e20, 0x1, @mcast1, 0x8}, @in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x4e20, @multicast2}, @in6={0xa, 0x4e22, 0x1, @empty, 0x4}, @in={0x2, 0x4e20, @broadcast}, @in={0x2, 0x4e23, @multicast1}, @in6={0xa, 0x4e23, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x6}, @in6={0xa, 0x4e22, 0x80, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x5}], 0xb0) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r5, 0x29, 0x37, &(0x7f0000000900)={0x2b, 0x8, '\x00', [@pad1, @jumbo={0xc2, 0x4, 0x1}, @ra, @calipso={0x7, 0x38, {0x2, 0xc, 0xe, 0x0, [0x1, 0x485d, 0x8, 0x6, 0xffff, 0x7f]}}]}, 0x50) (async, rerun: 32) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r5, 0x89f7, &(0x7f00000009c0)={'sit0\x00', &(0x7f0000000980)={@broadcast, 0x0, 0x0, 0x10, 0x0, [{@broadcast}]}}) (async, rerun: 32) sendmsg$nl_route_sched(r5, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x432020}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)=@gettfilter={0x4c, 0x2e, 0x200, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x2, 0x483322e6e620cebd}, {0x8, 0x5}, {0xc, 0x9}}, [{0x8, 0xb, 0x5}, {0x8, 0xb, 0x4}, {0x8, 0xb, 0x4}, {0x8, 0xb, 0x1}, {0x8, 0xb, 0x96}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000854}, 0x4000040) (async, rerun: 32) r8 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b80), r1) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000bc0)={'wlan1\x00', 0x0}) (rerun: 32) sendmsg$NL80211_CMD_TRIGGER_SCAN(r8, &(0x7f0000000c80)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x24, r9, 0x400, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0xd, 0x30}}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r5, &(0x7f0000000d80)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000d00)={0x38, r9, 0x200, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x2, 0x38}}}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x90}, 0x4000000) sendmsg$NL80211_CMD_REGISTER_FRAME(r5, &(0x7f0000001040)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001000)={&(0x7f0000000e00)={0x1e0, r9, 0x2, 0x70bd29, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0xffff}, @NL80211_ATTR_FRAME_TYPE={0x6}, @NL80211_ATTR_FRAME_MATCH={0x9b, 0x5b, "efba19f95365726991fda3f89b63446887af1d8fbe4938c017990944deb54aa50c7aa8bac2cd6b64d5e4c1bdb0f5f3df6b307ff0632011961bcc5bf4d2ad76049fde158d7bb595713147e65d29c0645997b1406730032575161df205b5f4589d13ae9fdddbe121e8f14b4d966833ad641592118e4ff5366eb3fc0da05c8f8a02c6d66cbe486c8e12b6ba27e1530dd3757900762d3dd135"}, @NL80211_ATTR_FRAME_MATCH={0xce, 0x5b, "d7cd3ac614b335bd991b81ec45e056ba41136424a821f4bdd25e83aa67db7560f18f963ef8946ede250888ad3d4c64af90233ab34d3b48e441b4520315e6a1cf233f2ad553caefdfb94a12cc8b717a844b03064c230cfa323dd6f27ad739b2ceaa9d25fc47dadc48ea70db4a846068709c4e4ab1a9e8b7a4efb21829da6066a9c0b409d1b6dac0611618c52ce68ccc003356dbf89d7ca1c385567f55e54734ba7a3d82beca60ce48c55c03ba34f1ab0e2dccc384f9f92f39837fd650ec3036d9a9aee3e9b3d9ca468045"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x8}, @NL80211_ATTR_FRAME_MATCH={0x48, 0x5b, "7650d5d5f94587af344a513943419e4309b79c3a940a49db138f28f3530354d737a162e2049f2720326c28bb1342a4503f638bc098168732ce41c63768102a2c94ab68d8"}]}, 0x1e0}, 0x1, 0x0, 0x0, 0x80}, 0x4000) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r11, &(0x7f0000001380)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001340)={&(0x7f00000010c0)={0x27c, 0x0, 0x300, 0x70bd29, 0x25dfdbff, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x8}, {0x6, 0x16, 0x1}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x1000}, {0x8, 0xb, 0xf696}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x6}, {0x6, 0x16, 0x1}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x4}, {0x8, 0xb, 0x9}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x7fffffff}, {0x6, 0x16, 0x4}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x2}, {0x8, 0xb, 0x4}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x2}, {0x6, 0x16, 0x6}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0xda4}, {0x8, 0xb, 0x3}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x8}, {0x6, 0x16, 0x2}, {0x5}, {0x6, 0x11, 0x3}, {0x8, 0xb, 0x6}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0xfffffff7}, {0x6, 0x16, 0x400}, {0x5}, {0x6, 0x11, 0x200}, {0x8, 0xb, 0xfffffffe}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x80}, {0x6, 0x16, 0x7}, {0x5}, {0x6, 0x11, 0x4}, {0x8, 0xb, 0x800}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0xd80d}, {0x6, 0x16, 0x5}, {0x5}, {0x6, 0x11, 0x2}, {0x8}}]}, 0x27c}, 0x1, 0x0, 0x0, 0x4044810}, 0x4000000) (async) r12 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r12, 0x89f0, &(0x7f0000001440)={'syztnl2\x00', &(0x7f00000013c0)={'ip6_vti0\x00', r6, 0x2f, 0xf, 0x7, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7800, 0x40, 0x2, 0xec55}}) (async) sendmsg$IPSET_CMD_PROTOCOL(r5, &(0x7f0000001540)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001500)={&(0x7f00000014c0)={0x24, 0x1, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x24004000) (async, rerun: 32) close(r12) (rerun: 32) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000001640)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)=@can_delroute={0x34, 0x19, 0x8, 0x70bd2c, 0x25dfdbff, {0x1d, 0x1, 0x4}, [@CGW_MOD_AND={0x15, 0x1, {{{0x4, 0x1, 0x1, 0x1}, 0x5, 0x0, 0x0, 0x0, "d120d3e887ad8c66"}, 0x2}}, @CGW_DST_IF={0x8, 0xa, r3}]}, 0x34}, 0x1, 0x0, 0x0, 0x4004080}, 0x0) (async) r13 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000016c0), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_DEL_KEY(0xffffffffffffffff, &(0x7f0000001800)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001740)={0x58, r13, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x58}}, 0x800) 681.822692ms ago: executing program 2 (id=16280): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000000000000000ac1e0001821501f63ed02a170000000000000000000000000a006030"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async, rerun: 32) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b800000014"], 0xb8}}, 0x0) (async, rerun: 32) r1 = socket(0x2a, 0x2, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) (async) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000040)={0x0, 0x2, "7f86"}, &(0x7f0000000080)=0xa) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f00000000c0)={r2, @in={{0x2, 0x4e20, @local}}, 0x162a, 0x97d}, &(0x7f00000001c0)=0x90) 642.723328ms ago: executing program 3 (id=16281): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x801, 0x40, 0x25dfdbfb, {}, [@IFLA_XDP={0x14, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r1}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x8}]}, @IFLA_GROUP={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20048050}, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000780)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_PACKETS_PER_SLAVE={0x8, 0x14, 0x1}]}}}]}, 0x3c}}, 0x0) 631.252553ms ago: executing program 2 (id=16282): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000080)=0x20) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB="240000000104010200000180000000000000000008000540000000000500010001"], 0x24}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYRESHEX], 0x24}}, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) close(r3) 528.371032ms ago: executing program 1 (id=16283): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000018010000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000018010000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x1000001, 0x8c4b815a5465c2b3, r1, 0x0) (async) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x1000001, 0x8c4b815a5465c2b3, r1, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000380)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x48) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r3) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={0x40, r4, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}, @NLBL_CIPSOV4_A_TAGLST={0x1c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5}, {0x5, 0x3, 0x7}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}]}, 0x40}}, 0x0) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000140), r2) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r5, 0x800, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) (async) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r5, 0x800, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="ac000000", @ANYRES16=r6, @ANYBLOB="01060000000000000000090000002c0004801300010062726f6164636173742d6c696e6b0000140007800800060000000000080005"], 0xac}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) 526.895428ms ago: executing program 2 (id=16284): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="03000000040000000100000022bf0000d8286c9de6adc17b86cbcfb4d4e2beffbd3912fcf1729148977405ca88e280a67fcde1721cec3db42e5dc8605ccaf447f1bea58db872e2ba8b4ac617c45dbd3dfade08a19c01789a7059dac0294c597ed50823ff434a0629e9dc05479e604c97d2581d213ebd1ee79fc58840e7e6b12e480a2ffa5d8c5d1e16", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=@newtaction={0x88, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x74, 0x1, [@m_mirred={0x70, 0x1, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x4, {{0xfffff7e8}}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x0, 0x1, 0x400, 0xfffffff7}, 0x2}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x88}}, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r1, 0x40086607, &(0x7f00000002c0)) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0x7, &(0x7f0000000000)={0x8, 0x200, 0x5a3, 0x9}, 0x10) r2 = accept4(r0, &(0x7f0000000100)=@ieee802154={0x24, @short}, &(0x7f0000000080)=0x80, 0x80000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x30, r4, 0x1, 0xfffffffc, 0x0, {{}, {}, {0x14, 0x19, {0x1, 0x1, 0x0, 0x6472333b}}}}, 0x30}}, 0x20000040) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$TIPC_CMD_SET_LINK_PRI(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x30, r4, 0x1, 0x70bd2b, 0x25dfdbfe, {{}, {}, {0x14, 0x18, {0xaac00000, @bearer=@udp='udp:syz2\x00'}}}, ["", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x8084}, 0x4800) 420.114141ms ago: executing program 1 (id=16285): r0 = socket$l2tp6(0xa, 0x2, 0x73) accept(r0, &(0x7f0000000000)=@in={0x2, 0x0, @remote}, &(0x7f0000000080)=0x80) sendmmsg$inet6(r0, &(0x7f0000000ec0)=[{{&(0x7f0000000580)={0xa, 0x4e24, 0x401, @dev={0xfe, 0x80, '\x00', 0x24}, 0x8}, 0x1c, 0x0, 0x0, &(0x7f00000005c0)=[@rthdrdstopts={{0x11, 0x29, 0x37, {0x1}}}], 0x18}}], 0x1, 0x0) 419.456302ms ago: executing program 3 (id=16286): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)=ANY=[@ANYBLOB="8bc30000000201010000000000000000020800044000000002000000"], 0x1c}, 0x1, 0x0, 0x0, 0x400c804}, 0x20008800) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000000000800000000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000340), &(0x7f00000003c0)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='0\x00'/15, @ANYRES32=0x0, @ANYBLOB="0400000000000000080004000006000008001b0000000000"], 0x30}}, 0x0) clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000880)=""/103, 0x67}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000580)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/126, 0x7e}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000600)=""/189, 0xbd}, 0x5}], 0x1, 0x12001, &(0x7f0000003700)={r5, r6+60000000}) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_CONTEXT(r7, 0x84, 0x7d, &(0x7f0000000080), 0x8) socket$nl_xfrm(0x10, 0x3, 0x6) 394.265711ms ago: executing program 2 (id=16287): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x8) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, 0x0, &(0x7f0000000180)=0x90) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$SO_COOKIE(r3, 0x1, 0x39, &(0x7f0000000000), &(0x7f0000000080)=0x8) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$SIOCAX25ADDUID(r5, 0x890c, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000840), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r6, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010027fd70fc00e1ffffff09000000000000", @ANYRES32=r8, @ANYBLOB="0e00340048f5b3b75b9da105ec9e000004000501"], 0x30}, 0x1, 0x0, 0x0, 0x4040010}, 0x0) r9 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000240)=r1, 0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={r9, 0x0, 0x0}, 0x10) ioctl$BTRFS_IOC_QUOTA_RESCAN(r9, 0x4040942c, &(0x7f0000000080)={0x0, 0x0, [0x0, 0x9, 0x0, 0x7, 0x8000000000000000, 0x10000]}) r10 = socket$kcm(0x2, 0xa, 0x2) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r11) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x44, '\x00', 0x0, @sk_msg}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000280)={'wlan0\x00'}) ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) write$tun(r11, &(0x7f0000000040)={@void, @void, @x25={0x0, 0x40, 0x9, "2450e4a8892d49f610aff853e175b512dea4f60c25970c82bb076b2f4ab2f555438cfd5cd0f6"}}, 0x29) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) socket$nl_route(0x10, 0x3, 0x0) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r12, 0x0) write$cgroup_subtree(r12, &(0x7f0000000100)={[{0x2d, 'net_prio'}, {0x2d, 'io'}]}, 0xe) 284.478324ms ago: executing program 1 (id=16288): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) (async) listen(r0, 0x0) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) (async) writev(r1, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x2) (async) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) poll(&(0x7f0000000100)=[{r2, 0x18d}], 0x1, 0x8001) r4 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000440)=@nat={'nat\x00', 0x670, 0x5, 0x3a8, 0x1c0, 0x310, 0xffffffff, 0x268, 0x268, 0x310, 0x310, 0xffffffff, 0x310, 0x310, 0x5, 0x0, {[{{@uncond, 0x0, 0x70, 0xa8, 0x48}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x1, @rand_addr=0x64010100, @remote, @icmp_id=0x65, @port=0x4e24}}}}, {{@uncond, 0x0, 0xe8, 0x118, 0x0, {}, [@common=@addrtype={{0x30}, {0x96, 0x0, 0x1}}, @common=@unspec=@limit={{0x48}, {0xf, 0x101, 0x5, 0x3, 0x400005, 0x1, 0x81}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x7d4, 0x4, 0x2939, 0x2}}}, {{@uncond, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x8, @multicast2, @multicast2, @gre_key=0x4, @port=0x4e20}}}}, {{@ip={@remote, @local, 0xffffff00, 0x0, 'veth0_to_team\x00', 'batadv0\x00', {}, {0xff}, 0x62, 0x3, 0x8}, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x1, @empty, @empty, @icmp_id=0x64, @gre_key=0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x408) (async) close(r2) write$cgroup_subtree(r3, &(0x7f0000000040), 0xfffffc3f) 185.865231ms ago: executing program 1 (id=16289): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@ipv6_newrule={0x38, 0x20, 0x2d2c6d60ea1da725, 0x70bd26, 0x25dfdbfd, {0xa, 0x0, 0x0, 0xcd, 0xff, 0x0, 0x0, 0x1, 0x10002}, [@FIB_RULE_POLICY=@FRA_PRIORITY={0x8}, @FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'syzkaller1\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x20008081}, 0x8000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cryptd(ecb-camellia-aesni-avx2)\x00'}, 0x58) bind$alg(r1, &(0x7f0000000ec0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(serpent)\x00'}, 0x58) socket$nl_generic(0x10, 0x3, 0x10) 157.698184ms ago: executing program 2 (id=16290): r0 = socket(0x2d, 0x2, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @rand_addr=0x64010100}, 0x10) sendmmsg$alg(r0, &(0x7f00000001c0)=[{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="7cd18bf2e8e99d1bf3669a4dda79317d3d4d288de209dd88ed8b59cc0fcc19e9906a2c6c788b7d5b88f99b63799ba3d1811e002e78b6aface799bba51c04ca82d2f3fb", 0x43}, {&(0x7f00000002c0)="e5332f936fadfd9eeac7ab17991e70546dbaaedbe49ab29de4d5dfc247e70a3533374532fbd8eb5153502391a3893ba14a9aa5ce0f8c4e48032a7db83fe1c132c999f4d5c0c1f2e156eee3448f634b5265877e8e21d075d0451b841ca8f6e4b47619f27c22a07775dc97bfd25a92afafc6291291fb879c4779777cb122071f5e7f0c2ff8aa5e1a75cd310b44b0bb09ba1f93cd93708cca2df08db9014328407499bb2837ed8b0c709becf07aba6c87e20dbc75131e3bac9ec1cc85e39df52ca615fa0f5bb6909e97666dcfaf2be1d20fc565bf31acd1422e096ac6256237dacd2970dae2ea21b04706212d18f202efad", 0xf0}, {&(0x7f0000000400)="fc75a001cefa05e8feea10029b22d21c0593f8587e799811abc39cce1e676c3cfbeee9cca71f60030556bef2f849a58b3a34a10d72cefbc3e2f012a394c63e9ce5a852e9448df824354391d9868ee524f591e12a1bed9667df5195a3ad9daa9ce70fecd76435c23b9548c4538dd924c997eb4fd658858681e19d2c605d10ccd252d0002aab4031b967af2b39804eeae01cd98acaa90c3639034d1aa00b494e2303ffb41816b43204c1303b744af23d007f32a8bef4fa596b5658afc5477e5c12372daa4625b63271e674ee6e2e", 0xcd}, {&(0x7f0000000080)="82e98c1d9ff292be6550ba2c2f36fe6e2b5a06d5b5ab1ecccc3f43c4f5fce53358851b18ef6544f3aa09e3f79de4f51b528fa68623c743dd11f8519502676e436fcb5714b196c52c", 0x48}, {&(0x7f0000000500)="dec848a7697cb526dd0ac2f56a9d9eac866b3a5ad2d749c863fe245dad2b9338c8d0813731e507446d265c5f66f04f689e20f04e38384822ee8d150e162464bb478933757fdf9baee6f49ebf896232a78688e0cd3d0b940d8bc22ce0d9d4b4b919c0488700ad329dedbb2e6548c8c8a761939455fece2abc517efc64c35df0ebcc831af4b8f0a928d3ced489ef79e50f4c6aa53d24e4c4f1966e05977794257b8edad171cc224fa87803107e75144d3c633b6171d935d7a52022bd7505cb78249d34588b9443", 0xc6}], 0x5, &(0x7f0000000600)=[@iv={0x88, 0x117, 0x2, 0x6e, "44e16c6f18ac3b66f6198a757ba3e6b6627c8848fde488ca79a4e44f49087c1e4636d3495890580c2c08dd9b17210fb7bd987e8034a2bfdd8161ab78f6d67e1ca9cad6a66df4c35802200d53be437891a5957f70bb4bd0fa8b7fa88bf76c68ea8310636d06f1405b191b06b88b74"}, @iv={0x90, 0x117, 0x2, 0x77, "58f33e16a065be4baed949f1e892fe0d01356657695c4f7b12d7f32c5f8cb06a4cff01c6edf41dc82bf460b4aa232fe62f93a7b16266d3c1354f3f10bbb6f24738db6c3c28d1313ba7201401de76209907eec9725b693eea49d1d343c0643b68400f88bcea14412433d19c56cb31402cbf59790967ff9a"}, @assoc={0x18, 0x117, 0x4, 0x6}, @iv={0xa8, 0x117, 0x2, 0x91, "601240ad9a730733c3aa350250605477ddb5f7b1a4eb1f39a86eced42fe0ce517291fc0d7b62fa5f69f6cda28b30d5eb7793b7fd92f0228949ab4ca2444361e8759ee69891d6ec6b445ab324c1ce54809e3286edafada507606beec917e8683c81f98403d5a3f232845d27e3086962445ee4d84365b8310452119bc07b5cb05b958cf45a0beae65cada8c28ddb53b8249b"}], 0x1d8, 0x41}], 0x1, 0x4000804) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.net/syz0\x00', 0x200002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x14) r2 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r2, &(0x7f0000000800)=[{{&(0x7f0000000100)={0xa, 0x4e21, 0x5, @mcast2, 0x40}, 0x1c, 0x0, 0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="101000000000000029d0999606b58495b137710300000000"], 0x10}}], 0x1, 0x4008800) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)={0x1c, 0x0, 0x1, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}]]}, 0x1c}, 0x1, 0x0, 0x0, 0x24001040}, 0x40010) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="c0010000100001000000000000000000000000000000000000000000000000002001000000000000000000000000000200000000000000000000008001000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="e00000010000000000000000000000000000000032000000ac1414aa00000000000000000000000000000000000000000000206b000000000100000000000000000000000000000000000000000000000000000000000000ffffffffffffffff00000000000000000000000000000000ff030000000000000000000000000000000000000000800000000000000000000000000000000000000000000a000300af0000000000000048000200656362286369706865725f6e756c6c2900333f000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c0017"], 0x1c0}, 0x1, 0x0, 0x0, 0x240080d4}, 0x0) sendmsg$IPSET_CMD_SWAP(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400000006060103000000000000000001000ba5"], 0x14}, 0x1, 0x0, 0x0, 0x4081}, 0x80) 93.095042ms ago: executing program 3 (id=16291): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x2, &(0x7f0000001600)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x2000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) ioctl(r0, 0x8, &(0x7f0000000040)="f8fb81bad0b022d36d2c1bba95f11fa8b2241d306b63add99b3b2b7be4c8aeb29e41f23e5fc75646810bd499278327bbd5ef1a40fcee01cdc1df783a24b36c49f9a92deb48e5076fbca78ef44bbb96f3ecfe7121414dd300f3b4ad8b3d91b689fb8fafc4a129f59990f23b2f1ad239cc4df0a2b23678f39e59fccabb7948d8d6380a6811854bc74649a9fd3b18fa0685a8a6a654840d03dffdaf02dd186158c28ba693") r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, 0x0, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f00000001c0)={'ip6_vti0\x00', &(0x7f0000000140)={'ip6tnl0\x00', 0x0, 0x29, 0x8, 0xd8, 0x6, 0x27, @empty, @empty, 0x40, 0x700, 0x80000001, 0x1000}}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000c80), r4) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000d00)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_LBT_MODE(r4, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000d40)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010026bd7000fcdbdf2512000b0008000300", @ANYRES32=r6], 0x1c}, 0x1, 0x0, 0x0, 0x20004811}, 0x40000) setsockopt$inet6_udp_int(r3, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0x1}, {0xffff, 0xffff}, {0x5, 0x9}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x440c6}, 0x0) connect$inet6(r3, &(0x7f0000002140)={0xa, 0x4e25, 0x1, @mcast2, 0x9}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000000200), 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="20008000400007012bbd7000fedbdf25017c00000400c2800400018004000800"], 0x20}, 0x1, 0x0, 0x0, 0x4c090}, 0xc000) r8 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r8, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0xb}, 0x15, 0x3, 'wrr\x00', 0x1, 0x4, 0x8}, 0x2c) r9 = socket$kcm(0xa, 0x2, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) r10 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$nl_route_sched(r10, 0x0, 0x200008c2) setsockopt$MRT_DEL_MFC(r10, 0x0, 0xcd, 0x0, 0x0) sendmsg$sock(r9, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) socket$can_raw(0x1d, 0x3, 0x1) 56.715876ms ago: executing program 2 (id=16292): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) r1 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r0}, 0x8) close(r1) (async) bpf$ITER_CREATE(0x21, &(0x7f0000000080)={r1}, 0x8) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={r1, 0x58}, 0x10) syz_emit_ethernet(0x4e, &(0x7f0000000780)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122008", 0x18, 0x3a, 0x1, @empty, @local, {[], @mld={0x83, 0x0, 0x0, 0x9, 0x0, @mcast1}}}}}}, 0x0) 0s ago: executing program 3 (id=16293): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c00018006000100da"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) r2 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) getsockopt$ax25_int(r2, 0x101, 0x6, &(0x7f0000000080), &(0x7f0000000000)=0x4) syz_emit_ethernet(0x22, &(0x7f00000013c0)={@local, @remote, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x14, 0x0, 0x84, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0xe}}}}}}, 0x0) kernel console output (not intermixed with test programs): tered allmulticast mode [ 1427.331418][ T727] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1427.340963][ T727] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1427.350588][T24488] netlink: 'syz.2.13868': attribute type 1 has an invalid length. [ 1427.362659][ T727] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1427.442401][T24488] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 1427.442980][ T727] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1427.470250][T24494] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1427.480124][T24489] syzkaller0: entered promiscuous mode [ 1427.485674][T24489] syzkaller0: entered allmulticast mode [ 1427.518271][T24478] veth0: entered promiscuous mode [ 1427.691567][T24477] veth0: left promiscuous mode [ 1428.473626][T24551] netlink: 'syz.0.13885': attribute type 8 has an invalid length. [ 1428.490457][T24551] bond0: entered promiscuous mode [ 1428.495608][T24551] bond_slave_0: entered promiscuous mode [ 1428.502654][T24551] bond_slave_1: entered promiscuous mode [ 1428.510246][T24551] bond0: left promiscuous mode [ 1428.515038][T24551] bond_slave_0: left promiscuous mode [ 1428.520761][T24551] bond_slave_1: left promiscuous mode [ 1428.737472][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5740 ms [ 1428.745556][ C1] lec:lec_tx_timeout: lec0 [ 1429.177129][T24580] syzkaller0: entered promiscuous mode [ 1429.182862][T24580] syzkaller0: entered allmulticast mode [ 1429.191595][T24580] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) ! [ 1429.286322][T24582] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1429.364038][T24590] pim6reg1: entered promiscuous mode [ 1429.371156][T24590] pim6reg1: entered allmulticast mode [ 1429.890477][T24613] Can't find ip_set type [ 1429.945812][T24606] tc_dump_action: action bad kind [ 1430.350721][T24636] bond0: entered promiscuous mode [ 1430.357268][T24636] bond_slave_0: entered promiscuous mode [ 1430.371080][T24636] bond_slave_1: entered promiscuous mode [ 1430.400830][T24640] set match dimension is over the limit! [ 1430.407742][T24642] wlan0 speed is unknown, defaulting to 1000 [ 1430.409519][T24649] syz_tun: entered promiscuous mode [ 1430.425823][T24649] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 1430.454046][T24649] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1430.464663][T24649] team0: Port device bond0 added [ 1430.751436][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1430.761323][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1430.776452][T24667] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1430.791404][T24667] __nla_validate_parse: 10 callbacks suppressed [ 1430.791422][T24667] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13918'. [ 1430.809775][T24667] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13918'. [ 1431.155098][T24686] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13925'. [ 1431.521603][T24705] netlink: 56 bytes leftover after parsing attributes in process `syz.1.13932'. [ 1431.585322][T24712] netlink: 20 bytes leftover after parsing attributes in process `syz.0.13934'. [ 1431.816371][T24721] validate_nla: 2 callbacks suppressed [ 1431.816391][T24721] netlink: 'syz.0.13938': attribute type 1 has an invalid length. [ 1432.000142][T24730] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13940'. [ 1432.319561][T24742] netlink: 256 bytes leftover after parsing attributes in process `syz.0.13945'. [ 1432.519391][T24761] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13947'. [ 1432.982823][T24789] netlink: 16 bytes leftover after parsing attributes in process `syz.3.13950'. [ 1432.996906][T24789] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13950'. [ 1434.696843][T24770] syzkaller0: entered promiscuous mode [ 1434.702449][T24770] syzkaller0: entered allmulticast mode [ 1435.461527][T24838] netlink: 'syz.3.13970': attribute type 21 has an invalid length. [ 1435.703996][T24863] netlink: 'syz.1.13977': attribute type 1 has an invalid length. [ 1435.821012][T24873] netlink: 'syz.2.13980': attribute type 21 has an invalid length. [ 1435.833593][T24873] __nla_validate_parse: 5 callbacks suppressed [ 1435.833611][T24873] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13980'. [ 1435.868559][T24874] tipc: Enabled bearer , priority 0 [ 1435.877888][T24867] syzkaller0: entered promiscuous mode [ 1435.893448][T24867] syzkaller0: entered allmulticast mode [ 1435.961964][T24878] Cannot find add_set index 0 as target [ 1435.997359][T24867] tipc: Resetting bearer [ 1436.103348][T24867] tipc: Disabling bearer [ 1436.135200][T24889] netlink: 24 bytes leftover after parsing attributes in process `syz.1.13984'. [ 1436.200240][T24890] netlink: 16 bytes leftover after parsing attributes in process `syz.2.13983'. [ 1436.360740][T24904] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1436.368316][T24904] IPv6: NLM_F_CREATE should be set when creating new route [ 1436.375570][T24904] IPv6: NLM_F_CREATE should be set when creating new route [ 1436.425754][T24904] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1436.434349][T24908] netlink: 212336 bytes leftover after parsing attributes in process `syz.4.13988'. [ 1436.458355][T31756] Bluetooth: hci5: link tx timeout [ 1436.464143][T31756] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 1436.493075][T24906] netlink: 'syz.0.13989': attribute type 1 has an invalid length. [ 1436.585015][T24916] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1436.712093][T24917] netlink: 'syz.4.13992': attribute type 1 has an invalid length. [ 1436.758332][T24916] netlink: 12 bytes leftover after parsing attributes in process `syz.3.13990'. [ 1436.839208][T24916] netlink: 92 bytes leftover after parsing attributes in process `syz.3.13990'. [ 1436.961654][T24934] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1436.972222][T24934] netlink: 'syz.2.13997': attribute type 2 has an invalid length. [ 1436.982850][T24934] netlink: 188 bytes leftover after parsing attributes in process `syz.2.13997'. [ 1437.025941][T24934] wlan0 speed is unknown, defaulting to 1000 [ 1437.891934][T24965] xt_TCPMSS: Only works on TCP SYN packets [ 1437.950779][T24968] netlink: 60 bytes leftover after parsing attributes in process `syz.3.14006'. [ 1438.210229][T24976] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.14010'. [ 1438.231614][T24976] netlink: 190972 bytes leftover after parsing attributes in process `syz.0.14010'. [ 1438.499286][ T5849] Bluetooth: hci5: command 0x0405 tx timeout [ 1439.028605][T25024] netlink: 'syz.3.14023': attribute type 13 has an invalid length. [ 1439.075350][T25024] gretap0: refused to change device tx_queue_len [ 1439.083424][T25024] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1439.543130][T25045] tipc: Resetting bearer [ 1439.716609][T25045] bond0: left promiscuous mode [ 1439.733900][T25045] bond_slave_0: left promiscuous mode [ 1439.755118][T25045] bond_slave_1: left promiscuous mode [ 1439.782481][T25045] veth0_to_bond: left allmulticast mode [ 1439.806585][T25045] geneve2: left promiscuous mode [ 1439.814423][T25045] geneve2: left allmulticast mode [ 1439.868476][T25045] bond2: left promiscuous mode [ 1439.883279][T25045] bridge4: left promiscuous mode [ 1439.920779][T25045] vlan2: left promiscuous mode [ 1439.935709][T25045] bridge0: left promiscuous mode [ 1440.041751][T20462] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1440.067559][T20462] netdevsim netdevsim0 netdevsim1: unset [0, 1] type 1 family 0 port 256 - 0 [ 1440.126556][T20462] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1440.156240][T20462] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1440.191665][T20462] netdevsim netdevsim0 netdevsim2: unset [0, 1] type 1 family 0 port 256 - 0 [ 1440.220939][T20462] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1440.325887][T20462] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1440.343634][T20462] netdevsim netdevsim0 netdevsim3: unset [0, 1] type 1 family 0 port 256 - 0 [ 1440.353253][T20462] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1440.559452][T25083] netlink: 'syz.1.14034': attribute type 2 has an invalid length. [ 1440.774323][T25089] openvswitch: netlink: Missing key (keys=40, expected=80) [ 1440.881884][T25094] veth11: entered allmulticast mode [ 1440.892926][T25094] __nla_validate_parse: 5 callbacks suppressed [ 1440.892945][T25094] netlink: 16 bytes leftover after parsing attributes in process `syz.4.14038'. [ 1441.525351][T25140] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14049'. [ 1441.579581][T25140] netlink: 'syz.3.14049': attribute type 13 has an invalid length. [ 1441.593187][T25135] openvswitch: netlink: IPv4 tunnel dst address is zero [ 1441.604439][T25140] netlink: 'syz.3.14049': attribute type 58 has an invalid length. [ 1441.628656][T25140] netlink: 152 bytes leftover after parsing attributes in process `syz.3.14049'. [ 1441.754270][T25135] can: request_module (can-proto-4) failed. [ 1441.865940][T25156] tipc: Enabled bearer , priority 0 [ 1441.878285][T25156] tipc: Resetting bearer [ 1441.898775][T25150] tipc: Resetting bearer [ 1441.955712][T25150] tipc: Disabling bearer [ 1441.986174][T25155] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1442.038243][T25160] x_tables: duplicate underflow at hook 2 [ 1442.195298][T25135] tipc: Enabling of bearer rejected, failed to enable media [ 1442.351463][T25180] xt_l2tp: v2 doesn't support IP mode [ 1442.359194][T25180] xt_l2tp: v2 doesn't support IP mode [ 1442.495035][T25187] IPVS: set_ctl: invalid protocol: 47 224.0.0.2:20001 [ 1442.503229][T25187] netlink: 168 bytes leftover after parsing attributes in process `syz.0.14062'. [ 1442.664058][T25187] netlink: 'syz.0.14062': attribute type 1 has an invalid length. [ 1442.713530][T25187] netlink: 228 bytes leftover after parsing attributes in process `syz.0.14062'. [ 1442.936947][T25210] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.14068'. [ 1443.086296][T25217] netlink: 'syz.0.14070': attribute type 1 has an invalid length. [ 1443.105983][T25217] netlink: 96 bytes leftover after parsing attributes in process `syz.0.14070'. [ 1443.140217][T25217] netlink: 658 bytes leftover after parsing attributes in process `syz.0.14070'. [ 1443.165926][T25217] netlink: 1 bytes leftover after parsing attributes in process `syz.0.14070'. [ 1443.427546][T25242] netlink: 4 bytes leftover after parsing attributes in process `syz.2.14078'. [ 1443.905830][T25265] xfrm1: entered allmulticast mode [ 1444.509549][T25299] bond6: entered promiscuous mode [ 1444.538019][T25299] bond6: entered allmulticast mode [ 1444.556432][T25299] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1444.640696][T25315] macvlan2: entered promiscuous mode [ 1444.646054][T25315] macvlan2: entered allmulticast mode [ 1444.699946][T25315] bond6: (slave macvlan2): Opening slave failed [ 1444.737114][T25326] netlink: 'syz.0.14101': attribute type 1 has an invalid length. [ 1444.778376][T25326] netlink: 'syz.0.14101': attribute type 3 has an invalid length. [ 1444.812246][T25326] NCSI netlink: No device for ifindex 813332851 [ 1445.046009][T25347] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1445.070427][T25351] ipvlan2: entered allmulticast mode [ 1445.090514][T25351] batadv_slave_1: entered allmulticast mode [ 1445.184442][T25361] bridge0: port 2(bridge_slave_1) entered disabled state [ 1445.354453][T25373] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1445.631376][T25390] netlink: 'syz.1.14117': attribute type 33 has an invalid length. [ 1445.693559][T25390] bond4: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 1445.730703][T25390] bond4 (unregistering): Released all slaves [ 1445.852399][T25388] gtp1: entered promiscuous mode [ 1445.871680][T25388] gtp1: entered allmulticast mode [ 1445.997160][T25417] __nla_validate_parse: 12 callbacks suppressed [ 1445.997182][T25417] netlink: 284 bytes leftover after parsing attributes in process `syz.3.14121'. [ 1446.345036][T25438] netlink: 20 bytes leftover after parsing attributes in process `syz.3.14127'. [ 1446.409233][T25443] syzkaller0: entered promiscuous mode [ 1446.429808][T25443] syzkaller0: entered allmulticast mode [ 1446.442479][T25449] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1446.493393][T25446] tipc: Enabling of bearer rejected, failed to enable media [ 1446.646388][T25460] netlink: 'syz.4.14130': attribute type 10 has an invalid length. [ 1446.668973][T25459] netlink: 4 bytes leftover after parsing attributes in process `syz.4.14130'. [ 1446.876004][T25471] dvmrp6: entered allmulticast mode [ 1447.026944][T25479] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14136'. [ 1447.123240][T25492] netlink: 'syz.2.14140': attribute type 1 has an invalid length. [ 1447.668653][T25528] netlink: 5496 bytes leftover after parsing attributes in process `syz.2.14151'. [ 1447.925568][T25545] syzkaller0: entered promiscuous mode [ 1447.933684][T25545] syzkaller0: entered allmulticast mode [ 1447.948260][T25542] tipc: Enabled bearer , priority 0 [ 1448.008932][T25542] tipc: Resetting bearer [ 1448.083734][T25542] tipc: Disabling bearer [ 1448.139862][T25550] syzkaller1: entered promiscuous mode [ 1448.145419][T25550] syzkaller1: entered allmulticast mode [ 1448.181836][T25554] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14159'. [ 1448.195666][ T30] audit: type=1800 audit(1769412189.514:13): pid=25554 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.14159" name="memory.events" dev="tmpfs" ino=1410 res=0 errno=0 [ 1448.278485][T25560] netlink: 11562 bytes leftover after parsing attributes in process `syz.0.14160'. [ 1448.432809][T25568] netlink: 'syz.0.14163': attribute type 8 has an invalid length. [ 1448.450376][T25568] netlink: 'syz.0.14163': attribute type 3 has an invalid length. [ 1448.595907][T25577] tipc: Enabling of bearer rejected, failed to enable media [ 1448.666233][T25583] netlink: 16 bytes leftover after parsing attributes in process `syz.2.14169'. [ 1448.726024][T25587] syzkaller0: entered promiscuous mode [ 1448.750147][T25587] syzkaller0: entered allmulticast mode [ 1448.870668][T25587] netlink: 12 bytes leftover after parsing attributes in process `syz.1.14170'. [ 1448.985243][T25610] netlink: 16 bytes leftover after parsing attributes in process `syz.3.14175'. [ 1449.213142][T25617] netlink: 'syz.1.14178': attribute type 1 has an invalid length. [ 1449.311867][T25632] netlink: 'syz.0.14176': attribute type 10 has an invalid length. [ 1449.368955][T25618] bond4: (slave gretap1): making interface the new active one [ 1449.410085][T25618] bond4: (slave gretap1): Enslaving as an active interface with an up link [ 1449.440193][T25632] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 1449.579797][T25643] netlink: 'syz.4.14182': attribute type 1 has an invalid length. [ 1449.786216][T25652] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 1449.926543][T25655] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1449.944718][T25655] bond_slave_0: left allmulticast mode [ 1449.974752][T25655] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1449.990168][T25655] bond_slave_1: left allmulticast mode [ 1450.001822][T25655] bond0 (unregistering): Released all slaves [ 1450.037875][T25664] syzkaller1: entered promiscuous mode [ 1450.043415][T25664] syzkaller1: entered allmulticast mode [ 1450.085609][ T727] bond2: (slave veth0_to_bond): link status definitely down, disabling slave [ 1450.110439][ T727] bond2: now running without any active interface! [ 1450.367229][T25688] team0: Device gtp0 is up. Set it down before adding it as a team port [ 1450.556835][T25700] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1450.879865][T25719] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1451.260156][T25736] netlink: 'syz.0.14215': attribute type 10 has an invalid length. [ 1451.282294][T25736] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 1451.438402][T25749] IPv6: addrconf: prefix option has invalid lifetime [ 1451.652341][T25763] netlink: 'syz.3.14222': attribute type 13 has an invalid length. [ 1451.674979][T25768] tc_dump_action: action bad kind [ 1451.691475][T25764] __nla_validate_parse: 7 callbacks suppressed [ 1451.691494][T25764] netlink: 44 bytes leftover after parsing attributes in process `syz.2.14223'. [ 1451.717900][T25763] veth0_macvtap: left promiscuous mode [ 1451.741421][T25763] macvtap0: entered allmulticast mode [ 1451.773375][T25773] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14225'. [ 1451.789633][T25773] netlink: 'syz.0.14225': attribute type 15 has an invalid length. [ 1451.818961][T25763] macvtap0: refused to change device tx_queue_len [ 1451.841269][T25773] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14225'. [ 1451.854465][T25773] netlink: 'syz.0.14225': attribute type 15 has an invalid length. [ 1452.429553][T25810] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14235'. [ 1452.548289][T25806] netlink: 80 bytes leftover after parsing attributes in process `syz.3.14236'. [ 1453.681030][T25869] xt_hashlimit: size too large, truncated to 1048576 [ 1453.695714][T25870] x_tables: duplicate entry at hook 1 [ 1453.753241][T25870] : renamed from vxcan1 (while UP) [ 1453.760416][T25866] netlink: 44 bytes leftover after parsing attributes in process `syz.0.14249'. [ 1453.835942][T25872] tipc: Cannot configure node identity twice [ 1454.236104][T25896] netlink: 20 bytes leftover after parsing attributes in process `syz.1.14252'. [ 1454.565645][T25923] netlink: 8 bytes leftover after parsing attributes in process `syz.4.14259'. [ 1454.919521][T25943] netlink: 'syz.0.14266': attribute type 3 has an invalid length. [ 1454.933876][T25943] netlink: 32 bytes leftover after parsing attributes in process `syz.0.14266'. [ 1455.112163][T25956] netlink: 'syz.3.14271': attribute type 29 has an invalid length. [ 1455.123144][T25958] netlink: 148 bytes leftover after parsing attributes in process `syz.3.14271'. [ 1455.135144][T25957] netlink: 'syz.3.14271': attribute type 29 has an invalid length. [ 1455.248301][T25967] IPVS: wrr: FWM 3 0x00000003 - no destination available [ 1455.256863][ T9432] IPVS: starting estimator thread 0... [ 1455.347924][T25968] IPVS: using max 25 ests per chain, 60000 per kthread [ 1455.575838][T25983] netlink: 'syz.0.14278': attribute type 19 has an invalid length. [ 1458.245510][T26038] __nla_validate_parse: 8 callbacks suppressed [ 1458.245534][T26038] netlink: 4 bytes leftover after parsing attributes in process `syz.3.14292'. [ 1458.269958][T26028] syzkaller0: entered promiscuous mode [ 1458.283233][T26028] syzkaller0: entered allmulticast mode [ 1458.503280][T26062] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14299'. [ 1458.531490][T26062] netlink: 20 bytes leftover after parsing attributes in process `syz.1.14299'. [ 1458.590999][T26071] netlink: 'syz.4.14303': attribute type 33 has an invalid length. [ 1458.605859][T26062] geneve2: entered promiscuous mode [ 1458.619103][T26062] geneve2: entered allmulticast mode [ 1458.631015][T26071] netlink: 152 bytes leftover after parsing attributes in process `syz.4.14303'. [ 1458.704203][T26071] netlink: 4 bytes leftover after parsing attributes in process `syz.4.14303'. [ 1458.723218][T26072] netlink: 4 bytes leftover after parsing attributes in process `syz.4.14303'. [ 1458.748840][T26078] netlink: 12 bytes leftover after parsing attributes in process `syz.3.14305'. [ 1459.026268][T26094] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14308'. [ 1459.219457][T26108] netlink: 'syz.0.14314': attribute type 11 has an invalid length. [ 1459.242013][T26108] netlink: 228 bytes leftover after parsing attributes in process `syz.0.14314'. [ 1459.325601][T26109] veth7: entered promiscuous mode [ 1459.345399][T26109] veth7: entered allmulticast mode [ 1459.365749][T26117] netlink: 'syz.1.14315': attribute type 3 has an invalid length. [ 1459.530373][T26124] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 1459.584716][T26124] tipc: Enabled bearer , priority 10 [ 1459.654085][T26131] netlink: 'syz.2.14323': attribute type 6 has an invalid length. [ 1459.678821][T26131] xt_hashlimit: max too large, truncated to 1048576 [ 1459.747244][T26142] x_tables: ip_tables: owner match: used from hooks PREROUTING, but only valid from OUTPUT/POSTROUTING [ 1459.836087][T26152] macvlan0: entered promiscuous mode [ 1459.872136][T26152] xt_l2tp: v2 doesn't support IP mode [ 1459.977187][T26160] IPVS: set_ctl: invalid protocol: 0 100.1.1.2:20003 [ 1460.195504][T26170] netlink: 4 bytes leftover after parsing attributes in process `syz.2.14333'. [ 1460.401764][T26184] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1460.718162][T30243] tipc: Node number set to 47155694 [ 1460.830034][T26205] syzkaller1: entered promiscuous mode [ 1460.851901][T26205] syzkaller1: entered allmulticast mode [ 1460.870433][T26210] netlink: 'syz.1.14344': attribute type 27 has an invalid length. [ 1460.897346][T26207] wlan0 speed is unknown, defaulting to 1000 [ 1461.000042][T26215] netlink: 'syz.4.14346': attribute type 4 has an invalid length. [ 1461.499133][T26238] chnl_net:caif_netlink_parms(): no params data found [ 1461.552225][T26235] syzkaller0: entered promiscuous mode [ 1461.558202][T26235] syzkaller0: entered allmulticast mode [ 1461.950304][T26265] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1461.965652][T26267] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1462.022286][T26265] openvswitch: netlink: Message has 592 unknown bytes. [ 1462.078074][T26265] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1462.836968][T26334] netlink: 'syz.3.14381': attribute type 21 has an invalid length. [ 1465.158651][T26365] __nla_validate_parse: 13 callbacks suppressed [ 1465.158684][T26365] netlink: 24 bytes leftover after parsing attributes in process `syz.3.14390'. [ 1465.346680][T26381] veth0: entered promiscuous mode [ 1465.356967][T26376] veth0: left promiscuous mode [ 1465.756589][T26396] syzkaller0: entered promiscuous mode [ 1465.770065][T26396] syzkaller0: entered allmulticast mode [ 1465.812900][T26396] tipc: Enabled bearer , priority 0 [ 1465.859787][T26398] bridge7: entered promiscuous mode [ 1465.875883][T26398] bridge7: entered allmulticast mode [ 1465.883453][T26414] netlink: 12 bytes leftover after parsing attributes in process `syz.0.14405'. [ 1465.905542][T26395] tipc: Resetting bearer [ 1465.961655][T26395] tipc: Disabling bearer [ 1465.971773][T26419] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1466.414991][T26444] netlink: 12 bytes leftover after parsing attributes in process `syz.1.14413'. [ 1466.450021][T26444] netlink: 12 bytes leftover after parsing attributes in process `syz.1.14413'. [ 1466.513850][T26444] geneve3: entered promiscuous mode [ 1466.519500][T26444] geneve3: entered allmulticast mode [ 1466.527126][T26454] lo: entered promiscuous mode [ 1466.553911][T26454] netlink: 'syz.0.14417': attribute type 2 has an invalid length. [ 1466.591268][T26454] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1466.714974][T26469] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 1466.812426][T26479] netlink: 'syz.1.14422': attribute type 1 has an invalid length. [ 1467.091324][T26504] netlink: 'syz.1.14430': attribute type 1 has an invalid length. [ 1467.365854][T26516] tipc: Failed to remove unknown binding: 66,0,0/2759907283:1135543272/1135543273 [ 1467.376488][T26517] netlink: 80 bytes leftover after parsing attributes in process `syz.0.14435'. [ 1467.388787][T26516] tipc: Failed to remove unknown binding: 66,0,0/2759907283:1135543272/1135543273 [ 1467.474189][T26523] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1467.681210][T26531] netlink: 'syz.3.14442': attribute type 1 has an invalid length. [ 1467.713194][T26531] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1467.771337][T26531] syzkaller0: entered promiscuous mode [ 1467.795175][T26531] syzkaller0: entered allmulticast mode [ 1468.889496][T26580] sctp: [Deprecated]: syz.0.14454 (pid 26580) Use of int in max_burst socket option deprecated. [ 1468.889496][T26580] Use struct sctp_assoc_value instead [ 1469.093652][T26595] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14459'. [ 1469.104047][T26599] netlink: 12 bytes leftover after parsing attributes in process `syz.0.14461'. [ 1469.280518][T26606] syzkaller1: entered promiscuous mode [ 1469.297713][T26606] syzkaller1: entered allmulticast mode [ 1469.552290][T26626] wlan0 speed is unknown, defaulting to 1000 [ 1469.657239][T26630] netlink: 4 bytes leftover after parsing attributes in process `syz.3.14468'. [ 1469.821065][T26635] netlink: 'syz.2.14471': attribute type 10 has an invalid length. [ 1469.849207][T26635] netlink: 228 bytes leftover after parsing attributes in process `syz.2.14471'. [ 1469.861486][T26636] netlink: 'syz.4.14470': attribute type 3 has an invalid length. [ 1469.869978][T26636] netlink: 'syz.4.14470': attribute type 1 has an invalid length. [ 1469.892968][T26638] netlink: 104 bytes leftover after parsing attributes in process `syz.3.14472'. [ 1470.072647][T26649] syzkaller0: entered promiscuous mode [ 1470.084203][T26649] syzkaller0: entered allmulticast mode [ 1470.388178][T26667] netlink: 'syz.1.14482': attribute type 1 has an invalid length. [ 1470.480727][T26667] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1470.502084][T26672] netlink: 'syz.4.14483': attribute type 6 has an invalid length. [ 1470.525891][T26669] bond5: (slave gretap2): making interface the new active one [ 1470.536027][T26669] bond5: (slave gretap2): Enslaving as an active interface with an up link [ 1470.556112][T26675] netlink: 'syz.4.14483': attribute type 6 has an invalid length. [ 1470.914575][T26696] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1471.115993][T26706] netlink: 72 bytes leftover after parsing attributes in process `syz.2.14493'. [ 1471.122579][T26710] netlink: 136 bytes leftover after parsing attributes in process `syz.1.14492'. [ 1471.249314][T26715] netlink: 32 bytes leftover after parsing attributes in process `syz.2.14496'. [ 1471.276696][T26715] netlink: 4 bytes leftover after parsing attributes in process `syz.2.14496'. [ 1471.492895][T26727] netlink: 28 bytes leftover after parsing attributes in process `syz.2.14500'. [ 1471.784781][T26743] netlink: 84 bytes leftover after parsing attributes in process `syz.4.14495'. [ 1471.954450][T26759] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1472.088529][T26752] team0: Port device team_slave_0 removed [ 1472.168394][T26766] netlink: 'syz.0.14509': attribute type 1 has an invalid length. [ 1472.179355][T26767] netlink: 4 bytes leftover after parsing attributes in process `syz.0.14509'. [ 1472.189577][T26756] netlink: 'syz.2.14506': attribute type 13 has an invalid length. [ 1472.200983][T26756] netlink: 4 bytes leftover after parsing attributes in process `syz.2.14506'. [ 1472.250828][T26766] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1472.262206][T26763] netlink: 'syz.3.14505': attribute type 10 has an invalid length. [ 1472.279734][T26756] netlink: 'syz.2.14506': attribute type 13 has an invalid length. [ 1472.288390][T26756] netlink: 4 bytes leftover after parsing attributes in process `syz.2.14506'. [ 1472.319989][T26773] sctp: [Deprecated]: syz.4.14510 (pid 26773) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1472.319989][T26773] Use struct sctp_sack_info instead [ 1472.348828][T26763] dummy0: entered promiscuous mode [ 1472.355234][T26763] team0: Port device dummy0 added [ 1472.398094][ T715] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1472.424059][ T715] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1472.459925][ T715] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1472.483990][ T715] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1472.595831][T26787] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14514'. [ 1472.825170][T26794] wlan0 speed is unknown, defaulting to 1000 [ 1472.978589][T26805] netlink: 'syz.3.14518': attribute type 32 has an invalid length. [ 1473.566324][ T715] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1473.588799][ T715] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1473.907274][T26859] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1474.003110][T26868] netlink: 'syz.4.14535': attribute type 1 has an invalid length. [ 1474.124550][T26876] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 1474.478640][T26890] bridge8: entered promiscuous mode [ 1474.511978][T26890] bridge8: entered allmulticast mode [ 1474.518159][T26897] netlink: zone id is out of range [ 1474.533853][T26897] netlink: del zone limit has 4 unknown bytes [ 1474.545164][T26890] netlink: 'syz.2.14538': attribute type 1 has an invalid length. [ 1474.932826][T26919] tipc: Enabled bearer , priority 0 [ 1475.064844][T26919] syzkaller0: entered promiscuous mode [ 1475.072015][T26919] syzkaller0: entered allmulticast mode [ 1475.080114][T26919] tipc: Resetting bearer [ 1475.131387][T26918] tipc: Resetting bearer [ 1475.831813][ T566] lec:lec_start_xmit: lec0:No lecd attached [ 1477.081979][T26918] tipc: Disabling bearer [ 1477.091737][T26937] __nla_validate_parse: 10 callbacks suppressed [ 1477.091754][T26937] netlink: 12 bytes leftover after parsing attributes in process `syz.4.14552'. [ 1477.133079][T26937] netlink: 12 bytes leftover after parsing attributes in process `syz.4.14552'. [ 1477.145852][T26937] netlink: 12 bytes leftover after parsing attributes in process `syz.4.14552'. [ 1477.249740][T26954] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1477.401321][T26968] netlink: 28 bytes leftover after parsing attributes in process `syz.4.14560'. [ 1477.436846][T26968] netlink: 28 bytes leftover after parsing attributes in process `syz.4.14560'. [ 1477.576348][T26988] netlink: 100 bytes leftover after parsing attributes in process `syz.3.14559'. [ 1477.589626][T26968] gretap0: entered promiscuous mode [ 1477.612014][T26968] gretap0: left promiscuous mode [ 1477.871675][T27002] bridge0: port 2(ipvlan3) entered blocking state [ 1477.883274][T27002] bridge0: port 2(ipvlan3) entered disabled state [ 1477.891785][T27002] ipvlan3: entered allmulticast mode [ 1477.897241][T27002] bridge0: entered allmulticast mode [ 1477.927657][T27002] ipvlan3: left allmulticast mode [ 1477.934675][T27002] bridge0: left allmulticast mode [ 1477.942069][T27007] netlink: 4 bytes leftover after parsing attributes in process `syz.2.14569'. [ 1478.429413][T27037] netlink: 'syz.4.14578': attribute type 12 has an invalid length. [ 1478.469734][T27037] syzkaller1: entered promiscuous mode [ 1478.475421][T27037] syzkaller1: entered allmulticast mode [ 1478.494002][T27037] netlink: 72 bytes leftover after parsing attributes in process `syz.4.14578'. [ 1478.572281][T27043] RDS: rds_bind could not find a transport for ::ffff:172.20.20.187, load rds_tcp or rds_rdma? [ 1478.821757][T27060] IPVS: length: 8 != 1152 [ 1478.851364][T27060] IPVS: length: 8 != 1152 [ 1478.855800][T27060] IPVS: length: 8 != 1152 [ 1478.888074][T27060] IPVS: length: 8 != 1152 [ 1478.903774][T27060] IPVS: length: 8 != 1152 [ 1478.930270][T27060] IPVS: length: 8 != 1152 [ 1478.935315][T27060] IPVS: length: 8 != 1152 [ 1478.952986][T27064] netlink: 'syz.2.14590': attribute type 2 has an invalid length. [ 1478.966009][T27060] IPVS: length: 8 != 1152 [ 1478.986580][T27060] IPVS: length: 8 != 1152 [ 1479.008083][T27060] IPVS: length: 8 != 1152 [ 1479.023709][T27060] IPVS: length: 8 != 1152 [ 1479.044028][T27060] IPVS: length: 8 != 1152 [ 1479.066453][T27060] IPVS: length: 8 != 1152 [ 1479.085457][T27060] IPVS: length: 8 != 1152 [ 1479.103583][T27060] IPVS: length: 8 != 1152 [ 1479.119380][T27060] IPVS: length: 8 != 1152 [ 1479.149163][T27060] IPVS: length: 8 != 1152 [ 1479.170256][T27060] IPVS: length: 8 != 1152 [ 1479.189155][T27060] IPVS: length: 8 != 1152 [ 1479.207120][T27060] IPVS: length: 8 != 1152 [ 1479.230637][T27060] IPVS: length: 8 != 1152 [ 1479.257546][T27060] IPVS: length: 8 != 1152 [ 1479.270629][T27060] IPVS: length: 8 != 1152 [ 1479.295322][T27060] IPVS: length: 8 != 1152 [ 1479.315544][T27060] IPVS: length: 8 != 1152 [ 1479.348680][T27060] IPVS: length: 8 != 1152 [ 1479.353106][T27060] IPVS: length: 8 != 1152 [ 1479.388261][T27060] IPVS: length: 8 != 1152 [ 1479.392682][T27060] IPVS: length: 8 != 1152 [ 1479.397058][T27060] IPVS: length: 8 != 1152 [ 1479.408771][ T5849] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1479.428562][ T5849] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1479.436517][ T5849] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1479.444954][ T5849] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1479.453080][ T5849] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1479.470031][T27060] IPVS: length: 8 != 1152 [ 1479.489703][T27060] IPVS: length: 8 != 1152 [ 1479.502838][T27073] wlan0 speed is unknown, defaulting to 1000 [ 1479.529082][T27060] IPVS: length: 8 != 1152 [ 1479.544538][T27060] IPVS: length: 8 != 1152 [ 1479.565932][T27060] IPVS: length: 8 != 1152 [ 1479.583751][T27084] IPVS: length: 39 != 8 [ 1479.596099][T27060] IPVS: length: 8 != 1152 [ 1479.606532][T27060] IPVS: length: 8 != 1152 [ 1479.611367][T27060] IPVS: length: 8 != 1152 [ 1479.616846][T27060] IPVS: length: 8 != 1152 [ 1479.625126][T27060] IPVS: length: 8 != 1152 [ 1479.629938][T27060] IPVS: length: 8 != 1152 [ 1479.634462][T27060] IPVS: length: 8 != 1152 [ 1479.639762][T27060] IPVS: length: 8 != 1152 [ 1479.644288][T27060] IPVS: length: 8 != 1152 [ 1479.713475][T27093] netlink: 24 bytes leftover after parsing attributes in process `syz.1.14594'. [ 1479.907207][T17317] bond0: (slave syz_tun): Releasing backup interface [ 1480.204236][T27111] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14601'. [ 1480.451199][T27128] netlink: 'syz.2.14605': attribute type 9 has an invalid length. [ 1480.473820][ T7964] netdevsim netdevsim0 netdevsim0 (unregistering): tearing down IPsec offload with 1 SAs left [ 1480.626775][T27133] bridge0: port 1(ipvlan0) entered blocking state [ 1480.633777][T27133] bridge0: port 1(ipvlan0) entered disabled state [ 1480.641532][T27133] ipvlan0: entered allmulticast mode [ 1480.647020][T27133] bridge0: entered allmulticast mode [ 1480.679649][T27133] ipvlan0: left allmulticast mode [ 1480.689316][T27133] bridge0: left allmulticast mode [ 1480.780600][T27073] chnl_net:caif_netlink_parms(): no params data found [ 1480.847526][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 1480.855639][ C1] lec:lec_tx_timeout: lec0 [ 1481.099003][T27073] bridge0: port 1(bridge_slave_0) entered blocking state [ 1481.106281][T27073] bridge0: port 1(bridge_slave_0) entered disabled state [ 1481.129180][T27073] bridge_slave_0: entered allmulticast mode [ 1481.139296][T27073] bridge_slave_0: entered promiscuous mode [ 1481.179302][T27163] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1481.222085][T27073] bridge0: port 2(bridge_slave_1) entered blocking state [ 1481.243899][T27073] bridge0: port 2(bridge_slave_1) entered disabled state [ 1481.263138][T27073] bridge_slave_1: entered allmulticast mode [ 1481.280252][T27073] bridge_slave_1: entered promiscuous mode [ 1481.377270][T27073] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1481.421593][T27073] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1481.500638][T27073] team0: Port device team_slave_0 added [ 1481.524729][T27073] team0: Port device team_slave_1 added [ 1481.540903][T31756] Bluetooth: hci0: command tx timeout [ 1481.622266][T27073] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1481.631004][T27073] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1481.665495][T27073] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1481.692216][T27196] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 1481.704286][T27196] gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1481.713444][T27196] gretap2: entered promiscuous mode [ 1481.720058][T27196] gretap2: entered allmulticast mode [ 1481.729885][T27073] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1481.739226][T27073] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1481.784118][T27073] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1481.905576][T27073] hsr_slave_0: entered promiscuous mode [ 1481.913398][T27073] hsr_slave_1: entered promiscuous mode [ 1481.921415][T27073] debugfs: 'hsr0' already exists in 'hsr' [ 1481.927270][T27073] Cannot create hsr debugfs directory [ 1482.275109][T27217] __nla_validate_parse: 2 callbacks suppressed [ 1482.275130][T27217] netlink: 12 bytes leftover after parsing attributes in process `syz.3.14633'. [ 1482.313497][T27220] netlink: 'syz.4.14634': attribute type 10 has an invalid length. [ 1482.460197][T27235] openvswitch: netlink: IP tunnel dst address not specified [ 1483.485344][T27265] netlink: 4 bytes leftover after parsing attributes in process `syz.4.14641'. [ 1483.597238][T27268] netlink: 'syz.3.14643': attribute type 13 has an invalid length. [ 1483.626508][T31756] Bluetooth: hci0: command tx timeout [ 1483.642326][T27268] gretap0: refused to change device tx_queue_len [ 1483.688203][T27268] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1483.740649][T27276] netlink: 20 bytes leftover after parsing attributes in process `syz.1.14645'. [ 1483.757810][T27278] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14646'. [ 1483.899745][T27284] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 1483.909103][T27284] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1483.983121][T27288] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14648'. [ 1484.425789][ T1303] clip:clip_start_xmit: skb_dst(skb) == NULL [ 1484.433686][ T1303] lec:lec_start_xmit: lec0:No lecd attached [ 1485.154924][T27342] netlink: 24 bytes leftover after parsing attributes in process `syz.1.14661'. [ 1485.308811][T27346] syzkaller1: entered promiscuous mode [ 1485.314364][T27346] syzkaller1: entered allmulticast mode [ 1485.391609][T27355] netlink: 24 bytes leftover after parsing attributes in process `syz.4.14662'. [ 1485.401882][T27339] syzkaller0: entered promiscuous mode [ 1485.409701][T27339] syzkaller0: entered allmulticast mode [ 1485.409928][T27349] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14663'. [ 1485.451680][T27349] netlink: 20 bytes leftover after parsing attributes in process `syz.1.14663'. [ 1485.698616][T31756] Bluetooth: hci0: command tx timeout [ 1487.251532][T27355] bond7 (unregistering): Released all slaves [ 1487.731204][T27379] policy can only be matched on NF_INET_PRE_ROUTING [ 1487.731228][T27379] unable to load match [ 1487.780394][T31756] Bluetooth: hci0: command tx timeout [ 1487.971392][T27388] netlink: 'syz.4.14671': attribute type 1 has an invalid length. [ 1487.997187][T27390] netlink: 20 bytes leftover after parsing attributes in process `syz.1.14672'. [ 1488.072894][T27388] bond7: entered promiscuous mode [ 1488.086599][T27388] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1488.131213][T27393] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1488.139789][T27393] bond7: (slave gre2): The slave device specified does not support setting the MAC address [ 1488.149988][T27393] bond7: (slave gre2): Setting fail_over_mac to active for active-backup mode [ 1488.162501][T27393] bond7: (slave gre2): making interface the new active one [ 1488.170697][T27393] gre2: entered promiscuous mode [ 1488.177126][T27393] bond7: (slave gre2): Enslaving as an active interface with an up link [ 1488.296639][T27403] netlink: 'syz.2.14675': attribute type 4 has an invalid length. [ 1488.306854][T27404] netlink: 'syz.2.14675': attribute type 4 has an invalid length. [ 1488.519825][T27416] netlink: 'syz.2.14678': attribute type 10 has an invalid length. [ 1488.550702][T27416] veth0_macvtap: left promiscuous mode [ 1488.557227][T27416] team0: Device veth0_macvtap failed to register rx_handler [ 1488.617977][T27429] syzkaller0: entered promiscuous mode [ 1488.633694][T27429] syzkaller0: entered allmulticast mode [ 1489.158873][T27466] sctp: [Deprecated]: syz.3.14693 (pid 27466) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1489.158873][T27466] Use struct sctp_sack_info instead [ 1489.218302][T27470] xt_policy: too many policy elements [ 1489.441631][T27486] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14700'. [ 1489.461478][T27486] netlink: 24 bytes leftover after parsing attributes in process `syz.2.14700'. [ 1489.609610][T27496] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1489.777517][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5340 ms [ 1489.785801][ C1] lec:lec_tx_timeout: lec0 [ 1489.831207][T27505] netlink: 'syz.2.14706': attribute type 1 has an invalid length. [ 1491.889745][T27505] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 1492.076848][T27546] tipc: Enabled bearer , priority 2 [ 1492.228244][T27553] netlink: 4 bytes leftover after parsing attributes in process `syz.1.14717'. [ 1492.243799][T27553] openvswitch: netlink: Flow actions attr not present in new flow. [ 1492.574258][T27579] netlink: 'syz.1.14725': attribute type 17 has an invalid length. [ 1492.589722][T27579] netlink: 4 bytes leftover after parsing attributes in process `syz.1.14725'. [ 1492.600301][T27579] netlink: 28 bytes leftover after parsing attributes in process `syz.1.14725'. [ 1492.604294][T27582] netlink: 20 bytes leftover after parsing attributes in process `syz.3.14726'. [ 1492.652657][T27582] netlink: 20 bytes leftover after parsing attributes in process `syz.3.14726'. [ 1492.683517][T27582] nbd: device at index 64 is going down [ 1492.711221][T27582] netlink: 'syz.3.14726': attribute type 8 has an invalid length. [ 1492.803821][T27585] udevd[27585]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1492.845159][T27585] udevd[27585]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1492.945951][T27596] bond7: (slave veth7): Enslaving as an active interface with a down link [ 1493.025781][T27596] bond7: (slave veth9): Enslaving as an active interface with a down link [ 1493.039341][T27601] IPVS: Unknown mcast interface: bond0 [ 1493.187917][ T9437] tipc: Node number set to 3758096385 [ 1493.206125][T27613] netlink: 20 bytes leftover after parsing attributes in process `syz.2.14735'. [ 1493.220579][T27613] tipc: Enabling not permitted [ 1493.226445][T27613] tipc: Enabling of bearer rejected, failed to enable media [ 1493.240344][T27615] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14734'. [ 1493.332576][T27618] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 1493.786684][T27645] syzkaller1: entered promiscuous mode [ 1493.810330][T27645] syzkaller1: entered allmulticast mode [ 1494.254993][T27665] netlink: 'syz.3.14749': attribute type 4 has an invalid length. [ 1494.405355][T27683] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.14753'. [ 1494.416041][T27683] netlink: Conntrack attr has 3 unknown bytes [ 1494.531154][T27687] netlink: 4 bytes leftover after parsing attributes in process `syz.4.14756'. [ 1494.606387][T27687] team0: Port device team_slave_0 removed [ 1494.646678][T27689] syzkaller0: entered promiscuous mode [ 1494.652637][T27689] syzkaller0: entered allmulticast mode [ 1494.689556][T27689] openvswitch: netlink: Message has 8 unknown bytes. [ 1495.112990][T27698] IPv6: NLM_F_CREATE should be specified when creating new route [ 1495.289309][T27710] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14764'. [ 1495.303652][T27710] netlink: 'syz.2.14764': attribute type 16 has an invalid length. [ 1495.315821][T27710] netlink: 'syz.2.14764': attribute type 17 has an invalid length. [ 1495.350142][T27710] gre0: left promiscuous mode [ 1495.362139][T27710] 0{X: left allmulticast mode [ 1495.383570][T27710] syz_tun: left promiscuous mode [ 1495.396705][T27710] 8021q: adding VLAN 0 to HW filter on device team0 [ 1495.410489][T27710] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1495.546542][T27720] syzkaller1: entered promiscuous mode [ 1495.553824][T27720] syzkaller1: entered allmulticast mode [ 1495.563304][T27722] netlink: 52 bytes leftover after parsing attributes in process `syz.1.14766'. [ 1495.883926][T27734] netlink: 'syz.1.14768': attribute type 4 has an invalid length. [ 1496.884503][T27771] netlink: 20 bytes leftover after parsing attributes in process `syz.1.14778'. [ 1496.917865][T27771] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14778'. [ 1497.212439][T27784] netlink: 'syz.3.14782': attribute type 5 has an invalid length. [ 1497.225228][T27784] netlink: 140 bytes leftover after parsing attributes in process `syz.3.14782'. [ 1497.239295][T27784] netlink: 'syz.3.14782': attribute type 1 has an invalid length. [ 1497.776206][T27810] netlink: 36 bytes leftover after parsing attributes in process `syz.4.14788'. [ 1497.934061][T27808] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 1499.809254][T27835] netlink: 'syz.4.14794': attribute type 5 has an invalid length. [ 1499.885253][T27840] netlink: 4 bytes leftover after parsing attributes in process `syz.1.14796'. [ 1499.897007][T27840] netlink: 12 bytes leftover after parsing attributes in process `syz.1.14796'. [ 1499.902575][T27839] netlink: 28 bytes leftover after parsing attributes in process `syz.2.14795'. [ 1499.935686][T27839] netlink: 28 bytes leftover after parsing attributes in process `syz.2.14795'. [ 1500.030999][T27845] IPv6: NLM_F_CREATE should be specified when creating new route [ 1500.051007][T27843] netlink: 'syz.4.14797': attribute type 10 has an invalid length. [ 1500.115661][T27848] netlink: 12 bytes leftover after parsing attributes in process `syz.1.14799'. [ 1500.139740][T27847] netlink: 12 bytes leftover after parsing attributes in process `syz.1.14799'. [ 1500.191351][ T9432] IPVS: starting estimator thread 0... [ 1500.261609][T27850] netlink: 96 bytes leftover after parsing attributes in process `syz.4.14800'. [ 1500.277649][T27853] IPVS: using max 27 ests per chain, 64800 per kthread [ 1500.424596][T27864] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.14804'. [ 1500.437271][T27864] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.14804'. [ 1500.450448][T27864] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.14804'. [ 1501.322654][T27922] netlink: 'syz.3.14818': attribute type 28 has an invalid length. [ 1501.332936][T27922] netlink: 'syz.3.14818': attribute type 3 has an invalid length. [ 1501.344209][T27924] netlink: 'syz.3.14818': attribute type 28 has an invalid length. [ 1501.354335][T27924] netlink: 'syz.3.14818': attribute type 3 has an invalid length. [ 1501.976908][T27941] vlan0 (unregistering): left allmulticast mode [ 1501.984606][T27941] veth0_vlan (unregistering): left allmulticast mode [ 1501.992371][T27941] vlan0 (unregistering): left promiscuous mode [ 1502.590346][T27941] tipc: Disabling bearer [ 1502.942551][ T718] nci: nci_ntf_packet: unsupported ntf opcode 0xf00 [ 1503.138270][T28013] xt_ecn: cannot match TCP bits for non-tcp packets [ 1503.195463][T28014] netlink: 'syz.2.14835': attribute type 3 has an invalid length. [ 1503.776010][T28025] ip6gre2: entered promiscuous mode [ 1503.783396][T28025] ip6gre2: entered allmulticast mode [ 1503.868844][T28030] netlink: 'syz.1.14842': attribute type 3 has an invalid length. [ 1503.991702][T28037] netlink: 'syz.1.14845': attribute type 1 has an invalid length. [ 1504.063066][T28037] bond8: entered promiscuous mode [ 1504.070048][T28037] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1504.147840][T28043] bond8: (slave bridge6): making interface the new active one [ 1504.171337][T28043] bridge6: entered promiscuous mode [ 1504.183015][T28043] bridge6: left promiscuous mode [ 1504.281288][T28057] netlink: 'syz.4.14851': attribute type 83 has an invalid length. [ 1504.298366][T28056] netlink: 'syz.4.14851': attribute type 83 has an invalid length. [ 1504.590453][ T30] audit: type=1107 audit(1769412245.914:14): pid=28073 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='ً5%UA٠0ltݕ/ 6򊨊' [ 1505.567124][T28140] __nla_validate_parse: 68 callbacks suppressed [ 1505.567144][T28140] netlink: 12 bytes leftover after parsing attributes in process `syz.4.14880'. [ 1505.574265][T28141] netlink: 24 bytes leftover after parsing attributes in process `syz.4.14880'. [ 1505.694673][T28146] netlink: 12 bytes leftover after parsing attributes in process `syz.3.14881'. [ 1505.731964][T28146] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1505.752477][T28146] team0: Port device dummy0 removed [ 1505.759969][T28146] dummy0: left promiscuous mode [ 1505.768363][T28146] bond10: (slave dummy0): Enslaving as an active interface with an up link [ 1505.809976][T28149] bond8: peer notification delay (1164) is not a multiple of miimon (100), value rounded to 1100 ms [ 1505.825400][T28149] bond8: entered promiscuous mode [ 1505.830747][T28149] bond8: entered allmulticast mode [ 1505.837771][T28149] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1506.311190][T28170] 8021q: adding VLAN 0 to HW filter on device bond11 [ 1506.379976][T28170] syzkaller0: entered promiscuous mode [ 1506.385522][T28170] syzkaller0: entered allmulticast mode [ 1506.574703][T28183] netlink: 4 bytes leftover after parsing attributes in process `syz.2.14893'. [ 1508.434639][T28195] !: renamed from dummy0 (while UP) [ 1508.448339][T28192] syzkaller0: entered promiscuous mode [ 1508.453876][T28192] syzkaller0: entered allmulticast mode [ 1508.663274][T28215] netlink: 8 bytes leftover after parsing attributes in process `syz.4.14902'. [ 1508.714808][T28218] IPVS: set_ctl: invalid protocol: 29 172.20.20.11:24 [ 1508.752017][T28222] netlink: 1 bytes leftover after parsing attributes in process `syz.2.14904'. [ 1508.824484][T28229] openvswitch: netlink: Unexpected mask (mask=2200040, allowed=2010048) [ 1509.143557][T28253] netlink: 88 bytes leftover after parsing attributes in process `syz.1.14915'. [ 1509.165136][T28253] netem: invalid attributes len -24 [ 1509.172725][T28253] netem: change failed [ 1509.187204][T28256] netlink: 24 bytes leftover after parsing attributes in process `syz.3.14916'. [ 1509.200537][T28257] netlink: 4 bytes leftover after parsing attributes in process `syz.3.14916'. [ 1509.211079][T28256] netlink: 4 bytes leftover after parsing attributes in process `syz.3.14916'. [ 1509.352708][T28264] netlink: 'syz.3.14919': attribute type 13 has an invalid length. [ 1509.493154][T28268] veth0: entered promiscuous mode [ 1509.510770][T28262] veth0: left promiscuous mode [ 1509.599448][T28276] netlink: 'syz.3.14922': attribute type 10 has an invalid length. [ 1509.608150][T28277] netlink: 'syz.3.14922': attribute type 10 has an invalid length. [ 1509.621893][T28276] bond10: (slave dummy0): Releasing backup interface [ 1509.633581][T28276] dummy0: entered promiscuous mode [ 1509.640178][T28276] team0: Port device dummy0 added [ 1509.975543][T28288] Bluetooth: MGMT ver 1.23 [ 1510.332412][T28299] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1510.394075][T28299] ipvlan1: entered promiscuous mode [ 1510.629033][T28309] syzkaller1: entered promiscuous mode [ 1510.637696][T28309] syzkaller1: entered allmulticast mode [ 1510.741844][T28321] __nla_validate_parse: 8 callbacks suppressed [ 1510.741864][T28321] netlink: 56 bytes leftover after parsing attributes in process `syz.1.14932'. [ 1510.866604][T28332] x_tables: duplicate underflow at hook 1 [ 1511.070081][T28337] netlink: 184 bytes leftover after parsing attributes in process `syz.4.14934'. [ 1511.634132][T28370] netlink: zone id is out of range [ 1511.649790][T28370] netlink: del zone limit has 4 unknown bytes [ 1511.773238][T28374] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14944'. [ 1511.788765][T28374] netlink: 'syz.1.14944': attribute type 1 has an invalid length. [ 1511.880653][T28374] bond9: entered promiscuous mode [ 1511.886511][T28374] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1511.911812][T28374] bond9: (slave bridge6): making interface the new active one [ 1511.927083][T28374] bridge6: entered promiscuous mode [ 1511.948207][T28374] bond9: (slave bridge6): Enslaving as an active interface with an up link [ 1512.150383][T28395] xt_recent: hitcount (4294901760) is larger than allowed maximum (65535) [ 1512.169013][T28397] netlink: 52 bytes leftover after parsing attributes in process `syz.3.14952'. [ 1512.209623][T28395] netlink: 4 bytes leftover after parsing attributes in process `syz.2.14951'. [ 1512.318405][T28404] netlink: 20 bytes leftover after parsing attributes in process `syz.4.14953'. [ 1514.327417][T28427] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 1514.333535][T28427] syzkaller1: linktype set to 823 [ 1514.405661][T28432] netlink: 16 bytes leftover after parsing attributes in process `syz.4.14958'. [ 1514.718911][T28454] netlink: 'syz.3.14964': attribute type 1 has an invalid length. [ 1514.744845][T28454] netlink: 224 bytes leftover after parsing attributes in process `syz.3.14964'. [ 1514.919262][T28465] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1515.873590][T28530] netlink: 'syz.1.14986': attribute type 1 has an invalid length. [ 1516.306689][T28535] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14988'. [ 1516.323634][T28539] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14989'. [ 1516.526428][T28552] sctp: [Deprecated]: syz.2.14992 (pid 28552) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1516.526428][T28552] Use struct sctp_sack_info instead [ 1516.720096][T28560] netlink: 12 bytes leftover after parsing attributes in process `syz.4.14994'. [ 1516.793865][T28565] netlink: 4 bytes leftover after parsing attributes in process `syz.1.14995'. [ 1516.943911][T28565] hsr_slave_0 (unregistering): left promiscuous mode [ 1517.005341][T28563] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 1517.014122][T28563] syzkaller1: linktype set to 823 [ 1517.158520][ T9432] syzkaller1: tun_net_xmit 90 [ 1517.487297][T28597] netlink: 4 bytes leftover after parsing attributes in process `syz.3.15004'. [ 1517.632857][T28600] netlink: 136 bytes leftover after parsing attributes in process `syz.3.15007'. [ 1517.744358][T28604] syzkaller1: entered promiscuous mode [ 1517.761908][T28604] syzkaller1: entered allmulticast mode [ 1517.778362][T28607] siw: device registration error -23 [ 1517.784797][T28604] netlink: 24 bytes leftover after parsing attributes in process `syz.3.15008'. [ 1518.814330][T28655] netlink: 'syz.3.15025': attribute type 1 has an invalid length. [ 1518.873140][T28655] 8021q: adding VLAN 0 to HW filter on device bond12 [ 1518.881882][T28660] netlink: 8 bytes leftover after parsing attributes in process `syz.3.15025'. [ 1518.903956][T28660] netlink: 4 bytes leftover after parsing attributes in process `syz.3.15025'. [ 1518.935879][T28655] netlink: 8 bytes leftover after parsing attributes in process `syz.3.15025'. [ 1519.006531][T28655] veth7: entered promiscuous mode [ 1519.584408][T28707] syzkaller1: entered promiscuous mode [ 1519.602701][T28707] syzkaller1: entered allmulticast mode [ 1519.704266][T28718] wlan0 speed is unknown, defaulting to 1000 [ 1520.012434][T28731] tipc: Enabled bearer , priority 0 [ 1520.036625][T28731] syzkaller0: entered promiscuous mode [ 1520.063327][T28731] syzkaller0: entered allmulticast mode [ 1520.154931][T28731] tipc: Resetting bearer [ 1520.286877][T28731] tipc: Resetting bearer [ 1520.349053][T28731] tipc: Disabling bearer [ 1520.621951][T28779] netlink: 'syz.1.15057': attribute type 21 has an invalid length. [ 1520.630886][T28779] netlink: 'syz.1.15057': attribute type 1 has an invalid length. [ 1520.739055][T28787] ip6tnl0: Caught tx_queue_len zero misconfig [ 1520.839956][T28788] delete_channel: no stack [ 1521.106005][T28815] syzkaller1: entered allmulticast mode [ 1521.490670][T28839] __nla_validate_parse: 12 callbacks suppressed [ 1521.490692][T28839] netlink: 40 bytes leftover after parsing attributes in process `syz.4.15073'. [ 1521.605545][T28844] tipc: Enabled bearer , priority 0 [ 1521.615702][T28845] syzkaller0: entered promiscuous mode [ 1521.624618][T28845] syzkaller0: entered allmulticast mode [ 1521.662393][T28845] tipc: Resetting bearer [ 1521.670304][T28849] netlink: 'syz.2.15077': attribute type 32 has an invalid length. [ 1521.689097][T28849] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15077'. [ 1521.800299][T28845] tipc: Disabling bearer [ 1521.873571][T28849] bond6: option coupled_control: invalid value (2) [ 1521.911037][T28849] bond6 (unregistering): Released all slaves [ 1522.012962][T28869] netlink: 12 bytes leftover after parsing attributes in process `syz.4.15081'. [ 1522.044182][T28873] netlink: 12 bytes leftover after parsing attributes in process `syz.4.15081'. [ 1522.308475][T28892] netem: change failed [ 1522.488043][T28907] lo speed is unknown, defaulting to 1000 [ 1522.496003][T28907] lo speed is unknown, defaulting to 1000 [ 1522.503973][T28907] lo speed is unknown, defaulting to 1000 [ 1522.603393][T28912] netlink: 'syz.1.15094': attribute type 1 has an invalid length. [ 1522.623533][T28912] netlink: 'syz.1.15094': attribute type 2 has an invalid length. [ 1523.003442][T28907] infiniband syz2: set down [ 1523.009642][ T9432] lo speed is unknown, defaulting to 1000 [ 1523.027842][T28907] infiniband syz2: added lo [ 1523.089374][T28907] RDS/IB: syz2: added [ 1523.096633][T28907] smc: adding ib device syz2 with port count 1 [ 1523.131747][T28907] smc: ib device syz2 port 1 has no pnetid [ 1523.163803][T30243] lo speed is unknown, defaulting to 1000 [ 1523.199068][T28907] lo speed is unknown, defaulting to 1000 [ 1523.440605][T28946] netlink: 'syz.2.15100': attribute type 4 has an invalid length. [ 1523.589689][T28951] netlink: 8 bytes leftover after parsing attributes in process `syz.1.15101'. [ 1523.632049][T28951] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1523.666665][T28951] vlan1: entered allmulticast mode [ 1523.681914][T28951] bond10: entered allmulticast mode [ 1523.755112][T28907] lo speed is unknown, defaulting to 1000 [ 1524.197151][T28907] lo speed is unknown, defaulting to 1000 [ 1524.465457][T28996] netlink: 8 bytes leftover after parsing attributes in process `syz.3.15112'. [ 1524.576857][T29001] netlink: 40 bytes leftover after parsing attributes in process `syz.1.15114'. [ 1524.688206][T28907] lo speed is unknown, defaulting to 1000 [ 1525.456020][T28907] lo speed is unknown, defaulting to 1000 [ 1525.573783][T29017] netlink: 4 bytes leftover after parsing attributes in process `syz.1.15119'. [ 1525.583567][T29017] netlink: 'syz.1.15119': attribute type 8 has an invalid length. [ 1525.670173][T29019] openvswitch: netlink: Flow key attr not present in new flow. [ 1525.774680][T29024] veth1_to_batadv: entered promiscuous mode [ 1525.783483][T29024] macvtap1: entered allmulticast mode [ 1525.789523][T29024] veth1_to_batadv: entered allmulticast mode [ 1525.930239][T29026] openvswitch: netlink: Message has 4 unknown bytes. [ 1525.995762][T28907] lo speed is unknown, defaulting to 1000 [ 1526.104249][T29029] netlink: 28 bytes leftover after parsing attributes in process `syz.2.15125'. [ 1526.529436][T28907] lo speed is unknown, defaulting to 1000 [ 1526.581628][T29055] netlink: 7060 bytes leftover after parsing attributes in process `syz.1.15129'. [ 1526.690941][T29029] syzkaller0: entered promiscuous mode [ 1526.697115][T29029] syzkaller0: entered allmulticast mode [ 1526.922241][T29067] netlink: 'syz.1.15131': attribute type 1 has an invalid length. [ 1527.040175][T29067] 8021q: adding VLAN 0 to HW filter on device bond11 [ 1527.094332][T29070] vlan1: entered allmulticast mode [ 1527.101533][T29070] bond11: entered allmulticast mode [ 1527.108410][T28907] lo speed is unknown, defaulting to 1000 [ 1527.146989][T29067] bond11: (slave gretap3): making interface the new active one [ 1527.177794][T29067] gretap3: entered allmulticast mode [ 1527.191314][T29067] bond11: (slave gretap3): Enslaving as an active interface with an up link [ 1527.221257][T29077] netlink: 24 bytes leftover after parsing attributes in process `syz.2.15132'. [ 1527.451939][T29087] team0: Device ip6gre2 is of different type [ 1527.522662][T29091] netlink: 'syz.2.15135': attribute type 1 has an invalid length. [ 1527.550346][T29088] team0: Device ip6gre2 is of different type [ 1527.736531][T29093] bond6: (slave geneve3): making interface the new active one [ 1527.746622][T29093] bond6: (slave geneve3): Enslaving as an active interface with an up link [ 1527.756038][T28907] lo speed is unknown, defaulting to 1000 [ 1527.756067][T21179] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 1527.823286][T21179] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 1527.844101][T29101] netlink: 24 bytes leftover after parsing attributes in process `syz.3.15137'. [ 1527.880938][T21179] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 1527.946012][T29105] netlink: 24 bytes leftover after parsing attributes in process `syz.2.15138'. [ 1527.985338][T21179] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 1528.006589][T29105] bond0: Removing last arp target with arp_interval on [ 1528.038491][T31649] syz_tun: tun_net_xmit 90 [ 1528.217721][T30243] syz_tun: tun_net_xmit 90 [ 1528.278294][T29116] netlink: 'syz.3.15140': attribute type 33 has an invalid length. [ 1528.286491][T29116] netlink: 152 bytes leftover after parsing attributes in process `syz.3.15140'. [ 1528.308787][T29116] netlink: 4 bytes leftover after parsing attributes in process `syz.3.15140'. [ 1528.478175][T29116] team0: Port device dummy0 removed [ 1528.520450][T28907] lo speed is unknown, defaulting to 1000 [ 1528.715293][T29133] netlink: 8 bytes leftover after parsing attributes in process `syz.1.15144'. [ 1528.763832][T29133] bridge0: port 1(batadv1) entered blocking state [ 1528.781863][T29133] bridge0: port 1(batadv1) entered disabled state [ 1528.794924][T29133] batadv1: entered allmulticast mode [ 1528.812385][T29133] batadv1: entered promiscuous mode [ 1528.843445][T29134] netlink: 4 bytes leftover after parsing attributes in process `syz.3.15145'. [ 1528.878246][T29134] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1529.102705][T29134] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1529.169730][T29142] netlink: 196 bytes leftover after parsing attributes in process `syz.2.15146'. [ 1529.181882][T29142] netlink: 196 bytes leftover after parsing attributes in process `syz.2.15146'. [ 1529.199484][T28907] lo speed is unknown, defaulting to 1000 [ 1529.257590][T12169] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 1529.266917][T12169] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 1529.379713][T29155] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1529.561547][T29163] delete_channel: no stack [ 1529.653226][T28907] lo speed is unknown, defaulting to 1000 [ 1529.695501][T29173] xt_hashlimit: max too large, truncated to 1048576 [ 1529.726494][T29166] bond12: entered promiscuous mode [ 1529.750711][T29166] bond12: entered allmulticast mode [ 1529.756536][T29166] 8021q: adding VLAN 0 to HW filter on device bond12 [ 1530.429254][T29196] netlink: 'syz.4.15162': attribute type 21 has an invalid length. [ 1530.582597][T29204] ip6t_srh: unknown srh match flags 5F28 [ 1531.122596][T29222] netlink: 'syz.3.15170': attribute type 39 has an invalid length. [ 1531.437297][T29234] netlink: 'syz.3.15173': attribute type 20 has an invalid length. [ 1531.450504][T29234] IPv6: NLM_F_CREATE should be specified when creating new route [ 1531.465384][T29234] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1531.479083][T29235] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1531.515207][T29237] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1531.641910][T29243] __nla_validate_parse: 12 callbacks suppressed [ 1531.641931][T29243] netlink: 64 bytes leftover after parsing attributes in process `syz.4.15176'. [ 1531.776955][T29247] netlink: 16215 bytes leftover after parsing attributes in process `syz.3.15178'. [ 1531.846171][T29250] netlink: 'syz.4.15180': attribute type 1 has an invalid length. [ 1531.881193][T29250] bond9: entered promiscuous mode [ 1531.886801][T29250] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1531.897801][T29250] netlink: 12 bytes leftover after parsing attributes in process `syz.4.15180'. [ 1531.906995][T29250] netlink: 12 bytes leftover after parsing attributes in process `syz.4.15180'. [ 1532.004587][T29261] netlink: 'syz.4.15184': attribute type 18 has an invalid length. [ 1532.019365][T29260] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 1532.096588][T29271] netlink: 28 bytes leftover after parsing attributes in process `syz.1.15185'. [ 1532.128010][T29272] netlink: 12 bytes leftover after parsing attributes in process `syz.4.15186'. [ 1532.217003][T29272] bridge6: port 1(veth13) entered blocking state [ 1532.227727][T29272] bridge6: port 1(veth13) entered disabled state [ 1532.236203][T29277] netlink: 'syz.3.15188': attribute type 1 has an invalid length. [ 1532.245939][T29272] veth13: entered allmulticast mode [ 1532.255160][T29272] veth13: entered promiscuous mode [ 1532.288281][T29277] 8021q: adding VLAN 0 to HW filter on device bond13 [ 1532.315106][T29279] bond5: (slave veth0_to_bond): Releasing active interface [ 1532.324625][T29279] bridge6: port 2(veth0_to_bond) entered blocking state [ 1532.333105][T29286] netlink: 24 bytes leftover after parsing attributes in process `syz.1.15189'. [ 1532.343595][T29279] bridge6: port 2(veth0_to_bond) entered disabled state [ 1532.351261][T29279] veth0_to_bond: entered allmulticast mode [ 1532.359277][T29279] veth0_to_bond: entered promiscuous mode [ 1532.855315][T29324] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1532.897546][T29324] netlink: 32 bytes leftover after parsing attributes in process `syz.2.15200'. [ 1532.910433][T29317] syzkaller0: entered promiscuous mode [ 1532.916027][T29317] syzkaller0: entered allmulticast mode [ 1533.471273][T29347] netlink: 28 bytes leftover after parsing attributes in process `syz.1.15205'. [ 1533.482367][T29351] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_team, syncid = 4, id = 0 [ 1533.501153][T29347] netlink: 56 bytes leftover after parsing attributes in process `syz.1.15205'. [ 1533.587760][T29347] block nbd6: server does not support multiple connections per device. [ 1533.596634][T29347] block nbd6: shutting down sockets [ 1533.854311][T29367] bond0: (slave gre0): Error: Device type is different from other slaves [ 1533.871190][T29367] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1534.056520][T29376] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1534.076730][T29379] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1534.406218][T29392] syzkaller0: entered promiscuous mode [ 1534.412630][T29392] syzkaller0: entered allmulticast mode [ 1534.610553][ T9432] syz_tun: tun_net_xmit 90 [ 1535.118262][T29420] x_tables: unsorted underflow at hook 4 [ 1535.461598][ T9432] syz_tun: tun_net_xmit 90 [ 1535.676459][T29462] syzkaller0: entered promiscuous mode [ 1535.682204][T29462] syzkaller0: entered allmulticast mode [ 1536.065790][T29478] netlink: 'syz.2.15245': attribute type 11 has an invalid length. [ 1536.497010][T29493] Cannot find map_set index 33 as target [ 1538.416108][T29512] __nla_validate_parse: 6 callbacks suppressed [ 1538.416129][T29512] netlink: 24 bytes leftover after parsing attributes in process `syz.3.15253'. [ 1538.450784][T29515] netlink: 4 bytes leftover after parsing attributes in process `syz.1.15255'. [ 1539.210951][ T5849] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1539.221486][ T5849] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1539.230931][ T5849] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1539.240277][ T5849] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1539.249763][ T5849] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1539.300657][T29563] netlink: 'syz.1.15266': attribute type 3 has an invalid length. [ 1539.308972][T29563] netlink: 244 bytes leftover after parsing attributes in process `syz.1.15266'. [ 1539.361973][T29559] wlan0 speed is unknown, defaulting to 1000 [ 1539.371948][T29559] lo speed is unknown, defaulting to 1000 [ 1539.519624][T29572] IPv6: NLM_F_CREATE should be specified when creating new route [ 1539.529200][T29572] netlink: 12 bytes leftover after parsing attributes in process `syz.3.15268'. [ 1539.613369][T29574] netlink: 4 bytes leftover after parsing attributes in process `syz.1.15270'. [ 1539.678120][T29581] netlink: 'syz.2.15271': attribute type 7 has an invalid length. [ 1540.020151][T29596] syzkaller1: entered promiscuous mode [ 1540.025694][T29596] syzkaller1: entered allmulticast mode [ 1540.056783][T29596] netlink: 284 bytes leftover after parsing attributes in process `syz.4.15276'. [ 1540.109459][T29602] ipt_REJECT: TCP_RESET invalid for non-tcp [ 1540.442476][ T566] lec:lec_start_xmit: lec0:No lecd attached [ 1541.071044][T29608] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 1541.119636][T29614] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1541.152861][T29614] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1541.299455][T31756] Bluetooth: hci2: command tx timeout [ 1541.890819][T29614] veth1_to_batadv: left allmulticast mode [ 1541.987613][ T36] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1542.021828][ T36] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1542.046601][ T36] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1542.071923][ T36] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1542.089929][T29559] chnl_net:caif_netlink_parms(): no params data found [ 1542.108201][ T36] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1542.117973][ T36] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1542.135775][ T36] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1542.154052][ T36] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1542.181381][T29639] netlink: 3648 bytes leftover after parsing attributes in process `syz.3.15286'. [ 1542.192005][T29639] netlink: 3648 bytes leftover after parsing attributes in process `syz.3.15286'. [ 1542.216188][T29639] netlink: 596 bytes leftover after parsing attributes in process `syz.3.15286'. [ 1542.257840][T31756] Bluetooth: hci0: command 0x0405 tx timeout [ 1542.446730][T29559] bridge0: port 1(bridge_slave_0) entered blocking state [ 1542.460507][T29559] bridge0: port 1(bridge_slave_0) entered disabled state [ 1542.469259][T29559] bridge_slave_0: entered allmulticast mode [ 1542.478086][T29559] bridge_slave_0: entered promiscuous mode [ 1542.505132][T29559] bridge0: port 2(bridge_slave_1) entered blocking state [ 1542.523293][T29559] bridge0: port 2(bridge_slave_1) entered disabled state [ 1542.534704][T29559] bridge_slave_1: entered allmulticast mode [ 1542.543875][T29559] bridge_slave_1: entered promiscuous mode [ 1542.636693][T29559] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1542.666005][T29559] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1542.694088][T29667] sctp: [Deprecated]: syz.1.15295 (pid 29667) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1542.694088][T29667] Use struct sctp_sack_info instead [ 1542.771296][T29559] team0: Port device team_slave_0 added [ 1542.792332][T29559] team0: Port device team_slave_1 added [ 1542.888263][T29559] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1542.895717][T29559] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1542.943429][T29559] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1542.960841][T29559] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1542.968659][T29559] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1543.000009][T29559] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1543.002332][T29678] netlink: 24 bytes leftover after parsing attributes in process `syz.3.15300'. [ 1543.180165][T29559] hsr_slave_0: entered promiscuous mode [ 1543.189478][T29559] hsr_slave_1: entered promiscuous mode [ 1543.196169][T29559] debugfs: 'hsr0' already exists in 'hsr' [ 1543.203753][T29559] Cannot create hsr debugfs directory [ 1543.272391][T29695] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1543.279765][T29695] IPv6: NLM_F_CREATE should be set when creating new route [ 1543.287039][T29695] IPv6: NLM_F_CREATE should be set when creating new route [ 1543.314260][T15266] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 1543.314458][T29690] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1543.329257][T29695] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1543.380399][T29691] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1543.382179][T31756] Bluetooth: hci2: command tx timeout [ 1543.793291][T29721] __nla_validate_parse: 2 callbacks suppressed [ 1543.793313][T29721] netlink: 12 bytes leftover after parsing attributes in process `syz.2.15308'. [ 1543.814488][T29716] netlink: 104 bytes leftover after parsing attributes in process `syz.2.15308'. [ 1543.829679][T29720] netlink: 8 bytes leftover after parsing attributes in process `syz.1.15310'. [ 1544.097061][T29742] netlink: 64 bytes leftover after parsing attributes in process `syz.4.15314'. [ 1544.334409][T29756] netlink: 'syz.4.15319': attribute type 1 has an invalid length. [ 1544.416049][T29756] bond10: entered promiscuous mode [ 1544.422118][T29756] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1544.462080][T29756] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 1544.486403][T29772] syzkaller0: entered promiscuous mode [ 1544.503421][T29772] syzkaller0: entered allmulticast mode [ 1544.566970][T29776] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15324'. [ 1544.690357][T29785] syzkaller1: entered promiscuous mode [ 1544.718013][T29785] syzkaller1: entered allmulticast mode [ 1544.816270][T29792] netlink: 72 bytes leftover after parsing attributes in process `syz.2.15328'. [ 1544.893539][T29798] set match dimension is over the limit! [ 1545.329921][T29822] xt_hashlimit: overflow, rate too high: 0 [ 1545.468326][T31756] Bluetooth: hci2: command tx timeout [ 1545.646174][T29846] netlink: 104 bytes leftover after parsing attributes in process `syz.1.15346'. [ 1545.699965][T29846] bridge9: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 1545.777490][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5330 ms [ 1545.785594][ C1] lec:lec_tx_timeout: lec0 [ 1545.855077][T29854] IPVS: Unknown mcast interface: vcan0 [ 1545.869763][ T1303] clip:clip_start_xmit: skb_dst(skb) == NULL [ 1545.875877][ T1303] lec:lec_start_xmit: lec0:No lecd attached [ 1545.932621][T29858] netlink: 24 bytes leftover after parsing attributes in process `syz.2.15349'. [ 1545.943051][T29858] netlink: 24 bytes leftover after parsing attributes in process `syz.2.15349'. [ 1545.977913][T29859] batadv0: Caught tx_queue_len zero misconfig [ 1546.145768][T29873] sit4: entered promiscuous mode [ 1546.154627][T29873] sit4: entered allmulticast mode [ 1546.236557][T29877] netlink: 'syz.3.15357': attribute type 2 has an invalid length. [ 1546.247267][T29877] netlink: 'syz.3.15357': attribute type 1 has an invalid length. [ 1546.256374][T29877] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1546.467076][T29892] netlink: 68 bytes leftover after parsing attributes in process `syz.4.15362'. [ 1546.833458][T29914] netlink: 'syz.3.15369': attribute type 10 has an invalid length. [ 1546.852384][T29914] bridge_slave_1: left allmulticast mode [ 1546.858677][T29914] bridge_slave_1: left promiscuous mode [ 1546.872417][T29914] bridge0: port 2(bridge_slave_1) entered disabled state [ 1547.208733][T29924] netlink: 'syz.1.15373': attribute type 13 has an invalid length. [ 1547.216854][T29924] macvtap0: entered allmulticast mode [ 1547.226069][T29924] macvtap0: refused to change device tx_queue_len [ 1547.259386][T29935] netlink: 'syz.3.15374': attribute type 12 has an invalid length. [ 1547.268586][T29935] netlink: 'syz.3.15374': attribute type 29 has an invalid length. [ 1547.276960][T29935] netlink: 'syz.3.15374': attribute type 2 has an invalid length. [ 1547.391550][T29943] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1547.539936][T31756] Bluetooth: hci2: command tx timeout [ 1547.864826][T29978] openvswitch: netlink: IP tunnel attribute has 1026 unknown bytes. [ 1547.926111][T29978] syzkaller0: entered promiscuous mode [ 1547.932459][T29978] syzkaller0: entered allmulticast mode [ 1547.980936][T29981] bond7 (unregistering): Released all slaves [ 1548.059106][T29983] ip6tnl0: Caught tx_queue_len zero misconfig [ 1548.256434][T29997] tipc: Enabled bearer , priority 0 [ 1548.349636][T30004] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 1548.392944][T29997] syzkaller0: entered promiscuous mode [ 1548.400140][T29997] syzkaller0: entered allmulticast mode [ 1548.406622][T29997] tipc: Resetting bearer [ 1548.418917][T30003] team_slave_0: Caught tx_queue_len zero misconfig [ 1548.430511][T29996] tipc: Resetting bearer [ 1550.280913][T29996] tipc: Disabling bearer [ 1550.291256][T30010] batadv_slave_0: Caught tx_queue_len zero misconfig [ 1550.410641][T30021] __nla_validate_parse: 16 callbacks suppressed [ 1550.410662][T30021] netlink: 16 bytes leftover after parsing attributes in process `syz.1.15398'. [ 1550.428390][T30021] netlink: 'syz.1.15398': attribute type 29 has an invalid length. [ 1550.436353][T30021] netlink: 4 bytes leftover after parsing attributes in process `syz.1.15398'. [ 1550.451638][T30022] netlink: 'syz.3.15397': attribute type 1 has an invalid length. [ 1550.516186][T30026] bond14: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1550.530021][T30026] bond14: (slave ipvlan0): The slave device specified does not support setting the MAC address [ 1550.540502][T30026] bond14: (slave ipvlan0): Setting fail_over_mac to active for active-backup mode [ 1550.563923][T30022] netlink: 4 bytes leftover after parsing attributes in process `syz.3.15397'. [ 1550.673071][T30033] netlink: 'syz.2.15402': attribute type 1 has an invalid length. [ 1550.725648][T30033] bond7 (unregistering): Released all slaves [ 1550.801880][T30033] netlink: 28 bytes leftover after parsing attributes in process `syz.2.15402'. [ 1550.888147][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 1550.896245][ C1] lec:lec_tx_timeout: lec0 [ 1550.932865][T30049] netlink: 'syz.2.15407': attribute type 25 has an invalid length. [ 1550.946407][T30047] netlink: 8 bytes leftover after parsing attributes in process `syz.4.15405'. [ 1550.961842][T30047] netlink: 8 bytes leftover after parsing attributes in process `syz.4.15405'. [ 1551.017852][T30052] netlink: 'syz.3.15408': attribute type 21 has an invalid length. [ 1551.090886][T30058] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15410'. [ 1551.360340][T30076] netlink: 11 bytes leftover after parsing attributes in process `syz.3.15417'. [ 1551.370699][T30076] netlink: 11 bytes leftover after parsing attributes in process `syz.3.15417'. [ 1551.399655][T30076] netlink: 12 bytes leftover after parsing attributes in process `syz.3.15417'. [ 1551.782142][T30111] syzkaller1: entered promiscuous mode [ 1551.790700][T30111] syzkaller1: entered allmulticast mode [ 1551.991552][T30124] bridge0: entered allmulticast mode [ 1552.068061][T30127] ipvlan1: left promiscuous mode [ 1552.148774][T30133] netlink: 'syz.1.15432': attribute type 4 has an invalid length. [ 1552.310222][T30140] netlink: 'syz.2.15435': attribute type 10 has an invalid length. [ 1552.322993][T30140] team0: Port device geneve0 added [ 1553.137277][T30169] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1553.227237][T30177] syz_tun: entered promiscuous mode [ 1553.233057][T30177] geneve0: entered promiscuous mode [ 1553.251898][T30177] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 1553.352534][T30177] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 1553.530292][T30192] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1553.536212][T30196] sctp: [Deprecated]: syz.3.15452 (pid 30196) Use of int in maxseg socket option. [ 1553.536212][T30196] Use struct sctp_assoc_value instead [ 1553.555452][T30192] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1553.814781][T30213] netlink: 'syz.4.15458': attribute type 1 has an invalid length. [ 1553.890667][T30213] 8021q: adding VLAN 0 to HW filter on device bond11 [ 1553.899968][T30213] netlink: 'syz.4.15458': attribute type 1 has an invalid length. [ 1553.908789][T30213] netlink: 'syz.4.15458': attribute type 1 has an invalid length. [ 1553.918786][T30217] bond0: Caught tx_queue_len zero misconfig [ 1554.116288][T30219] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 1554.224947][T30232] macvtap0: entered allmulticast mode [ 1554.248145][T30232] macvtap0: refused to change device tx_queue_len [ 1554.548613][T30256] openvswitch: netlink: Flow actions attr not present in new flow. [ 1554.572758][T30258] tipc: New replicast peer: 255.255.255.255 [ 1554.580649][T30258] tipc: Enabled bearer , priority 10 [ 1554.890089][T30277] vlan2: entered promiscuous mode [ 1554.895440][T30277] batadv0: entered promiscuous mode [ 1555.250281][T30305] nbd: must specify at least one socket [ 1555.646855][T30329] __nla_validate_parse: 122 callbacks suppressed [ 1555.646876][T30329] netlink: 12 bytes leftover after parsing attributes in process `syz.3.15486'. [ 1555.683895][T30329] netlink: 12 bytes leftover after parsing attributes in process `syz.3.15486'. [ 1556.016398][T30349] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1556.149662][T30357] netlink: 16 bytes leftover after parsing attributes in process `syz.2.15496'. [ 1556.212816][T30357] bond8: entered promiscuous mode [ 1556.218184][T30357] bond8: entered allmulticast mode [ 1556.223983][T30357] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1556.269971][T30362] validate_nla: 36 callbacks suppressed [ 1556.269992][T30362] netlink: 'syz.1.15497': attribute type 3 has an invalid length. [ 1556.328234][T30362] netlink: 766 bytes leftover after parsing attributes in process `syz.1.15497'. [ 1556.348939][T30369] netlink: 12 bytes leftover after parsing attributes in process `syz.4.15501'. [ 1556.379251][T30366] netlink: 28 bytes leftover after parsing attributes in process `syz.3.15499'. [ 1556.388514][T30366] netlink: 'syz.3.15499': attribute type 7 has an invalid length. [ 1556.396618][T30366] netlink: 'syz.3.15499': attribute type 8 has an invalid length. [ 1556.409977][T30366] netlink: 4 bytes leftover after parsing attributes in process `syz.3.15499'. [ 1556.499466][T30372] netlink: 132 bytes leftover after parsing attributes in process `syz.2.15502'. [ 1556.530447][T30372] netlink: 'syz.2.15502': attribute type 1 has an invalid length. [ 1556.546103][T30375] macvtap0: Device is already in use. [ 1556.758283][T30384] lo: Caught tx_queue_len zero misconfig [ 1556.764808][T30385] netlink: 28 bytes leftover after parsing attributes in process `syz.3.15509'. [ 1557.199652][T30405] lo: Caught tx_queue_len zero misconfig [ 1557.206424][T30407] netlink: 28 bytes leftover after parsing attributes in process `syz.1.15512'. [ 1557.358444][T30414] netlink: 'syz.2.15514': attribute type 11 has an invalid length. [ 1557.405267][T30414] netlink: 'syz.2.15514': attribute type 30 has an invalid length. [ 1557.546923][T30422] netlink: 'syz.3.15518': attribute type 61 has an invalid length. [ 1558.402728][T30479] ksmbd: Unknown IPC event: 3, ignore. [ 1558.448485][T30484] ip6gre0: Caught tx_queue_len zero misconfig [ 1558.515682][T30486] SET target dimension over the limit! [ 1558.841185][T30507] netlink: 'syz.4.15543': attribute type 1 has an invalid length. [ 1558.885011][T30510] siw: device registration error -23 [ 1559.225546][T30533] netlink: 'syz.4.15549': attribute type 1 has an invalid length. [ 1559.241682][T30533] netlink: 'syz.4.15549': attribute type 4 has an invalid length. [ 1559.455215][T30550] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not filter [ 1559.559677][T30554] openvswitch: netlink: Multiple metadata blocks provided [ 1559.652269][T30562] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 1560.648211][T30576] sctp: [Deprecated]: syz.2.15565 (pid 30576) Use of int in maxseg socket option. [ 1560.648211][T30576] Use struct sctp_assoc_value instead [ 1560.702106][T30576] wlan0 speed is unknown, defaulting to 1000 [ 1560.712968][T30576] lo speed is unknown, defaulting to 1000 [ 1560.993423][T30591] __nla_validate_parse: 13 callbacks suppressed [ 1560.993445][T30591] netlink: 8 bytes leftover after parsing attributes in process `syz.3.15569'. [ 1561.291848][T30598] netlink: 12 bytes leftover after parsing attributes in process `syz.4.15571'. [ 1561.316465][T30598] bridge_slave_0: default FDB implementation only supports local addresses [ 1561.714016][T30635] netlink: 40 bytes leftover after parsing attributes in process `syz.4.15581'. [ 1561.754293][T30629] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1561.770463][T30637] netlink: 36 bytes leftover after parsing attributes in process `syz.1.15582'. [ 1561.880808][T30642] netlink: 8 bytes leftover after parsing attributes in process `syz.4.15583'. [ 1561.904257][T30642] netlink: 24 bytes leftover after parsing attributes in process `syz.4.15583'. [ 1562.175380][T30651] netlink: 4 bytes leftover after parsing attributes in process `syz.3.15588'. [ 1562.203141][T30651] macsec1: entered promiscuous mode [ 1562.208731][T30651] bridge0: entered promiscuous mode [ 1562.215182][T30651] macsec1: entered allmulticast mode [ 1562.221285][T30651] bridge0: entered allmulticast mode [ 1562.230769][T30651] bridge0: port 2(macsec1) entered blocking state [ 1562.238283][T30651] bridge0: port 2(macsec1) entered disabled state [ 1562.409869][T30651] bridge0: left allmulticast mode [ 1562.416220][T30651] bridge0: left promiscuous mode [ 1562.546503][T30668] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15592'. [ 1562.594582][T30668] tipc: Enabled bearer , priority 0 [ 1562.688241][T30672] netlink: 4 bytes leftover after parsing attributes in process `syz.3.15594'. [ 1562.700344][T30672] bond0 (unregistering): Released all slaves [ 1562.751297][T30674] netlink: 8 bytes leftover after parsing attributes in process `syz.4.15596'. [ 1563.181134][T26892] IPVS: starting estimator thread 0... [ 1563.200898][T30704] veth15: entered allmulticast mode [ 1563.287823][T30706] IPVS: using max 26 ests per chain, 62400 per kthread [ 1563.576136][T30727] nbd: illegal input index -8454144 [ 1563.617767][T31756] Bluetooth: hci2: command tx timeout [ 1563.896898][T30746] pim6reg: entered allmulticast mode [ 1563.981958][T30752] validate_nla: 5 callbacks suppressed [ 1563.981978][T30752] netlink: 'syz.4.15616': attribute type 2 has an invalid length. [ 1564.001127][T30750] bond13: Removing last arp target with arp_interval on [ 1564.009389][T30746] pim6reg: left allmulticast mode [ 1564.214561][T30766] tipc: Enabling of bearer rejected, failed to enable media [ 1564.443604][T30782] team0: No ports can be present during mode change [ 1564.692494][T30797] netlink: 'syz.3.15632': attribute type 12 has an invalid length. [ 1564.838057][T30805] tipc: Enabled bearer , priority 0 [ 1564.883187][T30798] tipc: Resetting bearer [ 1566.810012][T30798] tipc: Disabling bearer [ 1566.821102][T30808] gre0: entered promiscuous mode [ 1566.987247][T30818] x_tables: duplicate entry at hook 3 [ 1567.193862][T30829] __nla_validate_parse: 16 callbacks suppressed [ 1567.193886][T30829] netlink: 32 bytes leftover after parsing attributes in process `syz.2.15642'. [ 1567.234586][T30829] netlink: 148 bytes leftover after parsing attributes in process `syz.2.15642'. [ 1568.167126][T30854] netlink: 8 bytes leftover after parsing attributes in process `syz.4.15647'. [ 1568.179915][T30854] netlink: 12 bytes leftover after parsing attributes in process `syz.4.15647'. [ 1568.183197][T30856] netlink: 104 bytes leftover after parsing attributes in process `syz.2.15648'. [ 1568.194341][T30854] netlink: 8 bytes leftover after parsing attributes in process `syz.4.15647'. [ 1568.208821][T30854] netlink: 12 bytes leftover after parsing attributes in process `syz.4.15647'. [ 1568.353377][T30858] bond9: Unable to set up delay as MII monitoring is disabled [ 1568.363780][T30858] bond9 (unregistering): Released all slaves [ 1568.528855][T30870] netlink: 4 bytes leftover after parsing attributes in process `syz.4.15654'. [ 1568.760657][T30877] netlink: 7064 bytes leftover after parsing attributes in process `syz.1.15655'. [ 1568.786771][T30877] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 1568.831865][T30889] netlink: 'syz.4.15659': attribute type 13 has an invalid length. [ 1568.842427][T30889] erspan0: refused to change device tx_queue_len [ 1568.849581][T30889] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 1568.867989][T30889] x_tables: duplicate underflow at hook 2 [ 1568.912800][T30892] netlink: 4 bytes leftover after parsing attributes in process `syz.1.15661'. [ 1569.056494][T30899] veth11: entered allmulticast mode [ 1570.020808][T30925] openvswitch: netlink: Key type 281 is out of range max 32 [ 1570.442306][T30948] batadv_slave_0: entered promiscuous mode [ 1570.509662][T30951] netlink: 'syz.2.15681': attribute type 8 has an invalid length. [ 1570.594332][T30957] netlink: 'syz.3.15682': attribute type 12 has an invalid length. [ 1570.602606][T30957] netlink: 'syz.3.15682': attribute type 11 has an invalid length. [ 1570.640073][T30947] batadv_slave_0: left promiscuous mode [ 1571.184115][T30995] tipc: New replicast peer: 255.255.255.255 [ 1571.196149][T30995] tipc: Enabled bearer , priority 10 [ 1571.761732][T31032] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1571.869908][T31040] netlink: 'syz.3.15710': attribute type 10 has an invalid length. [ 1571.908964][T31040] bridge0: port 2(team0) entered blocking state [ 1571.915374][T31040] bridge0: port 2(team0) entered disabled state [ 1571.940151][T31040] team0: entered allmulticast mode [ 1571.945524][T31040] team_slave_0: entered allmulticast mode [ 1571.952100][T31040] team_slave_1: entered allmulticast mode [ 1571.964930][T31040] team0: left allmulticast mode [ 1571.973758][T31040] team_slave_0: left allmulticast mode [ 1571.979831][T31040] team_slave_1: left allmulticast mode [ 1572.199194][T31058] __nla_validate_parse: 14 callbacks suppressed [ 1572.199215][T31058] netlink: 68 bytes leftover after parsing attributes in process `syz.1.15716'. [ 1572.595206][T31078] syzkaller0: entered promiscuous mode [ 1572.601252][T31078] syzkaller0: entered allmulticast mode [ 1572.681519][T31080] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1572.798589][T31080] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1572.943761][T31080] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1573.057221][T31098] netlink: 4 bytes leftover after parsing attributes in process `syz.1.15726'. [ 1573.069918][T31080] netdevsim netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1573.243875][ T718] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1573.292996][ T718] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1573.370129][ T718] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1573.418196][ T718] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1573.445873][T31118] veth0: Caught tx_queue_len zero misconfig [ 1573.532717][T31122] netlink: 8 bytes leftover after parsing attributes in process `syz.1.15733'. [ 1573.565854][T31126] netlink: 4 bytes leftover after parsing attributes in process `syz.3.15734'. [ 1573.780529][T31138] bond0: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 1573.839361][T31147] netlink: 'syz.1.15740': attribute type 2 has an invalid length. [ 1573.850668][T31147] netlink: 'syz.1.15740': attribute type 5 has an invalid length. [ 1574.164002][T31168] netlink: 'syz.2.15745': attribute type 5 has an invalid length. [ 1574.251414][T31172] netlink: 16 bytes leftover after parsing attributes in process `syz.3.15747'. [ 1574.495430][T31192] netlink: 68 bytes leftover after parsing attributes in process `syz.3.15754'. [ 1574.723344][T31208] netlink: 'syz.3.15759': attribute type 11 has an invalid length. [ 1574.735988][T31208] netlink: 'syz.3.15759': attribute type 11 has an invalid length. [ 1574.755540][T31210] netlink: 16 bytes leftover after parsing attributes in process `syz.2.15760'. [ 1574.769449][T31210] netlink: 16 bytes leftover after parsing attributes in process `syz.2.15760'. [ 1574.902846][T31214] netlink: 8 bytes leftover after parsing attributes in process `syz.3.15762'. [ 1575.051845][T31224] netlink: 12 bytes leftover after parsing attributes in process `syz.3.15764'. [ 1575.230180][T31232] netdevsim netdevsim2: Direct firmware load for .. failed with error -2 [ 1575.241366][T31232] netdevsim netdevsim2: Falling back to sysfs fallback for: .. [ 1575.391127][T31243] netlink: 'syz.1.15770': attribute type 8 has an invalid length. [ 1575.865227][T31276] netlink: 'syz.1.15781': attribute type 4 has an invalid length. [ 1576.040003][T31283] wlan0 speed is unknown, defaulting to 1000 [ 1576.050489][T31283] lo speed is unknown, defaulting to 1000 [ 1576.251196][T31295] IPv6: sit1: Disabled Multicast RS [ 1576.262375][T31295] sit1: entered allmulticast mode [ 1576.459782][T31305] syzkaller0: entered allmulticast mode [ 1576.510552][T31307] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1576.550503][T31307] netlink: 'syz.2.15789': attribute type 8 has an invalid length. [ 1577.431855][T31361] __nla_validate_parse: 5 callbacks suppressed [ 1577.431875][T31361] netlink: 16 bytes leftover after parsing attributes in process `syz.4.15805'. [ 1577.451754][T31363] netlink: 720 bytes leftover after parsing attributes in process `syz.2.15806'. [ 1577.623461][T31373] x_tables: ip_tables: CT.1 target: invalid size 72 (kernel) != (user) 4096 [ 1577.948827][T31395] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1578.696681][T31452] tunl0: Caught tx_queue_len zero misconfig [ 1578.742172][T31458] netlink: 'syz.1.15830': attribute type 10 has an invalid length. [ 1578.752499][T31447] netlink: 4 bytes leftover after parsing attributes in process `syz.3.15827'. [ 1578.826901][T31463] netlink: 28 bytes leftover after parsing attributes in process `syz.2.15832'. [ 1578.848304][T31463] geneve1: entered promiscuous mode [ 1578.929831][T31473] atomic_op ffff888081b25198 conn xmit_atomic 0000000000000000 [ 1579.044793][T31486] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 1579.055860][T31484] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 1579.758569][ T30] audit: type=1107 audit(1769412321.084:15): pid=31524 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='H >9"r ' [ 1579.993648][T31539] netlink: 666 bytes leftover after parsing attributes in process `syz.2.15856'. [ 1580.027077][T31545] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 1580.065062][T31539] veth11: entered allmulticast mode [ 1580.129991][T31551] netlink: 'syz.1.15858': attribute type 12 has an invalid length. [ 1580.149204][T31551] netlink: 28 bytes leftover after parsing attributes in process `syz.1.15858'. [ 1580.395938][T31570] netlink: 12 bytes leftover after parsing attributes in process `syz.1.15861'. [ 1580.472016][T31573] netlink: 28 bytes leftover after parsing attributes in process `syz.4.15864'. [ 1580.508588][T31573] netlink: 28 bytes leftover after parsing attributes in process `syz.4.15864'. [ 1580.595176][T31578] netlink: 'syz.1.15866': attribute type 1 has an invalid length. [ 1580.625921][T31581] netlink: 256 bytes leftover after parsing attributes in process `syz.2.15865'. [ 1580.636391][T31581] netlink: 'syz.2.15865': attribute type 9 has an invalid length. [ 1581.775278][T31613] sctp: [Deprecated]: syz.4.15877 (pid 31613) Use of int in maxseg socket option. [ 1581.775278][T31613] Use struct sctp_assoc_value instead [ 1582.065685][T31633] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1582.401109][T31655] netdevsim netdevsim4 : renamed from netdevsim0 [ 1582.540902][T31662] netlink: 'syz.1.15892': attribute type 10 has an invalid length. [ 1582.733264][T31674] __nla_validate_parse: 5 callbacks suppressed [ 1582.733287][T31674] netlink: 104 bytes leftover after parsing attributes in process `syz.3.15897'. [ 1582.734363][T31676] netlink: 4 bytes leftover after parsing attributes in process `syz.1.15898'. [ 1582.840414][T31682] bond14: entered allmulticast mode [ 1582.846089][T31682] 8021q: adding VLAN 0 to HW filter on device bond14 [ 1583.120306][T31695] netlink: 12 bytes leftover after parsing attributes in process `syz.1.15903'. [ 1583.438317][T31705] netlink: 20 bytes leftover after parsing attributes in process `syz.3.15906'. [ 1583.891284][T31721] netlink: 4 bytes leftover after parsing attributes in process `syz.1.15910'. [ 1585.303455][T31723] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 1585.314580][T31723] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1585.374045][T31725] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15914'. [ 1585.408005][T31725] netlink: 16 bytes leftover after parsing attributes in process `syz.2.15914'. [ 1585.456335][T31732] xt_socket: unknown flags 0x50 [ 1585.463206][T31732] netlink: 8 bytes leftover after parsing attributes in process `syz.4.15915'. [ 1585.474798][T31732] netlink: 24 bytes leftover after parsing attributes in process `syz.4.15915'. [ 1585.496393][T31735] netlink: 12 bytes leftover after parsing attributes in process `syz.3.15916'. [ 1586.029209][T31757] nbd: couldn't find a device at index 4 [ 1586.036191][T31757] xt_connbytes: Forcing CT accounting to be enabled [ 1586.459142][T31784] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 1586.544896][T31791] Bluetooth: MGMT ver 1.23 [ 1586.887059][T31815] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 1586.942641][T31822] ksmbd: Unknown IPC event: 3, ignore. [ 1586.950470][T31821] ksmbd: Unknown IPC event: 3, ignore. [ 1587.181104][T31834] netlink: 'syz.4.15947': attribute type 1 has an invalid length. [ 1587.308688][T31833] wlan0 speed is unknown, defaulting to 1000 [ 1587.319760][T31833] lo speed is unknown, defaulting to 1000 [ 1587.779837][T31857] __nla_validate_parse: 18 callbacks suppressed [ 1587.779868][T31857] netlink: 276 bytes leftover after parsing attributes in process `syz.4.15953'. [ 1587.933012][T31868] netlink: 'syz.4.15955': attribute type 1 has an invalid length. [ 1587.969824][T31868] netlink: 8 bytes leftover after parsing attributes in process `syz.4.15955'. [ 1588.010344][T31868] netlink: 4 bytes leftover after parsing attributes in process `syz.4.15955'. [ 1588.036259][T31868] netlink: 'syz.4.15955': attribute type 2 has an invalid length. [ 1588.052800][T31868] netlink: 'syz.4.15955': attribute type 2 has an invalid length. [ 1588.093380][T31868] netlink: 'syz.4.15955': attribute type 2 has an invalid length. [ 1588.342457][T31893] netlink: 72 bytes leftover after parsing attributes in process `syz.1.15962'. [ 1588.404799][T31890] can: request_module (can-proto-5) failed. [ 1588.467298][T31897] sctp: [Deprecated]: syz.1.15963 (pid 31897) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1588.467298][T31897] Use struct sctp_sack_info instead [ 1588.636634][T31904] netlink: 12 bytes leftover after parsing attributes in process `syz.1.15965'. [ 1588.767661][T31907] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 1589.705691][T31946] netlink: 4 bytes leftover after parsing attributes in process `syz.2.15975'. [ 1589.898517][T31954] netlink: 24 bytes leftover after parsing attributes in process `syz.1.15978'. [ 1590.086683][T31969] netlink: 'syz.2.15975': attribute type 1 has an invalid length. [ 1590.108627][T31969] netlink: 224 bytes leftover after parsing attributes in process `syz.2.15975'. [ 1590.509938][T31991] netlink: 12 bytes leftover after parsing attributes in process `syz.1.15987'. [ 1590.523595][T31991] tipc: New replicast peer: 255.255.255.255 [ 1590.536602][T31991] tipc: Enabled bearer , priority 10 [ 1590.729610][T32006] tipc: Trying to set illegal importance in message [ 1590.803654][T32011] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15992'. [ 1590.814565][T32011] Bluetooth: hci1: expected 19 bytes, got 2 bytes [ 1591.129940][T15264] bond0: (slave bond_slave_0): link status definitely down, disabling slave [ 1591.154304][T15264] bond0: (slave bond_slave_1): link status definitely down, disabling slave [ 1591.187076][T15264] bond0: (slave netdevsim0): link status definitely down, disabling slave [ 1591.255591][T12169] syz_tun: tun_net_xmit 90 [ 1591.306727][T31756] Bluetooth: hci0: command 0x0405 tx timeout [ 1592.685096][T32098] xt_policy: output policy not valid in PREROUTING and INPUT [ 1592.762510][T32104] IPVS: set_ctl: invalid protocol: 98 172.20.20.43:20002 [ 1593.271741][T32128] __nla_validate_parse: 10 callbacks suppressed [ 1593.271759][T32128] netlink: 4 bytes leftover after parsing attributes in process `syz.3.16028'. [ 1593.291676][T32133] netlink: 8 bytes leftover after parsing attributes in process `syz.1.16029'. [ 1593.328141][T32128] netlink: 4 bytes leftover after parsing attributes in process `syz.3.16028'. [ 1593.868135][ T5849] Bluetooth: hci2: command 0x0405 tx timeout [ 1593.899764][T32162] netlink: 'syz.4.16038': attribute type 30 has an invalid length. [ 1593.934316][T32165] netlink: 8 bytes leftover after parsing attributes in process `syz.1.16037'. [ 1594.019040][ T5849] Bluetooth: hci5: command 0x0405 tx timeout [ 1594.077538][T32174] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1594.181705][T32177] bond7: option mode: unable to set because the bond device has slaves [ 1594.195600][T32177] bond7: (slave netdevsim0): Enslaving as an active interface with a down link [ 1594.293096][T32186] netlink: 'syz.3.16046': attribute type 9 has an invalid length. [ 1594.311276][T32186] netlink: 'syz.3.16046': attribute type 39 has an invalid length. [ 1594.453041][T32200] netlink: 64 bytes leftover after parsing attributes in process `syz.2.16047'. [ 1594.463054][T32200] netlink: 36 bytes leftover after parsing attributes in process `syz.2.16047'. [ 1594.719773][T32210] netlink: 4 bytes leftover after parsing attributes in process `syz.1.16054'. [ 1594.730097][T32210] netlink: 4 bytes leftover after parsing attributes in process `syz.1.16054'. [ 1594.926985][T32230] IPVS: set_ctl: invalid protocol: 47 172.20.20.50:20002 [ 1594.999808][T32233] tipc: Enabled bearer , priority 0 [ 1595.021690][T32233] syzkaller0: entered promiscuous mode [ 1595.027695][T32233] syzkaller0: entered allmulticast mode [ 1595.043640][T32233] netem: change failed [ 1595.059424][T32233] tipc: Resetting bearer [ 1595.068889][T32232] tipc: Resetting bearer [ 1595.117132][T32232] tipc: Disabling bearer [ 1595.788989][T32256] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.16064'. [ 1595.849939][T32265] netlink: 'syz.1.16066': attribute type 16 has an invalid length. [ 1595.858427][T32265] netlink: 20 bytes leftover after parsing attributes in process `syz.1.16066'. [ 1596.084578][T32271] netlink: 'syz.2.16068': attribute type 1 has an invalid length. [ 1596.134883][T32271] 8021q: adding VLAN 0 to HW filter on device bond11 [ 1596.184875][T32271] veth13: entered promiscuous mode [ 1596.213040][T32271] bond11: (slave veth13): Enslaving as an active interface with a down link [ 1596.256595][T32278] vlan2: entered allmulticast mode [ 1596.277624][T32278] bond11: entered allmulticast mode [ 1596.291403][T32278] bond11: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 1596.721967][T32294] tipc: Enabling of bearer rejected, failed to enable media [ 1596.838637][T32303] netlink: 'syz.2.16079': attribute type 3 has an invalid length. [ 1596.839473][T32306] netlink: 'syz.3.16080': attribute type 1 has an invalid length. [ 1596.855276][T32307] netlink: 'syz.3.16080': attribute type 1 has an invalid length. [ 1596.932397][T32307] bond15: (slave xfrm1): The slave device specified does not support setting the MAC address [ 1596.958039][T32307] bond15: (slave xfrm1): Setting fail_over_mac to active for active-backup mode [ 1596.986840][T32307] bond15: (slave xfrm1): making interface the new active one [ 1596.997180][T32307] bond15: (slave xfrm1): Enslaving as an active interface with an up link [ 1597.027938][T32306] bond15 (unregistering): (slave xfrm1): Releasing backup interface [ 1597.040422][T32306] bond15 (unregistering): Released all slaves [ 1597.076657][T32317] team0: Device gtp0 is up. Set it down before adding it as a team port [ 1597.096001][T32318] netlink: 'syz.2.16082': attribute type 10 has an invalid length. [ 1597.286383][T32320] RDS: rds_bind could not find a transport for ::ffff:172.20.20.187, load rds_tcp or rds_rdma? [ 1597.616906][T32349] netlink: 'syz.2.16093': attribute type 1 has an invalid length. [ 1598.582827][T32368] __nla_validate_parse: 5 callbacks suppressed [ 1598.582848][T32368] netlink: 132 bytes leftover after parsing attributes in process `syz.2.16100'. [ 1598.603822][T32368] openvswitch: netlink: Invalid VLAN frame [ 1598.679700][T32374] netlink: 20 bytes leftover after parsing attributes in process `syz.2.16101'. [ 1598.689890][T32374] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16101'. [ 1598.771781][T32376] 8021q: adding VLAN 0 to HW filter on device bond15 [ 1598.915677][T32387] netlink: 64 bytes leftover after parsing attributes in process `syz.1.16105'. [ 1599.006786][T32394] netlink: 4 bytes leftover after parsing attributes in process `syz.2.16106'. [ 1599.346386][ T5849] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1599.362470][ T5849] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1599.370555][ T5849] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1599.387300][ T5849] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1599.428273][ T5849] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1599.492923][T32421] netlink: 24 bytes leftover after parsing attributes in process `syz.3.16110'. [ 1599.520621][T32424] syz.1.16111 (32424) used obsolete PPPIOCDETACH ioctl [ 1599.578427][T32417] wlan0 speed is unknown, defaulting to 1000 [ 1599.600976][T32417] lo speed is unknown, defaulting to 1000 [ 1600.423743][T32461] sctp: [Deprecated]: syz.2.16122 (pid 32461) Use of int in maxseg socket option. [ 1600.423743][T32461] Use struct sctp_assoc_value instead [ 1600.513388][T32462] netlink: 72 bytes leftover after parsing attributes in process `syz.2.16122'. [ 1600.702631][T32417] chnl_net:caif_netlink_parms(): no params data found [ 1600.733538][T32474] syzkaller0: entered promiscuous mode [ 1600.740477][T32474] syzkaller0: entered allmulticast mode [ 1600.923718][T32484] netlink: 16 bytes leftover after parsing attributes in process `syz.2.16129'. [ 1600.936242][T32485] netlink: 16 bytes leftover after parsing attributes in process `syz.2.16129'. [ 1600.952646][T32480] team_slave_0: left promiscuous mode [ 1600.958582][T32480] team_slave_1: left promiscuous mode [ 1601.026077][T32480] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1601.199524][T32480] gtp0: left promiscuous mode [ 1601.254755][T32480] gtp1: left promiscuous mode [ 1601.295348][T32480] veth7: left promiscuous mode [ 1601.380574][T21179] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1601.393964][T32417] bridge0: port 1(bridge_slave_0) entered blocking state [ 1601.411452][T32417] bridge0: port 1(bridge_slave_0) entered disabled state [ 1601.437800][T32417] bridge_slave_0: entered allmulticast mode [ 1601.456706][T32417] bridge_slave_0: entered promiscuous mode [ 1601.471468][T32498] netlink: 8 bytes leftover after parsing attributes in process `syz.3.16132'. [ 1601.491312][T21179] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1601.500296][T21179] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1601.528960][T32417] bridge0: port 2(bridge_slave_1) entered blocking state [ 1601.537048][T32417] bridge0: port 2(bridge_slave_1) entered disabled state [ 1601.545541][T32417] bridge_slave_1: entered allmulticast mode [ 1601.552438][ T5849] Bluetooth: hci6: command tx timeout [ 1601.560399][T32417] bridge_slave_1: entered promiscuous mode [ 1601.597191][T21179] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1601.620533][T32417] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1601.634337][T32417] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1601.685023][T32417] team0: Port device team_slave_0 added [ 1601.695184][T32417] team0: Port device team_slave_1 added [ 1601.736305][T32417] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1601.744001][T32417] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1601.773250][T32417] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1601.787784][T32417] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1601.794936][T32417] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1601.822759][T32417] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1601.889467][T32417] hsr_slave_0: entered promiscuous mode [ 1601.896555][T32417] hsr_slave_1: entered promiscuous mode [ 1601.903939][T32417] debugfs: 'hsr0' already exists in 'hsr' [ 1601.910595][T32417] Cannot create hsr debugfs directory [ 1603.274709][T32542] validate_nla: 68 callbacks suppressed [ 1603.274723][T32542] netlink: 'syz.3.16144': attribute type 5 has an invalid length. [ 1603.295278][T32542] geneve3: entered promiscuous mode [ 1603.302725][T32542] geneve3: entered allmulticast mode [ 1603.310391][T20462] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 1603.320110][T20462] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 1603.328382][T20462] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 1603.348275][T20462] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 1603.618227][ T5849] Bluetooth: hci6: command tx timeout [ 1603.901966][T32575] netlink: 'syz.2.16153': attribute type 1 has an invalid length. [ 1603.910594][T32575] __nla_validate_parse: 6 callbacks suppressed [ 1603.910612][T32575] netlink: 336 bytes leftover after parsing attributes in process `syz.2.16153'. [ 1603.934602][T32573] netlink: 16 bytes leftover after parsing attributes in process `syz.3.16152'. [ 1603.946970][T32573] netlink: 6 bytes leftover after parsing attributes in process `syz.3.16152'. [ 1603.993946][T32575] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 1604.013270][T32578] netlink: 120 bytes leftover after parsing attributes in process `syz.1.16154'. [ 1604.023056][T32578] netlink: 'syz.1.16154': attribute type 1 has an invalid length. [ 1604.032420][T32578] netlink: 64 bytes leftover after parsing attributes in process `syz.1.16154'. [ 1604.104382][T32583] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1604.114613][ T30] audit: type=1804 audit(1769412345.434:16): pid=32582 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.16156" name="/newroot/869/cgroup.controllers" dev="tmpfs" ino=4450 res=1 errno=0 [ 1604.158687][ T30] audit: type=1800 audit(1769412345.464:17): pid=32582 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.16156" name="cgroup.controllers" dev="tmpfs" ino=4450 res=0 errno=0 [ 1604.228583][T32589] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.16158'. [ 1604.356994][T32592] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 1604.366165][T32592] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16160'. [ 1604.737193][T32606] netlink: 92 bytes leftover after parsing attributes in process `syz.3.16162'. [ 1604.769163][T32614] nlmon0: Caught tx_queue_len zero misconfig [ 1604.975797][T32617] netlink: 28 bytes leftover after parsing attributes in process `syz.2.16165'. [ 1604.987599][T32617] netlink: 28 bytes leftover after parsing attributes in process `syz.2.16165'. [ 1605.005819][T32617] erspan0: entered promiscuous mode [ 1605.012966][T32617] 0{X: entered promiscuous mode [ 1605.020223][T32617] debugfs: 'hsr1' already exists in 'hsr' [ 1605.026211][T32617] Cannot create hsr debugfs directory [ 1605.032872][T32617] hsr1: Slave A (erspan0) is not up; please bring it up to get a fully working HSR network [ 1605.248609][T32622] netlink: 'syz.2.16167': attribute type 1 has an invalid length. [ 1605.295624][T32622] bond12: entered promiscuous mode [ 1605.301742][T32622] bond12: entered allmulticast mode [ 1605.308638][T32622] 8021q: adding VLAN 0 to HW filter on device bond12 [ 1605.447548][ T566] lec:lec_start_xmit: lec0:No lecd attached [ 1605.628864][T32638] mac80211_hwsim hwsim155 wlan1: Caught tx_queue_len zero misconfig [ 1605.699917][ T5849] Bluetooth: hci6: command tx timeout [ 1606.050024][T32666] IPVS: set_ctl: invalid protocol: 58 172.20.20.187:20002 [ 1606.076278][T32660] wlan0 speed is unknown, defaulting to 1000 [ 1606.086029][T32660] lo speed is unknown, defaulting to 1000 [ 1606.540147][T32691] syzkaller1: entered promiscuous mode [ 1606.545883][T32691] syzkaller1: entered allmulticast mode [ 1606.865518][T32706] dvmrp6: entered allmulticast mode [ 1607.305412][ T1303] clip:clip_start_xmit: skb_dst(skb) == NULL [ 1607.403958][T32739] bond0: (slave wlan1): Releasing backup interface [ 1607.780262][ T5849] Bluetooth: hci6: command tx timeout [ 1607.874461][T32765] bond15 (unregistering): Released all slaves [ 1607.922553][ T307] netlink: 'syz.1.16201': attribute type 15 has an invalid length. [ 1607.933394][ T306] netlink: 'syz.1.16201': attribute type 15 has an invalid length. [ 1607.954945][ T306] netlink: 'syz.1.16201': attribute type 15 has an invalid length. [ 1607.963529][ T307] netlink: 'syz.1.16201': attribute type 15 has an invalid length. [ 1608.015483][T20463] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 256 - 0 [ 1608.033496][T20463] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 256 - 0 [ 1608.060052][T20463] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 256 - 0 [ 1608.075049][T20463] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 256 - 0 [ 1608.520648][ T339] openvswitch: netlink: IP tunnel TTL not specified. [ 1608.653415][ T345] tap0: tun_chr_ioctl cmd 1074025676 [ 1608.667672][ T345] tap0: owner set to 0 [ 1608.735376][ T349] netlink: zone id is out of range [ 1608.740826][ T350] netlink: zone id is out of range [ 1608.746032][ T350] netlink: zone id is out of range [ 1608.751727][ T349] netlink: zone id is out of range [ 1608.756890][ T349] netlink: zone id is out of range [ 1608.760127][ T352] netlink: 'syz.3.16215': attribute type 1 has an invalid length. [ 1608.774530][ T350] netlink: zone id is out of range [ 1608.778327][ T349] netlink: zone id is out of range [ 1608.797591][ T349] netlink: zone id is out of range [ 1608.947208][ T366] syzkaller0: entered promiscuous mode [ 1608.953950][ T366] syzkaller0: entered allmulticast mode [ 1609.173613][ T382] syzkaller0: entered promiscuous mode [ 1609.190047][ T382] syzkaller0: entered allmulticast mode [ 1609.324168][ T388] __nla_validate_parse: 19 callbacks suppressed [ 1609.324188][ T388] netlink: 68 bytes leftover after parsing attributes in process `syz.1.16226'. [ 1609.476342][ T397] bond13: option packets_per_slave: invalid value (18446744073709551615) [ 1609.487446][ T397] bond13: option packets_per_slave: allowed values 0 - 65535 [ 1609.496590][ T397] bond13 (unregistering): Released all slaves [ 1610.052931][T20870] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1610.064540][T20870] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1610.072820][T20870] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1610.108405][T20870] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1610.121500][T20870] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1610.186464][ T434] wlan0 speed is unknown, defaulting to 1000 [ 1610.202918][ T434] lo speed is unknown, defaulting to 1000 [ 1610.737845][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5290 ms [ 1610.745945][ C1] lec:lec_tx_timeout: lec0 [ 1610.751828][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 1610.952637][ T465] netlink: 'syz.2.16248': attribute type 1 has an invalid length. [ 1611.000838][ T465] 8021q: adding VLAN 0 to HW filter on device bond13 [ 1611.028482][ T467] netlink: 12 bytes leftover after parsing attributes in process `syz.2.16248'. [ 1611.078325][ T465] veth15: entered promiscuous mode [ 1611.090331][ T465] bond13: (slave veth15): Enslaving as an active interface with a down link [ 1611.113063][ T434] chnl_net:caif_netlink_parms(): no params data found [ 1611.145726][ T469] netlink: 32 bytes leftover after parsing attributes in process `syz.1.16249'. [ 1611.161179][ T465] vlan2: entered allmulticast mode [ 1611.166639][ T465] bond13: entered allmulticast mode [ 1611.174578][ T465] bond13: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 1611.481041][ T434] bridge0: port 1(bridge_slave_0) entered blocking state [ 1611.500519][ T434] bridge0: port 1(bridge_slave_0) entered disabled state [ 1611.528326][ T434] bridge_slave_0: entered allmulticast mode [ 1611.542341][ T434] bridge_slave_0: entered promiscuous mode [ 1611.570136][ T434] bridge0: port 2(bridge_slave_1) entered blocking state [ 1611.578866][ T434] bridge0: port 2(bridge_slave_1) entered disabled state [ 1611.586303][ T434] bridge_slave_1: entered allmulticast mode [ 1611.594925][ T434] bridge_slave_1: entered promiscuous mode [ 1611.683865][ T434] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1611.730691][ T434] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1611.751145][ T489] netlink: 24 bytes leftover after parsing attributes in process `syz.2.16254'. [ 1611.850003][ T434] team0: Port device team_slave_0 added [ 1611.870500][ T434] team0: Port device team_slave_1 added [ 1611.948519][ T500] netlink: 24 bytes leftover after parsing attributes in process `syz.2.16256'. [ 1611.995851][ T434] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1612.017685][ T434] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1612.086334][ T434] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1612.098904][ T506] netlink: 104 bytes leftover after parsing attributes in process `syz.3.16257'. [ 1612.113246][ T434] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1612.121816][ T434] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1612.148909][ T434] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1612.171899][ T506] netlink: 'syz.3.16257': attribute type 83 has an invalid length. [ 1612.180323][T20870] Bluetooth: hci7: command tx timeout [ 1612.311973][ T434] hsr_slave_0: entered promiscuous mode [ 1612.320747][ T434] hsr_slave_1: entered promiscuous mode [ 1612.331283][ T434] debugfs: 'hsr0' already exists in 'hsr' [ 1612.337049][ T434] Cannot create hsr debugfs directory [ 1612.536076][ T523] IPVS: length: 239 != 24 [ 1612.565238][ T521] bond14: option resend_igmp: invalid value (32767) [ 1612.574187][ T521] bond14: option resend_igmp: allowed values 0 - 255 [ 1612.585035][ T521] bond14 (unregistering): Released all slaves [ 1613.009191][ T540] netlink: 16 bytes leftover after parsing attributes in process `syz.3.16270'. [ 1613.021381][ T540] netlink: 13 bytes leftover after parsing attributes in process `syz.3.16270'. [ 1613.044509][ T540] veth17: entered promiscuous mode [ 1613.050995][ T540] netlink: 16 bytes leftover after parsing attributes in process `syz.3.16270'. [ 1613.061893][ T540] netlink: 13 bytes leftover after parsing attributes in process `syz.3.16270'. [ 1613.089370][ T540] veth19: entered promiscuous mode [ 1613.096657][ T536] netlink: 'syz.2.16269': attribute type 1 has an invalid length. [ 1613.115342][ T540] veth21: entered promiscuous mode [ 1613.140868][ T540] veth23: entered promiscuous mode [ 1613.160255][ T540] veth25: entered promiscuous mode [ 1613.190929][ T540] veth27: entered promiscuous mode [ 1613.223061][ T540] veth29: entered promiscuous mode [ 1613.250864][ T540] veth31: entered promiscuous mode [ 1613.276964][ T540] veth33: entered promiscuous mode [ 1613.303135][ T540] veth35: entered promiscuous mode [ 1613.326887][ T540] veth37: entered promiscuous mode [ 1613.351577][ T540] veth39: entered promiscuous mode [ 1613.379105][ T540] veth41: entered promiscuous mode [ 1613.405664][ T540] veth43: entered promiscuous mode [ 1613.430770][ T540] veth45: entered promiscuous mode [ 1613.454562][ T540] veth47: entered promiscuous mode [ 1613.479217][ T540] veth49: entered promiscuous mode [ 1613.503696][ T540] veth51: entered promiscuous mode [ 1613.528945][ T540] veth53: entered promiscuous mode [ 1613.553428][ T540] veth55: entered promiscuous mode [ 1613.578204][ T540] veth57: entered promiscuous mode [ 1613.602680][ T540] veth59: entered promiscuous mode [ 1613.630003][ T540] veth61: entered promiscuous mode [ 1613.654777][ T540] veth63: entered promiscuous mode [ 1613.679477][ T540] veth65: entered promiscuous mode [ 1613.709262][ T540] veth67: entered promiscuous mode [ 1613.733588][ T540] veth69: entered promiscuous mode [ 1613.759121][ T540] veth71: entered promiscuous mode [ 1613.784260][ T540] veth73: entered promiscuous mode [ 1613.809199][ T540] veth75: entered promiscuous mode [ 1613.833573][ T540] veth77: entered promiscuous mode [ 1613.959320][ T551] gtp1: entered promiscuous mode [ 1613.964337][ T551] gtp1: entered allmulticast mode [ 1614.260799][T20870] Bluetooth: hci7: command tx timeout [ 1614.286136][ T581] net_ratelimit: 8 callbacks suppressed [ 1614.286156][ T581] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1614.361617][ T584] __nla_validate_parse: 98 callbacks suppressed [ 1614.361637][ T584] netlink: 108 bytes leftover after parsing attributes in process `syz.1.16283'. [ 1614.373045][ T587] netlink: 'syz.2.16284': attribute type 4 has an invalid length. [ 1614.746789][ T604] netlink: 100 bytes leftover after parsing attributes in process `syz.2.16290'. [ 1614.881851][ T612] ================================================================== [ 1614.889979][ T612] BUG: KASAN: slab-use-after-free in macvlan_forward_source+0x5d8/0x700 [ 1614.898351][ T612] Read of size 2 at addr ffff888055910dfc by task syz.2.16292/612 [ 1614.906200][ T612] [ 1614.908554][ T612] CPU: 1 UID: 0 PID: 612 Comm: syz.2.16292 Not tainted syzkaller #0 PREEMPT(full) [ 1614.908581][ T612] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 1614.908596][ T612] Call Trace: [ 1614.908605][ T612] [ 1614.908615][ T612] dump_stack_lvl+0xe8/0x150 [ 1614.908648][ T612] print_report+0xba/0x230 [ 1614.908671][ T612] ? macvlan_forward_source+0x5d8/0x700 [ 1614.908711][ T612] kasan_report+0x117/0x150 [ 1614.908736][ T612] ? macvlan_forward_source+0x5d8/0x700 [ 1614.908769][ T612] macvlan_forward_source+0x5d8/0x700 [ 1614.908804][ T612] macvlan_handle_frame+0x2e2/0x12e0 [ 1614.908835][ T612] ? __pfx_macvlan_handle_frame+0x10/0x10 [ 1614.908861][ T612] __netif_receive_skb_core+0x98f/0x30a0 [ 1614.908887][ T612] ? __kernel_text_address+0xd/0x30 [ 1614.908915][ T612] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1614.908946][ T612] ? __lock_acquire+0x6b5/0x2cf0 [ 1614.908983][ T612] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 1614.909014][ T612] ? stack_depot_save_flags+0x33/0x810 [ 1614.909054][ T612] ? netif_receive_skb+0x102/0xbb0 [ 1614.909087][ T612] ? netif_receive_skb+0x102/0xbb0 [ 1614.909121][ T612] netif_receive_skb+0x1fe/0xbb0 [ 1614.909158][ T612] ? __pfx_netif_receive_skb+0x10/0x10 [ 1614.909195][ T612] ? tun_rx_batched+0x185/0x790 [ 1614.909218][ T612] tun_rx_batched+0x1de/0x790 [ 1614.909243][ T612] ? __pfx_tun_rx_batched+0x10/0x10 [ 1614.909265][ T612] ? tun_get_user+0x2669/0x3dd0 [ 1614.909287][ T612] ? tun_get_user+0x2669/0x3dd0 [ 1614.909310][ T612] ? tun_get_user+0x2354/0x3dd0 [ 1614.909331][ T612] ? __local_bh_enable_ip+0xd0/0x130 [ 1614.909353][ T612] ? tun_get_user+0x2669/0x3dd0 [ 1614.909373][ T612] tun_get_user+0x2a78/0x3dd0 [ 1614.909412][ T612] ? aa_file_perm+0x440/0x1630 [ 1614.909455][ T612] ? __pfx_tun_get_user+0x10/0x10 [ 1614.909479][ T612] ? __lock_acquire+0x6b5/0x2cf0 [ 1614.909517][ T612] ? ref_tracker_alloc+0x363/0x4d0 [ 1614.909546][ T612] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 1614.909574][ T612] ? tun_get+0x1c/0x2f0 [ 1614.909595][ T612] ? tun_get+0x1c/0x2f0 [ 1614.909617][ T612] ? tun_get+0x1c/0x2f0 [ 1614.909637][ T612] ? tun_get+0x1c/0x2f0 [ 1614.909660][ T612] tun_chr_write_iter+0x113/0x200 [ 1614.909683][ T612] vfs_write+0x61d/0xb90 [ 1614.909720][ T612] ? __pfx_vfs_write+0x10/0x10 [ 1614.909756][ T612] ? __fget_files+0x2a/0x420 [ 1614.909785][ T612] ksys_write+0x150/0x270 [ 1614.909818][ T612] ? __pfx_ksys_write+0x10/0x10 [ 1614.909856][ T612] do_syscall_64+0xe2/0xf80 [ 1614.909879][ T612] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1614.909900][ T612] ? trace_irq_disable+0x37/0x100 [ 1614.909921][ T612] ? clear_bhb_loop+0x60/0xb0 [ 1614.909945][ T612] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1614.909966][ T612] RIP: 0033:0x7f42e535b58e [ 1614.909985][ T612] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1614.910005][ T612] RSP: 002b:00007f42e61bcfb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1614.910029][ T612] RAX: ffffffffffffffda RBX: 00007f42e61bd6c0 RCX: 00007f42e535b58e [ 1614.910046][ T612] RDX: 000000000000004e RSI: 0000200000000780 RDI: 00000000000000c8 [ 1614.910061][ T612] RBP: 00007f42e5408bf7 R08: 0000000000000000 R09: 0000000000000000 [ 1614.910075][ T612] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1614.910089][ T612] R13: 00007f42e5616038 R14: 00007f42e5615fa0 R15: 00007ffefdbe1048 [ 1614.910116][ T612] [ 1614.910124][ T612] [ 1615.248445][ T612] Allocated by task 32592: [ 1615.252868][ T612] kasan_save_track+0x3e/0x80 [ 1615.257562][ T612] __kasan_kmalloc+0x93/0xb0 [ 1615.262170][ T612] __kvmalloc_node_noprof+0x59a/0x8d0 [ 1615.267576][ T612] alloc_netdev_mqs+0xa6/0x11b0 [ 1615.272443][ T612] rtnl_create_link+0x31f/0xd70 [ 1615.277318][ T612] rtnl_newlink_create+0x277/0xb70 [ 1615.282480][ T612] rtnl_newlink+0x1666/0x1be0 [ 1615.287176][ T612] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 1615.292131][ T612] netlink_rcv_skb+0x232/0x4b0 [ 1615.296933][ T612] netlink_unicast+0x80f/0x9b0 [ 1615.301720][ T612] netlink_sendmsg+0x813/0xb40 [ 1615.306500][ T612] ____sys_sendmsg+0xa68/0xad0 [ 1615.311285][ T612] ___sys_sendmsg+0x2a5/0x360 [ 1615.315984][ T612] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1615.320958][ T612] do_syscall_64+0xe2/0xf80 [ 1615.325474][ T612] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1615.331378][ T612] [ 1615.333717][ T612] Freed by task 32592: [ 1615.337792][ T612] kasan_save_track+0x3e/0x80 [ 1615.342491][ T612] kasan_save_free_info+0x46/0x50 [ 1615.347539][ T612] __kasan_slab_free+0x5c/0x80 [ 1615.352328][ T612] kfree+0x1be/0x650 [ 1615.356246][ T612] rtnl_newlink_create+0x394/0xb70 [ 1615.361375][ T612] rtnl_newlink+0x1666/0x1be0 [ 1615.366072][ T612] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 1615.371028][ T612] netlink_rcv_skb+0x232/0x4b0 [ 1615.375804][ T612] netlink_unicast+0x80f/0x9b0 [ 1615.380594][ T612] netlink_sendmsg+0x813/0xb40 [ 1615.385369][ T612] ____sys_sendmsg+0xa68/0xad0 [ 1615.390150][ T612] ___sys_sendmsg+0x2a5/0x360 [ 1615.394856][ T612] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1615.399817][ T612] do_syscall_64+0xe2/0xf80 [ 1615.404337][ T612] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1615.410245][ T612] [ 1615.412583][ T612] The buggy address belongs to the object at ffff888055910000 [ 1615.412583][ T612] which belongs to the cache kmalloc-cg-4k of size 4096 [ 1615.426910][ T612] The buggy address is located 3580 bytes inside of [ 1615.426910][ T612] freed 4096-byte region [ffff888055910000, ffff888055911000) [ 1615.440896][ T612] [ 1615.443258][ T612] The buggy address belongs to the physical page: [ 1615.449704][ T612] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x55910 [ 1615.458487][ T612] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1615.467011][ T612] memcg:ffff88805759fb41 [ 1615.471276][ T612] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 1615.478834][ T612] page_type: f5(slab) [ 1615.482837][ T612] raw: 00fff00000000040 ffff88813fe30500 ffffea000149e200 dead000000000002 [ 1615.491436][ T612] raw: 0000000000000000 0000000000040004 00000000f5000000 ffff88805759fb41 [ 1615.500047][ T612] head: 00fff00000000040 ffff88813fe30500 ffffea000149e200 dead000000000002 [ 1615.508750][ T612] head: 0000000000000000 0000000000040004 00000000f5000000 ffff88805759fb41 [ 1615.517445][ T612] head: 00fff00000000003 ffffea0001564401 00000000ffffffff 00000000ffffffff [ 1615.526139][ T612] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 1615.534846][ T612] page dumped because: kasan: bad access detected [ 1615.541290][ T612] page_owner tracks the page as allocated [ 1615.547012][ T612] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd60c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_RETRY_MAYFAIL|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 6923, tgid 6923 (syz-executor), ts 950182290965, free_ts 950145188851 [ 1615.570302][ T612] post_alloc_hook+0x228/0x280 [ 1615.575091][ T612] get_page_from_freelist+0x24dc/0x2580 [ 1615.580677][ T612] __alloc_frozen_pages_noprof+0x18d/0x380 [ 1615.586516][ T612] alloc_pages_mpol+0x232/0x4a0 [ 1615.591400][ T612] allocate_slab+0x86/0x3a0 [ 1615.595941][ T612] ___slab_alloc+0xd82/0x1760 [ 1615.600641][ T612] __slab_alloc+0x65/0x100 [ 1615.605079][ T612] __kvmalloc_node_noprof+0x673/0x8d0 [ 1615.610464][ T612] alloc_netdev_mqs+0xa6/0x11b0 [ 1615.615342][ T612] rtnl_create_link+0x31f/0xd70 [ 1615.620225][ T612] rtnl_newlink_create+0x277/0xb70 [ 1615.625360][ T612] rtnl_newlink+0x1666/0x1be0 [ 1615.630048][ T612] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 1615.634998][ T612] netlink_rcv_skb+0x232/0x4b0 [ 1615.639780][ T612] netlink_unicast+0x80f/0x9b0 [ 1615.644566][ T612] netlink_sendmsg+0x813/0xb40 [ 1615.649341][ T612] page last free pid 6983 tgid 6981 stack trace: [ 1615.655681][ T612] __free_frozen_pages+0xbf8/0xd70 [ 1615.660816][ T612] __put_partials+0x146/0x170 [ 1615.665528][ T612] __slab_free+0x294/0x320 [ 1615.669963][ T612] qlist_free_all+0x97/0x100 [ 1615.674578][ T612] kasan_quarantine_reduce+0x148/0x160 [ 1615.680059][ T612] __kasan_slab_alloc+0x22/0x80 [ 1615.684920][ T612] kmem_cache_alloc_noprof+0x370/0x6e0 [ 1615.690404][ T612] __kernfs_new_node+0xe9/0x8e0 [ 1615.695287][ T612] kernfs_new_node+0x102/0x210 [ 1615.700070][ T612] __kernfs_create_file+0x4b/0x2e0 [ 1615.705195][ T612] sysfs_add_file_mode_ns+0x238/0x300 [ 1615.710582][ T612] internal_create_group+0x673/0x1180 [ 1615.715997][ T612] sysfs_create_groups+0x59/0x120 [ 1615.721055][ T612] ib_setup_port_attrs+0x148f/0x2140 [ 1615.726467][ T612] add_one_compat_dev+0x448/0x650 [ 1615.731531][ T612] enable_device_and_get+0x2b3/0x3e0 [ 1615.736836][ T612] [ 1615.739198][ T612] Memory state around the buggy address: [ 1615.744856][ T612] ffff888055910c80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1615.752945][ T612] ffff888055910d00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1615.761026][ T612] >ffff888055910d80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1615.769100][ T612] ^ [ 1615.777087][ T612] ffff888055910e00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1615.785168][ T612] ffff888055910e80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1615.793238][ T612] ================================================================== [ 1615.801437][ T612] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1615.808661][ T612] CPU: 1 UID: 0 PID: 612 Comm: syz.2.16292 Not tainted syzkaller #0 PREEMPT(full) [ 1615.817970][ T612] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 1615.828062][ T612] Call Trace: [ 1615.831357][ T612] [ 1615.834306][ T612] vpanic+0x1e0/0x670 [ 1615.838314][ T612] panic+0xc5/0xd0 [ 1615.842053][ T612] ? __pfx_panic+0x10/0x10 [ 1615.846492][ T612] ? macvlan_forward_source+0x5d8/0x700 [ 1615.852094][ T612] ? macvlan_forward_source+0x5d8/0x700 [ 1615.857677][ T612] check_panic_on_warn+0x89/0xb0 [ 1615.862665][ T612] ? macvlan_forward_source+0x5d8/0x700 [ 1615.868249][ T612] end_report+0x6f/0x140 [ 1615.872520][ T612] kasan_report+0x128/0x150 [ 1615.877049][ T612] ? macvlan_forward_source+0x5d8/0x700 [ 1615.882627][ T612] macvlan_forward_source+0x5d8/0x700 [ 1615.888044][ T612] macvlan_handle_frame+0x2e2/0x12e0 [ 1615.893355][ T612] ? __pfx_macvlan_handle_frame+0x10/0x10 [ 1615.899091][ T612] __netif_receive_skb_core+0x98f/0x30a0 [ 1615.904743][ T612] ? __kernel_text_address+0xd/0x30 [ 1615.909961][ T612] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1615.916145][ T612] ? __lock_acquire+0x6b5/0x2cf0 [ 1615.921116][ T612] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 1615.927200][ T612] ? stack_depot_save_flags+0x33/0x810 [ 1615.932700][ T612] ? netif_receive_skb+0x102/0xbb0 [ 1615.937837][ T612] ? netif_receive_skb+0x102/0xbb0 [ 1615.942984][ T612] netif_receive_skb+0x1fe/0xbb0 [ 1615.947957][ T612] ? __pfx_netif_receive_skb+0x10/0x10 [ 1615.953446][ T612] ? tun_rx_batched+0x185/0x790 [ 1615.958328][ T612] tun_rx_batched+0x1de/0x790 [ 1615.963048][ T612] ? __pfx_tun_rx_batched+0x10/0x10 [ 1615.968281][ T612] ? tun_get_user+0x2669/0x3dd0 [ 1615.973169][ T612] ? tun_get_user+0x2669/0x3dd0 [ 1615.978055][ T612] ? tun_get_user+0x2354/0x3dd0 [ 1615.982921][ T612] ? __local_bh_enable_ip+0xd0/0x130 [ 1615.988917][ T612] ? tun_get_user+0x2669/0x3dd0 [ 1615.993784][ T612] tun_get_user+0x2a78/0x3dd0 [ 1615.998512][ T612] ? aa_file_perm+0x440/0x1630 [ 1616.003311][ T612] ? __pfx_tun_get_user+0x10/0x10 [ 1616.008391][ T612] ? __lock_acquire+0x6b5/0x2cf0 [ 1616.013375][ T612] ? ref_tracker_alloc+0x363/0x4d0 [ 1616.018634][ T612] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 1616.024138][ T612] ? tun_get+0x1c/0x2f0 [ 1616.028334][ T612] ? tun_get+0x1c/0x2f0 [ 1616.032532][ T612] ? tun_get+0x1c/0x2f0 [ 1616.036726][ T612] ? tun_get+0x1c/0x2f0 [ 1616.040914][ T612] tun_chr_write_iter+0x113/0x200 [ 1616.046086][ T612] vfs_write+0x61d/0xb90 [ 1616.050369][ T612] ? __pfx_vfs_write+0x10/0x10 [ 1616.055169][ T612] ? __fget_files+0x2a/0x420 [ 1616.059803][ T612] ksys_write+0x150/0x270 [ 1616.064164][ T612] ? __pfx_ksys_write+0x10/0x10 [ 1616.069053][ T612] do_syscall_64+0xe2/0xf80 [ 1616.073581][ T612] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1616.079737][ T612] ? trace_irq_disable+0x37/0x100 [ 1616.084804][ T612] ? clear_bhb_loop+0x60/0xb0 [ 1616.089515][ T612] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1616.095427][ T612] RIP: 0033:0x7f42e535b58e [ 1616.099865][ T612] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1616.119503][ T612] RSP: 002b:00007f42e61bcfb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1616.127953][ T612] RAX: ffffffffffffffda RBX: 00007f42e61bd6c0 RCX: 00007f42e535b58e [ 1616.135950][ T612] RDX: 000000000000004e RSI: 0000200000000780 RDI: 00000000000000c8 [ 1616.143984][ T612] RBP: 00007f42e5408bf7 R08: 0000000000000000 R09: 0000000000000000 [ 1616.151977][ T612] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1616.159974][ T612] R13: 00007f42e5616038 R14: 00007f42e5615fa0 R15: 00007ffefdbe1048 [ 1616.167985][ T612] [ 1616.171637][ T612] Kernel Offset: disabled [ 1616.175977][ T612] Rebooting in 86400 seconds..