last executing test programs: 2.225715701s ago: executing program 3 (id=8964): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'morus1280\x00'}, 0x58) (rerun: 64) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x114, 0x2d, 0x1, 0x0, 0x25dfdbff, "", [@nested={0x101, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac08}, @typed={0x14, 0xa, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x16}}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd"]}]}, 0x114}], 0x1, 0x0, 0x0, 0x400c445}, 0x0) (async) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x27}, 0x62) (async) recvmsg(r2, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x40000151) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r0) sendmsg$NFC_CMD_DEP_LINK_UP(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002abd7000fbdbdf250400000006000a006b983800080001"], 0x24}, 0x1, 0x0, 0x0, 0x40080c0}, 0x8000) 2.136719002s ago: executing program 4 (id=8965): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, 0x0) socket(0x400000000010, 0x3, 0x0) (async) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}}, 0x24}}, 0x4c850) (async) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}}, 0x24}}, 0x4c850) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r4, 0xc0385868, &(0x7f0000000240)={r2, &(0x7f0000000000)='nl80211\x00', 0x2, &(0x7f0000000080)={@_ha_fsid={[0x3, 0x10000]}, {0xfff7, 0x9, 0x3, 0x31}}, 0x4, &(0x7f00000000c0), &(0x7f0000000180)=0xe06}) sendmsg$NL80211_CMD_GET_COALESCE(r5, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[@ANYBLOB="1cff0000", @ANYRES16=r1, @ANYBLOB="080026bd7000fddbdf256400000008000300", @ANYRES32=r3, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0xc4}, 0x20000080) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20041004}, 0x0) (async) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20041004}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000740)={&(0x7f00000004c0)=@newqdisc={0x6c, 0x24, 0x20, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xc, 0xa}, {0xf}, {0xc}}, [@TCA_RATE={0x6, 0x5, {0x4, 0x8}}, @TCA_STAB={0x4}, @qdisc_kind_options=@q_drr={0x8}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x7, 0x8, 0xff, 0xffffffff, 0x1, 0xfffffffa, 0x8354}}, {0x4}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x5}, @TCA_RATE={0x6, 0x5, {0xd3, 0x8}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40010}, 0xc0) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000280)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000004000ffffffff0200000008000300", @ANYRES32=r3, @ANYBLOB="080002002e"], 0x24}, 0x1, 0x6c00, 0x0, 0x4d080}, 0x0) (async) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000280)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000004000ffffffff0200000008000300", @ANYRES32=r3, @ANYBLOB="080002002e"], 0x24}, 0x1, 0x6c00, 0x0, 0x4d080}, 0x0) 2.081369304s ago: executing program 4 (id=8967): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = socket$kcm(0x10, 0x100000000002, 0x4) sendmsg$kcm(r2, &(0x7f00000039c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="39000000140081ae00002c000500015601618575e285af0100d41f215c0000883795c04a31ba377a1b2cc32b38d3440c6942cb76cab3000000", 0x39}], 0x1, 0x0, 0x0, 0xc00e}, 0x0) ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f0000000180)={r0, &(0x7f0000000040)='-\x00', 0x18000, &(0x7f0000000080)={@align=0x5, {0x7, 0xe3c, 0x6, 0x1ff}}, 0x66, &(0x7f00000000c0), &(0x7f0000000140)=0xf}) connect$pppl2tp(r3, &(0x7f00000001c0)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x4e24, @multicast1}, 0x0, 0x3, 0x3, 0x3}}, 0x2e) socket$kcm(0x29, 0x2, 0x0) 1.993287913s ago: executing program 1 (id=8968): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x4c, 0x10, 0x581, 0x0, 0x25dfd3fc, {0x0, 0x0, 0x0, 0x0, 0x4d014}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_DOWNDELAY={0x8, 0x1f, 0x7fffffff}, @IFLA_BOND_ARP_VALIDATE={0x8}]}}}, @IFLA_LINK_NETNSID={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20004002}, 0x0) 1.991618606s ago: executing program 3 (id=8969): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000c40), r0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r3 = socket(0x400000000010, 0x3, 0x0) (async, rerun: 64) r4 = socket$unix(0x1, 0x5, 0x0) (rerun: 64) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000600)=@newtfilter={0x84, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r5, {0x8}, {}, {0xe, 0x3}}, [@filter_kind_options=@f_fw={{0x7}, {0x50, 0x2, [@TCA_FW_ACT={0x4c, 0x4, [@m_ctinfo={0x48, 0x1, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0x5, 0x3, 0x3, 0xfffffff9, 0x2}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0xae, 0x9}}]}, 0x84}, 0x1, 0x0, 0x0, 0x26044028}, 0x800) (async) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x14, r1, 0x1, 0x0, 0x0, {0x6, 0x0, 0x900}}, 0x14}, 0x2, 0x34005}, 0x0) 1.808877746s ago: executing program 1 (id=8971): ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wg0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x10, 0x4, &(0x7f0000001880)=ANY=[@ANYRES64], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r0, 0x9}, 0x94) (async) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="600000002d0007012bbd7000fedbdf25077c1000"], 0x60}, 0x1, 0x0, 0x0, 0x10000004}, 0xc010) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) (async) r1 = accept(0xffffffffffffffff, &(0x7f0000000280)=@rc, &(0x7f0000000300)=0x80) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x5c, r3, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={'\x00', '\xff\xff', @empty}}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}]}, 0x5c}, 0x1, 0x620b}, 0x0) (async) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x24, r3, 0x300, 0x70bd2d, 0x25dfdbff, {}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x6}]}, 0x24}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000000f8c0000000c0a01080000000000000000010000000900020073797a3200000000600003805c000080080003400000000250000b80200001800a00010071756f7461000000100002800c0001400000000000000000140001800c000100636f756e74657200000000000000058011e70000666c6f775f6f66666c6f6164000000000900010073797a30"], 0x110}}, 0x0) r5 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$sock_proto_private(r5, 0x8b20, &(0x7f0000000080)) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000080)={{{@in=@multicast2, @in6=@private1}}, {{@in6=@initdev}, 0x0, @in6=@private0}}, &(0x7f0000000180)=0xe8) 1.706231841s ago: executing program 2 (id=8973): setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@private1, 0x6, 0x0, 0x3, 0x2, 0x0, 0x1}, 0x20) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r0, 0x8b32, &(0x7f0000000040)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r2}, &(0x7f0000000600)=0xa00, &(0x7f0000000640)}, 0x1c) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000490000000000000000000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000008c0)="89", 0x0}, 0x50) ioctl$TUNSETGROUP(r1, 0x400454ce, 0xffffffffffffffff) 1.580209293s ago: executing program 1 (id=8974): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000340)=@deltaction={0x21c, 0x31, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@TCA_ACT_TAB={0x60, 0x1, [{0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x80f}}, {0xc, 0x1a, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0x10, 0x3ffb, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xc, 0x1a, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0xc, 0xe, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x401}}, {0x10, 0x1a, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0xc, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}]}, @TCA_ACT_TAB={0x30, 0x1, [{0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0x10, 0x1f, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0x10, 0x14, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}]}, @TCA_ACT_TAB={0x60, 0x1, [{0xc, 0xf, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0x14, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0xc, 0x3, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0x1e, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}]}, @TCA_ACT_TAB={0x3c, 0x1, [{0x10, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0x10, 0x19, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0x1e, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0xc, 0x1e, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}]}, @TCA_ACT_TAB={0x38, 0x1, [{0xc, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0x10, 0x18, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfffffff9}}]}, @TCA_ACT_TAB={0x38, 0x1, [{0xc, 0xb, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0xc, 0x19, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0x10, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0xc, 0xb, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}]}, @TCA_ACT_TAB={0x54, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0xc, 0x10, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x10}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfffffffe}}, {0x14, 0x1f, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}]}, @TCA_ACT_TAB={0x18, 0x1, [{0x14, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}]}]}, 0x21c}, 0x1, 0x0, 0x0, 0x40000}, 0x4081) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x5c, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1c}}]}]}, 0x5c}}, 0x0) 1.488721511s ago: executing program 0 (id=8975): r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'sit0\x00'}) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000002f00090027bd700000200000040000000c00eaffffffffffffff0000"], 0x20}, 0x1, 0x0, 0x0, 0x42014}, 0x80000) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="b40500000008000071074856000000000600000000000000950000000000000036ce09cb94406fc352"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd96, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r3 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'macsec0\x00'}) (async) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)=@newspdinfo={0x34, 0x24, 0x300, 0x70bd25, 0x25dfdbfd, 0x5, [@XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000054}, 0x4) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=ANY=[@ANYBLOB="d8010000", @ANYRES16=r5, @ANYBLOB="010000000000fbdbdf2501000000080005000100000006000600234e0000140002007767320000000000000000000000000024000300a0cb"], 0x1d8}, 0x1, 0x0, 0x0, 0x1}, 0x4000814) socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) (async) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000500)={'syzkaller0\x00', 0x7101}) (async) r7 = socket$netlink(0x10, 0x3, 0x0) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) (async) r9 = socket$unix(0x1, 0x1, 0x0) (async) syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x24040084) (async) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000600)=@newqdisc={0x1d4, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r10, {0xffff, 0x5}, {0xffff, 0xffff}, {0xb, 0xa}}, [@TCA_STAB={0xac, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x6, 0x86, 0x4, 0x7f, 0x0, 0x7ff, 0xcac, 0x1}}, {0x6, 0x2, [0x2]}}, {{0x1c, 0x1, {0x81, 0xbd, 0x5, 0xfffffff8, 0x1, 0x9, 0x2e, 0x4}}, {0xc, 0x2, [0x4, 0x7, 0x9, 0x7]}}, {{0x1c, 0x1, {0x0, 0x0, 0x8e, 0x1, 0x2, 0x8001, 0x6, 0x7}}, {0x12, 0x2, [0x7, 0x1, 0x6, 0x0, 0x8, 0x6, 0x2]}}, {{0x1c, 0x1, {0xa8, 0x7, 0x32, 0x0, 0x1, 0x8, 0x1ff, 0x5}}, {0xe, 0x2, [0x7, 0x401, 0xd0, 0x3, 0x7]}}]}, @TCA_RATE={0x6, 0x5, {0x1, 0x6}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0xff}, @TCA_STAB={0xf4, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xea, 0xe, 0xe8, 0x5, 0x0, 0xfffffffc, 0x2, 0x2}}, {0x8, 0x2, [0x9, 0x17]}}, {{0x1c, 0x1, {0x4, 0xff, 0x8, 0x8001, 0x0, 0x5, 0x7c, 0x9}}, {0x16, 0x2, [0x5, 0x8, 0x6, 0xfe00, 0x8, 0x1, 0x9, 0x6, 0x1]}}, {{0x1c, 0x1, {0x1, 0x4, 0x582, 0xea61, 0x2, 0x8, 0x8001, 0x2}}, {0x8, 0x2, [0x7ff, 0x4]}}, {{0x1c, 0x1, {0x2, 0x5, 0x0, 0x9e3801d, 0x1, 0x3, 0x6, 0x2}}, {0x8, 0x2, [0x5, 0x9]}}, {{0x1c, 0x1, {0x3, 0x4a, 0xf2c, 0xffffffff, 0x1, 0x5, 0xc5, 0x6}}, {0x10, 0x2, [0x7, 0x3, 0xc844, 0x8001, 0x1, 0x3]}}, {{0x1c, 0x1, {0x8, 0xc, 0x9, 0x8, 0x0, 0xe2d, 0x2, 0x2}}, {0x8, 0x2, [0x5, 0x2]}}]}]}, 0x1d4}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'caif0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x0, 0xfff2}, {0xffff, 0x6}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 1.47485394s ago: executing program 3 (id=8976): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x7101}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=@newqdisc={0x58, 0x28, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffdf8, {0x0, 0x0, 0x0, r4, {0x10}, {}, {0xa, 0xd}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x2c, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x4, 0x0, 0x0, 0x1, 0x2, 0x1}, {0x6, 0x0, 0x8, 0x6, 0x8, 0x401}, 0x40, 0xd, 0x8ef}}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40098}, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000b00)=@newqdisc={0x24, 0x29, 0x4ee4e6a52ff56541, 0x4001, 0xfffdfdfc, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0xffff, 0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x400c0}, 0x44840) r8 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r8, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @broadcast}, 0x2}}, 0x2e) r9 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r9, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000), 0x101000, 0x800, 0x3, 0x1}, 0x20) setsockopt$XDP_TX_RING(r9, 0x11b, 0x3, &(0x7f00000003c0)=0x800, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000200)={'xfrm0\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r9, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) connect$nfc_raw(r7, &(0x7f0000000300)={0x27, 0x0, 0x0, 0x5}, 0x10) setsockopt$XDP_UMEM_FILL_RING(r9, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r9, &(0x7f00000001c0)={0x2c, 0xc, r11}, 0x10) ioctl$PPPIOCGL2TPSTATS(r8, 0x80487436, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x2, 0x4, &(0x7f0000000180)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0xbf}]}, &(0x7f0000000a00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x53}, 0x90) r12 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0xa0}, [@ldst={0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) r13 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001680)=@bpf_ext={0x1c, 0x11, &(0x7f00000017c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfffffab2, 0x0, 0x0, 0x0, 0x5}, {}, {}, [@map_val={0x18, 0x2, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xad}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000140)='GPL\x00', 0xfffffffc, 0x1000, &(0x7f0000000500)=""/4096, 0x40f00, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001500)={0x2, 0x4}, 0x8, 0x10, &(0x7f0000001540)={0x2, 0xb, 0x0, 0x2}, 0x10, 0x27511, 0xffffffffffffffff, 0x9, &(0x7f0000001580)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f00000015c0)=[{0x5, 0x4, 0x0, 0xa}, {0x5, 0x3, 0xf, 0x6}, {0x0, 0x2, 0x5, 0x8}, {0x2, 0x5, 0x6, 0x6}, {0x3, 0x2, 0x5, 0x3}, {0x0, 0x1, 0xd, 0x7}, {0x2, 0x3, 0xe, 0x4}, {0x3, 0x3, 0xb, 0x5}, {0x1, 0x3, 0xb, 0x5}], 0x10, 0x6}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=ANY=[@ANYRES8=0x0], &(0x7f0000000080)='GPL\x00', 0x9, 0xbd, &(0x7f000000cf3d)=""/189, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r13}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000200), &(0x7f0000000240)=r12}, 0x20) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000002c0)=@o_path={&(0x7f00000001c0)='./file0\x00', r14, 0x4000, r13}, 0x18) 1.436096284s ago: executing program 1 (id=8977): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r1}, @alu={0x7, 0x1, 0x0, 0x0, 0x8}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00'}, 0x90) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000010024bd7000fc0ddf2500000000", @ANYRES32=0x0, @ANYBLOB="1b0b04000300000008001b"], 0x28}, 0x1, 0x0, 0x0, 0x68010}, 0x100d0) syz_emit_ethernet(0x6e, &(0x7f00000003c0)={@multicast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "02adf7", 0x38, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @time_exceed={0x2, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "fd9063", 0x0, 0x3a, 0x0, @loopback, @loopback, [@fragment={0x3c, 0x0, 0x8, 0x0, 0x0, 0x13, 0x65}]}}}}}}}, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x44040) 1.329094795s ago: executing program 2 (id=8978): r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x77, 0x0, &(0x7f0000000200)) r1 = socket$pppl2tp(0x18, 0x1, 0x1) setsockopt(r1, 0x0, 0x0, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xa8442, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001200)=ANY=[@ANYBLOB="140000001600010700000000a4000000020000"], 0x14}, 0x1, 0x0, 0x0, 0xc4}, 0x854) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x0, 0x7ffe}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x20000002, 0x8, 0xfffffffb, 0x2, 0x2}, 0x5, 0x1, 0x80000000, 0x2, 0x8, 0x17, 0x2, 0x1, 0x0, 0xe, {0x0, 0x7fff, 0x225, 0x3, 0x9, 0x4}}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r7, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x2c3f, 0x3, 0x20000000, 0x2, 0x6}, 0x1e}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x884}, 0x40) close(r5) socket(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r9 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r9, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r9, &(0x7f00000000c0)={&(0x7f00000004c0)=@xdp={0x2c, 0x0, r7, 0x18}, 0x80, &(0x7f00000008c0)=[{&(0x7f00000001c0)="27030200dc0f14000e0005000024c10200000011125ce882cbf400930bf4533f00429c65112a093bbf60b85bcb06", 0x2e}], 0x1}, 0x4005) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="4c00000002060500000000000000000000000000057494e37a71ea0001000700000005000100060000000900020073797a300000000005000400000000000900020073797a30000000000500040000000000"], 0x4c}}, 0x4800) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x7c, 0x7c, 0x2, [@var, @func_proto={0x0, 0x6, 0x0, 0xd, 0x0, [{}, {}, {}, {}, {}, {}]}, @func, @volatile, @volatile, @volatile={0x0, 0x0, 0x0, 0x9, 0x2}]}}, 0x0, 0x96}, 0x20) bpf$TOKEN_CREATE(0x24, &(0x7f00000003c0)={0x0, r0}, 0x8) r10 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f00000005c0)=ANY=[@ANYBLOB="9feb0100188900000002000000000000000000000400000000040000000300000f0100000004000000d30e0000060000000200000009000000faffffff03000000a103000009000000fc0a0000000000000202000000000000000500000d000000001000000000000000000300000100000010000000040000000900000001000000090000000400000001000000000000020400"/166], 0x0, 0xa6}, 0x28) r11 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r10, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x2}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a00)={r11, 0xd8, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001000), 0x8, 0x0, 0x8, 0xffffffffffffff0e, 0x0}}, 0x10) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)={0x60, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x3}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x60}}, 0x20000000) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x48, 0x10, 0x49920d862a921d1b, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x28002}, [@IFLA_LINKINFO={0x35, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}]}}}, @IFLA_MTU={0x8, 0x4, 0xfff}]}, 0xfffffeb1}}, 0x0) 1.123085807s ago: executing program 4 (id=8979): r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0xffff, 0x2, 0x10, {0x2, 0x4e24, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x200048c0) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0xe3, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) r1 = socket$kcm(0x21, 0x2, 0x2) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x240d00, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000500)={'batadv_slave_0\x00'}) sendmsg$kcm(r1, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0xffff, 0x2, 0x10, {0x2, 0x4e24, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000000600)=ANY=[], 0x10b8}, 0x20004844) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r4) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)={0x2c, r5, 0x1, 0x70bd2c, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xc, 0x4, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x5, 0x1, [0x18]}]}]}]}, 0x2c}}, 0x2400c090) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x1a, 0x6, 0xc8, 0x3, 0x18, 0x1, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3}, 0x50) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes\x00', 0x26e1, 0x0) close(r8) socket$vsock_stream(0x28, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100008dffff"}) ioctl$SIOCSIFHWADDR(r8, 0x8b15, &(0x7f0000000000)={'wlan1\x00', @remote}) r9 = accept(r0, 0x0, &(0x7f00000003c0)) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000004c0)={r7, &(0x7f0000000300)="cb462625b632a341dadbf27dded1fad9bd0ccd3f6f59f5f2ecc277520ee0c8384829d27230c9e03bb01332b11d27cec6bba4ffdccb8cc9f84700900b5ba6c343c971edeb5aea8737168fd4654433890e5eec81472dbd53ed3edd527dde4db591865d53da68e413efa20e76be833ee0542aa5afebbaaf2f587ac8ba04378a1b96027984684f680f7b351e50b613d188a70fd5e2497225b4cb9a7bb5504d309d65e5b0032573eb34b9df86e0076e", &(0x7f0000000400)=@tcp=r9}, 0x20) sendmsg$NL80211_CMD_GET_POWER_SAVE(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r5, 0x20, 0x70bd26, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x2, 0x15}}}}, ["", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x24040001}, 0x41) syz_emit_ethernet(0xca, &(0x7f0000000180)=ANY=[@ANYBLOB="ffffffffffff0000000000002800450000bc0000000000019078ac1e0001ac1414bb0c00907800000000480000000000000000110000991414aaac1414aa0703dd000dee0dd9de36ed4bcc5b4e230523e7440c00030000000000000000890f0000004000ffffff0be130cdff444c0001ac1e00010000000000000000000000000000000000000000ac1414aa000000007f000001000000000000000000000000ac1e000100000000ffffffff00000000ffffffff00000000441400001500000000000000e21475df43570cc3008245eb12bffb964e692e9bbf0843864534fd6ea83f434acf"], 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000002000)=@ipv6_delrule={0x54, 0x21, 0x100, 0x70bd2d, 0x25dfdbfe, {0xa, 0x20, 0x80, 0x2, 0x8, 0x0, 0x0, 0x3, 0x3}, [@FRA_SRC={0x14, 0x2, @local}, @FRA_DST={0x14, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}}, @FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x4, 0x6c9b}, @FIB_RULE_POLICY=@FRA_SUPPRESS_IFGROUP={0x8, 0xd, 0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x800) 1.005224114s ago: executing program 1 (id=8980): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000040), 0x10) listen(r1, 0x0) accept4(r1, 0x0, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000003c0)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201c5ea39063071e922d8afb0b492ca6119fb0f33777da93adbaf7027c0a1f7399bef09dd3620bea7a043f72b5bed07fbb935e5d29abfdc43ff8f535e618bd1b7a40de2dbfb9a4fec192d385dcfa5ee348d4bd6f7bc8c6b937f11fd7eee6b293e398d2be48b977e44495034e1cdcd1735f3f9b2b8ea0be3e046376164ff5e5a5f464080f62f8c9a2bacef94664b6d326c89f176dbdbbd85d93f58e2a8d953039a04a437b14e04cd09b2ec7da00501e979d4f72a3f4fc355fb96f516e2b98fc45babd8780b2e2717247276", 0xf7}], 0x1}, 0x4000804) 908.959646ms ago: executing program 4 (id=8981): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r1, 0x1, 0x54, &(0x7f0000000080)=0x1, 0x4) close(0x3) recvmsg$unix(r1, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x62) recvmmsg(r0, &(0x7f0000000400)=[{{0x0, 0xf5ffffff, 0x0, 0x0, 0x0, 0x4000000}}], 0xf00, 0x4c42bb4f92, 0x0) shutdown(r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) (async) setsockopt$sock_int(r1, 0x1, 0x54, &(0x7f0000000080)=0x1, 0x4) (async) close(0x3) (async) recvmsg$unix(r1, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x62) (async) recvmmsg(r0, &(0x7f0000000400)=[{{0x0, 0xf5ffffff, 0x0, 0x0, 0x0, 0x4000000}}], 0xf00, 0x4c42bb4f92, 0x0) (async) shutdown(r0, 0x0) (async) 908.547169ms ago: executing program 2 (id=8982): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[], 0x18}}, 0x20004000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x54}, 0x1, 0x0, 0x0, 0x4008804}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 864.996153ms ago: executing program 2 (id=8983): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="5c0000001000010025bd7000fddbdf2500000000", @ANYRES32=r3, @ANYBLOB="102a05f4ffffff000c001a8008000280040001"], 0x5c}, 0x1, 0x0, 0x0, 0x20004001}, 0x4000000) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010028bd700000dcdf2505003a73797a32000000000c000280080003002464484c000000000000000000000000005a34184b5a346eca2c190e8834cab799c0958f0b3184b24a92cf4e68ed6b2ad73e6625234d7d33116fd4666d0447b9bf5346fe1e0de511b3f1a1f4b4e38a68f3c73ecac4d2079793ca5c48848afe55ddafcf9767758d2f04f6755c1fc7bb2269c1888bca5168edfe83b3055b70a6e1166fc2996baae1fba70ad25a9d"], 0x34}, 0x1, 0x0, 0x0, 0x4c445}, 0x44004) ioctl$SIOCSIFHWADDR(r0, 0x8b04, &(0x7f0000000000)={'wlan1\x00', @random="0200"}) 847.13564ms ago: executing program 4 (id=8984): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x13, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000004c00000095"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x6a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x130}, 0x90) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4000) sendmsg$NFT_BATCH(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_MATCH_INFO={0x5, 0x3, "e4"}, @NFTA_MATCH_NAME={0xb, 0x1, 'socket\x00'}, @NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x88}, 0x1, 0x0, 0x0, 0x24044800}, 0x0) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f00000000c0)=0x41) pwritev(r0, &(0x7f0000000840)=[{&(0x7f0000000880)="80fd02000000", 0x6}], 0x1, 0xfffffffc, 0x0) 797.388345ms ago: executing program 0 (id=8985): r0 = socket$rds(0x15, 0x5, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xffeff00c}, {0x6}]}, 0x10) sendto(r1, 0x0, 0x0, 0x2, 0x0, 0x0) r3 = syz_init_net_socket$bt_rfcomm(0x1f, 0x0, 0x3) setsockopt$bt_BT_SNDMTU(r3, 0x112, 0xc, &(0x7f0000000080)=0x200, 0x2) bind$rds(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) r4 = socket(0x40000000015, 0x5, 0x0) getsockopt(r4, 0x200000000114, 0x2716, &(0x7f00000198c0)=""/102393, &(0x7f0000000240)=0x18ff9) 753.62174ms ago: executing program 0 (id=8986): r0 = socket$alg(0x26, 0x5, 0x0) (async) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r1, &(0x7f0000000000)={0x1f, @fixed}, 0x8) bind$bt_sco(r1, &(0x7f0000000700)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x8) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000300), r2) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)={0x20, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0xc, 0x2, 0x0, 0x0, @str='nl80211\x00'}]}, 0x20}}, 0x0) (async) recvmmsg(r2, &(0x7f0000000a40)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000240)=""/51, 0x33}, {&(0x7f0000001080)=""/4096, 0x1000}], 0x2}}], 0x1, 0x10000, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r3 = accept4(r0, 0x0, 0x0, 0x0) sendto$packet(r3, &(0x7f0000000b80)="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", 0x180, 0x8001, 0x0, 0x0) (async) recvmsg(r3, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000440)=""/242, 0xf2}, {&(0x7f00000022c0)=""/144, 0x90}], 0x2}, 0x40) 721.389554ms ago: executing program 2 (id=8987): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x10448) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000280)={0x38, r2, 0x8d61ddcfedb48df, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x4}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}]}]}, 0x38}}, 0x0) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={0xffffffffffffffff, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000000c0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, &(0x7f0000000200)=[0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0], 0x0, 0x80, &(0x7f0000000280)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000300), &(0x7f0000000340), 0x8, 0xe9, 0x8, 0x8, &(0x7f00000003c0)}}, 0x10) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'gre0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0xffffffffffffff2d, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) (async) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000880)=@newtfilter={0x90, 0x2c, 0xf3f, 0x30bd29, 0x25dfd3f5, {0x0, 0x0, 0x0, r5, {0x1}, {}, {0x7, 0x4}}, [@filter_kind_options=@f_flower={{0xb}, {0x60, 0x2, [@TCA_FLOWER_ACT={0x5c, 0x3, [@m_skbedit={0x58, 0x1, 0x0, 0x0, {{0xc}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x3}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x9}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x27a, 0x7fff, 0x6, 0x4, 0x3}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0x90}, 0x1, 0x0, 0x0, 0x20041890}, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000005c0)={'ip6tnl0\x00', &(0x7f0000000540)={'ip6tnl0\x00', 0x0, 0x4, 0x2, 0x3c, 0x5, 0x28, @private0={0xfc, 0x0, '\x00', 0x1}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x20, 0x20, 0x7, 0x2}}) sendmsg$ETHTOOL_MSG_COALESCE_GET(r0, &(0x7f0000000800)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000600)={0x188, r2, 0x4, 0x70bd2a, 0x25dfdbfb, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x84, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x188}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) (async, rerun: 64) r9 = socket(0x2, 0x80805, 0x0) (rerun: 64) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) (async) getsockopt$inet_sctp_SCTP_MAX_BURST(r9, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r8, 0x84, 0x7b, &(0x7f0000000080)={r10, 0x808000}, 0x8) setsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000000)={r10, 0x2, 0xe8, 0x4, 0x3, 0x1}, 0x14) (async, rerun: 32) r11 = socket(0x2, 0x80805, 0x0) (rerun: 32) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYRESDEC=r7, @ANYRES32=0x0, @ANYBLOB="00000000008000004800128008000100687372003c000280060005000180000008000100", @ANYRES32=r12, @ANYBLOB="0500060001000000050007000000000005000300df00000008000200", @ANYRES64=r7], 0x68}}, 0x0) 620.667791ms ago: executing program 3 (id=8988): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f00000000c0)=@ethtool_regs}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$FS_IOC_SETFSLABEL(r2, 0x8911, &(0x7f0000000000)="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") sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB="24000000510001010000000000000000000f000100aaaaaaaaaac437a56d223000000000"], 0x24}}, 0x0) 577.88939ms ago: executing program 0 (id=8989): r0 = socket(0x15, 0x5, 0x0) getsockopt(r0, 0x200000000114, 0x2713, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r2) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@newlink={0x48, 0x10, 0x437, 0x800000, 0x0, {0x0, 0x0, 0x0, r3, 0x504c3}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_TOS={0x5, 0x9, 0xb5}, @IFLA_GRE_FWMARK={0x8, 0x14, 0x4}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2000c014}, 0x0) sendmmsg$inet(r1, &(0x7f0000000300)=[{{&(0x7f00000002c0)={0x2, 0x4e23, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @multicast1, @remote}}}], 0x20}}], 0x1, 0x40000) 577.191049ms ago: executing program 4 (id=8990): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000d40)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001100), r0) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000001140)={0x1c, r2, 0x1, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r1}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x4004000) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000000380)={'tunl0\x00', &(0x7f00000002c0)={'sit0\x00', r6, 0x700, 0x700, 0x1, 0x80000001, {{0x28, 0x4, 0x3, 0x22, 0xa0, 0x65, 0x0, 0x1, 0x29, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x2e}, {[@cipso={0x86, 0x2b, 0x3, [{0x2, 0x7, "d04504a10a"}, {0x0, 0xe, "7851814a7b35bbd1147d65a8"}, {0x1, 0x10, "2659c03f7ad95d2ebcb679204e61"}]}, @timestamp_addr={0x44, 0x34, 0x8c, 0x1, 0x2, [{@remote, 0x28000}, {@rand_addr=0x64010102, 0xfffffe01}, {@dev={0xac, 0x14, 0x14, 0x1c}, 0x5}, {@empty, 0x3}, {@loopback, 0xb0b1}, {@dev={0xac, 0x14, 0x14, 0xe}, 0x2}]}, @timestamp_addr={0x44, 0x14, 0x14, 0x1, 0x3, [{@multicast1, 0x15fcb5ff}, {@broadcast, 0x9}]}, @lsrr={0x83, 0xb, 0x65, [@multicast2, @local]}, @noop, @ssrr={0x89, 0xb, 0x3b, [@private=0xa010100, @multicast1]}]}}}}}) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0x1f5c, 0x2c, 0xd27, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0x7}, {}, {0x7, 0xe}}, [@filter_kind_options=@f_fw={{0x7}, {0x54, 0x2, [@TCA_FW_ACT={0x50, 0x4, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x3513, 0x6, 0xffffffffffffffff, 0xb6b9, 0x3}, 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}, @filter_kind_options=@f_route={{0xa}, {0x1ed0, 0x2, [@TCA_ROUTE4_FROM={0x8, 0x3, 0xed}, @TCA_ROUTE4_TO={0x8, 0x2, 0xf2}, @TCA_ROUTE4_ACT={0x1608, 0x6, [@m_mirred={0x144, 0x19, 0x0, 0x0, {{0xb}, {0x84, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0xca24, 0x2, 0x635, 0x6}, 0x4, r6}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xfffffff9, 0xfffff8d7, 0x5, 0x8, 0x8}, 0x4, r7}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x5, 0x6, 0x6, 0x1ff, 0x2}, 0x3, r6}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x80000001, 0x5, 0x6, 0xf8d, 0x5}, 0x1, r6}}]}, {0x98, 0x6, "9640925de593aafc2791bdff45df0b9ce8540f47f79aeae7785cf24873ea06fdd22aa0c7bccd1dbe9e82000d3df79852376b39fa593839929cfb68d43d6d7e026f9101fc8c208387cf590c9af585e7e773ebc3c88ceaefb5c3e9b6784507b8c4483464cefcc78796f104a528d766ee9348c844fc5147badcf0651c3686c122a7f9e82abb6550f6b15a937a3de01983ef4a185d03"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_mpls={0x80, 0x1c, 0x0, 0x0, {{0x9}, {0x4c, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x3, 0x4, 0x5, 0x310, 0x6}, 0x1}}, @TCA_MPLS_LABEL={0x8, 0x5, 0x7d50c}, @TCA_MPLS_TTL={0x5, 0x7, 0x1}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0xc, 0x0, 0x10000000, 0x9, 0x7}, 0x4}}]}, {0xb, 0x6, "1f395827e79f7d"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1}}}}, @m_xt={0x140, 0x17, 0x0, 0x0, {{0x7}, {0xe8, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0x91, 0x6, {0x8001, 'filter\x00', 0x77, 0x2, "7fd44ba21fe33d288eab29c4e16f89708238f5def0bc577bf6d32999154502ce8f5d07918018951a8c12b869c2663b834220ec6de1c6e29ad1422316a4a2d04af40d80b2f43849bf36841b15ba61972620d17c8ad45a927c1c0e2fce835326c191000000000000"}}, @TCA_IPT_TABLE={0x24, 0x1, 'mangle\x00'}, @TCA_IPT_TABLE={0x24, 0x1, 'nat\x00'}, @TCA_IPT_HOOK={0x8, 0x2, 0x1}]}, {0x33, 0x6, "d11d6fa3c10c5b0a895d136a1488abe3b8dc302fea779e838a14213ba0ce25c7f38e87bb3a195c58866551d7b2bbae"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_police={0x11f0, 0x15, 0x0, 0x0, {{0xb}, {0x11bc, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE64={0xc, 0x8, 0x6}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x2, 0x6, 0x10001, 0x4, 0x5, {0x2, 0x1, 0xe1, 0xfffa, 0x9, 0x7}, {0x7, 0x2, 0x401, 0x400, 0x6, 0xd8d2}, 0x1, 0x8, 0x7}}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x200}, @TCA_POLICE_TBF={0x3c, 0x1, {0x10001, 0x5, 0xf197, 0x10001, 0x6, {0x27, 0x2, 0x8000, 0x5, 0x0, 0x9}, {0x3, 0x2, 0x4, 0x3, 0x1, 0x19}, 0xffff, 0x7b, 0x80000000}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x2f2dc83e}, @TCA_POLICE_RATE64={0xc, 0x8, 0x200}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x40, 0x40, 0x3, 0x5, 0x0, 0xa9, 0x400, 0x3, 0x200, 0x3, 0x2, 0x2, 0xff, 0xfff, 0x8, 0x70c, 0x7, 0xfffffd33, 0xb8fe, 0x3, 0xe2, 0x9, 0x401, 0x0, 0x3, 0x37dd, 0x2, 0x8, 0x9, 0x9, 0xfffffa73, 0x0, 0x1, 0x3, 0x8, 0xf05, 0x6, 0xbe, 0x0, 0x3, 0x1, 0x2, 0xa7ac, 0x8, 0xd, 0x9938, 0x8bc, 0x6, 0x2, 0x4, 0x4, 0x7ff, 0x951a, 0x9ad8, 0x7d2, 0x6, 0x2, 0x4, 0x9, 0x810, 0x0, 0x8, 0x0, 0x25, 0x9, 0x2, 0x79, 0x3050, 0x8, 0x2, 0x0, 0x800, 0x7fffffff, 0x9, 0x9, 0x3ff, 0x200, 0x7, 0x5, 0x3, 0x400, 0xffff8001, 0x6, 0x8, 0x2, 0x2, 0x3, 0x5, 0x4b, 0x8001, 0x1f6a, 0x1, 0x3ff, 0x82e, 0x5, 0x5, 0xffffffff, 0x8, 0x3, 0x9, 0x5, 0x3, 0x62b7, 0x96, 0x0, 0x7, 0x1, 0xa0000000, 0x800, 0x6, 0x3ff, 0x400, 0x40, 0xd, 0x200, 0xb18, 0x2, 0x8b, 0x0, 0x2, 0x3, 0x4, 0x1, 0xd, 0x3, 0x8, 0x1a, 0xba6b, 0x3, 0x7, 0xfffffffc, 0x0, 0x7, 0x9, 0x2, 0x401, 0x8, 0xfffffff8, 0x0, 0xffff8001, 0x9, 0xdbc, 0x8, 0x5, 0x10, 0x3f36, 0x8000, 0x0, 0x1, 0x1, 0xfffffffc, 0x4, 0xbde1, 0x4, 0x9, 0x8, 0xe, 0xfff, 0x5, 0x8bd, 0x70, 0x2, 0x80000001, 0x5, 0x3, 0xfffffffe, 0x6, 0x7, 0x8, 0x833b, 0x8, 0x551f, 0x6, 0x1000, 0x28, 0x6, 0x800, 0x0, 0x67d, 0x5, 0xbb, 0x30, 0x2, 0x7d, 0x2, 0xfffff000, 0x4, 0x800, 0x7fffffff, 0x9c69, 0x101, 0x6c65, 0xd89, 0x4, 0x6, 0x80000000, 0x2, 0x1ede, 0x7, 0xfaf3, 0x7f, 0x9f2, 0x8, 0x10001, 0x1000, 0xe3, 0x5, 0x10000, 0x2, 0x7, 0x5, 0x9, 0x8, 0x6, 0x80, 0xb6, 0x2, 0x5, 0x25, 0x8, 0x3, 0x2, 0x2, 0x6, 0x400, 0x1, 0x8, 0x305, 0x3, 0xb, 0x7, 0x4, 0x1, 0x1, 0x48000000, 0xccbb, 0x2, 0x40, 0x8, 0x5, 0xfffffffe, 0x81, 0x0, 0x5, 0x9, 0x6, 0x200, 0x1, 0x36ba, 0x6, 0x10000, 0xd, 0x8000, 0xc, 0x7, 0x5]}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x7eef, 0x0, 0x1, 0xb8b, 0xe90f, 0xfffffff2, 0x6, 0x7, 0x3, 0xfffffff8, 0x7, 0x3, 0x3, 0x6, 0x3, 0xf072, 0x7, 0x7ff, 0x7, 0x7, 0xd5a9, 0x4c5, 0x8, 0x4, 0x1, 0x0, 0x5a6d, 0x4, 0x9, 0x7fffffff, 0x1, 0x7a, 0x9, 0x1, 0x7f, 0x0, 0x70a0c810, 0x6, 0x2b8f, 0x3ff, 0xffffff7f, 0x0, 0x4, 0x1, 0x1ff, 0x3, 0xf, 0x53, 0x400, 0x1, 0x80000001, 0x5, 0x81, 0x7, 0x2, 0x39ae, 0xfffffffd, 0xfffffff0, 0x6, 0x6, 0x0, 0xfffffff8, 0x512, 0x6c7e, 0x5, 0x4, 0x7, 0x3, 0x81, 0x4, 0x0, 0x8, 0x5, 0x5, 0x8, 0xf, 0x6, 0x1ff, 0xd557, 0x7, 0x4000000, 0xfffffffc, 0x3, 0x3, 0x1, 0xe3b, 0x7, 0x6, 0x548e, 0x4, 0x7, 0x8, 0x5, 0x3ab, 0x4, 0x7, 0x53cf36da, 0xf, 0x9, 0x4421, 0x8, 0x4, 0x73, 0x81, 0x400, 0x250000, 0x7fff, 0xf7c, 0x6, 0x4, 0x9, 0x9, 0x0, 0x1, 0x3ff, 0x5, 0x5, 0x7fffffff, 0x81, 0xfff, 0x7, 0x10000, 0x7ff, 0xa67, 0x7, 0x3, 0x3, 0xe52, 0x3, 0x8, 0x8, 0x7fffffff, 0xdc16, 0x4d, 0x10001, 0x7000, 0x8, 0xfffffff9, 0x5, 0x4, 0x2970, 0x1b0c0000, 0x2, 0x5, 0xfffff086, 0x80, 0x4, 0x1, 0x1, 0x7fff, 0x6, 0x400, 0x8, 0x7f, 0xff, 0xfffffffc, 0x8, 0x7, 0x4, 0x1, 0x2aa9d69, 0x930, 0x0, 0x5, 0x4, 0x5, 0x6, 0x4, 0x0, 0x80, 0x3, 0x3, 0xfffffffc, 0xbaf8, 0x5, 0xfddb, 0x0, 0x6, 0x80000000, 0xffffff01, 0x902, 0x6, 0x8, 0x6, 0x6, 0x2, 0xaa05, 0x6, 0x3, 0x9ec8, 0x0, 0xe, 0x40, 0x2, 0x7, 0xc235, 0x6, 0x4000000, 0x8001, 0x3, 0x1, 0x8, 0x7, 0x1, 0x7, 0x5, 0x9, 0x7, 0x0, 0x100, 0x6, 0x0, 0x0, 0xd6, 0x5, 0x2, 0x6, 0x0, 0xf, 0x9, 0x8, 0x200, 0x9, 0x6, 0x7551, 0xfffffd32, 0xa94e, 0x2350fbf1, 0x862, 0x80, 0x2, 0x40, 0x9, 0x674, 0x8, 0xe, 0x1ff, 0x5, 0xfffeffff, 0x5, 0xe9de, 0x39b, 0x9, 0x8, 0x3fc000, 0x5, 0x4, 0x5, 0x5, 0xa, 0x9, 0x7, 0x9, 0xd8, 0x8]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xffffffffffffb043}, @TCA_POLICE_TBF={0x3c, 0x1, {0x2, 0x8, 0x10001, 0x6, 0xa, {0x0, 0x0, 0x5, 0x3, 0x9af2, 0xe}, {0x0, 0x0, 0x1, 0x7, 0x44, 0x40}, 0x7, 0xa, 0x1}}, @TCA_POLICE_RATE64={0xc, 0x8, 0x4}, @TCA_POLICE_PEAKRATE64={0xc}], [@TCA_POLICE_RESULT={0x8, 0x5, 0x9}, @TCA_POLICE_RATE={0x404, 0x2, [0xe0, 0x8, 0x6, 0x8001, 0x9, 0xab, 0x7, 0x2, 0xb7, 0x2, 0x5, 0x6898, 0x9, 0xe4, 0x1, 0x7f, 0x0, 0xfffffff6, 0x8, 0x3, 0x8, 0xad6, 0x4, 0x7, 0xff, 0x80000001, 0x5, 0x7, 0x5, 0x6, 0x2a58, 0xfff, 0x7, 0x4, 0x40, 0x3, 0x800, 0x7, 0x3ff, 0x10000, 0xbe, 0x1, 0x1ff, 0x9a, 0x401, 0x10, 0x7, 0x8, 0xd, 0x8, 0x6, 0x7, 0x1, 0x66d9, 0xd, 0x4, 0x6, 0x2, 0x7d, 0x0, 0x80000000, 0xfffffffa, 0x2000, 0x7, 0x9, 0x0, 0xfffffffa, 0x4085efaf, 0x2, 0x4, 0xf7, 0x0, 0x6, 0xffffffff, 0x4, 0x6, 0xd, 0x4, 0xc, 0x0, 0xffff, 0x8, 0x845f0, 0x4, 0x9, 0x101, 0x9, 0x56, 0x4f23, 0x3, 0x1, 0x200, 0x1, 0x1, 0x1, 0x6, 0x8, 0xbf, 0x1, 0x0, 0x6, 0x80000000, 0x41b, 0x5, 0x8, 0x100000, 0xf, 0x1ff, 0x7, 0x8, 0x4, 0xd389, 0x3, 0xffffff56, 0xfb, 0x6, 0x80000001, 0x7fff, 0xf, 0x8, 0x1, 0xb, 0x1, 0x3, 0x4, 0x80, 0x6e, 0x3ff, 0x2, 0x5, 0x6, 0x0, 0x5, 0x478e, 0x7131, 0xb, 0x3, 0xd, 0x5, 0x1, 0x8, 0x7, 0x9, 0x6, 0x401, 0x9, 0x5, 0x4, 0x2, 0x7, 0x8, 0x6, 0x3, 0x1, 0x29, 0x3ff, 0xff, 0x3, 0x0, 0x5, 0x80, 0x3ff, 0x4a, 0x6, 0x9, 0x8, 0x9, 0x5, 0x1, 0xc, 0x2, 0x2, 0x3ff, 0x8, 0x3, 0x7, 0x10, 0x6cc, 0x48b5, 0x40, 0x8000, 0xfffffff7, 0xffffffc0, 0xff, 0x7e5b, 0x1ff, 0x10000, 0x0, 0xa9e9, 0x7, 0x2, 0x6, 0x9, 0x10001, 0x48c, 0x0, 0x7f, 0xdc00, 0x2, 0x6, 0x3, 0x0, 0x6, 0x1, 0x9, 0x7, 0x57, 0xf, 0x4, 0xc, 0xb, 0x72, 0x1ff, 0x0, 0xf309, 0x2, 0x10, 0x6, 0x0, 0xab, 0x5, 0x10, 0xd, 0xffffff2b, 0x2, 0x1, 0x3ff, 0x5, 0xe47, 0x8001, 0x0, 0x100, 0x3, 0x2, 0x6, 0x0, 0x9, 0x4, 0x7fff, 0x0, 0x7, 0x10, 0x0, 0x0, 0x1, 0x8, 0x4, 0x2, 0x6, 0x5, 0x5, 0x6, 0x67d5, 0x7, 0xb, 0x2]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0x7, 0x17c, 0x7ff, 0xa1, {0x1, 0x1, 0x2b13, 0xb2, 0x3, 0x9}, {0x7, 0x0, 0x1, 0x9, 0x81, 0x80000000}, 0x1, 0x7fff, 0x9}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xffffffc0, 0x3, 0x9, 0x0, 0x4b, 0x10001, 0x9, 0x10000, 0x28a, 0x705, 0x6, 0x0, 0x3, 0x9, 0x3, 0x3, 0x0, 0x7, 0x2, 0x8, 0x5, 0x5, 0x10, 0xd8, 0x6, 0x8, 0xffffffff, 0x22e6, 0x4, 0x2, 0x5, 0x1, 0xddf, 0x100, 0x2, 0xf6, 0xffffffff, 0x8, 0x7fff, 0xa, 0x0, 0x0, 0x8000, 0xa, 0x10000, 0xfffffffe, 0x81, 0x7fffffff, 0x1, 0x7, 0x9, 0x9d, 0xc, 0x7fff, 0x1, 0x9, 0x8000, 0x5, 0x1, 0x540, 0x1, 0x7fffffff, 0x7e96128b, 0x7, 0x6, 0xfff, 0x2, 0x10, 0x80, 0x80000001, 0x8, 0x30, 0x3, 0xfffffff1, 0x1, 0x81, 0x6, 0x4, 0x4, 0x0, 0x8, 0xf83, 0xfc, 0x3, 0x5, 0x8, 0x9, 0x10000, 0x8, 0xc0, 0x8, 0x0, 0x10000, 0x2, 0x7, 0xa, 0x6, 0x3, 0x37eb, 0x1, 0x4, 0x5, 0xffff, 0xf, 0x9, 0x1, 0xd254, 0x8, 0x7ff, 0x1, 0xffffffff, 0x1, 0x5235, 0xffff, 0x188, 0xa, 0x1, 0x3, 0x684, 0x8000, 0x8c, 0x3ff, 0x0, 0x2, 0xffffffff, 0x2a9, 0x6, 0x4, 0x4, 0x0, 0x0, 0x9, 0x3, 0x100, 0x52c, 0x400, 0x2, 0x7f, 0x7, 0x1, 0xdb9, 0x7, 0x7f, 0x5, 0x5, 0xa5, 0x8, 0x1, 0x0, 0x1, 0x7, 0x2, 0x7, 0x6, 0x8000, 0x936e, 0x6, 0x5, 0x1, 0xbd, 0x6, 0x8, 0x76d, 0xa2, 0xfffffa51, 0x34, 0x4, 0x8, 0x8, 0x80000001, 0x2, 0x9, 0x1, 0x4, 0x6, 0x9, 0x401, 0x7, 0x4634, 0x9, 0x4, 0xeea1, 0xfffffffd, 0x1, 0x9, 0x5, 0xe5, 0x5, 0x3, 0x6, 0x7fffffff, 0x1, 0x6, 0x5, 0x66, 0x8, 0x7, 0x3e, 0x0, 0x6, 0x0, 0x4, 0x0, 0x9, 0x1c3, 0x1, 0x5, 0x9, 0x1, 0x4, 0x4, 0xf689, 0x7ff, 0xffff, 0x8, 0x7fff, 0x5, 0x80, 0x100, 0x2, 0x999, 0x6, 0x4, 0x5, 0x1, 0xa6, 0x4, 0xffff, 0x7, 0x81, 0xe0, 0x8, 0x0, 0x4, 0x6, 0x1, 0x100, 0xfffffff8, 0xfffffffd, 0x425d, 0x2, 0x6, 0x7f, 0xf, 0x3, 0x9df3c76b, 0x3, 0xe, 0x4, 0x4, 0x4, 0x1, 0x4, 0x5, 0x8, 0x2]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x1ff}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x7fff}, @TCA_POLICE_RESULT={0x8}, @TCA_POLICE_TBF={0x3c, 0x1, {0x5f1e, 0x5, 0x6, 0x800, 0x5, {0xd, 0x1, 0x1, 0x5, 0x5}, {0xc4, 0x2, 0xe4c, 0x1ff, 0x5, 0x6}, 0x7, 0x3}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x7f}]]}, {0x9, 0x6, "cbe71667e8"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_simple={0x110, 0x17, 0x0, 0x0, {{0xb}, {0x4}, {0xe2, 0x6, "9d614a3cfbc48499ff721d504312ecea5645d8eda48a3b9133881a2a012f6614e9ed27c222e3cd8cb8290571d5f5d534848310b773a55e3180ad365daa8cf722a4d529c7b99a7d7d5562441c884d0aa248bdeec8f4a2e7178ab9278d4d353046a0d8c84500c40be7def537c5f9b3f22b0872d02a4ddbcf3e0c8e3a87a07d992fede544c5f5fc4211f2bb8ca4950b60833f2520db6e5ec83268270e175ecd2344a293c554de6c2944cbc4992716b526d88d3a2aba241347605346baa31eefeeb35bc4f69c7e1685c4dea7d03259bd2c75eadeb798f22edf5267a118979fe2"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}, @TCA_ROUTE4_POLICE={0x8b4, 0x5, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x4af}, @TCA_POLICE_RATE64={0xc}, @TCA_POLICE_RATE={0x404, 0x2, [0x7aa, 0x7, 0x8, 0x8000, 0x8, 0x3, 0x0, 0xb, 0x197, 0x7f, 0xd, 0x9, 0x6c12, 0x10001, 0x100, 0x4, 0x9, 0x10000, 0x9, 0xe, 0xffffffff, 0xbfcd, 0x4, 0x44, 0x9, 0x4, 0x1, 0x1, 0x9, 0x1, 0xfffffe2b, 0x7, 0x6, 0x4, 0x9, 0x8, 0x3, 0x8, 0x2, 0x36d, 0x5, 0x401, 0x1ff, 0x5, 0x200, 0x8, 0xc, 0x3ff, 0x10, 0x7, 0x5, 0x7, 0x7, 0xe, 0x4, 0xe, 0x8001, 0x6, 0x5, 0xc5, 0x7f, 0x5, 0x1, 0x7, 0x27, 0x3, 0x4, 0xd, 0x0, 0x0, 0x5, 0xd48, 0x9, 0x7fff, 0x7f2, 0x2, 0x19c, 0xa1a, 0x5, 0x4, 0x5, 0x2, 0x1, 0x6, 0x3ff, 0x7fffffff, 0x0, 0x4, 0x6, 0x7, 0x2, 0x3, 0x3, 0xb19e, 0x9070, 0xb, 0xb12, 0x0, 0x400000, 0x7ff, 0x0, 0x7fffffff, 0x5, 0x2, 0x7fffffff, 0x101, 0x5, 0x8, 0x0, 0x3, 0x9, 0x6, 0x7, 0xfff, 0x2, 0xe5e8, 0x5, 0x4, 0x9, 0xb0, 0x8, 0x5, 0x1, 0x9, 0xf29, 0x5, 0x9, 0x7, 0x7, 0xffffffff, 0x101, 0x0, 0x5, 0xffff, 0x1, 0x1000d, 0x4, 0x7fff, 0x9, 0x2, 0x5, 0x2, 0x397, 0x7, 0xffffffd5, 0x7, 0x7, 0x0, 0x6, 0x4, 0x4, 0x7, 0x2, 0x1, 0xffffffff, 0x400, 0xfc, 0x1, 0x2, 0x4, 0xfffffc01, 0x4, 0x7f, 0x4, 0x9, 0x830, 0x8, 0xd, 0xa, 0x80, 0x0, 0xb49, 0x5, 0xc, 0x200, 0x9, 0x1, 0x7ee, 0x7b, 0xec8, 0x9, 0x0, 0xaa, 0x4, 0x0, 0xf, 0x2, 0x2, 0x0, 0x4533, 0x100, 0x7, 0x6, 0x4d, 0x3, 0xffffffff, 0x0, 0x1000, 0xc, 0x9, 0x4, 0x5, 0x2, 0x7fff, 0x48af, 0x8, 0x80000001, 0x9, 0x5, 0x0, 0x73000000, 0x6, 0x9, 0x1000, 0x4, 0xffff, 0x5, 0x6f9a, 0x6, 0x9, 0x0, 0x8, 0x2, 0x7, 0x3, 0x2, 0x0, 0x10000, 0x8, 0x101, 0x401, 0x0, 0x1, 0x7f, 0x0, 0x400, 0x8b0d, 0x10, 0x7, 0x7, 0x8, 0x1000, 0x80, 0x3, 0xffffffff, 0x0, 0x2, 0x8, 0x3, 0xec, 0x68f4, 0x3ff, 0x9, 0x1ff, 0x2, 0xffffffff]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0x1, 0x9, 0x7fff, 0x8, {0x7, 0x1, 0x8, 0x0, 0x8f10, 0x6a}, {0xff, 0x2, 0x6, 0x7, 0x4, 0x1}, 0xf, 0x7, 0xfffffff4}}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xedb}, @TCA_POLICE_RATE={0x404, 0x2, [0x99, 0x9, 0xfb5, 0x8, 0x6, 0x6, 0x2, 0x856, 0x5, 0x2, 0xfff, 0xfffffff9, 0x7, 0x10, 0x47c2, 0x0, 0x8, 0xe30, 0x8, 0x4, 0x4, 0x81, 0x430, 0x7, 0x5, 0x7, 0x3, 0xfffffff8, 0xe5e5, 0x0, 0x6, 0x1, 0x8, 0x3, 0x5, 0xfffffffa, 0x7, 0x5, 0xfffffffc, 0x40, 0x325a, 0x80, 0x6, 0xfffeffff, 0x5, 0x8, 0x6, 0x6, 0x4, 0x1208, 0x5, 0x8000, 0x7fffffff, 0x3, 0x4, 0x7ff, 0x80000000, 0x7, 0x9, 0x8, 0x4, 0x8, 0x6, 0x7, 0x5, 0x430, 0x101, 0x2, 0x3, 0x7d, 0xfffffffb, 0xd35, 0x3ff, 0x2, 0x400, 0x2, 0x8, 0x1, 0x0, 0x9, 0x40, 0x4, 0x1, 0x80, 0x7, 0x5, 0xc, 0x80000000, 0x9, 0x9, 0x0, 0x4, 0x2, 0xd, 0x1, 0x3, 0xa608, 0x2, 0x5, 0x4, 0x4, 0x9, 0x4, 0x4, 0x1, 0x6, 0xd04, 0x10000, 0x0, 0x9, 0x5, 0xfbb1, 0x3, 0x304, 0x6, 0x8, 0x0, 0x99, 0x1000, 0x36b, 0x1, 0x0, 0xffff, 0x7, 0x3, 0xef, 0x8, 0x24f, 0x1000, 0x8, 0x5, 0x6, 0x3, 0x7, 0x8, 0x7, 0x9, 0x8, 0x259, 0xffffffff, 0xffffffff, 0x6, 0x4, 0x7, 0x101, 0x9, 0x4, 0xfffffff2, 0x5, 0x9, 0xffc3, 0x3, 0x7df, 0x0, 0x6, 0x1, 0xf, 0x3, 0xfff, 0x7, 0xfc28, 0xfffffffe, 0x7, 0x10001, 0x3, 0x0, 0x8, 0x8, 0x100, 0xfffffffc, 0x2, 0x8, 0x6, 0x0, 0xa1d4, 0x0, 0x4, 0x2c46, 0x8, 0xffff0000, 0x10000, 0x7, 0x8, 0x12, 0x1, 0x3ff, 0x2, 0x6, 0x7, 0x6, 0xe, 0x8, 0x8, 0x58000000, 0xffff4419, 0xffff, 0xff, 0x2, 0x6, 0x9, 0x80000000, 0x10, 0xeb1, 0x8, 0x7ff, 0xfffffffb, 0x4, 0x3ff, 0xbfa, 0x2, 0xa5e6, 0x0, 0x5, 0x3, 0x45b0, 0x1ff, 0x65c, 0x3, 0x1, 0x1, 0xdf, 0x8, 0x40, 0x200, 0x0, 0x2, 0x6, 0x8, 0x0, 0x7, 0x5, 0x10, 0xfdf, 0x10001, 0x31, 0x200, 0x4e1f, 0x0, 0x6, 0x18, 0x664f, 0x9e, 0xc, 0x6, 0x6, 0x2, 0x1, 0x3, 0xa, 0x8, 0x9, 0x5000, 0x5, 0xffffff81, 0x8, 0x4]}, @TCA_POLICE_RESULT={0x8, 0x5, 0xfffffbff}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x8}, @TCA_POLICE_TBF={0x3c, 0x1, {0x3000000, 0x30000000, 0x8, 0x2, 0xd, {0x2, 0x1, 0x7, 0xffff, 0x7, 0x10}, {0x5, 0x2, 0x1, 0x1, 0x9}, 0x3, 0x4, 0x4}}]}]}}]}, 0x1f5c}, 0x1, 0x0, 0x0, 0x80}, 0x24000880) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'pimreg1\x00'}) 461.056201ms ago: executing program 3 (id=8991): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000007940)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x33f}, 0x1, 0x0, 0x0, 0xc0d0}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000440)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x1, @remote}, 0xa}}, 0x26) sendmmsg$inet(r2, &(0x7f0000005f80)=[{{0x0, 0x0, &(0x7f0000005dc0)=[{&(0x7f00000010c0)="7d5107673289eeae3f806c5c62db497a0299399ab6101c3b", 0x1}], 0x1}}], 0x4000000000001ce, 0x8040) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) socket$inet(0x2, 0x2, 0x3) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[], 0x94}}, 0x8000) write(r0, &(0x7f00000000c0)="88a36724ccccc98c2200dff1ab04e7ce382855ad39cbfe27531de8c7bbd12c355c894dfc34fd1475e4eb224f23810b67186cc8b334b67e6a6197ee82172fbd17e418c1b51421e7b125eb83be", 0x4c) 360.710498ms ago: executing program 0 (id=8992): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x14, 0x1, 0x4, 0x201, 0x0, 0x0, {0x7}}, 0x14}}, 0x2000004) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='hugetlb.2MB.usage_in_bytes\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0x806000) (async, rerun: 32) ioctl$FS_IOC_RESVSP(r2, 0x40305829, &(0x7f0000000740)={0x0, 0x2, 0x0, 0x20b7ee}) (async, rerun: 32) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x13, r1, 0x7ca8e000) (async, rerun: 64) writev(r2, &(0x7f0000000080)=[{0x0}], 0x1) (async, rerun: 64) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000100)=0x8) (async) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f0000000200)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) (async) r6 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r6, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c) (async) sendmmsg(r6, &(0x7f0000002400)=[{{0x0, 0x0, &(0x7f0000001900), 0x0, &(0x7f0000001980)=[{0x58, 0x10b, 0x7ffffffd, "4cbde9ffe2abfb7b23b59181f6f216fc3c5266bd901be47c1ede2345bf1c530385c370ec78740590a8f24175e8514a7a8b4fe5f0b49b4ad07749c04044152fddf08595e8e2"}, {0xe8, 0x113, 0xe, "bbc1e4f9065681e989536d7115f36bea1de61a2e70d0dfed39311dfcde785537b983cb502f9d700103e891436f3415c74f3226eae73a3081f27a46966ffa5c081c1b3c873493767ccc06102cb3b4f45c7123cd85420deef05cfa7fc1da8fa1ebe77599707f403d2a73884cb636cb2d6a6e707c74b8d20bf49bc541f3dd7c9655ba1a9e21794b08a234e970dd3149fb95c7d5be058442dfd65b226f0b4dc986b11dd49e9123f4c07f5475c900b4e62c98ba5773fcde189b4dc37559cd87b1c5ad45943353e20a086c5e2b879a442bba2f89368d209ac97907"}], 0x140}}, {{&(0x7f0000001ac0)=@xdp={0x2c, 0x8, 0x0, 0x2d}, 0x80, &(0x7f0000002100)=[{&(0x7f0000001b40)="bd504c4245e3b71781e836a1f94c95239fe14bae8639d53ecacbd98df0d39d457ee57496ef9162489f73bcb71f85d497fe86be1da939b2fd417578e18bd4f0df27aa2f90fa6609eaf16c8daacb2aa7b957dda3b91de9adae1249e7f743601397ae60cb225ae5e4e2c733094cac1027cc6cf5fe613c9f404db0a0382b39fb2f95caae9a34bb8d38b3a46d297fd071f64bed64e12ce9b00882fa1c2a4577d07fceea14891f255b6194d855934907b3062b02663ad4efe04d37cbab72c70d1d8182ae9ecb24fd4bf8041be66eac912a7949a4b3b5343bdf380da3f90552908fe8fe863e2bfe68114305c2a136aee513030c9711", 0xf2}, {&(0x7f0000000380)="776f5189d7d310535cc482dbe8949a75fba73c70656f57a4b55c5cfa029c0a2b45c66313fd0bec337b4274399c1d9e1543caf12247e9b7b03693ba99816b3707dc0ad74e301baff9956d26e278120d039aee4d471226e349d36e8c84a846cf37d7dae93f6f70f5a56e930cce4f3e782ce900"/123, 0x7b}, {&(0x7f0000001cc0)="75bf8d4403cbfcf6a3d92b9a4958e969d477b67458c31901d0d59b3bfe18260d", 0x20}, {&(0x7f0000001d00)="83dd6ad98e5563af5263719184d3dc88f1cd23be8250bdbbf49c86de17c73d1382cc85625d98a037f80f01abc340ca76dbc6c2d13c2bb304389109cf64d4975267b96980909f40b885", 0x49}, {&(0x7f0000001d80)="989031cb909952acc572515b32c3d26e637075fafdd819c4c725798ebb6e257ca35f7d1f2c9444ef1bfac8d0d3b1394cdb9d7ac70eb5feb06d4487f3f279d2b5c88a4ecfd98a5a9666e016f4a0d96e0fd4e1495844cd017e43e1b331b745fd5c0a7fd6ea4d0c8220531432ee0eb0d3a339637c73630c9a7b320eaeaa10bfd5565b47df98defacabba52e", 0x8a}, {&(0x7f0000001e40)="f2d7b82698c5a946336f396c9940121672684c79b66551ef8da33eb9adc35f003248dfa7877db069719a3991e25ba98c1b26c2559e1834536dcfd66639208e570bbb4e353df0c535a0df6ca679941ece8c4be7aa392123f86494b86baa45b15fc47cf7aa257d69b6287863096765ae34cd5bb76a9890258a1a5ed7aa0f6fb1afd0b4a36cc47ae2d313946ed70be921db00aee6f88395d15c92b16f58112d2c95e7708cb7774f5e6c6360f062e208e552565fd717009ac6c013d1e51e19d5b26d3b1e856bfcc52d08e72e539bb870a5dc9e5fac3bd3495a9c4a8fa2", 0xdb}, {&(0x7f0000001f40)="c634c4dc0e11a3f94d5a9e9559f364688fb2918bbb37d3d9771ba07d00ea8ab364066dbad8f36673245e410dc8c79161f936632c73d6c5ad09733756b623244a76a5d00ce9b7b0be415cc7dbd35a68a658cd2614c1f1b48a179fb6b8ad25528428c2922a2b5c0ac4fb7d26dc5b5b0e7fefc52ee6a48da4ade66ba333ecbce4f2c00835916b5c6ac66627c3608a5b45d6dffbb7ade5cb21dbf1c27a417a33df03a1ad4cf469d538e11302f5f4ede80dbec21520623876484d6baff6d116bf95c7debe61dec5ad", 0xc6}, {&(0x7f0000002040)="9de1f40f08f849253c979234cd81ee2a252f359c1b15e7", 0x17}, {&(0x7f0000002080)="25c3acae520280299361845fd15a79acc6b6169cc756c75a93f3c5ec14a269ae0dc31cb1cd4732b50f57c82f8081345a41806e8fc225e29e8eb154bb343b40ebdd6659b29be72d1950ea44727ea5ded923826242354cafb8d773a8", 0x5b}], 0x9, &(0x7f00000021c0)=[{0x88, 0x112, 0x0, "b69a98d75502bba22d16698d9b0b4edee72fe78d57b508a0c94d246e28ee233a31ebbcd4fc95e797e986733ca3a3f548e28189d9035be29de60d3d534df41adbdda085fdf6093370810b21c2bbb6f4cb021a381ea5d7114397556c49d244625db4d35c8f888fbdd40f4a08ed6d3581d1cc5b264d"}, {0x98, 0x101, 0x8, "0c8f63789054b3966a094889ffcf5a8f7c31995fb94daaa8eab88e3c5a4aeaa5529e923f0481c41b0ed2138f5c3dd4dd1dde013e70f411802b2e4f327b907f9a695bc96bfeaf0eefa317950547b28229d9e3256768f55b1569a5e7f8f8bded2f89438ff0935ca18691a0c3f566f3785bfafffe6f031a25ebe1fc5e8e7f27703e34dd"}, {0xc0, 0x84, 0x3, "d49e7aba3d67166b8c5f9d8ac798b13fb963dbf6a9e438db934f1c0947935c0021fde6438ea03b1c766f380303a16fddece66101e40311a913ebd23abe0f11bdd2eb5dc12b719201c4d0739bda3f5a39bbe003177dd09e5c83df7672fd2604880af76071fb1b0ad925e1b74b22e7006b55cde9eb5b5d2c2769a63d6144b575fb3b234e7a263f7b1f5c8214bbcbfc75a5f3c6368253ddbcf5a5902da55f979e5a5d353bad1f9418c61e0723716802"}, {0x38, 0x84, 0x4e41, "a08e66c67ac8fc2e913b718900c58ecd5182dd423cdeca1f0bcdf22d60b11a98acfbdab479e6"}], 0x218}}], 0x2, 0x0) (async) setsockopt$inet6_IPV6_HOPOPTS(r6, 0x29, 0x36, &(0x7f0000000500), 0x8) (async) setsockopt$inet6_buf(r6, 0x29, 0x6, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r5, 0x40305829, &(0x7f00000000c0)={0x604, 0x2, 0x3, 0xffffffff}) 273.958196ms ago: executing program 1 (id=8993): r0 = socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) socket$packet(0x11, 0x3, 0x300) (async, rerun: 32) socket$nl_route(0x10, 0x3, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) (async, rerun: 64) r1 = socket$packet(0x11, 0x2, 0x300) (rerun: 64) setsockopt$packet_drop_memb(r1, 0x107, 0x2, &(0x7f0000002380)={0x0, 0x1, 0x6, @broadcast}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$kcm(0x10, 0x2, 0x10) (async) socket$alg(0x26, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x400000000010, 0x3, 0x0) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async, rerun: 64) socket(0x400000000010, 0x3, 0x0) (rerun: 64) pipe(&(0x7f00000002c0)={0xffffffffffffffff}) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=@gettaction={0x20, 0x32, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1, 0x1}}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) sendmsg$nl_route(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r4, @ANYBLOB="060015000700fdff0c00168008000100", @ANYRES32=r3], 0x38}}, 0x10) (async) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)={0x20, 0x18, 0x229, 0x0, 0x0, {0x2}, [@nested={0xc, 0x9, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @uid}]}]}, 0x20}}, 0x0) 124.456759ms ago: executing program 0 (id=8994): socket(0x2a, 0x1, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x5, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f0000000080)={r4, 0xb796, 0x7}, 0x8) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000002700090025bd7000fddbdf2511000000080001000080ffffe510b17d12813faa83800bfe3eb792489b44d01651da8d55d6f43ef7d5b06f745eaab0d5f5c0aee290cc1ff975fec9e16cb86a06fc54cb15857b431f57b8510403714830bb1db966118c85744446affc189eb70964610c0ec0cbc1fcf615870d4d3fbd40fd61b36e6b43781aea748590552d21b14812d4ce30727044355eff2104ef5ce5bb9c68acf2dc905c05eed44c904a3bf2e5fe7e866fb387904385d51d1b7c78cf129f8ae140a776c150873d19dfc9da8ab1f9d6574e6aa4d8dab4ce1f4f650a1c1d3900000000"], 0x1c}, 0x1, 0x0, 0x0, 0x24040800}, 0x4000080) 16.537531ms ago: executing program 2 (id=8995): r0 = socket$inet(0x2, 0x3, 0x5) setsockopt$MRT_FLUSH(r0, 0x0, 0xd4, 0x0, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_int(r1, 0x6, 0x17, 0xfffffffffffffffd, &(0x7f0000000340)=0x33) (async) getsockopt$inet6_tcp_int(r1, 0x6, 0x17, 0xfffffffffffffffd, &(0x7f0000000340)=0x33) 0s ago: executing program 3 (id=8996): r0 = socket$unix(0x1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00'}) r2 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000240)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="5400000010000104000000000216000000000000", @ANYRES32=r4, @ANYRES8=r3], 0x54}, 0x1, 0x0, 0x0, 0x883}, 0x8845) kernel console output (not intermixed with test programs): 0: left promiscuous mode [ 877.793870][ T419] team0 (unregistering): Port device team_slave_0 removed [ 877.809598][ T419] team_slave_1: left promiscuous mode [ 877.831292][ T419] team0 (unregistering): Port device team_slave_1 removed [ 877.856878][ T421] vlan2: entered allmulticast mode [ 877.863336][ T421] gretap0: entered allmulticast mode [ 877.926440][ T429] netlink: 64 bytes leftover after parsing attributes in process `syz.3.7090'. [ 878.041978][ T438] pimreg: entered allmulticast mode [ 878.803001][ T465] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7101'. [ 879.104355][ T482] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7105'. [ 879.115440][ T481] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7105'. [ 879.266284][ T492] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7107'. [ 879.276480][ T492] openvswitch: netlink: Missing key (keys=40, expected=100) [ 879.357448][ T497] netlink: 'syz.4.7111': attribute type 11 has an invalid length. [ 879.465620][ T502] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7111'. [ 879.544141][ T510] netlink: 188 bytes leftover after parsing attributes in process `syz.3.7113'. [ 880.106254][ T536] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 880.113619][ T536] IPv6: NLM_F_CREATE should be set when creating new route [ 880.120948][ T536] IPv6: NLM_F_CREATE should be set when creating new route [ 880.128286][ T536] IPv6: NLM_F_CREATE should be set when creating new route [ 880.510086][ T557] xt_l2tp: wrong L2TP version: 0 [ 880.567541][ T558] syzkaller0: entered promiscuous mode [ 880.595206][ T558] syzkaller0: entered allmulticast mode [ 880.988712][ T575] bond5 (unregistering): Released all slaves [ 881.396209][ T606] netlink: 'syz.2.7142': attribute type 1 has an invalid length. [ 881.606725][ T606] 8021q: adding VLAN 0 to HW filter on device bond4 [ 881.676904][ T612] bond4: (slave geneve3): making interface the new active one [ 881.691251][ T612] bond4: (slave geneve3): Enslaving as an active interface with an up link [ 881.935584][ T635] tipc: Started in network mode [ 881.956162][ T635] tipc: Node identity 1, cluster identity 4711 [ 881.956509][ T637] netlink: 'syz.2.7152': attribute type 10 has an invalid length. [ 882.002154][ T635] tipc: Node number set to 1 [ 882.024607][ T637] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 882.720818][ T677] sch_tbf: burst 7 is lower than device syzkaller0 mtu (1514) ! [ 883.151656][ T706] __nla_validate_parse: 10 callbacks suppressed [ 883.151677][ T706] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7169'. [ 883.291250][ T715] bridge0: port 2(bridge_slave_1) entered blocking state [ 883.298618][ T715] bridge0: port 2(bridge_slave_1) entered forwarding state [ 883.306292][ T715] bridge0: port 1(bridge_slave_0) entered blocking state [ 883.313592][ T715] bridge0: port 1(bridge_slave_0) entered forwarding state [ 883.385065][ T715] virt_wifi0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 883.414000][ T715] vlan0: left promiscuous mode [ 883.456268][ T715] ipvlan1: left promiscuous mode [ 883.602645][ T715] geneve2: left promiscuous mode [ 883.624228][ T715] gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 883.634854][ T715] gretap2: left promiscuous mode [ 883.641170][ T715] batman_adv: batadv0: Interface activated: gretap2 [ 883.649426][ T715] mac80211_hwsim hwsim61 syzkaller0: left promiscuous mode [ 883.657303][ T715] A link change request failed with some changes committed already. Interface syzkaller0 may have been left with an inconsistent configuration, please check. [ 883.947609][ T751] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7179'. [ 884.098849][ T760] bridge0: port 3(ipvlan3) entered blocking state [ 884.116343][ T760] bridge0: port 3(ipvlan3) entered disabled state [ 884.135130][ T760] ipvlan3: entered allmulticast mode [ 884.147689][ T760] bridge0: entered allmulticast mode [ 884.168477][ T760] ipvlan3: left allmulticast mode [ 884.176387][ T760] bridge0: left allmulticast mode [ 884.244651][T13297] IPVS: starting estimator thread 0... [ 884.252591][ T772] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 884.344934][ T775] IPVS: using max 24 ests per chain, 57600 per kthread [ 886.287213][ T722] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 886.300894][ T770] netlink: 256 bytes leftover after parsing attributes in process `syz.2.7184'. [ 886.538945][ T822] syzkaller0: entered promiscuous mode [ 886.553347][ T822] syzkaller0: entered allmulticast mode [ 886.580307][ T822] netlink: 60 bytes leftover after parsing attributes in process `syz.4.7200'. [ 886.722821][ T837] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7205'. [ 886.874608][ T843] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7208'. [ 886.884685][ T843] netlink: 'syz.0.7208': attribute type 6 has an invalid length. [ 886.903372][ T843] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7208'. [ 886.970618][ T843] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7208'. [ 886.974538][ T6518] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 886.993759][ T843] netlink: 'syz.0.7208': attribute type 6 has an invalid length. [ 887.011814][ T843] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7208'. [ 887.019281][ T6518] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 887.047156][ T6518] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 887.058219][ T6518] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 887.105866][ T852] mac80211_hwsim hwsim61 syzkaller0: entered promiscuous mode [ 887.376763][ T870] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7214'. [ 888.315486][ T930] netlink: 'syz.2.7233': attribute type 1 has an invalid length. [ 888.340989][ T930] netlink: 'syz.2.7233': attribute type 2 has an invalid length. [ 888.364661][ T915] lo speed is unknown, defaulting to 1000 [ 888.387848][ T939] __nla_validate_parse: 3 callbacks suppressed [ 888.387868][ T939] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7235'. [ 888.431561][ T938] netlink: 'syz.2.7233': attribute type 39 has an invalid length. [ 888.456406][ T915] wg2 speed is unknown, defaulting to 1000 [ 888.534435][ T941] netlink: 14560 bytes leftover after parsing attributes in process `syz.0.7234'. [ 888.545574][ T939] netlink: 92 bytes leftover after parsing attributes in process `syz.3.7235'. [ 888.734760][ T954] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7239'. [ 888.888888][ T959] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7240'. [ 888.966381][ T959] bond7: option lacp_strict: mode dependency failed, not supported in mode balance-rr(0) [ 888.981768][ T959] bond7 (unregistering): Released all slaves [ 889.059856][ T915] lo speed is unknown, defaulting to 1000 [ 889.065998][ T968] veth1_to_bond: entered allmulticast mode [ 889.079185][ T967] netlink: 80 bytes leftover after parsing attributes in process `syz.0.7240'. [ 889.103660][ T966] veth1_to_bond: left allmulticast mode [ 889.530443][ T990] geneve3: entered promiscuous mode [ 889.541543][ T992] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7250'. [ 889.567305][ T6518] netdevsim netdevsim3 netdevsim0: set [1, 2] type 2 family 0 port 41984 - 0 [ 889.674763][ T6518] netdevsim netdevsim3 netdevsim1: set [1, 2] type 2 family 0 port 41984 - 0 [ 889.687864][ T6518] netdevsim netdevsim3 netdevsim2: set [1, 2] type 2 family 0 port 41984 - 0 [ 889.698041][ T6518] netdevsim netdevsim3 netdevsim3: set [1, 2] type 2 family 0 port 41984 - 0 [ 889.823405][ T998] sctp: [Deprecated]: syz.0.7252 (pid 998) Use of struct sctp_assoc_value in delayed_ack socket option. [ 889.823405][ T998] Use struct sctp_sack_info instead [ 890.018058][ T1006] netlink: 'syz.3.7254': attribute type 1 has an invalid length. [ 890.145082][ T1012] netlink: 'syz.1.7256': attribute type 4 has an invalid length. [ 890.153370][ T1012] netlink: 240 bytes leftover after parsing attributes in process `syz.1.7256'. [ 890.165810][ T1012] netlink: 'syz.1.7256': attribute type 4 has an invalid length. [ 890.176907][ T1012] netlink: 240 bytes leftover after parsing attributes in process `syz.1.7256'. [ 890.229354][ T1006] 8021q: adding VLAN 0 to HW filter on device bond5 [ 890.408506][ T1013] bond5: (slave geneve4): making interface the new active one [ 890.430734][ T1013] bond5: (slave geneve4): Enslaving as an active interface with an up link [ 890.548741][ T1026] #rB: renamed from veth1_to_bond (while UP) [ 890.810189][ T36] bridge_slave_1: left promiscuous mode [ 890.829215][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 890.860034][ T36] bridge_slave_0: left allmulticast mode [ 890.873273][ T36] bridge_slave_0: left promiscuous mode [ 890.887910][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 891.190482][ T36] bond3 (unregistering): (slave geneve3): Releasing active interface [ 891.298118][ T36] bond5 (unregistering): (slave bridge1): Releasing backup interface [ 891.308408][ T36] bridge1 (unregistering): left promiscuous mode [ 891.319462][ T36] bridge1 (unregistering): left allmulticast mode [ 891.382953][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 891.392021][ T36] bond_slave_0: left allmulticast mode [ 891.406172][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 891.421064][ T36] bond_slave_1: left allmulticast mode [ 891.428453][ T36] bond0 (unregistering): Released all slaves [ 891.443838][ T36] bond1 (unregistering): (slave veth3): Releasing backup interface [ 891.456093][ T36] bond1 (unregistering): Released all slaves [ 891.478805][ T36] bond2 (unregistering): Released all slaves [ 891.496535][ T36] bond3 (unregistering): Released all slaves [ 891.518522][ T36] bond4 (unregistering): Released all slaves [ 891.545710][ T36] bond5 (unregistering): Released all slaves [ 891.567778][ T36] bond6 (unregistering): Released all slaves [ 891.601085][ T36] bond7 (unregistering): Released all slaves [ 891.620426][ T36] bond8 (unregistering): Released all slaves [ 891.910900][ T36] tipc: Disabling bearer [ 891.919284][ T36] tipc: Left network mode [ 892.258799][ T1097] sch_tbf: peakrate 8 is lower than or equals to rate 7508080445633888606 ! [ 892.680750][ T1121] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7281'. [ 892.774163][ T4941] Bluetooth: hci4: command 0x0406 tx timeout [ 893.358217][ T1111] bridge0: port 2(bridge_slave_1) entered disabled state [ 893.365753][ T1111] bridge0: port 1(bridge_slave_0) entered disabled state [ 893.714675][ T1111] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 893.830939][ T1124] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 893.831545][ T1127] 8021q: VLANs not supported on ip_vti0 [ 894.211877][ T1158] __nla_validate_parse: 1 callbacks suppressed [ 894.211901][ T1158] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7292'. [ 894.231590][ T1158] netlink: 11 bytes leftover after parsing attributes in process `syz.1.7292'. [ 894.624646][ T1172] xt_CT: You must specify a L4 protocol and not use inversions on it [ 894.653648][ T1174] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 894.680970][ T1172] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7296'. [ 895.025698][ T1192] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7302'. [ 895.628192][ T1221] netlink: 'syz.3.7310': attribute type 39 has an invalid length. [ 895.654621][ T1221] hsr_slave_0: left promiscuous mode [ 895.738886][ T1221] hsr_slave_1: left promiscuous mode [ 895.880127][ T1224] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7309'. [ 895.994119][ T1224] syzkaller0: entered promiscuous mode [ 896.001912][ T1233] netlink: 80 bytes leftover after parsing attributes in process `syz.2.7313'. [ 896.017741][ T1224] syzkaller0: entered allmulticast mode [ 896.341847][ T1244] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7314'. [ 896.506284][ T1241] ip6gretap0: entered promiscuous mode [ 899.758233][ T36] hsr_slave_0: left promiscuous mode [ 899.764673][ T36] hsr_slave_1: left promiscuous mode [ 899.770607][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 899.778557][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 899.786852][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 899.794844][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 899.809598][ T36] veth1_macvtap: left promiscuous mode [ 899.816103][ T36] veth0_macvtap: left promiscuous mode [ 900.510119][ T1269] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7320'. [ 900.541616][ T1269] openvswitch: netlink: Missing key (keys=40, expected=100) [ 900.755887][ T1283] netlink: 60 bytes leftover after parsing attributes in process `syz.1.7325'. [ 900.808462][ T1290] xt_hl: Unknown TTL match mode: 255 [ 900.837270][ T1285] netlink: 'syz.2.7326': attribute type 39 has an invalid length. [ 900.857848][ T1285] hsr_slave_0: left promiscuous mode [ 900.893200][ T1285] hsr_slave_1: left promiscuous mode [ 901.028731][ T1296] tipc: Enabled bearer , priority 0 [ 901.179979][ T1289] syzkaller0: entered promiscuous mode [ 901.208728][ T1289] syzkaller0: entered allmulticast mode [ 901.246077][ T1289] tipc: Resetting bearer [ 901.290848][ T36] IPVS: stop unused estimator thread 0... [ 901.303689][ T1286] tipc: Resetting bearer [ 901.331876][ T1318] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7331'. [ 901.523637][ T1320] netlink: 'syz.2.7332': attribute type 83 has an invalid length. [ 905.061013][ T1286] tipc: Disabling bearer [ 905.305185][ T1380] syzkaller0: entered promiscuous mode [ 905.328963][ T1380] syzkaller0: entered allmulticast mode [ 905.363786][ T1386] netlink: 36 bytes leftover after parsing attributes in process `syz.3.7346'. [ 905.455059][ T1395] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7349'. [ 906.175459][ T1436] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7360'. [ 906.247868][ T1436] veth0_macvtap: left promiscuous mode [ 906.306196][ T1447] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7365'. [ 906.357562][ T1450] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7364'. [ 906.370063][ T1452] netlink: 96 bytes leftover after parsing attributes in process `syz.2.7366'. [ 906.451993][ T1452] 8021q: VLANs not supported on gre0 [ 906.496006][ T1452] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 906.936041][ T1493] netlink: 672 bytes leftover after parsing attributes in process `syz.2.7375'. [ 906.948055][ T1486] netlink: 'syz.4.7373': attribute type 1 has an invalid length. [ 906.951719][ T1493] netlink: 1532 bytes leftover after parsing attributes in process `syz.2.7375'. [ 906.966634][ T1493] netlink: 3704 bytes leftover after parsing attributes in process `syz.2.7375'. [ 906.989250][ T1486] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 907.000813][ T1493] netlink: 252 bytes leftover after parsing attributes in process `syz.2.7375'. [ 907.042417][ T1493] netlink: 1466 bytes leftover after parsing attributes in process `syz.2.7375'. [ 907.074145][ T1493] netlink: 64 bytes leftover after parsing attributes in process `syz.2.7375'. [ 907.183763][ T1507] netlink: 'syz.4.7378': attribute type 4 has an invalid length. [ 907.218023][ T1506] netlink: 'syz.4.7378': attribute type 4 has an invalid length. [ 907.246983][ T1512] netlink: 'syz.4.7378': attribute type 4 has an invalid length. [ 907.265936][ T30] audit: type=1804 audit(1784185540.354:15): pid=1509 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.7379" name="/newroot/133/cgroup.controllers" dev="tmpfs" ino=700 res=1 errno=0 [ 907.295421][ T30] audit: type=1800 audit(1784185540.354:16): pid=1509 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.7379" name="cgroup.controllers" dev="tmpfs" ino=700 res=0 errno=0 [ 907.326222][ T30] audit: type=1800 audit(1784185540.354:17): pid=1510 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.7379" name="cgroup.controllers" dev="tmpfs" ino=700 res=0 errno=0 [ 907.358048][ T1516] rdma_rxe: rxe_newlink: failed to add wlan1 [ 907.535487][ T1529] tipc: Enabling of bearer rejected, already enabled [ 908.078367][ T1554] bond1 (unregistering): Released all slaves [ 908.188710][ T1557] netlink: 'syz.4.7392': attribute type 4 has an invalid length. [ 908.550647][ T1579] bridge1: entered promiscuous mode [ 908.570434][ T1579] bridge1: entered allmulticast mode [ 908.674067][ T1587] netlink: 'syz.0.7398': attribute type 1 has an invalid length. [ 908.808965][ T1587] 8021q: adding VLAN 0 to HW filter on device bond7 [ 908.861515][ T1592] bond7: (slave dummy0): making interface the new active one [ 908.910018][ T1592] bond7: (slave dummy0): Enslaving as an active interface with an up link [ 908.935292][ T1604] tipc: Enabling of bearer rejected, already enabled [ 908.971223][ T1597] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 909.039659][ T1597] tipc: Resetting bearer [ 909.218654][ T1615] openvswitch: netlink: Flow actions attr not present in new flow. [ 909.518122][ T1630] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 909.526587][ T1630] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 909.825606][ T1654] sctp: [Deprecated]: syz.1.7417 (pid 1654) Use of struct sctp_assoc_value in delayed_ack socket option. [ 909.825606][ T1654] Use struct sctp_sack_info instead [ 910.204635][ T1679] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 910.229482][ T1679] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 910.774077][ T1716] syzkaller0: entered promiscuous mode [ 910.780023][ T1716] syzkaller0: entered allmulticast mode [ 910.932901][ T6516] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 911.480415][ T1764] Unsupported ieee802154 address type: 0 [ 911.729184][ T1776] netlink: 'syz.0.7456': attribute type 10 has an invalid length. [ 911.745962][ T1777] __nla_validate_parse: 11 callbacks suppressed [ 911.745985][ T1777] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7455'. [ 911.764953][ T1776] 8021q: adding VLAN 0 to HW filter on device team0 [ 912.410970][ T1799] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7463'. [ 912.680784][ T1801] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7464'. [ 913.840309][ T1722] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 913.858362][ T1804] netlink: 960 bytes leftover after parsing attributes in process `syz.0.7464'. [ 914.087401][ T1810] netlink: 'syz.4.7465': attribute type 3 has an invalid length. [ 914.110471][ T1808] netlink: 'syz.4.7465': attribute type 3 has an invalid length. [ 914.133585][ T1808] netlink: 'syz.4.7465': attribute type 1 has an invalid length. [ 914.148235][ T1810] netlink: 'syz.4.7465': attribute type 1 has an invalid length. [ 914.172627][ T1813] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7467'. [ 914.272041][ T1825] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7470'. [ 914.463255][ T1830] syzkaller1: entered promiscuous mode [ 914.469028][ T1830] syzkaller1: entered allmulticast mode [ 914.479764][ T1830] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7472'. [ 917.416370][ T1835] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 917.662797][ T1875] netlink: 'syz.0.7483': attribute type 1 has an invalid length. [ 917.676181][ T1874] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7482'. [ 917.684796][ T1872] netlink: 'syz.0.7483': attribute type 1 has an invalid length. [ 917.713257][ T1874] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7482'. [ 917.764322][ T1874] netlink: 'syz.2.7482': attribute type 15 has an invalid length. [ 917.827285][ T1874] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7482'. [ 917.841147][ T1874] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7482'. [ 917.853588][ T6516] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 256 - 0 [ 917.860691][ T1874] netlink: 'syz.2.7482': attribute type 15 has an invalid length. [ 917.874601][ T6516] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 256 - 0 [ 917.888015][ T6516] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 256 - 0 [ 917.900701][ T6516] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 256 - 0 [ 917.983554][ T1891] tipc: Enabling not permitted [ 918.000056][ T1891] tipc: Enabling of bearer rejected, failed to enable media [ 918.159468][ T1904] syzkaller0: entered promiscuous mode [ 918.183052][ T1904] syzkaller0: entered allmulticast mode [ 918.196018][ T1908] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7492'. [ 918.446233][ T1919] netlink: 60 bytes leftover after parsing attributes in process `syz.1.7496'. [ 918.460489][ T1925] xt_hashlimit: size too large, truncated to 1048576 [ 918.767883][ T1947] netlink: 'syz.0.7505': attribute type 178 has an invalid length. [ 919.259511][ T1982] netlink: 'syz.3.7514': attribute type 22 has an invalid length. [ 919.268789][ T1982] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7514'. [ 919.314328][ T6518] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 919.347596][ T6518] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 919.361745][ T6518] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 919.380580][ T6518] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 919.690083][ T2004] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7518'. [ 919.700057][ T30] audit: type=1800 audit(1784185552.774:18): pid=2002 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.7519" name="memory.events" dev="tmpfs" ino=1600 res=0 errno=0 [ 920.401927][ T2019] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7524'. [ 920.415500][ T2019] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 921.845485][ T1955] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 922.281927][ T2050] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7531'. [ 922.426535][ T5819] IPVS: starting estimator thread 0... [ 922.469856][ T2057] netlink: 'syz.0.7535': attribute type 1 has an invalid length. [ 922.536865][ T2062] sctp: [Deprecated]: syz.3.7534 (pid 2062) Use of int in max_burst socket option. [ 922.536865][ T2062] Use struct sctp_assoc_value instead [ 922.553481][ T2054] IPVS: using max 29 ests per chain, 69600 per kthread [ 922.577365][ T2057] 8021q: adding VLAN 0 to HW filter on device bond9 [ 922.590792][ T2063] bond9: up delay (136) is not a multiple of miimon (100), value rounded to 100 ms [ 922.631762][ T2063] bond9: entered allmulticast mode [ 922.731211][ T2057] bond9: (slave ip6gretap1): Enslaving as an active interface with an up link [ 922.789769][ T2078] pimreg: entered allmulticast mode [ 922.834725][ T2078] vlan3: entered allmulticast mode [ 922.948964][ T2088] __nla_validate_parse: 2 callbacks suppressed [ 922.948986][ T2088] netlink: 6208 bytes leftover after parsing attributes in process `syz.0.7542'. [ 923.138086][ T2099] sctp: [Deprecated]: syz.2.7545 (pid 2099) Use of int in max_burst socket option deprecated. [ 923.138086][ T2099] Use struct sctp_assoc_value instead [ 925.864936][ T2080] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 925.876591][ T2078] netlink: 'syz.1.7539': attribute type 1 has an invalid length. [ 925.887022][ T2078] netlink: 'syz.1.7539': attribute type 2 has an invalid length. [ 926.113571][ T2128] geneve4: entered promiscuous mode [ 926.126558][ T6518] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 53616 - 0 [ 926.149175][ T6518] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 53616 - 0 [ 926.186982][ T6518] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 53616 - 0 [ 926.229635][ T6518] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 53616 - 0 [ 926.717880][ T2174] netlink: 'syz.1.7561': attribute type 1 has an invalid length. [ 926.774548][ T2174] 8021q: adding VLAN 0 to HW filter on device bond1 [ 926.860146][ T2177] bond1: (slave geneve2): making interface the new active one [ 926.869550][ T2185] openvswitch: netlink: Unexpected mask (mask=10000010, allowed=10058) [ 926.898070][ T2177] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 927.083135][ T2198] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 927.111353][ T2199] syzkaller0: entered promiscuous mode [ 927.117060][ T2199] syzkaller0: entered allmulticast mode [ 929.765384][ T2178] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 929.966330][ T2214] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7572'. [ 929.988942][ T2218] netlink: 'syz.0.7570': attribute type 1 has an invalid length. [ 930.001476][ T2209] ieee80211 phy74: Failed to add default virtual iface [ 930.010237][ T2220] netlink: 'syz.0.7570': attribute type 1 has an invalid length. [ 930.073456][ T2225] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7570'. [ 930.096393][ T2218] bond10: entered promiscuous mode [ 930.102072][ T2218] 8021q: adding VLAN 0 to HW filter on device bond10 [ 930.216766][ T2220] netlink: 'syz.0.7570': attribute type 1 has an invalid length. [ 930.369989][ T2229] bond2 (unregistering): Released all slaves [ 930.428265][ T2218] netlink: 'syz.0.7570': attribute type 1 has an invalid length. [ 930.619289][ T2226] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7571'. [ 930.699398][ T2250] syzkaller0: entered promiscuous mode [ 930.719985][ T2250] syzkaller0: entered allmulticast mode [ 930.797483][ T2254] ip6gre1: entered allmulticast mode [ 930.821877][ T2259] netlink: 'syz.3.7580': attribute type 1 has an invalid length. [ 930.859302][ T2259] netlink: 'syz.3.7580': attribute type 3 has an invalid length. [ 930.885045][ T2259] netlink: 172 bytes leftover after parsing attributes in process `syz.3.7580'. [ 930.897362][ T6516] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 930.919142][ T2259] NCSI netlink: No device for ifindex 813332851 [ 930.939569][ T2250] tipc: Started in network mode [ 930.945483][ T2250] tipc: Node identity 7ebd2fb65388, cluster identity 4711 [ 930.954021][ T2250] tipc: Enabled bearer , priority 0 [ 930.986055][ T2234] netlink: 32 bytes leftover after parsing attributes in process `syz.4.7575'. [ 931.459078][ T2252] infiniband syz0: set active [ 931.470834][ T2252] infiniband syz0: added ipvlan1 [ 931.488510][ T2248] tipc: Resetting bearer [ 931.526566][ T2252] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 931.544117][ T2252] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 931.565505][ T2252] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 931.567913][ T2248] tipc: Disabling bearer [ 931.610362][ T2282] mac80211_hwsim hwsim64 wlan0: left promiscuous mode [ 931.622723][ T2252] RDS/IB: syz0: added [ 931.624896][ T2282] mac80211_hwsim hwsim64 wlan0: entered allmulticast mode [ 931.636405][ T2252] smc: adding ib device syz0 with port count 1 [ 931.649039][ T2252] smc: ib device syz0 port 1 has no pnetid [ 931.889010][ T2299] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7584'. [ 931.919968][ T2302] netlink: 'syz.4.7587': attribute type 12 has an invalid length. [ 931.951427][ T2302] netlink: 132 bytes leftover after parsing attributes in process `syz.4.7587'. [ 932.268515][ T2319] netlink: 'syz.4.7591': attribute type 7 has an invalid length. [ 932.368546][T28211] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 932.368959][ T2319] netlink: 'syz.4.7591': attribute type 7 has an invalid length. [ 932.403333][T28211] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 932.428448][ T2324] netlink: 'syz.0.7592': attribute type 2 has an invalid length. [ 932.438836][T28211] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 932.470327][T28211] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 932.631124][ T2333] netlink: 165 bytes leftover after parsing attributes in process `syz.1.7596'. [ 932.663181][ T2333] netlink: 'syz.1.7596': attribute type 4 has an invalid length. [ 932.753523][ T2338] mac80211_hwsim hwsim58 wlan0: entered promiscuous mode [ 932.850404][ T2347] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7600'. [ 933.427088][ T2370] netlink: 'syz.0.7606': attribute type 10 has an invalid length. [ 933.485075][ T2373] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7608'. [ 933.726745][ T2349] bridge0: port 2(bridge_slave_1) entered disabled state [ 933.734505][ T2349] bridge0: port 1(bridge_slave_0) entered disabled state [ 934.270504][ T2349] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 934.327074][ T2349] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 934.779510][ T2349] netdevsim netdevsim1 : left promiscuous mode [ 934.786374][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 934.849971][ T2349] xfrm1: left promiscuous mode [ 934.856270][ T2349] xfrm1: left allmulticast mode [ 934.863359][ T2349] vlan2: left allmulticast mode [ 934.868333][ T2349] gretap0: left allmulticast mode [ 934.879311][ T2349] bridge1: left promiscuous mode [ 934.885079][ T2349] bridge1: left allmulticast mode [ 934.950299][ T2370] bond0: (slave batadv0): Error -22 calling dev_set_mtu [ 934.998283][ T2373] team0: entered promiscuous mode [ 935.027184][ T2373] team_slave_0: entered promiscuous mode [ 935.053543][ T2373] team_slave_1: entered promiscuous mode [ 935.107281][ T2405] netlink: 'syz.1.7611': attribute type 1 has an invalid length. [ 935.125697][ T2373] team0: left promiscuous mode [ 935.134453][ T2373] team_slave_0: left promiscuous mode [ 935.143215][ T2373] team_slave_1: left promiscuous mode [ 935.149940][ T2407] openvswitch: netlink: IP tunnel dst address not specified [ 935.164683][ T2407] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 935.198815][ T1118] netdevsim netdevsim1 : unset [0, 0] type 1 family 0 port 8472 - 0 [ 935.225656][ T1118] netdevsim netdevsim1 : unset [1, 0] type 2 family 0 port 6081 - 0 [ 935.251682][ T1118] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 935.273391][ T1118] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 935.324967][ T1118] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 935.347488][ T1118] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 935.389381][ T1118] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 935.432704][ T1118] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 935.487605][ T2417] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7615'. [ 935.521329][ T2417] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7615'. [ 935.825534][ T2441] openvswitch: netlink: Multiple metadata blocks provided [ 935.887072][ T2453] Cannot find del_set index 4 as target [ 936.090371][ T2464] tipc: Started in network mode [ 936.103403][ T2464] tipc: Node identity c6d1737ff5bb, cluster identity 4711 [ 936.121230][ T2464] tipc: Enabled bearer , priority 0 [ 936.141976][ T2464] syzkaller0: entered promiscuous mode [ 936.158254][ T2464] syzkaller0: entered allmulticast mode [ 936.201237][ T2464] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 936.291433][ T2464] tipc: Resetting bearer [ 936.331348][ T2462] tipc: Resetting bearer [ 936.380813][ T2462] tipc: Disabling bearer [ 936.451037][ T2476] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7628'. [ 936.592959][ T2481] vcan1: entered promiscuous mode [ 936.598319][ T2481] vcan1: entered allmulticast mode [ 936.931611][ T2496] netlink: 'syz.0.7632': attribute type 12 has an invalid length. [ 937.192341][ T2510] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7636'. [ 937.225596][ T2510] xfrm1: entered promiscuous mode [ 937.240298][ T2510] xfrm1: entered allmulticast mode [ 937.250210][ T2506] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7635'. [ 937.262063][ T2510] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7636'. [ 937.733364][ T2539] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7643'. [ 937.860443][ T2543] netlink: 80 bytes leftover after parsing attributes in process `syz.4.7645'. [ 937.867029][ T2544] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input7 [ 938.017094][ T2557] atomic_op ffff888080940998 conn xmit_atomic 0000000000000000 [ 938.271622][ T2573] netlink: 36 bytes leftover after parsing attributes in process `syz.3.7652'. [ 938.306928][ T2575] netlink: 36 bytes leftover after parsing attributes in process `syz.3.7652'. [ 938.345155][ T2575] syzkaller0: entered promiscuous mode [ 938.351374][ T2575] syzkaller0: entered allmulticast mode [ 938.537265][ T2588] syzkaller0: entered promiscuous mode [ 938.552990][ T2588] syzkaller0: entered allmulticast mode [ 938.687973][ T2587] can: request_module (can-proto-0) failed. [ 938.739630][ T2598] 8021q: adding VLAN 0 to HW filter on device bond2 [ 939.324370][ T2647] netlink: 'syz.2.7670': attribute type 18 has an invalid length. [ 939.370776][ T2647] netlink: 'syz.2.7670': attribute type 18 has an invalid length. [ 939.389700][ T6518] netdevsim netdevsim2 netdevsim0: set [0, 1] type 1 family 0 port 8472 - 0 [ 939.404611][ T6518] netdevsim netdevsim2 netdevsim1: set [0, 1] type 1 family 0 port 8472 - 0 [ 939.425217][ T6518] netdevsim netdevsim2 netdevsim2: set [0, 1] type 1 family 0 port 8472 - 0 [ 939.445929][ T6518] netdevsim netdevsim2 netdevsim3: set [0, 1] type 1 family 0 port 8472 - 0 [ 939.703387][ T2670] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 939.866139][ T2683] syzkaller0: entered promiscuous mode [ 939.880136][ T2683] syzkaller0: entered allmulticast mode [ 939.995196][ T2695] geneve3: entered promiscuous mode [ 940.000503][ T2695] geneve3: entered allmulticast mode [ 940.022669][T15590] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 940.055863][T15590] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 940.084046][T15590] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 940.130804][T15590] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0 [ 940.867455][ T2763] __nla_validate_parse: 15 callbacks suppressed [ 940.867480][ T2763] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7699'. [ 940.908910][ T2763] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7699'. [ 940.919685][ T2763] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7699'. [ 941.053039][ T2776] netlink: 52 bytes leftover after parsing attributes in process `syz.1.7699'. [ 941.067040][ T2778] netlink: 124 bytes leftover after parsing attributes in process `syz.0.7704'. [ 941.104445][ T2780] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7703'. [ 941.108184][ T2778] syzkaller1: entered promiscuous mode [ 941.118885][ T30] audit: type=1800 audit(1784185574.194:19): pid=2778 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.7704" name="memory.events" dev="tmpfs" ino=1857 res=0 errno=0 [ 941.141670][ T2778] syzkaller1: entered allmulticast mode [ 941.156175][ T2782] netlink: 'syz.4.7705': attribute type 178 has an invalid length. [ 941.350799][ T2796] lo: entered allmulticast mode [ 941.357568][ T2797] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7707'. [ 941.367095][ T2796] lo: left allmulticast mode [ 941.647450][ T2808] bond11: entered promiscuous mode [ 941.685143][ T2810] bond12: entered promiscuous mode [ 941.909559][ T2819] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7713'. [ 942.088722][ T2827] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7715'. [ 942.109896][ T2826] block nbd1: Unsupported socket: should be TCP or UNIX. [ 942.138057][ T2826] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 942.157733][ T2830] netlink: 32 bytes leftover after parsing attributes in process `syz.3.7718'. [ 942.197531][ T2830] xt_hashlimit: overflow, try lower: 18446744073709551613/4 [ 942.285052][ T2845] tipc: Enabling of bearer rejected, failed to enable media [ 942.301598][ T2844] tipc: Enabling of bearer rejected, failed to enable media [ 942.393941][ T2852] openvswitch: netlink: Tunnel attr 68 out of range max 16 [ 942.532509][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 942.638367][ T2878] bridge0: port 2(bridge_slave_1) entered blocking state [ 942.645651][ T2878] bridge0: port 2(bridge_slave_1) entered forwarding state [ 942.653304][ T2878] bridge0: port 1(bridge_slave_0) entered blocking state [ 942.660531][ T2878] bridge0: port 1(bridge_slave_0) entered forwarding state [ 942.700391][ T2878] bridge0: port 2(bridge_slave_1) entered disabled state [ 942.707802][ T2878] bridge0: port 1(bridge_slave_0) entered disabled state [ 942.758351][ T2888] netlink: 'syz.2.7730': attribute type 58 has an invalid length. [ 942.791026][ T2892] netlink: 'syz.2.7730': attribute type 58 has an invalid length. [ 943.003593][ T2904] x_tables: duplicate underflow at hook 2 [ 943.029850][ T2903] netlink: 'syz.4.7732': attribute type 83 has an invalid length. [ 943.199622][ T2921] FAULT_INJECTION: forcing a failure. [ 943.199622][ T2921] name failslab, interval 1, probability 0, space 0, times 0 [ 943.255796][ T2921] CPU: 1 UID: 0 PID: 2921 Comm: syz.2.7738 Not tainted syzkaller #0 PREEMPT(full) [ 943.255833][ T2921] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 943.255849][ T2921] Call Trace: [ 943.255858][ T2921] [ 943.255868][ T2921] dump_stack_lvl+0xe8/0x150 [ 943.255904][ T2921] should_fail_ex+0x40c/0x560 [ 943.255932][ T2921] should_failslab+0xa8/0x100 [ 943.255962][ T2921] kmem_cache_alloc_node_noprof+0xb3/0x610 [ 943.255986][ T2921] ? local_lock_release+0x9c/0x160 [ 943.256015][ T2921] ? __alloc_skb+0x1d7/0x7a0 [ 943.256036][ T2921] ? __alloc_skb+0x1d7/0x7a0 [ 943.256066][ T2921] __alloc_skb+0x1d7/0x7a0 [ 943.256095][ T2921] netlink_ack+0x136/0xb30 [ 943.256123][ T2921] ? __pfx_genl_rcv_msg+0x10/0x10 [ 943.256147][ T2921] ? __pfx_nl80211_post_doit+0x10/0x10 [ 943.256181][ T2921] netlink_rcv_skb+0x2a4/0x4a0 [ 943.256210][ T2921] ? __pfx_genl_rcv_msg+0x10/0x10 [ 943.256247][ T2921] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 943.256289][ T2921] ? down_read+0x2be/0x330 [ 943.256311][ T2921] genl_rcv+0x28/0x40 [ 943.256330][ T2921] netlink_unicast+0x7bb/0x940 [ 943.256367][ T2921] netlink_sendmsg+0x813/0xb40 [ 943.256394][ T2921] ? __pfx_netlink_sendmsg+0x10/0x10 [ 943.256415][ T2921] ? aa_sock_msg_perm+0xf1/0x1b0 [ 943.256439][ T2921] ? __pfx_netlink_sendmsg+0x10/0x10 [ 943.256456][ T2921] sock_sendmsg_nosec+0x13a/0x180 [ 943.256485][ T2921] ____sys_sendmsg+0x54e/0x850 [ 943.256520][ T2921] ? __pfx_____sys_sendmsg+0x10/0x10 [ 943.256557][ T2921] ? import_iovec+0x73/0xa0 [ 943.256587][ T2921] ___sys_sendmsg+0x2a5/0x360 [ 943.256614][ T2921] ? __lock_acquire+0x683/0x2cf0 [ 943.256645][ T2921] ? __pfx____sys_sendmsg+0x10/0x10 [ 943.256703][ T2921] ? __fget_files+0x2a/0x420 [ 943.256728][ T2921] ? __fget_files+0x3a2/0x420 [ 943.256760][ T2921] __x64_sys_sendmsg+0x1b1/0x290 [ 943.256790][ T2921] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 943.256834][ T2921] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 943.256855][ T2921] do_syscall_64+0x174/0x580 [ 943.256881][ T2921] ? trace_irq_disable+0x3b/0x140 [ 943.256906][ T2921] ? clear_bhb_loop+0x40/0x90 [ 943.256929][ T2921] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 943.256947][ T2921] RIP: 0033:0x7fabd179de59 [ 943.256966][ T2921] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 943.256983][ T2921] RSP: 002b:00007fabd2731028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 943.257002][ T2921] RAX: ffffffffffffffda RBX: 00007fabd1a25fa0 RCX: 00007fabd179de59 [ 943.257015][ T2921] RDX: 0000000004000008 RSI: 0000200000000300 RDI: 0000000000000004 [ 943.257027][ T2921] RBP: 00007fabd2731090 R08: 0000000000000000 R09: 0000000000000000 [ 943.257038][ T2921] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 943.257048][ T2921] R13: 00007fabd1a26038 R14: 00007fabd1a25fa0 R15: 00007fff1a097f28 [ 943.257077][ T2921] [ 944.218210][ T2955] netlink: 'syz.1.7751': attribute type 11 has an invalid length. [ 944.243103][ T2955] netlink: 'syz.1.7751': attribute type 4 has an invalid length. [ 944.266845][ T2958] FAULT_INJECTION: forcing a failure. [ 944.266845][ T2958] name failslab, interval 1, probability 0, space 0, times 0 [ 944.312532][ T2958] CPU: 1 UID: 0 PID: 2958 Comm: syz.4.7752 Not tainted syzkaller #0 PREEMPT(full) [ 944.312563][ T2958] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 944.312577][ T2958] Call Trace: [ 944.312586][ T2958] [ 944.312597][ T2958] dump_stack_lvl+0xe8/0x150 [ 944.312635][ T2958] should_fail_ex+0x40c/0x560 [ 944.312668][ T2958] should_failslab+0xa8/0x100 [ 944.312702][ T2958] kmem_cache_alloc_node_noprof+0xb3/0x610 [ 944.312739][ T2958] ? local_lock_release+0x9c/0x160 [ 944.312771][ T2958] ? __alloc_skb+0x1d7/0x7a0 [ 944.312798][ T2958] ? __alloc_skb+0x1d7/0x7a0 [ 944.312835][ T2958] __alloc_skb+0x1d7/0x7a0 [ 944.312870][ T2958] netlink_ack+0x136/0xb30 [ 944.312901][ T2958] ? __pfx_genl_rcv_msg+0x10/0x10 [ 944.312928][ T2958] ? __pfx_nl80211_post_doit+0x10/0x10 [ 944.312954][ T2958] ? __pfx_ref_tracker_free+0x10/0x10 [ 944.312995][ T2958] netlink_rcv_skb+0x2a4/0x4a0 [ 944.313029][ T2958] ? __pfx_genl_rcv_msg+0x10/0x10 [ 944.313058][ T2958] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 944.313109][ T2958] ? down_read+0x2be/0x330 [ 944.313134][ T2958] genl_rcv+0x28/0x40 [ 944.313158][ T2958] netlink_unicast+0x7bb/0x940 [ 944.313201][ T2958] netlink_sendmsg+0x813/0xb40 [ 944.313234][ T2958] ? __pfx_netlink_sendmsg+0x10/0x10 [ 944.313260][ T2958] ? aa_sock_msg_perm+0xf1/0x1b0 [ 944.313289][ T2958] ? __pfx_netlink_sendmsg+0x10/0x10 [ 944.313309][ T2958] sock_sendmsg_nosec+0x13a/0x180 [ 944.313340][ T2958] ____sys_sendmsg+0x54e/0x850 [ 944.313379][ T2958] ? __pfx_____sys_sendmsg+0x10/0x10 [ 944.313424][ T2958] ? import_iovec+0x73/0xa0 [ 944.313461][ T2958] ___sys_sendmsg+0x2a5/0x360 [ 944.313493][ T2958] ? __lock_acquire+0x683/0x2cf0 [ 944.313529][ T2958] ? __pfx____sys_sendmsg+0x10/0x10 [ 944.313605][ T2958] ? __fget_files+0x2a/0x420 [ 944.313632][ T2958] ? __fget_files+0x3a2/0x420 [ 944.313673][ T2958] __x64_sys_sendmsg+0x1b1/0x290 [ 944.313718][ T2958] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 944.313772][ T2958] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 944.313797][ T2958] do_syscall_64+0x174/0x580 [ 944.313828][ T2958] ? trace_irq_disable+0x3b/0x140 [ 944.313856][ T2958] ? clear_bhb_loop+0x40/0x90 [ 944.313883][ T2958] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 944.313906][ T2958] RIP: 0033:0x7f54e1d9de59 [ 944.313926][ T2958] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 944.313945][ T2958] RSP: 002b:00007f54dfff6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 944.313968][ T2958] RAX: ffffffffffffffda RBX: 00007f54e2025fa0 RCX: 00007f54e1d9de59 [ 944.313985][ T2958] RDX: 0000000004000008 RSI: 0000200000000300 RDI: 0000000000000004 [ 944.313999][ T2958] RBP: 00007f54dfff6090 R08: 0000000000000000 R09: 0000000000000000 [ 944.314013][ T2958] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 944.314026][ T2958] R13: 00007f54e2026038 R14: 00007f54e2025fa0 R15: 00007fff21cda848 [ 944.314062][ T2958] [ 944.752048][ T2963] mac80211_hwsim hwsim61 syzkaller0: left promiscuous mode [ 944.776869][ T2963] mac80211_hwsim hwsim61 syzkaller0: left allmulticast mode [ 945.140553][ T2994] netlink: 'syz.4.7761': attribute type 1 has an invalid length. [ 945.156374][ T2995] tipc: New replicast peer: 255.255.255.255 [ 945.166531][ T2995] tipc: Enabled bearer , priority 10 [ 946.036562][T13300] IPVS: starting estimator thread 0... [ 946.122945][ T3051] IPVS: using max 26 ests per chain, 62400 per kthread [ 946.307747][ T3054] bond5 (unregistering): Released all slaves [ 946.457083][T11977] tipc: Node number set to 862614399 [ 946.640876][ T3076] sctp: [Deprecated]: syz.3.7784 (pid 3076) Use of int in max_burst socket option. [ 946.640876][ T3076] Use struct sctp_assoc_value instead [ 946.661461][ T3079] netlink: 'syz.1.7785': attribute type 1 has an invalid length. [ 946.735340][ T3079] 8021q: adding VLAN 0 to HW filter on device bond3 [ 946.744358][ T3084] bond3: up delay (136) is not a multiple of miimon (100), value rounded to 100 ms [ 946.768170][ T3088] __nla_validate_parse: 14 callbacks suppressed [ 946.768193][ T3088] netlink: 7 bytes leftover after parsing attributes in process `syz.0.7788'. [ 946.799767][ T3084] bond3: entered allmulticast mode [ 946.845280][ T3079] bond3: (slave ip6gretap1): Enslaving as an active interface with an up link [ 946.946672][ T3093] netlink: 44 bytes leftover after parsing attributes in process `syz.3.7789'. [ 946.968770][ T3095] ip6t_rpfilter: unknown options [ 946.993265][ T3093] netlink: 44 bytes leftover after parsing attributes in process `syz.3.7789'. [ 947.093597][ T3103] xt_TPROXY: Can be used only with -p tcp or -p udp [ 947.137675][ T3106] xt_hashlimit: size too large, truncated to 1048576 [ 947.290210][ T3112] netlink: 'syz.2.7797': attribute type 29 has an invalid length. [ 947.361174][ T3115] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7798'. [ 947.381251][ T3112] mac80211_hwsim hwsim61 syzkaller0: entered promiscuous mode [ 947.397551][ T3112] mac80211_hwsim hwsim61 syzkaller0: entered allmulticast mode [ 947.889615][ T3135] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7803'. [ 947.916602][ T3135] syzkaller0: entered promiscuous mode [ 947.922195][ T3135] syzkaller0: entered allmulticast mode [ 947.937281][ T3135] netlink: 32 bytes leftover after parsing attributes in process `syz.3.7803'. [ 948.148113][ T3144] syzkaller0: entered promiscuous mode [ 948.154841][ T3144] syzkaller0: entered allmulticast mode [ 948.183312][ T3117] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 948.401567][ T3149] x_tables: duplicate underflow at hook 1 [ 948.424355][ T3149] vlan2: entered promiscuous mode [ 948.429639][ T3149] bridge0: entered promiscuous mode [ 948.536289][ T3155] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7811'. [ 948.563147][ T3155] openvswitch: netlink: Missing key (keys=40, expected=100) [ 948.803311][ T3171] netlink: 56 bytes leftover after parsing attributes in process `syz.1.7816'. [ 948.873321][ T3175] netlink: 244 bytes leftover after parsing attributes in process `syz.4.7819'. [ 948.991896][ T3179] netlink: 'syz.0.7820': attribute type 10 has an invalid length. [ 949.007195][ T3183] netlink: 400 bytes leftover after parsing attributes in process `syz.1.7822'. [ 949.022646][ T3179] bond0: (slave batadv0): Error -22 calling dev_set_mtu [ 949.404513][ T3207] netlink: 'syz.0.7831': attribute type 21 has an invalid length. [ 949.427249][ T3207] netlink: 'syz.0.7831': attribute type 21 has an invalid length. [ 950.096513][ T3262] netlink: 'syz.4.7847': attribute type 1 has an invalid length. [ 950.177161][ T3265] sch_fq: defrate 0 ignored. [ 950.495216][ T3282] lo speed is unknown, defaulting to 1000 [ 950.504586][ T3282] wg2 speed is unknown, defaulting to 1000 [ 950.586432][ T3289] netlink: 'syz.2.7851': attribute type 1 has an invalid length. [ 950.871661][ T3296] IPVS: length: 239 != 24 [ 951.026746][ T3282] lo speed is unknown, defaulting to 1000 [ 951.168596][ T3309] netlink: 'syz.1.7859': attribute type 14 has an invalid length. [ 951.185206][ T3309] netlink: 'syz.1.7859': attribute type 13 has an invalid length. [ 952.085471][ T3342] debugfs: '1^!' already exists in 'ieee80211' [ 952.197649][ T3343] sysfs: cannot create duplicate filename '/class/ieee80211/1^!' [ 952.208644][ T3343] CPU: 0 UID: 0 PID: 3343 Comm: syz.1.7869 Not tainted syzkaller #0 PREEMPT(full) [ 952.208676][ T3343] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 952.208690][ T3343] Call Trace: [ 952.208699][ T3343] [ 952.208709][ T3343] dump_stack_lvl+0xe8/0x150 [ 952.208748][ T3343] sysfs_warn_dup+0x8e/0xa0 [ 952.208826][ T3343] sysfs_do_create_link_sd+0xc0/0x110 [ 952.208859][ T3343] device_add_class_symlinks+0x1cf/0x240 [ 952.208977][ T3343] device_add+0x467/0xb80 [ 952.209040][ T3343] wiphy_register+0x1fc8/0x2ff0 [ 952.209157][ T3343] ? __pfx_wiphy_register+0x10/0x10 [ 952.209186][ T3343] ? __pfx_netdev_run_todo+0x10/0x10 [ 952.209242][ T3343] ? minstrel_ht_alloc+0x6e0/0x7e0 [ 952.209331][ T3343] ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0 [ 952.209399][ T3343] ieee80211_register_hw+0x3d3d/0x4a50 [ 952.209490][ T3343] ? ieee80211_register_hw+0x19f1/0x4a50 [ 952.209552][ T3343] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 952.209588][ T3343] ? __asan_memset+0x22/0x50 [ 952.209614][ T3343] ? __hrtimer_setup+0x1b7/0x260 [ 952.209645][ T3343] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 952.209737][ T3343] mac80211_hwsim_new_radio+0x3238/0x5680 [ 952.209802][ T3343] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 952.209833][ T3343] ? kstrndup+0xbd/0x160 [ 952.209904][ T3343] ? kstrndup+0xbd/0x160 [ 952.209936][ T3343] hwsim_new_radio_nl+0xd8b/0xf90 [ 952.209983][ T3343] genl_family_rcv_msg_doit+0x233/0x340 [ 952.210022][ T3343] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 952.210067][ T3343] ? bpf_lsm_capable+0x9/0x20 [ 952.210094][ T3343] ? security_capable+0x7e/0x2c0 [ 952.210136][ T3343] genl_rcv_msg+0x614/0x7a0 [ 952.210172][ T3343] ? __pfx_genl_rcv_msg+0x10/0x10 [ 952.210197][ T3343] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 952.210245][ T3343] netlink_rcv_skb+0x226/0x4a0 [ 952.210280][ T3343] ? __pfx_genl_rcv_msg+0x10/0x10 [ 952.210318][ T3343] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 952.210371][ T3343] ? down_read+0x2be/0x330 [ 952.210399][ T3343] genl_rcv+0x28/0x40 [ 952.210424][ T3343] netlink_unicast+0x7bb/0x940 [ 952.210470][ T3343] netlink_sendmsg+0x813/0xb40 [ 952.210503][ T3343] ? __pfx_netlink_sendmsg+0x10/0x10 [ 952.210532][ T3343] ? aa_sock_msg_perm+0xf1/0x1b0 [ 952.210563][ T3343] ? __pfx_netlink_sendmsg+0x10/0x10 [ 952.210584][ T3343] sock_sendmsg_nosec+0x13a/0x180 [ 952.210614][ T3343] ____sys_sendmsg+0x54e/0x850 [ 952.210655][ T3343] ? __pfx_____sys_sendmsg+0x10/0x10 [ 952.210700][ T3343] ? import_iovec+0x73/0xa0 [ 952.210737][ T3343] ___sys_sendmsg+0x2a5/0x360 [ 952.210770][ T3343] ? __lock_acquire+0x683/0x2cf0 [ 952.210806][ T3343] ? __pfx____sys_sendmsg+0x10/0x10 [ 952.210844][ T3343] ? futex_wait+0x2a2/0x390 [ 952.210925][ T3343] ? __fget_files+0x2a/0x420 [ 952.210953][ T3343] ? __fget_files+0x3a2/0x420 [ 952.210995][ T3343] __x64_sys_sendmsg+0x1b1/0x290 [ 952.211033][ T3343] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 952.211090][ T3343] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 952.211115][ T3343] do_syscall_64+0x174/0x580 [ 952.211145][ T3343] ? trace_irq_disable+0x3b/0x140 [ 952.211173][ T3343] ? clear_bhb_loop+0x40/0x90 [ 952.211201][ T3343] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 952.211224][ T3343] RIP: 0033:0x7f106fb9de59 [ 952.211245][ T3343] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 952.211265][ T3343] RSP: 002b:00007f10709a8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 952.211289][ T3343] RAX: ffffffffffffffda RBX: 00007f106fe26090 RCX: 00007f106fb9de59 [ 952.211312][ T3343] RDX: 0000000000000084 RSI: 0000200000000100 RDI: 0000000000000005 [ 952.211327][ T3343] RBP: 00007f106fc33e6f R08: 0000000000000000 R09: 0000000000000000 [ 952.211341][ T3343] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 952.211354][ T3343] R13: 00007f106fe26128 R14: 00007f106fe26090 R15: 00007ffd462a8ec8 [ 952.211393][ T3343] [ 952.878027][ T3359] __nla_validate_parse: 16 callbacks suppressed [ 952.878048][ T3359] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7876'. [ 952.898277][ T3357] netlink: 'syz.0.7874': attribute type 10 has an invalid length. [ 952.908027][ T3357] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7874'. [ 952.929234][ T3361] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7875'. [ 952.945501][ T3357] team0: Port device geneve1 added [ 953.270633][ T3371] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7880'. [ 953.409941][ T3373] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7881'. [ 953.427506][ T3373] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7881'. [ 953.827355][ T3385] netlink: 72 bytes leftover after parsing attributes in process `syz.1.7885'. [ 953.844605][ T3387] netlink: 'syz.3.7886': attribute type 13 has an invalid length. [ 954.866276][ T3412] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7893'. [ 954.891471][ T3412] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7893'. [ 955.092209][ T3418] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7895'. [ 955.145216][ T3418] openvswitch: netlink: Missing key (keys=40, expected=80) [ 955.171948][ T3418] sctp: [Deprecated]: syz.4.7895 (pid 3418) Use of struct sctp_assoc_value in delayed_ack socket option. [ 955.171948][ T3418] Use struct sctp_sack_info instead [ 955.206263][ T3425] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 955.230412][ T3425] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 955.280570][ T3426] ip6_vti0: entered promiscuous mode [ 956.324158][ T3482] x_tables: duplicate underflow at hook 1 [ 956.347421][ T3483] x_tables: duplicate underflow at hook 1 [ 956.668967][ T3504] Cannot find add_set index 65532 as target [ 957.138197][ T3537] netlink: 'syz.2.7932': attribute type 1 has an invalid length. [ 957.252722][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 957.509893][ T3559] tipc: Enabling of bearer rejected, already enabled [ 957.619044][ T3563] netlink: 'syz.2.7940': attribute type 2 has an invalid length. [ 957.644149][ T3563] netlink: 'syz.2.7940': attribute type 1 has an invalid length. [ 957.804011][ T3572] xt_hashlimit: max too large, truncated to 1048576 [ 957.851646][ T3572] No such timeout policy "syz1" [ 957.915445][ T3580] __nla_validate_parse: 8 callbacks suppressed [ 957.915468][ T3580] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7946'. [ 958.021696][ T3586] bridge0: port 2(bridge_slave_1) entered blocking state [ 958.029001][ T3586] bridge0: port 2(bridge_slave_1) entered forwarding state [ 958.076191][ T3586] bridge0: entered promiscuous mode [ 958.082362][ T3586] bridge0: entered allmulticast mode [ 958.533998][ T3617] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7956'. [ 959.138075][ T3651] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7966'. [ 959.160572][ T3651] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7966'. [ 959.222852][ T3650] vlan3: entered promiscuous mode [ 959.240773][ T3650] gretap0: entered promiscuous mode [ 959.820187][ T3687] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7976'. [ 959.839667][ T3687] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7976'. [ 959.971027][ T3699] 8021q: adding VLAN 0 to HW filter on device ipvlan3 [ 959.980364][ T3699] bond0: (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 960.101835][ T3705] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 960.396983][ T3717] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7984'. [ 960.411369][ T3717] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7984'. [ 960.518928][ T3722] xt_time: unknown flags 0xf4 [ 960.891051][ T3739] netlink: 'syz.4.7991': attribute type 1 has an invalid length. [ 960.913081][ T3739] netlink: 84 bytes leftover after parsing attributes in process `syz.4.7991'. [ 960.958102][ T3732] bond5: option lp_interval: invalid value (0) [ 960.966609][ T3739] netlink: 'syz.4.7991': attribute type 2 has an invalid length. [ 960.984622][ T3732] bond5: option lp_interval: allowed values 1 - 2147483647 [ 960.985438][ T3739] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7991'. [ 961.004118][ T3732] bond5 (unregistering): Released all slaves [ 961.548838][ T3762] syzkaller0: entered promiscuous mode [ 961.557001][ T3762] syzkaller0: entered allmulticast mode [ 961.755561][ T3762] bond2: entered promiscuous mode [ 961.761059][ T3762] bond2: entered allmulticast mode [ 961.777402][ T3762] 8021q: adding VLAN 0 to HW filter on device bond2 [ 961.819884][ T3769] netlink: 'syz.1.7997': attribute type 1 has an invalid length. [ 961.827697][ T3769] netlink: 'syz.1.7997': attribute type 2 has an invalid length. [ 963.060199][ T3830] __nla_validate_parse: 2 callbacks suppressed [ 963.060220][ T3830] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8013'. [ 963.266201][ T3836] bond4: Unable to set down delay as MII monitoring is disabled [ 963.279526][ T3836] bond4 (unregistering): Released all slaves [ 963.740335][ T3844] xt_CT: You must specify a L4 protocol and not use inversions on it [ 963.885254][ T3847] syzkaller0: entered promiscuous mode [ 963.949842][ T3847] syzkaller0: entered allmulticast mode [ 964.120931][ T3862] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8024'. [ 964.170150][ T3862] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8024'. [ 964.748642][ T3879] netlink: 32 bytes leftover after parsing attributes in process `syz.1.8028'. [ 968.482277][ T3898] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8033'. [ 968.529997][ T3914] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8034'. [ 968.560129][ T3914] ip6t_srh: unknown srh match flags 4000 [ 968.758769][ T3920] netlink: 220 bytes leftover after parsing attributes in process `syz.2.8034'. [ 969.034784][ T3929] netlink: 'syz.4.8039': attribute type 1 has an invalid length. [ 969.060373][ T3931] vlan3: entered promiscuous mode [ 969.066385][ T3931] hsr0: entered promiscuous mode [ 969.073650][ T3931] vlan3: entered allmulticast mode [ 969.078906][ T3931] hsr0: entered allmulticast mode [ 969.084889][ T3931] hsr_slave_0: entered allmulticast mode [ 969.090629][ T3931] hsr_slave_1: entered allmulticast mode [ 969.102667][ T3932] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8039'. [ 969.140396][ T3929] 8021q: adding VLAN 0 to HW filter on device bond3 [ 969.689038][ T3960] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8047'. [ 969.940909][ T3972] netlink: 84 bytes leftover after parsing attributes in process `syz.1.8049'. [ 970.753895][ T4003] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8056'. [ 971.135964][ T4014] syzkaller0: entered promiscuous mode [ 971.150770][ T4014] syzkaller0: entered allmulticast mode [ 971.257355][ T4027] netlink: 20 bytes leftover after parsing attributes in process `syz.4.8065'. [ 971.326472][ T4027] team0: Port device team_slave_0 removed [ 971.402749][ T4038] netlink: 'syz.3.8069': attribute type 1 has an invalid length. [ 971.403276][ T4039] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8069'. [ 971.443313][ T4039] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8069'. [ 975.574107][ T4045] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 975.638834][ T4053] netlink: 'syz.1.8073': attribute type 58 has an invalid length. [ 975.681357][ T4053] __nla_validate_parse: 2 callbacks suppressed [ 975.681412][ T4053] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8073'. [ 975.728949][ T4057] netlink: 312 bytes leftover after parsing attributes in process `syz.0.8074'. [ 975.738592][ T4057] openvswitch: netlink: Flow key attr not present in new flow. [ 976.051261][ T4078] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 976.313003][ T4091] syzkaller0: entered promiscuous mode [ 976.318742][ T4091] syzkaller0: entered allmulticast mode [ 976.583508][ T4109] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8088'. [ 976.626080][ T4105] netlink: 'syz.1.8087': attribute type 27 has an invalid length. [ 976.697064][ T4115] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8089'. [ 976.709144][ T4115] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8089'. [ 976.720989][ T4115] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8089'. [ 976.731446][ T4115] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8089'. [ 976.732163][ T4117] netlink: 'syz.0.8090': attribute type 3 has an invalid length. [ 976.748524][ T4115] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8089'. [ 976.752100][ T4117] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8090'. [ 976.766784][ T4115] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8089'. [ 976.771044][ T4117] netlink: 'syz.0.8090': attribute type 3 has an invalid length. [ 977.158012][ T4135] netlink: 'syz.0.8093': attribute type 1 has an invalid length. [ 977.459561][ T4151] netlink: 'syz.4.8100': attribute type 1 has an invalid length. [ 977.495739][ T4130] bond14: entered promiscuous mode [ 977.501523][ T4130] bond14: entered allmulticast mode [ 977.513239][ T4130] 8021q: adding VLAN 0 to HW filter on device bond14 [ 977.526211][ T4130] bond13: (slave bond14): making interface the new active one [ 977.538323][ T4130] bond13: (slave bond14): Enslaving as an active interface with an up link [ 977.569812][ T4138] bond13: (slave gretap2): Enslaving as a backup interface with an up link [ 977.645564][ T4151] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 978.519507][ T4190] netlink: 'syz.0.8109': attribute type 1 has an invalid length. [ 978.525916][ T4189] netlink: 'syz.0.8109': attribute type 1 has an invalid length. [ 979.080953][ T4212] bridge0: port 2(bridge_slave_1) entered blocking state [ 979.098459][ T4212] bridge0: port 2(bridge_slave_1) entered forwarding state [ 979.106097][ T4212] bridge0: port 1(bridge_slave_0) entered blocking state [ 979.113299][ T4212] bridge0: port 1(bridge_slave_0) entered forwarding state [ 979.230017][ T4226] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 979.344271][ T4212] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 979.351812][ T4212] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 979.467180][ T4212] A link change request failed with some changes committed already. Interface rose0 may have been left with an inconsistent configuration, please check. [ 979.710768][ T4231] netlink: 'syz.2.8123': attribute type 1 has an invalid length. [ 979.738903][ T4231] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap3 [ 979.767804][ T4237] openvswitch: netlink: ufid size 41726 bytes exceeds the range (1, 16) [ 979.776730][ T4237] openvswitch: netlink: Message has 512 unknown bytes. [ 979.900716][ T4244] netlink: 'syz.4.8126': attribute type 5 has an invalid length. [ 979.974457][ T4249] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 979.983485][ T4249] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 980.089331][ T4246] syzkaller0: Number of in use tx queues changed invalidating tc mappings. Priority traffic classification disabled! [ 981.124001][ T4303] validate_nla: 1 callbacks suppressed [ 981.124041][ T4303] netlink: 'syz.3.8142': attribute type 1 has an invalid length. [ 981.149764][ T4303] __nla_validate_parse: 50 callbacks suppressed [ 981.149785][ T4303] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8142'. [ 981.285961][ T4307] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 981.386082][ T4315] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 981.408365][ T4321] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8149'. [ 981.504695][ T4327] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 981.844544][ T4354] syzkaller0: entered promiscuous mode [ 981.850103][ T4354] syzkaller0: entered allmulticast mode [ 982.265569][ T4383] mac80211_hwsim hwsim61 syzkaller0: left promiscuous mode [ 982.272872][ T4383] mac80211_hwsim hwsim61 syzkaller0: left allmulticast mode [ 982.475799][ T4397] netlink: 'syz.1.8174': attribute type 21 has an invalid length. [ 982.493456][ T4397] netlink: 128 bytes leftover after parsing attributes in process `syz.1.8174'. [ 982.502636][ T4397] netlink: 3 bytes leftover after parsing attributes in process `syz.1.8174'. [ 982.706505][ T4397] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8174'. [ 983.239592][ T4415] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8178'. [ 984.486707][ T4469] lo speed is unknown, defaulting to 1000 [ 984.516669][ T4469] wg2 speed is unknown, defaulting to 1000 [ 984.556969][ T4479] xt_hashlimit: size too large, truncated to 1048576 [ 984.758297][ T4494] ip6tnl0: Caught tx_queue_len zero misconfig [ 985.332038][ T4505] netlink: 'syz.0.8202': attribute type 14 has an invalid length. [ 985.503705][ T4469] lo speed is unknown, defaulting to 1000 [ 986.256591][ T4541] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 986.548205][ T4559] netlink: 236 bytes leftover after parsing attributes in process `syz.1.8217'. [ 986.566510][ T4559] netlink: 236 bytes leftover after parsing attributes in process `syz.1.8217'. [ 986.592995][ T4559] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8217'. [ 986.616390][ T4559] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8217'. [ 987.088646][ T4582] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 987.101467][ T4582] netlink: 'syz.1.8224': attribute type 1 has an invalid length. [ 987.326295][ T4591] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8228'. [ 987.350544][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 987.489453][ T4597] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8229'. [ 988.692969][ T4941] Bluetooth: hci1: command 0x0405 tx timeout [ 988.984023][ T4656] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8243'. [ 989.149668][ T4662] mac80211_hwsim hwsim61 syzkaller0: entered allmulticast mode [ 989.373233][ T4678] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8251'. [ 989.945182][ T4702] netlink: 56 bytes leftover after parsing attributes in process `syz.1.8258'. [ 989.960940][ T4698] netlink: 20 bytes leftover after parsing attributes in process `syz.4.8255'. [ 990.046925][ T4702] bond6 (unregistering): Released all slaves [ 990.115770][T15590] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 990.123669][T15590] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 990.394124][ T4720] Cannot find add_set index 0 as target [ 990.576923][ T4729] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 990.708692][ T4737] tipc: Failed to remove unknown binding: 66,0,0/0:3260127996/3260127997 [ 990.735131][ T4737] tipc: Failed to remove unknown binding: 66,0,0/0:3260127996/3260127997 [ 990.928972][ T4750] team0: Port device vlan0 added [ 991.010351][ T4755] netlink: 'syz.3.8275': attribute type 3 has an invalid length. [ 991.501381][ T4778] Can't find ip_set type bitmap:ip,mac [ 991.819271][ T4799] syzkaller1: entered promiscuous mode [ 991.824830][ T4799] syzkaller1: entered allmulticast mode [ 991.945387][ T4803] netlink: 'syz.4.8289': attribute type 21 has an invalid length. [ 991.967536][ T4803] IPv6: NLM_F_CREATE should be specified when creating new route [ 992.081680][ T4808] syzkaller1: entered promiscuous mode [ 992.087236][ T4808] syzkaller1: entered allmulticast mode [ 992.479149][ T4824] __nla_validate_parse: 13 callbacks suppressed [ 992.479171][ T4824] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8296'. [ 992.499393][ T4825] sit0: entered promiscuous mode [ 992.504947][ T4825] netlink: 'syz.0.8292': attribute type 1 has an invalid length. [ 992.516459][ T4825] netlink: 1 bytes leftover after parsing attributes in process `syz.0.8292'. [ 992.819416][ T4848] xt_addrtype: ipv6 does not support BROADCAST matching [ 992.861889][ T4849] netlink: 'syz.2.8299': attribute type 16 has an invalid length. [ 992.885863][ T4848] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 992.893228][ T4849] netlink: 'syz.2.8299': attribute type 17 has an invalid length. [ 993.145899][ T4849] bridge0: port 2(bridge_slave_1) entered blocking state [ 993.153226][ T4849] bridge0: port 2(bridge_slave_1) entered forwarding state [ 993.169482][ T4849] 8021q: adding VLAN 0 to HW filter on device bond0 [ 993.196205][ T4849] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 993.281756][ T4849] ipvlan1: left allmulticast mode [ 993.291234][ T4849] veth0_vlan: left allmulticast mode [ 993.347800][ T30] audit: type=1800 audit(1784185626.434:20): pid=4861 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.8304" name="memory.events" dev="tmpfs" ino=1600 res=0 errno=0 [ 993.396186][ T4849] mac80211_hwsim hwsim61 syzkaller0: left allmulticast mode [ 993.423799][ T4849] A link change request failed with some changes committed already. Interface syzkaller0 may have been left with an inconsistent configuration, please check. [ 993.508383][ T4855] 8021q: adding VLAN 0 to HW filter on device bond0 [ 993.517246][ T4855] 8021q: adding VLAN 0 to HW filter on device team0 [ 993.583568][ T4855] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 993.596225][ T4855] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 993.609985][ T4855] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 993.620686][ T4855] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 993.638860][ T4855] veth1_vlan: left promiscuous mode [ 993.670193][ T4855] veth0_vlan: left promiscuous mode [ 993.678873][ T4855] veth0_vlan: entered promiscuous mode [ 993.692665][ T4855] veth1_vlan: entered promiscuous mode [ 993.710098][ T4855] veth1_macvtap: left promiscuous mode [ 993.717820][ T4855] veth0_macvtap: left promiscuous mode [ 993.725935][ T4855] veth0_macvtap: entered promiscuous mode [ 993.733356][ T4855] veth1_macvtap: entered promiscuous mode [ 993.748756][ T4855] 8021q: adding VLAN 0 to HW filter on device  [ 993.757773][ T4855] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 993.767256][ T4855] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 993.776873][ T4855] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 993.793630][ T4855] veth0_to_team: entered promiscuous mode [ 993.810284][ T4855] 8021q: adding VLAN 0 to HW filter on device bond1 [ 993.824631][ T4855] 8021q: adding VLAN 0 to HW filter on device bond3 [ 993.839100][ T4855] 8021q: adding VLAN 0 to HW filter on device bond4 [ 993.847806][ T4855] 8021q: adding VLAN 0 to HW filter on device bond5 [ 993.922166][T15590] bridge0: port 1(bridge_slave_0) entered blocking state [ 993.929538][T15590] bridge0: port 1(bridge_slave_0) entered forwarding state [ 993.946131][T15590] bridge0: port 1(bridge_slave_0) entered blocking state [ 993.953511][T15590] bridge0: port 1(bridge_slave_0) entered forwarding state [ 993.965723][T15590] bridge0: port 2(bridge_slave_1) entered blocking state [ 993.973112][T15590] bridge0: port 2(bridge_slave_1) entered forwarding state [ 994.073935][ T4867] netlink: 48 bytes leftover after parsing attributes in process `syz.0.8305'. [ 994.084769][ T4865] netlink: 48 bytes leftover after parsing attributes in process `syz.0.8305'. [ 994.101670][ T6236] netdevsim netdevsim1 : set [0, 0] type 1 family 0 port 8472 - 0 [ 994.128282][ T6236] netdevsim netdevsim1 : set [1, 0] type 2 family 0 port 6081 - 0 [ 994.139755][ T6236] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 994.148589][ T6236] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 994.167440][ T4884] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8310'. [ 994.176398][ T4884] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8310'. [ 994.187087][ T6236] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 994.225461][ T6236] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 994.238614][ T4884] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8310'. [ 994.247598][ T4884] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8310'. [ 994.262282][ T36] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 994.273408][ T6236] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 994.283168][ T6236] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 994.376420][ T4889] netlink: 72 bytes leftover after parsing attributes in process `syz.0.8311'. [ 994.389713][ T4888] netlink: 108 bytes leftover after parsing attributes in process `syz.3.8313'. [ 994.437778][ T4892] sctp: [Deprecated]: syz.4.8314 (pid 4892) Use of struct sctp_assoc_value in delayed_ack socket option. [ 994.437778][ T4892] Use struct sctp_sack_info instead [ 994.464370][T15590] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 994.620153][ T4903] siw: device registration error -23 [ 994.653109][ T6236] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 994.661447][ T6236] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 994.869533][T15590] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 994.915251][ T4923] netlink: 'syz.0.8323': attribute type 1 has an invalid length. [ 994.980104][ T48] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 995.086589][ T36] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 995.197000][ T36] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 995.245777][ T4943] xt_hashlimit: size too large, truncated to 1048576 [ 995.302824][ T1118] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 995.335709][ T4951] netlink: 'syz.0.8328': attribute type 1 has an invalid length. [ 996.020207][ T4998] netlink: 'syz.3.8340': attribute type 1 has an invalid length. [ 996.047277][ T4999] netlink: 'syz.3.8340': attribute type 1 has an invalid length. [ 996.060952][ T4998] 8021q: adding VLAN 0 to HW filter on device bond6 [ 996.154775][ T5004] x_tables: duplicate underflow at hook 1 [ 996.181141][ T4999] 8021q: adding VLAN 0 to HW filter on device bond7 [ 996.220157][ T5006] nbd: must specify a device to reconfigure [ 996.440429][ T5028] netlink: 'syz.0.8344': attribute type 1 has an invalid length. [ 996.456658][ T5026] netlink: 'syz.0.8344': attribute type 1 has an invalid length. [ 996.533983][ T5038] xt_hashlimit: size too large, truncated to 1048576 [ 996.564887][ T5026] workqueue: Failed to create a rescuer kthread for wq "bond16": -EINTR [ 996.566271][ T5028] workqueue: Failed to create a rescuer kthread for wq "bond16": -EINTR [ 996.585039][ T5037] workqueue: Failed to create a rescuer kthread for wq "bond16": -EINTR [ 997.982421][ T1118] net_ratelimit: 47 callbacks suppressed [ 997.982466][ T1118] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 998.007249][ T1118] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 998.122797][ T6516] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 998.130599][ T6516] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 998.252444][ T6236] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 998.260463][ T6236] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 998.372518][ T6236] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 998.380527][ T6236] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 998.492556][T28211] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 998.501009][T28211] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 998.616070][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 999.126229][ T5006] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 999.377071][ T5082] __nla_validate_parse: 5 callbacks suppressed [ 999.377094][ T5082] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8353'. [ 999.636171][ T5101] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8360'. [ 999.684380][ T5097] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8358'. [ 999.702200][ T5097] lo: Caught tx_queue_len zero misconfig [ 999.742106][ T5107] netlink: 'syz.1.8363': attribute type 29 has an invalid length. [ 999.891863][ T5112] netlink: 244 bytes leftover after parsing attributes in process `syz.1.8365'. [ 1000.003721][ T5119] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8367'. [ 1000.015881][ T5122] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8368'. [ 1000.029625][ T5122] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8368'. [ 1000.233633][ T5133] bond0: (slave gre0): refused to change device type [ 1001.006020][ T5133] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1001.206096][ T5178] bridge_slave_1: left allmulticast mode [ 1001.212796][ T5178] bridge_slave_1: left promiscuous mode [ 1001.263694][ T5178] bridge0: port 2(bridge_slave_1) entered disabled state [ 1001.276822][ T5178] bridge_slave_0: left allmulticast mode [ 1001.282581][ T5178] bridge_slave_0: left promiscuous mode [ 1001.288434][ T5178] bridge0: port 1(bridge_slave_0) entered disabled state [ 1001.318275][ T5180] netlink: 'syz.1.8383': attribute type 4 has an invalid length. [ 1001.393983][ T5187] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8385'. [ 1001.576981][ T5193] netlink: 40 bytes leftover after parsing attributes in process `syz.1.8387'. [ 1001.636714][ T5196] veth9: entered allmulticast mode [ 1001.677411][ T5197] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8389'. [ 1002.560084][ T5237] 8021q: adding VLAN 0 to HW filter on device ipvlan3 [ 1002.586598][ T5237] team0: Device ipvlan3 is already an upper device of the team interface [ 1002.698571][ T5240] netlink: 'syz.0.8399': attribute type 39 has an invalid length. [ 1003.064171][ T1118] net_ratelimit: 71 callbacks suppressed [ 1003.064195][ T1118] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1003.093547][ T1118] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1003.233073][ T48] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1003.241249][ T48] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1003.372525][ T1118] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1003.387699][ T1118] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1003.451224][ T5268] netlink: 'syz.2.8409': attribute type 1 has an invalid length. [ 1003.550025][ T1118] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1003.577158][ T5280] IPVS: Error joining to the multicast group [ 1003.583626][ T6236] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1003.596502][ T5276] lo speed is unknown, defaulting to 1000 [ 1003.604177][ T5276] wg2 speed is unknown, defaulting to 1000 [ 1003.655313][T15590] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1003.663134][T15590] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1003.764266][ T5289] : renamed from bond_slave_0 [ 1003.794976][ T5289] xt_cgroup: path and classid specified [ 1003.901067][ T5299] bridge0: entered promiscuous mode [ 1003.910891][ T5299] ip6gretap0: entered promiscuous mode [ 1003.918996][ T5299] debugfs: 'hsr0' already exists in 'hsr' [ 1003.928280][ T5299] Cannot create hsr debugfs directory [ 1003.946572][ T5301] netlink: 'syz.3.8413': attribute type 10 has an invalid length. [ 1003.964631][ T5299] hsr0: Slave A (bridge0) is not up; please bring it up to get a fully working HSR network [ 1004.234704][ T5276] lo speed is unknown, defaulting to 1000 [ 1004.417003][ T5316] netlink: 'syz.0.8418': attribute type 3 has an invalid length. [ 1004.775973][ T5332] __nla_validate_parse: 7 callbacks suppressed [ 1004.775994][ T5332] netlink: 36 bytes leftover after parsing attributes in process `syz.3.8421'. [ 1005.114923][ T5340] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8426'. [ 1005.218962][ T5340] bond8: entered promiscuous mode [ 1005.224679][ T5340] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1005.244350][ T5329] netlink: 'syz.0.8423': attribute type 16 has an invalid length. [ 1005.275571][ T5329] netlink: 'syz.0.8423': attribute type 17 has an invalid length. [ 1005.321246][ T5340] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1005.328212][ T5348] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8426'. [ 1005.342222][ T5340] bond8: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 1005.377884][ T5340] bond8: (slave ip6gre1): Error -95 calling set_mac_address [ 1005.479725][ T5329] ip6_vti0: left promiscuous mode [ 1005.488734][ T5329] sit0: left promiscuous mode [ 1005.525836][ T5329] bridge0: left promiscuous mode [ 1005.530862][ T5329] bridge0: left allmulticast mode [ 1005.540565][ T5329] 8021q: adding VLAN 0 to HW filter on device team0 [ 1005.552879][ T5329] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1005.595401][ T5329] veth1_macvtap: entered promiscuous mode [ 1005.627074][ T5357] netlink: 'syz.4.8428': attribute type 1 has an invalid length. [ 1005.629682][ T5329] bond2: left promiscuous mode [ 1005.646343][ T5329] ip6gre1: left promiscuous mode [ 1005.654550][ T5329] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1005.664534][ T5329] bridge1: left promiscuous mode [ 1005.671632][ T5329] ip6gre2: left promiscuous mode [ 1005.676609][ T5329] ip6gre2: left allmulticast mode [ 1005.692306][ T5329] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1005.757269][ T5329] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1005.770477][ T5329] bond9: left allmulticast mode [ 1005.777332][ T5329] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1005.789649][ T5329] bond10: left promiscuous mode [ 1005.810254][ T5329] geneve3: left promiscuous mode [ 1005.818009][ T5329] geneve3: left allmulticast mode [ 1005.829278][ T5329] bond11: left promiscuous mode [ 1005.836747][ T5329] 8021q: adding VLAN 0 to HW filter on device bond11 [ 1005.846067][ T5329] bond12: left promiscuous mode [ 1005.851590][ T5329] 8021q: adding VLAN 0 to HW filter on device bond12 [ 1005.866848][ T5329] 8021q: adding VLAN 0 to HW filter on device bond13 [ 1005.875553][ T5329] bond14: left promiscuous mode [ 1005.880552][ T5329] bond14: left allmulticast mode [ 1005.889360][ T5329] 8021q: adding VLAN 0 to HW filter on device bond15 [ 1005.898628][ T5329] veth9: left allmulticast mode [ 1005.923320][T13297] lo speed is unknown, defaulting to 1000 [ 1005.938871][T13297] sy2: Port: 1 Link ACTIVE [ 1005.964643][T28211] bridge0: port 1(1x9) entered blocking state [ 1005.971169][T28211] bridge0: port 1(1x9) entered forwarding state [ 1006.138363][ T5367] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8431'. [ 1006.309545][ T6236] bond1: (slave veth3): link status definitely up, 10000 Mbps full duplex [ 1006.319239][ T6236] bond1: (slave veth3): making interface the new active one [ 1006.331309][ T6236] bond1: active interface up! [ 1007.024331][ T5410] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8440'. [ 1007.081076][ T5406] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8441'. [ 1007.113271][ T5406] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8441'. [ 1007.304682][ T5419] sit0: entered promiscuous mode [ 1007.336188][ T5419] netlink: 'syz.2.8444': attribute type 1 has an invalid length. [ 1007.343990][ T5419] netlink: 1 bytes leftover after parsing attributes in process `syz.2.8444'. [ 1007.914567][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1008.255686][ T36] net_ratelimit: 98 callbacks suppressed [ 1008.255710][ T36] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1008.269208][ T36] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1008.276660][ T36] bond9: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1008.284902][ T36] bond9: (slave ip6gretap1): failed to get link speed/duplex [ 1008.392947][ T5476] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8457'. [ 1008.428100][ T5477] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.8456'. [ 1008.470297][ T48] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1008.483951][ T48] bond9: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1008.541539][ T5476] team0: Port device team_slave_0 removed [ 1008.575032][ T36] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1008.584655][ T6518] bond9: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1008.645356][ T6236] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1008.645656][ T36] bond9: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1009.248913][ T5504] batadv0: entered allmulticast mode [ 1009.879864][ T5535] __nla_validate_parse: 1 callbacks suppressed [ 1009.879887][ T5535] netlink: 36 bytes leftover after parsing attributes in process `syz.2.8473'. [ 1009.916679][ T5543] netlink: 'syz.3.8474': attribute type 7 has an invalid length. [ 1009.937716][ T5543] veth0: Caught tx_queue_len zero misconfig [ 1010.076647][ T5541] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8475'. [ 1010.090654][ T5542] bond6: Removing last ns target with arp_interval on [ 1010.149444][ T5557] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 1010.325552][ T5566] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8480'. [ 1010.413476][ T5572] netlink: 'syz.3.8482': attribute type 1 has an invalid length. [ 1010.491337][ T5572] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1010.553226][ T5572] bond9: (slave gretap1): making interface the new active one [ 1010.565420][ T5572] bond9: (slave gretap1): Enslaving as an active interface with an up link [ 1010.578377][ T5578] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8486'. [ 1010.596793][ T5578] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8486'. [ 1010.605837][ T5578] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8486'. [ 1010.863350][ T5588] dvmrp0: entered allmulticast mode [ 1010.987809][ T5592] Cannot find add_set index 46338 as target [ 1011.847612][ T5623] netlink: 'syz.2.8498': attribute type 11 has an invalid length. [ 1011.909310][ T5623] netlink: 'syz.2.8498': attribute type 11 has an invalid length. [ 1011.944470][ T5624] netlink: 84 bytes leftover after parsing attributes in process `syz.0.8499'. [ 1011.961736][ T5624] netlink: 'syz.0.8499': attribute type 1 has an invalid length. [ 1012.067992][ T5636] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8501'. [ 1012.088208][ T5633] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8501'. [ 1012.271639][ T5648] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8506'. [ 1012.290507][ T5648] netlink: 'syz.2.8506': attribute type 1 has an invalid length. [ 1012.300020][ T5648] netlink: 'syz.2.8506': attribute type 2 has an invalid length. [ 1012.676091][ T5663] netlink: 'syz.1.8511': attribute type 1 has an invalid length. [ 1012.685856][ T5663] netlink: 'syz.1.8511': attribute type 3 has an invalid length. [ 1012.693970][ T5663] netlink: 'syz.1.8511': attribute type 7 has an invalid length. [ 1012.701741][ T5663] netlink: 'syz.1.8511': attribute type 8 has an invalid length. [ 1012.709507][ T5663] NCSI netlink: No device for ifindex 131092 [ 1012.876269][ T5667] veth7: entered allmulticast mode [ 1012.933256][ T5633] Bluetooth: hci1: Opcode 0x0401 failed: -4 [ 1012.960811][ T5636] Bluetooth: hci1: Opcode 0x0401 failed: -4 [ 1013.210038][ T5681] bond7: option arp_all_targets: invalid value (18446744073709551613) [ 1013.221553][ T5681] bond7 (unregistering): Released all slaves [ 1013.262499][ T5688] xt_cgroup: path and classid specified [ 1013.272356][ T6518] net_ratelimit: 179 callbacks suppressed [ 1013.272379][ T6518] bond9: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1013.305794][ T6518] bond9: (slave ip6gretap1): failed to get link speed/duplex [ 1013.374871][ T6236] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1013.385607][ T6236] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1013.459000][ T6236] bond9: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1013.466816][ T6236] bond9: (slave ip6gretap1): failed to get link speed/duplex [ 1013.551078][ T5697] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 1013.580933][ T6236] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1013.707940][T15590] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1013.720073][ T36] bond9: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1013.862741][ T5713] sctp: [Deprecated]: syz.0.8524 (pid 5713) Use of int in max_burst socket option deprecated. [ 1013.862741][ T5713] Use struct sctp_assoc_value instead [ 1013.995305][ T5716] syzkaller1: entered promiscuous mode [ 1014.021432][ T5716] syzkaller1: entered allmulticast mode [ 1014.237426][T28797] Bluetooth: hci1: command 0x0405 tx timeout [ 1014.844458][ T5753] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1015.046218][ T5753] veth5: entered allmulticast mode [ 1015.058458][ T5753] bond4: (slave veth5): Enslaving as an active interface with a down link [ 1015.117503][ T5756] bond4: (slave veth0_to_bond): making interface the new active one [ 1015.127257][ T5756] veth0_to_bond: entered promiscuous mode [ 1015.149057][ T5756] bond4: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 1015.179143][ T5768] bond4: entered promiscuous mode [ 1015.194286][ T5768] bond4: entered allmulticast mode [ 1015.245631][ T5768] veth0_to_bond: entered allmulticast mode [ 1015.632045][ T5789] veth0: entered promiscuous mode [ 1015.713670][ T5789] veth0: left promiscuous mode [ 1015.839604][ T5800] validate_nla: 1 callbacks suppressed [ 1015.839624][ T5800] netlink: 'syz.1.8553': attribute type 1 has an invalid length. [ 1015.901882][ T5803] bond0: Caught tx_queue_len zero misconfig [ 1015.938730][ T5808] __nla_validate_parse: 6 callbacks suppressed [ 1015.938752][ T5808] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8552'. [ 1016.015480][ T5810] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8551'. [ 1016.034411][ T5811] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8550'. [ 1016.302805][T28797] Bluetooth: hci1: command 0x0405 tx timeout [ 1016.729403][ T5830] netlink: 244 bytes leftover after parsing attributes in process `syz.0.8559'. [ 1016.991500][ T5839] syzkaller0: entered promiscuous mode [ 1017.013274][ T5839] syzkaller0: entered allmulticast mode [ 1017.395377][ T5850] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8566'. [ 1017.424779][ T5850] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8566'. [ 1018.115255][ T5875] 8021q: adding VLAN 0 to HW filter on device ipvlan3 [ 1018.303360][ T48] net_ratelimit: 355 callbacks suppressed [ 1018.303382][ T48] bond9: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1018.317210][ T36] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1018.331641][ T36] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1018.372409][ T48] bond9: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1018.385085][ T48] bond9: (slave ip6gretap1): failed to get link speed/duplex [ 1018.462860][ T6236] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1018.484608][ T6236] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1018.513367][ T36] bond9: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1018.527311][ T36] bond9: (slave ip6gretap1): failed to get link speed/duplex [ 1018.613163][ T48] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1018.980360][ T5900] netlink: 'syz.4.8579': attribute type 1 has an invalid length. [ 1019.031633][ T5900] netlink: 'syz.4.8579': attribute type 7 has an invalid length. [ 1019.083236][ T5900] netlink: 'syz.4.8579': attribute type 8 has an invalid length. [ 1019.134481][ T5900] netlink: 208 bytes leftover after parsing attributes in process `syz.4.8579'. [ 1019.191728][ T5900] NCSI netlink: No device for ifindex 65584 [ 1020.083980][ T5931] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8592'. [ 1020.169956][ T5933] netlink: 'syz.1.8593': attribute type 1 has an invalid length. [ 1021.535636][ T5964] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8600'. [ 1021.568188][ T5968] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8602'. [ 1021.611446][ T5964] bond8: Removing last arp target with arp_interval on [ 1021.622072][ T5968] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8602'. [ 1021.656816][ T5971] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8602'. [ 1021.666810][ T5971] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8602'. [ 1021.757631][ T5978] netlink: 60 bytes leftover after parsing attributes in process `syz.1.8604'. [ 1022.029903][ T5985] netlink: 'syz.3.8605': attribute type 1 has an invalid length. [ 1022.156743][ T5985] bond10: entered promiscuous mode [ 1022.164751][ T5985] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1023.369508][ T6518] net_ratelimit: 221 callbacks suppressed [ 1023.369532][ T6518] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1023.383168][T15591] bond9: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1023.401384][T15591] bond9: (slave ip6gretap1): failed to get link speed/duplex [ 1023.454483][ T6518] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1023.489254][ T6038] openvswitch: netlink: Message has 1 unknown bytes. [ 1023.532378][T15591] bond9: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1023.544512][ T6038] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8622'. [ 1023.551143][T15591] bond9: (slave ip6gretap1): failed to get link speed/duplex [ 1023.577013][T28211] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1023.621693][ T6039] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8622'. [ 1023.678784][T15591] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1023.703147][T28211] bond9: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1023.740492][ T6047] netlink: 52 bytes leftover after parsing attributes in process `syz.2.8625'. [ 1024.074723][ T6059] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8628'. [ 1024.507491][ T6066] syzkaller0: entered promiscuous mode [ 1024.513040][ T6066] syzkaller0: entered allmulticast mode [ 1024.822562][ T6083] sctp: [Deprecated]: syz.2.8634 (pid 6083) Use of int in max_burst socket option deprecated. [ 1024.822562][ T6083] Use struct sctp_assoc_value instead [ 1024.980441][ T6090] syzkaller1: entered promiscuous mode [ 1025.003297][ T6090] syzkaller1: entered allmulticast mode [ 1025.145905][ T6089] can: request_module (can-proto-0) failed. [ 1025.563373][ T6102] tipc: Disabling bearer [ 1026.382910][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1026.853901][ T6136] __nla_validate_parse: 11 callbacks suppressed [ 1026.853924][ T6136] netlink: 44 bytes leftover after parsing attributes in process `syz.4.8655'. [ 1027.095404][ T6145] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8658'. [ 1027.137910][ T6144] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8658'. [ 1027.191676][ T6148] netlink: 84 bytes leftover after parsing attributes in process `syz.2.8659'. [ 1027.454060][ T6159] netlink: 'syz.3.8662': attribute type 9 has an invalid length. [ 1027.776093][ T6175] netlink: 36 bytes leftover after parsing attributes in process `syz.1.8666'. [ 1028.395910][T28211] net_ratelimit: 203 callbacks suppressed [ 1028.395936][T28211] bond9: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1028.409498][T28211] bond9: (slave ip6gretap1): failed to get link speed/duplex [ 1028.416973][T28211] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1028.424743][T28211] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1028.503255][ T6195] netlink: 'syz.3.8673': attribute type 5 has an invalid length. [ 1028.609624][T15591] bond9: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1028.617533][T15591] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1028.718043][T15591] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1028.725868][T15591] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1028.737063][T15591] bond9: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1028.744857][T15591] bond9: (slave ip6gretap1): failed to get link speed/duplex [ 1028.805465][ T6201] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8674'. [ 1028.947391][ T6205] syzkaller1: entered promiscuous mode [ 1028.965970][ T6205] syzkaller1: entered allmulticast mode [ 1029.122613][ T6208] syzkaller0: entered promiscuous mode [ 1029.128179][ T6208] syzkaller0: entered allmulticast mode [ 1029.168716][ T6212] IPv6: sit2: Disabled Multicast RS [ 1029.175140][ T6212] sit2: entered allmulticast mode [ 1029.296583][ T6217] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8680'. [ 1029.318542][ T6214] syzkaller0: entered promiscuous mode [ 1029.324112][ T6214] syzkaller0: entered allmulticast mode [ 1029.335854][ T6217] netlink: 'syz.1.8680': attribute type 33 has an invalid length. [ 1029.450988][ T6223] netlink: 148 bytes leftover after parsing attributes in process `syz.1.8683'. [ 1030.033342][ T6248] netlink: 60 bytes leftover after parsing attributes in process `syz.0.8691'. [ 1030.061196][ T6248] netlink: 60 bytes leftover after parsing attributes in process `syz.0.8691'. [ 1030.175554][ T6251] netlink: 'syz.2.8689': attribute type 9 has an invalid length. [ 1030.383306][ T30] audit: type=1107 audit(1784185663.454:21): pid=6261 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='mkl"PÞ [ 1030.383306][ T30] ]P/ٷb'a1~DIacʉ 6z'RXWbhmd@L@QKecNߛIw՞ƴلMl"_.' [ 1030.516949][ T6269] xt_policy: output policy not valid in PREROUTING and INPUT [ 1030.726532][ T6280] netlink: 'syz.2.8697': attribute type 1 has an invalid length. [ 1030.786566][ T6280] netlink: 'syz.2.8697': attribute type 7 has an invalid length. [ 1030.821428][ T6280] netlink: 'syz.2.8697': attribute type 8 has an invalid length. [ 1030.845501][ T6280] NCSI netlink: No device for ifindex 65584 [ 1031.063331][ T6294] syzkaller0: entered promiscuous mode [ 1031.076533][ T6294] syzkaller0: entered allmulticast mode [ 1031.426293][ T6308] netlink: 'syz.0.8710': attribute type 1 has an invalid length. [ 1031.555340][ T6308] bond16: entered promiscuous mode [ 1031.579465][ T6308] 8021q: adding VLAN 0 to HW filter on device bond16 [ 1031.609223][ T6317] bond16: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1031.621731][ T6317] bond16: (slave ipvlan0): The slave device specified does not support setting the MAC address [ 1031.632187][ T6317] bond16: (slave ipvlan0): Setting fail_over_mac to active for active-backup mode [ 1031.756049][ T6325] rdma_rxe: rxe_newlink: failed to add lo [ 1031.985633][ T6334] siw: device registration error -23 [ 1031.989423][ T6335] __nla_validate_parse: 70 callbacks suppressed [ 1031.989483][ T6335] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8718'. [ 1032.057911][ T6334] only policy match revision 0 supported [ 1032.057936][ T6334] unable to load match [ 1032.068747][ T6334] : renamed from lo (while UP) [ 1032.143481][ T6340] netlink: 'syz.0.8722': attribute type 1 has an invalid length. [ 1032.151552][ T6340] netlink: 'syz.0.8722': attribute type 2 has an invalid length. [ 1032.977555][ T6371] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8730'. [ 1033.044099][ T6371] vlan0: entered allmulticast mode [ 1033.049292][ T6371] bridge5: entered allmulticast mode [ 1033.136982][ T6380] netlink: 'syz.2.8733': attribute type 1 has an invalid length. [ 1033.408944][ T6394] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1033.431944][ T6516] net_ratelimit: 149 callbacks suppressed [ 1033.431967][ T6516] bond9: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1033.432034][ T6516] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1033.447799][T15591] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1033.466128][ T6516] bond9: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1033.492352][ T6394] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1033.533019][T28211] bond9: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1033.550895][ T6516] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1033.570000][T28211] bond9: (slave ip6gretap1): failed to get link speed/duplex [ 1033.604775][T28211] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1033.632522][T28211] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1033.692401][ T6516] bond9: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1033.716586][ T6411] netlink: 'syz.4.8741': attribute type 1 has an invalid length. [ 1033.726314][ T6411] netlink: 224 bytes leftover after parsing attributes in process `syz.4.8741'. [ 1033.847174][ T6419] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8744'. [ 1033.922373][ T6419] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1033.931799][ T6419] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1033.943156][ T6419] netdevsim netdevsim0 netdevsim3: unset [1, 1] type 2 family 0 port 19999 - 0 [ 1033.975432][ T6425] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8744'. [ 1034.150910][ T6516] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1034.193320][ T6394] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1034.209538][ T6394] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1034.437521][ T6437] netlink: 48 bytes leftover after parsing attributes in process `syz.0.8746'. [ 1034.486319][ T6437] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8746'. [ 1034.525402][ T6394] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1034.529100][ T6437] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8746'. [ 1034.587223][ T6394] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1034.743755][ T6394] netdevsim netdevsim1  (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1034.753907][ T6394] netdevsim netdevsim1  (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1034.810511][ T6451] lo: entered allmulticast mode [ 1034.876400][ T6451] bridge0: port 3(batadv1) entered blocking state [ 1034.893334][ T6451] bridge0: port 3(batadv1) entered disabled state [ 1034.900083][ T6451] batadv1: entered allmulticast mode [ 1034.914406][ T6451] batadv1: entered promiscuous mode [ 1035.164292][ T6472] netlink: 'syz.2.8755': attribute type 1 has an invalid length. [ 1035.318590][ T6458] sit0: left promiscuous mode [ 1035.363369][ T6516] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 1035.373489][ T6516] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 1035.583315][ T6458] : left promiscuous mode [ 1035.604749][ T6458] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1035.622112][ T6458] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1035.842140][ T6458] mac80211_hwsim hwsim58 wlan0: left promiscuous mode [ 1035.871649][ T6458] bond1: left promiscuous mode [ 1035.886194][ T6458] macvlan2: left promiscuous mode [ 1035.891638][ T6458] macvlan2: left allmulticast mode [ 1035.917937][ T6458] netdevsim netdevsim3 netdevsim0: left allmulticast mode [ 1035.933369][ T6458] macvlan3: left promiscuous mode [ 1035.938608][ T6458] macvlan3: left allmulticast mode [ 1035.957720][ T6458] veth1_vlan: left allmulticast mode [ 1035.963814][ T6458] macvtap1: left promiscuous mode [ 1035.968931][ T6458] macvtap1: left allmulticast mode [ 1035.983850][ T6458] bond2: left promiscuous mode [ 1036.000619][ T6458] geneve2: left promiscuous mode [ 1036.006732][ T6458] geneve2: left allmulticast mode [ 1036.075845][ T6458] geneve3: left promiscuous mode [ 1036.189358][ T6458] veth7: left allmulticast mode [ 1036.195535][ T6458] bond10: left promiscuous mode [ 1036.203254][ T809] lo speed is unknown, defaulting to 1000 [ 1036.209078][ T809] syz1: Port: 1 Link DOWN [ 1036.233669][ T6472] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 1036.268023][ T5286] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1036.368912][ T6476] syzkaller0: entered promiscuous mode [ 1036.374461][ T6476] syzkaller0: entered allmulticast mode [ 1036.406474][ T6488] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8756'. [ 1036.420201][ T6488] netlink: 'syz.2.8756': attribute type 29 has an invalid length. [ 1036.428087][ T6488] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8756'. [ 1036.497879][ T6493] netlink: 'syz.2.8756': attribute type 29 has an invalid length. [ 1036.521858][T28211] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1036.551975][T28211] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1036.585148][T28211] netdevsim netdevsim3 netdevsim0: unset [1, 1] type 2 family 0 port 19999 - 0 [ 1036.605308][T28211] netdevsim netdevsim3 netdevsim0: unset [1, 2] type 2 family 0 port 41984 - 0 [ 1036.618667][ T2398] lo speed is unknown, defaulting to 1000 [ 1036.707037][ T6495] xt_CT: No such helper "snmp_trap" [ 1038.442573][ T6518] net_ratelimit: 248 callbacks suppressed [ 1038.442599][ T6518] bond9: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1038.456732][ T1118] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1038.491483][ T1118] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1038.562420][ T1118] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1038.568683][ T6518] bond9: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1038.592989][ T6518] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1038.595416][T15593] bond9: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1038.622573][ T1118] bond9: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1038.674718][ T1118] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1038.682658][ T6518] bond9: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1040.688007][T28211] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1040.702472][T28211] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1040.711406][T28211] netdevsim netdevsim3 netdevsim1: unset [1, 1] type 2 family 0 port 19999 - 0 [ 1040.720486][T28211] netdevsim netdevsim3 netdevsim1: unset [1, 2] type 2 family 0 port 41984 - 0 [ 1040.730339][T28211] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1040.739262][T28211] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1040.748188][T28211] netdevsim netdevsim3 netdevsim2: unset [1, 1] type 2 family 0 port 19999 - 0 [ 1040.757233][T28211] netdevsim netdevsim3 netdevsim2: unset [1, 2] type 2 family 0 port 41984 - 0 [ 1040.783698][T28211] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1040.807923][T28211] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1040.816866][T28211] netdevsim netdevsim3 netdevsim3: unset [1, 1] type 2 family 0 port 19999 - 0 [ 1040.825860][T28211] netdevsim netdevsim3 netdevsim3: unset [1, 2] type 2 family 0 port 41984 - 0 [ 1040.980681][ T6518] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1040.990174][ T6518] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1041.004342][ T6511] __nla_validate_parse: 3 callbacks suppressed [ 1041.004365][ T6511] netlink: 44 bytes leftover after parsing attributes in process `syz.0.8763'. [ 1041.051097][ T6511] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8763'. [ 1041.072048][ T1118] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1041.080289][ T1118] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1041.188050][ T36] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1041.200754][ T36] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1041.218469][ T6518] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1041.229277][ T6518] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1041.386774][ T6541] : renamed from bond0 (while UP) [ 1041.789251][ T6565] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8778'. [ 1042.108784][ T6579] netlink: 60 bytes leftover after parsing attributes in process `syz.0.8786'. [ 1042.198044][ T6586] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8788'. [ 1042.218941][ T6586] team0 (unregistering): Port device team_slave_1 removed [ 1042.276673][ T6586] team0 (unregistering): Port device macvlan2 removed [ 1042.305926][ T6586] team0 (unregistering): Port device macvlan3 removed [ 1042.321810][ T6586] team0 (unregistering): Port device vlan0 removed [ 1042.400708][ T6595] tipc: Enabled bearer , priority 0 [ 1042.411770][ T6594] syzkaller0: entered promiscuous mode [ 1042.417362][ T6594] syzkaller0: entered allmulticast mode [ 1042.426039][ T6595] syzkaller0: entered promiscuous mode [ 1042.431831][ T6595] syzkaller0: entered allmulticast mode [ 1042.553533][ T6595] tipc: Resetting bearer [ 1042.643416][ T6591] tipc: Resetting bearer [ 1042.766863][ T6591] tipc: Disabling bearer [ 1042.870237][ T6615] netlink: 1 bytes leftover after parsing attributes in process `syz.1.8797'. [ 1042.894899][ T6615] nbd: must specify at least one socket [ 1043.074979][ T6623] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8799'. [ 1043.089030][ T6624] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8800'. [ 1043.328480][ T6635] netlink: 'syz.2.8803': attribute type 1 has an invalid length. [ 1043.336319][ T6635] netlink: 'syz.2.8803': attribute type 2 has an invalid length. [ 1043.348158][ T6636] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8802'. [ 1043.357181][ T6636] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8802'. [ 1043.375769][ T6635] netlink: 'syz.2.8803': attribute type 1 has an invalid length. [ 1043.384972][ T6635] netlink: 'syz.2.8803': attribute type 2 has an invalid length. [ 1043.408557][ T6636] vlan2: entered promiscuous mode [ 1043.456826][ T6636] bridge0: entered promiscuous mode [ 1043.462342][ T1118] net_ratelimit: 249 callbacks suppressed [ 1043.462362][ T1118] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1043.535944][ T6236] bond9: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1043.549796][ T1118] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1043.557615][ T1118] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1043.592708][T15593] bond9: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1043.622609][T15593] bond9: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1043.654687][ T6518] bond9: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1043.684827][ T6236] bond9: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1043.712635][ T6236] bond9: (slave ip6gretap1): failed to get link speed/duplex [ 1043.753967][ T6236] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1044.240356][ T6687] sch_tbf: peakrate 7 is lower than or equals to rate 7 ! [ 1044.265798][ T6687] mac80211_hwsim hwsim61 syzkaller0: entered promiscuous mode [ 1044.285404][ T6687] mac80211_hwsim hwsim61 syzkaller0: entered allmulticast mode [ 1044.380522][ T6699] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 1044.609225][ T6710] bond6: entered promiscuous mode [ 1044.649244][ T6710] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1044.887358][ T6729] netlink: 'syz.1.8829': attribute type 1 has an invalid length. [ 1044.897758][ T6729] netlink: 'syz.1.8829': attribute type 8 has an invalid length. [ 1044.906749][ T30] audit: type=1804 audit(1784185677.944:22): pid=6733 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.8831" name="/newroot/560/cgroup.controllers" dev="tmpfs" ino=2868 res=1 errno=0 [ 1044.942654][ T6709] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1044.964225][ T6709] bond6: (slave ip6gre2): The slave device specified does not support setting the MAC address [ 1044.975950][ T30] audit: type=1800 audit(1784185677.944:23): pid=6733 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.8831" name="cgroup.controllers" dev="tmpfs" ino=2868 res=0 errno=0 [ 1045.009698][ T6709] bond6: (slave ip6gre2): Error -95 calling set_mac_address [ 1045.415500][ T6759] netlink: 'syz.0.8840': attribute type 1 has an invalid length. [ 1045.459093][ T6759] bond17: entered promiscuous mode [ 1045.464844][ T6759] 8021q: adding VLAN 0 to HW filter on device bond17 [ 1045.516571][ T6759] bond17: (slave bridge6): making interface the new active one [ 1045.524217][ T6759] bridge6: entered promiscuous mode [ 1045.531536][ T6759] bond17: (slave bridge6): Enslaving as an active interface with an up link [ 1046.188114][ T6804] xt_l2tp: invalid flags combination: 0 [ 1046.481107][ T6826] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 1046.910416][ T6853] xt_hashlimit: size too large, truncated to 1048576 [ 1046.918202][ T6851] __nla_validate_parse: 10 callbacks suppressed [ 1046.918228][ T6851] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8867'. [ 1046.992579][ T6855] bridge_slave_0 (unregistering): left allmulticast mode [ 1047.018824][ T6855] bridge_slave_0 (unregistering): left promiscuous mode [ 1047.058913][ T6855] bridge0: port 1(bridge_slave_0) entered disabled state [ 1047.395053][ T6870] tipc: Enabling of bearer rejected, already enabled [ 1047.439657][ T6878] netlink: 'syz.1.8876': attribute type 6 has an invalid length. [ 1047.550866][ T6885] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8879'. [ 1047.815066][ T6896] bond7: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 1047.828461][ T6905] netlink: 32 bytes leftover after parsing attributes in process `syz.2.8882'. [ 1047.873926][ T6896] bond7 (unregistering): Released all slaves [ 1048.037170][ T6911] batadv0: Caught tx_queue_len zero misconfig [ 1048.047933][ T6911] netlink: 'syz.3.8884': attribute type 3 has an invalid length. [ 1048.268236][ T6916] bond0: entered promiscuous mode [ 1048.645853][ T6518] net_ratelimit: 137 callbacks suppressed [ 1048.645876][ T6518] bond9: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1048.659423][ T6518] bond9: (slave ip6gretap1): failed to get link speed/duplex [ 1048.667049][ T6518] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1048.674830][ T6518] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1048.693857][ T6941] netlink: 'syz.3.8895': attribute type 1 has an invalid length. [ 1048.701678][ T6941] netlink: 'syz.3.8895': attribute type 4 has an invalid length. [ 1048.709525][ T6941] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.8895'. [ 1048.777790][ T6944] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8894'. [ 1048.851121][T15593] bond9: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1048.854819][ T6236] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1048.887601][ T6950] netlink: 'syz.2.8898': attribute type 1 has an invalid length. [ 1048.975273][ T6518] bond9: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1048.975403][ T6236] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1049.022519][ T6518] bond9: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1049.046684][ T6950] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1049.067982][ T1118] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1049.164409][ T6966] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8899'. [ 1049.242387][ T6970] netlink: 'syz.3.8901': attribute type 1 has an invalid length. [ 1049.273039][ T6970] netlink: 'syz.3.8901': attribute type 2 has an invalid length. [ 1049.312833][ T6969] tipc: Enabling of bearer rejected, already enabled [ 1049.506152][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1049.568220][ T1118] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1049.578034][ T1118] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1049.582339][ T6990] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8907'. [ 1049.595491][ T1118] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1049.613992][ T1118] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1049.632094][ T6986] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8906'. [ 1049.671255][ T6990] bond18: entered promiscuous mode [ 1049.677013][ T6990] 8021q: adding VLAN 0 to HW filter on device bond18 [ 1049.684906][ T6986] syzkaller1: entered promiscuous mode [ 1049.690432][ T6986] syzkaller1: entered allmulticast mode [ 1049.769402][ T6990] 8021q: adding VLAN 0 to HW filter on device bond18 [ 1049.776846][ T6990] bond18: (slave ip6gre3): The slave device specified does not support setting the MAC address [ 1049.788251][ T6990] bond18: (slave ip6gre3): Error -95 calling set_mac_address [ 1049.940947][ T6996] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8910'. [ 1050.068736][ T7004] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8911'. [ 1050.078828][ T7004] netlink: 'syz.4.8911': attribute type 8 has an invalid length. [ 1050.229234][ T7009] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1051.088064][ T7033] netlink: 'syz.4.8920': attribute type 1 has an invalid length. [ 1053.673586][ T6518] net_ratelimit: 293 callbacks suppressed [ 1053.673628][ T6518] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1053.689445][ T1118] bond9: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1053.704128][ T1118] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1053.714594][ T6518] bond9: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1053.744686][ T6518] bond9: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1053.753321][ T1118] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1053.780475][T15593] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1053.802581][ T6518] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1053.900374][ T6236] bond9: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1053.910733][ T6518] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1055.037400][ T7033] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 1055.301870][ T7045] netlink: 'syz.4.8925': attribute type 2 has an invalid length. [ 1055.446109][ T7057] Cannot find add_set index 34 as target [ 1055.450995][ T7045] : entered promiscuous mode [ 1055.518007][ T7050] lo speed is unknown, defaulting to 1000 [ 1055.526896][ T7050] wg2 speed is unknown, defaulting to 1000 [ 1055.678583][ T7062] __nla_validate_parse: 1 callbacks suppressed [ 1055.678603][ T7062] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8929'. [ 1055.815558][ T7068] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8929'. [ 1056.003385][ T7050] lo speed is unknown, defaulting to 1000 [ 1056.173536][ T7086] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1056.217053][ T7090] netlink: 'syz.3.8937': attribute type 3 has an invalid length. [ 1056.228761][ T7087] bond0 (unregistering): Released all slaves [ 1056.334556][ T7090] xt_l2tp: v2 sid > 0xffff: 1114112 [ 1056.387795][ T7096] netlink: 'syz.3.8937': attribute type 3 has an invalid length. [ 1056.815253][ T7106] netlink: 'syz.1.8942': attribute type 13 has an invalid length. [ 1057.008639][ T7120] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8945'. [ 1057.102873][ T7115] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1057.121631][ T7113] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1057.269859][ T7121] syzkaller1: entered promiscuous mode [ 1057.281350][ T7121] syzkaller1: entered allmulticast mode [ 1057.311054][ T7121] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8946'. [ 1057.440746][ T7133] batadv_slave_0: Caught tx_queue_len zero misconfig [ 1057.739070][ T7137] x_tables: duplicate underflow at hook 3 [ 1058.464666][ T7160] erspan0: entered promiscuous mode [ 1058.469959][ T7160] erspan0: entered allmulticast mode [ 1058.688048][ T7168] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8960'. [ 1058.747197][ T6236] net_ratelimit: 212 callbacks suppressed [ 1058.747221][ T6236] bond9: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1058.763215][ T6516] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1058.772574][ T36] bond9: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1058.785170][ T6516] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1058.812539][ T36] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1058.828194][ T6516] bond9: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1058.842427][ T6516] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1058.850392][ T6516] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1058.933044][ T6236] bond9: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1058.951157][ T6236] bond9: (slave ip6gretap1): failed to get link speed/duplex [ 1059.024274][ T7183] netlink: 224 bytes leftover after parsing attributes in process `syz.3.8964'. [ 1059.445237][ T7207] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8971'. [ 1059.454182][ T7207] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8971'. [ 1059.463225][ T7207] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8971'. [ 1059.541216][ T7213] netlink: 'syz.0.8972': attribute type 1 has an invalid length. [ 1059.549099][ T7213] netlink: 224 bytes leftover after parsing attributes in process `syz.0.8972'. [ 1059.958531][ T7231] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1059.974717][ T7231] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1059.986686][ T7231] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1059.997785][ T7231] netdevsim netdevsim1 eth0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1060.008304][ T7231] 8021q: adding VLAN 0 to HW filter on device eth0 [ 1060.016354][ T7231] netdevsim netdevsim1 eth1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1060.048659][ T7231] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1060.058149][ T7231] netdevsim netdevsim1 eth2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1060.068857][ T7231] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1060.083541][ T7231] netdevsim netdevsim1 eth3: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1060.095755][ T7231] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1060.107319][ T7231] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1060.252745][ T7241] netlink: 'syz.1.8980': attribute type 39 has an invalid length. [ 1060.315304][ T7244] netlink: 'syz.2.8982': attribute type 1 has an invalid length. [ 1060.323426][ T7244] netlink: 'syz.2.8982': attribute type 1 has an invalid length. [ 1060.448149][ T7253] xt_socket: unknown flags 0xe4 [ 1061.199927][ T7285] __nla_validate_parse: 7 callbacks suppressed [ 1061.199949][ T7285] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8993'. [ 1061.216859][ T7289] INFO: trying to register non-static key. [ 1061.222723][ T7289] The code is fine but needs lockdep annotation, or maybe [ 1061.229860][ T7289] you didn't initialize this object before use? [ 1061.236164][ T7289] turning off the locking correctness validator. [ 1061.242527][ T7289] CPU: 1 UID: 0 PID: 7289 Comm: syz.0.8994 Not tainted syzkaller #0 PREEMPT(full) [ 1061.242554][ T7289] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 1061.242570][ T7289] Call Trace: [ 1061.242581][ T7289] [ 1061.242590][ T7289] dump_stack_lvl+0xe8/0x150 [ 1061.242632][ T7289] assign_lock_key+0x133/0x150 [ 1061.242669][ T7289] register_lock_class+0xcc/0x2e0 [ 1061.242701][ T7289] __lock_acquire+0xab/0x2cf0 [ 1061.242731][ T7289] ? kmem_cache_free+0x182/0x650 [ 1061.242759][ T7289] ? kern_path+0xd1/0x150 [ 1061.242785][ T7289] ? nfsd_nl_unlock_filesystem_doit+0x189/0x370 [ 1061.242851][ T7289] ? genl_family_rcv_msg_doit+0x233/0x340 [ 1061.242882][ T7289] ? genl_rcv_msg+0x614/0x7a0 [ 1061.242906][ T7289] ? netlink_rcv_skb+0x226/0x4a0 [ 1061.242938][ T7289] ? genl_rcv+0x28/0x40 [ 1061.242962][ T7289] ? netlink_unicast+0x7bb/0x940 [ 1061.243011][ T7289] ? netlink_sendmsg+0x813/0xb40 [ 1061.243031][ T7289] ? sock_sendmsg_nosec+0x13a/0x180 [ 1061.243057][ T7289] ? ____sys_sendmsg+0x54e/0x850 [ 1061.243089][ T7289] ? ___sys_sendmsg+0x2a5/0x360 [ 1061.243118][ T7289] ? __x64_sys_sendmsg+0x1b1/0x290 [ 1061.243148][ T7289] ? do_syscall_64+0x174/0x580 [ 1061.243181][ T7289] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1061.243212][ T7289] ? nfsd4_cancel_copy_by_sb+0x10d/0x840 [ 1061.243249][ T7289] lock_acquire+0x106/0x350 [ 1061.243278][ T7289] ? nfsd4_cancel_copy_by_sb+0x10d/0x840 [ 1061.243310][ T7289] ? net_generic+0x1e/0x240 [ 1061.243336][ T7289] ? net_generic+0x1e/0x240 [ 1061.243361][ T7289] ? net_generic+0x1e/0x240 [ 1061.243397][ T7289] _raw_spin_lock+0x2e/0x40 [ 1061.243423][ T7289] ? nfsd4_cancel_copy_by_sb+0x10d/0x840 [ 1061.243452][ T7289] nfsd4_cancel_copy_by_sb+0x10d/0x840 [ 1061.243480][ T7289] ? kasan_quarantine_put+0xbb/0x1f0 [ 1061.243507][ T7289] ? lockdep_hardirqs_on+0x7a/0x110 [ 1061.243540][ T7289] ? kern_path+0xd1/0x150 [ 1061.243566][ T7289] ? __pfx_nfsd4_cancel_copy_by_sb+0x10/0x10 [ 1061.243599][ T7289] ? kern_path+0xd1/0x150 [ 1061.243627][ T7289] nfsd_nl_unlock_filesystem_doit+0x248/0x370 [ 1061.243652][ T7289] ? __pfx_nfsd_nl_unlock_filesystem_doit+0x10/0x10 [ 1061.243676][ T7289] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 1061.243704][ T7289] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 1061.243736][ T7289] genl_family_rcv_msg_doit+0x233/0x340 [ 1061.243767][ T7289] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1061.243797][ T7289] ? bpf_lsm_capable+0x9/0x20 [ 1061.243823][ T7289] ? security_capable+0x7e/0x2c0 [ 1061.243869][ T7289] genl_rcv_msg+0x614/0x7a0 [ 1061.243897][ T7289] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1061.243922][ T7289] ? __pfx_nfsd_nl_unlock_filesystem_doit+0x10/0x10 [ 1061.243945][ T7289] ? __pfx_ref_tracker_free+0x10/0x10 [ 1061.243978][ T7289] netlink_rcv_skb+0x226/0x4a0 [ 1061.244011][ T7289] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1061.244036][ T7289] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1061.244076][ T7289] ? down_read+0x2be/0x330 [ 1061.244097][ T7289] genl_rcv+0x28/0x40 [ 1061.244121][ T7289] netlink_unicast+0x7bb/0x940 [ 1061.244156][ T7289] netlink_sendmsg+0x813/0xb40 [ 1061.244181][ T7289] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1061.244205][ T7289] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1061.244229][ T7289] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1061.244248][ T7289] sock_sendmsg_nosec+0x13a/0x180 [ 1061.244276][ T7289] ____sys_sendmsg+0x54e/0x850 [ 1061.244311][ T7289] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1061.244348][ T7289] ? import_iovec+0x73/0xa0 [ 1061.244388][ T7289] ___sys_sendmsg+0x2a5/0x360 [ 1061.244420][ T7289] ? __lock_acquire+0x683/0x2cf0 [ 1061.244452][ T7289] ? __pfx____sys_sendmsg+0x10/0x10 [ 1061.244487][ T7289] ? futex_wait+0x2a2/0x390 [ 1061.244528][ T7289] ? __fget_files+0x2a/0x420 [ 1061.244555][ T7289] ? __fget_files+0x3a2/0x420 [ 1061.244587][ T7289] __x64_sys_sendmsg+0x1b1/0x290 [ 1061.244622][ T7289] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1061.244664][ T7289] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1061.244687][ T7289] do_syscall_64+0x174/0x580 [ 1061.244717][ T7289] ? trace_irq_disable+0x3b/0x140 [ 1061.244745][ T7289] ? clear_bhb_loop+0x40/0x90 [ 1061.244768][ T7289] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1061.244791][ T7289] RIP: 0033:0x7f6c4359de59 [ 1061.244812][ T7289] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1061.244831][ T7289] RSP: 002b:00007f6c44484028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1061.244855][ T7289] RAX: ffffffffffffffda RBX: 00007f6c43825fa0 RCX: 00007f6c4359de59 [ 1061.244871][ T7289] RDX: 0000000004000080 RSI: 0000200000000100 RDI: 0000000000000004 [ 1061.244885][ T7289] RBP: 00007f6c43633e6f R08: 0000000000000000 R09: 0000000000000000 [ 1061.244900][ T7289] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1061.244914][ T7289] R13: 00007f6c43826038 R14: 00007f6c43825fa0 R15: 00007ffefb08d8f8 [ 1061.244940][ T7289] [ 1061.716712][ T7289] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] SMP KASAN PTI [ 1061.728665][ T7289] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 1061.737107][ T7289] CPU: 1 UID: 0 PID: 7289 Comm: syz.0.8994 Not tainted syzkaller #0 PREEMPT(full) [ 1061.746426][ T7289] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 1061.756503][ T7289] RIP: 0010:nfsd4_cancel_copy_by_sb+0x161/0x840 [ 1061.762787][ T7289] Code: 48 42 80 3c 31 00 74 0f 48 8b 7c 24 10 e8 17 bb 4c ff 48 8b 44 24 10 48 8b 5c 24 18 48 c1 e3 04 48 03 18 48 89 d8 48 c1 e8 03 <42> 80 3c 30 00 74 08 48 89 df e8 f0 ba 4c ff 48 8b 03 48 39 d8 48 [ 1061.782467][ T7289] RSP: 0018:ffffc90006d57280 EFLAGS: 00010246 [ 1061.788569][ T7289] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 1ffff110084fb00d [ 1061.796562][ T7289] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffffc90006d57200 [ 1061.804555][ T7289] RBP: ffffc90006d57370 R08: 0000000000000003 R09: 0000000000000004 [ 1061.812560][ T7289] R10: dffffc0000000000 R11: fffff52000daae40 R12: ffffc90006d57300 [ 1061.820566][ T7289] R13: 1ffff92000daae98 R14: dffffc0000000000 R15: 1ffff92000daae5c [ 1061.828570][ T7289] FS: 00007f6c444846c0(0000) GS:ffff888125058000(0000) knlGS:0000000000000000 [ 1061.837523][ T7289] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1061.844127][ T7289] CR2: 0000555555578a38 CR3: 0000000054ed4000 CR4: 00000000003526f0 [ 1061.852124][ T7289] Call Trace: [ 1061.855425][ T7289] [ 1061.858373][ T7289] ? kasan_quarantine_put+0xbb/0x1f0 [ 1061.863720][ T7289] ? kern_path+0xd1/0x150 [ 1061.868083][ T7289] ? __pfx_nfsd4_cancel_copy_by_sb+0x10/0x10 [ 1061.874117][ T7289] ? kern_path+0xd1/0x150 [ 1061.878509][ T7289] nfsd_nl_unlock_filesystem_doit+0x248/0x370 [ 1061.884604][ T7289] ? __pfx_nfsd_nl_unlock_filesystem_doit+0x10/0x10 [ 1061.891213][ T7289] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 1061.897566][ T7289] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 1061.903924][ T7289] genl_family_rcv_msg_doit+0x233/0x340 [ 1061.909496][ T7289] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1061.915594][ T7289] ? bpf_lsm_capable+0x9/0x20 [ 1061.920304][ T7289] ? security_capable+0x7e/0x2c0 [ 1061.925290][ T7289] genl_rcv_msg+0x614/0x7a0 [ 1061.929838][ T7289] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1061.934902][ T7289] ? __pfx_nfsd_nl_unlock_filesystem_doit+0x10/0x10 [ 1061.941517][ T7289] ? __pfx_ref_tracker_free+0x10/0x10 [ 1061.946922][ T7289] netlink_rcv_skb+0x226/0x4a0 [ 1061.951723][ T7289] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1061.956784][ T7289] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1061.962113][ T7289] ? down_read+0x2be/0x330 [ 1061.966584][ T7289] genl_rcv+0x28/0x40 [ 1061.970593][ T7289] netlink_unicast+0x7bb/0x940 [ 1061.975396][ T7289] netlink_sendmsg+0x813/0xb40 [ 1061.980183][ T7289] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1061.985491][ T7289] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1061.990453][ T7289] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1061.995760][ T7289] sock_sendmsg_nosec+0x13a/0x180 [ 1062.000812][ T7289] ____sys_sendmsg+0x54e/0x850 [ 1062.005607][ T7289] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1062.010948][ T7289] ? import_iovec+0x73/0xa0 [ 1062.015484][ T7289] ___sys_sendmsg+0x2a5/0x360 [ 1062.020196][ T7289] ? __lock_acquire+0x683/0x2cf0 [ 1062.025189][ T7289] ? __pfx____sys_sendmsg+0x10/0x10 [ 1062.030424][ T7289] ? futex_wait+0x2a2/0x390 [ 1062.035055][ T7289] ? __fget_files+0x2a/0x420 [ 1062.039713][ T7289] ? __fget_files+0x3a2/0x420 [ 1062.044430][ T7289] __x64_sys_sendmsg+0x1b1/0x290 [ 1062.049415][ T7289] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1062.054931][ T7289] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1062.061030][ T7289] do_syscall_64+0x174/0x580 [ 1062.065649][ T7289] ? trace_irq_disable+0x3b/0x140 [ 1062.070697][ T7289] ? clear_bhb_loop+0x40/0x90 [ 1062.075402][ T7289] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1062.081331][ T7289] RIP: 0033:0x7f6c4359de59 [ 1062.085767][ T7289] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1062.105404][ T7289] RSP: 002b:00007f6c44484028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1062.113847][ T7289] RAX: ffffffffffffffda RBX: 00007f6c43825fa0 RCX: 00007f6c4359de59 [ 1062.121847][ T7289] RDX: 0000000004000080 RSI: 0000200000000100 RDI: 0000000000000004 [ 1062.129841][ T7289] RBP: 00007f6c43633e6f R08: 0000000000000000 R09: 0000000000000000 [ 1062.137836][ T7289] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1062.145827][ T7289] R13: 00007f6c43826038 R14: 00007f6c43825fa0 R15: 00007ffefb08d8f8 [ 1062.153843][ T7289] [ 1062.156905][ T7289] Modules linked in: [ 1062.161575][ T7289] ---[ end trace 0000000000000000 ]--- [ 1062.174443][ T7289] RIP: 0010:nfsd4_cancel_copy_by_sb+0x161/0x840 [ 1062.180780][ T7289] Code: 48 42 80 3c 31 00 74 0f 48 8b 7c 24 10 e8 17 bb 4c ff 48 8b 44 24 10 48 8b 5c 24 18 48 c1 e3 04 48 03 18 48 89 d8 48 c1 e8 03 <42> 80 3c 30 00 74 08 48 89 df e8 f0 ba 4c ff 48 8b 03 48 39 d8 48 [ 1062.204245][ T7289] RSP: 0018:ffffc90006d57280 EFLAGS: 00010246 [ 1062.210393][ T7289] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 1ffff110084fb00d [ 1062.223332][ T7289] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffffc90006d57200 [ 1062.231376][ T7289] RBP: ffffc90006d57370 R08: 0000000000000003 R09: 0000000000000004 [ 1062.241431][ T7289] R10: dffffc0000000000 R11: fffff52000daae40 R12: ffffc90006d57300 [ 1062.250185][ T7289] R13: 1ffff92000daae98 R14: dffffc0000000000 R15: 1ffff92000daae5c [ 1062.258342][ T7289] FS: 00007f6c444846c0(0000) GS:ffff888125058000(0000) knlGS:0000000000000000 [ 1062.267374][ T7289] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1062.274685][ T7289] CR2: 0000555555578a38 CR3: 0000000054ed4000 CR4: 00000000003526f0 [ 1062.282764][ T7289] Kernel panic - not syncing: Fatal exception [ 1062.289032][ T7289] Kernel Offset: disabled [ 1062.293382][ T7289] Rebooting in 86400 seconds..