last executing test programs: 4.857258404s ago: executing program 3 (id=1656): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x5, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xd, 0x0, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$nl_crypto(0x10, 0x3, 0x15) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x100, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}, {0xfff9, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x1}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newtfilter={0x2c, 0x2c, 0xf3f, 0x30bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xb, 0xf}, {}, {0x7, 0x9}}, [@TCA_CHAIN={0x8, 0xb, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20041090}, 0x810) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r7, 0x4}, 0x80, &(0x7f0000000480)=[{&(0x7f0000000600)="1e", 0x1}], 0x1}, 0x4c00c) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r9 = socket(0x400000000010, 0x3, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r12 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="12000000020000000400000002"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r12}, &(0x7f0000000040), &(0x7f0000000140)=r11}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r12}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)=r11}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r12, &(0x7f0000000040)}, 0x20) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@deltfilter={0x34, 0x2d, 0x0, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, r13, {0xc, 0xd}, {0xfff2, 0xffff}, {0x5, 0xa}}, [@TCA_RATE={0x6, 0x5, {0x6}}, @TCA_RATE={0x6, 0x5, {0x80, 0x1b}}]}, 0x34}}, 0x4000000) sendmsg$nl_route_sched(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000021c0)=@newtfilter={0x30, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r13, {0x0, 0xffff}, {}, {0xffff, 0x8}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x800) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) 4.607235084s ago: executing program 0 (id=1662): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0xac, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}]}, 0xac}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)={0xac, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}]}, 0xac}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000640)=0x101, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0xe00, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="280000002e00090027097000000000220400000008000c"], 0x28}, 0x1, 0x0, 0x0, 0x42804}, 0x0) ioctl$BTRFS_IOC_BALANCE(r1, 0x5000940c, 0x0) 3.372468041s ago: executing program 4 (id=1665): r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x9, 0x5}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newtfilter={0x58, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0x9}, {}, {0x1, 0xfff1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0xfffffd6d, 0x2, [@TCA_CGROUP_EMATCHES={0x24, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x14, 0x1, 0x0, 0x0, {{0x3, 0x9, 0x80}, [@TCA_EM_IPT_HOOK={0x8, 0x1, 0x4}]}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}]}]}}]}, 0x58}}, 0x1) r2 = socket(0x15, 0x5, 0x0) getsockopt(r2, 0x200000000114, 0x2720, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 3.325977314s ago: executing program 3 (id=1666): r0 = socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB="48000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r2, @ANYBLOB="0a0001"], 0x48}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x2}}, @func_proto]}}, 0x0, 0x3e}, 0x20) (async) ioctl$XFS_IOC_START_COMMIT(0xffffffffffffffff, 0x80585882, &(0x7f00000000c0)) unshare(0x600) (async) socket(0x1e, 0x805, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xa, 0x6, &(0x7f0000000000)=@raw=[@ldst={0x3, 0x2, 0x3, 0x2, 0x6, 0x0, 0x10}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x79e8}, @btf_id={0x18, 0xb, 0x3, 0x0, 0x3}, @alu={0x4, 0x1, 0x2, 0x4, 0x3, 0x50}], &(0x7f0000000080)='GPL\x00', 0x5, 0xbc, &(0x7f0000000340)=""/188, 0x0, 0xd, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x6}, 0x94) 3.272271475s ago: executing program 0 (id=1667): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002f00)={0x40, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_KEY={0x4}]}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv4_newrule={0x24, 0x20, 0xf4db158ec847dc81, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1f}, [@FRA_GENERIC_POLICY=@FRA_IP_PROTO={0x5, 0x16, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x81}, 0x44004) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x439, 0xffffffff, 0x0, {0x0, 0x0, 0x0, 0x0, 0x9801, 0x1313}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x40008c0) 3.249640092s ago: executing program 2 (id=1669): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1a, 0x80e, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000340)={0x14, r3, 0x70d, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4040}, 0x8000) socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vxcan0\x00'}) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000200)={'ip6gre0\x00', 0x0}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(r4, 0x84, 0xd, &(0x7f0000000100)=@assoc_value={0x0, 0xd1a}, 0x8) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newlink={0x40, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_VFINFO_LIST={0x18, 0x16, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN={0x10, 0x2, {0x7ff, 0xa42, 0x3f}}]}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x14}, 0x0) 3.13552853s ago: executing program 2 (id=1670): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000240)=@nat={'nat\x00', 0x19, 0x0, 0x90, [0x200000000180, 0x0, 0x0, 0x2000000001b0, 0x2000000001e0], 0x0, &(0x7f0000000140), &(0x7f0000000180)=[{0x0, '\x00', 0x0, 0xfffffffffffffffd}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}]}, 0x108) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89fc, &(0x7f0000000c80)={'sit0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000000)={'wg1\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000100)={'tunl0\x00', &(0x7f0000000040)={'tunl0\x00', r3, 0x7800, 0x700, 0x8, 0x6, {{0x1a, 0x4, 0x1, 0x4, 0x68, 0x66, 0x0, 0x40, 0x4, 0x0, @loopback, @local, {[@ssrr={0x89, 0x7, 0xa7, [@initdev={0xac, 0x1e, 0x0, 0x0}]}, @ra={0x94, 0x4, 0x1}, @ra={0x94, 0x4}, @noop, @rr={0x7, 0x7, 0x97, [@remote]}, @timestamp_addr={0x44, 0x3c, 0x21, 0x1, 0x5, [{@local, 0xbb1c}, {@dev={0xac, 0x14, 0x14, 0xb}, 0x80}, {@multicast2, 0xdcbc}, {@loopback, 0x9}, {@remote, 0x1}, {@local, 0xfffffffb}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xd}]}]}}}}}) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001240)=@newtaction={0xe68, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x91ee, 0x9, 0x10000000, 0x1, 0x7}, 0x9, 0x8}, [{0xd6c, 0x9, 0x8, 0xff, 0x10001, 0x9}, {0x7f, 0xffff, 0x6, 0x7ffffffb, 0x1, 0x7}, {0x6, 0xb37b, 0x6, 0xb38, 0x0, 0xd0cb}, {0x4, 0x3, 0x2, 0xa318, 0x80000000, 0x1}, {0x9, 0xfffffff9, 0x2, 0x4, 0x6, 0x4}, {0x8000, 0x3, 0xe, 0x4, 0xcee8000, 0x1}, {0x9, 0x8, 0xfffffffa, 0x6, 0xa0fd, 0x8}, {0xffffffff, 0xe648, 0x7c0c3ffe, 0x8, 0x0, 0x5}, {0x3, 0x3, 0x9, 0xa}, {0x9, 0x6, 0xb6, 0x7fff, 0x5, 0x7}, {0x304, 0x66, 0x3, 0x101, 0x3, 0x9}, {0xff, 0x1, 0xe, 0x800, 0x3, 0x56}, {0xca, 0x4, 0x9, 0xfffffff8, 0x7, 0x7921bcf1}, {0x1, 0xff, 0x5, 0x80000000, 0xaae6, 0x9}, {0x4, 0x3, 0xa9, 0x8, 0x9, 0x4}, {0x5, 0x1000, 0x200, 0x2, 0x8, 0x6}, {0x3d648283, 0x2, 0x5, 0x9, 0x10000, 0x6}, {0x3, 0xa06, 0x1, 0x1, 0x409, 0x260ba674}, {0x6, 0xc5, 0x8d3, 0x9, 0x3, 0xffffffbc}, {0x3, 0x8, 0x3, 0x5, 0x0, 0xc80}, {0x3, 0xffffffff, 0xffff, 0x2, 0x9}, {0xfffffffa, 0x6, 0x77c, 0x160c, 0x3}, {0x1ff, 0x8, 0x0, 0x6, 0xb, 0x400}, {0x3ff, 0x9, 0xffff8001, 0x100, 0x3, 0x47}, {0x529, 0x4, 0x7, 0xffff, 0xc0a, 0xbad}, {0x8, 0x7, 0x884, 0x100, 0x9}, {0x8, 0x6, 0x6, 0xc, 0x3}, {0x4, 0x40, 0xcd6c, 0x71f, 0x8000, 0x6}, {0x5, 0x30a3, 0xa, 0x200, 0xfff, 0x9}, {0x3, 0x1, 0x5, 0x8, 0x2, 0x81}, {0x81, 0x0, 0x0, 0x49f11005, 0x9, 0x7fffffff}, {0x9, 0x0, 0x5c, 0x3bad, 0x8, 0x480}, {0xe, 0x58000000, 0x9, 0x3, 0x1ff, 0xaa2}, {0x800, 0xd1, 0x0, 0x3e, 0x0, 0x5}, {0x8, 0x0, 0x200, 0xfffffc00, 0x100, 0x10001}, {0x6, 0x7, 0x0, 0x101, 0x6, 0x81}, {0x8, 0x2, 0x200, 0x3, 0x4, 0x101}, {0xad, 0xa, 0x401, 0x0, 0x9, 0xff000000}, {0x8, 0x5, 0xd, 0x24, 0xc, 0x1}, {0xfffffff8, 0x9, 0x1000, 0xc, 0xea, 0x4}, {0x3, 0x0, 0x8, 0x1, 0x1, 0xffffff32}, {0x6, 0x5, 0xd7c9, 0x0, 0x5, 0x2}, {0xffff, 0x1, 0x5, 0x2, 0x7, 0x7}, {0x5, 0x2, 0x0, 0x401, 0x6, 0x1}, {0x3, 0x2, 0x4, 0x6, 0xfffffff8, 0x5}, {0x6, 0x0, 0x3, 0x5, 0x0, 0xffff8000}, {0x1, 0x0, 0x0, 0x9, 0x0, 0x4}, {0x2, 0x6, 0x2, 0x7, 0x9}, {0x0, 0xfffffffd, 0x756183d, 0xfffff801, 0x5, 0x8}, {0x7, 0xa, 0xfffffffc, 0x80000001, 0x407b, 0x2}, {0x7, 0x9, 0xee, 0x800, 0x1000}, {0x10, 0x5, 0x57a2a808, 0x80000000, 0x7fff, 0x5}, {0x729, 0x25, 0x6, 0x6, 0x8, 0x4}, {0x2, 0x406, 0xc209, 0x8, 0x0, 0xfffffffc}, {0x1, 0x7, 0x8, 0xfffffffb, 0x80000000, 0x4}, {0x1, 0x5, 0x8, 0x8000, 0x1, 0x7f}, {0x8001, 0xf42, 0x1, 0x3, 0x5, 0x430}, {0x2, 0xfffffff4, 0x5, 0xf, 0xc8, 0x7}, {0x6, 0x7, 0x9, 0x8, 0x5, 0x5}, {0x5, 0x8000000, 0x7, 0x5, 0x401, 0x9}, {0x1, 0x6, 0x1ff, 0xa8de, 0x0, 0x807b}, {0x0, 0x80000000, 0x7fff, 0x5, 0x2, 0x7}, {0xe, 0xfffffffc, 0x7fffffff, 0x7, 0x5, 0x1ff}, {0x81, 0xaa, 0x1e, 0x9, 0x14fc, 0x8}, {0x9, 0xffffffff, 0x40, 0x6, 0x13b, 0xeacd}, {0x100020, 0xff, 0x6, 0x81, 0x0, 0x6}, {0x2, 0xe, 0xb, 0x0, 0x6, 0x2}, {0x8, 0x3, 0x5, 0x4, 0x4, 0x2}, {0x84, 0x3ff, 0x3d0c, 0x1, 0x8, 0x2}, {0x4, 0x4, 0xb85c, 0x1, 0x7, 0x6}, {0x3, 0xc6, 0x0, 0x1, 0x2, 0x3}, {0x7, 0x2, 0x8000, 0x2, 0x7fffffff, 0x79}, {0x6, 0x80000000, 0xfffffffe, 0x7, 0x3, 0x8}, {0xae, 0x3, 0x600, 0x9, 0xff, 0x3}, {0x1, 0xed5, 0x6de6, 0x10, 0x380000, 0x789}, {0x4, 0x7074, 0x32b, 0x3, 0xf}, {0x1ff, 0x7, 0x1, 0x96, 0x1, 0xc}, {0x9, 0x3, 0x0, 0xfff, 0x1ff, 0x8}, {0x1, 0x7d, 0x8, 0x7, 0x2, 0x3}, {0xfffff001, 0x9, 0x65d, 0x3c10, 0x7, 0x53}, {0x7, 0x0, 0x7, 0x101, 0x9, 0x81}, {0x7, 0x9, 0xd, 0x6, 0xfffffff7, 0x827}, {0x113, 0xfffffffe, 0x2, 0x400, 0x28, 0x81}, {0xfff, 0x6, 0x7, 0x40, 0x6, 0x10}, {0xc, 0x9, 0x8001, 0x0, 0x9, 0x6}, {0x5, 0x11b9, 0x401, 0x4, 0x2, 0x6}, {0x9, 0x100, 0x400, 0x9497, 0x101, 0x84b7}, {0xb4, 0xb85, 0x7, 0x3, 0x51, 0x5}, {0x3f4d, 0x4, 0x5, 0xf, 0xf, 0x1283}, {0xfffffff8, 0x1c0000, 0x2, 0x10001, 0x1, 0x6}, {0x61, 0x80, 0xffffffff, 0x10000, 0x5, 0x8}, {0x8, 0x6, 0xc53, 0x80000000, 0x7, 0x5}, {0x0, 0x6, 0x5, 0x2, 0xdc, 0x6}, {0x0, 0xfffffffc, 0x101, 0x6cb685f2, 0x7, 0x1}, {0x0, 0xc3, 0x4, 0x5, 0x0, 0x9}, {0x8, 0xf7b5, 0x5, 0x5, 0x9, 0x7}, {0x1, 0x67f, 0x5689f935, 0x8, 0x6db, 0xff}, {0x1, 0x400, 0x3, 0x1e1, 0xa, 0x80000000}, {0xea, 0x5, 0x8, 0x5, 0x7fff, 0x1000}, {0x6, 0x5, 0x7, 0x3, 0x6, 0x80000000}, {0x9, 0x6, 0x7, 0x1, 0x9, 0x100}, {0x7202, 0x4, 0x5024, 0xf9, 0x6, 0x40}, {0x5, 0x10, 0x4, 0x5, 0xd, 0x8}, {0x1537, 0x101, 0x6, 0x1, 0x3, 0x6b}, {0x69, 0x400, 0x3, 0x81, 0xc6, 0x7fff}, {0x10001, 0x1, 0x3, 0x7fffffff, 0x7, 0x10001}, {0xcdc, 0x1, 0x7, 0x0, 0x8}, {0x1, 0x168dccf, 0x3, 0x3, 0x7fff, 0x6}, {0x3, 0x4, 0x7fff, 0x7, 0xaf68, 0x403}, {0x9, 0x0, 0x7, 0x6, 0x6, 0x80000001}, {0x5, 0x200, 0x800, 0xd00000, 0x3, 0x8}, {0x8001, 0x5d, 0xffffffff, 0x42e, 0x8, 0x55}, {0x1970, 0x89, 0x6d, 0x460ebb44, 0x2, 0x2}, {0x951, 0x9, 0x3, 0x8, 0x1, 0x2}, {0x3, 0x8, 0x627b, 0x5, 0x6, 0x5}, {0x6, 0x3, 0x9fbc, 0x4, 0x1, 0x2}, {0x401, 0x6, 0x32d84255, 0xfa, 0x27f, 0x8000}, {0x0, 0x6, 0x3, 0xc, 0x8000, 0x40}, {0x5, 0x4, 0x1, 0x3, 0x0, 0x5}, {0x7f, 0x4, 0x7f, 0x10001, 0xff, 0x8}, {0x7, 0x96a3, 0x2, 0xd7, 0x6, 0x200}, {0x1, 0x5, 0x5, 0x37a3, 0x7, 0x8}, {0x81, 0x6, 0xd, 0xffffffff, 0x200, 0x4}, {0x4, 0x3ff, 0x7, 0x4, 0x4, 0x4}, {0x1, 0xffffffa4, 0x9, 0x2, 0x3}, {0xd, 0x0, 0x3ff, 0x9, 0x8, 0x48}, {0x2, 0x10001, 0x9, 0x2, 0x8, 0x9}, {0xf, 0x1, 0x8, 0x101, 0xfffffffd, 0xc88}], [{}, {0x5}, {0x0, 0x1}, {0x1}, {0x4}, {0x2, 0x1}, {0x3}, {}, {0x5}, {0x3}, {0x2}, {0x3, 0x1}, {0x3, 0x1}, {0x2}, {0x8cd778652b20be70, 0x1}, {0x1, 0x1}, {0x1}, {0x2}, {0x4}, {0x1, 0x1}, {0x5, 0x3}, {0x2, 0x1}, {0x2}, {0x0, 0x1}, {}, {0x4, 0x1}, {0x6}, {0x4}, {0x4, 0x1}, {0x4}, {0xa4f33433e7b7e23d, 0x1}, {0x4}, {0x0, 0x1}, {0x6}, {0x2, 0xa5b0c5c50171756a}, {0x3}, {}, {0x4}, {0x4, 0x1}, {0x3}, {0x5, 0x1}, {0x2, 0x1}, {0x4}, {0x4}, {0x5, 0x1}, {0x1}, {0x2}, {0x3, 0x1}, {0x4}, {0x5}, {0x1, 0x1}, {0x5}, {0x2}, {0x1, 0x1}, {0x6}, {0x1}, {0x5, 0x1}, {0x5}, {0x2}, {}, {0x0, 0x1}, {0x3}, {0x5}, {0x5, 0x1}, {0x5}, {0x4, 0x1}, {0x2, 0x1}, {0x1}, {0x0, 0x1}, {0x2}, {0x5}, {0x2}, {0x5}, {0x0, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x1}, {0x5}, {0x4}, {0x5, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {}, {0x3, 0x1}, {0x1}, {0x1}, {0x3}, {0x3, 0x1}, {0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x3}, {0x5, 0x1}, {}, {0x3, 0x1}, {0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x3}, {0x1}, {0x1, 0x1}, {0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x3}, {0x3, 0x1}, {0x3}, {0x4}, {0x0, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x5}, {0x3, 0x1}, {0x2}, {0x4, 0x1}], 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) 3.134549276s ago: executing program 4 (id=1671): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket(0x2b, 0x1, 0x0) listen(r1, 0x0) ppoll(&(0x7f0000000280)=[{r1, 0xa0}], 0x1, &(0x7f0000000340)={0x0, 0x989680}, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1cff7f000000000000000000000000010001000000"], 0x1c}}, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x50, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6, 0x0}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}]}, 0x50}}, 0x0) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848360000005e140602000000000e000a00100000000a8000001294", 0x2e}], 0x1}, 0x4000) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000100)={0x0, 'netdevsim0\x00', {0x2}, 0x20}) r5 = socket$kcm(0x29, 0x5, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) r7 = accept4(r6, 0x0, 0x0, 0x800) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) recvmsg$kcm(r5, &(0x7f00000003c0)={&(0x7f0000000000)=@phonet, 0x80, &(0x7f0000000280)=[{&(0x7f0000000140)=""/192, 0xc0}, {&(0x7f0000000200)=""/127, 0x7f}], 0x2, &(0x7f00000002c0)=""/240, 0xf0}, 0x21) 3.114679839s ago: executing program 1 (id=1672): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x9, 0x6, 0x3, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CIDR={0x5, 0x3, 0x3}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x2}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x6}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x28, 0x2, 0x8, 0x5, 0x0, 0x0, {0x3, 0x0, 0x4}, [@CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xc}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xce}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x20008000) r1 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_PROMISC(r1, 0x6b, 0x2, &(0x7f0000000200)=0x1, 0x4) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80040}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x98, 0x1, 0x1, 0x201, 0x0, 0x0, {0x0, 0x0, 0x3}, [@CTA_LABELS_MASK={0xc, 0x17, [0x3, 0x4]}, @CTA_HELP={0x10, 0x5, 0x0, 0x1, {0xa, 0x1, 'Q.931\x00'}}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x3}, @CTA_FILTER={0x2c, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x200}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x8}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x4}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0xc}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x200}]}, @CTA_SEQ_ADJ_ORIG={0x2c, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x4}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x9}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x5fa}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x7}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x2}]}, @CTA_ZONE={0x6}]}, 0x98}}, 0x4005005) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000003c0), 0xffffffffffffffff) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r2, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x20000850) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000540)=0x289b35d1, 0x4) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x54, 0x2, 0x3, 0x801, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}, @NFQA_CFG_CMD={0x8, 0x1, {0x2, 0x0, 0x2}}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x8}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x14}, @NFQA_CFG_CMD={0x8, 0x1, {0x0, 0x0, 0xb}}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x20}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x3}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x28}]}, 0x54}, 0x1, 0x0, 0x0, 0x44004}, 0x84) ioctl$XFS_IOC_FD_TO_HANDLE(r0, 0xc038586a, &(0x7f00000007c0)={r1, &(0x7f00000006c0)='{*g\\]::,\x00', 0xbc0, &(0x7f0000000700)={@_ha_fsid={[0x4]}, {0x1c77, 0x83bc, 0x8, 0x4}}, 0xffff5804, &(0x7f0000000740), &(0x7f0000000780)=0xfffffc61}) ioctl$SIOCPNDELRESOURCE(r3, 0x89ef, &(0x7f0000000800)=0x7) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000840)={'wlan1\x00', 0x10}) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000880), 0x3) r4 = socket$rxrpc(0x21, 0x2, 0x2) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r4, 0x8982, &(0x7f00000008c0)={0x8, 'virt_wifi0\x00', {'syzkaller1\x00'}}) ioctl$TUNSETLINK(r3, 0x400454cd, 0x301) setsockopt$inet6_MCAST_MSFILTER(r3, 0x29, 0x30, &(0x7f0000000900)={0xb, {{0xa, 0x4e23, 0xffffffff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x7}}, 0x0, 0x1, [{{0xa, 0x4e20, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x9}}]}, 0x110) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000a40)=0xffffffffffffffff, 0x4) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r1, 0x4058587a, &(0x7f0000000c80)={{r5, &(0x7f0000000a80)='Q.931\x00', 0x40000, &(0x7f0000000ac0)={@_ha_fsid={[0x1, 0x40]}, {0xd86, 0x8, 0x9, 0x7}}, 0x30c, &(0x7f0000000b00), &(0x7f0000000b40)=0xe32f}, {[0x9, 0x1, 0x0, 0xfffffffe]}, 0x100, 0xe1, &(0x7f0000000b80)=""/225}) r7 = socket(0x98e747d0397549e7, 0xa, 0xc4e2) r8 = epoll_create1(0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r8, 0x8040942d, &(0x7f0000000d00)) r9 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_mreqsrc(r9, 0x0, 0x28, &(0x7f0000000d40)={@dev, @dev, @initdev}, &(0x7f0000000d80)=0xc) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), r7) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000e40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_NOACK_MAP(r3, &(0x7f0000000f40)={&(0x7f0000000dc0), 0xc, &(0x7f0000000f00)={&(0x7f0000000e80)={0x48, r10, 0x1, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r11}, @val={0xc, 0x99, {0x7, 0x40}}}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x43d}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x3}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x2}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0xfff}]}, 0x48}, 0x1, 0x0, 0x0, 0x4004}, 0x4000) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r6, 0x84, 0x1e, &(0x7f0000000f80)=0xfffeffff, 0x4) 3.076415229s ago: executing program 0 (id=1673): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=@ipv4_newnexthop={0x24, 0x68, 0x109, 0x0, 0x0, {}, [@NHA_FDB={0x4}, @NHA_OIF={0x8, 0x10}]}, 0x24}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=@ipv4_newnexthop={0x24, 0x68, 0x109, 0x0, 0x0, {}, [@NHA_FDB={0x4}, @NHA_OIF={0x8, 0x10}]}, 0x24}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca}, 0x48) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca}, 0x48) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [0x0, 0x0, 0x2], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8004, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) (async) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [0x0, 0x0, 0x2], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8004, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) socket(0x400000000010, 0x3, 0x0) (async) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xa}, {0xffe0, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40001}, 0x0) socket$netlink(0x10, 0x3, 0x15) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0x46, 0x0, &(0x7f00000002c0)="b90103616908068c3c270040e700009e0dc5cf1d66fff2fcffff8100632f0806", 0x0, 0x8104, 0x6000000000000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.016015961s ago: executing program 3 (id=1674): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x8a}, [@ldst={0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd96, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) listen(r1, 0x0) recvmsg(r1, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x10000) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_MATCH_NAME={0x8, 0x1, 'udp\x00'}, @NFTA_MATCH_INFO={0xe, 0x3, "7acc6338a90000b03bd9"}, @NFTA_MATCH_REV={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_COMPAT={0x14, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV4={0x6, 0x1, 0x1, 0x0, 0x88}, @NFTA_RULE_COMPAT_FLAGS={0x8}]}]}], {0x14}}, 0xa0}}, 0x0) 3.015671982s ago: executing program 2 (id=1675): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, 0x0, 0x4c) (async) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$SIOCGETSGCNT(r0, 0x89e1, &(0x7f0000000140)={@broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}}) (async) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@updpolicy={0x23c, 0x19, 0x1, 0x0, 0x0, {{@in=@private, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0x100000000, 0xca8, 0x0, 0x9}}, [@tmpl={0x184, 0x5, [{{@in=@local, 0x4d5, 0x3c}, 0x0, @in=@multicast1}, {{@in6=@remote, 0x0, 0x3c}, 0x0, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x800, 0x8000, 0x1}, {{@in=@remote, 0x0, 0x6c}, 0x0, @in=@local}, {{@in6=@local, 0x0, 0x33}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x3, 0x0, 0x0, 0x81}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xfffffffe, 0x6c}, 0x0, @in=@multicast1, 0x0, 0x0, 0x0, 0x3}, {{@in6=@mcast1, 0x0, 0x6d}, 0xa, @in6=@private1, 0x0, 0x4, 0x0, 0x2, 0x7}]}]}, 0x23c}}, 0x0) (async, rerun: 64) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) (rerun: 64) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x3}, 0x8) (async) sendto$inet6(r2, &(0x7f00000002c0)="882e", 0x2, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0xa}, 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r2, 0x84, 0x1c, &(0x7f0000000000), &(0x7f0000000040)=0x4) (async, rerun: 64) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f0000000080)={0x0, 0x5, 0x2}, 0x8) (rerun: 64) 2.948867217s ago: executing program 3 (id=1676): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000026c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x13}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x6}]}}}]}]}], {0x14}}, 0x78}, 0x1, 0x0, 0x0, 0x40000}, 0x8044) getsockopt$inet6_tcp_int(r0, 0x6, 0x2, 0x0, &(0x7f0000000340)) 2.879200415s ago: executing program 1 (id=1677): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0x80, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0x4, 0xe}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_LIMIT={0x8}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0xc04c001}, 0x20000804) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000300)={0x1, 0x58, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'pimreg0\x00', 0x0}) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x3, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r7, r6, 0x25, 0x0, @void}, 0x10) sendmmsg$inet(r0, &(0x7f0000001e40)=[{{&(0x7f0000000000)={0x2, 0x4e21, @private=0xa010100}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000040)="4257ceeabe5c0bec1cc5831be0f84889f6ad3eff1cd52259779f22cba52fcd720d913176e166981c7be107ed92eeedbbef26f6fdc4b1e430", 0x38}, {&(0x7f0000000080)="30da29eafc", 0x5}, {&(0x7f0000000140)="d578e12815aa36e5d39ccd4fe1f91be369e09a55d44bdf897bede87a6b86962fc2ad72db27b6223239a27e12924739bcf015f75756559aaa63518fc67adb80f8f00a453bec332cde13a9ef762167c06f96773672c9b6a177144882994d199b042cbe8d166a48289182ca019f91b923af8459929c15274e187a3d0f67fa39fe296360c3ce860ffa8b7b4eb98d078386563ee886f15d680f708c30a38e0e9ac18864b912c808bdc91bf9117c11088e42c84077565224c4137d6b", 0xb9}, {&(0x7f0000000200)="aa2e505ae2a18d7e1ac5f1e2351461fdb211198720e92d6bef8cd51d7030e642e94e20b3190cf21c3eaec4f8dbdfc8df6f930482e700e1c6d058c345", 0x3c}], 0x4, &(0x7f0000000340)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @local, @multicast2}}}, @ip_ttl={{0x14, 0x0, 0x2, 0xfff}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x1}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xe}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xf9}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x3}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x9}}, @ip_retopts={{0x1c, 0x0, 0x7, {[@ra={0x94, 0x4}, @timestamp={0x44, 0x8, 0xd1, 0x0, 0x9, [0x6]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x1a}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x2f}}}}], 0x108}}, {{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000480)="7dc753df10a7c73e4ed4df6c80890913d12111336a9797e5442ec012948332d832cf75d5971dd4a2f271dfce3fa170666d13270400", 0x35}, {&(0x7f00000004c0)="38083a88ed236125735a176f5fc028cd81e62d4d2c42e3fa0db21173e0474dc7beafd6e3b6ea10c22dde52c22ceb2d8329dc905d8c", 0x35}, {&(0x7f0000000740)="4807457eecb4ed3f2c2b0885f83f8375577b672c48f6be75abd18eb2186d7361fb098f098e6e7e075e53806754dbf02139153520b34214e5ad1266fdfdb0ff45d0e5a7dc63da8f587e0fae63161172e92466da0648dedea5a548724b56066e15e4038d501638e2c045b6da93c9b26169c61608b51ce1e57bc6d6261685edde30f3f5e5988e640da1fde72282b22f8a4bd2197b0e547d034c5d732a3282c25c5c8e67f8e48708ae7a6e90b7cedbd1490c41125b8871b34c65c669bf742cddece866bec4a0ec4941f20371d2901ec0f710513c93aab94a4ece118a0bc31aa77a2dafe3bf2e266d2cdba6e4bbdc5e098f6eec512f83a837288f7ed1", 0xfa}], 0x3}}, {{&(0x7f0000000880)={0x2, 0x4e23, @loopback}, 0x10, &(0x7f0000000940)=[{&(0x7f00000008c0)="271d33daa2db2c000c2a823063ae6bcfe4c245a0e6cc6faaddc4fa3d420f0913784205b0f20b7da961cbe80db58e90cfb4e8b30d2b2dcedd1b544462ec47c4bd79bcb7369127b0ecc33e0db6d49c904a0d3003b7ea169a", 0x57}], 0x1, &(0x7f0000000980)=[@ip_ttl={{0x14, 0x0, 0x2, 0x5bd}}], 0x18}}, {{&(0x7f00000009c0)={0x2, 0x4e20, @rand_addr=0x7}, 0x10, &(0x7f0000001cc0)=[{&(0x7f0000000a00)="010ed48e7f53c5d0077b22bd677548f4da51f8847eb6ffe3a27ad419", 0x1c}, {&(0x7f0000000a40)="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", 0x1000}, {&(0x7f0000001a40)="830682a406e407d4240e91e233fd294e8a3b3ab0966c9146786d99e3639d10cecab99135631b1abd286afa6f8f64cb4c32fddc4dab81", 0x36}, {&(0x7f0000001a80)="1c9782b01f07239689dace5fdf2b9b0b8e99fe80c6bfc23331be7e8c8fd52af578e3f8eee4431cef9add208889bfa7b9e407b2bef4777bb08f9cecd31eabd885a59ceaee0805cce682c1ff58909aa979731bde1d167e9df367668d9e927e9994cd84f4253d0a054771e6b4b93a1c1a3e77bb927e2cb3f3db8261bb3f5a185bc57ad4250c3d5d56a79d13015c1a60df372383ca3a749bcacfbe52f3d86b8e771a2a4ff5a8be8fa03db51154eea1b02cec2d564e2caa19f2dac74638261c92a24af7ccece42ec74a968ac6894a5f4761f8e503c46c500b0074a11086eb791a8e3b87d8c876", 0xe4}, {&(0x7f0000001b80)="ca849cf77e720a037480a7942b07457ab4ee284e75af0dc801", 0x19}, {&(0x7f0000001bc0)="3ac4340037095226712b2a2273ad81830f3adf1800ef50267d5ffcb229d73d2c68f72889d0c1e56721e64467ae9338337a1a4a736a448cfb2d6b0966746e5dda6f248d7eac43eee5fcf2b15851686026c4da176f55b7fe28b7c0117cb2a955774c3d8af8654d037255c9c517a50e8fbd2f36a3409bc384efeebc84dafe3b934b73328c5b4bb5865c9d307cf1b0bd8a3a0b3b78bab77ea4029ed1a248a9c316c26f81ba45b677d13e527d73222818a74f52038aa0e039f9157cd42f0848b83418fe28bacd1cce0d0dfcfd4812d964b4ee4fa4b40f85", 0xd5}], 0x6, &(0x7f0000001d40)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x11}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x3}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x1}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x7}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x400}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x3}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @dev={0xac, 0x14, 0x14, 0x3f}, @multicast2}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x4}}], 0xc8}}], 0x4, 0x0) 2.828159319s ago: executing program 2 (id=1678): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0xfca804a0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001280)={0x28, 0x0, 0x8, 0x5, 0x0, 0x0, {}, [@CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @fccp}, @CTA_TIMEOUT_L4PROTO={0x5}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x2}]}, 0x28}}, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={0x0, 0x0, 0x26, 0x0, 0x0, 0xfffffffe}, 0x28) (async) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)=@generic={0x0}, 0x18) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7}, 0x48) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={@fallback=0xffffffffffffffff, 0x1e, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0]}, 0x40) (async) socket$kcm(0x11, 0x200000000000002, 0x300) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r1, 0x18000000000002a0, 0xe80, 0x0, &(0x7f0000001280)="b9354b27b553aeeee8ae0b0000a4df2a9080f3", 0x0, 0x603, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x4d) (async) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) (async) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000000, 0x40010, 0xffffffffffffffff, 0xf0986000) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x4361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) (async) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x0, 0xd}, {0x6, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_ACK_FILTER={0x8, 0x10, 0x2}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) (async, rerun: 32) r5 = socket$packet(0x11, 0x3, 0x300) (rerun: 32) sendto$packet(r5, &(0x7f0000000240)="800000800000210ee7decd7a000340008100", 0x36, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r4, 0x1, 0xd8, 0x6, @broadcast}, 0x14) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)={0x1b, 0x0, 0x0, 0x7, 0x0, r2, 0x5, '\x00', r4, 0xffffffffffffffff, 0x5, 0x0, 0x4}, 0x50) bpf$OBJ_GET_MAP(0x7, &(0x7f00000011c0)=@generic={&(0x7f0000000480)='./file0\x00', 0x0, 0x8}, 0x18) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) 2.266909306s ago: executing program 4 (id=1679): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000980)=@base={0x1, 0x4, 0x4, 0x7, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0, 0x2, 0x1}, 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000000)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x5, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x97, &(0x7f0000000180)=[{}, {}], 0x10, 0x10, &(0x7f00000001c0), &(0x7f0000000200), 0x8, 0xbc, 0x8, 0x8, &(0x7f0000000240)}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000400)=r1, 0x4) 2.20111681s ago: executing program 3 (id=1680): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) r2 = socket$rds(0x15, 0x5, 0x0) recvmmsg(r2, &(0x7f0000006c80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x10001, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newsa={0x104, 0x10, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x0, 0x0, 0x2}, {0x0, 0x200000, 0x7}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x104}}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000240)={'batadv_slave_0\x00', 0x0}) (async) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000280)={{{@in=@empty, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@private0}}, &(0x7f0000000400)=0xe8) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000004c0)={'ip_vti0\x00', &(0x7f0000000440)={'ip_vti0\x00', 0x0, 0x80, 0x1, 0x7fff, 0xffffffff, {{0x14, 0x4, 0x2, 0x3, 0x50, 0x65, 0x0, 0x7, 0x29, 0x0, @multicast2, @loopback, {[@ssrr={0x89, 0xb, 0xc7, [@dev={0xac, 0x14, 0x14, 0x2c}, @dev={0xac, 0x14, 0x14, 0x2c}]}, @generic={0x86, 0x10, "a5cdfa485b657da9c8b72cfcfab0"}, @generic={0x44, 0x12, "f3b4d0f2da18f6542186b59fe60682a3"}, @timestamp_addr={0x44, 0xc, 0x13, 0x1, 0x9, [{@local, 0x1}]}, @noop]}}}}}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000500)={@loopback, @loopback, 0x0}, &(0x7f0000000540)=0xc) sendmsg$nl_xfrm(r3, &(0x7f0000000740)={&(0x7f0000000200), 0xc, &(0x7f0000000700)={&(0x7f0000000580)=@updsa={0x178, 0x1a, 0x8, 0x70bd2a, 0x25dfdbfe, {{@in6=@ipv4={'\x00', '\xff\xff', @local}, @in6=@dev={0xfe, 0x80, '\x00', 0x13}, 0x4e22, 0x8001, 0x4e23, 0x2f5, 0xa, 0x80, 0x758261f8841b4fee, 0x6c, r4, r5}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4d5, 0x33}, @in6=@local, {0x7fff, 0x8, 0x0, 0x4, 0xa, 0x7, 0x8, 0x34}, {0x2, 0x5, 0x7, 0xfffffffffffff800}, {0x401, 0xffff8001, 0xfffffffa}, 0x70bd26, 0x3500, 0x2, 0x1, 0x6, 0x98}, [@lifetime_val={0x24, 0x9, {0x1800000, 0x7fffffffffffffff, 0x4, 0x2}}, @tfcpad={0x8, 0x16, 0xfffffffe}, @XFRMA_SET_MARK={0x8, 0x1d, 0x7}, @offload={0xc, 0x1c, {r6, 0x1}}, @offload={0xc, 0x1c, {r7, 0x1}}, @XFRMA_IF_ID={0x8, 0x1f, 0x1}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x1ff}, @replay_esn_val={0x24, 0x17, {0x2, 0x70bd25, 0x70bd25, 0x70bd28, 0x70bd2a, 0x2, [0xff, 0x5]}}, @XFRMA_SET_MARK={0x8, 0x1d, 0x9}]}, 0x178}, 0x1, 0x0, 0x0, 0x30040090}, 0x20000800) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB="040100001a"], 0x104}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd30, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0x6}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x2, 0x4}}}]}, 0x3c}}, 0x4000010) 2.144313527s ago: executing program 4 (id=1681): ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f00000000c0)=@xdp={0x2c, 0xa, r0, 0x25}, 0x4f, 0x0}, 0x8000) r1 = socket$netlink(0x10, 0x3, 0x15) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x0, @dev, 0x0, 0x0, 'dh\x00', 0xa}, 0x2c) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="04010000100053"], 0x104}}, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7ffe}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000d00)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r3, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x10000, 0x774f, 0x8, 0x1, 0x3}, 0x6c}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x884}, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000640)=@security={'security\x00', 0xe, 0x4, 0x4e0, 0xffffffff, 0x108, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x410, 0x410, 0x410, 0xffffffff, 0x4, &(0x7f0000000140), {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x16}, @private0, [0xffffff00, 0x0, 0xffffff00, 0xff], [0xffffffff, 0xffffff00, 0xff000000, 0xff000000], 'ipvlan0\x00', 'batadv_slave_1\x00', {}, {}, 0x3b, 0xc, 0x5}, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@loopback, [0x0, 0xff000000, 0xffffffff, 0xffffff00], 0x4e22, 0x4e20, 0x4e22, 0x4e21, 0x3, 0xa1, 0x9, 0x9, 0x1}}}, {{@ipv6={@mcast2, @empty, [0xff000000, 0x0, 0xffffffff, 0xffffff00], [0xff000000, 0x0, 0xffffffff, 0xffffff00], 'geneve1\x00', 'veth1_vlan\x00', {}, {0x7f}, 0x67, 0xa4, 0x5, 0x60}, 0x0, 0x168, 0x1b0, 0x0, {}, [@common=@srh1={{0x90}, {0x62, 0x1, 0x0, 0x9, 0x5, @private1, @rand_addr=' \x01\x00', @private2={0xfc, 0x2, '\x00', 0x1}, [0xff000000, 0xff, 0xffffff00, 0xffffff00], [], [0xff000000, 0xff000000, 0x101ffffff, 0xff000000], 0x1009, 0x80}}, @common=@ah={{0x30}, {[0x4d6, 0x4d3], 0x100, 0x4, 0x3}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@empty, 'bond_slave_0\x00', {0x7}}}}, {{@uncond, 0x0, 0x118, 0x158, 0x0, {}, [@common=@dst={{0x48}, {0x3, 0x5, 0x0, [0x6, 0x6, 0x5039, 0x3, 0x1, 0xb, 0x4, 0x40, 0x200, 0x401, 0x400, 0x0, 0xd, 0x8, 0x1, 0x4], 0x8}}, @common=@mh={{0x28}, {"ae54"}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x9, 0x9, "8dd16f028c2c231fd76894dbbcfe89fb41e1e3d0afdc688eb7d752bec4cb"}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x540) 1.98689183s ago: executing program 1 (id=1682): syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0008004700003000000000000690780a0101020a01010207070441b613a30000004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c0005bce6c6dd73805bc6071dfc3055000090780000"], 0x0) 1.930950982s ago: executing program 1 (id=1683): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xe, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="18000000000000000000000000000079000000000094ffffffff7652844c7b07"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1e}, 0x90) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@newqdisc={0x44, 0x24, 0xe0b, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0xffe0, 0xd064db0e491fa98f}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_INGRESS={0x8, 0xf, 0x1}, @TCA_CAKE_MEMORY={0x8, 0xa, 0x842}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x4000080) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) sendto$inet6(r0, &(0x7f0000000800)="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", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0) 564.146343ms ago: executing program 2 (id=1684): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x3c}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000000010000004000018007000600666f00000800080000000000060001000200000008000500000000000c0007000000000000000000080009000000000008000b"], 0x54}}, 0x0) bind$802154_dgram(r0, &(0x7f0000001540)={0x24, @none={0x0, 0x3}}, 0x14) 504.052494ms ago: executing program 0 (id=1685): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003"], 0xfc}}, 0x0) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newtaction={0x6c, 0x30, 0x48b, 0x0, 0x0, {}, [{0x58, 0x1, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{}, @multicast2, @remote}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x800) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="14010000200001010000000000000000010100800c00"], 0x114}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000dc0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x45}, 0x48) 469.822901ms ago: executing program 1 (id=1686): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) splice(r2, 0x0, r3, 0x0, 0xfffffffffffffff1, 0x8) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r1, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r0, 0x8983, &(0x7f0000000200)={0x1, 'bridge_slave_0\x00', {}, 0x11e6}) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f0000000000)=0x0) bind$nfc_llcp(r4, &(0x7f0000001040)={0x27, r6, 0xffffffffffffffff, 0x5, 0x2, 0x0, "d32984bd1ca44c066af5160e961701a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000001200000000001900", 0x3c}, 0x60) r7 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) bind$nfc_llcp(r7, &(0x7f00000000c0)={0x27, r6, 0x1, 0x4, 0x0, 0xff, "bac5115c7dad488702b535116fad55baf63cdd52fc30106310abb622a1c3c01c13c04df6b906288e64e96754059e65c39c5759b069d6e6d9589e5f2348878c", 0x24}, 0x60) bind$nfc_llcp(r0, &(0x7f0000000180)={0x27, r6, 0x0, 0x3, 0x9, 0x0, "f67ac86f0c5ab61f0d0c26984b75814c7a187fd271cf2407032fdae4a3fdc5c4e251450db05cdc6f17daeb003611528178795af3c98a48a399629ed3e0ff30", 0x1d}, 0x60) syz_emit_ethernet(0x168, &(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x0) 416.560632ms ago: executing program 3 (id=1687): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x6, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) r3 = socket(0x200000000000011, 0x2, 0x0) bind$packet(r3, &(0x7f0000000080)={0x11, 0xf5, 0x0, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3b}}, 0x14) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r5 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r4, &(0x7f00000000c0)={@val={0x8, 0xf5}, @val={0x7, 0x3, 0x3, 0x2, 0x14}, @ipv4=@tcp={{0x5, 0x4, 0x0, 0x4, 0x28, 0x0, 0x0, 0x9, 0x2f, 0x0, @local, @broadcast}, {{0x4e20, 0x88a8, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x20, 0x5}}}}, 0x36) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB="48000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r2, @ANYBLOB="0a0001"], 0x48}}, 0x0) 416.011407ms ago: executing program 4 (id=1688): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2100, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba9432}) r2 = socket$kcm(0x2, 0xa, 0x2) r3 = socket$igmp6(0xa, 0x3, 0x2) r4 = socket$inet(0xa, 0x800, 0x84) sendmsg$nl_netfilter(r0, &(0x7f00000005c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000340)={0x200, 0xb, 0xb, 0x801, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x5}, [@generic="6bdd16799949eb0b5deebaa63f6394c83d76dcb8ad3c64390bcf65e162eea1646ec33291c312752918728095257e23ae1c11fe846fea33ed7fcb5a151183750ca11642e53d4777fefea0013f8e3147c99df0043d263fc2494f1f81122ef8cd47c913910a14d1ac16b5b69b011384a47c7ab0", @nested={0xd0, 0x4d, 0x0, 0x1, [@typed={0x4, 0x9c}, @nested={0x4, 0x96}, @generic="2cb2ec706c09b84feda985ad7694eb3152ff189f3fe2634bf3da7c3fb80bd6c9e27069478b4bd729b6d45a796f70410dc8ab5812e7832402aeb7639f30b807ae9f9c9ca05586583cf6ee2a3a8072bf6b193b2807ab93684cad71998d8462de9ef228ac3bbb737030c08d7ccd18d56ffe714df035b2eaffd2b4fa6ef1c7db4eec7b79ce38b08a3a7083d06b4888f998a178948c15f78804a8f2ea0129f591bf3c8894942be21a4709d947ca5f04a96fde1f1cc68c1d04a555a12438a97c81ebe8", @nested={0x4, 0x104}]}, @nested={0x9e, 0x8e, 0x0, 0x1, [@generic="2a3edd755335ffd7419a66dcfeba05d9ac240d3254f06f23d8bbfc359bfaaf2926bf0573d9b5eeb21a2d4523a976987e34d451c5a410e8347c14e0b563ff8940c2cb838d8d322940ef0581a82201718ad121ed81983b1d49bc51a67b6e761c7fdaab47bee40bc094053a0665dc4235e44680adf53eb6caebaf6f271004578fcb", @typed={0x8, 0xee, 0x0, 0x0, @u32=0x2}, @typed={0x8, 0xb5, 0x0, 0x0, @u32=0x3}, @generic="841565e4dada0d822b2e"]}, @typed={0x8, 0xa7, 0x0, 0x0, @fd=r0}]}, 0x200}, 0x1, 0x0, 0x0, 0x4000000}, 0x48005) connect$inet(r4, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r4, 0x8) r5 = accept4(r4, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r5, 0x84, 0x1e, &(0x7f0000000100)=0x8, 0x4) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f00000001c0)={'syzkaller1\x00', @link_local}) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="80420000000000001400030076657468305f746f5f626f6e6400000008003a00", @ANYRES32=0x0, @ANYBLOB='\b\x00('], 0x44}}, 0x0) r6 = socket(0x10, 0x3, 0x0) write(r6, &(0x7f0000000580)="240000001e005f031400ff01000000f80700b3586ff606c2e553797c080008e467dc0000", 0x24) recvmmsg(r6, &(0x7f0000005180), 0x400000000000166, 0x1a000, 0x0) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[], 0xb8}}, 0x0) 381.376947ms ago: executing program 2 (id=1689): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0x6, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x4361, 0x10001, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4c850}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newqdisc={0xe0, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0x6, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_ACK_FILTER={0x8, 0x10, 0x2}]}}, @TCA_STAB={0xa4, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x7, 0x6, 0x3, 0x1, 0x0, 0x3, 0x7eef, 0x3}}, {0xa, 0x2, [0x6, 0x7ff, 0x2]}}, {{0x1c, 0x1, {0x8, 0xd, 0x2, 0xfffffff7, 0x2, 0x2, 0x8}}, {0x4}}, {{0x1c, 0x1, {0xd5, 0x86, 0x5, 0xfffff001, 0x1, 0x8, 0xd54, 0x1}}, {0x6, 0x2, [0xfffe]}}, {{0x1c, 0x1, {0x10, 0x3, 0x7ff, 0x4, 0x2, 0xe, 0xffffffff, 0x9}}, {0x16, 0x2, [0x7, 0xf, 0x6, 0xf800, 0x7, 0x3, 0xdde, 0x8, 0x49]}}]}]}, 0xe0}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r4 = socket$packet(0x11, 0x3, 0x300) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000d40), 0xffffffffffffffff) r8 = socket$inet(0x2, 0x4000000805, 0x0) sendmmsg(r8, &(0x7f0000000e40)=[{{&(0x7f0000000000)=@l2tp={0x2, 0x0, @local}, 0x80, &(0x7f0000000280)=[{&(0x7f00000000c0)="ae", 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[{0x10, 0x84, 0x5}], 0x10}}], 0x2, 0x40000) setsockopt$inet_udp_encap(r8, 0x11, 0x64, &(0x7f0000000180)=0x2, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r9, 0x1, 0x10, &(0x7f0000000040), 0x4) sendmsg$inet(r9, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) sendmsg$unix(r9, &(0x7f0000000640)={&(0x7f00000005c0)=@file={0x1, './bus\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x4004044) sendmsg$TIPC_NL_PEER_REMOVE(r6, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)={&(0x7f0000000d80)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000001400000024000780000000000c000400000000000000000008000200010100001000000000000000"], 0x38}}, 0x0) sendmsg$TIPC_NL_SOCK_GET(r5, &(0x7f0000000600)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000400}, 0xc, &(0x7f0000000540)={&(0x7f0000000880)=ANY=[@ANYBLOB="e0000000e7c1560202c0f6ee650931a20454138c5aaaeea8173ef843e40e41fa6ecf3474386553a899c81084e8d1c3e29a2e3c3280ac1e1906376fcc0f59eb5e7d08e6ae8f5ca5d2a15ebf4c052b7db66de4e80fc989f26e19601c61529991c0a9b98992f0b777e9cde6f356a63c1dccb0b27f1c2e7ee05222976ebe050afaed4189bd3db8c6e65508a09e385efd5bb2eafa4807e8ba17ae7e28444f16d15cfa40f31732060c121ddfe01fe1b3e205ed40112aae98d75f7da1e58f56b1486befabd1d4a58c690e", @ANYRES16=r7, @ANYBLOB="000427bd7000fedbdf2506000000cc00048034000780080001001d000000080001001000000008000400000400000800020005000000080001001f00000008000200000000001300010062726f6164636173742d6c696e6b00000900010073797a3000000000240007800800020006000000080001000d000000080003000300000008000300000c00002c0007800800010007000000080004000900000008000200090000000800040081000000080001000f0000000900010073797a30000000000900010073797a31000000000900010073797a3100000000"], 0xe0}, 0x1, 0x0, 0x0, 0x20000001}, 0x200000c0) sendto$packet(r4, &(0x7f0000000240)="800000800000210ee7decd7a0003", 0xe, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r3, 0x1, 0xd8, 0x6, @broadcast}, 0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x7, 0x4, &(0x7f0000000080)=@framed={{}, [@alu={0x4, 0x1, 0xb, 0x0, 0x3, 0x8000000000000010, 0x8}]}, &(0x7f00000005c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) ioctl$int_out(r2, 0x5460, &(0x7f00000000c0)) 219.538322ms ago: executing program 0 (id=1690): pipe(&(0x7f00000045c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r2, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r2, 0x0) (async) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f00000010c0)="2ae2", 0x2}], 0x1, 0x1) (async) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r4) (async) splice(r0, 0x0, r4, 0x0, 0x10000000000066, 0xa) (async) ioctl$sock_netrom_SIOCADDRT(r2, 0x890b, &(0x7f0000000100)={0x0, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bpq0, 0x1, 'syz1\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0xfffffffc, 0x7, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @null, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) 79.673684ms ago: executing program 1 (id=1691): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0xfffffffffffffdbc, 0x2, {{0x1, 0xd, 0x0, 0x9, 0x8}, 0x6, 0x1, 0x1, 0x4, 0x8, 0xe, 0x7, 0x1d, 0x3, 0x9, {0xa2d6, 0x200, 0xb, 0x40, 0x2, 0x1ff}}}}]}, 0x78}}, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003080)=@newtfilter={0x8b0, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r7, {0x5, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x87c, 0x2, [@TCA_MATCHALL_ACT={0x878, 0x2, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x1ff, 0x3, 0x10000, 0x81, 0x7f, 0x5, 0x4, 0x2, 0x4, 0x5, 0x2234, 0x83, 0x81b, 0x800, 0x8, 0x0, 0x3, 0x7ed53619, 0x1, 0x7, 0x9644, 0x800004, 0x58b, 0x85a, 0x3ff, 0x46, 0x2, 0x1, 0x0, 0x80000000, 0x10001, 0x790, 0x5, 0x1, 0xfffffff9, 0x1a77, 0x9, 0x3, 0x400, 0x63c, 0x4, 0xffffffff, 0x1, 0x3, 0x3, 0x5b1f, 0x7b0, 0x7, 0x100, 0x2, 0xd, 0xff, 0x3, 0x10000, 0x6, 0x6b7, 0x11ff, 0x80, 0x4, 0x7, 0x3, 0xa14, 0x3, 0x2, 0x80000000, 0x81, 0x7, 0x8, 0x5, 0x10001, 0xf7, 0x3, 0xfffffef9, 0x9, 0x4, 0x8, 0xfff, 0x3, 0x3, 0x6, 0x7, 0x8, 0x100, 0xc0000000, 0x6, 0x6, 0x8, 0x8, 0x80000001, 0x8, 0x1d24, 0x2, 0x7, 0x80000000, 0x7f, 0x7, 0x9, 0xff, 0x24, 0x5, 0x7, 0x6, 0x10007a, 0x8, 0x0, 0x7, 0x470, 0x7f, 0x6, 0x0, 0x1, 0x1, 0x4, 0x10009, 0x61, 0x200, 0x6, 0x2, 0x2, 0x6, 0x10003, 0x8, 0x7, 0x11, 0xda56, 0x7ffffffe, 0x80, 0x2f0cb955, 0x7, 0xfed, 0xf, 0x6ae, 0x9, 0xfffffffd, 0x9, 0x8001, 0x0, 0xec000, 0x0, 0x1, 0x2, 0x9, 0x18, 0x8, 0x4, 0x1, 0xffffcf1b, 0x282, 0x5517bc7b, 0x3, 0x4, 0xb6b, 0x5, 0xf7800000, 0xac, 0x8, 0x3, 0x10, 0x9, 0x8, 0x80000001, 0x0, 0x74, 0x2, 0x7fffffff, 0x0, 0xa, 0x6, 0xffffffff, 0x8, 0x2, 0x7, 0x7f, 0x5, 0x3, 0xa, 0x1, 0x0, 0xa, 0x300, 0x5, 0x3, 0x6, 0xffffffff, 0xffb, 0xff, 0x5, 0x8, 0x3, 0x2, 0x5, 0xb, 0x399d, 0x8, 0x8ab6, 0x18000, 0x2, 0xfffffff9, 0x2, 0x2, 0x528c, 0x5, 0x200, 0xac, 0xf, 0xd05, 0x9a2ce73, 0x4, 0x6, 0xe074, 0x6b10, 0x5, 0x1, 0x6, 0xb, 0xa26, 0xaf6, 0x0, 0xec, 0x8, 0xde16, 0xc418, 0xffffffff, 0xffffffff, 0x9, 0x400, 0x80001, 0x5, 0x4, 0x5, 0x2, 0x1, 0x7, 0x0, 0x177, 0x7, 0x0, 0x80, 0x5, 0x8, 0xfffffffb, 0x9, 0xe7b, 0x0, 0x7, 0xfffffff8, 0x10000, 0x9, 0x9, 0x6, 0x4b75, 0x80000001, 0x1000, 0x5915, 0x10001, 0x1]}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x107e, 0x4, 0xec2, 0x6, 0x8, 0x400, 0x5, 0x1, 0x7, 0x470, 0x487, 0x100, 0xa99, 0x4, 0x6, 0x37f, 0x8, 0x6, 0x3, 0x3, 0x800, 0xd2f5, 0x40, 0x3, 0x4, 0x5, 0x7, 0x12, 0x2, 0x8, 0x101, 0xfffeffff, 0x2, 0xffff, 0xa6, 0x3, 0x10000, 0x1000, 0x4, 0x0, 0x3, 0x0, 0x2, 0x6, 0x98, 0x8, 0x6, 0x9, 0x1000, 0xb3000, 0xf, 0x3, 0x9, 0xb4, 0x94b, 0x9, 0x8, 0x6, 0x100, 0x2, 0xffff, 0x4, 0x2, 0x3ff, 0x2, 0xb828, 0x0, 0x0, 0x365, 0x8, 0x8, 0xf, 0x1, 0xfffffffe, 0xfffffff6, 0x93, 0x7ffb, 0x92, 0x0, 0x7, 0xfffffffc, 0x7ff, 0x9, 0x2, 0x0, 0x2, 0x8, 0xffffff37, 0x3, 0x9, 0xc, 0xff, 0x3, 0x3, 0x400, 0x100000, 0x7f, 0x2, 0x8, 0x4, 0x7, 0x4, 0x7, 0xfffffffa, 0x101, 0xadd9, 0x1, 0x0, 0x7, 0x7fffffff, 0x40, 0x4, 0x3, 0x5, 0x4, 0x1, 0x8, 0x9, 0x6, 0x6, 0x2, 0xb, 0x3, 0x7f, 0xffff, 0x9, 0x1685, 0xa252, 0x2, 0x200, 0x3, 0x1, 0x400, 0xfffffffc, 0xfffffffc, 0x1000, 0x7ff, 0x1, 0x1f6, 0x751, 0x7, 0x40000000, 0x1, 0x8, 0x50, 0xf, 0xf, 0xe, 0x6, 0x0, 0x81, 0xfff80000, 0x0, 0x1, 0x6, 0x3, 0x7ef8, 0x7, 0x5, 0x2, 0x0, 0x4e8, 0x80, 0x0, 0x8, 0x5, 0x0, 0x5, 0x7fff, 0x7, 0x8, 0x6a4941c5, 0x2ea567b4, 0x8, 0x9, 0x6, 0x40, 0x2, 0x4000fff, 0x8, 0x7, 0x1, 0x1, 0x0, 0x0, 0xd3bed341, 0x691f, 0x0, 0x2, 0x9, 0x6, 0x0, 0x1ff, 0x400003, 0x3, 0x6, 0x5fc8462f, 0x0, 0x7, 0xffff, 0xfffffffc, 0x5, 0x0, 0xb9a6, 0x522, 0x2, 0x2, 0x900, 0x8, 0xbb99, 0xb8000000, 0x8, 0xffffff01, 0xc0a1, 0x8, 0x8, 0x7, 0x59, 0x9, 0x2, 0x101, 0x5f502dc7, 0x7, 0x0, 0x4, 0x6, 0x80000001, 0xc000, 0xffffff97, 0x2, 0x40, 0x1, 0x40, 0x8, 0x3, 0x710, 0x8, 0x1, 0xfffff339, 0x3, 0x8001, 0x1, 0x8001, 0x9, 0x8, 0xfffffffa, 0x8, 0xd, 0xfff, 0xe, 0x3, 0x9, 0xa, 0x7, 0xfffffff8]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xfffffe00, 0x20000000, 0x6, 0x1, 0x8, {0x8, 0x0, 0xb55, 0x5, 0x7, 0xb}, {0x6, 0x2, 0xd, 0x5, 0x1, 0x5d17}, 0x2, 0x0, 0x6}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0x8b0}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000ac0)=@newlink={0x3c, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IFLAGS={0x6, 0x2, 0x84f}]}}}]}, 0x3c}}, 0x0) 72.968223ms ago: executing program 0 (id=1692): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-aes-aesni\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) r1 = accept4(r0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000003b00)=@delchain={0xfe8, 0x65, 0x4, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0x3}, {0x9}, {0x6, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x3, 0x1}}, @filter_kind_options=@f_flow={{0x9}, {0x394, 0x2, [@TCA_FLOW_EMATCHES={0x390, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x4}}, @TCA_EMATCH_TREE_LIST={0x98, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x18, 0x3, 0x0, 0x0, {{0x1, 0x0, 0xb}, "1c0312edcb30a44dd2"}}, @TCF_EM_NBYTE={0x18, 0x1, 0x0, 0x0, {{0x5e, 0x2, 0x100}, {0x1, 0x5, 0x1, "24a6c1e2b8"}}}, @TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x2, 0x1, 0x6}, {0xfff, 0x8, 0x4, 0x4, 0xf, 0x2}}}, @TCF_EM_IPSET={0x10, 0x7, 0x0, 0x0, {{0x100, 0x8, 0x5d}, {0x0, 0x6}}}, @TCF_EM_CONTAINER={0x3c, 0x2, 0x0, 0x0, {{0x9, 0x0, 0x4}, "1874c91328db744531121160cb6cfdf1c08b8dc969d6042f67b8b7ed2b727b7a67b06970cac416fee2d267f97c"}}]}, @TCA_EMATCH_TREE_LIST={0x2ac, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0xf0, 0x1, 0x0, 0x0, {{0x9, 0x9, 0xfff8}, [@TCA_EM_IPT_MATCH_DATA={0xc5, 0x5, "e8cf364a1749071a28ca0785eee0c302cbb471cdc077dcb2f894a5e775e526f9e760735534cc2db2f63efaa19e78a4df2156dfec8803958ea589a625c7c29ec4fcadd39f222c9a953635de670f6d28b006d003be09e945b39d76f3fdbe2bc49f148181ca0471354bfd7443cf6ebad4d7354ae6e93883e6e711b15eaa604172fa01367f6e0f80698c6bbb1212b4ce20906a611a7e95d9f3cf4a8eae2cd9c02b4029d10309e523cc6745581d00d3efc4075082a901533ac675a88df99a8a72f3d88b"}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x3}, @TCA_EM_IPT_HOOK={0x8}, @TCA_EM_IPT_MATCH_NAME={0xb}]}}, @TCF_EM_IPT={0x1b8, 0x2, 0x0, 0x0, {{0x5}, [@TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0xa}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_DATA={0x85, 0x5, "d1c29811c8071633b253c065850aabc5cf24c121fe99a69426335e89e9bc42ed8e04a152bfeb4f06435fb3e63d579312f9bc947673b910ca3d52a581c00fa126fa1d3501260866bdc7be0863edf28be3e5f1c6c17035cc0ae2f18a398d92864bcdaaf3e8acc7038bc8ddb7d9c482795d6f14e1915de1cb16ace4fd908d65e98b82"}, @TCA_EM_IPT_MATCH_DATA={0xf1, 0x5, "6226848700e9fa41e4ed4959189e695dd3dafb61113b2264a9fc8fa00fdc7d47a7040d035024bedec8bd0ea2fdaeaeebe7abf7d2dc94af5c43b5d651448cf68642afbb86dccecbc1117d34dddf6a02c87e1a37e472244940c503967c3cba2205f91885dbe159c5e99b70d3929ae9978bff59a40d34d4126a200e97c36234a270d881b6083b0b6c96e323647ec6f9d7bf3f1d293b8a3a137e8611ed9479130d4490a4294effbb24c0f6fe1dd8253a0095ccd03fce9de2fc3a3a829ec4de86896d06a321cfd45d0af26e8171c50ed89c08df070f7e16bd9269d3d189c43bea3dd8a36967eb86272b33439019e193"}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x6}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x4}]}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1ff}}, @TCA_EMATCH_TREE_LIST={0x38, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0xae, 0x1, 0x7}, {0xfffffffc, 0x1, 0xdc, 0x5, 0x4, 0x0, 0x1}}}, @TCF_EM_IPT={0x1c, 0x1, 0x0, 0x0, {{0x2, 0x9, 0x66}, [@TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x9}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x1}]}}]}]}]}}, @filter_kind_options=@f_bpf={{0x8}, {0xc14, 0x2, [@TCA_BPF_POLICE={0xc10, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0xffffffff, 0x3, 0x4, 0xfaba, 0x2, 0x7, 0x9, 0xffffffff, 0x9, 0x6, 0xf, 0x2, 0xff, 0x7, 0x5, 0x9, 0x9, 0x8, 0x1, 0x14, 0xd, 0x2b, 0x1, 0x7, 0x5, 0xddf, 0x1, 0x2, 0xb, 0x4, 0xa, 0x9, 0xd, 0xfffff651, 0x81, 0x1, 0x5c, 0xfeaa, 0x6, 0x0, 0x1, 0x2, 0x1, 0x5, 0x1, 0x5, 0x4, 0x6e20, 0x400, 0x7, 0x5, 0x8, 0x6, 0x7, 0x10, 0x1000, 0x6, 0xfffffffc, 0x54, 0xc2, 0x5, 0xffff, 0x8, 0x0, 0x0, 0x0, 0x0, 0x3, 0x100, 0x7, 0x4, 0x3, 0x2, 0x7, 0x7, 0x1, 0x4, 0x6, 0x10000, 0x1, 0x5, 0x7, 0x5, 0x6, 0x10000, 0x3, 0x80000000, 0xa84e, 0x0, 0x5, 0x6c9e, 0x4, 0x80, 0xd, 0x8, 0xe, 0x4, 0x0, 0x7, 0x0, 0x5, 0x3, 0xeb17, 0xfffffff1, 0x3, 0xffff, 0xa020, 0xbb, 0xf, 0x3, 0x10, 0x2, 0x7ee5, 0x3, 0x5fe4, 0x401, 0x2, 0x98b, 0x1, 0x7fffffff, 0x4, 0x6, 0xfffffffa, 0x7, 0x7fffffff, 0x3, 0x1, 0x198b400, 0xe7, 0x2, 0xe31, 0x8, 0x2f, 0x7, 0x3e3, 0x3, 0xc, 0x3, 0xffffffff, 0x0, 0x5, 0x8, 0xfffffffc, 0x2d1000, 0xa, 0xfffffffd, 0x8, 0x7, 0x4, 0x0, 0x80000000, 0x8, 0x7, 0x6, 0x6, 0x8, 0x5, 0x6, 0x1, 0x8d76, 0x80000000, 0xe, 0x5, 0x6, 0x7, 0x0, 0x8, 0x8000, 0x0, 0x7fffffff, 0x0, 0x2, 0x6, 0x81, 0x2, 0x0, 0xc0000, 0x3, 0x2d, 0xfffffff2, 0x5, 0x8, 0x7, 0xdb23, 0x27, 0x6, 0x0, 0x7, 0x0, 0x3, 0x3e, 0xa8b7, 0x6f0f2833, 0x80000000, 0x0, 0x10001, 0x244d, 0x227b, 0x56497fb0, 0x400, 0x5, 0x3, 0x1000, 0x6, 0x2, 0x40000, 0x0, 0x7, 0x3ff, 0x3, 0x6, 0x3, 0x60b, 0x100, 0xffff, 0x1, 0x4, 0x8, 0x8000, 0x8, 0x0, 0x80, 0x1, 0xff, 0xa, 0xf5d0, 0x3, 0x8000, 0x2, 0x406, 0x401, 0x8, 0xda79, 0x7fffffff, 0x1, 0x7, 0x4, 0x4c3, 0x4, 0x10000, 0x9, 0x1, 0x6, 0x4, 0xd708a80, 0xff, 0x4, 0x37d, 0x400, 0x9, 0x7, 0x23894440, 0x9, 0xd75, 0x9, 0x2]}, @TCA_POLICE_RATE={0x404, 0x2, [0x6, 0xffffffb6, 0x1, 0x1, 0x5, 0x0, 0x2, 0x1000, 0x1000, 0x8, 0x9, 0x7, 0x8, 0xe, 0x698, 0x4, 0x22, 0x200, 0xfffffff3, 0x8, 0x9, 0x876, 0xbb97, 0x8000000, 0x81c, 0x64127ccb, 0x9, 0x3, 0x4, 0xd, 0x8, 0x8, 0xa, 0xfffffffa, 0x0, 0x2, 0x7, 0xce0, 0xceb1, 0x80, 0x1, 0xe, 0x10, 0x100, 0x9, 0x1, 0x3, 0x3ff, 0x80, 0x1, 0x1, 0x3, 0x7, 0xda96, 0x7, 0x9, 0x4, 0x5, 0x8, 0xfffffffb, 0x3, 0x1, 0xa, 0x6, 0x8246, 0xd2, 0xf9, 0x3, 0x3, 0x401, 0x2, 0x3, 0x8, 0x8c3, 0x9, 0x55d, 0x8, 0x8001, 0x9, 0x5, 0x7, 0x5b4a, 0xfffffff2, 0x2, 0x6, 0xfffffffb, 0x8, 0x7, 0x1, 0x2, 0xf, 0x0, 0x0, 0x484c, 0x9, 0x800, 0x9, 0x157, 0x4, 0x4a05, 0x1000, 0xd93d, 0xc3, 0x3, 0x6, 0x3, 0x6, 0x80000001, 0x81, 0x2, 0xc, 0xff, 0x1, 0x7, 0x8, 0x8, 0xc, 0xaaed, 0x795, 0xc5, 0x10001, 0x4, 0x5, 0x1000, 0x9, 0x3, 0x3, 0x1, 0x10000, 0x6, 0x3b910aad, 0x200, 0x3a3, 0x91, 0x7, 0xfffffffd, 0x854, 0x4, 0x4, 0x7, 0x3, 0x5, 0x9, 0x2, 0x5, 0x8, 0x7, 0x8001, 0x100, 0x0, 0x5, 0x4, 0x7, 0x7fff, 0x8, 0x3, 0x4, 0x1, 0x1, 0xfff, 0xd8a, 0x6, 0x5, 0xc72f, 0x8a46, 0xcb, 0x7, 0xff6e, 0x8000, 0xce, 0x7fff, 0x5, 0x9, 0x1, 0x821a, 0x6, 0x7, 0x9, 0xf, 0x1, 0xfff, 0xe7, 0x887, 0x0, 0x3, 0x5, 0x9, 0x56e6, 0x49, 0x8ca, 0x0, 0x4, 0x3, 0x4, 0x9, 0x4, 0x8, 0x0, 0xffff4247, 0x0, 0x1, 0x422, 0x2, 0x2, 0x28, 0x8, 0x8, 0x4fb, 0x8, 0x0, 0x6, 0x4, 0xc1, 0x7, 0x80000001, 0x9, 0x3, 0xf3, 0x2, 0x1, 0x3, 0x1, 0x8, 0x3, 0xf87, 0x3, 0x5, 0xfffffffd, 0x401, 0x4, 0x3, 0xfff, 0xffff8001, 0x2, 0xb0, 0x4, 0x4, 0x2, 0xb, 0x0, 0x0, 0x4, 0xe, 0x6, 0x4, 0x8, 0x1, 0x100, 0x8001, 0xd, 0x4, 0x0, 0xda, 0xb, 0x5, 0x1]}, @TCA_POLICE_RATE={0x404, 0x2, [0x8, 0x8, 0xff, 0x81, 0x1, 0x1, 0x5, 0x8, 0xff, 0x0, 0x5, 0x9, 0x30, 0x6, 0x0, 0x7227, 0x4, 0x2020, 0xa39, 0x3, 0x3, 0x8, 0x5, 0x5, 0x7, 0x9, 0x2, 0x35, 0x81, 0x800, 0x4, 0x2, 0x16701ef0, 0x3, 0x5, 0x3, 0x3, 0x3, 0x8, 0x4, 0xffffff8b, 0x5, 0x7, 0x5, 0x40, 0xfe, 0x46, 0x2706, 0x9, 0x1, 0x10001, 0x2, 0x481, 0x4cdb, 0x4e7, 0x3, 0x101, 0x6, 0x3ff, 0x3, 0x8, 0x0, 0x6, 0x2, 0x1, 0xb, 0x10000, 0x8, 0x0, 0x3, 0x4, 0x86, 0x5, 0x9, 0x4c8, 0x1ff, 0x2e, 0x3, 0x8, 0x59a, 0x980, 0xb16, 0x3, 0x9, 0x9, 0x4, 0x8002, 0x5, 0x1, 0xfa, 0x3, 0x5, 0x0, 0x7, 0x6, 0x7, 0xf8, 0xffffffff, 0x8, 0x10001, 0x100, 0x1000, 0x2, 0x1000, 0x4, 0x3, 0x8001, 0x4, 0x2, 0x7, 0xf, 0x5, 0x3ff, 0x0, 0x910e, 0x965d, 0x86e1, 0x8, 0x9, 0xff, 0x7, 0x8, 0x0, 0xfffffffa, 0x9, 0x8, 0x1e, 0x0, 0x2, 0x3, 0x3, 0x5, 0x252b, 0x80, 0x8, 0x8000, 0x3, 0x7, 0x1, 0xffff3736, 0xffffffff, 0x7fff, 0x8, 0x8, 0x10001, 0x80000000, 0x2, 0x8dc, 0x2, 0x80000000, 0x6, 0x763, 0x410, 0x6, 0x4000, 0x80000000, 0x3, 0x2, 0xad02, 0x1, 0x628aab26, 0x7, 0x8, 0x8, 0x9, 0x9, 0x3, 0x80000000, 0x929e, 0xc, 0xbf7, 0xffff1d13, 0x3, 0x9, 0x7, 0x4, 0x9, 0x80, 0xd584, 0x2f72, 0x5, 0x1, 0x7fffffff, 0x2, 0x2, 0x6e42fd, 0x2, 0x3, 0x10001, 0x7fffffff, 0x4, 0x5, 0x3, 0x2, 0x1ff, 0x7, 0x1ef60d56, 0xf, 0x3, 0x3, 0x4, 0x4, 0x2, 0x5, 0x7, 0x0, 0x400, 0xb, 0x80000001, 0x7, 0x4a9, 0x9, 0xe, 0xf, 0x10000, 0xc528, 0xffff, 0x5, 0x8, 0x3, 0xc, 0xe8bb, 0x6, 0x3, 0x101, 0x9, 0x0, 0x0, 0x5a, 0x9, 0x6, 0xd, 0x2, 0xf2, 0x0, 0x9, 0x0, 0x1, 0x8, 0x1, 0x0, 0x28, 0x4, 0x4, 0x1, 0x10001, 0x4, 0x5, 0x5, 0x4, 0x1, 0x6, 0x80000001, 0x8, 0x7b4, 0x7]}]}]}}]}, 0xfe8}, 0x1, 0x0, 0x0, 0x40004}, 0x400c004) syz_genetlink_get_family_id$fou(&(0x7f0000000180), r1) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xb, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="620ac4ff0000000071104b000000000095"], &(0x7f0000000480)='GPL\x00'}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000540)=ANY=[@ANYBLOB="180000000000000000000000000000008500000029000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001800000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 0s ago: executing program 4 (id=1693): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r2, 0x8922, &(0x7f0000000000)={'macvlan0\x00', 0xc8d}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0xfffffffffffffeb2, 0x2, @TCA_CBS_PARMS={0xffffffffffffffd8}}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c}, {0x4}}]}]}, 0x6c}}, 0x0) kernel console output (not intermixed with test programs): as an active interface with an up link [ 70.957088][ T5818] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.968393][ T5823] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.989454][ T5816] team0: Port device team_slave_0 added [ 70.997492][ T5826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.009306][ T5818] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.037507][ T5822] team0: Port device team_slave_0 added [ 71.045314][ T5823] team0: Port device team_slave_0 added [ 71.052579][ T5816] team0: Port device team_slave_1 added [ 71.060699][ T5826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.080986][ T5822] team0: Port device team_slave_1 added [ 71.088349][ T5823] team0: Port device team_slave_1 added [ 71.131746][ T5816] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.139158][ T5816] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.165806][ T5816] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.207833][ T5818] team0: Port device team_slave_0 added [ 71.215811][ T5826] team0: Port device team_slave_0 added [ 71.222085][ T5816] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.229495][ T5816] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.255989][ T5816] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.286207][ T5818] team0: Port device team_slave_1 added [ 71.293108][ T5826] team0: Port device team_slave_1 added [ 71.307135][ T5822] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.314359][ T5822] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.343815][ T5822] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.344641][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.363081][ T5822] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.363726][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.370309][ T5822] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.402513][ T5822] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.414071][ T5823] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.421205][ T5823] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.447759][ T5823] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.493348][ T5823] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.500353][ T5823] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.505038][ T5827] Bluetooth: hci0: command tx timeout [ 71.526568][ T5823] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.559700][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.566894][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.574570][ T5827] Bluetooth: hci4: command tx timeout [ 71.593567][ T5829] Bluetooth: hci1: command tx timeout [ 71.603844][ T5832] Bluetooth: hci2: command tx timeout [ 71.609606][ T5833] Bluetooth: hci3: command tx timeout [ 71.609714][ T5826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.634842][ T5818] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.641780][ T5818] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.667983][ T5818] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.689253][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.696368][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.722548][ T5826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.750615][ T5818] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.757640][ T5818] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.783654][ T5818] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.800680][ T5816] hsr_slave_0: entered promiscuous mode [ 71.807139][ T5816] hsr_slave_1: entered promiscuous mode [ 71.835577][ T5823] hsr_slave_0: entered promiscuous mode [ 71.841990][ T5823] hsr_slave_1: entered promiscuous mode [ 71.848308][ T5823] debugfs: 'hsr0' already exists in 'hsr' [ 71.854158][ T5823] Cannot create hsr debugfs directory [ 71.902898][ T5822] hsr_slave_0: entered promiscuous mode [ 71.909127][ T5822] hsr_slave_1: entered promiscuous mode [ 71.915407][ T5822] debugfs: 'hsr0' already exists in 'hsr' [ 71.921130][ T5822] Cannot create hsr debugfs directory [ 71.961378][ T5818] hsr_slave_0: entered promiscuous mode [ 71.967869][ T5818] hsr_slave_1: entered promiscuous mode [ 71.973804][ T5818] debugfs: 'hsr0' already exists in 'hsr' [ 71.979721][ T5818] Cannot create hsr debugfs directory [ 72.015968][ T5826] hsr_slave_0: entered promiscuous mode [ 72.022123][ T5826] hsr_slave_1: entered promiscuous mode [ 72.028360][ T5826] debugfs: 'hsr0' already exists in 'hsr' [ 72.034122][ T5826] Cannot create hsr debugfs directory [ 72.473917][ T5816] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 72.485328][ T5816] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 72.493082][ T5816] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 72.502220][ T5816] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 72.517945][ T5816] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 72.526911][ T5816] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 72.535628][ T5816] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 72.545119][ T5816] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 72.596159][ T5822] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 72.607243][ T5822] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 72.615368][ T5822] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 72.624545][ T5822] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 72.646257][ T5822] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 72.656098][ T5822] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 72.665908][ T5822] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 72.675667][ T5822] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 72.725774][ T5818] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 72.737620][ T5818] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 72.758493][ T5818] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 72.767945][ T5818] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 72.775890][ T5818] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 72.786092][ T5818] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 72.817091][ T5818] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 72.826349][ T5818] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 72.882238][ T5823] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 72.892343][ T5823] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 72.900399][ T5823] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 72.909133][ T5823] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 72.935891][ T5823] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 72.945834][ T5823] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 72.969200][ T5823] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 72.979182][ T5823] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 73.017477][ T5816] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.039020][ T5826] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 73.048954][ T5826] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 73.056597][ T5826] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 73.066886][ T5826] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 73.084782][ T5826] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 73.093774][ T5826] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 73.102721][ T5826] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 73.112884][ T5826] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 73.142930][ T5816] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.192912][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.200145][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.228658][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.235781][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.259431][ T5822] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.307912][ T5822] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.325907][ T5818] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.341187][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.348355][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.390985][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.398111][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.422730][ T5818] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.482653][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.489854][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.527756][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.534950][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.559036][ T5826] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.577379][ T5833] Bluetooth: hci0: command tx timeout [ 73.590876][ T5823] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.655590][ T5833] Bluetooth: hci4: command tx timeout [ 73.661029][ T5833] Bluetooth: hci3: command tx timeout [ 73.664508][ T5832] Bluetooth: hci2: command tx timeout [ 73.666943][ T5833] Bluetooth: hci1: command tx timeout [ 73.687873][ T5826] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.712644][ T5823] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.733030][ T5818] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 73.761013][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.768167][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.779808][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.786970][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.861323][ T5816] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.872825][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.880050][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.896552][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.903700][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.026615][ T5822] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.162277][ T5816] veth0_vlan: entered promiscuous mode [ 74.189738][ T5818] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.217596][ T5816] veth1_vlan: entered promiscuous mode [ 74.317523][ T5818] veth0_vlan: entered promiscuous mode [ 74.347785][ T5826] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.371743][ T5816] veth0_macvtap: entered promiscuous mode [ 74.410594][ T5818] veth1_vlan: entered promiscuous mode [ 74.426474][ T5816] veth1_macvtap: entered promiscuous mode [ 74.497091][ T5818] veth0_macvtap: entered promiscuous mode [ 74.525736][ T5818] veth1_macvtap: entered promiscuous mode [ 74.534998][ T5816] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.559571][ T5816] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.582829][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.593856][ T65] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.616973][ T65] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.626574][ T65] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.650485][ T5818] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.666001][ T5823] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.681601][ T5826] veth0_vlan: entered promiscuous mode [ 74.690813][ T5818] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.711378][ T65] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.720940][ T65] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.765272][ T5826] veth1_vlan: entered promiscuous mode [ 74.773054][ T65] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.782940][ T49] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.800349][ T5822] veth0_vlan: entered promiscuous mode [ 74.848493][ T5822] veth1_vlan: entered promiscuous mode [ 74.897929][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.908745][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.943545][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.959804][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.972060][ T5826] veth0_macvtap: entered promiscuous mode [ 75.001935][ T5826] veth1_macvtap: entered promiscuous mode [ 75.013400][ T5822] veth0_macvtap: entered promiscuous mode [ 75.028646][ T5823] veth0_vlan: entered promiscuous mode [ 75.048788][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.053900][ T5823] veth1_vlan: entered promiscuous mode [ 75.057673][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.072155][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.082876][ T5822] veth1_macvtap: entered promiscuous mode [ 75.107651][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.132251][ T5822] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.141451][ T65] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.143626][ T5822] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.163056][ T65] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.179901][ T35] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.204732][ T35] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.213485][ T35] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.243180][ T5818] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 75.259052][ T35] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.269193][ T35] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.283110][ T35] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.292682][ T35] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.328746][ T5823] veth0_macvtap: entered promiscuous mode [ 75.350315][ T35] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.411562][ T5823] veth1_macvtap: entered promiscuous mode [ 75.435875][ T5938] netlink: 96 bytes leftover after parsing attributes in process `syz.1.2'. [ 75.577573][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.597651][ T5940] Zero length message leads to an empty skb [ 75.617195][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.626893][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.643344][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.654712][ T5833] Bluetooth: hci0: command tx timeout [ 75.710263][ T35] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.722199][ T35] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.734323][ T5833] Bluetooth: hci1: command tx timeout [ 75.736310][ T5829] Bluetooth: hci2: command tx timeout [ 75.739735][ T5833] Bluetooth: hci3: command tx timeout [ 75.745842][ T5832] Bluetooth: hci4: command tx timeout [ 75.754381][ T35] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.773584][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.785712][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.806950][ T35] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.855369][ T1037] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.876948][ T1037] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.944233][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.952137][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.996310][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.025048][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.149754][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.198115][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.355410][ T5961] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1'. [ 76.532177][ T5973] x_tables: ip_tables: TCPMSS target: only valid for protocol 6 [ 76.795675][ T5998] netlink: 20 bytes leftover after parsing attributes in process `syz.3.14'. [ 76.824263][ T5998] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14'. [ 76.982996][ T6003] netlink: 516 bytes leftover after parsing attributes in process `syz.1.16'. [ 77.212239][ T6012] Bluetooth: MGMT ver 1.23 [ 77.245973][ T6016] netlink: 156 bytes leftover after parsing attributes in process `syz.2.21'. [ 77.443274][ T6024] netlink: 'syz.4.23': attribute type 10 has an invalid length. [ 77.465829][ T6027] netlink: 4 bytes leftover after parsing attributes in process `syz.2.25'. [ 77.507921][ T6024] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.543016][ T6024] bridge_slave_1: left allmulticast mode [ 77.595286][ T6024] bridge_slave_1: left promiscuous mode [ 77.612672][ T6024] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.627516][ T6030] netlink: 12 bytes leftover after parsing attributes in process `syz.3.27'. [ 77.676053][ T6024] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 77.734593][ T5827] Bluetooth: hci0: command tx timeout [ 77.742273][ T6037] syz.2.28 uses obsolete (PF_INET,SOCK_PACKET) [ 77.788658][ T6038] netlink: 'syz.2.28': attribute type 3 has an invalid length. [ 77.797735][ T6038] netlink: 'syz.2.28': attribute type 3 has an invalid length. [ 77.814832][ T5827] Bluetooth: hci4: command tx timeout [ 77.820890][ T5832] Bluetooth: hci2: command tx timeout [ 77.827560][ T5829] Bluetooth: hci3: command tx timeout [ 77.827574][ T5833] Bluetooth: hci1: command tx timeout [ 77.983750][ T6046] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 78.018806][ T6044] netlink: 8 bytes leftover after parsing attributes in process `syz.1.29'. [ 78.037931][ T6044] netlink: 8 bytes leftover after parsing attributes in process `syz.1.29'. [ 78.190428][ T6047] syzkaller1: entered promiscuous mode [ 78.200808][ T6047] syzkaller1: entered allmulticast mode [ 78.473377][ T6078] openvswitch: netlink: IP tunnel dst address not specified [ 78.641971][ T6084] gtp0: entered promiscuous mode [ 78.649238][ T6084] gtp0: entered allmulticast mode [ 78.816790][ T6100] gretap0: entered promiscuous mode [ 78.922819][ T6104] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 79.217287][ T6116] x_tables: duplicate underflow at hook 2 [ 79.461940][ T6127] erspan0: entered allmulticast mode [ 79.682035][ T6144] trusted_key: syz.4.63 sent an empty control message without MSG_MORE. [ 79.995879][ T6156] macvlan4: entered promiscuous mode [ 80.031689][ T6156] macvlan4: entered allmulticast mode [ 80.212898][ T6182] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 80.237882][ T6182] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 80.276941][ T6182] gretap1: entered promiscuous mode [ 80.282193][ T6182] gretap1: entered allmulticast mode [ 80.366511][ T6193] netlink: 'syz.4.74': attribute type 33 has an invalid length. [ 80.486446][ T6193] bond1: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 80.495969][ T6197] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 80.510138][ T6193] bond1 (unregistering): Released all slaves [ 80.743611][ T6212] __nla_validate_parse: 13 callbacks suppressed [ 80.743631][ T6212] netlink: 7064 bytes leftover after parsing attributes in process `syz.4.79'. [ 80.763778][ T6210] netlink: 'syz.3.80': attribute type 32 has an invalid length. [ 80.793963][ T6210] netlink: 8 bytes leftover after parsing attributes in process `syz.3.80'. [ 80.817299][ T6212] openvswitch: netlink: Missing key (keys=40, expected=100) [ 80.879757][ T6210] bond1: Setting coupled_control to off (0) [ 80.920143][ T6219] netlink: 'syz.0.81': attribute type 1 has an invalid length. [ 81.323345][ T6235] netlink: 8 bytes leftover after parsing attributes in process `syz.3.86'. [ 81.431518][ T6243] IPv6: NLM_F_CREATE should be specified when creating new route [ 81.441595][ T6243] netlink: 12 bytes leftover after parsing attributes in process `syz.3.89'. [ 81.563744][ T6251] netlink: 'syz.3.92': attribute type 1 has an invalid length. [ 81.571950][ T6252] netlink: 'syz.3.92': attribute type 1 has an invalid length. [ 81.646935][ T6255] netlink: 12 bytes leftover after parsing attributes in process `syz.0.90'. [ 81.966789][ T6269] netlink: 'syz.0.97': attribute type 21 has an invalid length. [ 82.065490][ T6269] netlink: 'syz.0.97': attribute type 22 has an invalid length. [ 82.118901][ T6269] netlink: 96 bytes leftover after parsing attributes in process `syz.0.97'. [ 82.170472][ T6278] netlink: 12 bytes leftover after parsing attributes in process `syz.4.98'. [ 82.374053][ T6281] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 82.434786][ T6264] lec:lec_atm_close: lec0: Shut down! [ 82.834335][ T6306] netlink: 20 bytes leftover after parsing attributes in process `syz.1.105'. [ 82.904623][ T6309] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 83.036995][ T6319] netlink: 28 bytes leftover after parsing attributes in process `syz.1.110'. [ 83.141519][ T6320] syzkaller0: create flow: hash 2796024667 index 1 [ 83.207174][ T35] syzkaller0: tun_net_xmit 76 [ 83.218133][ T35] syzkaller0: tun_net_xmit 48 [ 83.223160][ T6309] netlink: 8 bytes leftover after parsing attributes in process `syz.3.106'. [ 83.224346][ T5931] syzkaller0: tun_net_xmit 76 [ 83.240225][ T6332] netlink: zone id is out of range [ 83.247909][ T6332] netlink: zone id is out of range [ 83.253218][ T6332] netlink: zone id is out of range [ 83.260602][ T6332] netlink: zone id is out of range [ 83.267812][ T6332] netlink: zone id is out of range [ 83.273078][ T6332] netlink: zone id is out of range [ 83.279733][ T6332] netlink: zone id is out of range [ 83.285216][ T6332] netlink: zone id is out of range [ 83.301049][ T6332] netlink: zone id is out of range [ 83.313979][ T6332] netlink: zone id is out of range [ 83.319275][ T6313] syzkaller0: delete flow: hash 2796024667 index 1 [ 83.509668][ T6344] Cannot find add_set index 2 as target [ 84.657237][ T5931] lec:lec_start_xmit: lec0:No lecd attached [ 84.726383][ T6371] warning: `syz.2.119' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 86.250854][ T6470] validate_nla: 2 callbacks suppressed [ 86.250875][ T6470] netlink: 'syz.4.144': attribute type 1 has an invalid length. [ 86.346458][ T6474] __nla_validate_parse: 5 callbacks suppressed [ 86.346479][ T6474] netlink: 100 bytes leftover after parsing attributes in process `syz.0.145'. [ 86.686981][ T6488] gtp0: entered promiscuous mode [ 86.692234][ T6488] gtp0: entered allmulticast mode [ 86.704434][ T6491] netlink: 28 bytes leftover after parsing attributes in process `syz.3.155'. [ 86.708420][ T24] cfg80211: failed to load regulatory.db [ 86.746452][ T6491] netlink: 212336 bytes leftover after parsing attributes in process `syz.3.155'. [ 86.951929][ T6503] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 86.957086][ T6508] netlink: 'syz.0.160': attribute type 75 has an invalid length. [ 86.978156][ T6508] netlink: 'syz.0.160': attribute type 2 has an invalid length. [ 86.988068][ T6504] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.159'. [ 87.166522][ T6514] netlink: 216 bytes leftover after parsing attributes in process `syz.2.161'. [ 87.182895][ T6521] netlink: 'syz.0.164': attribute type 24 has an invalid length. [ 87.192797][ T6514] netlink: 8 bytes leftover after parsing attributes in process `syz.2.161'. [ 87.207800][ T6522] netlink: 'syz.3.163': attribute type 2 has an invalid length. [ 87.274208][ T6521] netlink: 'syz.0.164': attribute type 9 has an invalid length. [ 87.292928][ T6522] 9: entered promiscuous mode [ 87.525341][ T6539] x_tables: duplicate underflow at hook 2 [ 87.902671][ T6558] netlink: 8 bytes leftover after parsing attributes in process `syz.2.176'. [ 87.951596][ T6558] netlink: 'syz.2.176': attribute type 30 has an invalid length. [ 88.012050][ T65] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 88.036595][ T65] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 88.064595][ T65] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 88.083621][ T65] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 88.197986][ T6567] syzkaller0: entered promiscuous mode [ 88.203582][ T6567] syzkaller0: entered allmulticast mode [ 88.375134][ T6577] netlink: 256 bytes leftover after parsing attributes in process `syz.4.182'. [ 88.396073][ T6576] raw_sendmsg: syz.4.182 forgot to set AF_INET. Fix it! [ 88.738051][ T6583] pimreg0: entered promiscuous mode [ 88.924185][ T6592] netlink: 512 bytes leftover after parsing attributes in process `syz.4.186'. [ 89.122711][ T6597] netlink: 12 bytes leftover after parsing attributes in process `syz.1.187'. [ 89.171776][ T6603] netlink: 'syz.2.190': attribute type 8 has an invalid length. [ 89.275234][ T6578] pimreg0 (unregistering): left promiscuous mode [ 89.894514][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5240 ms [ 89.902856][ C1] lec:lec_tx_timeout: lec0 [ 89.911128][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 90.008974][ T6646] team_slave_1: entered promiscuous mode [ 90.056289][ T6645] team_slave_1: left promiscuous mode [ 90.363808][ T6666] Driver unsupported XDP return value 0 on prog (id 44) dev N/A, expect packet loss! [ 90.388268][ T6668] netlink: 'syz.2.214': attribute type 1 has an invalid length. [ 90.419087][ T6672] netlink: 'syz.3.215': attribute type 1 has an invalid length. [ 90.478226][ T6672] 8021q: adding VLAN 0 to HW filter on device bond2 [ 90.485930][ T6676] netem: unknown loss type 0 [ 90.491672][ T6676] netem: change failed [ 90.517914][ T6678] bond2: (slave gretap1): making interface the new active one [ 90.527591][ T6678] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 91.064037][ T6657] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 91.089949][ T6657] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 91.339688][ T6723] vlan2: entered allmulticast mode [ 91.358683][ T6723] gretap0: entered allmulticast mode [ 91.397219][ T6727] x_tables: duplicate underflow at hook 1 [ 91.439939][ T6723] __nla_validate_parse: 5 callbacks suppressed [ 91.439957][ T6723] netlink: 32 bytes leftover after parsing attributes in process `syz.1.230'. [ 91.512631][ T6731] netlink: 24 bytes leftover after parsing attributes in process `syz.4.233'. [ 91.567571][ T6739] netlink: 4 bytes leftover after parsing attributes in process `syz.2.235'. [ 91.580452][ T6739] net_ratelimit: 5 callbacks suppressed [ 91.580468][ T6739] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 91.583727][ T6741] xt_hashlimit: size too large, truncated to 1048576 [ 91.659871][ T6744] validate_nla: 194 callbacks suppressed [ 91.659889][ T6744] netlink: 'syz.0.237': attribute type 29 has an invalid length. [ 91.690895][ T6749] erspan0: entered allmulticast mode [ 92.486664][ T6769] netlink: 'syz.3.242': attribute type 1 has an invalid length. [ 92.514711][ T6769] bond3: entered promiscuous mode [ 92.520171][ T6769] 8021q: adding VLAN 0 to HW filter on device bond3 [ 92.530301][ T6769] netlink: 4 bytes leftover after parsing attributes in process `syz.3.242'. [ 92.581990][ T6772] netlink: 104 bytes leftover after parsing attributes in process `syz.3.243'. [ 92.685317][ T6775] netlink: 'syz.3.244': attribute type 10 has an invalid length. [ 94.455878][ T6731] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 94.471478][ T6757] netlink: 244 bytes leftover after parsing attributes in process `syz.1.240'. [ 94.924135][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 94.932215][ C1] lec:lec_tx_timeout: lec0 [ 94.936844][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 94.944869][ T6801] netlink: 'syz.3.255': attribute type 1 has an invalid length. [ 94.990855][ T6800] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address [ 95.002188][ T6800] bond4: (slave vxcan3): Error -95 calling set_mac_address [ 95.258293][ T6814] netlink: 'syz.0.259': attribute type 11 has an invalid length. [ 95.266609][ T6814] netlink: 228 bytes leftover after parsing attributes in process `syz.0.259'. [ 95.276046][ T6814] bridge0: entered allmulticast mode [ 96.078952][ T6852] netlink: 20 bytes leftover after parsing attributes in process `syz.2.270'. [ 96.184056][ T6851] netlink: 20 bytes leftover after parsing attributes in process `syz.2.270'. [ 96.237943][ T6852] netlink: 12 bytes leftover after parsing attributes in process `syz.2.270'. [ 96.591526][ T5830] udevd[5830]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 96.640394][ T6889] __nla_validate_parse: 2 callbacks suppressed [ 96.640416][ T6889] netlink: 32 bytes leftover after parsing attributes in process `syz.2.278'. [ 96.743697][ T6891] netlink: 4 bytes leftover after parsing attributes in process `syz.4.279'. [ 96.777029][ T6891] netlink: 4 bytes leftover after parsing attributes in process `syz.4.279'. [ 96.908637][ T6896] netlink: 'syz.0.281': attribute type 12 has an invalid length. [ 96.927823][ T6902] netlink: 'syz.3.283': attribute type 1 has an invalid length. [ 96.931106][ T6896] netlink: 4 bytes leftover after parsing attributes in process `syz.0.281'. [ 96.956903][ T6906] netlink: 'syz.3.283': attribute type 1 has an invalid length. [ 96.961620][ T6910] netlink: 'syz.4.285': attribute type 9 has an invalid length. [ 97.028135][ T65] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 97.062721][ T65] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 97.109822][ T65] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 97.149448][ T65] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 97.247292][ T6930] netlink: 144 bytes leftover after parsing attributes in process `syz.1.291'. [ 97.651397][ T6951] netlink: 'syz.3.297': attribute type 4 has an invalid length. [ 97.688763][ T6951] netlink: 17 bytes leftover after parsing attributes in process `syz.3.297'. [ 97.894741][ T6963] netlink: 'syz.1.300': attribute type 2 has an invalid length. [ 97.923520][ T6963] netlink: 'syz.1.300': attribute type 2 has an invalid length. [ 97.944717][ T6963] netlink: 8 bytes leftover after parsing attributes in process `syz.1.300'. [ 97.971804][ T6965] netlink: 8 bytes leftover after parsing attributes in process `syz.2.302'. [ 97.990754][ T6967] bridge1: entered promiscuous mode [ 98.004952][ T6967] bridge1: entered allmulticast mode [ 98.091730][ T6975] ÿÿÿÿÿÿ: renamed from virt_wifi0 [ 98.587490][ T7000] netlink: 212240 bytes leftover after parsing attributes in process `syz.2.308'. [ 98.608247][ T7005] netlink: 'syz.0.311': attribute type 1 has an invalid length. [ 98.643106][ T7009] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 98.660100][ T7012] netlink: 20 bytes leftover after parsing attributes in process `syz.0.311'. [ 98.685868][ T7005] 8021q: adding VLAN 0 to HW filter on device bond1 [ 98.749334][ T7012] bond1: (slave geneve2): making interface the new active one [ 98.760822][ T7012] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 99.280365][ T7042] netlink: 'syz.0.320': attribute type 1 has an invalid length. [ 99.632262][ T7056] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 99.641915][ T7066] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 99.799942][ T7078] netlink: 'syz.2.329': attribute type 5 has an invalid length. [ 99.944105][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 99.952171][ C1] lec:lec_tx_timeout: lec0 [ 99.957091][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 100.325792][ T5994] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 100.335532][ T5994] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 100.366066][ T5994] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 100.467368][ T7123] sock: sock_timestamping_bind_phc: sock not bind to device [ 100.479045][ T5994] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 101.442602][ T7176] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.473324][ T7176] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.582057][ T7186] erspan0: left allmulticast mode [ 101.634020][ T7186] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.641239][ T7186] bridge0: port 1(bridge_slave_0) entered forwarding state [ 101.656658][ T7186] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.663868][ T7186] bridge0: port 2(bridge_slave_1) entered forwarding state [ 101.739079][ T7186] virt_wifi0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 101.803678][ T7203] xt_CT: You must specify a L4 protocol and not use inversions on it [ 101.852769][ T7186] 8021q: adding VLAN 0 to HW filter on device bond1 [ 101.907229][ T7186] bond3: left promiscuous mode [ 101.925560][ T7186] 8021q: adding VLAN 0 to HW filter on device bond4 [ 102.020685][ T1037] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 102.047531][ T5931] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 102.068187][ T1037] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 102.145671][ T7213] __nla_validate_parse: 17 callbacks suppressed [ 102.145693][ T7213] netlink: 8 bytes leftover after parsing attributes in process `syz.3.372'. [ 102.175871][ T7213] lo: Caught tx_queue_len zero misconfig [ 102.593066][ T7223] IPVS: Scheduler module ip_vs_sip not found [ 102.627766][ T7234] netlink: 244 bytes leftover after parsing attributes in process `syz.2.377'. [ 102.639405][ T5931] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 102.854894][ T5931] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 103.172697][ T7267] netlink: 8 bytes leftover after parsing attributes in process `syz.4.389'. [ 103.195417][ T7267] ip6erspan0: entered promiscuous mode [ 103.296560][ T7273] IPv6: NLM_F_CREATE should be specified when creating new route [ 103.317100][ T7273] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 103.358838][ T7273] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 103.505296][ T7284] validate_nla: 3 callbacks suppressed [ 103.505312][ T7284] netlink: 'syz.4.396': attribute type 9 has an invalid length. [ 103.522496][ T7239] Bluetooth: hci4: Opcode 0x0401 failed: -4 [ 103.701538][ T7301] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 103.715569][ T7298] netlink: 'syz.4.399': attribute type 12 has an invalid length. [ 103.726447][ T7298] netlink: 190972 bytes leftover after parsing attributes in process `syz.4.399'. [ 104.784233][ T5833] Bluetooth: hci4: command 0x0401 tx timeout [ 104.976860][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms [ 104.984934][ C1] lec:lec_tx_timeout: lec0 [ 104.989822][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 105.392805][ T7347] netlink: 12 bytes leftover after parsing attributes in process `syz.0.412'. [ 105.674754][ T7357] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.682973][ T7357] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.782929][ T7366] netlink: 4 bytes leftover after parsing attributes in process `syz.3.420'. [ 105.822375][ T7368] xt_l2tp: v2 doesn't support IP mode [ 106.040299][ T7379] netlink: 8 bytes leftover after parsing attributes in process `syz.2.425'. [ 106.146770][ T7379] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 106.178546][ T7379] netlink: 148 bytes leftover after parsing attributes in process `syz.2.425'. [ 106.339466][ T7402] netlink: 'syz.2.431': attribute type 1 has an invalid length. [ 106.390372][ T7402] netlink: 8 bytes leftover after parsing attributes in process `syz.2.431'. [ 106.454312][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 106.501941][ T7409] netlink: 4 bytes leftover after parsing attributes in process `syz.0.434'. [ 106.711127][ T7424] syzkaller0: entered promiscuous mode [ 106.716863][ T7424] syzkaller0: entered allmulticast mode [ 106.807517][ T7430] 8021q: VLANs not supported on wg1 [ 107.021353][ T7441] x_tables: duplicate entry at hook 1 [ 107.055651][ T7441] x_tables: duplicate entry at hook 1 [ 107.265701][ T7455] __nla_validate_parse: 3 callbacks suppressed [ 107.265792][ T7455] netlink: 4 bytes leftover after parsing attributes in process `syz.1.447'. [ 107.414437][ T7462] netlink: 'syz.3.449': attribute type 1 has an invalid length. [ 107.422132][ T7462] netlink: 'syz.3.449': attribute type 3 has an invalid length. [ 107.454651][ T7462] netlink: 224 bytes leftover after parsing attributes in process `syz.3.449'. [ 107.592488][ T7476] netlink: 12 bytes leftover after parsing attributes in process `syz.0.453'. [ 107.733978][ T7481] netlink: 24 bytes leftover after parsing attributes in process `syz.2.455'. [ 107.920468][ T7497] sock: sock_set_timeout: `syz.0.461' (pid 7497) tries to set negative timeout [ 107.942482][ T7509] netlink: 8 bytes leftover after parsing attributes in process `syz.1.463'. [ 107.980358][ T7509] netlink: 'syz.1.463': attribute type 5 has an invalid length. [ 108.007855][ T7509] netlink: 20 bytes leftover after parsing attributes in process `syz.1.463'. [ 108.091491][ T7514] netlink: 'syz.3.464': attribute type 1 has an invalid length. [ 108.111774][ T7514] netlink: 4 bytes leftover after parsing attributes in process `syz.3.464'. [ 108.197900][ T7525] syzkaller0: entered promiscuous mode [ 108.203421][ T7525] syzkaller0: entered allmulticast mode [ 108.621084][ T7553] netlink: 152 bytes leftover after parsing attributes in process `syz.4.473'. [ 108.823064][ T7564] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 108.903594][ T7568] netlink: 8 bytes leftover after parsing attributes in process `syz.3.477'. [ 108.995639][ T7566] netlink: 12 bytes leftover after parsing attributes in process `syz.3.477'. [ 108.995735][ T7571] xt_cgroup: invalid path, errno=-2 [ 109.061561][ T7575] netlink: 'syz.0.478': attribute type 15 has an invalid length. [ 109.305359][ T7585] xt_hashlimit: size too large, truncated to 1048576 [ 109.434646][ T7598] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 110.103472][ T7621] syzkaller0: entered promiscuous mode [ 110.113152][ T7621] syzkaller0: entered allmulticast mode [ 110.161133][ T7625] IPVS: set_ctl: invalid protocol: 103 10.1.1.0:20004 [ 110.774113][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5780 ms [ 110.782212][ C1] lec:lec_tx_timeout: lec0 [ 110.787169][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 110.840462][ T7668] skbuff: bad partial csum: csum=65535/0 headroom=64 headlen=65537 [ 111.008279][ T7676] bond0: ARP target 8.4.0.0 is already present [ 111.034998][ T7676] bond0: option arp_ip_target: invalid value (1032) [ 111.872672][ T7684] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 113.089614][ T7724] netlink: 'syz.1.528': attribute type 4 has an invalid length. [ 113.135201][ T7725] IPv6: sit2: Disabled Multicast RS [ 113.142578][ T7725] sit2: entered allmulticast mode [ 113.157298][ T7743] IPVS: set_ctl: invalid protocol: 117 172.20.20.170:20000 [ 113.373283][ T7750] __nla_validate_parse: 13 callbacks suppressed [ 113.373305][ T7750] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.536'. [ 113.653920][ T7771] netlink: 'syz.0.542': attribute type 1 has an invalid length. [ 113.665190][ T7771] netlink: 4 bytes leftover after parsing attributes in process `syz.0.542'. [ 113.807624][ T7778] netlink: 168 bytes leftover after parsing attributes in process `syz.0.546'. [ 113.828121][ T7780] netlink: 36 bytes leftover after parsing attributes in process `syz.3.547'. [ 114.075395][ T7794] netlink: 32 bytes leftover after parsing attributes in process `syz.1.552'. [ 114.147040][ T7798] netlink: 'syz.4.554': attribute type 29 has an invalid length. [ 114.155986][ T7800] netlink: 596 bytes leftover after parsing attributes in process `syz.4.554'. [ 114.310922][ T7809] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 114.452425][ T7816] netlink: 'syz.3.559': attribute type 2 has an invalid length. [ 114.478980][ T7816] netlink: 188 bytes leftover after parsing attributes in process `syz.3.559'. [ 114.509342][ T7816] netlink: 'syz.3.559': attribute type 2 has an invalid length. [ 114.530264][ T7816] netlink: 188 bytes leftover after parsing attributes in process `syz.3.559'. [ 114.563054][ T7816] netlink: 'syz.3.559': attribute type 2 has an invalid length. [ 114.575110][ T7816] netlink: 188 bytes leftover after parsing attributes in process `syz.3.559'. [ 114.584216][ T7825] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 114.586910][ T7821] netlink: 16 bytes leftover after parsing attributes in process `syz.2.561'. [ 114.599502][ T7805] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 114.613141][ T7816] netlink: 'syz.3.559': attribute type 2 has an invalid length. [ 114.625492][ T7816] netlink: 'syz.3.559': attribute type 2 has an invalid length. [ 114.637398][ T7816] netlink: 'syz.3.559': attribute type 2 has an invalid length. [ 114.650732][ T7816] netlink: 'syz.3.559': attribute type 2 has an invalid length. [ 114.669872][ T7816] netlink: 'syz.3.559': attribute type 2 has an invalid length. [ 114.681333][ T7816] netlink: 'syz.3.559': attribute type 2 has an invalid length. [ 114.757956][ T7831] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 114.948109][ T7829] 8021q: adding VLAN 0 to HW filter on device bond1 [ 115.001150][ T7834] vlan3: entered promiscuous mode [ 115.011105][ T7834] bond1: entered promiscuous mode [ 115.017850][ T7834] vlan3: entered allmulticast mode [ 115.023104][ T7834] bond1: entered allmulticast mode [ 115.494470][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 115.647358][ T7887] netem: unknown loss type 0 [ 115.665248][ T7887] netem: change failed [ 115.814204][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5030 ms [ 115.822241][ C1] lec:lec_tx_timeout: lec0 [ 115.827306][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 116.056828][ T7905] syzkaller0: entered promiscuous mode [ 116.062349][ T7905] syzkaller0: entered allmulticast mode [ 116.091049][ T7905] ksmbd: Unknown IPC event: 3, ignore. [ 116.588729][ T7928] openvswitch: netlink: Unexpected mask (mask=200440, allowed=10048) [ 117.532524][ T7943] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 117.551605][ T7943] team0: Port device batadv1 added [ 117.579144][ T7944] IPv6: sit2: Disabled Multicast RS [ 117.597218][ T7944] sit2: entered allmulticast mode [ 117.940350][ T7977] syz_tun: entered promiscuous mode [ 118.004524][ T7977] syz_tun: left promiscuous mode [ 118.631276][ T8007] __nla_validate_parse: 42 callbacks suppressed [ 118.631294][ T8007] netlink: 8 bytes leftover after parsing attributes in process `syz.3.619'. [ 118.656619][ T8007] netlink: 4 bytes leftover after parsing attributes in process `syz.3.619'. [ 118.670962][ T8005] bond2: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 118.687291][ T8005] bond2 (unregistering): Released all slaves [ 118.752206][ T5949] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 118.798118][ T7502] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 118.824240][ T7502] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 118.832996][ T7502] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 119.155088][ T8042] netlink: 60 bytes leftover after parsing attributes in process `syz.4.627'. [ 119.169455][ T8044] validate_nla: 27 callbacks suppressed [ 119.169472][ T8044] netlink: 'syz.0.630': attribute type 1 has an invalid length. [ 119.206582][ T8042] netdevsim netdevsim4: Direct firmware load for . failed with error -2 [ 119.218044][ T8044] netlink: 8 bytes leftover after parsing attributes in process `syz.0.630'. [ 119.234526][ T8042] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 119.252490][ T8044] netlink: 4 bytes leftover after parsing attributes in process `syz.0.630'. [ 119.272014][ T8044] netlink: 'syz.0.630': attribute type 2 has an invalid length. [ 119.281398][ T8044] netlink: 'syz.0.630': attribute type 2 has an invalid length. [ 119.301280][ T8044] netlink: 'syz.0.630': attribute type 2 has an invalid length. [ 119.457980][ T8063] Bluetooth: MGMT ver 1.23 [ 119.661940][ T8072] netlink: 4 bytes leftover after parsing attributes in process `syz.0.639'. [ 120.019961][ T8087] tipc: Enabling of bearer rejected, failed to enable media [ 120.212408][ T8103] netlink: 'syz.0.649': attribute type 21 has an invalid length. [ 120.227062][ T8103] netlink: 128 bytes leftover after parsing attributes in process `syz.0.649'. [ 120.236866][ T8105] netlink: 'syz.2.650': attribute type 6 has an invalid length. [ 120.244896][ T8105] netlink: 184 bytes leftover after parsing attributes in process `syz.2.650'. [ 120.254609][ T8103] netlink: 'syz.0.649': attribute type 5 has an invalid length. [ 120.262555][ T8103] netlink: 3 bytes leftover after parsing attributes in process `syz.0.649'. [ 120.693305][ T8138] netlink: 48 bytes leftover after parsing attributes in process `syz.0.660'. [ 120.834118][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 120.842191][ C1] lec:lec_tx_timeout: lec0 [ 120.847008][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 120.944403][ T8141] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 123.275042][ T8107] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 123.640615][ T29] audit: type=1107 audit(1775820306.481:2): pid=8169 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 123.647580][ T8179] RDS: rds_bind could not find a transport for fc02::, load rds_tcp or rds_rdma? [ 123.902081][ T8188] team0 (unregistering): Port device team_slave_0 removed [ 123.933897][ T8201] __nla_validate_parse: 2 callbacks suppressed [ 123.933915][ T8201] netlink: 232 bytes leftover after parsing attributes in process `syz.2.678'. [ 123.952496][ T8188] team0 (unregistering): Port device team_slave_1 removed [ 124.104237][ T8211] netlink: 'syz.1.683': attribute type 1 has an invalid length. [ 124.134753][ T8211] netlink: 'syz.1.683': attribute type 2 has an invalid length. [ 124.142587][ T8211] netlink: 'syz.1.683': attribute type 1 has an invalid length. [ 124.152219][ T8211] netlink: 4 bytes leftover after parsing attributes in process `syz.1.683'. [ 124.221710][ T8219] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.686'. [ 124.570327][ T1602] IPVS: starting estimator thread 0... [ 124.674307][ T8255] IPVS: using max 56 ests per chain, 134400 per kthread [ 125.854163][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 125.862254][ C1] lec:lec_tx_timeout: lec0 [ 125.867390][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 127.194143][ T8217] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 127.209725][ T8254] netlink: 256 bytes leftover after parsing attributes in process `syz.0.693'. [ 127.413522][ T8276] vcan1: entered promiscuous mode [ 127.415853][ T8283] netlink: 12 bytes leftover after parsing attributes in process `syz.1.699'. [ 127.429767][ T8276] vcan1: entered allmulticast mode [ 127.491111][ T8291] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 127.510103][ T8293] netlink: 24 bytes leftover after parsing attributes in process `syz.0.702'. [ 127.555860][ T8293] netlink: 1 bytes leftover after parsing attributes in process `syz.0.702'. [ 127.617334][ T8293] xt_policy: neither incoming nor outgoing policy selected [ 127.698289][ T5934] IPVS: starting estimator thread 0... [ 127.804663][ T8309] IPVS: using max 31 ests per chain, 74400 per kthread [ 127.814189][ T8316] bridge0: port 1(bridge_slave_0) entered disabled state [ 127.835534][ T8319] netlink: 168 bytes leftover after parsing attributes in process `syz.3.707'. [ 127.846231][ T8306] syzkaller0: entered promiscuous mode [ 127.874232][ T8306] syzkaller0: entered allmulticast mode [ 128.016304][ T8334] netlink: 4 bytes leftover after parsing attributes in process `syz.1.712'. [ 129.253198][ T8400] netlink: 4 bytes leftover after parsing attributes in process `syz.1.734'. [ 130.483425][ T8455] netlink: 112 bytes leftover after parsing attributes in process `syz.4.750'. [ 130.677022][ T8464] validate_nla: 1 callbacks suppressed [ 130.677039][ T8464] netlink: 'syz.4.753': attribute type 12 has an invalid length. [ 130.714221][ T8464] netlink: 'syz.4.753': attribute type 29 has an invalid length. [ 130.726102][ T8464] netlink: 148 bytes leftover after parsing attributes in process `syz.4.753'. [ 130.754686][ T8464] netlink: 'syz.4.753': attribute type 2 has an invalid length. [ 130.762369][ T8464] netlink: 23 bytes leftover after parsing attributes in process `syz.4.753'. [ 130.874289][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 130.882369][ C1] lec:lec_tx_timeout: lec0 [ 130.887367][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 130.979477][ T8478] xt_bpf: check failed: parse error [ 131.140797][ T8482] xt_TCPMSS: Only works on TCP SYN packets [ 131.149862][ T8482] xt_TCPMSS: Only works on TCP SYN packets [ 131.156244][ T8473] erspan0: left allmulticast mode [ 131.157122][ T8482] xt_TCPMSS: Only works on TCP SYN packets [ 131.168878][ T8482] xt_TCPMSS: Only works on TCP SYN packets [ 131.175622][ T8482] xt_TCPMSS: Only works on TCP SYN packets [ 131.181851][ T8482] xt_TCPMSS: Only works on TCP SYN packets [ 131.188875][ T8482] xt_TCPMSS: Only works on TCP SYN packets [ 131.195456][ T8482] xt_TCPMSS: Only works on TCP SYN packets [ 131.202633][ T8482] xt_TCPMSS: Only works on TCP SYN packets [ 131.209372][ T8482] xt_TCPMSS: Only works on TCP SYN packets [ 131.374045][ T8473] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.381761][ T8473] bridge0: port 1(bridge_slave_0) entered disabled state [ 131.526424][ T8494] netlink: 44 bytes leftover after parsing attributes in process `syz.0.763'. [ 131.552491][ T8495] netlink: 44 bytes leftover after parsing attributes in process `syz.0.763'. [ 131.788001][ T8473] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 131.821806][ T8473] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 132.175173][ T8473] vlan2: left allmulticast mode [ 132.180042][ T8473] gretap0: left allmulticast mode [ 132.228114][ T8473] vlan3: left promiscuous mode [ 132.232937][ T8473] bond1: left promiscuous mode [ 132.248297][ T8473] vlan3: left allmulticast mode [ 132.253196][ T8473] bond1: left allmulticast mode [ 132.334969][ T7502] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 132.343919][ T7502] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.373580][ T7502] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 132.384280][ T7502] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.478285][ T7502] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 132.502779][ T8512] netlink: 'syz.0.768': attribute type 9 has an invalid length. [ 132.510687][ T8512] netlink: 'syz.0.768': attribute type 11 has an invalid length. [ 132.518649][ T8512] netlink: 'syz.0.768': attribute type 12 has an invalid length. [ 132.527047][ T7502] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.527415][ T8512] netlink: 210020 bytes leftover after parsing attributes in process `syz.0.768'. [ 132.546472][ T8512] netlink: 4 bytes leftover after parsing attributes in process `syz.0.768'. [ 132.565682][ T7502] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 132.598083][ T7502] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.694249][ T8524] netlink: 'syz.2.769': attribute type 16 has an invalid length. [ 132.703186][ T8524] netlink: 'syz.2.769': attribute type 17 has an invalid length. [ 132.778435][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 132.778947][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.797702][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.875693][ T8535] netlink: 104 bytes leftover after parsing attributes in process `syz.2.774'. [ 132.923041][ T8537] netlink: 28 bytes leftover after parsing attributes in process `syz.3.775'. [ 132.932325][ T8537] team0: Caught tx_queue_len zero misconfig [ 133.894700][ T8594] can: request_module (can-proto-4) failed. [ 134.160144][ T8619] xt_ecn: cannot match TCP bits for non-tcp packets [ 134.191493][ T8619] netlink: 'syz.2.802': attribute type 10 has an invalid length. [ 134.222068][ T8619] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.230534][ T8619] bridge_slave_1: left allmulticast mode [ 134.242242][ T8619] bridge_slave_1: left promiscuous mode [ 134.248611][ T8619] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.263238][ T8619] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 134.273499][ T5875] IPVS: starting estimator thread 0... [ 134.374761][ T8625] IPVS: using max 30 ests per chain, 72000 per kthread [ 134.515457][ T8634] __nla_validate_parse: 5 callbacks suppressed [ 134.515477][ T8634] netlink: 8 bytes leftover after parsing attributes in process `syz.2.806'. [ 134.543335][ T5997] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 134.552751][ T5997] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.562366][ T8636] netlink: 16 bytes leftover after parsing attributes in process `syz.3.808'. [ 134.573253][ T8636] bond0: Caught tx_queue_len zero misconfig [ 134.579626][ T8636] netlink: 6 bytes leftover after parsing attributes in process `syz.3.808'. [ 134.605340][ T8634] netlink: 44 bytes leftover after parsing attributes in process `syz.2.806'. [ 134.615930][ T8640] netlink: 8 bytes leftover after parsing attributes in process `syz.4.807'. [ 134.692185][ T8642] netlink: 'syz.3.809': attribute type 1 has an invalid length. [ 134.817646][ T8647] netlink: 8 bytes leftover after parsing attributes in process `syz.3.810'. [ 134.936164][ T5875] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 135.491654][ T8659] netlink: 76 bytes leftover after parsing attributes in process `syz.4.815'. [ 135.749873][ T5875] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 135.894154][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 135.902261][ C1] lec:lec_tx_timeout: lec0 [ 135.906896][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 137.024527][ T8606] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 137.034021][ T8634] netlink: 256 bytes leftover after parsing attributes in process `syz.2.806'. [ 137.172869][ T8687] tcpmss_tg6_check: 23 callbacks suppressed [ 137.172887][ T8687] xt_TCPMSS: Only works on TCP SYN packets [ 137.269080][ T8698] validate_nla: 2 callbacks suppressed [ 137.269100][ T8698] netlink: 'syz.0.828': attribute type 10 has an invalid length. [ 137.331480][ T8698] netlink: 'syz.0.828': attribute type 14 has an invalid length. [ 137.457020][ T5833] Bluetooth: hci4: link tx timeout [ 137.462418][ T5833] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 137.475730][ T5827] Bluetooth: hci4: link tx timeout [ 137.480877][ T5827] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 137.488768][ T5827] Bluetooth: hci4: link tx timeout [ 137.493891][ T5827] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 137.511181][ T8715] netlink: 12 bytes leftover after parsing attributes in process `syz.4.834'. [ 137.524663][ T8715] ipvlan2: entered allmulticast mode [ 137.529980][ T8715] syz_tun: entered allmulticast mode [ 137.703400][ T8726] netlink: 'syz.4.836': attribute type 21 has an invalid length. [ 137.723105][ T8726] netlink: 132 bytes leftover after parsing attributes in process `syz.4.836'. [ 138.261651][ T8706] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 138.305174][ T8758] netlink: 'syz.0.839': attribute type 1 has an invalid length. [ 138.449679][ T8771] tipc: Started in network mode [ 138.461015][ T8771] tipc: Node identity e0000001, cluster identity 4711 [ 138.508704][ T8771] tipc: Enabling of bearer rejected, failed to enable media [ 138.697396][ T8770] tipc: Enabling of bearer rejected, failed to enable media [ 138.842522][ T8794] netlink: 'syz.4.846': attribute type 10 has an invalid length. [ 139.493915][ T8845] netlink: 'syz.4.863': attribute type 10 has an invalid length. [ 139.503685][ T5827] Bluetooth: hci4: command 0x0401 tx timeout [ 140.117798][ T8885] __nla_validate_parse: 4 callbacks suppressed [ 140.117815][ T8885] netlink: 12 bytes leftover after parsing attributes in process `syz.1.874'. [ 140.639954][ T8921] netlink: 12 bytes leftover after parsing attributes in process `syz.1.880'. [ 140.914317][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 140.922369][ C1] lec:lec_tx_timeout: lec0 [ 140.927195][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 140.998554][ T8937] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_rx_wq": -EINTR [ 141.209111][ T8957] veth0_to_bond: entered allmulticast mode [ 141.283336][ T8963] netlink: 16 bytes leftover after parsing attributes in process `syz.0.890'. [ 141.303306][ T8957] netlink: 24 bytes leftover after parsing attributes in process `syz.3.891'. [ 141.347496][ T8967] netlink: 'syz.1.893': attribute type 1 has an invalid length. [ 141.479864][ T8967] 8021q: adding VLAN 0 to HW filter on device bond3 [ 141.845244][ T8999] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.902'. [ 141.866950][ T9003] syzkaller0: entered promiscuous mode [ 141.872536][ T9003] syzkaller0: entered allmulticast mode [ 141.961418][ T9008] netlink: 8 bytes leftover after parsing attributes in process `syz.4.906'. [ 142.045988][ T9011] netlink: 4552 bytes leftover after parsing attributes in process `syz.4.907'. [ 142.057655][ T9011] netlink: 4552 bytes leftover after parsing attributes in process `syz.4.907'. [ 142.108821][ T9016] netlink: 'syz.3.909': attribute type 5 has an invalid length. [ 142.159108][ T9015] pim6reg: entered allmulticast mode [ 142.277639][ T9025] syzkaller1: entered promiscuous mode [ 142.283416][ T9025] syzkaller1: entered allmulticast mode [ 142.744866][ T9047] netlink: 28 bytes leftover after parsing attributes in process `syz.1.921'. [ 142.764564][ T9047] netlink: 'syz.1.921': attribute type 7 has an invalid length. [ 142.800156][ T9047] netlink: 'syz.1.921': attribute type 8 has an invalid length. [ 142.820388][ T9047] netlink: 4 bytes leftover after parsing attributes in process `syz.1.921'. [ 143.182038][ T9078] pim6reg: entered allmulticast mode [ 143.188774][ T9078] bridge0: left allmulticast mode [ 143.194301][ T9078] pim6reg: left allmulticast mode [ 143.974330][ T5827] Bluetooth: hci4: command 0x0401 tx timeout [ 145.934136][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 145.942182][ C1] lec:lec_tx_timeout: lec0 [ 145.946979][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 146.013345][ T9067] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 146.174573][ T9099] netlink: 28 bytes leftover after parsing attributes in process `syz.2.938'. [ 146.369840][ T9115] syzkaller0: entered promiscuous mode [ 146.381005][ T9115] syzkaller0: entered allmulticast mode [ 146.403518][ T9117] netlink: 20 bytes leftover after parsing attributes in process `syz.2.942'. [ 146.444496][ T9117] syzkaller1: entered promiscuous mode [ 146.458822][ T9117] syzkaller1: entered allmulticast mode [ 146.472426][ T9121] x_tables: duplicate underflow at hook 1 [ 146.502553][ T9121] ipt_ECN: cannot use operation on non-tcp rule [ 146.810714][ T9136] netlink: 24 bytes leftover after parsing attributes in process `syz.3.949'. [ 146.911854][ T9142] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 146.998684][ T9145] syzkaller0: entered promiscuous mode [ 147.006588][ T9145] syzkaller0: entered allmulticast mode [ 147.019160][ T9145] netlink: 64 bytes leftover after parsing attributes in process `syz.4.953'. [ 147.263048][ T9136] netlink: 4768 bytes leftover after parsing attributes in process `syz.3.949'. [ 147.960197][ T9202] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 148.120266][ T9211] netlink: 8 bytes leftover after parsing attributes in process `syz.1.972'. [ 148.189856][ T9218] netlink: 'syz.2.970': attribute type 3 has an invalid length. [ 148.303106][ T9224] netlink: 'syz.3.977': attribute type 1 has an invalid length. [ 148.424780][ T9224] bond5: entered promiscuous mode [ 148.468806][ T9224] 8021q: adding VLAN 0 to HW filter on device bond5 [ 148.526480][ T9239] bond5: (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 148.562432][ T9239] bond5: (slave ipvlan3): The slave device specified does not support setting the MAC address [ 148.577294][ T9239] bond5: (slave ipvlan3): Setting fail_over_mac to active for active-backup mode [ 148.637244][ T9245] netlink: 'syz.4.982': attribute type 4 has an invalid length. [ 148.649558][ T9231] bond5: (slave bridge3): making interface the new active one [ 148.661195][ T9231] bridge3: entered promiscuous mode [ 148.668521][ T9231] bond5: (slave bridge3): Enslaving as an active interface with an up link [ 148.695887][ T9246] netlink: 'syz.4.982': attribute type 13 has an invalid length. [ 148.799535][ T9249] FAULT_INJECTION: forcing a failure. [ 148.799535][ T9249] name failslab, interval 1, probability 0, space 0, times 1 [ 148.830795][ T9249] CPU: 0 UID: 0 PID: 9249 Comm: syz.4.983 Not tainted syzkaller #0 PREEMPT(full) [ 148.830819][ T9249] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 148.830836][ T9249] Call Trace: [ 148.830842][ T9249] [ 148.830850][ T9249] dump_stack_lvl+0xe8/0x150 [ 148.830879][ T9249] should_fail_ex+0x412/0x560 [ 148.830910][ T9249] should_failslab+0xa8/0x100 [ 148.830935][ T9249] __kmalloc_cache_noprof+0x88/0x660 [ 148.830957][ T9249] ? sctp_add_bind_addr+0x8c/0x370 [ 148.830982][ T9249] sctp_add_bind_addr+0x8c/0x370 [ 148.831007][ T9249] sctp_bind_addr_copy+0xb3/0x3c0 [ 148.831028][ T9249] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 148.831059][ T9249] sctp_connect_new_asoc+0x2ff/0x6b0 [ 148.831084][ T9249] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 148.831109][ T9249] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 148.831130][ T9249] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 148.831150][ T9249] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 148.831174][ T9249] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 148.831196][ T9249] ? security_sctp_bind_connect+0x7e/0x2c0 [ 148.831221][ T9249] sctp_sendmsg+0x1528/0x2c10 [ 148.831255][ T9249] ? __pfx_sctp_sendmsg+0x10/0x10 [ 148.831285][ T9249] ? aa_sk_perm+0x6d5/0x900 [ 148.831315][ T9249] ? __pfx_aa_sk_perm+0x10/0x10 [ 148.831342][ T9249] ? sock_rps_record_flow+0x19/0x400 [ 148.831367][ T9249] ? inet_sendmsg+0x2f4/0x370 [ 148.831390][ T9249] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 148.831414][ T9249] ____sys_sendmsg+0x80a/0x9f0 [ 148.831445][ T9249] ? __pfx_____sys_sendmsg+0x10/0x10 [ 148.831475][ T9249] ? import_iovec+0x73/0xa0 [ 148.831499][ T9249] ___sys_sendmsg+0x2a5/0x360 [ 148.831535][ T9249] ? __pfx____sys_sendmsg+0x10/0x10 [ 148.831589][ T9249] ? __fget_files+0x2a/0x420 [ 148.831605][ T9249] ? __fget_files+0x3a0/0x420 [ 148.831629][ T9249] __x64_sys_sendmsg+0x1bd/0x2a0 [ 148.831655][ T9249] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 148.831686][ T9249] ? __pfx_ksys_write+0x10/0x10 [ 148.831719][ T9249] do_syscall_64+0x14d/0xf80 [ 148.831742][ T9249] ? trace_irq_disable+0x3b/0x150 [ 148.831761][ T9249] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.831779][ T9249] ? clear_bhb_loop+0x40/0x90 [ 148.831801][ T9249] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.831820][ T9249] RIP: 0033:0x7f8e1d19c819 [ 148.831844][ T9249] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 148.831859][ T9249] RSP: 002b:00007f8e1e093028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 148.831885][ T9249] RAX: ffffffffffffffda RBX: 00007f8e1d415fa0 RCX: 00007f8e1d19c819 [ 148.831897][ T9249] RDX: 0000000024000052 RSI: 00002000000001c0 RDI: 0000000000000003 [ 148.831908][ T9249] RBP: 00007f8e1e093090 R08: 0000000000000000 R09: 0000000000000000 [ 148.831919][ T9249] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 148.831929][ T9249] R13: 00007f8e1d416038 R14: 00007f8e1d415fa0 R15: 00007ffcd04bf4c8 [ 148.831959][ T9249] [ 149.231176][ T9258] openvswitch: netlink: IP tunnel dst address not specified [ 149.250819][ T9252] netlink: 'syz.0.984': attribute type 1 has an invalid length. [ 149.328438][ T9267] netlink: 12 bytes leftover after parsing attributes in process `syz.4.989'. [ 149.414339][ T9252] bond2: entered promiscuous mode [ 149.420022][ T9252] 8021q: adding VLAN 0 to HW filter on device bond2 [ 149.449189][ T9273] bond2: (slave bridge1): making interface the new active one [ 149.460882][ T9273] bridge1: entered promiscuous mode [ 149.476652][ T9273] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 149.828524][ T7495] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 149.850234][ T7495] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 149.854913][ T9301] FAULT_INJECTION: forcing a failure. [ 149.854913][ T9301] name failslab, interval 1, probability 0, space 0, times 0 [ 149.872956][ T9302] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 149.912783][ T9301] CPU: 1 UID: 0 PID: 9301 Comm: syz.4.996 Not tainted syzkaller #0 PREEMPT(full) [ 149.912809][ T9301] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 149.912818][ T9301] Call Trace: [ 149.912824][ T9301] [ 149.912831][ T9301] dump_stack_lvl+0xe8/0x150 [ 149.912860][ T9301] should_fail_ex+0x412/0x560 [ 149.912892][ T9301] should_failslab+0xa8/0x100 [ 149.912916][ T9301] __kmalloc_cache_noprof+0x88/0x660 [ 149.912938][ T9301] ? sctp_transport_new+0x7e/0x620 [ 149.912968][ T9301] sctp_transport_new+0x7e/0x620 [ 149.912996][ T9301] sctp_assoc_add_peer+0x259/0x13b0 [ 149.913021][ T9301] ? sctp_bind_addr_copy+0x380/0x3c0 [ 149.913048][ T9301] sctp_connect_new_asoc+0x329/0x6b0 [ 149.913074][ T9301] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 149.913098][ T9301] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 149.913121][ T9301] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 149.913142][ T9301] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 149.913165][ T9301] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 149.913186][ T9301] ? security_sctp_bind_connect+0x7e/0x2c0 [ 149.913211][ T9301] sctp_sendmsg+0x1528/0x2c10 [ 149.913246][ T9301] ? __pfx_sctp_sendmsg+0x10/0x10 [ 149.913271][ T9301] ? aa_sk_perm+0x6d5/0x900 [ 149.913303][ T9301] ? __pfx_aa_sk_perm+0x10/0x10 [ 149.913329][ T9301] ? sock_rps_record_flow+0x19/0x400 [ 149.913354][ T9301] ? inet_sendmsg+0x2f4/0x370 [ 149.913376][ T9301] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 149.913398][ T9301] ____sys_sendmsg+0x80a/0x9f0 [ 149.913424][ T9301] ? __pfx_____sys_sendmsg+0x10/0x10 [ 149.913454][ T9301] ? import_iovec+0x73/0xa0 [ 149.913478][ T9301] ___sys_sendmsg+0x2a5/0x360 [ 149.913506][ T9301] ? __pfx____sys_sendmsg+0x10/0x10 [ 149.913560][ T9301] ? __fget_files+0x2a/0x420 [ 149.913575][ T9301] ? __fget_files+0x3a0/0x420 [ 149.913599][ T9301] __x64_sys_sendmsg+0x1bd/0x2a0 [ 149.913624][ T9301] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 149.913664][ T9301] ? __pfx_ksys_write+0x10/0x10 [ 149.913692][ T9301] do_syscall_64+0x14d/0xf80 [ 149.913713][ T9301] ? trace_irq_disable+0x3b/0x150 [ 149.913728][ T9301] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.913745][ T9301] ? clear_bhb_loop+0x40/0x90 [ 149.913765][ T9301] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.913781][ T9301] RIP: 0033:0x7f8e1d19c819 [ 149.913797][ T9301] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 149.913813][ T9301] RSP: 002b:00007f8e1e093028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 149.913831][ T9301] RAX: ffffffffffffffda RBX: 00007f8e1d415fa0 RCX: 00007f8e1d19c819 [ 149.913844][ T9301] RDX: 0000000024000052 RSI: 00002000000001c0 RDI: 0000000000000003 [ 149.913855][ T9301] RBP: 00007f8e1e093090 R08: 0000000000000000 R09: 0000000000000000 [ 149.913865][ T9301] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 149.913875][ T9301] R13: 00007f8e1d416038 R14: 00007f8e1d415fa0 R15: 00007ffcd04bf4c8 [ 149.913903][ T9301] [ 150.245176][ T9305] lo: Caught tx_queue_len zero misconfig [ 150.418058][ T9318] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1003'. [ 150.443735][ T9318] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1003'. [ 150.459587][ T7501] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.482826][ T9318] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1003'. [ 150.756706][ T9342] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048) [ 150.922048][ T9353] FAULT_INJECTION: forcing a failure. [ 150.922048][ T9353] name failslab, interval 1, probability 0, space 0, times 0 [ 150.945586][ T9353] CPU: 1 UID: 0 PID: 9353 Comm: syz.4.1013 Not tainted syzkaller #0 PREEMPT(full) [ 150.945611][ T9353] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 150.945621][ T9353] Call Trace: [ 150.945628][ T9353] [ 150.945635][ T9353] dump_stack_lvl+0xe8/0x150 [ 150.945664][ T9353] should_fail_ex+0x412/0x560 [ 150.945695][ T9353] should_failslab+0xa8/0x100 [ 150.945719][ T9353] __kmalloc_cache_noprof+0x88/0x660 [ 150.945740][ T9353] ? sctp_transport_new+0x7e/0x620 [ 150.945770][ T9353] sctp_transport_new+0x7e/0x620 [ 150.945798][ T9353] sctp_assoc_add_peer+0x259/0x13b0 [ 150.945832][ T9353] sctp_sendmsg+0x2329/0x2c10 [ 150.945870][ T9353] ? __pfx_sctp_sendmsg+0x10/0x10 [ 150.945907][ T9353] ? __pfx_aa_sk_perm+0x10/0x10 [ 150.945936][ T9353] ? sock_rps_record_flow+0x19/0x400 [ 150.945963][ T9353] ? inet_sendmsg+0x2f4/0x370 [ 150.945985][ T9353] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 150.946009][ T9353] ____sys_sendmsg+0x80a/0x9f0 [ 150.946041][ T9353] ? __pfx_____sys_sendmsg+0x10/0x10 [ 150.946077][ T9353] ? import_iovec+0x73/0xa0 [ 150.946100][ T9353] ___sys_sendmsg+0x2a5/0x360 [ 150.946129][ T9353] ? __pfx____sys_sendmsg+0x10/0x10 [ 150.946184][ T9353] ? __fget_files+0x2a/0x420 [ 150.946200][ T9353] ? __fget_files+0x3a0/0x420 [ 150.946226][ T9353] __x64_sys_sendmsg+0x1bd/0x2a0 [ 150.946252][ T9353] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 150.946284][ T9353] ? __pfx_ksys_write+0x10/0x10 [ 150.946314][ T9353] do_syscall_64+0x14d/0xf80 [ 150.946337][ T9353] ? trace_irq_disable+0x3b/0x150 [ 150.946353][ T9353] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 150.946371][ T9353] ? clear_bhb_loop+0x40/0x90 [ 150.946399][ T9353] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 150.946416][ T9353] RIP: 0033:0x7f8e1d19c819 [ 150.946433][ T9353] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 150.946447][ T9353] RSP: 002b:00007f8e1e093028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 150.946466][ T9353] RAX: ffffffffffffffda RBX: 00007f8e1d415fa0 RCX: 00007f8e1d19c819 [ 150.946479][ T9353] RDX: 0000000024000052 RSI: 00002000000001c0 RDI: 0000000000000003 [ 150.946490][ T9353] RBP: 00007f8e1e093090 R08: 0000000000000000 R09: 0000000000000000 [ 150.946500][ T9353] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 150.946510][ T9353] R13: 00007f8e1d416038 R14: 00007f8e1d415fa0 R15: 00007ffcd04bf4c8 [ 150.946540][ T9353] [ 151.193557][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5240 ms [ 151.201688][ C1] lec:lec_tx_timeout: lec0 [ 151.208523][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 151.320480][ T9361] __nla_validate_parse: 5 callbacks suppressed [ 151.320499][ T9361] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1015'. [ 151.527106][ T9374] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1021'. [ 151.541105][ T9374] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1021'. [ 151.560161][ T9376] Cannot find del_set index 4 as target [ 151.830937][ T9392] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1028'. [ 151.891845][ T9397] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1027'. [ 151.904941][ T9397] tipc: Enabled bearer , priority 10 [ 151.982856][ T9392] netlink: 4824 bytes leftover after parsing attributes in process `syz.0.1028'. [ 152.286546][ T9417] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1035'. [ 152.308986][ T9417] openvswitch: netlink: Flow actions attr not present in new flow. [ 152.891500][ T9460] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.1048'. [ 152.926009][ T5875] tipc: Node number set to 3758096385 [ 153.360623][ T9490] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1058'. [ 153.475935][ T9493] veth0: entered promiscuous mode [ 153.556740][ T9493] bond4: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 153.582739][ T9493] bond4 (unregistering): Released all slaves [ 153.647200][ T9497] syzkaller1: entered promiscuous mode [ 153.665040][ T9497] syzkaller1: entered allmulticast mode [ 153.681933][ T9492] veth0: left promiscuous mode [ 153.776942][ T9512] syzkaller1: entered promiscuous mode [ 153.797779][ T9512] syzkaller1: entered allmulticast mode [ 153.898727][ T9523] openvswitch: netlink: IP tunnel dst address not specified [ 154.240471][ T9543] netlink: 'syz.0.1072': attribute type 12 has an invalid length. [ 154.460000][ T9556] ip6gre0: Master is either lo or non-ether device [ 154.479693][ T9556] bridge2: entered promiscuous mode [ 154.485788][ T9556] bridge2: entered allmulticast mode [ 154.756748][ T9580] Unknown options in mask b7f2 [ 154.885083][ T9585] netlink: 'syz.0.1087': attribute type 39 has an invalid length. [ 154.890049][ T9588] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1088'. [ 154.963794][ T9598] syz.4.1090 uses old SIOCAX25GETINFO [ 155.247411][ T9619] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 155.255495][ T9608] tipc: Started in network mode [ 155.260468][ T9608] tipc: Node identity 6a1404ed83b6, cluster identity 4711 [ 155.284387][ T9608] tipc: Enabled bearer , priority 0 [ 155.378700][ T9617] syzkaller0: entered promiscuous mode [ 155.385713][ T9617] syzkaller0: entered allmulticast mode [ 155.392083][ T9617] tipc: Resetting bearer [ 155.426977][ T9606] tipc: Resetting bearer [ 155.478636][ T9616] netlink: 'syz.1.1094': attribute type 1 has an invalid length. [ 156.485598][ T9606] tipc: Disabling bearer [ 156.573585][ T9636] __nla_validate_parse: 6 callbacks suppressed [ 156.573604][ T9636] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1100'. [ 156.616061][ T8506] tipc: Node number set to 3919709421 [ 156.635752][ T9636] netlink: 'syz.4.1100': attribute type 11 has an invalid length. [ 156.673082][ T9636] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1100'. [ 156.694951][ T9643] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 156.725971][ T9641] bond6: option arp_all_targets: invalid value (18446744073709551613) [ 156.738649][ T9641] bond6 (unregistering): Released all slaves [ 156.790553][ T9647] netlink: 'syz.2.1106': attribute type 2 has an invalid length. [ 156.795800][ T9648] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1104'. [ 156.821737][ T9648] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1104'. [ 157.002898][ T9663] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 157.022512][ T9661] tap0: tun_chr_ioctl cmd 2148553947 [ 157.094081][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5880 ms [ 157.102145][ C1] lec:lec_tx_timeout: lec0 [ 157.106165][ T9668] netlink: 'syz.4.1112': attribute type 1 has an invalid length. [ 157.107047][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 157.116328][ T9668] netlink: 244 bytes leftover after parsing attributes in process `syz.4.1112'. [ 157.254948][ T9674] only policy match revision 0 supported [ 157.254970][ T9674] unable to load match [ 157.377085][ T9689] netlink: 208 bytes leftover after parsing attributes in process `syz.3.1118'. [ 157.426467][ T9689] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 157.514604][ T9689] syzkaller0: entered promiscuous mode [ 157.520134][ T9689] syzkaller0: entered allmulticast mode [ 157.758788][ T9713] netlink: 'syz.2.1126': attribute type 4 has an invalid length. [ 157.969487][ T9735] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1133'. [ 158.042822][ T9735] netlink: 'syz.1.1133': attribute type 1 has an invalid length. [ 158.066746][ T9735] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1133'. [ 158.077962][ T9735] 8021q: VLANs not supported on ip6gre0 [ 158.427127][ T9772] sock: sock_set_timeout: `syz.0.1141' (pid 9772) tries to set negative timeout [ 158.565968][ T9779] netlink: 'syz.4.1145': attribute type 1 has an invalid length. [ 158.587785][ T9781] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1146'. [ 158.636293][ T9781] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 158.637460][ T9785] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1145'. [ 159.121650][ T9810] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.233780][ T9810] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 159.252170][ T9810] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 159.367899][ T9832] netlink: 'syz.3.1163': attribute type 1 has an invalid length. [ 159.478278][ T9832] 8021q: adding VLAN 0 to HW filter on device bond6 [ 159.511079][ T49] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 159.529963][ T49] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.546639][ T49] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 159.556044][ T49] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.579090][ T9838] bond6: (slave ip6gretap1): making interface the new active one [ 159.588107][ T9838] bond6: (slave ip6gretap1): Enslaving as an active interface with an up link [ 159.605419][ T9845] netlink: 'syz.2.1165': attribute type 1 has an invalid length. [ 159.622511][ T49] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 159.655620][ T49] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.702240][ T9845] netlink: 'syz.2.1165': attribute type 1 has an invalid length. [ 159.739966][ T9842] bond0: entered promiscuous mode [ 159.757286][ T9847] SET target dimension over the limit! [ 159.775828][ T9842] bond_slave_0: entered promiscuous mode [ 159.783265][ T9842] bond_slave_1: entered promiscuous mode [ 159.787089][ T9853] openvswitch: netlink: IPv4 tun info is not correct [ 159.790835][ T9842] bridge_slave_1: entered promiscuous mode [ 159.812729][ T9842] bond0: left promiscuous mode [ 159.819941][ T9842] bond_slave_0: left promiscuous mode [ 159.827041][ T9842] bond_slave_1: left promiscuous mode [ 159.833790][ T9842] bridge_slave_1: left promiscuous mode [ 159.847328][ T9] IPVS: starting estimator thread 0... [ 159.865266][ T9845] netlink: 'syz.2.1165': attribute type 1 has an invalid length. [ 159.868307][ T9853] netlink: 'syz.3.1168': attribute type 1 has an invalid length. [ 159.889776][ T9853] netlink: 'syz.3.1168': attribute type 1 has an invalid length. [ 159.892082][ T9845] netlink: 'syz.2.1165': attribute type 1 has an invalid length. [ 159.945422][ T9845] netlink: 'syz.2.1165': attribute type 1 has an invalid length. [ 159.953364][ T9855] IPVS: using max 37 ests per chain, 88800 per kthread [ 159.982495][ T9845] netlink: 'syz.2.1165': attribute type 1 has an invalid length. [ 160.012320][ T9845] netlink: 'syz.2.1165': attribute type 1 has an invalid length. [ 160.381022][ T9882] bond5: option packets_per_slave: invalid value (18446744073709551615) [ 160.390416][ T9882] bond5: option packets_per_slave: allowed values 0 - 65535 [ 160.415686][ T9882] bond5 (unregistering): Released all slaves [ 160.477750][ T9886] bond7: option fail_over_mac: invalid value (16) [ 160.486520][ T9886] bond7 (unregistering): Released all slaves [ 160.513094][ T9888] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 160.554684][ T9888] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 161.275175][ T7495] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 161.296082][ T7495] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 161.320985][ T7495] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 161.352013][ T7495] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 161.845006][ T9984] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 161.922263][ T9979] __nla_validate_parse: 85 callbacks suppressed [ 161.922284][ T9979] netlink: 300 bytes leftover after parsing attributes in process `syz.1.1207'. [ 162.127548][T10003] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1214'. [ 162.380787][T10012] 8021q: adding VLAN 0 to HW filter on device bond0 [ 162.389965][T10012] 8021q: adding VLAN 0 to HW filter on device team0 [ 162.408110][T10012] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 162.505617][T10018] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1219'. [ 162.682295][T10036] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1222'. [ 162.817264][T10032] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1222'. [ 162.854079][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5740 ms [ 162.856364][T10033] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1222'. [ 162.862157][ C1] lec:lec_tx_timeout: lec0 [ 162.875963][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 163.141078][T10061] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 163.153751][T10061] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1229'. [ 163.307805][T10068] vxcan1 speed is unknown, defaulting to 1000 [ 163.338433][T10068] vxcan1 speed is unknown, defaulting to 1000 [ 163.358783][T10074] FAULT_INJECTION: forcing a failure. [ 163.358783][T10074] name failslab, interval 1, probability 0, space 0, times 0 [ 163.378381][T10068] vxcan1 speed is unknown, defaulting to 1000 [ 163.404259][T10074] CPU: 1 UID: 0 PID: 10074 Comm: syz.1.1235 Not tainted syzkaller #0 PREEMPT(full) [ 163.404283][T10074] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 163.404293][T10074] Call Trace: [ 163.404300][T10074] [ 163.404306][T10074] dump_stack_lvl+0xe8/0x150 [ 163.404344][T10074] should_fail_ex+0x412/0x560 [ 163.404373][T10074] should_failslab+0xa8/0x100 [ 163.404398][T10074] __kmalloc_cache_noprof+0x88/0x660 [ 163.404419][T10074] ? sctp_add_bind_addr+0x8c/0x370 [ 163.404445][T10074] sctp_add_bind_addr+0x8c/0x370 [ 163.404469][T10074] sctp_copy_local_addr_list+0x314/0x4f0 [ 163.404494][T10074] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 163.404514][T10074] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 163.404536][T10074] ? sctp_v6_is_any+0x64/0x80 [ 163.404558][T10074] ? sctp_copy_one_addr+0x93/0x360 [ 163.404581][T10074] sctp_bind_addr_copy+0xb3/0x3c0 [ 163.404601][T10074] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 163.404628][T10074] sctp_connect_new_asoc+0x2ff/0x6b0 [ 163.404653][T10074] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 163.404681][T10074] ? __local_bh_enable_ip+0xd0/0x130 [ 163.404702][T10074] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 163.404724][T10074] ? security_sctp_bind_connect+0x7e/0x2c0 [ 163.404748][T10074] sctp_sendmsg+0x1528/0x2c10 [ 163.404784][T10074] ? __pfx_sctp_sendmsg+0x10/0x10 [ 163.404810][T10074] ? aa_sk_perm+0x6d5/0x900 [ 163.404842][T10074] ? __pfx_aa_sk_perm+0x10/0x10 [ 163.404867][T10074] ? sock_rps_record_flow+0x19/0x400 [ 163.404895][T10074] ? inet_sendmsg+0x2f4/0x370 [ 163.404922][T10074] ____sys_sendmsg+0x80a/0x9f0 [ 163.404952][T10074] ? __pfx_____sys_sendmsg+0x10/0x10 [ 163.404984][T10074] ? import_iovec+0x73/0xa0 [ 163.405008][T10074] ___sys_sendmsg+0x2a5/0x360 [ 163.405036][T10074] ? __pfx____sys_sendmsg+0x10/0x10 [ 163.405092][T10074] ? __fget_files+0x2a/0x420 [ 163.405108][T10074] ? __fget_files+0x3a0/0x420 [ 163.405130][T10074] __x64_sys_sendmsg+0x1bd/0x2a0 [ 163.405155][T10074] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 163.405187][T10074] ? __pfx_ksys_write+0x10/0x10 [ 163.405219][T10074] do_syscall_64+0x14d/0xf80 [ 163.405242][T10074] ? trace_irq_disable+0x3b/0x150 [ 163.405257][T10074] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.405275][T10074] ? clear_bhb_loop+0x40/0x90 [ 163.405297][T10074] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.405321][T10074] RIP: 0033:0x7fcd6c39c819 [ 163.405338][T10074] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 163.405352][T10074] RSP: 002b:00007fcd6a5f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 163.405370][T10074] RAX: ffffffffffffffda RBX: 00007fcd6c615fa0 RCX: 00007fcd6c39c819 [ 163.405383][T10074] RDX: 0000000024000052 RSI: 00002000000001c0 RDI: 0000000000000003 [ 163.405393][T10074] RBP: 00007fcd6a5f6090 R08: 0000000000000000 R09: 0000000000000000 [ 163.405404][T10074] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 163.405414][T10074] R13: 00007fcd6c616038 R14: 00007fcd6c615fa0 R15: 00007fff8c772ef8 [ 163.405442][T10074] [ 163.962976][T10068] infiniband syz2: set active [ 163.969504][ T24] vxcan1 speed is unknown, defaulting to 1000 [ 163.976767][T10068] infiniband syz2: added vxcan1 [ 163.996031][T10103] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1245'. [ 164.121841][T10068] RDS/IB: syz2: added [ 164.148432][T10068] smc: adding ib device syz2 with port count 1 [ 164.168673][T10068] smc: ib device syz2 port 1 has no pnetid [ 164.177701][ T9] vxcan1 speed is unknown, defaulting to 1000 [ 164.222582][T10068] vxcan1 speed is unknown, defaulting to 1000 [ 164.331193][T10120] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1251'. [ 164.419820][T10126] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1253'. [ 164.697198][T10153] Cannot find del_set index 4 as target [ 164.756220][T10160] bridge0: port 3(syz_tun) entered blocking state [ 164.770344][T10160] bridge0: port 3(syz_tun) entered disabled state [ 164.781613][T10160] syz_tun: entered allmulticast mode [ 164.791257][T10160] syz_tun: entered promiscuous mode [ 164.880631][T10163] bond1: (slave gre0): Device is not bonding slave [ 164.897837][T10163] bond1: option active_slave: invalid value (gre0) [ 164.910356][T10163] bond1 (unregistering): Released all slaves [ 164.941076][T10068] vxcan1 speed is unknown, defaulting to 1000 [ 164.961568][T10170] xt_hashlimit: size too large, truncated to 1048576 [ 165.072853][T10174] –: renamed from vxcan1 (while UP) [ 165.405304][T10190] syz.1.1274: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 165.439145][T10190] CPU: 0 UID: 0 PID: 10190 Comm: syz.1.1274 Not tainted syzkaller #0 PREEMPT(full) [ 165.439176][T10190] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 165.439189][T10190] Call Trace: [ 165.439197][T10190] [ 165.439206][T10190] dump_stack_lvl+0xe8/0x150 [ 165.439240][T10190] warn_alloc+0x249/0x340 [ 165.439268][T10190] ? stack_trace_save+0xa9/0x100 [ 165.439295][T10190] ? __pfx_warn_alloc+0x10/0x10 [ 165.439325][T10190] ? kasan_save_track+0x4f/0x80 [ 165.439346][T10190] ? kasan_save_track+0x3e/0x80 [ 165.439364][T10190] ? __kasan_kmalloc+0x93/0xb0 [ 165.439384][T10190] ? __kmalloc_cache_noprof+0x31c/0x660 [ 165.439404][T10190] ? xskq_create+0x56/0x170 [ 165.439427][T10190] ? xsk_setsockopt+0x54c/0x990 [ 165.439448][T10190] ? do_sock_setsockopt+0x17c/0x1b0 [ 165.439472][T10190] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 165.439496][T10190] ? do_syscall_64+0x14d/0xf80 [ 165.439526][T10190] __vmalloc_node_range_noprof+0x132/0x1730 [ 165.439577][T10190] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 165.439606][T10190] ? __kasan_kmalloc+0x93/0xb0 [ 165.439634][T10190] vmalloc_user_noprof+0xad/0xe0 [ 165.439657][T10190] ? xskq_create+0xbf/0x170 [ 165.439682][T10190] xskq_create+0xbf/0x170 [ 165.439709][T10190] xsk_init_queue+0x8a/0xe0 [ 165.439735][T10190] xsk_setsockopt+0x54c/0x990 [ 165.439761][T10190] ? __pfx_xsk_setsockopt+0x10/0x10 [ 165.439784][T10190] ? __pfx_aa_sk_perm+0x10/0x10 [ 165.439815][T10190] ? aa_sock_opt_perm+0xff/0x1a0 [ 165.439839][T10190] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 165.439863][T10190] ? __pfx_xsk_setsockopt+0x10/0x10 [ 165.439888][T10190] do_sock_setsockopt+0x17c/0x1b0 [ 165.439919][T10190] __x64_sys_setsockopt+0x13d/0x1b0 [ 165.439948][T10190] do_syscall_64+0x14d/0xf80 [ 165.439974][T10190] ? trace_irq_disable+0x3b/0x150 [ 165.439990][T10190] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.440008][T10190] ? clear_bhb_loop+0x40/0x90 [ 165.440032][T10190] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.440051][T10190] RIP: 0033:0x7fcd6c39c819 [ 165.440078][T10190] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 165.440094][T10190] RSP: 002b:00007fcd6a5f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 165.440118][T10190] RAX: ffffffffffffffda RBX: 00007fcd6c615fa0 RCX: 00007fcd6c39c819 [ 165.440132][T10190] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000007 [ 165.440144][T10190] RBP: 00007fcd6c432c91 R08: 0000000000000004 R09: 0000000000000000 [ 165.440156][T10190] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 165.440169][T10190] R13: 00007fcd6c616038 R14: 00007fcd6c615fa0 R15: 00007fff8c772ef8 [ 165.440200][T10190] [ 165.441386][T10190] Mem-Info: [ 165.720071][T10068] vxcan1 speed is unknown, defaulting to 1000 [ 165.860394][T10190] active_anon:6179 inactive_anon:0 isolated_anon:0 [ 165.860394][T10190] active_file:3219 inactive_file:39968 isolated_file:0 [ 165.860394][T10190] unevictable:768 dirty:55 writeback:0 [ 165.860394][T10190] slab_reclaimable:11441 slab_unreclaimable:99418 [ 165.860394][T10190] mapped:29277 shmem:1363 pagetables:1328 [ 165.860394][T10190] sec_pagetables:0 bounce:0 [ 165.860394][T10190] kernel_misc_reclaimable:0 [ 165.860394][T10190] free:1328423 free_pcp:9154 free_cma:0 [ 165.961523][T10190] Node 0 active_anon:24816kB inactive_anon:0kB active_file:12876kB inactive_file:159664kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:117108kB dirty:216kB writeback:0kB shmem:3916kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13144kB pagetables:5176kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 166.005743][T10190] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:136kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 166.041060][T10190] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 166.074989][T10190] lowmem_reserve[]: 0 2492 2493 2493 2493 [ 166.086055][T10190] Node 0 DMA32 free:1355420kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB free_highatomic:0KB active_anon:24816kB inactive_anon:0kB active_file:12876kB inactive_file:159664kB unevictable:1536kB writepending:216kB zspages:0kB present:3129332kB managed:2552580kB mlocked:0kB bounce:0kB free_pcp:33996kB local_pcp:13116kB free_cma:0kB [ 166.190982][T10190] lowmem_reserve[]: 0 0 0 0 0 [ 166.195862][T10190] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:876kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 166.268512][T10190] lowmem_reserve[]: 0 0 0 0 0 [ 166.280284][T10190] Node 1 Normal free:3943568kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 166.326904][T10190] lowmem_reserve[]: 0 0 0 0 0 [ 166.363785][T10190] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 166.380432][T10190] Node 0 DMA32: 3393*4kB (UME) 1863*8kB (UM) 738*16kB (UME) 445*32kB (UME) 69*64kB (UM) 72*128kB (UM) 111*256kB (UME) 95*512kB (UME) 75*1024kB (UME) 48*2048kB (UM) 253*4096kB (UM) = 1356604kB [ 166.459782][T10224] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 166.480286][T10190] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 166.490029][T10068] vxcan1 speed is unknown, defaulting to 1000 [ 166.528601][T10190] Node 1 Normal: 0*4kB 12*8kB (UM) 9*16kB (UM) 7*32kB (UM) 13*64kB (UM) 3*128kB (UM) 2*256kB (M) 4*512kB (UM) 1*1024kB (M) 1*2048kB (U) 961*4096kB (UM) = 3943568kB [ 166.589898][T10190] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 166.600945][T10190] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 166.649502][T10190] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 166.683396][T10190] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 166.706838][T10238] syzkaller1: entered promiscuous mode [ 166.712346][T10238] syzkaller1: entered allmulticast mode [ 166.727927][T10190] 44546 total pagecache pages [ 166.794156][T10190] 0 pages in swap cache [ 166.800446][T10190] Free swap = 124996kB [ 166.804885][T10190] Total swap = 124996kB [ 166.814242][T10190] 2097051 pages RAM [ 166.818068][T10190] 0 pages HighMem/MovableOnly [ 166.832956][T10190] 427072 pages reserved [ 166.843077][T10190] 0 pages cma reserved [ 166.941154][T10247] syz.2.1285 (10247) used greatest stack depth: 17472 bytes left [ 166.960596][T10068] vxcan1 speed is unknown, defaulting to 1000 [ 166.970097][T10253] delete_channel: no stack [ 167.180743][T10265] validate_nla: 65 callbacks suppressed [ 167.180763][T10265] netlink: 'syz.1.1291': attribute type 29 has an invalid length. [ 167.205711][T10265] __nla_validate_parse: 8 callbacks suppressed [ 167.205728][T10265] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1291'. [ 167.261053][T10272] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1294'. [ 167.301841][T10276] bond0: entered promiscuous mode [ 167.307124][T10276] bond_slave_0: entered promiscuous mode [ 167.314990][T10276] bond_slave_1: entered promiscuous mode [ 167.320851][T10276] bridge_slave_1: entered promiscuous mode [ 167.356181][T10276] batadv0: entered promiscuous mode [ 167.393238][T10276] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 167.415536][T10276] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 167.472479][T10276] bond0: left promiscuous mode [ 167.490930][T10276] bond_slave_0: left promiscuous mode [ 167.515050][T10276] bond_slave_1: left promiscuous mode [ 167.532797][T10276] bridge_slave_1: left promiscuous mode [ 167.565795][T10276] batadv0: left promiscuous mode [ 167.782652][T10290] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1299'. [ 167.883272][T10296] netdevsim netdevsim1 : renamed from netdevsim0 [ 167.884134][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 167.897786][ C1] lec:lec_tx_timeout: lec0 [ 167.903675][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 167.923800][T10267] infiniband sy‡1: set active [ 167.928782][T10267] infiniband sy‡1: added bond0 [ 167.962706][T10301] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 167.984394][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 167.999599][T10267] RDS/IB: sy‡1: added [ 168.003668][T10267] smc: adding ib device sy‡1 with port count 1 [ 168.027198][T10267] smc: ib device sy‡1 port 1 has no pnetid [ 168.276865][T10305] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1302'. [ 168.484506][T10307] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.492245][T10307] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.715947][T10307] veth0_to_bond: left allmulticast mode [ 168.729411][T10321] x_tables: duplicate underflow at hook 2 [ 168.893378][T10307] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 168.942259][T10330] netlink: 211792 bytes leftover after parsing attributes in process `syz.0.1306'. [ 169.410167][T10307] bond5: left promiscuous mode [ 169.418735][T10307] bridge3: left promiscuous mode [ 169.554132][ T5997] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 169.563366][ T5997] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.605008][ T7502] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 169.613962][ T7502] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.634412][ T7502] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 169.643335][ T7502] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.652404][ T7502] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 169.692839][ T7502] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.730712][T10342] syzkaller1: entered promiscuous mode [ 169.736483][T10342] syzkaller1: entered allmulticast mode [ 169.745679][T10342] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1308'. [ 169.806852][T10342] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1308'. [ 169.812044][T10346] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1310'. [ 169.963890][T10356] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1312'. [ 170.199142][T10368] syzkaller0: entered promiscuous mode [ 170.206549][T10368] syzkaller0: entered allmulticast mode [ 170.369764][T10382] netdevsim netdevsim1 netdevsim1: entered allmulticast mode [ 170.411900][T10381] netdevsim netdevsim1 netdevsim1: left allmulticast mode [ 170.451718][T10384] netlink: 1 bytes leftover after parsing attributes in process `syz.0.1320'. [ 170.723136][T10400] sctp: [Deprecated]: syz.1.1325 (pid 10400) Use of struct sctp_assoc_value in delayed_ack socket option. [ 170.723136][T10400] Use struct sctp_sack_info instead [ 171.262954][T10436] bond_slave_1: Device is already in use. [ 171.339717][T10441] tipc: Enabling not permitted [ 171.369252][T10441] tipc: Enabling of bearer rejected, failed to enable media [ 171.476743][T10441] tipc: Enabling not permitted [ 171.546025][T10441] tipc: Enabling of bearer rejected, failed to enable media [ 171.599655][T10441] tipc: Enabling not permitted [ 171.611235][T10441] tipc: Enabling of bearer rejected, failed to enable media [ 171.627815][T10441] tipc: Enabling not permitted [ 171.658336][T10441] tipc: Enabling of bearer rejected, failed to enable media [ 171.698129][T10441] tipc: Enabling not permitted [ 171.720424][T10441] tipc: Enabling of bearer rejected, failed to enable media [ 171.749633][T10441] tipc: Enabling not permitted [ 171.764710][T10455] IPv6: NLM_F_CREATE should be specified when creating new route [ 171.780319][T10441] tipc: Enabling of bearer rejected, failed to enable media [ 171.807185][T10441] tipc: Enabling not permitted [ 171.824741][T10441] tipc: Enabling of bearer rejected, failed to enable media [ 171.849378][T10441] tipc: Enabling not permitted [ 171.867028][T10441] tipc: Enabling of bearer rejected, failed to enable media [ 171.894967][T10441] tipc: Enabling not permitted [ 171.911635][T10441] tipc: Enabling of bearer rejected, failed to enable media [ 171.961347][T10441] tipc: Enabling not permitted [ 172.018431][T10441] tipc: Enabling of bearer rejected, failed to enable media [ 172.111068][T10463] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 172.267207][T10475] __nla_validate_parse: 4 callbacks suppressed [ 172.267228][T10475] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1343'. [ 172.325864][T10475] bond5: entered promiscuous mode [ 172.331289][T10475] 8021q: adding VLAN 0 to HW filter on device bond5 [ 172.426259][T10482] bridge3: entered promiscuous mode [ 172.450126][T10482] bond5: (slave bridge3): Enslaving as an active interface with an up link [ 172.469608][T10475] macvlan4: entered promiscuous mode [ 172.478880][T10475] macvlan4: entered allmulticast mode [ 172.494496][T10475] bond5: (slave macvlan4): Error -98 calling set_mac_address [ 172.499464][T10492] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1346'. [ 172.540203][T10491] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1346'. [ 172.639124][T10500] syzkaller0: entered promiscuous mode [ 172.646093][T10500] syzkaller0: entered allmulticast mode [ 172.677276][T10498] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1347'. [ 172.687340][T10498] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1347'. [ 172.690058][T10503] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1349'. [ 172.709985][T10503] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1349'. [ 172.725888][T10503] gretap3: entered promiscuous mode [ 172.731352][T10503] gretap3: entered allmulticast mode [ 172.865242][T10517] netlink: 'syz.4.1351': attribute type 10 has an invalid length. [ 172.914090][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 172.922133][ C1] lec:lec_tx_timeout: lec0 [ 172.926855][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 172.931404][T10522] netlink: 'syz.3.1350': attribute type 1 has an invalid length. [ 173.029943][T10522] 8021q: adding VLAN 0 to HW filter on device bond7 [ 173.139829][T10530] bond7: (slave geneve2): making interface the new active one [ 173.150922][T10530] bond7: (slave geneve2): Enslaving as an active interface with an up link [ 173.194935][T10541] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.1356'. [ 173.195288][ T49] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 20004 - 0 [ 173.226301][T10541] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.1356'. [ 173.238001][ T49] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 20004 - 0 [ 173.246958][T10542] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.1356'. [ 173.304507][ T7502] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 20004 - 0 [ 173.313351][ T7502] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 20004 - 0 [ 173.446759][T10546] netlink: 'syz.0.1358': attribute type 39 has an invalid length. [ 173.464481][T10554] openvswitch: netlink: IPv4 frag type 127 is out of range max 2 [ 173.540536][T10557] gretap2: entered promiscuous mode [ 173.547229][T10557] batman_adv: batadv0: Adding interface: gretap2 [ 173.553846][T10557] batman_adv: batadv0: The MTU of interface gretap2 is too small (1462) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1500. [ 173.579786][T10557] batman_adv: batadv0: Not using interface gretap2 (retrying later): interface not active [ 174.145523][T10603] openvswitch: netlink: Key type 1023 is out of range max 32 [ 174.157893][T10604] netlink: 'syz.3.1377': attribute type 11 has an invalid length. [ 174.246976][T10608] netlink: 'syz.0.1379': attribute type 1 has an invalid length. [ 174.472380][T10619] syzkaller0: entered promiscuous mode [ 174.501976][T10619] syzkaller0: entered allmulticast mode [ 174.639770][T10629] 0: reclassify loop, rule prio 0, protocol 800 [ 174.897235][T10639] bond0: entered promiscuous mode [ 174.902295][T10639] bond_slave_0: entered promiscuous mode [ 174.908237][T10639] bond_slave_1: entered promiscuous mode [ 174.914018][T10639] bridge_slave_1: entered promiscuous mode [ 174.922513][T10639] batadv0: entered promiscuous mode [ 174.928809][T10639] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 174.938917][T10639] hsr1: entered promiscuous mode [ 174.943897][T10639] hsr1: entered allmulticast mode [ 174.949919][T10639] bond0: entered allmulticast mode [ 174.955470][T10639] bond_slave_0: entered allmulticast mode [ 174.961213][T10639] bond_slave_1: entered allmulticast mode [ 174.967005][T10639] bridge_slave_1: entered allmulticast mode [ 174.972911][T10639] batadv0: entered allmulticast mode [ 174.978648][T10639] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 174.986226][T10639] bond0: left promiscuous mode [ 174.991164][T10639] bond_slave_0: left promiscuous mode [ 174.997094][T10639] bond_slave_1: left promiscuous mode [ 175.002622][T10639] bridge_slave_1: left promiscuous mode [ 175.009770][T10639] batadv0: left promiscuous mode [ 175.408421][T10655] netlink: 'syz.3.1391': attribute type 1 has an invalid length. [ 175.429998][T10655] bond8: entered promiscuous mode [ 175.435558][T10655] 8021q: adding VLAN 0 to HW filter on device bond8 [ 176.003735][T10658] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 176.011712][T10658] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 176.050769][T10660] netlink: 'syz.2.1393': attribute type 1 has an invalid length. [ 177.415158][T10621] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 177.548905][T10677] netlink: 'syz.3.1402': attribute type 8 has an invalid length. [ 177.682650][T10692] netlink: 'syz.1.1403': attribute type 4 has an invalid length. [ 177.690947][T10692] __nla_validate_parse: 8 callbacks suppressed [ 177.690962][T10692] netlink: 17 bytes leftover after parsing attributes in process `syz.1.1403'. [ 177.709215][T10692] netlink: 14601 bytes leftover after parsing attributes in process `syz.1.1403'. [ 177.909054][T10714] bond3: option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 177.925664][T10714] bond3 (unregistering): Released all slaves [ 177.934099][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 177.942134][ C1] lec:lec_tx_timeout: lec0 [ 177.946876][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 177.965819][T10717] netlink: 'syz.0.1410': attribute type 1 has an invalid length. [ 178.027162][T10723] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1412'. [ 178.036576][T10723] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1412'. [ 178.053247][T10723] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1412'. [ 178.062551][T10723] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1412'. [ 178.108866][T10725] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1413'. [ 178.119345][T10725] netlink: 85 bytes leftover after parsing attributes in process `syz.1.1413'. [ 178.263781][T10732] netlink: 'syz.1.1416': attribute type 1 has an invalid length. [ 178.286557][T10732] 8021q: adding VLAN 0 to HW filter on device bond6 [ 178.303105][T10732] bond6: (slave geneve3): making interface the new active one [ 178.312010][T10732] bond6: (slave geneve3): Enslaving as an active interface with an up link [ 178.320857][ T5997] netdevsim netdevsim1 : set [1, 0] type 2 family 0 port 6081 - 0 [ 178.329622][ T5997] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.342149][ T5997] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.352661][ T5997] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.456434][T10739] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1418'. [ 180.589332][T10683] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 181.261596][T10777] syzkaller0: entered promiscuous mode [ 181.268012][T10777] syzkaller0: entered allmulticast mode [ 181.281896][T10780] tc action pedit offset must be on 32 bit boundaries [ 181.330177][T10782] xt_l2tp: v2 tid > 0xffff: 1114244 [ 181.331540][T10786] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1434'. [ 181.517415][T10794] bond0: entered promiscuous mode [ 181.541642][T10794] bond_slave_0: entered promiscuous mode [ 181.564890][T10794] bond_slave_1: entered promiscuous mode [ 181.768426][T10814] bond0: option arp_interval: invalid value (18446744073575336369) [ 181.779792][T10814] bond0: option arp_interval: allowed values 0 - 2147483647 [ 181.873284][T10817] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 181.926133][T10824] openvswitch: netlink: VXLAN extension 0 has unexpected len 2 expected 0 [ 182.113366][T10834] veth0: entered promiscuous mode [ 182.176765][T10834] veth0: left promiscuous mode [ 182.310959][T10846] veth0: entered promiscuous mode [ 182.363681][T10845] netlink: 'syz.4.1451': attribute type 3 has an invalid length. [ 182.371636][T10845] netlink: 'syz.4.1451': attribute type 1 has an invalid length. [ 182.381354][T10845] NCSI netlink: No device for ifindex 813332851 [ 182.419704][T10851] veth0: left promiscuous mode [ 182.555139][T10861] nftables ruleset with unbound set [ 182.742404][T10875] __nla_validate_parse: 4 callbacks suppressed [ 182.742424][T10875] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1458'. [ 182.954091][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 182.962187][ C1] lec:lec_tx_timeout: lec0 [ 182.966887][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 182.978814][T10889] netlink: 'syz.1.1463': attribute type 6 has an invalid length. [ 183.010244][T10894] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1465'. [ 183.055724][T10897] netlink: 'syz.2.1462': attribute type 15 has an invalid length. [ 183.059362][T10899] netlink: 'syz.4.1466': attribute type 25 has an invalid length. [ 183.063584][T10897] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1462'. [ 183.083883][T10894] lo: Caught tx_queue_len zero misconfig [ 183.191461][ T5997] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 2816 - 0 [ 183.191584][T10897] netlink: 'syz.2.1462': attribute type 15 has an invalid length. [ 183.212525][ T5997] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 2816 - 0 [ 183.236398][T10907] xt_TCPMSS: Only works on TCP SYN packets [ 183.243897][ T5997] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 2816 - 0 [ 183.256394][T10897] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1462'. [ 183.274748][T10909] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1469'. [ 183.285375][T10909] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1469'. [ 183.377751][T10914] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1470'. [ 185.895430][T10884] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 186.169647][T10925] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1471'. [ 186.453640][T10947] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1480'. [ 186.465456][T10947] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1480'. [ 187.747985][T11033] __nla_validate_parse: 12 callbacks suppressed [ 187.748007][T11033] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1506'. [ 187.785457][T11036] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1507'. [ 187.964022][T11047] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1511'. [ 187.974088][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 187.982099][ C1] lec:lec_tx_timeout: lec0 [ 187.987098][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 188.094311][T11053] netlink: 'syz.2.1512': attribute type 12 has an invalid length. [ 188.299716][T11053] bond1: option primary_reselect: invalid value (255) [ 188.321302][T11053] bond1 (unregistering): Released all slaves [ 188.576203][T11069] sch_fq: defrate 0 ignored. [ 188.805607][T11077] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.1519'. [ 188.989768][T11086] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1522'. [ 188.994525][T11087] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1522'. [ 189.293002][T11108] batadv_slave_0: Caught tx_queue_len zero misconfig [ 189.435282][T11112] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1527'. [ 189.603358][T11126] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1532'. [ 189.624328][T11127] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1532'. [ 189.837930][T11141] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 190.027150][T11155] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.1545'. [ 190.190774][T11165] IPVS: Error joining to the multicast group [ 190.472715][T11184] netlink: 'syz.1.1554': attribute type 1 has an invalid length. [ 190.941898][ T8505] vxcan1 speed is unknown, defaulting to 1000 [ 191.518329][T11246] 8021q: adding VLAN 0 to HW filter on device bond4 [ 191.956862][T11286] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 191.990858][T11288] syzkaller0: entered promiscuous mode [ 191.997556][T11288] syzkaller0: entered allmulticast mode [ 192.639157][T11332] x_tables: unsorted underflow at hook 2 [ 192.660288][T11330] netlink: 'syz.4.1604': attribute type 11 has an invalid length. [ 192.961239][T11349] netlink: 'syz.0.1612': attribute type 21 has an invalid length. [ 192.969321][T11349] __nla_validate_parse: 9 callbacks suppressed [ 192.969340][T11349] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1612'. [ 192.991341][T11349] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1612'. [ 192.994278][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 193.008389][ C1] lec:lec_tx_timeout: lec0 [ 193.013392][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 193.024007][T11348] delete_channel: no stack [ 193.078945][T11351] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1613'. [ 193.096843][T11351] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap3 [ 193.270345][T11363] netlink: 'syz.4.1617': attribute type 10 has an invalid length. [ 193.298932][T11362] netlink: 'syz.4.1617': attribute type 10 has an invalid length. [ 193.397345][T11382] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 193.516162][T11393] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1623'. [ 193.545948][T11393] netlink: 'syz.2.1623': attribute type 5 has an invalid length. [ 193.553739][T11393] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1623'. [ 193.623561][T11393] geneve3: entered promiscuous mode [ 193.633104][T11393] geneve3: entered allmulticast mode [ 193.661225][ T49] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 256 - 0 [ 193.677206][ T49] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 256 - 0 [ 193.698464][T11404] ip6tnl0: Caught tx_queue_len zero misconfig [ 193.715209][ T49] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 256 - 0 [ 193.787688][T11408] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1630'. [ 194.099710][T11429] netlink: 'syz.1.1633': attribute type 23 has an invalid length. [ 194.222543][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.229069][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.362632][T11445] netlink: 'syz.2.1639': attribute type 1 has an invalid length. [ 194.453337][T11453] IPv6: NLM_F_CREATE should be specified when creating new route [ 194.464806][T11453] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1642'. [ 194.981668][T11441] netlink: 284 bytes leftover after parsing attributes in process `syz.4.1637'. [ 194.992474][T11449] team_slave_1: Caught tx_queue_len zero misconfig [ 195.067570][T11464] veth0_virt_wifi: Caught tx_queue_len zero misconfig [ 195.105818][T11471] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1646'. [ 195.144488][T11472] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1647'. [ 195.156861][T11472] netlink: 'syz.4.1647': attribute type 5 has an invalid length. [ 195.294716][T11482] openvswitch: netlink: Invalid MD length 0 for MD type 0 [ 195.301916][T11482] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 195.413563][T11482] sch_tbf: burst 12 is lower than device bridge3 mtu (1514) ! [ 195.438921][T11482] ip6tnl0: Caught tx_queue_len zero misconfig [ 195.652822][T11496] syzkaller0: entered promiscuous mode [ 195.658607][T11496] syzkaller0: entered allmulticast mode [ 196.308640][ T5825] Bluetooth: hci1: command 0x0406 tx timeout [ 196.308989][ T51] Bluetooth: hci3: command 0x0406 tx timeout [ 196.314778][ T5825] Bluetooth: hci2: command 0x0406 tx timeout [ 196.320799][ T5820] Bluetooth: hci0: command 0x0406 tx timeout [ 197.252350][T11538] netlink: 'syz.4.1671': attribute type 10 has an invalid length. [ 197.360480][T11543] netlink: 'syz.3.1674': attribute type 1 has an invalid length. [ 197.442250][T11545] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 197.458761][T11545] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 197.491682][T11545] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 197.503352][T11545] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 197.516169][T11545] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 197.527787][T11545] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 197.564881][T11545] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 197.610805][T11545] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 197.654506][T11545] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 197.688280][T11545] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 198.241401][T11576] __nla_validate_parse: 11 callbacks suppressed [ 198.241424][T11576] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1681'. [ 198.461760][T11583] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1683'. [ 199.337889][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 6320 ms [ 199.345961][ C1] lec:lec_tx_timeout: lec0 [ 199.350650][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 199.778310][T11573] tunl0: Caught tx_queue_len zero misconfig [ 199.902416][T11587] IPVS: persistence engine module ip_vs_pe_À not found [ 199.916942][T11587] Unsupported ieee802154 address type: 0 [ 200.016797][T11593] netlink: 'syz.0.1685': attribute type 1 has an invalid length. [ 200.037210][T11594] syzkaller1: entered promiscuous mode [ 200.042828][T11594] syzkaller1: entered allmulticast mode [ 200.046917][T11593] netlink: 'syz.0.1685': attribute type 3 has an invalid length. [ 200.062467][T11593] netlink: 172 bytes leftover after parsing attributes in process `syz.0.1685'. [ 200.074774][T11593] NCSI netlink: No device for ifindex 813332851 [ 200.145940][T11600] syzkaller0: entered promiscuous mode [ 200.168705][T11600] syzkaller0: entered allmulticast mode [ 200.297897][T11613] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1691'. [ 200.303288][T11600] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1689'. [ 200.365556][T11616] ================================================================== [ 200.373680][T11616] BUG: KASAN: slab-out-of-bounds in af_alg_pull_tsgl+0x1c6/0x740 [ 200.381424][T11616] Read of size 8 at addr ffff8880298c2820 by task syz.0.1692/11616 [ 200.389330][T11616] [ 200.391655][T11616] CPU: 1 UID: 0 PID: 11616 Comm: syz.0.1692 Not tainted syzkaller #0 PREEMPT(full) [ 200.391672][T11616] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 200.391680][T11616] Call Trace: [ 200.391688][T11616] [ 200.391695][T11616] dump_stack_lvl+0xe8/0x150 [ 200.391718][T11616] print_report+0xba/0x230 [ 200.391733][T11616] ? af_alg_pull_tsgl+0x1c6/0x740 [ 200.391753][T11616] kasan_report+0x117/0x150 [ 200.391771][T11616] ? af_alg_pull_tsgl+0x1c6/0x740 [ 200.391792][T11616] af_alg_pull_tsgl+0x1c6/0x740 [ 200.391817][T11616] skcipher_recvmsg+0x5df/0x1140 [ 200.391838][T11616] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 200.391852][T11616] ? skcipher_check_key+0x173/0x1e0 [ 200.391867][T11616] ? skcipher_check_key+0x173/0x1e0 [ 200.391881][T11616] ? __pfx_skcipher_recvmsg_nokey+0x10/0x10 [ 200.391897][T11616] ? __pfx_skcipher_recvmsg_nokey+0x10/0x10 [ 200.391912][T11616] sock_recvmsg+0x172/0x1b0 [ 200.391927][T11616] __sys_recvfrom+0x240/0x3c0 [ 200.391945][T11616] ? __pfx___sys_recvfrom+0x10/0x10 [ 200.391969][T11616] ? exc_page_fault+0x6a/0xc0 [ 200.391988][T11616] ? do_user_addr_fault+0xc6f/0x1340 [ 200.392008][T11616] __x64_sys_recvfrom+0xde/0x100 [ 200.392025][T11616] do_syscall_64+0x14d/0xf80 [ 200.392043][T11616] ? trace_irq_disable+0x3b/0x150 [ 200.392054][T11616] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 200.392067][T11616] ? clear_bhb_loop+0x40/0x90 [ 200.392082][T11616] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 200.392095][T11616] RIP: 0033:0x7f042895d04e [ 200.392109][T11616] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 200.392121][T11616] RSP: 002b:00007f042980ee88 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 200.392136][T11616] RAX: ffffffffffffffda RBX: 00007f04298106c0 RCX: 00007f042895d04e [ 200.392146][T11616] RDX: 0000000000001000 RSI: 00007f042980f000 RDI: 0000000000000004 [ 200.392155][T11616] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 200.392163][T11616] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 200.392171][T11616] R13: 00007f042980ef58 R14: 00007f042980f000 R15: 0000000000000000 [ 200.392187][T11616] [ 200.392191][T11616] [ 200.610831][T11616] Allocated by task 11616: [ 200.615238][T11616] kasan_save_track+0x3e/0x80 [ 200.619908][T11616] __kasan_kmalloc+0x93/0xb0 [ 200.624489][T11616] __kmalloc_noprof+0x35c/0x760 [ 200.629332][T11616] sock_kmalloc+0xd6/0x160 [ 200.633735][T11616] skcipher_recvmsg+0x54d/0x1140 [ 200.638660][T11616] sock_recvmsg+0x172/0x1b0 [ 200.643144][T11616] __sys_recvfrom+0x240/0x3c0 [ 200.647804][T11616] __x64_sys_recvfrom+0xde/0x100 [ 200.652726][T11616] do_syscall_64+0x14d/0xf80 [ 200.657308][T11616] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 200.663185][T11616] [ 200.665491][T11616] The buggy address belongs to the object at ffff8880298c2800 [ 200.665491][T11616] which belongs to the cache kmalloc-32 of size 32 [ 200.679360][T11616] The buggy address is located 0 bytes to the right of [ 200.679360][T11616] allocated 32-byte region [ffff8880298c2800, ffff8880298c2820) [ 200.693744][T11616] [ 200.696057][T11616] The buggy address belongs to the physical page: [ 200.702450][T11616] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x298c2 [ 200.711200][T11616] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 200.718293][T11616] page_type: f5(slab) [ 200.722260][T11616] raw: 00fff00000000000 ffff88813fea6780 dead000000000100 dead000000000122 [ 200.730871][T11616] raw: 0000000000000000 0000000800400040 00000000f5000000 0000000000000000 [ 200.739445][T11616] page dumped because: kasan: bad access detected [ 200.745848][T11616] page_owner tracks the page as allocated [ 200.751542][T11616] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd2800(GFP_NOWAIT|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 7240, tgid 7240 (modprobe), ts 102808833487, free_ts 102760037378 [ 200.770968][T11616] post_alloc_hook+0x231/0x280 [ 200.775720][T11616] get_page_from_freelist+0x24dc/0x2580 [ 200.781256][T11616] __alloc_frozen_pages_noprof+0x18d/0x380 [ 200.787049][T11616] allocate_slab+0x77/0x660 [ 200.791540][T11616] refill_objects+0x331/0x3c0 [ 200.796208][T11616] __pcs_replace_empty_main+0x2e6/0x730 [ 200.801746][T11616] __kmalloc_cache_noprof+0x392/0x660 [ 200.807100][T11616] kmem_cache_free+0x15b/0x630 [ 200.811847][T11616] task_work_run+0x1d9/0x270 [ 200.816419][T11616] do_exit+0x70f/0x23c0 [ 200.820559][T11616] do_group_exit+0x21b/0x2d0 [ 200.825160][T11616] __x64_sys_exit_group+0x3f/0x40 [ 200.830175][T11616] x64_sys_call+0x221a/0x2240 [ 200.834839][T11616] do_syscall_64+0x14d/0xf80 [ 200.839419][T11616] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 200.845294][T11616] page last free pid 5816 tgid 5816 stack trace: [ 200.851602][T11616] __free_frozen_pages+0xc2b/0xdb0 [ 200.856696][T11616] __kasan_populate_vmalloc+0x137/0x1d0 [ 200.862225][T11616] alloc_vmap_area+0xd73/0x14b0 [ 200.867075][T11616] __get_vm_area_node+0x1f8/0x300 [ 200.872080][T11616] __vmalloc_node_range_noprof+0x372/0x1730 [ 200.877960][T11616] vzalloc_noprof+0xb2/0xe0 [ 200.882457][T11616] __do_replace+0xb3/0x990 [ 200.886854][T11616] do_ipt_set_ctl+0xb45/0xe00 [ 200.891515][T11616] nf_setsockopt+0x26f/0x290 [ 200.896094][T11616] do_sock_setsockopt+0x17c/0x1b0 [ 200.901104][T11616] __x64_sys_setsockopt+0x13d/0x1b0 [ 200.906285][T11616] do_syscall_64+0x14d/0xf80 [ 200.910862][T11616] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 200.916738][T11616] [ 200.919044][T11616] Memory state around the buggy address: [ 200.924653][T11616] ffff8880298c2700: 00 00 00 fc fc fc fc fc fa fb fb fb fc fc fc fc [ 200.932699][T11616] ffff8880298c2780: fa fb fb fb fc fc fc fc fa fb fb fb fc fc fc fc [ 200.940745][T11616] >ffff8880298c2800: 00 00 00 00 fc fc fc fc 00 00 00 fc fc fc fc fc [ 200.948783][T11616] ^ [ 200.953873][T11616] ffff8880298c2880: fa fb fb fb fc fc fc fc fa fb fb fb fc fc fc fc [ 200.961915][T11616] ffff8880298c2900: fa fb fb fb fc fc fc fc fa fb fb fb fc fc fc fc [ 200.969955][T11616] ================================================================== [ 201.023978][T11616] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 201.031247][T11616] CPU: 1 UID: 0 PID: 11616 Comm: syz.0.1692 Not tainted syzkaller #0 PREEMPT(full) [ 201.040659][T11616] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 201.050711][T11616] Call Trace: [ 201.054002][T11616] [ 201.056941][T11616] vpanic+0x56c/0xa60 [ 201.060942][T11616] ? __pfx_vpanic+0x10/0x10 [ 201.065441][T11616] ? __pfx___schedule+0x10/0x10 [ 201.070291][T11616] panic+0xc5/0xd0 [ 201.074004][T11616] ? __pfx_panic+0x10/0x10 [ 201.078416][T11616] ? preempt_schedule_common+0x82/0xd0 [ 201.083866][T11616] ? af_alg_pull_tsgl+0x1c6/0x740 [ 201.088888][T11616] check_panic_on_warn+0x89/0xb0 [ 201.093836][T11616] ? af_alg_pull_tsgl+0x1c6/0x740 [ 201.098865][T11616] end_report+0x73/0x180 [ 201.103109][T11616] ? af_alg_pull_tsgl+0x1c6/0x740 [ 201.108154][T11616] kasan_report+0x128/0x150 [ 201.112648][T11616] ? af_alg_pull_tsgl+0x1c6/0x740 [ 201.117673][T11616] af_alg_pull_tsgl+0x1c6/0x740 [ 201.122538][T11616] skcipher_recvmsg+0x5df/0x1140 [ 201.127478][T11616] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 201.132837][T11616] ? skcipher_check_key+0x173/0x1e0 [ 201.138023][T11616] ? skcipher_check_key+0x173/0x1e0 [ 201.143215][T11616] ? __pfx_skcipher_recvmsg_nokey+0x10/0x10 [ 201.149095][T11616] ? __pfx_skcipher_recvmsg_nokey+0x10/0x10 [ 201.154974][T11616] sock_recvmsg+0x172/0x1b0 [ 201.159467][T11616] __sys_recvfrom+0x240/0x3c0 [ 201.164140][T11616] ? __pfx___sys_recvfrom+0x10/0x10 [ 201.169338][T11616] ? exc_page_fault+0x6a/0xc0 [ 201.174008][T11616] ? do_user_addr_fault+0xc6f/0x1340 [ 201.179290][T11616] __x64_sys_recvfrom+0xde/0x100 [ 201.184230][T11616] do_syscall_64+0x14d/0xf80 [ 201.188813][T11616] ? trace_irq_disable+0x3b/0x150 [ 201.193821][T11616] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 201.199882][T11616] ? clear_bhb_loop+0x40/0x90 [ 201.204560][T11616] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 201.210461][T11616] RIP: 0033:0x7f042895d04e [ 201.214871][T11616] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 201.234469][T11616] RSP: 002b:00007f042980ee88 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 201.242872][T11616] RAX: ffffffffffffffda RBX: 00007f04298106c0 RCX: 00007f042895d04e [ 201.250827][T11616] RDX: 0000000000001000 RSI: 00007f042980f000 RDI: 0000000000000004 [ 201.258782][T11616] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 201.266739][T11616] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 201.274697][T11616] R13: 00007f042980ef58 R14: 00007f042980f000 R15: 0000000000000000 [ 201.282659][T11616] [ 201.285998][T11616] Kernel Offset: disabled [ 201.290337][T11616] Rebooting in 86400 seconds..