last executing test programs: 8.385798018s ago: executing program 0 (id=2990): socket$inet6(0xa, 0x200000000003, 0x87) syz_emit_ethernet(0xce, &(0x7f0000000780)={@local, @multicast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, '\x00', 0x98, 0x2b, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @local, {[@hopopts={0x87, 0x8, '\x00', [@enc_lim={0x4, 0x1, 0x80}, @generic={0x6, 0x3e, "a133e876cdd43f680da55184b93c7811038a7ad16ea0ffa319fa391df099203addd1b52906547b57b7552afb4f6ff3869610d1375e1e7dee851096e27611"}]}, @routing={0x29, 0x6, 0x2, 0x0, 0x700, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @dev={0xfe, 0x80, '\x00', 0x1f}, @local]}], {0x0, 0x0, 0x10, 0x0, @gue={{0x2, 0x0, 0x0, 0x0, 0x0, @val=0x80}}}}}}}}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000001c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000100)={@link_local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @private=0x800001c, @local}, {0x0, 0x17c1, 0x8}}}}}, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c000000020603000000000000000000000000001400078008001240000000000500150002000000050001000600000005000500020000000500040000000000090002"], 0x4c}}, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaa230180c200000008"], 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000200000000857e0c373a04553f"], 0x0, 0x6, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200e19}, 0x94) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x18, &(0x7f0000000000)=0xf3, 0x4) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41100}, 0x95) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="2c00000019000500000000000000000080200000000400050000000008000f"], 0x2c}}, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000200), r5) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a03000000000000000000050000000900010073797a30000000000900030073797a300000000008000c40000000032800048008000240000000120800014000000000140004"], 0xa4}}, 0x0) close(r1) socket(0x23, 0x5, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r6 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, 0x0) bind$can_j1939(r6, 0x0, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r7 = socket(0x1, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, @dev={0xfe, 0x80, '\x00', 0x4}, @dev, 0x0, 0x0, 0x0, 0xfffffffe}}) syz_genetlink_get_family_id$batadv(0x0, r7) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r7, 0x0, 0x40820) 6.38568344s ago: executing program 0 (id=3000): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) (async, rerun: 32) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x28, 0x2, 0x3, 0x301, 0x0, 0x0, {}, [@NFQA_CFG_PARAMS={0x9}, @NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x28}}, 0x0) (async) connect$inet(r0, &(0x7f0000000380)={0x2, 0x4e24, @empty}, 0x10) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @broadcast}, 0x2}}, 0x2e) (async) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002cbd7000040000000500b600080009000200000008000c00a60a0000060001000500004008000b"], 0x40}, 0x1, 0x0, 0x0, 0x94ced4add106a01f}, 0x4040) 6.108242832s ago: executing program 0 (id=3003): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ipvlan1\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r4, &(0x7f0000000040)={0x18, 0x0, {0x4, @local, 'ip6gretap0\x00'}}, 0x1e) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@local, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast1, 0x4d4, 0x6c}, @in6=@empty, {0x0, 0x192, 0x6, 0xffff, 0x28251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffd}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x18, 0x1, 0xfffffffe, 0x100, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x71c, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0x25}, {0x0, 0x4, 0x9ba3, 0xffff, 0x8251c, 0x5, 0xfffffffffffffffc}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffa, 0xfffffffc}, 0x80, 0x3500, 0xa, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r7, 0x84, 0x10, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x101, 0x70bd26, 0x25dffbf8, {0xa, 0x38, 0x19, 0xff, r2}, [@IFA_LOCAL={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x36}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x8004) r8 = socket$inet(0x2, 0x6, 0x6) getsockopt$IPT_SO_GET_REVISION_TARGET(r8, 0x0, 0x43, &(0x7f0000000100)={'IDLETIMER\x00'}, &(0x7f0000000280)=0x1e) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000800)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@bridge_newvlan={0x24, 0x71, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r10}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x29, 0x4}}}]}, 0x24}}, 0x20008000) 5.697434867s ago: executing program 0 (id=3009): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0xe, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x89b0, &(0x7f0000000080)={'vlan0\x00', 0x2000}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x42073, 0xffffffffffffffff, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0xe373b684d2526e78, 0x1000}, 0x20) r5 = socket$xdp(0x2c, 0x3, 0x0) socket$kcm(0xa, 0x3, 0x87) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r7 = socket$kcm(0x2, 0xa, 0x2) pselect6(0x40, &(0x7f0000000040)={0x8000000005, 0x5, 0x1, 0x2, 0xc, 0xa, 0x0, 0x1000000000007}, 0x0, 0x0, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r6, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003088700fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) setsockopt$XDP_RX_RING(r5, 0x11b, 0x2, &(0x7f0000000040)=0x20, 0x4) r8 = socket$netlink(0x10, 0x3, 0x400000000000004) socketpair(0x2a, 0x800, 0x9, &(0x7f00000001c0)) writev(r8, &(0x7f0000019440)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000060000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff0000000309", 0x48}], 0x1) r9 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r3) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r10) socket$unix(0x1, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) 5.39658923s ago: executing program 0 (id=3014): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB="1e7c0010", @ANYRES16, @ANYBLOB="02002cbd7000fcdbdf250600000034000180140002006272696467653000000000000000000014000200766972745f77696669300000000000000800030000000000200001801400020070696d7265670000000000000000000008000300010000001400018008000100", @ANYRES32, @ANYBLOB="080001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000855}, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0x1a, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x2, 0x0, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0xffffffd}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x44080) r4 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000180)='ns/user\x00') ioctl$NS_GET_USERNS(r4, 0xb701, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=@newqdisc={0x50, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r3, {}, {0xffe0, 0xa}, {0xf, 0x10}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x1c, 0x2, [@TCA_FQ_CODEL_TARGET={0x8, 0x1, 0xffffff00}, @TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0x3}, @TCA_FQ_CODEL_QUANTUM={0x8, 0x6, 0x2}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x55}, 0x4000) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="4c00f6ff0f00370400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800b00010067726574617000001c0002800800040008000000060003008100000006000e0002000000"], 0x4c}}, 0x0) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x3, 0x7, @loopback, 0x800000}, 0x1c) 4.444309581s ago: executing program 0 (id=3025): r0 = socket$inet(0x2, 0x2, 0x400d366) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x308, 0x0, 0xe138, 0x198, 0x0, 0x198, 0x270, 0x358, 0x358, 0x270, 0x358, 0x3, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x0, 'nicvf0\x00', 'veth0_to_bond\x00', {}, {}, 0x0, 0x0, 0x20}, 0x0, 0x158, 0x1a0, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'fsm\x00', "0d0003000000000000000304fff0cf81dfd28c89544e14cd3e01dd24289831867846c88621039b284c3ff45c429955608b9952bed40ce4a8c1df6cdbdb7e2378d5afd35f4c16827f55b3af494e39e8fb330200000000000032b6a99a8d87298e88a94cb519f5c17631af916a0002000000000000000000000000000000080049", 0x34}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x3, 0x3078, 0x5, 'syz1\x00', {0x5}}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @local, 0xc, 0x6, [0x97f4, 0x1015, 0x33, 0x29, 0x7, 0x3c, 0x4, 0x26, 0x9, 0xc, 0xf, 0x1d, 0x3e, 0x1e, 0x30], 0x0, 0x0, 0x3}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x368) socket$inet(0x2, 0x2, 0x400d366) (async) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x308, 0x0, 0xe138, 0x198, 0x0, 0x198, 0x270, 0x358, 0x358, 0x270, 0x358, 0x3, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x0, 'nicvf0\x00', 'veth0_to_bond\x00', {}, {}, 0x0, 0x0, 0x20}, 0x0, 0x158, 0x1a0, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'fsm\x00', "0d0003000000000000000304fff0cf81dfd28c89544e14cd3e01dd24289831867846c88621039b284c3ff45c429955608b9952bed40ce4a8c1df6cdbdb7e2378d5afd35f4c16827f55b3af494e39e8fb330200000000000032b6a99a8d87298e88a94cb519f5c17631af916a0002000000000000000000000000000000080049", 0x34}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x3, 0x3078, 0x5, 'syz1\x00', {0x5}}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @local, 0xc, 0x6, [0x97f4, 0x1015, 0x33, 0x29, 0x7, 0x3c, 0x4, 0x26, 0x9, 0xc, 0xf, 0x1d, 0x3e, 0x1e, 0x30], 0x0, 0x0, 0x3}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x368) (async) 1.993512785s ago: executing program 4 (id=3053): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000e00)=ANY=[@ANYBLOB="5800000002060108000000000000000000000000050005000a0000000900020073797a3000000000050004000000000005000100060000000c00078008001240fffffffd14000300686173683a69702c706f72742c6970"], 0x58}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xfe, 0x0, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x43, 0xffffffffffffff11, &(0x7f0000000000), &(0x7f0000000540)="9c18a537674b5d9e9185cd0add6d6d4c9e63ece1b58d7b42c6c27a5f1671fdf94432fc1baaef86573fc9fbb426f9284a6bd47174eb6fb9f893c18421d26d649d633a0f459969df8d3284737c5586cd696884192ce10db91e21fd978337408b7bd1cbb6789b51d63c8e68dab5da01c8e19d572950cfe2142e244990624270eaa2a2ded01d820cec011a6b05192b91cd193b1995bc296c249e1ef1570000000000000f75eec7040de10b5d8c536e5b5ce39ab84e658eb8f02fe112a5136cd3ac5c06848a40ec335a", 0x0, 0x0, 0x800006}, 0x3b) socket$inet_sctp(0x2, 0xbc18cdfcf41b6adf, 0x84) 1.887931377s ago: executing program 4 (id=3055): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000000c0)={'syztnl2\x00', &(0x7f0000000040)={'syztnl0\x00', 0x0, 0x4, 0x0, 0xd4, 0x2, 0x1, @dev={0xfe, 0x80, '\x00', 0x29}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8000, 0x20, 0x5, 0x1}}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'ipvlan1\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xe315}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@mpls_getnetconf={0x34, 0x52, 0x2, 0x70bd2d, 0x25dfdbfe, {}, [@NETCONFA_IFINDEX={0x8, 0x1, r1}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0xfffffc00}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x6}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0xe}]}, 0x34}, 0x1, 0x0, 0x0, 0x20044810}, 0x4040) r5 = socket(0x10, 0x3, 0x0) write(r5, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) 1.744534028s ago: executing program 1 (id=3058): r0 = socket$netlink(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000040)=@ethtool_link_settings={0x2, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x4c, 0x20, 0x8, [0x0, 0x0, 0x2a10, 0xc, 0x5, 0x0, 0x0, 0xffffffff]}}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="08010000100001002dbd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0221000000000000140003006e657464657673696d300000", @ANYRES32=0x0, @ANYBLOB="cc001680c80001800c000500ff0f00000008000014000a0004000000000000000400000000000000100006"], 0x108}}, 0x24040800) 1.531886868s ago: executing program 3 (id=3061): r0 = socket$inet6(0xa, 0x80009, 0xfffff000) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000000)=0x6, 0x4) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=@newlink={0x34, 0x10, 0x300, 0x70bd27, 0x0, {0x0, 0x0, 0xe403}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x30004010}, 0x0) 1.44433171s ago: executing program 3 (id=3062): r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) sendmsg$inet(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000002700)=[{&(0x7f0000000080)='@', 0x1}], 0x1}, 0x400c0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r0, 0x800448d2, &(0x7f0000000000)={0x0, 0x0}) r2 = socket$inet6(0xa, 0x3, 0x8000000003c) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x3f8, 0x0, 0xffffffff, 0xffffffff, 0x250, 0xffffffff, 0x328, 0xffffffff, 0xffffffff, 0x250, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x228, 0x250, 0x0, {}, [@common=@ipv6header={{0x28}, {0x1a, 0x1, 0x1}}, @common=@inet=@policy={{0x158}, {[{@ipv4=@local, [0xff], @ipv6=@remote, [0x0, 0xff000000, 0xff000000, 0xffffff00], 0x4d3, 0x34ff, 0x1, 0x1, 0x15, 0x10}, {@ipv4=@multicast1, [0x0, 0xffffffff, 0xffffffff, 0xff], @ipv4=@rand_addr=0x64010100, [0xff000000, 0xffffffff], 0x4d6, 0x3503, 0x87, 0x0, 0x2, 0x10}, {@ipv4=@empty, [0x0, 0xffffffff, 0xff000000, 0xffffff00], @ipv4=@dev={0xac, 0x14, 0x14, 0x11}, [0xff000000, 0x0, 0xff, 0xff000000], 0x4d6, 0x3500, 0x3a, 0x0, 0x0, 0x4}, {@ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, [0xff, 0xffffff00, 0x0, 0xffffff00], @ipv6=@mcast1, [0xff000000, 0xffffffff, 0xff000000, 0xffffffff], 0x4d3, 0x0, 0x2f, 0x0, 0x4, 0x1a}], 0x1, 0x3}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x18}}, [], [], 'wg1\x00', 'caif0\x00', {}, {}, 0x62}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0x0, 0x0, 0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x458) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 1.337436217s ago: executing program 4 (id=3063): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = accept$inet(r0, &(0x7f0000000000), &(0x7f0000000040)=0x10) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000540)=@nat={'nat\x00', 0x670, 0x5, 0x4d8, 0x228, 0x0, 0xffffffff, 0x370, 0x228, 0x440, 0x440, 0xffffffff, 0x440, 0x440, 0x5, 0x0, {[{{@ip={@rand_addr=0x64010104, @local, 0xff0000ff, 0xffffff00, 'veth1_to_bridge\x00', 'wg1\x00', {}, {0xff}, 0x16}, 0x0, 0x1f0, 0x228, 0x48, {}, [@common=@unspec=@string={{0xc0}, {0x5, 0xc, 'kmp\x00', "4801d3e4c6b2bfd892aa7400051624fa86999b13d39b99407a9b7abe75a728baa18da576811985de44110b8602025e1298ea55f1c5087ab16f67b18ca90ac68f0b3d6a068f727f7d23fa5fad26a59a5da2651212bdf9d29248ae63e2349b2470915eea2c39ade5129ff26b6fe772493180cfda2cdd49412e9469d85abdb467ba", 0x79, 0x2, {0x1}}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@dev={0xfe, 0x80, '\x00', 0x10}, [0xffffff00, 0xffffffff, 0x0, 0xff000000], @ipv4=@dev={0xac, 0x14, 0x14, 0x29}, [0x0, 0xffffff00, 0xff000000, 0xffffffff], @ipv6=@local, [0xff000000, 0xff, 0x0, 0xff], @ipv4=@broadcast, [0xffffffff, 0x0, 0xff], 0x7, 0x1, 0x5c, 0x4e1c, 0x4e22, 0x4e24, 0x4e24, 0x814, 0x20c0}, 0x80, 0x2}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0xae, {0xf, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id=0x65, @port=0x4e24}}}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xfffc, 0xd, 0x1}, {0x2, 0x4, 0x3}, 0x1000, 0x100}}}, {{@ip={@multicast2, @broadcast, 0xff, 0x0, 'virt_wifi0\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x2, @loopback, @empty, @icmp_id=0x68, @port=0x4e22}}}}, {{@uncond, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@icmp={{0x28}, {0x4, "1542", 0x1}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @rand_addr, @dev={0xac, 0x14, 0x14, 0x2a}, @icmp_id, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x538) 1.337276345s ago: executing program 1 (id=3064): r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f0000000080)=0x1, 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000002580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000080a01010000000000000000020000000900010073797a300000000038000000060a17d50000000000000000020000000900020073797a32000000000900010073797a30000000000c0003"], 0xcdc}}, 0x0) 1.30557712s ago: executing program 3 (id=3065): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, &(0x7f0000000200)=@ccm_128={{0x304}, "76131e58a256d4af", "4448076cc60af592e807e038c4797041", "8076e30e", "f79d7fbbf3985dbb"}, 0x28) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuacct.stat\x00', 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'ip_vti0\x00', &(0x7f0000000140)={'erspan0\x00', 0x0, 0x1, 0x10, 0x0, 0x7, {{0x18, 0x4, 0x1, 0x4, 0x60, 0x67, 0x0, 0x2, 0x4, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, {[@rr={0x7, 0xb, 0x83, [@remote, @empty]}, @noop, @cipso={0x86, 0x3d, 0x2, [{0x6, 0x4, "8fb2"}, {0x5, 0xe, "bf7b94b2fec541249f5f1925"}, {0x7, 0xb, "d4fa63761cd866aa64"}, {0x6, 0xe, "806cb4965b1fecdf93af9606"}, {0x1, 0xc, "4e9b8a22ccf1c09d22b2"}]}]}}}}}) getsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f00000001c0)={@remote, 0x0}, &(0x7f0000000240)=0x14) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'team0\x00', 0x0}) getsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f00000002c0)={@remote, 0x0}, &(0x7f0000000300)=0x14) r6 = socket(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x14c, 0x24, 0x3fe3aa0262d8c783, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x11c, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x0, 0x0, 0x1c}}, @TCA_CHOKE_STAB={0x104, 0x2, "1c1f15f3c5e23d27d29a00dd397b5c11d4cf201c1a0619fc314514ab71788e4079fdbe4f2a0d60b83a7d04c1d709981110401e5e10685abbad9b6f18e303e902c77244658a099a36fa486760c4941ea7df64250af29a4935de5d244f0549d93679b3d4fb358c2076bc6b1c9735ff8243f088e67455ba14975d12e5903ceeb7a23d62ecb5253ad444ef726b58a00f13f22ccc84cc06c9912b621c3ddc5f3229dc84c0880b5c6faefe33413b34a146e592fc15ae234dac030f05bb99eab08dfd2cb5659c6fc21fb7da6c380165ddde4659e75538dc864a53f691e1d785d6e6f73a03abf2120bce67e2d50075fd811b3e03a1cc2d66335bdee19738a0c1fb79b77d"}]}}]}, 0x14c}}, 0x0) getsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000340)={@private1, 0x0}, &(0x7f0000000380)=0x14) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f00000005c0)={&(0x7f0000000040), 0xc, &(0x7f0000000580)={&(0x7f00000003c0)={0x1b8, 0x0, 0x0, 0x70bd25, 0x25dfdbfe, {}, [@ETHTOOL_A_STRSET_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @ETHTOOL_A_STRSET_HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @ETHTOOL_A_STRSET_STRINGSETS={0xf0, 0x2, 0x0, 0x1, [{0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}]}, @ETHTOOL_A_STRSET_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}]}]}, 0x1b8}}, 0x40) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000200)=ANY=[], 0x14) syz_emit_ethernet(0x66, &(0x7f00000000c0)={@multicast, @random="07a24f79ee3f", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, ' \x00', 0x30, 0x2f, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2, {[], {0x0, 0x883e, 0x30, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}, "aaf43bbacf0d7d4dd62d252269d4c77febb30ee631ad1be1a15e592d3678edb6aaec874e"}}}}}}}, 0x0) 1.250034795s ago: executing program 4 (id=3066): r0 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)={0x74, r0, 0x1, 0x0, 0x25dfdbfb, {}, [@WGDEVICE_A_PEERS={0x4c, 0x8, 0x0, 0x1, [{0x48, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x1002}}]}]}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x74}, 0x1, 0x0, 0x0, 0x10}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) r2 = socket(0x14, 0x2, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x61f0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000040}, 0x1) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETLINK(r3, 0x400454cd, 0x300) r4 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r4, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000600008000f0fffeffe809005300fff5dd00000010000100080c10000000ffffffffffff", 0x58}], 0x1) socket$inet6(0xa, 0x6, 0x8) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x6000, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r7, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=@newtfilter={0x44, 0x2c, 0xd27, 0x2, 0x0, {0x0, 0x0, 0x0, r8, {0xb, 0x9}, {}, {0x1c, 0xfff1}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0xfe}]}]}]}}]}, 0x44}}, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r9, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$NFT_MSG_GETSETELEM(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)=ANY=[@ANYBLOB="400000000d0a01080000000000000000b0d7002d0900020073797a31000000000900010073797a3100000000140003800c000080080003400000000220000080"], 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) socket$nl_route(0x10, 0x3, 0x0) 1.145150092s ago: executing program 1 (id=3067): socketpair(0x10, 0x80000, 0x401, &(0x7f0000001140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001200), 0xffffffffffffffff) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000640)={0x0, 0xfffffffffffffff8, &(0x7f0000000600)={&(0x7f0000000000)=@newtaction={0x70, 0x30, 0x1, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_skbedit={0x58, 0x1, 0x0, 0x0, {{0xc}, {0x48, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x8, 0x3}, @TCA_SKBEDIT_PTYPE={0x6, 0x4}, @TCA_SKBEDIT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc, 0x9, {0x47}}}}]}]}, 0x70}}, 0x0) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f0000001440)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001400)={&(0x7f0000001240)={0x1b4, r2, 0x20, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x10, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}]}, @TIPC_NLA_SOCK={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x200}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1ff}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xfffffffc}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xd}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}]}, @TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x120000}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x10001}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x81}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3ff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7}]}, @TIPC_NLA_BEARER={0xa4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x82}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xba}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xba}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x280}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x52}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4a22, @broadcast}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0xca9, @remote, 0x2}}}}, @TIPC_NLA_BEARER_NAME={0xf, 0x1, @l2={'ib', 0x3a, 'ip_vti0\x00'}}]}, @TIPC_NLA_LINK={0x1c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x63, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x1b}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x401}]}]}, 0x1b4}, 0x1, 0x0, 0x0, 0x28040084}, 0x400c850) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = accept4(r1, 0x0, &(0x7f0000001480), 0x0) getpeername$l2tp6(r5, &(0x7f00000014c0)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000001500)=0x20) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet6(0xa, 0x2, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000600)={@local, @empty, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "fca33f", 0x30, 0x67, 0x0, @dev, @local, {[@fragment={0x67}, @hopopts={0x0, 0x3, '\x00', [@generic={0x0, 0x17, "0ce3c4989ea1a39290312280e6388bb3012ab2f6fcb2ba"}]}]}}}}}, 0x0) bind$inet6(r8, &(0x7f0000000000)={0xa, 0xe22, 0x1, @mcast2, 0x6}, 0x1c) connect$inet6(r8, &(0x7f0000000600)={0x2, 0x4e23, 0x0, @dev}, 0x1c) sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@bridge_delneigh={0x28, 0x1c, 0x1, 0x2000, 0x0, {0x7, 0x0, 0x0, r6, 0x8, 0xb2}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x40800) r9 = socket$kcm(0xa, 0x2, 0x73) sendmsg$inet(r9, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @multicast2}, 0x3c, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x1000}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838029f96bd206d4776368ed2a92432e5af71", 0x33}], 0x2, &(0x7f00000010c0)=[@ip_tos_int={{0x14, 0x29, 0x3e}}, @ip_tos_u8={{0x14, 0x29, 0x43}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @broadcast, @remote}}}], 0x50}, 0x9fc) 1.144620618s ago: executing program 2 (id=3068): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="140100001f0001000000000000000000060100800c0001"], 0x114}], 0x1}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x7, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x403, 0x0, 0x0, 0x0, 0x2}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}]}, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.073969474s ago: executing program 3 (id=3069): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sm3)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x80800) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r1, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r2, 0x800, 0x70bd28, 0x25dfdbfe, {{}, {@void, @void}}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x20044841) sendmsg$NL80211_CMD_SET_WIPHY(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[], 0x54}, 0x1, 0x0, 0x0, 0x24000005}, 0x8081) accept4$tipc(r1, 0x0, 0x0, 0x80800) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010003b1500"/20, @ANYRES32=0x0, @ANYBLOB="662700000000000024001280090001007866726d0000000014000280040003"], 0x44}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x40010}, 0x0) 844.395996ms ago: executing program 2 (id=3070): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) socket$nl_generic(0x10, 0x3, 0x10) read(r1, &(0x7f0000000440)=""/139, 0x8b) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r3 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000240)='syz1\x00', 0x200002, 0x0) openat$cgroup_pressure(r3, &(0x7f0000000340)='memory.pressure\x00', 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x203, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}]}]}], {0x14}}, 0x68}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x58, 0x16, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_FLOWTABLE_HOOK={0x2c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'team_slave_0\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x5}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xac}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x68, 0x10, 0xf12, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x104}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x20, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1e}}, @IFLA_VLAN_ID={0x6}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0x59ae}]}, 0x68}, 0x1, 0x0, 0x0, 0x8050}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x64}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xd, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000500000000000000b64f7110b5000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 713.678415ms ago: executing program 3 (id=3071): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000001500010000000000000000000a000000080001"], 0x1c}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x70bd24, 0x0, {0x2, 0x20, 0x14, 0x0, 0xff, 0x0, 0x0, 0x7, 0x200}, [@RTA_SRC={0x8, 0x2, @loopback}]}, 0x24}}, 0xea5bc50b619957fe) 668.304961ms ago: executing program 2 (id=3072): r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) accept$ax25(r0, 0x0, 0x0) 667.443753ms ago: executing program 1 (id=3073): r0 = socket$netlink(0x10, 0x3, 0x2) connect$netlink(r0, &(0x7f0000000000)=@proc, 0xc) (async) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, 0x0, &(0x7f0000000100)) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x58, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_NETMASK={0x5, 0x14, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}]}, 0x58}}, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000200)={0x0, r0}, 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x4, &(0x7f0000000200)=ANY=[], 0x0, 0x5, 0x0, 0x0, 0x41100, 0x9}, 0x94) (async) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000080)=[@in={0x2, 0x4e21, @private=0xa010102}], 0x10) (async) r3 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f00000017c0)=[{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000000)="ed60af8a59c5", 0x6}], 0x1, 0x0, 0x0, 0x20000081}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20088800}], 0x2, 0x0) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'bond_slave_1\x00'}) (async) r4 = socket$nl_sock_diag(0x10, 0x3, 0x4) socket$packet(0x11, 0x0, 0x300) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000feffffff000000000000000071104b000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) sendmsg$TCPDIAG_GETSOCK(r4, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000002c0)=ANY=[@ANYBLOB="540000001200b7a325bd7000fddbdf25200f07074a264e22030000002f00000001ffffffc300000006000000000000000000000007000000", @ANYRES32=0x0, @ANYBLOB="de00fbffa611195cc93f034708000000080003"], 0x54}, 0x1, 0x0, 0x0, 0x4008000}, 0x40000) 512.848381ms ago: executing program 3 (id=3074): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@delchain={0x34, 0x65, 0x2, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x6, 0x5}, {0xfff1, 0x5}, {0x3, 0x5}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x99}}, @TCA_RATE={0x6, 0x5, {0x2f, 0x8}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x44080) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=@newqdisc={0x50, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffe0, 0xa}, {0xf, 0x10}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x1c, 0x2, [@TCA_FQ_CODEL_TARGET={0x8, 0x1, 0xadc0}, @TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0x3}, @TCA_FQ_CODEL_QUANTUM={0x8, 0x6, 0x2}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x55}, 0x4000) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r4, 0x0, 0x30, &(0x7f0000000240)={0x0, {{0x2, 0x4e22, @broadcast}}}, 0x90) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x3, 0x7, @loopback, 0x800000}, 0x1c) 453.483205ms ago: executing program 2 (id=3075): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x12, 0x9, 0x8, 0x2, 0x0, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r1}, &(0x7f0000000180), &(0x7f0000000100)=r0}, 0x20) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000b80)={0x2c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}, @NFQA_CFG_CMD={0x8}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x22}]}, 0x2c}}, 0x0) (async) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)={0x60, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x3}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x60}}, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f0000000040)=0x3) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)={0x14, 0x39, 0xb, 0x70bd26, 0x4000, {0xc}}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x8010) (async, rerun: 32) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r1, &(0x7f0000000300), 0x0}, 0x20) (rerun: 32) 453.136859ms ago: executing program 1 (id=3076): r0 = socket$alg(0x26, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x1a, 0x4, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x48) bind$alg(r0, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes-aesni)\x00'}, 0x58) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GFACILITIES(r1, 0x89e2, &(0x7f0000000000)) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="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", 0x117) r2 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) write$cgroup_type(r2, &(0x7f0000000100), 0x9) r3 = accept(r0, 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), r3) 389.916058ms ago: executing program 2 (id=3077): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r0, &(0x7f00000003c0)='V', 0x1, 0x0, &(0x7f0000000280)={0xa, 0x0, 0x0, @private2}, 0x1c) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000000)={0x0, 0xae46}, &(0x7f0000000040)=0xc) r1 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_FREE_MR(r1, 0x114, 0x3, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYRESOCT=r1], 0x7c}}, 0x10) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000380)="1800000069006bcd8e0300dc6e3640030003010000040000", 0x18}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0xac, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x4}}}]}, @NFTA_RULE_USERDATA={0x74, 0x7, 0x1, 0x0, "69e2abf66aee7b7f6307f41cd9c560075140f0c124f14e14bddc7cf50a6d017501719a25a864f9138004e1275ec9c78c310f4da64ab6dda72629c9989a8c41ba85e362d253b39fae8890e7c8b5cbe5abea29c7e4ab1684f06e057dd2b403c246940a9c2363c5774384ccd41c6fc0e12b"}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xd4}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f00000000c0)=ANY=[@ANYBLOB="0180c2000000aa243044d7d069bac032aa4ee09b272dc8d7b58558646100000000000000001e0000000000"], 0x0) 331.789465ms ago: executing program 1 (id=3078): r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f00000000c0)=0x32ff, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000080)={'vxcan1\x00', 0x0}) sendmsg$can_raw(r1, &(0x7f0000000000)={&(0x7f0000000780)={0x1d, r2}, 0x10, &(0x7f0000000200)={&(0x7f0000000300)=@can={{0x0, 0x1, 0x1, 0x1}, 0x0, 0x3, 0x0, 0x0, "96ccd9f4c7b21421"}, 0x10}}, 0x44101) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x89b0, &(0x7f0000000080)={'ip_vti0\x00', 0x100}) bind$alg(r0, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(md5)\x00'}, 0x58) r4 = accept$alg(r0, 0x0, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x15, 0x301, 0x0, 0x0, {0xb}}, 0x14}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADD(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) sendmsg$alg(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000540)="b6", 0x1}], 0x1, 0x0, 0x0, 0x20040091}, 0x8000) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xd}, @NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0xc}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x78}, 0x1, 0x0, 0x0, 0x840}, 0x0) r7 = accept4(r4, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r7, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={&(0x7f00000003c0)=@newqdisc={0xa8, 0x24, 0x100, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xfff1, 0x6}, {0xb, 0xa}, {0x2, 0xf}}, [@q_dsmark={{0xb}, {0x2c, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0xea15}, @TCA_DSMARK_INDICES={0x6}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x7}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x8}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x9d}]}}, @q_dsmark={{0xb}, {0x2c, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x3}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x28}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}]}}, @q_dsmark={{0xb}, {0x8, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}]}}]}, 0xa8}, 0x1, 0x0, 0x0, 0x40}, 0x20008005) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c00000001040300000000000000000000000007050001000100"], 0x1c}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r8, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="1c0000000104010100000000e1000000000000070500010001"], 0x1c}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) 184.813646ms ago: executing program 2 (id=3079): socket$inet(0x10, 0x3, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f00000000c0)={0x18, 0x0, {0x4, @remote, 'bond0\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r0, 0x4008b100, &(0x7f00000001c0)={0x18, 0x0, {0x1, @broadcast, 'syzkaller1\x00'}}) r1 = socket$caif_seqpacket(0x25, 0x5, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00'}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@gettaction={0x14, 0x32, 0x400, 0x70bd2b, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="3c10000042000701feffffff00000000017c000004004280241001"], 0x103c}, 0x1, 0x0, 0x0, 0xc004}, 0xc000) r4 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r4, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000100)='a', 0x1}], 0x1, 0x0, 0x0, 0x44}], 0x1, 0x0) setsockopt$SO_TIMESTAMP(r4, 0x1, 0x3f, &(0x7f0000000240)=0x4ab8a40e, 0x4) setsockopt$inet_sctp_SCTP_EVENTS(r4, 0x84, 0xb, &(0x7f0000000180)={0x0, 0x20, 0x8f, 0x2, 0x0, 0x0, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x4}, 0xe) sendmmsg$inet_sctp(r4, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="300000000000000084000000010000000000000004"], 0x30}], 0x1, 0x0) recvfrom$rxrpc(r4, 0x0, 0x0, 0x10000, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x25, 0x4, 0xfffffffe) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nbd(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000440)={0x2c, r8, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r6}}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4004}, 0x4000000) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r9) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r5) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05fa651ba00000000000010000000900010073797a30000000002c000000030a03000000000000400000010000000900030073797a32000000000900010073797a300000000054000000060a01040000000000000000010000002c00048028000180080001006e6174001c00028008000540000000040800014000000001080002404d89000208000b40000000000900010073797a30"], 0xc8}}, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x4c, r11, 0x1, 0x70bd2b, 0x25dfdbff, {{}, {@void, @val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x1, 0x5b}}}}, [@NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'dvmrp0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x62b4e7cbb8b4f193}, 0x8040) socket$nl_netfilter(0x10, 0x3, 0xc) 143.552486ms ago: executing program 4 (id=3080): bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={0xffffffffffffffff, 0x0, 0x30, 0x0, @val=@uprobe_multi={0xfffffffffffffffc, &(0x7f00000001c0)}}, 0x40) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) r1 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r1, &(0x7f0000000040)={0x2a, 0x1, 0x4000}, 0xc) writev(r1, &(0x7f0000000340)=[{&(0x7f0000000080)='~', 0x1}], 0x1) listen(r0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x15, 0xffffffff, 0x9, 0x1, 0x1440, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5, 0x4}, 0x50) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) r3 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_SECURITY_KEY(r3, 0x110, 0x1, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000300)=0x400, 0x4) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000680)=ANY=[], 0x0) 0s ago: executing program 4 (id=3081): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socketpair$unix(0x1, 0x1, 0x0, 0x0) syz_init_net_socket$ax25(0x3, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r1, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x4}) ioctl$sock_netdev_private(r0, 0x8914, &(0x7f0000000000)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'ip6_vti0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f00000000c0)=@getchain={0x24, 0x66, 0x301, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0x1}}}, 0x24}}, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r4, 0x0, 0x487, &(0x7f0000000000), &(0x7f0000000040)=0x30) kernel console output (not intermixed with test programs): slave_1: entered promiscuous mode [ 210.952615][T10316] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 211.005405][T10319] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 211.106168][T10326] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1207'. [ 211.682664][T10355] netlink: 'syz.2.1216': attribute type 29 has an invalid length. [ 211.835986][T10355] netlink: 'syz.2.1216': attribute type 29 has an invalid length. [ 212.065771][ T5844] Bluetooth: hci1: command 0x0406 tx timeout [ 212.072418][ T5149] Bluetooth: hci3: command 0x0406 tx timeout [ 212.072432][ T52] Bluetooth: hci2: command 0x0406 tx timeout [ 212.247460][T10379] netlink: 112 bytes leftover after parsing attributes in process `syz.2.1222'. [ 212.347125][T10385] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1222'. [ 212.540047][T10396] netlink: 'syz.4.1227': attribute type 2 has an invalid length. [ 212.886513][T10414] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 212.903097][T10414] vlan0: entered promiscuous mode [ 212.913765][T10414] vlan0: entered allmulticast mode [ 212.927597][T10420] vlan3: entered promiscuous mode [ 212.932702][T10420] bond0: entered promiscuous mode [ 212.938201][T10420] bond_slave_0: entered promiscuous mode [ 212.946508][T10420] bond_slave_1: entered promiscuous mode [ 213.150584][T10431] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 213.370640][T10442] netlink: 'syz.2.1243': attribute type 10 has an invalid length. [ 213.379748][T10442] batadv0: entered promiscuous mode [ 213.385853][T10442] batadv0: entered allmulticast mode [ 213.398855][T10442] bridge0: port 1(batadv0) entered blocking state [ 213.412518][T10442] bridge0: port 1(batadv0) entered disabled state [ 213.603367][ T3015] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 213.613318][ T3015] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 213.743938][T10454] __nla_validate_parse: 2 callbacks suppressed [ 213.743957][T10454] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1248'. [ 213.761844][T10456] netlink: 'syz.3.1249': attribute type 1 has an invalid length. [ 213.780212][T10459] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1248'. [ 213.838657][T10462] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1249'. [ 213.878239][T10456] 8021q: adding VLAN 0 to HW filter on device bond3 [ 213.893763][T10469] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1247'. [ 213.902683][T10468] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1251'. [ 213.902843][T10467] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1251'. [ 213.932634][T10465] gtp0: entered promiscuous mode [ 213.953784][T10465] gtp0: entered allmulticast mode [ 214.010449][T10469] bridge0: port 1(batadv0) entered disabled state [ 214.210482][T10483] x_tables: duplicate underflow at hook 3 [ 214.222836][T10476] team0: Device wireguard0 is of different type [ 214.247721][T10478] tipc: Enabled bearer , priority 0 [ 214.255876][T10481] netlink: 'syz.0.1253': attribute type 6 has an invalid length. [ 214.269502][T10486] netlink: 'syz.1.1256': attribute type 21 has an invalid length. [ 214.279793][T10478] syzkaller0: entered promiscuous mode [ 214.288831][T10478] syzkaller0: entered allmulticast mode [ 214.306982][T10478] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 214.343133][T10478] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1254'. [ 214.386859][T10478] tipc: Resetting bearer [ 214.413247][T10477] tipc: Resetting bearer [ 214.500858][T10477] tipc: Disabling bearer [ 214.835961][T10507] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1263'. [ 214.836216][T10512] netlink: 252 bytes leftover after parsing attributes in process `syz.1.1264'. [ 215.075908][T10518] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1266'. [ 215.185291][T10518] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address [ 215.196997][T10518] bond4: (slave vxcan3): Error -95 calling set_mac_address [ 215.359230][T10524] macvlan4: entered promiscuous mode [ 215.413807][T10524] macvlan4: entered allmulticast mode [ 215.449208][T10524] bond4: (slave macvlan4): Error -98 calling set_mac_address [ 216.874081][T10599] macvtap1: entered promiscuous mode [ 216.882636][T10599] vlan0: entered promiscuous mode [ 216.902850][T10599] macvtap1: entered allmulticast mode [ 216.923246][T10599] vlan0: entered allmulticast mode [ 216.944519][T10599] veth0_vlan: entered allmulticast mode [ 217.039009][T10603] netlink: 'syz.1.1286': attribute type 1 has an invalid length. [ 217.337665][T10621] netlink: 'syz.3.1289': attribute type 23 has an invalid length. [ 217.547687][T10634] netlink: 'syz.4.1290': attribute type 3 has an invalid length. [ 217.671290][T10634] geneve3: entered promiscuous mode [ 217.678767][T10634] geneve3: entered allmulticast mode [ 217.818440][T10656] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 217.832390][T10656] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 218.103721][T10665] lo: left promiscuous mode [ 218.113917][T10665] lo: entered allmulticast mode [ 218.119059][T10665] tunl0: left promiscuous mode [ 218.130999][T10665] tunl0: entered allmulticast mode [ 218.139221][T10665] gre0: left promiscuous mode [ 218.144779][T10665] gre0: entered allmulticast mode [ 218.150019][T10665] 0ªî{X¹¦: left promiscuous mode [ 218.158443][T10665] 0ªî{X¹¦: entered allmulticast mode [ 218.164420][T10665] erspan0: left promiscuous mode [ 218.169383][T10665] erspan0: entered allmulticast mode [ 218.175334][T10665] ip_vti0: left promiscuous mode [ 218.180309][T10665] ip_vti0: entered allmulticast mode [ 218.186847][T10665] ip6_vti0: entered allmulticast mode [ 218.192407][T10665] sit0: entered allmulticast mode [ 218.198741][T10665] ip6tnl0: entered allmulticast mode [ 218.204261][T10665] ip6gre0: entered allmulticast mode [ 218.209699][T10665] syz_tun: entered allmulticast mode [ 218.215335][T10665] ip6gretap0: entered allmulticast mode [ 218.221048][T10665] bridge0: entered allmulticast mode [ 218.227378][T10665] bond0: entered allmulticast mode [ 218.232510][T10665] bond_slave_0: entered allmulticast mode [ 218.238338][T10665] bond_slave_1: entered allmulticast mode [ 218.244723][T10665] team0: entered allmulticast mode [ 218.249944][T10665] team_slave_0: entered allmulticast mode [ 218.256044][T10665] team_slave_1: entered allmulticast mode [ 218.263162][T10665] dummy0: entered allmulticast mode [ 218.268619][T10665] nlmon0: entered allmulticast mode [ 218.274408][T10665] caif0: entered allmulticast mode [ 218.279682][T10665] batadv0: entered allmulticast mode [ 218.286265][T10665] veth0: entered allmulticast mode [ 218.291644][T10665] veth1: entered allmulticast mode [ 218.297048][T10665] wg0: entered allmulticast mode [ 218.302189][T10665] wg1: entered allmulticast mode [ 218.313407][T10665] wg2: entered allmulticast mode [ 218.318683][T10665] veth0_to_bridge: entered allmulticast mode [ 218.326548][T10665] veth1_to_bridge: entered allmulticast mode [ 218.335934][T10665] veth0_to_bond: entered allmulticast mode [ 218.342243][T10665] veth1_to_bond: entered allmulticast mode [ 218.349100][T10665] veth0_to_team: entered allmulticast mode [ 218.355575][T10665] veth1_to_team: entered allmulticast mode [ 218.361895][T10665] veth0_to_batadv: entered allmulticast mode [ 218.370874][T10665] batadv_slave_0: entered allmulticast mode [ 218.377378][T10665] veth1_to_batadv: entered allmulticast mode [ 218.384120][T10665] batadv_slave_1: entered allmulticast mode [ 218.391368][T10665] xfrm0: entered allmulticast mode [ 218.396783][T10665] veth0_to_hsr: entered allmulticast mode [ 218.402842][T10665] hsr_slave_0: entered allmulticast mode [ 218.408776][T10665] veth1_to_hsr: entered allmulticast mode [ 218.414930][T10665] hsr_slave_1: entered allmulticast mode [ 218.420803][T10665] hsr0: entered allmulticast mode [ 218.426243][T10665] veth1_virt_wifi: entered allmulticast mode [ 218.432446][T10665] veth0_virt_wifi: entered allmulticast mode [ 218.438934][T10665] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 218.453230][T10665] veth1_vlan: entered allmulticast mode [ 218.463936][T10665] vlan0: left promiscuous mode [ 218.477271][T10665] macvlan0: entered allmulticast mode [ 218.486349][T10665] macvlan1: entered allmulticast mode [ 218.499220][T10665] ipvlan0: entered allmulticast mode [ 218.506161][T10665] ipvlan1: entered allmulticast mode [ 218.511681][T10665] veth1_macvtap: entered allmulticast mode [ 218.519436][T10665] veth0_macvtap: entered allmulticast mode [ 218.528714][T10665] macvtap0: entered allmulticast mode [ 218.534620][T10665] macsec0: entered allmulticast mode [ 218.540108][T10665] geneve0: entered allmulticast mode [ 218.546006][T10665] geneve1: entered allmulticast mode [ 218.551627][T10665] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 218.558870][T10665] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 218.566570][T10665] netdevsim netdevsim1 netdevsim1: entered allmulticast mode [ 218.574435][T10665] netdevsim netdevsim1 netdevsim2: entered allmulticast mode [ 218.582007][T10665] netdevsim netdevsim1 netdevsim3: entered allmulticast mode [ 218.589763][T10665] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode [ 218.600823][T10665] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode [ 218.608206][T10665] macvlan2: entered allmulticast mode [ 218.614014][T10665] : entered allmulticast mode [ 218.618920][T10665] sit1: entered allmulticast mode [ 218.624191][T10665] ip6tnl1: entered allmulticast mode [ 218.629621][T10665] bond1: entered allmulticast mode [ 218.634965][T10665] bond2: entered allmulticast mode [ 218.640109][T10665] geneve2: entered allmulticast mode [ 218.645760][T10665] ipvlan2: entered allmulticast mode [ 218.651525][T10665] vxlan0: entered allmulticast mode [ 218.657439][T10665] veth1_to_hsr.2: entered allmulticast mode [ 218.663766][T10665] ipvlan3: entered allmulticast mode [ 218.669376][T10665] ip6tnl2: entered allmulticast mode [ 218.674872][T10665] batadv1: entered allmulticast mode [ 218.680399][T10665] bridge1: entered allmulticast mode [ 218.685920][T10665] sit2: entered allmulticast mode [ 218.691114][T10665] macvtap1: entered allmulticast mode [ 218.697522][T10665] vlan2: entered allmulticast mode [ 218.707155][T10665] geneve3: left promiscuous mode [ 218.715313][T10665] bond3: entered allmulticast mode [ 218.722208][T10665] bond4: entered allmulticast mode [ 218.731428][T10665] bond5: entered allmulticast mode [ 218.736703][T10665] bond6: entered allmulticast mode [ 218.746562][T10665] gretap0: entered allmulticast mode [ 218.752720][T10665] team1: left promiscuous mode [ 218.757844][T10665] gretap1: entered allmulticast mode [ 218.764882][T10669] veth0_macvtap: left promiscuous mode [ 218.827415][ T12] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.839401][ T12] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.869135][ T12] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.896074][ T12] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.008423][T10692] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 219.060101][T10697] __nla_validate_parse: 14 callbacks suppressed [ 219.060120][T10697] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1305'. [ 219.320707][T10718] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1307'. [ 219.363108][ T24] IPVS: starting estimator thread 0... [ 219.368737][T10715] IPVS: ip_vs_add_dest(): server weight less than zero [ 219.503059][T10719] IPVS: using max 24 ests per chain, 57600 per kthread [ 219.781167][T10738] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1315'. [ 220.051800][T10748] bond5: invalid ARP target 0.0.0.0 specified for addition [ 220.059222][T10748] bond5: option arp_ip_target: invalid value (0) [ 220.068838][T10748] bond5 (unregistering): Released all slaves [ 220.152772][T10766] openvswitch: netlink: Message has 4 unknown bytes. [ 220.164087][T10759] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_rx_wq": -EINTR [ 220.340420][T10775] smc: net device gre0 applied user defined pnetid SYZ1 [ 220.357504][T10775] smc: net device gre0 erased user defined pnetid SYZ1 [ 220.451735][T10779] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1327'. [ 220.682060][T10790] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1330'. [ 220.828942][T10801] netlink: 'syz.0.1333': attribute type 23 has an invalid length. [ 221.352091][T10830] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1341'. [ 221.445257][T10837] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1342'. [ 222.311100][T10856] xt_cluster: you have exceeded the maximum number of cluster nodes (37482740 > 32) [ 222.484301][T10873] ieee802154 phy1 wpan1: encryption failed: -22 [ 222.893054][T10906] netlink: 88 bytes leftover after parsing attributes in process `syz.3.1362'. [ 222.902389][T10906] netem: invalid attributes len -24 [ 222.907783][T10906] netem: change failed [ 222.914996][T10900] netlink: 'syz.1.1360': attribute type 1 has an invalid length. [ 222.922857][T10900] netlink: 184 bytes leftover after parsing attributes in process `syz.1.1360'. [ 222.932786][T10900] netlink: 'syz.1.1360': attribute type 1 has an invalid length. [ 223.101799][T10915] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1365'. [ 223.255311][T10920] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.323560][T10920] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.370769][T10920] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.453073][T10920] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.559527][ T61] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.594195][ T61] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.620392][ T61] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.661225][ T61] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.674816][T10933] netlink: 'syz.3.1372': attribute type 1 has an invalid length. [ 223.798087][T10935] lo speed is unknown, defaulting to 1000 [ 223.859640][T10941] Unknown options in mask b7f2 [ 224.130884][T10951] netlink: 'syz.3.1378': attribute type 10 has an invalid length. [ 224.210687][T10951] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 224.403444][T10962] syzkaller1: entered promiscuous mode [ 224.411675][T10962] syzkaller1: entered allmulticast mode [ 224.427811][T10962] __nla_validate_parse: 2 callbacks suppressed [ 224.427833][T10962] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1381'. [ 224.590482][T10970] netlink: 'syz.4.1383': attribute type 27 has an invalid length. [ 224.748919][T10975] sch_tbf: burst 0 is lower than device lo mtu (82) ! [ 224.958553][T10985] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1390'. [ 225.193373][T11000] netlink: 'syz.1.1392': attribute type 1 has an invalid length. [ 225.269049][T11001] tipc: Enabled bearer , priority 0 [ 225.301650][T11001] syzkaller0: entered promiscuous mode [ 225.323587][T11001] syzkaller0: entered allmulticast mode [ 225.379950][T11001] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 225.471765][T11001] tipc: Resetting bearer [ 225.538288][T10997] tipc: Resetting bearer [ 225.569059][T10997] tipc: Disabling bearer [ 225.579766][T11020] tipc: Enabling of bearer rejected, failed to enable media [ 225.601709][T11020] netlink: 14436 bytes leftover after parsing attributes in process `syz.1.1399'. [ 225.623172][T11020] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 225.673802][T11020] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1399'. [ 225.821335][T11030] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1403'. [ 226.000810][T11039] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1409'. [ 226.149179][T11054] IPVS: length: 42 != 8 [ 226.589143][T11080] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1420'. [ 226.679320][T11083] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1422'. [ 226.697589][T11083] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 226.711780][T11083] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 226.732116][T11085] gtp0: entered promiscuous mode [ 226.741429][T11085] gtp0: entered allmulticast mode [ 226.928971][T11094] netlink: 'syz.0.1425': attribute type 29 has an invalid length. [ 226.974118][T11096] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 227.153552][T11107] IPVS: set_ctl: invalid protocol: 46 255.255.255.255:20004 [ 227.428575][T11121] syzkaller0: entered promiscuous mode [ 227.444009][T11121] syzkaller0: entered allmulticast mode [ 227.637673][T11131] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1436'. [ 227.663362][T11131] netlink: 'syz.0.1436': attribute type 5 has an invalid length. [ 227.666617][T11135] veth0: entered promiscuous mode [ 227.677212][T11133] veth0: left promiscuous mode [ 227.688509][T11131] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1436'. [ 227.845084][T11140] vlan2: left promiscuous mode [ 227.851915][T11140] gretap2: left promiscuous mode [ 227.866399][T11140] vti0: left promiscuous mode [ 227.874965][T11140] gtp0: left promiscuous mode [ 227.914945][T11149] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 228.110318][T11157] vlan2: entered promiscuous mode [ 228.121516][T11157] bridge0: entered promiscuous mode [ 228.939539][T11194] syzkaller0: entered promiscuous mode [ 228.945428][T11194] syzkaller0: entered allmulticast mode [ 229.019204][T11219] xt_cgroup: xt_cgroup: no path or classid specified [ 229.964928][T11223] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 230.566488][T11238] netlink: 'syz.3.1469': attribute type 15 has an invalid length. [ 230.724252][T11251] __nla_validate_parse: 7 callbacks suppressed [ 230.724272][T11251] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1473'. [ 230.906798][ T36] nci: nci_ntf_packet: unsupported ntf opcode 0xf13 [ 230.907115][T11270] netlink: 108 bytes leftover after parsing attributes in process `syz.2.1475'. [ 231.021141][T11277] xt_hashlimit: size too large, truncated to 1048576 [ 231.606353][T11258] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 231.637339][T11294] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 231.801259][T11305] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1484'. [ 231.864072][T11313] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1487'. [ 232.029361][T11320] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 232.216238][T11341] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1493'. [ 232.266980][T11341] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1493'. [ 232.338708][T11341] hsr_slave_0 (unregistering): left promiscuous mode [ 232.974562][T11367] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 233.122588][T11382] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 233.286365][T11385] netlink: 'syz.4.1506': attribute type 1 has an invalid length. [ 233.294806][T11385] netlink: 'syz.4.1506': attribute type 3 has an invalid length. [ 233.304322][T11385] netlink: 'syz.4.1506': attribute type 235 has an invalid length. [ 233.367134][T11392] netlink: 'syz.4.1506': attribute type 29 has an invalid length. [ 233.423262][T11385] netlink: 'syz.4.1506': attribute type 29 has an invalid length. [ 233.865339][T11414] tipc: Enabled bearer , priority 0 [ 233.887533][T11420] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1516'. [ 233.900846][T11420] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1516'. [ 233.910975][T11418] syzkaller0: entered promiscuous mode [ 233.920467][T11418] syzkaller0: entered allmulticast mode [ 233.957890][T11414] tipc: Resetting bearer [ 233.973234][T11413] tipc: Resetting bearer [ 234.027389][T11413] tipc: Disabling bearer [ 234.119565][T11428] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1519'. [ 234.163873][T11428] lo speed is unknown, defaulting to 1000 [ 234.184318][T11436] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 234.230990][T11440] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 234.287633][T11440] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1522'. [ 234.700371][T11469] netlink: 'syz.0.1529': attribute type 83 has an invalid length. [ 234.963769][T11480] bond5: Unable to set up delay as MII monitoring is disabled [ 234.976263][T11480] bond5 (unregistering): Released all slaves [ 235.221932][ T43] IPVS: starting estimator thread 0... [ 235.231772][T11500] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 235.313165][T11502] IPVS: using max 24 ests per chain, 57600 per kthread [ 235.506715][ T5836] Bluetooth: hci1: command 0x0406 tx timeout [ 235.522056][T11522] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 235.778420][T11537] __nla_validate_parse: 5 callbacks suppressed [ 235.778449][T11537] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1549'. [ 235.859350][T11541] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1551'. [ 235.873825][T11541] nbd: must specify at least one socket [ 235.926650][T11544] netlink: 'syz.1.1550': attribute type 1 has an invalid length. [ 235.940888][T11544] netlink: 'syz.1.1550': attribute type 4 has an invalid length. [ 235.950755][T11544] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.1550'. [ 235.987432][T11544] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1550'. [ 236.017194][T11549] netlink: 'syz.3.1552': attribute type 2 has an invalid length. [ 236.028518][T11549] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1552'. [ 236.039959][T11549] nbd: must specify at least one socket [ 236.252312][T11561] netlink: 'syz.3.1553': attribute type 1 has an invalid length. [ 236.262458][T11561] netlink: 232 bytes leftover after parsing attributes in process `syz.3.1553'. [ 236.272110][T11561] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1553'. [ 236.439941][T11567] x_tables: duplicate underflow at hook 2 [ 236.473076][T11568] netlink: 4096 bytes leftover after parsing attributes in process `syz.2.1556'. [ 236.493547][T11568] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 236.500919][T11571] 8021q: adding VLAN 0 to HW filter on device bond2 [ 236.535642][T11568] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1556'. [ 236.705819][T11585] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1562'. [ 236.769543][T11588] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 236.867365][T11587] syzkaller0: entered promiscuous mode [ 236.875579][T11587] syzkaller0: entered allmulticast mode [ 238.415782][T11607] tipc: Enabling of bearer rejected, failed to enable media [ 238.446398][T11599] lo speed is unknown, defaulting to 1000 [ 238.590866][T11631] sctp: [Deprecated]: syz.4.1572 (pid 11631) Use of struct sctp_assoc_value in delayed_ack socket option. [ 238.590866][T11631] Use struct sctp_sack_info instead [ 238.648646][T11631] sctp: [Deprecated]: syz.4.1572 (pid 11631) Use of struct sctp_assoc_value in delayed_ack socket option. [ 238.648646][T11631] Use struct sctp_sack_info instead [ 238.698225][T11642] netlink: del zone limit has 4 unknown bytes [ 239.262909][T11662] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 239.447743][T11680] tipc: Failed to remove unknown binding: 66,1,1/0:1806421385/1806421387 [ 239.462223][T11680] tipc: Failed to remove unknown binding: 66,1,1/0:1806421385/1806421387 [ 239.638055][T11698] ip6tnl2: entered promiscuous mode [ 239.951087][T11713] syzkaller0: entered promiscuous mode [ 239.956765][T11713] syzkaller0: entered allmulticast mode [ 240.000838][T11717] bond3: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 240.013075][T11717] bond3 (unregistering): Released all slaves [ 240.467515][T11733] xt_CT: You must specify a L4 protocol and not use inversions on it [ 240.716276][T11755] validate_nla: 3 callbacks suppressed [ 240.716365][T11755] netlink: 'syz.3.1603': attribute type 1 has an invalid length. [ 241.803178][T11757] bridge0: left allmulticast mode [ 241.923889][T11759] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 242.010240][T11766] __nla_validate_parse: 6 callbacks suppressed [ 242.010259][T11766] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1608'. [ 242.124420][T11777] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1611'. [ 242.526780][T11795] netlink: 180 bytes leftover after parsing attributes in process `syz.4.1618'. [ 242.539750][T11797] RDS: rds_bind could not find a transport for fc00::, load rds_tcp or rds_rdma? [ 242.800437][T11816] netlink: 232 bytes leftover after parsing attributes in process `syz.4.1623'. [ 242.935152][T11818] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1624'. [ 242.945006][T11822] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1625'. [ 243.075704][T11825] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 243.257627][T11836] siw: device registration error -23 [ 243.292409][T11840] sit1: entered promiscuous mode [ 243.323078][T11840] sit1: entered allmulticast mode [ 243.368682][T11847] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1635'. [ 243.423137][ T30] audit: type=1107 audit(1760694397.885:6): pid=11848 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 243.430875][T11851] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1636'. [ 243.574179][T11855] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1638'. [ 243.695008][T11860] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1640'. [ 244.160130][T11904] IPVS: set_ctl: invalid protocol: 135 172.20.20.187:0 [ 244.769241][T11914] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 244.791752][T11920] delete_channel: no stack [ 245.075018][T11932] netlink: 'syz.4.1658': attribute type 12 has an invalid length. [ 245.104937][ T61] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 245.118518][T11932] netlink: 'syz.4.1658': attribute type 12 has an invalid length. [ 245.129929][ T61] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 245.145829][ T61] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 245.157737][ T61] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 245.488682][T11951] netlink: 'syz.4.1664': attribute type 3 has an invalid length. [ 245.506765][T11951] netlink: 'syz.4.1664': attribute type 142 has an invalid length. [ 245.914934][T11981] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 246.259238][T11999] netlink: 'syz.3.1679': attribute type 22 has an invalid length. [ 246.530890][T12006] 8021q: adding VLAN 0 to HW filter on device bond5 [ 246.599907][T12012] dvmrp0: entered allmulticast mode [ 246.815472][T12029] Bluetooth: hci0: invalid length 39, exp 2 for type 23 [ 246.864943][T12032] x_tables: duplicate underflow at hook 2 [ 246.871336][T12033] sctp: [Deprecated]: syz.3.1692 (pid 12033) Use of int in max_burst socket option. [ 246.871336][T12033] Use struct sctp_assoc_value instead [ 246.888363][T12032] sctp: [Deprecated]: syz.3.1692 (pid 12032) Use of int in max_burst socket option. [ 246.888363][T12032] Use struct sctp_assoc_value instead [ 246.936347][T12038] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 247.038452][T12042] syzkaller0: entered promiscuous mode [ 247.046463][T12042] syzkaller0: entered allmulticast mode [ 247.058472][T12042] __nla_validate_parse: 13 callbacks suppressed [ 247.058492][T12042] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1695'. [ 248.696776][T12071] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1704'. [ 248.732576][T12069] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1703'. [ 248.886893][T12080] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1703'. [ 248.896370][T12083] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 248.988435][T12093] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1710'. [ 249.168658][T12103] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1713'. [ 249.512025][T12124] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1721'. [ 249.540599][T12130] netlink: 10 bytes leftover after parsing attributes in process `syz.3.1722'. [ 249.561255][T12130] netlink: 300 bytes leftover after parsing attributes in process `syz.3.1722'. [ 249.903617][T12152] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1728'. [ 250.187113][T12167] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 250.204954][T12173] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 250.405485][T12187] ip6gre0: Master is either lo or non-ether device [ 251.596732][T12247] netlink: 'syz.0.1757': attribute type 18 has an invalid length. [ 251.626473][ T61] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 251.639679][ T61] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 251.648316][ T61] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 251.657465][ T61] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 251.786554][T12254] netlink: 'syz.2.1759': attribute type 4 has an invalid length. [ 251.831746][T12255] IPVS: dh: SCTP 172.20.20.187:0 - no destination available [ 252.160513][T12263] __nla_validate_parse: 3 callbacks suppressed [ 252.160534][T12263] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1762'. [ 252.294619][T12269] syzkaller0: entered promiscuous mode [ 252.318515][T12269] syzkaller0: entered allmulticast mode [ 252.381074][T12269] macsec0: entered promiscuous mode [ 252.388499][T12269] macsec0: left promiscuous mode [ 252.393972][T12269] macsec0: left allmulticast mode [ 252.475037][T12273] netlink: 248 bytes leftover after parsing attributes in process `syz.3.1765'. [ 252.575361][T12281] TCP: TCP_TX_DELAY enabled [ 252.679093][T12284] bridge_slave_1: entered promiscuous mode [ 252.687509][T12284] netlink: 'syz.3.1768': attribute type 1 has an invalid length. [ 252.872071][T12296] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 253.020363][T12309] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1775'. [ 253.046859][T12309] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1775'. [ 253.243256][T12319] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1780'. [ 253.359561][T12327] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1784'. [ 253.411472][T12330] netlink: 'syz.4.1786': attribute type 10 has an invalid length. [ 253.421382][T12331] netlink: 'syz.3.1784': attribute type 9 has an invalid length. [ 253.429805][T12331] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1784'. [ 253.455149][T12331] netlink: 'syz.3.1784': attribute type 9 has an invalid length. [ 253.504320][T12331] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1784'. [ 253.521014][T12327] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1784'. [ 254.068541][T12375] netlink: 136 bytes leftover after parsing attributes in process `syz.1.1796'. [ 254.320397][T12382] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 254.636714][T12416] netlink: 'syz.1.1806': attribute type 1 has an invalid length. [ 254.649841][T12416] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 254.982586][T12444] bond6: option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 255.012747][T12444] bond6 (unregistering): Released all slaves [ 255.063603][T12446] syzkaller1: entered promiscuous mode [ 255.072144][T12446] syzkaller1: entered allmulticast mode [ 255.082066][T12448] sctp: [Deprecated]: syz.4.1814 (pid 12448) Use of struct sctp_assoc_value in delayed_ack socket option. [ 255.082066][T12448] Use struct sctp_sack_info instead [ 255.090583][T12452] netlink: 'syz.1.1815': attribute type 6 has an invalid length. [ 255.109576][T12452] netlink: 'syz.1.1815': attribute type 5 has an invalid length. [ 255.130670][T12452] netlink: 'syz.1.1815': attribute type 11 has an invalid length. [ 255.438885][T12467] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 255.439592][T12471] IPVS: set_ctl: invalid protocol: 136 224.0.0.2:20001 [ 255.815893][T12493] bond3: entered allmulticast mode [ 255.830739][T12493] 8021q: adding VLAN 0 to HW filter on device bond3 [ 255.850929][T12494] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 256.132136][T12517] vlan3: entered promiscuous mode [ 256.150848][T12517] erspan0: entered promiscuous mode [ 256.337996][T12531] tipc: Started in network mode [ 256.360431][T12531] tipc: Node identity 56f507e1a57b, cluster identity 4711 [ 256.374772][T12531] tipc: Enabled bearer , priority 0 [ 256.492143][T12533] tipc: Disabling bearer [ 256.526597][T12545] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 256.641648][T12557] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 256.699687][T12559] validate_nla: 4 callbacks suppressed [ 256.699707][T12559] netlink: 'syz.4.1849': attribute type 3 has an invalid length. [ 256.788400][T12560] tipc: Enabling of bearer rejected, media not registered [ 256.820367][T12560] syzkaller0: entered promiscuous mode [ 256.837207][T12560] syzkaller0: entered allmulticast mode [ 257.386872][T12592] __nla_validate_parse: 11 callbacks suppressed [ 257.386896][T12592] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1859'. [ 257.470550][T12595] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1863'. [ 257.720604][T12609] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 257.829271][T12618] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1871'. [ 257.886783][T12618] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1871'. [ 257.960526][T12622] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1873'. [ 258.028719][T12626] netlink: 'syz.0.1875': attribute type 3 has an invalid length. [ 258.121702][T12625] netlink: 'syz.3.1874': attribute type 14 has an invalid length. [ 258.130538][T12625] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1874'. [ 258.142321][T12625] netlink: 'syz.3.1874': attribute type 14 has an invalid length. [ 258.152681][T12625] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1874'. [ 258.386833][T12653] netlink: del zone limit has 4 unknown bytes [ 258.555608][T12667] tipc: Enabled bearer , priority 0 [ 258.564644][T12667] syzkaller0: entered promiscuous mode [ 258.570247][T12667] syzkaller0: entered allmulticast mode [ 258.617891][T12667] tipc: Resetting bearer [ 258.638779][T12666] tipc: Resetting bearer [ 258.658539][T12666] tipc: Disabling bearer [ 258.791712][T12679] netlink: 'syz.0.1890': attribute type 1 has an invalid length. [ 258.804569][T12680] netlink: 'syz.0.1890': attribute type 1 has an invalid length. [ 258.999539][T12691] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1892'. [ 259.013969][T12691] syzkaller0: entered promiscuous mode [ 259.019768][T12691] syzkaller0: entered allmulticast mode [ 259.037739][T12691] veth0_to_hsr: mtu less than device minimum [ 259.075388][T12692] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 259.212647][T12696] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 259.241629][T12701] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 259.244400][T12704] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1897'. [ 259.360684][T12709] dvmrp1: entered allmulticast mode [ 259.426905][T12711] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1900'. [ 259.562258][T12718] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 259.890995][T12741] tipc: Enabling of bearer rejected, failed to enable media [ 260.121560][T12753] bridge_slave_0: invalid flags given to default FDB implementation [ 260.187480][T12756] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 260.261918][T12765] IPVS: length: 33 != 24 [ 260.377231][T12774] netlink: 'syz.4.1919': attribute type 8 has an invalid length. [ 260.458066][T12764] batadv_slave_1: left promiscuous mode [ 260.464722][T12764] batadv_slave_1: left allmulticast mode [ 260.499395][T12764] veth1_virt_wifi: left promiscuous mode [ 260.505825][T12764] veth1_virt_wifi: left allmulticast mode [ 260.574537][T12764] xfrm1: left promiscuous mode [ 260.579670][T12764] xfrm1: left allmulticast mode [ 260.588572][T12764] veth3: left promiscuous mode [ 260.594116][T12764] veth3: left allmulticast mode [ 260.600844][T12764] vlan2: left promiscuous mode [ 260.606238][T12764] vlan2: left allmulticast mode [ 260.611137][T12764] hsr_slave_1: left allmulticast mode [ 260.617969][T12764] veth5: left allmulticast mode [ 260.626762][T12764] geneve2: left promiscuous mode [ 260.631921][T12764] geneve2: left allmulticast mode [ 260.657977][T12764] vlan0: left allmulticast mode [ 260.663408][T12764] veth0_vlan: left allmulticast mode [ 260.668741][T12764] vlan0: left promiscuous mode [ 260.674337][T12764] macvtap1: left promiscuous mode [ 260.679748][T12764] macvtap1: left allmulticast mode [ 260.721346][T12764] sit1: left promiscuous mode [ 260.726406][T12764] sit1: left allmulticast mode [ 260.747067][ T43] lo speed is unknown, defaulting to 1000 [ 260.752879][ T43] syz2: Port: 1 Link DOWN [ 260.775856][ T12] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 260.799984][ T12] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.836958][ T12] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 260.863860][ T12] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.936945][ T12] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 260.950023][ T12] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.012336][ T12] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 261.052145][ T12] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.061488][T12784] syzkaller0: entered promiscuous mode [ 261.068941][T12784] syzkaller0: entered allmulticast mode [ 261.118737][T12786] tipc: Enabled bearer , priority 0 [ 261.196183][ T1302] aoe: packet could not be sent on veth0_virt_wifi. consider increasing tx_queue_len [ 261.259183][T12786] syzkaller0: entered promiscuous mode [ 261.265238][T12786] syzkaller0: entered allmulticast mode [ 261.271425][T12786] tipc: Resetting bearer [ 261.289377][T12804] bridge4: the hash_elasticity option has been deprecated and is always 16 [ 261.332112][T12805] xt_bpf: check failed: parse error [ 261.466796][T12785] tipc: Resetting bearer [ 261.476403][T12809] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 262.194526][ T5833] tipc: Node number set to 2943558519 [ 263.447164][T12785] tipc: Disabling bearer [ 263.822019][T12837] lo speed is unknown, defaulting to 1000 [ 264.057291][T12856] tipc: Enabled bearer , priority 0 [ 264.136478][T12856] syzkaller0: entered promiscuous mode [ 264.142162][T12856] syzkaller0: entered allmulticast mode [ 264.150119][T12859] tipc: Enabled bearer , priority 0 [ 264.164962][T12860] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 264.167334][T12865] syzkaller0: entered promiscuous mode [ 264.181635][T12865] syzkaller0: entered allmulticast mode [ 264.198993][T12863] syzkaller1: entered allmulticast mode [ 264.249301][T12856] tipc: Resetting bearer [ 264.275497][T12859] __nla_validate_parse: 5 callbacks suppressed [ 264.275514][T12859] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1944'. [ 264.297384][T12859] tipc: Resetting bearer [ 264.345579][T12858] tipc: Resetting bearer [ 264.367662][T12858] tipc: Disabling bearer [ 264.380674][T12855] tipc: Resetting bearer [ 264.409335][T12855] tipc: Disabling bearer [ 264.646368][T12880] netlink: 45 bytes leftover after parsing attributes in process `syz.2.1951'. [ 264.717897][T12884] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1952'. [ 264.728858][T12884] bridge_slave_1: left allmulticast mode [ 264.744626][T12884] bridge_slave_1: left promiscuous mode [ 264.750493][T12884] bridge0: port 2(bridge_slave_1) entered disabled state [ 264.764671][T12886] netlink: 'syz.3.1954': attribute type 21 has an invalid length. [ 264.776802][T12886] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1954'. [ 264.800402][T12884] bridge_slave_0: left allmulticast mode [ 264.817576][T12884] bridge_slave_0: left promiscuous mode [ 264.832375][T12884] bridge0: port 1(bridge_slave_0) entered disabled state [ 264.898480][T12886] netlink: 'syz.3.1954': attribute type 4 has an invalid length. [ 264.931485][T12886] netlink: 'syz.3.1954': attribute type 5 has an invalid length. [ 264.939960][T12886] netlink: 3 bytes leftover after parsing attributes in process `syz.3.1954'. [ 265.222577][T12919] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1960'. [ 265.764281][T12918] xfrm1: left promiscuous mode [ 265.771288][T12918] vlan0: left allmulticast mode [ 265.778400][T12918] veth0_vlan: left allmulticast mode [ 265.784344][T12918] vlan0: left promiscuous mode [ 265.789761][T12918] macvtap1: left promiscuous mode [ 265.798776][T12918] veth5: left promiscuous mode [ 265.815602][T12918] geneve2: left promiscuous mode [ 265.824067][T12918] gretap1: left promiscuous mode [ 265.839015][T12918] bond2: left promiscuous mode [ 265.846137][T12918] ip6tnl2: left promiscuous mode [ 265.987275][T12926] bond7: option resend_igmp: invalid value (32767) [ 265.995073][T12926] bond7: option resend_igmp: allowed values 0 - 255 [ 266.007405][T12926] bond7 (unregistering): Released all slaves [ 266.078378][T12931] syzkaller1: entered promiscuous mode [ 266.094004][T12931] syzkaller1: entered allmulticast mode [ 266.101398][ T13] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.139148][T12941] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1967'. [ 266.153636][ T13] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.182029][ T13] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.203539][ T13] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.410045][T12967] IPVS: set_ctl: invalid protocol: 0 172.20.20.187:20001 [ 266.419143][T12957] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1969'. [ 266.487776][T12956] pim6reg: entered allmulticast mode [ 266.518784][T12965] pim6reg: left allmulticast mode [ 266.613836][T12956] pim6reg: entered allmulticast mode [ 266.666034][T12965] pim6reg: left allmulticast mode [ 266.826854][T12987] netlink: 'syz.3.1974': attribute type 2 has an invalid length. [ 266.920667][T12987] netlink: 9 bytes leftover after parsing attributes in process `syz.3.1974'. [ 266.940627][T12990] xt_recent: Unsupported userspace flags (000000b1) [ 267.003876][T12987] gretap0: entered promiscuous mode [ 267.081034][T12987] netlink: 5 bytes leftover after parsing attributes in process `syz.3.1974'. [ 267.115278][T12987] 0ªî{X¹¦: renamed from gretap0 [ 267.125652][T12987] 0ªî{X¹¦: left promiscuous mode [ 267.130759][T12987] 0ªî{X¹¦: entered allmulticast mode [ 267.175294][T12987] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 267.417045][T13015] block nbd1: Unsupported socket: should be TCP or UNIX. [ 268.079525][T13062] netlink: 'syz.2.1997': attribute type 6 has an invalid length. [ 268.117370][T13062] netlink: 'syz.2.1997': attribute type 6 has an invalid length. [ 268.324757][T13072] 8021q: adding VLAN 0 to HW filter on device bond0 [ 268.344685][T13072] bond0: (slave gre0): The slave device specified does not support setting the MAC address [ 268.359043][T13072] bond0: (slave gre0): Error -95 calling set_mac_address [ 268.731492][T13091] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 268.755393][T13098] netlink: 'syz.4.2005': attribute type 2 has an invalid length. [ 268.804837][T13111] FAULT_INJECTION: forcing a failure. [ 268.804837][T13111] name failslab, interval 1, probability 0, space 0, times 1 [ 268.818154][T13111] CPU: 1 UID: 0 PID: 13111 Comm: syz.0.2008 Not tainted syzkaller #0 PREEMPT(full) [ 268.818185][T13111] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 268.818206][T13111] Call Trace: [ 268.818216][T13111] [ 268.818224][T13111] dump_stack_lvl+0x189/0x250 [ 268.818266][T13111] ? __pfx____ratelimit+0x10/0x10 [ 268.818301][T13111] ? __pfx_dump_stack_lvl+0x10/0x10 [ 268.818323][T13111] ? __pfx__printk+0x10/0x10 [ 268.818351][T13111] ? __pfx___might_resched+0x10/0x10 [ 268.818380][T13111] ? fs_reclaim_acquire+0x7d/0x100 [ 268.818411][T13111] should_fail_ex+0x414/0x560 [ 268.818452][T13111] should_failslab+0xa8/0x100 [ 268.818482][T13111] kmem_cache_alloc_node_noprof+0x77/0x710 [ 268.818505][T13111] ? __alloc_skb+0x112/0x2d0 [ 268.818535][T13111] ? netlink_autobind+0xdb/0x300 [ 268.818572][T13111] __alloc_skb+0x112/0x2d0 [ 268.818606][T13111] netlink_sendmsg+0x5c6/0xb30 [ 268.818648][T13111] ? __pfx_netlink_sendmsg+0x10/0x10 [ 268.818682][T13111] ? aa_sock_msg_perm+0xf1/0x1d0 [ 268.818716][T13111] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 268.818744][T13111] ? __pfx_netlink_sendmsg+0x10/0x10 [ 268.818777][T13111] __sock_sendmsg+0x21c/0x270 [ 268.818807][T13111] ____sys_sendmsg+0x52d/0x830 [ 268.818854][T13111] ? __pfx_____sys_sendmsg+0x10/0x10 [ 268.818899][T13111] ? import_iovec+0x74/0xa0 [ 268.818931][T13111] ___sys_sendmsg+0x21f/0x2a0 [ 268.818954][T13111] ? __pfx____sys_sendmsg+0x10/0x10 [ 268.819025][T13111] ? __fget_files+0x2a/0x420 [ 268.819049][T13111] ? __fget_files+0x3a0/0x420 [ 268.819086][T13111] __sys_sendmmsg+0x227/0x430 [ 268.819113][T13111] ? __pfx___sys_sendmmsg+0x10/0x10 [ 268.819142][T13111] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 268.819185][T13111] ? ksys_write+0x22a/0x250 [ 268.819210][T13111] ? __pfx_ksys_write+0x10/0x10 [ 268.819237][T13111] __x64_sys_sendmmsg+0xa0/0xc0 [ 268.819258][T13111] do_syscall_64+0xfa/0xfa0 [ 268.819278][T13111] ? lockdep_hardirqs_on+0x9c/0x150 [ 268.819297][T13111] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 268.819317][T13111] ? clear_bhb_loop+0x60/0xb0 [ 268.819343][T13111] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 268.819364][T13111] RIP: 0033:0x7fb78438eec9 [ 268.819396][T13111] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 268.819415][T13111] RSP: 002b:00007fb7851b3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 268.819446][T13111] RAX: ffffffffffffffda RBX: 00007fb7845e5fa0 RCX: 00007fb78438eec9 [ 268.819462][T13111] RDX: 04000000000001f2 RSI: 0000200000000000 RDI: 0000000000000004 [ 268.819477][T13111] RBP: 00007fb7851b3090 R08: 0000000000000000 R09: 0000000000000000 [ 268.819490][T13111] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 268.819502][T13111] R13: 00007fb7845e6038 R14: 00007fb7845e5fa0 R15: 00007fff16420fa8 [ 268.819537][T13111] [ 269.116129][T13110] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 269.162372][T13113] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 269.489651][T13128] x_tables: duplicate underflow at hook 3 [ 269.618519][T13141] __nla_validate_parse: 9 callbacks suppressed [ 269.618543][T13141] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2013'. [ 269.743678][T13143] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2017'. [ 269.914378][T13159] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2022'. [ 270.365793][T13185] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2028'. [ 270.670747][T13204] netlink: 'syz.3.2033': attribute type 1 has an invalid length. [ 270.824051][T13211] 8021q: adding VLAN 0 to HW filter on device bond6 [ 270.935644][T13204] veth3: entered promiscuous mode [ 270.954981][T13204] bond6: (slave veth3): Enslaving as a backup interface with a down link [ 270.970729][T13229] sctp: [Deprecated]: syz.0.2037 (pid 13229) Use of int in max_burst socket option. [ 270.970729][T13229] Use struct sctp_assoc_value instead [ 271.030424][T13224] sctp: [Deprecated]: syz.0.2037 (pid 13224) Use of int in max_burst socket option. [ 271.030424][T13224] Use struct sctp_assoc_value instead [ 271.666574][T13263] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2047'. [ 271.724062][T13263] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2047'. [ 271.794853][ T134] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 271.840755][ T134] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 271.849432][T13263] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2047'. [ 271.876566][T13269] IPVS: Scheduler module ip_vs_sip not found [ 271.904897][ T134] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 271.936429][ T134] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 271.981634][T13282] openvswitch: netlink: Actions may not be safe on all matching packets [ 272.159080][T13286] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2052'. [ 272.436901][T13308] tipc: Enabled bearer , priority 0 [ 272.492445][T13311] syzkaller0: entered promiscuous mode [ 272.510742][T13311] syzkaller0: entered allmulticast mode [ 272.667333][T13308] tipc: Resetting bearer [ 272.700461][T13308] ªªªªªª: renamed from vlan0 [ 272.742140][T13307] tipc: Resetting bearer [ 272.766257][T13324] Bluetooth: hci0: invalid length 0, exp 2 for type 12 [ 272.837029][T13307] tipc: Disabling bearer [ 273.104079][T13346] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2065'. [ 273.108857][T13344] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 273.486591][T13369] tipc: Enabled bearer , priority 0 [ 273.519284][T13363] syzkaller0: entered promiscuous mode [ 273.530450][T13375] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 273.552288][T13363] syzkaller0: entered allmulticast mode [ 273.707137][T13369] tipc: Resetting bearer [ 273.760774][T13385] netlink: 128 bytes leftover after parsing attributes in process `syz.4.2075'. [ 273.790355][T13387] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 273.820247][ T5836] block nbd1: Receive control failed (result -32) [ 273.841000][T13387] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 273.854896][T13356] tipc: Resetting bearer [ 273.941471][T13356] tipc: Disabling bearer [ 274.254187][T13409] FAULT_INJECTION: forcing a failure. [ 274.254187][T13409] name failslab, interval 1, probability 0, space 0, times 0 [ 274.301348][T13409] CPU: 1 UID: 0 PID: 13409 Comm: syz.2.2082 Not tainted syzkaller #0 PREEMPT(full) [ 274.301379][T13409] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 274.301394][T13409] Call Trace: [ 274.301402][T13409] [ 274.301412][T13409] dump_stack_lvl+0x189/0x250 [ 274.301446][T13409] ? __pfx____ratelimit+0x10/0x10 [ 274.301481][T13409] ? __pfx_dump_stack_lvl+0x10/0x10 [ 274.301503][T13409] ? __pfx__printk+0x10/0x10 [ 274.301532][T13409] ? __pfx___might_resched+0x10/0x10 [ 274.301568][T13409] should_fail_ex+0x414/0x560 [ 274.301608][T13409] should_failslab+0xa8/0x100 [ 274.301638][T13409] kmem_cache_alloc_node_noprof+0x77/0x710 [ 274.301662][T13409] ? __alloc_skb+0x112/0x2d0 [ 274.301699][T13409] __alloc_skb+0x112/0x2d0 [ 274.301743][T13409] netlink_ack+0x146/0xa50 [ 274.301770][T13409] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 274.301819][T13409] netlink_rcv_skb+0x28c/0x470 [ 274.301847][T13409] ? __lock_acquire+0xab9/0xd20 [ 274.301875][T13409] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 274.301907][T13409] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 274.301951][T13409] ? netlink_deliver_tap+0x2e/0x1b0 [ 274.302002][T13409] netlink_unicast+0x82f/0x9e0 [ 274.302039][T13409] ? __pfx_netlink_unicast+0x10/0x10 [ 274.302068][T13409] ? netlink_sendmsg+0x642/0xb30 [ 274.302095][T13409] ? skb_put+0x11b/0x210 [ 274.302128][T13409] netlink_sendmsg+0x805/0xb30 [ 274.302169][T13409] ? __pfx_netlink_sendmsg+0x10/0x10 [ 274.302204][T13409] ? aa_sock_msg_perm+0xf1/0x1d0 [ 274.302229][T13409] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 274.302256][T13409] ? __pfx_netlink_sendmsg+0x10/0x10 [ 274.302288][T13409] __sock_sendmsg+0x21c/0x270 [ 274.302316][T13409] ____sys_sendmsg+0x52d/0x830 [ 274.302356][T13409] ? __pfx_____sys_sendmsg+0x10/0x10 [ 274.302401][T13409] ? import_iovec+0x74/0xa0 [ 274.302433][T13409] ___sys_sendmsg+0x21f/0x2a0 [ 274.302468][T13409] ? __pfx____sys_sendmsg+0x10/0x10 [ 274.302544][T13409] ? __fget_files+0x2a/0x420 [ 274.302570][T13409] ? __fget_files+0x3a0/0x420 [ 274.302609][T13409] __sys_sendmmsg+0x227/0x430 [ 274.302634][T13409] ? __pfx___sys_sendmmsg+0x10/0x10 [ 274.302665][T13409] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 274.302706][T13409] ? ksys_write+0x22a/0x250 [ 274.302741][T13409] ? __pfx_ksys_write+0x10/0x10 [ 274.302770][T13409] __x64_sys_sendmmsg+0xa0/0xc0 [ 274.302794][T13409] do_syscall_64+0xfa/0xfa0 [ 274.302813][T13409] ? lockdep_hardirqs_on+0x9c/0x150 [ 274.302833][T13409] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 274.302853][T13409] ? clear_bhb_loop+0x60/0xb0 [ 274.302880][T13409] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 274.302901][T13409] RIP: 0033:0x7f6df1b8eec9 [ 274.302920][T13409] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 274.302938][T13409] RSP: 002b:00007f6df2b0f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 274.302960][T13409] RAX: ffffffffffffffda RBX: 00007f6df1de5fa0 RCX: 00007f6df1b8eec9 [ 274.302975][T13409] RDX: 04000000000001f2 RSI: 0000200000000000 RDI: 0000000000000004 [ 274.302990][T13409] RBP: 00007f6df2b0f090 R08: 0000000000000000 R09: 0000000000000000 [ 274.303003][T13409] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 274.303015][T13409] R13: 00007f6df1de6038 R14: 00007f6df1de5fa0 R15: 00007ffd4abec548 [ 274.303052][T13409] [ 274.642501][T13411] __nla_validate_parse: 3 callbacks suppressed [ 274.642522][T13411] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2083'. [ 274.671431][T13408] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 274.833577][T13410] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 274.960832][T13438] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2088'. [ 274.971579][T13437] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2088'. [ 275.127138][T13454] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2092'. [ 275.143553][T13454] netlink: 'syz.0.2092': attribute type 4 has an invalid length. [ 275.155890][T13454] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2092'. [ 275.216458][T13459] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2093'. [ 275.417747][T13472] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2096'. [ 275.641576][T13491] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 275.804423][T13496] netlink: 'syz.1.2103': attribute type 1 has an invalid length. [ 275.898978][T13503] FAULT_INJECTION: forcing a failure. [ 275.898978][T13503] name failslab, interval 1, probability 0, space 0, times 0 [ 275.917488][T13503] CPU: 0 UID: 0 PID: 13503 Comm: syz.3.2106 Not tainted syzkaller #0 PREEMPT(full) [ 275.917519][T13503] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 275.917533][T13503] Call Trace: [ 275.917543][T13503] [ 275.917552][T13503] dump_stack_lvl+0x189/0x250 [ 275.917581][T13503] ? __pfx____ratelimit+0x10/0x10 [ 275.917623][T13503] ? __pfx_dump_stack_lvl+0x10/0x10 [ 275.917646][T13503] ? __pfx__printk+0x10/0x10 [ 275.917675][T13503] ? __pfx___might_resched+0x10/0x10 [ 275.917710][T13503] should_fail_ex+0x414/0x560 [ 275.917750][T13503] should_failslab+0xa8/0x100 [ 275.917781][T13503] kmem_cache_alloc_node_noprof+0x77/0x710 [ 275.917805][T13503] ? __alloc_skb+0x112/0x2d0 [ 275.917843][T13503] __alloc_skb+0x112/0x2d0 [ 275.917878][T13503] netlink_ack+0x146/0xa50 [ 275.917907][T13503] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 275.917935][T13503] ? ref_tracker_free+0x63a/0x7d0 [ 275.917959][T13503] ? __asan_memcpy+0x40/0x70 [ 275.917979][T13503] ? __pfx_ref_tracker_free+0x10/0x10 [ 275.918012][T13503] netlink_rcv_skb+0x28c/0x470 [ 275.918043][T13503] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 275.918074][T13503] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 275.918117][T13503] ? netlink_deliver_tap+0x2e/0x1b0 [ 275.918157][T13503] netlink_unicast+0x82f/0x9e0 [ 275.918195][T13503] ? __pfx_netlink_unicast+0x10/0x10 [ 275.918223][T13503] ? netlink_sendmsg+0x642/0xb30 [ 275.918251][T13503] ? skb_put+0x11b/0x210 [ 275.918285][T13503] netlink_sendmsg+0x805/0xb30 [ 275.918325][T13503] ? __pfx_netlink_sendmsg+0x10/0x10 [ 275.918361][T13503] ? aa_sock_msg_perm+0xf1/0x1d0 [ 275.918388][T13503] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 275.918416][T13503] ? __pfx_netlink_sendmsg+0x10/0x10 [ 275.918447][T13503] __sock_sendmsg+0x21c/0x270 [ 275.918477][T13503] ____sys_sendmsg+0x52d/0x830 [ 275.918517][T13503] ? __pfx_____sys_sendmsg+0x10/0x10 [ 275.918561][T13503] ? import_iovec+0x74/0xa0 [ 275.918600][T13503] ___sys_sendmsg+0x21f/0x2a0 [ 275.918623][T13503] ? __pfx____sys_sendmsg+0x10/0x10 [ 275.918695][T13503] ? __fget_files+0x2a/0x420 [ 275.918719][T13503] ? __fget_files+0x3a0/0x420 [ 275.918756][T13503] __sys_sendmmsg+0x227/0x430 [ 275.918784][T13503] ? __pfx___sys_sendmmsg+0x10/0x10 [ 275.918815][T13503] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 275.918857][T13503] ? ksys_write+0x22a/0x250 [ 275.918884][T13503] ? __pfx_ksys_write+0x10/0x10 [ 275.918913][T13503] __x64_sys_sendmmsg+0xa0/0xc0 [ 275.918937][T13503] do_syscall_64+0xfa/0xfa0 [ 275.918958][T13503] ? lockdep_hardirqs_on+0x9c/0x150 [ 275.918980][T13503] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 275.919001][T13503] ? clear_bhb_loop+0x60/0xb0 [ 275.919027][T13503] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 275.919048][T13503] RIP: 0033:0x7f9d8898eec9 [ 275.919068][T13503] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 275.919087][T13503] RSP: 002b:00007f9d89914038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 275.919110][T13503] RAX: ffffffffffffffda RBX: 00007f9d88be5fa0 RCX: 00007f9d8898eec9 [ 275.919125][T13503] RDX: 04000000000001f2 RSI: 0000200000000000 RDI: 0000000000000004 [ 275.919140][T13503] RBP: 00007f9d89914090 R08: 0000000000000000 R09: 0000000000000000 [ 275.919153][T13503] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 275.919166][T13503] R13: 00007f9d88be6038 R14: 00007f9d88be5fa0 R15: 00007fff4f5daac8 [ 275.919203][T13503] [ 275.989567][T13501] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 276.303416][T13518] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2111'. [ 276.531325][T13537] tipc: Enabling of bearer rejected, failed to enable media [ 276.559538][T13537] netlink: 14436 bytes leftover after parsing attributes in process `syz.1.2114'. [ 276.568958][T13537] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 276.615391][T13539] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2116'. [ 276.666838][T13541] raw_sendmsg: syz.1.2118 forgot to set AF_INET. Fix it! [ 276.826009][T13553] netlink: 'syz.0.2122': attribute type 4 has an invalid length. [ 276.982369][T13557] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 277.095352][T13571] netlink: 'syz.0.2129': attribute type 1 has an invalid length. [ 277.145471][T13567] netlink: 'syz.3.2128': attribute type 8 has an invalid length. [ 277.162225][T13571] bond5: (slave bridge3): making interface the new active one [ 277.172169][T13571] bond5: (slave bridge3): Enslaving as an active interface with an up link [ 277.344248][T13583] team0: Device vti0 is of different type [ 278.152273][T13624] lo speed is unknown, defaulting to 1000 [ 278.389653][T13637] netlink: 'syz.4.2151': attribute type 8 has an invalid length. [ 278.675110][T13633] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 278.694943][T13648] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 279.041068][T13678] netlink: 'syz.0.2161': attribute type 12 has an invalid length. [ 279.052256][T13676] Bluetooth: hci0: invalid length 39, exp 2 for type 22 [ 279.431399][T13694] tipc: Enabled bearer , priority 0 [ 279.456047][T13694] syzkaller0: entered promiscuous mode [ 279.463797][T13694] syzkaller0: entered allmulticast mode [ 279.479175][T13694] sch_tbf: burst 206 is lower than device syzkaller0 mtu (1514) ! [ 279.580829][T13694] tipc: Resetting bearer [ 279.609670][T13694] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 279.672495][T13693] tipc: Resetting bearer [ 279.695482][T13693] tipc: Disabling bearer [ 280.223110][ T13] wlan1: Trigger new scan to find an IBSS to join [ 280.265142][T13719] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 280.548253][T13761] __nla_validate_parse: 9 callbacks suppressed [ 280.548274][T13761] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2180'. [ 280.942156][ T30] audit: type=1804 audit(1760694435.405:7): pid=13779 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.2185" name="/newroot/392/cgroup.controllers" dev="tmpfs" ino=2015 res=1 errno=0 [ 281.003355][T13780] netlink: 88 bytes leftover after parsing attributes in process `syz.3.2184'. [ 281.023545][ T30] audit: type=1800 audit(1760694435.435:8): pid=13779 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2185" name="cgroup.controllers" dev="tmpfs" ino=2015 res=0 errno=0 [ 282.021678][T13847] netlink: 'syz.1.2200': attribute type 1 has an invalid length. [ 282.107857][T13858] netlink: 'syz.2.2203': attribute type 29 has an invalid length. [ 282.189846][T13847] bond8: entered promiscuous mode [ 282.204846][T13847] 8021q: adding VLAN 0 to HW filter on device bond8 [ 282.333831][T13857] 8021q: adding VLAN 0 to HW filter on device bond8 [ 282.341313][T13857] bond8: (slave wireguard0): The slave device specified does not support setting the MAC address [ 282.362424][T13857] bond8: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 282.394669][T13857] bond8: (slave wireguard0): making interface the new active one [ 282.420554][T13857] wireguard0: entered promiscuous mode [ 282.428261][T13857] bond8: (slave wireguard0): Enslaving as an active interface with an up link [ 282.547454][T13889] syzkaller1: entered promiscuous mode [ 282.560758][T13889] syzkaller1: entered allmulticast mode [ 282.760888][T13896] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 282.882202][T13900] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2211'. [ 282.997419][T13905] netlink: 9 bytes leftover after parsing attributes in process `syz.2.2214'. [ 283.007147][T13905] gretap0: entered promiscuous mode [ 283.085880][T13908] bond9: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 283.102755][T13908] bond9 (unregistering): Released all slaves [ 283.152433][T13910] 8021q: VLANs not supported on xfrm0 [ 283.180342][T13910] netlink: 5 bytes leftover after parsing attributes in process `syz.2.2214'. [ 283.190037][T13913] syzkaller1: entered promiscuous mode [ 283.214633][T13913] syzkaller1: entered allmulticast mode [ 283.223127][T13910] 0ªî{X¹¦: renamed from gretap0 [ 283.241227][T13921] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2216'. [ 283.265212][T13910] 0ªî{X¹¦: left promiscuous mode [ 283.270396][T13910] 0ªî{X¹¦: entered allmulticast mode [ 283.288256][T13910] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 283.590990][T13941] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2222'. [ 283.851177][T13940] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 284.024919][T13972] netdevsim netdevsim1 ÿÿÿÿÿÿ: renamed from netdevsim0 [ 284.050933][T13972] smc: net device geneve0 applied user defined pnetid SYZ0 [ 284.401292][T13996] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2237'. [ 284.652195][T14009] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 284.725391][T14011] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 284.768923][T14013] netlink: 'syz.3.2243': attribute type 4 has an invalid length. [ 284.788966][T14013] netlink: 'syz.3.2243': attribute type 4 has an invalid length. [ 285.006968][T14022] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2246'. [ 285.040635][T14021] Cannot find del_set index 4 as target [ 285.184434][ T61] wlan1: Trigger new scan to find an IBSS to join [ 285.365276][T14041] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2250'. [ 286.114074][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 287.084505][T14050] 8021q: adding VLAN 0 to HW filter on device team0 [ 287.113708][T14050] team0: Cannot enslave team device to itself [ 287.233956][T14055] bond0: (slave gre0): The slave device specified does not support setting the MAC address [ 287.252358][T14055] bond0: (slave gre0): Error -95 calling set_mac_address [ 287.428266][T14072] syzkaller1: entered promiscuous mode [ 287.445267][T14076] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2262'. [ 287.454055][T14072] syzkaller1: entered allmulticast mode [ 287.656576][T14092] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2265'. [ 287.704846][T14097] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2264'. [ 287.716886][T14097] netlink: 35 bytes leftover after parsing attributes in process `syz.2.2264'. [ 287.746031][T14097] netlink: 'syz.2.2264': attribute type 5 has an invalid length. [ 287.760600][T14097] netlink: 'syz.2.2264': attribute type 6 has an invalid length. [ 287.770820][T14100] tipc: Enabled bearer , priority 0 [ 287.779930][T14100] syzkaller0: entered promiscuous mode [ 287.785902][T14100] syzkaller0: entered allmulticast mode [ 287.797514][T14097] netlink: 35 bytes leftover after parsing attributes in process `syz.2.2264'. [ 287.839181][T14100] tipc: Resetting bearer [ 287.922671][T14110] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 287.942249][ T24] IPVS: starting estimator thread 0... [ 287.952587][T14099] tipc: Resetting bearer [ 287.974519][T14116] netlink: 'syz.2.2270': attribute type 1 has an invalid length. [ 287.982569][T14116] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2270'. [ 287.996296][T14099] tipc: Disabling bearer [ 288.063237][T14111] IPVS: using max 27 ests per chain, 64800 per kthread [ 288.129209][T14121] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2274'. [ 288.201178][T14121] bond4 (unregistering): Released all slaves [ 288.218321][T14127] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2274'. [ 288.234537][T14127] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2274'. [ 288.407668][T14143] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2279'. [ 289.020561][T14172] tipc: Cannot configure node identity twice [ 290.160704][T14222] netlink: 'syz.4.2303': attribute type 11 has an invalid length. [ 290.244612][T14224] openvswitch: netlink: Duplicate key (type 1). [ 290.357483][T14222] netlink: 'syz.4.2303': attribute type 1 has an invalid length. [ 290.610849][T14235] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 291.118825][T14278] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 291.314768][T14289] tipc: Enabled bearer , priority 0 [ 291.322441][T14289] syzkaller0: entered promiscuous mode [ 291.328631][T14289] syzkaller0: entered allmulticast mode [ 291.386054][T14282] tipc: Resetting bearer [ 291.416823][T14280] tipc: Resetting bearer [ 291.447201][T14280] tipc: Disabling bearer [ 292.095167][T14325] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 292.095822][T14324] netlink: 'syz.0.2331': attribute type 1 has an invalid length. [ 292.275270][T14330] netlink: 'syz.2.2335': attribute type 16 has an invalid length. [ 292.574320][T14363] pim6reg527: entered allmulticast mode [ 292.927886][T14376] __nla_validate_parse: 29 callbacks suppressed [ 292.927908][T14376] netlink: 312 bytes leftover after parsing attributes in process `syz.0.2346'. [ 292.960256][T14379] veth1_macvtap: entered allmulticast mode [ 292.989742][T14379] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2349'. [ 293.014945][T14377] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2348'. [ 293.015585][T14378] veth1_macvtap: left allmulticast mode [ 293.121352][T14376] "syz.0.2346" (14376) uses obsolete ecb(arc4) skcipher [ 293.291130][T14396] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 293.504043][T14403] netlink: 14544 bytes leftover after parsing attributes in process `syz.4.2357'. [ 293.820704][T14427] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2365'. [ 294.038280][T14440] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2370'. [ 294.047365][T14440] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2370'. [ 294.058263][T14440] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2370'. [ 294.208241][T14458] syzkaller1: entered promiscuous mode [ 294.220804][T14458] syzkaller1: entered allmulticast mode [ 294.526861][T14478] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2382'. [ 294.536581][T14478] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2382'. [ 294.625895][T14475] sch_fq: defrate 0 ignored. [ 294.749976][T14494] tipc: Enabled bearer , priority 10 [ 294.761541][T14495] tipc: Enabling of bearer rejected, already enabled [ 294.897647][T14503] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 295.096621][T14509] IPVS: Scheduler module ip_vs_sip not found [ 295.498065][T14544] sctp: [Deprecated]: syz.2.2403 (pid 14544) Use of int in max_burst socket option. [ 295.498065][T14544] Use struct sctp_assoc_value instead [ 296.023590][T14573] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 296.071729][T14580] netlink: 'syz.0.2414': attribute type 4 has an invalid length. [ 297.420495][T14634] lo: left allmulticast mode [ 297.441265][T14634] tunl0: left allmulticast mode [ 297.448935][T14634] gre0: left allmulticast mode [ 297.454240][T14634] 0ªî{X¹¦: left allmulticast mode [ 297.459682][T14634] erspan0: left allmulticast mode [ 297.466205][T14634] ip_vti0: left allmulticast mode [ 297.488555][T14634] ip6_vti0: left allmulticast mode [ 297.501509][T14634] sit0: left allmulticast mode [ 297.520277][T14634] ip6tnl0: left allmulticast mode [ 297.530405][T14634] ip6gre0: left allmulticast mode [ 297.546036][T14634] syz_tun: left allmulticast mode [ 297.559318][T14634] ip6gretap0: left allmulticast mode [ 297.565451][T14634] bond0: left allmulticast mode [ 297.573199][T14634] team0: left allmulticast mode [ 297.578883][T14634] nlmon0: left allmulticast mode [ 297.585986][T14634] caif0: left allmulticast mode [ 297.591309][T14634] batadv0: left allmulticast mode [ 297.615531][T14634] veth0: left allmulticast mode [ 297.626305][T14634] veth1: left allmulticast mode [ 297.634703][T14634] wg0: left allmulticast mode [ 297.640091][T14634] wg1: left allmulticast mode [ 297.648095][T14634] wg2: left allmulticast mode [ 297.653801][T14634] veth0_to_bridge: left allmulticast mode [ 297.661391][T14634] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 298.020136][T14676] veth1: mtu less than device minimum [ 298.090525][T14669] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 298.414073][T14698] __nla_validate_parse: 11 callbacks suppressed [ 298.414093][T14698] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2449'. [ 298.636272][T14706] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2454'. [ 298.702848][T14709] veth13: entered allmulticast mode [ 299.210396][T14743] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2464'. [ 299.220692][T14743] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2464'. [ 299.567330][T14763] netlink: del zone limit has 4 unknown bytes [ 299.579769][T14763] netlink: del zone limit has 4 unknown bytes [ 299.589094][T14763] netlink: del zone limit has 4 unknown bytes [ 299.595722][T14763] netlink: del zone limit has 4 unknown bytes [ 299.602623][T14763] netlink: del zone limit has 4 unknown bytes [ 299.610729][T14766] netlink: 14436 bytes leftover after parsing attributes in process `syz.2.2471'. [ 299.620273][T14766] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 299.628719][T14763] netlink: del zone limit has 4 unknown bytes [ 299.635167][T14762] netlink: 'syz.0.2470': attribute type 11 has an invalid length. [ 299.635193][T14762] netlink: 'syz.0.2470': attribute type 11 has an invalid length. [ 299.635208][T14762] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2470'. [ 299.835935][T14776] netlink: 'syz.0.2472': attribute type 33 has an invalid length. [ 299.850118][T14776] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2472'. [ 299.861036][T14776] netlink: 'syz.0.2472': attribute type 33 has an invalid length. [ 299.870074][T14776] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2472'. [ 299.880311][T14776] netlink: 'syz.0.2472': attribute type 33 has an invalid length. [ 299.888735][T14776] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2472'. [ 299.898987][T14776] netlink: 'syz.0.2472': attribute type 33 has an invalid length. [ 299.907714][T14776] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2472'. [ 299.917433][T14776] netlink: 'syz.0.2472': attribute type 33 has an invalid length. [ 299.925877][T14776] netlink: 'syz.0.2472': attribute type 33 has an invalid length. [ 299.960802][T14776] netlink: 'syz.0.2472': attribute type 33 has an invalid length. [ 299.974322][T14776] netlink: 'syz.0.2472': attribute type 33 has an invalid length. [ 299.985132][T14776] netlink: 'syz.0.2472': attribute type 33 has an invalid length. [ 300.373350][T14811] gretap0: entered promiscuous mode [ 300.380332][T14811] gretap0: left promiscuous mode [ 300.479669][T14811] gretap0: entered promiscuous mode [ 300.494895][T14811] gretap0: left promiscuous mode [ 300.588567][T14811] gretap0: entered promiscuous mode [ 300.606871][T14811] gretap0: left promiscuous mode [ 300.655618][T14825] bridge5: entered promiscuous mode [ 300.661103][T14825] bridge5: entered allmulticast mode [ 300.725273][T14811] gretap0: entered promiscuous mode [ 300.731993][T14811] gretap0: left promiscuous mode [ 300.791291][T14811] gretap0: entered promiscuous mode [ 300.799286][T14811] gretap0: left promiscuous mode [ 300.861146][T14811] gretap0: entered promiscuous mode [ 300.868325][T14811] gretap0: left promiscuous mode [ 300.924967][T14811] gretap0: entered promiscuous mode [ 300.932289][T14811] gretap0: left promiscuous mode [ 300.944443][T14833] tipc: Failed to remove unknown binding: 66,1,1/2943558519:1029329953/1029329955 [ 300.955655][T14833] tipc: Failed to remove unknown binding: 66,1,1/2943558519:1029329953/1029329955 [ 301.002988][T14811] gretap0: entered promiscuous mode [ 301.010160][T14811] gretap0: left promiscuous mode [ 301.067155][T14811] gretap0: entered promiscuous mode [ 301.075758][T14811] gretap0: left promiscuous mode [ 301.088353][T14838] FAULT_INJECTION: forcing a failure. [ 301.088353][T14838] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 301.102575][T14838] CPU: 0 UID: 0 PID: 14838 Comm: syz.4.2491 Not tainted syzkaller #0 PREEMPT(full) [ 301.102606][T14838] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 301.102631][T14838] Call Trace: [ 301.102640][T14838] [ 301.102650][T14838] dump_stack_lvl+0x189/0x250 [ 301.102727][T14838] ? __pfx____ratelimit+0x10/0x10 [ 301.102758][T14838] ? __pfx_dump_stack_lvl+0x10/0x10 [ 301.102778][T14838] ? __pfx__printk+0x10/0x10 [ 301.102809][T14838] should_fail_ex+0x414/0x560 [ 301.102844][T14838] _copy_to_user+0x31/0xb0 [ 301.102873][T14838] simple_read_from_buffer+0xe1/0x170 [ 301.102906][T14838] proc_fail_nth_read+0x1b3/0x220 [ 301.102944][T14838] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 301.102981][T14838] ? rw_verify_area+0x2a6/0x4d0 [ 301.103001][T14838] ? __lock_acquire+0xab9/0xd20 [ 301.103026][T14838] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 301.103061][T14838] vfs_read+0x200/0xa30 [ 301.103082][T14838] ? fdget_pos+0x247/0x320 [ 301.103113][T14838] ? __pfx___mutex_lock+0x10/0x10 [ 301.103136][T14838] ? __pfx_vfs_read+0x10/0x10 [ 301.103161][T14838] ? __fget_files+0x2a/0x420 [ 301.103193][T14838] ? __fget_files+0x3a0/0x420 [ 301.103218][T14838] ? __fget_files+0x2a/0x420 [ 301.103255][T14838] ksys_read+0x145/0x250 [ 301.103281][T14838] ? __pfx_ksys_read+0x10/0x10 [ 301.103308][T14838] ? do_syscall_64+0xbe/0xfa0 [ 301.103335][T14838] do_syscall_64+0xfa/0xfa0 [ 301.103353][T14838] ? lockdep_hardirqs_on+0x9c/0x150 [ 301.103374][T14838] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 301.103396][T14838] ? clear_bhb_loop+0x60/0xb0 [ 301.103421][T14838] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 301.103439][T14838] RIP: 0033:0x7f91ca18d8dc [ 301.103456][T14838] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 301.103471][T14838] RSP: 002b:00007f91cb070030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 301.103491][T14838] RAX: ffffffffffffffda RBX: 00007f91ca3e5fa0 RCX: 00007f91ca18d8dc [ 301.103504][T14838] RDX: 000000000000000f RSI: 00007f91cb0700a0 RDI: 0000000000000005 [ 301.103515][T14838] RBP: 00007f91cb070090 R08: 0000000000000000 R09: 0000000000000000 [ 301.103526][T14838] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 301.103536][T14838] R13: 00007f91ca3e6038 R14: 00007f91ca3e5fa0 R15: 00007fff19e36288 [ 301.103572][T14838] [ 301.374178][T14837] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 301.480945][T14841] validate_nla: 67 callbacks suppressed [ 301.480968][T14841] netlink: 'syz.0.2492': attribute type 1 has an invalid length. [ 301.530238][T14841] netlink: 'syz.0.2492': attribute type 3 has an invalid length. [ 301.582559][T14841] NCSI netlink: No device for ifindex 0 [ 301.768700][T14861] gretap2: entered promiscuous mode [ 301.800420][T14861] gretap2: entered allmulticast mode [ 301.853374][T14868] nftables ruleset with unbound chain [ 302.225616][T14889] netlink: 'syz.3.2510': attribute type 1 has an invalid length. [ 302.234078][T14889] netlink: 'syz.3.2510': attribute type 2 has an invalid length. [ 302.250296][T14889] netlink: 'syz.3.2510': attribute type 1 has an invalid length. [ 302.263454][T14889] hsr0 speed is unknown, defaulting to 1000 [ 302.272327][T14889] hsr0 speed is unknown, defaulting to 1000 [ 302.294178][T14889] hsr0 speed is unknown, defaulting to 1000 [ 302.332184][T14899] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 302.343525][T14889] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 302.431118][T14889] hsr0 speed is unknown, defaulting to 1000 [ 302.458617][T14889] hsr0 speed is unknown, defaulting to 1000 [ 302.481685][T14889] hsr0 speed is unknown, defaulting to 1000 [ 302.494636][T14889] hsr0 speed is unknown, defaulting to 1000 [ 302.518761][T14889] hsr0 speed is unknown, defaulting to 1000 [ 302.532648][T14899] siw: device registration error -23 [ 302.748868][T14923] netlink: 'syz.4.2519': attribute type 1 has an invalid length. [ 302.819264][T14923] 8021q: adding VLAN 0 to HW filter on device bond4 [ 302.882851][T14928] bond4: (slave veth5): Enslaving as an active interface with a down link [ 302.898226][T14934] xt_TCPMSS: Only works on TCP SYN packets [ 302.904688][T14932] tipc: Enabling of bearer rejected, failed to enable media [ 302.932077][T14923] bond4: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 302.948275][T14928] IPVS: set_ctl: invalid protocol: 44 224.0.0.1:20000 [ 302.957810][T14936] netlink: 'syz.2.2523': attribute type 11 has an invalid length. [ 303.122282][T14940] tipc: Enabled bearer , priority 0 [ 303.130674][T14940] syzkaller0: entered promiscuous mode [ 303.138749][T14940] syzkaller0: entered allmulticast mode [ 303.154564][T14943] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 303.191938][T14940] tipc: Resetting bearer [ 303.214556][T14939] tipc: Resetting bearer [ 303.293338][T14939] tipc: Disabling bearer [ 303.817112][T14975] xt_CT: No such helper "syz1" [ 303.824056][T14978] __nla_validate_parse: 92 callbacks suppressed [ 303.824077][T14978] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2538'. [ 304.154296][T14992] syzkaller0: entered promiscuous mode [ 304.159847][T14992] syzkaller0: entered allmulticast mode [ 304.311766][T14998] netlink: 'syz.3.2545': attribute type 1 has an invalid length. [ 304.320193][T14998] netlink: 'syz.3.2545': attribute type 3 has an invalid length. [ 304.328672][T14998] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2545'. [ 304.338355][T14998] NCSI netlink: No device for ifindex 0 [ 304.630117][T15018] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2552'. [ 304.645079][T15018] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2552'. [ 304.876410][T15026] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2555'. [ 304.901583][T15026] tc_dump_action: action bad kind [ 304.920135][T15028] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2556'. [ 305.055049][T15039] batadv_slave_1: entered promiscuous mode [ 305.238030][T15038] batadv_slave_1: left promiscuous mode [ 305.388835][T15056] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2565'. [ 305.491299][T15061] netlink: 'syz.1.2568': attribute type 3 has an invalid length. [ 305.515543][T15061] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2568'. [ 305.560079][T15065] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2569'. [ 305.932386][T15078] Bluetooth: hci0: unsupported parameter 33553 [ 305.947033][T15084] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2573'. [ 305.963079][T15078] Bluetooth: hci0: invalid length 5, exp 2 for type 8 [ 305.980449][T15084] netlink: 'syz.3.2573': attribute type 20 has an invalid length. [ 305.992219][T15078] Bluetooth: hci0: unsupported parameter 33553 [ 306.015692][T15078] Bluetooth: hci0: invalid length 5, exp 2 for type 8 [ 306.108652][T15090] ip6gre2: entered allmulticast mode [ 306.545203][T15116] lo speed is unknown, defaulting to 1000 [ 306.560929][T15116] hsr0 speed is unknown, defaulting to 1000 [ 308.700952][T15254] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 308.738619][T15254] Bluetooth: hci0: invalid length 0, exp 2 for type 5 [ 309.000258][T15273] IPVS: set_ctl: invalid protocol: 136 224.0.0.2:20001 [ 309.008907][T15276] veth0_to_team: entered promiscuous mode [ 309.024325][T15273] __nla_validate_parse: 12 callbacks suppressed [ 309.024350][T15273] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2630'. [ 309.092150][T15281] xt_ecn: cannot match TCP bits for non-tcp packets [ 309.203724][T15287] sctp: [Deprecated]: syz.1.2635 (pid 15287) Use of int in max_burst socket option. [ 309.203724][T15287] Use struct sctp_assoc_value instead [ 309.221065][T15289] validate_nla: 1 callbacks suppressed [ 309.221085][T15289] netlink: 'syz.2.2636': attribute type 1 has an invalid length. [ 309.222443][T15287] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2635'. [ 309.271947][T15287] bridge_slave_1: left promiscuous mode [ 309.291253][T15287] bridge0: port 2(bridge_slave_1) entered disabled state [ 309.321267][T15287] bridge_slave_0: left allmulticast mode [ 309.343459][T15287] bridge_slave_0: left promiscuous mode [ 309.363269][T15287] bridge0: port 1(bridge_slave_0) entered disabled state [ 309.401167][T15299] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2636'. [ 310.070444][T15340] tipc: Enabled bearer , priority 0 [ 310.103499][T15336] syzkaller0: entered promiscuous mode [ 310.109040][T15336] syzkaller0: entered allmulticast mode [ 310.132845][T15336] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 310.193372][T15336] tipc: Resetting bearer [ 310.243306][T15335] tipc: Resetting bearer [ 310.250959][T15350] xt_CT: No such helper "snmp_trap" [ 310.305933][T15335] tipc: Disabling bearer [ 310.311863][T15354] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2651'. [ 310.329977][T15357] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2651'. [ 310.506081][T15369] netlink: 'syz.4.2654': attribute type 16 has an invalid length. [ 310.522121][T15369] netlink: 'syz.4.2654': attribute type 17 has an invalid length. [ 310.656258][T15369] 8021q: adding VLAN 0 to HW filter on device bond0 [ 310.695950][T15369] 8021q: adding VLAN 0 to HW filter on device team0 [ 310.710611][T15369] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 310.936772][T15397] IPVS: length: 4096 != 24 [ 310.941412][T15397] IPVS: length: 4096 != 24 [ 310.950998][T15391] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2662'. [ 310.966986][T15397] IPVS: length: 4096 != 24 [ 310.973000][T15397] IPVS: length: 4096 != 24 [ 311.029366][T15397] IPVS: length: 4096 != 24 [ 311.048586][T15397] IPVS: length: 4096 != 24 [ 311.175226][T15414] netlink: 'syz.2.2668': attribute type 4 has an invalid length. [ 311.400399][T15427] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2674'. [ 311.637029][T15438] tipc: Enabled bearer , priority 0 [ 311.656207][T15439] syzkaller0: entered promiscuous mode [ 311.662167][T15439] syzkaller0: entered allmulticast mode [ 311.702841][T15439] tipc: Resetting bearer [ 311.740605][T15447] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2679'. [ 311.761390][T15439] tipc: Disabling bearer [ 311.975060][T15465] batadv2: entered allmulticast mode [ 312.066866][T15473] tipc: Enabled bearer , priority 1 [ 312.085709][T15475] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2687'. [ 312.156679][T15478] netlink: 'syz.0.2688': attribute type 32 has an invalid length. [ 312.170847][T15478] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2688'. [ 312.213391][T15478] bond6: option coupled_control: invalid value (52) [ 312.222421][T15478] bond6 (unregistering): Released all slaves [ 312.342540][T15493] team0: No ports can be present during mode change [ 312.843888][T15521] IPVS: set_ctl: invalid protocol: 43 172.20.20.12:20004 [ 313.045589][T15528] team0: Port device dummy0 removed [ 313.093680][T15533] netlink: 'syz.1.2702': attribute type 4 has an invalid length. [ 313.162802][T15544] syzkaller1: entered promiscuous mode [ 313.173596][T15544] syzkaller1: entered allmulticast mode [ 313.203971][ T1227] tipc: Node number set to 4086171617 [ 313.266343][T15545] hsr_slave_0 (unregistering): left promiscuous mode [ 313.495600][T15563] tipc: Enabling of bearer rejected, failed to enable media [ 313.937088][T15592] netlink: 'syz.2.2715': attribute type 12 has an invalid length. [ 314.101827][T15603] __nla_validate_parse: 9 callbacks suppressed [ 314.101847][T15603] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2718'. [ 314.131206][T15606] netlink: 'syz.3.2719': attribute type 15 has an invalid length. [ 314.139983][T15606] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2719'. [ 314.265740][T15619] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2722'. [ 314.280489][T15619] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2722'. [ 314.291800][T15619] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2722'. [ 314.527737][T15631] netlink: 'syz.2.2726': attribute type 1 has an invalid length. [ 314.538423][T15631] netlink: 'syz.2.2726': attribute type 2 has an invalid length. [ 314.557924][T15634] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2728'. [ 314.987579][T15658] netlink: 'syz.2.2735': attribute type 3 has an invalid length. [ 315.009150][T15658] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2735'. [ 315.042821][T15660] x_tables: duplicate underflow at hook 2 [ 315.268288][T15678] netlink: 'syz.0.2740': attribute type 13 has an invalid length. [ 315.340236][T15682] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 315.478808][T15689] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2744'. [ 315.522844][T15678] 8021q: adding VLAN 0 to HW filter on device bond0 [ 315.535500][T15678] 8021q: adding VLAN 0 to HW filter on device team0 [ 315.627623][T15678] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 315.670508][T12962] lo speed is unknown, defaulting to 1000 [ 315.709159][T12962] syz2: Port: 1 Link ACTIVE [ 315.778092][T15712] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2749'. [ 315.975089][T15716] veth0_vlan: left promiscuous mode [ 315.982383][T15716] veth0_vlan: entered promiscuous mode [ 316.012933][T15716] veth0_macvtap: entered promiscuous mode [ 316.034269][T15716] veth0_macvtap: entered allmulticast mode [ 316.065126][T15716] A link change request failed with some changes committed already. Interface pim6reg0 may have been left with an inconsistent configuration, please check. [ 316.113054][T12961] hsr0 speed is unknown, defaulting to 1000 [ 316.255647][T15727] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2752'. [ 316.266716][T15729] netlink: 'syz.2.2754': attribute type 1 has an invalid length. [ 316.284113][T15729] tipc: Enabling of bearer rejected, failed to enable media [ 316.630896][T15751] netlink: 'syz.0.2758': attribute type 4 has an invalid length. [ 317.107257][T15777] bond7 (unregistering): Released all slaves [ 317.252255][T15789] openvswitch: netlink: IP tunnel dst address not specified [ 317.330968][T15796] netlink: 'syz.0.2767': attribute type 7 has an invalid length. [ 317.357100][T15795] netlink: 'syz.2.2768': attribute type 11 has an invalid length. [ 317.411474][T15796] netlink: 'syz.0.2767': attribute type 7 has an invalid length. [ 317.420600][ T13] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 317.443374][ T13] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 317.468894][ T13] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 317.512309][ T13] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 317.891332][T15836] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 318.039161][T15848] sch_tbf: burst 0 is lower than device lo mtu (1550) ! [ 318.296953][T15860] netlink: 'syz.3.2782': attribute type 11 has an invalid length. [ 318.429189][T15866] IPVS: length: 4096 != 8 [ 318.793513][ T36] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 319.119910][T15917] netlink: 'syz.0.2799': attribute type 39 has an invalid length. [ 319.302031][T15926] __nla_validate_parse: 10 callbacks suppressed [ 319.302054][T15926] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2800'. [ 319.631837][T15956] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2809'. [ 319.816893][T15960] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2811'. [ 319.832187][T15960] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2811'. [ 320.147998][T15975] netlink: 'syz.1.2816': attribute type 21 has an invalid length. [ 320.199408][T15981] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2817'. [ 320.213142][T15975] IPv6: NLM_F_CREATE should be specified when creating new route [ 320.351456][T15985] macvtap0: entered promiscuous mode [ 320.363082][T15985] macvtap0: entered allmulticast mode [ 320.379454][T15985] bond0: entered allmulticast mode [ 320.403145][T15985] bond_slave_0: entered allmulticast mode [ 320.410646][T15985] bond_slave_1: entered allmulticast mode [ 320.428882][T15985] 8021q: adding VLAN 0 to HW filter on device macvtap0 [ 320.443537][T15985] team0: Device macvtap0 failed to register rx_handler [ 320.487853][T15985] bond0: left allmulticast mode [ 320.493562][T15985] bond_slave_0: left allmulticast mode [ 320.509987][T15985] bond_slave_1: left allmulticast mode [ 320.622865][T15993] netlink: 204 bytes leftover after parsing attributes in process `syz.1.2822'. [ 320.807238][T16001] netlink: 'syz.0.2824': attribute type 27 has an invalid length. [ 320.851553][T16001] netlink: 'syz.0.2824': attribute type 4 has an invalid length. [ 320.890166][T16001] netlink: 144 bytes leftover after parsing attributes in process `syz.0.2824'. [ 320.938892][T16008] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2824'. [ 321.197221][T16020] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2830'. [ 321.224281][T16021] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2830'. [ 321.479859][T16027] netlink: 'syz.1.2832': attribute type 6 has an invalid length. [ 322.269210][T16057] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 323.224620][T16107] netlink: 'syz.4.2854': attribute type 1 has an invalid length. [ 323.425812][T16116] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 323.470192][ T5831] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 323.485085][ T5831] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 323.494243][ T5831] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 323.503548][ T5831] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 323.511305][ T5831] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 323.565764][T16117] lo speed is unknown, defaulting to 1000 [ 323.574633][T16117] hsr0 speed is unknown, defaulting to 1000 [ 324.082094][T16117] chnl_net:caif_netlink_parms(): no params data found [ 324.329209][T16169] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 324.344649][T16117] bridge0: port 1(bridge_slave_0) entered blocking state [ 324.351863][T16117] bridge0: port 1(bridge_slave_0) entered disabled state [ 324.365854][T16117] bridge_slave_0: entered allmulticast mode [ 324.386674][T16117] bridge_slave_0: entered promiscuous mode [ 324.397307][T16117] bridge0: port 2(bridge_slave_1) entered blocking state [ 324.404487][T16173] netlink: 'syz.2.2872': attribute type 32 has an invalid length. [ 324.404513][T16173] __nla_validate_parse: 75 callbacks suppressed [ 324.404526][T16173] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2872'. [ 324.430788][T16117] bridge0: port 2(bridge_slave_1) entered disabled state [ 324.454976][T16117] bridge_slave_1: entered allmulticast mode [ 324.468583][T16117] bridge_slave_1: entered promiscuous mode [ 324.519211][T16173] bond4: Setting coupled_control to off (0) [ 324.635225][T16117] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 324.659690][T16117] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 324.726730][T16117] team0: Port device team_slave_0 added [ 324.736427][T16117] team0: Port device team_slave_1 added [ 324.813156][T16192] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2878'. [ 324.830692][T16117] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 324.837926][T16117] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 324.866084][T16117] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 324.879866][T16117] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 324.899752][T16117] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 324.966018][T16117] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 325.076794][T16117] hsr_slave_0: entered promiscuous mode [ 325.094724][T16117] hsr_slave_1: entered promiscuous mode [ 325.101240][T16117] debugfs: 'hsr0' already exists in 'hsr' [ 325.113697][T16117] Cannot create hsr debugfs directory [ 325.269589][T16207] netlink: zone id is out of range [ 325.276764][T16207] netlink: zone id is out of range [ 325.277960][T16213] veth21: entered allmulticast mode [ 325.282644][T16207] netlink: zone id is out of range [ 325.302412][T16207] bond0: (slave gre0): The slave device specified does not support setting the MAC address [ 325.340399][T16207] bond0: (slave gre0): Error -95 calling set_mac_address [ 325.417062][T16220] sctp: [Deprecated]: syz.1.2887 (pid 16220) Use of int in maxseg socket option. [ 325.417062][T16220] Use struct sctp_assoc_value instead [ 325.521698][T16227] netlink: 14436 bytes leftover after parsing attributes in process `syz.4.2888'. [ 325.550460][T16227] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 325.583525][ T5831] Bluetooth: hci1: command tx timeout [ 325.799119][T16117] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 325.811401][T16117] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.911180][ T5831] Bluetooth: hci4: link tx timeout [ 325.919528][ T5831] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 325.929988][ T5831] Bluetooth: hci4: link tx timeout [ 325.933274][T16246] netlink: 'syz.0.2895': attribute type 1 has an invalid length. [ 325.935242][ T5831] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 325.979400][T16246] netlink: 244 bytes leftover after parsing attributes in process `syz.0.2895'. [ 325.992234][T16250] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2896'. [ 326.070677][T16117] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 326.083623][T16117] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.108207][T16257] netlink: 'syz.4.2896': attribute type 4 has an invalid length. [ 326.287778][T16117] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 326.309178][T16117] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.327395][T16271] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2901'. [ 326.342493][T16271] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2901'. [ 326.343461][T16269] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2900'. [ 326.351998][T16271] netlink: 'syz.4.2901': attribute type 7 has an invalid length. [ 326.368795][T16271] netlink: 'syz.4.2901': attribute type 8 has an invalid length. [ 326.377462][T16271] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2901'. [ 326.440356][T16117] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 326.463776][T16117] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.555724][T16279] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2905'. [ 326.582949][T16279] tipc: Bearer : already 2 bearers with priority 10 [ 326.596622][T16279] tipc: Bearer : trying with adjusted priority [ 326.609446][T16279] tipc: Enabling of bearer rejected, failed to enable media [ 326.649104][T16279] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 326.802577][T16296] netlink: 'syz.4.2909': attribute type 4 has an invalid length. [ 326.864138][T16117] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 326.902575][T16117] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 326.931190][T16117] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 326.946990][T16117] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 327.017160][T16307] tipc: Enabled bearer , priority 0 [ 327.056609][T16307] tipc: Resetting bearer [ 327.068528][T16303] tipc: Disabling bearer [ 327.140158][T16317] netlink: 'syz.0.2913': attribute type 11 has an invalid length. [ 327.166754][T16317] netlink: 'syz.0.2913': attribute type 11 has an invalid length. [ 327.219317][T16117] 8021q: adding VLAN 0 to HW filter on device bond0 [ 327.273964][T16117] 8021q: adding VLAN 0 to HW filter on device team0 [ 327.315071][ T3015] bridge0: port 1(bridge_slave_0) entered blocking state [ 327.322248][ T3015] bridge0: port 1(bridge_slave_0) entered forwarding state [ 327.358500][ T3015] bridge0: port 2(bridge_slave_1) entered blocking state [ 327.365764][ T3015] bridge0: port 2(bridge_slave_1) entered forwarding state [ 327.499452][T16330] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 327.509274][T16330] bond_slave_0: left promiscuous mode [ 327.517457][T16330] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 327.527018][T16330] bond_slave_1: left promiscuous mode [ 327.534099][T16330] bond0 (unregistering): Released all slaves [ 327.651161][T16117] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 327.664823][ T5831] Bluetooth: hci1: command tx timeout [ 327.675557][T16117] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 327.948097][T16358] geneve4: entered promiscuous mode [ 327.967713][T16358] geneve4: entered allmulticast mode [ 327.986343][ T36] netdevsim netdevsim1 ÿÿÿÿÿÿ: set [1, 0] type 2 family 0 port 6081 - 0 [ 328.003172][ T5831] Bluetooth: hci4: command 0x0405 tx timeout [ 328.025281][ T36] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 328.037799][ T36] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 328.050149][ T36] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 328.147177][T16117] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 328.335536][T16117] veth0_vlan: entered promiscuous mode [ 328.380115][T16374] netlink: 'syz.0.2929': attribute type 14 has an invalid length. [ 328.380291][T16373] netlink: 'syz.0.2929': attribute type 14 has an invalid length. [ 328.398901][T16117] veth1_vlan: entered promiscuous mode [ 328.432850][T16374] netlink: 'syz.0.2929': attribute type 13 has an invalid length. [ 328.497307][T16117] veth0_macvtap: entered promiscuous mode [ 328.531152][T16117] veth1_macvtap: entered promiscuous mode [ 328.608284][T16117] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 328.658551][T16117] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 328.724347][ T1144] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 328.808204][T16387] bond9: entered promiscuous mode [ 328.825238][T16387] bond9: entered allmulticast mode [ 328.830843][T16387] 8021q: adding VLAN 0 to HW filter on device bond9 [ 328.861589][ T1144] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 328.934258][ T1144] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 328.968197][ T1144] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.392839][ T3003] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 329.408069][ T3003] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 329.486765][ T3003] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 329.497034][ T3003] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 329.624839][T16421] IPVS: set_ctl: invalid protocol: 44 224.0.0.1:20003 [ 329.743960][ T5831] Bluetooth: hci1: command tx timeout [ 329.857085][T16427] __nla_validate_parse: 16 callbacks suppressed [ 329.857109][T16427] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2940'. [ 329.913088][T16427] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2940'. [ 330.026377][T16434] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2944'. [ 330.115133][T16441] xt_CT: You must specify a L4 protocol and not use inversions on it [ 330.143338][ T5831] Bluetooth: hci4: command 0x0405 tx timeout [ 330.220999][T16447] netlink: 1264 bytes leftover after parsing attributes in process `syz.0.2950'. [ 330.268324][T16446] tipc: Enabled bearer , priority 0 [ 330.278153][T16446] syzkaller0: entered promiscuous mode [ 330.284674][T16446] syzkaller0: entered allmulticast mode [ 330.307724][T16446] tipc: Resetting bearer [ 330.368264][T16454] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2949'. [ 330.450432][T16458] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2953'. [ 330.493669][T16458] nbd: must specify at least one socket [ 330.932272][ T5831] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 330.950327][ T5831] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 330.972149][ T5831] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 330.982475][ T5831] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 330.990436][ T5831] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 331.188833][T16444] tipc: Resetting bearer [ 331.332750][T16444] tipc: Disabling bearer [ 331.371332][T16488] netlink: zone id is out of range [ 331.392175][T16488] netlink: zone id is out of range [ 331.424998][T16463] lo speed is unknown, defaulting to 1000 [ 331.441417][T16488] netlink: zone id is out of range [ 331.457046][ T61] nci: nci_extract_activation_params_nfc_dep: unsupported activation_rf_tech_and_mode 0x6 [ 331.463218][T16463] hsr0 speed is unknown, defaulting to 1000 [ 331.505868][T16496] ipt_REJECT: ECHOREPLY no longer supported. [ 331.684420][T16488] netlink: set zone limit has 8 unknown bytes [ 331.831318][ T5831] Bluetooth: hci1: command tx timeout [ 331.922214][T16509] netlink: 14544 bytes leftover after parsing attributes in process `syz.1.2964'. [ 332.076644][T16463] chnl_net:caif_netlink_parms(): no params data found [ 332.364253][T16463] bridge0: port 1(bridge_slave_0) entered blocking state [ 332.382319][T16463] bridge0: port 1(bridge_slave_0) entered disabled state [ 332.401567][T16463] bridge_slave_0: entered allmulticast mode [ 332.421477][T16463] bridge_slave_0: entered promiscuous mode [ 332.431606][T16463] bridge0: port 2(bridge_slave_1) entered blocking state [ 332.440193][T16463] bridge0: port 2(bridge_slave_1) entered disabled state [ 332.447651][T16463] bridge_slave_1: entered allmulticast mode [ 332.461491][T16463] bridge_slave_1: entered promiscuous mode [ 332.516231][T16463] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 332.530906][T16463] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 332.561498][T16556] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2976'. [ 332.588550][T16553] bond0: (slave rose0): Enslaving as an active interface with an up link [ 332.601570][T16463] team0: Port device team_slave_0 added [ 332.611857][T16463] team0: Port device team_slave_1 added [ 332.659099][T16463] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 332.667240][T16463] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 332.693928][T16463] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 332.707378][T16463] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 332.714530][T16463] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 332.740944][T16463] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 332.819737][T16463] hsr_slave_0: entered promiscuous mode [ 332.827799][T16463] hsr_slave_1: entered promiscuous mode [ 332.834559][T16463] debugfs: 'hsr0' already exists in 'hsr' [ 332.840454][T16463] Cannot create hsr debugfs directory [ 333.023394][ T5831] Bluetooth: hci4: command tx timeout [ 333.108236][T16463] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 333.120163][T16463] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.221905][T16463] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 333.237355][T16463] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.288399][T16573] ip6gre1: entered allmulticast mode [ 333.396487][T16463] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 333.426281][T16463] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.562175][ C1] vxcan1: j1939_tp_rxtimer: 0xffff888054da7000: rx timeout, send abort [ 333.573124][ C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff888054da7000: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 333.606264][T16463] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 333.643105][T16463] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.708353][T16592] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2987'. [ 333.738466][T16585] bond5: Removing last arp target with arp_interval on [ 333.756714][T16594] validate_nla: 5 callbacks suppressed [ 333.756738][T16594] netlink: 'syz.0.2984': attribute type 4 has an invalid length. [ 333.786813][T16587] xt_TPROXY: Can be used only with -p tcp or -p udp [ 333.897334][T16463] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 333.931230][T16463] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 333.985428][T16463] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 334.022757][T16463] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 334.038996][T16606] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2990'. [ 334.307626][T16626] netlink: 'syz.1.2994': attribute type 1 has an invalid length. [ 335.114679][ T5831] Bluetooth: hci4: command tx timeout [ 335.762496][T16626] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR [ 335.899646][T16463] 8021q: adding VLAN 0 to HW filter on device bond0 [ 335.956981][T16463] 8021q: adding VLAN 0 to HW filter on device team0 [ 335.972793][ T1144] bridge0: port 1(bridge_slave_0) entered blocking state [ 335.980046][ T1144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 336.019508][T16647] __nla_validate_parse: 1 callbacks suppressed [ 336.019529][T16647] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3000'. [ 336.041931][ T1144] bridge0: port 2(bridge_slave_1) entered blocking state [ 336.049191][ T1144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 336.108312][T16654] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3001'. [ 336.129396][T16654] netlink: 'syz.1.3001': attribute type 11 has an invalid length. [ 336.264559][T16667] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3003'. [ 336.624007][T16682] netlink: 'syz.2.3007': attribute type 7 has an invalid length. [ 336.663210][T16682] netlink: 140 bytes leftover after parsing attributes in process `syz.2.3007'. [ 336.747232][T16463] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 336.770745][T16693] tipc: Started in network mode [ 336.794098][T16693] tipc: Node identity d6060dcadd76, cluster identity 4711 [ 336.813237][T16693] tipc: Enabled bearer , priority 0 [ 336.823374][T16693] syzkaller0: entered promiscuous mode [ 336.828896][T16693] syzkaller0: entered allmulticast mode [ 336.954492][T16696] tipc: Resetting bearer [ 336.986449][T16708] netlink: 212388 bytes leftover after parsing attributes in process `syz.0.3014'. [ 336.997520][T16696] tipc: Disabling bearer [ 337.004596][T16708] openvswitch: netlink: Duplicate key (type 1). [ 337.163757][T16719] netlink: 80 bytes leftover after parsing attributes in process `syz.3.3017'. [ 337.187494][ T5831] Bluetooth: hci4: command tx timeout [ 337.245513][T16722] netlink: 'syz.3.3017': attribute type 1 has an invalid length. [ 337.261260][T16722] netlink: 'syz.3.3017': attribute type 2 has an invalid length. [ 337.279855][T16722] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3017'. [ 337.327083][T16463] veth0_vlan: entered promiscuous mode [ 337.364600][T16463] veth1_vlan: entered promiscuous mode [ 337.470634][T16463] veth0_macvtap: entered promiscuous mode [ 337.486984][T16463] veth1_macvtap: entered promiscuous mode [ 337.536191][T16463] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 337.564093][T16463] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 337.589116][ T1144] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.605661][ T1144] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.617580][ T1144] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.642824][ T1144] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.820295][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 337.832330][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 337.915724][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 337.927573][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 338.056496][T16750] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3027'. [ 338.564875][T16772] netlink: 96 bytes leftover after parsing attributes in process `syz.3.3034'. [ 338.747674][ T5836] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 338.758676][ T5836] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 338.767525][ T5836] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 338.777585][ T5836] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 338.796908][T16782] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 338.798186][ T5836] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 338.869667][T16778] lo speed is unknown, defaulting to 1000 [ 338.877522][T16778] hsr0 speed is unknown, defaulting to 1000 [ 339.268058][ T5836] Bluetooth: hci4: command tx timeout [ 339.301691][T16778] chnl_net:caif_netlink_parms(): no params data found [ 339.546853][T16778] bridge0: port 1(bridge_slave_0) entered blocking state [ 339.555797][T16778] bridge0: port 1(bridge_slave_0) entered disabled state [ 339.568931][T16778] bridge_slave_0: entered allmulticast mode [ 339.578794][T16778] bridge_slave_0: entered promiscuous mode [ 339.621025][T16826] netlink: 'syz.1.3045': attribute type 4 has an invalid length. [ 339.636485][T16826] netlink: 17 bytes leftover after parsing attributes in process `syz.1.3045'. [ 339.682719][T16828] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 339.696513][T16778] bridge0: port 2(bridge_slave_1) entered blocking state [ 339.708125][T16778] bridge0: port 2(bridge_slave_1) entered disabled state [ 339.715952][T16778] bridge_slave_1: entered allmulticast mode [ 339.723802][T16778] bridge_slave_1: entered promiscuous mode [ 339.809064][T16778] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 339.834415][T16778] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 339.902023][T16778] team0: Port device team_slave_0 added [ 339.918106][T16778] team0: Port device team_slave_1 added [ 340.025351][T16778] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 340.032483][T16778] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 340.073111][T16778] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 340.087240][T16778] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 340.094417][T16778] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 340.121369][T16778] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 340.216927][T16778] hsr_slave_0: entered promiscuous mode [ 340.232193][T16844] sock: sock_timestamping_bind_phc: sock not bind to device [ 340.234230][T16778] hsr_slave_1: entered promiscuous mode [ 340.248110][T16778] debugfs: 'hsr0' already exists in 'hsr' [ 340.254125][T16778] Cannot create hsr debugfs directory [ 340.307155][ T13] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 340.505715][ T13] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 340.595148][T16865] tipc: Can't bind to reserved service type 0 [ 340.629167][T16860] bridge_slave_1: left allmulticast mode [ 340.635142][T16860] bridge_slave_1: left promiscuous mode [ 340.641079][T16860] bridge0: port 2(bridge_slave_1) entered disabled state [ 340.674593][T16860] bridge_slave_0: left allmulticast mode [ 340.690365][T16860] bridge_slave_0: left promiscuous mode [ 340.696835][T16860] bridge0: port 1(bridge_slave_0) entered disabled state [ 340.805103][ T13] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 340.846856][T16876] netlink: 'syz.2.3059': attribute type 29 has an invalid length. [ 340.864214][ T5836] Bluetooth: hci5: command tx timeout [ 340.875056][T16879] netlink: 'syz.2.3059': attribute type 29 has an invalid length. [ 340.890275][T16870] xt_cgroup: path and classid specified [ 340.931763][ T13] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 340.959638][T16870] unsupported nla_type 58 [ 341.130993][T16887] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0001 with DS=0x2 [ 341.238962][T16894] netlink: 'syz.2.3068': attribute type 1 has an invalid length. [ 341.275024][ T3015] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 341.284020][T16894] __nla_validate_parse: 4 callbacks suppressed [ 341.284039][T16894] netlink: 244 bytes leftover after parsing attributes in process `syz.2.3068'. [ 341.294869][ T3015] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 19999 - 0 [ 341.348151][ T3003] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 341.365046][ T3003] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 19999 - 0 [ 341.376936][T16901] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3069'. [ 341.421809][T16901] xfrm1: entered promiscuous mode [ 341.451561][T16903] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3069'. [ 341.493498][T16901] xfrm1: entered allmulticast mode [ 341.502419][ T1144] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 341.522736][ T1144] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 19999 - 0 [ 341.623769][ T3015] netdevsim netdevsim0 eth4: set [0, 0] type 1 family 0 port 8472 - 0 [ 341.642128][ T3015] netdevsim netdevsim0 eth4: set [1, 0] type 2 family 0 port 19999 - 0 [ 341.680254][T16778] netdevsim netdevsim0 eth4 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 341.721465][T16778] netdevsim netdevsim0 eth4 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 342.225377][T16932] block nbd2: not configured, cannot reconfigure [ 342.953003][ T5836] Bluetooth: hci5: command tx timeout [ 343.292573][ T13] bond2 (unregistering): (slave gretap1): Releasing active interface [ 343.555456][ T13] bond5 (unregistering): (slave bridge3): Releasing active interface [ 343.638813][ T13] bond1 (unregistering): Released all slaves [ 343.737300][ T13] bond2 (unregistering): Released all slaves [ 343.838960][ T13] bond3 (unregistering): Released all slaves [ 343.853435][ T13] bond4 (unregistering): Released all slaves [ 343.868321][ T13] bond5 (unregistering): Released all slaves [ 343.881934][ T3015] ================================================================== [ 343.890050][ T3015] BUG: KASAN: slab-use-after-free in __mutex_lock+0x147/0x1350 [ 343.897619][ T3015] Read of size 8 at addr ffff88807b28e8b0 by task kworker/u8:9/3015 [ 343.905603][ T3015] [ 343.907967][ T3015] CPU: 1 UID: 0 PID: 3015 Comm: kworker/u8:9 Not tainted syzkaller #0 PREEMPT(full) [ 343.907990][ T3015] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 343.908002][ T3015] Workqueue: udp_tunnel_nic udp_tunnel_nic_device_sync_work [ 343.908035][ T3015] Call Trace: [ 343.908042][ T3015] [ 343.908051][ T3015] dump_stack_lvl+0x189/0x250 [ 343.908072][ T3015] ? __kasan_check_byte+0x12/0x40 [ 343.908096][ T3015] ? __pfx_dump_stack_lvl+0x10/0x10 [ 343.908113][ T3015] ? lock_release+0x4b/0x3e0 [ 343.908139][ T3015] ? __virt_addr_valid+0x4a5/0x5c0 [ 343.908159][ T3015] print_report+0xca/0x240 [ 343.908180][ T3015] ? __mutex_lock+0x147/0x1350 [ 343.908197][ T3015] kasan_report+0x118/0x150 [ 343.908218][ T3015] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 343.908245][ T3015] ? __mutex_lock+0x147/0x1350 [ 343.908268][ T3015] __mutex_lock+0x147/0x1350 [ 343.908288][ T3015] ? __mutex_lock+0x5bb/0x1350 [ 343.908308][ T3015] ? udp_tunnel_nic_device_sync_work+0x39/0xa50 [ 343.908338][ T3015] ? __pfx___mutex_lock+0x10/0x10 [ 343.908358][ T3015] ? __lock_acquire+0xab9/0xd20 [ 343.908387][ T3015] udp_tunnel_nic_device_sync_work+0x39/0xa50 [ 343.908417][ T3015] ? process_scheduled_works+0x9ef/0x17b0 [ 343.908441][ T3015] ? process_scheduled_works+0x9ef/0x17b0 [ 343.908466][ T3015] process_scheduled_works+0xae1/0x17b0 [ 343.908503][ T3015] ? __pfx_process_scheduled_works+0x10/0x10 [ 343.908542][ T3015] worker_thread+0x8a0/0xda0 [ 343.908567][ T3015] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 343.908598][ T3015] ? __kthread_parkme+0x7b/0x200 [ 343.908629][ T3015] kthread+0x711/0x8a0 [ 343.908647][ T3015] ? __pfx_worker_thread+0x10/0x10 [ 343.908671][ T3015] ? __pfx_kthread+0x10/0x10 [ 343.908689][ T3015] ? _raw_spin_unlock_irq+0x23/0x50 [ 343.908714][ T3015] ? lockdep_hardirqs_on+0x9c/0x150 [ 343.908729][ T3015] ? __pfx_kthread+0x10/0x10 [ 343.908747][ T3015] ret_from_fork+0x4bc/0x870 [ 343.908771][ T3015] ? __pfx_ret_from_fork+0x10/0x10 [ 343.908798][ T3015] ? __switch_to_asm+0x39/0x70 [ 343.908818][ T3015] ? __switch_to_asm+0x33/0x70 [ 343.908837][ T3015] ? __pfx_kthread+0x10/0x10 [ 343.908863][ T3015] ret_from_fork_asm+0x1a/0x30 [ 343.908892][ T3015] [ 343.908898][ T3015] [ 344.123994][ T3015] Allocated by task 13: [ 344.128154][ T3015] kasan_save_track+0x3e/0x80 [ 344.132841][ T3015] __kasan_kmalloc+0x93/0xb0 [ 344.137446][ T3015] __kmalloc_noprof+0x411/0x7f0 [ 344.142398][ T3015] udp_tunnel_nic_netdevice_event+0x4c3/0x1810 [ 344.148654][ T3015] notifier_call_chain+0x1b6/0x3e0 [ 344.153787][ T3015] register_netdevice+0x1608/0x1ae0 [ 344.159017][ T3015] nsim_create+0xae8/0xf10 [ 344.163449][ T3015] __nsim_dev_port_add+0x6b6/0xb10 [ 344.168567][ T3015] nsim_dev_port_add_all+0x37/0xf0 [ 344.173680][ T3015] nsim_dev_reload_up+0x451/0x780 [ 344.178798][ T3015] devlink_reload+0x4ec/0x8d0 [ 344.183495][ T3015] devlink_pernet_pre_exit+0x1d9/0x3d0 [ 344.188964][ T3015] ops_undo_list+0x187/0x990 [ 344.193571][ T3015] cleanup_net+0x4d8/0x820 [ 344.198001][ T3015] process_scheduled_works+0xae1/0x17b0 [ 344.203556][ T3015] worker_thread+0x8a0/0xda0 [ 344.208157][ T3015] kthread+0x711/0x8a0 [ 344.212228][ T3015] ret_from_fork+0x4bc/0x870 [ 344.216932][ T3015] ret_from_fork_asm+0x1a/0x30 [ 344.221701][ T3015] [ 344.224034][ T3015] Freed by task 16778: [ 344.228104][ T3015] kasan_save_track+0x3e/0x80 [ 344.232789][ T3015] __kasan_save_free_info+0x46/0x50 [ 344.237999][ T3015] __kasan_slab_free+0x5c/0x80 [ 344.242803][ T3015] kfree+0x19a/0x6d0 [ 344.246706][ T3015] udp_tunnel_nic_netdevice_event+0x11ab/0x1810 [ 344.252973][ T3015] notifier_call_chain+0x1b6/0x3e0 [ 344.258111][ T3015] unregister_netdevice_many_notify+0x1860/0x2390 [ 344.264532][ T3015] unregister_netdevice_queue+0x33c/0x380 [ 344.270260][ T3015] nsim_destroy+0x1dd/0x670 [ 344.274776][ T3015] __nsim_dev_port_del+0x14d/0x1b0 [ 344.279895][ T3015] nsim_dev_reload_destroy+0x288/0x490 [ 344.285363][ T3015] nsim_drv_remove+0x58/0x160 [ 344.290043][ T3015] device_release_driver_internal+0x46f/0x800 [ 344.296123][ T3015] bus_remove_device+0x34d/0x410 [ 344.301067][ T3015] device_del+0x511/0x8e0 [ 344.305428][ T3015] device_unregister+0x20/0xc0 [ 344.310247][ T3015] del_device_store+0x2aa/0x360 [ 344.315136][ T3015] kernfs_fop_write_iter+0x3af/0x540 [ 344.320442][ T3015] vfs_write+0x5c9/0xb30 [ 344.324779][ T3015] ksys_write+0x145/0x250 [ 344.329114][ T3015] do_syscall_64+0xfa/0xfa0 [ 344.333629][ T3015] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 344.339530][ T3015] [ 344.341859][ T3015] Last potentially related work creation: [ 344.347578][ T3015] kasan_save_stack+0x3e/0x60 [ 344.352297][ T3015] kasan_record_aux_stack+0xbd/0xd0 [ 344.357513][ T3015] insert_work+0x3d/0x330 [ 344.361868][ T3015] __queue_work+0xbaf/0xfb0 [ 344.366412][ T3015] queue_work_on+0x181/0x270 [ 344.371030][ T3015] __udp_tunnel_nic_add_port+0xb71/0xd60 [ 344.376685][ T3015] udp_tunnel_push_rx_port+0x180/0x200 [ 344.382163][ T3015] geneve_offload_rx_ports+0xd7/0x160 [ 344.387546][ T3015] geneve_netdevice_event+0x6a/0x80 [ 344.392750][ T3015] notifier_call_chain+0x1b6/0x3e0 [ 344.397877][ T3015] call_netdevice_notifiers+0x88/0xc0 [ 344.403295][ T3015] udp_tunnel_nic_netdevice_event+0xdff/0x1810 [ 344.409465][ T3015] notifier_call_chain+0x1b6/0x3e0 [ 344.414603][ T3015] register_netdevice+0x1608/0x1ae0 [ 344.419840][ T3015] nsim_create+0xae8/0xf10 [ 344.424329][ T3015] __nsim_dev_port_add+0x6b6/0xb10 [ 344.429473][ T3015] nsim_dev_port_add_all+0x37/0xf0 [ 344.434609][ T3015] nsim_dev_reload_up+0x451/0x780 [ 344.439648][ T3015] devlink_reload+0x4ec/0x8d0 [ 344.444354][ T3015] devlink_pernet_pre_exit+0x1d9/0x3d0 [ 344.449855][ T3015] ops_undo_list+0x187/0x990 [ 344.454467][ T3015] cleanup_net+0x4d8/0x820 [ 344.458897][ T3015] process_scheduled_works+0xae1/0x17b0 [ 344.464456][ T3015] worker_thread+0x8a0/0xda0 [ 344.469066][ T3015] kthread+0x711/0x8a0 [ 344.473147][ T3015] ret_from_fork+0x4bc/0x870 [ 344.477747][ T3015] ret_from_fork_asm+0x1a/0x30 [ 344.482519][ T3015] [ 344.484850][ T3015] Second to last potentially related work creation: [ 344.491434][ T3015] kasan_save_stack+0x3e/0x60 [ 344.496123][ T3015] kasan_record_aux_stack+0xbd/0xd0 [ 344.501345][ T3015] insert_work+0x3d/0x330 [ 344.505699][ T3015] __queue_work+0xcd2/0xfb0 [ 344.510218][ T3015] queue_work_on+0x181/0x270 [ 344.514827][ T3015] __udp_tunnel_nic_add_port+0xb71/0xd60 [ 344.520475][ T3015] udp_tunnel_push_rx_port+0x180/0x200 [ 344.525946][ T3015] vxlan_offload_rx_ports+0x139/0x200 [ 344.531328][ T3015] vxlan_netdevice_event+0x111/0x470 [ 344.536629][ T3015] notifier_call_chain+0x1b6/0x3e0 [ 344.541755][ T3015] call_netdevice_notifiers+0x88/0xc0 [ 344.547144][ T3015] udp_tunnel_nic_netdevice_event+0xdff/0x1810 [ 344.553403][ T3015] notifier_call_chain+0x1b6/0x3e0 [ 344.558576][ T3015] register_netdevice+0x1608/0x1ae0 [ 344.563781][ T3015] nsim_create+0xae8/0xf10 [ 344.568214][ T3015] __nsim_dev_port_add+0x6b6/0xb10 [ 344.573341][ T3015] nsim_dev_port_add_all+0x37/0xf0 [ 344.578465][ T3015] nsim_dev_reload_up+0x451/0x780 [ 344.583496][ T3015] devlink_reload+0x4ec/0x8d0 [ 344.588184][ T3015] devlink_pernet_pre_exit+0x1d9/0x3d0 [ 344.593653][ T3015] ops_undo_list+0x187/0x990 [ 344.598255][ T3015] cleanup_net+0x4d8/0x820 [ 344.602679][ T3015] process_scheduled_works+0xae1/0x17b0 [ 344.608245][ T3015] worker_thread+0x8a0/0xda0 [ 344.612850][ T3015] kthread+0x711/0x8a0 [ 344.616938][ T3015] ret_from_fork+0x4bc/0x870 [ 344.621555][ T3015] ret_from_fork_asm+0x1a/0x30 [ 344.626339][ T3015] [ 344.628670][ T3015] The buggy address belongs to the object at ffff88807b28e800 [ 344.628670][ T3015] which belongs to the cache kmalloc-256 of size 256 [ 344.642736][ T3015] The buggy address is located 176 bytes inside of [ 344.642736][ T3015] freed 256-byte region [ffff88807b28e800, ffff88807b28e900) [ 344.656550][ T3015] [ 344.658887][ T3015] The buggy address belongs to the physical page: [ 344.665398][ T3015] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7b28e [ 344.674185][ T3015] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 344.682703][ T3015] anon flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 344.690698][ T3015] page_type: f5(slab) [ 344.694688][ T3015] raw: 00fff00000000040 ffff88813ffa6b40 0000000000000000 dead000000000001 [ 344.703300][ T3015] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 344.711902][ T3015] head: 00fff00000000040 ffff88813ffa6b40 0000000000000000 dead000000000001 [ 344.720580][ T3015] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 344.729268][ T3015] head: 00fff00000000001 ffffea0001eca381 00000000ffffffff 00000000ffffffff [ 344.737943][ T3015] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002 [ 344.746625][ T3015] page dumped because: kasan: bad access detected [ 344.753144][ T3015] page_owner tracks the page as allocated [ 344.758873][ T3015] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5843, tgid 5843 (syz-executor), ts 92494753977, free_ts 92372834301 [ 344.780340][ T3015] post_alloc_hook+0x240/0x2a0 [ 344.785122][ T3015] get_page_from_freelist+0x2365/0x2440 [ 344.790685][ T3015] __alloc_frozen_pages_noprof+0x181/0x370 [ 344.796501][ T3015] alloc_pages_mpol+0x232/0x4a0 [ 344.801379][ T3015] allocate_slab+0x96/0x3a0 [ 344.805908][ T3015] ___slab_alloc+0xe94/0x18a0 [ 344.810598][ T3015] __slab_alloc+0x65/0x100 [ 344.815029][ T3015] __kmalloc_cache_noprof+0x411/0x6f0 [ 344.820419][ T3015] ____ip_mc_inc_group+0x528/0xde0 [ 344.825554][ T3015] ip_mc_up+0x125/0x300 [ 344.829712][ T3015] inetdev_event+0xfb3/0x15b0 [ 344.834400][ T3015] notifier_call_chain+0x1b6/0x3e0 [ 344.839622][ T3015] __dev_notify_flags+0x18d/0x2e0 [ 344.844658][ T3015] netif_change_flags+0xe8/0x1a0 [ 344.849612][ T3015] do_setlink+0xc55/0x41c0 [ 344.854046][ T3015] rtnl_newlink+0x1619/0x1c80 [ 344.858741][ T3015] page last free pid 5826 tgid 5826 stack trace: [ 344.865072][ T3015] __free_frozen_pages+0xbc4/0xd30 [ 344.870210][ T3015] __slab_free+0x2e7/0x390 [ 344.874640][ T3015] qlist_free_all+0x97/0x140 [ 344.879244][ T3015] kasan_quarantine_reduce+0x148/0x160 [ 344.884708][ T3015] __kasan_slab_alloc+0x22/0x80 [ 344.889569][ T3015] kmem_cache_alloc_node_noprof+0x433/0x710 [ 344.895469][ T3015] __alloc_skb+0x112/0x2d0 [ 344.899933][ T3015] netlink_sendmsg+0x5c6/0xb30 [ 344.904713][ T3015] __sock_sendmsg+0x21c/0x270 [ 344.909409][ T3015] __sys_sendto+0x3bd/0x520 [ 344.913960][ T3015] __x64_sys_sendto+0xde/0x100 [ 344.918742][ T3015] do_syscall_64+0xfa/0xfa0 [ 344.923252][ T3015] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 344.929149][ T3015] [ 344.931509][ T3015] Memory state around the buggy address: [ 344.937139][ T3015] ffff88807b28e780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 344.945206][ T3015] ffff88807b28e800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 344.953278][ T3015] >ffff88807b28e880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 344.961353][ T3015] ^ [ 344.966992][ T3015] ffff88807b28e900: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 344.975060][ T3015] ffff88807b28e980: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 344.983123][ T3015] ================================================================== [ 344.999311][ T3015] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 345.006565][ T3015] CPU: 0 UID: 0 PID: 3015 Comm: kworker/u8:9 Not tainted syzkaller #0 PREEMPT(full) [ 345.016054][ T3015] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 345.026143][ T3015] Workqueue: udp_tunnel_nic udp_tunnel_nic_device_sync_work [ 345.033457][ T3015] Call Trace: [ 345.036749][ T3015] [ 345.039686][ T3015] dump_stack_lvl+0x99/0x250 [ 345.044458][ T3015] ? __asan_memcpy+0x40/0x70 [ 345.049105][ T3015] ? __pfx_dump_stack_lvl+0x10/0x10 [ 345.054424][ T3015] ? __pfx__printk+0x10/0x10 [ 345.059035][ T3015] vpanic+0x237/0x6d0 [ 345.063037][ T3015] ? __pfx_vpanic+0x10/0x10 [ 345.067582][ T3015] ? preempt_schedule+0xae/0xc0 [ 345.072464][ T3015] ? __pfx_preempt_schedule+0x10/0x10 [ 345.077970][ T3015] panic+0xb9/0xc0 [ 345.081721][ T3015] ? __pfx_panic+0x10/0x10 [ 345.086183][ T3015] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 345.092110][ T3015] ? __mutex_lock+0x147/0x1350 [ 345.096921][ T3015] check_panic_on_warn+0x89/0xb0 [ 345.101910][ T3015] ? __mutex_lock+0x147/0x1350 [ 345.106704][ T3015] end_report+0x78/0x160 [ 345.111042][ T3015] kasan_report+0x129/0x150 [ 345.115672][ T3015] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 345.121594][ T3015] ? __mutex_lock+0x147/0x1350 [ 345.126379][ T3015] __mutex_lock+0x147/0x1350 [ 345.130984][ T3015] ? __mutex_lock+0x5bb/0x1350 [ 345.135765][ T3015] ? udp_tunnel_nic_device_sync_work+0x39/0xa50 [ 345.142037][ T3015] ? __pfx___mutex_lock+0x10/0x10 [ 345.147080][ T3015] ? __lock_acquire+0xab9/0xd20 [ 345.151959][ T3015] udp_tunnel_nic_device_sync_work+0x39/0xa50 [ 345.158080][ T3015] ? process_scheduled_works+0x9ef/0x17b0 [ 345.163823][ T3015] ? process_scheduled_works+0x9ef/0x17b0 [ 345.169587][ T3015] process_scheduled_works+0xae1/0x17b0 [ 345.175170][ T3015] ? __pfx_process_scheduled_works+0x10/0x10 [ 345.181264][ T3015] worker_thread+0x8a0/0xda0 [ 345.185875][ T3015] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 345.192232][ T3015] ? __kthread_parkme+0x7b/0x200 [ 345.197210][ T3015] kthread+0x711/0x8a0 [ 345.201302][ T3015] ? __pfx_worker_thread+0x10/0x10 [ 345.206433][ T3015] ? __pfx_kthread+0x10/0x10 [ 345.211030][ T3015] ? _raw_spin_unlock_irq+0x23/0x50 [ 345.216250][ T3015] ? lockdep_hardirqs_on+0x9c/0x150 [ 345.221454][ T3015] ? __pfx_kthread+0x10/0x10 [ 345.226053][ T3015] ret_from_fork+0x4bc/0x870 [ 345.230663][ T3015] ? __pfx_ret_from_fork+0x10/0x10 [ 345.235797][ T3015] ? __switch_to_asm+0x39/0x70 [ 345.240575][ T3015] ? __switch_to_asm+0x33/0x70 [ 345.245349][ T3015] ? __pfx_kthread+0x10/0x10 [ 345.249953][ T3015] ret_from_fork_asm+0x1a/0x30 [ 345.254743][ T3015] [ 345.258102][ T3015] Kernel Offset: disabled [ 345.262448][ T3015] Rebooting in 86400 seconds..