last executing test programs: 3.373232889s ago: executing program 4 (id=2099): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000200), r0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000240)=0x0) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000b40)={'wlan0\x00', 0x0}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_STATION(r6, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={0x38, r8, 0x1, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x76b60f1}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_STA_FLAGS={0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x400c0}, 0x4054) r9 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r5) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x1c, r9, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r10}]}, 0x1c}}, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000280)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000400)=0x0) sendmsg$NFC_CMD_ACTIVATE_TARGET(r1, &(0x7f0000000500)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x44, r2, 0x10, 0x70bd2b, 0x25dfdbff, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x6}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x7}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r10}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r11}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r12}]}, 0x44}, 0x1, 0x0, 0x0, 0x8804}, 0x20004011) r13 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000140), r13) sendmsg$NLBL_CALIPSO_C_REMOVE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x14, r14, 0x1, 0x70bd2c, 0x0, {0x3}}, 0x14}}, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) r15 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000021eeffffffffffffff0000008500000075000000a500000023000000953ef9583ea0f1f2edf884db04994b63265ba09952bbcd7a9efa4f9ac04153ba2d6b626c4ccd05a0c9ec28cb1e34b14955be56433821512c1d9f3bfd9978815d22f9f060c8f53d7a27f2b3b548d3ea9a6b5e8ae26a84091c99e635cdb1e5e0"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x41, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r15}, 0x10) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000006, 0x4132, 0xffffffffffffffff, 0x0) r16 = socket$vsock_stream(0x28, 0x1, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, r16, 0x0) pipe(&(0x7f0000002740)) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0xa401000000000000) 2.855215323s ago: executing program 3 (id=2103): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x5e1e, 0x0, @mcast2, 0x1}, 0x1c) (async) getsockopt$sock_buf(r1, 0x1, 0x19, &(0x7f0000002f80)=""/217, &(0x7f0000003080)=0xd9) (async, rerun: 64) sendmsg$nl_route(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000740)=ANY=[@ANYBLOB="480000aa3997a86bef0b2a00002a973ba1c849", @ANYRES32=0x0, @ANYBLOB="03000000c31006002800128008000100736974001c00028008000300ac1414bb06000d000080000006000e0008000000"], 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x4008040) (rerun: 64) 2.608137236s ago: executing program 3 (id=2105): r0 = socket$inet(0x10, 0x3, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_JOIN_FILTERS(r1, 0x65, 0x6, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0xa4, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r2, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x74, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x1, [0x5, 0x4, 0x2, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x80000000}]}}]}, 0xa4}, 0x1, 0x0, 0x0, 0xc850}, 0x0) 2.375367496s ago: executing program 4 (id=2109): syz_emit_ethernet(0x3e, &(0x7f00000004c0)={@multicast, @random="863f187dc8f8", @void, {@ipv6={0x86dd, @generic={0x3, 0x6, "7caa27", 0x8, 0x3c, 0x1, @private1, @mcast2, {[@hopopts={0x2f}]}}}}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001800090400000000000000000a000000000000030000000008001e0001"], 0x24}}, 0x0) 2.197439743s ago: executing program 4 (id=2111): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001000010400b500000000040000000000", @ANYRES32=0x0, @ANYBLOB="00000000001400001c00128009000100626f6e64"], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x8000010}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) setsockopt$ax25_int(r0, 0x101, 0x19, &(0x7f0000000200), 0x4) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000000100)=0x819, 0x4) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), r1) sendmsg$IPVS_CMD_GET_DEST(r1, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x38, r3, 0x10, 0x70bd2d, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x7}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x4}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}]}, 0x38}, 0x1, 0x0, 0x0, 0x4800}, 0x4000800) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r2, &(0x7f00000004c0)='<', 0x381, 0x805, 0x0, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1, 0x31, 0xffffffffffffffff, 0x8871b000) r4 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_buf(r4, 0x1, 0x19, 0x0, &(0x7f0000000280)) r5 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000040)=0x80000004, 0x4) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x33, &(0x7f0000000640)={0x1, &(0x7f0000000680)=[{0x6, 0x0, 0x0, 0x2}]}, 0x10) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x4e20, 0x1, @empty, 0xfffffffc}, 0x1c) listen(r5, 0xb) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0300180004000000040000000a2a2dcebfd17993", @ANYRES32=0x0, @ANYRESDEC=r2, @ANYRES32=0x0, @ANYRES64=r5, @ANYRES16=0x0], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xa, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r6}, {}, {0x85, 0x0, 0x0, 0x88}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newtaction={0x48, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x34, 0x1, [@m_ctinfo={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4, 0x2, 0x0, 0x0}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) 2.159707401s ago: executing program 3 (id=2112): r0 = accept$unix(0xffffffffffffffff, 0x0, &(0x7f0000000040)) getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080), 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x112}) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) r5 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$fou(0x0, r5) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x25dfdbff, {0x60, 0x0, 0x0, r7, {0x0, 0x3}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_WASH={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24040800}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x4, &(0x7f0000000580)=@framed={{0x18, 0x5, 0x0, 0x0, 0x40000}, [@call={0x85, 0x0, 0x0, 0x7a}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r8, &(0x7f0000000080), 0x12) close(r8) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000011000100"/20, @ANYRES32=r4], 0x20}}, 0x0) 1.941173558s ago: executing program 1 (id=2114): sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x90, 0xd, 0x6, 0x3, 0x0, 0x0, {0x2, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x1}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x90}, 0x1, 0x0, 0x0, 0x40400c0}, 0x24004800) (async) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x7, 0x0, 0xffffffffffffffff, 0xdc, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x1}, 0x50) (async) getsockname$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000440)={0x1, 0xffffffffffffffff}, 0x4) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={0x1, 0xffffffffffffffff}, 0x4) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@bloom_filter={0x1e, 0x0, 0x443, 0x81, 0x20, 0x1, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4, 0x1, 0x7}, 0x50) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@bloom_filter={0x1e, 0x5, 0x7, 0x7, 0x1404, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x5, 0x5, 0xf}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x18, 0x1e, &(0x7f0000000200)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xdd, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}}, @cb_func={0x18, 0x1, 0x4, 0x0, 0xfffffffffffffff9}, @map_idx={0x18, 0x7, 0x5, 0x0, 0xf}, @exit, @exit, @exit], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000300)='syzkaller\x00', 0x9, 0x0, &(0x7f0000000340), 0x41000, 0x4, '\x00', r1, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x5, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f00000005c0)=[r2, r3, r4, 0xffffffffffffffff, r5], &(0x7f0000000600)=[{0x0, 0x1, 0xe, 0x9}, {0x4, 0x2, 0xb, 0x2}, {0x4, 0x5, 0x0, 0x4}, {0x4, 0x3, 0xb, 0xc}], 0x10, 0xec3}, 0x94) (async) r6 = accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000700), 0x0) setsockopt$MRT_ADD_VIF(r6, 0x0, 0xca, &(0x7f0000000740)={0xffffffffffffffff, 0x8, 0x7, 0x1, @vifc_lcl_addr=@dev={0xac, 0x14, 0x14, 0x13}, @multicast2}, 0x10) (async) r7 = syz_genetlink_get_family_id$gtp(&(0x7f00000007c0), 0xffffffffffffffff) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x20, r7, 0x20, 0x70bd27, 0x25dfdbff, {}, [@GTPA_TID={0xc, 0x3, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x44090}, 0x40004) r8 = accept4(r6, &(0x7f00000008c0)=@isdn, &(0x7f0000000940)=0x80, 0x0) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000a00)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r8, &(0x7f0000000ac0)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x40, r9, 0x800, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x7, 0x3f}}}}, [@NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x26c}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x4}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x9}]}, 0x40}, 0x1, 0x0, 0x0, 0x80c1}, 0x400c000) (async) splice(r8, &(0x7f0000000b00)=0x5, r4, &(0x7f0000000b40)=0x6, 0x1, 0xc) (async) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r6, 0x84, 0x16, &(0x7f0000000b80)={0x4, [0xd, 0x9707, 0x0, 0x40]}, 0xc) (async) sendmsg$GTP_CMD_NEWPDP(r8, &(0x7f0000000cc0)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c00)={0x48, r7, 0x10, 0x70bd25, 0x25dfdbfc, {}, [@GTPA_O_TEI={0x8}, @GTPA_PEER_ADDR6={0x14, 0xb, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x4}]}, 0x48}}, 0x44004) (async) r11 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000d40), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, &(0x7f0000000e00)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d80)={0x24, r11, 0x20, 0x70bd2b, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r12 = accept(r8, &(0x7f0000000e40)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, &(0x7f0000000ec0)=0x80) (async) r14 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f40), r8) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r12, &(0x7f0000001040)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001000)={&(0x7f0000000f80)={0x50, r14, 0xa428f22a6d1e5888, 0x70bd25, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_REKEY_DATA={0x3c, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="a667f73f5b749596cb538e9024f53a17"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="87eeeaee7bf8f269513fb6518802e4fb36555f3d020c95cf281d46d7942de3fd"}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x20008001) (async) r15 = syz_genetlink_get_family_id$smc(&(0x7f00000010c0), r12) sendmsg$SMC_PNETID_DEL(r8, &(0x7f00000011c0)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001180)={&(0x7f0000001100)={0x5c, r15, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'bond_slave_0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'ip_vti0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vcan0\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x18800}, 0x14) (async) sendmsg$SMC_PNETID_DEL(r13, &(0x7f00000012c0)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001280)={&(0x7f0000001240)={0x14, r15, 0x200, 0x70bd2d, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x44000) (async) getpeername$llc(r8, &(0x7f0000001300)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f0000001340)=0x10) (async) recvfrom$packet(r13, &(0x7f0000001380)=""/241, 0xf1, 0x1, &(0x7f0000001480)={0x11, 0xa, r1, 0x1, 0x81, 0x6, @multicast}, 0x14) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r5, 0xd000943e, &(0x7f00000016c0)={0x0, 0x0, "02bba7286ab4c82565eb305ffa76b473d0983c616303a2d2a95e5f17e0b2b6b6b0f5c1ea8363af8fb079b87c8d70cefc8e56f33ee171c74d8f0e6b787bc0b5d8e2670d3b367cfaa03c83ec6d34aa8d2937fdbcbe1a04706e7777d01192dd13ee97dd52ee284d4e37c49f55b7afbf56abbc5096bbfdd086a3ee883e9f2d1c4702edab8f9881e6f8a3021afabac84f74d55d73de7fd6fd6806a2ae7e31fa782295f2264f0e7a0642f3137139a1431ce6806e4fb68fe09756d68130f8859b21e46fa3e17269d3b3ce8ddcf32994310eaab7df355b8700f7af28dbd412c28b741cf24649221234f8182ef91d7a4fa97af9dfb758b5b735cd9004dff29233c694bf96", "9badd835dc7ae1a60f1d2566c0ecdc35492f6faf99e0c43e75b62c48e889c69630aa6e13c198fd30be1ded64867a569a1e250476fa6b26ffd88fd07e3d0e3c8174b570c6f2060216d9c28f7e2cbc0b667f55774d4883e9ea1cbe796a2553fa72b486bf98a8e3f17dc05c70d492aa6d3aa2ccd1721f42cf0a41af84aeeaaf0a33d9e9fa8a05239f85fbbdcdbe2c581960c83cb30f0732c9467d3758535d34903f3ec2ed9f0436fc06949be462bb181f17380bc35117f99e28819fdb451785d5dacb3b3de8bf05b39537d933393222ab88e1dc503d5fab7991442c3001ee803f03d9e238b78599d766e7b4b7a1c66b17fdcd0319e526434213357683825156ebc4b77740fb326c409779005884ecf05bd1df9bb3c63f16941ac25083c5e5caebda48fd21f5246ea0441cc281544b3308cdab4be805cf630cc5b197baa61d0641b524f5dbbb08e45705202d25492ea3addc35be8239d59ab5dbcbc2c8fb80e86434d0331d9cb233b348e49272ed3bbe905cd6b72892420642085e73132784886c58bd057c602299fa4c97b17d813c40a348144bb14819138e1700bc72a5a1936654964437534c8a1f377a28c5818b5bf14e5a42325c167b070e9972aed3f9986b0e40865afb15b74e55d841f68702681b91d79bc2e1d6474353c354203526deb2430ac7d5f44079a6335a94a1065e615fbedad74b3f5a341709605fd74d93edba2678d3450cf8977ce357515c03f1a00c7aa54fce167d6265c6329ae5c727cd63c5a4936941a33240294bd0fb3aa41b2672da3fac4ad0f98063d090de749b94561b02a36316feecde5c6f2c909a5e75bbf9eaf285df9afa778acbb5ecbc8bddf648890ef45fb3b740c5f8f12989e85c1dad633fe3b77c777129ff10db5b770254c00645cbea2b3f3700264cd799a2db228a7ec17c76cc4998d3dc6830bb8f79c118fe8411a44e1b2a68da8f3a9f62adf9e5aa0d917fd635743bf5f493ebd586cea5d519dbda3f08f9c86b0946417e67d30ddb12f9793ee5c190055defe0370c9cf47bd225c80475cc3f1090124d8e403f7a80bdd7dc2709c0246bb2e7ff3aefa09d80c7774f76573aaca445c19265b304f3323c245d0597bffd8333977488c67ad7b6e2378d1c31f79c9f66d418ead25545a2f5d1c8ec1dc484567cd2e9bbe41f005513f732e3a85f68178831a4dfb392231e1b888959410013d3f2aee1f1493a73702bedb74bdb92f08b2439d9ade7afd5e43dd5337647d102167bb60e53d33765ab843407261dbb8eeb8065268e7fcfff0cee4a9a4e3805e898e1f2f59fe390477f597c855b244fb80001b15f5f3d55f7d680bee73e04f7f62aa38bbb87c6e1ca19c7aa44b38a7e59ce68e2cea965e2a55dfeac1de18111573c7e31cbc9eabf901357731c123832594283de2c21db55b03f2c1a3edb938dccfb8335b4e1f494d5beb811236746403a4c3134725a2b3dfae0b3238ecb7e66d31e5218bb2bd1c1457a8c373a1454ed983f7aba99dda358527379c30ed56084bbf0c09cfaf69d165f0c77e9114293501e19f782304b1aa2f9d7a0535266fab1c0c7efd5c5919ad90af763288121d624576530f59f82fdc4dfc23f416b1ab0a1c58b71ec61a610ad54694d7e7866b6701dd312b65b2a7a4611a557ce0500a7818c1fc9f400bbe59ad1a36f0549872c947414287c506b5bdc7b3905381780d2af1b6dedbd3d3c5585de06cbdf729e7fcaefe7542c7318a4734509fc7f26bb25b37d69a9c359d0fd26e8ea29e9d75d188238a31318d3a6eb743d5290ce3f65ab0c0ec1723e6ea5e3f3533551d0695906fb685c36229761dada3fe35038e859dc81362fdf1c09f928d11314bb8d6296c447d1dd64939622fede9c5773057520d6e4f2f52e5af2a67997d3259841c884a19f954b030d2a3b3517971de454101b02b7bcd100f6bc20ebb823c14ef0c9a9a1a7560589813b78968e0b461bc02e18e1d4a88afca57e66fdd57ac2facd5d9c124d412b5f89d634fc554f493a166b952a3bc799a5fb713f4a7a9b249d8ab1ae600f9914516dd4b34e08b8ed2bf95f8a88406867c20a6d99a6ce4da627bc84f212c33a3fa7c66a25eb2a6a1bdbfe55ba7082e16b9d6280474f0a1ec93d04a54477b49efeced052d8a0fd32d734c4370f62011a199609b8b63633f496cf152963b5640c0f73d19dabfadbcad4f3380f6e51fc260ce7f1a95d43a5f3068d94eb72d7354f9e11aec56fdbce2f11c1d96fe4a81c83500f2f5c81e18ef1f4ca9018ae522f2775d35a7ccdfc29d70040d61d5c126e9b1881b7ee1fd00bd64f2e07bc565c3d03ed067351e85de698d6e5dcbb480f75c5a81d45ac0c39dc08977e56d5820579132245968221be5048f38609a2bd20cd3d02c75a80744b5c62c7324b59fee64954be1bd6468ce244523c77eff1ac5f20d788e916ff6e8d58001c15ac1a35afe0a5985d618d6b5e85908ce892d63494d74eac2b096d7bd23f93b89a53640c2b8d55f322f98dfa8d60af769842054cc503d467f3ce8c377372a0a1dd7e4c64a4d7154396e6741393b26cf9cfe695fc12d0d2f9cdb10ef231d9e195b465d78e3840e37a395b094ed188aef085b44f1125559ff9626a7fc396c4b859fa98368867e0c09668e2d548f51fe081c20af6c4ba60f199b341005fc0505f29d0a93023577bcad23a1819c9f90fef2687176099d8926de20a106c7ab970fb54644873808fe1532a3cb467abead6337c9df476ab67f86e417d373dfbb99275e0354f8d435db6184010f295b68ce279461c42675bb5a21b55b5d8f632450505a12c41999253b6256109258e96fd999f1bdd44c5fc09576ba23ddbc78a40d8488b5a452ee882d603ae35023d69d12288cece05e88f47f227fbee9338d77528844d014af1655c5e1725d5c782da402c60cc9b3c09d4a40c3ed84e03801ae2e05993b653d9a7c04d0f7abf38d7fa1d9bf5bd930a1f47111aac81ddbaa25859f051ecf42bf9c6c5c4546dc9b4431fc1c89ced1d32a8988981f9569f20990c7beab5b096ec6eab28c770656b51edfa3b8a245261e018821f7e88b1c3e4765c6eed157dba738938cf28317e91cf7f4848e982bc2dd42c1b9c1231625a9935493adccafe0cb6a2c8da8f6e429cf90539259192b6b752aba0b2f9ce9af8fe1165c26232a84ed898c399b89021c806c05418dddceb7de789a908195f43a6b631c87206301d71b2c6cb751d79b038bffd86db88ccce94fc034fb6bfd8cb09b67689c633e9bb1a2703ced99bb042d235201a1bc765fc3df2f6508533e6013cd5360f3240487579b672b8b44aa49b3adb6fdea0736d41258d886d7f0ffa3b832cb4aa39b1538f10f8164bd5670dce7a6bb42fb90966ea2ef977bec99a2c473c55ebb792626a796b69964d709fc58f3c14342cbfe8e485962ce9817bfac03e1679431ed41c1fd8b8396f51c203f8c10ccd3348e41ddd9b320a85af8e6e2193e91093150c00427d55635c93fb5ca89a4430e12b681b5e8d08027a5d29cc2822849d59c58985ba6360e875021c7ccb09b311c80b74b189babfaf727156069b9a3135817ac514314133f167188a5b449bf70d611c9fa582ce11e85d2ec3e45ef6e875bbb7185169021d21406105cf00e8bd9f6c036c3f7a05fd8183b871f4f0661ac96765202168913dd6854a07aa94f027cb6b33a8d15c25b93eb27c101fece2770166afb7e8fec78754760a4383bd2f3ec19685ccc27f2294f9885d3dfc62fb62b34229583d5668341f5ed41de1bf020ebf2f2be3f22e05b6743e3b59af781393bd2f160c187b9bd86fd4a9cf8b747f77ed7361bac9d9b3e2d881806b6f84d67baf268c383609d2c62bd14b74e2dcea472d3054dea9ee60b0fdfce615f5b348bbde3d5d161ecbf57976aea3249a31947371989450aed81c43786a9581a42e8fee296d37f88a2f442e49e8429988852d6ab17ec96348d05f15600c042abcbe9e342d579cf96aa38f85b4b038bd3126fbf0edafe148ab072154c9c2f25bd469f9e7cf042e659ee8c8de96451c710216b96ddb1d8043fc0ce679c67f8d6466ee3aa75893de39d9efced88009289989d024a17488413884b792c38aa32cca1c4ec7e6b44a5cb8b57d994998c761f9ed3f353183cd5ef1bd39935a2b70e30704e3fcd745ce626c2c68a7bc292df285fe4ab2ef029ccf897a59a12861dd53b8c9c6f8ac2b98ad120e59eaacf92356e7783eff4130dfdf959f2038cc3eea9be5a029193f33e5c2b6482359c9474a6c86da85f05def0afc45faa3612162f82a9ee5d8470db7906cb170869056b3c92d987a663b5c21715255d626614eb3f976b1ba1b6f3dfdc78acaa5c525c372f30860d35603ce1658bfb757f7ac92ff12da04e653ab9849b33966030e670ac9ccde6f26dd1c0ab0da79e0ef59a87851079b230d9d48efee55e394753e3fd7e1de0ae9a801e64809753383bca801b635afcd0df880b99a5d2ba093a286d5b404eca9fbcb050b6652b7b69c32bb7b1acc513956e9545afe98e8ee80594f776adf76788e9cf40ac743787733c85222e66ea63d1271e0c2b455b253b88841e0f69f6b21d776f904b943b064709130eee3345760534a74a1b2845a371deb0755582a12077ca4a238d86f5fc8b5e54edace0882a41cfeee18ad8c061714c1967bd1f50cc7b51265503581184a368b236969d733349d1c50e1ea82aeaa885ea8ec8d1ffe6d588da5639c6e52a534b9067523bf5909fd131b11e10c746fdd824c712340a33775357ac71c30de03e73e2052df755f4d839db5cb4678e8d204103387f16093a123a83a07f96db8b82b65d4539fe4e509c6a74736139fa56e9d274c2db6676d6dfe34f471a64a3f744c9ac4da9e76f6477d64c4ecda6b811d5584fb9a1260e9c33b6da3c1351b182cea8c3fc83dea6ddade7dd79b635b21b25123962aa3ef973fc7e39682363c97ebd76f1a056b99cb363e253ddfb9049f691aee2a7a86aa96504e937fa5247fe34bf5567f6280c90e1a0c60a17a7da7d1cbf51d8d0a03fcfb08a366b1dd1b495b90916e62bfdcaf49c5907c0b117bcd2e2a598f75d0638d2e1baddb1b9212c9614349a996742b78bae30e82a7e596823109ed5713cfbd6e2cdfe482037901eb08b96a80e46ed41b6a411c4d7d887ead9d90736dcf7606a9a3f7c7e9d811edb8ca3da82a71823aebd6445b3f187805c1f8835ef08b97c693ed46dc1daa164d6c5f5cc695d4de2dc941715352df8cba5a83a5775b01cea46a55656e5a81ce9db5e4620daf2d74eb19fb0dd0d8b692af8afeada129cc17aa1bf45683e0631fa4d88ea56ff9244d6052bca437479c31e062dd2b8d5e44ce095843c7014331a43271bb3c9cd6694547d8e3ed3aa2ee7d3e0d6e63a545cee941f6419db6006a68bdf61e0594483f"}) 1.940600761s ago: executing program 4 (id=2116): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) syz_emit_ethernet(0xae, &(0x7f0000000140)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "00e51f", 0x78, 0x6, 0x1, @loopback, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x1e, 0x8, 0x0, 0x0, 0x0, {[@sack={0x5, 0x1a, [0x3, 0xffffffff, 0x9, 0x7, 0x1, 0x1000]}, @timestamp={0x8, 0xa, 0x1, 0x5}, @timestamp={0x8, 0xa, 0xfffffffb, 0x1}, @exp_smc={0xfe, 0x6}, @timestamp={0x8, 0xa, 0x5, 0xff}, @mss={0x2, 0x4, 0x5}, @mptcp=@capable={0x1e, 0x14, 0x5, 0x8, 0x7, 0xff, [0x6]}, @sack_perm={0x4, 0x2}, @fastopen={0x22, 0xb, "cd6cea09a03e5230a8"}]}}}}}}}}, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) recvmmsg$unix(r4, &(0x7f0000001c00)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000400)=""/160, 0xa0}, {&(0x7f0000000740)=""/244, 0xf4}, {&(0x7f00000000c0)=""/7, 0x7}, {&(0x7f0000000200)=""/4, 0x4}], 0x4, &(0x7f00000002c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x40}}, {{&(0x7f00000004c0), 0x6e, &(0x7f0000000c40)=[{&(0x7f0000000600)=""/165, 0xa5}, {&(0x7f0000000840)=""/150, 0x96}, {&(0x7f0000000540)=""/51, 0x33}, {&(0x7f0000000900)=""/12, 0xc}, {&(0x7f0000000940)=""/111, 0x6f}, {&(0x7f00000009c0)=""/220, 0xdc}, {&(0x7f0000000ac0)=""/75, 0x4b}, {&(0x7f0000000b40)=""/105, 0x69}, {&(0x7f0000000bc0)=""/78, 0x4e}], 0x9}}, {{&(0x7f0000000d00)=@abs, 0x6e, &(0x7f0000001180)=[{&(0x7f0000000d80)=""/25, 0x19}, {&(0x7f0000000dc0)=""/125, 0x7d}, {&(0x7f0000000e40)=""/68, 0x44}, {&(0x7f0000000ec0)=""/229, 0xe5}, {&(0x7f0000000fc0)=""/9, 0x9}, {&(0x7f0000001000)=""/169, 0xa9}, {&(0x7f00000010c0)=""/163, 0xa3}], 0x7}}, {{&(0x7f0000001200)=@abs, 0x6e, &(0x7f0000001440)=[{&(0x7f0000001300)=""/175, 0xaf}, {&(0x7f0000001280)=""/4, 0x4}, {&(0x7f00000013c0)=""/77, 0x4d}], 0x3}}, {{&(0x7f0000001480)=@abs, 0x6e, &(0x7f00000016c0)=[{&(0x7f0000001500)=""/185, 0xb9}, {&(0x7f00000015c0)=""/160, 0xa0}, {&(0x7f0000001680)=""/20, 0x14}], 0x3}}, {{&(0x7f0000001700)=@abs, 0x6e, &(0x7f0000001b00)=[{&(0x7f0000001780)=""/127, 0x7f}, {&(0x7f0000001800)}, {&(0x7f0000001840)=""/13, 0xd}, {&(0x7f0000001880)=""/174, 0xae}, {&(0x7f0000001940)=""/161, 0xa1}, {&(0x7f0000001a00)=""/169, 0xa9}, {&(0x7f0000001ac0)=""/41, 0x29}], 0x7, &(0x7f0000001b80)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x48}}], 0x6, 0x40003040, &(0x7f0000001d80)={0x77359400}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x84, 0x2c, 0xd27, 0x70bd28, 0x25dfdc00, {0x0, 0x0, 0x0, r6, {0x0, 0x4}, {0x0, 0x2}, {0xfff2, 0x3}}, [@filter_kind_options=@f_matchall={{0x9}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x2, 0x2, 0xfffffffffffffffd, 0x100000a, 0x8}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x51}, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x2d, &(0x7f0000000000)=0x80000001, 0x4) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x51, &(0x7f0000000100)=[{&(0x7f00000006c0)="5c00000013006bcd9e3fe3dc6e48aa310b6b87033c0000001f03000000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'veth1_to_batadv\x00', &(0x7f0000000000)=@ethtool_modinfo={0x42, 0x5, 0xf}}) 1.934300975s ago: executing program 2 (id=2117): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000480), r1) sendmsg$IEEE802154_START_REQ(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000004c0)={0x14, r3, 0x1, 0x70bd27, 0x25dfdbfe}, 0x14}}, 0x4008104) sendmsg$nl_route_sched(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f00000080c0)=@newtaction={0x58, 0x31, 0x901, 0x0, 0x0, {}, [{0x44, 0x1, [@m_nat={0x40, 0x1, 0x0, 0x0, {{0x38}, {0x4}, {0x15, 0x6, "02122a1364ca4168600ce2c275478c859e"}, {0xc}, {0xc}}}]}]}, 0x58}}, 0x0) 1.754560569s ago: executing program 1 (id=2118): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="5800000010000300"/20, @ANYRES32=r5, @ANYBLOB="00000000000000001c0012800b00010067656e65766500000c00028005000c00010000001c001a8018000a8014000700fc0200"], 0x58}, 0x1, 0x2}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000240), r4) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x23}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r7, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@rights={{0x14, 0x1, 0x1, [r6]}}], 0x18}, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r8, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001500)=@newqdisc={0x70, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0x9}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x40, 0x2, {{0x1ff, 0x4, 0x0, 0x20, 0xfffffffd, 0x8}, [@TCA_NETEM_ECN={0x8, 0x7, 0x1}, @TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x80000001, 0x6, 0x8, 0x7, 0xd99d}}]}]}}}]}, 0x70}}, 0x4) getsockopt$packet_int(r8, 0x107, 0x12, &(0x7f00000000c0), &(0x7f0000000180)=0x4) sendto$packet(r2, &(0x7f00000002c0)="44c33b69ebc9e05e9bdec0c288a8", 0xe, 0x870, &(0x7f0000000440)={0x11, 0x0, r9, 0x1, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}}, 0x14) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000001c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100fcffffff000000000200000004008e000800261dd66a4c00"], 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x5) 1.63753983s ago: executing program 3 (id=2119): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-aes-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000002c0)="26fe", 0x2}], 0x1, 0x0, 0x0, 0x40010}, 0x0) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x123) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="ac0000002100010027bd7000fbdbdf25ff010000000000000000000000000001fe8000000000000000000000000000bb4e2100004e219ffd070080201d000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="a86b6e00b300000050001100fc00000000000000000000000000000100000000000000000000000000000001ffffffff000000000000000000020000000000000000000000000000000000006c010000000000000a0002000c001c00822e3cb151939ee0a843ddbc95f592534b56a429d9676c7e08489216d728b30034fabe68e599ba5e05000064f699242b46d2cdb4b09eed8773c7e166bcb4ac3776bd9618c029c0800447e09b59af29", @ANYRES32=0x0, @ANYBLOB="02000000"], 0xac}, 0x1, 0x0, 0x0, 0x4000840}, 0x20004040) 1.61845575s ago: executing program 2 (id=2120): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x0, @none}, &(0x7f0000000040)=0xe, 0x80000) setsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f0000000080)={0x3824, 0x401, 0x0, 0x7, 0x0, 0xbe, 0x3}, 0xc) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$BTRFS_IOC_INO_LOOKUP(r2, 0xd0009412, &(0x7f00000000c0)={0x0, 0x8}) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f00000010c0)=0x7ff9, 0x4) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) splice(r2, &(0x7f0000001100), r1, &(0x7f0000001140)=0x3, 0x3, 0x9) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$WPAN_WANTLQI(r3, 0x0, 0x3, &(0x7f0000001180), &(0x7f00000011c0)=0x4) bind$phonet(0xffffffffffffffff, &(0x7f0000001200)={0x23, 0x0, 0xa, 0xce}, 0x10) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000001240)={0x0, 0x0, 0x5, 0x0, '\x00', [{0xdc8, 0x3, 0x6f, 0x0, 0xffffffffffffffff, 0x25}, {0x9, 0x2b0b5091, 0x7, 0x7, 0x8, 0x9}], ['\x00', '\x00', '\x00', '\x00', '\x00']}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001440)={0x1, 0xffffffffffffffff}, 0x4) getpeername$packet(0xffffffffffffffff, &(0x7f0000001640)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000001680)=0x14) r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000016c0), 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000017c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000001740), &(0x7f0000001780)}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001840)={0x6, 0x1c, &(0x7f0000001480)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xfffffba7}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001580)='GPL\x00', 0x3, 0x66, &(0x7f00000015c0)=""/102, 0x40f00, 0x4, '\x00', r5, 0x25, r6, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001700)={0x5, 0x3, 0x7, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001800)=[r7], 0x0, 0x10, 0x3}, 0x94) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001940), 0xffffffffffffffff) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r8, &(0x7f0000001a00)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000019c0)={&(0x7f0000001980)={0x38, r9, 0x200, 0x70bd25, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x6, 0x73}}}}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0xf8}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x8}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x7}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x8020) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r8, 0xc0096616, &(0x7f0000001a40)={0x1, [0x0]}) shutdown(r8, 0x1) ioctl$AUTOFS_IOC_EXPIRE(r7, 0x810c9365, &(0x7f0000001a80)={{0xb1b, 0x6}, 0x100, './file0\x00'}) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000001bc0)={0x0, 'syzkaller1\x00', {0x4}}) r10 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r10, &(0x7f0000001c00)={0xa, 0x0, 0xffff5648, @local, 0x1, 0x2}, 0x20) r11 = accept4$inet(r0, 0x0, &(0x7f0000001c40), 0xc0000) sendmsg(r11, &(0x7f0000001fc0)={&(0x7f0000001c80)=@nl=@proc={0x10, 0x0, 0x25dfdbfe, 0x8000}, 0x80, &(0x7f0000001e80)=[{&(0x7f0000001d00)="93978f86bb7b462a794f8cff31", 0xd}, {&(0x7f0000001d40)="82bfe6c462bc4a00a4edbcca9911a008b52dc32e15ec90b794cc2618984b8624113fa31a8901b5dc7c6b3aa087f4dec9118a2970eb340e59d59967aecd8fe051a2a31ce1407fa51e18bcd1cdefc795529a12ee168794020cd832bd68d2d75d6bd7616f5b1f684d2274f0581bc77f94e2a0a0efba815b689a1bcd4148249dda17be8c735c04bf71501100afd3b6985571bb52ca7f4c117bd9", 0x98}, {&(0x7f0000001e00)="29ced0f43a2728040c84d4abed2b2c17d2d53989764f22282ec0145ff522a8b457e0873ed376f98b8d507409e52089117a5e28e1af46c1aa6720c460da9f6d3d51be188e521cb13b7f62bdf730287b631b06e2a1f5be558deea59ab30489a156be2d7923ddd38b659207725e46e0d046", 0x70}], 0x3, &(0x7f0000001ec0)=[{0xd8, 0x117, 0xa, "e9e67f0dc7ab2c994807c47920c7dc23da1976b9ca0e045111556be9073c1d98c42767913775ff66417a03df3fca76a5a32eb0c9d236c40bba8f4764a449a9a747934d33b565a6ee425aabc402b276080ebc6cde12a4e62982041f1f3dbe6494190bdb5fc64b2184619d76c82ab6a213ac9d996589b89c2e5640e936c434e5a45072ca52312c043d0f3a54be34df4ecea71d9a020a1b3b9b6ec10f36d3b6cbd06ae4e9748c7176c0bad9e7ebbebc1de7d3eb2441a3cbfc4f529abf744054def2fd"}], 0xd8}, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000002000), r8) getsockopt$inet6_mptcp_buf(r11, 0x11c, 0x4, &(0x7f0000002040)=""/124, &(0x7f00000020c0)=0x7c) 1.54483071s ago: executing program 0 (id=2121): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000040)={'veth1_virt_wifi\x00'}) ioctl$TUNSETGROUP(r0, 0x400454ce, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) 1.281460262s ago: executing program 2 (id=2122): r0 = socket$pppl2tp(0x18, 0x1, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x9}, 0x48) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000440)={'veth1_macvtap\x00', 0x102}) 1.228852425s ago: executing program 1 (id=2123): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4048010) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="680000000a06010100000000000000000300000908000940800000010900020073797a31000000000500010007000000380008800c0001010800094000000094"], 0x68}, 0x1, 0x0, 0x0, 0x4800}, 0x48080) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x2000011, r2, 0x0) (async) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000000)={'syz_tun\x00', &(0x7f0000002fc0)=@ethtool_coalesce={0x33}}) 1.209589641s ago: executing program 0 (id=2124): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000003e000100fc00070004e5ffff000000000400579e73060000000000000000108004000f800c0002000500000000000200"], 0x30}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) 1.121491117s ago: executing program 2 (id=2125): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r0, 0x0, 0x33, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r1, &(0x7f0000000340)="07000000010001", 0x7) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) 1.119682805s ago: executing program 4 (id=2126): r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/user\x00') ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000140)={'ip6_vti0\x00', &(0x7f00000000c0)={'syztnl0\x00', 0x0, 0x4, 0x2, 0x2, 0x3639, 0x42, @private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7800, 0x80a1, 0x200, 0x7fffffff}}) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r1, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0xb0, r0, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xffffffff}, @MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010100}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r3}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x29}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x24, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x10}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}]}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010101}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x51}, 0x301ae478394444b2) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r1) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0xa0, r4, 0x200, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x3ff, 0x5a}}}}, [@crypto_settings=[@NL80211_ATTR_AKM_SUITES={0x8, 0x4c, [0xfac09]}, @NL80211_ATTR_WPA_VERSIONS={0x8, 0x4b, 0x5}, @NL80211_ATTR_AKM_SUITES={0xc, 0x4c, [0xfac09, 0xfac0d]}], @crypto_settings=[@NL80211_ATTR_PMK={0x1e, 0xfe, "a8addda3bbfd579f1a148a934b82866cea948d14347836253df3"}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_PMK={0x33, 0xfe, "5abf1532b7caf47760ced1ffc7d7d4bcefdc57fc52deea6349a84469c4e8b0c1886775bd471ebdcaaf57facd80cb95"}], @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_DISABLE_VHT={0x4}, @NL80211_ATTR_WANT_1X_4WAY_HS={0x4}]}, 0xa0}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCBRDELBR(r5, 0x89a1, &(0x7f0000000480)='wlan0\x00') r6 = socket$nl_sock_diag(0x10, 0x3, 0x4) setsockopt$netlink_NETLINK_RX_RING(r6, 0x10e, 0x6, &(0x7f00000004c0)={0x8, 0x6, 0x5, 0xd}, 0x10) sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x1c, 0x2, 0x2, 0x101, 0x0, 0x0, {0x0, 0x0, 0x4}, [@CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008090}, 0x40040) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r5, &(0x7f0000000740)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x44, r4, 0x200, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x8, 0x3a}}}}, [@NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x4004c8c4) r8 = syz_genetlink_get_family_id$batadv(&(0x7f00000007c0), r1) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r1, &(0x7f00000008c0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x60, r8, 0x4, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xffffffff}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x400}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x5}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000}, 0x1) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r9, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000009c0)={&(0x7f0000000940)={0x5c, r0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0xc, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x1c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xf7}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xffffffc1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x80) sendmsg$MPTCP_PM_CMD_REMOVE(r1, &(0x7f0000000b80)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000a80)={0xc0, r0, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x2}, @MPTCP_PM_ATTR_ADDR={0x4c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x33}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x1}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r3}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x1f}}]}]}, 0xc0}, 0x1, 0x0, 0x0, 0x4000044}, 0x44010) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r10, &(0x7f0000000cc0)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c00)={0x4c, r0, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x2c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r3}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x20001000) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_LIST(r11, &(0x7f0000000f00)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000d40)={0x148, 0x0, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_MLSLVLLST={0xb8, 0x8, 0x0, 0x1, [{0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x68a23df}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3efeba88}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x607bb9d4}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1b}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xe075048}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x17}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x78ef15d4}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x5b}]}, {0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x38fd357b}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x6b}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xcd}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x48d27930}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x23}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x303e87b1}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x98fc605}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1279d082}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2b}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc6}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x4c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x7}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x2}, {0x5}, {0x5, 0x3, 0x5}, {0x5}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x5}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x18, 0xc, 0x0, 0x1, [{0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf73c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa849}]}]}]}, 0x148}, 0x1, 0x0, 0x0, 0x4004}, 0x40000) r12 = socket$igmp(0x2, 0x3, 0x2) ioctl$SIOCGETMIFCNT_IN6(r12, 0x89e0, &(0x7f0000000f40)={0x1}) sendmsg$MPTCP_PM_CMD_GET_ADDR(r5, &(0x7f0000001040)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001000)={&(0x7f0000000fc0)={0x1c, r0, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000811}, 0x10) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, r6) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000001080)={'veth1_to_bridge\x00'}) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 1.038210954s ago: executing program 0 (id=2127): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xc, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000500000000000000b64f7110b5000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x14, r0, 0x800, 0x70bd26, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000001e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a0b04000000000000000002000000400004803c0001800900010068617368000000002c00028008000640e80000ff08000140000000030800044020000003080003400000000408000240000000120900010073797a30000000000900020073797a32"], 0x94}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r2, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r3, 0x28, 0x0, &(0x7f0000000340)=0x3, 0x8) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000001100)=ANY=[@ANYBLOB="200000006a00010000000000000000000a00000000000000080001"], 0x20}}, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f00000000c0)) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_HARDIF(r6, &(0x7f00000003c0)={&(0x7f00000001c0), 0xc, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="00012abd7000ffdbdf2505000000050033000200000008003200ab00000005002a000300000050b2a9f54c9a5d9dcc4245f6d8b078e2d4c16b14fb7bb6ae6e6357dde1ca2742aa35382daa769c5bbb5e794760cdd205137bf9a953cc22298ee8c66b2d6a5bdb72bf38a4e04098ef7da22822a0c3f72fb24239fe0319ed53544f04442259e019497a72bfd50a1440cb84c3508430a07b02be71149c10b69b5e7a846bc8778aaac7482c75be35a28003d19d61ed2d8110caabd414ada67c01acf61ec41713eb442642992a1c408eeba7df8bcdbc26c841ec48c4ca2c330d952199008de119bf6bc43773ae9475021a28be32f983eab2"], 0x2c}, 0x1, 0x0, 0x0, 0x20000800}, 0x4000040) pwritev(r4, &(0x7f0000000380)=[{&(0x7f0000000040)="c021", 0x2}], 0x1, 0x7, 0x1) syz_emit_ethernet(0x26, &(0x7f00000002c0)={@multicast, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @multicast2, @multicast1}, {0x0, 0x17c1, 0x10, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}, "d482449a"}}}}}}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r5, 0xc020f509, &(0x7f0000000140)={r5, 0x5, 0x2, 0x800}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) shutdown(r9, 0x1) setsockopt$sock_int(r10, 0x1, 0x22, &(0x7f0000000040)=0x7, 0x4) recvmmsg(r10, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000100)='fscache_access_cache\x00', r8}, 0x18) 993.500639ms ago: executing program 1 (id=2128): r0 = socket$inet(0x2, 0x6, 0x1) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r0, 0x6628) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000000000000000000085000000bc000000850000000800000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0x42, 0x0, &(0x7f0000000100)="6d86c1e19d8852bd034c37ed5b7a85b0c0810a9765b9aab68446d72fd5828e3728000fc63ea6915bb9b82fa6d70502f9a8b9ce81cade1e696502bbb1bbc2bbfa4570", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 885.048295ms ago: executing program 2 (id=2129): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x200000000000011, 0x2, 0x0) bind$packet(r2, &(0x7f0000000080)={0x11, 0xf5, 0x0, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3b}}, 0x14) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r3, &(0x7f00000000c0)={@val={0x8, 0xf5}, @val={0x7, 0x3, 0x3, 0x2, 0x14}, @ipv4=@tcp={{0x5, 0x4, 0x0, 0x4, 0x28, 0x0, 0x0, 0x9, 0x2f, 0x0, @local, @broadcast}, {{0x4e20, 0x88a8, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x20, 0x5}}}}, 0x36) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r8 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r8, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r7, @ANYBLOB="00000000100000001c001a80", @ANYRES16=r8, @ANYRES32=r8], 0x44}}, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(r8, 0x111, 0x2, 0x0, 0x4) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000080)=@bridge_setlink={0x20, 0x13, 0xa2f, 0x70bd2b, 0x25cfdbfd, {0x7, 0x0, 0x68, r1, 0x12318, 0x22264}}, 0x20}}, 0x8004) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r9, 0x84, 0x75, &(0x7f0000000340)={0x0, 0xcc}, 0x8) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r9, 0x84, 0x4, &(0x7f0000000040)=0xff, 0x4) sendmmsg$inet6(r9, &(0x7f0000000080)=[{{&(0x7f0000000480)={0xa, 0x4e23, 0x0, @mcast1, 0x7}, 0x11, &(0x7f0000000000)=[{&(0x7f00000034c0)="1f", 0x1}], 0x100000000000014b, 0x0, 0xffffffffffffff13}}], 0x1, 0x3404c8d4) 752.925826ms ago: executing program 0 (id=2130): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x20, 0xe, &(0x7f0000000980)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x9}, 0x10}, 0x94) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000200)=r5, 0x4) getsockopt$sock_buf(r4, 0x1, 0x1a, 0x0, &(0x7f00000000c0)) bind$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@bloom_filter={0x1e, 0x0, 0x7, 0x6a, 0x0, 0x1}, 0x50) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000440)={r6, 0x0, &(0x7f0000000400)=""/55}, 0x20) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000006800010000000000000000000a00000000000000080006000100000004000b"], 0x24}}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x7) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYRESHEX=r8, @ANYRES32, @ANYRESOCT=r1], 0x48}}, 0x40000) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0x8}, {0xfff1, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000940)=@delchain={0x24, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0x9}, {0xfff3, 0x8}, {0x0, 0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0) 636.941472ms ago: executing program 3 (id=2131): sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x58}}, 0x880) (async, rerun: 32) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (rerun: 32) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000080)=@ipv6_newrule={0x30, 0x20, 0xa05, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'lo\x00'}]}, 0x30}}, 0x0) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000006c000000160a01020000000000000000010000000900010073797a30000000000900020073797a3000000000400003802c00038004000100766c616e31000000000000000000000014000100776c616e3100000000000000000000000800014000000000080002"], 0xfc}}, 0x0) write$tun(r0, &(0x7f0000000540)=ANY=[@ANYBLOB="034886dd010000000000140000006000000000042f"], 0xfdef) r4 = socket$netlink(0x10, 0x3, 0x4) (async) r5 = socket$packet(0x11, 0x4000000000002, 0x300) setsockopt$packet_tx_ring(r5, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) (async) write(r4, &(0x7f0000000040)="2700000014000707030e0000120f0a0011000100f5fe009d2fb112ff000000008a151f75080039", 0x27) (async) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x3, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1806000000000000000000000000000018120000", @ANYRES8=r0, @ANYBLOB="0000000000000000b703000013000000850000000c000000b707000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (rerun: 64) 441.423636ms ago: executing program 1 (id=2132): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt(r3, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r3, 0x84, 0x1b, &(0x7f0000000340), &(0x7f00000003c0)=0x8) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000001280)="b7", 0x1) getsockopt$bt_hci(r2, 0x84, 0x1, &(0x7f0000001280)=""/4107, &(0x7f00000000c0)=0x100b) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'erspan0\x00'}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000180)=0x7, 0x4) listen(r4, 0x3) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000180)=@ipv6_getanyicast={0x14, 0x3e, 0x4, 0x70bd2b, 0x25dfdbfd, {}, ["", "", "", "", ""]}, 0x14}}, 0x0) 356.869366ms ago: executing program 4 (id=2133): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f00000000c0)='rpc_stats_latency\x00', r1, 0x0, 0xf}, 0x18) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0xffffffffffffffe2, 0x400048c0}, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) r3 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x28, r5, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'eth', 0x3a, 'caif0\x00'}}]}]}, 0x28}}, 0x0) socket(0x400000000010, 0x3, 0x0) (async) r6 = socket(0x400000000010, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000030000000900010073797a300000000040000000030a03000000000000000000030000000900030073797a30000000000900010073797a3000000067140004800800024000000000080001"], 0xb0}}, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x10, 0xb}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x10, 0xb}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd28, 0x8004, {0x0, 0x0, 0x0, r9, {0x10, 0xffe0}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x1}]}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x22044028}, 0x40040) ioctl$FIBMAP(r3, 0x1, &(0x7f0000000240)=0x4) getpeername$l2tp6(r6, &(0x7f0000000100)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000140)=0x20) (async) getpeername$l2tp6(r6, &(0x7f0000000100)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000140)=0x20) ioctl$TUNSETOFFLOAD(r2, 0x5421, 0x110e22ffff) 340.163207ms ago: executing program 0 (id=2134): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$inet(r0, &(0x7f0000000380)={0x2, 0x4e24, @empty}, 0x10) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @broadcast}, 0x2}}, 0x2e) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYRESHEX=r0, @ANYBLOB="01002cbd7000040000000500b600080009000200000008000c00a60a0000060001000500004008000b", @ANYBLOB='@\x00\x00\x00'], 0x40}, 0x1, 0x0, 0x0, 0x94ced4add106e01f}, 0x20044040) 217.474294ms ago: executing program 2 (id=2135): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='westwood\x00', 0x9) getsockopt$inet6_tcp_buf(r1, 0x6, 0x1a, 0x0, &(0x7f00000001c0)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="280100"], 0x128}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r6) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000003c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r8, @ANYBLOB="10007d8005", @ANYRES8=0x0, @ANYRES32=r6], 0x2c}, 0x1, 0x0, 0x0, 0x20004080}, 0x0) sendmsg$NL80211_CMD_GET_COALESCE(r4, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x30, r5, 0x0, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x17}, @val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x0, 0x1e}}}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) (async) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, 0x0) (async) r10 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) (async) sendmsg$nl_route(r0, 0x0, 0x0) socket(0x10, 0x3, 0x0) (async) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) (async) write(r0, &(0x7f00000000c0)="2400000011005f0414f9f407000904e4800000000d0000000000ed78f63504d34a8137f3a4acf9e020193f00"/54, 0x36) 216.969994ms ago: executing program 1 (id=2136): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'bridge0\x00', 0x1000}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) (async) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x240100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) (async, rerun: 64) r6 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001080)=ANY=[@ANYBLOB="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"], 0xb40}}, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x3c, 0x2, [@TCA_TBF_PBURST={0x8, 0x7, 0xb86}, @TCA_TBF_PARMS={0x28, 0x1, {{0xa, 0x2, 0xffff, 0x7, 0xcc, 0x3}, {0x2, 0x0, 0x7, 0x8, 0x7f, 0x889f}, 0xa6, 0x7, 0x1bb6}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) (async) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r8, {}, {0x2, 0xb}, {0x10, 0x8}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x3}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20048010}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000140)=0x5) (async) r9 = socket(0x10, 0x2, 0x0) write(r9, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) (async) recvmmsg(r9, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) (async) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000300)={0x0, @in={{0x2, 0x4e21, @rand_addr=0x64010100}}, 0x40, 0x1dc6, 0x6, 0x2}, &(0x7f0000000240)=0x98) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r9, 0x84, 0x73, &(0x7f00000003c0)={r10, 0x7, 0x30, 0x1}, &(0x7f0000000480)=0x18) (async) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r7, 0x8982, &(0x7f00000004c0)={0x0, 'vxcan1\x00', {0x4}, 0x60}) (async, rerun: 32) r11 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) sendmsg$ETHTOOL_MSG_DEBUG_SET(r11, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x14, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4000010}, 0x4000c090) r12 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000200)={'veth0_to_team\x00', 0x0}) sendmsg$nl_route(r12, &(0x7f0000000900)={0x0, 0xff09, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYRES16=r12, @ANYRES32=r13, @ANYBLOB="0000d400000000000a000100003b"], 0x2c}, 0x1, 0x0, 0x0, 0x4048000}, 0x0) 114.48313ms ago: executing program 3 (id=2137): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000002c0)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f00000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x10, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c0000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="00000000120000000c002b8008000100", @ANYRES32, @ANYBLOB="08001b"], 0x3c}}, 0x0) 0s ago: executing program 0 (id=2138): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x4c, r1, 0x201, 0x0, 0x0, {0x3, 0x0, 0x26}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @initdev={0xac, 0x35, 0x0, 0x0}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'sit0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x43}}}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @dev}]}, 0x4c}, 0x8, 0x3000000000002}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0xae96, 0x8, 0x81, 0x3}]}, 0x10) kernel console output (not intermixed with test programs): ] netlink: 'syz.1.194': attribute type 29 has an invalid length. [ 116.690493][ T6786] netlink: 'syz.0.197': attribute type 1 has an invalid length. [ 116.992369][ T6786] 8021q: adding VLAN 0 to HW filter on device bond1 [ 117.340503][ T6790] bond1: (slave veth3): Enslaving as an active interface with a down link [ 117.502453][ T6792] bond1: (slave veth0_to_bond): making interface the new active one [ 117.564663][ T6792] veth0_to_bond: entered promiscuous mode [ 117.575545][ T6792] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 117.622371][ T6833] x_tables: ip_tables: MARK.2 target: invalid size 8 (kernel) != (user) 16 [ 117.756954][ T6786] bond1: (slave veth5): Enslaving as an active interface with a down link [ 117.941173][ T6843] __nla_validate_parse: 4 callbacks suppressed [ 117.941194][ T6843] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.210'. [ 117.990355][ T6845] tipc: Enabled bearer , priority 0 [ 117.997708][ T6843] netlink: zone id is out of range [ 118.004155][ T6843] netlink: get zone limit has 8 unknown bytes [ 118.042127][ T6838] syzkaller0: entered promiscuous mode [ 118.051780][ T6838] syzkaller0: entered allmulticast mode [ 118.114557][ T6838] tipc: Resetting bearer [ 118.160237][ T6838] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.175978][ T6838] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.176056][ T6841] netlink: 'syz.1.208': attribute type 16 has an invalid length. [ 118.215756][ T6838] tipc: Resetting bearer [ 118.224053][ T6838] tipc: Resetting bearer [ 118.279118][ T6837] tipc: Resetting bearer [ 118.379277][ T6837] tipc: Disabling bearer [ 118.448473][ T6861] netlink: 8 bytes leftover after parsing attributes in process `syz.3.214'. [ 118.467763][ T6861] netlink: 4 bytes leftover after parsing attributes in process `syz.3.214'. [ 118.637226][ T6870] openvswitch: netlink: Actions may not be safe on all matching packets [ 118.719194][ T6872] netlink: 16 bytes leftover after parsing attributes in process `syz.3.219'. [ 118.809333][ T6882] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 119.075940][ T6889] netlink: 28 bytes leftover after parsing attributes in process `syz.4.223'. [ 119.087166][ T6889] netlink: 28 bytes leftover after parsing attributes in process `syz.4.223'. [ 119.118350][ T6887] netlink: 28 bytes leftover after parsing attributes in process `syz.4.223'. [ 119.133901][ T6888] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 119.186090][ T6887] netlink: 28 bytes leftover after parsing attributes in process `syz.4.223'. [ 119.361993][ T6889] netlink: 28 bytes leftover after parsing attributes in process `syz.4.223'. [ 119.396263][ T6889] netlink: 28 bytes leftover after parsing attributes in process `syz.4.223'. [ 119.421800][ T6908] openvswitch: netlink: Actions may not be safe on all matching packets [ 119.559883][ T6912] netlink: 'syz.0.229': attribute type 3 has an invalid length. [ 119.624653][ T6908] bridge_slave_1: left allmulticast mode [ 119.682804][ T6908] bridge_slave_1: left promiscuous mode [ 119.712975][ T6908] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.846175][ T6908] bridge_slave_0: left allmulticast mode [ 119.869848][ T6908] bridge_slave_0: left promiscuous mode [ 119.888853][ T6908] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.927675][ T6927] netlink: 'syz.2.231': attribute type 75 has an invalid length. [ 120.780744][ T6963] netlink: 'syz.2.240': attribute type 4 has an invalid length. [ 121.017635][ T6977] 8021q: VLANs not supported on sit0 [ 121.122406][ T6979] netlink: 'syz.3.244': attribute type 3 has an invalid length. [ 121.505517][ T6998] syzkaller1: entered promiscuous mode [ 121.534036][ T6998] syzkaller1: entered allmulticast mode [ 122.892836][ T51] Bluetooth: hci0: command tx timeout [ 123.039169][ T7068] __nla_validate_parse: 17 callbacks suppressed [ 123.039192][ T7068] netlink: 16 bytes leftover after parsing attributes in process `syz.3.267'. [ 123.102399][ T7068] netlink: 224 bytes leftover after parsing attributes in process `syz.3.267'. [ 123.396638][ T7079] macvlan2: entered allmulticast mode [ 123.997177][ T7107] netlink: 8 bytes leftover after parsing attributes in process `syz.2.277'. [ 124.146292][ T7116] tipc: Started in network mode [ 124.151856][ T7116] tipc: Node identity 6612432efe12, cluster identity 4711 [ 124.161769][ T7116] tipc: Enabled bearer , priority 0 [ 124.170868][ T7116] syzkaller0: entered promiscuous mode [ 124.177928][ T7116] syzkaller0: entered allmulticast mode [ 124.259863][ T7114] tipc: Resetting bearer [ 124.271470][ T7120] netlink: 28 bytes leftover after parsing attributes in process `syz.2.282'. [ 124.299768][ T7120] netlink: 28 bytes leftover after parsing attributes in process `syz.2.282'. [ 124.321173][ T7114] tipc: Disabling bearer [ 124.349282][ T7120] gretap0: entered promiscuous mode [ 124.357096][ T7120] gretap0: left promiscuous mode [ 124.385084][ T7126] netlink: 36 bytes leftover after parsing attributes in process `syz.0.284'. [ 124.413340][ T7124] netlink: 4 bytes leftover after parsing attributes in process `syz.0.284'. [ 124.546977][ T7131] netlink: 4 bytes leftover after parsing attributes in process `syz.4.286'. [ 124.597324][ T7132] netlink: 8 bytes leftover after parsing attributes in process `syz.3.285'. [ 124.629851][ T7132] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 124.768077][ T7138] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.289'. [ 124.800336][ T7138] netlink: zone id is out of range [ 124.810130][ T7138] netlink: zone id is out of range [ 124.835633][ T7138] netlink: get zone limit has 8 unknown bytes [ 125.229793][ T7161] netlink: 'syz.2.295': attribute type 10 has an invalid length. [ 125.279632][ T7161] 8021q: adding VLAN 0 to HW filter on device team0 [ 125.326837][ T7161] bond0: (slave team0): Enslaving as an active interface with an up link [ 125.354418][ T7166] netlink: 'syz.2.295': attribute type 10 has an invalid length. [ 125.485111][ T7166] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 125.525970][ T7169] openvswitch: netlink: Geneve opt len 62 is not a multiple of 4. [ 125.546608][ T7159] 8021q: adding VLAN 0 to HW filter on device bond2 [ 125.568250][ T7169] openvswitch: netlink: Geneve opt len 62 is not a multiple of 4. [ 125.592440][ T7161] bond_slave_0: entered promiscuous mode [ 125.598533][ T7161] bond_slave_1: entered promiscuous mode [ 125.604317][ T7161] mac80211_hwsim hwsim7 wlan1: entered promiscuous mode [ 125.611863][ T7161] team_slave_0: entered promiscuous mode [ 125.618007][ T7161] team_slave_1: entered promiscuous mode [ 125.623762][ T7161] syz_tun: entered promiscuous mode [ 125.645493][ T7161] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 125.706080][ T7161] bond2: (slave macvlan0): Enslaving as a backup interface with an up link [ 126.041611][ T7182] netlink: 'syz.0.303': attribute type 2 has an invalid length. [ 126.053680][ T7182] netlink: 'syz.0.303': attribute type 1 has an invalid length. [ 126.399173][ T7200] netlink: 'syz.0.308': attribute type 1 has an invalid length. [ 126.446442][ T7201] netlink: 'syz.0.308': attribute type 1 has an invalid length. [ 126.638401][ T7198] team0 (unregistering): Port device team_slave_0 removed [ 126.670727][ T7198] team0 (unregistering): Port device team_slave_1 removed [ 126.737735][ T7200] tipc: Started in network mode [ 126.743099][ T7200] tipc: Node identity f8ffffffffffffff590c, cluster identity 4711 [ 126.849220][ T7211] tipc: Enabling of bearer rejected, failed to enable media [ 127.149047][ T7226] netlink: 'syz.3.315': attribute type 1 has an invalid length. [ 127.278721][ T7226] 8021q: adding VLAN 0 to HW filter on device bond2 [ 127.307221][ T7231] bond2: (slave gretap1): making interface the new active one [ 127.317642][ T7231] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 127.835363][ T7245] netlink: 'syz.3.320': attribute type 11 has an invalid length. [ 127.998847][ T7249] netlink: 'syz.4.323': attribute type 11 has an invalid length. [ 128.528654][ T7275] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 128.629541][ T7274] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 128.690607][ T7274] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 128.720608][ C1] vxcan1: j1939_tp_rxtimer: 0xffff888142b9e800: rx timeout, send abort [ 128.730589][ C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff888142b9e800: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 128.904655][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807743a000: rx timeout, send abort [ 128.997218][ T49] veth0_to_bond: left promiscuous mode [ 129.323294][ T7295] __nla_validate_parse: 7 callbacks suppressed [ 129.323315][ T7295] netlink: 6 bytes leftover after parsing attributes in process `syz.3.336'. [ 129.386030][ T7295] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 129.404805][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807743a400: rx timeout, send abort [ 129.413461][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807743a000: abort rx timeout. Force session deactivation [ 129.487722][ T65] nci: nci_rsp_packet: unknown rsp opcode 0x221 [ 129.520885][ T7309] netlink: 348 bytes leftover after parsing attributes in process `syz.4.340'. [ 129.560940][ T7311] netlink: 348 bytes leftover after parsing attributes in process `syz.4.340'. [ 129.913379][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807743a400: abort rx timeout. Force session deactivation [ 130.170566][ T7340] netlink: 28 bytes leftover after parsing attributes in process `syz.2.346'. [ 130.214515][ T7340] netlink: 'syz.2.346': attribute type 7 has an invalid length. [ 130.222212][ T7340] netlink: 'syz.2.346': attribute type 8 has an invalid length. [ 130.273581][ T7340] netlink: 4 bytes leftover after parsing attributes in process `syz.2.346'. [ 130.320690][ T7338] 8021q: adding VLAN 0 to HW filter on device bond0 [ 130.329014][ T7338] bond0: (slave gre0): The slave device specified does not support setting the MAC address [ 130.347866][ T7343] netlink: 'syz.2.346': attribute type 1 has an invalid length. [ 130.348900][ T7338] bond0: (slave gre0): Error -95 calling set_mac_address [ 130.392673][ T7343] netlink: 'syz.2.346': attribute type 1 has an invalid length. [ 130.401337][ T7348] netlink: 'syz.4.348': attribute type 16 has an invalid length. [ 130.432100][ T7348] netlink: 'syz.4.348': attribute type 17 has an invalid length. [ 130.480665][ T7340] gretap0: entered promiscuous mode [ 130.524353][ T7358] netlink: 'syz.4.348': attribute type 17 has an invalid length. [ 130.545173][ T7358] netlink: 4 bytes leftover after parsing attributes in process `syz.4.348'. [ 130.584539][ T7340] batadv_slave_1: entered promiscuous mode [ 130.591405][ T7340] erspan0: entered promiscuous mode [ 130.598162][ T7358] netlink: 28 bytes leftover after parsing attributes in process `syz.4.348'. [ 130.685576][ T7348] gre0: left promiscuous mode [ 130.920416][ T7348] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 130.955307][ T7355] netlink: 80 bytes leftover after parsing attributes in process `syz.3.347'. [ 131.012650][ T7369] netlink: 40 bytes leftover after parsing attributes in process `syz.1.351'. [ 131.069273][ T7358] erspan0: entered promiscuous mode [ 131.085228][ T7358] erspan0: left promiscuous mode [ 131.177783][ T7374] macvlan1: entered promiscuous mode [ 131.188513][ T7374] macvlan1: entered allmulticast mode [ 131.198048][ T7374] veth1_to_bond: entered promiscuous mode [ 131.204524][ T7374] veth1_to_bond: entered allmulticast mode [ 131.250045][ T7374] team0: Port device macvlan1 added [ 131.271119][ T7376] netlink: 28 bytes leftover after parsing attributes in process `syz.3.353'. [ 132.098630][ T7415] dvmrp1: entered allmulticast mode [ 132.099163][ T7422] netlink: 'syz.0.362': attribute type 83 has an invalid length. [ 132.211180][ T7429] netlink: 'syz.3.364': attribute type 10 has an invalid length. [ 132.267131][ T7430] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 132.766578][ T7453] netlink: 'syz.4.371': attribute type 1 has an invalid length. [ 132.930910][ T7453] 8021q: adding VLAN 0 to HW filter on device bond1 [ 132.952066][ T7451] team_slave_0: mtu greater than device maximum [ 133.062527][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.070208][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.167557][ T7478] openvswitch: netlink: Flow actions attr not present in new flow. [ 134.923132][ T7546] __nla_validate_parse: 5 callbacks suppressed [ 134.923154][ T7546] netlink: 20 bytes leftover after parsing attributes in process `syz.2.385'. [ 135.081620][ T7554] netlink: 5 bytes leftover after parsing attributes in process `syz.0.383'. [ 135.274941][ T7557] netlink: 13 bytes leftover after parsing attributes in process `syz.1.388'. [ 135.349431][ T7554] 0{X功: renamed from gretap0 (while UP) [ 135.388189][ T7554] 0{X功: entered allmulticast mode [ 135.429620][ T7554] A link change request failed with some changes committed already. Interface 30{X功 may have been left with an inconsistent configuration, please check. [ 135.874114][ T7582] netlink: 12 bytes leftover after parsing attributes in process `syz.1.393'. [ 136.378758][ T7594] netlink: 'syz.4.399': attribute type 10 has an invalid length. [ 136.477714][ T7594] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.529900][ T7594] bridge_slave_1: left allmulticast mode [ 136.572963][ T7594] bridge_slave_1: left promiscuous mode [ 136.617317][ T7594] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.698915][ T7594] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 136.927133][ T7603] netlink: 324 bytes leftover after parsing attributes in process `syz.2.401'. [ 137.216043][ T7615] netlink: 'syz.2.406': attribute type 2 has an invalid length. [ 137.914965][ T7608] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 138.422413][ T7639] netlink: 'syz.2.409': attribute type 6 has an invalid length. [ 138.510330][ C1] vcan0: j1939_tp_rxtimer: 0xffff888058574800: rx timeout, send abort [ 139.020730][ C1] vcan0: j1939_tp_rxtimer: 0xffff888058574800: abort rx timeout. Force session deactivation [ 140.513542][ T7674] netlink: 4 bytes leftover after parsing attributes in process `syz.3.417'. [ 140.659264][ T7657] bond2: (slave macvlan0): unknown ethtool speed (60000) for port 1 (set it to 0) [ 140.668975][ T7657] bond2: (slave macvlan0): speed changed to 0 on port 1 [ 140.673443][ T7679] netlink: 8 bytes leftover after parsing attributes in process `syz.0.418'. [ 141.101525][ T7674] hsr_slave_1 (unregistering): left promiscuous mode [ 141.556420][ T7711] netlink: 40 bytes leftover after parsing attributes in process `syz.4.427'. [ 142.232380][ T7743] netlink: 'syz.1.436': attribute type 17 has an invalid length. [ 142.279102][ T7743] netlink: 4 bytes leftover after parsing attributes in process `syz.1.436'. [ 142.296876][ T7743] netlink: 28 bytes leftover after parsing attributes in process `syz.1.436'. [ 142.342052][ T7748] netlink: 40 bytes leftover after parsing attributes in process `syz.1.436'. [ 142.395714][ T7748] netlink: 'syz.1.436': attribute type 10 has an invalid length. [ 143.423559][ T7790] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.447'. [ 143.797151][ T7814] netlink: 132 bytes leftover after parsing attributes in process `syz.4.454'. [ 143.975702][ T7814] mac80211_hwsim hwsim11 : renamed from wlan1 (while UP) [ 144.851754][ T7867] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 144.866517][ T7866] netlink: 24 bytes leftover after parsing attributes in process `syz.4.466'. [ 144.893576][ T7866] netlink: 8 bytes leftover after parsing attributes in process `syz.4.466'. [ 144.912272][ T7866] netlink: 'syz.4.466': attribute type 12 has an invalid length. [ 144.942725][ T7866] netlink: 'syz.4.466': attribute type 11 has an invalid length. [ 145.413829][ T7845] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 146.267930][ T30] audit: type=1107 audit(1756606853.199:2): pid=7895 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='賸5烑寱%柰U鼳伱速犽0仚l卼枯/ 6驃▕鐩' [ 146.930483][ T7922] macvlan0: entered promiscuous mode [ 146.949727][ T7922] macvlan0: entered allmulticast mode [ 147.443828][ T7948] vcan0: tx drop: invalid sa for name 0x0000000000000003 [ 147.502582][ T7954] ieee802154 phy0 wpan0: encryption failed: -22 [ 147.539951][ T7954] netlink: 'syz.0.487': attribute type 10 has an invalid length. [ 147.558436][ T7955] bridge0: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 147.587095][ T7954] __nla_validate_parse: 2 callbacks suppressed [ 147.587114][ T7954] netlink: 40 bytes leftover after parsing attributes in process `syz.0.487'. [ 147.680089][ T7954] team0: Port device geneve0 added [ 147.926377][ T7962] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 148.170981][ T7969] netlink: 2 bytes leftover after parsing attributes in process `syz.3.491'. [ 148.366786][ T7973] tipc: Enabled bearer , priority 0 [ 148.404236][ T7973] syzkaller0: entered promiscuous mode [ 148.463025][ T7973] syzkaller0: entered allmulticast mode [ 148.954573][ T7973] tipc: Resetting bearer [ 148.991502][ T7994] block nbd0: not configured, cannot reconfigure [ 149.000293][ T7972] tipc: Resetting bearer [ 149.100061][ T8001] sctp: [Deprecated]: syz.1.499 (pid 8001) Use of int in max_burst socket option. [ 149.100061][ T8001] Use struct sctp_assoc_value instead [ 149.242315][ T7972] tipc: Disabling bearer [ 149.843132][ T8022] bond0: entered allmulticast mode [ 149.848561][ T8022] bond_slave_0: entered allmulticast mode [ 149.912921][ T8022] bond_slave_1: entered allmulticast mode [ 150.301149][ T8042] netlink: 52 bytes leftover after parsing attributes in process `syz.3.507'. [ 150.308747][ T8043] netlink: 8 bytes leftover after parsing attributes in process `syz.0.508'. [ 150.797058][ T8061] netlink: 52 bytes leftover after parsing attributes in process `syz.4.511'. [ 151.382032][ T8083] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 151.725732][ T8096] sctp: [Deprecated]: syz.0.520 (pid 8096) Use of int in max_burst socket option deprecated. [ 151.725732][ T8096] Use struct sctp_assoc_value instead [ 152.014535][ T8106] netlink: 'syz.3.525': attribute type 13 has an invalid length. [ 152.059381][ T8111] netlink: 4 bytes leftover after parsing attributes in process `syz.4.524'. [ 152.074733][ T8106] netlink: 4 bytes leftover after parsing attributes in process `syz.3.525'. [ 152.125506][ T8106] netlink: 'syz.3.525': attribute type 13 has an invalid length. [ 152.138188][ T78] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 152.155567][ T8106] netlink: 4 bytes leftover after parsing attributes in process `syz.3.525'. [ 152.173384][ T8117] netlink: 12 bytes leftover after parsing attributes in process `syz.4.524'. [ 152.192934][ T78] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 152.212200][ T78] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 152.228203][ T8105] netlink: 8 bytes leftover after parsing attributes in process `syz.1.523'. [ 152.366660][ T78] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 152.779250][ T8131] __nla_validate_parse: 2 callbacks suppressed [ 152.779271][ T8131] netlink: 60 bytes leftover after parsing attributes in process `syz.4.527'. [ 152.828131][ T8131] unsupported nlmsg_type 40 [ 153.020831][ T8138] netlink: 8 bytes leftover after parsing attributes in process `syz.0.529'. [ 153.624902][ T8164] IPVS: set_ctl: invalid protocol: 51 172.20.20.35:20005 [ 153.981829][ T8174] tipc: Enabled bearer , priority 0 [ 154.002185][ T8174] syzkaller0: entered promiscuous mode [ 154.024466][ T8174] syzkaller0: entered allmulticast mode [ 154.061839][ T8174] tipc: Resetting bearer [ 154.080669][ T8173] tipc: Resetting bearer [ 154.096257][ T13] wlan0: Trigger new scan to find an IBSS to join [ 154.144215][ T8173] tipc: Disabling bearer [ 154.250450][ T8179] bond3: entered promiscuous mode [ 154.292125][ T8179] bond3: entered allmulticast mode [ 154.340175][ T8179] 8021q: adding VLAN 0 to HW filter on device bond3 [ 154.621411][ T8179] bond3 (unregistering): Released all slaves [ 155.176870][ T8211] syzkaller1: entered promiscuous mode [ 155.200268][ T8211] syzkaller1: entered allmulticast mode [ 155.238327][ T7857] Set syz1 is full, maxelem 65536 reached [ 155.372723][ T51] Bluetooth: hci4: command 0x0405 tx timeout [ 155.577336][ T8226] netlink: 48 bytes leftover after parsing attributes in process `syz.2.546'. [ 155.794310][ T30] audit: type=1107 audit(1756606862.719:3): pid=8233 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='6窳矫辤軀&緁wU}{0%<3O搪弋ㄛE銧/L婾\U瓂殑{〕T汅\\欉箳%: [ 155.794310][ T30] g(詏雕]hQ^-G\3RU9沧溬z>-绕c廸A確繼屛趮/犴M鹍劐mH罕 F嬑t檊瑊K龟%纺+畁B閪蝇R5晔bR?1we(y.堋-漌 4B6xX' [ 156.252842][ T8276] netlink: 80 bytes leftover after parsing attributes in process `syz.4.559'. [ 156.280963][ T8276] netlink: 24 bytes leftover after parsing attributes in process `syz.4.559'. [ 156.584770][ T8293] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.564'. [ 156.627762][ T8293] netlink: zone id is out of range [ 156.660678][ T8293] netlink: zone id is out of range [ 156.664363][ T8296] netlink: 'syz.1.565': attribute type 2 has an invalid length. [ 156.683976][ T8293] netlink: zone id is out of range [ 156.699813][ T8298] netlink: 8 bytes leftover after parsing attributes in process `syz.1.565'. [ 156.707575][ T8293] netlink: zone id is out of range [ 156.719714][ T8300] netlink: 12 bytes leftover after parsing attributes in process `syz.4.566'. [ 156.742263][ T8293] netlink: zone id is out of range [ 156.784981][ T8293] netlink: zone id is out of range [ 156.811267][ T8293] netlink: get zone limit has 8 unknown bytes [ 157.094249][ T8324] netlink: 12 bytes leftover after parsing attributes in process `syz.4.572'. [ 157.123002][ T8324] netlink: 12 bytes leftover after parsing attributes in process `syz.4.572'. [ 157.140538][ T6121] wlan0: Trigger new scan to find an IBSS to join [ 157.166825][ T8324] 8021q: VLANs not supported on wg1 [ 157.526096][ T8337] sctp: [Deprecated]: syz.2.577 (pid 8337) Use of int in max_burst socket option. [ 157.526096][ T8337] Use struct sctp_assoc_value instead [ 157.593016][ T8334] can: request_module (can-proto-0) failed. [ 157.855253][ T8360] IPVS: set_ctl: invalid protocol: 108 255.255.255.255:20000 [ 157.948821][ T8362] netlink: 'syz.1.584': attribute type 2 has an invalid length. [ 158.293011][ T8376] __nla_validate_parse: 1 callbacks suppressed [ 158.293030][ T8376] netlink: 8 bytes leftover after parsing attributes in process `syz.2.587'. [ 159.091497][ T8409] netlink: 8 bytes leftover after parsing attributes in process `syz.3.597'. [ 159.121515][ T8409] netlink: 'syz.3.597': attribute type 11 has an invalid length. [ 159.288493][ T8418] netlink: 12 bytes leftover after parsing attributes in process `syz.0.600'. [ 159.318929][ T8416] tipc: Enabled bearer , priority 0 [ 159.419806][ T8416] syzkaller0: entered promiscuous mode [ 159.455887][ T8416] syzkaller0: entered allmulticast mode [ 159.538016][ T8418] netlink: 4 bytes leftover after parsing attributes in process `syz.0.600'. [ 159.677548][ T8416] tipc: Resetting bearer [ 159.704777][ T8416] netlink: 28 bytes leftover after parsing attributes in process `syz.1.599'. [ 159.746221][ T8415] tipc: Resetting bearer [ 159.845100][ T8415] tipc: Disabling bearer [ 160.079557][ T8453] netlink: 48 bytes leftover after parsing attributes in process `syz.4.607'. [ 160.105288][ T78] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 160.138287][ T8456] netlink: 4 bytes leftover after parsing attributes in process `syz.4.607'. [ 160.187786][ T8456] bridge_slave_0: left allmulticast mode [ 160.201066][ T8456] bridge_slave_0: left promiscuous mode [ 160.215520][ T8456] bridge0: port 1(bridge_slave_0) entered disabled state [ 160.518596][ T8470] bridge1: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 160.824718][ T8493] netlink: 'syz.1.618': attribute type 1 has an invalid length. [ 160.838904][ T8492] netlink: 16 bytes leftover after parsing attributes in process `syz.2.619'. [ 160.860002][ T8493] netlink: 'syz.1.618': attribute type 1 has an invalid length. [ 160.939209][ T8496] netlink: 36 bytes leftover after parsing attributes in process `syz.3.620'. [ 161.258192][ T8511] macvlan3: entered allmulticast mode [ 161.299410][ T8511] bond0: (slave macvlan3): Error -98 calling set_mac_address [ 161.621426][ T8523] gre1: entered promiscuous mode [ 161.626906][ T8523] gre1: entered allmulticast mode [ 161.667491][ T8530] syzkaller0: entered promiscuous mode [ 161.676194][ T8530] syzkaller0: entered allmulticast mode [ 161.903334][ T8540] netlink: 'syz.1.634': attribute type 1 has an invalid length. [ 161.911067][ T8540] netlink: 212 bytes leftover after parsing attributes in process `syz.1.634'. [ 161.930331][ T8540] netlink: 'syz.1.634': attribute type 1 has an invalid length. [ 162.190296][ T8552] syzkaller0: entered promiscuous mode [ 162.209053][ T8552] syzkaller0: entered allmulticast mode [ 162.384034][ T8558] netdevsim netdevsim1: Direct firmware load for /. failed with error -2 [ 162.418796][ T8558] netdevsim netdevsim1: Falling back to sysfs fallback for: /. [ 162.431509][ T8564] netlink: zone id is out of range [ 162.447759][ T8564] netlink: zone id is out of range [ 162.463735][ T8564] netlink: zone id is out of range [ 162.473244][ T8564] netlink: zone id is out of range [ 162.488086][ T8564] netlink: zone id is out of range [ 162.532850][ T8564] netlink: zone id is out of range [ 162.554457][ T8564] netlink: zone id is out of range [ 162.569009][ T8564] netlink: zone id is out of range [ 162.576582][ T8564] netlink: zone id is out of range [ 162.581864][ T8564] netlink: zone id is out of range [ 164.302940][ T8588] sch_tbf: burst 0 is lower than device lo mtu (1550) ! [ 164.666787][ T8597] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.780763][ T51] Bluetooth: hci4: link tx timeout [ 164.786941][ T51] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 165.124184][ T8597] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.150520][ T8626] __nla_validate_parse: 6 callbacks suppressed [ 165.150541][ T8626] netlink: 40 bytes leftover after parsing attributes in process `syz.0.659'. [ 165.303954][ T8627] netlink: 28 bytes leftover after parsing attributes in process `syz.3.658'. [ 165.380084][ T8628] veth5: entered promiscuous mode [ 165.490988][ T8597] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.756635][ T8597] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.969336][ T8666] netlink: 44 bytes leftover after parsing attributes in process `syz.4.665'. [ 166.007620][ T8666] netlink: 43 bytes leftover after parsing attributes in process `syz.4.665'. [ 166.046738][ T8666] netlink: 'syz.4.665': attribute type 6 has an invalid length. [ 166.088093][ T8666] netlink: 'syz.4.665': attribute type 5 has an invalid length. [ 166.126301][ T8666] netlink: 43 bytes leftover after parsing attributes in process `syz.4.665'. [ 166.178181][ T49] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.366725][ T8683] netlink: 165 bytes leftover after parsing attributes in process `syz.0.671'. [ 166.386507][ T6121] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.427411][ T6128] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.501639][ T6122] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.812940][ T5882] Bluetooth: hci4: command 0x0405 tx timeout [ 166.897842][ T6128] nci: nci_rf_discover_ntf_packet: unsupported rf_tech_and_mode 0x7d [ 167.326581][ T8736] syzkaller0: entered promiscuous mode [ 167.332396][ T8736] syzkaller0: entered allmulticast mode [ 167.829002][ T8751] net_ratelimit: 218 callbacks suppressed [ 167.829023][ T8751] openvswitch: netlink: Message has 4 unknown bytes. [ 167.873632][ T8750] netlink: 12 bytes leftover after parsing attributes in process `syz.3.681'. [ 167.882779][ T8752] netlink: 4 bytes leftover after parsing attributes in process `syz.1.682'. [ 168.095754][ T8760] netlink: 146780 bytes leftover after parsing attributes in process `syz.3.686'. [ 168.270949][ T8768] netlink: 8 bytes leftover after parsing attributes in process `syz.0.688'. [ 168.367654][ T8772] netlink: 'syz.2.689': attribute type 12 has an invalid length. [ 168.382757][ T8772] netlink: 'syz.2.689': attribute type 29 has an invalid length. [ 168.443516][ T8772] netlink: 'syz.2.689': attribute type 2 has an invalid length. [ 168.475845][ T8772] netlink: 'syz.2.689': attribute type 1 has an invalid length. [ 168.763540][ T8798] netlink: 'syz.4.692': attribute type 1 has an invalid length. [ 169.838892][ T8846] netlink: 'syz.0.707': attribute type 1 has an invalid length. [ 170.693740][ T8875] __nla_validate_parse: 13 callbacks suppressed [ 170.693764][ T8875] netlink: 8 bytes leftover after parsing attributes in process `syz.0.714'. [ 170.725871][ T8875] netlink: 2 bytes leftover after parsing attributes in process `syz.0.714'. [ 170.805009][ T8878] netlink: 84 bytes leftover after parsing attributes in process `syz.4.716'. [ 170.831317][ T8847] bond0: (slave bond_slave_1): Releasing backup interface [ 170.920816][ T8847] team0: Port device macvlan1 removed [ 171.861916][ T8912] netlink: 40 bytes leftover after parsing attributes in process `syz.3.723'. [ 171.893838][ T8912] netlink: 40 bytes leftover after parsing attributes in process `syz.3.723'. [ 171.923771][ T8913] netlink: 40 bytes leftover after parsing attributes in process `syz.3.723'. [ 171.981474][ T8913] netlink: 40 bytes leftover after parsing attributes in process `syz.3.723'. [ 172.096244][ T8916] tipc: Enabled bearer , priority 0 [ 172.158097][ T8919] syzkaller0: entered promiscuous mode [ 172.178407][ T8919] syzkaller0: entered allmulticast mode [ 172.212831][ T8916] netlink: 'syz.0.726': attribute type 1 has an invalid length. [ 172.220533][ T8916] netlink: 244 bytes leftover after parsing attributes in process `syz.0.726'. [ 172.262981][ T8914] tipc: Resetting bearer [ 172.341531][ T8914] tipc: Disabling bearer [ 172.676298][ T8941] netlink: 'syz.2.733': attribute type 3 has an invalid length. [ 172.692752][ T8941] netlink: 248 bytes leftover after parsing attributes in process `syz.2.733'. [ 172.721074][ T10] IPVS: starting estimator thread 0... [ 172.842854][ T8948] IPVS: using max 26 ests per chain, 62400 per kthread [ 173.016851][ T8959] netlink: 4 bytes leftover after parsing attributes in process `syz.1.737'. [ 173.220722][ T8967] netlink: set zone limit has 8 unknown bytes [ 173.595811][ T8983] netlink: 'syz.2.745': attribute type 1 has an invalid length. [ 174.009567][ T8975] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 174.025260][ T8975] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 174.318669][ T8975] bridge1: left promiscuous mode [ 174.374913][ T8994] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 174.414533][ T78] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.454672][ T78] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.514714][ T78] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.551137][ T78] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.035313][ T9029] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.043981][ T9029] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.066193][ T9028] tipc: Can't bind to reserved service type 1 [ 175.561060][ T9053] netlink: 'syz.1.763': attribute type 2 has an invalid length. [ 175.575794][ T9054] : renamed from veth0_vlan (while UP) [ 175.809080][ T9068] delete_channel: no stack [ 175.821303][ T9067] vlan2: entered promiscuous mode [ 175.845289][ T9067] pim6reg1: entered promiscuous mode [ 175.850831][ T9067] pim6reg1: entered allmulticast mode [ 176.296343][ T9093] __nla_validate_parse: 5 callbacks suppressed [ 176.296362][ T9093] netlink: 28 bytes leftover after parsing attributes in process `syz.0.779'. [ 176.549846][ T9101] bridge0: entered promiscuous mode [ 176.580770][ T9101] macsec1: entered promiscuous mode [ 176.619892][ T9101] bridge0: port 3(macsec1) entered blocking state [ 176.645175][ T9101] bridge0: port 3(macsec1) entered disabled state [ 176.669756][ T9101] macsec1: entered allmulticast mode [ 176.710160][ T9101] bridge0: entered allmulticast mode [ 176.764564][ T9101] macsec1: left allmulticast mode [ 176.769754][ T9101] bridge0: left allmulticast mode [ 176.790356][ T9101] bridge0: left promiscuous mode [ 176.840879][ T9118] lo: entered promiscuous mode [ 176.848936][ T9118] tunl0: entered promiscuous mode [ 176.854859][ T9118] gre0: entered promiscuous mode [ 176.860857][ T9118] gretap0: entered promiscuous mode [ 176.866468][ T9118] erspan0: entered promiscuous mode [ 176.872030][ T9118] ip_vti0: entered promiscuous mode [ 176.877640][ T9118] ip6_vti0: entered promiscuous mode [ 176.883450][ T9118] sit0: entered promiscuous mode [ 176.888610][ T9118] ip6tnl0: entered promiscuous mode [ 176.913105][ T9118] ip6gre0: entered promiscuous mode [ 176.942889][ T9118] syz_tun: entered promiscuous mode [ 176.959491][ T9118] ip6gretap0: entered promiscuous mode [ 176.984854][ T9118] vcan0: entered promiscuous mode [ 176.990248][ T9118] bond0: entered promiscuous mode [ 176.995572][ T9118] bond_slave_0: entered promiscuous mode [ 177.002395][ T9118] bond_slave_1: entered promiscuous mode [ 177.008780][ T9118] mac80211_hwsim hwsim5 wlan1: entered promiscuous mode [ 177.017575][ T9118] team0: entered promiscuous mode [ 177.022806][ T9118] team_slave_0: entered promiscuous mode [ 177.028822][ T9118] team_slave_1: entered promiscuous mode [ 177.035161][ T9118] dummy0: entered promiscuous mode [ 177.041103][ T9118] nlmon0: entered promiscuous mode [ 177.049066][ T9118] batadv0: entered promiscuous mode [ 177.056745][ T9118] vxcan0: entered promiscuous mode [ 177.062250][ T9118] vxcan1: entered promiscuous mode [ 177.069371][ T9128] netlink: 20 bytes leftover after parsing attributes in process `syz.0.792'. [ 177.071615][ T9118] veth0: entered promiscuous mode [ 177.084304][ T9118] veth1: entered promiscuous mode [ 177.089555][ T9118] wg0: entered promiscuous mode [ 177.095133][ T9118] wg2: entered promiscuous mode [ 177.101571][ T9118] veth0_to_bridge: entered promiscuous mode [ 177.107915][ T9118] bridge_slave_0: entered promiscuous mode [ 177.114214][ T9118] veth1_to_bridge: entered promiscuous mode [ 177.120418][ T9118] bridge_slave_1: entered promiscuous mode [ 177.127208][ T9118] veth0_to_bond: entered promiscuous mode [ 177.136881][ T9118] bond0: (slave bond_slave_0): Releasing backup interface [ 177.147421][ T9118] veth1_to_bond: entered promiscuous mode [ 177.154830][ T9118] bond0: (slave bond_slave_1): Releasing backup interface [ 177.164969][ T9118] veth0_to_team: entered promiscuous mode [ 177.172956][ T9118] team0: Port device team_slave_0 removed [ 177.179024][ T9118] veth1_to_team: entered promiscuous mode [ 177.186922][ T9118] team0: Port device team_slave_1 removed [ 177.193681][ T9118] veth0_to_batadv: entered promiscuous mode [ 177.199999][ T9118] batadv_slave_0: entered promiscuous mode [ 177.207915][ T9118] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 177.216842][ T9118] veth1_to_batadv: entered promiscuous mode [ 177.223284][ T9118] batadv_slave_1: entered promiscuous mode [ 177.229241][ T9118] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 177.239044][ T9118] xfrm0: entered promiscuous mode [ 177.245206][ T9118] veth0_to_hsr: entered promiscuous mode [ 177.251381][ T9118] veth1_to_hsr: entered promiscuous mode [ 177.257854][ T9118] hsr0: entered promiscuous mode [ 177.263352][ T9118] veth1_virt_wifi: entered promiscuous mode [ 177.269426][ T9118] veth0_virt_wifi: entered promiscuous mode [ 177.275757][ T9118] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 177.283528][ T9118] vlan0: entered promiscuous mode [ 177.288835][ T9118] vlan1: entered promiscuous mode [ 177.294417][ T9118] macvlan0: entered promiscuous mode [ 177.299946][ T9118] macvlan1: entered promiscuous mode [ 177.307081][ T9118] ipvlan0: entered promiscuous mode [ 177.312893][ T9118] macvtap0: entered promiscuous mode [ 177.318402][ T9118] macsec0: entered promiscuous mode [ 177.323937][ T9118] geneve0: entered promiscuous mode [ 177.329333][ T9118] geneve1: entered promiscuous mode [ 177.334801][ T9118] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 177.348532][ T9118] bond0: (slave wlan1): Releasing backup interface [ 177.358041][ T9118] sit1: entered promiscuous mode [ 177.363641][ T9118] ip6gre1: entered promiscuous mode [ 177.369089][ T9118] bridge1: entered promiscuous mode [ 177.374555][ T9118] bridge1: left allmulticast mode [ 177.379859][ T9118] macvlan2: entered promiscuous mode [ 177.385621][ T9118] macvlan2: left allmulticast mode [ 177.391122][ T9118] sit2: entered promiscuous mode [ 177.396759][ T9118] syztnl1: entered promiscuous mode [ 177.402264][ T9118] veth2: entered promiscuous mode [ 177.409265][ T9118] veth3: entered promiscuous mode [ 177.414696][ T9118] bridge0: entered promiscuous mode [ 177.420158][ T9118] bond0.1: entered promiscuous mode [ 177.425797][ T9118] ip6tnl1: entered promiscuous mode [ 177.431309][ T9118] netdevsim netdevsim1 eth0: entered promiscuous mode [ 177.438478][ T9118] netdevsim netdevsim1 eth1: entered promiscuous mode [ 177.445620][ T9118] netdevsim netdevsim1 eth2: entered promiscuous mode [ 177.453300][ T9118] netdevsim netdevsim1 eth3: entered promiscuous mode [ 177.460232][ T9118] bridge2: entered promiscuous mode [ 177.466318][ T9118] sit3: entered promiscuous mode [ 177.593696][ T981] IPVS: starting estimator thread 0... [ 177.684700][ T9132] IPVS: using max 26 ests per chain, 62400 per kthread [ 177.837400][ T9145] openvswitch: netlink: Key 6 has unexpected len 4 expected 2 [ 177.868167][ T9145] netlink: 12 bytes leftover after parsing attributes in process `syz.2.798'. [ 178.373957][ T9179] IPv6: NLM_F_REPLACE set, but no existing node found! [ 178.416616][ T9176] netlink: 16 bytes leftover after parsing attributes in process `syz.3.805'. [ 178.485216][ T9184] netlink: 12 bytes leftover after parsing attributes in process `syz.2.807'. [ 178.597408][ T9189] netlink: 8 bytes leftover after parsing attributes in process `syz.3.809'. [ 178.638929][ T9189] netlink: 12 bytes leftover after parsing attributes in process `syz.3.809'. [ 178.690888][ T9189] netlink: 28 bytes leftover after parsing attributes in process `syz.3.809'. [ 178.729574][ T9189] netlink: 28 bytes leftover after parsing attributes in process `syz.3.809'. [ 178.757428][ T9195] netlink: 4 bytes leftover after parsing attributes in process `syz.2.812'. [ 178.775757][ T9196] veth5: entered allmulticast mode [ 178.872239][ T9192] bridge2: port 1(veth9) entered blocking state [ 178.890050][ T9192] bridge2: port 1(veth9) entered disabled state [ 178.903857][ T9192] veth9: entered allmulticast mode [ 178.940487][ T9192] veth9: entered promiscuous mode [ 179.010748][ T9202] bond1: (slave veth0_to_bond): Releasing active interface [ 179.028889][ T9202] bridge2: port 2(veth0_to_bond) entered blocking state [ 179.044839][ T9202] bridge2: port 2(veth0_to_bond) entered disabled state [ 179.057164][ T9202] veth0_to_bond: entered allmulticast mode [ 179.070331][ T9202] veth0_to_bond: entered promiscuous mode [ 179.683694][ T9234] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 179.714828][ T9234] tipc: Enabled bearer , priority 0 [ 179.725710][ T9234] syzkaller0: entered promiscuous mode [ 179.731231][ T9234] syzkaller0: entered allmulticast mode [ 179.792425][ T9234] Illegal XDP return value 3628005990 on prog (id 251) dev syz_tun, expect packet loss! [ 179.819646][ T9234] tipc: Resetting bearer [ 179.856642][ T9233] tipc: Resetting bearer [ 179.937806][ T9233] tipc: Disabling bearer [ 180.656065][ T9276] 0{X功: renamed from gretap0 [ 180.706790][ T9276] 0{X功: entered allmulticast mode [ 180.716781][ T9276] A link change request failed with some changes committed already. Interface 30{X功 may have been left with an inconsistent configuration, please check. [ 180.830132][ T3451] nci: nci_rsp_packet: unknown rsp opcode 0x221 [ 180.894120][ T5882] Bluetooth: hci4: command 0x0405 tx timeout [ 180.921635][ T9298] openvswitch: netlink: Invalid MD length 0 for MD type 0 [ 180.932215][ T9298] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 181.143519][ T9316] syzkaller0: entered promiscuous mode [ 181.149109][ T9316] syzkaller0: entered allmulticast mode [ 181.710970][ T9325] __nla_validate_parse: 7 callbacks suppressed [ 181.710991][ T9325] netlink: 212296 bytes leftover after parsing attributes in process `syz.3.847'. [ 181.781100][ T9328] netlink: 20 bytes leftover after parsing attributes in process `syz.1.848'. [ 181.836043][ T9328] netlink: 'syz.1.848': attribute type 11 has an invalid length. [ 181.840286][ T9331] netlink: 'syz.0.850': attribute type 1 has an invalid length. [ 181.855944][ T9328] netlink: 8 bytes leftover after parsing attributes in process `syz.1.848'. [ 182.062207][ T9340] bridge0: port 3(syz_tun) entered blocking state [ 182.077249][ T9340] bridge0: port 3(syz_tun) entered disabled state [ 182.085386][ T9340] syz_tun: entered allmulticast mode [ 182.107265][ T9340] syz_tun: entered promiscuous mode [ 182.109331][ T9341] netlink: 16 bytes leftover after parsing attributes in process `syz.2.853'. [ 182.119333][ T9340] bridge0: port 3(syz_tun) entered blocking state [ 182.128995][ T9340] bridge0: port 3(syz_tun) entered forwarding state [ 182.431444][ T9360] netlink: 'syz.0.861': attribute type 10 has an invalid length. [ 182.470663][ T9360] veth0: entered promiscuous mode [ 182.519303][ T9357] veth0: left promiscuous mode [ 182.540797][ T9359] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 182.541195][ T78] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 182.560767][ T9359] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 183.045544][ T9385] veth11: entered promiscuous mode [ 183.050922][ T9385] veth11: entered allmulticast mode [ 183.204172][ T9397] netlink: 24 bytes leftover after parsing attributes in process `syz.0.870'. [ 183.221404][ T9392] netlink: 76 bytes leftover after parsing attributes in process `syz.3.869'. [ 183.409901][ T9400] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 183.602055][ T9411] syzkaller1: entered promiscuous mode [ 183.634223][ T9411] syzkaller1: entered allmulticast mode [ 183.677083][ T9409] netlink: 40 bytes leftover after parsing attributes in process `syz.0.875'. [ 183.988193][ T9431] netlink: 12 bytes leftover after parsing attributes in process `syz.3.879'. [ 184.103861][ T9435] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.880'. [ 184.129933][ T9435] netlink: zone id is out of range [ 184.137185][ T9435] netlink: get zone limit has 8 unknown bytes [ 184.150081][ T9435] netlink: 'syz.4.880': attribute type 1 has an invalid length. [ 184.169990][ T9435] netlink: 'syz.4.880': attribute type 2 has an invalid length. [ 184.419346][ T43] IPVS: starting estimator thread 0... [ 184.440561][ T9448] IPVS: sed: SCTP 172.20.20.187:0 - no destination available [ 184.470309][ T9451] netlink: 40 bytes leftover after parsing attributes in process `syz.4.886'. [ 184.535272][ T9450] IPVS: using max 27 ests per chain, 64800 per kthread [ 184.918589][ T9473] erspan0: entered allmulticast mode [ 185.137092][ T9488] syzkaller1: entered promiscuous mode [ 185.166919][ T9488] syzkaller1: entered allmulticast mode [ 185.638132][ T9513] netlink: 'syz.4.903': attribute type 8 has an invalid length. [ 185.753201][ T9518] openvswitch: netlink: Duplicate or invalid key (type 0). [ 185.778304][ T9518] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 186.389431][ T9555] geneve2: entered promiscuous mode [ 186.399133][ T9555] geneve2: entered allmulticast mode [ 186.436573][ T78] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 19999 - 0 [ 186.484993][ T13] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 19999 - 0 [ 186.498482][ T13] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 19999 - 0 [ 186.516445][ T13] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 19999 - 0 [ 186.570666][ T9569] lo: left promiscuous mode [ 186.583749][ T9569] tunl0: left promiscuous mode [ 186.590439][ T9569] gre0: left promiscuous mode [ 186.596922][ T9569] gretap0: left promiscuous mode [ 186.604058][ T9569] erspan0: left promiscuous mode [ 186.610777][ T9569] ip_vti0: left promiscuous mode [ 186.617779][ T9569] ip6_vti0: left promiscuous mode [ 186.625867][ T9569] sit0: left promiscuous mode [ 186.636443][ T9569] ip6tnl0: left promiscuous mode [ 186.652480][ T9569] ip6gre0: left promiscuous mode [ 186.715356][ T9569] syz_tun: left promiscuous mode [ 186.722025][ T9569] ip6gretap0: left promiscuous mode [ 186.732326][ T9569] vcan0: left promiscuous mode [ 186.768030][ T9569] 8021q: adding VLAN 0 to HW filter on device bond0 [ 186.815357][ T9569] team0: left promiscuous mode [ 186.871015][ T9569] 8021q: adding VLAN 0 to HW filter on device team0 [ 186.925635][ T9579] netlink: 'syz.0.918': attribute type 1 has an invalid length. [ 186.938006][ T9569] dummy0: left promiscuous mode [ 186.948129][ T9569] nlmon0: left promiscuous mode [ 186.959034][ T9569] batadv0: left promiscuous mode [ 186.967360][ T9569] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 186.981134][ T9569] vxcan0: left promiscuous mode [ 186.991624][ T9569] vxcan1: left promiscuous mode [ 187.003582][ T9569] veth0: left promiscuous mode [ 187.009953][ T9569] veth1: left promiscuous mode [ 187.023419][ T9569] wg0: left promiscuous mode [ 187.040332][ T9569] wg2: left promiscuous mode [ 187.047745][ T9569] veth0_to_bridge: left promiscuous mode [ 187.063343][ T9569] bridge_slave_0: left promiscuous mode [ 187.070929][ T9569] veth1_to_bridge: left promiscuous mode [ 187.079097][ T9569] bridge_slave_1: left promiscuous mode [ 187.085933][ T9569] veth0_to_bond: left promiscuous mode [ 187.094279][ T9569] bond_slave_0: left promiscuous mode [ 187.097796][ T9590] __nla_validate_parse: 5 callbacks suppressed [ 187.097812][ T9590] netlink: 203516 bytes leftover after parsing attributes in process `syz.3.920'. [ 187.100583][ T9569] veth1_to_bond: left promiscuous mode [ 187.106388][ T9590] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 187.118000][ T9569] bond_slave_1: left promiscuous mode [ 187.140139][ T9569] veth0_to_team: left promiscuous mode [ 187.148119][ T9590] openvswitch: netlink: Duplicate key (type 0). [ 187.155335][ T9591] netlink: 12 bytes leftover after parsing attributes in process `syz.3.920'. [ 187.159967][ T9569] team_slave_0: left promiscuous mode [ 187.171098][ T9569] veth1_to_team: left promiscuous mode [ 187.178466][ T9569] team_slave_1: left promiscuous mode [ 187.184789][ T9569] veth0_to_batadv: left promiscuous mode [ 187.191523][ T9569] batadv_slave_0: left promiscuous mode [ 187.198241][ T9569] veth1_to_batadv: left promiscuous mode [ 187.205296][ T9569] batadv_slave_1: left promiscuous mode [ 187.211791][ T9569] xfrm0: left promiscuous mode [ 187.218540][ T9569] veth0_to_hsr: left promiscuous mode [ 187.226228][ T9569] veth1_to_hsr: left promiscuous mode [ 187.233799][ T9569] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 187.246215][ T9569] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 187.256962][ T9569] hsr0: left promiscuous mode [ 187.265492][ T9569] veth1_virt_wifi: left promiscuous mode [ 187.272681][ T9569] veth0_virt_wifi: left promiscuous mode [ 187.280692][ T9569] net veth1_virt_wifi virt_wifi0: left promiscuous mode [ 187.291737][ T9592] netlink: 36 bytes leftover after parsing attributes in process `syz.3.920'. [ 187.299439][ T9569] veth1_vlan: left promiscuous mode [ 187.311950][ T9569] vlan0: left promiscuous mode [ 187.317989][ T9569] vlan1: left promiscuous mode [ 187.323911][ T9569] veth1_vlan: entered promiscuous mode [ 187.329758][ T9569] macvlan0: left promiscuous mode [ 187.336869][ T9569] macvlan1: left promiscuous mode [ 187.346076][ T9569] ipvlan0: left promiscuous mode [ 187.352421][ T9569] veth1_macvtap: left promiscuous mode [ 187.360364][ T9569] veth0_macvtap: left promiscuous mode [ 187.368399][ T9569] veth0_macvtap: entered promiscuous mode [ 187.374792][ T9569] macvtap0: left promiscuous mode [ 187.381564][ T9569] veth1_macvtap: entered promiscuous mode [ 187.388301][ T9569] macsec0: left promiscuous mode [ 187.395388][ T9569] geneve0: left promiscuous mode [ 187.402062][ T9569] geneve1: left promiscuous mode [ 187.409231][ T9569] mac80211_hwsim hwsim4 wlan0: left promiscuous mode [ 187.417141][ T9569] mac80211_hwsim hwsim5 wlan1: left promiscuous mode [ 187.428541][ T9569] sit1: left promiscuous mode [ 187.433860][ T9569] ip6gre1: left promiscuous mode [ 187.439805][ T9569] bridge1: left promiscuous mode [ 187.447155][ T9569] macvlan2: left promiscuous mode [ 187.453169][ T9569] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 187.460603][ T9569] sit2: left promiscuous mode [ 187.497259][ T9569] veth2: left promiscuous mode [ 187.503698][ T9569] veth3: left promiscuous mode [ 187.509369][ T9569] bridge0: left promiscuous mode [ 187.515572][ T9569] bond0.1: left promiscuous mode [ 187.520523][ T9569] bond0: left promiscuous mode [ 187.527023][ T9569] ip6tnl1: left promiscuous mode [ 187.533976][ T9569] netdevsim netdevsim1 eth0: left promiscuous mode [ 187.542483][ T9569] netdevsim netdevsim1 eth1: left promiscuous mode [ 187.551509][ T9569] netdevsim netdevsim1 eth2: left promiscuous mode [ 187.559757][ T9569] netdevsim netdevsim1 eth3: left promiscuous mode [ 187.568154][ T9569] bridge2: left promiscuous mode [ 187.574710][ T9569] sit3: left promiscuous mode [ 187.605092][ T9569] geneve2: left promiscuous mode [ 187.763932][ T9579] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 187.775331][ T49] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 187.834926][ T12] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 187.865684][ T12] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 187.924247][ T12] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 188.091911][ T9615] openvswitch: netlink: Actions may not be safe on all matching packets [ 188.237937][ T9621] netlink: 4 bytes leftover after parsing attributes in process `syz.3.929'. [ 188.350209][ T9627] netlink: 92 bytes leftover after parsing attributes in process `syz.1.931'. [ 188.391217][ T9629] netlink: 'syz.0.930': attribute type 83 has an invalid length. [ 188.665317][ T9643] netlink: 144 bytes leftover after parsing attributes in process `syz.1.936'. [ 188.714444][ T9652] veth1_macvtap: left promiscuous mode [ 188.873573][ T9656] ieee802154 phy0 wpan0: encryption failed: -22 [ 188.914823][ T9656] ieee802154 phy0 wpan0: encryption failed: -22 [ 188.938116][ T9659] tipc: Enabled bearer , priority 10 [ 189.243184][ T9689] netlink: 'syz.0.945': attribute type 33 has an invalid length. [ 189.259452][ T9689] netlink: 152 bytes leftover after parsing attributes in process `syz.0.945'. [ 189.263356][ T9686] netlink: 48 bytes leftover after parsing attributes in process `syz.4.946'. [ 189.642115][ T9701] team_slave_0: entered promiscuous mode [ 189.648050][ T9701] team_slave_1: entered promiscuous mode [ 189.657932][ T9701] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 189.668320][ T9701] team0: Device macvtap1 is already an upper device of the team interface [ 189.712304][ T9701] team_slave_0: left promiscuous mode [ 189.717935][ T9701] team_slave_1: left promiscuous mode [ 189.768302][ T9710] netlink: 184 bytes leftover after parsing attributes in process `syz.0.952'. [ 189.783521][ T9706] netlink: 'syz.2.951': attribute type 25 has an invalid length. [ 189.793006][ T9710] xt_socket: unknown flags 0xd0 [ 190.008896][ T9715] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 190.031631][ T9716] netlink: 12 bytes leftover after parsing attributes in process `syz.4.954'. [ 190.055376][ T43] tipc: Node number set to 1577844736 [ 190.108391][ T9719] veth0: entered promiscuous mode [ 190.313554][ T9727] bond2 (unregistering): Released all slaves [ 190.574390][ T9736] bond0: entered promiscuous mode [ 190.590135][ T9736] bond_slave_0: entered promiscuous mode [ 190.614324][ T9736] bond_slave_1: entered promiscuous mode [ 190.692373][ T9736] bond0: left promiscuous mode [ 190.707222][ T9736] bond_slave_0: left promiscuous mode [ 190.725685][ T9736] bond_slave_1: left promiscuous mode [ 190.752443][ T9748] netlink: 'syz.1.965': attribute type 11 has an invalid length. [ 190.805278][ T9749] bridge_slave_0: invalid flags given to default FDB implementation [ 190.896451][ T9754] netlink: 'syz.4.966': attribute type 4 has an invalid length. [ 191.009836][ T9756] veth0: entered promiscuous mode [ 191.091066][ T9756] veth0: left promiscuous mode [ 191.248839][ T9765] team0: Cannot enslave team device to itself [ 191.289657][ T9774] ip_tunnel: non-ECT from 2.0.0.0 with TOS=0x3 [ 191.764646][ T9804] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 192.508115][ T9829] __nla_validate_parse: 14 callbacks suppressed [ 192.508138][ T9829] netlink: 4 bytes leftover after parsing attributes in process `syz.2.981'. [ 192.734571][ T9835] netlink: 'syz.1.984': attribute type 32 has an invalid length. [ 192.874475][ T9841] openvswitch: netlink: nsh attribute has 2 unknown bytes. [ 192.910188][ T9839] netlink: 4 bytes leftover after parsing attributes in process `syz.4.985'. [ 193.258935][ T9853] tipc: Started in network mode [ 193.268606][ T9853] tipc: Node identity fffff001, cluster identity 4711 [ 193.294726][ T9853] tipc: Node number set to 4294963201 [ 193.373834][ T9867] netlink: 24 bytes leftover after parsing attributes in process `syz.0.992'. [ 193.639405][ T9876] netlink: 8 bytes leftover after parsing attributes in process `syz.2.995'. [ 194.061461][ T9899] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1002'. [ 194.086923][ T9901] netlink: 'syz.4.1004': attribute type 22 has an invalid length. [ 194.117420][ T9903] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1003'. [ 194.138062][ T9901] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1004'. [ 194.224472][ T9903] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1003'. [ 194.280253][ T3451] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 194.317396][ T3451] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 194.358740][ T9903] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1003'. [ 194.376034][ T3451] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 194.409042][ T9908] netlink: 360 bytes leftover after parsing attributes in process `syz.4.1004'. [ 194.412472][ T3451] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 194.500298][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.857118][ T9930] netlink: 'syz.0.1010': attribute type 5 has an invalid length. [ 195.159247][ T9940] tipc: Enabled bearer , priority 0 [ 195.197575][ T9940] syzkaller0: entered promiscuous mode [ 195.218637][ T9940] syzkaller0: entered allmulticast mode [ 195.258545][ T9940] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 195.289985][ T9940] tipc: Resetting bearer [ 195.340578][ T9939] tipc: Resetting bearer [ 195.392625][ T9939] tipc: Disabling bearer [ 195.396553][ T9950] block nbd0: server does not support multiple connections per device. [ 195.416587][ T9950] block nbd0: shutting down sockets [ 197.500179][T10034] netlink: 'syz.0.1037': attribute type 1 has an invalid length. [ 198.039704][T10055] (unnamed net_device) (uninitialized): option min_links: invalid value (18446744073709551614) [ 198.058978][T10055] (unnamed net_device) (uninitialized): option min_links: allowed values 0 - 2147483647 [ 198.223782][T10064] __nla_validate_parse: 40 callbacks suppressed [ 198.223805][T10064] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1044'. [ 198.291486][T10068] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1046'. [ 199.208329][T10114] bond1: entered promiscuous mode [ 199.217539][T10114] bond1: entered allmulticast mode [ 199.238847][T10114] 8021q: adding VLAN 0 to HW filter on device bond1 [ 199.404097][T10114] bond1 (unregistering): Released all slaves [ 199.992158][T10137] netlink: 'syz.3.1062': attribute type 1 has an invalid length. [ 200.053546][T10137] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1062'. [ 201.115186][T10200] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.1078'. [ 201.152166][T10204] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 201.166137][T10200] openvswitch: netlink: IP tunnel dst address not specified [ 201.177807][T10200] netlink: 'syz.1.1078': attribute type 10 has an invalid length. [ 201.185799][T10200] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1078'. [ 201.286077][T10200] team0: Port device geneve0 added [ 201.374007][T10212] netlink: 'syz.0.1080': attribute type 8 has an invalid length. [ 201.474439][T10216] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1082'. [ 201.490955][T10215] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1083'. [ 201.576830][T10221] tipc: Enabling of bearer rejected, failed to enable media [ 201.802461][T10220] tipc: Enabled bearer , priority 0 [ 201.842467][T10225] syzkaller0: entered promiscuous mode [ 201.859687][T10225] syzkaller0: entered allmulticast mode [ 201.937679][T10219] tipc: Resetting bearer [ 201.989319][T10219] tipc: Disabling bearer [ 201.999959][T10242] netlink: 'syz.0.1091': attribute type 1 has an invalid length. [ 202.009567][T10242] netlink: 204 bytes leftover after parsing attributes in process `syz.0.1091'. [ 202.036990][T10243] netlink: 'syz.0.1091': attribute type 1 has an invalid length. [ 202.045681][T10243] netlink: 204 bytes leftover after parsing attributes in process `syz.0.1091'. [ 202.314094][T10258] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1092'. [ 202.370468][T10258] netlink: 'syz.2.1092': attribute type 1 has an invalid length. [ 202.383361][T10252] netlink: 'syz.0.1095': attribute type 20 has an invalid length. [ 202.424732][ T6128] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 202.424737][T10252] netlink: 'syz.0.1095': attribute type 20 has an invalid length. [ 202.424778][ T6128] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 202.500319][ T6128] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 202.515027][ T6128] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 202.691116][T10268] netlink: 'syz.0.1096': attribute type 11 has an invalid length. [ 202.846672][T10273] netlink: 'syz.0.1096': attribute type 29 has an invalid length. [ 202.948270][T10275] netlink: 'syz.4.1097': attribute type 1 has an invalid length. [ 203.070311][T10275] 8021q: adding VLAN 0 to HW filter on device bond2 [ 203.230061][T10280] bond2: (slave gretap2): making interface the new active one [ 203.270650][T10280] bond2: (slave gretap2): Enslaving as an active interface with an up link [ 203.341749][T10294] __nla_validate_parse: 4 callbacks suppressed [ 203.341770][T10294] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1101'. [ 203.532191][T10303] delete_channel: no stack [ 204.257471][T10339] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1106'. [ 204.467148][T10325] bond_slave_0: left promiscuous mode [ 204.475722][T10325] mac80211_hwsim hwsim7 wlan1: left promiscuous mode [ 204.486349][T10325] team_slave_0: left promiscuous mode [ 204.492185][T10325] team_slave_1: left promiscuous mode [ 204.622429][T10325] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 204.646435][T10325] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 204.866595][T10332] geneve2: entered promiscuous mode [ 204.872052][T10332] geneve2: entered allmulticast mode [ 204.896836][ T13] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.942748][ T13] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 204.991424][ T13] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.053245][ T13] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 205.085005][ T13] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.125247][ T13] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 205.154089][ T13] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.189891][ T13] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0 [ 205.257759][T10352] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1114'. [ 205.320226][T10361] bond3: entered promiscuous mode [ 205.326589][T10361] bond3: entered allmulticast mode [ 205.332240][T10361] 8021q: adding VLAN 0 to HW filter on device bond3 [ 205.351437][T10365] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 205.785350][T10391] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1121'. [ 205.867851][T10396] IPv6: sit2: Disabled Multicast RS [ 205.877816][T10396] sit2: entered allmulticast mode [ 206.092751][ T51] Bluetooth: hci4: command 0x0405 tx timeout [ 207.065758][T10427] netlink: 11 bytes leftover after parsing attributes in process `syz.3.1134'. [ 207.090197][T10428] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1133'. [ 207.100555][T10427] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0x5 [ 207.119233][T10428] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1133'. [ 207.861816][T10467] netlink: 192 bytes leftover after parsing attributes in process `syz.4.1146'. [ 207.945283][T10470] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.1146'. [ 207.990099][T10475] netlink: 'syz.3.1149': attribute type 4 has an invalid length. [ 208.322261][T10496] netlink: 'syz.2.1154': attribute type 1 has an invalid length. [ 208.424832][T10496] 8021q: adding VLAN 0 to HW filter on device bond3 [ 208.483630][T10509] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1154'. [ 208.552100][T10512] netlink: 'syz.3.1157': attribute type 1 has an invalid length. [ 208.561024][T10512] netlink: 'syz.3.1157': attribute type 2 has an invalid length. [ 208.709367][T10519] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1158'. [ 208.793436][T10519] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1158'. [ 209.273986][T10543] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1165'. [ 209.305527][T10549] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 209.328270][T10552] netlink: 'syz.4.1165': attribute type 4 has an invalid length. [ 209.614021][T10560] netlink: 'syz.3.1169': attribute type 2 has an invalid length. [ 210.002921][T10583] netlink: 'syz.4.1175': attribute type 1 has an invalid length. [ 210.012386][T10583] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1175'. [ 210.022918][T10584] netlink: 'syz.4.1175': attribute type 1 has an invalid length. [ 210.030692][T10584] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1175'. [ 210.189946][T10576] syzkaller0: entered allmulticast mode [ 210.224552][T10573] syzkaller0: entered promiscuous mode [ 210.250802][T10573] syzkaller0: entered allmulticast mode [ 210.715449][T10614] netlink: zone id is out of range [ 210.720888][T10614] netlink: zone id is out of range [ 210.726413][T10614] netlink: zone id is out of range [ 210.731931][T10614] netlink: zone id is out of range [ 210.737356][T10614] netlink: zone id is out of range [ 210.742784][T10614] netlink: zone id is out of range [ 210.748031][T10614] netlink: zone id is out of range [ 210.753644][T10614] netlink: zone id is out of range [ 211.937157][ T5880] Bluetooth: hci2: command 0x0406 tx timeout [ 211.943315][ T5868] Bluetooth: hci3: command 0x0406 tx timeout [ 211.946756][ T5870] Bluetooth: hci1: command 0x0406 tx timeout [ 211.950180][ T5880] Bluetooth: hci0: command 0x0406 tx timeout [ 212.403833][T10622] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1182'. [ 212.472267][T10630] netlink: 'syz.0.1186': attribute type 10 has an invalid length. [ 212.513629][T10632] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1185'. [ 212.527196][T10632] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1185'. [ 212.527541][T10634] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1183'. [ 212.562425][T10636] netlink: 'syz.0.1186': attribute type 10 has an invalid length. [ 212.585095][T10630] 8021q: adding VLAN 0 to HW filter on device team0 [ 212.595834][T10630] bond0: (slave team0): Enslaving as an active interface with an up link [ 212.652444][T10636] bridge0: port 3(syz_tun) entered disabled state [ 212.688782][T10636] syz_tun: left allmulticast mode [ 212.742672][T10636] syz_tun: left promiscuous mode [ 212.775632][T10636] bridge0: port 3(syz_tun) entered disabled state [ 212.853454][T10636] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 213.184434][T10667] syzkaller0: entered promiscuous mode [ 213.257794][T10667] syzkaller0: entered allmulticast mode [ 213.275202][T10666] tipc: Enabled bearer , priority 0 [ 213.318607][T10666] tipc: Enabling of bearer rejected, already enabled [ 213.443761][T10666] tipc: Resetting bearer [ 213.507097][T10666] tipc: Disabling bearer [ 213.805329][T10702] __nla_validate_parse: 5 callbacks suppressed [ 213.805349][T10702] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1202'. [ 213.817588][ T65] bridge0: port 2(bridge_slave_1) entered disabled state [ 213.955237][T10706] netlink: 256 bytes leftover after parsing attributes in process `syz.4.1205'. [ 213.974800][T10704] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.1203'. [ 214.028262][T10704] sctp: [Deprecated]: syz.2.1203 (pid 10704) Use of struct sctp_assoc_value in delayed_ack socket option. [ 214.028262][T10704] Use struct sctp_sack_info instead [ 214.286108][T10718] syzkaller0: refused to change device tx_queue_len [ 214.299517][T10726] netlink: 'syz.1.1209': attribute type 10 has an invalid length. [ 214.326111][T10724] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1207'. [ 214.868797][T10756] netlink: 'syz.0.1218': attribute type 1 has an invalid length. [ 215.282072][T10778] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1224'. [ 215.320659][T10778] netlink: 'syz.4.1224': attribute type 5 has an invalid length. [ 215.340304][T10778] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1224'. [ 215.431234][T10778] geneve2: entered promiscuous mode [ 215.474891][T10778] geneve2: entered allmulticast mode [ 215.541587][ T13] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 215.739878][ T13] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 215.770278][ T49] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 215.822311][ T49] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 217.865088][T10835] netlink: 'syz.4.1235': attribute type 8 has an invalid length. [ 218.529061][T10870] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1245'. [ 218.544925][T10874] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1246'. [ 218.554443][T10873] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1246'. [ 218.755827][T10883] xt_limit: Overflow, try lower: 604147548/4200216962 [ 219.006308][T10890] digital: digital_start_poll: Unknown protocol [ 219.248133][T10898] netlink: 'syz.3.1253': attribute type 25 has an invalid length. [ 219.298655][T10900] sctp: [Deprecated]: syz.4.1254 (pid 10900) Use of struct sctp_assoc_value in delayed_ack socket option. [ 219.298655][T10900] Use struct sctp_sack_info instead [ 219.568267][T10909] net_ratelimit: 46 callbacks suppressed [ 219.568289][T10909] openvswitch: netlink: IP tunnel TTL not specified. [ 220.234868][T10939] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1263'. [ 220.258804][T10942] sctp: [Deprecated]: syz.1.1265 (pid 10942) Use of int in max_burst socket option. [ 220.258804][T10942] Use struct sctp_assoc_value instead [ 220.285411][T10938] syzkaller0: entered promiscuous mode [ 220.291032][T10938] syzkaller0: entered allmulticast mode [ 220.824784][T10965] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1273'. [ 220.928968][T10975] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1275'. [ 221.124778][T10981] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1277'. [ 221.381937][T10996] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1280'. [ 221.400832][T10997] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode [ 221.412946][T10995] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1283'. [ 221.442398][T10997] netlink: 'syz.3.1282': attribute type 10 has an invalid length. [ 221.458111][T10997] mac80211_hwsim hwsim3 wlan1: left allmulticast mode [ 221.540801][T10997] bridge_slave_0: left allmulticast mode [ 221.603523][T10997] bridge_slave_0: left promiscuous mode [ 221.627397][T10997] bridge0: port 1(bridge_slave_0) entered disabled state [ 221.710589][T10997] bridge_slave_1: left allmulticast mode [ 221.725457][T10997] bridge_slave_1: left promiscuous mode [ 221.736102][T10997] bridge0: port 2(bridge_slave_1) entered disabled state [ 221.765294][T10997] bond0: (slave bond_slave_0): Releasing backup interface [ 221.777285][T10997] bond_slave_0: left allmulticast mode [ 221.795947][T10997] bond0: (slave bond_slave_1): Releasing backup interface [ 221.817139][T10997] bond_slave_1: left allmulticast mode [ 221.830734][T10997] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 221.873014][T10997] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 221.906358][T10997] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 221.914484][T10997] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 221.945183][T10997] bond2: (slave gretap1): Releasing active interface [ 222.082719][T11016] netlink: 'syz.2.1287': attribute type 29 has an invalid length. [ 222.226372][T11017] netlink: 'syz.2.1287': attribute type 29 has an invalid length. [ 222.265307][T11019] netlink: 'syz.2.1287': attribute type 29 has an invalid length. [ 222.313305][T11019] netlink: 'syz.2.1287': attribute type 29 has an invalid length. [ 222.334491][T11023] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1290'. [ 222.360864][T11023] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1290'. [ 222.413019][T11023] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1290'. [ 222.776720][T11045] tipc: Enabled bearer , priority 0 [ 222.791391][T11041] netlink: 84 bytes leftover after parsing attributes in process `syz.3.1293'. [ 222.877968][T11045] tipc: Disabling bearer [ 223.259226][T11064] tipc: Resetting bearer [ 224.461734][T11096] netlink: 'syz.2.1310': attribute type 2 has an invalid length. [ 224.480133][T11096] netlink: 'syz.2.1310': attribute type 1 has an invalid length. [ 224.545791][ T12] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 19999 - 0 [ 224.614271][ T12] netdevsim netdevsim1 eth0: unset [1, 1] type 2 family 0 port 6081 - 0 [ 224.635553][ T12] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 19999 - 0 [ 224.655911][ T12] netdevsim netdevsim1 eth1: unset [1, 1] type 2 family 0 port 6081 - 0 [ 224.684218][ T12] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 19999 - 0 [ 224.693672][ T12] netdevsim netdevsim1 eth2: unset [1, 1] type 2 family 0 port 6081 - 0 [ 224.731251][ T12] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 19999 - 0 [ 224.739260][T11104] netlink: 'syz.0.1312': attribute type 1 has an invalid length. [ 224.761673][ T12] netdevsim netdevsim1 eth3: unset [1, 1] type 2 family 0 port 6081 - 0 [ 224.968918][T11104] 8021q: adding VLAN 0 to HW filter on device bond3 [ 224.982334][T11106] syzkaller0: entered promiscuous mode [ 224.989174][T11106] syzkaller0: entered allmulticast mode [ 225.070256][T11119] tipc: Enabled bearer , priority 0 [ 225.128602][T11106] sch_tbf: peakrate 9 is lower than or equals to rate 18028662308277006993 ! [ 225.169857][T11106] tipc: Resetting bearer [ 225.248141][T11105] tipc: Resetting bearer [ 225.333839][T11105] tipc: Disabling bearer [ 225.865330][T11155] netlink: 'syz.2.1327': attribute type 3 has an invalid length. [ 225.989699][T11162] netlink: 'syz.3.1330': attribute type 10 has an invalid length. [ 226.128486][T11162] syz_tun: entered allmulticast mode [ 226.146036][T11162] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 226.202158][T11171] 8021q: VLANs not supported on lo [ 226.499838][T11186] __nla_validate_parse: 4 callbacks suppressed [ 226.499861][T11186] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1333'. [ 226.519737][T11174] syzkaller1: entered promiscuous mode [ 226.549651][T11174] syzkaller1: entered allmulticast mode [ 226.585224][T11191] netlink: 'syz.1.1334': attribute type 64 has an invalid length. [ 226.623797][T11191] netlink: 5 bytes leftover after parsing attributes in process `syz.1.1334'. [ 226.966875][T11197] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1335'. [ 226.967938][T11199] netlink: 277 bytes leftover after parsing attributes in process `syz.1.1336'. [ 227.126535][T11208] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1336'. [ 227.297162][T11202] "syz.3.1337" (11202) uses obsolete ecb(arc4) skcipher [ 227.417339][T11218] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 227.555243][T11207] infiniband syz2: set down [ 227.562065][T11207] infiniband syz2: added ipvlan1 [ 227.710591][T11222] netlink: 'syz.0.1341': attribute type 1 has an invalid length. [ 227.731052][T11207] RDS/IB: syz2: added [ 227.751939][T11207] smc: adding ib device syz2 with port count 1 [ 227.763048][T11207] smc: ib device syz2 port 1 has pnetid [ 227.810692][T11222] 8021q: adding VLAN 0 to HW filter on device bond4 [ 227.822180][T11222] netlink: 'syz.0.1341': attribute type 1 has an invalid length. [ 227.971612][T11223] bond4: (slave geneve3): making interface the new active one [ 227.987337][T11223] bond4: (slave geneve3): Enslaving as an active interface with an up link [ 228.004572][T11222] netlink: 'syz.0.1341': attribute type 1 has an invalid length. [ 228.042966][T11222] netlink: 'syz.0.1341': attribute type 1 has an invalid length. [ 228.069141][T11222] netlink: 'syz.0.1341': attribute type 1 has an invalid length. [ 228.153286][T11222] netlink: 'syz.0.1341': attribute type 1 has an invalid length. [ 228.207709][T11222] netlink: 'syz.0.1341': attribute type 1 has an invalid length. [ 228.272349][T11222] netlink: 'syz.0.1341': attribute type 1 has an invalid length. [ 228.304598][T11222] netlink: 'syz.0.1341': attribute type 1 has an invalid length. [ 228.516744][T11259] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.1355'. [ 228.824268][T11264] bond3: entered promiscuous mode [ 228.838040][T11264] bond3: entered allmulticast mode [ 228.845160][T11264] 8021q: adding VLAN 0 to HW filter on device bond3 [ 229.104275][T11264] bond3 (unregistering): Released all slaves [ 229.143401][T11277] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1359'. [ 229.589412][T11298] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1365'. [ 229.669857][T11298] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1365'. [ 229.708868][T11303] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1366'. [ 229.738053][T11304] pim6reg: entered allmulticast mode [ 230.816227][T11346] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 230.859449][T11349] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 231.214653][T11359] 8021q: adding VLAN 0 to HW filter on device bond4 [ 231.335817][T11359] bond4: (slave geneve3): making interface the new active one [ 231.377243][T11359] bond4: (slave geneve3): Enslaving as an active interface with an up link [ 231.408034][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.436329][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.460194][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.498394][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.651585][T11374] __nla_validate_parse: 2 callbacks suppressed [ 231.651606][T11374] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1385'. [ 232.109786][T11396] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1392'. [ 232.816853][T11419] Can't find ip_set type [ 233.109989][T11438] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1403'. [ 233.332451][T11447] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1408'. [ 233.645978][T11462] netlink: 5 bytes leftover after parsing attributes in process `syz.2.1414'. [ 233.685196][T11471] validate_nla: 25 callbacks suppressed [ 233.685217][T11471] netlink: 'syz.4.1415': attribute type 12 has an invalid length. [ 233.713550][T11462] 1{X功: renamed from 30{X功 [ 234.371563][T11462] A link change request failed with some changes committed already. Interface 31{X功 may have been left with an inconsistent configuration, please check. [ 234.466738][T11483] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1418'. [ 234.697838][T11497] IPv6: sit2: Disabled Multicast RS [ 234.734921][T11500] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1422'. [ 234.835013][T11505] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1423'. [ 234.882712][T11505] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1423'. [ 234.916838][T11509] netlink: 696 bytes leftover after parsing attributes in process `syz.2.1424'. [ 235.101155][T11514] bond0: (slave bridge_slave_1): Releasing backup interface [ 235.420945][T11534] netlink: 'syz.1.1432': attribute type 2 has an invalid length. [ 235.624412][T11534] IPVS: Scheduler module ip_vs_sip not found [ 236.381769][T11576] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 236.539618][T11585] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 236.668303][T11592] netlink: 'syz.0.1451': attribute type 1 has an invalid length. [ 236.688642][T11594] netlink: 'syz.4.1450': attribute type 21 has an invalid length. [ 236.712647][T11594] __nla_validate_parse: 9 callbacks suppressed [ 236.712668][T11594] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1450'. [ 236.840737][T11594] caif0: entered promiscuous mode [ 236.847731][T11594] caif0: entered allmulticast mode [ 236.858428][T11602] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1452'. [ 236.968635][T11607] syzkaller0: entered promiscuous mode [ 237.014539][T11607] syzkaller0: entered allmulticast mode [ 237.109567][T11616] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1455'. [ 237.143101][T11605] syz.1.1453: vmalloc error: size 69206016, failed to allocated page array size 135168, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 237.252640][T11605] CPU: 1 UID: 0 PID: 11605 Comm: syz.1.1453 Not tainted syzkaller #0 PREEMPT(full) [ 237.252677][T11605] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 237.252688][T11605] Call Trace: [ 237.252696][T11605] [ 237.252703][T11605] dump_stack_lvl+0x189/0x250 [ 237.252736][T11605] ? __pfx_dump_stack_lvl+0x10/0x10 [ 237.252756][T11605] ? __pfx__printk+0x10/0x10 [ 237.252780][T11605] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 237.252803][T11605] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 237.252827][T11605] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 237.252852][T11605] warn_alloc+0x214/0x310 [ 237.252888][T11605] ? __pfx_warn_alloc+0x10/0x10 [ 237.252928][T11605] ? __get_vm_area_node+0x28f/0x300 [ 237.252955][T11605] ? nf_tables_newset+0x132b/0x2530 [ 237.252982][T11605] __vmalloc_node_range_noprof+0x67e/0x12f0 [ 237.253041][T11605] ? alloc_pages_mpol+0x3cd/0x4a0 [ 237.253069][T11605] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 237.253102][T11605] ? rcu_is_watching+0x15/0xb0 [ 237.253123][T11605] ? nf_tables_newset+0x132b/0x2530 [ 237.253142][T11605] ? nf_tables_newset+0x132b/0x2530 [ 237.253159][T11605] __kvmalloc_node_noprof+0x3b8/0x5f0 [ 237.253186][T11605] ? nf_tables_newset+0x132b/0x2530 [ 237.253208][T11605] ? nft_table_lookup+0x211/0x230 [ 237.253227][T11605] ? nft_set_lookup+0x128/0x150 [ 237.253249][T11605] ? nft_hash_privsize+0x3f/0xf0 [ 237.253270][T11605] nf_tables_newset+0x132b/0x2530 [ 237.253308][T11605] ? __pfx_nf_tables_newset+0x10/0x10 [ 237.253357][T11605] ? __nla_parse+0x40/0x60 [ 237.253391][T11605] nfnetlink_rcv+0x112f/0x2520 [ 237.253455][T11605] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 237.253543][T11605] ? netlink_deliver_tap+0x2e/0x1b0 [ 237.253594][T11605] netlink_unicast+0x82f/0x9e0 [ 237.253631][T11605] ? __pfx_netlink_unicast+0x10/0x10 [ 237.253659][T11605] ? netlink_sendmsg+0x642/0xb30 [ 237.253681][T11605] ? skb_put+0x11b/0x210 [ 237.253705][T11605] netlink_sendmsg+0x805/0xb30 [ 237.253736][T11605] ? __pfx_netlink_sendmsg+0x10/0x10 [ 237.253757][T11605] ? aa_sock_msg_perm+0xf1/0x1d0 [ 237.253778][T11605] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 237.253798][T11605] ? __pfx_netlink_sendmsg+0x10/0x10 [ 237.253817][T11605] __sock_sendmsg+0x219/0x270 [ 237.253847][T11605] ____sys_sendmsg+0x505/0x830 [ 237.253876][T11605] ? __pfx_____sys_sendmsg+0x10/0x10 [ 237.253908][T11605] ? import_iovec+0x74/0xa0 [ 237.253935][T11605] ___sys_sendmsg+0x21f/0x2a0 [ 237.253958][T11605] ? __pfx____sys_sendmsg+0x10/0x10 [ 237.254025][T11605] ? __fget_files+0x2a/0x420 [ 237.254052][T11605] ? __fget_files+0x3a0/0x420 [ 237.254092][T11605] __x64_sys_sendmsg+0x19b/0x260 [ 237.254117][T11605] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 237.254150][T11605] ? rcu_is_watching+0x15/0xb0 [ 237.254176][T11605] ? do_syscall_64+0xbe/0x3b0 [ 237.254199][T11605] do_syscall_64+0xfa/0x3b0 [ 237.254213][T11605] ? lockdep_hardirqs_on+0x9c/0x150 [ 237.254239][T11605] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 237.254257][T11605] ? clear_bhb_loop+0x60/0xb0 [ 237.254281][T11605] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 237.254299][T11605] RIP: 0033:0x7f911318ebe9 [ 237.254317][T11605] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 237.254332][T11605] RSP: 002b:00007f9113f79038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 237.254353][T11605] RAX: ffffffffffffffda RBX: 00007f91133c5fa0 RCX: 00007f911318ebe9 [ 237.254366][T11605] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000004 [ 237.254378][T11605] RBP: 00007f9113211e19 R08: 0000000000000000 R09: 0000000000000000 [ 237.254389][T11605] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 237.254400][T11605] R13: 00007f91133c6038 R14: 00007f91133c5fa0 R15: 00007ffe2744ddb8 [ 237.254433][T11605] [ 237.254440][T11605] Mem-Info: [ 237.654272][T11605] active_anon:7060 inactive_anon:0 isolated_anon:0 [ 237.654272][T11605] active_file:2821 inactive_file:39901 isolated_file:0 [ 237.654272][T11605] unevictable:768 dirty:46 writeback:0 [ 237.654272][T11605] slab_reclaimable:11405 slab_unreclaimable:106139 [ 237.654272][T11605] mapped:29258 shmem:1376 pagetables:1309 [ 237.654272][T11605] sec_pagetables:0 bounce:0 [ 237.654272][T11605] kernel_misc_reclaimable:0 [ 237.654272][T11605] free:1317028 free_pcp:13796 free_cma:0 [ 237.683452][T11635] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1458'. [ 237.699947][T11605] Node 0 active_anon:28340kB inactive_anon:0kB active_file:11284kB inactive_file:159400kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:117032kB dirty:184kB writeback:0kB shmem:3968kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13332kB pagetables:5104kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 237.700008][T11605] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:132kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 237.700054][T11605] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 237.700112][T11605] lowmem_reserve[]: 0 2497 2499 2499 2499 [ 237.700159][T11605] Node 0 DMA32 free:1366548kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:28292kB inactive_anon:0kB active_file:11284kB inactive_file:157824kB unevictable:1536kB writepending:184kB present:3129332kB managed:2557452kB mlocked:0kB bounce:0kB free_pcp:38292kB local_pcp:21548kB free_cma:0kB [ 237.700215][T11605] lowmem_reserve[]: 0 0 1 1 1 [ 237.700260][T11605] Node 0 Normal free:12kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1576kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 237.700315][T11605] lowmem_reserve[]: 0 0 0 0 0 [ 237.700361][T11605] Node 1 Normal free:3886192kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:17024kB local_pcp:6912kB free_cma:0kB [ 237.700416][T11605] lowmem_reserve[]: 0 0 0 0 0 [ 237.700462][T11605] Node 0 DMA: 0*4kB [ 237.822840][T11635] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 237.841741][T11605] 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 238.032643][T11605] Node 0 DMA32: 581*4kB (UME) 270*8kB (M) 232*16kB (ME) 735*32kB (UME) 443*64kB (UM) 58*128kB (UM) 26*256kB (UM) 14*512kB (ME) 7*1024kB (UM) 4*2048kB (UME) 310*4096kB (UM) = 1366436kB [ 238.073094][T11605] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 238.108237][T11635] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 238.109809][T11605] Node 1 Normal: 200*4kB (UE) 52*8kB (UME) 35*16kB (UME) 108*32kB (UME) 32*64kB (UME) 10*128kB (UME) 3*256kB (UM) 4*512kB (UM) 2*1024kB (ME) 1*2048kB (E) 945*4096kB (M) = 3886192kB [ 238.175664][T11605] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 238.196940][T11628] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0) [ 238.229104][T11605] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 238.287132][T11605] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 238.315019][T11605] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 238.379068][T11605] 44094 total pagecache pages [ 238.407624][T11605] 0 pages in swap cache [ 238.411857][T11605] Free swap = 124996kB [ 238.426547][T11605] Total swap = 124996kB [ 238.431631][T11605] 2097051 pages RAM [ 238.437218][T11605] 0 pages HighMem/MovableOnly [ 238.445707][T11605] 425662 pages reserved [ 238.450163][T11605] 0 pages cma reserved [ 238.994012][T11666] vlan1: entered allmulticast mode [ 239.011067][T11666] veth0_vlan: entered allmulticast mode [ 239.080032][T11668] netlink: 'syz.4.1469': attribute type 9 has an invalid length. [ 239.104575][T11668] netlink: 'syz.4.1469': attribute type 9 has an invalid length. [ 239.310616][T11672] bond0: (slave syz_tun): Releasing backup interface [ 239.348066][T11672] syz_tun: left allmulticast mode [ 239.368399][T11672] bond0: left allmulticast mode [ 239.419763][T11679] netlink: 288 bytes leftover after parsing attributes in process `syz.1.1472'. [ 239.799667][T11690] netlink: 'syz.0.1475': attribute type 7 has an invalid length. [ 239.966516][T11695] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1478'. [ 240.011340][T11695] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1478'. [ 240.444400][T11714] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1484'. [ 240.454167][T11714] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1484'. [ 240.459589][T11719] pim6reg: entered allmulticast mode [ 240.477153][T11720] pim6reg: left allmulticast mode [ 240.568845][T11725] openvswitch: netlink: Key type 85 is out of range max 32 [ 240.590015][T11726] openvswitch: netlink: Key type 85 is out of range max 32 [ 240.748784][T11731] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1491'. [ 240.791305][T11735] bridge5: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 241.083630][T11743] netlink: 'syz.2.1493': attribute type 2 has an invalid length. [ 241.138521][T11749] vcan0: tx drop: invalid da for name 0x0000000000000002 [ 241.187003][T11749] vcan0: tx drop: invalid da for name 0x0000000000000002 [ 241.205295][T11749] vcan0: tx drop: invalid da for name 0x0000000000000002 [ 241.225110][T11749] vcan0: tx drop: invalid da for name 0x0000000000000002 [ 241.232424][T11749] vcan0: tx drop: invalid da for name 0x0000000000000002 [ 241.260999][T11749] vcan0: tx drop: invalid da for name 0x0000000000000002 [ 241.275579][T11749] vcan0: tx drop: invalid da for name 0x0000000000000002 [ 241.304083][T11749] vcan0: tx drop: invalid da for name 0x0000000000000002 [ 241.336899][T11749] vcan0: tx drop: invalid da for name 0x0000000000000002 [ 241.360726][T11749] vcan0: tx drop: invalid da for name 0x0000000000000002 [ 241.396151][T11749] vcan0: tx drop: invalid da for name 0x0000000000000002 [ 241.434646][T11749] vcan0: tx drop: invalid da for name 0x0000000000000002 [ 241.479186][T11749] vcan0: tx drop: invalid da for name 0x0000000000000002 [ 241.518513][T11749] vcan0: tx drop: invalid da for name 0x0000000000000002 [ 241.547529][T11749] vcan0: tx drop: invalid da for name 0x0000000000000002 [ 241.594475][T11749] vcan0: tx drop: invalid da for name 0x0000000000000002 [ 241.656837][T11749] vcan0: tx drop: invalid da for name 0x0000000000000002 [ 241.706361][T11749] vcan0: tx drop: invalid da for name 0x0000000000000002 [ 241.767144][T11749] vcan0: tx drop: invalid da for name 0x0000000000000002 [ 241.842920][T11749] vcan0: tx drop: invalid da for name 0x0000000000000002 [ 242.088434][T11798] 1{X功: left allmulticast mode [ 242.124613][T11798] erspan0: left allmulticast mode [ 242.182842][T11798] syz_tun: left promiscuous mode [ 242.220880][T11798] 8021q: adding VLAN 0 to HW filter on device bond0 [ 242.245369][T11798] 8021q: adding VLAN 0 to HW filter on device team0 [ 242.353110][T11798] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 242.422886][T11798] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 242.509074][T11798] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 242.539233][T11798] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 242.591690][T11798] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 242.621527][T11798] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 242.682011][T11798] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 242.731739][T11798] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 243.092261][T11836] __nla_validate_parse: 4 callbacks suppressed [ 243.092281][T11836] netlink: 9 bytes leftover after parsing attributes in process `syz.2.1512'. [ 243.149578][T11837] netlink: 5 bytes leftover after parsing attributes in process `syz.2.1512'. [ 243.201361][T11837] 0{X功: renamed from 31{X功 [ 243.311913][T11837] 0{X功: entered allmulticast mode [ 243.621992][T11867] netlink: 'syz.4.1521': attribute type 1 has an invalid length. [ 243.710154][T11874] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_bridge, syncid = 0, id = 0 [ 243.791685][T11878] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1523'. [ 243.820233][T11878] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1523'. [ 244.100637][T11891] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.1527'. [ 244.273540][T11900] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1530'. [ 244.580972][T11920] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1534'. [ 244.919340][T11931] dvmrp0: entered allmulticast mode [ 244.951387][T11936] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1539'. [ 244.981913][T11936] netlink: 'syz.0.1539': attribute type 21 has an invalid length. [ 245.000950][T11936] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 245.427199][T11949] IPVS: persistence engine module ip_vs_pe_ not found [ 245.546446][T11974] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1549'. [ 245.671336][T11974] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1549'. [ 245.711743][T11978] netlink: 'syz.3.1550': attribute type 8 has an invalid length. [ 246.630073][T12019] netlink: 'syz.2.1566': attribute type 21 has an invalid length. [ 246.682784][T12019] IPv6: NLM_F_CREATE should be specified when creating new route [ 246.946289][T12040] pim6reg1: entered promiscuous mode [ 247.006357][T12040] pim6reg1: entered allmulticast mode [ 247.739707][T12076] tipc: Enabling of bearer rejected, failed to enable media [ 248.187599][T12097] sctp: [Deprecated]: syz.0.1593 (pid 12097) Use of int in maxseg socket option. [ 248.187599][T12097] Use struct sctp_assoc_value instead [ 248.314081][T12103] netlink: 'syz.1.1595': attribute type 1 has an invalid length. [ 248.536400][T12116] __nla_validate_parse: 8 callbacks suppressed [ 248.536421][T12116] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1598'. [ 248.874688][T12126] netlink: 108 bytes leftover after parsing attributes in process `syz.0.1602'. [ 248.920271][T12126] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1602'. [ 248.962882][T12126] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1602'. [ 248.993014][T12130] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 249.209003][T12139] IPVS: set_ctl: invalid protocol: 137 255.255.255.255:20001 [ 249.281163][T12139] sctp: [Deprecated]: syz.0.1604 (pid 12139) Use of int in maxseg socket option. [ 249.281163][T12139] Use struct sctp_assoc_value instead [ 249.636915][T12153] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 249.864432][T12179] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1613'. [ 250.294693][T12193] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1619'. [ 250.379716][T12201] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1617'. [ 250.398327][T12201] net_ratelimit: 4 callbacks suppressed [ 250.398359][T12201] openvswitch: netlink: Flow key attr not present in new flow. [ 250.542925][T12199] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1621'. [ 250.852159][T12210] af_packet: tpacket_rcv: packet too big, clamped from 39 to 4294967272. macoff=96 [ 250.940817][T12218] netlink: 11 bytes leftover after parsing attributes in process `syz.3.1628'. [ 250.962720][T12219] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1629'. [ 251.078604][T12226] netlink: 'syz.0.1630': attribute type 1 has an invalid length. [ 251.253406][T12221] team0 (unregistering): Port device geneve0 removed [ 251.360959][T12226] 8021q: adding VLAN 0 to HW filter on device bond6 [ 251.445823][T12231] 8021q: adding VLAN 0 to HW filter on device bond6 [ 251.484699][T12231] bond6: (slave vxcan5): The slave device specified does not support setting the MAC address [ 251.513757][T12231] bond6: (slave vxcan5): Error -95 calling set_mac_address [ 252.520305][T12301] netlink: 'syz.3.1647': attribute type 32 has an invalid length. [ 252.559866][T12301] (unnamed net_device) (uninitialized): option coupled_control: invalid value (52) [ 252.625694][T12305] netlink: 'syz.1.1648': attribute type 2 has an invalid length. [ 252.639855][T12304] netlink: 'syz.1.1648': attribute type 2 has an invalid length. [ 252.770430][T12313] netlink: 'syz.0.1651': attribute type 4 has an invalid length. [ 252.821686][T12319] sctp: [Deprecated]: syz.4.1649 (pid 12319) Use of int in max_burst socket option deprecated. [ 252.821686][T12319] Use struct sctp_assoc_value instead [ 253.524819][T12354] vlan0: entered promiscuous mode [ 253.530255][T12354] vlan0: entered allmulticast mode [ 253.603596][T12354] veth0_vlan: entered allmulticast mode [ 253.641396][T12357] __nla_validate_parse: 6 callbacks suppressed [ 253.641418][T12357] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1660'. [ 253.725870][T12361] netlink: 'syz.3.1663': attribute type 21 has an invalid length. [ 253.753124][T12361] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 253.969650][T12373] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1667'. [ 254.230810][T12373] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1667'. [ 254.577861][T12400] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1673'. [ 254.849581][T12418] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1677'. [ 254.892663][T12418] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1677'. [ 254.974876][T12421] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1681'. [ 255.084874][T12421] (unnamed net_device) (uninitialized): up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 255.179509][T12431] tc_dump_action: action bad kind [ 255.219533][T12431] tc_dump_action: action bad kind [ 255.227700][T12431] tc_dump_action: action bad kind [ 255.234040][T12431] tc_dump_action: action bad kind [ 255.239594][T12431] tc_dump_action: action bad kind [ 255.260293][T12431] tc_dump_action: action bad kind [ 255.273903][T12431] tc_dump_action: action bad kind [ 255.279238][T12431] tc_dump_action: action bad kind [ 255.285554][T12431] tc_dump_action: action bad kind [ 255.290898][T12431] tc_dump_action: action bad kind [ 255.297244][T12431] tc_dump_action: action bad kind [ 255.308034][T12431] tc_dump_action: action bad kind [ 255.318551][T12431] tc_dump_action: action bad kind [ 255.335456][T12431] tc_dump_action: action bad kind [ 255.342925][T12431] tc_dump_action: action bad kind [ 255.360668][T12431] tc_dump_action: action bad kind [ 255.366423][T12431] tc_dump_action: action bad kind [ 255.371847][T12431] tc_dump_action: action bad kind [ 255.413099][T12431] tc_dump_action: action bad kind [ 255.438424][T12431] tc_dump_action: action bad kind [ 255.449337][T12439] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1686'. [ 255.460054][T12431] tc_dump_action: action bad kind [ 255.483491][T12431] tc_dump_action: action bad kind [ 255.502403][T12431] tc_dump_action: action bad kind [ 255.511080][T12431] tc_dump_action: action bad kind [ 255.546559][T12431] tc_dump_action: action bad kind [ 255.582906][T12431] tc_dump_action: action bad kind [ 255.602391][T12431] tc_dump_action: action bad kind [ 255.622926][T12431] tc_dump_action: action bad kind [ 255.628351][T12431] tc_dump_action: action bad kind [ 255.658128][T12431] tc_dump_action: action bad kind [ 255.666137][ T78] tipc: Subscription rejected, illegal request [ 255.693719][T12431] tc_dump_action: action bad kind [ 255.717180][T12431] tc_dump_action: action bad kind [ 255.723563][T12431] tc_dump_action: action bad kind [ 255.738423][T12431] tc_dump_action: action bad kind [ 255.753113][T12448] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 255.786495][T12431] tc_dump_action: action bad kind [ 255.792388][T12431] tc_dump_action: action bad kind [ 255.798458][T12431] tc_dump_action: action bad kind [ 255.823844][T12431] tc_dump_action: action bad kind [ 255.868173][T12431] tc_dump_action: action bad kind [ 255.876229][T12458] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 255.883605][T12458] IPv6: NLM_F_CREATE should be set when creating new route [ 255.896750][T12431] tc_dump_action: action bad kind [ 255.918967][T12431] tc_dump_action: action bad kind [ 256.437586][T12492] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1702'. [ 256.448522][T12493] netlink: 'syz.4.1699': attribute type 1 has an invalid length. [ 256.500604][T12493] 8021q: adding VLAN 0 to HW filter on device bond5 [ 256.540800][T12497] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.1703'. [ 256.576470][T12495] 8021q: adding VLAN 0 to HW filter on device bond5 [ 256.584565][T12495] bond5: (slave vxcan5): The slave device specified does not support setting the MAC address [ 256.597284][T12495] bond5: (slave vxcan5): Error -95 calling set_mac_address [ 256.720789][T12493] veth11: entered promiscuous mode [ 256.735952][T12493] bond5: (slave veth11): Enslaving as an active interface with a down link [ 256.794316][T12501] gretap3: entered allmulticast mode [ 256.810589][T12501] bond5: (slave gretap3): making interface the new active one [ 256.828038][T12501] bond5: (slave gretap3): Enslaving as an active interface with an up link [ 256.847714][T12510] xfrm1: entered allmulticast mode [ 257.061933][T12530] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 257.691965][T12535] bond0 (unregistering): Released all slaves [ 258.463370][T12591] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 258.485657][T12591] batadv_slave_1 (unregistering): left promiscuous mode [ 258.760698][T12608] netlink: 'syz.2.1733': attribute type 1 has an invalid length. [ 258.780294][T12608] __nla_validate_parse: 16 callbacks suppressed [ 258.780315][T12608] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1733'. [ 258.794433][T12613] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1734'. [ 258.931674][T12617] netlink: 'syz.3.1735': attribute type 24 has an invalid length. [ 258.980275][T12626] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1736'. [ 258.982581][T12622] netlink: 'syz.4.1734': attribute type 1 has an invalid length. [ 259.278330][T12634] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 259.640944][T12661] veth0: entered promiscuous mode [ 259.698868][T12661] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1746'. [ 259.736257][T12659] veth0: left promiscuous mode [ 259.963064][T12670] netlink: 'syz.0.1751': attribute type 1 has an invalid length. [ 260.160604][T12673] 8021q: adding VLAN 0 to HW filter on device bond8 [ 260.170558][T12673] bond7: (slave bond8): making interface the new active one [ 260.180618][T12673] bond7: (slave bond8): Enslaving as an active interface with an up link [ 260.190027][T12675] netlink: 'syz.1.1753': attribute type 2 has an invalid length. [ 260.213082][T12670] bridge0: port 3(ipvlan2) entered blocking state [ 260.220111][T12670] bridge0: port 3(ipvlan2) entered disabled state [ 260.228018][T12670] ipvlan2: entered allmulticast mode [ 260.235076][T12670] bridge0: entered allmulticast mode [ 260.246451][T12670] ipvlan2: left allmulticast mode [ 260.252001][T12670] bridge0: left allmulticast mode [ 260.793393][T12701] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1760'. [ 281.363064][T12722] netlink: 284 bytes leftover after parsing attributes in process `syz.1.1762'. [ 281.615899][T12735] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1766'. [ 281.933567][T12752] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1774'. [ 282.051304][T12760] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1773'. [ 282.151579][T12769] netlink: 'syz.1.1776': attribute type 2 has an invalid length. [ 282.192119][T12769] netlink: 1184 bytes leftover after parsing attributes in process `syz.1.1776'. [ 282.754575][T12791] ip6_tunnel: non-ECT from 0000:0000:0000:0000:0000:ffff:7f00:0001 with DS=0xb [ 282.772248][T12792] ip6_tunnel: non-ECT from 0000:0000:0000:0000:0000:ffff:7f00:0001 with DS=0xb [ 282.809616][T12793] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1784'. [ 283.125590][T12805] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1789'. [ 283.601942][T12820] (unnamed net_device) (uninitialized): option mode: invalid value (133) [ 283.623157][T12822] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1792'. [ 283.634446][T12823] openvswitch: netlink: Missing key (keys=40, expected=100) [ 283.651910][T12826] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1794'. [ 283.796562][T12826] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1794'. [ 284.310652][T12858] vlan2: entered allmulticast mode [ 284.394287][T12858] gretap0: entered allmulticast mode [ 284.708439][T12875] netlink: 'syz.0.1807': attribute type 12 has an invalid length. [ 285.307264][T12906] tipc: Enabling of bearer rejected, failed to enable media [ 285.447175][T12910] netlink: 'syz.4.1817': attribute type 12 has an invalid length. [ 286.424957][T12964] __nla_validate_parse: 4 callbacks suppressed [ 286.424979][T12964] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1837'. [ 286.493484][T12964] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 286.799936][T12982] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1841'. [ 287.048779][T12995] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1845'. [ 287.155560][T13002] netlink: 'syz.2.1847': attribute type 29 has an invalid length. [ 287.175085][T13002] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1847'. [ 287.257022][T13006] netlink: 'syz.2.1847': attribute type 29 has an invalid length. [ 287.288992][T13006] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1847'. [ 287.534139][T13021] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1853'. [ 287.574992][ T5937] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 287.654040][ T5937] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 287.810542][T13032] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 287.850615][T13032] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1855'. [ 288.348177][T13024] sch_fq: defrate 0 ignored. [ 288.430229][T13024] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1852'. [ 288.698681][T13061] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1865'. [ 288.729522][T13063] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1866'. [ 288.755042][T13061] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 289.041764][T13071] openvswitch: netlink: IPv4 tun info is not correct [ 289.055822][T13074] netlink: 'syz.1.1869': attribute type 1 has an invalid length. [ 289.254476][T13074] 8021q: adding VLAN 0 to HW filter on device bond3 [ 289.282196][T13077] bond3: (slave geneve3): making interface the new active one [ 289.313678][T13077] bond3: (slave geneve3): Enslaving as an active interface with an up link [ 289.360533][ T3476] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.406233][ T3476] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.444637][ T3476] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.473897][ T3476] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.737039][T13097] netlink: 'syz.1.1873': attribute type 6 has an invalid length. [ 290.062112][T13116] netlink: 'syz.0.1882': attribute type 21 has an invalid length. [ 290.070271][T13116] IPv6: NLM_F_CREATE should be specified when creating new route [ 290.082319][T13114] (unnamed net_device) (uninitialized): option all_slaves_active: invalid value (222) [ 290.126821][T13121] tipc: Enabled bearer , priority 0 [ 290.147845][T13121] syzkaller0: entered promiscuous mode [ 290.166709][T13121] syzkaller0: entered allmulticast mode [ 290.285273][T13126] bond0: entered promiscuous mode [ 290.290450][T13126] bond0: entered allmulticast mode [ 290.296212][T13126] 8021q: adding VLAN 0 to HW filter on device bond0 [ 290.330396][T13121] tipc: Resetting bearer [ 290.367618][T13120] tipc: Resetting bearer [ 290.435251][T13120] tipc: Disabling bearer [ 290.564667][T13153] netlink: 'syz.3.1887': attribute type 1 has an invalid length. [ 290.978297][T13171] tls_set_device_offload_rx: netdev not found [ 290.994315][T13168] gretap1: entered promiscuous mode [ 290.999678][T13168] gretap1: entered allmulticast mode [ 291.564049][T13193] bridge7: entered promiscuous mode [ 291.585378][T13193] bridge7: entered allmulticast mode [ 291.677574][T13194] bridge8: entered promiscuous mode [ 291.700455][T13194] bridge8: entered allmulticast mode [ 291.845539][T13213] openvswitch: netlink: Actions may not be safe on all matching packets [ 292.328927][T13226] netlink: 'syz.4.1907': attribute type 11 has an invalid length. [ 292.352961][T13228] netlink: 'syz.1.1908': attribute type 1 has an invalid length. [ 292.379934][T13228] __nla_validate_parse: 5 callbacks suppressed [ 292.379954][T13228] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1908'. [ 292.419080][T13228] netlink: 'syz.1.1908': attribute type 2 has an invalid length. [ 292.433524][T13228] netlink: 'syz.1.1908': attribute type 1 has an invalid length. [ 292.804701][T13243] netlink: 'syz.4.1913': attribute type 2 has an invalid length. [ 292.856702][T13243] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1913'. [ 292.877895][T13243] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1913'. [ 293.141610][T13253] !: renamed from bond_slave_0 [ 293.366755][T13247] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 294.090282][T13283] netlink: 316 bytes leftover after parsing attributes in process `syz.3.1922'. [ 294.117907][T13283] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1922'. [ 294.205068][T13293] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1923'. [ 294.534886][T13305] netlink: 'syz.2.1927': attribute type 2 has an invalid length. [ 294.691496][T13308] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1928'. [ 294.745493][T13308] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1928'. [ 294.850484][T13313] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1930'. [ 295.046777][T13326] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1933'. [ 295.166997][T13322] netlink: 'syz.1.1933': attribute type 1 has an invalid length. [ 295.251347][T13326] netlink: 'syz.1.1933': attribute type 1 has an invalid length. [ 295.444461][T13326] bond0: entered promiscuous mode [ 295.454701][T13326] bond0: left promiscuous mode [ 295.525459][T13337] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 295.824633][T13366] netlink: 'syz.0.1946': attribute type 6 has an invalid length. [ 295.832742][T13366] netlink: 'syz.0.1946': attribute type 5 has an invalid length. [ 296.113481][T13373] tipc: Enabled bearer , priority 0 [ 296.154588][T13373] syzkaller0: entered promiscuous mode [ 296.160379][T13373] syzkaller0: entered allmulticast mode [ 296.304417][T13373] tipc: Resetting bearer [ 296.311316][T13373] netlink: 'syz.1.1948': attribute type 21 has an invalid length. [ 296.743953][T13396] 8021q: adding VLAN 0 to HW filter on device bond4 [ 296.778759][T13396] bond3: (slave bond4): making interface the new active one [ 296.788610][T13396] bond3: (slave bond4): Enslaving as an active interface with an up link [ 296.843103][T13370] tipc: Resetting bearer [ 296.890691][T13370] tipc: Disabling bearer [ 297.129695][T13391] 8021q: adding VLAN 0 to HW filter on device bond3 [ 297.212433][T13426] 8021q: adding VLAN 0 to HW filter on device bond4 [ 297.650507][T13445] __nla_validate_parse: 14 callbacks suppressed [ 297.650528][T13445] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1960'. [ 297.693675][T13451] sch_tbf: burst 4 is lower than device ip6tnl0 mtu (1452) ! [ 297.733852][T13436] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1960'. [ 297.993230][T13461] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1967'. [ 298.047057][T13468] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1967'. [ 298.352800][T13480] syzkaller1: entered promiscuous mode [ 298.374363][T13480] syzkaller1: entered allmulticast mode [ 298.515076][T13492] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1973'. [ 299.006072][T13510] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1981'. [ 299.171564][T13525] validate_nla: 3 callbacks suppressed [ 299.171585][T13525] netlink: 'syz.3.1985': attribute type 2 has an invalid length. [ 299.187695][T13525] netlink: 1184 bytes leftover after parsing attributes in process `syz.3.1985'. [ 299.216334][T13522] team0: Device ip6gre1 is of different type [ 299.537595][T13536] lo speed is unknown, defaulting to 1000 [ 299.554853][T13539] 0{X功: left allmulticast mode [ 299.560943][T13539] erspan0: left allmulticast mode [ 299.743659][T13539] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 299.809972][T13536] lo speed is unknown, defaulting to 1000 [ 299.833795][T13536] lo speed is unknown, defaulting to 1000 [ 300.904739][T13536] infiniband syz0: set active [ 300.909572][ T5937] lo speed is unknown, defaulting to 1000 [ 300.956290][T13536] infiniband syz0: added lo [ 300.970041][T13603] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2007'. [ 300.976408][T13536] syz0: rxe_create_cq: returned err = -12 [ 301.010299][T13536] infiniband syz0: Couldn't create ib_mad CQ [ 301.018240][T13603] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2007'. [ 301.027524][T13536] infiniband syz0: Couldn't open port 1 [ 301.088012][T13609] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2007'. [ 301.111168][T13536] RDS/IB: syz0: added [ 301.148155][T13536] smc: adding ib device syz0 with port count 1 [ 301.165792][T13536] smc: ib device syz0 port 1 has pnetid SYZ1 (user defined) [ 301.186752][ T5937] lo speed is unknown, defaulting to 1000 [ 301.197461][T13536] lo speed is unknown, defaulting to 1000 [ 301.279695][T13615] bond0: entered promiscuous mode [ 301.311584][T13615] bond_slave_0: entered promiscuous mode [ 301.339748][T13615] mac80211_hwsim hwsim7 wlan1: entered promiscuous mode [ 301.364672][T13615] team0: entered promiscuous mode [ 301.382623][T13615] team_slave_0: entered promiscuous mode [ 301.402341][T13615] team_slave_1: entered promiscuous mode [ 301.423337][T13615] syz_tun: entered promiscuous mode [ 301.446584][T13615] bond0: left promiscuous mode [ 301.451485][T13615] bond_slave_0: left promiscuous mode [ 301.476155][T13627] netlink: 'syz.1.2012': attribute type 3 has an invalid length. [ 301.487681][T13627] netlink: 'syz.1.2012': attribute type 2 has an invalid length. [ 301.498157][T13615] mac80211_hwsim hwsim7 wlan1: left promiscuous mode [ 301.510687][T13615] team0: left promiscuous mode [ 301.518140][T13615] team_slave_0: left promiscuous mode [ 301.531395][T13615] team_slave_1: left promiscuous mode [ 301.539701][T13615] syz_tun: left promiscuous mode [ 301.570053][T13617] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 301.798620][T13636] netlink: 'syz.1.2013': attribute type 7 has an invalid length. [ 301.971385][T13647] netlink: 'syz.3.2016': attribute type 21 has an invalid length. [ 302.081343][T13647] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 302.205102][T13536] lo speed is unknown, defaulting to 1000 [ 302.222985][T13655] sctp: [Deprecated]: syz.4.2019 (pid 13655) Use of struct sctp_assoc_value in delayed_ack socket option. [ 302.222985][T13655] Use struct sctp_sack_info instead [ 302.310826][T13655] sctp: [Deprecated]: syz.4.2019 (pid 13655) Use of struct sctp_assoc_value in delayed_ack socket option. [ 302.310826][T13655] Use struct sctp_sack_info instead [ 302.897841][T13691] netlink: 'syz.1.2028': attribute type 21 has an invalid length. [ 302.924934][T13691] __nla_validate_parse: 6 callbacks suppressed [ 302.924954][T13691] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2028'. [ 302.950996][T13690] syz.4.2026 uses old SIOCAX25GETINFO [ 302.982044][T13691] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2028'. [ 303.044999][T13700] sctp: [Deprecated]: syz.1.2028 (pid 13700) Use of struct sctp_assoc_value in delayed_ack socket option. [ 303.044999][T13700] Use struct sctp_sack_info instead [ 303.376158][T13536] lo speed is unknown, defaulting to 1000 [ 303.517961][T13715] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2033'. [ 303.533310][T13715] netlink: 'syz.1.2033': attribute type 1 has an invalid length. [ 303.561160][T13715] netlink: 'syz.1.2033': attribute type 2 has an invalid length. [ 303.585848][T13718] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2033'. [ 303.601294][T13715] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2033'. [ 303.888555][T13723] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2036'. [ 303.901419][T13726] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2037'. [ 303.973171][T13723] IPVS: Error connecting to the multicast addr [ 304.443517][T13749] netlink: 'syz.1.2046': attribute type 2 has an invalid length. [ 304.511832][T13536] lo speed is unknown, defaulting to 1000 [ 305.064416][T13783] netlink: 'syz.1.2054': attribute type 33 has an invalid length. [ 305.074276][T13773] 8021q: adding VLAN 0 to HW filter on device bond6 [ 305.112211][T13773] team0: Port device bond6 added [ 305.119440][T13783] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2054'. [ 305.210773][T13787] netem: change failed [ 305.303681][T13791] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2055'. [ 305.356795][T13791] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2055'. [ 305.415421][T13788] bridge0: port 1(vlan3) entered blocking state [ 305.437490][T13788] bridge0: port 1(vlan3) entered disabled state [ 305.455710][T13788] vlan3: entered allmulticast mode [ 305.462627][T13788] bridge0: entered allmulticast mode [ 305.500063][T13788] vlan3: left allmulticast mode [ 305.514189][T13788] bridge0: left allmulticast mode [ 305.547029][T13536] lo speed is unknown, defaulting to 1000 [ 305.970221][T13819] tipc: Enabling of bearer rejected, failed to enable media [ 306.004834][T13816] macvlan0: left promiscuous mode [ 306.032854][T13816] macvlan0: left allmulticast mode [ 306.555773][T13852] netlink: 'syz.4.2070': attribute type 1 has an invalid length. [ 307.476082][T13896] bridge7: entered promiscuous mode [ 307.509781][T13896] bridge7: entered allmulticast mode [ 308.112972][T13941] IPVS: set_ctl: invalid protocol: 50 172.20.20.187:20000 [ 308.554928][T13961] __nla_validate_parse: 12 callbacks suppressed [ 308.554949][T13961] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2093'. [ 308.570848][T13961] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2093'. [ 308.683341][T13970] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2093'. [ 308.772645][ T30] audit: type=1107 audit(1756607015.679:4): pid=13960 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 309.226933][T13994] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2102'. [ 309.476931][ T5937] lo speed is unknown, defaulting to 1000 [ 309.702078][T14012] netlink: 'syz.1.2107': attribute type 1 has an invalid length. [ 309.726985][T14012] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2107'. [ 310.063797][T14036] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2110'. [ 310.404377][T14057] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2117'. [ 310.425110][T14045] netlink: 84 bytes leftover after parsing attributes in process `syz.4.2116'. [ 310.447623][T14059] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2115'. [ 310.472907][T14045] netlink: 'syz.4.2116': attribute type 10 has an invalid length. [ 310.492536][T14045] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2116'. [ 310.501765][T14045] ipvlan1: entered promiscuous mode [ 310.553120][T14045] ipvlan1: entered allmulticast mode [ 310.590033][T14045] : entered allmulticast mode [ 310.675984][T14045] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 310.743080][T14063] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 310.799816][ T5918] syz2: Port: 1 Link ACTIVE [ 311.427919][T14104] syzkaller1: entered promiscuous mode [ 311.461950][T14104] syzkaller1: entered allmulticast mode [ 312.042259][T14128] tipc: Enabled bearer , priority 10 [ 312.086346][T14135] tipc: Enabling of bearer rejected, failed to enable media [ 312.152866][T14143] bridge_slave_1: left allmulticast mode [ 312.158909][T14143] bridge_slave_1: left promiscuous mode [ 312.184019][T14143] bridge0: port 2(bridge_slave_1) entered disabled state [ 312.252510][ C0] ------------[ cut here ]------------ [ 312.258511][ C0] ODEBUG: free active (active state 0) object: ffff88805b053090 object type: timer_list hint: rose_t0timer_expiry+0x0/0x350 [ 312.271970][ C0] WARNING: CPU: 0 PID: 14148 at lib/debugobjects.c:615 debug_print_object+0x16b/0x1e0 [ 312.282125][ C0] Modules linked in: [ 312.286391][ C0] CPU: 0 UID: 0 PID: 14148 Comm: modprobe Not tainted syzkaller #0 PREEMPT(full) [ 312.295838][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 312.306157][ C0] RIP: 0010:debug_print_object+0x16b/0x1e0 [ 312.312027][ C0] Code: 4c 89 ff e8 07 d4 52 fd 4d 8b 0f 48 c7 c7 a0 41 e3 8b 48 8b 34 24 4c 89 ea 89 e9 4d 89 f0 41 54 e8 6a 04 b3 fc 48 83 c4 08 90 <0f> 0b 90 90 ff 05 97 79 d3 0a 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 [ 312.332000][ C0] RSP: 0018:ffffc90000007a10 EFLAGS: 00010292 [ 312.338165][ C0] RAX: 7f3d5b93252f1c00 RBX: dffffc0000000000 RCX: ffff888023fcda00 [ 312.346955][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002 [ 312.355066][ C0] RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000004 [ 312.363128][ C0] R10: dffffc0000000000 R11: fffffbfff1bfa1ec R12: ffffffff8a6cae80 [ 312.371196][ C0] R13: ffffffff8be34320 R14: ffff88805b053090 R15: ffffffff8b8cdfa0 [ 312.379261][ C0] FS: 0000000000000000(0000) GS:ffff888125c18000(0000) knlGS:0000000000000000 [ 312.388273][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 312.394941][ C0] CR2: 00007efc1f686eb8 CR3: 00000000507e8000 CR4: 00000000003526f0 [ 312.403164][ C0] Call Trace: [ 312.406579][ C0] [ 312.409457][ C0] debug_check_no_obj_freed+0x3a2/0x470 [ 312.415097][ C0] ? do_raw_spin_lock+0x121/0x290 [ 312.420350][ C0] ? rose_timer_expiry+0x4cb/0x600 [ 312.425643][ C0] kfree+0x112/0x440 [ 312.429766][ C0] rose_timer_expiry+0x4cb/0x600 [ 312.434879][ C0] ? call_timer_fn+0x155/0x5f0 [ 312.440378][ C0] call_timer_fn+0x17e/0x5f0 [ 312.445145][ C0] ? __pfx_rose_timer_expiry+0x10/0x10 [ 312.450738][ C0] ? call_timer_fn+0xbe/0x5f0 [ 312.455591][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 312.461122][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 312.466426][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 312.471748][ C0] ? __pfx_rose_timer_expiry+0x10/0x10 [ 312.477392][ C0] __run_timer_base+0x61a/0x860 [ 312.482291][ C0] ? ktime_get+0x3e/0x1f0 [ 312.486722][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 312.492141][ C0] ? seqcount_lockdep_reader_access+0x15f/0x1c0 [ 312.498535][ C0] run_timer_softirq+0xb7/0x180 [ 312.503485][ C0] handle_softirqs+0x283/0x870 [ 312.508309][ C0] ? __irq_exit_rcu+0xca/0x1f0 [ 312.513168][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 312.518493][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 312.523901][ C0] __irq_exit_rcu+0xca/0x1f0 [ 312.528536][ C0] ? __pfx___irq_exit_rcu+0x10/0x10 [ 312.533926][ C0] irq_exit_rcu+0x9/0x30 [ 312.538207][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 312.543922][ C0] [ 312.546891][ C0] [ 312.549903][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 312.557524][ C0] RIP: 0010:check_preemption_disabled+0x1/0x120 [ 312.563844][ C0] Code: a0 37 e3 8b 48 c7 c6 e0 37 e3 8b eb 1c 66 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 55 <41> 57 41 56 53 48 83 ec 10 65 48 8b 05 be 9e 26 07 48 89 44 24 08 [ 312.583547][ C0] RSP: 0018:ffffc9000478f480 EFLAGS: 00000283 [ 312.589756][ C0] RAX: 0000000000000000 RBX: ffffffff90335201 RCX: 7f3d5b93252f1c00 [ 312.597871][ C0] RDX: ffffc9000478f601 RSI: ffffffff8be337e0 RDI: ffffffff8be337a0 [ 312.605998][ C0] RBP: dffffc0000000000 R08: ffffc9000478f638 R09: 0000000000000000 [ 312.614054][ C0] R10: ffffc9000478f698 R11: fffff520008f1ed5 R12: ffffc9000478f648 [ 312.622067][ C0] R13: ffffffff8172c195 R14: ffffffff8e139ee0 R15: ffffffff8172c195 [ 312.630148][ C0] ? unwind_next_frame+0xa5/0x2390 [ 312.635432][ C0] ? unwind_next_frame+0xa5/0x2390 [ 312.640627][ C0] rcu_is_watching+0x15/0xb0 [ 312.645304][ C0] ? unwind_next_frame+0xa5/0x2390 [ 312.650448][ C0] lock_release+0x4b/0x3e0 [ 312.655214][ C0] ? deref_stack_reg+0x19f/0x230 [ 312.660194][ C0] ? unwind_next_frame+0xa5/0x2390 [ 312.665372][ C0] unwind_next_frame+0x19a9/0x2390 [ 312.670525][ C0] ? unwind_next_frame+0xa5/0x2390 [ 312.675732][ C0] ? __unwind_start+0xf8/0x760 [ 312.680678][ C0] __unwind_start+0x5b9/0x760 [ 312.685798][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 312.692011][ C0] arch_stack_walk+0xe4/0x150 [ 312.696782][ C0] ? arch_stack_walk+0xe4/0x150 [ 312.701690][ C0] stack_trace_save+0x9c/0xe0 [ 312.706480][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 312.712244][ C0] ? seqcount_lockdep_reader_access+0x123/0x1c0 [ 312.718668][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 312.724089][ C0] kasan_save_track+0x3e/0x80 [ 312.728890][ C0] __kasan_kmalloc+0x93/0xb0 [ 312.733676][ C0] __kmalloc_noprof+0x27a/0x4f0 [ 312.738678][ C0] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 312.744586][ C0] tomoyo_realpath_from_path+0xe3/0x5d0 [ 312.750223][ C0] ? tomoyo_domain+0xd9/0x130 [ 312.755033][ C0] tomoyo_path_perm+0x213/0x4b0 [ 312.759967][ C0] ? tomoyo_path_perm+0x1e3/0x4b0 [ 312.765173][ C0] ? __pfx_tomoyo_path_perm+0x10/0x10 [ 312.770656][ C0] ? __fsnotify_parent+0x242/0x540 [ 312.775988][ C0] ? ext4_file_read_iter+0x185/0x660 [ 312.781337][ C0] ? vfs_read+0x802/0xa30 [ 312.785952][ C0] security_inode_getattr+0x12f/0x330 [ 312.791385][ C0] __x64_sys_newfstat+0xfc/0x200 [ 312.796403][ C0] ? __pfx___x64_sys_newfstat+0x10/0x10 [ 312.802028][ C0] ? __pfx_ksys_read+0x10/0x10 [ 312.807216][ C0] ? do_syscall_64+0xbe/0x3b0 [ 312.811942][ C0] do_syscall_64+0xfa/0x3b0 [ 312.816583][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 312.821824][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 312.827950][ C0] ? clear_bhb_loop+0x60/0xb0 [ 312.832709][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 312.838744][ C0] RIP: 0033:0x7efc1f970e87 [ 312.843345][ C0] Code: 00 00 00 b8 15 00 00 00 0f 05 48 3d 00 f0 ff ff 77 01 c3 f7 d8 89 05 28 44 01 00 b8 ff ff ff ff c3 66 90 b8 05 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 f7 d8 89 05 08 44 01 00 b8 ff ff ff ff [ 312.863026][ C0] RSP: 002b:00007ffc16246c48 EFLAGS: 00000246 ORIG_RAX: 0000000000000005 [ 312.871756][ C0] RAX: ffffffffffffffda RBX: 00007efc1f9450c0 RCX: 00007efc1f970e87 [ 312.880191][ C0] RDX: 0000000000000000 RSI: 00007ffc16246ce0 RDI: 0000000000000000 [ 312.888425][ C0] RBP: 00007ffc16246da0 R08: 00007efc1f946a90 R09: 00007efc1f9450c0 [ 312.896662][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 312.904703][ C0] R13: 0000000000000000 R14: 00007ffc16246e40 R15: 0000000000000000 [ 312.913199][ C0] [ 312.916258][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 312.923653][ C0] CPU: 0 UID: 0 PID: 14148 Comm: modprobe Not tainted syzkaller #0 PREEMPT(full) [ 312.932922][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 312.943019][ C0] Call Trace: [ 312.946329][ C0] [ 312.949188][ C0] dump_stack_lvl+0x99/0x250 [ 312.953790][ C0] ? __asan_memcpy+0x40/0x70 [ 312.958388][ C0] ? __pfx_dump_stack_lvl+0x10/0x10 [ 312.963626][ C0] ? __pfx__printk+0x10/0x10 [ 312.968413][ C0] vpanic+0x281/0x750 [ 312.972589][ C0] ? __pfx__printk+0x10/0x10 [ 312.977202][ C0] ? __pfx_vpanic+0x10/0x10 [ 312.981717][ C0] ? is_bpf_text_address+0x292/0x2b0 [ 312.987133][ C0] panic+0xb9/0xc0 [ 312.990955][ C0] ? __pfx_panic+0x10/0x10 [ 312.995487][ C0] __warn+0x31b/0x4b0 [ 312.999470][ C0] ? debug_print_object+0x16b/0x1e0 [ 313.004674][ C0] ? debug_print_object+0x16b/0x1e0 [ 313.009990][ C0] report_bug+0x2be/0x4f0 [ 313.014329][ C0] ? debug_print_object+0x16b/0x1e0 [ 313.019566][ C0] ? debug_print_object+0x16b/0x1e0 [ 313.024835][ C0] ? debug_print_object+0x16d/0x1e0 [ 313.030052][ C0] handle_bug+0x84/0x160 [ 313.034302][ C0] exc_invalid_op+0x1a/0x50 [ 313.039330][ C0] asm_exc_invalid_op+0x1a/0x20 [ 313.044267][ C0] RIP: 0010:debug_print_object+0x16b/0x1e0 [ 313.050137][ C0] Code: 4c 89 ff e8 07 d4 52 fd 4d 8b 0f 48 c7 c7 a0 41 e3 8b 48 8b 34 24 4c 89 ea 89 e9 4d 89 f0 41 54 e8 6a 04 b3 fc 48 83 c4 08 90 <0f> 0b 90 90 ff 05 97 79 d3 0a 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 [ 313.070013][ C0] RSP: 0018:ffffc90000007a10 EFLAGS: 00010292 [ 313.076192][ C0] RAX: 7f3d5b93252f1c00 RBX: dffffc0000000000 RCX: ffff888023fcda00 [ 313.084195][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002 [ 313.092443][ C0] RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000004 [ 313.100446][ C0] R10: dffffc0000000000 R11: fffffbfff1bfa1ec R12: ffffffff8a6cae80 [ 313.108447][ C0] R13: ffffffff8be34320 R14: ffff88805b053090 R15: ffffffff8b8cdfa0 [ 313.116448][ C0] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 313.122115][ C0] debug_check_no_obj_freed+0x3a2/0x470 [ 313.127676][ C0] ? do_raw_spin_lock+0x121/0x290 [ 313.132894][ C0] ? rose_timer_expiry+0x4cb/0x600 [ 313.138012][ C0] kfree+0x112/0x440 [ 313.141926][ C0] rose_timer_expiry+0x4cb/0x600 [ 313.146868][ C0] ? call_timer_fn+0x155/0x5f0 [ 313.151643][ C0] call_timer_fn+0x17e/0x5f0 [ 313.156328][ C0] ? __pfx_rose_timer_expiry+0x10/0x10 [ 313.161795][ C0] ? call_timer_fn+0xbe/0x5f0 [ 313.166482][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 313.171608][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 313.176821][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 313.182029][ C0] ? __pfx_rose_timer_expiry+0x10/0x10 [ 313.187497][ C0] __run_timer_base+0x61a/0x860 [ 313.192361][ C0] ? ktime_get+0x3e/0x1f0 [ 313.196971][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 313.202432][ C0] ? seqcount_lockdep_reader_access+0x15f/0x1c0 [ 313.208697][ C0] run_timer_softirq+0xb7/0x180 [ 313.213659][ C0] handle_softirqs+0x283/0x870 [ 313.218520][ C0] ? __irq_exit_rcu+0xca/0x1f0 [ 313.223300][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 313.228607][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 313.233822][ C0] __irq_exit_rcu+0xca/0x1f0 [ 313.238437][ C0] ? __pfx___irq_exit_rcu+0x10/0x10 [ 313.243651][ C0] irq_exit_rcu+0x9/0x30 [ 313.247893][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 313.253547][ C0] [ 313.256502][ C0] [ 313.259455][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 313.265488][ C0] RIP: 0010:check_preemption_disabled+0x1/0x120 [ 313.271796][ C0] Code: a0 37 e3 8b 48 c7 c6 e0 37 e3 8b eb 1c 66 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 55 <41> 57 41 56 53 48 83 ec 10 65 48 8b 05 be 9e 26 07 48 89 44 24 08 [ 313.291500][ C0] RSP: 0018:ffffc9000478f480 EFLAGS: 00000283 [ 313.297675][ C0] RAX: 0000000000000000 RBX: ffffffff90335201 RCX: 7f3d5b93252f1c00 [ 313.305912][ C0] RDX: ffffc9000478f601 RSI: ffffffff8be337e0 RDI: ffffffff8be337a0 [ 313.314075][ C0] RBP: dffffc0000000000 R08: ffffc9000478f638 R09: 0000000000000000 [ 313.322053][ C0] R10: ffffc9000478f698 R11: fffff520008f1ed5 R12: ffffc9000478f648 [ 313.330129][ C0] R13: ffffffff8172c195 R14: ffffffff8e139ee0 R15: ffffffff8172c195 [ 313.338106][ C0] ? unwind_next_frame+0xa5/0x2390 [ 313.343313][ C0] ? unwind_next_frame+0xa5/0x2390 [ 313.348464][ C0] rcu_is_watching+0x15/0xb0 [ 313.353262][ C0] ? unwind_next_frame+0xa5/0x2390 [ 313.358377][ C0] lock_release+0x4b/0x3e0 [ 313.362803][ C0] ? deref_stack_reg+0x19f/0x230 [ 313.367763][ C0] ? unwind_next_frame+0xa5/0x2390 [ 313.372882][ C0] unwind_next_frame+0x19a9/0x2390 [ 313.378102][ C0] ? unwind_next_frame+0xa5/0x2390 [ 313.383306][ C0] ? __unwind_start+0xf8/0x760 [ 313.388122][ C0] __unwind_start+0x5b9/0x760 [ 313.393003][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 313.399162][ C0] arch_stack_walk+0xe4/0x150 [ 313.403857][ C0] ? arch_stack_walk+0xe4/0x150 [ 313.408829][ C0] stack_trace_save+0x9c/0xe0 [ 313.413528][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 313.418917][ C0] ? seqcount_lockdep_reader_access+0x123/0x1c0 [ 313.425177][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 313.430598][ C0] kasan_save_track+0x3e/0x80 [ 313.435341][ C0] __kasan_kmalloc+0x93/0xb0 [ 313.439959][ C0] __kmalloc_noprof+0x27a/0x4f0 [ 313.444825][ C0] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 313.450651][ C0] tomoyo_realpath_from_path+0xe3/0x5d0 [ 313.456293][ C0] ? tomoyo_domain+0xd9/0x130 [ 313.461166][ C0] tomoyo_path_perm+0x213/0x4b0 [ 313.466026][ C0] ? tomoyo_path_perm+0x1e3/0x4b0 [ 313.471066][ C0] ? __pfx_tomoyo_path_perm+0x10/0x10 [ 313.476462][ C0] ? __fsnotify_parent+0x242/0x540 [ 313.481752][ C0] ? ext4_file_read_iter+0x185/0x660 [ 313.487077][ C0] ? vfs_read+0x802/0xa30 [ 313.491518][ C0] security_inode_getattr+0x12f/0x330 [ 313.497004][ C0] __x64_sys_newfstat+0xfc/0x200 [ 313.501987][ C0] ? __pfx___x64_sys_newfstat+0x10/0x10 [ 313.507571][ C0] ? __pfx_ksys_read+0x10/0x10 [ 313.512356][ C0] ? do_syscall_64+0xbe/0x3b0 [ 313.517047][ C0] do_syscall_64+0xfa/0x3b0 [ 313.521552][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 313.526848][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 313.532923][ C0] ? clear_bhb_loop+0x60/0xb0 [ 313.537693][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 313.543598][ C0] RIP: 0033:0x7efc1f970e87 [ 313.548017][ C0] Code: 00 00 00 b8 15 00 00 00 0f 05 48 3d 00 f0 ff ff 77 01 c3 f7 d8 89 05 28 44 01 00 b8 ff ff ff ff c3 66 90 b8 05 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 f7 d8 89 05 08 44 01 00 b8 ff ff ff ff [ 313.567828][ C0] RSP: 002b:00007ffc16246c48 EFLAGS: 00000246 ORIG_RAX: 0000000000000005 [ 313.576248][ C0] RAX: ffffffffffffffda RBX: 00007efc1f9450c0 RCX: 00007efc1f970e87 [ 313.584248][ C0] RDX: 0000000000000000 RSI: 00007ffc16246ce0 RDI: 0000000000000000 [ 313.592229][ C0] RBP: 00007ffc16246da0 R08: 00007efc1f946a90 R09: 00007efc1f9450c0 [ 313.600566][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 313.608584][ C0] R13: 0000000000000000 R14: 00007ffc16246e40 R15: 0000000000000000 [ 313.616585][ C0] [ 313.620045][ C0] Kernel Offset: disabled [ 313.624553][ C0] Rebooting in 86400 seconds..