last executing test programs: 14.543283793s ago: executing program 3 (id=4002): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbff, 0x2ffffffff}, 0xc) recvfrom(r1, 0x0, 0x0, 0x40000020, &(0x7f00000002c0)=@l2={0x1f, 0x7bd, @none, 0xeb6}, 0x80) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100f0ffffffffffffff00000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c0002800500010000000000080007"], 0x98}}, 0x0) 13.612089499s ago: executing program 3 (id=4014): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x34, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_CQM={0x18, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8}, @NL80211_ATTR_CQM_RSSI_THOLD={0x4}, @NL80211_ATTR_CQM_TXE_RATE={0x8}]}]}, 0x34}}, 0x0) (async) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x68, r3, 0x200, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x29}, @void, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "c821ffbed0e6b3cb78b7f52d2ad222468d90ad124a98b565"}], @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}]}], @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x68}, 0x1, 0x0, 0x0, 0x40000c0}, 0x2000080c) r4 = socket$isdn(0x22, 0x2, 0x24) close(r4) ioctl$IMCTRLREQ(r4, 0x80044945, &(0x7f0000000000)={0x40, 0xcea6, 0x3, 0xfff}) 13.51617911s ago: executing program 3 (id=4016): bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="2100000000000000000023000400000000040000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000001800"/28], 0x50) socket$l2tp6(0xa, 0x2, 0x73) r0 = socket$inet(0x2, 0x1, 0x100) setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4) bind$inet(r0, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10) r1 = socket$inet(0x2, 0xa, 0x200) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x4, 0x1, &(0x7f0000000000)=@raw=[@exit], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_int(r1, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4) bind$inet(r1, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10) listen(r1, 0x7) listen(r0, 0x0) r3 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r3, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000002400)=@newtfilter={0x30, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r7, {0x10, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_u32={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r9, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000040)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010000008000efd900008900000008000300", @ANYRES32=r10, @ANYBLOB="14001d8010000080040004000600050059000000"], 0x30}}, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000200)={@local, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0x30, 0x3a, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, @mcast2, {[], @time_exceed={0x91, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, '%kT', 0x0, 0x0, 0x0, @mcast1, @dev}}}}}}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={r2, 0x0, 0x6a, 0xd, &(0x7f0000000300)="6bae65bb328ca676049436f39cee772894b53c632607bc35c9d431ed9ea3747de58e5f5bbeb36cce88350f93dbff86f5be6d1ebc7e66a70cf0ffde0676b72e0557199b730f21feff7c9ab3595f86398039205265670154e8a26f4774111e8cc070d979cfd19135c3f1db", &(0x7f0000000100)=""/13, 0x4, 0x0, 0xbf, 0x42, &(0x7f00000003c0)="6bd6f8ddc493c12004bd5ab2f80bbc20e50930e3cdd43858db20536a483cdf166d61069fee3224edb87c849510c3c2eced288388106b4d89459de75961e8a8ef08d7e4ec56105134992d18cb1a2d63bec3f2fe0d09a372f319453973220a42a6da6d9341ba3fd938f7dff72599d21ee34262139047086786f9b471ae5a0b3c7c874a5831ab99d2a1077c2f47171af98cd636ba8ca3fa845ab572d36967d3b8b02a7a6766379cae35a7838a919d22efc66f4fd97483dfddb34d63786de3f641", &(0x7f0000000480)="0c91c12bf7b31060f36f715daf1c4fefbeb6b9a133388fbcacf4d5b8b1cbda3bfed2c2af8dfd9ca9904ec6e9375b618cb1288cbb41754169fb466bee6b5917d8abb1", 0x3, 0x0, 0x9}, 0x50) r11 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r11, 0x29, 0x37, &(0x7f0000000540)={0x3b}, 0x8) 13.066863691s ago: executing program 3 (id=4023): r0 = socket(0x2d, 0x2, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x2d, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0xc0}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x4) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, &(0x7f0000003900)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x30}}, 0x240040c0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB="e40000000201010800000000000000000a000000d00001800c000280050001000000000014000180080001000000000008000200000000002c00018014000300ff01000000000000000000000000000114000400090200000000000000000000000000010c00028005000100000000004700028005000100010000000600040000000000060005"], 0xe4}}, 0x0) setsockopt$inet6_buf(r2, 0x29, 0xcd, &(0x7f0000000100)="339fa6d300d77add2c233966072f85aec8a8a81753269416add12259134f696b9b19882c69b53053359ce3b4a9eb3db323e7b02d68a254cb13ff5f3db7ad1d97861dd1800935b0f95a3559b81492f09e15aafd6ea57db0c745cfb0f4", 0x5c) writev(r1, &(0x7f0000000280)=[{&(0x7f0000000040)="580000001500192340834b80040d8c560a067fbc45ff810540010000000058000b480400945f64009400050038925a01000000000000008004000000ffe809000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1) 12.929162003s ago: executing program 3 (id=4026): sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000000090108000000000000000000000001080005400000001c0900010073797a31000000000c000480060001"], 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x2000000) r0 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x7000000, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ICV_LEN={0x5, 0x3, 0xe}]}}}]}, 0x3c}}, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x30, 0x0, 0x200, 0x0, 0x2, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010101}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xbf}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x10}]}]}, 0x30}}, 0x4004811) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYRES32, @ANYBLOB], 0x48) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc800) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)={&(0x7f0000000d80)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100010000000000000014000000180007800c00030000000000000000000800020001010000"], 0x2c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="30000000190001000000000000000000021800000000ff000000000008000100ac1414000c0009"], 0x30}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x14, 0x0, 0x9, 0x401}, 0x14}}, 0x0) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010026bd700effdbdf250f0000000c0006000200000000000000"], 0x20}, 0x1, 0x0, 0x0, 0x880}, 0x880) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c00018006000600800e0000100002800c0006"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 10.163967707s ago: executing program 3 (id=4037): r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x400448e1, &(0x7f0000000000)={0x0, 0x0, "957008"}) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, &(0x7f00000002c0)={0x1, 'ipvlan1\x00', 0x100}, 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@newlink={0x5c, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GRE_IFLAGS={0x6, 0x2, 0x30}, @IFLA_GRE_LOCAL={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @loopback}}]}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x9}]}, 0x5c}}, 0x0) r3 = socket$igmp6(0xa, 0x3, 0x2) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r4, 0x8983, &(0x7f0000000040)={0x6, 'ip6erspan0\x00', {}, 0x105}) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r4, 0x8982, &(0x7f00000006c0)={0x0, 'macvtap0\x00', {0xffe}, 0x2b1}) syz_emit_ethernet(0x6e, &(0x7f00000002c0)={@broadcast, @multicast, @val={@val={0x88a8, 0x0, 0x0, 0x2}, {0x8100, 0x0, 0x0, 0x4}}, {@ipv6={0x86dd, @icmpv6={0x7, 0x6, "c172f5", 0x30, 0x3a, 0xff, @ipv4={'\x00', '\xff\xff', @local}, @local, {[], @param_prob={0x4, 0x0, 0x0, 0xffbf, {0x5, 0x6, "54d03a", 0x400, 0x88, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00'}}}}}}}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r5, 0x0, 0xe80, 0xe80, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000080)={{{@in6=@loopback, @in=@remote}}, {{@in=@private}, 0x0, @in6=@mcast2}}, &(0x7f0000000000)=0xe8) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000910442000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x41) 1.767181982s ago: executing program 2 (id=4215): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) getsockopt(r1, 0x8, 0x80000001, 0x0, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000980)={'filter\x00', 0x7, 0x4, 0x3f0, 0x0, 0x110, 0x110, 0x308, 0x308, 0x308, 0x4, &(0x7f0000000040), {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @private=0xa010102, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x4, 0xffffffff}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @multicast2, @local, 0x4, 0xffffffff}}}, {{@arp={@broadcast, @local, 0xffffff00, 0xffffffff, 0x7, 0x5, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x43}, {[0xff, 0xff, 0x0, 0xff, 0xff]}}, {@mac=@local, {[0xff, 0xff, 0x0, 0xff, 0xff]}}, 0x9, 0xc, 0xfffd, 0xffea, 0x3, 0xfffb, 'bridge0\x00', 'netpci0\x00', {}, {0xff}}, 0xc0, 0xe8}, @unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x10000, 0x6f}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss={0x2, 0x1}, @window={0x3, 0x81, 0x6}, @timestamp, @sack_perm, @mss={0x2, 0xdedb}], 0x5) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f00000002c0), r3) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="c8010000", @ANYRES16=r4, @ANYBLOB="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"], 0x1c8}}, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b030040000000004c0012800b00010067656e65766500003c0002800800050001000000140007000000000000000005000000000000000108000f"], 0x74}}, 0x0) 1.63048558s ago: executing program 0 (id=4218): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="c50a00000000000061139c00000000001800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0xffffff85}, 0x90) 1.604151051s ago: executing program 1 (id=4219): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000480)=@gettaction={0x28, 0x30, 0x1, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}]}]}, 0x28}}, 0x0) accept$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000040)=0x14) (async) r1 = accept$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000040)=0x14) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000000c0)=0x14) 1.460461708s ago: executing program 2 (id=4221): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{0x64}, {0x6}]}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f00000003c0)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000880)={0x68, r2, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r3}, @WGDEVICE_A_PEERS={0x4c, 0x8, 0x0, 0x1, [{0x48, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x0, @loopback}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}]}]}]}, 0x68}}, 0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000002880)=@security={'security\x00', 0xe, 0x4, 0x310, 0xffffffff, 0x0, 0x130, 0x1d8, 0xffffffff, 0xffffffff, 0x2e0, 0x2e0, 0x2e0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa0, 0x184, 0x0, {}, [@common=@addrtype={{0x30}, {0x100, 0xe01}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x1, [0x4, 0xa, 0x7, 0x0, 0x3], 0x1, 0x1}, {0x4, [0x4, 0x1, 0x3, 0x1, 0x5, 0xe], 0x2, 0x4}}}}, {{@ip={@rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0xff, 'macvtap0\x00', 'pimreg1\x00', {0xff}, {0xff}, 0x32, 0x3, 0x10}, 0x0, 0x70, 0xa8}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x4, 0x6, 0x1}, {0x2, 0x5, 0x6}, {0x6, 0x4, 0x4}, 0x8001}}}, {{@ip={@remote, @rand_addr=0x64010102, 0xffffff00, 0xff, 'ipvlan1\x00', 'ip6tnl0\x00', {0xff}, {0xff}, 0x0, 0x1, 0x81f6fc83b80a76cf}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x2, [0x1, 0x0, 0x2, 0x1, 0x2, 0x3], 0x2, 0x2}, {0x1, [0x2, 0x0, 0x1, 0x6, 0x0, 0x1], 0x2, 0x6}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x370) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32=0x0, @ANYBLOB="5347b6d89472be50a6e0a93b8406c9d220727c17ba67b0fa2da876fe32f3d82fc1f13093c08883c66e9a0f59a6c41f45cc08bbca2e3b179b10888d1ffee5d4223e1210206fcb97e3e91f99f8dcf030646b78c20ddd93841e40b6a2a088e23d1efa8afe91198a030552f9045509cc5548930f3913e94464771ceab8ee12468874cf71bdc1c01fcc9485d053a6e6a9ef77c4763bc8346be1815c93edc4d7462600792fc7bd5bb5fc4675c83db3b9546cf2a2f39b45e7aa"], 0x1c}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c00090400110000000000000001000000000000", @ANYRES8=r5, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES16=r5, @ANYRES64=r5], 0x5c}}, 0x0) 1.459885496s ago: executing program 0 (id=4222): setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000300)={@in={{0x2, 0x4e23, @multicast1}}, 0x0, 0x0, 0x3c, 0x0, "bb02a3c364ca41d6357e544524474004000b42a21d7214bf92494925208a0e2f964e0000c534a6324d6193fcf19b2df3ee818afaa4ff1f56c54dc46d8b6d2ccd008aa0cc1dc2767bbe00"}, 0xd8) r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$inet6(r0, &(0x7f0000000400)="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", 0x1000, 0x8015, &(0x7f0000000040)={0xa, 0x4e23, 0x1, @mcast2, 0x7ff}, 0x1c) r1 = socket$kcm(0x23, 0x5, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000000080)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x27}, @void, {@generic={0x9000, "a4866d0f93504be036290fbd747082de071194d3989ca9e4765cebca721a7b80ebeec2f003bf016c45cb6c0b2c8799ef999b0dad83c5c1e47386f74e17314f1b87b34b2011b7aa3edf09d20c8d7881c3"}}}, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000240)=0x9, 0x4) listen(r1, 0x800) accept4(r0, 0x0, 0x0, 0x80800) r3 = socket$kcm(0x2, 0xa, 0x2) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r4, &(0x7f00000001c0)={0xa, 0x0, 0x75040e60, @empty, 0x2}, 0x1c) r5 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r5, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff810000400e227f000001925aa80020007b00090080007f000006e809000000ff0000f03ac7100206000000ffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f0000000380)=ANY=[@ANYBLOB="1c0000f500000000000000862dfdff000000"], 0x78) syz_init_net_socket$nfc_llcp(0x27, 0x0, 0x1) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, 0x0, 0x0) 1.459423542s ago: executing program 1 (id=4223): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = getpid() (async) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r0}, 0x8) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000001c0)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0x3, &(0x7f0000000240)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x32, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="85000000130000005d0000000000000095000000000000000a621cf434b9eaafdc0a00e9bfde908990817b364e51afe9c81a97f0570759f1cae63487ff68fffffffffffe8e3932e2b7185a25a4cf8a9456aa8a701c318c67edb6e9330b53c0eeba8644311ba75411890700000000000000d8e5b1dc91c5499bea0977"], &(0x7f0000000000)='GPL\x00', 0x5, 0x487, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) write$tun(0xffffffffffffffff, &(0x7f0000000380)={@val={0xa}, @void, @eth={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x26}, @multicast, @val, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x6000, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, {0x0, 0x86dd, 0x10, 0x0, @gue={{0x2, 0x0, 0x3, 0x5, 0x100, @val=0x80}}}}}}}}, 0x3e) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r4, 0x0, 0xd00, 0x0, &(0x7f0000000380)="263abd030e98ff4dc870bd6688a8640888a8", 0x0, 0x1200}, 0x28) (async) bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f0000000480)={r3, 0x0, 0x0}, 0x10) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) write$bt_hci(r5, &(0x7f0000000080)=ANY=[@ANYRES64=r5, @ANYRESDEC=0x0, @ANYRES32, @ANYRES8=r1, @ANYRES16=r1, @ANYRES64, @ANYRES8=r1], 0x8) (async) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000380)=r1) (async) r6 = syz_open_procfs$namespace(r1, &(0x7f0000000040)='ns/ipc\x00') ioctl$FIBMAP(r6, 0x1, &(0x7f0000000800)=0x6d) 1.389034112s ago: executing program 1 (id=4225): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbff, 0x2ffffffff}, 0xc) recvfrom(r1, 0x0, 0x0, 0x40000020, &(0x7f00000002c0)=@l2={0x1f, 0x7bd, @none, 0xeb6}, 0x80) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100006400000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c0002800500010000000000080007"], 0x98}}, 0x0) 1.329167821s ago: executing program 2 (id=4226): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x1a, &(0x7f0000000ac0)={0x3, &(0x7f0000000a80)=[{0x48, 0x40}, {0x20, 0x1, 0x0, 0xfffff010}, {0x16, 0x7, 0x2, 0x6}]}, 0x10) sendmmsg(r7, &(0x7f00000007c0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000001040)="e7337703a4", 0x5}], 0x1}}], 0x1, 0x4c818) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r10, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r9, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) getsockopt$sock_buf(r0, 0x1, 0x4d, 0xffffffffffffffff, &(0x7f0000000000)) write(0xffffffffffffffff, &(0x7f0000000040)="effd00001000ff00fd4344c007110000", 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) (async) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) (async) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) (async) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) (async) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) (async) bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)) (async) setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x1a, &(0x7f0000000ac0)={0x3, &(0x7f0000000a80)=[{0x48, 0x40}, {0x20, 0x1, 0x0, 0xfffff010}, {0x16, 0x7, 0x2, 0x6}]}, 0x10) (async) sendmmsg(r7, &(0x7f00000007c0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000001040)="e7337703a4", 0x5}], 0x1}}], 0x1, 0x4c818) (async) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) (async) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) (async) sendmsg$inet(r10, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) (async) recvmsg(r9, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) (async) getsockopt$sock_buf(r0, 0x1, 0x4d, 0xffffffffffffffff, &(0x7f0000000000)) (async) write(0xffffffffffffffff, &(0x7f0000000040)="effd00001000ff00fd4344c007110000", 0x10) (async) 1.177116355s ago: executing program 0 (id=4228): writev(0xffffffffffffffff, &(0x7f0000000580)=[{&(0x7f0000000200)="01eb050842e36c92d9e3e900b677cb7e9286ccc067ecbed0cf7372eaa29371003353", 0x22}], 0x1) (async) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000000030601"], 0x14}}, 0x8081) (async) r0 = socket$inet(0x2, 0x2, 0x1) setsockopt$inet_int(r0, 0x0, 0x13, &(0x7f0000000040)=0x7, 0x4) (async, rerun: 32) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='veth1_vlan\x00', 0x10) (rerun: 32) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x4e21, @multicast2}, 0x10, &(0x7f0000000700)=[{&(0x7f0000000200)="08001efbb0", 0x5}, {&(0x7f0000000180)="d0849e", 0x3}], 0x2, 0x0, 0x0, 0x60000000}, 0x20008004) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) writev(r1, &(0x7f00000002c0)=[{&(0x7f0000000a40)="2e9b3d0007e03dd65193dfb6c575963f86ddf06712e9232f2b8db0049d90491ceaebfd26d4eef23248000000f858dbb8a19052343f", 0x35}, {&(0x7f0000000200)="c67f0d7df9", 0x49}], 0x2) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f00000000c0)) (async) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000000), 0xffffff6a) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000011c0)=@newtaction={0xe98, 0x30, 0x25, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x30, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0xffffffffffffff40, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x4}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x718}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x7f}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0xfffffffc}], [{}, {}, {}, {}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x3}, 0x8) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x404, 0x9}, 0x50) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x3, 0x4, 0x801, 0x1, r7, 0x15b4}, 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000000)={r8, &(0x7f00000000c0), 0x0}, 0x20) (async) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000100)={0x0, @in6={{0xa, 0x4e22, 0x0, @dev={0xfe, 0x80, '\x00', 0x12}, 0x4751}}, [0x0, 0x7, 0xfffffffffffffff9, 0x1, 0x752e, 0x2, 0x913, 0x5, 0x5, 0x2, 0x6, 0x0, 0x0, 0x7, 0x4]}, &(0x7f0000000040)=0x100) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r4, 0x84, 0x18, &(0x7f0000000080)={r9, 0x7}, &(0x7f0000000240)=0x8) (async) ioctl$PPPIOCSMAXCID(r3, 0x40047451, &(0x7f0000000200)) (async, rerun: 32) close(0x3) (rerun: 32) 1.176889129s ago: executing program 2 (id=4229): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket(0x2c, 0x3, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="110000000400000004000000ff"], 0x17) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r3, &(0x7f0000000140), &(0x7f0000000080)=@udp6=r2}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r3, &(0x7f0000000200), &(0x7f0000001500)=@tcp=r2}, 0x20) socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r4, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x0, @multicast1}}, 0x24) close(0x4) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x9, 0x1, 0x56d, 0x2, 0x42, 0xffffffffffffffff, 0x1000}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000600), &(0x7f0000001f80), 0xfffffffb, r5}, 0x38) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200), &(0x7f00000004c0), 0x1000, r5}, 0x38) close(r2) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYRES64=r1, @ANYRES32=r6, @ANYBLOB="f5ff0f00252155b21c0012000c000100056f6e640000c6000c00f6ff0800030001"], 0x3c}}, 0x44001) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCSIFADDR(r8, 0x8916, &(0x7f0000000380)={@dev={0xfe, 0x80, '\x00', 0x1f}, 0x76, r6}) ioctl$sock_inet6_SIOCSIFADDR(r7, 0x8916, &(0x7f0000000100)={@ipv4={'\x00', '\xff\xff', @multicast2}, 0x56, r6}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000b80)=ANY=[@ANYBLOB="3c00000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="0000000006100000140012800b00010062726964676500000400028008000a00", @ANYRES32=r6], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) 1.064683214s ago: executing program 0 (id=4231): pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000580)={'veth0_to_team\x00', 0x0}) r3 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000004c0)={0xffffffffffffffff, r2, 0x25, 0x0, @void}, 0x10) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r4, &(0x7f00000003c0)={@val={0x1c}, @val={0x0, 0x5, 0x0, 0x300}, @ipv6=@udp={0x0, 0x6, '\'\vB', 0x18, 0x11, 0x0, @empty, @ipv4={'\x00', '\xff\xff', @local}, {[], {0x0, 0x0, 0x18, 0x0, @wg=@data}}}}, 0x4e) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000000)={r3, 0xffffffffffffffff, 0x4}, 0x10) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) splice(r5, 0x0, r0, 0x0, 0x406f413, 0x0) socket(0x23, 0x6, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000d40)=ANY=[@ANYBLOB="6c00000002060500000000000000000000000000120003006269746d61703a69702c6d616300000005000400000000000900020073797a310000000020000780050003001f0000000c0001800800014000000000080006000400000005000500020000000500010006"], 0x6c}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0x21, 0x0, &(0x7f0000000040)="d243c16338e9df3755183e3b031d0b1352a8ee9abad529454da0a1a8a92d62ab6b", &(0x7f0000000080), 0x9, 0x0, 0x1000, 0xc7, &(0x7f0000000dc0)="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", &(0x7f0000000100)="7cd13c49c07359dd9b9ddb5431417d81aa1ba681aa8506403360566e7241e099a30f71852c02039ebad033b99174bae1ad024cd1587818cfd52163404f57695da6f7a65755bb61f1fffb9fa90c3729781272ad7e9a4361ac46164e9ad37cc3521525be624e0a88c76ab420a0e07bd6b95d476e19159159d1d6d0fa8f1cdee351d929794d237f6bc7a6581c4a5f4a69515a5c584e197c18b21786f08a57877d5b0affc890404d22dfd2a92f676ae08b2d57e82ff44b39651dbb52fe8eb0961264d345566167acc5", 0x3, 0x0, 0x1}, 0x50) 934.712323ms ago: executing program 2 (id=4235): r0 = socket$kcm(0x2, 0x5, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6(0xa, 0x2, 0x0) ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f0000000200)) socket$inet6_tcp(0xa, 0x1, 0x0) socket$packet(0x11, 0x3, 0x300) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_route(0x10, 0x3, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3}, 0x0, &(0x7f00000002c0)={0x3fc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000001280)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000011c0)=[{&(0x7f00000012c0)='#', 0x1}], 0x1}, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x7, &(0x7f0000000180), 0x43) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) connect$x25(r1, &(0x7f0000000000)={0x2, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x2}}, 0x12) r2 = accept$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000080)=0x14) setsockopt$packet_fanout_data(r2, 0x107, 0x16, &(0x7f0000000140)={0x8, &(0x7f00000000c0)=[{0x0, 0xe, 0x6, 0xfffffff7}, {0x400, 0x88, 0x9, 0x2}, {0x7, 0x98, 0x4, 0xd}, {0x9, 0x6, 0xb3, 0x6}, {0x5, 0xc2, 0x2, 0x7b}, {0x7, 0x7f, 0x7, 0x2}, {0x4, 0x55, 0x3, 0x8}, {0x1, 0x6b, 0x8, 0x3c}]}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48) ioctl$FS_IOC_READ_VERITY_METADATA(r1, 0xc0286687, &(0x7f0000000280)={0x2, 0x1ff, 0x0, &(0x7f0000000240)}) 919.008533ms ago: executing program 0 (id=4236): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10) r1 = socket(0x1e, 0x4, 0x0) r2 = socket$caif_stream(0x25, 0x1, 0x3) sendmsg$inet(r2, &(0x7f0000002080)={0x0, 0x0, 0x0}, 0x4000095) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)=ANY=[@ANYBLOB="7800000600"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00P'], 0x78}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000001d00070f000000000000000007000000", @ANYRES32=r4, @ANYBLOB="40005200060010"], 0x24}}, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x1}], 0x1}}], 0x1, 0x9200000000000000) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) recvmmsg$unix(r0, &(0x7f00000043c0)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000002c0)=""/240, 0xf0}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) 888.547231ms ago: executing program 4 (id=4237): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x41000, 0xe4bd6a1de0769c90, '\x00', 0x0, @flow_dissector=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x94) r1 = socket(0x10, 0x803, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6b0}, 0x94) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a3200000000080041007369770014003300"], 0x38}, 0x1, 0x0, 0x0, 0x8040044}, 0x810) sendmsg$RDMA_NLDEV_CMD_DELLINK(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf250800010000000000ba30b28e994c1a08d1ca4eb6b8b4889cdd4e786eb807e0"], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={@fallback=r3, 0x35, 0x0, 0x6, &(0x7f0000000140), 0x0, 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0], 0x0, &(0x7f0000000300)=[0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000400)=ANY=[@ANYRESDEC=0x0, @ANYRES32, @ANYBLOB="30000000eb4b1e9991d601000000", @ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES64=r4], 0x20) r5 = bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000080)={@fallback=r2, 0xffffffffffffffff, 0x37, 0x2000, 0x0, @value=r5, @void, @void, @void, r4}, 0x20) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@bloom_filter={0x1e, 0xffff, 0x4, 0x5, 0x1000, 0x1, 0xffff2d79, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x24, 0x2, 0x3}, 0x50) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000000)={@map=r6, 0xffffffffffffffff, 0x24, 0x2000, 0xffffffffffffffff, @value, @void, @void, @void, r4}, 0x20) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB='\x00'/10, @ANYRES32, @ANYBLOB="0100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x50) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000740)={@map=r7, 0xffffffffffffffff, 0x33, 0x10, 0x0, @void, @value, @void, @void, r4}, 0x20) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000001580)={@fallback=r6, 0xffffffffffffffff, 0x16, 0x0, 0x0, @void, @value, @void, @void, r4}, 0x20) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000180)={0xffffffffffffffff, 0x8, 0x4, 0x8}) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)={@cgroup=r8, 0xffffffffffffffff, 0x14, 0x20, 0xffffffffffffffff, @void, @void, @void, @value=0xffffffffffffffff, r4}, 0x20) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r9, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r9, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000005c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010028bd7000010000000f000000080034000800030008000300", @ANYRES32=r11, @ANYBLOB="050033"], 0x2c}, 0x1, 0x0, 0x0, 0x24004040}, 0x80) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000080)={@ifindex=r11, r0, 0x17, 0x4, 0x0, @void, @value=r0, @void, @void, r4}, 0x20) r12 = socket(0x10, 0x803, 0x0) r13 = socket(0x1, 0x803, 0x0) getsockname$packet(r13, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x3, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000005000007f9ff00009110bb00000000009500000000000000"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6e2e12bede68ed35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(r12, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000001400b59527bd7000fcdbdf2523090000", @ANYRES32=r14, @ANYBLOB="140002"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=ANY=[], 0x34}}, 0x4040800) r15 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r15, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000200)="cb000000150081054e81f782db44b904021f08010a000000040000a118000200ac141414ffff0d1208000f0100810401880016ea1f0006ea7f400303000803600cfab94dcf5c046181d67f6f94007134cf6ee080005c4ab0f45312b3429fa0e408f456211bef32d4760000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd60100730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee", 0xcb}], 0x1, 0x0, 0x0, 0x7400}, 0x44804) 749.411767ms ago: executing program 4 (id=4238): socket$can_bcm(0x1d, 0x2, 0x2) socket$inet_mptcp(0x2, 0x1, 0x106) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='devices.list\x00', 0x275a, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000000)) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x1f, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r0], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 747.983176ms ago: executing program 4 (id=4239): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async, rerun: 64) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x20, 0x7, 0xffffffff, 0x70ef, {{0x1b, 0x4, 0x3, 0x3b, 0x6c, 0x68, 0x0, 0x9, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x1c}, @empty, {[@ssrr={0x89, 0xf, 0x66, [@private=0xa010100, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @timestamp_addr={0x44, 0x44, 0xbe, 0x1, 0x4, [{@multicast2, 0x6}, {@multicast1, 0x5}, {@multicast1, 0x7ff}, {@private=0xa010102, 0x6}, {@private=0xa010100, 0xed00000}, {@empty, 0x92b}, {@multicast1, 0x2}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x5}]}, @ra={0x94, 0x4, 0x1}]}}}}}) (rerun: 64) setsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f0000000100)={@mcast2, r1}, 0x14) (async) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_RES_GET(r2, &(0x7f0000000200)={&(0x7f0000000140), 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x18, 0x1409, 0x800, 0x70bd29, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x4010}, 0x20008010) (async) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f0000000240)=@id={0x1e, 0x3, 0x3, {0x4e24, 0x2}}, 0x10) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r2, 0x10e, 0x8, &(0x7f0000000280)=0x81, 0x4) (async, rerun: 32) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f00000002c0)={0x0, 0x8c2d, 0x9, [0x3a5b, 0xfffa, 0x7, 0x7ff, 0x7, 0x7, 0x27, 0x8, 0x5]}, &(0x7f0000000300)=0x1a) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000340)={r5, 0xfffffffa}, &(0x7f0000000380)=0x8) (async) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000003c0)=0x5, 0x4) (async, rerun: 64) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4058587a, &(0x7f0000000600)={{r2, &(0x7f0000000400)='\x00', 0x4000, &(0x7f0000000440)={@_ha_fsid={[0x9, 0x9]}, {0x49d2, 0x3ff, 0x7, 0x3}}, 0x6d3, &(0x7f0000000480), &(0x7f00000004c0)=0x9a}, {[0x97e4, 0x5, 0x14, 0x5]}, 0x1, 0xd6, &(0x7f0000000500)=""/214}) (rerun: 64) sendmsg$nl_route(r6, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)=@ipv4_getnetconf={0x1c, 0x52, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@NETCONFA_IFINDEX={0x8, 0x1, r1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) (async, rerun: 64) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000780)=r6, 0x4) (async, rerun: 64) bind$tipc(r6, &(0x7f00000007c0)=@nameseq={0x1e, 0x1, 0x0, {0x43, 0x0, 0x1}}, 0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000800)=@assoc_value, &(0x7f0000000840)=0x8) (async) sendmsg$nl_route_sched(r6, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)=@gettaction={0x1c, 0x32, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000000}, 0x2000010) (async) sendto$inet6(r6, &(0x7f0000000980)="5ea3a3fd83a587162e455657fcf4f633015506e99c74ac1a3e9f6fe5c19ff44788ad8ace9c93ee0fd15f42a46171644a6d2edd48f563de35d4216e311cf4096b77da11fc95e3c4353ceaffc25333561b138a84fbe7b3204873245f072d7e2d3d4a0c5739b07b", 0x66, 0x4004004, &(0x7f0000000a00)={0xa, 0x4e23, 0x9, @loopback}, 0x1c) (async, rerun: 64) r7 = accept4$rose(0xffffffffffffffff, 0x0, &(0x7f0000000a40), 0x800) (rerun: 64) close(r7) setsockopt$kcm_KCM_RECV_DISABLE(r6, 0x119, 0x1, &(0x7f0000000a80)=0x2, 0x4) setsockopt$inet6_opts(r0, 0x29, 0x0, &(0x7f0000000ac0)=@routing={0x6c, 0x4, 0x1, 0xba, 0x0, [@private0={0xfc, 0x0, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x22}]}, 0x28) (async, rerun: 32) r8 = socket$inet_sctp(0x2, 0x5, 0x84) (rerun: 32) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0x14, &(0x7f0000000b00), &(0x7f0000000b40)=0x4) ioctl$XFS_IOC_FSGEOMETRY(r8, 0x8100587e, &(0x7f0000000b80)) (async) recvfrom(r8, &(0x7f0000000c80)=""/194, 0xc2, 0x40, 0x0, 0x0) getsockopt$TIPC_DEST_DROPPABLE(r6, 0x10f, 0x81, 0xfffffffffffffffc, &(0x7f0000000d80)) (async, rerun: 32) getsockopt$inet_udp_int(r6, 0x11, 0x1, &(0x7f0000000dc0), &(0x7f0000000e00)=0x4) (rerun: 32) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000f40)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000f00)={&(0x7f0000000ec0)={0x30, 0x0, 0x4, 0x70bd2a, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x288f0d21}]}, 0x30}, 0x1, 0x0, 0x0, 0x240040c2}, 0x0) 713.006857ms ago: executing program 4 (id=4240): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xa, &(0x7f0000000180)=0x6, 0x4) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, &(0x7f00000000c0)) r2 = socket(0x10, 0x3, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sm3\x00'}, 0x58) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000040)={0xffffffffffffffff}) r5 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r5, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e20, @remote}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) sendmsg$kcm(r5, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0xffff, 0x2, 0x10, {0x2, 0x4e21, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x20000000) sendmsg$kcm(r5, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @dev}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="1800000000000000100100000100000051d833483cc75dd6900000000000000004000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319e2e66d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) r6 = accept4(r3, 0x0, 0x0, 0x0) sendmmsg$alg(r6, &(0x7f000000f300)=[{0x0, 0x0, &(0x7f0000003400)=[{&(0x7f00000010c0)="73d3f8ee4ed126a81f76835bc2f6cc0272d130d52e2983f3d50c16cbd2d20598c400505b5518b59eb5fdbf", 0x2b}, {0x0}], 0x2, 0x0, 0x0, 0x20000000}], 0x1, 0x18) sendmsg$nl_generic(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000640)={0x14, 0x19, 0x1, 0x0, 0x0, {0x1c, 0xd601, 0x9}}, 0x14}}, 0x0) sendmmsg$inet6(r0, &(0x7f0000000b40)=[{{&(0x7f00000000c0)={0xa, 0x20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c, &(0x7f0000000000)=[{&(0x7f0000000240)="ad", 0x1}], 0x1}}, {{&(0x7f0000000100)={0xa, 0x4e24, 0x1, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x1}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000800)=',', 0x1}], 0x1, &(0x7f0000000a00)=ANY=[@ANYBLOB="180000000000000029000000360000003b000000000000001400000000000000290000000b000000000000020000000028"], 0x58}}], 0x2, 0x0) r7 = socket$netlink(0x10, 0x3, 0x4) writev(r7, &(0x7f0000000080)=[{&(0x7f0000000e40)="480000001400190d09004beafd0d36020a8447000b4e230f00000000a2bc560119d7004f19dfb7f393d7359031033f817f00000000000000000101ff05c00e030002000000ffff01", 0x48}], 0x1) syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), r7) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f00000000c0)=0x400) r8 = getpid() ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, &(0x7f0000000140)=r8) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) r11 = gettid() sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002400)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010028bd7000ffdbdf2514000000080001000100000008001c00", @ANYRES32=r11], 0x24}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000000) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r13 = getpid() bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r12, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x1, 0x0, r13}}, 0x40) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000200)={&(0x7f0000003440)={0x2264, 0x12, 0x1, 0x70bd2c, 0x25dfdbfc, {0x1f}, [@typed={0x4, 0xb3}, @nested={0x10ef, 0x8e, 0x0, 0x1, [@generic="088497fb5ce9c7ace6d260b3b001d8f78d9a01679760f4253bbcd77e36d6aaf552267a0de2d723e8825a1c1ee14d761aeb2b3b590415a5901800", @generic="2eec774f4330c39818de911b46215dba3c5486b59d835c4720e67084e8ed2e31161e8a2e70eb3bb69494e6a8269a39069a97acf1a15f60e7d7dd3e94ca535192127340a0c594fc8054e9e88f21492f0bfccf2e3c834aedbe04f61aa29919c7d05235b40f8c96ff8f3e3bff7cb25c4e6b12f09d80bd0851b0ce7cfa32b217d51c0841047656a93fa09c45804c5c6722687a84c5212ae6c9223714693a58f9324eb4", @nested={0x4, 0xe}, @nested={0x4, 0xa7}, @generic="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", @typed={0x8, 0x122, 0x0, 0x0, @ipv4=@remote}]}, @typed={0x8, 0xa, 0x0, 0x0, @pid=r8}, @nested={0x47, 0xd3, 0x0, 0x1, [@typed={0x8, 0x11, 0x0, 0x0, @ipv4=@remote}, @generic="6ee89142474ff20172484420376b084b4a460ae960a961c79d1aa917a61f1c5796281c90d47863032347787fc6a41ca4e14ed489600b0996cbc5a0"]}, @generic="dd4c1cae55d80a9e3885cf46c0d4cdce8666f3d2cd6ca9cf8bec17fe5500c43fca8a", @typed={0x8, 0xd, 0x0, 0x0, @uid=0xee01}, @typed={0x8, 0x73, 0x0, 0x0, @fd=r4}, @nested={0x10b9, 0x31, 0x0, 0x1, [@generic="18f329dd10382e73e3be6b80d2022f0baad6e0a9efb9976b6a87275fb7b1222a6a8b1da25ae0e93c4bebdbeb27b73659d0f4e1c3399d646b75a606e16c3580ba75fa57", @typed={0x1004, 0x0, 0x0, 0x0, @binary="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"}, @nested={0x4, 0x8a}, @typed={0x8, 0x26, 0x0, 0x0, @pid=r11}, @generic="ab968210a1ec23603ac41c1c2e2b859991d7be5690175baaef30c9f3eaa51fbf73719672b7f73f5e5e785d0318b076da9e3062161aa70812474c6fb2c0896500577916def3298af1a6f90a07e4ac70aa894b972eb996", @typed={0xc, 0xf2, 0x0, 0x0, @u64=0x7}]}, @nested={0x18, 0x64, 0x0, 0x1, [@typed={0x8, 0x6e, 0x0, 0x0, @pid=r13}, @typed={0xc, 0xd4, 0x0, 0x0, @u64}]}, @generic="519780bc"]}, 0x2264}}, 0x20000000) 649.016739ms ago: executing program 4 (id=4241): r0 = socket$inet_sctp(0x2, 0x5, 0x84) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02}) readv(r1, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000980)=""/4096, 0x734}], 0x2) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$TUNSETVNETHDRSZ(r1, 0x400454d8, &(0x7f0000000100)=0x730) (async) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local}) sendmmsg$inet_sctp(r0, &(0x7f0000000500)=[{&(0x7f0000000040)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000200)=[{&(0x7f00000001c0)='\x00', 0x1}], 0x1, &(0x7f0000000340)=[@dstaddrv6={0x20, 0x84, 0x8, @mcast1}, @init={0x18, 0x84, 0x0, {0x803}}], 0x38}], 0x1, 0x0) 476.983883ms ago: executing program 1 (id=4242): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000200)="4647b4f3", 0x4}], 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x6) ioctl$sock_bt_hci(r1, 0x800448d2, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) (async) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r0, 0x12, 0x2, &(0x7f0000000300)=""/232, &(0x7f00000000c0)=0xe8) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) (async) bind$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) r3 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) (async) r4 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'veth0_to_team\x00', 0x0}) ioctl$XFS_IOC_FSGETXATTRA(r0, 0x801c582d, &(0x7f00000001c0)) socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'vlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'vlan0\x00', 0x0}) syz_emit_ethernet(0x6c, &(0x7f0000000140)={@broadcast, @link_local, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x3, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x2f, 0x0, @private=0x2000000, @multicast1}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x22eb, 0x0, 0x0, [0x9, 0x0]}, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x800, [0x3d5]}, {}, {0x8, 0x88be, 0x0, {{}, 0x1, {0x7}}}}}}}}, 0x0) (async) syz_emit_ethernet(0x6c, &(0x7f0000000140)={@broadcast, @link_local, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x3, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x2f, 0x0, @private=0x2000000, @multicast1}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x22eb, 0x0, 0x0, [0x9, 0x0]}, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x800, [0x3d5]}, {}, {0x8, 0x88be, 0x0, {{}, 0x1, {0x7}}}}}}}}, 0x0) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r4, 0x84, 0x12, &(0x7f0000000240), &(0x7f0000000280)=0x4) (async) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r4, 0x84, 0x12, &(0x7f0000000240), &(0x7f0000000280)=0x4) bind$bt_rfcomm(r0, &(0x7f0000000140)={0x1f, @any, 0x9}, 0xa) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="400d0000000000003000128008000100687372002400028008000200", @ANYRES32=r6, @ANYBLOB="08000100", @ANYRES32=r5], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) 475.682455ms ago: executing program 4 (id=4243): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20004015}, 0x2404c8c0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x40, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x7, 0xb3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000884) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000012c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000040)={@cgroup=r5, r5, 0x2f}, 0x20) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@fallback=r5, 0x2f, 0x0, 0x0, &(0x7f0000000140)=[0x0], 0x1, 0x0, &(0x7f0000000200), 0x0, 0x0}, 0x40) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=@newqdisc={0x6c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r4, {0x10}, {}, {0xa, 0x9}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x3c, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0xe, 0x1, 0x401, 0x1, 0x280, 0x0, 0x2, 0x8, 0x10000, 0x4, 0xe, 0x20, 0xe, 0x8, 0x1, 0xfffffffa}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4040098}, 0x4040804) r6 = socket(0x15, 0x0, 0x200) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'wg0\x00', 0x0}) r8 = socket$packet(0x11, 0x3, 0x300) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x8031, 0xffffffffffffffff, 0x0) r9 = socket$l2tp6(0xa, 0x2, 0x73) connect$inet6(r9, &(0x7f0000000080)={0xa, 0x4e23, 0x9, @loopback, 0x1}, 0x1c) syz_emit_ethernet(0x58, &(0x7f0000000780)={@link_local, @remote, @val, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x1a, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ns={0x87, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [{0x0, 0x0, "6738f888"}]}}}}}}, 0x0) sendto$packet(r8, &(0x7f0000000140)="bad330fbc9b5544972e7a5ea0756", 0xe, 0x40, &(0x7f00000001c0)={0x11, 0x1a, r7, 0x1, 0xd8, 0x6, @local}, 0x14) sendto$packet(r8, &(0x7f0000000380)="c1858aec1d0a06756f6608f23687", 0xe, 0x24080000, &(0x7f0000000240)={0x11, 0x19, r7, 0x1, 0x5, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) r10 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r10, &(0x7f00000002c0), 0x40000000000009f, 0x0) 298.977185ms ago: executing program 1 (id=4244): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x4, &(0x7f0000000180)=@framed={{}, [@alu={0x4, 0x0, 0x8, 0x0, 0x0, 0xffffffffffffffe0}]}, &(0x7f0000000240)='GPL\x00', 0x1}, 0x90) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32=r4, @ANYBLOB="1c005a80180001801400030024000700080001000800050002dd0f"], 0x38}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_PMKSA(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)={0x4c, r3, 0x200, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x6, 0x20}}}}, [@NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x8}, @NL80211_ATTR_PMKID={0x14, 0x55, "27c66176669a43f9951dd2493eaf4a70"}, @NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x20000810) 223.93477ms ago: executing program 1 (id=4245): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) socket$inet6(0xa, 0x5, 0x0) (async) socket$inet6(0xa, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000711237000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) socket(0x1e, 0x3, 0x0) (async) r1 = socket(0x1e, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=ANY=[@ANYBLOB="340000001100010027bd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="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"], 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r3) sendmsg$ETHTOOL_MSG_STRSET_GET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000023c0)={0x2c, r4, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2001}, 0x4010000) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0x7, &(0x7f00000003c0)={0x3c6c, 0x7, 0xffffffff, 0xe0f}, 0x10) (async) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0x7, &(0x7f00000003c0)={0x3c6c, 0x7, 0xffffffff, 0xe0f}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) socket(0x400000000010, 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000c0000000c00000002000000000000000000000d000000000000"], 0x0, 0x26}, 0x28) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) (async) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x62) (async) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x62) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x3, &(0x7f0000000000)=ANY=[@ANYRES8=r1], &(0x7f0000000080)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00}, 0x94) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00'}) r8 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r0, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYRES16=r8, @ANYRES32=r8], 0x44}}, 0x2000800) (async) sendmsg$nl_route(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r0, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYRES16=r8, @ANYRES32=r8], 0x44}}, 0x2000800) getpid() r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000000000000000000e000000000000000000"], 0x14}, 0x1, 0x0, 0x0, 0x4044840}, 0x0) (async) sendmsg$nl_generic(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000000000000000000e000000000000000000"], 0x14}, 0x1, 0x0, 0x0, 0x4044840}, 0x0) 416.886µs ago: executing program 2 (id=4246): r0 = socket(0x840000000002, 0x3, 0xfa) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r0, &(0x7f0000005240), 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) listen(r2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0xb20, 0x1c0, 0x43, 0xa0, 0x1c0, 0x98, 0xa88, 0x178, 0x178, 0xa88, 0x178, 0x49, 0x0, {[{{@ip={@loopback, @local, 0x0, 0x0, 'veth0_to_bond\x00', 'ip6erspan0\x00'}, 0x12a, 0x1a0, 0x1c0, 0x0, {0x0, 0x7a010000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x8, 0x0, 'syz0\x00'}}, @common=@unspec=@quota={{0x38}, {0x0, 0x0, 0x3, {0x100000001}}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x888, 0x8c8, 0x0, {}, [@common=@unspec=@connbytes={{0x38}, {[{0xb}]}}, @common=@unspec=@u32={{0x7e0}, {[{[{0x9}, {0x3}, {0x1, 0x1}, {0x0, 0x3}, {0x4, 0x2}, {0xb1d}, {0x3}, {0x8}, {0x2, 0x3}, {0x3}, {0x103}], [{0xe8f3, 0x5}, {0x1d, 0x6}, {0x4, 0x8}, {0x0, 0x4}, {0x4, 0xc3e}, {0x1, 0x100}, {0x6, 0x7}, {0x3, 0x3}, {0xf2, 0x3}, {0x3ff, 0x8}, {0x10, 0x3}], 0x6, 0x6}, {[{0x80, 0x3}, {0x2}, {0x6, 0x1}, {0x355cbac3, 0x2}, {0x0, 0x2}, {0x0, 0x2}, {0x7}, {0xe7, 0x2}, {0x3, 0x3}, {0x5598e8fe, 0x2}, {0x6, 0x1}], [{0x9, 0x9097}, {0x7, 0x9}, {0x7, 0xa}, {0x6, 0x8}, {0x20080, 0x5}, {0x13, 0xc0000000}, {0x40, 0xb}, {0x9, 0x6}, {0x4, 0x2}, {0x6, 0x7fffffff}, {0x7fffffff, 0x400}], 0x7}, {[{0x84, 0x2}, {}, {0x0, 0x2}, {0xffffffff, 0x1}, {}, {0x5, 0x1}, {0x5, 0x2}, {0x8, 0x3}, {0x2, 0x3}, {0x8, 0x1}, {0x7, 0x1}], [{0x9, 0x5}, {0x80, 0x32}, {0x0, 0xfffffff7}, {0xff, 0x1}, {0x7, 0x6}, {0xdb9, 0xff4}, {0x6, 0x3ff}, {0x3, 0x6}, {0x5, 0x10}, {0x9, 0x6}, {0x10000, 0x2}], 0x4, 0x2a}, {[{0x3, 0x2}, {0xa, 0x1}, {0x6, 0x1}, {0x10, 0x3}, {0x2, 0x2}, {0x2, 0x2}, {0x3, 0x1}, {0x2, 0x3}, {0x3, 0x1}, {0x2, 0x2}, {0x477d, 0x1}], [{0x4, 0xffffffff}, {0x200, 0x6}, {0x4be1, 0x4044}, {0x1}, {0x5, 0xc}, {0x3, 0x4}, {0x2, 0x4}, {0x800, 0x8000}, {0x8, 0x800}, {0x3, 0x2}, {0xe, 0x8000}], 0x4, 0xb}, {[{0x7, 0x1}, {0xd, 0x3}, {0x5}, {0x61}, {0x9}, {}, {0x2}, {0x1}, {0x0, 0x2}, {0x9, 0x3}, {0x5, 0x3}], [{0x58d, 0x3ff}, {0x0, 0x7f}, {0x6}, {0xfc9b, 0x80000001}, {0x101, 0x7}, {0x7, 0x1}, {0x7, 0x8001}, {0x2, 0x1}, {0x2, 0x2}, {0x9, 0x4cf}, {0x7, 0x10000}], 0x1}, {[{0x2}, {0x9}, {0x8, 0x1}, {0x2, 0x3}, {0x71, 0x3}, {0x0, 0x2}, {0xe, 0x2}, {0x6, 0x2}, {0x5}, {0x3000000, 0x3}, {0x6, 0x1}], [{0x9, 0x3}, {0x5, 0x7fffffff}, {0xffff, 0x4}, {0x0, 0x7}, {0x8, 0xb502}, {0x1ff, 0x86}, {0x6, 0xffffffff}, {0x3, 0x4}, {0x5, 0x6}, {0xf, 0xf93}, {0x5, 0x4}], 0x3, 0x3}, {[{0x7, 0x1}, {0x3, 0x1}, {0x45d7}, {0xfff, 0x3}, {0xc4f, 0x3}, {0x0, 0x2}, {0x400, 0x1}, {0x2, 0x1}, {0x4, 0x2}, {0xfffffffd}, {0x2}], [{0x3, 0x6}, {0xed, 0xd}, {0x80, 0xb81d}, {0x2ca, 0x80000000}, {0x8, 0xff}, {0x7, 0x45a8}, {0x8, 0x6}, {0x4, 0x1}, {0x2, 0x6}, {0xfc, 0x6}, {0xd, 0x138c}], 0x6}, {[{0x4, 0x1}, {0x800}, {0x9, 0x2}, {0xf0000000, 0x2}, {0x6, 0x3}, {0x3, 0x2}, {0x8, 0x2}, {}, {0x9}, {0x400, 0x2}, {0x8, 0x3}], [{0x7, 0xfffffffd}, {0x2}, {0x2, 0x2}, {0x8f, 0x6}, {0x7, 0x5}, {0x8, 0x7}, {0xb, 0x82c6}, {0xb1b}, {0xbd5c, 0xffff}, {0x1, 0x9b8d}, {0xec, 0x5}], 0x2, 0x6}, {[{0x8}, {0x0, 0x1}, {0xac000000}, {0x6, 0x2}, {0x2d8, 0x3}, {0x7e3ea4bc}, {0x8, 0x1}, {0x4f, 0x3}, {0x4, 0x2}, {0xfffffff7}, {0x3, 0x2}], [{0x5, 0x42}, {0x76a74689, 0x4}, {0x1}, {0x8000, 0x7}, {0x400, 0xdd}, {0xfff, 0x8}, {0x76b, 0xfffffffe}, {0xa6d00, 0xfffffff7}, {0x10001, 0xfc8d}, {0x0, 0x10001}, {0x4, 0x3}], 0x1, 0x9}, {[{0x8, 0x1}, {0x3, 0x3}, {0x18, 0x3}, {0x3ff, 0x3}, {0x7fffffff}, {0x8}, {0x1}, {0x8, 0x3}, {0xf1b6}, {0x80, 0x3}, {0x4, 0x2}], [{0x2, 0x4}, {0x3, 0xf}, {0x9, 0x6}, {0x7f, 0x8}, {0x7, 0x273e1899}, {0x4, 0x1}, {0x6, 0x3}, {0x1, 0xb7}, {0x8, 0x3}, {0x3, 0x1}, {0x7ff, 0x63}], 0xb, 0x3}, {[{0x1, 0x2}, {0x6, 0x3}, {0xffff, 0x1}, {0x1}, {0x4, 0x3}, {0x4, 0x3}, {0xaa7}, {0x100, 0x3}, {0x2}, {0xfffffff7, 0xb90af65875a5dc08}, {0x4, 0x3}], [{0x3}, {0x8001, 0x7}, {0x10000, 0x7524}, {0x73d, 0x4}, {0x0, 0x280000}, {0x3, 0x3af}, {0x5, 0x2}, {0x101, 0xbf}, {0x10000, 0x6}, {0x3, 0x800}], 0x8, 0x5}], 0x3}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "f1c098b60204ed02d82cf440fef5497b80c29d381d41116000"}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0xb80) setsockopt$sock_int(r0, 0x1, 0x3d, &(0x7f00000000c0), 0x4) 0s ago: executing program 0 (id=4247): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, 0x0, &(0x7f0000000040)) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0xfc, 0x9, 0xa, 0x801, 0x0, 0x20, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_EXPR={0x10, 0x11, 0x0, 0x1, @lookup={{0xb}, @void}}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x7}, @NFTA_SET_USERDATA={0xb9, 0xd, 0x1, 0x0, "f78236200cc8028dc2e3a3044da84f3c1c22b8e6368b33dc54f50c44fd2c5a27ca77a9649f16b195ec682b87ad1a925629062a3fa418ff551ba69be10859315a8a4d92fc6823455d250071fef07d742ab014e7c7acbf3979643acef890125ec68c296754abd043452b1b7ef65af4e8c6635d905ba31a1777a53ee4e4a9788001c9568614dd3bce793126fd6125655eaaeee93f34f0d87ccf46597d36745463e4508ac4e49abb436c33c0a2381517cb0c8ea6ff7dd2"}]}], {0x14, 0x10}}, 0x144}, 0x1, 0x0, 0x0, 0x44001}, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="7fff0000000000002800128009000100766c616e000000001800028006000100340200000c0002001f0000001e00000008000500", @ANYRES32=r3], 0x50}}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x891c, &(0x7f0000000200)={'wlan0\x00', {0x2, 0x4e23, @loopback}}) r6 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r6, 0x800442d2, &(0x7f00000000c0)={0x0, 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_EVENTS(r8, 0x84, 0xb, &(0x7f0000000580), &(0x7f0000000180)=0x1) r9 = socket(0x1, 0x803, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="500000001000210400000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="adffa888e16000002800128009000100766c616e00000000180002800c0002000e0000000a000000060001000001000008000500", @ANYRES32=r10], 0x50}}, 0x2) kernel console output (not intermixed with test programs): ve opt len 3 is not a multiple of 4. [ 274.611430][T14731] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2484'. [ 274.690463][T14738] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2483'. [ 274.869673][T14750] netlink: 88 bytes leftover after parsing attributes in process `syz.2.2488'. [ 274.976389][T14757] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2491'. [ 275.008934][T14760] syzkaller0: Caught tx_queue_len zero misconfig [ 275.046735][T14760] syzkaller0: entered promiscuous mode [ 275.075557][T14760] syzkaller0: entered allmulticast mode [ 275.503710][T14791] netlink: 'syz.0.2504': attribute type 21 has an invalid length. [ 275.527589][T14791] netlink: 168 bytes leftover after parsing attributes in process `syz.0.2504'. [ 276.137927][T14829] syzkaller0: entered promiscuous mode [ 276.143472][T14829] syzkaller0: entered allmulticast mode [ 276.167602][T14835] : renamed from hsr0 (while UP) [ 276.297235][T14843] netlink: 'syz.0.2526': attribute type 25 has an invalid length. [ 276.308745][T14841] dvmrp0: entered allmulticast mode [ 276.415171][T14847] syzkaller1: entered promiscuous mode [ 276.426063][T14847] syzkaller1: entered allmulticast mode [ 276.431665][T14849] netlink: 'syz.1.2529': attribute type 1 has an invalid length. [ 276.431696][T14849] netlink: 'syz.1.2529': attribute type 1 has an invalid length. [ 276.431709][T14849] netlink: 'syz.1.2529': attribute type 1 has an invalid length. [ 276.431721][T14849] netlink: 'syz.1.2529': attribute type 2 has an invalid length. [ 276.431734][T14849] netlink: 'syz.1.2529': attribute type 1 has an invalid length. [ 276.431746][T14849] netlink: 'syz.1.2529': attribute type 1 has an invalid length. [ 277.007241][T14882] gre2: entered promiscuous mode [ 277.012317][T14882] gre2: entered allmulticast mode [ 277.382512][T14917] syzkaller1: entered promiscuous mode [ 277.397480][T14917] syzkaller1: entered allmulticast mode [ 277.700930][T14939] syzkaller0: entered promiscuous mode [ 277.706780][T14939] syzkaller0: entered allmulticast mode [ 277.768720][T14945] lo: Caught tx_queue_len zero misconfig [ 277.785580][T14947] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 277.862547][T14947] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 277.925256][T14957] gretap0: entered promiscuous mode [ 278.243917][T14980] syzkaller0: entered promiscuous mode [ 278.258129][T14980] syzkaller0: entered allmulticast mode [ 278.799849][T15015] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048) [ 279.105466][T15027] bond10: option mode: invalid value (20) [ 279.133240][T15027] bond10 (unregistering): Released all slaves [ 279.656651][T15056] x_tables: duplicate underflow at hook 3 [ 279.897154][T15074] __nla_validate_parse: 24 callbacks suppressed [ 279.897172][T15074] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2591'. [ 280.128348][T15081] bond11: option mode: invalid value (22) [ 280.184315][T15081] bond11 (unregistering): Released all slaves [ 280.409656][T15096] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2597'. [ 280.450004][T15103] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2599'. [ 280.550254][T15107] bond13: Removing last arp target with arp_interval on [ 280.649330][T15116] bridge: RTM_NEWNEIGH with invalid state 0x8 [ 280.799468][T15129] x_tables: duplicate underflow at hook 1 [ 280.981705][T15140] bond14: option mode: invalid value (23) [ 280.988650][T15140] bond14 (unregistering): Released all slaves [ 281.152554][T15152] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2612'. [ 281.182369][T15152] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 281.205657][T15164] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2615'. [ 281.331875][T15173] syzkaller0: entered promiscuous mode [ 281.337731][T15173] syzkaller0: entered allmulticast mode [ 281.679062][T15189] veth0: Caught tx_queue_len zero misconfig [ 284.045022][T15149] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 284.212661][T15196] validate_nla: 5 callbacks suppressed [ 284.212680][T15196] netlink: 'syz.0.2623': attribute type 9 has an invalid length. [ 284.233485][T15196] netlink: 'syz.0.2623': attribute type 6 has an invalid length. [ 284.404389][T15211] syzkaller0: entered promiscuous mode [ 284.420212][T15211] syzkaller0: entered allmulticast mode [ 284.451875][T15215] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 284.479217][T15217] netlink: 1 bytes leftover after parsing attributes in process `syz.2.2632'. [ 284.500655][T15221] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2633'. [ 284.706319][T15234] IPVS: set_ctl: invalid protocol: 50 0.0.0.0:20001 [ 284.761609][T15239] mac80211_hwsim hwsim11 wlan1: entered promiscuous mode [ 284.776409][T15239] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode [ 284.802296][T15239] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 284.819273][T15242] vcan0: tx address claim with dlc 1 [ 285.041394][T15263] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2645'. [ 285.065541][T15257] netlink: 'syz.1.2643': attribute type 1 has an invalid length. [ 285.199304][T15263] netlink: 'syz.3.2645': attribute type 33 has an invalid length. [ 285.275013][T15263] bond11: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 285.340334][T15263] bond11 (unregistering): Released all slaves [ 285.834899][T15247] lec:lec_atm_close: lec0: Shut down! [ 285.992431][T15308] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2654'. [ 286.117862][T15313] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2657'. [ 286.217191][T15322] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2660'. [ 286.237912][T15322] ip6tnl0: Caught tx_queue_len zero misconfig [ 286.312915][T15331] x_tables: duplicate entry at hook 2 [ 286.705421][T15356] netlink: 27 bytes leftover after parsing attributes in process `syz.3.2670'. [ 286.874869][T15373] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2673'. [ 287.042714][T15376] bond14: entered promiscuous mode [ 287.055002][T15377] macvlan2: entered promiscuous mode [ 287.060523][T15377] macvlan2: entered allmulticast mode [ 287.067620][T15377] bond14: (slave macvlan2): Opening slave failed [ 287.101982][T15384] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap5 [ 287.116708][ T5935] lec:lec_start_xmit: lec0:No lecd attached [ 287.123189][T15384] gretap5: default qdisc (pfifo_fast) fail, fallback to noqueue [ 287.132253][T15384] gretap5: entered promiscuous mode [ 287.140808][T15384] gretap5: entered allmulticast mode [ 287.157233][T15389] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2679'. [ 287.176636][T15389] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2679'. [ 287.187842][T15388] lo: entered promiscuous mode [ 287.199804][T15388] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 287.204708][T15389] netlink: 'syz.1.2679': attribute type 14 has an invalid length. [ 287.224213][T15389] netlink: 'syz.1.2679': attribute type 13 has an invalid length. [ 287.234109][T15382] netlink: 'syz.3.2677': attribute type 4 has an invalid length. [ 287.444508][T15407] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2685'. [ 287.520576][T15414] x_tables: duplicate underflow at hook 2 [ 287.743050][T15429] netlink: 'syz.3.2692': attribute type 22 has an invalid length. [ 287.776176][T15429] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2692'. [ 287.838838][ T36] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 287.849287][ T36] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 287.886801][ T36] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 287.895513][ T36] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 288.263569][T15475] tipc: Failed to remove unknown binding: 66,0,0/2858809501:893189227/893189228 [ 288.658898][T15493] pimreg: entered allmulticast mode [ 288.698525][T15497] netlink: 'syz.1.2708': attribute type 1 has an invalid length. [ 288.699831][T15476] pimreg: left allmulticast mode [ 288.987624][T15500] erspan0: left promiscuous mode [ 288.993842][T15500] erspan0: left allmulticast mode [ 289.141610][T15500] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 289.543181][T15545] bridge0: Caught tx_queue_len zero misconfig [ 289.678635][T15544] syzkaller0: entered promiscuous mode [ 289.686322][T15544] syzkaller0: entered allmulticast mode [ 290.039365][T15583] syzkaller0: entered promiscuous mode [ 290.044869][T15583] syzkaller0: entered allmulticast mode [ 290.267038][T15602] netlink: 'syz.3.2734': attribute type 5 has an invalid length. [ 290.283651][T15602] __nla_validate_parse: 7 callbacks suppressed [ 290.283664][T15602] netlink: 140 bytes leftover after parsing attributes in process `syz.3.2734'. [ 290.419803][T15620] syzkaller0: entered promiscuous mode [ 290.425305][T15620] syzkaller0: entered allmulticast mode [ 290.437060][T15620] tipc: Enabled bearer , priority 0 [ 290.453082][T15614] tipc: Resetting bearer [ 290.527164][T15614] tipc: Disabling bearer [ 291.034049][T15661] syzkaller0: entered promiscuous mode [ 291.044477][T15658] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2750'. [ 291.076082][T15661] syzkaller0: entered allmulticast mode [ 291.087553][T15658] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2750'. [ 291.102135][T15672] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2751'. [ 291.241172][T15679] openvswitch: netlink: Unexpected mask (mask=2200040, allowed=2010048) [ 291.380436][T15685] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2754'. [ 292.775364][T15712] netlink: 'syz.2.2763': attribute type 10 has an invalid length. [ 292.793632][T15712] bridge_slave_1: left allmulticast mode [ 292.820128][T15712] bridge_slave_1: left promiscuous mode [ 292.823905][T15720] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2765'. [ 292.831205][T15712] bridge0: port 2(bridge_slave_1) entered disabled state [ 292.846085][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5730 ms [ 292.854306][ C0] lec:lec_tx_timeout: lec0 [ 292.859013][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 292.870664][T15712] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 292.962781][T15726] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 292.992761][T15726] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 293.018721][T15731] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 293.048839][T15731] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 293.279209][T15749] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2773'. [ 293.279474][T15750] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2773'. [ 293.335192][T15752] syzkaller0: entered promiscuous mode [ 293.340974][T15752] syzkaller0: entered allmulticast mode [ 293.541505][T15760] syzkaller0: entered promiscuous mode [ 293.549167][T15760] syzkaller0: entered allmulticast mode [ 293.860023][T15786] netlink: 'syz.2.2786': attribute type 10 has an invalid length. [ 293.878156][T15771] bond11 (unregistering): Released all slaves [ 294.118985][T15795] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2789'. [ 294.292430][T15807] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 294.310968][T15807] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 294.365152][T15810] ip6_vti0 speed is unknown, defaulting to 1000 [ 294.405160][T15810] ip6_vti0 speed is unknown, defaulting to 1000 [ 294.426775][T15815] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2792'. [ 294.449385][T15810] ip6_vti0 speed is unknown, defaulting to 1000 [ 294.769511][T15825] bond10: entered promiscuous mode [ 294.774787][T15825] bond10: entered allmulticast mode [ 294.780978][T15825] 8021q: adding VLAN 0 to HW filter on device bond10 [ 294.787670][T15810] infiniband syz2: set down [ 294.787727][T15810] infiniband syz2: added ip6_vti0 [ 294.806990][ T5830] ip6_vti0 speed is unknown, defaulting to 1000 [ 294.842357][T15810] RDS/IB: syz2: added [ 294.847828][T15810] smc: adding ib device syz2 with port count 1 [ 294.856331][T15810] smc: ib device syz2 port 1 has no pnetid [ 294.879980][ T5901] ip6_vti0 speed is unknown, defaulting to 1000 [ 294.890546][T15810] ip6_vti0 speed is unknown, defaulting to 1000 [ 295.208632][T15849] team0: Caught tx_queue_len zero misconfig [ 295.381504][T15851] openvswitch: netlink: Invalid VLAN frame [ 295.417086][T15810] ip6_vti0 speed is unknown, defaulting to 1000 [ 295.500370][T15862] netlink: 'syz.2.2812': attribute type 1 has an invalid length. [ 295.518373][T15862] __nla_validate_parse: 1 callbacks suppressed [ 295.518389][T15862] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2812'. [ 295.626093][T15868] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 295.671478][T15868] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 295.725475][T15880] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2817'. [ 295.763106][T15882] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2819'. [ 295.822011][T15886] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2820'. [ 295.834794][T15886] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2820'. [ 295.836568][T15810] ip6_vti0 speed is unknown, defaulting to 1000 [ 296.080364][T15810] ip6_vti0 speed is unknown, defaulting to 1000 [ 296.209521][T15904] netlink: 'syz.4.2826': attribute type 4 has an invalid length. [ 296.326671][T15810] ip6_vti0 speed is unknown, defaulting to 1000 [ 296.483768][T15916] vlan1: entered allmulticast mode [ 296.492696][T15916] geneve1: entered allmulticast mode [ 296.870827][T15942] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 296.887418][T15947] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2839'. [ 296.903854][T15950] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2837'. [ 296.905035][T15947] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2839'. [ 296.913222][T15950] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2837'. [ 296.944475][T15953] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 296.956672][T15942] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 296.977722][T15950] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2837'. [ 296.985392][T15955] batadv_slave_0: Caught tx_queue_len zero misconfig [ 297.336697][T15978] veth0_macvtap (unregistering): left allmulticast mode [ 297.580614][T15990] netlink: 'syz.4.2848': attribute type 1 has an invalid length. [ 297.593201][T15990] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 297.660624][T15996] openvswitch: netlink: Tunnel attr 10 has unexpected len 0 expected 2 [ 297.768358][T16002] netlink: 'syz.4.2851': attribute type 25 has an invalid length. [ 297.865943][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 297.874016][ C0] lec:lec_tx_timeout: lec0 [ 297.879694][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 298.208788][T16037] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 298.228109][T16037] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 298.465516][T16062] netlink: 'syz.0.2865': attribute type 25 has an invalid length. [ 298.619880][T16070] netlink: 'syz.0.2867': attribute type 11 has an invalid length. [ 298.655461][T16070] netlink: 'syz.0.2867': attribute type 4 has an invalid length. [ 298.816948][ T51] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 298.825644][ T51] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 298.834453][ T51] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 298.842707][ T51] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 298.851219][ T51] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 298.888401][T16082] netlink: 'syz.1.2873': attribute type 1 has an invalid length. [ 298.896549][T16079] ip6_vti0 speed is unknown, defaulting to 1000 [ 299.024085][T16082] 8021q: adding VLAN 0 to HW filter on device bond0 [ 299.110719][T16083] bond0: (slave geneve2): making interface the new active one [ 299.157976][T16083] bond0: (slave geneve2): Enslaving as an active interface with an up link [ 299.340750][T16104] netlink: 'syz.1.2877': attribute type 25 has an invalid length. [ 299.463493][T16114] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 299.535052][T16118] delete_channel: no stack [ 299.642339][T16128] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 299.669361][T16079] chnl_net:caif_netlink_parms(): no params data found [ 299.678044][T16128] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 299.854082][T16079] bridge0: port 1(bridge_slave_0) entered blocking state [ 299.866493][T16079] bridge0: port 1(bridge_slave_0) entered disabled state [ 299.873763][T16079] bridge_slave_0: entered allmulticast mode [ 299.886987][T16079] bridge_slave_0: entered promiscuous mode [ 299.901799][T16079] bridge0: port 2(bridge_slave_1) entered blocking state [ 299.909515][T16079] bridge0: port 2(bridge_slave_1) entered disabled state [ 299.918767][T16079] bridge_slave_1: entered allmulticast mode [ 299.926910][T16079] bridge_slave_1: entered promiscuous mode [ 299.971360][T16079] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 299.984383][T16079] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 300.022888][T16079] team0: Port device team_slave_0 added [ 300.038495][T16079] team0: Port device team_slave_1 added [ 300.071314][T16079] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 300.078445][T16079] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 300.104730][T16079] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 300.117527][T16079] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 300.124561][T16079] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 300.151476][T16079] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 300.176914][T16154] ip6_vti0 speed is unknown, defaulting to 1000 [ 300.215673][T16079] hsr_slave_0: entered promiscuous mode [ 300.227201][T16079] hsr_slave_1: entered promiscuous mode [ 300.250662][T16079] debugfs: 'hsr0' already exists in 'hsr' [ 300.267634][T16079] Cannot create hsr debugfs directory [ 300.378510][T16162] bond8: Invalid ad_actor_system MAC address. [ 300.384807][T16162] bond8: option ad_actor_system: invalid value (1) [ 300.414147][T16162] bond8 (unregistering): Released all slaves [ 300.571900][T16171] netlink: 'syz.4.2892': attribute type 25 has an invalid length. [ 300.837638][T16183] __nla_validate_parse: 14 callbacks suppressed [ 300.837656][T16183] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2896'. [ 300.930971][T16079] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 300.941838][ T5832] Bluetooth: hci5: command tx timeout [ 300.949372][T16079] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.135611][T16079] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 301.161526][T16079] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.311293][T16079] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 301.334848][T16079] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.520096][T16079] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 301.531543][T16079] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.555572][T16216] pim6reg1: entered promiscuous mode [ 301.561001][T16216] pim6reg1: entered allmulticast mode [ 301.709978][T16223] netlink: 'syz.1.2906': attribute type 1 has an invalid length. [ 301.720304][T16222] netlink: 'syz.2.2905': attribute type 25 has an invalid length. [ 301.745229][T16079] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 301.764105][T16225] netlink: 'syz.4.2907': attribute type 3 has an invalid length. [ 301.778000][T16225] netlink: 4552 bytes leftover after parsing attributes in process `syz.4.2907'. [ 301.789049][T16225] netlink: 4552 bytes leftover after parsing attributes in process `syz.4.2907'. [ 301.813010][T16223] bond8: entered promiscuous mode [ 301.818541][T16223] 8021q: adding VLAN 0 to HW filter on device bond8 [ 301.825652][T16079] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 301.842647][T16079] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 301.871788][T16228] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2908'. [ 301.885569][T16079] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 301.930652][T16223] bond8: (slave bridge6): making interface the new active one [ 301.939146][T16223] bridge6: entered promiscuous mode [ 301.953368][T16223] bridge6: left promiscuous mode [ 301.989657][T16241] netlink: 'syz.2.2911': attribute type 1 has an invalid length. [ 302.047238][T16235] syzkaller1: entered promiscuous mode [ 302.052994][T16235] syzkaller1: entered allmulticast mode [ 302.245140][T16254] netlink: 'syz.2.2913': attribute type 2 has an invalid length. [ 302.249264][T16259] netlink: 284 bytes leftover after parsing attributes in process `syz.1.2915'. [ 302.253036][T16254] netlink: 'syz.2.2913': attribute type 1 has an invalid length. [ 302.314126][T16255] netlink: 'syz.0.2914': attribute type 6 has an invalid length. [ 302.328504][T16079] 8021q: adding VLAN 0 to HW filter on device bond0 [ 302.345817][T16255] netlink: 260 bytes leftover after parsing attributes in process `syz.0.2914'. [ 302.375183][T16262] netlink: 'syz.4.2916': attribute type 1 has an invalid length. [ 302.387315][T16262] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2916'. [ 302.391117][T16079] 8021q: adding VLAN 0 to HW filter on device team0 [ 302.400032][T16264] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 302.448068][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 302.455184][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 302.495042][T16263] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 302.543592][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 302.550770][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 302.571606][T16262] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2916'. [ 302.591935][T16273] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2916'. [ 302.885969][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 302.894026][ C0] lec:lec_tx_timeout: lec0 [ 302.898832][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 302.974462][T16079] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 303.006067][ T5832] Bluetooth: hci5: command tx timeout [ 303.108546][T16079] veth0_vlan: entered promiscuous mode [ 303.170601][T16079] veth1_vlan: entered promiscuous mode [ 303.223337][T16316] bond16: option mode: invalid value (23) [ 303.253868][T16316] bond16 (unregistering): Released all slaves [ 303.333308][T16336] 8021q: VLANs not supported on ip_vti0 [ 303.342216][T16336] IPVS: set_ctl: invalid protocol: 4 0.0.0.0:20001 [ 303.421730][T16079] veth0_macvtap: entered promiscuous mode [ 303.442601][T16332] smc: net device team0 applied user defined pnetid SYZ2 [ 303.467942][T16079] veth1_macvtap: entered promiscuous mode [ 303.494212][T16343] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2937'. [ 303.539039][T16079] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 303.569330][T16079] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 303.582008][T16347] netlink: 'syz.4.2938': attribute type 39 has an invalid length. [ 303.618369][T12385] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.684558][T12385] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.694747][T12385] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.704234][T12385] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.907636][T16363] sctp: [Deprecated]: syz.0.2943 (pid 16363) Use of struct sctp_assoc_value in delayed_ack socket option. [ 303.907636][T16363] Use struct sctp_sack_info instead [ 303.964951][T10073] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 303.979317][T10073] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 304.065109][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 304.093746][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 304.191048][T16380] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 304.504048][ T51] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 304.516184][ T51] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 304.524323][ T51] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 304.542068][ T51] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 304.549713][ T51] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 304.592489][T16393] ip6_vti0 speed is unknown, defaulting to 1000 [ 304.819582][T16406] 8021q: adding VLAN 0 to HW filter on device bond16 [ 305.020657][T16423] IPVS: set_ctl: invalid protocol: 22 10.1.1.2:20000 [ 305.086264][ T51] Bluetooth: hci5: command tx timeout [ 305.161315][ T36] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 305.180238][ T36] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.281942][ T36] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 305.293801][ T36] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.311674][T16439] veth0_to_hsr: Caught tx_queue_len zero misconfig [ 305.379568][ T36] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 305.390812][ T36] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.442756][T16393] chnl_net:caif_netlink_parms(): no params data found [ 305.505063][ T36] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 305.525357][ T36] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.629143][T16452] ip6_vti0 speed is unknown, defaulting to 1000 [ 305.665140][T16393] bridge0: port 1(bridge_slave_0) entered blocking state [ 305.708447][T16393] bridge0: port 1(bridge_slave_0) entered disabled state [ 305.742340][T16393] bridge_slave_0: entered allmulticast mode [ 305.750554][T16393] bridge_slave_0: entered promiscuous mode [ 305.835700][T16393] bridge0: port 2(bridge_slave_1) entered blocking state [ 305.853291][T16393] bridge0: port 2(bridge_slave_1) entered disabled state [ 305.862179][T16393] bridge_slave_1: entered allmulticast mode [ 305.870490][T16393] bridge_slave_1: entered promiscuous mode [ 305.996564][T16393] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 306.009685][T16472] validate_nla: 9 callbacks suppressed [ 306.009700][T16472] netlink: 'syz.0.2977': attribute type 4 has an invalid length. [ 306.043155][T16393] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 306.164034][T16393] team0: Port device team_slave_0 added [ 306.178101][ T36] bridge_slave_0: left allmulticast mode [ 306.184768][T16482] netlink: 'syz.3.2980': attribute type 1 has an invalid length. [ 306.193737][ T36] bridge_slave_0: left promiscuous mode [ 306.204278][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 306.213566][T16482] __nla_validate_parse: 9 callbacks suppressed [ 306.213580][T16482] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2980'. [ 306.397848][ T36] bond8 (unregistering): (slave ip6gretap1): Releasing active interface [ 306.606464][ T51] Bluetooth: hci4: command tx timeout [ 306.921219][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 306.933309][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 306.943703][ T36] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 306.953512][ T36] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 306.963852][ T36] bond0 (unregistering): Released all slaves [ 306.974022][ T36] bond1 (unregistering): Released all slaves [ 306.989342][ T36] bond2 (unregistering): (slave veth3): Releasing active interface [ 306.998654][ T36] bond2 (unregistering): Released all slaves [ 307.012918][ T36] bond3 (unregistering): Released all slaves [ 307.025702][ T36] bond4 (unregistering): Released all slaves [ 307.040057][ T36] bond5 (unregistering): Released all slaves [ 307.051794][ T36] bond6 (unregistering): Released all slaves [ 307.065564][ T36] bond7 (unregistering): Released all slaves [ 307.079523][ T36] bond8 (unregistering): Released all slaves [ 307.093274][ T36] bond9 (unregistering): Released all slaves [ 307.106469][ T36] bond10 (unregistering): Released all slaves [ 307.129146][T16393] team0: Port device team_slave_1 added [ 307.152623][T16485] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2981'. [ 307.176598][ T51] Bluetooth: hci5: command tx timeout [ 307.278478][T16512] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 307.287740][ T36] tipc: Left network mode [ 307.378814][T16393] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 307.385887][T16519] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2986'. [ 307.391942][T16393] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 307.432879][T16393] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 307.461718][T16393] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 307.470025][T16393] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 307.496963][T16393] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 307.526755][T16514] bond0: (slave rose0): Error: Device can not be enslaved while up [ 307.801404][T16393] hsr_slave_0: entered promiscuous mode [ 307.818790][T16393] hsr_slave_1: entered promiscuous mode [ 307.835081][T16393] debugfs: 'hsr0' already exists in 'hsr' [ 307.841963][T16393] Cannot create hsr debugfs directory [ 307.906385][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 307.914405][ C0] lec:lec_tx_timeout: lec0 [ 307.919765][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 307.990732][T16540] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2990'. [ 308.030586][T16528] syzkaller0: entered promiscuous mode [ 308.037290][T16528] syzkaller0: entered allmulticast mode [ 308.686694][ T51] Bluetooth: hci4: command tx timeout [ 309.391577][T16560] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2993'. [ 309.468678][T16567] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2995'. [ 309.659586][T16583] netlink: 212336 bytes leftover after parsing attributes in process `syz.1.2998'. [ 309.916340][T16602] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 310.766598][ T51] Bluetooth: hci4: command tx timeout [ 310.997793][T16589] geneve2: entered promiscuous mode [ 311.003104][T16589] geneve2: entered allmulticast mode [ 311.033004][T16594] kthread_run failed with err -4 [ 311.183442][T16618] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3005'. [ 311.383688][T16633] openvswitch: netlink: IP tunnel attribute has 6 unknown bytes. [ 311.399725][T16627] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3009'. [ 311.420449][T16638] netlink: 164 bytes leftover after parsing attributes in process `syz.1.3010'. [ 311.588151][T16640] netlink: 128 bytes leftover after parsing attributes in process `syz.4.3012'. [ 311.616886][T16652] netlink: 128 bytes leftover after parsing attributes in process `syz.4.3012'. [ 311.742700][ T36] hsr_slave_0: left promiscuous mode [ 311.743814][T16655] sctp: [Deprecated]: syz.3.3016 (pid 16655) Use of int in maxseg socket option. [ 311.743814][T16655] Use struct sctp_assoc_value instead [ 311.764503][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 311.786377][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 311.836911][ T36] veth1_macvtap: left promiscuous mode [ 311.842712][ T36] veth0_macvtap: left promiscuous mode [ 311.857713][ T36] : left promiscuous mode [ 311.866231][ T36] veth0_vlan: left promiscuous mode [ 312.178006][ T36] team0 (unregistering): Port device team_slave_1 removed [ 312.192057][ T36] team0 (unregistering): Port device team_slave_0 removed [ 312.263648][ T36] team0 (unregistering): Port device dummy0 removed [ 312.433757][T16684] pimreg: entered allmulticast mode [ 312.847694][ T51] Bluetooth: hci4: command tx timeout [ 312.926034][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 312.934083][ C0] lec:lec_tx_timeout: lec0 [ 312.938706][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 312.971619][T16731] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3032'. [ 313.197973][T16393] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 313.253373][T16393] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 313.318737][ T36] IPVS: stop unused estimator thread 0... [ 313.331920][T16393] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 313.361694][T16393] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 313.432218][T16752] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3039'. [ 313.685703][T16393] 8021q: adding VLAN 0 to HW filter on device bond0 [ 313.743899][T16393] 8021q: adding VLAN 0 to HW filter on device team0 [ 313.798780][T12385] bridge0: port 1(bridge_slave_0) entered blocking state [ 313.805941][T12385] bridge0: port 1(bridge_slave_0) entered forwarding state [ 313.864243][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 313.871417][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 314.016423][T16794] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3052'. [ 314.073497][T16802] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3054'. [ 314.150900][T16804] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3055'. [ 314.458713][T16828] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3059'. [ 314.673082][T16393] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 314.798575][T16393] veth0_vlan: entered promiscuous mode [ 314.838735][T16393] veth1_vlan: entered promiscuous mode [ 314.914072][T16393] veth0_macvtap: entered promiscuous mode [ 314.940125][T16393] veth1_macvtap: entered promiscuous mode [ 315.071757][T16873] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 315.098334][T16393] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 315.108372][T16873] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 315.127888][T16393] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 315.177460][ T36] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.199864][ T36] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.228005][ T36] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.238617][ T36] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.375331][T12385] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 315.392806][T12385] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 315.468039][T12385] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 315.481113][T12385] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 315.658368][T16898] netlink: 'syz.4.3075': attribute type 21 has an invalid length. [ 315.679615][T16898] netlink: 'syz.4.3075': attribute type 1 has an invalid length. [ 315.702848][T16898] netlink: 'syz.4.3075': attribute type 1 has an invalid length. [ 315.798457][T16906] syzkaller0: entered promiscuous mode [ 315.814159][T16906] syzkaller0: entered allmulticast mode [ 316.233259][ T5832] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 316.244536][ T5832] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 316.252818][ T5832] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 316.264698][ T5832] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 316.273003][ T5832] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 316.435586][T16929] ip6_vti0 speed is unknown, defaulting to 1000 [ 316.457648][T16933] syzkaller0: entered promiscuous mode [ 316.463130][T16933] syzkaller0: entered allmulticast mode [ 317.041928][T16955] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 317.079341][T16955] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 317.263098][T16952] __nla_validate_parse: 3 callbacks suppressed [ 317.263115][T16952] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.3087'. [ 317.663369][T16983] bond1: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 317.676587][T16983] bond1 (unregistering): Released all slaves [ 317.723247][T16929] chnl_net:caif_netlink_parms(): no params data found [ 317.945993][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 317.954012][ C0] lec:lec_tx_timeout: lec0 [ 317.959081][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 317.960109][T17001] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3096'. [ 318.082157][T16929] bridge0: port 1(bridge_slave_0) entered blocking state [ 318.096189][T16929] bridge0: port 1(bridge_slave_0) entered disabled state [ 318.111413][T16929] bridge_slave_0: entered allmulticast mode [ 318.152973][T16929] bridge_slave_0: entered promiscuous mode [ 318.168534][T16929] bridge0: port 2(bridge_slave_1) entered blocking state [ 318.176312][T16929] bridge0: port 2(bridge_slave_1) entered disabled state [ 318.185879][T16929] bridge_slave_1: entered allmulticast mode [ 318.202347][T16929] bridge_slave_1: entered promiscuous mode [ 318.287951][T17020] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3103'. [ 318.332558][T16929] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 318.353972][T16929] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 318.368141][ T51] Bluetooth: hci3: command tx timeout [ 318.436679][T16929] team0: Port device team_slave_0 added [ 318.451689][T16929] team0: Port device team_slave_1 added [ 318.481186][T17027] openvswitch: netlink: Flow key attribute not present in set flow. [ 318.609223][T16929] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 318.636004][T16929] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 318.700583][T16929] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 318.748014][T16929] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 318.776033][T16929] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 318.814057][T16929] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 318.828880][T17049] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3111'. [ 318.871165][T17049] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 318.898327][T17049] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 318.980330][T17060] netlink: 'syz.0.3115': attribute type 8 has an invalid length. [ 319.065643][T16929] hsr_slave_0: entered promiscuous mode [ 319.105376][T16929] hsr_slave_1: entered promiscuous mode [ 319.117817][T16929] debugfs: 'hsr0' already exists in 'hsr' [ 319.123558][T16929] Cannot create hsr debugfs directory [ 319.161399][T17071] tipc: Can't bind to reserved service type 1 [ 319.212250][T17071] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 319.422807][T17087] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 319.494428][T16929] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 319.508293][T17089] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 319.530526][T16929] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 35441 - 0 [ 319.543201][T17092] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3125'. [ 319.563416][T17094] sctp: [Deprecated]: syz.1.3126 (pid 17094) Use of int in maxseg socket option. [ 319.563416][T17094] Use struct sctp_assoc_value instead [ 319.563767][T16929] netdevsim netdevsim4 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 319.617022][T17089] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 319.743090][T17112] netlink: 'syz.1.3129': attribute type 2 has an invalid length. [ 319.783424][T17112] 9: entered promiscuous mode [ 319.798410][T16929] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 319.816949][T16929] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 35441 - 0 [ 319.839519][T16929] netdevsim netdevsim4 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 319.945306][T16929] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 319.961125][T16929] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 35441 - 0 [ 319.990167][T16929] netdevsim netdevsim4 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 320.075525][T16929] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 320.098396][T16929] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 35441 - 0 [ 320.108639][T16929] netdevsim netdevsim4 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 320.331451][T17138] bond0: option arp_interval: mode dependency failed, not supported in mode balance-alb(6) [ 320.338458][T17140] netlink: 'syz.3.3134': attribute type 30 has an invalid length. [ 320.393572][T16929] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 320.423351][T16929] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 320.447000][ T51] Bluetooth: hci3: command tx timeout [ 320.459015][T16929] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 320.507009][T16929] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 320.610459][T17159] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3140'. [ 320.620534][T17151] netlink: 'syz.3.3138': attribute type 1 has an invalid length. [ 320.693369][T17151] bond2: (slave gretap1): making interface the new active one [ 320.707540][T17151] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 320.770175][T17151] unsupported nlmsg_type 40 [ 320.813999][T16929] 8021q: adding VLAN 0 to HW filter on device bond0 [ 320.835631][T16929] 8021q: adding VLAN 0 to HW filter on device team0 [ 320.857860][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 320.864984][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 320.930569][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 320.931064][T17175] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 320.937730][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 321.119532][T17191] netlink: 'syz.3.3147': attribute type 12 has an invalid length. [ 321.121335][T17193] netlink: 'syz.1.3150': attribute type 1 has an invalid length. [ 321.142741][T17193] netlink: 'syz.1.3150': attribute type 2 has an invalid length. [ 321.154320][T17191] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3147'. [ 321.159467][T17193] netlink: 'syz.1.3150': attribute type 1 has an invalid length. [ 321.192880][T17193] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3150'. [ 321.198976][ T12] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 321.211644][T17191] netlink: 'syz.3.3147': attribute type 12 has an invalid length. [ 321.221833][ T12] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 321.230792][T17200] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3149'. [ 321.242209][T17191] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3147'. [ 321.251038][ T12] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 321.251074][ T12] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 321.334138][T17193] ip6_vti0 speed is unknown, defaulting to 1000 [ 321.409142][T16929] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 321.497535][T17207] syzkaller0: entered promiscuous mode [ 321.513432][T17207] syzkaller0: entered allmulticast mode [ 322.529155][ T51] Bluetooth: hci3: command tx timeout [ 322.965948][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 322.973996][ C0] lec:lec_tx_timeout: lec0 [ 322.979034][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 323.003636][T17232] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 323.105425][T17239] team_slave_0: entered promiscuous mode [ 323.111424][T17239] team_slave_1: entered promiscuous mode [ 323.120906][T17239] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 323.133599][T17240] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 323.148719][T17239] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 323.185867][T16929] veth0_vlan: entered promiscuous mode [ 323.212872][T16929] veth1_vlan: entered promiscuous mode [ 323.271067][T16929] veth0_macvtap: entered promiscuous mode [ 323.312980][T16929] veth1_macvtap: entered promiscuous mode [ 323.335714][T16929] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 323.393670][T16929] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 323.406466][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.415539][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.431348][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.473018][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.582219][T12385] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 323.605866][T12385] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 323.670738][T10073] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 323.697422][T10073] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 323.835864][T17261] syzkaller0: entered promiscuous mode [ 323.845483][T17261] syzkaller0: entered allmulticast mode [ 323.883431][T17268] mac80211_hwsim hwsim28 wlan0: entered promiscuous mode [ 323.921148][T17272] IPv6: Can't replace route, no match found [ 324.161648][ T5832] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 324.173208][ T5832] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 324.182874][ T5832] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 324.201234][ T5832] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 324.237625][ T5832] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 324.300659][T17280] ip6_vti0 speed is unknown, defaulting to 1000 [ 324.374574][T17284] Bluetooth: MGMT ver 1.23 [ 324.383300][T17284] Cannot find add_set index 0 as target [ 324.615960][ T51] Bluetooth: hci3: command tx timeout [ 324.728881][T17302] __nla_validate_parse: 4 callbacks suppressed [ 324.728898][T17302] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3179'. [ 324.782301][T17304] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3178'. [ 324.844489][T17302] geneve2: entered promiscuous mode [ 324.895722][ T49] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 324.911357][T17311] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3181'. [ 325.011981][ T49] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.034568][T17318] IPVS: set_ctl: invalid protocol: 50 255.255.255.255:20004 [ 325.047153][T17313] openvswitch: netlink: IP tunnel dst address not specified [ 325.114296][ T49] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.176294][ T49] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.225448][T17318] syzkaller0: entered promiscuous mode [ 325.240496][T17331] xt_TCPMSS: Only works on TCP SYN packets [ 325.259003][T17318] syzkaller0: entered allmulticast mode [ 325.272813][T17333] netlink: 'syz.3.3186': attribute type 4 has an invalid length. [ 325.550333][ T36] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.593609][T17349] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 325.641011][ T36] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.799359][T17369] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3193'. [ 325.820966][ T2971] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.895282][T17369] team0 (unregistering): Port device team_slave_0 removed [ 325.918799][T17369] team0 (unregistering): Port device team_slave_1 removed [ 325.946326][T17380] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3195'. [ 325.970157][T17355] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 325.988857][ T36] netdevsim netdevsim1 eth4: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.093160][T17383] openvswitch: netlink: VXLAN extension message has 1 unknown bytes. [ 326.292434][ T51] Bluetooth: hci1: command tx timeout [ 326.329950][ T2971] smc: removing ib device syz2 [ 326.399811][ T49] bond2 (unregistering): (slave gretap2): Releasing active interface [ 326.557530][ T49] bond0 (unregistering): (slave geneve2): Releasing active interface [ 326.799508][ T49] bond7 (unregistering): (slave bridge4): Removing an active aggregator [ 326.812980][ T49] bond7 (unregistering): (slave bridge4): Releasing backup interface [ 326.823194][ T49] bond7 (unregistering): (slave bridge4): the permanent HWaddr of slave - 9e:99:54:13:00:03 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 326.843677][ T49] bridge4 (unregistering): left promiscuous mode [ 326.851480][ T49] bridge4 (unregistering): left allmulticast mode [ 326.896698][ T49] bond7 (unregistering): (slave bridge5): Releasing backup interface [ 326.906706][ T49] bridge5 (unregistering): left promiscuous mode [ 326.913143][ T49] bridge5 (unregistering): left allmulticast mode [ 327.015303][ T49] bond1 (unregistering): (slave vcan1): Releasing backup interface [ 327.025605][ T49] vcan1: left promiscuous mode [ 327.032441][ T49] bond1 (unregistering): Released all slaves [ 327.060505][ T49] bond2 (unregistering): Released all slaves [ 327.100316][ T49] bond3 (unregistering): Released all slaves [ 327.123698][ T49] bond4 (unregistering): Released all slaves [ 327.175533][ T49] bond5 (unregistering): Released all slaves [ 327.210190][ T49] bond6 (unregistering): Released all slaves [ 327.283914][ T49] bond7 (unregistering): Released all slaves [ 327.342659][ T49] bond0 (unregistering): Released all slaves [ 327.365228][ T49] bond8 (unregistering): Released all slaves [ 327.404141][T17385] netlink: 'syz.3.3199': attribute type 4 has an invalid length. [ 327.420158][T17280] chnl_net:caif_netlink_parms(): no params data found [ 327.587036][T17387] ip6gre3: entered promiscuous mode [ 327.592270][T17387] ip6gre3: entered allmulticast mode [ 327.722907][T17400] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 327.776382][T17402] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 327.985945][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 327.993999][ C0] lec:lec_tx_timeout: lec0 [ 327.998665][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 328.235184][T17422] tipc: Enabling of bearer rejected, failed to enable media [ 328.252140][T17428] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3209'. [ 328.277815][T17280] bridge0: port 1(bridge_slave_0) entered blocking state [ 328.302283][T17280] bridge0: port 1(bridge_slave_0) entered disabled state [ 328.319719][T17280] bridge_slave_0: entered allmulticast mode [ 328.366009][ T51] Bluetooth: hci1: command tx timeout [ 328.401824][T17280] bridge_slave_0: entered promiscuous mode [ 328.413307][T17280] bridge0: port 2(bridge_slave_1) entered blocking state [ 328.428701][T17280] bridge0: port 2(bridge_slave_1) entered disabled state [ 328.449327][T17280] bridge_slave_1: entered allmulticast mode [ 328.487952][T17280] bridge_slave_1: entered promiscuous mode [ 328.497837][T17440] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.3214'. [ 328.507273][T17441] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3213'. [ 328.551794][T17433] netlink: 'syz.4.3211': attribute type 4 has an invalid length. [ 328.652188][T17446] Cannot find add_set index 0 as target [ 328.769042][T17454] netlink: 'syz.0.3217': attribute type 15 has an invalid length. [ 328.795147][T17454] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3217'. [ 329.043674][T17280] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 329.065331][T17467] tc_dump_action: action bad kind [ 329.079193][T17280] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 329.182617][T17280] team0: Port device team_slave_0 added [ 329.200647][T17280] team0: Port device team_slave_1 added [ 329.311907][T17280] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 329.360363][T17280] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 329.397814][T17280] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 329.418218][ T49] 9: left promiscuous mode [ 329.465757][T17280] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 329.510713][T17280] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 329.560928][T17280] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 329.564108][T17495] nbd: must specify at least one socket [ 329.622443][ T49] : left promiscuous mode [ 329.802190][T17506] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.3232'. [ 329.822718][ T49] 9: left promiscuous mode [ 329.912398][T17280] hsr_slave_0: entered promiscuous mode [ 329.925516][T17280] hsr_slave_1: entered promiscuous mode [ 329.940359][T17280] debugfs: 'hsr0' already exists in 'hsr' [ 329.946395][T17280] Cannot create hsr debugfs directory [ 330.077311][T17531] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3239'. [ 330.087191][ T49] tipc: Left network mode [ 330.394921][T17544] netlink: 'syz.4.3242': attribute type 4 has an invalid length. [ 330.448944][ T51] Bluetooth: hci1: command tx timeout [ 330.461504][T17557] x_tables: duplicate entry at hook 1 [ 330.468961][T17557] netlink: 'syz.0.3245': attribute type 1 has an invalid length. [ 330.832185][T17573] Cannot find set identified by id 3 to match [ 330.852964][T17573] netlink: 7 bytes leftover after parsing attributes in process `syz.0.3251'. [ 330.881496][T17280] netdevsim netdevsim1 eth4 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.996988][T17584] tipc: Enabling of bearer rejected, failed to enable media [ 331.049991][T17280] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.178412][T17280] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.295530][T17602] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3258'. [ 331.305421][T17602] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3258'. [ 331.329470][T17280] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.391789][ T49] hsr_slave_0: left promiscuous mode [ 331.404783][ T49] hsr_slave_1: left promiscuous mode [ 331.419009][T17608] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3260'. [ 331.419675][ T49] veth1_macvtap: left promiscuous mode [ 331.434676][ T49] veth0_macvtap: left promiscuous mode [ 331.544271][ T49] pimreg (unregistering): left allmulticast mode [ 331.874649][ T49] smc: removing net device team0 with user defined pnetid SYZ2 [ 331.895879][T17607] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3259'. [ 331.909126][T17609] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3259'. [ 331.934541][T17609] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3259'. [ 331.967869][T17615] netlink: 'syz.2.3262': attribute type 4 has an invalid length. [ 332.222590][T17633] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3267'. [ 332.232007][T17280] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 332.278098][T17280] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 332.413403][T17280] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 332.438175][T17647] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 332.480155][T17280] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 332.508788][T17647] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 332.530514][ T51] Bluetooth: hci1: command tx timeout [ 332.727262][T17666] IPv6: NLM_F_CREATE should be specified when creating new route [ 332.783203][ T49] IPVS: stop unused estimator thread 0... [ 332.830461][T17280] 8021q: adding VLAN 0 to HW filter on device bond0 [ 332.903236][T17280] 8021q: adding VLAN 0 to HW filter on device team0 [ 332.969320][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 332.976487][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 333.006427][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 333.014448][ C0] lec:lec_tx_timeout: lec0 [ 333.020485][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 333.026475][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 333.027641][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 333.090301][T17677] vlan2: left promiscuous mode [ 333.095095][T17677] gretap0: left promiscuous mode [ 333.111252][T17677] bridge0: port 1(vlan2) entered disabled state [ 333.381833][T17677] bond10: (slave veth7): Releasing active interface [ 333.441785][T17693] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 334.103758][T17713] netlink: 'syz.4.3281': attribute type 1 has an invalid length. [ 334.134027][T17713] netlink: 'syz.4.3281': attribute type 2 has an invalid length. [ 334.164904][T17722] netlink: 'syz.0.3283': attribute type 4 has an invalid length. [ 334.192067][T17280] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 334.227810][T17726] netlink: 'syz.3.3284': attribute type 9 has an invalid length. [ 334.408657][T17280] veth0_vlan: entered promiscuous mode [ 334.450424][T17280] veth1_vlan: entered promiscuous mode [ 334.590427][T17744] bridge_slave_0: entered promiscuous mode [ 334.616892][T17280] veth0_macvtap: entered promiscuous mode [ 334.650269][T17280] veth1_macvtap: entered promiscuous mode [ 334.704843][T17280] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 334.737409][T17280] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 334.789842][T10073] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.826680][T10073] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.835409][T10073] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.887317][T10073] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.939872][T17761] netlink: 'syz.2.3296': attribute type 9 has an invalid length. [ 334.956080][T17761] netlink: 'syz.2.3296': attribute type 11 has an invalid length. [ 335.002449][T17761] netlink: 'syz.2.3296': attribute type 12 has an invalid length. [ 335.022171][T17761] __nla_validate_parse: 5 callbacks suppressed [ 335.022185][T17761] netlink: 210020 bytes leftover after parsing attributes in process `syz.2.3296'. [ 335.038917][T17761] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3296'. [ 335.047286][T17765] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3297'. [ 335.129142][T17770] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3299'. [ 335.181680][T17770] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3299'. [ 335.202528][T12385] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 335.231426][T12385] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 335.312032][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 335.330255][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 335.439429][T17782] can: request_module (can-proto-0) failed. [ 335.483581][T17788] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3305'. [ 335.850273][ T5832] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 335.868630][ T5832] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 335.896557][ T5832] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 335.910739][ T5832] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 335.918847][ T5832] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 336.660227][T17806] chnl_net:caif_netlink_parms(): no params data found [ 336.802340][T17862] lo: entered allmulticast mode [ 336.843891][T17871] netlink: 'syz.3.3326': attribute type 11 has an invalid length. [ 336.870741][T17871] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3326'. [ 336.903123][T17871] netlink: 'syz.3.3326': attribute type 4 has an invalid length. [ 336.965404][T17806] bridge0: port 1(bridge_slave_0) entered blocking state [ 336.975845][T17806] bridge0: port 1(bridge_slave_0) entered disabled state [ 336.983891][T17806] bridge_slave_0: entered allmulticast mode [ 337.001551][T17806] bridge_slave_0: entered promiscuous mode [ 337.023535][T17880] netlink: 'syz.3.3327': attribute type 1 has an invalid length. [ 337.034586][T17806] bridge0: port 2(bridge_slave_1) entered blocking state [ 337.049563][T17806] bridge0: port 2(bridge_slave_1) entered disabled state [ 337.062081][T17806] bridge_slave_1: entered allmulticast mode [ 337.074133][T17806] bridge_slave_1: entered promiscuous mode [ 337.131906][T17806] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 337.161981][T17806] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 337.244568][T17806] team0: Port device team_slave_0 added [ 337.278338][T17806] team0: Port device team_slave_1 added [ 337.436704][T17806] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 337.443672][T17806] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 337.476843][T17806] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 337.492295][T17806] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 337.518378][T17806] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 337.611318][T17806] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 337.616973][T17903] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3333'. [ 337.649657][T17900] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3332'. [ 337.693785][T17905] netlink: 248 bytes leftover after parsing attributes in process `syz.1.3333'. [ 337.860825][T17806] hsr_slave_0: entered promiscuous mode [ 337.872757][T17806] hsr_slave_1: entered promiscuous mode [ 337.899267][T17806] debugfs: 'hsr0' already exists in 'hsr' [ 337.908882][T17806] Cannot create hsr debugfs directory [ 337.966736][ T51] Bluetooth: hci0: command tx timeout [ 338.402983][T17806] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.591144][T17953] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 338.632329][T17806] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.764114][T17956] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 338.781932][T17956] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 338.814546][T17806] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.846042][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5820 ms [ 338.854091][ C0] lec:lec_tx_timeout: lec0 [ 338.861454][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 338.968182][T17806] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.211552][ T51] block nbd2: Receive control failed (result -107) [ 339.249261][T17806] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 339.290083][T17980] mac80211_hwsim hwsim29 wlan1: entered promiscuous mode [ 339.298787][T17806] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 339.319473][T17980] mac80211_hwsim hwsim29 wlan1: left promiscuous mode [ 339.335571][T17806] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 339.364211][T17806] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 339.398974][T17984] bond1: entered promiscuous mode [ 339.404146][T17984] bond1: entered allmulticast mode [ 339.410660][T17984] 8021q: adding VLAN 0 to HW filter on device bond1 [ 339.643432][T17806] 8021q: adding VLAN 0 to HW filter on device bond0 [ 339.740889][T17806] 8021q: adding VLAN 0 to HW filter on device team0 [ 340.046760][ T51] Bluetooth: hci0: command tx timeout [ 340.905151][T18012] bridge0: port 2(bridge_slave_1) entered disabled state [ 340.912614][T18012] bridge0: port 1(bridge_slave_0) entered disabled state [ 340.978285][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 340.985459][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 341.035622][T12385] bridge0: port 2(bridge_slave_1) entered blocking state [ 341.042737][T12385] bridge0: port 2(bridge_slave_1) entered forwarding state [ 341.182350][T17806] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 341.288569][T18031] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 341.335480][T18031] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 341.565825][T18019] bridge0: port 2(bridge_slave_1) entered disabled state [ 341.573526][T18019] bridge0: port 1(bridge_slave_0) entered disabled state [ 341.623806][T18019] team_slave_0: left promiscuous mode [ 341.630454][T18019] team_slave_1: left promiscuous mode [ 342.012662][T18070] __nla_validate_parse: 6 callbacks suppressed [ 342.012680][T18070] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3377'. [ 342.017940][T18019] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 342.063150][T18019] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 342.126783][ T51] Bluetooth: hci0: command tx timeout [ 342.388416][T18042] team0 (unregistering): Port device team_slave_0 removed [ 342.399772][T18042] team0 (unregistering): Port device team_slave_1 removed [ 342.451556][T18070] hsr_slave_0 (unregistering): left promiscuous mode [ 342.492488][ T36] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 342.538632][T18079] 8021q: adding VLAN 0 to HW filter on device macvlan5 [ 342.595054][T18081] 8021q: adding VLAN 0 to HW filter on device macvlan6 [ 342.645628][ T36] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 342.664717][ T36] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 342.709607][ T36] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 342.719622][T18086] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3379'. [ 342.760675][T18086] syzkaller1: entered promiscuous mode [ 342.773512][T18086] syzkaller1: entered allmulticast mode [ 342.934645][T17806] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 342.969975][T18100] tls_set_device_offload: netdev not found [ 343.014876][T17806] veth0_vlan: entered promiscuous mode [ 343.039960][T17806] veth1_vlan: entered promiscuous mode [ 343.078690][T18109] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 343.101763][T18109] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 343.107916][T17806] veth0_macvtap: entered promiscuous mode [ 343.118470][T18110] netlink: 'syz.1.3385': attribute type 1 has an invalid length. [ 343.150946][T17806] veth1_macvtap: entered promiscuous mode [ 343.224688][T18117] veth3: entered promiscuous mode [ 343.242696][T18116] syzkaller0: entered promiscuous mode [ 343.248628][T18116] syzkaller0: entered allmulticast mode [ 343.268131][T17806] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 343.278984][T18110] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3385'. [ 343.292451][T17806] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 343.317377][T10073] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.327880][T10073] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.338483][T18110] tipc: Enabling of bearer rejected, failed to enable media [ 343.350850][T10073] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.361217][T10073] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.544729][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 343.547036][T18123] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3389'. [ 343.558116][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 343.656637][T12385] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 343.664737][T12385] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 343.770704][T18130] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20000 [ 343.843746][T18140] xt_hashlimit: size too large, truncated to 1048576 [ 343.876435][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 343.884468][ C0] lec:lec_tx_timeout: lec0 [ 343.889863][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 343.912265][T18147] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3396'. [ 344.155137][T18162] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3400'. [ 344.208591][ T51] Bluetooth: hci0: command tx timeout [ 344.412310][T18176] IPVS: length: 184 != 8 [ 344.445301][T18178] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 344.554544][T18188] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 344.569373][T18189] netlink: 124 bytes leftover after parsing attributes in process `syz.1.3408'. [ 344.643329][T18178] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 344.715866][T18198] syzkaller0: entered promiscuous mode [ 344.724384][T18198] syzkaller0: entered allmulticast mode [ 344.765077][T18200] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3413'. [ 344.779896][T18200] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3413'. [ 344.888942][T18210] syzkaller0: entered promiscuous mode [ 344.894439][T18210] syzkaller0: entered allmulticast mode [ 344.911503][T18210] Cannot find add_set index 0 as target [ 345.056623][T18216] macvtap0: entered promiscuous mode [ 345.062209][T18216] macvtap0: entered allmulticast mode [ 345.069247][T18216] veth1_vlan: entered allmulticast mode [ 345.200175][T18223] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3420'. [ 345.264518][T18227] syzkaller1: entered promiscuous mode [ 345.270523][T18227] syzkaller1: entered allmulticast mode [ 345.763244][T18255] netlink: 'syz.1.3430': attribute type 1 has an invalid length. [ 345.786379][T18255] netlink: 'syz.1.3430': attribute type 2 has an invalid length. [ 345.817003][T18255] netlink: 'syz.1.3430': attribute type 1 has an invalid length. [ 346.049849][T18275] syzkaller0: entered promiscuous mode [ 346.055435][T18275] syzkaller0: entered allmulticast mode [ 346.310623][T18293] team0: entered promiscuous mode [ 346.315784][T18293] team_slave_0: entered promiscuous mode [ 346.322318][T18293] team_slave_1: entered promiscuous mode [ 346.329691][T18293] team0: left promiscuous mode [ 346.334493][T18293] team_slave_0: left promiscuous mode [ 346.341137][T18293] team_slave_1: left promiscuous mode [ 346.364265][T18296] syzkaller0: entered promiscuous mode [ 346.370196][T18296] syzkaller0: entered allmulticast mode [ 346.524679][T18307] openvswitch: netlink: Unexpected mask (mask=2020040, allowed=2010048) [ 346.638064][T18313] netlink: 'syz.1.3452': attribute type 1 has an invalid length. [ 347.201646][T18345] bond3: Removing last arp target with arp_interval on [ 347.330718][T18357] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 347.415199][T18357] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 347.467278][T18368] __nla_validate_parse: 8 callbacks suppressed [ 347.467294][T18368] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3470'. [ 347.489571][T18368] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3470'. [ 347.501552][T18357] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 347.536880][T18368] openvswitch: netlink: IP tunnel dst address not specified [ 347.560783][T18368] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.3470'. [ 347.672506][T18376] netlink: 212344 bytes leftover after parsing attributes in process `syz.4.3472'. [ 347.698276][T18385] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3473'. [ 347.974802][T18402] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3479'. [ 348.055856][T18407] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3482'. [ 348.161978][T18407] bond1: option resend_igmp: invalid value (32767) [ 348.169956][T18407] bond1: option resend_igmp: allowed values 0 - 255 [ 348.181650][T18407] bond1 (unregistering): Released all slaves [ 348.410328][T18437] workqueue: name exceeds WQ_NAME_LEN. Truncating to: Ku crK:̥B| [ 348.492679][T18443] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3492'. [ 348.510434][T18443] netlink: zone id is out of range [ 348.525820][T18443] netlink: zone id is out of range [ 348.544925][T18443] netlink: zone id is out of range [ 348.562147][T18448] netlink: 'syz.1.3493': attribute type 4 has an invalid length. [ 348.563466][T18443] netlink: zone id is out of range [ 348.590626][T18443] netlink: zone id is out of range [ 348.595820][T18443] netlink: zone id is out of range [ 348.631166][T18443] netlink: zone id is out of range [ 348.650062][T18443] netlink: zone id is out of range [ 348.736726][T18456] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3496'. [ 348.758839][T18456] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3496'. [ 348.896442][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 348.904491][ C0] lec:lec_tx_timeout: lec0 [ 348.910170][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 349.921101][T18552] sctp: [Deprecated]: syz.4.3523 (pid 18552) Use of int in max_burst socket option deprecated. [ 349.921101][T18552] Use struct sctp_assoc_value instead [ 349.929125][T18549] netlink: 'syz.1.3524': attribute type 4 has an invalid length. [ 350.167749][T18567] IPVS: Error connecting to the multicast addr [ 350.207151][ T51] Bluetooth: hci0: command tx timeout [ 350.439554][T18590] dvmrp0: entered allmulticast mode [ 350.747875][T18611] syzkaller0: entered promiscuous mode [ 350.776012][T18611] syzkaller0: entered allmulticast mode [ 350.819128][ T9] IPVS: starting estimator thread 0... [ 350.916541][T18625] IPVS: using max 36 ests per chain, 86400 per kthread [ 350.957704][T18629] bridge0: port 2(bridge_slave_1) entered disabled state [ 350.965341][T18629] bridge0: port 1(bridge_slave_0) entered disabled state [ 351.015375][T18629] bridge0: entered allmulticast mode [ 351.413989][T18661] syzkaller0: entered promiscuous mode [ 351.458399][T18661] syzkaller0: entered allmulticast mode [ 352.240464][T18711] netlink: 'syz.1.3571': attribute type 4 has an invalid length. [ 352.616637][T18735] __nla_validate_parse: 38 callbacks suppressed [ 352.616654][T18735] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3576'. [ 352.754959][T18742] netlink: 21 bytes leftover after parsing attributes in process `syz.4.3579'. [ 352.867990][T18745] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3580'. [ 352.949242][T18750] netlink: 'syz.4.3582': attribute type 1 has an invalid length. [ 352.997393][T18753] netlink: 'syz.2.3584': attribute type 102 has an invalid length. [ 353.018543][T18753] netlink: 'syz.2.3584': attribute type 3 has an invalid length. [ 353.054375][ T30] audit: type=1107 audit(1771331226.629:10): pid=18748 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 353.068691][T18753] netlink: 'syz.2.3584': attribute type 1 has an invalid length. [ 353.280999][T18766] netlink: 'syz.4.3587': attribute type 4 has an invalid length. [ 353.504804][T18779] syzkaller0: entered promiscuous mode [ 353.520324][T18779] syzkaller0: entered allmulticast mode [ 353.564730][T18779] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 353.926447][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 353.934533][ C0] lec:lec_tx_timeout: lec0 [ 353.939677][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 354.051252][T18815] netlink: 'syz.2.3599': attribute type 4 has an invalid length. [ 354.162164][T18823] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3602'. [ 354.226646][T18823] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3602'. [ 354.417175][T18848] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3609'. [ 354.426351][T18848] netlink: 'syz.2.3609': attribute type 1 has an invalid length. [ 354.660431][T18860] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.3613'. [ 354.789423][T18869] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3616'. [ 354.802417][T18869] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3616'. [ 354.888967][T18878] netlink: 'syz.2.3619': attribute type 3 has an invalid length. [ 354.904838][T18878] netlink: 184 bytes leftover after parsing attributes in process `syz.2.3619'. [ 355.467940][T18911] netlink: 'syz.4.3630': attribute type 1 has an invalid length. [ 355.559262][T18915] netlink: 'syz.2.3632': attribute type 10 has an invalid length. [ 355.574178][T18917] xt_hashlimit: size too large, truncated to 1048576 [ 355.582695][T18918] xt_hashlimit: size too large, truncated to 1048576 [ 355.634050][T18915] veth3: entered promiscuous mode [ 355.651589][T18915] veth3: entered allmulticast mode [ 355.870228][T18934] net_ratelimit: 54 callbacks suppressed [ 355.870246][T18934] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 356.117438][T18952] netlink: 'syz.3.3642': attribute type 1 has an invalid length. [ 356.290587][T18959] netlink: 'syz.1.3645': attribute type 24 has an invalid length. [ 356.330741][T18961] syzkaller0: entered promiscuous mode [ 356.342561][T18961] syzkaller0: entered allmulticast mode [ 356.586619][T18977] netlink: 'syz.2.3653': attribute type 4 has an invalid length. [ 356.610900][T18977] netlink: 'syz.2.3653': attribute type 4 has an invalid length. [ 356.748193][T18986] netlink: 'syz.0.3658': attribute type 1 has an invalid length. [ 356.850099][T18986] bond1: entered promiscuous mode [ 356.857611][T18986] 8021q: adding VLAN 0 to HW filter on device bond1 [ 357.559624][T19048] 8021q: adding VLAN 0 to HW filter on device bond2 [ 357.617032][T19053] bond1: entered promiscuous mode [ 357.622112][T19053] bond1: entered allmulticast mode [ 357.628225][T19053] 8021q: adding VLAN 0 to HW filter on device bond1 [ 357.668612][T19059] __nla_validate_parse: 25 callbacks suppressed [ 357.668628][T19059] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3679'. [ 357.681745][T19053] macvlan7: entered promiscuous mode [ 357.685033][T19059] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3679'. [ 357.702006][T19053] macvlan7: entered allmulticast mode [ 357.709885][T19053] 8021q: adding VLAN 0 to HW filter on device macvlan7 [ 357.737516][T19062] gretap1: entered promiscuous mode [ 357.977183][T19023] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 358.063939][T19078] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3684'. [ 358.133792][T19083] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3686'. [ 358.946490][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 358.954546][ C0] lec:lec_tx_timeout: lec0 [ 358.959613][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 360.510685][T19048] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 360.959805][T19123] validate_nla: 4 callbacks suppressed [ 360.959823][T19123] netlink: 'syz.4.3697': attribute type 16 has an invalid length. [ 360.995443][T19123] netlink: 'syz.4.3697': attribute type 3 has an invalid length. [ 361.003970][T19123] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3697'. [ 361.169034][T19139] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3702'. [ 361.187377][T19136] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3703'. [ 361.350503][T19142] syzkaller0: entered promiscuous mode [ 361.363788][T19142] syzkaller0: entered allmulticast mode [ 361.395791][T19159] syzkaller0: entered promiscuous mode [ 361.412264][T19159] syzkaller0: entered allmulticast mode [ 362.572318][T19157] tipc: Started in network mode [ 362.577955][T19157] tipc: Node identity beba37726c74, cluster identity 4711 [ 362.585278][T19157] tipc: Enabled bearer , priority 0 [ 362.627039][T19160] syzkaller0: entered promiscuous mode [ 362.636793][T19160] syzkaller0: entered allmulticast mode [ 362.653571][T19171] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) ! [ 362.740342][T19173] tipc: Resetting bearer [ 362.774856][T19184] x_tables: duplicate underflow at hook 2 [ 362.787309][T19156] tipc: Resetting bearer [ 362.822308][T19156] tipc: Disabling bearer [ 362.915352][T19191] pimreg: left allmulticast mode [ 363.010471][T19202] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3721'. [ 363.055417][T19199] bond2: entered promiscuous mode [ 363.062978][T19199] bond2: entered allmulticast mode [ 363.073619][T19199] 8021q: adding VLAN 0 to HW filter on device bond2 [ 363.131021][T19212] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3724'. [ 363.145599][T19210] bridge0: port 2(bridge_slave_1) entered blocking state [ 363.152707][T19210] bridge0: port 2(bridge_slave_1) entered forwarding state [ 363.160227][T19210] bridge0: port 1(bridge_slave_0) entered blocking state [ 363.167396][T19210] bridge0: port 1(bridge_slave_0) entered forwarding state [ 363.192336][T19210] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 363.255800][T19210] tunl0: entered promiscuous mode [ 363.278254][T19210] netlink: 'syz.0.3722': attribute type 3 has an invalid length. [ 363.311251][T19210] netlink: 9 bytes leftover after parsing attributes in process `syz.0.3722'. [ 363.397601][T19220] syzkaller0: entered promiscuous mode [ 363.403091][T19220] syzkaller0: entered allmulticast mode [ 363.437058][T19223] netlink: 212336 bytes leftover after parsing attributes in process `syz.1.3729'. [ 363.499293][T19230] netlink: 88 bytes leftover after parsing attributes in process `syz.1.3730'. [ 363.577326][T19230] netlink: 88 bytes leftover after parsing attributes in process `syz.1.3730'. [ 363.590004][T19235] netlink: 88 bytes leftover after parsing attributes in process `syz.1.3730'. [ 363.602530][T19234] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3731'. [ 363.800541][T19249] Bluetooth: MGMT ver 1.23 [ 363.940524][T19258] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 363.966681][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 363.974718][ C0] lec:lec_tx_timeout: lec0 [ 363.980226][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 364.228866][T19283] netlink: 256 bytes leftover after parsing attributes in process `syz.1.3745'. [ 364.228924][T19287] netlink: 240 bytes leftover after parsing attributes in process `syz.0.3742'. [ 364.288766][T19289] netlink: 'syz.2.3747': attribute type 4 has an invalid length. [ 364.353121][T19292] syzkaller0: entered promiscuous mode [ 364.384998][T19292] syzkaller0: entered allmulticast mode [ 364.660888][T19312] netlink: 'syz.2.3754': attribute type 11 has an invalid length. [ 364.904521][T19331] netlink: 'syz.4.3760': attribute type 23 has an invalid length. [ 364.912563][T19325] bond2: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 364.935132][T19325] bond2 (unregistering): Released all slaves [ 365.004190][T19336] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 365.016750][T19336] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 365.056877][T19341] bridge_slave_1: left allmulticast mode [ 365.062525][T19341] bridge_slave_1: left promiscuous mode [ 365.068805][T19341] bridge0: port 2(bridge_slave_1) entered disabled state [ 365.084089][T19341] bridge_slave_0: left allmulticast mode [ 365.095252][T19341] bridge_slave_0: left promiscuous mode [ 365.102439][T19341] bridge0: port 1(bridge_slave_0) entered disabled state [ 368.996522][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 369.004534][ C0] lec:lec_tx_timeout: lec0 [ 369.009466][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 374.016521][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 374.024637][ C0] lec:lec_tx_timeout: lec0 [ 374.029587][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 378.539562][ T58] team0: left allmulticast mode [ 378.544428][ T58] team_slave_0: left allmulticast mode [ 378.550579][ T58] team_slave_1: left allmulticast mode [ 378.556872][ T58] batadv1: left allmulticast mode [ 378.561897][ T58] team0: left promiscuous mode [ 378.566928][ T58] team_slave_0: left promiscuous mode [ 378.572415][ T58] team_slave_1: left promiscuous mode [ 378.578017][ T58] batadv1: left promiscuous mode [ 378.583133][ T58] bridge0: port 3(team0) entered disabled state [ 378.591675][ T58] bridge_slave_1: left allmulticast mode [ 378.597379][ T58] bridge_slave_1: left promiscuous mode [ 378.603056][ T58] bridge0: port 2(bridge_slave_1) entered disabled state [ 378.612252][ T58] bridge_slave_0: left allmulticast mode [ 378.618312][ T58] bridge_slave_0: left promiscuous mode [ 378.623955][ T58] bridge0: port 1(bridge_slave_0) entered disabled state [ 378.647970][ T58] tipc: Resetting bearer [ 378.722792][ T58] tipc: Disabling bearer [ 378.784640][ T58] bond8 (unregistering): (slave gretap3): Releasing backup interface [ 378.810026][ T58] dvmrp6 (unregistering): left allmulticast mode [ 378.818559][ T58] dvmrp0 (unregistering): left allmulticast mode [ 379.280322][ T58] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 379.292759][ T58] bond0 (unregistering): (slave c@0): Releasing backup interface [ 379.301876][ T58] bond0 (unregistering): Released all slaves [ 379.312451][ T58] bond1 (unregistering): Released all slaves [ 379.328393][ T58] bond2 (unregistering): Released all slaves [ 379.340678][ T58] bond3 (unregistering): Released all slaves [ 379.358997][ T58] bond4 (unregistering): Released all slaves [ 379.374620][ T58] bond5 (unregistering): Released all slaves [ 379.389531][ T58] bond6 (unregistering): Released all slaves [ 379.403353][ T58] bond7 (unregistering): Released all slaves [ 379.417524][ T58] bond8 (unregistering): (slave bond9): Releasing backup interface [ 379.425866][ T58] bond8 (unregistering): Released all slaves [ 379.438579][ T58] bond9 (unregistering): Released all slaves [ 379.457216][ T58] bond10 (unregistering): Released all slaves [ 379.469340][ T58] bond11 (unregistering): Released all slaves [ 379.483054][ T58] bond12 (unregistering): Released all slaves [ 379.500215][ T58] bond13 (unregistering): Released all slaves [ 379.513374][ T58] bond14 (unregistering): Released all slaves [ 379.529819][ T58] bond15 (unregistering): Released all slaves [ 379.542177][ T58] bond16 (unregistering): Released all slaves [ 379.680813][ T58] : left promiscuous mode [ 379.733183][ T58] tipc: Left network mode [ 379.796915][ T58] IPVS: stopping backup sync thread 10613 ... [ 379.805951][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5780 ms [ 379.813943][ C0] lec:lec_tx_timeout: lec0 [ 379.819464][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 379.891244][ T58] hsr_slave_0: left promiscuous mode [ 379.897506][ T58] hsr_slave_1: left promiscuous mode [ 379.903195][ T58] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 379.911090][ T58] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 379.953098][ T58] team0 (unregistering): Port device batadv1 removed [ 380.004215][ T58] team0 (unregistering): Port device team_slave_1 removed [ 380.022193][ T58] team0 (unregistering): Port device team_slave_0 removed [ 380.365756][ T58] IPVS: stop unused estimator thread 0... [ 384.845976][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5030 ms [ 384.853994][ C0] lec:lec_tx_timeout: lec0 [ 384.859037][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 388.250427][T19380] bridge_slave_0: default FDB implementation only supports local addresses [ 388.271977][T19380] bridge_slave_0: default FDB implementation only supports local addresses [ 388.368778][T19396] __nla_validate_parse: 40 callbacks suppressed [ 388.368794][T19396] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3770'. [ 388.460802][T19398] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3774'. [ 388.486258][T19398] block nbd3: Unsupported socket: should be TCP or UNIX. [ 388.532894][T19400] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3775'. [ 388.689570][T19417] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3780'. [ 388.776170][T19433] IPv4: Oversized IP packet from 172.20.20.24 [ 388.783440][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 388.789978][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 388.799962][T19433] netlink: 203724 bytes leftover after parsing attributes in process `syz.0.3783'. [ 389.020423][T19434] syzkaller0: entered promiscuous mode [ 389.028284][T19434] syzkaller0: entered allmulticast mode [ 389.136756][T19441] netlink: 7 bytes leftover after parsing attributes in process `syz.3.3787'. [ 389.311591][T19448] tipc: Started in network mode [ 389.311755][T19450] netlink: 'syz.3.3789': attribute type 1 has an invalid length. [ 389.336627][T19448] tipc: Node identity 2ad36aa495b5, cluster identity 4711 [ 389.347570][T19450] netlink: 244 bytes leftover after parsing attributes in process `syz.3.3789'. [ 389.369520][T19448] tipc: Enabled bearer , priority 0 [ 389.397600][T19447] tipc: Disabling bearer [ 389.461220][T19454] netlink: 'syz.2.3792': attribute type 1 has an invalid length. [ 389.505531][T19454] bond3: (slave geneve2): making interface the new active one [ 389.513845][T19454] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 389.525200][ T49] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 20004 - 0 [ 389.544243][ T49] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 20004 - 0 [ 389.569990][ T49] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 20004 - 0 [ 389.590559][ T49] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 20004 - 0 [ 389.865953][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 389.874040][ C0] lec:lec_tx_timeout: lec0 [ 389.878683][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 390.889597][T19480] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3798'. [ 390.986316][T19486] netlink: 'syz.4.3801': attribute type 1 has an invalid length. [ 391.025441][T19484] bridge2: entered promiscuous mode [ 391.034679][T19484] bridge2: entered allmulticast mode [ 391.137992][T19486] 8021q: adding VLAN 0 to HW filter on device bond2 [ 391.165485][T19486] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3801'. [ 391.201716][T19488] bond3: (slave bond_slave_1): Device is not our slave [ 391.213899][T19507] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 391.224629][ T9] IPVS: starting estimator thread 0... [ 391.235134][T19488] bond3: option active_slave: invalid value (bond_slave_1) [ 391.243279][T19507] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3807'. [ 391.255651][T19488] bond3 (unregistering): Released all slaves [ 391.328903][T19509] IPVS: using max 29 ests per chain, 69600 per kthread [ 391.359498][T19498] veth5: entered promiscuous mode [ 391.584464][T19526] dvmrp0: entered allmulticast mode [ 391.697524][T19512] syzkaller0: entered promiscuous mode [ 391.703320][T19512] syzkaller0: entered allmulticast mode [ 391.932746][T19547] sctp: [Deprecated]: syz.0.3817 (pid 19547) Use of int in maxseg socket option. [ 391.932746][T19547] Use struct sctp_assoc_value instead [ 393.486344][T19589] netlink: 'syz.2.3829': attribute type 23 has an invalid length. [ 393.568590][T19595] syzkaller0: entered promiscuous mode [ 393.574549][T19595] syzkaller0: entered allmulticast mode [ 393.666340][T19597] netlink: 'syz.4.3832': attribute type 10 has an invalid length. [ 393.668701][T19603] __nla_validate_parse: 4 callbacks suppressed [ 393.668715][T19603] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3835'. [ 393.704915][T19606] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3836'. [ 393.813798][T19610] netlink: 696 bytes leftover after parsing attributes in process `syz.4.3839'. [ 393.838991][T19613] sctp: [Deprecated]: syz.2.3840 (pid 19613) Use of struct sctp_assoc_value in delayed_ack socket option. [ 393.838991][T19613] Use struct sctp_sack_info instead [ 393.869326][T19616] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3841'. [ 393.995257][T19626] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 394.009921][T19626] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3846'. [ 394.144599][T19633] syzkaller0: entered promiscuous mode [ 394.150622][T19633] syzkaller0: entered allmulticast mode [ 394.243522][T19642] syzkaller0: entered promiscuous mode [ 394.249231][T19642] syzkaller0: entered allmulticast mode [ 394.285437][T19643] delete_channel: no stack [ 394.322652][T19648] xt_limit: Overflow, try lower: 604147548/4200216962 [ 394.509291][T19660] netlink: 'syz.4.3857': attribute type 12 has an invalid length. [ 394.518086][T19660] netlink: 'syz.4.3857': attribute type 29 has an invalid length. [ 394.527571][T19660] netlink: 148 bytes leftover after parsing attributes in process `syz.4.3857'. [ 394.529205][T19663] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3858'. [ 394.538504][T19660] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3857'. [ 394.848789][T19684] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.3865'. [ 394.885925][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 394.893978][ C0] lec:lec_tx_timeout: lec0 [ 394.899142][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 395.009741][T19694] syzkaller0: entered promiscuous mode [ 395.016731][T19694] syzkaller0: entered allmulticast mode [ 395.063630][T19700] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3870'. [ 395.223818][T19717] netlink: 'syz.3.3875': attribute type 1 has an invalid length. [ 395.270126][T19717] bond5: entered promiscuous mode [ 395.275655][T19717] 8021q: adding VLAN 0 to HW filter on device bond5 [ 395.413925][T19717] bond5: (slave bridge0): making interface the new active one [ 395.422485][T19717] bridge0: entered promiscuous mode [ 395.432042][T19717] bond5: (slave bridge0): Enslaving as an active interface with an up link [ 395.528732][T19727] syzkaller1: entered promiscuous mode [ 395.542933][T19727] syzkaller1: entered allmulticast mode [ 395.983370][T19770] syzkaller0: entered promiscuous mode [ 395.989199][T19770] syzkaller0: entered allmulticast mode [ 396.044554][T19772] openvswitch: netlink: Invalid VLAN frame [ 396.057548][T19773] openvswitch: netlink: Invalid VLAN frame [ 396.218036][T19785] tipc: Started in network mode [ 396.235982][T19785] tipc: Node identity aaaaaaaaaa35, cluster identity 4711 [ 396.243254][T19785] tipc: Enabled bearer , priority 2 [ 396.827849][T19833] netlink: 'syz.2.3912': attribute type 24 has an invalid length. [ 396.890357][T19842] tipc: Enabled bearer , priority 0 [ 396.891356][T19840] sctp: [Deprecated]: syz.4.3911 (pid 19840) Use of struct sctp_assoc_value in delayed_ack socket option. [ 396.891356][T19840] Use struct sctp_sack_info instead [ 396.948122][T19844] bond3: option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 396.963164][T19844] bond3 (unregistering): Released all slaves [ 396.987452][T19842] syzkaller0: entered promiscuous mode [ 396.993010][T19842] syzkaller0: entered allmulticast mode [ 397.040717][T19851] tipc: Resetting bearer [ 397.063393][T19837] tipc: Resetting bearer [ 397.124127][T19837] tipc: Disabling bearer [ 397.184216][T19866] netlink: 'syz.4.3922': attribute type 30 has an invalid length. [ 397.209953][T19865] netlink: 'syz.4.3922': attribute type 1 has an invalid length. [ 397.278724][T19871] openvswitch: netlink: IP tunnel dst address not specified [ 397.301998][T19874] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 397.402378][T18061] tipc: Node number set to 10463914 [ 397.410418][T19880] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 397.453404][T19880] mac80211_hwsim hwsim28 wlan0: left promiscuous mode [ 397.465667][T19880] mac80211_hwsim hwsim28 wlan0: entered allmulticast mode [ 397.474469][T19869] veth1_macvtap: left promiscuous mode [ 397.499722][T19880] tipc: Started in network mode [ 397.504640][T19880] tipc: Node identity 6a6f96342111, cluster identity 4711 [ 397.511974][T19880] tipc: Enabled bearer , priority 0 [ 397.594067][T19879] tipc: Disabling bearer [ 397.634175][T19890] bond6: (slave bond_slave_1): Device is not our slave [ 397.641253][T19890] bond6: option active_slave: invalid value (bond_slave_1) [ 397.655216][T19890] bond6 (unregistering): Released all slaves [ 397.698206][T19892] netlink: 'syz.0.3931': attribute type 29 has an invalid length. [ 397.819256][T19904] sit1: entered promiscuous mode [ 397.824240][T19904] sit1: entered allmulticast mode [ 397.923517][T19909] netlink: 'syz.3.3936': attribute type 1 has an invalid length. [ 397.950133][T19912] syzkaller0: entered allmulticast mode [ 397.977518][T19912] syzkaller0 (unregistering): left allmulticast mode [ 398.405513][T19939] can: request_module (can-proto-4) failed. [ 398.465654][T19961] @0: renamed from bond_slave_1 (while UP) [ 398.761695][T19988] __nla_validate_parse: 22 callbacks suppressed [ 398.761707][T19988] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3962'. [ 398.777645][T19988] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3962'. [ 398.787608][T19990] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3962'. [ 398.788338][T19988] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3962'. [ 399.906002][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 399.914059][ C0] lec:lec_tx_timeout: lec0 [ 399.918627][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 401.301738][T19955] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 401.320423][T19989] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3960'. [ 401.469585][T20003] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3964'. [ 401.559844][T20006] "syz.0.3967" (20006) uses obsolete ecb(arc4) skcipher [ 401.603201][T20012] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3970'. [ 401.812849][T20030] tipc: New replicast peer: 255.255.255.255 [ 401.820128][T20030] tipc: Enabled bearer , priority 10 [ 402.137953][ T87] IPVS: starting estimator thread 0... [ 402.210056][T20069] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3984'. [ 402.232447][T20063] IPVS: using max 33 ests per chain, 79200 per kthread [ 402.420122][T20091] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3989'. [ 402.475620][T20094] Cannot find del_set index 4 as target [ 402.499891][T20085] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3990'. [ 402.585475][T20098] sit0: entered promiscuous mode [ 402.598082][T20098] netlink: 'syz.0.3993': attribute type 1 has an invalid length. [ 402.763933][T20083] infiniband : set down [ 402.796907][T20083] infiniband : added ipvlan0 [ 402.813427][T20083] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 402.820499][T20083] infiniband : Couldn't open port 1 [ 402.890917][T20083] RDS/IB: : added [ 402.899968][T20083] smc: adding ib device  with port count 1 [ 402.908191][T20083] smc: ib device  port 1 has no pnetid [ 402.977616][T20117] netlink: 'syz.3.3998': attribute type 1 has an invalid length. [ 402.977616][T20121] netlink: 'syz.3.3998': attribute type 1 has an invalid length. [ 403.576966][T20146] netlink: 'syz.4.4006': attribute type 1 has an invalid length. [ 403.666750][T20152] x_tables: duplicate underflow at hook 2 [ 403.756790][T20157] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 403.777735][T20157] openvswitch: netlink: Message has 1 unknown bytes. [ 403.796869][T20157] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 404.078621][T20177] delete_channel: no stack [ 404.391194][T20199] __nla_validate_parse: 7 callbacks suppressed [ 404.391212][T20199] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4020'. [ 404.466389][T20199] netlink: 'syz.0.4020': attribute type 1 has an invalid length. [ 404.604776][T20211] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4023'. [ 404.614421][T20211] netlink: 43 bytes leftover after parsing attributes in process `syz.3.4023'. [ 404.624201][T20211] netlink: 'syz.3.4023': attribute type 5 has an invalid length. [ 404.632438][T20211] netlink: 43 bytes leftover after parsing attributes in process `syz.3.4023'. [ 404.741550][T20219] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 404.926304][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 404.934355][ C0] lec:lec_tx_timeout: lec0 [ 404.938994][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 404.941737][T20231] netlink: 'syz.0.4030': attribute type 21 has an invalid length. [ 404.955435][T20231] netlink: 128 bytes leftover after parsing attributes in process `syz.0.4030'. [ 404.966272][T20231] netlink: 'syz.0.4030': attribute type 4 has an invalid length. [ 404.974070][T20231] netlink: 'syz.0.4030': attribute type 5 has an invalid length. [ 404.982990][T20231] netlink: 3 bytes leftover after parsing attributes in process `syz.0.4030'. [ 404.996387][T20233] netlink: 'syz.0.4030': attribute type 21 has an invalid length. [ 405.006167][T20233] netlink: 128 bytes leftover after parsing attributes in process `syz.0.4030'. [ 405.015404][T20233] netlink: 3 bytes leftover after parsing attributes in process `syz.0.4030'. [ 407.418822][T20203] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 407.574667][T20268] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4041'. [ 407.713230][T20279] IPVS: sed: FWM 3 0x00000003 - no destination available [ 407.732629][ C0] IPVS: sed: FWM 3 0x00000003 - no destination available [ 407.841262][T20291] validate_nla: 3 callbacks suppressed [ 407.841288][T20291] netlink: 'syz.1.4048': attribute type 1 has an invalid length. [ 407.901720][T20291] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4048'. [ 407.924855][T20296] tls_set_device_offload_rx: netdev not found [ 407.943498][T20291] bond2: (slave vcan1): The slave device specified does not support setting the MAC address [ 407.955792][T20291] bond2: (slave vcan1): Setting fail_over_mac to active for active-backup mode [ 407.988674][T20291] bond2: (slave vcan1): making interface the new active one [ 407.996969][T20291] bond2: (slave vcan1): Enslaving as an active interface with an up link [ 408.248211][T20322] batman_adv: batadv0: Adding interface: dummy0 [ 408.256023][T20322] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 408.281877][T20322] batman_adv: batadv0: Interface activated: dummy0 [ 408.295879][T20324] batadv0: mtu less than device minimum [ 408.302735][T20324] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 408.314494][T20324] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 408.326151][T20324] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 408.576602][T20349] xt_TPROXY: Can be used only with -p tcp or -p udp [ 409.057901][T20390] syzkaller0: entered promiscuous mode [ 409.063405][T20390] syzkaller0: entered allmulticast mode [ 409.508629][T20420] ip6gre0: Master is either lo or non-ether device [ 409.600822][T20428] __nla_validate_parse: 10 callbacks suppressed [ 409.600839][T20428] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4092'. [ 409.674797][T20434] mac80211_hwsim hwsim29 : renamed from wlan1 (while UP) [ 409.738959][T20437] syzkaller0: entered promiscuous mode [ 409.744741][T20437] syzkaller0: entered allmulticast mode [ 409.795254][T20446] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4097'. [ 409.848098][T20450] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.4098'. [ 409.867714][T20446] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4097'. [ 409.946107][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 409.946960][T20456] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4100'. [ 409.954154][ C0] lec:lec_tx_timeout: lec0 [ 409.969407][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 410.022984][T20458] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4101'. [ 410.069969][T20458] bond4: entered promiscuous mode [ 410.115132][T20467] netlink: 64 bytes leftover after parsing attributes in process `syz.4.4105'. [ 410.291087][T20484] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4110'. [ 410.340051][T20486] veth1_vlan: left allmulticast mode [ 410.353362][ T12] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 20004 - 0 [ 410.365050][ T12] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 20004 - 0 [ 410.375261][ T12] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 20004 - 0 [ 410.385710][ T12] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 20004 - 0 [ 410.971977][T20498] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4115'. [ 411.013481][T20498] bond3: entered promiscuous mode [ 411.080753][T20503] syzkaller1: entered promiscuous mode [ 411.097605][T20507] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4117'. [ 411.105123][T20503] syzkaller1: entered allmulticast mode [ 411.140469][T20510] syzkaller0: entered promiscuous mode [ 411.153884][T20510] syzkaller0: entered allmulticast mode [ 411.184516][T20512] netlink: 'syz.1.4120': attribute type 4 has an invalid length. [ 411.245312][T20514] net_ratelimit: 16 callbacks suppressed [ 411.245329][T20514] sock: sock_set_timeout: `syz.1.4121' (pid 20514) tries to set negative timeout [ 411.338598][T20518] bond5: option xmit_hash_policy: invalid value (64) [ 411.349265][T20518] bond5 (unregistering): Released all slaves [ 411.697216][T20550] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 411.842461][T20560] syzkaller0: entered promiscuous mode [ 411.849519][T20560] syzkaller0: entered allmulticast mode [ 411.870869][T20563] netlink: 'syz.4.4134': attribute type 1 has an invalid length. [ 411.886010][T20563] netlink: 'syz.4.4134': attribute type 1 has an invalid length. [ 411.932071][T20565] netlink: 'syz.2.4135': attribute type 10 has an invalid length. [ 411.942555][T20565] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 411.973698][T20565] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 412.190685][T20583] netlink: 'syz.4.4141': attribute type 1 has an invalid length. [ 412.200026][ T30] audit: type=1107 audit(1771331285.769:11): pid=20585 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='q&:,)XTfpi%rX*Z1<' [ 412.276159][T20583] 8021q: adding VLAN 0 to HW filter on device bond5 [ 412.288868][T20593] FAULT_INJECTION: forcing a failure. [ 412.288868][T20593] name failslab, interval 1, probability 0, space 0, times 0 [ 412.306545][T20593] CPU: 1 UID: 0 PID: 20593 Comm: syz.0.4144 Not tainted syzkaller #0 PREEMPT(full) [ 412.306567][T20593] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 412.306585][T20593] Call Trace: [ 412.306592][T20593] [ 412.306600][T20593] dump_stack_lvl+0xe8/0x150 [ 412.306625][T20593] should_fail_ex+0x412/0x560 [ 412.306652][T20593] should_failslab+0xa8/0x100 [ 412.306684][T20593] __kmalloc_noprof+0xe8/0x760 [ 412.306705][T20593] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 412.306732][T20593] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 412.306758][T20593] genl_family_rcv_msg_doit+0xd9/0x330 [ 412.306780][T20593] ? __asan_memcpy+0x40/0x70 [ 412.306800][T20593] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 412.306827][T20593] ? apparmor_capable+0x137/0x1a0 [ 412.306846][T20593] ? bpf_lsm_capable+0x9/0x20 [ 412.306861][T20593] ? security_capable+0x7e/0x2c0 [ 412.306886][T20593] genl_rcv_msg+0x61c/0x7a0 [ 412.306911][T20593] ? __pfx_genl_rcv_msg+0x10/0x10 [ 412.306929][T20593] ? __pfx_ethnl_default_set_doit+0x10/0x10 [ 412.306953][T20593] ? __pfx_ref_tracker_free+0x10/0x10 [ 412.306980][T20593] netlink_rcv_skb+0x232/0x4b0 [ 412.306998][T20593] ? __pfx_genl_rcv_msg+0x10/0x10 [ 412.307019][T20593] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 412.307034][T20593] ? genl_rcv+0x19/0x40 [ 412.307067][T20593] ? down_read+0x272/0x2e0 [ 412.307087][T20593] ? genl_rcv+0xd/0x40 [ 412.307107][T20593] genl_rcv+0x28/0x40 [ 412.307125][T20593] netlink_unicast+0x80f/0x9b0 [ 412.307154][T20593] ? __pfx_netlink_unicast+0x10/0x10 [ 412.307177][T20593] ? netlink_sendmsg+0x650/0xb40 [ 412.307192][T20593] ? skb_put+0x11b/0x210 [ 412.307213][T20593] netlink_sendmsg+0x813/0xb40 [ 412.307237][T20593] ? __pfx_netlink_sendmsg+0x10/0x10 [ 412.307257][T20593] ? aa_sock_msg_perm+0xf1/0x1b0 [ 412.307280][T20593] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 412.307302][T20593] ? __pfx_netlink_sendmsg+0x10/0x10 [ 412.307319][T20593] ____sys_sendmsg+0xa68/0xad0 [ 412.307339][T20593] ? __might_fault+0xaf/0x130 [ 412.307363][T20593] ? __pfx_____sys_sendmsg+0x10/0x10 [ 412.307391][T20593] ? import_iovec+0x73/0xa0 [ 412.307411][T20593] ___sys_sendmsg+0x2a5/0x360 [ 412.307430][T20593] ? __lock_acquire+0x6b5/0x2cf0 [ 412.307452][T20593] ? __pfx____sys_sendmsg+0x10/0x10 [ 412.307502][T20593] ? __fget_files+0x2a/0x420 [ 412.307519][T20593] ? __fget_files+0x3a0/0x420 [ 412.307543][T20593] __x64_sys_sendmsg+0x1bd/0x2a0 [ 412.307566][T20593] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 412.307594][T20593] ? __pfx_ksys_write+0x10/0x10 [ 412.307623][T20593] do_syscall_64+0x14d/0xf80 [ 412.307643][T20593] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 412.307659][T20593] ? clear_bhb_loop+0x40/0x90 [ 412.307687][T20593] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 412.307710][T20593] RIP: 0033:0x7f703739bf79 [ 412.307726][T20593] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 412.307740][T20593] RSP: 002b:00007f70381be028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 412.307759][T20593] RAX: ffffffffffffffda RBX: 00007f7037615fa0 RCX: 00007f703739bf79 [ 412.307771][T20593] RDX: 0000000000000000 RSI: 0000200000000540 RDI: 000000000000001a [ 412.307782][T20593] RBP: 00007f70381be090 R08: 0000000000000000 R09: 0000000000000000 [ 412.307793][T20593] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 412.307803][T20593] R13: 00007f7037616038 R14: 00007f7037615fa0 R15: 00007ffc307e8a98 [ 412.307832][T20593] [ 412.320000][T20590] bond5: (slave geneve2): making interface the new active one [ 412.462914][T20598] sctp: [Deprecated]: syz.2.4145 (pid 20598) Use of struct sctp_assoc_value in delayed_ack socket option. [ 412.462914][T20598] Use struct sctp_sack_info instead [ 412.464991][T20590] bond5: (slave geneve2): Enslaving as an active interface with an up link [ 412.829176][T20606] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 412.878097][T20604] erspan0: entered promiscuous mode [ 412.889418][T20609] syzkaller0: entered promiscuous mode [ 412.894907][T20609] syzkaller0: entered allmulticast mode [ 413.067962][T20623] netlink: 'syz.4.4154': attribute type 6 has an invalid length. [ 413.093150][T20623] netlink: 'syz.4.4154': attribute type 5 has an invalid length. [ 413.420800][T20656] netlink: 'syz.0.4166': attribute type 24 has an invalid length. [ 413.940560][T20700] syzkaller0: entered promiscuous mode [ 413.946407][T20700] syzkaller0: entered allmulticast mode [ 414.139529][T20716] netlink: 'syz.2.4184': attribute type 12 has an invalid length. [ 414.172959][T20716] bond5: option primary_reselect: invalid value (255) [ 414.181616][T20716] bond5 (unregistering): Released all slaves [ 414.707598][T20768] __nla_validate_parse: 22 callbacks suppressed [ 414.707616][T20768] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4196'. [ 414.874257][T20777] xt_hashlimit: max too large, truncated to 1048576 [ 414.901386][T20777] syzkaller0: entered promiscuous mode [ 414.909583][T20777] syzkaller0: entered allmulticast mode [ 414.975947][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 414.984009][ C0] lec:lec_tx_timeout: lec0 [ 414.988685][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 415.153875][T20798] FAULT_INJECTION: forcing a failure. [ 415.153875][T20798] name failslab, interval 1, probability 0, space 0, times 0 [ 415.169200][T20798] CPU: 0 UID: 0 PID: 20798 Comm: syz.1.4204 Not tainted syzkaller #0 PREEMPT(full) [ 415.169224][T20798] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 415.169235][T20798] Call Trace: [ 415.169241][T20798] [ 415.169249][T20798] dump_stack_lvl+0xe8/0x150 [ 415.169275][T20798] should_fail_ex+0x412/0x560 [ 415.169303][T20798] should_failslab+0xa8/0x100 [ 415.169327][T20798] __kmalloc_noprof+0xe8/0x760 [ 415.169348][T20798] ? nsim_set_coalesce+0x29/0x40 [ 415.169366][T20798] ? ethnl_default_notify+0x1f5/0xbe0 [ 415.169383][T20798] ? __kmalloc_noprof+0x1b8/0x760 [ 415.169407][T20798] ethnl_default_notify+0x1f5/0xbe0 [ 415.169435][T20798] ? __pfx_ethnl_default_notify+0x10/0x10 [ 415.169470][T20798] ? mutex_is_locked+0x17/0x50 [ 415.169489][T20798] ? rtnl_is_locked+0x15/0x20 [ 415.169513][T20798] ethnl_default_set_doit+0x6a5/0xad0 [ 415.169542][T20798] genl_family_rcv_msg_doit+0x22a/0x330 [ 415.169564][T20798] ? __asan_memcpy+0x40/0x70 [ 415.169585][T20798] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 415.169619][T20798] ? bpf_lsm_capable+0x9/0x20 [ 415.169635][T20798] ? security_capable+0x7e/0x2c0 [ 415.169663][T20798] genl_rcv_msg+0x61c/0x7a0 [ 415.169690][T20798] ? __pfx_genl_rcv_msg+0x10/0x10 [ 415.169709][T20798] ? __pfx_ethnl_default_set_doit+0x10/0x10 [ 415.169732][T20798] ? __pfx_ref_tracker_free+0x10/0x10 [ 415.169762][T20798] netlink_rcv_skb+0x232/0x4b0 [ 415.169788][T20798] ? __pfx_genl_rcv_msg+0x10/0x10 [ 415.169809][T20798] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 415.169824][T20798] ? genl_rcv+0x19/0x40 [ 415.169860][T20798] ? down_read+0x272/0x2e0 [ 415.169880][T20798] ? genl_rcv+0xd/0x40 [ 415.169901][T20798] genl_rcv+0x28/0x40 [ 415.169918][T20798] netlink_unicast+0x80f/0x9b0 [ 415.169950][T20798] ? __pfx_netlink_unicast+0x10/0x10 [ 415.169973][T20798] ? netlink_sendmsg+0x650/0xb40 [ 415.169989][T20798] ? skb_put+0x11b/0x210 [ 415.170011][T20798] netlink_sendmsg+0x813/0xb40 [ 415.170038][T20798] ? __pfx_netlink_sendmsg+0x10/0x10 [ 415.170060][T20798] ? aa_sock_msg_perm+0xf1/0x1b0 [ 415.170082][T20798] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 415.170105][T20798] ? __pfx_netlink_sendmsg+0x10/0x10 [ 415.170121][T20798] ____sys_sendmsg+0xa68/0xad0 [ 415.170141][T20798] ? __might_fault+0xaf/0x130 [ 415.170167][T20798] ? __pfx_____sys_sendmsg+0x10/0x10 [ 415.170197][T20798] ? import_iovec+0x73/0xa0 [ 415.170219][T20798] ___sys_sendmsg+0x2a5/0x360 [ 415.170238][T20798] ? __lock_acquire+0x6b5/0x2cf0 [ 415.170260][T20798] ? __pfx____sys_sendmsg+0x10/0x10 [ 415.170317][T20798] ? __fget_files+0x2a/0x420 [ 415.170333][T20798] ? __fget_files+0x3a0/0x420 [ 415.170360][T20798] __x64_sys_sendmsg+0x1bd/0x2a0 [ 415.170383][T20798] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 415.170412][T20798] ? __pfx_ksys_write+0x10/0x10 [ 415.170442][T20798] do_syscall_64+0x14d/0xf80 [ 415.170462][T20798] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 415.170478][T20798] ? trace_irq_disable+0x37/0x100 [ 415.170495][T20798] ? clear_bhb_loop+0x40/0x90 [ 415.170512][T20798] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 415.170527][T20798] RIP: 0033:0x7f6e8819bf79 [ 415.170541][T20798] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 415.170552][T20798] RSP: 002b:00007f6e89004028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 415.170567][T20798] RAX: ffffffffffffffda RBX: 00007f6e88415fa0 RCX: 00007f6e8819bf79 [ 415.170576][T20798] RDX: 0000000000000000 RSI: 0000200000000540 RDI: 000000000000001a [ 415.170584][T20798] RBP: 00007f6e89004090 R08: 0000000000000000 R09: 0000000000000000 [ 415.170592][T20798] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 415.170599][T20798] R13: 00007f6e88416038 R14: 00007f6e88415fa0 R15: 00007ffcc8e8ec68 [ 415.170622][T20798] [ 415.709809][T20814] netlink: 52 bytes leftover after parsing attributes in process `syz.1.4210'. [ 415.752941][T20816] tipc: Enabling of bearer rejected, failed to enable media [ 415.786732][T20819] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4208'. [ 415.928877][T20831] x_tables: duplicate underflow at hook 1 [ 415.987735][T20831] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4215'. [ 416.006056][T20831] netlink: 'syz.2.4215': attribute type 5 has an invalid length. [ 416.014835][T20831] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4215'. [ 416.083029][T20831] geneve3: entered promiscuous mode [ 416.088411][T20831] geneve3: entered allmulticast mode [ 416.099265][ T36] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 256 - 0 [ 416.114983][ T36] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 256 - 0 [ 416.135078][ T36] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 256 - 0 [ 416.144084][ T36] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 256 - 0 [ 416.352118][T20868] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4225'. [ 416.774097][T20898] netlink: 'syz.4.4237': attribute type 2 has an invalid length. [ 416.781982][T20898] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4237'. [ 416.793021][T20898] netlink: 'syz.4.4237': attribute type 2 has an invalid length. [ 416.801022][T20898] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4237'. [ 416.810701][T20898] netlink: 'syz.4.4237': attribute type 2 has an invalid length. [ 416.818523][T20898] netlink: 119 bytes leftover after parsing attributes in process `syz.4.4237'. [ 416.868781][T20903] netlink: 'syz.4.4238': attribute type 25 has an invalid length. [ 417.220981][T20925] syzkaller0: entered promiscuous mode [ 417.234325][T20925] syzkaller0: entered allmulticast mode [ 417.552917][ T13] smc: removing ib device  [ 417.647769][ T87] ================================================================== [ 417.652822][T20937] xt_connbytes: Forcing CT accounting to be enabled [ 417.655852][ T87] BUG: KASAN: slab-use-after-free in __ethtool_get_link_ksettings+0x5e/0x170 [ 417.655880][ T87] Read of size 8 at addr ffff88806ce882f0 by task kworker/1:2/87 [ 417.678876][ T87] [ 417.681294][ T87] CPU: 1 UID: 0 PID: 87 Comm: kworker/1:2 Not tainted syzkaller #0 PREEMPT(full) [ 417.681310][ T87] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 417.681319][ T87] Workqueue: events smc_ib_port_event_work [ 417.681337][ T87] Call Trace: [ 417.681342][ T87] [ 417.681348][ T87] dump_stack_lvl+0xe8/0x150 [ 417.681366][ T87] print_report+0xba/0x230 [ 417.681381][ T87] ? __ethtool_get_link_ksettings+0x5e/0x170 [ 417.681396][ T87] kasan_report+0x117/0x150 [ 417.681414][ T87] ? __ethtool_get_link_ksettings+0x5e/0x170 [ 417.681431][ T87] __ethtool_get_link_ksettings+0x5e/0x170 [ 417.681448][ T87] ib_get_eth_speed+0x180/0x7f0 [ 417.681462][ T87] ? rxe_query_port+0x7e/0x3d0 [ 417.681485][ T87] ? __pfx_ib_get_eth_speed+0x10/0x10 [ 417.681501][ T87] ? do_raw_spin_unlock+0xf5/0x210 [ 417.681522][ T87] rxe_query_port+0x93/0x3d0 [ 417.681540][ T87] ib_query_port+0x170/0x830 [ 417.681556][ T87] smc_ib_port_event_work+0x15a/0x940 [ 417.681573][ T87] ? process_scheduled_works+0xa0f/0x17a0 [ 417.681587][ T87] ? process_scheduled_works+0xa0f/0x17a0 [ 417.681600][ T87] process_scheduled_works+0xaec/0x17a0 [ 417.681622][ T87] ? __pfx_process_scheduled_works+0x10/0x10 [ 417.681637][ T87] ? assign_work+0x3d5/0x5e0 [ 417.681651][ T87] worker_thread+0xa50/0xfc0 [ 417.681674][ T87] kthread+0x388/0x470 [ 417.681689][ T87] ? __pfx_worker_thread+0x10/0x10 [ 417.681702][ T87] ? __pfx_kthread+0x10/0x10 [ 417.681718][ T87] ret_from_fork+0x51e/0xb90 [ 417.681733][ T87] ? __pfx_ret_from_fork+0x10/0x10 [ 417.681745][ T87] ? __switch_to+0xc7d/0x1400 [ 417.681758][ T87] ? __pfx_kthread+0x10/0x10 [ 417.681773][ T87] ret_from_fork_asm+0x1a/0x30 [ 417.681795][ T87] [ 417.681799][ T87] [ 417.852872][ T87] Allocated by task 17280: [ 417.857272][ T87] kasan_save_track+0x3e/0x80 [ 417.861942][ T87] __kasan_kmalloc+0x93/0xb0 [ 417.866518][ T87] __kvmalloc_node_noprof+0x528/0x8a0 [ 417.871876][ T87] alloc_netdev_mqs+0xa6/0x11b0 [ 417.876710][ T87] rtnl_create_link+0x31f/0xd70 [ 417.881546][ T87] rtnl_newlink_create+0x277/0xb70 [ 417.886640][ T87] rtnl_newlink+0x1666/0x1be0 [ 417.891295][ T87] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 417.896212][ T87] netlink_rcv_skb+0x232/0x4b0 [ 417.900957][ T87] netlink_unicast+0x80f/0x9b0 [ 417.905702][ T87] netlink_sendmsg+0x813/0xb40 [ 417.910445][ T87] __sys_sendto+0x709/0x7a0 [ 417.914933][ T87] __x64_sys_sendto+0xde/0x100 [ 417.919679][ T87] do_syscall_64+0x14d/0xf80 [ 417.924251][ T87] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 417.930125][ T87] [ 417.932429][ T87] Freed by task 20931: [ 417.936478][ T87] kasan_save_track+0x3e/0x80 [ 417.941141][ T87] kasan_save_free_info+0x46/0x50 [ 417.946146][ T87] __kasan_slab_free+0x5c/0x80 [ 417.950892][ T87] kfree+0x1c1/0x610 [ 417.954773][ T87] device_release+0x9e/0x1d0 [ 417.959351][ T87] kobject_put+0x228/0x560 [ 417.963753][ T87] netdev_run_todo+0xc75/0xde0 [ 417.968503][ T87] rtnl_dellink+0x6a7/0x820 [ 417.972990][ T87] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 417.977908][ T87] netlink_rcv_skb+0x232/0x4b0 [ 417.982653][ T87] netlink_unicast+0x80f/0x9b0 [ 417.987401][ T87] netlink_sendmsg+0x813/0xb40 [ 417.992145][ T87] ____sys_sendmsg+0xa68/0xad0 [ 417.996890][ T87] ___sys_sendmsg+0x2a5/0x360 [ 418.001551][ T87] __x64_sys_sendmsg+0x1bd/0x2a0 [ 418.006471][ T87] do_syscall_64+0x14d/0xf80 [ 418.011045][ T87] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 418.016920][ T87] [ 418.019223][ T87] The buggy address belongs to the object at ffff88806ce88000 [ 418.019223][ T87] which belongs to the cache kmalloc-cg-4k of size 4096 [ 418.033514][ T87] The buggy address is located 752 bytes inside of [ 418.033514][ T87] freed 4096-byte region [ffff88806ce88000, ffff88806ce89000) [ 418.047375][ T87] [ 418.049680][ T87] The buggy address belongs to the physical page: [ 418.056083][ T87] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x6ce88 [ 418.064831][ T87] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 418.073304][ T87] memcg:ffff88806ce89011 [ 418.077524][ T87] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 418.085050][ T87] page_type: f5(slab) [ 418.089010][ T87] raw: 00fff00000000040 ffff88813feb6500 dead000000000100 dead000000000122 [ 418.097573][ T87] raw: 0000000000000000 0000200000040004 00000000f5000000 ffff88806ce89011 [ 418.106137][ T87] head: 00fff00000000040 ffff88813feb6500 dead000000000100 dead000000000122 [ 418.114785][ T87] head: 0000000000000000 0000200000040004 00000000f5000000 ffff88806ce89011 [ 418.123436][ T87] head: 00fff00000000003 ffffea0001b3a201 00000000ffffffff 00000000ffffffff [ 418.132094][ T87] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 418.140737][ T87] page dumped because: kasan: bad access detected [ 418.147133][ T87] page_owner tracks the page as allocated [ 418.152824][ T87] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 10519, tgid 10507 (syz.3.1287), ts 179155925870, free_ts 179103311632 [ 418.174333][ T87] post_alloc_hook+0x228/0x280 [ 418.179084][ T87] get_page_from_freelist+0x24dc/0x2580 [ 418.184619][ T87] __alloc_frozen_pages_noprof+0x18d/0x380 [ 418.190406][ T87] allocate_slab+0x77/0x660 [ 418.194896][ T87] refill_objects+0x331/0x3c0 [ 418.199548][ T87] __pcs_replace_empty_main+0x2b9/0x620 [ 418.205072][ T87] __kmalloc_cache_noprof+0x392/0x660 [ 418.210425][ T87] ipv6_add_dev+0x6aa/0x13a0 [ 418.215000][ T87] addrconf_notify+0x771/0x1050 [ 418.219832][ T87] notifier_call_chain+0x19d/0x3a0 [ 418.224923][ T87] register_netdevice+0x173a/0x1cf0 [ 418.230110][ T87] __ip_tunnel_create+0x3e8/0x560 [ 418.235115][ T87] ip_tunnel_init_net+0x2e7/0x840 [ 418.240122][ T87] ops_init+0x35c/0x5c0 [ 418.244257][ T87] setup_net+0x118/0x340 [ 418.248478][ T87] copy_net_ns+0x50e/0x730 [ 418.252881][ T87] page last free pid 10519 tgid 10507 stack trace: [ 418.259357][ T87] __free_frozen_pages+0xbf8/0xd70 [ 418.264458][ T87] __slab_free+0x263/0x2b0 [ 418.268858][ T87] qlist_free_all+0x97/0x100 [ 418.273436][ T87] kasan_quarantine_reduce+0x148/0x160 [ 418.278877][ T87] __kasan_slab_alloc+0x22/0x80 [ 418.283710][ T87] __kmalloc_cache_noprof+0x2ba/0x660 [ 418.289061][ T87] register_netdevice+0x582/0x1cf0 [ 418.294154][ T87] register_netdev+0x40/0x60 [ 418.298728][ T87] loopback_net_init+0x75/0x150 [ 418.303559][ T87] ops_init+0x35c/0x5c0 [ 418.307699][ T87] setup_net+0x118/0x340 [ 418.311917][ T87] copy_net_ns+0x50e/0x730 [ 418.316315][ T87] create_new_namespaces+0x3e7/0x6a0 [ 418.321579][ T87] unshare_nsproxy_namespaces+0x11a/0x160 [ 418.327278][ T87] ksys_unshare+0x4f4/0x900 [ 418.331763][ T87] __x64_sys_unshare+0x38/0x50 [ 418.336509][ T87] [ 418.338813][ T87] Memory state around the buggy address: [ 418.344418][ T87] ffff88806ce88180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 418.352460][ T87] ffff88806ce88200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 418.360497][ T87] >ffff88806ce88280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 418.368535][ T87] ^ [ 418.376229][ T87] ffff88806ce88300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 418.384267][ T87] ffff88806ce88380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 418.392307][ T87] ================================================================== [ 418.421727][ T87] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 418.428935][ T87] CPU: 1 UID: 0 PID: 87 Comm: kworker/1:2 Not tainted syzkaller #0 PREEMPT(full) [ 418.438127][ T87] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 418.448179][ T87] Workqueue: events smc_ib_port_event_work [ 418.453997][ T87] Call Trace: [ 418.457274][ T87] [ 418.460202][ T87] vpanic+0x1e0/0x670 [ 418.464176][ T87] panic+0xc5/0xd0 [ 418.467881][ T87] ? __pfx_panic+0x10/0x10 [ 418.472291][ T87] ? preempt_schedule_thunk+0x16/0x30 [ 418.477666][ T87] ? preempt_schedule_thunk+0x16/0x30 [ 418.483027][ T87] ? __ethtool_get_link_ksettings+0x5e/0x170 [ 418.488994][ T87] check_panic_on_warn+0x89/0xb0 [ 418.493921][ T87] ? __ethtool_get_link_ksettings+0x5e/0x170 [ 418.499884][ T87] end_report+0x6f/0x140 [ 418.504114][ T87] kasan_report+0x128/0x150 [ 418.508611][ T87] ? __ethtool_get_link_ksettings+0x5e/0x170 [ 418.514576][ T87] __ethtool_get_link_ksettings+0x5e/0x170 [ 418.520367][ T87] ib_get_eth_speed+0x180/0x7f0 [ 418.525201][ T87] ? rxe_query_port+0x7e/0x3d0 [ 418.529957][ T87] ? __pfx_ib_get_eth_speed+0x10/0x10 [ 418.535314][ T87] ? do_raw_spin_unlock+0xf5/0x210 [ 418.540416][ T87] rxe_query_port+0x93/0x3d0 [ 418.544994][ T87] ib_query_port+0x170/0x830 [ 418.549570][ T87] smc_ib_port_event_work+0x15a/0x940 [ 418.554927][ T87] ? process_scheduled_works+0xa0f/0x17a0 [ 418.560626][ T87] ? process_scheduled_works+0xa0f/0x17a0 [ 418.566331][ T87] process_scheduled_works+0xaec/0x17a0 [ 418.571869][ T87] ? __pfx_process_scheduled_works+0x10/0x10 [ 418.577839][ T87] ? assign_work+0x3d5/0x5e0 [ 418.582413][ T87] worker_thread+0xa50/0xfc0 [ 418.586993][ T87] kthread+0x388/0x470 [ 418.591046][ T87] ? __pfx_worker_thread+0x10/0x10 [ 418.596144][ T87] ? __pfx_kthread+0x10/0x10 [ 418.600727][ T87] ret_from_fork+0x51e/0xb90 [ 418.605318][ T87] ? __pfx_ret_from_fork+0x10/0x10 [ 418.610425][ T87] ? __switch_to+0xc7d/0x1400 [ 418.615092][ T87] ? __pfx_kthread+0x10/0x10 [ 418.619670][ T87] ret_from_fork_asm+0x1a/0x30 [ 418.624429][ T87] [ 418.627836][ T87] Kernel Offset: disabled [ 418.632154][ T87] Rebooting in 86400 seconds..