last executing test programs: 5.060388323s ago: executing program 2 (id=8561): r0 = socket$inet(0x2, 0x2, 0x1) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x40, 0x1411, 0x800, 0x70bd2c, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x1}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x4}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x1}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x800) connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @local}, 0x10) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x18, 0x1410, 0x400, 0x70bd2d, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0xd0}, 0x20008000) sendmmsg$inet(r0, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="0800142d733f5d3e", 0x8}], 0x1}}], 0x1, 0x2004000) 5.050854419s ago: executing program 0 (id=8562): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000005c0)={0x0, 0x0, 0xfffffffffffffffc, 0x0, 0xfffffff8}, 0x38) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000080)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0xd, &(0x7f0000000900)=ANY=[@ANYBLOB="1802000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000600850000008200000085000000a000000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2000}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000140)={&(0x7f0000000200)="8d548ad335c883ce2e61fad9c0721d34d707a74d906b29a7056607beaa8ee9e3568f53389ec111c2c6edd0c6d82ce08ea5150b86eb449a978a3b146a2abe509fea3ec3158bb26c8753e9be24c851db65472c10cd0626937943a08e63ad1163d1fa11ffe7e11a96e44c2054d6ca419f61f3252ae215d04efcb1461009d2403fec2d50426a4d6136e3aa4906f172e5b6aec195215f7db1eb", &(0x7f00000000c0)=""/9, &(0x7f0000000440)="032843e14556349f1ec6987c367f4db37b38e79fffd0f9d939c67a3362ddf7cca40ba628eb3d1f9b47c1f8ef7eab7e20eefe199e97a8b3e7b2f9c5fd1eb31574641ec704c266e67722625b190b76ee639f8297c0f6d30006766f2e0b5bba54b9017a832015c85db92b4b58495a6c4d16822cce77437d857548cd18274495e6aae1eac9e0af1472bfc2a8", &(0x7f0000001080)="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", 0x8, r3, 0x4}, 0x38) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0x10}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x2f, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001040)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r4, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x4}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r5 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r5, &(0x7f00000005c0)="bad330fbc9b55400040000ea0756a85d86dd", 0x5ea, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r4, 0x1, 0xd8, 0x6, @multicast}, 0x14) 5.001785097s ago: executing program 2 (id=8563): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) setsockopt(r0, 0xc41, 0xdf, &(0x7f0000001100), 0x0) (async) setsockopt(r0, 0xc41, 0xdf, &(0x7f0000001100), 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) (async) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4000000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000100000180012800e0001007769726567756172640000000400028008000a00", @ANYRES32=r2], 0x40}, 0x1, 0x0, 0x0, 0x800}, 0xc0b0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) (async) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)={0x1c, r5, 0x1, 0x0, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r6}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_ADD_TX_TS(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x50, r3, 0x10, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x10, 0x5c}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0x8}, @NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0xa9e8}]}, 0x50}, 0x1, 0x0, 0x0, 0x40800}, 0x4) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r7, @ANYBLOB="0000000002000000b705000008000000850000005e00000095"], &(0x7f0000000300)='GPL\x00', 0x4, 0xff2, &(0x7f00000014c0)=""/4082, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) 4.693144724s ago: executing program 0 (id=8566): unshare(0x62040200) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0xa0, r2, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x1}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x9}, @NL80211_ATTR_SCAN_SSIDS={0x6c, 0x2d, 0x0, 0x1, [{0xb, 0x0, @random="250e8aefc3c223"}, {0x5, 0x0, @random='2'}, {0xa, 0x0, @default_ap_ssid}, {0xa, 0x0, @default_ap_ssid}, {0xa, 0x0, @default_ibss_ssid}, {0xa, 0x0, @default_ibss_ssid}, {0xa, 0x0, @default_ibss_ssid}, {0xa, 0x0, @default_ibss_ssid}, {0xa, 0x0, @default_ibss_ssid}]}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x8, 0x8}}]}, 0xa0}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfffff000) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r3, 0x84, 0x7b, &(0x7f0000000000), 0x8) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r5, &(0x7f00000002c0)={'a', ' *:* ', 'wm\x00'}, 0x9) (async) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="5c0000000206050800000000000000000000000005000400000000000900020073797a30000000001400078008001340000000000800064000000000050005000000000005000100060000000d000300686173683a6d6163"], 0x5c}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r7 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) ioctl$TUNATTACHFILTER(r7, 0x401054d5, &(0x7f0000000040)={0x2000003c, &(0x7f0000000280)}) bind$bt_hci(r8, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) write$bt_hci(r8, &(0x7f0000000040)=ANY=[], 0x6) (async) sendmsg$IPSET_CMD_ADD(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="440000000a0605000000000000000000010000050900020073797a30000000000500010007000000080009400000000114000880100007800a001100aa"], 0x44}, 0x1, 0x0, 0x0, 0x8040}, 0x44000) 4.647448571s ago: executing program 2 (id=8568): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1f, 0x18, &(0x7f0000000300)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffe}, [@printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7ff}}, @snprintf={{}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x5, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x6a}}]}, &(0x7f0000000600)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x1e, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket(0x14, 0x2, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x61d8, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r1}, 0xc) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYRES8=r1], 0x48) setsockopt$netrom_NETROM_IDLE(0xffffffffffffffff, 0x103, 0x7, &(0x7f0000000180)=0x9, 0x4) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x5, 0x4, 0x4, 0x7, 0x0, 0x1}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000f00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r5}, 0xc) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r3, 0x4048587b, &(0x7f0000000c00)={{r5, &(0x7f00000003c0)='\x00', 0x4000, &(0x7f0000000400)={@_ha_fsid={[0x6, 0x2]}, {0x101, 0x3, 0x7, 0xfff}}, 0x4, &(0x7f0000000440), &(0x7f0000000480)}, 0x8, &(0x7f0000000b00)=[{0x1, 0xfffff000, &(0x7f00000004c0), &(0x7f0000000500), 0x0, 0x18}, {0x2, 0x8, &(0x7f0000000540)=')\xb6\x00', &(0x7f0000000640)="294dbc017b6d22d10f04d17554fbd68ccd45f9ff7ed04b3d39768183f80a7f350227403c45e6ba8233112a0fd8d1431284ad4270b0e458d97a14dde4a93b05ec29995eb819591ea2f6948337a605def4381d97a1a728260b1438373c5434481e115daebd61d92c97002d2fa9103621c408289f69d021d5a5bcc92b5fa7e07687cac82c18309aee1386860589e39a59b041ebf1a9a49411b03b2043037ff62f3bb5076c62d51362cfa1cec79442c7cf916d77a64ced3a9a3686653acd152ab3ed2e7fd8266843e1705503548775e8739e22e74fb21c028b8fdad96c0a73f5f6942e661dc5eb1ff46daa72", 0xea, 0x28}, {0x1, 0x5, &(0x7f0000000580)='.-\x00', &(0x7f0000000800)="ae382ec18e1c26d8edb4879c01e7d6da91fc8b3a3253f40f1916f2c8a188982911efcea5149767b8422dfec31bed4e5fee9b6c7a54c13a85618e767469ff3588f04a07efe24d7d2248d209349a60a69fba73565de1c1342989ff2b6bd2d9e7041ad689ff308186e046de27f39b92307eb59013f1572e25ba39b8b57009666776e44d14113ffd78e0951175aa03b07e6ba68e5587", 0x94, 0x3a}, {0x1, 0x2, &(0x7f00000005c0)='-!^\xd9+\x00', &(0x7f0000000740)="ff910293f21f", 0x6, 0x20}, {0x1, 0x8, &(0x7f0000000780)=']^[@{}\x00', &(0x7f00000008c0)="26c1fbd74a74bef5325313b6b7487f9dacd1ebbc6575a76915b2da8d", 0x1c, 0x22}, {0x0, 0x1, &(0x7f0000000900)='\x00', &(0x7f0000000940)="b3d5eea6e46c0b2ffa9ebedfb4839ce8cc4dbf0d64cd6e8874ee72e446e90857a4ee54b466a43b5ba6f633a78537a66f05d485a2bd32b5a48ce8ab59b84e026e83feaa3c1d17207b9b598109afb68908861a6dda5615648fdfa0ebc29b40", 0x5e, 0x8}, {0x2, 0x10000, &(0x7f00000009c0)='GPL\x00', &(0x7f0000000a00)='!St', 0x3, 0x12}, {0x3, 0x2, &(0x7f0000000a80)='.+\x00', &(0x7f0000000ac0)="e1b08909d55da15e436d", 0xa, 0x10}]}) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xf0}, [@printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xd}, {0x85, 0x0, 0x0, 0x2d}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0)={r6}, 0xc) 3.665528895s ago: executing program 2 (id=8578): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x2}) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000000), &(0x7f0000000040)=0x4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000380)=0x2) (async) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) pselect6(0x40, &(0x7f0000000800)={0x2, 0x9, 0xa, 0x7fff, 0x0, 0xbea, 0x1, 0x8000000000000000}, &(0x7f0000000840)={0x9, 0xec15, 0x0, 0x4, 0xe, 0x200, 0x9, 0xffc7}, 0x0, 0x0, 0x0) 3.332522564s ago: executing program 2 (id=8579): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r1, 0x0, 0xf3a, 0x0) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000000), &(0x7f0000000040)=0x4) r2 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast1={0xff, 0x5}}, 0x1c) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0xb, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) 2.064539421s ago: executing program 0 (id=8586): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f3, &(0x7f00000002c0)={'sit0\x00', &(0x7f00000000c0)={'tunl0\x00', 0x0, 0x0, 0x10, 0x3, 0x80001000, {{0x5, 0x4, 0x0, 0x3c, 0x14, 0xfffe, 0xfffc, 0xfb, 0x89, 0x0, @private=0xa010101, @dev={0xac, 0x14, 0x14, 0x2a}}}}}) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a310000000014000780050015000c0000000800124000000000050005000a000000050004000000000010000300686173683a6970"], 0x5c}, 0x1, 0x0, 0x0, 0x80}, 0x0) r4 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r4, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x18, 0x1, 0x24, 0x3}}], 0x18}, 0x0) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="64000000020601080000000000a4c5000000fffd14000780080011400000001805001500060000000500010006000000050005000a00000005000400000000000900020073797a300000000016000300686173683a6e65742c706f72742c6e6574"], 0x64}}, 0x80) r5 = socket(0x2, 0x80805, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x40, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x9}]}, &(0x7f00000002c0)=0x10) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r7, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp_SCTP_MAXSEG(r5, 0x84, 0xd, &(0x7f0000000080)=@assoc_value={r8, 0x1ff}, 0x8) sendmsg$sock(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000500)="7a6eca88ca428c8d4f36c8b8fc2047659bdcb41a9ebe5ac0bed120803c7a3c234c9374525174ae867806e58adcd922e70fa89f0e436ab60903ade8f578c74ba99b07a004bd18353b4297f72687eb20f87000b500996f109878e8a4c9536d4743818a16710348fa0f85dcaf2c3c1afb41f0919985", 0x74}, {0x0}, {&(0x7f0000000180)="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", 0xfb}], 0x3}, 0x48b4) 1.659900546s ago: executing program 4 (id=8592): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x34}, [@ldst={0x6, 0x0, 0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48) (rerun: 64) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f00000002c0), 0x4) sendmmsg$inet6(r0, &(0x7f0000001340)=[{{&(0x7f0000000140)={0xa, 0x4e21, 0x8, @dev={0xfe, 0x80, '\x00', 0x29}}, 0x1c, 0x0}}], 0x1, 0xc040) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000180)={'pimreg0\x00', 0x1}) (async) ioctl$TUNSETOFFLOAD(r2, 0x400454ce, 0x19) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'pimreg0\x00', 0x1}) (async) sendto$inet6(r0, 0x0, 0x0, 0x41, 0x0, 0x0) 1.556691695s ago: executing program 1 (id=8593): sendmsg$SMC_PNETID_GET(0xffffffffffffffff, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) write(0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_netfilter(0x10, 0x3, 0xc) socket$unix(0x1, 0x1, 0x0) (async) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000800)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x5}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000004a40)=@newtfilter={0x68, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0x0, 0x4}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_flow={{0x9}, {0x38, 0x2, [@TCA_FLOW_EMATCHES={0x34, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xae35}}, @TCA_EMATCH_TREE_LIST={0x28, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x8, 0x7, 0x2}, {{0x2, 0x1, 0x1}, {0x0, 0x1, 0x0, 0x1}}}}, @TCF_EM_IPSET={0x10, 0x3ffe, 0x0, 0x0, {{0xfff7, 0x8, 0x4}, {0x0, 0x2, 0x6}}}]}]}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x1, 0x4, 0x8, 0xd27}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r4}, &(0x7f00000004c0), &(0x7f0000000500)}, 0x20) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) socket$kcm(0xa, 0x3, 0x87) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r7, 0x4000000000000, 0x40, &(0x7f0000002f00)=@raw={'raw\x00', 0xc01, 0x3, 0x1248, 0x1100, 0x5002004a, 0x0, 0x0, 0x0, 0x11b0, 0x3c8, 0x3c8, 0x11b0, 0x3c8, 0x3, 0x0, {[{{@uncond, 0x60, 0x10a0, 0x1100, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x1, 0x2, 0x0, 0x0, './cgroup.cpu/syz1\x00'}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, 0xfff9, 0x2, [0x7, 0xc, 0x1f, 0x32, 0x2a, 0xa, 0x3d, 0x3e, 0x2d, 0x17, 0x19, 0xc, 0x25, 0xd, 0x3e, 0x79], 0x0, 0x1000, 0x5b5}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "53f99237f41c832fc8969da1f2b7a86ddedeb7587f1590839a7a3acebc0f"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x12a8) (async) setsockopt$IPT_SO_SET_REPLACE(r7, 0x4000000000000, 0x40, &(0x7f0000002f00)=@raw={'raw\x00', 0xc01, 0x3, 0x1248, 0x1100, 0x5002004a, 0x0, 0x0, 0x0, 0x11b0, 0x3c8, 0x3c8, 0x11b0, 0x3c8, 0x3, 0x0, {[{{@uncond, 0x60, 0x10a0, 0x1100, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x1, 0x2, 0x0, 0x0, './cgroup.cpu/syz1\x00'}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, 0xfff9, 0x2, [0x7, 0xc, 0x1f, 0x32, 0x2a, 0xa, 0x3d, 0x3e, 0x2d, 0x17, 0x19, 0xc, 0x25, 0xd, 0x3e, 0x79], 0x0, 0x1000, 0x5b5}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "53f99237f41c832fc8969da1f2b7a86ddedeb7587f1590839a7a3acebc0f"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x12a8) r8 = socket$kcm(0x2, 0xa, 0x2) pselect6(0x40, &(0x7f0000000040)={0x6, 0x8, 0xc97, 0xdd43, 0x10000000004, 0x3c, 0x1, 0x2}, 0x0, 0x0, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @random="2b0436d23321"}) write$tun(r6, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd120005000000140000006000000008008700fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2000001, 0x12, r5, 0xffffc000) (async) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2000001, 0x12, r5, 0xffffc000) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000080)='syz0\x00', 0x1ff) (async) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000080)='syz0\x00', 0x1ff) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000100)={'tunl0\x00', &(0x7f0000000000)={'gretap0\x00', 0x0, 0x80, 0x80, 0xffa, 0x9, {{0x37, 0x4, 0x2, 0x9, 0xdc, 0x67, 0x0, 0x9, 0x2f, 0x0, @rand_addr=0x64010102, @private=0xa010102, {[@timestamp_addr={0x44, 0x44, 0x7, 0x1, 0x2, [{@private=0xa010102, 0x2}, {@multicast2, 0x8}, {@local, 0x2}, {@loopback, 0x1}, {@dev={0xac, 0x14, 0x14, 0x1b}, 0x3}, {@multicast1, 0x8000}, {@loopback, 0x7}, {@local, 0x8}]}, @timestamp_prespec={0x44, 0x2c, 0x5f, 0x3, 0x5, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0xa0c}, {@broadcast, 0x7}, {@dev={0xac, 0x14, 0x14, 0x19}, 0x3ff}, {@loopback, 0x7}, {@loopback, 0x3ff}]}, @cipso={0x86, 0x42, 0x1, [{0x7, 0x5, "5314ff"}, {0x1, 0xd, "5b7d2042c3db2309533348"}, {0x0, 0x11, "20e6dee7f5e78b9087202aeaaa05b3"}, {0x7, 0x9, "fb5fcb7d4cb3b5"}, {0x0, 0xa, "140ceaf0833a1585"}, {0x0, 0x6, "8c3d09ef"}]}, @timestamp_addr={0x44, 0x14, 0x37, 0x1, 0xe, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3ff}, {@loopback, 0xc}]}, @end, @end]}}}}}) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xc, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000d100000000000000000000730141000000000095"], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xcb, '\x00', r9, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.408786249s ago: executing program 4 (id=8594): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01080000000000000000030000000900010073797a310000000014000000020a010400000000000000000000000020000000000a010800000000000000000a0000000900010073797a310000000034000000140a030000000000000000000300000008000340000000000900010073797a3100000000090002"], 0xb0}}, 0x0) ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f0000000180)={r0, &(0x7f0000000000)='\x00', 0x4c8040, &(0x7f0000000040)={@align=0x9, {0x1, 0xa, 0x2, 0x3ff}}, 0x0, &(0x7f0000000080), &(0x7f0000000140)=0x74}) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x20) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x2c, r3, 0x5, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}]]}, 0x2c}, 0x1, 0x0, 0x0, 0x40048}, 0x0) sendmsg$NL80211_CMD_SET_COALESCE(r1, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000002c0)={&(0x7f0000001940)=ANY=[@ANYBLOB="38010000", @ANYRES16=0x0, @ANYBLOB="200027bd7000fddbdf256500000000000300", @ANYRES32=r4, @ANYBLOB="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"], 0xfcee}, 0x1, 0x0, 0x0, 0x8024}, 0x20000800) 1.406832968s ago: executing program 4 (id=8595): setsockopt$MRT_DEL_MFC(0xffffffffffffffff, 0x0, 0xcd, &(0x7f0000000000)={@local, @dev={0xac, 0x14, 0x14, 0x19}, 0x0, "c3e1236806655b7d76f5dc01478cda9854af6b50f8811027f2ffb5b7a311b5ca", 0x94ba, 0x6ed44190, 0x400, 0x7e7683c4}, 0x3c) r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000000040)="d9b6b3c26d3f73945c7fff707ef65f06be80d32aba0854ee0a66fd2f3847e9dc555110860899867c2d97f9a8f86b91ecc66dc1845fcb51e009231315f1d981044210fefc65e8342e13b09253c855693344dff1b333bf9a823173ed0b0de47cb4ceb7d73d10d98ebcba0f043e09b24686dd0e9650f4e8d256941fc5e06ccedb78ada797ed5ddd16c4c481e85ba525247961fb42c8516a20175949fd25d247caefe1fec70ecd5aff264676a5c3db3cc3895a14db06b9f1e2d29122914460b2e682963718cfa6e7ae1ec128f6b1b9a6cb1c", 0xd0, 0x0, &(0x7f0000000140)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0xe}}, 0x10) ioctl$sock_inet_SIOCDELRT(r0, 0x890c, &(0x7f00000001c0)={0x0, {0x2, 0x4e21, @remote}, {0x2, 0x4e21, @rand_addr=0x64010100}, {0x2, 0x4e23, @rand_addr=0x64010100}, 0x18, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000180)='bridge0\x00', 0x500000000000000, 0x8, 0x800}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000003c0)={'tunl0\x00', &(0x7f00000002c0)={'sit0\x00', 0x0, 0x20, 0x10, 0x9, 0xb, {{0x29, 0x4, 0x1, 0x13, 0xa4, 0x65, 0x0, 0x3, 0x29, 0x0, @multicast1, @dev={0xac, 0x14, 0x14, 0x3a}, {[@rr={0x7, 0xf, 0x68, [@local, @dev={0xac, 0x14, 0x14, 0x30}, @multicast1]}, @timestamp={0x44, 0x18, 0x24, 0x0, 0x7, [0x2adc3d06, 0x7f, 0x9, 0x4, 0xc]}, @cipso={0x86, 0x1f, 0x1, [{0x2, 0xb, "a3b1599e768f46a627"}, {0x5, 0xe, "2a204900b2786fe1fd243970"}]}, @timestamp={0x44, 0x8, 0xb8, 0x0, 0x6, [0x6]}, @rr={0x7, 0x27, 0x41, [@multicast1, @private=0xa010101, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, @remote, @multicast1, @empty, @private=0xa010101, @dev={0xac, 0x14, 0x14, 0x21}]}, @generic={0x7, 0x5, "a3e871"}, @timestamp={0x44, 0x14, 0xde, 0x0, 0x3, [0xf0000000, 0x2, 0xead, 0xff]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000480)={'ip6_vti0\x00', &(0x7f0000000400)={'ip6tnl0\x00', 0x0, 0x3184ec1f91366bff, 0x6, 0x1, 0x3, 0x10, @local, @private1={0xfc, 0x1, '\x00', 0x1}, 0x700, 0x7, 0x8}}) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000005c0)=[{{&(0x7f0000000240)={0x2, 0x4e20, @loopback}, 0x10, &(0x7f0000000280), 0x0, &(0x7f00000004c0)=[@ip_retopts={{0xa0, 0x0, 0x7, {[@generic={0x88, 0x3, 'G'}, @rr={0x7, 0xb, 0x4e, [@local, @loopback]}, @ra={0x94, 0x4}, @timestamp_addr={0x44, 0x1c, 0x2f, 0x1, 0x6, [{@local, 0x4e6}, {@private=0xa010101, 0xffffffff}, {@private=0xa010101, 0x2}]}, @cipso={0x86, 0x48, 0x2, [{0x1, 0x2}, {0x5, 0x4, "ef96"}, {0x0, 0x4, "ea08"}, {0x5, 0xf, "7036fc90664c1c89f80cc9a519"}, {0x5, 0xd, "ec66b684420897f4489574"}, {0x1, 0xb, "61a67a094a7ca33217"}, {0x2, 0xc, "0e3ad99ae30d6f123109"}, {0x6, 0x5, "f51a19"}]}, @cipso={0x86, 0x18, 0x0, [{0x5, 0x3, '\f'}, {0x6de6dad5ad6d1c7d, 0xf, "c5ac36b814fc231bf8250d1c2a"}]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @remote, @remote}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x5}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @remote, @empty}}}], 0xf8}}], 0x1, 0x18080) pwrite64(r0, &(0x7f0000000600)="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", 0xfe, 0x2) ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f0000000800)={r0, &(0x7f0000000700)='!\xe2\x00', 0x20a00, &(0x7f0000000740)={@align, {0x3, 0x10, 0xf, 0x80000000}}, 0x7, &(0x7f0000000780), &(0x7f00000007c0)=0x9}) sendmsg$nl_route(r3, &(0x7f0000000a00)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000880)=@setlink={0x138, 0x13, 0x200, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, 0x2101, 0x1cd0}, [@IFLA_PORT_SELF={0x80, 0x19, 0x0, 0x1, [@IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "ad9b718e052f03dd949b1ca6583b8fbb"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "fae8c291b73752d25a8e2a21e806558f"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "b0797aa161488535085116df1b901373"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "a9b2db4cc6423fcf597f116886ed2962"}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x7}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "07ecd5728bf38527c457682906316d1c"}, @IFLA_PORT_VF={0x8, 0x1, 0x7fff}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x84}]}, @IFLA_OPERSTATE={0x5, 0x10, 0x5}, @IFLA_PROP_LIST={0x90, 0x34, 0x0, 0x1, [{0x14, 0x35, 'batadv_slave_0\x00'}, {0x14, 0x35, 'veth1_to_team\x00'}, {0x14, 0x35, 'ipvlan1\x00'}, {0x14, 0x35, 'geneve0\x00'}, {0x14, 0x35, 'veth0_to_hsr\x00'}, {0x14, 0x35, 'vxcan1\x00'}, {0x14, 0x35, 'ip6tnl0\x00'}]}]}, 0x138}, 0x1, 0x0, 0x0, 0x40c1}, 0x40) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000a80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000ac0)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r4, &(0x7f0000000b80)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x1c, r5, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x1c}}, 0x4004080) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, &(0x7f0000000bc0)={0x9, 0x2, 0x5, 0x0, 0xe}) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000c40)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_INTERFACE(r4, &(0x7f0000000d00)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x38, r5, 0x4, 0x70bd29, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000010}, 0x8880) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000d80)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r4, &(0x7f0000000e80)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000e40)={&(0x7f0000000dc0)={0x60, r5, 0x800, 0x70bd29, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_CCA_ED_LEVEL={0x8, 0xe, 0x10}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000011}, 0x40) sendmsg$NL802154_CMD_SET_LBT_MODE(r4, &(0x7f0000000fc0)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f00)={0x50, r5, 0x4, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_LBT_MODE={0x5}, @NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}, @NL802154_ATTR_LBT_MODE={0x5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x440c0) r10 = syz_genetlink_get_family_id$nfc(&(0x7f0000001040), r4) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f0000001080)=0x0) sendmsg$NFC_CMD_VENDOR(r4, &(0x7f0000001300)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000012c0)={&(0x7f00000010c0)={0x1f0, r10, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@NFC_ATTR_VENDOR_DATA={0xe5, 0x1f, "10a0eabe000a05dc60ef893dec02eb40618b9c0c383777adb8bf6d3d51640e80ba3fb8ce219f32163a880293b95e52f11c7e0229e3e0515f4dcd6df476ec62e813e375f0b29dd859c7547706473d1bc46f809c5466ee0544c15250e181c63a245753b8e1b49da56d5114c29a9fca01dd3816d70f51cdcf720140e67169fd42acfb0e332059aefb2107a7d371febd24b4fea9c2748826a2d3af24702fb6272023d622223dcc70096c8691ef4ad9a9aed7661636971ba868a489413c8ef9c159bf463fae74f56bc754072a98bc2d479c8238b4f7362e48484c185cef261aef4a0396"}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r11}, @NFC_ATTR_VENDOR_DATA={0x26, 0x1f, "dfac8e9043ac446faa66aa897b0e4b0c7fd33afb0072978178b99339851305bad86a"}, @NFC_ATTR_VENDOR_DATA={0xc1, 0x1f, "8f954159a16c79b3fd927ada48330ca9eab4254eaa69f0ca96845a91452dc851d53898c950c60471477a8f31a223f4dba1ccff0a5a4edbab10955e60da2369f7a55fc366a4cd8c2b957ed2c89c948cde74918391ef6c02da0185cc9eb3937de7d5fdaee9a85be8d235ee5faac2862591050a5fa05f96c7f53105bfedf4554ab7f975080f9d65250d2f3b7ab7bccabbc7dfa6a174120c1e9bce41471d6209666b6b45817113433f5e15fb4e7ea17b1510133d8da8d8b74fb9643f9751e2"}]}, 0x1f0}, 0x1, 0x0, 0x0, 0x40040}, 0x48810) getsockname$packet(r3, &(0x7f0000001340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001380)=0x14) sendmsg$nl_route_sched(r7, &(0x7f0000001480)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001440)={&(0x7f0000001400)=@newchain={0x34, 0x64, 0x0, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x0, r12, {0xb, 0xb}, {0x1, 0x6}, {0xe}}, [@TCA_CHAIN={0x8, 0xb, 0xf42}, @TCA_RATE={0x6, 0x5, {0x9, 0x88}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20000010) socket$nl_xfrm(0x10, 0x3, 0x6) r13 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000001500), r4) sendmsg$NLBL_UNLABEL_C_ACCEPT(r4, &(0x7f0000001680)={&(0x7f00000014c0), 0xc, &(0x7f0000001640)={&(0x7f0000001540)={0xf0, r13, 0x20, 0x70bd26, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth1_to_team\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @empty}, @NLBL_UNLABEL_A_SECCTX={0x28, 0x7, 'system_u:object_r:setrans_exec_t:s0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x28, 0x7, 'system_u:object_r:power_device_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @rand_addr=0x64010102}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast2}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}, @NLBL_UNLABEL_A_SECCTX={0x24, 0x7, 'system_u:object_r:apm_bios_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private1}, @NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0xf0}, 0x1, 0x0, 0x0, 0x4}, 0x40010) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000001700)) 1.362434781s ago: executing program 4 (id=8596): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000002b40)='cubic', 0x4) setsockopt$inet6_int(r0, 0x29, 0x3, 0xfffffffffffffffd, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x34, r3, 0x2799f5eec7981083, 0x70bd28, 0x259fdbfc, {}, [@ETHTOOL_A_PAUSE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_PAUSE_RX={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x4c810}, 0x20000000) ioctl$EXT4_IOC_GROUP_EXTEND(r2, 0x40086607, &(0x7f00000000c0)=0x6) recvmmsg(r1, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}, 0xffff36bf}], 0x1, 0x0, 0x0) recvmsg(r1, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x40002000) close(0x3) 1.214604812s ago: executing program 0 (id=8597): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=@newqdisc={0x48, 0x24, 0x10, 0x70bd26, 0xfffffffc, {0x0, 0x0, 0x0, r5, {0x0, 0xfff4}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x200040f5) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newqdisc={0x6c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x7}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x3c, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x40, 0x6, 0x3, 0x8, 0x6, 0xffffff26, 0xc91b, 0x80, 0x8, 0x7, 0x15, 0x9d, 0x2, 0x5, 0x7, 0xc5f7}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x200400dc}, 0x0) close(0x3) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x60, 0x10, 0x401, 0x0, 0x3, {0x0, 0x0, 0x0, 0x0, 0xe59bca127d81b0fa, 0xc574450d1af7edbc}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x14, 0x5, 0x0, 0x1, [@IFLA_BRPORT_LEARNING={0x5, 0x8, 0x1}, @IFLA_BRPORT_MCAST_FLOOD={0x5}]}}}, @IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}]}, 0x60}}, 0x4040) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000100)=ANY=[@ANYRES32=0x0, @ANYBLOB="8e5a6e53"], 0x9) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$SIOCGETVIFCNT(0xffffffffffffffff, 0x89e0, &(0x7f0000000300)={0x1}) ioctl$SIOCPNENABLEPIPE(0xffffffffffffffff, 0x89ed, 0x0) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x200000c, 0x3032, 0xffffffffffffffff, 0x0) r8 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r8, &(0x7f0000006400)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2b}}, 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f00000003c0)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0xd, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, &(0x7f0000000240)=0x10) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r6, 0x84, 0x75, &(0x7f0000000080), &(0x7f00000000c0)=0x8) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000000040)={0x0, 0x64, "a5379732e936778b5db7bb9d4dbc70a31014443d1768de329c47182de01506888954a9f67f1b492b8ff41c557e6a7b29b65bf4ccc8761dd590812f4ba69d7a1d38e6f609dfa7f846c6c84d5a132658ed5e7956c882a38d06034889611e9b4db916ed5267"}, &(0x7f0000000240)=0x6c) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f00000002c0)={0x0, 0xfe00, 0x5, "f58c692b02"}, 0xd) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e21, @rand_addr=0x64010102}], 0x10) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000240)=ANY=[], 0x9) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000900)=[@in6={0xa, 0x4e23, 0x3f, @loopback, 0x5}], 0x1c) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) 820.365895ms ago: executing program 3 (id=8598): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_getroute={0x1c, 0x1a, 0x100, 0x70bd27, 0x25dfdbfe, {0x2, 0x10, 0x34, 0x7, 0xfd, 0x1, 0xc8, 0x9}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x28004080}, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_REMOVEDEF(r1, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0xa0, r2, 0x800, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @empty}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @loopback}, @NLBL_MGMT_A_DOMAIN={0x6, 0x1, '/\x00'}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @local}, @NLBL_MGMT_A_DOMAIN={0x6, 0x1, '\\\x00'}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @empty}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @loopback}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x2}]}, 0xa0}, 0x1, 0x0, 0x0, 0x24000801}, 0x204c014) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x101000, 0x0) ioctl$TUNSETFILTEREBPF(r3, 0x800454e1, &(0x7f0000000300)) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000340), r1) r5 = socket$inet6(0xa, 0x2, 0x31e81d75) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000380)={'syztnl2\x00', 0x0, 0x1, 0x700, 0x5, 0x9, {{0x16, 0x4, 0x1, 0x6, 0x58, 0x67, 0x0, 0xb, 0x4, 0x0, @local, @rand_addr=0x64010102, {[@ssrr={0x89, 0x17, 0xb9, [@local, @broadcast, @dev={0xac, 0x14, 0x14, 0x2b}, @remote, @multicast2]}, @ssrr={0x89, 0x17, 0x9e, [@local, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @broadcast]}, @timestamp={0x44, 0x14, 0xdb, 0x0, 0xb, [0x1, 0x4, 0x3, 0x8]}]}}}}}) setsockopt$MRT6_DEL_MIF(r5, 0x29, 0xcb, &(0x7f0000000440)={0x0, 0x1, 0x40, r6, 0x7}, 0xc) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000500)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r7, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x1c, r8, 0x400, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r9}, @void}}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004000}, 0x4944) r10 = socket$unix(0x1, 0x5, 0x0) r11 = socket$alg(0x26, 0x5, 0x0) bind$alg(r11, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx2\x00'}, 0x58) sendto(r7, &(0x7f0000000680)="c7bd9db7229cc5c651a1c6b8adee487dd01b601b96cd51aa87156f201ebbb46f65cda526567f2604829b340504a363191156c66ac4c97c8bd10ab9a425135e5958593091c7c671bf9df2e611c94baabd7bf34a05b991c5e57d2eb10af9fe42267c7a2ba7", 0x64, 0x4800, &(0x7f0000000700)=@alg={0x26, 'hash\x00', 0x0, 0x0, 'sha384-arm64\x00'}, 0x80) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f00000007c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r1, &(0x7f0000000b00)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000800)={0x2b8, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r12}, @NL802154_ATTR_SEC_KEY={0x284, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "8a5d4d6fa1416fad706f2a397ca5710f543b59dd6371e564d64cca54b4dc8a56"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "709d9a22face30d3e72c28ec3f00c69a663009eb99b0e3acde0d0dbc299a7866"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "1b1c15b0573cd2da6df123a6247c4ea4f981131c6c9d927404ffba178bc15d52"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "6f1891e59dbe161edff4520b6a0631f855172aedf7a9335d7683ac91cc0b3d93"}, @NL802154_KEY_ATTR_ID={0xa0, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x5799ae7}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x4c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6}]}, @NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}]}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "acd72697c7fd948525f45caa64560b92"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "80345b302c269b80dddc63230a4e6f0bdb1ec81f8baf5e3747452b8eff130dbf"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0xd}, @NL802154_KEY_ATTR_ID={0xfc, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x44, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa2}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}]}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x4}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x38, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}]}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x60, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa2}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}]}]}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "37765c4bdce46385bbb84ad1f828d86c"}]}]}, 0x2b8}, 0x1, 0x0, 0x0, 0x20000004}, 0x4000) sendto$inet6(r5, &(0x7f0000000b40)="58c2763f26944f14e08af0746f4863bbf18b4f83da88ba37fde8168a64fe7aa4f2b200a53704c60a2f7b7a07003a72c66fdeabc6010e54db288049c081e4637804a91ca9a1b636b2b3a86ee48e534fc0776838becc3915b061b93a5782ea50", 0x5f, 0x4000010, &(0x7f0000000bc0)={0xa, 0x4e21, 0x4556, @mcast2, 0x6}, 0x1c) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r10, 0x4058587a, &(0x7f0000000dc0)={{r7, &(0x7f0000000c00)='nl80211\x00', 0x113103, &(0x7f0000000c40)={@_ha_fsid={[0x0, 0xf]}, {0xc}}, 0x400, &(0x7f0000000c80)={@_ha_fsid}, &(0x7f0000000cc0)=0x9}, {[0x81, 0x40, 0x2f, 0x1ff]}, 0x6, 0xbc, &(0x7f0000000d00)=""/188}) connect$netrom(r13, &(0x7f0000000e40)={{0x3, @default, 0x2}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) writev(r5, &(0x7f0000000f80)=[{&(0x7f0000000ec0)="980f60260a87f303ac15592168a3a010f8db30262699", 0x16}, {&(0x7f0000000f00)="1077f33873f668a89eb763a81cfadb63cb27f8cbf795f4c821a739e659c417546c51e71251939af815d0ce846e6eed08430b5dd500d9165b4c4c07b956479cccd933a52b78a07577493b77d11f9474637117c5978a95b7dc4858c076774459986a8c24359f6a5baf958827a079c121e90d11c29992ca9c0b1c6a112f7c", 0x7d}], 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000001240)={0x12, 0x11, &(0x7f0000000fc0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0xffff}, [@initr0={0x18, 0x0, 0x0, 0x0, 0xb8, 0x0, 0x0, 0x0, 0x401}, @ldst={0x2, 0x3, 0x0, 0xa, 0x7, 0xc, 0x8}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}, @generic={0x6, 0x4, 0x3, 0x6, 0x5}, @generic={0x6, 0x3, 0x6, 0x8, 0x9}]}, &(0x7f0000001080)='syzkaller\x00', 0x4, 0x5f, &(0x7f00000010c0)=""/95, 0x83d00, 0x8, '\x00', r6, @cgroup_sock_addr=0x31, r13, 0x8, &(0x7f0000001140)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000001180)={0x5, 0x8, 0x8000, 0x9}, 0x10, 0x0, r13, 0x7, 0x0, &(0x7f00000011c0)=[{0x2, 0x4, 0xc, 0x2}, {0x2, 0x5, 0xe, 0xc}, {0x5, 0x3, 0xe, 0xb}, {0x2, 0x2, 0x10, 0x9}, {0x4, 0x5, 0xb, 0x7}, {0x4, 0x5, 0xc, 0x8}, {0x0, 0x1, 0x5, 0x3}], 0x10, 0x2}, 0x94) sendmmsg$alg(r13, &(0x7f0000003fc0)=[{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000001300)="025749aea37d", 0x6}], 0x1, 0x0, 0x0, 0x4}, {0x0, 0x0, &(0x7f0000001800)=[{&(0x7f0000001380)="a73224eb985a2976230ced0bf1b59719027d5d5f9de2ed2ebf0ef74c66d5363682b88e056e1f2f1fb06446dafa42e6ada383a6b42dec7112220248a2e7aed3a7641bddf080", 0x45}, {&(0x7f0000001400)="fcdd472739f8668d97b7914b66735d0c55e27a6f24da5eb958fef95ab23a1b4af236586d760a6b317b3b0a9d8ddd5eed31090a27682d511b0a6e7086972ba8a4489625d01f70cc20ea88951c8f32d6d20054f89999f028ac5044d942d4a64f821f95072bf157ba578d107bd795b60b4d33a0291c330a83dfab73c198a790f63ee1a1926f34bc88c98fead6067018edfeac3d07ec6f3e85062817a154f54fda87c3ec2227f62eae8fdb8b26dd18a97c819a", 0xb1}, {&(0x7f00000014c0)="5d6fa588d6a553c82118846ae2da3523e2942b88df4f7c8329ec3c593f03b96c3811d775f20e4219ec0ffae0708c1c9945b718cb2bcfd2420fbf7f671d31881cb72bf2666aa3e7ec22bd56c9f04311a1a784390cf0ece710202ada5aaa40ad55856da01ed3a3e8235281e1d868a9337fd8d6eda85a562a0d2cfceaa67971e34f4b6a58a83b638ec4697487c0c05ca77d833e72d884967e06a4", 0x99}, {&(0x7f0000001580)="349387c57536903f589e847c5666e84ef1c0e34ad0b2d06584c1e8029a8506bb3f81efa784f2567e97eb280542c876070c2a0b45a8543fb3a0cb90debf3ef8279fd1c5630a5f17eecd25a3572b3c7913748700c06ef55208eb3741d5a7c6bb6bf54678790b2aa5fc546308d6539a531be173b29fd05a9e50ee8ca0d250f7a00a91b781d593f673099ab4c741f342dbe781df397c14449e1e0cbaf8d70e2d0c28d1c9f13a9c6412e25323c802503b7982402caa8623ba833b150d205ca984863318370dbeb210c9e13e15d77f6b4aa1fe66984c9f0b1d86a29b3002860640afa0e65ff599540f0d6f61e85c982c5b1b", 0xef}, {&(0x7f0000001680)="4cde923117fc2ce117bbb0db86a9c308fe8f2b57e6d6f36187feb488639acd7bbac1bddbc428f7eaeaeaf0b3733e316c3008242f6c28637e1b9b3cb5cff8f298ee66b2ef23d1baa289b5e3a0b6a81116527472fa7049221151270967e241bdc4a1e5d4d68001776342338a010e79676d2099b196a2a34cc579167bf749da01fc7169d0c681320dd03b9d8c5ee886bb0a8fe6a9533949c3b0244762473681ab2427b5921cbf03f470ba385ae140872588cca8ba994ac736ad0fee26e8b4d015f3", 0xc0}, {&(0x7f0000001740)="4bf3ed6d7a01e1abccbd14e51dc508f6c9425ae069d542752dee680e4d5bf052de98a930bb99016ba7a3e0021f0584b1e39379b1de4aee9501201f2c02f83a506dda393f332b6b58acc339cc93dc03098498829f13ce3a7907a476ecd4a9a5136563d7c3db72a729", 0x68}, {&(0x7f00000017c0)="da7ad03f2e5efa97cbdf0e3c6bd2", 0xe}], 0x7, 0x0, 0x0, 0x4000000}, {0x0, 0x0, &(0x7f0000001940)=[{&(0x7f0000001880)="265c496ad6e73ad00b975f344866f3296a617604b994d6b3e5d3f4e0a018f6d9a75716d44589171c6516d9a0fbe09899734f003a4ab8f14c81fc266535c7149b81b3895cf0a4f65c2745191e35d67d660366f5b1c750383be906da14538fe4865b6ed55371883115aa0b8d2897c7e574d3f4b50e25493a9d0da236fe7782b7b5e154aa168d6dfd120e4748517550547cffe89f8798bc9662", 0x98}], 0x1, 0x0, 0x0, 0x20048000}, {0x0, 0x0, &(0x7f0000001b80)=[{&(0x7f0000001980)="325df7fd8c43478f24c03b9b19c84f019f34a9b5581ba229f1e91e3d959f634f2e5c08357ba7d22e0465761a00bd8cc0ae90c07077beff3bbcaefa925cb6dd46a2ed9a5bddf1ca8e49a72619dc5db50196c8ce65147c1a73723bddfe4017ec8239afda26b8a4b3c16709b6b47a6ce807c3414c0417ceb014247e0349bf2e9abcc756679fcd7e3d4124928e0747f3e08d0dc38ae5d14c0cb2806c6b52dc20b8aa60a480d103ca6a7aa5214a5657e580f900bba8ebba1e1cab770c043cc232ab3328ec667a994c699c2b9af5575c0795ac82f16aca52e6824d5b232fbffbd13fb0effb788efdaefe", 0xe7}, {&(0x7f0000001a80)="88f73dc4944155198c13ddb36485a4a9177e66e99cdedce20bc99e6d7097e3a54744b60ca6c9dba2182f576d84ceb4ad8ce355b21317374c4397dc40d0723ee5da07a5e09350bda85ee9e14864e714222b7f10c900e6a1176602e5a5ad674a0a0aeae53a4e87765d869cc78595ab9068acabcabff02fb27412bdfb159d3aa07433184fadf225c16cda467f6467ed8dfbe6babdff056aa6d70f867d1e722700f828a95d2491717f", 0xa7}, {&(0x7f0000001b40)="c85c614c1b9f62ce36a5ee7859ecd1", 0xf}], 0x3, &(0x7f0000001bc0)=[@op={0x18}], 0x18, 0x40}, {0x0, 0x0, &(0x7f0000003ec0)=[{&(0x7f0000001c00)="26b4e47b098526627ddf2e48219b14257f92b031a0daf0a7059f13c8045c5440a4807171230c73c11e6e", 0x2a}, {&(0x7f0000001c40)="0364c5368387a5db200b7dcd661624c38c2a7f628818454c7f536509ad5f8aef0a7ae0195a366bfa4fba4fef76f33071ef50f9dc46ea552d785a601734f1736afda42b613addd9f7c68163544915afcffa4cbd947a89cc52d71ab427dca133f9b265e030036facdfc2e1a5e232cd22538c3dfadd2e88d92df9d0ab2281e56e5b13e00e14ba6bcc04c5731ac190635c296ad89d3f8f23bfb2c9b8b2fd2181caa256ed52936c530415e6774abfb3fb674786447d5a2fd5fa8b845f3b6b345e1afda50193ebaaf342b83f2ceba684402852e6436b174a2378e3988b1d71322f0414e86d1deb8ebd9b2f83f10f6941207a4d3869c539a311b37a60088a64ccf57b68d1db9181c81200786a00534f2b32d663a34f7177b7f0f2f8b841c4272d0b96f6c65695f907a9639ca365d35e0a680776a928978c91673aa8bc816582186359ab0a3cb99608e1dfac8a80ef0d9a255c3ebce42678bd5d0c98f297c11444458d3ecda94b7aea2212c3909baef57df52e46d665ca65d4ad862b45ab7d83bf14d8ecf2faae91c0d3cf1ee4057774fe23fe9eb38164ddc868f8af5a788631f8dca6f305aba90f7e74fec657a94b02bac9dfb3839e5239a78e7f8326af783160cb616a2c2cf2e5a439dfe571bfaec2e292e5b6c52b973f7b13a0ed83fe1d1b59f852e54dfbe0a5b7bf579032467e42329f094b944dd40b7889a355ed82f67910182f00ca57dcec3a9c395dd7859afbe36fbe8b302e3cdd9d6875ceae10eecba918049cb447275a119c486629a73a44511b3c5f5ff07d49dd83b2e8c306e2b28d528aa28bcea8293cc207159864870596e167b6ff4be03a077904ec1f4b9e5e5917f85fa3811aaa0062392da46f65272a690819684c0bd3922f6e9116f6a55c5408e439c1b67f259c40a7d6e5959bf477ef86c83debd6f57c15004878451dab66728efb42dee39fbba25fbf31bdcdd047a8aca140c34024984ac7d6e10cd127a4edc2921863cf56a9536d4164cb92aaff831feda72709206d7e67d9b61de22fa850edf897d43f51ab471765619dbfad7eb522bdbeeb3a6fc977712049e4449fc3fc416039e6e0405e7c9f89cd3841aa747860b64548b10bc13528bebd12f0ce5afd6d648dc419e7d1e020b4fb9ab7720cd16beae01f5f717d897fe1f246186c73552f25cc7ddc0b0678b335dad27023d307a0c20c50084c3bf03d681e22c854fa1249399190cca94c07f26fec729aca902f7b9baf14f9d19af25bf16e68979233c15fcf70fd45137df5cb11f6ea55afc55c7e8e625843108cd7e864584a17b357d09b9004f681ded65bc28ac86852b7d0c3b04ae06956a0fcc83a5257f2d11115d4e6794a8c3d2a46aa0d577290014e1cd33499f8e3c9a4032f7fb2ece24f52bfd77011e755b9caf33d9d4bdf2d92e153a6efa07afcb208b9a3f771dee8cfb88a25a9286968fab9e4c83dc9c994e7ff69a3b0c4ff8b2088cede00c5384569a276d6e28de2382d5645a11a997e6bd5d26040b4328f240395fb71cea4b218b6106b5eb7b9e5c0c51630d51ab12870884b0b7da1c472a1885495a9cea0b8d14c813c02086a19e83c42e8754d14edb91eacc3b99d7a67ce6e6a11c1d6a180da3e44e394cc2fe3d66f0a6ee3598498a8ace9ad6f20bfc0ed4623962fde8e18d99ce2024ffe095c0a827fd394ec81c9df50ae94bf879adbe5308957da47e1d667c6abcfc82253ccfb14570335f5dec2bc1afb7a1eee4fc55660d05ab43c244d17ec5556010df550770865e5ab05644788d6c64245a0adfcbe4a35dff4851690fcd8f853e1a2327f5d9b6daa1962282eabb8166136c6eaeca98c9303ab9e1fd59bbc8ced2b36c928cee1c9db3b1f6490cbf0692595c389b4ec589bd5ac7bd0b6609b7e234e394c06ce76afdd12d72f4272c534c68e1c76a420308f8da2f663966c104c484ddddaaa53e2e7d134329bd9fa7bc0f99db94eb3cbf4fd7710330a27dd8779aa301d2a3e81b63f4a3275d13b374c4a164e7fad4e4248ed94edc54ccbb1151f3edd94ed3c9cf94d9c4965b86188fc6feaa2110b596556bd6f10fc0ba391344ac0ddf8182ba88e7d90494a3354713257db4a64d168c5cdaf495e2763475a4f4dbcd9ed5f4c0b69ddc625c6320ea3c7b2b1d48f6f4d9388943cce0f5eaf5f3b2e97ddd6a5a47e9c2091a27f4e7ee2b3a9bb042c839cd5fd9735e56cb91b00bcceeb48af11762ad3d23e110310afd6e9d95f21c52facf173e5f95bee0c47df1db04095a7abdf6eb64cd872f85afd4841ee2512eeb348b8d72f52d484b518112b4f596fb785de9fd91457cb6bc0f87d6b79f0f811dc66cbdbb0c5d1f96be1439cf296db2a9c86e0213a9f92aab176fdafe8b95f63ac4e4216b1b118d628eaf247b8a9cd07646d145978c2ae9fedbd53fc219ce0a1068fc5f08ef66aea1d89ad093972f20d2bf395a73f32bd25e9c4c23ef7035d5760e699129f3e67eaca0e93b515eca87948a8d7d03b92a3e3c00cf343fdbcdd99ad4c932fff0da4b4de0bab85ca01b0ddec7acf125b29294fd83dff0dd0ee1e77b28ad507f3fbd88356b5458e8272de57f97eb02d01cd2ac32e7635fb37ecd9977567d7fa2d867b3651289c2b40da6c1715a6b5565890ffbf36941da65ff5e143a4692aa396415d898856d64195d0c7456d11e3268149b4fdb260d1288c852059a32e6a33ddc0f6eb405bb50a59a526c13aab4795b7ece4368a37d2acc2875a65df88df7bf6e61a636111117bd336f2ab6a7bc4f1f3c48848189baf260d46c643ac859ea3e71ab811365acda0446e7aba4c5971acc2c32906c318056e03d62b41c0f6e8931f5065c84dc74c3be828218896e19cd95cd2b43826025bdecb636b55c88bf0c4642958efae71211382da50cbd54946e0cc48725c1667081b6f6d12bb3651d18d826c2534f26a714acdade637a25a1952983d450cd7c7e89d6accd6b0c0bf4b5f765ff58e0a88c582b810d938e481d0b4c0534dad44f4f04edd146adc65a82f4a9326a05d6f95d04c3d3ccc87e722054a3438c1ac086b0a7ffd99fd4ae2430e7b5b66b56e19b31c9f13d43531d0cd023c71efc4069a16458e697a6a556e2b1e2d8e12dbf07d695482ed582e06454d3e2c5369de7461aa5300a0e625a6f32252f444c8483d602ac6ff807dfd4b214b5fb3fbb386780ab4c646903d8056201834227193bc95e706b4f705de01c8c7a1172232b2fa173f4a7735f5478bcdd7d9f84e8a75a8dc2218491387996bd0c3dce4698712c846ad016e42b0627c575a9a3ad5d7373290e6c371428d627a3eafccf910bf40920ff8b5a8694e2b05471d3c6db991ff28101b6b7dfd8a12461f59988f87f21a43b59afecbc23e95aa878578b1d0c164082cb9f07aba4f8ef2565735bb8b73bc75789b6ea3a03a5cb47e12bc2af9460dbb17624dfa8cf1dcf1f6c992701049862ae4e44eae548cec6cab98a7c72fc3ec25152f36428569d6927ffc248276be8ed111859b10b378ce9bd2706ff1d56db1f267cb37ebe8d0682b93b7d649d33ef8c6fb9d31525284a0d7a17a8c7e3d73f19ec6d4bfbe1fecb7ffba0168adec0f55ca47ccb9b2777f5f44e050a71d0e094d155c2951c64a6be8f2f5489bcaeb1212bdc178d23f575a4ddd17566280cc844024ffa07aa2b3b02a1cc9b1cb46fc98003df5a8ec317418b9a33b34985f19612509dfd745f091926fb39c29ba15ca8b45384e1276494961f5680eaa495df3b04a0af127bb124d9d8f607fd0cc587d1833c11e93c20be927624a29a828c23ef799f168e30db8714e219356d92b0ec2368c1a93df4aeb6459c88db1b514f2e76f3e14356caad066656625512c695c8883119a6a0a1f85209ad3b3f7282c6e169c5eeb40a755e74df0455682f576ba250d2f5efad2d5b6e982cdb30dd7c652a43af367dfaebad16527bad2a76e7cc9f02c38f839dd194d289a560d6ee620953cfeea4647b0203ca0cfad66892e8fd37078e8c276067d516630918ee6189a900fb45a4f1dec3ed1bfd55799ff63b5157b7f0ab92eb367c132f030813de1e6eeb790559624fc5ce3365319816bdd4cba92cb5c3d48294e7ae6d91d3c8a7521099f3f34225a675c89d0e3ccc62ceb8fb3e4067991b7f395fdc2af19e7bb1a0aa130b44bc3a8e10504994ba2a0f9f5a139827e8aa8e91d8c77079c5369b19247e49fc25f9c35fe5d4775779fe7e649459be502b3f4af33386c0ffc0fedabc9dd391dec8b3d545a84d9d4ae8d2a0a2de3b7e1d212d687af4af522aaa4c3683e1f6f0032c946c048cd62a7c573c47ca047d69c2b64d84c2d5c0e5d5294656a4f36ac8cdd514d276f209eb7fe2dd60a92689653cad0fccbe2c0d4b56f6b80d6f91f6441226b4f8eadf26521ce5c2446bd616dcf087a55ec4f3e915660acf8138be2f2896c1ed18ded7186adeaf0eb83a58ed2fd0d5a9c62deafd4629698fad212fa5bc4dfe1b86699ef99e6cecc138526400c1bb2fcf59a2da6b4e31ec0e41c8e6b5b37242a7831329548aeedcce2988661073a31f2416b9413791d52efded49255bb9ba78769802f0e1d097650ef926ba8116fe5faadafab48a7a96bdfae9230a7394b300ca41b6a4585099f5d8fbd77225b5251aeaad117666d0137f8b6d233ef21af7ac37aba9468bb43443dfa9d934de2a68c4c5c260b3431bb7052257991932f46da409944f6fec373c477e592d4abbe2f9e78bb5846f540398ab125fe36007f33b2b611a321ca0ec5fac5ee754db34471708166226364dbe7ef816afb0c0f06a8c26f5a04a721a4b9103254679054d21ec16457aea73b992104f75ed1a33bcbd0e853a24d831b4fa410fc212861e66bd3aca257bee3ea56c9775cb22b1fb74fc076011ae1d8fe66893bb8c048d2a3e7db42de592b99f3c839df6e0ac47e75199890c7173dc87749cd37d45abb214ce786f7e4d093cea9f4f626b3db65b3754850a30755150c34188a76320b9921e38b3fc5c1c497b1680835238618aac81852109d15568cd61cffb9a4d7f2ac746d71a03923ad98460b6f5897adee8de477eca40529825b8453aaa85b57386fbf2c7932f9cfefcc7c630ec082b123ae700ec9abbbdbcc16dc20c9efc6b5bc52e1eee25146883dc0ed16edb869be2d2d95bcb3773ab741afefc60ca05bb3fe0a43e3ab310c9abc8861b57ff64d759da49e3ce1af700f8cc7cf45f2984eda02f03a3a8f95a0e41f840e58d0be0f91d31a48c6278e3ffb3005b0490c25269ca36f8d8d86573bccee6a206a54c73634cb4c2ac52c54f9136b469d20a1b229caf2af53517227f22c29f5ed9ddae06532a66db67c11c768af4b6a83688fc2c33a3802a5bf90fa4d99a282bcc118374b5b4e99057d1bb06a3df3f62dfa17f602061e9f0bd0538302df81eb9f503a51a882ac84012f081928a3a3dca76314e6a8873f5a36f6e7d29eb3d92da32bfc168809ea6916f878a93e9dea5a12026cad1d116f9ad0cb601a5a66ade47c4a2100e87d87ef41039e5c15c142d228a85a32f6645bc07a786340c497dd4ce421817cf3802d8f9e73298671a5dfb2862529436e3208714f5d6c80272b67d2bc107f7d4a73d938f1b96d414bb187414f1d1dca83fe0720cd8d38970fa51e946a8c31fca69098b07f933549c695d0958bc42365fa8b9c5ca1fde4edb950c212813741a5aa889c95eb1e215a7b947aad113c41eadc875b08532150bd69bf6e2f55d931071f756558baf48006fc687b7b80224a53f00ba3213dec595e8ec3698ce9f533f6650cca9d142568e34a191c4a62e91e7226033ecdd1", 0x1000}, {&(0x7f0000002c40)="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", 0xff}, {&(0x7f0000002d40)="0f09e73dc983a4cd70f54ae2b01eae4962bada165e1d75d28791b2607995247c7684a77af401cd972da88a6852a37b5ef96296da113b9552d4c70806a6deddb29c92d53bcdad49855f2b2b64cdcb7b24a001ecf37eaa791f3f28362039bb1d4374978c9ca452e6be9405e534c1e4c140bb855f82", 0x74}, {&(0x7f0000002dc0)="642cb243e034638e09d8be8e1586e8c3baf507bec53021750d5b9b1db26fcceae471a51541c1c90a2b9d392fdcf21f0ddd34394fbdb237e7c435a456744e29a3e3097e970503d4806418d3a2d7f0190359e569903dbdff73c5dc68a622ab7e4f82d06f300711be35d72e2faba95ea6e83c7264871b8a1251a3805e5f083ae40c2418f9cacb57f9a3340c8b3eee3052e55deca83b0fe0c7ef8a2221462928a60affd5c3169aa01ade1c78b7940c1d7e93db2a4186336675fd9ff7f6a7f1", 0xbd}, {&(0x7f0000002e80)="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", 0x1000}, {&(0x7f0000003e80)="4661039ff8545a", 0x7}], 0x7, &(0x7f0000003f40)=[@op={0x18}, @op={0x18}, @assoc={0x18, 0x117, 0x4, 0x6}, @op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x5b1}], 0x78, 0x80}], 0x5, 0x0) getsockopt$CAN_RAW_FD_FRAMES(r13, 0x65, 0x5, &(0x7f0000004100), &(0x7f0000004140)=0x4) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r13, &(0x7f0000004280)={&(0x7f0000004180)={0x10, 0x0, 0x0, 0xc400}, 0xc, &(0x7f0000004240)={&(0x7f00000041c0)={0x60, 0x1403, 0x200, 0x70bd2b, 0x25dfdbfc, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'ip_vti0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth1_to_bond\x00'}}]}, 0x60}, 0x1, 0x0, 0x0, 0x80}, 0x20004090) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(r1, &(0x7f0000004380)={&(0x7f00000042c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000004340)={&(0x7f0000004300)={0x14, r4, 0x205, 0x70bd2c, 0x25dfdbfc, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 813.808314ms ago: executing program 3 (id=8599): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4c24, 0x3, @local, 0x2000009}, 0x1c) (async) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4c24, 0x3, @local, 0x2000009}, 0x1c) bind$inet6(r0, &(0x7f0000000200)={0xa, 0x4e22, 0x2, @empty, 0x8}, 0x1c) listen(r0, 0x204) (async) listen(r0, 0x204) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2b, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x4) (async) r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b4560a067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a09000000ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) (async) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b4560a067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a09000000ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={0xffffffffffffffff, &(0x7f00000010c0), 0x0, 0x1}, 0x20) (async) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={0xffffffffffffffff, &(0x7f00000010c0), 0x0, 0x1}, 0x20) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000327bd7000fedbdf251300000008000100706369303a30303a31302e3000000000080003000000000008000b00d009000006001100070000000800010070636900110002"], 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0x48050) r3 = socket(0x10, 0x3, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r5, @ANYBLOB="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"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) (async) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r5, @ANYBLOB="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"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f000000a280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b00)=@newtaction={0x14, 0x5a, 0x301, 0x0, 0x25dfdbfb, {0x2}}, 0x14}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000480)=ANY=[@ANYBLOB="44000000100003df7f91abee5a04000000f4ffffffffffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="000000008b2f00001c00128009000100626f6e64000000000c00028008000500ffedffff080003"], 0x44}, 0x1, 0x0, 0x0, 0x40081}, 0x0) bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) r7 = socket$l2tp6(0xa, 0x2, 0x73) getsockopt$inet6_int(r7, 0x29, 0x4a, 0x0, &(0x7f0000000040)) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)=ANY=[@ANYRESHEX], 0x20) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000040)={'wg1\x00'}) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="00001000ffff28bd08000000906be00000001fffc35c4fd4f6470ce83d3c8fffec0ad4adb97df64d00ffa83ecd829292e29800f97c1a8044fbad6218fb44bf555abdddd7244158fa52c0c2a56027f0502ffaa7e7189b6067dece32dcf3446564cf18cfa4af887651ae1b84238844facd7bcb37d6631471b5afb3b569a4df5694982655c8b20c0000", @ANYBLOB="6fd3698859a02310c4def1cd54e4c46619d7e2d7b03d3ccfafb8d7f634cf29e8173514c0f593de602d5b46fccbbac645ab5491965b3ca6bd720ca3da418862df3ca5bd4dffeee3007f7ef1c7bfd6bbf311c8e75216171b4d9844483fdc4a682d6293d7438869fe8c5e8bffa2c6ab4f1c96d247b90674f06a15ead77d5e2368a6b795c917b5703dda8853ac38ead952cc24eeb1d627b3d0e36361a5c5eda6db5b5a1af42ad2297bab9992f586e96cfe3781d22985e756df7556c84805c3284f8e030af4", @ANYBLOB="391a0300299605002400128009000100626f6e64000000001400028005000100060000000800030000000000"], 0x44}, 0x1, 0x0, 0x0, 0x48014}, 0x40900) (async) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="00001000ffff28bd08000000906be00000001fffc35c4fd4f6470ce83d3c8fffec0ad4adb97df64d00ffa83ecd829292e29800f97c1a8044fbad6218fb44bf555abdddd7244158fa52c0c2a56027f0502ffaa7e7189b6067dece32dcf3446564cf18cfa4af887651ae1b84238844facd7bcb37d6631471b5afb3b569a4df5694982655c8b20c0000", @ANYBLOB="6fd3698859a02310c4def1cd54e4c46619d7e2d7b03d3ccfafb8d7f634cf29e8173514c0f593de602d5b46fccbbac645ab5491965b3ca6bd720ca3da418862df3ca5bd4dffeee3007f7ef1c7bfd6bbf311c8e75216171b4d9844483fdc4a682d6293d7438869fe8c5e8bffa2c6ab4f1c96d247b90674f06a15ead77d5e2368a6b795c917b5703dda8853ac38ead952cc24eeb1d627b3d0e36361a5c5eda6db5b5a1af42ad2297bab9992f586e96cfe3781d22985e756df7556c84805c3284f8e030af4", @ANYBLOB="391a0300299605002400128009000100626f6e64000000001400028005000100060000000800030000000000"], 0x44}, 0x1, 0x0, 0x0, 0x48014}, 0x40900) 767.745038ms ago: executing program 3 (id=8600): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='dctcp', 0x5) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYRESOCT=r2], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 601.050576ms ago: executing program 1 (id=8601): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a0b040000000000000000020000054c00048018000180080001006f7366000c000280080001400000000430000180080001006e6174002400028008000140000000010800034024000014080002400000000208000440000000150900010073797a30000000000900020073797a32"], 0xa0}, 0x1, 0x0, 0x0, 0x850}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001800dd8d000000000000000002000000000000060000000006001500010000001800168014000100000000000000000000003000000011"], 0x3c}}, 0x8000) 485.305145ms ago: executing program 1 (id=8602): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(0x0, r0) (async) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000001f40), r0) (async) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000080)={@multicast2, @broadcast, 0x0}, &(0x7f00000000c0)=0xc) (async) socket$inet6(0xa, 0x80002, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xc}]}}}]}]}], {0x14}}, 0x78}}, 0x0) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="4c0000001000fffd29bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000000223803001c0012800c0001006d6163766c616e000c000280080009000800ffef08000500", @ANYRES32=r3], 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x20040040) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x30, 0x0, 0x0, 0x70bd26, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}]}, @MPTCP_PM_ATTR_LOC_ID={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x50000010}, 0x4081) (async) sendmsg$DEVLINK_CMD_PORT_SET(r0, &(0x7f0000002040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001f80)={0x44, r1, 0x1, 0x70bd2b, 0x25dfdbff, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x2}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) 448.732638ms ago: executing program 4 (id=8603): socket$can_bcm(0x1d, 0x2, 0x2) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) syz_genetlink_get_family_id$smc(&(0x7f0000000240), r0) 402.886543ms ago: executing program 1 (id=8604): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x3, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="660a00000700000061117b000000000085000000cf00000095"], &(0x7f0000000000)='GPL\x00', 0x8, 0x0, 0x0, 0x41000}, 0x94) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000004000000000000000000000000000000000000000000002d14fab753d9ba99829bd942f30faba26bc0f3c75e1b1e7a295f47b249cba168f6770ba0a64ca084474d3f9dad2d970e08c1f4b518f8b107146fe901e98af3e04e6b7a5ed2caa1dd9194e2a631bcdc4d956ba272bb0821e5225ab4696c0000d3f775ed382a6672a7f05524ce2fb784cafa2e41ea4cb3d3e2ebaece913ad39bc4758e9ac43db2b03ae6d18bd616c0d7b352285e163812cd90330c2d1a499bc77ef1347f31c85bc87625354e9caf6784936003ee4d"], 0x48) r5 = socket$kcm(0x10, 0x2, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="deaa00000000000071101900000000009500080000000000"], &(0x7f0000000480)='syzkaller\x00'}, 0x80) (async) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000003c0)="89000000120081ae08060cdc030ec0007f03e3f7fffe000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120c000200040000000400446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r4, 0xffffffffffffffff}, &(0x7f0000000280), &(0x7f0000000240)=r1}, 0x20) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x18, 0x27, &(0x7f00000004c0)=@raw=[@map_idx={0x18, 0x3, 0x5, 0x0, 0x7}, @map_idx_val={0x18, 0x5, 0x6, 0x0, 0xd, 0x0, 0x0, 0x0, 0x7}, @alu={0x7, 0x0, 0x8, 0x9, 0x7, 0x0, 0x1}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r6}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffff9}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @alu={0x4, 0x0, 0x4, 0x7, 0xa, 0x8, 0xfffffffffffffff0}, @alu={0x7, 0x1, 0x7, 0x2, 0x8, 0x8, 0x4}, @ldst={0x2, 0x0, 0x4, 0xa, 0x1, 0xfffffffffffffffe, 0x10}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}], &(0x7f0000000080)='syzkaller\x00', 0x5a1c, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x3, 0x4}, 0x8, 0x10, &(0x7f0000000200)={0x4, 0xa, 0x9, 0x9}, 0x10, 0x0, 0x0, 0x7, 0x0, &(0x7f00000006c0)=[{0x3, 0x5, 0x7, 0x8}, {0x2, 0x5, 0x9, 0x8}, {0x0, 0x2, 0x7, 0x7}, {0x5, 0x2, 0x5, 0xc}, {0x1, 0x3, 0xd, 0x2}, {0x0, 0x2, 0x10, 0xc}, {0x2, 0x2, 0x2, 0x5}], 0x10, 0x1}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r7, 0x4) (async) sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 397.866349ms ago: executing program 3 (id=8605): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000180)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000380)="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", 0x26) socket$inet(0x10, 0x3, 0xc) (async) r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)}, 0x40) (async) sendmsg(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)}, 0x40) r2 = socket$inet(0x10, 0x3, 0xc) sendmsg(r2, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000100)="2400000001031f001cfffd946fa2830020200a800900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) 284.536699ms ago: executing program 0 (id=8606): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=ANY=[@ANYBLOB="b7000000000000dd4d0000000000000040007400000020009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xb579, &(0x7f000000cf3d)=""/195}, 0x23) unshare(0x22020400) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x44004000) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_EXPRESSIONS={0x3c, 0x4, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_MATCH_INFO={0x10, 0x3, "709c897c82b1095a67232d63"}, @NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_MATCH_NAME={0x9, 0x1, 'mark\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_USERDATA={0x7, 0x7, 0x1, 0x0, "d09284"}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x98}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x3c1a02, 0x0) pwrite64(r2, 0x0, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="18020000fbffbfff000000000300000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b6020000000000008500000086000000850000001100000095"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x0, 0xe, 0x0, &(0x7f00000003c0)="6f11ba816056a1827a33ae059cf3", 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) sendmsg$NFNL_MSG_CTHELPER_NEW(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYRESHEX=r2], 0x58}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c00000010000304000000000000000000000400e2856bad2e147c4c4bb6e0017f86bc0797b4a90a6517c8149e66f0983920502ece3fcb3a4dae1c29e1afadc0f199f684f1900097571835eef59abc3ad7ce9b5ebd34b2c599240802fea45412df28a6bad88a172614a3af4402359cb847bd493339a53d331e4f8a6d3d1da6012576cfe025764f15deadac87869ef8ac9b253f07a8ee590b68c349868d9c03713ffde54b513fa1", @ANYRES32=0x0, @ANYBLOB="0003000000000000240012800b00010067656e65766500001400028005000800000000000500090000000000"], 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x8044) 283.877417ms ago: executing program 4 (id=8607): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x900, 0x0) close(r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r3) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r5) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000200)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff3, 0xe}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_LIMIT={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2000c040}, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r10) ppoll(&(0x7f0000000500)=[{r0, 0xc006}], 0x1, 0x0, 0x0, 0x0) socket$tipc(0x1e, 0x2, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000140)=0x1) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r11 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r11, &(0x7f00000017c0)=[{{&(0x7f0000000200)={0xa, 0x4e21, 0x4, @mcast1, 0x7}, 0x1c, &(0x7f0000001680)=[{&(0x7f0000000300)="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", 0x578}, {0x0}, {0x0}, {&(0x7f0000001600)}], 0x4, &(0x7f0000001700)=[@dontfrag={{0x14, 0x29, 0x3e, 0x1}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x6}}, @rthdrdstopts={{0x20, 0x29, 0x37, {0x0, 0x0, '\x00', [@padn]}}}], 0x50}}], 0x1, 0x841) 262.161781ms ago: executing program 2 (id=8608): getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000280)={0x0, 0x99, 0x7, 0x0, 0x1, 0x5392, 0xc, 0x9, {0x0, @in6={{0xa, 0x4e20, 0x7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x10}}, 0x81, 0x3, 0xc, 0x4b, 0x10000}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[], 0xc3}, 0x1, 0x100000000000000}, 0x0) r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r0, 0x29, 0xc8, 0x0, 0xc000000) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000005"], 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0xe6c, r1, 0x4}, 0x38) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}}, 0x5c) setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}, 0x1}, 0x5c) close(0x3) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) r3 = openat$cgroup_type(r2, &(0x7f0000000300), 0x2, 0x0) write$cgroup_type(r3, &(0x7f0000000280), 0x9) r4 = openat$cgroup_procs(r2, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000c40), 0x12) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="2400f9ff1900010029bd7000f2ffffff01202004000000070005000008000200ac14140a"], 0x24}}, 0xea5bc50b6199dfe6) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r6, 0x0, r8, 0x0, 0x1, 0x5) write$cgroup_pid(r4, &(0x7f0000000080), 0x12) r9 = openat$cgroup_ro(r5, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r9, &(0x7f0000000200)=0x1, 0x12) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r10, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) socket(0x10, 0x3, 0x0) 239.27947ms ago: executing program 1 (id=8609): socket$inet(0x2, 0x800, 0x5) (async) r0 = socket$inet(0x2, 0x800, 0x5) setsockopt$inet_mreqsrc(r0, 0x0, 0x28, &(0x7f0000000000)={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @multicast2}, 0xc) syz_emit_ethernet(0x70, &(0x7f0000000040)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @random="a78b1388ad62", @void, {@llc={0x4, {@llc={0x8e, 0xdc, "86", "efec03ce15834049ec9b915fc3592401d94f1f0e95872e0b2adcc72283c595ce1fe263aa3b4a54b20206902c3e7f587e162d869a8759691146834b1ae2ec41ebea063cbcb77514d179576e40ad2f9d3383b136de5135de1c194d838a5ff2fc"}}}}}, &(0x7f00000000c0)={0x0, 0x3, [0x92b, 0xa69, 0x1f5, 0x95a]}) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendto$inet(r0, &(0x7f0000000100)="ab816dea6e2d3ccb29a33ac75db951f04cf08c2470203e38ac24db3f521dcf1795bc1a395e963d46398455d2f283f2928a339f48243c5d50f73a938e8286fb6f18e362a4d539bdee6fb7aa5d28f6b0b1ddc7f5644cd923ba953b55e920b8e8fc9e085109802b4f1269967936ee33c48603bd3255e4897c5793864cbb8bfdb993e7038e7143f1b50c05082c9b938dcb65f5d03bdb71fa6aad6bb4338c52f491a09e8408b164bb6c6fe4ad9382fca24ec2c7", 0xb1, 0x4044000, 0x0, 0x0) (async) sendto$inet(r0, &(0x7f0000000100)="ab816dea6e2d3ccb29a33ac75db951f04cf08c2470203e38ac24db3f521dcf1795bc1a395e963d46398455d2f283f2928a339f48243c5d50f73a938e8286fb6f18e362a4d539bdee6fb7aa5d28f6b0b1ddc7f5644cd923ba953b55e920b8e8fc9e085109802b4f1269967936ee33c48603bd3255e4897c5793864cbb8bfdb993e7038e7143f1b50c05082c9b938dcb65f5d03bdb71fa6aad6bb4338c52f491a09e8408b164bb6c6fe4ad9382fca24ec2c7", 0xb1, 0x4044000, 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f00000001c0)={0x0, 'wlan0\x00', {0x1}, 0x636d}) r2 = socket$inet(0x2, 0x80000, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) recvfrom$unix(r3, &(0x7f0000000240)=""/244, 0xf4, 0x23, &(0x7f0000000340)=@abs={0x0, 0x0, 0x4e23}, 0x6e) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r5, 0x8955, &(0x7f00000003c0)={{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x29}}, {0x300, @remote}, 0x20, {0x2, 0x4e23, @empty}, 'vlan0\x00'}) r6 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000580), 0x280000, 0x0) r7 = socket$inet6_sctp(0xa, 0x0, 0x84) getpid() (async) r8 = getpid() r9 = getuid() getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f00000005c0)={0x0, 0x0, 0x0}, &(0x7f0000000600)=0xc) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000640)=0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000680)={{{@in6=@dev, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@private2}}, &(0x7f0000000780)=0xe8) r13 = getgid() ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f00000007c0)) (async) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f00000007c0)=0x0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000800)={{{@in6=@empty, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in6=@remote}}, &(0x7f0000000900)=0xe8) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000940)={0x0, 0x0, 0x0}, &(0x7f0000000980)=0xc) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f00000009c0)) (async) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f00000009c0)=0x0) getuid() (async) r18 = getuid() getgid() (async) r19 = getgid() socket$nl_crypto(0x10, 0x3, 0x15) (async) r20 = socket$nl_crypto(0x10, 0x3, 0x15) socket$inet_udplite(0x2, 0x2, 0x88) (async) r21 = socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$netlink(r1, &(0x7f0000000b00)={&(0x7f0000000440)=@proc={0x10, 0x0, 0x25dfdbff, 0x800000}, 0xc, &(0x7f0000000540)=[{&(0x7f0000000480)={0xa8, 0x39, 0x20, 0x70bd2b, 0x25dfdbfb, "", [@generic="6dd6c453d158b29483a36aa606adddbcd777db4b1666838590b09bc7989727749413689153f4965d3232cf987e5cbfa0daa1f3fb1bbe7064d3df31c998cd308f1967695e4e2feba5da057b4afc3da639c8af0d087402efc36934ded8a3257fc3b4a9b7d0cea57edb9eb2b539d6a9c13b1258a8a4be9456172f8e3d88f86170d74619f81f865edf02a216", @typed={0x9, 0x7a, 0x0, 0x0, @str=')-!-\x00'}]}, 0xa8}], 0x1, &(0x7f0000000a00)=[@rights={{0x20, 0x1, 0x1, [r5, r6, r7, r4]}}, @rights={{0x1c, 0x1, 0x1, [r5, r1, r1]}}, @cred={{0x1c, 0x1, 0x2, {r8, r9, r10}}}, @cred={{0x1c, 0x1, 0x2, {r11, r12, r13}}}, @cred={{0x1c, 0x1, 0x2, {r14, r15, r16}}}, @cred={{0x1c, 0x1, 0x2, {r17, r18, r19}}}, @rights={{0x20, 0x1, 0x1, [r20, 0xffffffffffffffff, r21, r0]}}], 0xe0, 0x4000000}, 0x20000040) socketpair(0x1, 0x1, 0x5, &(0x7f0000000b40)={0xffffffffffffffff}) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r22, 0x28, 0x0, &(0x7f0000000b80)=0x8, 0x8) 165.36276ms ago: executing program 3 (id=8610): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7, 0x2, 0xffffffffffffffff, 0x10000}, 0x50) bpf$PROG_LOAD(0x2, &(0x7f0000000680)={0x3, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0x806000) ioctl$FS_IOC_RESVSP(r1, 0x40305829, &(0x7f0000000380)={0x0, 0x0, 0x4000, 0x9ffffc}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000d40)={0x11, 0x4, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4000}, [@generic={0xc, 0x2, 0x3, 0x8, 0x5}]}, &(0x7f0000000400)='GPL\x00', 0xfffffffc, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x37, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r2, r0}, 0xc) setsockopt$CAN_RAW_FD_FRAMES(0xffffffffffffffff, 0x65, 0x5, &(0x7f0000000080), 0x4) 156.308297ms ago: executing program 0 (id=8611): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) r0 = socket$netlink(0x10, 0x3, 0x8) sendmsg$TIPC_CMD_GET_NETID(r0, &(0x7f0000000200)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x100, 0x70bd2a, 0x25dfdbff}, 0x1c}}, 0x880) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000240)=0x2, 0x4) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$kcm(0x2, 0xa, 0x2) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = socket(0x10, 0x80003, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xb, "0000000000020400000000000b00"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="0a000000bbbbbbff1c6cd8c7523f6d4ed325f884d7128fbbbbbbaaaaaaaaaa2986dd6d002008000c11ff20010000000000000000000000000000fc0200"/70], 0x46) r7 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_buf(r8, 0x0, 0x10, &(0x7f00000000c0)="170000000200020000ffbe8c5ee17688a2003c00030100000077fc5ad90200fb6a880000d6c9db0000db15d088bd8b7000000000d9ce9bc7e28db3000200ff01800a0000ebfc0607bdff59100ac45761547a681f009ceeff5acba400001fb700674f00c8e365d00b5033bf79ac2dfc061f15003901dee2000000000062068f5ee50c08af9b1c568302ffff02ff03310800ab0840024f02d8e9e90539062a80e605007f71174ab498ff0b3e5a1b47b6df7b23de8caa000000", 0x10c) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f0000009b40)={0x0, 0x11, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x68, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}}], {0x39, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x90}, 0x1, 0x0, 0x0, 0x4044050}, 0x4000080) pselect6(0x40, &(0x7f0000000140)={0x1000, 0xd2, 0x0, 0xba, 0xfffffffffffffff9, 0x7}, &(0x7f0000000300)={0x7, 0xf, 0x1ff, 0x71a, 0x0, 0x7, 0x7, 0x8001}, &(0x7f0000000340)={0x0, 0xfffffffffffffff8, 0x1, 0xfffffffffffeffff, 0xfffffffffffffffe, 0x5, 0x8000, 0xa08}, &(0x7f0000000380)={0x0, 0x3938700}, &(0x7f0000000400)={&(0x7f00000003c0)={[0x2]}, 0x8}) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r10, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000000a0a010100000000000000000000000019f67ae4c9e2b83bfea85e418c4d7f92159b6549f50c1c437815f066330a7e6e770ab41eabd3579d60d5edd0a1276d349b3297fe127b5a343e86ebc2215dff"], 0x14}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa2908004500002800000000002c9078ac1414bbac1414aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c020000907a0000"], 0x0) ioctl$sock_netrom_SIOCADDRT(r7, 0x890b, &(0x7f0000000000)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bpq0, 0x4, 'syz1\x00', @bcast, 0x1, 0x0, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default]}) 75.183738ms ago: executing program 3 (id=8612): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0e00000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00!\x00'/28], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r1, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000580), 0xffffffffffffffff) r3 = gettid() sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0xd4, r2, 0x400, 0x0, 0x25dfdbfe, {0x1e}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x2}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x1}}]}, 0xd4}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 0s ago: executing program 1 (id=8613): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1a, 0x4, 0x4, 0x2, 0x60, 0x1, 0xfffffffc}, 0x50) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={r3, @in6={{0xa, 0x3, 0x4, @rand_addr=' \x01\x00'}}}, &(0x7f0000000040)=0x84) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000300)={r4, 0xf}, 0x8) recvmsg$unix(r1, &(0x7f0000000600)={&(0x7f0000000340), 0x6e, &(0x7f0000000280)=[{&(0x7f00000003c0)=""/139, 0x8b}, {&(0x7f0000000480)=""/141, 0x8d}], 0x2, &(0x7f0000000540)=[@cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x90}, 0x2000) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r5, r7, 0x25, 0x2, @void}, 0x10) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xa071}, [@IFLA_XDP={0x14, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x2}]}, @IFLA_GROUP={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) kernel console output (not intermixed with test programs): port 6081 - 0 [ 879.777508][T31104] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 879.815710][T31110] vcan0: tx address claim with different name [ 879.851138][T31104] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 880.132612][T31116] netlink: 64 bytes leftover after parsing attributes in process `syz.0.6623'. [ 880.293127][T31119] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6624'. [ 880.311318][T31119] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6624'. [ 880.320705][T31119] hsr_slave_0: left promiscuous mode [ 880.337727][T31119] hsr_slave_1: left promiscuous mode [ 880.720714][T31141] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 880.950878][T31149] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6635'. [ 881.015386][T31154] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 881.079219][T31161] xt_hashlimit: size too large, truncated to 1048576 [ 881.131427][T31163] x_tables: duplicate entry at hook 3 [ 881.154578][T31163] IPv6: sit1: Disabled Multicast RS [ 881.254172][T31165] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6639'. [ 881.275265][T31165] dvmrp0: entered allmulticast mode [ 881.282046][T31165] netlink: 184 bytes leftover after parsing attributes in process `syz.2.6639'. [ 881.291352][T31165] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6639'. [ 881.412576][T31170] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6641'. [ 881.778544][T31187] xt_TCPMSS: Only works on TCP SYN packets [ 881.820761][T31187] netlink: 'syz.1.6646': attribute type 29 has an invalid length. [ 882.229162][T31203] Cannot find set identified by id 0 to match [ 882.540099][T31224] xt_l2tp: invalid flags combination: 8 [ 883.133131][T31242] bond2: ARP target 9.0.0.0 is already present [ 883.139755][T31242] bond2: option arp_ip_target: invalid value (9) [ 883.423928][T31242] bond2 (unregistering): Released all slaves [ 883.587735][ T7851] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 883.673708][ T1106] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 883.704980][T31255] netlink: 148 bytes leftover after parsing attributes in process `syz.2.6665'. [ 883.736857][ T1106] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 883.741152][T31258] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 883.745088][ T1106] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 883.845338][T31259] netlink: 'syz.3.6666': attribute type 11 has an invalid length. [ 883.952323][T31267] nbd: must specify a device to reconfigure [ 884.187763][T31253] bridge2: entered allmulticast mode [ 884.198070][T31271] tipc: Started in network mode [ 884.205593][T31271] tipc: Node identity dabbf997dd8b, cluster identity 4711 [ 884.217400][T31271] tipc: Enabled bearer , priority 0 [ 884.280957][T31269] tipc: Resetting bearer [ 884.332170][T31274] syzkaller0: entered promiscuous mode [ 884.354195][T31274] syzkaller0: entered allmulticast mode [ 884.403313][T31268] tipc: Resetting bearer [ 884.454614][T31268] tipc: Disabling bearer [ 884.514241][T31281] lo speed is unknown, defaulting to 1000 [ 884.657971][T31297] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 884.699547][T31299] netlink: 'syz.0.6675': attribute type 8 has an invalid length. [ 885.258618][T31286] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 885.631330][T31327] netlink: 64 bytes leftover after parsing attributes in process `syz.4.6682'. [ 885.852740][T31340] netlink: 220 bytes leftover after parsing attributes in process `syz.3.6686'. [ 886.400864][T31358] netlink: 21 bytes leftover after parsing attributes in process `syz.2.6692'. [ 886.482182][T31362] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6691'. [ 886.545528][T31350] lo speed is unknown, defaulting to 1000 [ 886.554311][T31357] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6690'. [ 886.894805][T31373] netlink: 'syz.0.6697': attribute type 30 has an invalid length. [ 886.919468][T31379] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6696'. [ 886.973663][T31379] gtp0: entered allmulticast mode [ 887.093502][T31379] syzkaller0: entered promiscuous mode [ 887.123030][T31379] syzkaller0: entered allmulticast mode [ 887.439815][T31389] netlink: 68 bytes leftover after parsing attributes in process `syz.0.6700'. [ 887.807184][T31403] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6704'. [ 888.155572][ T9484] lec:lec_start_xmit: lec0:No lecd attached [ 888.948906][T31452] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6715'. [ 888.987219][T31452] IPv6: addrconf: prefix option has invalid lifetime [ 889.074077][T31459] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 889.464743][T31480] netlink: 'syz.0.6724': attribute type 1 has an invalid length. [ 889.543474][T31480] 8021q: adding VLAN 0 to HW filter on device bond2 [ 889.643562][T31490] lo speed is unknown, defaulting to 1000 [ 889.704976][T31499] netlink: 204 bytes leftover after parsing attributes in process `syz.0.6727'. [ 889.831010][T31502] syzkaller0: entered promiscuous mode [ 889.856671][T31502] syzkaller0: entered allmulticast mode [ 890.693816][ T1106] bridge_slave_0: left allmulticast mode [ 890.714940][ T1106] bridge0: port 1(bridge_slave_0) entered disabled state [ 890.856941][ T1106] veth13: left allmulticast mode [ 890.861955][ T1106] veth13: left promiscuous mode [ 890.882270][ T1106] bridge3: port 3(veth13) entered disabled state [ 890.900792][ T1106] veth0_to_bond: left allmulticast mode [ 890.916636][ T1106] veth0_to_bond: left promiscuous mode [ 890.927754][ T1106] bridge3: port 2(veth0_to_bond) entered disabled state [ 890.951743][ T1106] veth11: left allmulticast mode [ 890.962222][ T1106] veth11: left promiscuous mode [ 890.977050][ T1106] bridge3: port 1(veth11) entered disabled state [ 891.372779][ T1106] bond6 (unregistering): (slave geneve3): Releasing active interface [ 891.553938][T31556] netlink: 'syz.4.6744': attribute type 7 has an invalid length. [ 891.681170][T31565] x_tables: ip_tables: osf match: only valid for protocol 6 [ 891.704747][T31565] openvswitch: netlink: Missing valid actions attribute. [ 891.713538][T31565] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 891.841741][ T1106] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 891.856224][ T1106] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 891.879678][ T1106] bond0 (unregistering): (slave bond1): Releasing backup interface [ 891.889169][ T1106] bond0 (unregistering): Released all slaves [ 891.923807][ T1106] bond1 (unregistering): Released all slaves [ 891.962808][ T1106] bond2 (unregistering): Released all slaves [ 892.003962][ T1106] bond3 (unregistering): Released all slaves [ 892.044627][ T1106] bond4 (unregistering): Released all slaves [ 892.097699][ T1106] bond5 (unregistering): (slave vcan1): Releasing backup interface [ 892.116799][ T1106] vcan1: left promiscuous mode [ 892.128764][ T1106] bond5 (unregistering): Released all slaves [ 892.194797][ T1106] bond6 (unregistering): Released all slaves [ 892.224315][ T1106] bond7 (unregistering): (slave veth7): Releasing active interface [ 892.299750][ T1106] bond7 (unregistering): Released all slaves [ 892.622757][ T1106] bond11 (unregistering): (slave geneve3): Releasing active interface [ 892.833176][ T1106] bond7 (unregistering): (slave bridge2): Releasing active interface [ 893.203188][ T1106] bond12 (unregistering): (slave bridge8): Releasing active interface [ 893.323669][ T1106] bond1 (unregistering): Released all slaves [ 893.345943][ T1106] bond2 (unregistering): Released all slaves [ 893.382075][ T1106] bond3 (unregistering): (slave bond4): Releasing backup interface [ 893.403681][ T1106] bond4 (unregistering): left promiscuous mode [ 893.413668][ T1106] bond3 (unregistering): Released all slaves [ 893.438281][ T1106] bond4 (unregistering): Released all slaves [ 893.461292][ T1106] bond5 (unregistering): Released all slaves [ 893.484503][ T1106] bond15 (unregistering): (slave bond0): Releasing backup interface [ 893.502591][ T1106] bond0 (unregistering): Released all slaves [ 893.548129][ T1106] bond6 (unregistering): Released all slaves [ 893.573329][ T1106] bond7 (unregistering): Released all slaves [ 893.604508][ T1106] bond8 (unregistering): Released all slaves [ 893.658724][ T1106] bond9 (unregistering): Released all slaves [ 893.678648][ T1106] bond10 (unregistering): Released all slaves [ 893.713992][ T1106] bond11 (unregistering): Released all slaves [ 893.734156][ T1106] bond12 (unregistering): Released all slaves [ 893.767688][ T1106] bond13 (unregistering): (slave veth15): Releasing active interface [ 893.784886][ T1106] bond13 (unregistering): Released all slaves [ 893.806168][ T1106] bond14 (unregistering): Released all slaves [ 893.844035][ T1106] bond15 (unregistering): Released all slaves [ 893.926660][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5770 ms [ 893.934728][ C1] lec:lec_tx_timeout: lec0 [ 894.033836][T31575] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6751'. [ 894.086403][T31578] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6751'. [ 894.184467][T31580] rdma_rxe: rxe_newlink: failed to add lo [ 894.258681][ T1106] !: left promiscuous mode [ 894.351426][T31576] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6750'. [ 894.376286][T31576] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6750'. [ 894.416854][T31581] lo speed is unknown, defaulting to 1000 [ 894.425814][T31578] netlink: 'syz.1.6751': attribute type 4 has an invalid length. [ 894.428132][T31584] netlink: 'syz.1.6751': attribute type 4 has an invalid length. [ 894.447080][T31576] netlink: 'syz.4.6750': attribute type 6 has an invalid length. [ 894.449753][ T1106] : left promiscuous mode [ 894.478307][T31575] netlink: 'syz.1.6751': attribute type 4 has an invalid length. [ 894.570376][T31576] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6750'. [ 894.602603][T31576] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6750'. [ 894.612300][ T1106] : left promiscuous mode [ 894.624696][T31576] netlink: 'syz.4.6750': attribute type 6 has an invalid length. [ 894.649792][ T13] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 894.681639][ T13] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 894.705218][ T1106] tipc: Disabling bearer [ 894.744266][ T1106] tipc: Left network mode [ 894.750517][ T13] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 894.759494][ T13] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 894.786139][ T1106] tipc: Disabling bearer [ 894.794589][ T1106] tipc: Left network mode [ 894.986311][T31598] netlink: 'syz.0.6755': attribute type 13 has an invalid length. [ 895.145201][T31602] syzkaller0: entered promiscuous mode [ 895.152124][T31602] syzkaller0: entered allmulticast mode [ 895.259699][T22936] nci: nci_rx_work: unknown MT 0x7 [ 895.323005][T31617] netlink: 76 bytes leftover after parsing attributes in process `syz.1.6758'. [ 897.091860][T31629] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 898.069656][T31607] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 898.151609][T31650] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6768'. [ 898.446153][T31654] macsec1: entered promiscuous mode [ 898.452376][T31654] macsec1: entered allmulticast mode [ 898.578373][T31657] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6770'. [ 898.611621][T31657] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6770'. [ 898.995163][T31669] netlink: 'syz.4.6775': attribute type 4 has an invalid length. [ 899.010850][T31671] vlan2: entered promiscuous mode [ 899.016146][T31671] vlan2: entered allmulticast mode [ 899.022715][T31671] hsr_slave_1: entered allmulticast mode [ 899.173952][T31675] syzkaller0: entered promiscuous mode [ 899.195193][T31675] syzkaller0: entered allmulticast mode [ 899.221226][T31682] IPVS: ip_vs_add_dest(): server weight less than zero [ 899.228622][T31682] IPVS: lc: FWM 3 0x00000003 - no destination available [ 899.275280][T30991] IPVS: starting estimator thread 0... [ 899.349258][T31692] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6782'. [ 899.367862][T31686] IPVS: using max 24 ests per chain, 57600 per kthread [ 899.384326][T31693] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 899.610096][T31702] syzkaller0: entered promiscuous mode [ 899.622771][T31702] syzkaller0: entered allmulticast mode [ 899.721495][T31702] tipc: Enabled bearer , priority 0 [ 899.814330][T31710] sctp: [Deprecated]: syz.0.6787 (pid 31710) Use of int in max_burst socket option deprecated. [ 899.814330][T31710] Use struct sctp_assoc_value instead [ 899.910991][T31701] tipc: Resetting bearer [ 899.959009][T31701] tipc: Disabling bearer [ 900.013186][T31713] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6788'. [ 900.068074][T31716] netlink: 'syz.0.6789': attribute type 30 has an invalid length. [ 900.587024][ T1106] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 900.696708][ T1106] hsr_slave_0: left promiscuous mode [ 900.704430][ T1106] hsr_slave_1: left promiscuous mode [ 901.153983][ T29] audit: type=1800 audit(1771484055.373:21): pid=31759 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.6801" name="memory.events" dev="tmpfs" ino=457 res=0 errno=0 [ 901.187156][T31759] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6801'. [ 901.292657][ T1106] team_slave_1 (unregistering): left promiscuous mode [ 901.301034][ T1106] team0 (unregistering): Port device team_slave_1 removed [ 901.331281][ T1106] team_slave_0 (unregistering): left promiscuous mode [ 901.342838][ T1106] team0 (unregistering): Port device team_slave_0 removed [ 901.350787][T31767] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6802'. [ 901.613115][ T1106] pimreg (unregistering): left allmulticast mode [ 901.863538][T31734] lo speed is unknown, defaulting to 1000 [ 902.089932][T31776] x_tables: duplicate underflow at hook 3 [ 902.096091][T31776] sctp: [Deprecated]: syz.0.6804 (pid 31776) Use of int in max_burst socket option deprecated. [ 902.096091][T31776] Use struct sctp_assoc_value instead [ 902.182496][T31775] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6804'. [ 902.188743][T31781] tipc: Enabled bearer , priority 0 [ 902.197042][T31776] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6804'. [ 902.220155][T31775] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6804'. [ 902.237416][T31776] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6804'. [ 902.258922][T31775] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6804'. [ 902.269911][T31781] tipc: Resetting bearer [ 902.355580][T31780] tipc: Disabling bearer [ 902.526887][T31789] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6808'. [ 902.924970][T31798] lo speed is unknown, defaulting to 1000 [ 902.977711][T31814] xt_hashlimit: max too large, truncated to 1048576 [ 903.183226][T31810] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 903.276261][T31814] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 903.422167][ T1106] IPVS: stop unused estimator thread 0... [ 903.438920][ T1106] IPVS: stop unused estimator thread 0... [ 903.445399][T31814] netlink: 'syz.4.6814': attribute type 4 has an invalid length. [ 903.505787][T31819] netlink: 'syz.4.6814': attribute type 4 has an invalid length. [ 903.971345][ T1106] bond0 (unregistering): (slave gretap1): Releasing backup interface [ 904.182765][T31825] nbd: illegal input index -1113835520 [ 904.243168][ T1106] bond0 (unregistering): (slave bond1): Releasing backup interface [ 904.256404][ T1106] bond1 (unregistering): left promiscuous mode [ 904.266977][ T1106] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 904.278090][ T1106] bond0 (unregistering): Released all slaves [ 904.299998][ T1106] bond1 (unregistering): Released all slaves [ 904.320816][ T1106] bond2 (unregistering): Released all slaves [ 904.349127][ T1106] bond3 (unregistering): Released all slaves [ 904.375906][T31828] __nla_validate_parse: 3 callbacks suppressed [ 904.375929][T31828] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6818'. [ 904.379142][ T1106] bond4 (unregistering): Released all slaves [ 904.406289][ T1106] bond5 (unregistering): (slave veth7): Releasing active interface [ 904.414816][ T1106] batadv1: entered promiscuous mode [ 904.422522][ T1106] bond5 (unregistering): (slave batadv1): Releasing active interface [ 904.432650][ T1106] bond5 (unregistering): Released all slaves [ 904.446366][ T1106] bond6 (unregistering): Released all slaves [ 904.479360][T31818] lo speed is unknown, defaulting to 1000 [ 904.521698][T31829] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6818'. [ 904.567428][T31829] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6818'. [ 904.629483][ T1106] : left promiscuous mode [ 904.826917][ T1106] 9: left promiscuous mode [ 904.887980][T31833] syzkaller0: entered promiscuous mode [ 904.893514][T31833] syzkaller0: entered allmulticast mode [ 905.636168][T31861] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6826'. [ 905.909709][T31858] syzkaller1: entered promiscuous mode [ 905.926261][T31858] syzkaller1: entered allmulticast mode [ 905.969965][T17067] IPVS: starting estimator thread 0... [ 905.976030][T31857] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 906.043094][T31859] gretap1: entered promiscuous mode [ 906.057674][T31876] IPVS: using max 26 ests per chain, 62400 per kthread [ 906.613153][T31882] lo speed is unknown, defaulting to 1000 [ 907.067281][ T1106] hsr_slave_0: left promiscuous mode [ 907.073563][ T1106] hsr_slave_1: left promiscuous mode [ 907.089057][ T1106] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 907.108614][ T1106] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 907.127975][ T1106] batman_adv: batadv0: Removing interface: macsec1 [ 907.196131][T31915] netlink: 48 bytes leftover after parsing attributes in process `syz.1.6836'. [ 907.243133][T31917] netlink: 'syz.3.6834': attribute type 1 has an invalid length. [ 907.271937][T31917] netlink: 224 bytes leftover after parsing attributes in process `syz.3.6834'. [ 907.362741][T31923] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 907.381725][T31923] netlink: 'syz.2.6838': attribute type 4 has an invalid length. [ 907.830224][ T1106] team0 (unregistering): Port device team_slave_1 removed [ 907.867054][ T1106] team0 (unregistering): Port device team_slave_0 removed [ 908.034214][T31910] ipvlan2: entered allmulticast mode [ 908.040247][T31910] veth0_vlan: entered allmulticast mode [ 908.256372][T31943] netlink: 160 bytes leftover after parsing attributes in process `syz.1.6839'. [ 908.345577][T31948] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6841'. [ 908.355815][T31948] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6841'. [ 908.471916][T31943] netlink: 92 bytes leftover after parsing attributes in process `syz.1.6839'. [ 908.843993][T31940] bridge0: port 2(bridge_slave_1) entered disabled state [ 909.021788][T31940] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 909.046456][T31940] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 909.406932][T21559] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 909.415986][T21559] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 909.447660][T21559] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 909.467843][T21559] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 909.791994][T31996] __nla_validate_parse: 2 callbacks suppressed [ 909.792014][T31996] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6849'. [ 910.027835][T31997] lo: Caught tx_queue_len zero misconfig [ 910.089356][ T1106] IPVS: stop unused estimator thread 0... [ 910.125641][T32008] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6852'. [ 910.427318][T32013] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6853'. [ 910.432400][T32024] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6855'. [ 910.463720][T32013] bridge_slave_1: left allmulticast mode [ 910.483211][T32013] bridge_slave_1: left promiscuous mode [ 910.517926][T32013] bridge0: port 2(bridge_slave_1) entered disabled state [ 910.554212][T32032] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 910.566431][T32013] bridge_slave_0: left allmulticast mode [ 910.606653][T32013] bridge_slave_0: left promiscuous mode [ 910.612417][T32013] bridge0: port 1(bridge_slave_0) entered disabled state [ 910.828128][T32024] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6855'. [ 910.864831][T32024] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6855'. [ 910.958076][T32024] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6855'. [ 910.977942][T32038] lo speed is unknown, defaulting to 1000 [ 910.986005][T32024] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6855'. [ 911.079916][T32055] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6861'. [ 911.110754][T32024] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6855'. [ 911.333888][T32060] netlink: 'syz.1.6864': attribute type 5 has an invalid length. [ 911.527060][T32073] sctp: [Deprecated]: syz.2.6866 (pid 32073) Use of struct sctp_assoc_value in delayed_ack socket option. [ 911.527060][T32073] Use struct sctp_sack_info instead [ 911.617627][T32074] sctp: [Deprecated]: syz.2.6866 (pid 32074) Use of struct sctp_assoc_value in delayed_ack socket option. [ 911.617627][T32074] Use struct sctp_sack_info instead [ 911.684180][T32080] sctp: [Deprecated]: syz.2.6866 (pid 32080) Use of struct sctp_assoc_value in delayed_ack socket option. [ 911.684180][T32080] Use struct sctp_sack_info instead [ 911.959105][T32101] erspan1: entered promiscuous mode [ 911.974360][T32101] erspan1: entered allmulticast mode [ 913.236436][T32140] x_tables: ip6_tables: udplite match: only valid for protocol 136 [ 914.163851][T32184] sctp: [Deprecated]: syz.0.6899 (pid 32184) Use of struct sctp_assoc_value in delayed_ack socket option. [ 914.163851][T32184] Use struct sctp_sack_info instead [ 914.257049][T32184] vcan1: entered promiscuous mode [ 914.262149][T32184] vcan1: entered allmulticast mode [ 914.358058][T32190] lo speed is unknown, defaulting to 1000 [ 915.819940][T32227] netlink: 'syz.2.6907': attribute type 298 has an invalid length. [ 916.035581][T32234] netlink: 'syz.4.6911': attribute type 93 has an invalid length. [ 916.066091][ T29] audit: type=1804 audit(1771484070.283:22): pid=32234 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.6911" name="/newroot/152/cgroup.controllers" dev="tmpfs" ino=800 res=1 errno=0 [ 916.143287][ T29] audit: type=1800 audit(1771484070.283:23): pid=32234 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.6911" name="cgroup.controllers" dev="tmpfs" ino=800 res=0 errno=0 [ 916.268816][T32245] bond0: (slave gre0): Error: Device type is different from other slaves [ 916.286040][T32245] ip6gretap2: entered promiscuous mode [ 916.292747][T32245] ip6gretap2: entered allmulticast mode [ 916.433169][T32253] tap0: tun_chr_ioctl cmd 1074025673 [ 916.451772][T32253] tap0: tun_chr_ioctl cmd 1074025673 [ 916.464684][T32253] tap0: tun_chr_ioctl cmd 1074025673 [ 916.537112][T32260] __nla_validate_parse: 66 callbacks suppressed [ 916.537135][T32260] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6919'. [ 916.561876][T32260] IPVS: set_ctl: invalid protocol: 2 172.20.20.170:20005 [ 916.587332][T32260] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6919'. [ 916.601877][T32260] : renamed from bond_slave_0 (while UP) [ 916.796418][T32279] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 916.810963][T32282] netlink: 84 bytes leftover after parsing attributes in process `syz.4.6925'. [ 916.820235][T32282] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6925'. [ 919.639631][T32267] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 919.814535][T32299] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6930'. [ 919.867534][T22934] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 919.876719][T32299] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6930'. [ 919.906952][T21559] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 919.930116][T21559] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 919.948090][T21559] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 919.978924][T32299] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6930'. [ 920.037603][T32299] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6930'. [ 920.151865][T32328] veth0: entered promiscuous mode [ 920.161595][T32328] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6938'. [ 920.193020][T32328] veth0 (unregistering): left promiscuous mode [ 920.285896][T32335] lo speed is unknown, defaulting to 1000 [ 920.711190][T32354] tipc: Enabled bearer , priority 0 [ 920.721707][T32351] syzkaller0: entered promiscuous mode [ 920.756660][T32351] syzkaller0: entered allmulticast mode [ 920.764107][T32341] lo speed is unknown, defaulting to 1000 [ 920.778921][T32341] lo speed is unknown, defaulting to 1000 [ 920.801790][T32350] tipc: Resetting bearer [ 920.843258][T32350] tipc: Disabling bearer [ 920.881428][T32341] lo speed is unknown, defaulting to 1000 [ 920.926660][T32341] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 920.989818][T32341] lo speed is unknown, defaulting to 1000 [ 920.998065][T32341] lo speed is unknown, defaulting to 1000 [ 921.020166][T32341] lo speed is unknown, defaulting to 1000 [ 921.054581][T32341] lo speed is unknown, defaulting to 1000 [ 921.099284][T32341] lo speed is unknown, defaulting to 1000 [ 921.134713][T32341] lo speed is unknown, defaulting to 1000 [ 921.274367][T32341] lo speed is unknown, defaulting to 1000 [ 921.322164][T32371] netlink: 'syz.0.6950': attribute type 16 has an invalid length. [ 921.342694][T32374] bridge0: port 1(bridge_slave_0) entered disabled state [ 921.347547][T32371] netlink: 'syz.0.6950': attribute type 17 has an invalid length. [ 921.353266][T32374] bridge0: port 2(bridge_slave_1) entered disabled state [ 921.411670][T32341] lo speed is unknown, defaulting to 1000 [ 921.422404][T32341] lo speed is unknown, defaulting to 1000 [ 921.433801][T32341] lo speed is unknown, defaulting to 1000 [ 921.465417][T32371] 8021q: adding VLAN 0 to HW filter on device bond0 [ 921.487871][T32371] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 921.586940][T32375] lo speed is unknown, defaulting to 1000 [ 921.879260][T32375] lo speed is unknown, defaulting to 1000 [ 922.440919][T32399] syzkaller0: entered promiscuous mode [ 922.455977][T32399] syzkaller0: entered allmulticast mode [ 924.006286][T32362] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 924.910216][T32418] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6959'. [ 925.030667][T32423] netlink: 'syz.4.6961': attribute type 5 has an invalid length. [ 925.048246][T17067] IPVS: starting estimator thread 0... [ 925.053823][T32420] geneve2: entered promiscuous mode [ 925.068517][T32427] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6961'. [ 925.075889][T32429] netlink: 9 bytes leftover after parsing attributes in process `syz.1.6963'. [ 925.089383][T32427] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6961'. [ 925.104238][T32427] netlink: 'syz.4.6961': attribute type 13 has an invalid length. [ 925.112212][T32435] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6964'. [ 925.113756][T32420] geneve2: entered allmulticast mode [ 925.131943][T32427] netlink: 'syz.4.6961': attribute type 12 has an invalid length. [ 925.134114][T32423] openvswitch: netlink: Duplicate or invalid key (type 0). [ 925.146807][T32426] IPVS: using max 29 ests per chain, 69600 per kthread [ 925.149383][T32423] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 925.163568][T32425] pim6reg: entered allmulticast mode [ 925.169873][T32429] .70·: renamed from hsr0 [ 925.178889][T32429] .70·: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 925.189810][T32429] .70·: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 925.200545][T32429] .70·: entered allmulticast mode [ 925.205687][T32429] hsr_slave_0: entered allmulticast mode [ 925.228844][T32429] A link change request failed with some changes committed already. Interface .70· may have been left with an inconsistent configuration, please check. [ 925.314799][T32441] netlink: 'syz.3.6965': attribute type 1 has an invalid length. [ 925.329570][T32441] netlink: 96 bytes leftover after parsing attributes in process `syz.3.6965'. [ 925.351144][T32441] netlink: 1 bytes leftover after parsing attributes in process `syz.3.6965'. [ 925.393966][T32441] netlink: 'syz.3.6965': attribute type 2 has an invalid length. [ 925.421900][T32447] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6967'. [ 925.463538][T32441] netlink: 'syz.3.6965': attribute type 3 has an invalid length. [ 925.479465][T32441] netlink: 'syz.3.6965': attribute type 3 has an invalid length. [ 925.500833][T32447] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6967'. [ 925.543421][T32458] vcan0: tx drop: invalid sa for name 0x0000000000007fdd [ 925.574290][T32461] netlink: 64 bytes leftover after parsing attributes in process `syz.2.6969'. [ 926.497432][T32493] bridge: RTM_NEWNEIGH with invalid state 0x10 [ 926.708624][T32505] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 926.759083][T32511] netlink: 'syz.1.6985': attribute type 2 has an invalid length. [ 926.906910][T32526] openvswitch: netlink: ufid size 4235 bytes exceeds the range (1, 16) [ 926.925628][T32526] openvswitch: netlink: Message has 8 unknown bytes. [ 926.939062][T32529] openvswitch: netlink: ufid size 4235 bytes exceeds the range (1, 16) [ 926.948624][T32529] openvswitch: netlink: Message has 8 unknown bytes. [ 927.008332][T32533] openvswitch: netlink: Missing key (keys=40, expected=80) [ 927.094581][T32538] Cannot find set identified by id 3 to match [ 927.239046][T32543] syzkaller0: entered promiscuous mode [ 927.244640][T32543] syzkaller0: entered allmulticast mode [ 927.399952][T32546] netlink: zone id is out of range [ 927.405202][T32546] netlink: zone id is out of range [ 928.566678][T32495] Bluetooth: hci4: command 0x0406 tx timeout [ 929.466814][T32494] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 929.477533][T32517] netlink: 'syz.0.6987': attribute type 11 has an invalid length. [ 929.496909][T32531] netlink: 'syz.1.6992': attribute type 1 has an invalid length. [ 929.537933][T32542] netlink: 'syz.4.6995': attribute type 1 has an invalid length. [ 929.703210][T32561] netlink: 'syz.4.7002': attribute type 7 has an invalid length. [ 929.927692][T32573] netlink: 'syz.2.7004': attribute type 11 has an invalid length. [ 929.984221][T32575] RDS: rds_bind could not find a transport for 0:0:300:0:1400::, load rds_tcp or rds_rdma? [ 930.026050][T32577] netlink: 'syz.0.7009': attribute type 21 has an invalid length. [ 930.051123][T32577] netlink: 'syz.0.7009': attribute type 22 has an invalid length. [ 930.068979][T32577] netlink: 'syz.0.7009': attribute type 23 has an invalid length. [ 930.086767][T32577] netlink: 'syz.0.7009': attribute type 25 has an invalid length. [ 930.095868][T32577] netlink: 'syz.0.7009': attribute type 26 has an invalid length. [ 930.115692][T32577] __nla_validate_parse: 6 callbacks suppressed [ 930.115712][T32577] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7009'. [ 930.154888][T32579] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7010'. [ 930.194359][T32579] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7010'. [ 930.223981][T32579] netlink: 'syz.1.7010': attribute type 12 has an invalid length. [ 930.441628][T32588] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 0 [ 930.564936][T32588] 8021q: adding VLAN 0 to HW filter on device bond0 [ 930.578126][T32588] 8021q: adding VLAN 0 to HW filter on device team0 [ 930.655474][T32588] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 930.701419][T32598] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7017'. [ 930.729610][T32598] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7017'. [ 930.865972][T32606] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7018'. [ 931.072422][T32621] netlink: 32 bytes leftover after parsing attributes in process `syz.4.7021'. [ 931.083268][T32620] netlink: 32 bytes leftover after parsing attributes in process `syz.4.7021'. [ 931.203478][T32629] netlink: 152 bytes leftover after parsing attributes in process `syz.3.7022'. [ 931.566000][T32650] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7028'. [ 931.620276][ T1297] lec:lec_start_xmit: lec0:No lecd attached [ 931.629783][ T1297] clip:clip_start_xmit: skb_dst(skb) == NULL [ 931.638530][T21559] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 931.678950][T21559] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 931.714493][T21559] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 931.799320][T21559] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 931.878686][T32670] validate_nla: 2 callbacks suppressed [ 931.878707][T32670] netlink: 'syz.3.7033': attribute type 21 has an invalid length. [ 931.893844][T32667] netlink: 'syz.1.7032': attribute type 4 has an invalid length. [ 931.925989][T32672] netlink: 'syz.0.7034': attribute type 7 has an invalid length. [ 931.934288][T32667] netlink: 'syz.1.7032': attribute type 4 has an invalid length. [ 931.943204][T32672] netlink: 'syz.0.7034': attribute type 8 has an invalid length. [ 931.965589][T32671] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 932.222222][T32695] xt_bpf: check failed: parse error [ 932.488377][T32706] netlink: 'syz.0.7040': attribute type 22 has an invalid length. [ 932.748591][T32706] netlink: 'syz.0.7040': attribute type 22 has an invalid length. [ 933.107858][T32723] netlink: 'syz.0.7046': attribute type 4 has an invalid length. [ 933.583232][T32745] lo speed is unknown, defaulting to 1000 [ 933.688253][ T5830] Bluetooth: hci5: command 0x0406 tx timeout [ 933.719509][T32763] openvswitch: netlink: Actions may not be safe on all matching packets [ 933.771835][T32763] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 933.779621][T32763] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 933.977909][T32763] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 933.985348][T32763] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 934.079765][T32744] lo speed is unknown, defaulting to 1000 [ 934.095322][T32745] lo speed is unknown, defaulting to 1000 [ 934.422726][ T313] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 935.434677][ T333] netlink: 'syz.2.7066': attribute type 1 has an invalid length. [ 935.488294][ T333] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 935.508705][T32744] lo speed is unknown, defaulting to 1000 [ 935.815151][ T344] __nla_validate_parse: 12 callbacks suppressed [ 935.815173][ T344] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7068'. [ 935.917847][ T360] netlink: 68 bytes leftover after parsing attributes in process `syz.0.7072'. [ 936.062645][ T369] ipt_REJECT: TCP_RESET invalid for non-tcp [ 936.306802][ T381] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7075'. [ 936.318093][ T381] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7075'. [ 936.340292][ T381] netlink: 'syz.0.7075': attribute type 14 has an invalid length. [ 936.398538][ T376] vlan3: entered promiscuous mode [ 936.404501][ T376] vlan3: entered allmulticast mode [ 936.411357][ T376] hsr_slave_1: entered allmulticast mode [ 936.701663][ T398] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 936.822127][ T402] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 936.878580][ T408] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 936.896843][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5280 ms [ 936.904928][ C1] lec:lec_tx_timeout: lec0 [ 936.992865][ T405] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 937.233917][ T403] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 937.298132][ T429] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7093'. [ 937.339387][ T431] syzkaller0: entered promiscuous mode [ 937.345070][ T431] syzkaller0: entered allmulticast mode [ 937.365911][ T432] 0: reclassify loop, rule prio 0, protocol 800 [ 937.387902][ T431] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7092'. [ 937.397145][ T431] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7092'. [ 937.603366][ T437] IPVS: length: 76 != 24 [ 937.637302][ T441] netlink: 37 bytes leftover after parsing attributes in process `syz.0.7095'. [ 937.897263][ T456] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7096'. [ 938.540134][ T466] netlink: 64 bytes leftover after parsing attributes in process `syz.3.7102'. [ 938.778178][ T479] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 939.102149][ T498] openvswitch: netlink: Flow actions attr not present in new flow. [ 939.115351][ T494] openvswitch: netlink: Flow actions attr not present in new flow. [ 939.129914][ T499] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 939.307940][ T510] syzkaller0: entered promiscuous mode [ 939.314254][ T510] syzkaller0: entered allmulticast mode [ 939.759103][ T515] validate_nla: 1 callbacks suppressed [ 939.759126][ T515] netlink: 'syz.3.7113': attribute type 4 has an invalid length. [ 939.772688][ T515] netlink: 'syz.3.7113': attribute type 8 has an invalid length. [ 939.809366][ T515] netlink: 'syz.3.7113': attribute type 1 has an invalid length. [ 939.827350][ T515] NCSI netlink: No device for ifindex 0 [ 939.956679][ T29] audit: type=1800 audit(1771484094.173:24): pid=533 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.7118" name="memory.events" dev="tmpfs" ino=786 res=0 errno=0 [ 940.035003][ T29] audit: type=1804 audit(1771484094.173:25): pid=533 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.7118" name="/newroot/150/memory.events" dev="tmpfs" ino=786 res=1 errno=0 [ 940.179063][ T535] lo speed is unknown, defaulting to 1000 [ 940.572067][ T552] tipc: Enabled bearer , priority 0 [ 940.647061][ T535] lo speed is unknown, defaulting to 1000 [ 940.653932][ T547] wlan1 speed is unknown, defaulting to 1000 [ 940.660566][ T547] wlan1 speed is unknown, defaulting to 1000 [ 940.701817][ T547] wlan1 speed is unknown, defaulting to 1000 [ 940.709583][ T551] tipc: Disabling bearer [ 940.721753][ T547] infiniband óyz2: RDMA CMA: cma_listen_on_dev, error -98 [ 940.791360][ T556] sch_tbf: burst 1 is lower than device syzkaller0 mtu (1500) ! [ 940.805456][ T547] wlan1 speed is unknown, defaulting to 1000 [ 940.805998][ T556] syzkaller0: entered promiscuous mode [ 940.831150][ T556] syzkaller0: entered allmulticast mode [ 940.867893][ T556] __nla_validate_parse: 12 callbacks suppressed [ 940.867916][ T556] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7127'. [ 940.885868][ T547] wlan1 speed is unknown, defaulting to 1000 [ 940.900236][ T547] wlan1 speed is unknown, defaulting to 1000 [ 940.912439][ T547] wlan1 speed is unknown, defaulting to 1000 [ 940.951250][ T566] netlink: 'syz.1.7129': attribute type 1 has an invalid length. [ 940.980713][ T566] netlink: 224 bytes leftover after parsing attributes in process `syz.1.7129'. [ 941.005778][ T547] wlan1 speed is unknown, defaulting to 1000 [ 941.155691][ T547] wlan1 speed is unknown, defaulting to 1000 [ 941.191057][ T573] netlink: 40 bytes leftover after parsing attributes in process `syz.3.7132'. [ 941.196187][ T575] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7133'. [ 941.228654][ T547] wlan1 speed is unknown, defaulting to 1000 [ 941.277017][ T547] wlan1 speed is unknown, defaulting to 1000 [ 941.297081][ T575] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7133'. [ 941.306282][ T547] wlan1 speed is unknown, defaulting to 1000 [ 941.309358][ T578] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 941.314507][ T547] wlan1 speed is unknown, defaulting to 1000 [ 941.382782][ T582] netlink: 3 bytes leftover after parsing attributes in process `syz.1.7133'. [ 941.396732][ T582] 0ªX¹¦À: renamed from caif0 [ 941.477093][ T582] 0ªX¹¦À: entered allmulticast mode [ 941.483839][ T582] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 941.523514][ T591] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7136'. [ 941.533195][ T591] netlink: 'syz.4.7136': attribute type 1 has an invalid length. [ 941.568416][ T583] netlink: 'syz.0.7131': attribute type 12 has an invalid length. [ 941.700311][ T591] veth0: entered promiscuous mode [ 941.706055][ T591] vlan2: entered promiscuous mode [ 941.996691][ T597] can: request_module (can-proto-0) failed. [ 942.110666][ T611] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7141'. [ 943.932551][ T5833] Bluetooth: hci2: command 0x0406 tx timeout [ 944.067439][ T616] netlink: 56 bytes leftover after parsing attributes in process `syz.4.7141'. [ 944.323684][ T637] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7148'. [ 944.355718][ T637] netlink: 'syz.2.7148': attribute type 13 has an invalid length. [ 944.407450][ T641] netlink: 'syz.3.7149': attribute type 16 has an invalid length. [ 944.434343][ T641] netlink: 'syz.3.7149': attribute type 17 has an invalid length. [ 945.536036][ T653] can: request_module (can-proto-3) failed. [ 945.596171][ T655] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 945.603830][ T655] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 945.867981][ T639] bond0 (unregistering): (slave 30): Releasing backup interface [ 945.911790][ T639] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 945.940776][ T639] bond0 (unregistering): Released all slaves [ 945.952598][ T659] Bluetooth: MGMT ver 1.23 [ 945.982525][ T641] 8021q: adding VLAN 0 to HW filter on device bond0 [ 945.991834][ T641] 8021q: adding VLAN 0 to HW filter on device team0 [ 946.002970][ T641] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 946.060675][T21559] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 946.077802][T21559] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 946.127629][ T667] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0, syncid = 786440, id = 0 [ 946.130676][T21559] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 946.200456][T21559] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 946.249272][T21559] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 946.272759][T21559] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 946.301466][ T670] __nla_validate_parse: 5 callbacks suppressed [ 946.301488][ T670] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7156'. [ 946.342830][ T670] netlink: 40 bytes leftover after parsing attributes in process `syz.2.7156'. [ 946.349689][ T663] syzkaller0: entered promiscuous mode [ 946.357570][ T663] syzkaller0: entered allmulticast mode [ 946.367945][T21559] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 946.376335][T21559] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 946.397838][ T670] netlink: 32 bytes leftover after parsing attributes in process `syz.2.7156'. [ 946.420606][ T673] netlink: 'syz.4.7158': attribute type 4 has an invalid length. [ 946.428935][ T673] netlink: 15538 bytes leftover after parsing attributes in process `syz.4.7158'. [ 947.041783][ T706] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7160'. [ 948.643629][ T691] syzkaller0: entered promiscuous mode [ 948.651707][ T691] syzkaller0: entered allmulticast mode [ 948.673541][ T696] tipc: Enabled bearer , priority 0 [ 948.809061][ T706] tipc: Resetting bearer [ 948.885204][ T706] tipc: Disabling bearer [ 948.964999][ T713] bond4: entered promiscuous mode [ 948.976673][ T713] bond4: entered allmulticast mode [ 948.982417][ T713] 8021q: adding VLAN 0 to HW filter on device bond4 [ 949.083415][ T719] netlink: 'syz.0.7166': attribute type 10 has an invalid length. [ 949.252140][ T734] team0: entered promiscuous mode [ 949.281689][ T734] team_slave_0: entered promiscuous mode [ 949.330653][ T734] team_slave_1: entered promiscuous mode [ 949.375811][ T734] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 949.539905][ T753] netlink: 'syz.1.7172': attribute type 1 has an invalid length. [ 949.545007][ T752] netlink: 'syz.4.7173': attribute type 1 has an invalid length. [ 949.593920][ T752] netlink: 88 bytes leftover after parsing attributes in process `syz.4.7173'. [ 949.642345][ T752] netlink: 1 bytes leftover after parsing attributes in process `syz.4.7173'. [ 949.644110][ T745] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7172'. [ 949.653679][ T752] netlink: 'syz.4.7173': attribute type 1 has an invalid length. [ 949.670487][ T752] netlink: 634 bytes leftover after parsing attributes in process `syz.4.7173'. [ 949.703151][ T757] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7174'. [ 950.324622][ T776] ipt_REJECT: TCP_RESET invalid for non-tcp [ 950.657085][ T804] netlink: 'syz.3.7183': attribute type 12 has an invalid length. [ 950.748292][ T804] netlink: 'syz.3.7183': attribute type 12 has an invalid length. [ 951.283937][ T839] bond5: option lp_interval: invalid value (0) [ 951.293094][ T839] bond5: option lp_interval: allowed values 1 - 2147483647 [ 951.358744][ T839] bond5 (unregistering): Released all slaves [ 951.928826][ T874] __nla_validate_parse: 8 callbacks suppressed [ 951.928848][ T874] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7198'. [ 952.006941][ T874] netlink: 'syz.3.7198': attribute type 1 has an invalid length. [ 952.032401][ T874] netlink: 224 bytes leftover after parsing attributes in process `syz.3.7198'. [ 952.083977][ T885] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7201'. [ 952.197628][ T892] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7202'. [ 952.410981][ T9484] lec:lec_start_xmit: lec0:No lecd attached [ 952.523114][ T902] gtp1: entered promiscuous mode [ 952.532698][ T905] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7205'. [ 952.542149][ T902] gtp1: entered allmulticast mode [ 952.555541][ T902] netlink: 5 bytes leftover after parsing attributes in process `syz.4.7204'. [ 952.618668][ T902] syzkaller1: entered promiscuous mode [ 952.637093][ T902] syzkaller1: entered allmulticast mode [ 952.755689][ T911] netlink: 48 bytes leftover after parsing attributes in process `syz.1.7208'. [ 952.795597][ T911] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7208'. [ 952.831569][ T911] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7208'. [ 952.995846][ T932] x_tables: duplicate underflow at hook 2 [ 953.067708][ T938] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7213'. [ 954.393592][ T1000] netlink: 'syz.0.7220': attribute type 10 has an invalid length. [ 954.908720][ T1024] dvmrp0: left allmulticast mode [ 956.953056][ T967] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 957.192679][ T1040] vlan6: entered promiscuous mode [ 957.208152][ T1040] bridge0: entered promiscuous mode [ 957.253844][ T1036] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7228'. [ 957.379734][ T1068] openvswitch: netlink: VXLAN extension 307 out of range max 1 [ 957.390319][ T1062] netlink: 36 bytes leftover after parsing attributes in process `syz.0.7235'. [ 957.403671][ T1062] netlink: 'syz.0.7235': attribute type 1 has an invalid length. [ 957.412321][ T1067] openvswitch: netlink: VXLAN extension 307 out of range max 1 [ 957.429766][ T1067] netlink: 36 bytes leftover after parsing attributes in process `syz.1.7237'. [ 957.567887][ T1076] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 957.579780][ T1076] bond4: (slave batadv1): making interface the new active one [ 957.588985][ T1076] bond4: (slave batadv1): Enslaving as an active interface with an up link [ 957.648434][ T1064] lo speed is unknown, defaulting to 1000 [ 957.904776][ T1099] debugfs: '“&˜%àï÷åQÍ0@æjÛÈÊ«–ÓÞ}³£!' already exists in 'ieee80211' [ 957.926566][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5510 ms [ 957.934712][ C1] lec:lec_tx_timeout: lec0 [ 958.055757][ T1064] lo speed is unknown, defaulting to 1000 [ 958.068554][ T1064] wlan1 speed is unknown, defaulting to 1000 [ 958.388163][ T1124] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7247'. [ 958.398157][ T1121] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7247'. [ 958.432457][ T1124] netlink: 'syz.1.7247': attribute type 1 has an invalid length. [ 958.466982][ T1124] netlink: 6 bytes leftover after parsing attributes in process `syz.1.7247'. [ 958.773263][ T1136] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7251'. [ 958.797151][ T1142] nbd: must specify a size in bytes for the device [ 958.939860][ T1149] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7251'. [ 959.224419][ T1159] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7257'. [ 959.399630][ T1162] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 959.651544][ T1177] syzkaller0: entered promiscuous mode [ 959.661820][ T1177] syzkaller0: entered allmulticast mode [ 959.672493][ T1183] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7264'. [ 962.138380][ T1229] syzkaller0: entered promiscuous mode [ 962.143937][ T1229] syzkaller0: entered allmulticast mode [ 962.185980][ T1236] netlink: 'syz.2.7274': attribute type 13 has an invalid length. [ 962.247360][ T1239] netlink: 'syz.4.7276': attribute type 1 has an invalid length. [ 962.321736][ T1245] netlink: 'syz.2.7277': attribute type 83 has an invalid length. [ 962.331711][ T1239] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 962.334442][ T1241] __nla_validate_parse: 2 callbacks suppressed [ 962.334463][ T1241] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7275'. [ 962.459327][ T1241] netlink: 'syz.0.7275': attribute type 12 has an invalid length. [ 962.469336][ T1241] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7275'. [ 962.485279][ T1241] netlink: 'syz.0.7275': attribute type 12 has an invalid length. [ 962.586916][ T1251] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7279'. [ 963.185537][ T1290] tipc: Enabling of bearer rejected, failed to enable media [ 963.358075][ T1302] xt_cluster: node mask cannot exceed total number of nodes [ 963.415258][ T1302] ipvlan2: entered promiscuous mode [ 963.450095][ T1302] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 963.502312][ T1293] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7289'. [ 964.284144][ T1336] netlink: 160 bytes leftover after parsing attributes in process `syz.4.7301'. [ 964.329355][ T1336] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check. [ 964.412157][ T5833] Bluetooth: hci3: command 0x0406 tx timeout [ 964.582039][ T1355] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7305'. [ 964.614253][ T1353] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 964.618349][ T1355] netlink: 36 bytes leftover after parsing attributes in process `syz.1.7305'. [ 964.685825][T17067] lo speed is unknown, defaulting to 1000 [ 964.705829][T17067] syz2: Port: 1 Link DOWN [ 964.905666][ T1376] netlink: 'syz.1.7311': attribute type 9 has an invalid length. [ 964.986380][ T1382] netlink: 'syz.3.7312': attribute type 32 has an invalid length. [ 965.406064][ T1404] netlink: 32 bytes leftover after parsing attributes in process `syz.2.7317'. [ 965.470538][ T1407] netlink: 36 bytes leftover after parsing attributes in process `syz.2.7317'. [ 965.483367][ T1407] netlink: 32 bytes leftover after parsing attributes in process `syz.2.7317'. [ 966.279781][ T1440] nbd: must specify a size in bytes for the device [ 966.309224][ T1442] syzkaller0: entered promiscuous mode [ 966.314746][ T1442] syzkaller0: entered allmulticast mode [ 966.795077][ T1467] netlink: 'syz.0.7335': attribute type 6 has an invalid length. [ 966.807885][ T1467] netlink: 'syz.0.7335': attribute type 6 has an invalid length. [ 967.798047][ T1506] __nla_validate_parse: 4 callbacks suppressed [ 967.798067][ T1506] netlink: 32 bytes leftover after parsing attributes in process `syz.1.7346'. [ 967.958817][ T1510] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7347'. [ 969.171621][ T1575] xt_cgroup: path and classid specified [ 969.208546][ T1575] netlink: 'syz.1.7369': attribute type 11 has an invalid length. [ 969.350556][ T1583] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7371'. [ 969.385120][ T1574] bond1: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 969.410345][ T1583] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 969.478511][ T1574] bond1 (unregistering): Released all slaves [ 969.534048][ T5833] Bluetooth: hci1: command 0x0406 tx timeout [ 970.416308][ T1636] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7383'. [ 970.454349][ T1636] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 970.560123][ T1646] netlink: 'syz.3.7386': attribute type 6 has an invalid length. [ 970.578993][ T1646] netlink: 'syz.3.7386': attribute type 6 has an invalid length. [ 970.596860][ T1647] Cannot find set identified by id 65534 to match [ 970.652700][ T1646] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.7386'. [ 970.763710][ T1657] netlink: 156 bytes leftover after parsing attributes in process `syz.2.7388'. [ 970.803001][ T1657] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7388'. [ 971.598980][ T1656] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 971.724803][ T1690] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7398'. [ 971.738525][ T1690] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 971.765381][ T1689] netlink: 68 bytes leftover after parsing attributes in process `syz.0.7399'. [ 972.142928][ T1701] lo speed is unknown, defaulting to 1000 [ 972.681217][ T1701] lo speed is unknown, defaulting to 1000 [ 972.689289][ T1701] wlan1 speed is unknown, defaulting to 1000 [ 972.907885][ T1729] tipc: Started in network mode [ 972.912819][ T1729] tipc: Node identity ae512493fd4a, cluster identity 4711 [ 972.937593][ T1729] tipc: Enabled bearer , priority 0 [ 972.945746][ T1729] syzkaller0: entered promiscuous mode [ 972.977606][ T1729] syzkaller0: entered allmulticast mode [ 973.104236][ T1729] tipc: Resetting bearer [ 973.133777][ T1727] tipc: Resetting bearer [ 973.177505][ T1727] tipc: Disabling bearer [ 973.534805][ T1753] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7419'. [ 974.453491][ T1750] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 974.484039][ T1750] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 974.599497][T21559] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 974.650628][T21559] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 974.665280][T21559] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 974.708977][T21559] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 974.754096][T21559] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 974.769227][T21559] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 974.795417][T21559] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 974.807395][T21559] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 975.146580][ T29] audit: type=1800 audit(1771484129.353:26): pid=1811 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.7435" name="memory.events" dev="tmpfs" ino=1302 res=0 errno=0 [ 975.215019][ T1820] IPv6: addrconf: prefix option has invalid lifetime [ 975.404617][ T1834] x_tables: duplicate underflow at hook 2 [ 975.555232][ T1844] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7448'. [ 975.598677][ T1844] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 975.725910][ T1856] sctp: [Deprecated]: syz.3.7451 (pid 1856) Use of struct sctp_assoc_value in delayed_ack socket option. [ 975.725910][ T1856] Use struct sctp_sack_info instead [ 975.736363][ T1859] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7452'. [ 975.752132][ T29] audit: type=1804 audit(1771484129.973:27): pid=1856 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.7451" name="x000000000000000300000000000000000000003" dev="tmpfs" ino=1293 res=1 errno=0 [ 975.776999][ T29] audit: type=1800 audit(1771484129.973:28): pid=1856 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.7451" name="x000000000000000300000000000000000000003" dev="tmpfs" ino=1293 res=0 errno=0 [ 975.825322][ T1859] syzkaller1: entered allmulticast mode [ 976.085618][ T1875] openvswitch: netlink: IPv6 tunnel dst address is zero [ 976.176339][ T1877] netlink: 36 bytes leftover after parsing attributes in process `syz.0.7457'. [ 976.385711][ T29] audit: type=1107 audit(1771484130.603:29): pid=1896 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='𳚥Ò`cÌg)Vvvh û×ÔMl¬€‰' [ 976.557163][ T1903] netlink: 224 bytes leftover after parsing attributes in process `syz.4.7465'. [ 976.588879][ T1903] geneve2: entered promiscuous mode [ 976.596256][ T7851] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 976.623717][ T7851] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 976.639286][ T1905] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7467'. [ 976.654539][ T7851] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 976.679356][ T7851] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 976.780563][ T1915] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7469'. [ 976.830185][ T1915] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7469'. [ 976.851954][ T1915] netlink: 876 bytes leftover after parsing attributes in process `syz.3.7469'. [ 976.863064][ T1915] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7469'. [ 977.215006][ T7841] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 977.228049][ T7841] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 977.245767][ T7841] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 977.257826][ T7841] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 977.698600][T30991] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 977.848147][ T48] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 977.937047][T30991] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 977.983748][ T1966] netlink: 'syz.1.7482': attribute type 6 has an invalid length. [ 978.008604][ T1966] netlink: 'syz.1.7482': attribute type 7 has an invalid length. [ 978.031426][ T1966] netlink: 'syz.1.7482': attribute type 8 has an invalid length. [ 978.162922][ T1971] netlink: 'syz.2.7484': attribute type 23 has an invalid length. [ 978.263788][ T1979] lo speed is unknown, defaulting to 1000 [ 978.347591][ T1982] netlink: 'syz.0.7488': attribute type 1 has an invalid length. [ 978.541118][ T1982] bond5 (unregistering): Released all slaves [ 978.749657][ T1980] 0ªX¹¦À: left allmulticast mode [ 978.778699][ T1980] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 978.896223][ T7851] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 978.907731][ T7851] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 979.199420][ T1979] lo speed is unknown, defaulting to 1000 [ 979.228603][ T1979] wlan1 speed is unknown, defaulting to 1000 [ 979.694478][ T9333] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 980.013024][ T2024] lo speed is unknown, defaulting to 1000 [ 980.686986][ T2024] lo speed is unknown, defaulting to 1000 [ 980.713161][ T2052] __nla_validate_parse: 7 callbacks suppressed [ 980.713181][ T2052] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7508'. [ 980.720361][ T2024] wlan1 speed is unknown, defaulting to 1000 [ 983.366722][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 983.686115][ T2052] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 983.907242][ T2108] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7522'. [ 983.977128][ T2114] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_rx_wq": -EINTR [ 984.394899][ T2125] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7525'. [ 984.425751][ T2129] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7526'. [ 984.449168][ T2125] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7525'. [ 984.460744][ T2129] netlink: 84 bytes leftover after parsing attributes in process `syz.0.7526'. [ 984.475544][ T2129] veth0: entered promiscuous mode [ 984.483376][ T2129] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7526'. [ 984.498161][ T2129] veth0 (unregistering): left promiscuous mode [ 984.658691][ T2141] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 984.992517][ T2156] netlink: 'syz.1.7536': attribute type 33 has an invalid length. [ 985.027540][ T2162] netlink: 'syz.0.7541': attribute type 1 has an invalid length. [ 985.035321][ T2162] netlink: 224 bytes leftover after parsing attributes in process `syz.0.7541'. [ 985.046720][ T2156] netlink: 152 bytes leftover after parsing attributes in process `syz.1.7536'. [ 985.099244][ T2156] netlink: 14 bytes leftover after parsing attributes in process `syz.1.7536'. [ 985.215344][ T2177] netlink: 'syz.3.7545': attribute type 1 has an invalid length. [ 985.380335][ T2188] IPVS: set_ctl: invalid protocol: 43 255.255.255.255:20000 [ 985.419870][ T2177] bond2: entered promiscuous mode [ 985.424970][ T2177] bond2: entered allmulticast mode [ 985.430726][ T2177] 8021q: adding VLAN 0 to HW filter on device bond2 [ 985.831174][ T2201] __nla_validate_parse: 1 callbacks suppressed [ 985.831198][ T2201] netlink: 92 bytes leftover after parsing attributes in process `syz.2.7553'. [ 986.267313][ T2229] mac80211_hwsim hwsim74 syzkaller0: entered promiscuous mode [ 986.306679][ T2229] mac80211_hwsim hwsim74 syzkaller0: entered allmulticast mode [ 986.345321][ T2224] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7558'. [ 986.476365][ T2232] tipc: Enabled bearer , priority 0 [ 986.503323][ T2232] syzkaller0: entered promiscuous mode [ 986.520286][ T2232] syzkaller0: entered allmulticast mode [ 986.572442][ T2239] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7563'. [ 986.595034][ T2232] tipc: Resetting bearer [ 986.602333][ T2239] hsr0: mtu greater than device maximum [ 986.620571][ T2231] tipc: Resetting bearer [ 986.731625][ T2231] tipc: Disabling bearer [ 986.775059][ T2246] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7566'. [ 986.846420][ T2253] netlink: 'syz.1.7567': attribute type 1 has an invalid length. [ 986.929181][ T2262] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7567'. [ 986.977230][ T2253] netlink: 36 bytes leftover after parsing attributes in process `syz.1.7567'. [ 986.978033][ T2260] lo speed is unknown, defaulting to 1000 [ 987.006788][ T2253] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7567'. [ 987.017977][ T2253] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7567'. [ 987.058307][ T2265] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7570'. [ 987.076763][ T2265] netlink: 56 bytes leftover after parsing attributes in process `syz.4.7570'. [ 987.488419][ T2260] lo speed is unknown, defaulting to 1000 [ 987.529574][ T2260] wlan1 speed is unknown, defaulting to 1000 [ 988.246946][ T5833] Bluetooth: hci1: command 0x0406 tx timeout [ 988.451063][ T2311] lo speed is unknown, defaulting to 1000 [ 988.491738][ T2313] gretap0: refused to change device tx_queue_len [ 988.500226][ T2313] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 988.597012][ T2311] lo speed is unknown, defaulting to 1000 [ 988.603890][ T2311] wlan1 speed is unknown, defaulting to 1000 [ 990.232241][ T2271] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 990.923725][ T2360] lo speed is unknown, defaulting to 1000 [ 990.958310][ T2364] pimreg: tun_chr_ioctl cmd 1074025677 [ 990.964010][ T2364] pimreg: linktype set to 1 [ 991.028334][ T2364] IPVS: stopping backup sync thread 667 ... [ 991.046718][ T2366] __nla_validate_parse: 11 callbacks suppressed [ 991.046739][ T2366] netlink: 76 bytes leftover after parsing attributes in process `syz.0.7598'. [ 991.099573][T30990] IPVS: starting estimator thread 0... [ 991.216607][ T2381] IPVS: using max 30 ests per chain, 72000 per kthread [ 991.415235][ T2400] netlink: 32 bytes leftover after parsing attributes in process `syz.4.7604'. [ 991.665053][ T2415] netlink: 'syz.2.7607': attribute type 4 has an invalid length. [ 991.678102][ T9333] lo speed is unknown, defaulting to 1000 [ 991.683884][ T9333] syz2: Port: 1 Link ACTIVE [ 991.709992][ T2388] lo speed is unknown, defaulting to 1000 [ 991.715395][ T2360] lo speed is unknown, defaulting to 1000 [ 991.782218][ T2360] wlan1 speed is unknown, defaulting to 1000 [ 991.918271][ T2419] xt_TCPMSS: Only works on TCP SYN packets [ 991.931719][ T2419] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7608'. [ 992.186696][ T2388] lo speed is unknown, defaulting to 1000 [ 992.194933][ T2388] wlan1 speed is unknown, defaulting to 1000 [ 992.406707][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 992.488547][ T2449] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7614'. [ 992.547220][ T2447] veth0: entered promiscuous mode [ 993.057271][ T1297] lec:lec_start_xmit: lec0:No lecd attached [ 993.063741][ T1297] clip:clip_start_xmit: skb_dst(skb) == NULL [ 993.123601][ T2470] syzkaller1: entered promiscuous mode [ 993.131494][ T2470] syzkaller1: entered allmulticast mode [ 993.226119][ T2472] netlink: 52 bytes leftover after parsing attributes in process `syz.2.7621'. [ 993.391733][ T2489] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7626'. [ 993.456058][ T2485] lo speed is unknown, defaulting to 1000 [ 993.462358][ T2489] netlink: 'syz.0.7626': attribute type 9 has an invalid length. [ 993.729401][ T2510] xt_CT: You must specify a L4 protocol and not use inversions on it [ 993.741070][ T2501] tipc: Disabling bearer [ 993.843313][ T2485] lo speed is unknown, defaulting to 1000 [ 993.872272][ T2485] wlan1 speed is unknown, defaulting to 1000 [ 993.996006][ T2520] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7634'. [ 994.006131][ T2521] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7634'. [ 994.044158][ T2520] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 994.053932][ T2520] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7634'. [ 994.083043][ T2521] netlink: 'syz.2.7634': attribute type 3 has an invalid length. [ 994.091131][ T2521] netlink: 3 bytes leftover after parsing attributes in process `syz.2.7634'. [ 994.172627][ T2529] lo speed is unknown, defaulting to 1000 [ 994.226880][ T2531] netlink: 'syz.2.7636': attribute type 89 has an invalid length. [ 994.523061][ T2547] xt_hashlimit: max too large, truncated to 1048576 [ 994.652486][ T2551] netlink: 'syz.2.7643': attribute type 1 has an invalid length. [ 994.698782][ T2529] lo speed is unknown, defaulting to 1000 [ 994.724337][ T2529] wlan1 speed is unknown, defaulting to 1000 [ 994.725099][ T2557] mac80211_hwsim hwsim83 syzkaller0: entered promiscuous mode [ 994.738866][ T2557] mac80211_hwsim hwsim83 syzkaller0: entered allmulticast mode [ 995.043047][ T2567] netlink: 'syz.0.7647': attribute type 11 has an invalid length. [ 995.524559][ T2582] netlink: 'syz.1.7651': attribute type 11 has an invalid length. [ 996.018759][ T2593] netlink: 'syz.3.7653': attribute type 1 has an invalid length. [ 996.034698][ T2593] netlink: 'syz.3.7653': attribute type 178 has an invalid length. [ 996.330433][ T2613] __nla_validate_parse: 1 callbacks suppressed [ 996.330454][ T2613] netlink: 1 bytes leftover after parsing attributes in process `syz.2.7659'. [ 996.681173][ T2641] bond0: peer notification delay (9) is not a multiple of miimon (100), value rounded to 0 ms [ 996.875848][ T2644] IPVS: Error connecting to the multicast addr [ 997.032580][ T2657] lo speed is unknown, defaulting to 1000 [ 997.189338][ T2677] netlink: 'syz.2.7669': attribute type 1 has an invalid length. [ 997.276012][ T2677] 8021q: adding VLAN 0 to HW filter on device bond2 [ 997.518081][ T2685] bond2: (slave veth1): Enslaving as an active interface with a down link [ 997.546056][ T2692] netlink: 'syz.1.7672': attribute type 1 has an invalid length. [ 997.566823][ T2692] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7672'. [ 997.575730][ T2692] netlink: 'syz.1.7672': attribute type 1 has an invalid length. [ 997.599365][ T2677] bond2: (slave dummy0): making interface the new active one [ 997.625215][ T2695] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7671'. [ 997.626045][ T2677] dummy0: entered promiscuous mode [ 997.660687][ T2677] bond2: (slave dummy0): Enslaving as an active interface with an up link [ 997.723547][ T2694] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7671'. [ 997.766094][ T2690] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7671'. [ 997.971948][ T2657] lo speed is unknown, defaulting to 1000 [ 997.998747][ T2657] wlan1 speed is unknown, defaulting to 1000 [ 998.066563][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 998.074640][ C1] lec:lec_tx_timeout: lec0 [ 998.438170][ T2725] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7677'. [ 998.476742][ T2725] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7677'. [ 998.557044][ T2713] lo speed is unknown, defaulting to 1000 [ 998.902848][ T2713] lo speed is unknown, defaulting to 1000 [ 999.003097][ T2713] wlan1 speed is unknown, defaulting to 1000 [ 999.175638][ T2744] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7682'. [ 999.289115][ T2739] lo speed is unknown, defaulting to 1000 [ 999.659693][ T2767] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7688'. [ 999.757145][ T2772] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7689'. [ 999.906284][ T2783] netlink: 'syz.0.7693': attribute type 10 has an invalid length. [ 999.957558][ T2785] netlink: 'syz.3.7694': attribute type 13 has an invalid length. [ 999.965525][ T2785] netlink: 'syz.3.7694': attribute type 17 has an invalid length. [ 1000.169663][ T2785] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1000.183635][ T2785] 8021q: adding VLAN 0 to HW filter on device team0 [ 1000.201664][ T2791] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1000.223377][ T2785] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1000.353838][ T2739] lo speed is unknown, defaulting to 1000 [ 1000.389655][ T2739] wlan1 speed is unknown, defaulting to 1000 [ 1001.083765][ T2825] lo speed is unknown, defaulting to 1000 [ 1001.517208][ T2825] lo speed is unknown, defaulting to 1000 [ 1001.525065][ T2825] wlan1 speed is unknown, defaulting to 1000 [ 1001.528116][ T2858] lo speed is unknown, defaulting to 1000 [ 1001.621358][ T2863] __nla_validate_parse: 2 callbacks suppressed [ 1001.621378][ T2863] netlink: 40 bytes leftover after parsing attributes in process `syz.4.7710'. [ 1001.713662][ T2873] netlink: 128 bytes leftover after parsing attributes in process `syz.4.7710'. [ 1002.099931][ T2858] lo speed is unknown, defaulting to 1000 [ 1002.141751][ T2892] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7714'. [ 1002.150977][ T2858] wlan1 speed is unknown, defaulting to 1000 [ 1002.223938][ T2890] lo speed is unknown, defaulting to 1000 [ 1002.442563][ T2902] sctp: [Deprecated]: syz.1.7717 (pid 2902) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1002.442563][ T2902] Use struct sctp_sack_info instead [ 1002.591488][ T2906] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7719'. [ 1002.622090][ T2908] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7719'. [ 1002.770307][ T2913] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7721'. [ 1002.787598][ T2890] lo speed is unknown, defaulting to 1000 [ 1002.789966][ T2913] openvswitch: netlink: Flow key attr not present in new flow. [ 1002.835196][ T2890] wlan1 speed is unknown, defaulting to 1000 [ 1003.819288][ T2945] tipc: Enabled bearer , priority 0 [ 1003.839557][ T2945] geneve0: entered promiscuous mode [ 1003.844809][ T2945] geneve0: entered allmulticast mode [ 1003.854849][ T2955] netlink: 'syz.1.7732': attribute type 4 has an invalid length. [ 1003.865209][ T2951] lo speed is unknown, defaulting to 1000 [ 1003.921247][ T2955] netlink: 'syz.1.7732': attribute type 4 has an invalid length. [ 1003.942606][ T2944] tipc: Disabling bearer [ 1004.532075][ T2986] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7739'. [ 1004.572811][ T2989] netlink: 'syz.1.7741': attribute type 1 has an invalid length. [ 1004.593865][ T2990] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7740'. [ 1004.622883][ T2989] netlink: 'syz.1.7741': attribute type 2 has an invalid length. [ 1004.673619][ T2951] lo speed is unknown, defaulting to 1000 [ 1004.694135][ T2990] syzkaller0: entered promiscuous mode [ 1004.699857][ T2990] syzkaller0: entered allmulticast mode [ 1004.707404][ T2951] wlan1 speed is unknown, defaulting to 1000 [ 1004.708444][ T2990] 0: reclassify loop, rule prio 0, protocol 800 [ 1004.744274][ T2998] sctp: [Deprecated]: syz.2.7743 (pid 2998) Use of int in maxseg socket option. [ 1004.744274][ T2998] Use struct sctp_assoc_value instead [ 1004.779431][ T2990] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7740'. [ 1004.782856][ T2997] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7743'. [ 1004.923943][ T3008] tipc: Cannot configure node identity twice [ 1004.933347][ T3008] tipc: Cannot configure node identity twice [ 1005.000203][ T3006] netlink: 'syz.1.7744': attribute type 33 has an invalid length. [ 1005.173656][ T3013] lo speed is unknown, defaulting to 1000 [ 1005.482762][ T3024] openvswitch: netlink: Key type 30 is not supported [ 1005.659570][ T3013] lo speed is unknown, defaulting to 1000 [ 1005.669151][ T3013] wlan1 speed is unknown, defaulting to 1000 [ 1008.473097][ T3024] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1008.907950][ T48] dummy0: left promiscuous mode [ 1008.947214][ T3080] netlink: 'syz.0.7768': attribute type 1 has an invalid length. [ 1009.104147][ T3089] __nla_validate_parse: 6 callbacks suppressed [ 1009.104167][ T3089] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7771'. [ 1009.162918][ T3089] netlink: 32 bytes leftover after parsing attributes in process `syz.2.7771'. [ 1009.582118][ T3127] FAULT_INJECTION: forcing a failure. [ 1009.582118][ T3127] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1009.606695][ T3127] CPU: 0 UID: 0 PID: 3127 Comm: syz.0.7781 Not tainted syzkaller #0 PREEMPT(full) [ 1009.606722][ T3127] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1009.606735][ T3127] Call Trace: [ 1009.606743][ T3127] [ 1009.606752][ T3127] dump_stack_lvl+0xe8/0x150 [ 1009.606785][ T3127] should_fail_ex+0x412/0x560 [ 1009.606818][ T3127] _copy_from_user+0x2d/0xb0 [ 1009.606840][ T3127] ___sys_sendmsg+0x1c6/0x360 [ 1009.606865][ T3127] ? __lock_acquire+0x6b5/0x2cf0 [ 1009.606891][ T3127] ? __pfx____sys_sendmsg+0x10/0x10 [ 1009.606955][ T3127] ? __fget_files+0x2a/0x420 [ 1009.606973][ T3127] ? __fget_files+0x3a0/0x420 [ 1009.607001][ T3127] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1009.607026][ T3127] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1009.607059][ T3127] ? __pfx_ksys_write+0x10/0x10 [ 1009.607094][ T3127] do_syscall_64+0x14d/0xf80 [ 1009.607117][ T3127] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1009.607136][ T3127] ? trace_irq_disable+0x37/0x100 [ 1009.607158][ T3127] ? clear_bhb_loop+0x40/0x90 [ 1009.607182][ T3127] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1009.607201][ T3127] RIP: 0033:0x7fec82f9c629 [ 1009.607220][ T3127] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1009.607237][ T3127] RSP: 002b:00007fec83e2d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1009.607260][ T3127] RAX: ffffffffffffffda RBX: 00007fec83215fa0 RCX: 00007fec82f9c629 [ 1009.607274][ T3127] RDX: 000000000000ff00 RSI: 0000200000001180 RDI: 0000000000000004 [ 1009.607287][ T3127] RBP: 00007fec83e2d090 R08: 0000000000000000 R09: 0000000000000000 [ 1009.607299][ T3127] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1009.607311][ T3127] R13: 00007fec83216038 R14: 00007fec83215fa0 R15: 00007ffed763b658 [ 1009.607344][ T3127] [ 1009.986688][ T3138] netlink: 'syz.3.7786': attribute type 1 has an invalid length. [ 1010.083650][ T3140] lo speed is unknown, defaulting to 1000 [ 1010.143534][ T3146] team0 (unregistering): Port device team_slave_0 removed [ 1010.181193][ T3146] team0 (unregistering): Port device team_slave_1 removed [ 1010.326694][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1010.512712][ T3140] lo speed is unknown, defaulting to 1000 [ 1010.556689][ T3140] wlan1 speed is unknown, defaulting to 1000 [ 1010.559213][ T3165] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7794'. [ 1010.728565][ T3171] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7797'. [ 1010.796800][ T3173] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7798'. [ 1010.806272][ T3173] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7798'. [ 1011.187943][ T3195] lo speed is unknown, defaulting to 1000 [ 1011.274748][ T3202] geneve3: entered promiscuous mode [ 1011.286637][ T3202] geneve3: entered allmulticast mode [ 1011.438332][ T3206] netlink: 260 bytes leftover after parsing attributes in process `syz.2.7804'. [ 1011.795713][ T3195] lo speed is unknown, defaulting to 1000 [ 1011.813361][ T3195] wlan1 speed is unknown, defaulting to 1000 [ 1011.966080][ T3228] netlink: 48 bytes leftover after parsing attributes in process `syz.0.7814'. [ 1012.241271][ T3232] netlink: 'syz.3.7815': attribute type 12 has an invalid length. [ 1012.364524][ T3237] netlink: 'syz.0.7816': attribute type 10 has an invalid length. [ 1012.396819][ T3237] syz_tun: entered promiscuous mode [ 1012.408490][ T3237] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 1012.588258][ T3249] syzkaller0: entered promiscuous mode [ 1012.596259][ T3249] syzkaller0: entered allmulticast mode [ 1012.681271][ T3257] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7822'. [ 1012.690789][ T3257] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7822'. [ 1013.551725][ T3296] lo speed is unknown, defaulting to 1000 [ 1013.756353][ T3312] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1013.831657][ T3314] set match dimension is over the limit! [ 1013.944920][ T3312] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1014.409598][ T3335] .70·: left allmulticast mode [ 1014.414501][ T3335] hsr_slave_0: left allmulticast mode [ 1014.437204][ T3335] gretap1: left promiscuous mode [ 1014.442390][ T3335] bridge2: left allmulticast mode [ 1014.448682][ T3335] gtp0: left allmulticast mode [ 1014.453576][ T3335] macsec1: left promiscuous mode [ 1014.459365][ T3335] macsec1: left allmulticast mode [ 1014.464521][ T3335] vlan2: left promiscuous mode [ 1014.469905][ T3335] vlan2: left allmulticast mode [ 1014.474790][ T3335] hsr_slave_1: left allmulticast mode [ 1014.491061][ T3335] bond4: left promiscuous mode [ 1014.495860][ T3335] bond4: left allmulticast mode [ 1014.505767][ T3335] vlan6: left promiscuous mode [ 1014.510605][ T3335] bridge0: left promiscuous mode [ 1014.516012][ T3335] mac80211_hwsim hwsim74 syzkaller0: left promiscuous mode [ 1014.523778][ T3335] mac80211_hwsim hwsim74 syzkaller0: left allmulticast mode [ 1014.538062][ T3337] veth4: entered allmulticast mode [ 1014.557629][ T3312] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1014.584371][ T3296] lo speed is unknown, defaulting to 1000 [ 1014.599937][ T3343] syzkaller0: entered promiscuous mode [ 1014.611577][ T3343] syzkaller0: entered allmulticast mode [ 1014.622242][ T3296] wlan1 speed is unknown, defaulting to 1000 [ 1014.635078][ T3312] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1014.705092][ T3350] FAULT_INJECTION: forcing a failure. [ 1014.705092][ T3350] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1014.718457][ T3350] CPU: 1 UID: 0 PID: 3350 Comm: syz.1.7845 Not tainted syzkaller #0 PREEMPT(full) [ 1014.718483][ T3350] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1014.718493][ T3350] Call Trace: [ 1014.718500][ T3350] [ 1014.718507][ T3350] dump_stack_lvl+0xe8/0x150 [ 1014.718534][ T3350] should_fail_ex+0x412/0x560 [ 1014.718560][ T3350] _copy_to_user+0x31/0xb0 [ 1014.718578][ T3350] simple_read_from_buffer+0xe1/0x170 [ 1014.718605][ T3350] proc_fail_nth_read+0x1bb/0x230 [ 1014.718628][ T3350] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1014.718650][ T3350] ? rw_verify_area+0x2a6/0x4d0 [ 1014.718668][ T3350] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1014.718690][ T3350] vfs_read+0x20c/0xa70 [ 1014.718706][ T3350] ? fdget_pos+0x246/0x320 [ 1014.718726][ T3350] ? __pfx___mutex_lock+0x10/0x10 [ 1014.718747][ T3350] ? __pfx_vfs_read+0x10/0x10 [ 1014.718766][ T3350] ? __fget_files+0x2a/0x420 [ 1014.718785][ T3350] ? __fget_files+0x3a0/0x420 [ 1014.718798][ T3350] ? __fget_files+0x2a/0x420 [ 1014.718820][ T3350] ksys_read+0x150/0x270 [ 1014.718840][ T3350] ? __pfx_ksys_read+0x10/0x10 [ 1014.718868][ T3350] do_syscall_64+0x14d/0xf80 [ 1014.718886][ T3350] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1014.718901][ T3350] ? trace_irq_disable+0x37/0x100 [ 1014.718919][ T3350] ? clear_bhb_loop+0x40/0x90 [ 1014.718937][ T3350] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1014.718952][ T3350] RIP: 0033:0x7fcdd0b5cece [ 1014.718967][ T3350] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1014.718980][ T3350] RSP: 002b:00007fcdcededfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1014.718998][ T3350] RAX: ffffffffffffffda RBX: 00007fcdcedee6c0 RCX: 00007fcdd0b5cece [ 1014.719009][ T3350] RDX: 000000000000000f RSI: 00007fcdcedee0a0 RDI: 0000000000000005 [ 1014.719019][ T3350] RBP: 00007fcdcedee090 R08: 0000000000000000 R09: 0000000000000000 [ 1014.719028][ T3350] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1014.719037][ T3350] R13: 00007fcdd0e16038 R14: 00007fcdd0e15fa0 R15: 00007fff61cfb1c8 [ 1014.719064][ T3350] [ 1015.085013][ T1106] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1015.105671][ T3355] __nla_validate_parse: 1 callbacks suppressed [ 1015.105692][ T3355] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7847'. [ 1015.272235][ T13] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1015.346265][ T3362] xt_TCPMSS: Only works on TCP SYN packets [ 1015.406286][T21559] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1015.430023][T21559] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1015.484657][ T9484] lec:lec_start_xmit: lec0:No lecd attached [ 1016.821615][ T3441] tc_dump_action: action bad kind [ 1017.227439][ T3451] syzkaller0: entered promiscuous mode [ 1017.233163][ T3451] syzkaller0: entered allmulticast mode [ 1019.479748][ T3467] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7880'. [ 1019.717691][ T3488] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1019.852554][ T3484] SET target dimension over the limit! [ 1020.016866][ T3497] lo speed is unknown, defaulting to 1000 [ 1020.182820][ T3507] netlink: 52 bytes leftover after parsing attributes in process `syz.4.7894'. [ 1020.268495][ T3509] netlink: 76 bytes leftover after parsing attributes in process `syz.4.7894'. [ 1020.328972][ T3507] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7894'. [ 1020.346670][ T3507] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7894'. [ 1020.887663][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5400 ms [ 1020.895687][ C1] lec:lec_tx_timeout: lec0 [ 1022.391999][ T3497] lo speed is unknown, defaulting to 1000 [ 1022.392313][ T3509] netlink: 52 bytes leftover after parsing attributes in process `syz.4.7894'. [ 1022.401808][ T3497] wlan1 speed is unknown, defaulting to 1000 [ 1022.919566][ T3532] syzkaller1: entered promiscuous mode [ 1022.925218][ T3532] syzkaller1: entered allmulticast mode [ 1023.476781][ T3556] netlink: 128 bytes leftover after parsing attributes in process `syz.0.7905'. [ 1023.582401][ T3570] sch_tbf: burst 2 is lower than device tunl0 mtu (1280) ! [ 1023.789597][ T3580] rdma_rxe: rxe_newlink: failed to add lo [ 1023.792155][ T3577] lo speed is unknown, defaulting to 1000 [ 1023.986986][ T3597] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1023.989772][ T3599] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7920'. [ 1024.019930][ T3599] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7920'. [ 1024.310678][ T3577] lo speed is unknown, defaulting to 1000 [ 1024.319480][ T3577] wlan1 speed is unknown, defaulting to 1000 [ 1024.757137][ T3617] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7924'. [ 1024.806086][ T3617] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7924'. [ 1025.016774][ T3625] netlink: 'syz.4.7927': attribute type 5 has an invalid length. [ 1025.071144][ T3628] bridge: RTM_NEWNEIGH with invalid state 0x10 [ 1025.119195][ T3625] ip6erspan0: entered promiscuous mode [ 1025.241517][ T3631] lo speed is unknown, defaulting to 1000 [ 1025.268787][ T3638] __nla_validate_parse: 1 callbacks suppressed [ 1025.268808][ T3638] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7930'. [ 1025.437954][ T3650] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7934'. [ 1025.522781][ T3659] netlink: 'syz.0.7935': attribute type 1 has an invalid length. [ 1025.643240][ T3659] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1025.658927][ T3661] bond6: (slave geneve3): making interface the new active one [ 1025.670150][ T3661] bond6: (slave geneve3): Enslaving as an active interface with an up link [ 1025.729623][ T7851] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1025.750186][ T3631] lo speed is unknown, defaulting to 1000 [ 1025.756048][ T7851] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1025.769834][ T3631] wlan1 speed is unknown, defaulting to 1000 [ 1025.777990][ T7841] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1025.793834][ T7841] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1026.148648][ T3679] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7944'. [ 1026.158996][ T3679] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 1026.362881][ T3687] netlink: 84 bytes leftover after parsing attributes in process `syz.2.7945'. [ 1026.523090][ T3703] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1026.709190][ T3712] mac80211_hwsim hwsim74 syzkaller0: entered promiscuous mode [ 1026.728562][ T3712] mac80211_hwsim hwsim74 syzkaller0: entered allmulticast mode [ 1026.935265][ T3718] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7954'. [ 1026.992073][ T3729] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7957'. [ 1026.992073][ T3730] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7957'. [ 1027.376787][ T3746] netlink: 'syz.2.7962': attribute type 31 has an invalid length. [ 1027.467476][ T3746] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7962'. [ 1027.918198][ T3774] tipc: Enabled bearer , priority 0 [ 1027.931398][ T3774] sch_tbf: burst 127 is lower than device syzkaller0 mtu (313) ! [ 1028.183395][ T3784] syzkaller0: entered promiscuous mode [ 1028.220981][ T3784] syzkaller0: entered allmulticast mode [ 1028.350425][ T3798] netlink: 13 bytes leftover after parsing attributes in process `syz.1.7982'. [ 1028.379977][ T3798] openvswitch: netlink: Flow key attr not present in new flow. [ 1028.683347][ T3819] dvmrp1: entered allmulticast mode [ 1029.210424][ T3852] netlink: 36 bytes leftover after parsing attributes in process `syz.3.7992'. [ 1032.629898][ T3907] dvmrp1: entered allmulticast mode [ 1033.010937][ T3920] netlink: 'syz.3.8009': attribute type 4 has an invalid length. [ 1033.027040][ T3920] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.8009'. [ 1033.112169][ T3927] bpq0: entered promiscuous mode [ 1033.132165][ T3927] bpq0: entered allmulticast mode [ 1033.174113][ T3899] netlink: 'syz.4.8001': attribute type 4 has an invalid length. [ 1033.226705][ T3899] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8001'. [ 1033.253448][ T3932] netlink: 296 bytes leftover after parsing attributes in process `syz.1.8014'. [ 1033.312002][ T3933] gretap2: entered promiscuous mode [ 1033.483778][ T3940] lo speed is unknown, defaulting to 1000 [ 1033.849732][ T3940] lo speed is unknown, defaulting to 1000 [ 1033.898134][ T3940] wlan1 speed is unknown, defaulting to 1000 [ 1034.212809][ T3978] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8023'. [ 1034.427167][ T3990] x_tables: duplicate underflow at hook 1 [ 1035.048799][ T4053] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8035'. [ 1035.505036][ T4082] netlink: 'syz.1.8043': attribute type 13 has an invalid length. [ 1035.761001][ T4103] netlink: 56 bytes leftover after parsing attributes in process `syz.1.8049'. [ 1036.709907][ T4160] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 1036.788514][ T4162] tipc: Enabled bearer , priority 0 [ 1036.804534][ T4162] tipc: Resetting bearer [ 1036.870590][ T4161] tipc: Disabling bearer [ 1037.287894][ T4181] netlink: 'syz.2.8068': attribute type 4 has an invalid length. [ 1037.298869][ T4181] netlink: 152 bytes leftover after parsing attributes in process `syz.2.8068'. [ 1037.337293][ T4183] netlink: 'syz.4.8069': attribute type 9 has an invalid length. [ 1037.595998][ T4184] lo speed is unknown, defaulting to 1000 [ 1037.651542][ T4195] tap0: tun_chr_ioctl cmd 1074025677 [ 1037.660116][ T4195] tap0: linktype set to 775 [ 1037.777949][ T4210] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8073'. [ 1037.907903][ T4214] vlan0: entered promiscuous mode [ 1038.110536][ T4184] lo speed is unknown, defaulting to 1000 [ 1038.119676][ T4184] wlan1 speed is unknown, defaulting to 1000 [ 1038.525123][ T4242] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8084'. [ 1038.734000][ T4250] netlink: 'syz.1.8088': attribute type 3 has an invalid length. [ 1038.888164][ T4257] netlink: 416 bytes leftover after parsing attributes in process `syz.1.8091'. [ 1038.897546][ T4257] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8091'. [ 1038.969064][ T4258] netlink: 36 bytes leftover after parsing attributes in process `syz.1.8091'. [ 1038.987798][ T4263] x_tables: ip_tables: ah match: only valid for protocol 51 [ 1039.085817][ T4266] syzkaller0: entered promiscuous mode [ 1039.091918][ T4266] syzkaller0: entered allmulticast mode [ 1039.197363][ T4270] syz_tun: entered allmulticast mode [ 1039.350105][ T9333] wlan1 speed is unknown, defaulting to 1000 [ 1039.352873][ T4269] syz_tun: left allmulticast mode [ 1039.735745][ T4295] lo speed is unknown, defaulting to 1000 [ 1039.851925][ T4309] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8107'. [ 1039.982788][ T4316] netlink: 65051 bytes leftover after parsing attributes in process `syz.4.8109'. [ 1040.012819][ T4317] netlink: 'syz.3.8108': attribute type 21 has an invalid length. [ 1040.070065][ T4317] netlink: 36 bytes leftover after parsing attributes in process `syz.3.8108'. [ 1040.355669][ T4334] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8115'. [ 1040.373273][ T4295] lo speed is unknown, defaulting to 1000 [ 1040.400785][ T4295] wlan1 speed is unknown, defaulting to 1000 [ 1040.459437][ T4339] netlink: 296 bytes leftover after parsing attributes in process `syz.3.8117'. [ 1040.502853][ T4345] netlink: 296 bytes leftover after parsing attributes in process `syz.3.8117'. [ 1040.521076][ T4344] bond4 (unregistering): Released all slaves [ 1040.669070][ T4349] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 1040.795528][ T4360] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1040.973749][ T4363] syzkaller0: entered promiscuous mode [ 1040.979873][ T4363] syzkaller0: entered allmulticast mode [ 1041.131554][ T4367] batman_adv: batadv0: Adding interface: dummy0 [ 1041.141552][ T4367] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1041.168179][ T4367] batman_adv: batadv0: Interface activated: dummy0 [ 1041.179346][ T4370] batadv0: mtu less than device minimum [ 1041.185849][ T4370] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1041.197511][ T4370] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1041.209471][ T4370] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1041.220884][ T4370] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1041.232838][ T4370] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1041.244679][ T4370] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1041.255872][ T4370] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1041.318515][ T4373] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1041.327980][ T4373] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1041.335968][ T4373] batman_adv: batadv0: Interface deactivated: dummy0 [ 1041.343099][ T4373] batman_adv: batadv0: Removing interface: dummy0 [ 1041.628557][ T4381] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1041.887087][ T4397] xt_NFQUEUE: number of total queues is 0 [ 1041.937475][ T4396] net_ratelimit: 12 callbacks suppressed [ 1041.937499][ T4396] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 1042.485218][ T4431] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1043.305110][ T4455] netlink: 'syz.4.8148': attribute type 8 has an invalid length. [ 1043.597638][ T4466] rdma_rxe: rxe_newlink: failed to add lo [ 1044.418632][ T4466] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1044.924637][ T4499] __nla_validate_parse: 2 callbacks suppressed [ 1044.924660][ T4499] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8160'. [ 1045.132700][ T4512] netlink: 52 bytes leftover after parsing attributes in process `syz.4.8163'. [ 1045.132749][ T4511] netlink: 52 bytes leftover after parsing attributes in process `syz.4.8163'. [ 1045.212187][ T4513] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8164'. [ 1045.509516][ T4528] netlink: 'syz.1.8170': attribute type 10 has an invalid length. [ 1045.794452][ T4547] netlink: 36 bytes leftover after parsing attributes in process `syz.0.8176'. [ 1045.849419][ T4547] tipc: Enabled bearer , priority 10 [ 1046.414970][ T4582] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8185'. [ 1046.436900][ T4582] openvswitch: netlink: IP tunnel attribute has 1 unknown bytes. [ 1046.517515][ T4588] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8187'. [ 1046.560351][ T4592] netlink: 'syz.2.8189': attribute type 21 has an invalid length. [ 1046.572513][ T4592] netlink: 156 bytes leftover after parsing attributes in process `syz.2.8189'. [ 1046.589769][ T4592] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8189'. [ 1046.617062][ T4595] tipc: Resetting bearer [ 1046.654344][ T4595] tipc: Resetting bearer [ 1046.852188][ T4604] IPVS: set_ctl: invalid protocol: 29 172.20.20.40:20003 [ 1046.939520][T30990] tipc: Node number set to 120650135 [ 1047.037333][ T4613] netlink: 44 bytes leftover after parsing attributes in process `syz.0.8196'. [ 1047.085712][ T4614] nbd: must specify a device to reconfigure [ 1047.454804][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1049.438140][ T4640] tc_dump_action: action bad kind [ 1049.444119][ T4638] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 1049.512882][ T4655] lo speed is unknown, defaulting to 1000 [ 1049.699568][ T4673] x_tables: duplicate underflow at hook 2 [ 1049.769674][ T4669] tipc: Enabling of bearer rejected, already enabled [ 1049.789295][ T4669] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 1049.826852][ T4669] syzkaller1: linktype set to 768 [ 1049.979143][ T4683] geneve3: entered promiscuous mode [ 1049.984407][ T4683] geneve3: entered allmulticast mode [ 1049.993183][ T4671] __nla_validate_parse: 3 callbacks suppressed [ 1049.993202][ T4671] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8212'. [ 1050.017871][ T4671] openvswitch: netlink: IP tunnel dst address not specified [ 1050.172089][ T4689] geneve1: entered promiscuous mode [ 1050.182407][ T4655] lo speed is unknown, defaulting to 1000 [ 1050.191847][ T4655] wlan1 speed is unknown, defaulting to 1000 [ 1050.255796][ T4675] lo speed is unknown, defaulting to 1000 [ 1050.708200][ T4704] macsec2: entered promiscuous mode [ 1050.713637][ T4704] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 1050.795033][ T4705] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8219'. [ 1050.991633][ T4675] lo speed is unknown, defaulting to 1000 [ 1051.000173][ T4675] wlan1 speed is unknown, defaulting to 1000 [ 1051.028117][ T4676] rdma_rxe: rxe_newlink: failed to add wg1 [ 1051.074273][ T4699] lo speed is unknown, defaulting to 1000 [ 1051.344711][ T4721] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8222'. [ 1051.355707][ T4721] veth0_macvtap: left promiscuous mode [ 1051.631868][ T4696] lo speed is unknown, defaulting to 1000 [ 1051.953205][ T4732] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8225'. [ 1052.243554][ T4738] tipc: Failed to remove unknown binding: 66,0,0/2126:3935556327/3935556328 [ 1052.252023][ T4696] lo speed is unknown, defaulting to 1000 [ 1052.260862][ T4696] wlan1 speed is unknown, defaulting to 1000 [ 1052.307315][ T4738] tipc: Failed to remove unknown binding: 66,0,0/2126:3935556327/3935556328 [ 1052.435721][ T4735] lo speed is unknown, defaulting to 1000 [ 1052.439027][ T4699] lo speed is unknown, defaulting to 1000 [ 1052.518746][ T4743] netlink: 'syz.2.8227': attribute type 2 has an invalid length. [ 1052.791934][ T4699] wlan1 speed is unknown, defaulting to 1000 [ 1053.402424][ T4736] lo speed is unknown, defaulting to 1000 [ 1053.855386][ T4752] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.8230'. [ 1053.898031][ T4753] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.8230'. [ 1053.974108][ T4736] lo speed is unknown, defaulting to 1000 [ 1053.984363][ T4735] lo speed is unknown, defaulting to 1000 [ 1053.988180][ T4736] wlan1 speed is unknown, defaulting to 1000 [ 1054.077678][ T4759] netlink: 80 bytes leftover after parsing attributes in process `syz.2.8232'. [ 1054.091151][ T4759] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8232'. [ 1054.121817][ T4735] wlan1 speed is unknown, defaulting to 1000 [ 1054.193006][ T4757] lo speed is unknown, defaulting to 1000 [ 1054.493036][ T1297] lec:lec_start_xmit: lec0:No lecd attached [ 1054.500940][ T1297] clip:clip_start_xmit: skb_dst(skb) == NULL [ 1055.016339][ T4757] lo speed is unknown, defaulting to 1000 [ 1055.050095][ T4757] wlan1 speed is unknown, defaulting to 1000 [ 1056.262626][ T4775] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8235'. [ 1056.288105][ T4775] netlink: 'syz.2.8235': attribute type 4 has an invalid length. [ 1056.326422][ T4775] netlink: 156 bytes leftover after parsing attributes in process `syz.2.8235'. [ 1056.369634][ T4777] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8236'. [ 1056.594718][ T4783] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8239'. [ 1056.635314][ T4668] Set syz1 is full, maxelem 65536 reached [ 1056.686244][ T4788] syzkaller0: entered promiscuous mode [ 1056.703730][ T4788] syzkaller0: entered allmulticast mode [ 1057.016643][ T4790] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8241'. [ 1057.040234][ T4792] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8243'. [ 1057.154146][ T4807] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8244'. [ 1057.398288][ T4822] syzkaller0: entered promiscuous mode [ 1057.403830][ T4822] syzkaller0: entered allmulticast mode [ 1057.657023][ T4837] netlink: 'syz.3.8250': attribute type 4 has an invalid length. [ 1058.072383][ T4865] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8257'. [ 1058.275085][ T4876] netlink: 'syz.4.8262': attribute type 1 has an invalid length. [ 1058.386110][ T4883] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8263'. [ 1058.386191][ T4882] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8263'. [ 1058.578477][ T4895] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0 [ 1058.589442][ T4895] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR [ 1058.708446][ T4915] netlink: 'syz.3.8271': attribute type 1 has an invalid length. [ 1058.760416][ T4915] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1058.804530][ T4915] bond3: (slave veth5): Enslaving as an active interface with a down link [ 1058.840472][ T4915] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1058.848581][ T4915] bond3: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 1058.883866][ T4926] netlink: 'syz.0.8274': attribute type 1 has an invalid length. [ 1058.894526][ T4055] bond0: (slave bond_slave_0): interface is now down [ 1058.897755][ T4921] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1058.903031][ T4055] bond0: (slave bond_slave_1): interface is now down [ 1058.986311][ T4928] netlink: 'syz.1.8275': attribute type 3 has an invalid length. [ 1059.007480][ T4928] netlink: 'syz.1.8275': attribute type 1 has an invalid length. [ 1059.015279][ T4928] NCSI netlink: No device for ifindex 808464432 [ 1059.067562][ T4033] bond0: (slave bond_slave_0): interface is now down [ 1059.074299][ T4033] bond0: (slave bond_slave_1): interface is now down [ 1059.106180][ T4033] bond0: now running without any active interface! [ 1059.254076][ T4946] macvtap0: entered promiscuous mode [ 1059.263580][ T4946] mac80211_hwsim hwsim85 wlan1: entered promiscuous mode [ 1059.480990][ T4956] openvswitch: netlink: Port 167772160 exceeds max allowable 65535 [ 1059.671641][ T4966] bridge4: entered allmulticast mode [ 1059.802288][ T4973] syzkaller1: entered promiscuous mode [ 1059.810714][ T4973] syzkaller1: entered allmulticast mode [ 1059.936549][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5440 ms [ 1059.944658][ C1] lec:lec_tx_timeout: lec0 [ 1059.957517][ T4933] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1060.027922][ T4983] netlink: 'syz.0.8289': attribute type 1 has an invalid length. [ 1060.514287][ T5010] lo speed is unknown, defaulting to 1000 [ 1060.684850][ T5021] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 1060.942860][ T5010] lo speed is unknown, defaulting to 1000 [ 1060.952302][ T5010] wlan1 speed is unknown, defaulting to 1000 [ 1061.422741][ T5052] __nla_validate_parse: 8 callbacks suppressed [ 1061.422760][ T5052] netlink: 64 bytes leftover after parsing attributes in process `syz.2.8310'. [ 1061.569439][ T5057] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8312'. [ 1061.824889][ T5069] tipc: Enabling of bearer rejected, failed to enable media [ 1062.128144][ T5072] veth6: entered allmulticast mode [ 1062.269055][ T5082] bridge_slave_0: left allmulticast mode [ 1062.299305][ T5082] bridge_slave_0: left promiscuous mode [ 1062.308615][ T5082] bridge0: port 1(bridge_slave_0) entered disabled state [ 1062.397571][ T5082] bridge_slave_1: left allmulticast mode [ 1062.406792][ T5082] bridge_slave_1: left promiscuous mode [ 1062.420091][ T5082] bridge0: port 2(bridge_slave_1) entered disabled state [ 1062.485254][ T5082] bond0: (slave bond_slave_0): Releasing backup interface [ 1062.509198][ T5082] bond0: (slave bond_slave_1): Releasing backup interface [ 1062.535118][ T5082] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1062.563246][ T5082] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1062.591634][ T5082] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1062.809489][ T5099] netlink: 'syz.1.8323': attribute type 2 has an invalid length. [ 1062.817417][ T5099] netlink: 'syz.1.8323': attribute type 1 has an invalid length. [ 1062.825303][ T5099] netlink: 152 bytes leftover after parsing attributes in process `syz.1.8323'. [ 1063.013439][ T5109] netlink: 52 bytes leftover after parsing attributes in process `syz.1.8327'. [ 1063.029642][ T5110] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8325'. [ 1063.121324][ T5101] lo speed is unknown, defaulting to 1000 [ 1063.202760][ T5119] netlink: 'syz.1.8330': attribute type 1 has an invalid length. [ 1063.258540][ T5119] netlink: 'syz.1.8330': attribute type 2 has an invalid length. [ 1063.277147][ T5119] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8330'. [ 1063.292062][ T5121] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8330'. [ 1063.295857][ T5117] netlink: 'syz.1.8330': attribute type 1 has an invalid length. [ 1063.319474][ T5121] openvswitch: netlink: Flow actions attr not present in new flow. [ 1063.330700][ T5117] netlink: 'syz.1.8330': attribute type 2 has an invalid length. [ 1063.342403][ T5117] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8330'. [ 1063.595065][ T5133] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8334'. [ 1063.704359][ T5133] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1063.742869][ T5145] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 1063.962299][ T5161] xfrm1: entered allmulticast mode [ 1064.026047][ T5101] lo speed is unknown, defaulting to 1000 [ 1064.026124][ T5102] lo speed is unknown, defaulting to 1000 [ 1064.048595][ T5168] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8342'. [ 1064.058773][ T5101] wlan1 speed is unknown, defaulting to 1000 [ 1064.107687][ T5161] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 1064.463731][ T5186] syzkaller0: entered promiscuous mode [ 1064.471156][ T5186] syzkaller0: entered allmulticast mode [ 1064.630822][ T5186] hsr0: entered promiscuous mode [ 1064.662250][ T5190] hsr_slave_0: left promiscuous mode [ 1064.748975][ T5190] hsr0 (unregistering): left promiscuous mode [ 1064.830471][ T5102] lo speed is unknown, defaulting to 1000 [ 1064.914229][ T5102] wlan1 speed is unknown, defaulting to 1000 [ 1065.044645][ T5210] x_tables: duplicate underflow at hook 2 [ 1065.313062][ T5220] netlink: 'syz.4.8353': attribute type 1 has an invalid length. [ 1065.585355][ T5228] lo speed is unknown, defaulting to 1000 [ 1065.991750][ T5238] lo speed is unknown, defaulting to 1000 [ 1066.240247][ T5228] lo speed is unknown, defaulting to 1000 [ 1066.255903][ T5238] lo speed is unknown, defaulting to 1000 [ 1066.264573][ T5238] wlan1 speed is unknown, defaulting to 1000 [ 1066.295852][ T5228] wlan1 speed is unknown, defaulting to 1000 [ 1066.596110][ T5260] netlink: 'syz.3.8363': attribute type 1 has an invalid length. [ 1066.700373][ T5260] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1066.714098][ T5260] bond4: (slave bond5): making interface the new active one [ 1066.722678][ T5260] bond4: (slave bond5): Enslaving as an active interface with an up link [ 1066.764724][ T5263] bond4: (slave gretap1): Enslaving as a backup interface with an up link [ 1066.797102][ T5260] __nla_validate_parse: 5 callbacks suppressed [ 1066.797126][ T5260] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8363'. [ 1066.821573][ T5260] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1066.889973][ T5260] vlan0: entered promiscuous mode [ 1066.898224][ T5260] bond4: entered promiscuous mode [ 1066.906872][ T5260] bond5: entered promiscuous mode [ 1067.185685][ T5275] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8366'. [ 1068.165271][ T5322] lo speed is unknown, defaulting to 1000 [ 1068.184871][ T5326] mac80211_hwsim hwsim77 wlan0: Caught tx_queue_len zero misconfig [ 1068.211794][ T5326] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8379'. [ 1068.592970][ T5322] lo speed is unknown, defaulting to 1000 [ 1068.614117][ T5323] lo speed is unknown, defaulting to 1000 [ 1068.651110][ T5322] wlan1 speed is unknown, defaulting to 1000 [ 1068.982172][ T5323] lo speed is unknown, defaulting to 1000 [ 1069.126233][ T5348] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8386'. [ 1069.160838][ T5333] syzkaller0: entered promiscuous mode [ 1069.166369][ T5333] syzkaller0: entered allmulticast mode [ 1069.191395][ T5323] wlan1 speed is unknown, defaulting to 1000 [ 1069.299750][ T5349] lo speed is unknown, defaulting to 1000 [ 1069.443487][ T5361] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8389'. [ 1069.463554][ T5360] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8389'. [ 1069.578022][ T5361] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 1069.579239][ T5360] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 1069.660163][ T5370] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8390'. [ 1069.723033][ T5370] netlink: 32 bytes leftover after parsing attributes in process `syz.1.8390'. [ 1069.747220][ T5374] netlink: 52 bytes leftover after parsing attributes in process `syz.3.8392'. [ 1069.948182][ T5377] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8393'. [ 1070.039461][ T5349] lo speed is unknown, defaulting to 1000 [ 1070.153673][ T5349] wlan1 speed is unknown, defaulting to 1000 [ 1071.532693][ T5401] lo speed is unknown, defaulting to 1000 [ 1071.986256][ T5401] lo speed is unknown, defaulting to 1000 [ 1072.005146][ T5401] wlan1 speed is unknown, defaulting to 1000 [ 1072.287880][ T5438] __nla_validate_parse: 3 callbacks suppressed [ 1072.287900][ T5438] netlink: 56 bytes leftover after parsing attributes in process `syz.4.8408'. [ 1072.545002][ T5432] syzkaller0: entered promiscuous mode [ 1072.558886][ T5432] syzkaller0: entered allmulticast mode [ 1074.820625][ T5463] netlink: 96 bytes leftover after parsing attributes in process `syz.2.8413'. [ 1074.852678][ T5478] netlink: 84 bytes leftover after parsing attributes in process `syz.1.8414'. [ 1075.028364][ T5489] netlink: 44 bytes leftover after parsing attributes in process `syz.3.8417'. [ 1075.465387][ T5516] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8424'. [ 1075.558654][ T5529] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8429'. [ 1075.632606][ T5530] netlink: 556 bytes leftover after parsing attributes in process `syz.0.8427'. [ 1075.658623][ T5531] netlink: 556 bytes leftover after parsing attributes in process `syz.0.8427'. [ 1075.938772][ T5544] lo speed is unknown, defaulting to 1000 [ 1076.456014][ T5575] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8440'. [ 1076.521594][ T5575] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8440'. [ 1076.760547][ T5544] lo speed is unknown, defaulting to 1000 [ 1076.769175][ T5544] wlan1 speed is unknown, defaulting to 1000 [ 1076.858778][ T5583] geneve4: entered promiscuous mode [ 1076.879280][ T4058] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 20000 - 0 [ 1076.914485][ T4058] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 20000 - 0 [ 1076.983118][ T5593] openvswitch: netlink: Flow actions attr not present in new flow. [ 1077.018087][ T5589] openvswitch: netlink: Flow actions attr not present in new flow. [ 1077.040225][ T4058] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 20000 - 0 [ 1077.080209][ T4058] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 20000 - 0 [ 1077.675461][ T5635] __nla_validate_parse: 32 callbacks suppressed [ 1077.675482][ T5635] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8454'. [ 1077.802502][ T5643] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8457'. [ 1077.930807][ T5647] netlink: 'syz.3.8459': attribute type 8 has an invalid length. [ 1078.218239][ T5665] netlink: 'syz.4.8465': attribute type 1 has an invalid length. [ 1078.422322][ T5674] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8468'. [ 1078.542065][ T9484] lec:lec_start_xmit: lec0:No lecd attached [ 1079.090979][ T5700] netlink: 'syz.3.8473': attribute type 13 has an invalid length. [ 1079.123992][ T5701] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8474'. [ 1079.289272][ T5705] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1079.298525][ T5705] syzkaller0: entered promiscuous mode [ 1079.304140][ T5705] syzkaller0: entered allmulticast mode [ 1079.722265][ T5724] bond5: entered promiscuous mode [ 1079.725373][ T5728] delete_channel: no stack [ 1079.778372][ T5730] vcan1: entered promiscuous mode [ 1079.792532][ T5730] vcan1: entered allmulticast mode [ 1079.817230][ T5730] bond5: (slave vcan1): The slave device specified does not support setting the MAC address [ 1079.828874][ T5730] bond5: (slave vcan1): Error -95 calling set_mac_address [ 1079.870026][ T5739] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8486'. [ 1079.888656][ T5739] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8486'. [ 1079.916070][ T5741] ipvlan0: entered promiscuous mode [ 1079.993917][ T5743] ipvlan0: entered promiscuous mode [ 1080.126029][ T5754] netlink: 256 bytes leftover after parsing attributes in process `syz.4.8492'. [ 1080.530470][ T5781] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8500'. [ 1080.703153][ T5787] netlink: 'syz.1.8502': attribute type 12 has an invalid length. [ 1081.111105][ T5819] IPv6: addrconf: prefix option has invalid lifetime [ 1081.127474][ T5820] IPv6: addrconf: prefix option has invalid lifetime [ 1081.297478][ T5837] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8512'. [ 1081.419323][ T5846] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8513'. [ 1081.682736][ T5859] syzkaller0: entered promiscuous mode [ 1081.688386][ T5859] syzkaller0: entered allmulticast mode [ 1081.994270][ T5893] lo: Caught tx_queue_len zero misconfig [ 1082.049511][ T5887] lo speed is unknown, defaulting to 1000 [ 1082.124794][ T5793] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1082.384051][ T5913] openvswitch: netlink: Unknown nsh attribute 0 [ 1082.512992][ T5887] lo speed is unknown, defaulting to 1000 [ 1082.521208][ T5887] wlan1 speed is unknown, defaulting to 1000 [ 1082.651139][ T5915] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1083.117473][ T5944] lo speed is unknown, defaulting to 1000 [ 1083.452509][ T5964] __nla_validate_parse: 4 callbacks suppressed [ 1083.452531][ T5964] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8538'. [ 1083.614022][ T5975] xfrm0: entered promiscuous mode [ 1083.651654][ T5975] xfrm0: entered allmulticast mode [ 1083.869078][ T5944] lo speed is unknown, defaulting to 1000 [ 1083.894614][ T5944] wlan1 speed is unknown, defaulting to 1000 [ 1083.926501][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5380 ms [ 1083.934574][ C1] lec:lec_tx_timeout: lec0 [ 1084.081900][ T5991] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8544'. [ 1084.367413][ T6006] netlink: 112 bytes leftover after parsing attributes in process `syz.0.8547'. [ 1084.771971][ T6013] syzkaller1: entered promiscuous mode [ 1084.781345][ T6013] syzkaller1: entered allmulticast mode [ 1084.830889][ T6021] xt_hashlimit: overflow, try lower: 18446744073709551615/255 [ 1085.147403][ T6035] A link change request failed with some changes committed already. Interface veth0_to_bond may have been left with an inconsistent configuration, please check. [ 1085.305003][ T6045] mac80211_hwsim hwsim83 syzkaller0: left promiscuous mode [ 1085.340209][ T6045] mac80211_hwsim hwsim83 syzkaller0: left allmulticast mode [ 1085.365136][ T6049] netlink: 'syz.2.8563': attribute type 1 has an invalid length. [ 1085.367584][ T6045] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8562'. [ 1085.441813][ T6049] bond4: entered promiscuous mode [ 1085.463321][ T6049] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1085.502073][ T6050] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 1085.712753][ T6054] netlink: 64138 bytes leftover after parsing attributes in process `syz.4.8565'. [ 1085.733921][ T6069] netlink: 64138 bytes leftover after parsing attributes in process `syz.4.8565'. [ 1085.748221][ T6069] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8565'. [ 1085.773019][ T6062] lo speed is unknown, defaulting to 1000 [ 1085.786920][ T6069] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8565'. [ 1085.829009][ T6054] netlink: 'syz.4.8565': attribute type 21 has an invalid length. [ 1085.838882][ T6069] netlink: 'syz.4.8565': attribute type 21 has an invalid length. [ 1085.866538][ T6054] IPv6: NLM_F_CREATE should be specified when creating new route [ 1085.877211][ T6069] IPv6: NLM_F_CREATE should be specified when creating new route [ 1085.896794][ T6054] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1085.904033][ T6054] IPv6: NLM_F_CREATE should be set when creating new route [ 1085.911372][ T6054] IPv6: NLM_F_CREATE should be set when creating new route [ 1085.918608][ T6054] IPv6: NLM_F_CREATE should be set when creating new route [ 1085.925915][ T6069] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1086.034883][ T6082] €Â0: renamed from batadv_slave_1 [ 1086.507951][ T6093] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1086.578087][ T6097] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8576'. [ 1086.720779][ T6104] pim6reg1: entered promiscuous mode [ 1086.726132][ T6104] pim6reg1: entered allmulticast mode [ 1086.883584][ T6062] lo speed is unknown, defaulting to 1000 [ 1086.884052][ T6100] lo speed is unknown, defaulting to 1000 [ 1086.928644][ T6062] wlan1 speed is unknown, defaulting to 1000 [ 1087.396390][ T6100] lo speed is unknown, defaulting to 1000 [ 1087.486721][ T6100] wlan1 speed is unknown, defaulting to 1000 [ 1087.823184][ T6126] netlink: 36 bytes leftover after parsing attributes in process `syz.3.8582'. [ 1088.371558][ T4047] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1088.396835][ T4047] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1088.431804][ T4047] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1088.457560][ T4047] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1088.525496][ T6152] netlink: 'syz.4.8588': attribute type 2 has an invalid length. [ 1088.555881][ T6152] : entered promiscuous mode [ 1088.605517][ T6160] __nla_validate_parse: 2 callbacks suppressed [ 1088.605539][ T6160] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8591'. [ 1088.660860][ T6160] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1500) ! [ 1088.680205][ T6160] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1500) ! [ 1088.798551][ T6170] xt_cgroup: path and classid specified [ 1088.804312][ T6171] xt_cgroup: path and classid specified [ 1089.492203][ T6191] netlink: 36 bytes leftover after parsing attributes in process `syz.3.8599'. [ 1089.818646][ T6200] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8602'. [ 1089.907356][ T6204] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8603'. [ 1089.967480][ T6206] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8605'. [ 1090.058243][ T6214] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8606'. [ 1090.141992][ T6218] tipc: Enabled bearer , priority 0 [ 1090.191721][ T6227] syzkaller0: entered promiscuous mode [ 1090.223881][ T6227] syzkaller0: entered allmulticast mode [ 1090.327733][ C1] ------------[ cut here ]------------ [ 1090.333707][ C1] ODEBUG: free active (active state 0) object: ffff8880645ec890 object type: timer_list hint: rose_t0timer_expiry+0x0/0x560 [ 1090.346658][ C1] WARNING: lib/debugobjects.c:615 at debug_check_no_obj_freed+0x405/0x550, CPU#1: kworker/u8:9/4030 [ 1090.357494][ C1] Modules linked in: [ 1090.361698][ C1] CPU: 1 UID: 0 PID: 4030 Comm: kworker/u8:9 Not tainted syzkaller #0 PREEMPT(full) [ 1090.371203][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1090.381319][ C1] Workqueue: krds_cp_wq#25/0 rds_connect_worker [ 1090.387635][ C1] RIP: 0010:debug_check_no_obj_freed+0x44a/0x550 [ 1090.394012][ C1] Code: 89 44 24 20 e8 b7 6b 7e fd 48 8b 44 24 20 4c 8b 4d 00 4c 89 ef 48 c7 c6 40 6b 27 8c 48 c7 c2 c0 70 27 8c 8b 0c 24 4d 89 f8 50 <67> 48 0f b9 3a 48 83 c4 08 4c 8b 6c 24 18 48 b9 00 00 00 00 00 fc [ 1090.413682][ C1] RSP: 0000:ffffc90000a08b68 EFLAGS: 00010246 [ 1090.419821][ C1] RAX: ffffffff8a888d00 RBX: ffffffff9a413e70 RCX: 0000000000000000 [ 1090.427865][ C1] RDX: ffffffff8c2770c0 RSI: ffffffff8c276b40 RDI: ffffffff901b4570 [ 1090.436049][ C1] RBP: ffffffff8bcf4a00 R08: ffff8880645ec890 R09: ffffffff8bcf5d20 [ 1090.444098][ C1] R10: dffffc0000000000 R11: ffffffff81b099e0 R12: ffff8880645eca00 [ 1090.452136][ C1] R13: ffffffff901b4570 R14: ffff8880645ec000 R15: ffff8880645ec890 [ 1090.460176][ C1] FS: 0000000000000000(0000) GS:ffff8881255b0000(0000) knlGS:0000000000000000 [ 1090.469259][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1090.476144][ C1] CR2: 00007f7af0c389b0 CR3: 0000000076216000 CR4: 00000000003526f0 [ 1090.484186][ C1] Call Trace: [ 1090.487521][ C1] [ 1090.490391][ C1] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 1090.496160][ C1] kfree+0x13a/0x610 [ 1090.500125][ C1] ? rose_timer_expiry+0x4cb/0x600 [ 1090.505287][ C1] rose_timer_expiry+0x4cb/0x600 [ 1090.510289][ C1] ? call_timer_fn+0x178/0x5a0 [ 1090.515096][ C1] call_timer_fn+0x192/0x5a0 [ 1090.519755][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 1090.525259][ C1] ? call_timer_fn+0xd4/0x5a0 [ 1090.530041][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 1090.535198][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 1090.537496][ T6227] tipc: Resetting bearer [ 1090.540447][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 1090.551924][ C1] __run_timer_base+0x652/0x8b0 [ 1090.556837][ C1] ? ktime_get+0x45/0x200 [ 1090.561214][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 1090.566664][ C1] ? sched_clock_cpu+0x74/0x440 [ 1090.571552][ C1] run_timer_softirq+0xb7/0x170 [ 1090.576457][ C1] handle_softirqs+0x22a/0x7c0 [ 1090.581247][ C1] ? __irq_exit_rcu+0x5f/0x150 [ 1090.586051][ C1] __irq_exit_rcu+0x5f/0x150 [ 1090.590704][ C1] irq_exit_rcu+0x9/0x30 [ 1090.594974][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1090.601283][ C1] [ 1090.604238][ C1] [ 1090.607222][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1090.613234][ C1] RIP: 0010:kasan_check_range+0x9d/0x2c0 [ 1090.618935][ C1] Code: 34 19 4d 89 f4 4d 29 dc 49 83 fc 10 7f 29 4d 85 e4 0f 84 3d 01 00 00 4c 89 cb 48 f7 d3 4c 01 fb 41 80 3b 00 0f 85 9e 01 00 00 <49> ff c3 48 ff c3 75 ee e9 1d 01 00 00 44 89 dd 83 e5 07 0f 84 b5 [ 1090.638780][ C1] RSP: 0000:ffffc90004b877a8 EFLAGS: 00000246 [ 1090.638811][ C1] RAX: ffffffff8964e401 RBX: fffffffffffffff7 RCX: ffffffff8964e430 [ 1090.638830][ C1] RDX: 0000000000000001 RSI: 0000000000000080 RDI: ffffc90004b87840 [ 1090.638845][ C1] RBP: 0000000000000000 R08: ffffc90004b878bf R09: 1ffff92000970f17 [ 1090.638860][ C1] R10: dffffc0000000000 R11: fffff52000970f0f R12: 0000000000000010 [ 1090.638874][ C1] R13: 0000000000000010 R14: fffff52000970f18 R15: 1ffff92000970f08 [ 1090.638899][ C1] ? kernel_bind+0xb1/0x1c0 [ 1090.638929][ C1] ? kernel_bind+0xe0/0x1c0 [ 1090.638966][ C1] __asan_memset+0x22/0x50 [ 1090.638993][ C1] kernel_bind+0xe0/0x1c0 [ 1090.639024][ C1] ? __pfx_kernel_bind+0x10/0x10 [ 1090.639079][ C1] rds_tcp_conn_path_connect+0x53e/0x930 [ 1090.653154][ C1] ? __pfx_rds_tcp_conn_path_connect+0x10/0x10 [ 1090.653188][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1090.653218][ C1] ? process_scheduled_works+0xa0f/0x17a0 [ 1090.653244][ C1] ? process_scheduled_works+0xa0f/0x17a0 [ 1090.653275][ C1] rds_connect_worker+0x1d8/0x290 [ 1090.653301][ C1] ? process_scheduled_works+0xa0f/0x17a0 [ 1090.653324][ C1] process_scheduled_works+0xaec/0x17a0 [ 1090.653382][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 1090.653411][ C1] ? assign_work+0x3d5/0x5e0 [ 1090.653437][ C1] worker_thread+0xa50/0xfc0 [ 1090.653495][ C1] kthread+0x388/0x470 [ 1090.653522][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1090.653541][ C1] ? __pfx_kthread+0x10/0x10 [ 1090.653569][ C1] ret_from_fork+0x51e/0xb90 [ 1090.653598][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 1090.653621][ C1] ? __switch_to+0xc7d/0x1400 [ 1090.653657][ C1] ? __pfx_kthread+0x10/0x10 [ 1090.653686][ C1] ret_from_fork_asm+0x1a/0x30 [ 1090.734892][ T6239] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8611'. [ 1090.737006][ C1] [ 1090.737023][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1090.737039][ C1] CPU: 1 UID: 0 PID: 4030 Comm: kworker/u8:9 Not tainted syzkaller #0 PREEMPT(full) [ 1090.737061][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1090.737075][ C1] Workqueue: krds_cp_wq#25/0 rds_connect_worker [ 1090.737107][ C1] Call Trace: [ 1090.737116][ C1] [ 1090.737125][ C1] vpanic+0x1e0/0x670 [ 1090.737156][ C1] panic+0xc5/0xd0 [ 1090.737180][ C1] ? __pfx_panic+0x10/0x10 [ 1090.737215][ C1] ? ret_from_fork_asm+0x1a/0x30 [ 1090.737248][ C1] __warn+0x315/0x4a0 [ 1090.737271][ C1] ? debug_check_no_obj_freed+0x405/0x550 [ 1090.737300][ C1] ? debug_check_no_obj_freed+0x405/0x550 [ 1090.737328][ C1] __report_bug+0x29a/0x540 [ 1090.737352][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1090.737380][ C1] ? debug_check_no_obj_freed+0x405/0x550 [ 1090.737407][ C1] ? __pfx___report_bug+0x10/0x10 [ 1090.737437][ C1] ? kfree+0x1c1/0x610 [ 1090.737456][ C1] ? rose_timer_expiry+0x4c3/0x600 [ 1090.737481][ C1] ? call_timer_fn+0x192/0x5a0 [ 1090.737500][ C1] ? __run_timer_base+0x652/0x8b0 [ 1090.737517][ C1] ? run_timer_softirq+0xb7/0x170 [ 1090.737534][ C1] ? handle_softirqs+0x22a/0x7c0 [ 1090.737553][ C1] ? __irq_exit_rcu+0x5f/0x150 [ 1090.737573][ C1] ? sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1090.737593][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1090.737613][ C1] ? kasan_check_range+0x9d/0x2c0 [ 1090.737638][ C1] ? __asan_memset+0x22/0x50 [ 1090.737667][ C1] ? kernel_bind+0xe0/0x1c0 [ 1090.737695][ C1] report_bug_entry+0x19a/0x290 [ 1090.737719][ C1] ? debug_check_no_obj_freed+0x44a/0x550 [ 1090.737739][ C1] ? debug_check_no_obj_freed+0x44f/0x550 [ 1090.737764][ C1] handle_bug+0xca/0x200 [ 1090.737790][ C1] exc_invalid_op+0x1a/0x50 [ 1090.737814][ C1] asm_exc_invalid_op+0x1a/0x20 [ 1090.737831][ C1] RIP: 0010:debug_check_no_obj_freed+0x44a/0x550 [ 1090.737856][ C1] Code: 89 44 24 20 e8 b7 6b 7e fd 48 8b 44 24 20 4c 8b 4d 00 4c 89 ef 48 c7 c6 40 6b 27 8c 48 c7 c2 c0 70 27 8c 8b 0c 24 4d 89 f8 50 <67> 48 0f b9 3a 48 83 c4 08 4c 8b 6c 24 18 48 b9 00 00 00 00 00 fc [ 1090.737872][ C1] RSP: 0000:ffffc90000a08b68 EFLAGS: 00010246 [ 1090.737889][ C1] RAX: ffffffff8a888d00 RBX: ffffffff9a413e70 RCX: 0000000000000000 [ 1090.737903][ C1] RDX: ffffffff8c2770c0 RSI: ffffffff8c276b40 RDI: ffffffff901b4570 [ 1090.737917][ C1] RBP: ffffffff8bcf4a00 R08: ffff8880645ec890 R09: ffffffff8bcf5d20 [ 1090.737930][ C1] R10: dffffc0000000000 R11: ffffffff81b099e0 R12: ffff8880645eca00 [ 1090.737944][ C1] R13: ffffffff901b4570 R14: ffff8880645ec000 R15: ffff8880645ec890 [ 1090.737963][ C1] ? __pfx_timer_debug_hint+0x10/0x10 [ 1090.737983][ C1] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 1090.738012][ C1] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 1090.738045][ C1] kfree+0x13a/0x610 [ 1090.738064][ C1] ? rose_timer_expiry+0x4cb/0x600 [ 1090.738093][ C1] rose_timer_expiry+0x4cb/0x600 [ 1090.738116][ C1] ? call_timer_fn+0x178/0x5a0 [ 1090.738138][ C1] call_timer_fn+0x192/0x5a0 [ 1090.738157][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 1090.738179][ C1] ? call_timer_fn+0xd4/0x5a0 [ 1090.738197][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 1090.738227][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 1090.738246][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 1090.738272][ C1] __run_timer_base+0x652/0x8b0 [ 1090.738290][ C1] ? ktime_get+0x45/0x200 [ 1090.738325][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 1090.738350][ C1] ? sched_clock_cpu+0x74/0x440 [ 1090.738377][ C1] run_timer_softirq+0xb7/0x170 [ 1090.738396][ C1] handle_softirqs+0x22a/0x7c0 [ 1090.738418][ C1] ? __irq_exit_rcu+0x5f/0x150 [ 1090.738446][ C1] __irq_exit_rcu+0x5f/0x150 [ 1090.738465][ C1] irq_exit_rcu+0x9/0x30 [ 1090.738482][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1090.738503][ C1] [ 1090.738510][ C1] [ 1090.738519][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1090.738537][ C1] RIP: 0010:kasan_check_range+0x9d/0x2c0 [ 1090.738560][ C1] Code: 34 19 4d 89 f4 4d 29 dc 49 83 fc 10 7f 29 4d 85 e4 0f 84 3d 01 00 00 4c 89 cb 48 f7 d3 4c 01 fb 41 80 3b 00 0f 85 9e 01 00 00 <49> ff c3 48 ff c3 75 ee e9 1d 01 00 00 44 89 dd 83 e5 07 0f 84 b5 [ 1090.738574][ C1] RSP: 0000:ffffc90004b877a8 EFLAGS: 00000246 [ 1090.738590][ C1] RAX: ffffffff8964e401 RBX: fffffffffffffff7 RCX: ffffffff8964e430 [ 1090.738603][ C1] RDX: 0000000000000001 RSI: 0000000000000080 RDI: ffffc90004b87840 [ 1090.738616][ C1] RBP: 0000000000000000 R08: ffffc90004b878bf R09: 1ffff92000970f17 [ 1090.738628][ C1] R10: dffffc0000000000 R11: fffff52000970f0f R12: 0000000000000010 [ 1090.738642][ C1] R13: 0000000000000010 R14: fffff52000970f18 R15: 1ffff92000970f08 [ 1090.738676][ C1] ? kernel_bind+0xb1/0x1c0 [ 1090.738696][ C1] ? kernel_bind+0xe0/0x1c0 [ 1090.738730][ C1] __asan_memset+0x22/0x50 [ 1090.738750][ C1] kernel_bind+0xe0/0x1c0 [ 1090.738776][ C1] ? __pfx_kernel_bind+0x10/0x10 [ 1090.738822][ C1] rds_tcp_conn_path_connect+0x53e/0x930 [ 1090.738861][ C1] ? __pfx_rds_tcp_conn_path_connect+0x10/0x10 [ 1090.738887][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1090.738913][ C1] ? process_scheduled_works+0xa0f/0x17a0 [ 1090.738935][ C1] ? process_scheduled_works+0xa0f/0x17a0 [ 1090.738963][ C1] rds_connect_worker+0x1d8/0x290 [ 1090.738984][ C1] ? process_scheduled_works+0xa0f/0x17a0 [ 1090.739006][ C1] process_scheduled_works+0xaec/0x17a0 [ 1090.739053][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 1090.739079][ C1] ? assign_work+0x3d5/0x5e0 [ 1090.739104][ C1] worker_thread+0xa50/0xfc0 [ 1090.739153][ C1] kthread+0x388/0x470 [ 1090.739177][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1090.739194][ C1] ? __pfx_kthread+0x10/0x10 [ 1090.739219][ C1] ret_from_fork+0x51e/0xb90 [ 1090.739243][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 1090.739262][ C1] ? __switch_to+0xc7d/0x1400 [ 1090.739285][ C1] ? __pfx_kthread+0x10/0x10 [ 1090.739309][ C1] ret_from_fork_asm+0x1a/0x30 [ 1090.739349][ C1] [ 1090.743125][ C1] Kernel Offset: disabled