last executing test programs: 2.909561274s ago: executing program 2 (id=6767): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), r0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x15, 0x301, 0x0, 0x0, {0xb}}, 0x14}}, 0x0) (async) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r2 = socket(0x400000000010, 0x3, 0x0) (async) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, 0x0, 0x20000800) (async) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=@delchain={0x3c, 0x65, 0x800, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0xfffe, 0x3}, {0xf, 0x1}, {0x0, 0xc}}, [@TCA_RATE={0x6, 0x5, {0x9, 0xe}}, @TCA_CHAIN={0x8, 0xb, 0x1}, @TCA_RATE={0x6, 0x5, {0xd7, 0x3}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48040}, 0x20000000) (async) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newtfilter={0x8c, 0x2c, 0xd27, 0x470bd28, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0x0, 0x4}, {}, {0xfff2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x3, 0x800000, 0x3, 0x5, 0xfffffffb}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x2}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x10}, 0x0) 2.806052014s ago: executing program 3 (id=6769): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10000}, 0x94) epoll_create1(0x80000) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$ppp(0xffffffffffffff9c, 0x0, 0x200, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0xffffffff, 0x0, 0xb}, {0x10000002, 0x0, 0x4, 0x2}]}, 0x94) close(0x3) close(0x3) r1 = socket$kcm(0x2, 0x1, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) recvmsg$unix(r2, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x3f, &(0x7f0000000540)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff]}}], 0x68}, 0x0) setsockopt$sock_attach_bpf(r1, 0x84, 0x64, &(0x7f0000000000)=r4, 0x10) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000140)=[{&(0x7f00000005c0)="df", 0x1}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r7, @ANYBLOB="0000000000004a641c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x1, 0x803, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) r11 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r11, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r10, &(0x7f00000000c0)={0x0, 0x60, &(0x7f0000000300)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003001008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32=r12], 0x5c}}, 0x40) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r13}, @IFLA_MASTER={0x8, 0xa, r13}]}, 0x4c}}, 0x884) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x1}, 0x20008841) 2.601918654s ago: executing program 2 (id=6772): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xb, 0x3, &(0x7f0000000100)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x60}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc}, 0x90) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f0000000080)={0x0, 'xfrm0\x00', 0x2}, 0x18) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0700000004000000180000000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000800000000000000000000000000000000000000006b6e2b095b38865375acce38a856403608ebb39d76ad804a6730d03eed3ef52a46d73047d2596b73a651a942843b17d64de637765788fa278bef7090eb3d211e8b68023995d6c01e66c1d84b279ed3a2a0d9b83f510da0e8229a219305d31e0aef4f5c258eb067d055"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000fe0000850000001b000000b700000000000000850000002a00000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x4361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x0, 0xd}, {0x6, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_ACK_FILTER={0x8, 0x10, 0x2}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r5 = socket$packet(0x11, 0x3, 0x300) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000880)={0x40, r7, 0x1, 0x0, 0x25dfdbfa, {{0x2}, {@val={0x8, 0x3, r9}, @val={0xc}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16f3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1008}]]}, 0x40}}, 0x4004044) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)={0x38, r11, 0x5, 0x0, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r12}, @void}}, [@mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "4dabb91b40b8910ee5d25a094d44f96c757285cde32150f1"}]]}, 0x38}, 0x1, 0x0, 0x0, 0x41000}, 0x48000) sendmsg$NL80211_CMD_SET_COALESCE(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x48, r7, 0x8, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r12}, @val={0xc, 0x99, {0x80000000, 0x7}}}}, [@NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x5}}]}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x2}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000800) sendto$packet(r5, &(0x7f0000000240)="800000800000210ee7decd7a000340008100", 0x36, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r4, 0x1, 0xd8, 0x6, @broadcast}, 0x14) r13 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r13, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000064010100000000000000000000000000fc01000000000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000800000000000003000000000000000000000000000000fdfffffffbffffff0000000000000000ffffffffffffffff053b000000000000000000000000000002000000000000005600000000000000feffffffff7f400002000000000000080000000000000000010005000000000044000500ac141426000000000000000000000000000004d53c"], 0xfc}}, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r13, 0x10e, 0x3, &(0x7f0000000280)=0x251e, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1e00000003000000001000008f0a000050010400", @ANYRES32=r2, @ANYBLOB="000000800000000100"/20, @ANYRES32=r4, @ANYRES32, @ANYBLOB="00000000000000000100"/28], 0x50) getsockopt$rose(r1, 0x104, 0x6ba05eb0794edd29, 0x0, &(0x7f0000002180)) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a0b04000000000000000002000000400004803c0001800b00010065787468647200002c0002800800034000000000080001400000000d080006400000008c080004400000001705000200940000000900010073797a30000000000900020073797a32"], 0x94}}, 0x0) 2.340504717s ago: executing program 4 (id=6774): r0 = socket$tipc(0x1e, 0x5, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)={0x38, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x45f}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x11a111}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x5c}]}]}, 0x38}}, 0x8000) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000000)) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000300)={0x42, 0x0, 0x3, 0x3}, 0x10) (async) getsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000080), &(0x7f0000000200)=0x4) 2.016152144s ago: executing program 4 (id=6777): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000)=0x2, 0x4) ioctl$F2FS_IOC_GET_COMPRESS_OPTION(r0, 0x8002f515, &(0x7f0000000040)) r1 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000080)={{{@in=@local, @in6=@private0}}, {{@in6}, 0x0, @in=@loopback}}, &(0x7f0000000180)=0xe8) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f00000001c0)={"7435e334e8095a37a2ff4d350af1b2e8", 0x0, 0x0, {0x9, 0x7f}, {0x4, 0x86}, 0x8b, [0x7fffffff, 0xe5, 0x7fff, 0x1, 0x9, 0x10001, 0x0, 0x10, 0xd, 0x40, 0x76b, 0x3, 0x5, 0x1, 0xffffffff, 0xfffffffffffffffd]}) ioctl$BTRFS_IOC_WAIT_SYNC(r1, 0x40089416, &(0x7f00000002c0)=r2) ioctl$VFAT_IOCTL_READDIR_SHORT(r1, 0x82307202, &(0x7f0000000300)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) r3 = accept4(r0, &(0x7f0000000540), &(0x7f00000005c0)=0x80, 0x800) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000680)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r3, &(0x7f0000000780)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x74, r4, 0x4, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0xb, 0x6}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x88ca}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x6007}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@pspoll={{}, @random=0xc11, @from_mac, @broadcast}}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}]}, 0x74}, 0x1, 0x0, 0x0, 0x40040}, 0x4000002) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r3, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x60, 0x0, 0x400, 0x70bd28, 0x25dfdbfe, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x9}, {0x6, 0x16, 0x1}, {0x5}, {0x6, 0x11, 0x400}, {0x8, 0xb, 0xfffff800}}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000000}, 0x24008840) ioctl$SIOCX25GFACILITIES(r3, 0x89e2, &(0x7f0000000900)) r6 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000940), &(0x7f0000000980)=0x4) r7 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_DEL(r7, 0x2, r1) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f00000009c0)={0x0, 0x3, 0x7}, 0x8) sendmsg$NFT_BATCH(r3, &(0x7f0000000c80)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000a40)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWTABLE={0x1a8, 0x0, 0xa, 0x0, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFTA_TABLE_USERDATA={0x66, 0x6, "016db5109852066c284c83ee4794436ad260123b0111080938a91383a3cebf5ad68c94cdd59e36ae07cf2081332c8df1764a84b0785aafc9e4c22b5bb7ce9a73ced65b6630be1e55a0e927477e4bb71bfd141dbde66925d563dbe35a7c90de841064"}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_USERDATA={0x9, 0x6, "ed602b4bc7"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_USERDATA={0xf1, 0x6, "80cb9b9019e4e816a228bc82a237b31324bc5c125984f792c4d94c4fbf52805c226ef3c8718f4a7d7763895801742288ff37841e90a212d919903cc470082170d896faa5af3246993a84e7ae42ab3f5ab51fb0689db59c5ddebdcf224513931d031ca3deecf01dbacb67d0f75605c3510962a53ffddd493e2dc43d81ea856e4f556e581f0d12ae7854cc4a0b5a80a2ff00a7b95024383824f5779780a4c1fa98344e313eb2be407082278c9d4df6ac7b3543accaf255dcffd136c4082d12888973ea70bf0ca84496227776440ace4b8a7d4d4d6cf1e47a9e4eeb396364a107717e76555142c96025aa41322290"}]}, @NFT_MSG_NEWOBJ={0x1c, 0x12, 0xa, 0x301, 0x0, 0x0, {}, @NFT_OBJECT_SYNPROXY=@NFTA_OBJ_TYPE={0x8}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x1ec}, 0x1, 0x0, 0x0, 0x4}, 0x4004000) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), r3) sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f0000000dc0)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x3c, r8, 0x200, 0x70bd28, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x10}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000087}, 0x840) close(r0) recvfrom(r6, &(0x7f0000000e00)=""/166, 0xa6, 0x2000, 0x0, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r3, 0x29, 0x2a, &(0x7f0000000ec0)={0xdb5, {{0xa, 0x4e22, 0x6, @mcast2, 0xff}}}, 0x88) setsockopt$inet6_int(r7, 0x29, 0x3, &(0x7f0000000f80), 0x4) ioctl$EXT4_IOC_GETSTATE(r7, 0x40046629, &(0x7f0000000fc0)) sendmsg$NFNL_MSG_COMPAT_GET(r3, &(0x7f00000010c0)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001080)={&(0x7f0000001040)={0x1c, 0x0, 0xb, 0x101, 0x0, 0x0, {0x5, 0x0, 0x5}, [@NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40080}, 0x1) ioctl$XFS_IOC_START_COMMIT(r6, 0x80585882, &(0x7f0000001100)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r9, 0x8924, &(0x7f0000001180)={'veth0_virt_wifi\x00', @local}) 1.98223464s ago: executing program 1 (id=6778): getsockopt$IP_SET_OP_GET_BYINDEX(0xffffffffffffffff, 0x1, 0x53, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000680)={{{@in=@loopback, @in6=@ipv4={""/10, ""/2, @multicast2}}}, {{@in6=@loopback}, 0x0, @in=@local}}, &(0x7f0000000780)=0xe8) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000c80)={&(0x7f0000000b00)=@nfc={0x27, 0x0, 0x1, 0x5}, 0x80, &(0x7f0000000bc0)=[{&(0x7f0000000b80)}], 0x1, &(0x7f0000000c00)=[@mark={{0x14, 0x1, 0x24, 0x9}}], 0x18}, 0x4040) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(0xffffffffffffffff, 0x4048587b, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001400), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000001440)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_MPATH(r1, &(0x7f0000001540)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001500)={&(0x7f0000001480)={0x58, r2, 0x49100a3f4acdb229, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) (fail_nth: 7) 1.964660836s ago: executing program 2 (id=6779): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x0, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x0, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x80000}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x4}}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4008085}, 0x20040000) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r0, @ANYBLOB="08000100", @ANYRES32=r1], 0x90}}, 0x0) (async) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r0, @ANYBLOB="08000100", @ANYRES32=r1], 0x90}}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0x3, 0x2) (async) r4 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000003c0)={0x0, {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x4a24, @dev={0xac, 0x14, 0x14, 0x12}}, {0x2, 0x4e21, @empty}, 0x4, 0x0, 0x0, 0x0, 0x2008, 0x0, 0x200001, 0x1ff, 0x9}) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="3000000002060100000350a19df74d62d3332ccf0900020073ef7a2a2b4293d346d862b16a6dfbaa73797a1f000000000500ac"], 0x30}, 0x1, 0x0, 0x0, 0x20000004}, 0xc800) write$tun(r3, &(0x7f00000003c0)=ANY=[@ANYBLOB="080000fa"], 0xdc) 1.797969816s ago: executing program 4 (id=6780): r0 = socket(0x1f, 0x80000, 0x5) ioctl$BTRFS_IOC_SEND(r0, 0x40489426, &(0x7f0000000100)={{}, 0x7, &(0x7f0000000040)=[0x80000001, 0x7fff, 0xe6, 0x206, 0x1, 0x6, 0x2c4], 0x4, 0x8, 0x1}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000380)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000000)=[{0x6, 0x9, 0x8}]}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4008840) write$tun(r2, &(0x7f0000000240)=ANY=[@ANYBLOB="0a000201bbbbbbbbbbbbaaaaaaaaaabb86dd6d00200000b311ff00000000000000000000ffffe0000002ff0200000000000000000000000000014f194e2000b39078c243"], 0x14c) sendmsg$DEVLINK_CMD_SB_POOL_SET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0xcc, 0x0, 0x300, 0x70bdad, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x9a}, {0x6, 0x11, 0x8bac}, {0x8, 0x13, 0x7f}, {0x5, 0x14, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x1}, {0x6, 0x11, 0x2}, {0x8, 0x13, 0x7}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x2}, {0x6, 0x11, 0x7ffd}, {0x8, 0x13, 0xf}, {0x5}}]}, 0xcc}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c0001800600060065580000100002800c000b"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 1.791995219s ago: executing program 0 (id=6781): r0 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000100), 0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x23, &(0x7f0000000000), 0x4) sendmsg$inet(r2, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x40000220) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000000)={0x8, 'macsec0\x00', {'netpci0\x00'}}) r4 = socket$inet(0x2, 0x3, 0x30) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000000)=0x6, 0x4) getsockopt$inet_mreqsrc(r4, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000080)=0x2c) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c020000", @ANYRES16=r0, @ANYBLOB="01000000000000000000010000001400020077673100000000000000000000000000f40108807000008048000980280000f8060001000a20000014000200fe8000000000000000000000000000aa05000300000000001c000080060001000200000908000200e00000010500030000000000240001"], 0x21c}, 0x1, 0x0, 0x0, 0x20040010}, 0x4008804) 1.750132706s ago: executing program 3 (id=6782): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x18, 0x1411, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}}, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a00)={{0x14, 0x10, 0x7c, 0x0, 0x6000, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, "d1"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa4}}, 0x40) (async) r3 = socket(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'ip6gre0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x58, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x62, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) close(r8) (async) sendmsg$NBD_CMD_CONNECT(r6, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000a80)={0x30, r7, 0x1, 0xfffffffe, 0x0, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r8}}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffff}]}, 0x30}}, 0x20000000) (async) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1b, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000001000002000000929d339d2f4041000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) (async) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0x2, 0x7, 0xfffffff9, 0x5, 0x10, 0xffffffffffffffff, 0xc6f1, '\x00', 0x0, 0xffffffffffffffff, 0x1}, 0x50) (async) r11 = socket$nl_generic(0x10, 0x3, 0x10) (async) r12 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_FLUSH(r11, &(0x7f0000000800)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000007c0)={&(0x7f0000000500)={0x29c, r12, 0x4, 0x70bd2a, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x68, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @private=0xa010100}}, {0x14, 0x2, @in={0x2, 0x4e21, @broadcast}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x8, @empty}}, {0x14, 0x2, @in={0x2, 0x4e23, @local}}}}]}, @TIPC_NLA_LINK={0x8c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}]}, @TIPC_NLA_NODE={0x98, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY={0x44, 0x4, {'gcm(aes)\x00', 0x1c, "51d2ebcd244623431dfd9500049c82cc28c926faebb7415ef43c92aa"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_NODE_KEY={0x41, 0x4, {'gcm(aes)\x00', 0x19, "ac5f082575c9b1c9cf7803119d1b25a7e3e4183a3195ea32f4"}}]}, @TIPC_NLA_BEARER={0xc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_SOCK={0x4}, @TIPC_NLA_MEDIA={0xb0, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_MEDIA_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7a7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7d000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x70}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x464c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}]}, @TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x7}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x401}]}]}, 0x29c}, 0x1, 0x0, 0x0, 0x20044000}, 0x44801) ioctl$sock_SIOCGIFINDEX_802154(r9, 0x8933, &(0x7f00000001c0)={'wpan1\x00', 0x0}) (async) r14 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r14, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="1400000013000104000000000000000003"], 0x14}], 0x1}, 0x0) sendmsg$NL802154_CMD_NEW_SEC_KEY(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32=r13, @ANYBLOB="60003080050002000000000014000400403a050c5bae9c544ef2b6d713459a7a1c000180050002000000000008000400050000000800010002000000240003"], 0x7c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) r15 = getpid() sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r6, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x3c, r10, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_PID={0x8, 0x1c, r15}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000010}, 0x4000) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1400000010007b0000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x16, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x97, 0x60f}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0xfffffffd}, @exit={0x95, 0x0, 0x33}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0xfffffff8, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x2, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) 1.576917752s ago: executing program 1 (id=6783): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b40500000600000000000000314daf01002ebe1978f80000000007000000000000209500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x3c) socket$inet6_mptcp(0xa, 0x1, 0x106) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbfc, {0x6, 0x0, 0x8100, 0x0, {0x1, 0x10}, {0xfff1}, {0xe, 0x10}}, [@TCA_STAB={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x400c800}, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000020a010200000000000000000a0000060900010073797a310000000008000240000000018c000000020a010100000000000000000000000369000600e62807258a6d38caf4cb1d7a776a7a05e57912414e63207c5e61d47bb4016b21bd5593b033b0968722f2f0f4818a1a13fbb43e79d0ae674d071c0164df9d3701cc15211300766b6ebe326ada9e49cca5c2a07460e46e35eabfb48a4cd2cd83790d7e705b010000000900010073797a31000000001c000000090a030000000000000000000a00000208000c4004"], 0xf8}, 0x1, 0x0, 0x0, 0x2000c814}, 0x4000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000004000ffff0900010073797a30000000000900020073797a3100000000140003800800014000000000"], 0x138}, 0x1, 0x0, 0x0, 0x20040855}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd0002800800"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040), 0x4) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000001c0)={r1, 0x20, &(0x7f0000000180)={&(0x7f00000000c0)=""/77, 0x4d, 0x0, &(0x7f0000000140)=""/50, 0x32}}, 0x10) 1.270585662s ago: executing program 1 (id=6784): r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket(0x10, 0x3, 0x0) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01000000000000000000020202000900010073797a09"], 0x2c}, 0x1, 0x40030000000000}, 0x0) sendmsg$SMC_PNETID_FLUSH(r0, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x11554800}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x3c, r4, 0x20, 0x70bd26, 0x25dfdbfb, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'veth1_to_bond\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth1_vlan\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x20000800) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240), r0) sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x98, r5, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_DEST={0x4c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x94f}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x2}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x9}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xa0000}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0xa, 0x6, 'lblcr\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}]}, 0x98}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r2, 0x6612) write(r2, &(0x7f0000002480)="3c00000058001f000307f4f9002304000a04d6490800010002010002070003800500000099db973b91aa057972513500b0406700912deb5b85932234", 0x3c) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'macvtap0\x00', 0x0}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000020000000000000000000a6c000000060a010400000000000000000200000040a904803c000180"], 0x94}}, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010200000000000000006700000008000300", @ANYRES32=r9, @ANYBLOB="0800c300741300000800c400010000000400c5"], 0x30}}, 0x0) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000480), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000600)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x50, 0x0, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x7}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x1}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r12}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x8}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x7}]}, 0x50}, 0x1, 0x0, 0x0, 0x804}, 0x80) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r10, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x38, r11, 0x8, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xaaa0}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r12}]}, 0x38}, 0x1, 0x0, 0x0, 0x44084}, 0x2004c000) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000280)={'batadv_slave_0\x00'}) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r13, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x54, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth1_macvtap\x00'}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x4c, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2000}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x20, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'veth1_macvtap\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}]}]}], {0x14}}, 0xe8}}, 0x0) r14 = socket$netlink(0x10, 0x3, 0x4) writev(r14, &(0x7f0000000300)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a117436c379020000000000030058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100080c10000a000000224e0000", 0x58}], 0x1) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000010010000000ffdbdf2530000000", @ANYRES32=r6, @ANYBLOB="20000000000000001c0012800b0001006d616373656300000c00028005000f"], 0x3c}}, 0x0) 1.26134686s ago: executing program 0 (id=6785): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newlink={0x44, 0x10, 0x503, 0x0, 0x703, {0x0, 0x0, 0x0, 0x0, 0x40220, 0x1006}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_PRIORITY={0x6, 0x6, 0x8001}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) socket$netlink(0x10, 0x3, 0x0) (async) socket(0x10, 0x803, 0x0) (async) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) (async) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) (async) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) (async) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newlink={0x44, 0x10, 0x503, 0x0, 0x703, {0x0, 0x0, 0x0, 0x0, 0x40220, 0x1006}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_PRIORITY={0x6, 0x6, 0x8001}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) (async) 1.148124908s ago: executing program 3 (id=6786): r0 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000180)={0x1f, 0x0, @fixed}, &(0x7f0000000480)=0xe, 0x80000) setsockopt$sock_int(r0, 0x1, 0xc, &(0x7f00000005c0)=0x3, 0x4) ioctl$XFS_IOC_FSGEOMETRY(r0, 0x8100587e, &(0x7f00000004c0)) bpf$PROG_LOAD(0x25, 0x0, 0x0) r1 = socket(0xa, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=@newlink={0x4c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_OFLAGS={0x6, 0x3, 0x80}, @IFLA_GRE_IKEY={0x8, 0x4, 0x3}, @IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x2}]}}}]}, 0x4c}}, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2c, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x40082, @mcast1, 0xfffffffe}}, {{0xa, 0x4e08, 0x4a3, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x4f0}}}, 0x108) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000140)={'ip_vti0\x00', &(0x7f0000000000)={'ip_vti0\x00', 0x0, 0x80, 0x7, 0x7bec086c, 0x1, {{0x13, 0x4, 0x1, 0x8, 0x4c, 0x64, 0x0, 0x5, 0x29, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010102, {[@noop, @ra={0x94, 0x4, 0x1}, @timestamp_addr={0x44, 0x2c, 0xbf, 0x1, 0x9, [{@loopback, 0x1}, {@multicast2, 0x7}, {@rand_addr=0x64010101, 0x73d}, {@dev={0xac, 0x14, 0x14, 0x24}, 0x3}, {@multicast2, 0xee91945}]}, @ra={0x94, 0x4}]}}}}}) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000003c0)="89000000120081ae08060cdc030000007f1be3f74001000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00014009080c00000000009bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x9b}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000003c0)=ANY=[@ANYRES8=r3], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', r3, @sched_cls}, 0x94) 1.031932775s ago: executing program 2 (id=6787): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000240)={0x1b, 0x0, 0x0, 0xfffff000, 0x0, 0x1, 0xfffffffe, '\x00', r2, 0xffffffffffffffff, 0x0, 0x3, 0x4}, 0x50) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0xa2c0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x3}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000003c0), &(0x7f0000000400)}, 0x20) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000640), 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x1b, &(0x7f0000000480)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4d6f}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@alu={0x4, 0x0, 0x2, 0xb, 0xb, 0x80, 0x1}, @map_fd={0x18, 0x5, 0x1, 0x0, r5}, @tail_call={{0x18, 0x2, 0x1, 0x0, r6}}, @ringbuf_query], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000580)='GPL\x00', 0x32, 0x56, &(0x7f00000005c0)=""/86, 0x40f00, 0xd, '\x00', 0x0, 0x25, r7, 0x8, &(0x7f0000000680)={0x0, 0x2}, 0x8, 0x10, &(0x7f00000006c0)={0x0, 0xb, 0x1, 0x9}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r8 = socket(0x0, 0x803, 0x4) sendmsg$IPVS_CMD_SET_INFO(r8, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r8, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_MASTER={0x8, 0xa, r9}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x6}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) 1.003585634s ago: executing program 4 (id=6788): r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803002e000b12d25a80648c2594f90324fc60180c02400a000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x1c, &(0x7f0000000680)=ANY=[@ANYRES16=r0], 0x0}, 0x94) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7902009875f37538e486dd6317ce62667f2c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa88"], 0xfdef) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001e80)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff5070000000000000480000000820000095000000000000002ba7e1d30c04aa8b3382022ce2a1d97411a0f6b599e83f24a3aa81d36bb7019c13bd23212fb56f040026fbfefc4a056bdc17487902317142fac7e7be168c1886d0d4d94f2f4eb45c652fbc1626cca2a28d67893547db51ee988e6e06c8cedf7ceb9fc40400ae5e4aa74c92c6a51cbf9b0a4def23d410f6accd364158a4591c559f76c0130bfc4e90a6341865c3f5ab3e89cf6c662ed4148d3b3e22278d00031e5388ee5c867de2c6211d6ececb0c18ce74c4dae15cb7947c491b8bea3fd2f73902ebcfcf4982277d9800011b405bbf7b02433a9bcd715f5888b2007f000000001c000000010000000000000600000000309329170ee5b567e70f00c484d339c480f70006a10f58fa64533500000000000000000000000031000000000000001208e75a89faffbfb11b7dc6ea31001e846c12423a169f87463ad6f7c2e8ee1a39244960b318778f2a047f6d5bc24fef5d7d617de7a6520655a80d0900f4d433623c850af895abba14f6fbd7fbad1f98e26ad4deaf1a4f294b2a431ab9142f3a06d54740a4bc5e3abd378af7c9676a08ef74c48785f895b4ec8d1141d5e8744d7f09ab4df6027bf48cabecead649f96ea24d3287a7b01ab84d336f3c0f45a0642d6f2c494160cb7f46ce680eeb80157eb23f9902519ac655fa73103170cbc496d7122034b85e7e87a2db762cbb253fbd76b9117c1a11d18aa2040c5f0c289906000000000000005ffe91ff799a11d9b219c00c369a12bf8685b862d0dbdd956cbda1bae489bcef5ae59136aaadc59609f4d42617c0e6066938b521a0f2e2467a6c435ad5b800262a5da053ced5e95394e500000072737638ac44fb61310e2df511c60b3c88113996a81fb64bce5eb95ce91738640ff7ae6ed6b62086e699955926934389cdf9bcffff3ffd86fe9ce05268bf8a3958f2206cdc7095682c14f10be1075832956762b2dcc6251e7b74cb1da627e332765511c58215bf84d253e8778e6e8ffe4ea50b076446f35efffc806b340658342d2d9e1ef68c6ef3e98407d2fcefb34a0000000000000000895ddbb76122b1222e4da37177fe833e4fcaa67997e92a206ebd085bd9f90008d3fdd528efe6c1dca17f45ba5e8bd3153a0077bb43f8a63dd390d18f0239b41da1a52383a4c6768ca1bb66b8fb3c5000f6f246fd20356a60769b461b6cdf133de073b1df08ae09268b0073bb97d88d741a5546e76caf4b6b1387ff37ec13d262dae0260be74cdf7bb6d3107597430ef5bbd476bb9d69b2aef9f3cb644b4bf01ccf16d40720939daf2af469bdfb361b9c"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000040)=r2, 0x4) r4 = socket$inet(0x2, 0x2, 0x1) setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000001200)=0xe095, 0x4) bind$inet(0xffffffffffffffff, 0x0, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000180)={'netpci0\x00', 0x1}) ioctl$TUNSETQUEUE(r5, 0x400454d9, &(0x7f00000003c0)={'ip6_vti0\x00', 0x400}) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@rand_addr=' \x01\x00', 0x2, 0x32}, 0xa, @in6=@private1, 0x0, 0x4}]}]}, 0xfc}}, 0x0) sendmsg$inet(r4, &(0x7f00000005c0)={&(0x7f00000003c0)={0x2, 0x0, @broadcast}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000080)='\b\x00', 0x2}, {&(0x7f0000000180)="96bc1480bb35", 0x6}], 0x2, &(0x7f0000000240)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @broadcast}}}], 0x20}, 0x20048894) syz_emit_ethernet(0xfdef, &(0x7f0000000140)=ANY=[], 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r7, 0x107, 0x12, &(0x7f0000000140)={0x1, 0x6}, 0x4) setsockopt$packet_fanout_data(r7, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000180)=[{0x28, 0x0, 0xd, 0xfffff034}, {0x6, 0x0, 0x2, 0xffffffff}]}, 0x10) 885.682096ms ago: executing program 0 (id=6789): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000800), r1) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="44000004", @ANYRES8=r2, @ANYBLOB="01000000000000000000220000000a0001007770616e3000000005002000000004000500200000000000050020000000000009001f"], 0x44}, 0x1, 0x0, 0x0, 0x4004099}, 0x8805) 833.28412ms ago: executing program 1 (id=6790): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x201, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x22}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x81}, 0x48000) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800c0001006d6163766c616e001400028008000300000000040800010001"], 0x44}}, 0x0) close(0x3) 787.060626ms ago: executing program 3 (id=6791): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r1, 0x11, 0x68, &(0x7f0000000080), 0x4) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000340)=[@mask_fadd={0x58, 0x114, 0x8, {{0x9ab1, 0x3}, &(0x7f0000000080)=0x1, 0x0, 0x4, 0xd75, 0x0, 0x8, 0x37, 0x3}}], 0x58}, 0x0) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b40)={0x64, r3, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0xfffffffffffffd50, 0xb, 0x444e}, {0x6, 0x16, 0x2}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x7}, {0x8, 0xb, 0x7fff}}]}, 0x64}, 0x1, 0x0, 0x0, 0x804}, 0x4000000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f0000001d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}}, {{&(0x7f0000000280)=@abs={0x0, 0x0, 0x4e24}, 0x6e, 0x0, 0x0, &(0x7f00000018c0)=[@rights={{0x14, 0x1, 0x1, [r4]}}], 0x18, 0x20008880}}], 0x2, 0x4c054) ioctl$sock_TIOCINQ(r5, 0x541b, &(0x7f0000000240)) r6 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000300)=@filter={'filter\x00', 0xe, 0x4, 0x550, 0xffffffff, 0x270, 0x358, 0x0, 0xffffffff, 0xffffffff, 0x480, 0x480, 0x480, 0xffffffff, 0x4, &(0x7f0000000200), {[{{@ipv6={@remote, @remote, [0xff, 0x1fffffffe, 0xffffff00, 0xffffff00], [0xff000000, 0x0, 0xff000000, 0xff], 'vlan0\x00', 'ip6_vti0\x00', {0xff}, {}, 0x5c, 0x8, 0x0, 0x28}, 0x0, 0x228, 0x270, 0x0, {}, [@common=@inet=@policy={{0x158}, {[{@ipv4=@local, [0xff, 0xffffff00], @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, [0xff, 0xffffffff, 0xffffffff], 0x4d6, 0x0, 0x3b, 0x1, 0x18, 0x10}, {@ipv4=@empty, [0xffffff, 0xffffff00, 0x0, 0xff000000], @ipv6=@private1, [0xffffff00, 0xff000000, 0x0, 0xffffffff], 0x4d6, 0x3501, 0x8, 0x0, 0x0, 0x1b}, {@ipv6=@rand_addr=' \x01\x00', [0xff000000, 0xff000000, 0xff000000, 0xff], @ipv6=@local, [0xffffffff, 0xffffff00, 0x0, 0xffffffff], 0x4d6, 0x0, 0x11, 0x1, 0x0, 0x2}, {@ipv4=@loopback, [0xffffff00, 0xff000000, 0xffffffff, 0xff000000], @ipv4=@remote, [0x0, 0xffffffff, 0x0, 0xff], 0x4d6, 0x3501, 0x3c, 0x1, 0x1c, 0x1}], 0x3, 0x1}}, @common=@ipv6header={{0x28}, {0x45, 0x50, 0x1}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private2, 'veth0_to_bond\x00', {0x1}}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x11}, @local, [0xffffff00, 0xff000000, 0xffffff00, 0xff000000], [0x0, 0xffffffff, 0xffffffff, 0xff00007f], 'pim6reg1\x00', 'veth1_to_batadv\x00', {}, {0xff}, 0x2c, 0x3, 0x1, 0x39}, 0x0, 0xa8, 0xe8}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x6, 0x12, "827863f43ef6e2414775dd642f19574b822bd248ca96f93746249318d03e"}}}, {{@ipv6={@private0={0xfc, 0x0, '\x00', 0x5f}, @remote, [0xffffffff, 0xff000000, 0xffffff00, 0xffffffff], [0x0, 0xffffffff, 0xff000000], 'caif0\x00', 'xfrm0\x00', {}, {0xff}, 0x73, 0x9, 0x2, 0x5}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@icmp6={{0x28}, {0x3, "0412", 0x1}}, @common=@frag={{0x30}, {[0x5, 0x1a2], 0x3, 0x20}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5b0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000a00)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000900)={0x8c, 0x0, 0x400, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x3, 0x4f}}}}, [@NL80211_ATTR_CSA_IES={0x10, 0xb9, 0x0, 0x1, [@NL80211_ATTR_CSA_C_OFF_BEACON={0xa, 0xba, [0x4, 0x2, 0x7]}]}, @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x91}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xe}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x9}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16fd}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x9}], @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8004}, 0x4044831) sendmsg$NL80211_CMD_AUTHENTICATE(r6, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x28, r7, 0x8, 0x7, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x4) 627.930251ms ago: executing program 1 (id=6792): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="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"/1582], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000540)=ANY=[@ANYRES8=r0, @ANYRES8=r0, @ANYRESOCT=r0, @ANYRESOCT=r1], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000280)=ANY=[@ANYRES8=r2], 0x10}, 0x1, 0x0, 0x0, 0x4004}, 0x0) (async) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000280)=ANY=[@ANYRES8=r2], 0x10}, 0x1, 0x0, 0x0, 0x4004}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000480)={r2, r2, 0x31, 0x0, @val=@iter={&(0x7f0000000180)=@map_fd=r2, 0x10}}, 0x20) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xe, 0xffff}, {0xfff2, 0x5}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x4361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x48000}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xe, 0xffff}, {0xfff2, 0x5}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x4361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x48000}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x2070b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0x0, 0xd}, {0x6, 0xb}, {0xf, 0xffe0}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4894) socket$packet(0x11, 0x3, 0x300) (async) socket$packet(0x11, 0x3, 0x300) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000040)) (async) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000040)=0x0) write$cgroup_pid(r2, &(0x7f0000000080)=r7, 0x12) getsockopt$inet_tcp_int(r1, 0x6, 0x5, 0x0, &(0x7f0000003600)) socket$key(0xf, 0x3, 0x2) (async) r8 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r8, 0x1, 0x8, &(0x7f00000001c0), 0x4) (async) setsockopt$sock_int(r8, 0x1, 0x8, &(0x7f00000001c0), 0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[], 0x0, 0x26}, 0x28) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[], 0x0, 0x26}, 0x28) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'syzkaller0\x00'}) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000), 0x8) r9 = socket(0x36, 0x1, 0xffff) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000305000000000020000000000000", @ANYRES32=0x0, @ANYBLOB="15e3000000000000140012800c0001006d616376746170"], 0x48}}, 0x0) sendmmsg$alg(r9, &(0x7f00000000c0), 0x492492492492627, 0x0) (async) sendmmsg$alg(r9, &(0x7f00000000c0), 0x492492492492627, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) 626.317145ms ago: executing program 0 (id=6793): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f0000000c00)={0x2, {{0x2, 0x0, @multicast2}}, 0x0, 0x2, [{{0x2, 0x0, @rand_addr=0x64010102}}, {{0x2, 0x0, @dev}}]}, 0x190) setsockopt$inet_group_source_req(r1, 0x0, 0x2b, &(0x7f00000004c0)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @empty}}}, 0x108) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYRESOCT=r1, @ANYRES32=0x0, @ANYRES8], 0x74}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) 477.585929ms ago: executing program 2 (id=6794): r0 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'geneve0\x00'}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, 0x0, 0x0) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) r2 = socket$rds(0x15, 0x5, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000000)={0x100000011, @private=0xa010102, 0x0, 0x0, 'lblc\x00', 0x2d, 0xff, 0x26}, 0x2c) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=@getchain={0x24, 0x66, 0x1, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0x5, 0x6}, {0xffff, 0xa}, {0x10, 0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x2000c040}, 0x20000000) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000240), 0xffffffffffffffff) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newtaction={0x64, 0x30, 0x1, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x5}}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r6, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f0000000400)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="20002dbd7000fddbdf250f00000008000300", @ANYRES32=r9, @ANYBLOB="08000300", @ANYRES32=r10, @ANYBLOB="aaffffff7f000000009e927e75e50588dfe34562caf58590a996a1b0b715d3e5fd9941ed6c4400b9e14515"], 0x24}, 0x1, 0x0, 0x0, 0x4000804}, 0x11) bind$rds(r2, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/38, 0xfffffffffffffffe}], 0x1}}], 0x48, 0x8000}, 0x0) 421.306896ms ago: executing program 0 (id=6795): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000002c80)={0x0, 0x0, &(0x7f0000002c40)={&(0x7f0000003180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a01080000e0030000000e02000000090001007300803000000000080002400000000214000000110001"], 0x50}}, 0x0) sendmsg$NFT_MSG_GETSET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x20, 0xa, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x20}}, 0x4000000) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)={0x14, 0x26, 0x9, 0x80004, 0x80, {0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x48010}, 0x4000000) socket$nl_generic(0x10, 0x3, 0x10) 353.645763ms ago: executing program 1 (id=6796): sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[], 0x1c8}, 0x4000c010) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000005000000fd0900008400000005010000", @ANYRES32, @ANYRES32, @ANYRES32=0x0, @ANYRES32], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r0, 0x4}, 0x38) socket$inet(0x2, 0x4, 0x3) 302.182059ms ago: executing program 3 (id=6797): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) syz_emit_ethernet(0x7a, &(0x7f0000000300)={@broadcast, @dev, @val={@void}, {@ipv6={0x86dd, @udp={0x0, 0x6, "2e5cea", 0x40, 0x3c, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast2, {[@hopopts={0x0, 0x4, '\x00', [@hao={0xc9, 0x10, @private1}, @hao={0xc9, 0x10, @private1}]}], {0x0, 0x0, 0x10, 0x0, @gue={{0x2, 0x0, 0x0, 0x0, 0x100}}}}}}}}, 0x0) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) setsockopt$pppl2tp_PPPOL2TP_SO_SENDSEQ(r1, 0x111, 0x3, 0x1, 0x4) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000640)={r2, @in={{0x2, 0x4e20, @empty}}}, &(0x7f0000000080)=0x84) 301.122589ms ago: executing program 4 (id=6798): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendto$inet6(r2, &(0x7f00000000c0)='\x00', 0x1, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async) sendto$inet6(r2, &(0x7f0000000380)="ee", 0x1, 0x4091, 0x0, 0x0) (async) shutdown(r2, 0x1) (async) r3 = socket$kcm(0x2, 0xa, 0x2) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) (async) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x18, 0x52, 0x1, 0x0, 0x0, {0x1c}, [@typed={0x4, 0x2, 0x0, 0x0, @binary}]}, 0x18}}, 0x0) (async) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000480)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r6, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r6], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0) (async) r8 = socket(0x10, 0x3, 0x0) (async) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0xfffffffe, {0x0, 0x0, 0x0, r9, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x6, 0x2}}}}]}, 0x44}}, 0x800) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001540)=@newtfilter={0x70, 0x28, 0xd27, 0x1004001, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0xd, 0x9}, {}, {0x2, 0xb}}, [@TCA_RATE={0x6, 0x5, {0x2, 0x3}}, @filter_kind_options=@f_cgroup={{0xb}, {0x38, 0x2, [@TCA_CGROUP_ACT={0x34, 0x1, [@m_sample={0x30, 0x15, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x810}, 0x404c0c0) (async) r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0xffff46e0, '\x00', 0x0, 0x0, 0x0, 0x2}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) (async) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0x1f, 0x10, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000090000000000000081000000b7080000000000007baaf8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb702000011f4d9165381de7a1cc4e236ddc80800000018230000", @ANYRES32=r10, @ANYBLOB="0000000000000000b70500000800000085000000b30000009500000000000000"], &(0x7f00000000c0)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x18, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r11}, 0xc) (async) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) 167.346874ms ago: executing program 2 (id=6799): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha20\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000080c0)=[{{0x0, 0x0, &(0x7f00000042c0)=[{&(0x7f0000001d80)=""/51, 0x33}, {&(0x7f0000001dc0)=""/207, 0xcf}, {&(0x7f0000003040)=""/110, 0x6e}, {&(0x7f00000030c0)=""/66, 0x42}, {&(0x7f0000003140)=""/4096, 0x1000}], 0x5}, 0x1}, {{0x0, 0x0, &(0x7f0000005480)=[{&(0x7f0000004480)=""/4096, 0x1000}], 0x1}, 0xc82}], 0x2, 0x40000001, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x34}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0x2c}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x85}, 0x52) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x34}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0x2c}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x85}, 0x52) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{0x0}], 0x1, 0x0, 0x0, 0x100058d1}, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f00000009c0)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x0, 0xfffffffd, 0x30, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x9}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000180)={'ip6_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty, 0x0, 0x0, 0x1000002}}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000000c0)={0x70, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private0}}, @IPSET_ATTR_TIMEOUT={0x8}, @IPSET_ATTR_CADT_FLAGS={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x7}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000044}, 0x0) (async) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000000c0)={0x70, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private0}}, @IPSET_ATTR_TIMEOUT={0x8}, @IPSET_ATTR_CADT_FLAGS={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x7}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000044}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000001c00c92429bd70000000020007000000", @ANYRES32=r4, @ANYBLOB="80008f0b0a0002"], 0x30}, 0x1, 0x0, 0x0, 0xc0041}, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) r5 = socket$netlink(0x10, 0x3, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r6) sendmsg$NLBL_CIPSOV4_C_ADD(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x38, r7, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x14, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5, 0x3, 0x80}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x38}}, 0x0) (async) sendmsg$NLBL_CIPSOV4_C_ADD(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x38, r7, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x14, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5, 0x3, 0x80}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x38}}, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) (async) r8 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000480)={'vcan0\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000480)={'vcan0\x00', 0x0}) bind$can_j1939(r8, &(0x7f0000000100)={0x1d, r9, 0x0, {0x1, 0x1, 0x4}, 0x1}, 0x18) sendmsg$can_j1939(r8, &(0x7f0000000200)={&(0x7f0000000000)={0x1d, r9, 0x0, {0x0, 0x0, 0x4}, 0xff}, 0x18, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x200088c0}, 0x4000000) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000140)={'vcan0\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000140)={'vcan0\x00'}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000b40), 0x2328}}, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) select(0x40, &(0x7f0000000240)={0x4, 0x793, 0x800, 0xd04, 0x8, 0x8, 0xbea4, 0x2}, &(0x7f0000000280)={0x1c, 0x81, 0x8, 0x7fffffff, 0x80, 0x34, 0x0, 0x1}, &(0x7f0000000340)={0x0, 0xfd8d, 0x1, 0x7, 0x9, 0x7fffffff, 0x8}, &(0x7f00000003c0)={r10, r11/1000+10000}) 101.320233ms ago: executing program 0 (id=6800): syz_emit_ethernet(0x2e, &(0x7f0000000240)={@multicast, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x4002, 0x5, 0x11, 0x0, @empty, @empty}, {0x4e24, 0x0, 0xc, 0x0, @gue={{0x1, 0x0, 0x1, 0x8, 0x100, @void}}}}}}}, 0x0) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000005ec0), 0xffffffffffffffff) (async) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000005fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002dbd0600ffdbdb252100000020000300", @ANYRES32=r4, @ANYBLOB="0600eb00000800000400ec000a00060008021100000100000600f70000ff000008009e"], 0x44}}, 0x28000) (async) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_SET(r1, &(0x7f0000000500)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000004c0)={&(0x7f0000000280)={0x220, r5, 0x300, 0x70bd25, 0x25dfdbfb, {}, [@ETHTOOL_A_WOL_MODES={0x20c, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x128, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'nfc\x00'}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, ',.$\x00'}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '\'\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'nfc\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '\xbb\xbb\xbb\xbb\xbb\xbb'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8001}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8000}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '!\xa6-\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '\xbb\xbb\xbb\xbb\xbb\xbb'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1c}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '\xbb\xbb\xbb\xbb\xbb\xbb'}]}]}, @ETHTOOL_A_BITSET_VALUE={0x85, 0x4, "d932f85d618b9f6379a9a76f7dcfbba0f40bee4744f3f292f46d4edcb2f79915551fe70edd0bef202fac7986924874ade47870cdab25f733f3723f7451dd7c8f4c5bc5fe3fb3474f8cdd44da810626d04ebfa51560235d3ae73a90fb2d13f91d5da9f5802ceb7b4f68a9e48229262a73fa57e9075a8df1dfdab2a332b3c60de57f"}, @ETHTOOL_A_BITSET_VALUE={0x57, 0x4, "82f32ed2c56b41680a87011024cf0838f0a4eba3c631264936ff062bb1ce33b7bd920f6ff9fe9bd2c62257e8f014834ffc78537a6c38bfb45185116eaad6bc5289bd133140a429dc27d487b01b3dcb1bbd23c8"}]}]}, 0x220}, 0x1, 0x0, 0x0, 0x4000010}, 0x80) (async) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r6) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r8], 0x1c}}, 0x4008054) (async) write$nci(r0, &(0x7f0000000240)=ANY=[@ANYBLOB='p\x00\t'], 0xc) write$nci(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="5001", @ANYRES8=r6, @ANYRES16], 0x14) 77.586887ms ago: executing program 3 (id=6801): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newtaction={0x11c, 0x30, 0x1, 0x70bd28, 0x0, {}, [{0x108, 0x1, [@m_skbmod={0x104, 0x1, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0xffffffff, 0x10001, 0xffffffffffffffff, 0x3c, 0x3}, 0x400000000a}}]}, {0xb3, 0x6, "ab582d53168838ec510a777f2f37b1a68aaa417c2d142dee71cb140465d50f319be2524d0817428011113e996d165927e828b8f4a9b656eca371b2cc7221de97282b30a6e7fa871a3bca2c62d530cb8156ff8db512d2aceaa9652ec5540991187d59f2873c497e506d0e477546ec9fd3ecbff4dad03690ff06fa0fcf0d653ef89a06f388faee44ca4cf24ba539527b36f23f5aaad079734907f9c674cd05961c89403e0b78764ff1e0a7472410675a"}, {0xc}, {0xc}}}]}]}, 0x11c}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newtaction={0x11c, 0x30, 0x1, 0x70bd28, 0x0, {}, [{0x108, 0x1, [@m_skbmod={0x104, 0x1, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0xffffffff, 0x10001, 0xffffffffffffffff, 0x3c, 0x3}, 0x400000000a}}]}, {0xb3, 0x6, "ab582d53168838ec510a777f2f37b1a68aaa417c2d142dee71cb140465d50f319be2524d0817428011113e996d165927e828b8f4a9b656eca371b2cc7221de97282b30a6e7fa871a3bca2c62d530cb8156ff8db512d2aceaa9652ec5540991187d59f2873c497e506d0e477546ec9fd3ecbff4dad03690ff06fa0fcf0d653ef89a06f388faee44ca4cf24ba539527b36f23f5aaad079734907f9c674cd05961c89403e0b78764ff1e0a7472410675a"}, {0xc}, {0xc}}}]}]}, 0x11c}, 0x1, 0x0, 0x0, 0x4}, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x10, 0x17, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000074f6967d00000000000000180100002020702500000000002020207baaf8ff00000000bda100000000000027010000f8ffffffb702000008000000b7030000000000002500000006000000be91000000000000b502ecffffff00008500000005000000b70000000000000095"], &(0x7f00000002c0)='GPL\x00', 0xb, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000dc0)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x20040011}, 0x20004080) (async) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000dc0)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x20040011}, 0x20004080) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c0002800500010004002000080020"], 0x4c}}, 0x0) (async) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c0002800500010004002000080020"], 0x4c}}, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000080)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha384\x00'}, 0x58) r7 = accept$alg(r6, 0x0, 0x0) bind$alg(r6, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'essiv(cbc(aes),sha256)\x00'}, 0x58) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x18, 0x10, 0x3}, @TCA_FQ_FLOW_MAX_RATE={0x2, 0x2}, @TCA_FQ_QUANTUM={0x2, 0x2, 0x10270000}]}}]}, 0x48}}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) setsockopt$inet6_MCAST_MSFILTER(r7, 0x29, 0x30, &(0x7f0000000340)={0x4, {{0xa, 0x4e22, 0x21a, @private1, 0x42}}, 0x1, 0x9, [{{0xa, 0x4e23, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x595}}, {{0xa, 0x4e24, 0xfffffff8, @local, 0x4}}, {{0xa, 0x4e23, 0x80000000, @private2, 0x9e73}}, {{0xa, 0x4e21, 0x7, @empty, 0x9}}, {{0xa, 0x4e23, 0x10000, @mcast2, 0x7}}, {{0xa, 0x4e23, 0x0, @private0, 0xfffffff9}}, {{0xa, 0x4e21, 0x6, @loopback, 0x6}}, {{0xa, 0x4e22, 0x1, @dev={0xfe, 0x80, '\x00', 0x12}}}, {{0xa, 0x4e24, 0x6, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7}}]}, 0x510) (async) setsockopt$inet6_MCAST_MSFILTER(r7, 0x29, 0x30, &(0x7f0000000340)={0x4, {{0xa, 0x4e22, 0x21a, @private1, 0x42}}, 0x1, 0x9, [{{0xa, 0x4e23, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x595}}, {{0xa, 0x4e24, 0xfffffff8, @local, 0x4}}, {{0xa, 0x4e23, 0x80000000, @private2, 0x9e73}}, {{0xa, 0x4e21, 0x7, @empty, 0x9}}, {{0xa, 0x4e23, 0x10000, @mcast2, 0x7}}, {{0xa, 0x4e23, 0x0, @private0, 0xfffffff9}}, {{0xa, 0x4e21, 0x6, @loopback, 0x6}}, {{0xa, 0x4e22, 0x1, @dev={0xfe, 0x80, '\x00', 0x12}}}, {{0xa, 0x4e24, 0x6, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7}}]}, 0x510) 0s ago: executing program 4 (id=6802): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x58, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_NETMASK={0x5, 0x14, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}]}, 0x58}}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x44c000, 0x0) ioctl$TUNSETOWNER(r3, 0x400454cc, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x112}) socket$nl_netfilter(0x10, 0x3, 0xc) kernel console output (not intermixed with test programs): zkaller0: entered allmulticast mode [ 727.370422][T25889] x_tables: ip6_tables: dccp match: only valid for protocol 33 [ 727.414144][T25893] veth0_to_bridge: vlans aren't supported yet for dev_uc|mc_add() [ 727.727918][T25916] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5263'. [ 727.834710][T25922] netlink: 'syz.4.5265': attribute type 10 has an invalid length. [ 727.893705][T25927] netlink: 'syz.4.5265': attribute type 10 has an invalid length. [ 727.900989][T25922] batman_adv: batadv0: Local translation table size (108) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:17 [ 727.916623][T25927] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5265'. [ 727.925952][T10802] IPVS: starting estimator thread 0... [ 727.952463][T25922] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 727.964072][T25922] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 727.978991][T25927] batadv0: entered promiscuous mode [ 727.999699][T25927] batadv0: entered allmulticast mode [ 728.017030][T25927] bond0: (slave batadv0): Releasing backup interface [ 728.018620][T25928] IPVS: using max 28 ests per chain, 67200 per kthread [ 728.075171][T25927] bridge0: port 1(batadv0) entered blocking state [ 728.113687][T25927] bridge0: port 1(batadv0) entered disabled state [ 728.150254][T25927] batman_adv: batadv0: Local translation table size (116) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:2a [ 728.181634][T25921] tipc: Enabled bearer , priority 10 [ 728.288866][ T7562] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 728.300920][ T7562] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 728.701114][T25971] netlink: 'syz.1.5274': attribute type 1 has an invalid length. [ 728.878233][T25971] bond5: entered promiscuous mode [ 728.904529][T25971] 8021q: adding VLAN 0 to HW filter on device bond5 [ 729.027028][T25985] netlink: 'syz.0.5278': attribute type 3 has an invalid length. [ 729.078094][T25985] netlink: 'syz.0.5278': attribute type 3 has an invalid length. [ 729.117496][T25992] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5280'. [ 729.137408][T25985] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5278'. [ 729.577666][T26005] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5283'. [ 729.873361][T25990] gre0 speed is unknown, defaulting to 1000 [ 730.706136][T26054] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5298'. [ 730.785181][T26056] netlink: 'syz.0.5298': attribute type 2 has an invalid length. [ 730.820988][T26056] netlink: 'syz.0.5298': attribute type 11 has an invalid length. [ 730.836101][T26058] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5299'. [ 730.943475][T26061] nbd: device at index 64 is going down [ 731.175721][T24799] udevd[24799]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 731.192618][T26068] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 731.235578][T26068] bond0: (slave lo): Error: Device can not be enslaved while up [ 731.250161][T24799] udevd[24799]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 731.695952][T26085] gtp0: entered promiscuous mode [ 731.709172][T26085] gtp0: entered allmulticast mode [ 731.872439][T26098] sock: sock_timestamping_bind_phc: sock not bind to device [ 731.898291][T26098] __nla_validate_parse: 4 callbacks suppressed [ 731.898313][T26098] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5310'. [ 731.958359][T26100] netlink: 108 bytes leftover after parsing attributes in process `syz.4.5311'. [ 731.970553][T26100] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5311'. [ 732.188093][T26105] wg1: entered promiscuous mode [ 732.193805][T26105] wg1: entered allmulticast mode [ 733.161609][T26115] syzkaller0: entered promiscuous mode [ 733.171775][T26115] syzkaller0: entered allmulticast mode [ 734.334379][T26137] delete_channel: no stack [ 736.974584][T26164] netlink: 'syz.4.5328': attribute type 3 has an invalid length. [ 737.004201][T26164] netlink: 766 bytes leftover after parsing attributes in process `syz.4.5328'. [ 737.052873][T26164] xt_hashlimit: Unknown mode mask 2000, kernel too old? [ 737.252146][T26182] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5333'. [ 737.310539][T26182] bond5: option xmit_hash_policy: invalid value (64) [ 737.326742][T26189] netlink: 'syz.0.5335': attribute type 30 has an invalid length. [ 737.327225][T26182] bond5 (unregistering): Released all slaves [ 737.445182][T26189] bond10: option arp_missed_max: invalid value (0) [ 737.451860][T26189] bond10: option arp_missed_max: allowed values 1 - 255 [ 737.472122][T26189] bond10 (unregistering): Released all slaves [ 737.627879][T26201] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5338'. [ 737.674089][T26203] netlink: 'syz.1.5340': attribute type 3 has an invalid length. [ 737.686804][T26201] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5338'. [ 737.717017][T26206] : entered promiscuous mode [ 737.730269][T26201] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5338'. [ 737.746588][T26201] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5338'. [ 737.774904][T26201] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5338'. [ 737.817691][T26201] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5338'. [ 737.861341][T26201] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5338'. [ 737.896391][T26201] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5338'. [ 738.311830][T26230] syzkaller0: entered promiscuous mode [ 738.335006][T26230] syzkaller0: entered allmulticast mode [ 738.447859][T26238] netlink: 'syz.2.5350': attribute type 30 has an invalid length. [ 738.511070][T26242] netlink: 'syz.2.5350': attribute type 30 has an invalid length. [ 738.541585][T26234] netlink: 'syz.1.5349': attribute type 1 has an invalid length. [ 739.063353][T26258] bond18 (unregistering): Released all slaves [ 739.090848][T26277] openvswitch: netlink: Invalid VLAN frame [ 739.107266][T26276] openvswitch: netlink: Invalid VLAN frame [ 739.473608][T26295] netlink: zone id is out of range [ 739.481568][T26295] netlink: zone id is out of range [ 739.490125][T26295] netlink: zone id is out of range [ 739.498281][T26295] netlink: zone id is out of range [ 739.504505][T26295] netlink: zone id is out of range [ 739.510687][T26295] netlink: zone id is out of range [ 739.516250][T26295] netlink: zone id is out of range [ 739.527487][T26295] netlink: zone id is out of range [ 739.704402][T26300] bridge8: entered promiscuous mode [ 739.720174][T26300] bridge8: entered allmulticast mode [ 739.773353][T26300] team0: Port device bridge8 added [ 739.787281][T26302] tipc: New replicast peer: 255.255.255.255 [ 739.806421][T26302] tipc: Enabled bearer , priority 10 [ 739.992874][T26292] gre0 speed is unknown, defaulting to 1000 [ 740.124968][T26311] bridge_slave_1: entered promiscuous mode [ 740.635735][T26323] netlink: 'syz.1.5375': attribute type 1 has an invalid length. [ 740.645945][T26323] netlink: 'syz.1.5375': attribute type 7 has an invalid length. [ 740.654608][T26323] netlink: 'syz.1.5375': attribute type 8 has an invalid length. [ 740.663825][T26323] NCSI netlink: No device for ifindex 65584 [ 740.695453][T26325] netlink: 'syz.4.5376': attribute type 10 has an invalid length. [ 740.929209][T10802] tipc: Node number set to 3439591424 [ 741.700557][T26359] pim6reg: entered allmulticast mode [ 742.264853][T26377] __nla_validate_parse: 39 callbacks suppressed [ 742.264876][T26377] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5392'. [ 742.359627][T26382] tipc: Enabling of bearer rejected, failed to enable media [ 742.579001][T26391] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5396'. [ 742.953615][T26411] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5402'. [ 742.991321][T26415] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5404'. [ 743.141321][T26420] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5406'. [ 743.154118][T26420] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5406'. [ 743.170153][T26420] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5406'. [ 743.184266][T26420] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5406'. [ 743.385402][T26440] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5412'. [ 743.605991][T26446] netlink: 245 bytes leftover after parsing attributes in process `syz.1.5414'. [ 743.747768][T26457] delete_channel: no stack [ 743.778994][T26452] delete_channel: no stack [ 743.830489][T26464] macvlan3: entered allmulticast mode [ 743.851304][T26464] hsr0: entered allmulticast mode [ 743.877421][T26464] hsr_slave_1: entered allmulticast mode [ 744.197835][T26477] validate_nla: 1 callbacks suppressed [ 744.197856][T26477] netlink: 'syz.3.5424': attribute type 1 has an invalid length. [ 744.327056][T26496] netlink: 'syz.0.5429': attribute type 1 has an invalid length. [ 744.337985][T26496] net_ratelimit: 156 callbacks suppressed [ 744.338005][T26496] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 744.341301][T26477] 8021q: adding VLAN 0 to HW filter on device bond18 [ 744.508939][T26509] netlink: 'syz.2.5430': attribute type 3 has an invalid length. [ 744.852356][T26529] ieee802154 phy0 wpan0: encryption failed: -22 [ 745.280385][T26551] syzkaller0: entered promiscuous mode [ 745.286195][T26551] syzkaller0: entered allmulticast mode [ 745.496237][T26560] xt_cgroup: invalid path, errno=-2 [ 745.752395][T26564] syzkaller1: entered promiscuous mode [ 745.769864][T26571] openvswitch: netlink: IP tunnel dst address not specified [ 745.769998][T26564] syzkaller1: entered allmulticast mode [ 747.370661][T26639] tipc: New replicast peer: 172.20.20.187 [ 747.399551][T26639] tipc: Enabled bearer , priority 10 [ 747.435116][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.445542][ T1300] clip:clip_start_xmit: skb_dst(skb) == NULL [ 748.052698][T26673] __nla_validate_parse: 14 callbacks suppressed [ 748.052720][T26673] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5482'. [ 748.124412][T26677] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5484'. [ 748.161481][T15974] IPVS: starting estimator thread 0... [ 748.190930][T26677] netlink: 144 bytes leftover after parsing attributes in process `syz.2.5484'. [ 748.289635][T26678] IPVS: using max 26 ests per chain, 62400 per kthread [ 748.529682][T26685] macvtap1: entered allmulticast mode [ 748.545690][T26685] veth0_macvtap: entered allmulticast mode [ 748.581185][T26685] IPv6: addrconf: prefix option has invalid lifetime [ 748.590103][T26685] IPv6: addrconf: prefix option has invalid lifetime [ 748.673854][T26691] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5490'. [ 748.706967][T26693] syzkaller0: left promiscuous mode [ 748.723345][T26693] syzkaller0: left allmulticast mode [ 748.856751][T26703] netlink: 'syz.2.5494': attribute type 1 has an invalid length. [ 748.865874][T26703] netlink: 'syz.2.5494': attribute type 11 has an invalid length. [ 748.868104][T26704] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5494'. [ 748.874741][T26703] netlink: 224 bytes leftover after parsing attributes in process `syz.2.5494'. [ 748.905520][T26707] netlink: 26 bytes leftover after parsing attributes in process `syz.1.5493'. [ 749.213814][T26717] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5496'. [ 749.269904][T26721] netlink: 'syz.0.5496': attribute type 1 has an invalid length. [ 749.323996][T26717] tipc: Can't bind to reserved service type 1 [ 749.396424][T26721] bond10: entered promiscuous mode [ 749.437711][T26721] 8021q: adding VLAN 0 to HW filter on device bond10 [ 749.592665][T26732] 8021q: adding VLAN 0 to HW filter on device bond10 [ 749.639244][T26732] bond10: (slave ip6gre2): The slave device specified does not support setting the MAC address [ 749.696934][T26732] bond10: (slave ip6gre2): Setting fail_over_mac to active for active-backup mode [ 749.740637][T26732] bond10: (slave ip6gre2): making interface the new active one [ 749.752878][T26746] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5503'. [ 749.788625][T26732] ip6gre2: entered promiscuous mode [ 749.805930][T26732] bond10: (slave ip6gre2): Enslaving as an active interface with an up link [ 749.824663][T26748] netlink: 48 bytes leftover after parsing attributes in process `syz.4.5505'. [ 749.839078][T26739] syzkaller0: entered promiscuous mode [ 749.853035][T26739] syzkaller0: entered allmulticast mode [ 750.922327][T26782] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 750.953212][T26792] netlink: 'syz.3.5517': attribute type 16 has an invalid length. [ 750.978764][T26792] netlink: 'syz.3.5517': attribute type 17 has an invalid length. [ 751.108353][T26792] erspan0: left promiscuous mode [ 751.126044][T26792] erspan0: left allmulticast mode [ 751.153674][ T29] audit: type=1800 audit(1776474458.935:9): pid=26797 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.5519" name="memory.events" dev="tmpfs" ino=2265 res=0 errno=0 [ 751.198138][T26792] 8021q: adding VLAN 0 to HW filter on device .` [ 751.214820][T26792] 8021q: adding VLAN 0 to HW filter on device team0 [ 751.314307][T26792] bridge_slave_1: left promiscuous mode [ 751.359659][T26792] batadv_slave_0: left promiscuous mode [ 751.386246][T26792] tipc: Resetting bearer [ 751.398026][T26792] tipc: Resetting bearer [ 751.413262][T26792] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 751.424029][T26792] hsr0: entered promiscuous mode [ 751.447469][T26792] veth1_vlan: left promiscuous mode [ 751.469253][T26792] veth0_vlan: left promiscuous mode [ 751.480716][T26792] veth0_vlan: entered promiscuous mode [ 751.497902][T26792] veth1_vlan: entered promiscuous mode [ 751.524259][T26792] veth1_macvtap: left promiscuous mode [ 751.533198][T26792] veth0_macvtap: left promiscuous mode [ 751.541631][T26792] veth0_macvtap: entered promiscuous mode [ 751.552433][T26792] veth1_macvtap: entered promiscuous mode [ 751.572293][T26792] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 751.580257][T26792] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 751.590535][T26792] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 751.601656][T26792] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 751.613831][T26792] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 751.632419][T26792] 8021q: adding VLAN 0 to HW filter on device bond1 [ 751.643604][T26792] 8021q: adding VLAN 0 to HW filter on device bond2 [ 751.654253][T26792] 8021q: adding VLAN 0 to HW filter on device bond3 [ 751.663004][T26792] A link change request failed with some changes committed already. Interface vxlan1 may have been left with an inconsistent configuration, please check. [ 751.713795][T26794] macvtap1: entered promiscuous mode [ 751.732445][T26794] macvtap1: entered allmulticast mode [ 751.733369][T26816] netlink: 'syz.2.5524': attribute type 1 has an invalid length. [ 751.753240][T26794] veth1_vlan: entered allmulticast mode [ 751.807522][T26799] macvtap2: entered promiscuous mode [ 751.821750][T26799] macvtap2: entered allmulticast mode [ 751.952977][ T7562] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 6081 - 0 [ 752.054323][T26816] bond6: entered promiscuous mode [ 752.064436][T26816] 8021q: adding VLAN 0 to HW filter on device bond6 [ 752.162936][T26819] bond6: (slave bridge3): making interface the new active one [ 752.182398][T26819] bridge3: entered promiscuous mode [ 752.195168][T26819] bridge3: left promiscuous mode [ 752.294036][ T7562] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 6081 - 0 [ 752.325642][ T7562] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 6081 - 0 [ 752.414179][T23639] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 6081 - 0 [ 752.435914][T26845] syzkaller1: entered promiscuous mode [ 752.443404][T26845] syzkaller1: entered allmulticast mode [ 752.776193][T26869] netlink: 'syz.0.5535': attribute type 1 has an invalid length. [ 753.142850][T26898] netlink: 'syz.2.5545': attribute type 4 has an invalid length. [ 753.431692][T26909] netlink: 'syz.2.5549': attribute type 39 has an invalid length. [ 753.611386][T26915] netlink: 'syz.3.5550': attribute type 1 has an invalid length. [ 753.632560][T26915] __nla_validate_parse: 12 callbacks suppressed [ 753.632580][T26915] netlink: 224 bytes leftover after parsing attributes in process `syz.3.5550'. [ 753.720228][T26915] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5550'. [ 753.740629][T26915] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5550'. [ 753.759198][T26915] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5550'. [ 753.836119][T26923] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5554'. [ 753.889661][T26920] syzkaller0: entered promiscuous mode [ 753.895282][T26920] syzkaller0: entered allmulticast mode [ 753.919693][T26927] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5555'. [ 754.758217][T26948] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5560'. [ 757.292334][T26957] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 757.417853][T26959] bond7: option fail_over_mac: invalid value (16) [ 757.434284][T26959] bond7 (unregistering): Released all slaves [ 757.617161][T26976] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 757.930878][T26970] batman_adv: batadv0: Interface deactivated: dummy0 [ 758.241517][T26970] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 758.297695][T26970] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 759.034718][T26970] veth1_vlan: left allmulticast mode [ 759.077071][T26978] netlink: 48 bytes leftover after parsing attributes in process `syz.3.5571'. [ 759.088751][T26978] netlink: 48 bytes leftover after parsing attributes in process `syz.3.5571'. [ 759.118415][ T6551] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 759.173977][ T6551] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 759.204886][ T6551] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 759.233259][ T6551] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 759.270542][ T6551] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 759.299971][ T6551] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 759.341244][ T6551] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 759.355858][ T6551] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 759.405390][T27003] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5579'. [ 759.457933][T27008] wg1: entered promiscuous mode [ 759.480771][T27008] wg1: entered allmulticast mode [ 759.522109][T27002] pim6reg527: entered allmulticast mode [ 759.631639][T27015] netlink: 44 bytes leftover after parsing attributes in process `syz.1.5585'. [ 759.655683][T27015] netlink: 56 bytes leftover after parsing attributes in process `syz.1.5585'. [ 759.669037][T27016] netlink: 'syz.4.5583': attribute type 1 has an invalid length. [ 759.675066][T27015] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5585'. [ 759.847006][T27026] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5585'. [ 759.881358][T27026] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5585'. [ 759.941948][T27022] bond6: (slave ip6gre2): The slave device specified does not support setting the MAC address [ 759.957044][T27022] bond6: (slave ip6gre2): Setting fail_over_mac to active for active-backup mode [ 759.977107][T27022] bond6: (slave ip6gre2): making interface the new active one [ 759.992910][T27022] bond6: (slave ip6gre2): Enslaving as an active interface with an up link [ 760.144647][T27039] netlink: 'syz.4.5592': attribute type 83 has an invalid length. [ 760.345970][T27048] netlink: 'syz.4.5596': attribute type 4 has an invalid length. [ 760.370174][T27049] netlink: 'syz.4.5596': attribute type 4 has an invalid length. [ 760.392665][T27048] netlink: 152 bytes leftover after parsing attributes in process `syz.4.5596'. [ 760.408929][T27049] netlink: 152 bytes leftover after parsing attributes in process `syz.4.5596'. [ 760.427440][T27048] .`: renamed from bond0 [ 761.632901][T27074] bridge8: the hash_elasticity option has been deprecated and is always 16 [ 762.168401][T27147] syzkaller0: entered promiscuous mode [ 762.173901][T27146] xt_cgroup: path and classid specified [ 762.177149][T27147] syzkaller0: entered allmulticast mode [ 762.462934][T27158] openvswitch: netlink: IPv6 tunnel dst address is zero [ 762.617069][T27164] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 762.631627][T27164] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 762.863276][T27173] netlink: 'syz.2.5631': attribute type 29 has an invalid length. [ 763.123895][T27180] netlink: 'syz.2.5631': attribute type 29 has an invalid length. [ 763.177711][T27181] : entered promiscuous mode [ 763.192675][T27173] tipc: Enabling of bearer rejected, already enabled [ 763.461934][T27195] batadv1: entered allmulticast mode [ 763.503496][T27201] sch_tbf: burst 0 is lower than device bond0 mtu (1514) ! [ 763.746345][T27214] netlink: 'syz.4.5642': attribute type 1 has an invalid length. [ 763.803162][T27214] 8021q: adding VLAN 0 to HW filter on device bond0 [ 763.821846][T27214] vlan4: entered promiscuous mode [ 763.827052][T27214] bond0: entered promiscuous mode [ 763.832723][T27214] vlan4: entered allmulticast mode [ 763.837967][T27214] bond0: entered allmulticast mode [ 764.301848][T27247] ip6erspan1: entered allmulticast mode [ 764.338385][T27250] __nla_validate_parse: 14 callbacks suppressed [ 764.338407][T27250] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5653'. [ 764.398421][T27255] netlink: 'syz.3.5653': attribute type 8 has an invalid length. [ 764.417105][T27255] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5653'. [ 764.475374][T27255] bond0: entered promiscuous mode [ 764.495850][T27255] gretap0: entered promiscuous mode [ 764.516510][T27255] bond0: left promiscuous mode [ 764.525287][T27263] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5655'. [ 764.544306][T27255] gretap0: left promiscuous mode [ 764.554348][T27264] netlink: 144 bytes leftover after parsing attributes in process `syz.4.5656'. [ 764.566964][T27264] netlink: 52 bytes leftover after parsing attributes in process `syz.4.5656'. [ 764.989922][T27279] netlink: 'syz.4.5660': attribute type 1 has an invalid length. [ 765.083010][T27286] netlink: 'syz.0.5661': attribute type 1 has an invalid length. [ 765.116767][T27286] netlink: 228 bytes leftover after parsing attributes in process `syz.0.5661'. [ 765.134850][T27251] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 765.179930][T27251] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 765.623404][T27251] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 765.639977][T27251] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 765.745913][T27251] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 765.756402][T27251] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 765.799521][T27251] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 765.808731][T27251] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 765.866052][T27251] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 765.881810][T27251] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 766.293594][T27329] batadv_slave_1: entered promiscuous mode [ 766.535156][T27341] netlink: 'syz.1.5671': attribute type 1 has an invalid length. [ 766.545974][T27341] netlink: 224 bytes leftover after parsing attributes in process `syz.1.5671'. [ 766.562397][T27326] batadv_slave_1: left promiscuous mode [ 766.965527][T27373] netlink: 52 bytes leftover after parsing attributes in process `syz.4.5680'. [ 766.970249][T27370] netlink: 104 bytes leftover after parsing attributes in process `syz.2.5679'. [ 766.977723][T27373] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5680'. [ 767.134753][T27382] netlink: 'syz.3.5683': attribute type 16 has an invalid length. [ 767.241079][T27385] netlink: 'syz.3.5684': attribute type 10 has an invalid length. [ 767.251846][T27385] wlan1: mtu less than device minimum [ 767.258133][T27385] .`: (slave wlan1): Error -22 calling dev_set_mtu [ 767.272244][T27379] netdevsim netdevsim4: Direct firmware load for . failed with error -2 [ 767.285993][T27379] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 767.389355][T27391] netlink: 'syz.1.5687': attribute type 2 has an invalid length. [ 767.483145][T27398] netlink: 'syz.3.5690': attribute type 1 has an invalid length. [ 767.493356][T27398] netlink: 'syz.3.5690': attribute type 2 has an invalid length. [ 767.660693][T27407] netlink: 'syz.3.5692': attribute type 2 has an invalid length. [ 767.673692][T27407] bond9: entered allmulticast mode [ 767.872655][T27414] delete_channel: no stack [ 768.822329][T27439] vlan1 (unregistering): left allmulticast mode [ 768.840112][T27439] veth0_vlan (unregistering): left allmulticast mode [ 769.733842][T27499] __nla_validate_parse: 15 callbacks suppressed [ 769.733872][T27499] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5722'. [ 769.798229][T27505] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5724'. [ 769.807844][T27505] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5724'. [ 770.457646][T27537] delete_channel: no stack [ 770.470079][T27530] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.5726'. [ 770.553166][T27530] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 770.649255][T27542] xt_bpf: check failed: parse error [ 771.102465][T27554] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5731'. [ 771.116650][T27554] netlink: 43 bytes leftover after parsing attributes in process `syz.2.5731'. [ 771.158634][T27554] netlink: 'syz.2.5731': attribute type 6 has an invalid length. [ 771.166869][T27554] netlink: 'syz.2.5731': attribute type 5 has an invalid length. [ 771.255188][T27554] netlink: 43 bytes leftover after parsing attributes in process `syz.2.5731'. [ 771.341412][T27559] tls_set_device_offload: netdev not found [ 771.436023][T27562] netlink: 'syz.4.5735': attribute type 14 has an invalid length. [ 771.807428][T27588] netlink: 'syz.0.5742': attribute type 13 has an invalid length. [ 771.826855][T27588] netlink: 'syz.0.5742': attribute type 58 has an invalid length. [ 771.849980][T27588] netlink: 152 bytes leftover after parsing attributes in process `syz.0.5742'. [ 772.083386][T27601] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 772.496400][T27630] netlink: 'syz.2.5756': attribute type 12 has an invalid length. [ 772.504541][T27630] netlink: 190972 bytes leftover after parsing attributes in process `syz.2.5756'. [ 772.530726][T27630] openvswitch: netlink: Key type 343 is out of range max 32 [ 772.640316][T27636] netlink: 'syz.3.5759': attribute type 30 has an invalid length. [ 772.683826][T27643] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5761'. [ 772.696213][T27636] bond19: option arp_missed_max: invalid value (0) [ 772.703743][T27636] bond19: option arp_missed_max: allowed values 1 - 255 [ 772.712490][T27636] bond19 (unregistering): Released all slaves [ 772.736833][T27597] gre0 speed is unknown, defaulting to 1000 [ 772.801106][T27634] netlink: 'syz.1.5758': attribute type 62 has an invalid length. [ 773.246026][T27670] bridge4: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 773.347537][T27672] tipc: Enabled bearer , priority 10 [ 774.347598][T27723] netlink: 'syz.3.5779': attribute type 8 has an invalid length. [ 774.951362][T27751] Bluetooth: hci3: Opcode 0x0401 failed: -22 [ 775.011052][T27755] netlink: 'syz.3.5790': attribute type 13 has an invalid length. [ 775.177863][T27748] bond6: option packets_per_slave: invalid value (18446744073709551615) [ 775.204199][T27748] bond6: option packets_per_slave: allowed values 0 - 65535 [ 775.256914][T27748] bond6 (unregistering): Released all slaves [ 775.358595][T27755] veth0_macvtap: left promiscuous mode [ 775.384985][T27755] macvtap0: entered allmulticast mode [ 775.406199][T27755] macvtap0: refused to change device tx_queue_len [ 775.516603][T27777] __nla_validate_parse: 2 callbacks suppressed [ 775.516626][T27777] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5795'. [ 775.565968][T27777] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5795'. [ 775.577496][ T7574] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 775.615744][ T7574] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 775.638808][ T7574] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 775.662647][ T7574] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 775.694957][T27786] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5799'. [ 775.963525][T27781] tipc: Resetting bearer [ 776.094241][T27781] hsr0: left allmulticast mode [ 776.102851][T27781] hsr_slave_1: left allmulticast mode [ 776.157939][T27794] vlan0: entered allmulticast mode [ 776.214680][T27809] x_tables: unsorted underflow at hook 2 [ 776.235216][T27796] bond6: (slave gretap1): making interface the new active one [ 776.271880][T27796] bond6: (slave gretap1): Enslaving as an active interface with an up link [ 776.323836][ T13] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 776.336703][T27816] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5806'. [ 776.346237][ T13] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 20004 - 0 [ 776.346276][ T13] netdevsim netdevsim3 netdevsim0: unset [1, 1] type 2 family 0 port 6081 - 0 [ 776.350928][ T13] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 776.379302][ T13] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 20004 - 0 [ 776.401671][ T13] netdevsim netdevsim3 netdevsim1: unset [1, 1] type 2 family 0 port 6081 - 0 [ 776.414401][ T13] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 776.426532][ T13] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 20004 - 0 [ 776.440885][ T13] netdevsim netdevsim3 netdevsim2: unset [1, 1] type 2 family 0 port 6081 - 0 [ 776.458256][ T13] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 776.488010][ T13] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 20004 - 0 [ 776.512538][ T13] netdevsim netdevsim3 netdevsim3: unset [1, 1] type 2 family 0 port 6081 - 0 [ 776.720115][T27832] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5810'. [ 776.741637][T27831] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5810'. [ 776.825268][T27830] openvswitch: netlink: Flow key attr not present in new flow. [ 776.960324][T27839] validate_nla: 3 callbacks suppressed [ 776.960347][T27839] netlink: 'syz.2.5813': attribute type 1 has an invalid length. [ 776.977801][T27843] atomic_op ffff88807b94e998 conn xmit_atomic 0000000000000000 [ 780.393282][T27865] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5818'. [ 780.446818][T27865] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5818'. [ 780.700474][T27885] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5824'. [ 780.746924][T27885] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5824'. [ 780.749440][T27887] nbd: couldn't find a device at index 0 [ 780.803334][T27885] geneve3: entered promiscuous mode [ 780.831056][T27885] geneve3: entered allmulticast mode [ 780.839263][ T7574] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 780.852170][ T7574] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 780.866940][ T7574] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 780.903033][ T7572] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 781.030159][T27899] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 781.082029][T27903] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 781.132462][T27904] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 781.786792][T27939] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5841'. [ 781.900194][T27942] netlink: 'syz.2.5840': attribute type 21 has an invalid length. [ 781.920535][T27942] netlink: 152 bytes leftover after parsing attributes in process `syz.2.5840'. [ 782.142643][T27952] netlink: 'syz.4.5844': attribute type 21 has an invalid length. [ 782.153702][T27952] IPv6: NLM_F_CREATE should be specified when creating new route [ 782.188362][T27945] macvlan3: entered promiscuous mode [ 782.223350][T27955] delete_channel: no stack [ 782.224888][T27945] macvlan3: entered allmulticast mode [ 782.262223][T27945] bond7: entered promiscuous mode [ 782.274927][T27945] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 782.347536][T27945] bond7: left promiscuous mode [ 782.373329][T27960] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 782.652597][T27972] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5853'. [ 782.662348][T27972] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5853'. [ 782.684151][T27970] netlink: 120 bytes leftover after parsing attributes in process `syz.4.5851'. [ 782.705686][T27970] netlink: 'syz.4.5851': attribute type 1 has an invalid length. [ 782.717187][T27970] netlink: 64 bytes leftover after parsing attributes in process `syz.4.5851'. [ 782.746729][T27975] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5854'. [ 782.793701][T27975] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5854'. [ 782.912183][T27983] netlink: 'syz.1.5857': attribute type 11 has an invalid length. [ 782.947707][T27988] netlink: 'syz.1.5857': attribute type 11 has an invalid length. [ 783.072151][T27992] pim6reg1: entered promiscuous mode [ 783.088689][T27992] pim6reg1: entered allmulticast mode [ 783.300792][T28005] netlink: 'syz.2.5864': attribute type 4 has an invalid length. [ 783.865817][T28040] ip6erspan0: entered promiscuous mode [ 784.393345][T28066] bond7: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 784.624323][ T7572] tipc: Subscription rejected, illegal request [ 784.924779][ T29] audit: type=1800 audit(1776474492.705:10): pid=28113 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.5898" name="memory.events" dev="tmpfs" ino=2375 res=0 errno=0 [ 785.019516][ T29] audit: type=1804 audit(1776474492.745:11): pid=28113 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.5898" name="/newroot/461/memory.events" dev="tmpfs" ino=2375 res=1 errno=0 [ 785.572511][T28157] IPv6: sit3: Disabled Multicast RS [ 785.579805][T28157] sit3: entered allmulticast mode [ 785.620347][T28159] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 785.873244][T28174] netlink: 'syz.4.5918': attribute type 9 has an invalid length. [ 785.882838][T28174] netlink: 'syz.4.5918': attribute type 6 has an invalid length. [ 786.500719][T28203] __nla_validate_parse: 14 callbacks suppressed [ 786.500745][T28203] netlink: 348 bytes leftover after parsing attributes in process `syz.4.5928'. [ 786.631593][T28215] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5931'. [ 786.658917][T28217] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5932'. [ 786.715018][T28217] netlink: 92 bytes leftover after parsing attributes in process `syz.4.5932'. [ 786.737947][T28217] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5932'. [ 786.770913][T28221] netlink: 7 bytes leftover after parsing attributes in process `syz.1.5934'. [ 786.817721][T28221] veth0_to_batadv: entered promiscuous mode [ 786.835756][T28228] tipc: Enabling of bearer rejected, already enabled [ 786.974995][T28233] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 787.025394][T28239] ip6tnl0: entered promiscuous mode [ 787.037308][T28239] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5937'. [ 787.093061][T28233] xt_hashlimit: invalid interval [ 787.210467][T28250] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 787.334632][T28252] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5944'. [ 787.415522][T28257] netlink: 184 bytes leftover after parsing attributes in process `syz.1.5946'. [ 787.513181][T28260] sctp: [Deprecated]: syz.1.5946 (pid 28260) Use of struct sctp_assoc_value in delayed_ack socket option. [ 787.513181][T28260] Use struct sctp_sack_info instead [ 788.248396][T28282] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5953'. [ 788.362371][T28291] netlink: 'syz.2.5957': attribute type 1 has an invalid length. [ 788.427066][T28291] 8021q: adding VLAN 0 to HW filter on device bond8 [ 788.941526][T28322] lo: left promiscuous mode [ 788.960559][T28322] tunl0: left promiscuous mode [ 788.974031][T28322] gre0: left promiscuous mode [ 788.997727][T28322] gretap0: left promiscuous mode [ 789.053063][T28322] ip_vti0: left promiscuous mode [ 789.093902][T28322] sit0: left promiscuous mode [ 789.165253][T28322] 8021q: adding VLAN 0 to HW filter on device team0 [ 789.205636][T28322] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 789.551770][T28361] policy can only be matched on NF_INET_PRE_ROUTING [ 789.551794][T28361] unable to load match [ 789.642242][T28364] syzkaller0: entered promiscuous mode [ 789.662849][T28364] syzkaller0: entered allmulticast mode [ 789.871558][T28335] gre0 speed is unknown, defaulting to 1000 [ 790.119727][T28374] netlink: 'syz.0.5981': attribute type 24 has an invalid length. [ 790.536705][T28358] gre0 speed is unknown, defaulting to 1000 [ 791.827018][T28415] syzkaller1: tun_chr_ioctl cmd 35312 [ 791.872162][T28415] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 791.881800][T28415] syzkaller1: linktype set to 823 [ 792.124836][T28420] netlink: 'syz.0.5995': attribute type 1 has an invalid length. [ 792.135341][T28420] __nla_validate_parse: 15 callbacks suppressed [ 792.135362][T28420] netlink: 96 bytes leftover after parsing attributes in process `syz.0.5995'. [ 792.164124][T28420] netlink: 'syz.0.5995': attribute type 8 has an invalid length. [ 792.173133][T28420] netlink: 'syz.0.5995': attribute type 8 has an invalid length. [ 792.183023][T28420] netlink: 610 bytes leftover after parsing attributes in process `syz.0.5995'. [ 792.227713][T28419] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 792.240655][T28424] netlink: 'syz.4.5996': attribute type 1 has an invalid length. [ 792.252297][T28424] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 793.313665][T28453] rdma_rxe: rxe_newlink: failed to add gre0 [ 793.323632][T28442] bond9: option mode: invalid value (133) [ 793.339140][T28442] bond9 (unregistering): Released all slaves [ 793.752275][T28462] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6007'. [ 793.774743][T28462] netlink: 'syz.4.6007': attribute type 11 has an invalid length. [ 793.783967][T28462] netlink: 224 bytes leftover after parsing attributes in process `syz.4.6007'. [ 793.798173][T28462] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6007'. [ 793.810075][T28464] netlink: 'syz.4.6007': attribute type 11 has an invalid length. [ 793.823807][T28464] netlink: 224 bytes leftover after parsing attributes in process `syz.4.6007'. [ 793.967445][T28469] xt_cluster: you have exceeded the maximum number of cluster nodes (2048 > 32) [ 794.147880][T28474] syzkaller0: entered promiscuous mode [ 794.162267][T28474] syzkaller0: entered allmulticast mode [ 794.212911][T28474] netlink: 72 bytes leftover after parsing attributes in process `syz.0.6010'. [ 794.272397][T28485] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6013'. [ 794.292983][T28485] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6013'. [ 794.623227][T28493] syzkaller0: entered promiscuous mode [ 794.631958][T28493] syzkaller0: entered allmulticast mode [ 794.934599][T28510] netlink: 'syz.3.6024': attribute type 1 has an invalid length. [ 794.944055][T28510] netlink: 224 bytes leftover after parsing attributes in process `syz.3.6024'. [ 795.003626][T28514] ipt_REJECT: TCP_RESET invalid for non-tcp [ 795.133524][T28523] openvswitch: netlink: IPv4 tun info is not correct [ 795.426209][T28542] netlink: 'syz.2.6030': attribute type 8 has an invalid length. [ 795.919385][T28576] openvswitch: netlink: IP tunnel dst address not specified [ 795.944069][T28576] netlink: 'syz.1.6040': attribute type 8 has an invalid length. [ 796.336348][T28590] netlink: 'syz.1.6045': attribute type 1 has an invalid length. [ 796.455690][T21604] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 796.473691][T21604] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 796.483242][T21604] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 796.493500][T21604] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 796.502137][T21604] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 796.557450][ T5828] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 796.573382][ T5828] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 796.581181][ T5828] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 796.603886][ T5828] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 796.612495][ T5828] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 796.924631][T28601] sctp: [Deprecated]: syz.2.6048 (pid 28601) Use of int in max_burst socket option. [ 796.924631][T28601] Use struct sctp_assoc_value instead [ 797.007436][T28601] IPv6: sit2: Disabled Multicast RS [ 797.261817][T28616] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 797.262683][T28620] Bluetooth: MGMT ver 1.23 [ 797.434557][T28629] __nla_validate_parse: 3 callbacks suppressed [ 797.434578][T28629] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6056'. [ 797.461417][T28629] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6056'. [ 797.476100][T28592] gre0 speed is unknown, defaulting to 1000 [ 797.487682][T28629] netlink: 'syz.1.6056': attribute type 18 has an invalid length. [ 797.518754][T28629] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6056'. [ 797.549499][T28629] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6056'. [ 797.569354][T28629] netlink: 'syz.1.6056': attribute type 18 has an invalid length. [ 797.585944][T28629] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6056'. [ 797.912422][T28645] netlink: 'syz.2.6061': attribute type 12 has an invalid length. [ 797.935024][T28645] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6061'. [ 797.951635][T28645] netlink: 'syz.2.6061': attribute type 12 has an invalid length. [ 797.974599][T28645] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6061'. [ 798.052781][T28654] netlink: 288 bytes leftover after parsing attributes in process `syz.0.6065'. [ 798.070157][T28656] veth1_macvtap: left promiscuous mode [ 798.231119][T28661] netlink: 'syz.2.6068': attribute type 1 has an invalid length. [ 798.251799][T28661] netlink: 184 bytes leftover after parsing attributes in process `syz.2.6068'. [ 798.279139][T28661] netlink: 'syz.2.6068': attribute type 1 has an invalid length. [ 798.308891][T28661] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6068'. [ 798.629146][ T5828] Bluetooth: hci0: command tx timeout [ 798.809548][T28592] chnl_net:caif_netlink_parms(): no params data found [ 798.900836][T28691] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 799.073015][T28695] xt_CT: No such helper "snmp_trap" [ 799.172667][T28592] bridge0: port 1(bridge_slave_0) entered blocking state [ 799.209470][T28592] bridge0: port 1(bridge_slave_0) entered disabled state [ 799.223319][T28592] bridge_slave_0: entered allmulticast mode [ 799.234820][T28592] bridge_slave_0: entered promiscuous mode [ 799.245594][T28592] bridge0: port 2(bridge_slave_1) entered blocking state [ 799.253931][T28592] bridge0: port 2(bridge_slave_1) entered disabled state [ 799.263129][T28592] bridge_slave_1: entered allmulticast mode [ 799.273354][T28592] bridge_slave_1: entered promiscuous mode [ 799.349503][T28716] syzkaller0: left promiscuous mode [ 799.365241][T28716] syzkaller0: left allmulticast mode [ 799.385310][T28592] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 799.413550][T28592] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 799.572715][T28592] team0: Port device team_slave_0 added [ 799.615275][T28592] team0: Port device team_slave_1 added [ 799.752270][T28592] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 799.760345][T28592] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 799.787804][T28592] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 799.804063][T28592] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 799.858639][T28592] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 799.898128][T28592] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 800.112834][T28592] hsr_slave_0: entered promiscuous mode [ 800.139996][T28592] hsr_slave_1: entered promiscuous mode [ 800.146775][T28592] debugfs: 'hsr0' already exists in 'hsr' [ 800.169814][T28592] Cannot create hsr debugfs directory [ 800.234788][T28758] sch_fq: defrate 0 ignored. [ 800.656117][T28784] : entered promiscuous mode [ 800.709195][ T5828] Bluetooth: hci0: command tx timeout [ 800.871385][T28592] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 801.184885][T28794] tipc: Resetting bearer [ 801.464275][T28794] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 801.504904][T28794] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 801.862216][T28794] veth0_macvtap: left allmulticast mode [ 801.881999][T28794] batman_adv: batadv0: Interface deactivated: ipvlan2 [ 802.069343][ T7572] wlan0: Trigger new scan to find an IBSS to join [ 802.147315][T28804] tap0: tun_chr_ioctl cmd 1074025672 [ 802.159836][T28804] tap0: ignored: set checksum disabled [ 802.187506][T28807] lo: entered allmulticast mode [ 802.203017][T28807] lo: left allmulticast mode [ 802.213711][ T7574] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 802.236299][ T7574] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 802.264376][ T7574] netdevsim netdevsim2 netdevsim0: unset [1, 1] type 2 family 0 port 19999 - 0 [ 802.294837][ T7574] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 802.314333][ T7574] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 802.340834][ T7574] netdevsim netdevsim2 netdevsim1: unset [1, 1] type 2 family 0 port 19999 - 0 [ 802.420849][T28592] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 802.540901][ T7574] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 802.573958][ T7574] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 802.587338][ T7574] netdevsim netdevsim2 netdevsim2: unset [1, 1] type 2 family 0 port 19999 - 0 [ 802.600610][ T7574] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 802.610960][ T7574] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 802.623585][ T7574] netdevsim netdevsim2 netdevsim3: unset [1, 1] type 2 family 0 port 19999 - 0 [ 802.707561][T28592] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 802.789627][ T5828] Bluetooth: hci0: command tx timeout [ 803.074969][T28592] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 803.415119][T28832] __nla_validate_parse: 7 callbacks suppressed [ 803.415142][T28832] netlink: 44 bytes leftover after parsing attributes in process `syz.4.6109'. [ 803.492561][T28864] netlink: 'syz.2.6115': attribute type 3 has an invalid length. [ 803.784563][T28592] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 803.809030][T28877] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6119'. [ 803.821201][T28592] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 803.842172][T28877] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6119'. [ 803.849848][T28592] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 803.901175][T28592] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 803.951560][T28592] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 804.001388][T28592] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 804.027306][T28592] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 804.056436][T28592] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 804.145189][T28892] netlink: 'syz.1.6122': attribute type 2 has an invalid length. [ 804.186199][T28904] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6123'. [ 804.238243][T28914] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6123'. [ 804.253709][T28909] netlink: 108 bytes leftover after parsing attributes in process `syz.4.6124'. [ 804.288888][T28909] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6124'. [ 804.336858][T28909] macsec1: entered promiscuous mode [ 804.356064][T28909] macsec1: entered allmulticast mode [ 804.376802][T28909] bridge0: entered allmulticast mode [ 804.400645][T28909] bridge0: port 3(macsec1) entered blocking state [ 804.425822][T28909] bridge0: port 3(macsec1) entered disabled state [ 804.453036][T28909] bridge0: left allmulticast mode [ 804.656589][T28592] 8021q: adding VLAN 0 to HW filter on device bond0 [ 804.720993][T28592] 8021q: adding VLAN 0 to HW filter on device team0 [ 804.739958][ T7574] bridge0: port 1(bridge_slave_0) entered blocking state [ 804.747261][ T7574] bridge0: port 1(bridge_slave_0) entered forwarding state [ 804.777500][ T7572] bridge0: port 2(bridge_slave_1) entered blocking state [ 804.784905][ T7572] bridge0: port 2(bridge_slave_1) entered forwarding state [ 804.869193][ T5828] Bluetooth: hci0: command tx timeout [ 805.029330][ T7566] wlan0: Trigger new scan to find an IBSS to join [ 805.383773][T28592] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 805.454614][T28592] veth0_vlan: entered promiscuous mode [ 805.481080][T28592] veth1_vlan: entered promiscuous mode [ 805.581661][T28592] veth0_macvtap: entered promiscuous mode [ 805.618227][T28592] veth1_macvtap: entered promiscuous mode [ 805.696911][T28592] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 805.733360][T28592] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 805.753431][ T7566] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 805.770739][ T7566] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 805.781786][ T7566] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 805.794535][ T7566] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 805.940011][ T7574] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 807.006271][T28892] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 807.067985][T28890] delete_channel: no stack [ 807.123282][T28974] netlink: 'syz.0.6136': attribute type 10 has an invalid length. [ 807.223604][ T7574] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 807.233839][ T7574] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 807.323401][ T7566] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 807.363870][ T7566] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 807.388876][T28981] netlink: 'syz.0.6138': attribute type 1 has an invalid length. [ 807.423036][T28981] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6138'. [ 807.508314][T28997] netlink: 'syz.2.6141': attribute type 1 has an invalid length. [ 807.580572][T28997] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 807.637520][T29002] netlink: 'syz.3.6042': attribute type 2 has an invalid length. [ 807.855141][T29008] netlink: 48 bytes leftover after parsing attributes in process `syz.2.6143'. [ 807.992130][T21604] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 808.007708][T21604] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 808.016662][T21604] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 808.027806][T21604] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 808.037491][T21604] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 808.045800][T29012] bond1: option resend_igmp: invalid value (32767) [ 808.053224][T29012] bond1: option resend_igmp: allowed values 0 - 255 [ 808.094014][T29012] bond1 (unregistering): Released all slaves [ 808.220161][T29024] netlink: 112 bytes leftover after parsing attributes in process `syz.4.6148'. [ 808.268834][T29018] netlink: 'syz.1.6146': attribute type 9 has an invalid length. [ 808.301848][T29018] netlink: 'syz.1.6146': attribute type 19 has an invalid length. [ 808.301913][T29025] syzkaller0: entered promiscuous mode [ 808.358667][T29025] syzkaller0: entered allmulticast mode [ 808.757803][T29041] bridge6: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 808.876684][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.887310][ T1300] clip:clip_start_xmit: skb_dst(skb) == NULL [ 808.895642][T29048] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6157'. [ 808.924349][T29049] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6156'. [ 808.939123][T29048] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6157'. [ 808.984147][T29048] netlink: 'syz.2.6157': attribute type 15 has an invalid length. [ 809.036824][T29015] gre0 speed is unknown, defaulting to 1000 [ 809.067169][T29055] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6159'. [ 809.067250][T29048] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6157'. [ 809.067274][T29048] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6157'. [ 809.105967][ T13] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 256 - 0 [ 809.154933][ T13] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 256 - 0 [ 809.179389][T29048] netlink: 'syz.2.6157': attribute type 15 has an invalid length. [ 809.236893][ T13] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 256 - 0 [ 809.249914][ T13] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 256 - 0 [ 809.378002][T29068] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 809.540543][T29068] xt_CT: No such helper "pptp" [ 809.626375][T29077] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6163'. [ 809.639447][T29079] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_team, syncid = 4, id = 0 [ 809.674111][T29081] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6164'. [ 809.683898][T29081] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6164'. [ 809.812833][T29085] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6166'. [ 809.870678][T29085] bond9: entered promiscuous mode [ 809.879025][T29085] 8021q: adding VLAN 0 to HW filter on device bond9 [ 809.957138][T29089] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 809.961366][T29085] 8021q: adding VLAN 0 to HW filter on device bond9 [ 809.972702][T29089] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 809.974798][T29085] bond9: (slave sit3): The slave device specified does not support setting the MAC address [ 809.994156][T29085] bond9: (slave sit3): Error -95 calling set_mac_address [ 810.149467][ T5828] Bluetooth: hci5: command tx timeout [ 810.226259][T29094] tipc: Enabled bearer , priority 0 [ 810.264758][T29102] netlink: 'syz.3.6172': attribute type 21 has an invalid length. [ 810.375770][T29109] netlink: 'syz.2.6173': attribute type 12 has an invalid length. [ 810.415762][T29094] syzkaller0: entered promiscuous mode [ 810.422559][T29094] syzkaller0: entered allmulticast mode [ 810.431019][T29094] tipc: Resetting bearer [ 810.562510][ T7570] tipc: Resetting bearer [ 810.586495][T29093] tipc: Resetting bearer [ 812.235028][ T5828] Bluetooth: hci5: command tx timeout [ 813.945013][T29093] tipc: Disabling bearer [ 814.026991][T29128] tipc: Resetting bearer [ 814.072028][T29128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 814.108698][T29128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 814.126120][T29128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan2 [ 814.137342][T29128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 814.159065][T29128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 814.171076][T29128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 814.262288][T29140] __nla_validate_parse: 4 callbacks suppressed [ 814.262309][T29140] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6182'. [ 814.264119][T29015] chnl_net:caif_netlink_parms(): no params data found [ 814.309014][ T5828] Bluetooth: hci5: command tx timeout [ 814.460685][T29147] ip6gre3: entered promiscuous mode [ 814.478224][T29147] ip6gre3: entered allmulticast mode [ 814.513146][T29157] netlink: 36 bytes leftover after parsing attributes in process `syz.3.6186'. [ 814.515619][T29158] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 814.577992][ T13] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 814.591452][ T13] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 814.602499][T26986] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 814.721702][T29015] bridge0: port 1(bridge_slave_0) entered blocking state [ 814.732591][T29015] bridge0: port 1(bridge_slave_0) entered disabled state [ 814.740106][T26981] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 814.757804][T29015] bridge_slave_0: entered allmulticast mode [ 814.766944][T29015] bridge_slave_0: entered promiscuous mode [ 814.777350][T29015] bridge0: port 2(bridge_slave_1) entered blocking state [ 814.785088][T29015] bridge0: port 2(bridge_slave_1) entered disabled state [ 814.793429][T29015] bridge_slave_1: entered allmulticast mode [ 814.801764][T29015] bridge_slave_1: entered promiscuous mode [ 814.828884][T26986] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 814.940408][T29015] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 814.974014][T29015] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 815.081419][T29015] team0: Port device team_slave_0 added [ 815.108022][T29180] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6194'. [ 815.135079][T29015] team0: Port device team_slave_1 added [ 815.145618][T29183] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6195'. [ 815.233381][T29015] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 815.243086][T29015] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 815.271668][T29015] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 815.310537][T29015] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 815.327777][T29015] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 815.376318][T29015] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 815.551182][T29015] hsr_slave_0: entered promiscuous mode [ 815.569780][T29015] hsr_slave_1: entered promiscuous mode [ 815.590922][T29015] debugfs: 'hsr0' already exists in 'hsr' [ 815.598798][T29015] Cannot create hsr debugfs directory [ 816.334175][T29212] netlink: 'syz.4.6205': attribute type 1 has an invalid length. [ 816.388694][ T5828] Bluetooth: hci5: command tx timeout [ 816.491554][T29212] bond7: entered promiscuous mode [ 816.504430][T29212] 8021q: adding VLAN 0 to HW filter on device bond7 [ 816.534190][T29213] bond7: (slave bridge11): making interface the new active one [ 816.545425][T29213] bridge11: entered promiscuous mode [ 816.554359][T29213] bond7: (slave bridge11): Enslaving as an active interface with an up link [ 816.875333][T29224] netlink: 'syz.1.6209': attribute type 1 has an invalid length. [ 817.068387][T29227] bond9: (slave vxcan1): The slave device specified does not support setting the MAC address [ 817.112896][T29227] bond9: (slave vxcan1): Error -95 calling set_mac_address [ 817.286318][T29246] netlink: 76 bytes leftover after parsing attributes in process `syz.2.6214'. [ 817.309798][T29242] syzkaller0: entered promiscuous mode [ 817.320373][T29242] syzkaller0: entered allmulticast mode [ 817.332301][T29015] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 817.387643][T29015] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 817.502398][T29015] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 817.534228][T29015] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 817.560782][T29015] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 817.603174][T29015] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 817.630666][T29015] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 817.670573][T29015] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 817.921491][T29278] tipc: Enabling of bearer rejected, already enabled [ 817.977433][T29280] nbd: must specify a device to reconfigure [ 818.101513][T29289] netlink: 'syz.2.6228': attribute type 1 has an invalid length. [ 818.233668][T29289] 8021q: adding VLAN 0 to HW filter on device bond10 [ 818.293407][T29290] bond10: (slave veth7): Enslaving as an active interface with a down link [ 818.337824][T29296] bond10: (slave veth9): Enslaving as an active interface with a down link [ 818.392238][T29015] 8021q: adding VLAN 0 to HW filter on device bond0 [ 818.423560][T29015] 8021q: adding VLAN 0 to HW filter on device team0 [ 818.439824][ T6551] bridge0: port 1(bridge_slave_0) entered blocking state [ 818.447020][ T6551] bridge0: port 1(bridge_slave_0) entered forwarding state [ 818.467982][ T7570] bridge0: port 2(bridge_slave_1) entered blocking state [ 818.475251][ T7570] bridge0: port 2(bridge_slave_1) entered forwarding state [ 818.788743][ C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 818.864190][T29320] vlan1: entered allmulticast mode [ 818.885571][T29320] bond0: entered allmulticast mode [ 818.891499][T29320] bond_slave_0: entered allmulticast mode [ 818.897754][T29320] bond_slave_1: entered allmulticast mode [ 818.944498][T29015] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 819.068267][T29015] veth0_vlan: entered promiscuous mode [ 819.084380][T29015] veth1_vlan: entered promiscuous mode [ 819.170674][T29015] veth0_macvtap: entered promiscuous mode [ 819.185810][T29015] veth1_macvtap: entered promiscuous mode [ 819.212121][T29015] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 819.229931][T29015] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 819.254010][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 819.263868][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 819.287977][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 819.298366][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 820.912533][T29280] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 821.080198][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 821.095799][T29333] IPv6: sit3: Disabled Multicast RS [ 821.111108][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 821.277847][T29343] netlink: 84 bytes leftover after parsing attributes in process `syz.1.6240'. [ 821.297706][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 821.325712][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 821.357591][T29349] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6242'. [ 821.488918][T29351] IPv6: NLM_F_CREATE should be specified when creating new route [ 821.499508][T29351] netlink: 'syz.3.6243': attribute type 1 has an invalid length. [ 821.802491][T29368] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6142'. [ 821.905076][T29376] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6249'. [ 822.096494][T29387] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6253'. [ 822.124864][T29389] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6253'. [ 822.161471][T21604] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 822.176596][T21604] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 822.186367][T21604] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 822.201794][T21604] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 822.213684][T21604] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 822.486105][T29403] netlink: 268 bytes leftover after parsing attributes in process `syz.0.6256'. [ 822.521336][T29403] netlink: 232 bytes leftover after parsing attributes in process `syz.0.6256'. [ 822.577514][T29406] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6256'. [ 822.917601][T29413] netlink: 'syz.2.6259': attribute type 1 has an invalid length. [ 822.947967][T29413] netlink: 'syz.2.6259': attribute type 1 has an invalid length. [ 822.960001][ T13] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 823.002838][T29417] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 823.112731][T29388] gre0 speed is unknown, defaulting to 1000 [ 823.244780][T29428] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6264'. [ 823.273494][ T13] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 823.507375][T29438] netlink: 'syz.1.6267': attribute type 1 has an invalid length. [ 823.522193][T29438] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 823.537834][ T13] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 823.688254][T29440] 8021q: adding VLAN 0 to HW filter on device bond11 [ 823.706295][T29440] bridge0: port 1(bond11) entered blocking state [ 823.731674][T29440] bridge0: port 1(bond11) entered disabled state [ 823.758801][T29440] bond11: entered allmulticast mode [ 823.779335][T29440] bond11: entered promiscuous mode [ 823.844084][ T13] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 823.930470][T29456] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 824.064926][T29458] SET target dimension over the limit! [ 824.309257][T21604] Bluetooth: hci2: command tx timeout [ 824.751431][ T13] bridge0: port 1(batadv0) entered disabled state [ 824.819814][ T13] bridge_slave_1: left promiscuous mode [ 824.835710][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 824.912112][ T13] bond4: left allmulticast mode [ 824.917047][ T13] bond4: left promiscuous mode [ 824.951006][ T13] bridge5: port 1(bond4) entered disabled state [ 825.084433][ T13] veth3: left allmulticast mode [ 825.126110][ T13] veth3: left promiscuous mode [ 825.141588][ T13] bridge7: port 1(veth3) entered disabled state [ 825.527937][ T13] bond6 (unregistering): (slave ip6gre2): Releasing backup interface [ 825.791805][ T13] bond5 (unregistering): (slave gretap2): Releasing active interface [ 826.043216][ T13] bond2 (unregistering): (slave bridge4): Releasing backup interface [ 826.051561][ T13] bridge4 (unregistering): left promiscuous mode [ 826.213599][ T13] team0: Port device bridge8 removed [ 826.362987][ T13] bond7 (unregistering): (slave bridge11): Releasing backup interface [ 826.371537][ T13] bridge11 (unregistering): left promiscuous mode [ 826.389261][T21604] Bluetooth: hci2: command tx timeout [ 826.405640][ T13] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 826.415652][ T13] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 826.425539][ T13] .` (unregistering): Released all slaves [ 826.435890][ T13] bond1 (unregistering): Released all slaves [ 826.453044][ T13] bond3 (unregistering): Released all slaves [ 826.467993][ T13] bond2 (unregistering): Released all slaves [ 826.485240][ T13] bond4 (unregistering): Released all slaves [ 826.508010][ T13] bond5 (unregistering): Released all slaves [ 826.522765][ T13] bond6 (unregistering): Released all slaves [ 826.545270][ T13] bond0 (unregistering): Released all slaves [ 826.563624][ T13] bond7 (unregistering): Released all slaves [ 826.591114][T29506] __nla_validate_parse: 7 callbacks suppressed [ 826.591132][T29506] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6282'. [ 826.781181][ T5486] 8021q: adding VLAN 0 to HW filter on device eth1 [ 826.788674][ C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 826.818236][T29536] netlink: 'syz.2.6287': attribute type 1 has an invalid length. [ 826.870382][T29539] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6287'. [ 826.947854][ T13] tipc: Disabling bearer [ 826.972680][ T13] tipc: Left network mode [ 826.973962][T29536] workqueue: Failed to create a rescuer kthread for wq "bond12": -EINTR [ 826.983712][T29543] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6288'. [ 827.220107][T29555] netlink: 'syz.2.6290': attribute type 3 has an invalid length. [ 827.230447][T29556] netlink: 176 bytes leftover after parsing attributes in process `syz.3.6291'. [ 827.296677][T29556] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6291'. [ 827.322077][T29555] netlink: 224 bytes leftover after parsing attributes in process `syz.2.6290'. [ 827.364291][T29388] chnl_net:caif_netlink_parms(): no params data found [ 827.506088][T29556] bond1: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 827.559435][T29572] xt_l2tp: v2 tid > 0xffff: 1114244 [ 827.600400][T29572] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6294'. [ 827.675026][T29572] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6294'. [ 827.964616][T29588] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6299'. [ 828.156098][T29595] netlink: 'syz.2.6301': attribute type 1 has an invalid length. [ 828.390939][T29606] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6302'. [ 828.470970][T21604] Bluetooth: hci2: command tx timeout [ 828.607322][T29608] ip6tnl3: entered promiscuous mode [ 828.629048][T29388] bridge0: port 1(bridge_slave_0) entered blocking state [ 828.648197][T29388] bridge0: port 1(bridge_slave_0) entered disabled state [ 828.675629][T29388] bridge_slave_0: entered allmulticast mode [ 828.697931][T29388] bridge_slave_0: entered promiscuous mode [ 828.857298][T29626] netlink: 'syz.1.6304': attribute type 1 has an invalid length. [ 828.948233][T29388] bridge0: port 2(bridge_slave_1) entered blocking state [ 828.988648][T29388] bridge0: port 2(bridge_slave_1) entered disabled state [ 829.013672][T29388] bridge_slave_1: entered allmulticast mode [ 829.047113][T29388] bridge_slave_1: entered promiscuous mode [ 829.149151][T29633] netlink: 'syz.0.6306': attribute type 21 has an invalid length. [ 829.196010][T29619] syzkaller0: entered promiscuous mode [ 829.202815][T29619] syzkaller0: entered allmulticast mode [ 829.212931][ T5486] 8021q: adding VLAN 0 to HW filter on device eth2 [ 829.243769][T29388] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 829.364235][T29388] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 829.600934][T29388] team0: Port device team_slave_0 added [ 829.633504][T29388] team0: Port device team_slave_1 added [ 829.638020][T29652] netlink: 'syz.1.6311': attribute type 1 has an invalid length. [ 829.886652][T29388] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 829.910402][T29388] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 830.001449][T29388] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 830.152763][T29655] syzkaller0: entered promiscuous mode [ 830.162068][T29655] syzkaller0: entered allmulticast mode [ 830.183806][T29388] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 830.196922][T29388] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 830.224373][T29388] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 830.257961][T29599] gre0 speed is unknown, defaulting to 1000 [ 830.549575][T21604] Bluetooth: hci2: command tx timeout [ 833.929339][ T5486] 8021q: adding VLAN 0 to HW filter on device eth3 [ 834.093896][T29388] hsr_slave_0: entered promiscuous mode [ 834.112370][T29693] netlink: 'syz.3.6316': attribute type 1 has an invalid length. [ 834.125785][T29388] hsr_slave_1: entered promiscuous mode [ 834.133346][T29693] __nla_validate_parse: 2 callbacks suppressed [ 834.133367][T29693] netlink: 224 bytes leftover after parsing attributes in process `syz.3.6316'. [ 834.154706][T29388] debugfs: 'hsr0' already exists in 'hsr' [ 834.163139][T29388] Cannot create hsr debugfs directory [ 834.592305][T29707] netlink: 'syz.0.6321': attribute type 21 has an invalid length. [ 834.624205][T29707] netlink: 128 bytes leftover after parsing attributes in process `syz.0.6321'. [ 834.729984][T29707] netlink: 3 bytes leftover after parsing attributes in process `syz.0.6321'. [ 835.047872][T29722] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 835.055317][T29722] IPv6: NLM_F_CREATE should be set when creating new route [ 835.075578][T29715] openvswitch: netlink: Key type 30 is not supported [ 835.101371][T29722] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6324'. [ 835.207669][T29731] sock: sock_timestamping_bind_phc: sock not bind to device [ 835.302330][ T13] hsr_slave_0: left promiscuous mode [ 835.315106][ T13] hsr_slave_1: left promiscuous mode [ 835.327283][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 835.349944][ T13] batman_adv: batadv0: Removing interface: dummy0 [ 835.362874][T29737] sctp: [Deprecated]: syz.0.6327 (pid 29737) Use of int in maxseg socket option. [ 835.362874][T29737] Use struct sctp_assoc_value instead [ 835.397077][ T13] pim6reg (unregistering): left allmulticast mode [ 835.644737][ T13] team0 (unregistering): Port device team_slave_1 removed [ 835.670338][ T13] team0 (unregistering): Port device team_slave_0 removed [ 835.842560][ T5486] 8021q: adding VLAN 0 to HW filter on device eth4 [ 836.023031][T29745] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6329'. [ 836.275018][T29743] bond10: entered promiscuous mode [ 836.298516][T29743] bond10: entered allmulticast mode [ 836.304193][T29743] 8021q: adding VLAN 0 to HW filter on device bond10 [ 836.531072][T29743] bond11: entered promiscuous mode [ 836.565331][T29743] bond11: entered allmulticast mode [ 836.581907][T29743] 8021q: adding VLAN 0 to HW filter on device bond11 [ 836.887148][T29743] workqueue: Failed to create a rescuer kthread for wq "bond12": -EINTR [ 837.792372][ T13] IPVS: stop unused estimator thread 0... [ 838.139380][T29807] netlink: 'syz.3.6337': attribute type 1 has an invalid length. [ 838.244088][T29814] IPVS: set_ctl: invalid protocol: 50 0.0.0.0:20001 [ 838.318688][T29807] 8021q: adding VLAN 0 to HW filter on device bond2 [ 838.722336][T29827] netlink: 'syz.2.6341': attribute type 16 has an invalid length. [ 838.740372][T29827] netlink: 'syz.2.6341': attribute type 17 has an invalid length. [ 838.793506][T29827] gre0: left allmulticast mode [ 838.922535][T29827] 8021q: adding VLAN 0 to HW filter on device bond0 [ 838.944232][T29827] tipc: Resetting bearer [ 838.961487][T29827] tipc: Resetting bearer [ 838.978010][T29827] 8021q: adding VLAN 0 to HW filter on device team0 [ 839.004645][T29827] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 839.045816][T29847] netlink: 'syz.3.6346': attribute type 1 has an invalid length. [ 839.126446][T29847] bond3: entered promiscuous mode [ 839.145268][T29853] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6347'. [ 839.154599][T29847] bond3: entered allmulticast mode [ 839.169870][T29853] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6347'. [ 839.186864][T29847] 8021q: adding VLAN 0 to HW filter on device bond3 [ 839.199019][T29388] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 839.213444][T29858] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6348'. [ 839.234970][T29388] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 839.255535][T29388] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 839.292112][T29388] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 839.312935][T29388] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 839.344788][T29388] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 839.365992][T29388] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 839.396509][T29388] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 839.587033][T29875] netlink: 256 bytes leftover after parsing attributes in process `syz.1.6351'. [ 839.791013][T29388] 8021q: adding VLAN 0 to HW filter on device bond0 [ 839.893922][T29388] 8021q: adding VLAN 0 to HW filter on device team0 [ 839.950110][ T7570] bridge0: port 1(bridge_slave_0) entered blocking state [ 839.957362][ T7570] bridge0: port 1(bridge_slave_0) entered forwarding state [ 840.001854][T29896] netlink: 84 bytes leftover after parsing attributes in process `syz.2.6355'. [ 840.064505][ T7572] bridge0: port 2(bridge_slave_1) entered blocking state [ 840.071850][ T7572] bridge0: port 2(bridge_slave_1) entered forwarding state [ 840.907589][T29388] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 841.121860][T29958] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6367'. [ 841.146139][T29958] netlink: 'syz.2.6367': attribute type 5 has an invalid length. [ 841.166321][T29958] netlink: 140 bytes leftover after parsing attributes in process `syz.2.6367'. [ 841.202859][T29954] dvmrp8: entered allmulticast mode [ 841.412632][T29894] gre0 speed is unknown, defaulting to 1000 [ 841.638040][T29978] netlink: 36 bytes leftover after parsing attributes in process `syz.3.6372'. [ 841.890223][T29388] veth0_vlan: entered promiscuous mode [ 841.903732][T29983] netlink: 224 bytes leftover after parsing attributes in process `syz.2.6373'. [ 841.929635][T29388] veth1_vlan: entered promiscuous mode [ 842.045591][T29388] veth0_macvtap: entered promiscuous mode [ 842.095199][T29388] veth1_macvtap: entered promiscuous mode [ 842.156534][T29388] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 842.213605][T29388] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 842.281788][ T7566] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 842.315601][ T6551] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 842.329092][T30000] netlink: 'syz.1.6378': attribute type 1 has an invalid length. [ 842.369636][T30000] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 842.399657][T29996] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6376'. [ 842.464980][ T6551] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 842.501619][ T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 842.745840][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 842.794854][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 842.942725][ T7572] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 842.973561][ T7572] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 843.269117][T30036] netlink: 'syz.2.6384': attribute type 10 has an invalid length. [ 843.428650][ C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 843.759638][ T5828] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 843.786008][ T5828] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 843.801186][ T5828] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 843.813227][ T5828] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 843.824023][ T5828] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 844.485249][T30065] netlink: 'syz.4.6391': attribute type 7 has an invalid length. [ 844.497918][T30070] mac80211_hwsim hwsim50 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 844.917862][ T7572] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 844.981984][ T7572] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 845.016019][ T7572] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 845.226647][T30088] sch_tbf: peakrate 5 is lower than or equals to rate 16783679728848008391 ! [ 845.515365][ T7572] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 845.533096][ T7572] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 845.543713][ T7572] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 845.669969][T30106] bridge_slave_0: left allmulticast mode [ 845.699770][T30106] bridge_slave_0: left promiscuous mode [ 845.717866][T30106] bridge0: port 1(bridge_slave_0) entered disabled state [ 845.778303][T30106] bridge_slave_1: left allmulticast mode [ 845.801067][T30106] bridge_slave_1: left promiscuous mode [ 845.807112][T30106] bridge0: port 2(bridge_slave_1) entered disabled state [ 845.825079][T30115] __nla_validate_parse: 1 callbacks suppressed [ 845.825100][T30115] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6400'. [ 845.844080][T30115] openvswitch: netlink: Flow key attr not present in new flow. [ 845.881905][T30106] bond0: (slave bond_slave_0): Releasing backup interface [ 845.905545][T30106] bond0: (slave bond_slave_1): Releasing backup interface [ 845.926394][T30106] team0: Port device team_slave_0 removed [ 845.936841][T30106] team0: Port device team_slave_1 removed [ 845.943470][T30106] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 845.952583][T30106] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 845.963949][T30106] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 845.972124][T30106] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 845.981477][T30106] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 845.998188][ T5828] Bluetooth: hci4: command tx timeout [ 846.021808][T30113] macsec1: entered promiscuous mode [ 846.060685][T30050] gre0 speed is unknown, defaulting to 1000 [ 846.201321][ T7572] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 846.212042][ T7572] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 846.223291][ T7572] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 846.364882][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805bc56000: rx timeout, send abort [ 846.412773][ T7572] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 846.444910][ T7572] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 846.466737][ T7572] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 846.649662][T30129] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6406'. [ 846.865046][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805bc55c00: rx timeout, send abort [ 846.873763][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805bc56000: abort rx timeout. Force session deactivation [ 847.373468][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805bc55c00: abort rx timeout. Force session deactivation [ 847.589633][ T7572] bond6 (unregistering): (slave gretap1): Releasing active interface [ 847.646993][ T7572] bond3 (unregistering): (slave geneve2): Releasing active interface [ 848.005591][ T7572] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 848.015189][ T7572] bond0 (unregistering): Released all slaves [ 848.027025][ T7572] bond2 (unregistering): Released all slaves [ 848.044706][ T7572] bond1 (unregistering): Released all slaves [ 848.062751][ T7572] bond3 (unregistering): Released all slaves [ 848.069982][ T5828] Bluetooth: hci4: command tx timeout [ 848.087944][ T7572] bond4 (unregistering): Released all slaves [ 848.106280][ T7572] bond5 (unregistering): Released all slaves [ 848.126520][ T7572] bond6 (unregistering): Released all slaves [ 848.144031][ T7572] bond7 (unregistering): Released all slaves [ 848.165404][ T7572] bond8 (unregistering): Released all slaves [ 848.182611][ T7572] bond9 (unregistering): Released all slaves [ 848.197272][ T7572] bond10 (unregistering): Released all slaves [ 848.222593][ T7572] bond11 (unregistering): Released all slaves [ 848.531102][ T7572] : left promiscuous mode [ 848.616696][T30176] netlink: 48 bytes leftover after parsing attributes in process `syz.3.6417'. [ 848.665285][ T7572] tipc: Disabling bearer [ 848.695085][ T7572] tipc: Left network mode [ 848.716233][T30180] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6418'. [ 848.959989][T30184] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 848.981106][T30188] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6420'. [ 849.007631][T30050] chnl_net:caif_netlink_parms(): no params data found [ 849.017525][T30184] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 849.184262][T30200] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6421'. [ 849.434916][T30209] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6423'. [ 849.512373][T30209] netlink: 256 bytes leftover after parsing attributes in process `syz.4.6423'. [ 849.569054][T30215] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6422'. [ 849.580033][T30050] bridge0: port 1(bridge_slave_0) entered blocking state [ 849.619679][T30050] bridge0: port 1(bridge_slave_0) entered disabled state [ 849.646459][T30050] bridge_slave_0: entered allmulticast mode [ 849.666071][T30050] bridge_slave_0: entered promiscuous mode [ 849.712204][T30050] bridge0: port 2(bridge_slave_1) entered blocking state [ 849.731252][T30050] bridge0: port 2(bridge_slave_1) entered disabled state [ 849.739909][T30050] bridge_slave_1: entered allmulticast mode [ 849.748327][T30050] bridge_slave_1: entered promiscuous mode [ 849.779028][T30223] netlink: 'syz.3.6426': attribute type 1 has an invalid length. [ 849.901685][T30050] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 850.032443][T30050] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 850.070315][T30235] netlink: 190972 bytes leftover after parsing attributes in process `syz.0.6428'. [ 850.096748][T30239] x_tables: duplicate underflow at hook 1 [ 850.149118][ T5828] Bluetooth: hci4: command tx timeout [ 850.298065][T30050] team0: Port device team_slave_0 added [ 850.335500][ T5486] 8021q: adding VLAN 0 to HW filter on device eth1 [ 850.466255][T30050] team0: Port device team_slave_1 added [ 850.712790][T30050] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 850.731619][T30050] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 850.777262][T30270] netlink: 'syz.3.6436': attribute type 1 has an invalid length. [ 850.790800][T30270] netlink: 'syz.3.6436': attribute type 1 has an invalid length. [ 850.825903][T30050] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 850.896941][T30050] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 850.924915][T30050] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 850.961311][T30050] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 851.153541][T30283] netlink: 'syz.3.6439': attribute type 21 has an invalid length. [ 851.294412][T30283] netlink: 'syz.3.6439': attribute type 6 has an invalid length. [ 851.310068][T30290] __nla_validate_parse: 3 callbacks suppressed [ 851.310091][T30290] netlink: 48 bytes leftover after parsing attributes in process `syz.0.6441'. [ 851.338672][T30283] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6439'. [ 851.651183][T30286] bond1 (unregistering): Released all slaves [ 851.872014][T30050] hsr_slave_0: entered promiscuous mode [ 851.915973][T30050] hsr_slave_1: entered promiscuous mode [ 851.977006][T30298] ip6gre1: entered promiscuous mode [ 852.011770][T30298] ip6gre1: entered allmulticast mode [ 852.077112][ T7572] hsr_slave_0: left promiscuous mode [ 852.085311][T30310] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 852.127432][ T7572] veth0_to_batadv: left promiscuous mode [ 852.140666][ T7572] veth0_macvtap: left allmulticast mode [ 852.160298][ T7572] veth0_macvtap: left promiscuous mode [ 852.174476][ T7572] veth1_vlan: left promiscuous mode [ 852.232243][ T5828] Bluetooth: hci4: command tx timeout [ 852.925192][T30301] netlink: 'syz.3.6442': attribute type 3 has an invalid length. [ 852.956407][ T5486] 8021q: adding VLAN 0 to HW filter on device eth2 [ 853.286076][T30347] netlink: 164 bytes leftover after parsing attributes in process `syz.3.6454'. [ 853.624053][T30350] netlink: 1 bytes leftover after parsing attributes in process `syz.2.6453'. [ 853.847097][T30371] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6459'. [ 853.860360][ T7572] IPVS: stop unused estimator thread 0... [ 853.895507][T30371] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6459'. [ 854.055445][T30373] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6460'. [ 854.336925][T30383] xt_NFQUEUE: number of queues (62232) out of range (got 67565) [ 854.373749][T30401] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6465'. [ 854.385174][T30395] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6464'. [ 854.479797][T30404] netlink: 44 bytes leftover after parsing attributes in process `syz.3.6465'. [ 855.016999][ T7572] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 855.037743][ T7572] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 855.063134][ T7572] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 855.229667][ T7572] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 855.950353][T30050] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 855.998809][T30050] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 856.030426][T30050] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 856.094852][T30050] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 856.112655][T30479] sctp: [Deprecated]: syz.4.6481 (pid 30479) Use of int in maxseg socket option. [ 856.112655][T30479] Use struct sctp_assoc_value instead [ 856.126125][T30050] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 856.179099][T30050] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 856.217062][T30050] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 856.280298][T30050] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 856.527736][T30500] netlink: 'syz.4.6485': attribute type 3 has an invalid length. [ 856.583201][T30501] syzkaller1: entered promiscuous mode [ 856.597565][T30501] syzkaller1: entered allmulticast mode [ 856.618677][T30503] __nla_validate_parse: 3 callbacks suppressed [ 856.618698][T30503] netlink: 36 bytes leftover after parsing attributes in process `syz.3.6487'. [ 856.680228][T30503] netlink: 36 bytes leftover after parsing attributes in process `syz.3.6487'. [ 856.795021][T30050] 8021q: adding VLAN 0 to HW filter on device bond0 [ 857.024524][T30050] 8021q: adding VLAN 0 to HW filter on device team0 [ 857.187241][T30540] bridge0: port 1(bridge_slave_0) entered blocking state [ 857.194573][T30540] bridge0: port 1(bridge_slave_0) entered forwarding state [ 857.255707][T30546] netlink: 'syz.2.6489': attribute type 9 has an invalid length. [ 857.376131][T30541] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6489'. [ 857.437633][T25677] bridge0: port 2(bridge_slave_1) entered blocking state [ 857.444971][T25677] bridge0: port 2(bridge_slave_1) entered forwarding state [ 857.596894][T30557] netlink: 72 bytes leftover after parsing attributes in process `syz.0.6493'. [ 857.798057][T30567] mac80211_hwsim hwsim50 ÿ: renamed from wlan1 [ 858.119739][T30584] netlink: 'syz.3.6499': attribute type 1 has an invalid length. [ 858.452902][T30050] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 858.552579][T30609] netlink: 'syz.3.6505': attribute type 4 has an invalid length. [ 858.587890][T30610] macvlan0: entered promiscuous mode [ 858.603018][T30609] bond0: Error: Cannot enslave bond to itself. [ 858.613153][T30610] IPv6: NLM_F_REPLACE set, but no existing node found! [ 858.637390][T30609] xt_TPROXY: Can be used only with -p tcp or -p udp [ 858.739070][T30050] veth0_vlan: entered promiscuous mode [ 858.783817][T30050] veth1_vlan: entered promiscuous mode [ 858.827062][T30617] netlink: 'syz.0.6507': attribute type 4 has an invalid length. [ 858.881574][T30619] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 858.900574][T30619] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 858.926117][T30625] netlink: 190972 bytes leftover after parsing attributes in process `syz.3.6510'. [ 858.949012][T30619] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 858.969454][T30619] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 859.138226][T30631] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6511'. [ 859.142047][T30050] veth0_macvtap: entered promiscuous mode [ 859.169593][T30050] veth1_macvtap: entered promiscuous mode [ 859.374350][T30050] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 859.410195][T30642] netlink: 'syz.3.6514': attribute type 1 has an invalid length. [ 859.430363][T30642] netlink: 'syz.3.6514': attribute type 7 has an invalid length. [ 859.447721][T30050] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 859.465159][T30644] delete_channel: no stack [ 859.478856][T30642] netlink: 'syz.3.6514': attribute type 8 has an invalid length. [ 859.510081][T30543] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 859.524901][T30642] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6514'. [ 859.534728][T30647] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 859.553653][ T7568] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 859.576523][T30647] netlink: 96 bytes leftover after parsing attributes in process `syz.4.6515'. [ 859.586571][ T7568] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 859.613089][T30647] 8021q: VLANs not supported on ip6_vti0 [ 859.623967][ T7568] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 859.672665][T30642] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 859.817529][T30656] netlink: 'syz.4.6517': attribute type 1 has an invalid length. [ 859.885828][T30660] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6517'. [ 859.966193][T30660] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6517'. [ 860.037068][T30656] bond1: entered promiscuous mode [ 860.046270][T30669] x_tables: duplicate underflow at hook 3 [ 860.053042][T30656] 8021q: adding VLAN 0 to HW filter on device bond1 [ 860.177247][T30665] bond1: (slave bridge2): making interface the new active one [ 860.203598][T30665] bridge2: entered promiscuous mode [ 860.232676][T30665] bond1: (slave bridge2): Enslaving as an active interface with an up link [ 860.306350][T23638] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 860.327319][T23638] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 860.338888][T30677] netlink: 'syz.3.6519': attribute type 1 has an invalid length. [ 860.567124][ T7572] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 860.600912][ T7572] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 860.630841][T30689] syzkaller0: entered promiscuous mode [ 860.659317][T30689] syzkaller0: entered allmulticast mode [ 860.686332][T30696] 0: reclassify loop, rule prio 0, protocol 800 [ 861.187229][T30726] tipc: Invalid UDP bearer configuration [ 861.187290][T30726] tipc: Enabling of bearer rejected, failed to enable media [ 861.528762][T30741] bond1: option resend_igmp: invalid value (32767) [ 861.535672][T30741] bond1: option resend_igmp: allowed values 0 - 255 [ 861.569762][T30741] bond1 (unregistering): Released all slaves [ 861.707625][T30749] tipc: Failed to remove unknown binding: 66,1,1/0:3800634949/3800634951 [ 861.745628][T30749] tipc: Failed to remove unknown binding: 66,1,1/0:3800634949/3800634951 [ 861.812913][T21604] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 861.826502][T21604] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 861.838639][T21604] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 861.856694][T21604] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 861.870183][T21604] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 862.027615][T30758] xt_socket: unknown flags 0xe4 [ 862.099265][T30758] xt_socket: unknown flags 0xe4 [ 862.101822][T30760] validate_nla: 4 callbacks suppressed [ 862.101839][T30760] netlink: 'syz.4.6542': attribute type 32 has an invalid length. [ 862.129648][T30758] xt_socket: unknown flags 0xe4 [ 862.154069][T30760] __nla_validate_parse: 5 callbacks suppressed [ 862.154098][T30760] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6542'. [ 862.171063][T30758] xt_socket: unknown flags 0xe4 [ 862.193873][T30764] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6544'. [ 862.204150][T30758] xt_socket: unknown flags 0xe4 [ 862.229755][T30758] xt_socket: unknown flags 0xe4 [ 862.252409][T30758] xt_socket: unknown flags 0xe4 [ 862.282055][T30758] xt_socket: unknown flags 0xe4 [ 862.295164][T30758] xt_socket: unknown flags 0xe4 [ 862.305429][T30758] xt_socket: unknown flags 0xe4 [ 862.410212][T30760] bond2: Setting coupled_control to off (0) [ 862.432583][T30772] sctp: [Deprecated]: syz.1.6546 (pid 30772) Use of struct sctp_assoc_value in delayed_ack socket option. [ 862.432583][T30772] Use struct sctp_sack_info instead [ 862.769456][ T7572] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 862.813372][T30753] gre0 speed is unknown, defaulting to 1000 [ 862.970374][ T7572] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 863.094717][T30794] netlink: 44 bytes leftover after parsing attributes in process `syz.4.6553'. [ 863.237547][ T7572] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 863.425388][ T7572] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 863.473564][T30810] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6554'. [ 863.504253][T30810] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6554'. [ 863.819434][T30823] netlink: 'syz.1.6561': attribute type 12 has an invalid length. [ 863.851464][T30823] netlink: 'syz.1.6561': attribute type 29 has an invalid length. [ 863.865016][T30823] netlink: 148 bytes leftover after parsing attributes in process `syz.1.6561'. [ 863.900435][T30823] netlink: 'syz.1.6561': attribute type 1 has an invalid length. [ 863.909533][ T5828] Bluetooth: hci3: command tx timeout [ 863.918017][T30823] netlink: 47 bytes leftover after parsing attributes in process `syz.1.6561'. [ 864.216060][T30829] wireguard0: entered promiscuous mode [ 864.226317][T30829] wireguard0: entered allmulticast mode [ 864.293833][T30850] SET target dimension over the limit! [ 864.336183][T30840] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6565'. [ 864.601590][T30858] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6570'. [ 864.833427][ T7572] bond11: left allmulticast mode [ 864.843447][ T7572] bond11: left promiscuous mode [ 864.855814][ T7572] bridge0: port 1(bond11) entered disabled state [ 864.882503][ T7572] bridge_slave_1: left allmulticast mode [ 864.900569][ T7572] bridge_slave_1: left promiscuous mode [ 864.914814][ T7572] bridge0: port 2(bridge_slave_1) entered disabled state [ 865.002261][ T7572] tipc: Resetting bearer [ 865.285127][ T7572] bond3 (unregistering): (slave ip6gretap1): Releasing active interface [ 865.521569][ T7572] bond2 (unregistering): (slave gretap1): Releasing active interface [ 865.837073][ T7572] tipc: Disabling bearer [ 865.844215][ T7572] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 865.856473][ T7572] bond_slave_0: left allmulticast mode [ 865.863695][ T7572] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 865.872945][ T7572] bond_slave_1: left allmulticast mode [ 865.879447][ T7572] bond0 (unregistering): Released all slaves [ 865.891699][ T7572] bond1 (unregistering): Released all slaves [ 865.908308][ T7572] bond2 (unregistering): Released all slaves [ 865.934002][ T7572] bond3 (unregistering): Released all slaves [ 865.948943][ T7572] bond4 (unregistering): Released all slaves [ 865.966226][ T7572] bond5 (unregistering): Released all slaves [ 865.986456][ T7572] bond6 (unregistering): Released all slaves [ 865.992740][ T5828] Bluetooth: hci3: command tx timeout [ 866.007188][ T7572] bond7 (unregistering): Released all slaves [ 866.023171][ T7572] bond8 (unregistering): Released all slaves [ 866.047783][ T7572] bond9 (unregistering): Released all slaves [ 866.063501][ T7572] bond10 (unregistering): (slave veth7): Releasing active interface [ 866.073943][ T7572] bond10 (unregistering): (slave veth9): Releasing active interface [ 866.083838][ T7572] bond10 (unregistering): Released all slaves [ 866.102266][ T7572] bond11 (unregistering): Released all slaves [ 866.119163][ T7572] bond12 (unregistering): Released all slaves [ 866.140391][ T7572] bond13 (unregistering): Released all slaves [ 866.490452][ T7572] : left promiscuous mode [ 866.624093][T30753] chnl_net:caif_netlink_parms(): no params data found [ 866.668850][ T7572] : left promiscuous mode [ 866.785163][T30927] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 867.028251][T30925] bond4: (slave bond_slave_1): Device is not our slave [ 867.053850][T30925] bond4: option active_slave: invalid value (bond_slave_1) [ 867.087109][T30925] bond4 (unregistering): Released all slaves [ 867.225423][ T7572] tipc: Disabling bearer [ 867.242556][ T7572] tipc: Left network mode [ 867.425365][T30918] netlink: 'syz.4.6583': attribute type 1 has an invalid length. [ 867.487504][T30918] netlink: 96 bytes leftover after parsing attributes in process `syz.4.6583'. [ 867.498151][T30918] netlink: 1 bytes leftover after parsing attributes in process `syz.4.6583'. [ 867.510564][T30918] netlink: 658 bytes leftover after parsing attributes in process `syz.4.6583'. [ 867.685423][ T5486] 8021q: adding VLAN 0 to HW filter on device eth1 [ 867.792974][T30753] bridge0: port 1(bridge_slave_0) entered blocking state [ 867.830621][T30753] bridge0: port 1(bridge_slave_0) entered disabled state [ 867.857697][T30753] bridge_slave_0: entered allmulticast mode [ 867.883148][T30753] bridge_slave_0: entered promiscuous mode [ 867.925370][T30753] bridge0: port 2(bridge_slave_1) entered blocking state [ 867.942057][T30753] bridge0: port 2(bridge_slave_1) entered disabled state [ 867.971168][T30753] bridge_slave_1: entered allmulticast mode [ 867.998076][T30753] bridge_slave_1: entered promiscuous mode [ 868.068602][ T5828] Bluetooth: hci3: command tx timeout [ 868.101633][T30977] netlink: 'syz.4.6592': attribute type 2 has an invalid length. [ 868.121445][T30977] netlink: 244 bytes leftover after parsing attributes in process `syz.4.6592'. [ 868.174634][T30980] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6593'. [ 868.350202][T30981] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.6594'. [ 868.356843][T30987] netlink: 84 bytes leftover after parsing attributes in process `syz.1.6596'. [ 868.454800][T30753] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 868.575394][T30753] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 868.771319][T30996] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 868.961939][T30753] team0: Port device team_slave_0 added [ 869.014118][T30753] team0: Port device team_slave_1 added [ 869.441663][T30753] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 869.485153][T30753] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 869.557935][T30753] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 869.655902][T30753] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 869.707511][T30753] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 869.833657][T30753] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 869.853164][T31036] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 869.899894][T31036] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6603'. [ 870.148608][ T5828] Bluetooth: hci3: command tx timeout [ 870.204459][T31052] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6608'. [ 870.221846][T30753] hsr_slave_0: entered promiscuous mode [ 870.283915][T30753] hsr_slave_1: entered promiscuous mode [ 870.307552][T30753] debugfs: 'hsr0' already exists in 'hsr' [ 870.319986][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.322763][ T1300] clip:clip_start_xmit: skb_dst(skb) == NULL [ 870.367317][T30753] Cannot create hsr debugfs directory [ 870.556203][T31062] netlink: 'syz.3.6609': attribute type 1 has an invalid length. [ 870.631668][ T5486] 8021q: adding VLAN 0 to HW filter on device eth2 [ 870.817777][T31064] netlink: 148 bytes leftover after parsing attributes in process `syz.3.6609'. [ 871.207202][ T7572] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 871.244974][ T7572] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 871.257259][ T7572] batman_adv: batadv0: Removing interface: ipvlan2 [ 871.555313][ T7572] team0 (unregistering): Port device team_slave_1 removed [ 871.575100][ T7572] team0 (unregistering): Port device team_slave_0 removed [ 872.602218][T31125] gtp0: entered promiscuous mode [ 872.621735][T31125] gtp0: entered allmulticast mode [ 872.734155][ T7572] IPVS: stop unused estimator thread 0... [ 873.145807][T31155] __nla_validate_parse: 1 callbacks suppressed [ 873.145840][T31155] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6631'. [ 873.292150][T31155] netlink: 'syz.3.6631': attribute type 10 has an invalid length. [ 873.350458][T31158] netlink: 'syz.3.6631': attribute type 10 has an invalid length. [ 873.380536][T31163] netlink: 14 bytes leftover after parsing attributes in process `syz.0.6633'. [ 873.398284][T31158] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6631'. [ 873.437468][T31159] vlan2: entered allmulticast mode [ 873.458677][T31159] bond0: entered allmulticast mode [ 873.464086][T31159] bond_slave_0: entered allmulticast mode [ 873.471717][T31159] bond_slave_1: entered allmulticast mode [ 873.533577][T31155] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 873.549589][T31155] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 873.578084][T31170] netlink: 68 bytes leftover after parsing attributes in process `syz.4.6636'. [ 873.608050][T31163] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 873.631449][T31163] bond_slave_0: left allmulticast mode [ 873.654663][T31163] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 873.669090][T31163] bond_slave_1: left allmulticast mode [ 873.680380][T31163] bond0 (unregistering): Released all slaves [ 873.687184][T31173] ieee802154 phy0 wpan0: encryption failed: -22 [ 873.696516][T31158] batadv0: entered promiscuous mode [ 873.706360][T31158] batadv0: entered allmulticast mode [ 873.720234][T31158] bond0: (slave batadv0): Releasing backup interface [ 873.738735][T31158] bridge0: port 1(batadv0) entered blocking state [ 873.745663][T31158] bridge0: port 1(batadv0) entered disabled state [ 873.903658][T31179] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6639'. [ 873.972587][T30753] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 874.005169][T30753] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 874.013801][T30753] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 874.052433][T30753] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 874.076590][T30753] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 874.083984][T30543] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 874.094103][T30543] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 874.124432][T30753] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 874.152455][T30753] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 874.192265][T30753] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 874.611730][T30753] 8021q: adding VLAN 0 to HW filter on device bond0 [ 874.645664][T30753] 8021q: adding VLAN 0 to HW filter on device team0 [ 874.661730][T30533] bridge0: port 1(bridge_slave_0) entered blocking state [ 874.669354][T30533] bridge0: port 1(bridge_slave_0) entered forwarding state [ 874.720474][ T7568] bridge0: port 2(bridge_slave_1) entered blocking state [ 874.727872][ T7568] bridge0: port 2(bridge_slave_1) entered forwarding state [ 874.734640][T31225] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6650'. [ 875.178225][T31237] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6654'. [ 875.184354][T31242] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6656'. [ 875.215294][T31237] netlink: 1 bytes leftover after parsing attributes in process `syz.3.6654'. [ 875.247810][T31249] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 2, id = 0 [ 875.677768][T31266] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6659'. [ 875.846898][T30753] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 876.074568][T30753] veth0_vlan: entered promiscuous mode [ 876.171321][T30753] veth1_vlan: entered promiscuous mode [ 876.377264][T30753] veth0_macvtap: entered promiscuous mode [ 876.405740][T30753] veth1_macvtap: entered promiscuous mode [ 876.472977][T30753] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 876.543646][T30753] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 876.583316][ T7570] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 876.608065][ T7570] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 876.651280][ T7570] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 876.670316][ T7570] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 876.721709][T31305] netlink: 'syz.4.6667': attribute type 2 has an invalid length. [ 877.129848][T30543] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 877.174234][T30543] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 877.241081][T31327] netlink: 'syz.3.6672': attribute type 2 has an invalid length. [ 877.249839][T30533] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 877.259826][T30533] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 877.300293][T31327] netlink: 'syz.3.6672': attribute type 2 has an invalid length. [ 877.795006][T31350] netlink: 'syz.3.6675': attribute type 29 has an invalid length. [ 877.816741][T31350] netlink: 'syz.3.6675': attribute type 4 has an invalid length. [ 877.869655][T31352] netlink: 'syz.3.6675': attribute type 4 has an invalid length. [ 878.146992][T31350] netlink: 'syz.3.6675': attribute type 29 has an invalid length. [ 878.179080][T31350] netlink: 'syz.3.6675': attribute type 29 has an invalid length. [ 878.541413][T31343] mpoa:mpoad_close: () going down [ 878.677632][T31385] tipc: Failed to remove unknown binding: 66,1,1/0:2762604986/2762604988 [ 879.220050][T31414] __nla_validate_parse: 2 callbacks suppressed [ 879.220071][T31414] netlink: 48 bytes leftover after parsing attributes in process `syz.2.6690'. [ 879.481520][T31384] tipc: Failed to remove unknown binding: 66,1,1/0:2762604986/2762604988 [ 879.498980][T31384] tipc: Failed to remove unknown binding: 66,1,1/0:2762604986/2762604988 [ 879.764266][T31437] validate_nla: 4 callbacks suppressed [ 879.764285][T31437] netlink: 'syz.0.6695': attribute type 30 has an invalid length. [ 879.997703][T31454] netlink: 68 bytes leftover after parsing attributes in process `syz.1.6699'. [ 880.014759][T31452] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6697'. [ 880.750661][T31487] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 880.757993][T31487] IPv6: NLM_F_CREATE should be set when creating new route [ 880.765341][T31487] IPv6: NLM_F_CREATE should be set when creating new route [ 880.772821][T31487] IPv6: NLM_F_CREATE should be set when creating new route [ 880.791890][T31495] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6711'. [ 880.813540][T31496] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 880.959579][T31503] bridge3: entered promiscuous mode [ 880.974397][T31503] bridge3: entered allmulticast mode [ 881.005984][T31503] team0: Port device bridge3 added [ 881.021158][T31504] bridge0: port 3(team0) entered blocking state [ 881.040219][T31504] bridge0: port 3(team0) entered disabled state [ 881.079826][T31504] team0: entered allmulticast mode [ 881.135114][T31504] team_slave_0: entered allmulticast mode [ 881.176774][T31504] team_slave_1: entered allmulticast mode [ 881.222737][T31504] team0: entered promiscuous mode [ 881.255655][T31504] team_slave_0: entered promiscuous mode [ 881.270530][T31504] team_slave_1: entered promiscuous mode [ 881.315267][T31504] bridge0: port 3(team0) entered blocking state [ 881.323894][T31504] bridge0: port 3(team0) entered forwarding state [ 881.333168][T31530] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6717'. [ 881.756642][T31546] netlink: 36 bytes leftover after parsing attributes in process `syz.3.6722'. [ 881.996478][T31563] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6728'. [ 882.206702][T31577] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6731'. [ 882.232059][T31577] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6731'. [ 882.448527][T31583] sock: sock_timestamping_bind_phc: sock not bind to device [ 882.676480][T31595] netlink: 'syz.2.6736': attribute type 4 has an invalid length. [ 883.317247][T31633] netlink: 'syz.2.6742': attribute type 21 has an invalid length. [ 884.871104][T31633] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6742'. [ 885.032340][T31671] netlink: 48 bytes leftover after parsing attributes in process `syz.1.6744'. [ 885.095848][T31676] netlink: 'syz.4.6746': attribute type 4 has an invalid length. [ 885.536484][T31693] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 885.573785][T15971] IPVS: starting estimator thread 0... [ 885.656685][T31700] »»»»»»: renamed from bond_slave_0 (while UP) [ 885.698989][T31701] IPVS: using max 24 ests per chain, 57600 per kthread [ 886.279042][T31722] netlink: 220 bytes leftover after parsing attributes in process `syz.2.6759'. [ 886.313120][T31722] netlink: 52 bytes leftover after parsing attributes in process `syz.2.6759'. [ 886.504511][T31735] netlink: 'syz.4.6762': attribute type 1 has an invalid length. [ 886.874196][T31748] netlink: 96 bytes leftover after parsing attributes in process `syz.4.6766'. [ 886.968074][T31758] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6768'. [ 886.998046][T31758] netlink: 'syz.0.6768': attribute type 7 has an invalid length. [ 887.025746][T31758] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6768'. [ 887.118315][T31765] netlink: 'syz.3.6769': attribute type 1 has an invalid length. [ 887.267635][T31774] netlink: 84 bytes leftover after parsing attributes in process `syz.1.6770'. [ 887.367893][T31772] bond4: (slave gretap1): making interface the new active one [ 887.416222][T31772] bond4: (slave gretap1): Enslaving as an active interface with an up link [ 887.479373][T31765] macvlan2: entered promiscuous mode [ 887.485577][T31765] macvlan2: entered allmulticast mode [ 887.493539][T31765] bond4: entered promiscuous mode [ 887.513704][T31765] gretap1: entered promiscuous mode [ 887.523989][T31765] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 887.532954][T31765] bond4: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 887.552227][T31765] bond4: left promiscuous mode [ 887.557254][T31765] gretap1: left promiscuous mode [ 887.870377][T31800] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6779'. [ 887.917617][T31803] FAULT_INJECTION: forcing a failure. [ 887.917617][T31803] name failslab, interval 1, probability 0, space 0, times 1 [ 887.932330][T31802] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6779'. [ 887.986017][T31803] CPU: 0 UID: 0 PID: 31803 Comm: syz.1.6778 Not tainted syzkaller #0 PREEMPT(full) [ 887.986049][T31803] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 887.986060][T31803] Call Trace: [ 887.986069][T31803] [ 887.986076][T31803] dump_stack_lvl+0xe8/0x150 [ 887.986111][T31803] should_fail_ex+0x412/0x560 [ 887.986146][T31803] should_failslab+0xa8/0x100 [ 887.986169][T31803] __kmalloc_noprof+0xe8/0x760 [ 887.986199][T31803] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 887.986229][T31803] genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 887.986259][T31803] genl_family_rcv_msg_doit+0xd9/0x330 [ 887.986288][T31803] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 887.986319][T31803] ? apparmor_capable+0x126/0x170 [ 887.986342][T31803] ? bpf_lsm_capable+0x9/0x20 [ 887.986365][T31803] ? security_capable+0x7e/0x2c0 [ 887.986397][T31803] genl_rcv_msg+0x61c/0x7a0 [ 887.986426][T31803] ? __pfx_genl_rcv_msg+0x10/0x10 [ 887.986445][T31803] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 887.986472][T31803] ? __pfx_nl80211_get_mpath+0x10/0x10 [ 887.986499][T31803] ? __pfx_nl80211_post_doit+0x10/0x10 [ 887.986528][T31803] ? __pfx_ref_tracker_free+0x10/0x10 [ 887.986567][T31803] netlink_rcv_skb+0x232/0x4b0 [ 887.986596][T31803] ? __pfx_genl_rcv_msg+0x10/0x10 [ 887.986620][T31803] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 887.986663][T31803] ? down_read+0x270/0x2e0 [ 887.986688][T31803] ? genl_rcv+0xd/0x40 [ 887.986710][T31803] genl_rcv+0x28/0x40 [ 887.986730][T31803] netlink_unicast+0x75c/0x8e0 [ 887.986767][T31803] netlink_sendmsg+0x813/0xb40 [ 887.986817][T31803] ? __pfx_netlink_sendmsg+0x10/0x10 [ 887.986848][T31803] ? aa_sock_msg_perm+0xf1/0x1b0 [ 887.986877][T31803] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 887.986909][T31803] ____sys_sendmsg+0x972/0x9f0 [ 887.986949][T31803] ? __pfx_____sys_sendmsg+0x10/0x10 [ 887.986989][T31803] ? import_iovec+0x73/0xa0 [ 887.987014][T31803] ___sys_sendmsg+0x2a5/0x360 [ 887.987042][T31803] ? __lock_acquire+0x6b5/0x2cf0 [ 887.987073][T31803] ? __pfx____sys_sendmsg+0x10/0x10 [ 887.987141][T31803] ? __fget_files+0x2a/0x420 [ 887.987166][T31803] ? __fget_files+0x3a0/0x420 [ 887.987204][T31803] __x64_sys_sendmsg+0x1bd/0x2a0 [ 887.987237][T31803] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 887.987274][T31803] ? __pfx_ksys_write+0x10/0x10 [ 887.987306][T31803] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 887.987325][T31803] do_syscall_64+0x15f/0xf80 [ 887.987344][T31803] ? trace_irq_disable+0x3b/0x140 [ 887.987361][T31803] ? clear_bhb_loop+0x40/0x90 [ 887.987381][T31803] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 887.987397][T31803] RIP: 0033:0x7ff34379c819 [ 887.987414][T31803] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 887.987428][T31803] RSP: 002b:00007ff344575028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 887.987446][T31803] RAX: ffffffffffffffda RBX: 00007ff343a15fa0 RCX: 00007ff34379c819 [ 887.987458][T31803] RDX: 0000000004000000 RSI: 0000200000001540 RDI: 0000000000000004 [ 887.987469][T31803] RBP: 00007ff344575090 R08: 0000000000000000 R09: 0000000000000000 [ 887.987479][T31803] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 887.987489][T31803] R13: 00007ff343a16038 R14: 00007ff343a15fa0 R15: 00007ffdd1f2be88 [ 887.987517][T31803] [ 887.989248][T31802] netlink: 'syz.2.6779': attribute type 7 has an invalid length. [ 888.052273][T31800] netlink: 'syz.2.6779': attribute type 7 has an invalid length. [ 888.052299][T31800] netlink: 'syz.2.6779': attribute type 8 has an invalid length. [ 888.322284][T31808] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 888.349756][T31802] netlink: 'syz.2.6779': attribute type 8 has an invalid length. [ 888.524875][T31829] netlink: 'syz.0.6785': attribute type 1 has an invalid length. [ 888.616365][T31837] netlink: 'syz.1.6784': attribute type 3 has an invalid length. [ 888.621180][T31829] bond1: entered promiscuous mode [ 888.630240][T31829] 8021q: adding VLAN 0 to HW filter on device bond1 [ 888.705415][T31836] bond1: (slave bridge4): making interface the new active one [ 888.716942][T31836] bridge4: entered promiscuous mode [ 888.727449][T31836] bond1: (slave bridge4): Enslaving as an active interface with an up link [ 888.885873][T31848] netlink: 'syz.4.6788': attribute type 11 has an invalid length. [ 889.045067][T31842] 8021q: adding VLAN 0 to HW filter on device bond1 [ 889.056325][T31857] atomic_op ffff888069e63198 conn xmit_atomic 0000000000000000 [ 889.761135][ T5486] ================================================================== [ 889.769369][ T5486] BUG: KASAN: slab-use-after-free in sock_def_readable+0x1cb/0x550 [ 889.777305][ T5486] Read of size 8 at addr ffff8880566b3cc0 by task dhcpcd/5486 [ 889.784796][ T5486] [ 889.787175][ T5486] CPU: 1 UID: 0 PID: 5486 Comm: dhcpcd Not tainted syzkaller #0 PREEMPT(full) [ 889.787203][ T5486] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 889.787216][ T5486] Call Trace: [ 889.787225][ T5486] [ 889.787234][ T5486] dump_stack_lvl+0xe8/0x150 [ 889.787266][ T5486] print_report+0xba/0x230 [ 889.787290][ T5486] ? sock_def_readable+0x1cb/0x550 [ 889.787313][ T5486] kasan_report+0x117/0x150 [ 889.787336][ T5486] ? sock_def_readable+0x1cb/0x550 [ 889.787363][ T5486] sock_def_readable+0x1cb/0x550 [ 889.787384][ T5486] ? sock_def_readable+0xae/0x550 [ 889.787405][ T5486] ? send_to_lecd+0x26d/0x830 [ 889.787428][ T5486] send_to_lecd+0x3e7/0x830 [ 889.787452][ T5486] lec_start_xmit+0xe52/0x2890 [ 889.787480][ T5486] dev_hard_start_xmit+0x2cd/0x830 [ 889.787508][ T5486] sch_direct_xmit+0x251/0x4c0 [ 889.787537][ T5486] ? __pfx_sch_direct_xmit+0x10/0x10 [ 889.787565][ T5486] __dev_queue_xmit+0x180f/0x3950 [ 889.787584][ T5486] ? __dev_notify_flags+0x1a9/0x310 [ 889.787615][ T5486] ? __dev_queue_xmit+0x2b6/0x3950 [ 889.787641][ T5486] ? __pfx___dev_queue_xmit+0x10/0x10 [ 889.787673][ T5486] ? __asan_memcpy+0x40/0x70 [ 889.787700][ T5486] ? eth_header+0x11b/0x200 [ 889.787719][ T5486] ? __pfx_eth_header+0x10/0x10 [ 889.787738][ T5486] ? lapbeth_data_transmit+0x218/0x2e0 [ 889.787762][ T5486] ? __pfx_lapbeth_data_transmit+0x10/0x10 [ 889.787785][ T5486] lapb_data_transmit+0x90/0xb0 [ 889.787809][ T5486] lapb_transmit_buffer+0x163/0x200 [ 889.787831][ T5486] lapb_establish_data_link+0x89/0xe0 [ 889.787863][ T5486] lapb_device_event+0x4e1/0x670 [ 889.787888][ T5486] notifier_call_chain+0x1ad/0x3d0 [ 889.787912][ T5486] __dev_notify_flags+0x1a9/0x310 [ 889.787942][ T5486] ? __pfx___dev_notify_flags+0x10/0x10 [ 889.787968][ T5486] ? __dev_change_flags+0x4c6/0x690 [ 889.787999][ T5486] ? __pfx___dev_change_flags+0x10/0x10 [ 889.788026][ T5486] ? devinet_ioctl+0x32b/0x1b30 [ 889.788052][ T5486] ? __pfx___mutex_lock+0x10/0x10 [ 889.788080][ T5486] netif_change_flags+0xe8/0x1a0 [ 889.788109][ T5486] dev_change_flags+0x130/0x260 [ 889.788137][ T5486] devinet_ioctl+0x9f2/0x1b30 [ 889.788168][ T5486] ? __pfx_devinet_ioctl+0x10/0x10 [ 889.788194][ T5486] ? get_user_ifreq+0x12b/0x180 [ 889.788216][ T5486] inet_ioctl+0x42a/0x560 [ 889.788237][ T5486] ? __pfx_inet_ioctl+0x10/0x10 [ 889.788268][ T5486] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 889.788292][ T5486] sock_do_ioctl+0x101/0x320 [ 889.788315][ T5486] ? __pfx_sock_do_ioctl+0x10/0x10 [ 889.788345][ T5486] sock_ioctl+0x5c6/0x7f0 [ 889.788368][ T5486] ? __pfx_sock_ioctl+0x10/0x10 [ 889.788389][ T5486] ? fd_install+0x306/0x3d0 [ 889.788414][ T5486] ? bpf_lsm_file_ioctl+0x9/0x20 [ 889.788435][ T5486] ? __pfx_sock_ioctl+0x10/0x10 [ 889.788456][ T5486] __se_sys_ioctl+0xfc/0x170 [ 889.788473][ T5486] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 889.788495][ T5486] do_syscall_64+0x15f/0xf80 [ 889.788520][ T5486] ? clear_bhb_loop+0x40/0x90 [ 889.788542][ T5486] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 889.788563][ T5486] RIP: 0033:0x7fda8e84c378 [ 889.788583][ T5486] Code: 00 00 48 8d 44 24 08 48 89 54 24 e0 48 89 44 24 c0 48 8d 44 24 d0 48 89 44 24 c8 b8 10 00 00 00 c7 44 24 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 07 89 d0 c3 0f 1f 40 00 48 8b 15 49 3a 0d [ 889.788602][ T5486] RSP: 002b:00007ffc1f485fa8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 889.788625][ T5486] RAX: ffffffffffffffda RBX: 0000000000000013 RCX: 00007fda8e84c378 [ 889.788643][ T5486] RDX: 00007ffc1f4961a0 RSI: 0000000000008914 RDI: 0000000000000013 [ 889.788658][ T5486] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 889.788670][ T5486] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc1f4a6340 [ 889.788684][ T5486] R13: 00007fda8e74c708 R14: 0000000000000028 R15: 0000000000008914 [ 889.788707][ T5486] [ 889.788715][ T5486] [ 890.158486][ T5486] Allocated by task 31344: [ 890.163124][ T5486] kasan_save_track+0x3e/0x80 [ 890.168005][ T5486] __kasan_slab_alloc+0x6c/0x80 [ 890.172858][ T5486] kmem_cache_alloc_lru_noprof+0x2b8/0x640 [ 890.178677][ T5486] sock_alloc_inode+0x2c/0x190 [ 890.183447][ T5486] alloc_inode+0x6a/0x1b0 [ 890.187870][ T5486] __sock_create+0x12d/0x9d0 [ 890.192467][ T5486] __sys_socket+0xd6/0x1b0 [ 890.196899][ T5486] __x64_sys_socket+0x7a/0x90 [ 890.201672][ T5486] do_syscall_64+0x15f/0xf80 [ 890.206287][ T5486] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 890.212292][ T5486] [ 890.214630][ T5486] Freed by task 28592: [ 890.218713][ T5486] kasan_save_track+0x3e/0x80 [ 890.223407][ T5486] kasan_save_free_info+0x46/0x50 [ 890.228442][ T5486] __kasan_slab_free+0x5c/0x80 [ 890.233400][ T5486] kmem_cache_free+0x180/0x630 [ 890.238271][ T5486] rcu_core+0x7cd/0x1070 [ 890.242616][ T5486] handle_softirqs+0x22a/0x840 [ 890.247481][ T5486] __irq_exit_rcu+0xca/0x220 [ 890.252079][ T5486] irq_exit_rcu+0x9/0x30 [ 890.256334][ T5486] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 890.262068][ T5486] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 890.268060][ T5486] [ 890.270389][ T5486] Last potentially related work creation: [ 890.276291][ T5486] kasan_save_stack+0x3e/0x60 [ 890.281072][ T5486] kasan_record_aux_stack+0xbd/0xd0 [ 890.286280][ T5486] call_rcu+0xee/0x890 [ 890.290368][ T5486] evict+0x95b/0xb10 [ 890.294291][ T5486] __dentry_kill+0x1a2/0x5e0 [ 890.298884][ T5486] finish_dput+0xc9/0x480 [ 890.303224][ T5486] __fput+0x691/0xa60 [ 890.307216][ T5486] task_work_run+0x1d9/0x270 [ 890.311899][ T5486] exit_to_user_mode_loop+0xed/0x480 [ 890.317204][ T5486] do_syscall_64+0x33e/0xf80 [ 890.321888][ T5486] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 890.327915][ T5486] [ 890.330446][ T5486] The buggy address belongs to the object at ffff8880566b3c00 [ 890.330446][ T5486] which belongs to the cache sock_inode_cache of size 1408 [ 890.345210][ T5486] The buggy address is located 192 bytes inside of [ 890.345210][ T5486] freed 1408-byte region [ffff8880566b3c00, ffff8880566b4180) [ 890.359922][ T5486] [ 890.362418][ T5486] The buggy address belongs to the physical page: [ 890.368916][ T5486] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff8880566b7200 pfn:0x566b0 [ 890.379073][ T5486] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 890.387930][ T5486] memcg:ffff8880566b7e01 [ 890.392319][ T5486] flags: 0xfff00000000240(workingset|head|node=0|zone=1|lastcpupid=0x7ff) [ 890.400948][ T5486] page_type: f5(slab) [ 890.404952][ T5486] raw: 00fff00000000240 ffff88801f2cac80 ffffea0001557c10 ffffea0002c63810 [ 890.413643][ T5486] raw: ffff8880566b7200 000000080015000e 00000000f5000000 ffff8880566b7e01 [ 890.422778][ T5486] head: 00fff00000000240 ffff88801f2cac80 ffffea0001557c10 ffffea0002c63810 [ 890.431635][ T5486] head: ffff8880566b7200 000000080015000e 00000000f5000000 ffff8880566b7e01 [ 890.440659][ T5486] head: 00fff00000000003 ffffea000159ac01 00000000ffffffff 00000000ffffffff [ 890.449526][ T5486] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 890.458281][ T5486] page dumped because: kasan: bad access detected [ 890.464875][ T5486] page_owner tracks the page as allocated [ 890.470605][ T5486] page last allocated via order 3, migratetype Reclaimable, gfp_mask 0xd20d0(__GFP_RECLAIMABLE|__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5820, tgid 5820 (syz-executor), ts 88803884893, free_ts 26375961338 [ 890.493919][ T5486] post_alloc_hook+0x231/0x280 [ 890.498718][ T5486] get_page_from_freelist+0x24dc/0x2580 [ 890.504375][ T5486] __alloc_frozen_pages_noprof+0x18d/0x380 [ 890.510199][ T5486] allocate_slab+0x77/0x660 [ 890.514715][ T5486] refill_objects+0x331/0x3c0 [ 890.519603][ T5486] __pcs_replace_empty_main+0x2e6/0x730 [ 890.525618][ T5486] kmem_cache_alloc_lru_noprof+0x37c/0x640 [ 890.531568][ T5486] sock_alloc_inode+0x2c/0x190 [ 890.536360][ T5486] alloc_inode+0x6a/0x1b0 [ 890.540695][ T5486] __sock_create+0x12d/0x9d0 [ 890.545295][ T5486] udp_sock_create4+0xca/0x480 [ 890.550180][ T5486] geneve_sock_add+0x482/0xa40 [ 890.555144][ T5486] geneve_open+0xd2/0x140 [ 890.559584][ T5486] __dev_open+0x44d/0x830 [ 890.563920][ T5486] __dev_change_flags+0x1f7/0x690 [ 890.569045][ T5486] netif_change_flags+0x88/0x1a0 [ 890.573997][ T5486] page last free pid 1 tgid 1 stack trace: [ 890.580006][ T5486] __free_frozen_pages+0xc2b/0xdb0 [ 890.585220][ T5486] free_contig_range+0xbb/0x170 [ 890.590166][ T5486] destroy_args+0x4e5/0x570 [ 890.594695][ T5486] debug_vm_pgtable+0x3f8/0x410 [ 890.599666][ T5486] do_one_initcall+0x250/0x870 [ 890.604540][ T5486] do_initcall_level+0x104/0x190 [ 890.609582][ T5486] do_initcalls+0x59/0xa0 [ 890.614011][ T5486] kernel_init_freeable+0x2a6/0x3e0 [ 890.619224][ T5486] kernel_init+0x1d/0x1d0 [ 890.623583][ T5486] ret_from_fork+0x514/0xb70 [ 890.628183][ T5486] ret_from_fork_asm+0x1a/0x30 [ 890.632967][ T5486] [ 890.635304][ T5486] Memory state around the buggy address: [ 890.641022][ T5486] ffff8880566b3b80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 890.649263][ T5486] ffff8880566b3c00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 890.657437][ T5486] >ffff8880566b3c80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 890.665518][ T5486] ^ [ 890.671680][ T5486] ffff8880566b3d00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 890.679931][ T5486] ffff8880566b3d80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 890.688181][ T5486] ================================================================== [ 890.696526][ T5486] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 890.703742][ T5486] CPU: 1 UID: 0 PID: 5486 Comm: dhcpcd Not tainted syzkaller #0 PREEMPT(full) [ 890.712948][ T5486] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 890.723025][ T5486] Call Trace: [ 890.726322][ T5486] [ 890.729263][ T5486] vpanic+0x56c/0xa60 [ 890.733270][ T5486] ? __pfx_vpanic+0x10/0x10 [ 890.737793][ T5486] panic+0xc5/0xd0 [ 890.741617][ T5486] ? __pfx_panic+0x10/0x10 [ 890.746086][ T5486] ? sock_def_readable+0x1cb/0x550 [ 890.751300][ T5486] ? rcu_is_watching+0x15/0xb0 [ 890.756079][ T5486] ? sock_def_readable+0x1cb/0x550 [ 890.761195][ T5486] ? sock_def_readable+0x1cb/0x550 [ 890.766322][ T5486] check_panic_on_warn+0x89/0xb0 [ 890.771270][ T5486] ? sock_def_readable+0x1cb/0x550 [ 890.776401][ T5486] end_report+0x73/0x170 [ 890.781179][ T5486] ? sock_def_readable+0x1cb/0x550 [ 890.786480][ T5486] kasan_report+0x128/0x150 [ 890.791317][ T5486] ? sock_def_readable+0x1cb/0x550 [ 890.796463][ T5486] sock_def_readable+0x1cb/0x550 [ 890.801516][ T5486] ? sock_def_readable+0xae/0x550 [ 890.806582][ T5486] ? send_to_lecd+0x26d/0x830 [ 890.811271][ T5486] send_to_lecd+0x3e7/0x830 [ 890.816049][ T5486] lec_start_xmit+0xe52/0x2890 [ 890.820828][ T5486] dev_hard_start_xmit+0x2cd/0x830 [ 890.826173][ T5486] sch_direct_xmit+0x251/0x4c0 [ 890.831127][ T5486] ? __pfx_sch_direct_xmit+0x10/0x10 [ 890.836690][ T5486] __dev_queue_xmit+0x180f/0x3950 [ 890.841724][ T5486] ? __dev_notify_flags+0x1a9/0x310 [ 890.847124][ T5486] ? __dev_queue_xmit+0x2b6/0x3950 [ 890.852248][ T5486] ? __pfx___dev_queue_xmit+0x10/0x10 [ 890.857636][ T5486] ? __asan_memcpy+0x40/0x70 [ 890.862246][ T5486] ? eth_header+0x11b/0x200 [ 890.866754][ T5486] ? __pfx_eth_header+0x10/0x10 [ 890.871605][ T5486] ? lapbeth_data_transmit+0x218/0x2e0 [ 890.877165][ T5486] ? __pfx_lapbeth_data_transmit+0x10/0x10 [ 890.883113][ T5486] lapb_data_transmit+0x90/0xb0 [ 890.887981][ T5486] lapb_transmit_buffer+0x163/0x200 [ 890.893448][ T5486] lapb_establish_data_link+0x89/0xe0 [ 890.898913][ T5486] lapb_device_event+0x4e1/0x670 [ 890.903991][ T5486] notifier_call_chain+0x1ad/0x3d0 [ 890.909207][ T5486] __dev_notify_flags+0x1a9/0x310 [ 890.914252][ T5486] ? __pfx___dev_notify_flags+0x10/0x10 [ 890.920098][ T5486] ? __dev_change_flags+0x4c6/0x690 [ 890.925335][ T5486] ? __pfx___dev_change_flags+0x10/0x10 [ 890.930997][ T5486] ? devinet_ioctl+0x32b/0x1b30 [ 890.935868][ T5486] ? __pfx___mutex_lock+0x10/0x10 [ 890.940906][ T5486] netif_change_flags+0xe8/0x1a0 [ 890.945867][ T5486] dev_change_flags+0x130/0x260 [ 890.950736][ T5486] devinet_ioctl+0x9f2/0x1b30 [ 890.955458][ T5486] ? __pfx_devinet_ioctl+0x10/0x10 [ 890.960860][ T5486] ? get_user_ifreq+0x12b/0x180 [ 890.965720][ T5486] inet_ioctl+0x42a/0x560 [ 890.970144][ T5486] ? __pfx_inet_ioctl+0x10/0x10 [ 890.975034][ T5486] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 890.980065][ T5486] sock_do_ioctl+0x101/0x320 [ 890.984667][ T5486] ? __pfx_sock_do_ioctl+0x10/0x10 [ 890.989799][ T5486] sock_ioctl+0x5c6/0x7f0 [ 890.994155][ T5486] ? __pfx_sock_ioctl+0x10/0x10 [ 890.999035][ T5486] ? fd_install+0x306/0x3d0 [ 891.003612][ T5486] ? bpf_lsm_file_ioctl+0x9/0x20 [ 891.008594][ T5486] ? __pfx_sock_ioctl+0x10/0x10 [ 891.013826][ T5486] __se_sys_ioctl+0xfc/0x170 [ 891.018554][ T5486] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 891.024736][ T5486] do_syscall_64+0x15f/0xf80 [ 891.029357][ T5486] ? clear_bhb_loop+0x40/0x90 [ 891.034078][ T5486] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 891.040427][ T5486] RIP: 0033:0x7fda8e84c378 [ 891.044864][ T5486] Code: 00 00 48 8d 44 24 08 48 89 54 24 e0 48 89 44 24 c0 48 8d 44 24 d0 48 89 44 24 c8 b8 10 00 00 00 c7 44 24 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 07 89 d0 c3 0f 1f 40 00 48 8b 15 49 3a 0d [ 891.064486][ T5486] RSP: 002b:00007ffc1f485fa8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 891.073096][ T5486] RAX: ffffffffffffffda RBX: 0000000000000013 RCX: 00007fda8e84c378 [ 891.081174][ T5486] RDX: 00007ffc1f4961a0 RSI: 0000000000008914 RDI: 0000000000000013 [ 891.089155][ T5486] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 891.097665][ T5486] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc1f4a6340 [ 891.105894][ T5486] R13: 00007fda8e74c708 R14: 0000000000000028 R15: 0000000000008914 [ 891.113886][ T5486] [ 891.117062][ T5486] Kernel Offset: disabled [ 891.121502][ T5486] Rebooting in 86400 seconds..