last executing test programs: 14.174954115s ago: executing program 4 (id=3082): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r5, @ANYRES32=r4, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r5, &(0x7f0000000240), &(0x7f0000000140)=@tcp6=r3}, 0x20) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000000)='dctcp', 0x5) sendmmsg$inet6(r3, &(0x7f0000002440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x10) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="4c00000010003b15000800"/20, @ANYRES32=0x0, @ANYBLOB="0000000000b401002400128009000100626f6e640000000014000280050001000100000005000d000200000008000a00", @ANYRES32=r2], 0x4c}}, 0x0) 14.038276817s ago: executing program 4 (id=3085): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000140)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000040)=0x1b32, 0x4) sendto$inet(r0, &(0x7f0000000540)='v', 0x1, 0x4040, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000b40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=""/42, 0x2a}, 0x65a7}], 0x1, 0x12102, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4ddbf05113a9fa17e7d5c2", @ANYRESDEC=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32, @ANYBLOB="d5063300b0000000ffffffff"], 0x6f4}}, 0x800) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa1780c206050086dd6018232500102c"], 0x0) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00'}, 0x94) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000240)={0x2, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x18, 0x7f, 0x2, 0xb, 0x0, 0x0, 0x25dfdbfd, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x300, @multicast1}}, @sadb_address={0x3, 0x12, 0x3c, 0x80, 0x0, @in={0x2, 0x4e20, @remote}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @broadcast}}]}, 0x58}}, 0x0) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000240), r1) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x40, r4, 0x200, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @initdev={0xac, 0x1e, 0x1, 0x0}}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e20}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'nicvf0\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x810}, 0x800) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0x36, 0x0, &(0x7f0000000040)="58aa1bbadaadc0394fc26b73a32974616fb269bf19c5a8aff080c32898144c81430c4d3a061460dca9831030990041c3ab88ec07da8e", 0x0, 0x149d, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0xfffffffd}, 0x50) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r1, 0x6628) 13.885676624s ago: executing program 4 (id=3089): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) mmap(&(0x7f000000d000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) bpf$LINK_DETACH(0x22, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000a40)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000006000000040000000000000e0400000000000000000000000000000d03000000000000000000000400000000000000000000000b030000000000006361"], 0x0, 0x52}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="850500001a000000d435550000000000bc202900000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0xa, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2}, 0x48) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x9c, r2, 0x2, 0x70bd2c, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x40, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x33, 0x9}}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x2a}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@private=0xa010102}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xa}]}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x10, 0x28}}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3a}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wlc\x00'}]}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x10001}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x7f}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x4000001}, 0x404a811) 13.737559721s ago: executing program 4 (id=3092): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x20000810) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="74000000090601"], 0x74}, 0x1, 0x0, 0x0, 0x10040007}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0b01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r2, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r3, 0x42}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000200)="27030200000314000e00003cddcb00000000001100000000000000000000000000000000000085dc9d9839dc1336", 0x2e}], 0x1}, 0x4005) sendmmsg$inet6(r0, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000004c0)="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", 0xfa}], 0x1, &(0x7f0000000640)=[@pktinfo={{0x24, 0x29, 0x32, {@empty, r3}}}, @hoplimit={{0x14, 0x29, 0x34, 0x3c5f}}, @dontfrag={{0x14, 0x29, 0x3e, 0x2}}, @dstopts={{0xe8, 0x29, 0x37, {0x0, 0x19, '\x00', [@pad1, @generic={0x81, 0xae, "a29149d9a90efa8180a6880a240d1fcedcd5041cc90bb73c63d953a091876bdb408e5b8717ab78786582d63f2d2819f2ad75acac08731037b2118d9ec33a7e364fcdf9a7677e8b8e5fc217a48efade66097eba0156bdd180037cf74a55b7f042995d85c5a796001201398ce727a637d9200abfaa29c331a6fb0dd3077ca933a7de2a75fb1825dc6be258efe409d7c644f3cae75bd9a7d632bd4fd8ea0ca4081d7e0cee55901fd9e672d42485d02b"}, @pad1, @hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @enc_lim={0x4, 0x1, 0x2}]}}}], 0x140}}], 0x1, 0x40041) r4 = socket$kcm(0x2, 0x3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r5, 0x2000300, 0xe, 0x0, &(0x7f0000000600)="63e4ed8e46080000003389f7f986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000140)={@val={0x0, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x14}, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x8016, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @dest_unreach={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @local, @loopback}}}}, 0xfdef) 13.299682326s ago: executing program 4 (id=3098): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r1, 0x6, 0x4, &(0x7f0000000080)=0x6, 0x4) getsockopt$inet_mptcp_buf(r1, 0x6, 0x4, 0xfffffffffffffffd, &(0x7f0000000000)) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="640000001900010000000000000000001d0109004d000f80"], 0x64}}, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x4}]}, 0x10) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x315641, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r5 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r4, &(0x7f00000000c0)={@val={0x8, 0x800}, @val={0x7, 0x3, 0x3, 0x2, 0x14}, @ipv4=@tcp={{0x5, 0x4, 0x0, 0x4, 0x8016, 0x0, 0x0, 0x8, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast}, {{0x8100, 0x88a8, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x20, 0x5}}}}, 0xfdef) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r6, 0x0, 0x1, 0x0, 0x29) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYRESHEX=r5, @ANYRES64=r3, @ANYRES16=r6, @ANYRES64=r0], 0x4c}, 0x1, 0x0, 0x0, 0x104}, 0x20000000) 12.779658295s ago: executing program 4 (id=3101): r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) sendmmsg$inet6(r1, &(0x7f0000004ac0)=[{{&(0x7f0000000040)={0xa, 0x0, 0x5, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xfffffffe}, 0x1c, 0x0, 0x0, &(0x7f00000000c0)}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0xd, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x10000}, 0x1c, 0x0}}], 0x2, 0x4804) 7.85216881s ago: executing program 0 (id=3147): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000300)='cgroup.clone_children\x00', 0x2, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000000c0)={0x1a0000010}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000005a0000008500000022000000180100002020702500000000002020200100000000000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffff"], 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET(r6, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x30, 0x1401, 0x1, 0x70bd2b, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x8800) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r4, 0x4048587b, &(0x7f0000001840)={{r4, &(0x7f0000000080)='.,[\x00', 0x0, &(0x7f00000001c0)={@align=0x100000000, {0x8, 0x40, 0x5a80, 0x46}}, 0x5, &(0x7f0000000200)={@_ha_fsid}, &(0x7f0000000240)}, 0x5, &(0x7f0000001780)=[{0x2, 0x6, &(0x7f0000000280)='syz_tun\x00', &(0x7f0000000380)="ba3c564e30fb7f659e0bf9d52602e25df2d44de2a603f6608b8049493082c0b8736827208baf7303e8c8ed5584e9d976d277ed544cf993e86e7d41ae0c4225cb621b5e5a5848657b10f9ee5972c11de67aa05378d8dda0beeeb3c4637485cbba88338e8ca0985b08301043811185b06c4a8a149750596ae46828b0052dff319114565bac1c2e46a910eabc", 0x8b, 0x28}, {0x3, 0x0, &(0x7f00000004c0)='syz_tun\x00', &(0x7f0000000500)="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", 0x1000, 0x30}, {0x1, 0x81, &(0x7f0000001500)='\xf9}(:\x00', &(0x7f0000001540)="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", 0xfe}, {0x3, 0x83bb, &(0x7f0000001640)='\x00', &(0x7f0000001680)="a1b9297a8560bd03ffb585dad32a4d167d17178801fa9df0d54b9770914b54d5ed8933ed1720dc1a497e78c69a470d77b9864eee5772cbd7a94db4", 0x3b, 0x20}, {0x1, 0x4, &(0x7f00000016c0)='@[}@,\x00', &(0x7f0000001700)="03cc80e1cc53fdbb1924fbc0bcffa4ad6850568992cd5c7c94005adc07dd92fd78c1a111bea597c3eb6a4176df9cca7d8c09e27f836fbcde1426770c0334e1caff3b4021e86049d20bdf9896c30199ac8dc569b9a38c4b8ca4c9a3527ebd829bb4b1a96a6de1b939ae47a4af96f624", 0x6f, 0x2}]}) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000001980)={0x20, 0xc, &(0x7f00000018c0)=ANY=[@ANYRES8=r3, @ANYRES32=r4, @ANYRES16, @ANYRESHEX=0x0, @ANYRES32=r5, @ANYRESHEX=r5, @ANYRESHEX=r5], &(0x7f0000000040)='GPL\x00', 0x0, 0x18, 0x0, 0x40f00, 0x40, '\x00', r5, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r7, r5, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xfdef, &(0x7f00000004c0)=ANY=[], 0x0) 7.656529918s ago: executing program 0 (id=3148): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket(0x10, 0x3, 0x0) write(r2, &(0x7f0000000580)="240000001e005f031400ff01000000f80700b3586ff606c2e553797c080008e467dc0000", 0x24) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e1d, 0x0, @empty, 0x61}, 0x1c) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002cbd701004000000050000000600010005000000080009000200000008000b000000000008000c00a80a00003e0e0ae513620f907355eb162ec73adc0e640dd6befac53f392d2a4be979e468b2b34c69a324427cb351f3079753f8bc61bccd7c3747b5a098a6816e780ae327c5e51a5101d284301ff910d9e2f6850caaf76d28cd419b24e625c6ec414188d4ca865dde3b5464a8e9f2ab968e02a3751b98d9df9ab9f62243442e8ada6d04f1c7785d09771c1adda210f8327e21e2c45ee00c6c6a86ab1554f50ea673d5c7bfd903b4059c5e90cfd375b335c2d2cb2ab1b10911fc802dcf7b811055b7cb3f2212c4765f6a9c221fe3cd4f8bcb97ad6a065a186b8ae2059b957441d49f7d0b297cb5bdab428c1d154f54e5c99407d4f9df81b8bb90985da16346b742a784709cad33196b6cfe633bdfa0d9aef43db710f15582f715934cf21faa1c5fc647151aa274700cdcd18dd3b4628b867da9"], 0x34}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) 7.185620131s ago: executing program 0 (id=3149): bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0a0000001b000000420000003e00200042"], 0x50) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_int(r0, 0x29, 0x12, 0x0, 0x26) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket(0x848000000015, 0x805, 0x0) connect$inet6(r2, &(0x7f0000000080)={0xa, 0xe22, 0xd99, @private0, 0xf0}, 0x1c) r3 = socket$inet6_icmp(0xa, 0x2, 0x3a) recvmmsg(r3, &(0x7f0000000680)=[{{&(0x7f0000000000)=@l2={0x1f, 0x0, @none}, 0x80, &(0x7f0000000540)=[{&(0x7f00000000c0)=""/70, 0x46}, {&(0x7f0000000140)=""/194, 0xc2}, {&(0x7f0000000240)=""/92, 0x5c}, {&(0x7f00000002c0)=""/70, 0x46}, {&(0x7f0000000340)=""/30, 0x1e}, {&(0x7f0000000380)=""/18, 0x12}, {&(0x7f00000003c0)=""/69, 0x45}, {&(0x7f0000000440)=""/87, 0x57}, {&(0x7f00000004c0)=""/24, 0x18}, {&(0x7f0000000500)=""/32, 0x20}], 0xa, &(0x7f0000000600)=""/99, 0x63}, 0x5}], 0x1, 0x20, 0x0) setsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f0000000080)={0x401, 0x6}, 0x8) close(r3) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x3c1, 0x3, 0x3b8, 0x0, 0xc8, 0x8, 0x0, 0x5803, 0x2e8, 0x2e8, 0x2e8, 0x2e8, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x100, 0x168, 0x0, {0x0, 0x2000000000000}, [@common=@ipv6header={{0x28}, {0x6, 0x4d, 0x1}}, @common=@inet=@l2tp={{0x30}, {0x3, 0x3, 0x3, 0x1, 0x8}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x6, 0x5, 0x8, 0x401, 'pptp\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x160, 0x180, 0x0, {}, [@common=@inet=@set1={{0x28}, {{0x2, 0x0, 0x7}}}, @common=@srh1={{0x90}, {0x2f, 0x11, 0x0, 0xd, 0x1c, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @empty, @dev={0xfe, 0x80, '\x00', 0x1e}, [0xffffffff, 0x0, 0xffffffff, 0xff], [0xff000000, 0x0, 0xff000000, 0xffffffff], [0xffffffff, 0xff000000, 0xff000000, 0x7fffff00], 0x0, 0x1000}}]}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x418) 4.40233164s ago: executing program 2 (id=3177): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000600)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x35}}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000400)={r1, @in6={{0xa, 0x4e23, 0x5, @empty, 0x9}}, 0x5, 0x4, 0x624e, 0xa, 0x55, 0x3e}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000000c0)={r1, @in={{0x2, 0x4e23, @empty}}, 0xfffffffe, 0x2, 0x40000002, 0x0, 0x4d, 0x5, 0x81}, 0x9c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000000)={r1, 0x101}, 0x8) 4.254543115s ago: executing program 3 (id=3179): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000014c0)=@newsa={0x158, 0x10, 0x413, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@rand_addr=' \x01\x00', 0xfffd, 0x0, 0x4e24, 0x0, 0x2, 0x0, 0x20, 0x0, 0x0, 0xee00}, {@in=@rand_addr=0x64010100, 0x20, 0x32}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, {0x0, 0x7, 0x0, 0x4, 0x2000000000000000, 0x4, 0x20000000008}, {0x100000001, 0x8, 0xcc, 0x8}, {0xf8}, 0x0, 0x4, 0x2, 0x0, 0x1}, [@algo_aead={0x67, 0x12, {{'rfc4309(ccm(aes))\x00'}, 0xd8, 0x60, "b512b3880e60fe3f6b54c6b909007c9f70d0cfe93e43e9da39542d"}}]}, 0x158}}, 0x844) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) (async, rerun: 64) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x2}, 0x50) (rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000001000000850000008600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1a, 0x1, 0x1, 0x3, 0x42881, 0x1, 0x7ff, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3, 0x4}, 0x50) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x0, 0x13, r4, 0x0) (async) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0x20, &(0x7f0000000440)={&(0x7f0000000340)=""/173, 0xad, 0x0, &(0x7f0000000400)=""/56, 0x38}}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x14, &(0x7f00000004c0)=@raw=[@ldst={0x0, 0x2, 0x4, 0x1, 0x7, 0xffffffffffffffff, 0x10}, @exit, @map_val={0x18, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x401}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @map_fd={0x18, 0x9, 0x1, 0x0, 0x1}, @initr0={0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x34}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0xd, 0x0, 0x0, 0x0, 0xcc61}, @call={0x85, 0x0, 0x0, 0x37}], &(0x7f0000000580)='GPL\x00', 0x6, 0x83, &(0x7f00000005c0)=""/131, 0x41100, 0x1, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x8, &(0x7f0000000680)={0x9, 0x1}, 0x8, 0x10, &(0x7f00000006c0)={0x0, 0xe, 0xf61, 0x2e4e}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x2, &(0x7f0000000700)=[0x1, 0x1], &(0x7f0000000740)=[{0x0, 0x2, 0x8, 0x3}, {0x5, 0x3, 0xe}], 0x10, 0x9}, 0x94) (async) r7 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000840)={0xffffffffffffffff, 0x80000001, 0x8}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x1b, 0x24, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@ldst={0x1, 0x3, 0x3, 0x8, 0x5, 0x0, 0x13}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @call={0x85, 0x0, 0x0, 0xa9}, @printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x80000001}}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x2}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000040)='GPL\x00', 0x80, 0x2d, &(0x7f0000000280)=""/45, 0x41100, 0x24, '\x00', 0x0, @fallback=0x1e, r4, 0x8, &(0x7f00000002c0)={0x2, 0x4}, 0x8, 0x10, &(0x7f0000000300)={0x3, 0x3, 0xe451, 0x2}, 0x10, r5, r6, 0x2, &(0x7f0000000880)=[r7], &(0x7f00000008c0)=[{0x2, 0x2, 0x9, 0xb}, {0x1, 0x1, 0x6, 0xc}], 0x10, 0xffffffb3}, 0x94) 4.189308873s ago: executing program 2 (id=3181): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x20004000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="7a0a00ff0000000071107a00000000009500000000000000"], &(0x7f0000000480)='syzkaller\x00'}, 0x80) 4.093835712s ago: executing program 3 (id=3182): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x84, &(0x7f0000000440)={0x0, @in6={{0xa, 0x0, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}, 0x0, 0x80}, &(0x7f0000000500)=0x90) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r3) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async, rerun: 64) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) (rerun: 64) close(r5) (async, rerun: 64) r6 = socket$unix(0x1, 0x2, 0x0) (rerun: 64) r7 = socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)=@newtclass={0x40, 0x28, 0x4, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x0, r8, {0xffff, 0xa}, {0xf, 0x10}, {0xb, 0xd}}, [@tclass_kind_options=@c_skbprio={0xc}, @TCA_RATE={0x6, 0x5, {0x5, 0x7f}}, @TCA_RATE={0x6, 0x5, {0x8, 0x6}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240080c1}, 0x0) (async) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x80000, {0x0, 0x0, 0x0, r8, {0x0, 0x6}, {0x2, 0xb}, {0xffe0, 0xb}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0xb, 0x5, 0xcac, 0xc}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2404c0f1}, 0x4008000) (async) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r6, 0x84, 0x10, &(0x7f0000000180)=@assoc_value={0x0, 0x7}, &(0x7f00000001c0)=0x8) (async, rerun: 32) socketpair(0x1d, 0x3, 0xc0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) (async, rerun: 32) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), r3) (async, rerun: 32) r11 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000080)={'veth1_macvtap\x00', 0x0}) sendmsg$nl_route(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x31943}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r12}, @IFLA_MASTER={0x8, 0xa, r12}]}, 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f00000005c0)={'vcan0\x00', 0x0}) sendmsg$ETHTOOL_MSG_FEATURES_SET(r9, &(0x7f0000000640)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000600)={&(0x7f00000006c0)={0x720, r10, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@ETHTOOL_A_FEATURES_WANTED={0x164, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x2a, 0x4, "73d3024c93a04d4b693809fe70aeb0b4c1e44a0ad65c413d51cc20bb1bccd4596a35d3c39d94"}, @ETHTOOL_A_BITSET_VALUE={0x9d, 0x4, "087f5c7afd896797ca15579133095d34c68e00568a59377db9afc9e45dabefc9cebbaa9b11e43fb1d13c5ab1a1e67c4ac57fcaf067c5b7e7aa6198ae64898b036555b9bdf02813e00c29ecd2074193b6e331d9ef6abd949116e64e2c6312d3f2ba550074131e98ecd3d661b6c7237703c575afa71dfaa583d6e120b0f3693384ee49660be791bea3ab2d525fc84837b447c2c52f5f7fa725f7"}, @ETHTOOL_A_BITSET_VALUE={0x93, 0x4, "744f1315c4068e34a9a96e882412dcdea983748dbaff11d0136314ee8f2f1b9bf4a9dc4576be708e15190099282e54f3745c7c73aad09710c937fc74a481a609ad33f72edda680fcabaeb0237e308543c4b7ee9c199ec4b45c5660a3d848bc53f4525cf0ff898b2fe1d336b35b0042fa8203aa17263ca9efbce286d861e7c5a3f513729773f0bf40f1c42073e6b4be"}]}, @ETHTOOL_A_FEATURES_HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_FEATURES_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}]}, @ETHTOOL_A_FEATURES_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_FEATURES_HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}]}, @ETHTOOL_A_FEATURES_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_FEATURES_WANTED={0xc4, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0xbc, 0x3, 0x0, 0x1, [{0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '+$\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x80}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'skbprio\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '*\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '\xbb\xbb\xbb\xbb\xbb\xbb'}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'skbprio\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '\xbb\xbb\xbb\xbb\xbb\xbb'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x10001}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, '/dev/net/tun\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'cbs\x00'}]}]}]}, @ETHTOOL_A_FEATURES_WANTED={0x234, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xfffffff8}, @ETHTOOL_A_BITSET_MASK={0xa7, 0x5, "73edca20739fb4da59dd35c56c2892930e95430eca3798716c5e33103b0f7ae05432e05cf278624af77e23445ad54f144333a0b35e90b22bf7cddf0c7eb1cde2974093abea32c575051f0926bd82994306fd2bb4724d1009c6f3fc3b424a2a1335a3bb92710f608cc7105191a49d2762a3c18ba594736d23ed6b096bd2f7d26213b97b77d6da7d246413c2d6eec699f9e8b8c4e9690202a90bb2ea36e030e7618d233d"}, @ETHTOOL_A_BITSET_MASK={0x2b, 0x5, "3f05ecfbe5bcd1ca4170bdd73c3031324d75cd233be279db6376a6d364982cbb81dda60c82cc1b"}, @ETHTOOL_A_BITSET_BITS={0x30, 0x3, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'E!-\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xc}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xbfe5}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x8000}, @ETHTOOL_A_BITSET_VALUE={0x68, 0x4, "f30ed2a10b791a94836d10db3ef28ba82fb0a024d1c364652e09db0776c02e8428d9ecc73c9747d64e3956fc8846cafb7637b9baff7d18a47802b23ee771e39bdc226a127edf3742c5d9ac5065e754dc4d2e39ce4020f7887c938caf089aee6c77249ba9"}, @ETHTOOL_A_BITSET_VALUE={0xac, 0x4, "ae216837d021e03200d41f4d68361b731c3973d82be4ebb56b2a174c71ea5f6f6e8c7757d7a11ac493863aefe9ff6e62b5d4faaaa6612ec242d791f1ee0a42c3ae2b8949deffc44bee0b6c7dbd071e1730acbd088c5da133eb412cfa8d3520c7e2d263f1b8fe73ad519c13eee1915483addcf0240b8245b2f9684fb2f7f859bdac63c2670f4ecab613fa9022ecd19fde3b1be79e2177fa7a2dfaea8203ac2a9664cbcc1cf69906ad"}, @ETHTOOL_A_BITSET_SIZE={0x8}]}, @ETHTOOL_A_FEATURES_WANTED={0x154, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0xcb, 0x4, "d58f0fbc3662bf6c04a0034b0741903a2961684aeeee3056667c90679fca4dc895c1266eaf9b23ab45a5f3d7ec9c4a66b0bf94353e3cf647e40b9837227d4d1274c1abe60d46b8a7d679fbea28f27d4064bffad7c26d24278841f6de62cc44da1d791da96884260066d5662736e07e60bb07045c6fd0fa5487a86945b8ebf529fb7a8f93e2d0d9c265b311332694a5eb4b6d66e01d40d28f9d0bb4ed8be5e8f32542a671211ad9b770f2c23dd11b4cce50372feca4325dfaa3f6a4f9596a2366555e9e6891b3de"}, @ETHTOOL_A_BITSET_VALUE={0x84, 0x4, "957244b3299ecbbe55d91f4444b55a4c822fa373aaac701c2d0ae3fa65a82256e80e3484b56fa721277910bd53176b43901ad68df249024b1f6a253a40a8721a7d819677f10729c34dd4bca00ab9c62c1aa8246e11925d7ae9876335959cc480ce175a20ca3642452492cb30aa9902a98da8c48144430145197ae8d28c3a49d7"}]}]}, 0x720}, 0x1, 0x0, 0x0, 0x10000100}, 0x8010) (async, rerun: 64) ioctl$SIOCSIFHWADDR(r5, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) (rerun: 64) 4.038980064s ago: executing program 2 (id=3183): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) socket$inet6_udp(0xa, 0x2, 0x0) socket(0x10, 0x3, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000000f80)=ANY=[@ANYBLOB="02010909070000002bbd5000fdffffff050007002aa000000a00"], 0x38}}, 0x24000802) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000002340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@struct={0x0, 0x0, 0x0, 0x13, 0x0, 0x2}, @fwd={0x1000004}]}}, 0x0, 0x32, 0x0, 0x9}, 0x28) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000a00)=@security={'security\x00', 0xe, 0x4, 0x3d8, 0xffffffff, 0x240, 0x240, 0xf0, 0xffffffff, 0xffffffff, 0x340, 0x340, 0x340, 0xffffffff, 0x4, &(0x7f0000000000), {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffff00, 0x0, 'veth1_vlan\x00', 'ip6erspan0\x00', {0xc25b0faa22835464}, {}, 0x0, 0x3, 0xa}, 0x0, 0x90, 0xf0, 0x0, {}, [@common=@socket0={{0x20}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x4, [0x1, 0x4, 0x1, 0x4, 0x3, 0x6], 0x4, 0x1}, {0x3, [0x4, 0x3, 0x5, 0x2, 0x4], 0x3}}}}, {{@uncond, 0x0, 0xf0, 0x150, 0x0, {}, [@common=@osf={{0x50}, {'syz1\x00', 0x0, 0x1, 0x2, 0x2}}, @common=@unspec=@mac={{0x30}, {@link_local}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @random="67cc65a45d80", 0xa5d0, 0x4, [0x23, 0x10, 0x2e, 0x2f, 0x27, 0x30, 0x9, 0x3b, 0x3a, 0x2c, 0x2c, 0x11, 0x1c, 0x2e, 0x22, 0x11], 0x0, 0x8, 0x9e0d}}}, {{@uncond, 0x0, 0xa0, 0x100, 0x0, {}, [@common=@addrtype={{0x30}, {0x20, 0x80, 0x1}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x24}, 0x7, 0x4, [0x36, 0x15, 0x32, 0x1d, 0x38, 0x32, 0x30, 0xe, 0x2f, 0x14, 0xe, 0x6, 0x38, 0x2e, 0x33, 0x1c], 0x1, 0x3, 0x7fffffffffffffff}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x438) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xa, 0x44, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0xfffffffe}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000005c0)={r4, &(0x7f00000003c0), &(0x7f0000000580)=@tcp6}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000380)={r4, &(0x7f0000000600), &(0x7f0000000340)=@udp6, 0x1}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000012c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000040)={@cgroup=r5, r5, 0x2f}, 0x20) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) listen(r7, 0x100) accept4(r7, 0x0, 0x0, 0x0) shutdown(r7, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r9, &(0x7f00000002c0)={&(0x7f0000000200), 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x14, 0x7, 0x1, 0x201, 0x0, 0x0, {0x7, 0x0, 0x1}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x30, 0x5, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x2000}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x4}]}], {0x14}}, 0xa4}}, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100000000000000000001000000380001800600010002000000080005000000ed000c0007000000000000000000080009000000000008000800000000000800060073697000"], 0x4c}}, 0x0) bpf$BPF_PROG_DETACH(0x1c, &(0x7f00000001c0)=ANY=[@ANYRES32=r3, @ANYRES32=r5, @ANYBLOB='/'], 0x20) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000040)="2e00000011008188040f80ec59acbc0413a1f8480b0000005e140602000000000e0027001000000002800000121f", 0x2e}], 0x1}, 0x0) 3.529573658s ago: executing program 3 (id=3185): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) (async, rerun: 32) write$tun(r0, &(0x7f0000000080)={@val={0x8, 0x800}, @val={0x7, 0x3, 0x3, 0x802, 0x14}, @ipv4=@tipc={{0x6, 0x4, 0x1, 0x34, 0x38, 0x65, 0x0, 0x1, 0x6, 0x0, @private=0xa010100, @local, {[@rr={0x7, 0x3, 0x2}]}}, @payload_direct={{{{0x20, 0x0, 0x0, 0x0, 0x1, 0x8, 0x0, 0x2, 0x8, 0x0, 0x0, 0x3, 0x4, 0x3, 0x29, 0x1, 0x2, 0x4e24, 0x4e23}, 0x4, 0x4}}}}}, 0x46) (async, rerun: 32) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x14c}, 0x1, 0x0, 0x0, 0x8080}, 0x240440c8) 3.385171003s ago: executing program 1 (id=3186): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) 3.285366295s ago: executing program 2 (id=3187): r0 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000700)=@generic={&(0x7f00000006c0)='./file0\x00', 0x0, 0x18}, 0x18) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0x40, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r5}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x40}}, 0x800) pipe(&(0x7f0000000800)={0xffffffffffffffff}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000b40)={0x1, 0xffffffffffffffff}, 0x4) r8 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000b80)={0x0, 0x5, 0x18}, 0xc) r9 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000c40)={0x0, 0x0, 0x10}, 0xc) r10 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000c80)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3, 0x1}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000d80)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000d00), &(0x7f0000000d40)='%-5lx \x00'}, 0x20) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000dc0)={0xffffffffffffffff, 0xffff, 0x6, 0x3}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e80)={0x18, 0x2f, &(0x7f00000009c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8f8}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x32c, 0x0, 0x0, 0x0, 0xfff}, @generic={0x2, 0x6, 0x6, 0xd9, 0xc6}, @printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0xe, 0x0, 0x0, 0x0, 0x1}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0x5}, @printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xb}}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000740)='GPL\x00', 0x9, 0x7d, &(0x7f0000000780)=""/125, 0x40f00, 0xb3, '\x00', r5, 0x0, r6, 0x8, &(0x7f0000000840)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000000940)={0x3, 0x1, 0xffff, 0xf32}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000e00)=[r7, r8, r9, r10, r11, 0x1, 0xffffffffffffffff, r12], &(0x7f0000000e40)=[{0x4, 0x2, 0x4, 0xa}, {0x0, 0x4, 0x4, 0x9}], 0x10, 0x3}, 0x94) r13 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x9, '\x00', 0x0, 0x24}, 0x94) r14 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0xfffffffa, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5, 0x5}, 0x50) r15 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r15, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r17 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r17, r16, 0x25, 0x0, @void}, 0x10) r18 = bpf$ITER_CREATE(0x21, &(0x7f00000002c0), 0x8) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000340), &(0x7f0000000380)=r13}, 0x20) r20 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r21 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r21}, &(0x7f0000000280), &(0x7f0000000240)=r20}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYRES16=r19, @ANYRES32=r21, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, r12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r22 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000400)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x3}, 0x50) r23 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000480)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x2}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x11, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xc}, [@printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}}, @generic={0x7, 0x2, 0x8, 0x7, 0x698a}, @ldst={0x3, 0x0, 0x2, 0x4, 0x8, 0x30, 0x4}, @alu={0x4, 0x0, 0x0, 0x5, 0x6, 0x2, 0xffffffffffffffff}, @func, @map_val={0x18, 0x1, 0x2, 0x0, r14, 0x0, 0x0, 0x0, 0x4}]}, &(0x7f0000000000)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x46, '\x00', r16, 0x25, r18, 0x8, &(0x7f0000000300)={0xa, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f0000000500)=[r19, r21, r22, r23, 0x1], &(0x7f0000000540)=[{0x0, 0x3, 0xc, 0x1}, {0x1, 0x1, 0xc, 0x2}, {0x3, 0x5, 0xb, 0x4}, {0x0, 0x4, 0x3, 0x1}, {0x5, 0x1, 0x3, 0x6}, {0x2, 0x3, 0x6, 0x6}, {0x0, 0x1, 0x5, 0x3}, {0x5, 0x2, 0xf, 0xa}, {0x0, 0x2, 0x7, 0x4}, {0x3, 0x3, 0x2, 0x4}]}, 0x94) 3.221682975s ago: executing program 1 (id=3188): ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000000)) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) getpeername$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000001c0)={'gretap0\x00', &(0x7f0000000140)={'tunl0\x00', 0x0, 0x7f87, 0x8, 0x81, 0x10, {{0xb, 0x4, 0x3, 0x1, 0x2c, 0x64, 0x0, 0xf8, 0x9e745d2d5bc3cc20, 0x0, @broadcast, @local, {[@lsrr={0x83, 0x17, 0xce, [@broadcast, @rand_addr=0x64010102, @broadcast, @remote, @remote]}]}}}}}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000200)={@rand_addr, @local, 0x0}, &(0x7f0000000240)=0xc) sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f0000000700)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000006c0)={&(0x7f0000000280)={0x424, r1, 0x800, 0x70bd2b, 0x25dfdbfe, {}, [@ETHTOOL_A_EEE_TX_LPI_TIMER={0x8, 0x7, 0x2}, @ETHTOOL_A_EEE_ENABLED={0x5}, @ETHTOOL_A_EEE_HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5}, @ETHTOOL_A_EEE_MODES_OURS={0x3a0, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x9}, @ETHTOOL_A_BITSET_BITS={0xd0, 0x3, 0x0, 0x1, [{0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x80000000}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8769}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffffffff}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x4}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '-!\xa0\x00'}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x40}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '{}\x00'}]}, {0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xe}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '+\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x93}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, ':\xad\\,.^--\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}]}]}, @ETHTOOL_A_BITSET_BITS={0x1c8, 0x3, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '\'\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x400}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, '-/%],!+\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '$]%\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x800}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '.{(\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, ',\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffffc5e6}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x91}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '*,\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '%{%\x00'}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1265cf5d}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '^}{!\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, 'C\xbf}v*$*!)\'\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7ad}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, ',\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x351}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffffd}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '$[\x00'}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, '+#&\xf8**\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xf}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x10001}, @ETHTOOL_A_BITSET_BIT_NAME={0x10, 0x2, '@-\'+}\\#**-:\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, ',\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8f1}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, '*/}::*\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, '\xbc]])&\x18*\x00'}]}]}, @ETHTOOL_A_BITSET_MASK={0xf9, 0x5, "8ef63b270a92d58240e2772f98b1d683a7e52ea61800fbd3e1ce909af22febd07e5bed83896b78fa4e720087229dc56ea191728956438f034f99708e222956f928c21f366183f76e907785ea070a23f7686b7590e42fd51ca353a48720d94517498b595f6573474e9e210ec287958f99e074975ca10e874d564bee4c25bf1319245245150ec82c0e4735da0a4f0393b80636f365742a1a0b8042e774c72ae5a534459dc5d7b2c008f24eff91c75d750d1016fd46c3afb45af839e2cb9305c1e53a9c9540a55b35546bb4585e3b19b435f760f8bd5d97992b7366ff89eb7e025edcfad8edc02e5b3cfc2818145a202954c153cbf9dd"}]}]}, 0x424}, 0x1, 0x0, 0x0, 0x41}, 0x2004080) readv(r0, &(0x7f0000000b00)=[{&(0x7f0000000740)=""/57, 0x39}, {&(0x7f0000000780)=""/89, 0x59}, {&(0x7f0000000800)=""/234, 0xea}, {&(0x7f0000000900)=""/189, 0xbd}, {&(0x7f00000009c0)=""/17, 0x11}, {&(0x7f0000000a00)=""/195, 0xc3}], 0x6) r5 = syz_genetlink_get_family_id$smc(&(0x7f0000000bc0), r0) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f0000000cc0)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c00)={0x50, r5, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'bond_slave_0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x50}}, 0x8080) r6 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) setsockopt$bt_BT_CHANNEL_POLICY(r6, 0x112, 0xa, &(0x7f0000000d00)=0x2, 0x4) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r8, 0x6, 0xe, &(0x7f0000000d40)={@in6={{0xa, 0x4e22, 0xa, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}}, 0x0, 0x0, 0x1d, 0x0, "4f6165aed3755e28ce3eafcdf2e7fd6671210038e5e8aaf0867ba2561a838fafb0b278ad365ee6620cd17ae9ab5896d6a835d3d8ecb92d22c0ed749cfadcf7df46bee0d074eeeb54000ac00811c92a17"}, 0xd8) poll(&(0x7f0000000e40)=[{r0, 0x40}], 0x1, 0x4) setsockopt$SO_TIMESTAMPING(r7, 0x1, 0x25, &(0x7f0000000e80)=0x80, 0x4) setsockopt$bt_BT_SECURITY(r6, 0x112, 0x4, &(0x7f0000000ec0)={0x5, 0xb}, 0x2) r9 = socket$inet_icmp(0x2, 0x2, 0x1) getsockopt$inet_IP_XFRM_POLICY(r9, 0x0, 0x11, &(0x7f0000000f00)={{{@in=@multicast1, @in6=@empty}}, {{@in6=@ipv4={""/10, ""/2, @multicast1}}, 0x0, @in=@empty}}, &(0x7f0000001000)=0xe8) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r0, 0x4048587b, &(0x7f0000001240)={{0xffffffffffffffff, &(0x7f0000001040)=']\x00', 0x80000, &(0x7f0000001080)={@align, {0x8, 0x3, 0x1}}, 0xe2d, &(0x7f00000010c0), &(0x7f0000001100)=0x38}, 0x1, &(0x7f0000001200)=[{0x3, 0x947, &(0x7f0000001140)='@/\x00', &(0x7f0000001180)="c6dad9ee81de6ab6b276f8d78d31ab0fe6d8eba6f09c3f860d69b48f909fc5adf83b5debb9de9cee9d0eee6d3dd0733e767833220e98d7184bb0b6ae12ee403f7c3d", 0x42, 0x10}]}) getsockopt$XDP_STATISTICS(r10, 0x11b, 0x7, &(0x7f00000012c0), &(0x7f0000001300)=0x30) setsockopt$MRT_FLUSH(r10, 0x0, 0xd4, &(0x7f0000001340)=0x9, 0x4) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r11, &(0x7f0000001440)={&(0x7f0000001380)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001400)={&(0x7f00000013c0)={0x20, 0x3, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0x9}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4051}, 0x20000001) setsockopt$ARPT_SO_SET_REPLACE(r9, 0x0, 0x60, &(0x7f00000014c0)={'filter\x00', 0x7, 0x4, 0x3f0, 0x220, 0x110, 0x110, 0x308, 0x308, 0x308, 0x4, &(0x7f0000001480), {[{{@arp={@rand_addr=0x64010101, @remote, 0xff, 0xffffff00, 0xb, 0x1, {@empty, {[0xff, 0xff, 0xff]}}, {@empty, {[0x0, 0xff, 0x0, 0x0, 0xff, 0xff]}}, 0xfff7, 0x6a50, 0x44ba, 0x81, 0x7, 0xb43c, 'rose0\x00', 'lo\x00', {}, {}, 0x0, 0x140}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@broadcast, @mac=@broadcast, @loopback, @empty, 0x8, 0xffffffff}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @multicast1, @multicast2, 0x2, 0x1}}}, {{@arp={@broadcast, @empty, 0xffffff00, 0x0, 0xe, 0x0, {@mac=@link_local, {[0xff, 0x0, 0xff, 0x0, 0x0, 0xff]}}, {@mac=@remote, {[0xff, 0xff, 0x0, 0x0, 0xff, 0xff]}}, 0x5, 0x6, 0x7ff, 0x6, 0x3, 0xd946, 'veth0_vlan\x00', 'dvmrp0\x00', {0xff}, {}, 0x0, 0x211}, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) writev(r11, &(0x7f00000019c0)=[{&(0x7f0000001900)="ea1528d2e1a70d489ea9183112acf024c23ed49f653d1cf3ead391a7eb796b1e7557cb56a41780c73d34a5a19f50e0c45f22b625a80eeb297ac839aad3f2899c2c6f708372acd1744f06a00ff5b8758708fe7a577e8b401487b541136768f7804c45f7506354b527e109d0ad3aacc3cb1fa5819a47ab375ce35c6b40a428cd2961bd3c9af831a1bb914f1a33def35973", 0x90}], 0x1) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001a40), r0) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r10, &(0x7f0000001b00)={&(0x7f0000001a00)={0x10, 0x0, 0x0, 0x2100}, 0xc, &(0x7f0000001ac0)={&(0x7f0000001a80)={0x28, r12, 0x400, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x6, 0x78}}}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20040804}, 0x1) getsockopt$IP_VS_SO_GET_TIMEOUT(0xffffffffffffffff, 0x0, 0x486, &(0x7f0000001bc0), &(0x7f0000001c00)=0xc) 2.980515432s ago: executing program 1 (id=3189): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r4, 0xffffffffffffffff}, &(0x7f00000006c0), &(0x7f0000000700)=r3}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r5}, &(0x7f0000000280), &(0x7f0000000140)=r2}, 0x22) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000000)={0x10000004}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="4400000010000104000002000000000000000000", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r7, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) 1.91930528s ago: executing program 0 (id=3190): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000040)=ANY=[@ANYBLOB="18080000feffff3f0000000000000000851000000600000085100000040000006a0800450000000018000000001000000000000000000000950000000000000095000000000000009500000000ff0f00000000000044e11eb37a87505e904ded383382602da3f4d7ceee7f558e82ece0cfbf99172ec16c5faefd7103db158e645209f00e39d3fc84308d0a7d60d6862430a5c92ac2a4af8f7546"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) 1.821648004s ago: executing program 0 (id=3191): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket(0xa, 0x3, 0xff) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22, 0x2, @loopback, 0x6}, 0x1c) setsockopt$MRT_FLUSH(r1, 0x0, 0xd4, &(0x7f0000000100)=0x4, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$unix(0x1, 0x1, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r7, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000700)="27070200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf4a39accb99", 0x27}], 0x1}, 0x1004) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000780)=ANY=[@ANYBLOB="2c0000004000070127b3700000000000047c00000400018016000604003b00000800028004000580"], 0x2c}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="300000001900010025bd7008000000000a00a000000300000200000014000200"], 0x30}}, 0x0) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="180000002e0001ff070000000000000006"], 0x18}], 0x1, 0x0, 0x0, 0x84}, 0x300) read(r0, &(0x7f0000000080)=""/38, 0x26) 1.691904604s ago: executing program 2 (id=3192): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1a0d000000000065031200000600000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) socket$inet6_mptcp(0xa, 0x1, 0x106) close(0x3) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={r3, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000000)={r3, 0x4, 0xfffff000, 0x9}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b0000000000000000000000008000"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x16, 0x14, &(0x7f0000000800)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@call={0x85, 0x0, 0x0, 0xd0}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}, {}, {0x85, 0x0, 0x0, 0x8}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r5, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b80a000500000000", &(0x7f0000000300)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r6 = socket$kcm(0x2b, 0x1, 0x0) close(r6) r7 = socket$kcm(0xa, 0x2, 0x73) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000680), 0xffffffffffffffff) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWSETELEM={0x14, 0xc, 0xa, 0x5, 0x0, 0x0, {0x3, 0x0, 0x6}}, @NFT_MSG_DELOBJ={0x1b4, 0x14, 0xa, 0x3, 0x0, 0x0, {0x5, 0x0, 0x3}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_USERDATA={0x91, 0x8, "d789d6872b89943d72bbdf5139672ae77b452d7b24075f511006e1a0cfd0c39350c4cb5c35c225721312747b0e2ad7f97f275e8f71e63d9d8aab464662570f407feb1d8024967f3ef558513b6c9ab8851ab095776667aedacf66f90afd3fcda51bff0e0ce3147bf9c51c1c3d890f758864c92511d712bfcb94733ffbbcd00dfffc173670a698c214caba88440c"}, @NFTA_OBJ_USERDATA={0x52, 0x8, "57465797b99a9a3227a1bd2e279f9756722366ae893dd9cb9640590df4a10b6f7e1141a203c2d030b735044945cf1f798cd1b59e134b5dad7204a1cf660d33bb5c70b2c15d19035f01c3ca2e669f"}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x5}, @NFTA_OBJ_USERDATA={0x76, 0x8, "042b206813ab2870bdfaea4a07da030f24b47a546108ff5882357eede123adeed42ba27d72835905dd045b2b0a2e2441a1ed8d7e5170a3831fac67c6a49762e9f39490f943df022461eb82ef041fd72f60724fe9286781535c032d739f3b9bac1c3b3ea7f6d9f66734223126d39f33ea0b3643ab4f2a13aa9d9556c7bc02aa2cb35116927ed5"}]}, @NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x201, 0x0, 0x0, {0x3}, [@NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0xbcc8c9aebf91a27f}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x230}, 0x1, 0x0, 0x0, 0x4000001}, 0x20000000) sendmsg$L2TP_CMD_TUNNEL_CREATE(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x44, r9, 0x917, 0x3, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @loopback=0xac1414aa}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast2}]}, 0x44}}, 0x0) sendmsg$inet(r7, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0xffac, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x1000}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x8, &(0x7f0000001d00)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="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"], 0x6b}, 0x0) close(r6) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000004200)={&(0x7f00000001c0)={0x14, 0x5f, 0x1, 0x70bd2a, 0x25dfdbfb, {0x18}}, 0x14}}, 0x0) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r12, 0x84, 0xc, &(0x7f00000012c0), &(0x7f0000001300)=0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f00000013c0)={'wlan1\x00'}) 1.673080668s ago: executing program 1 (id=3193): unshare(0x2c060000) (async, rerun: 32) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) socket$inet6_sctp(0xa, 0x1, 0x84) (async, rerun: 32) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) (async, rerun: 32) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x24, &(0x7f0000000040), &(0x7f0000002000)=0x4) (async) close(0xffffffffffffffff) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r2, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@rights={{0x14, 0x1, 0x1, [r2]}}], 0x18}, 0x800) (async) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x4c, &(0x7f000002eff0)={0x1, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x2}]}, 0x10) (async) recvmmsg(r3, &(0x7f0000007340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/61, 0x3d}, 0xfffffffe}], 0x1, 0x40, 0x0) (async) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f00000002c0)={0x44, 0x4, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x8}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x4) r4 = socket$nl_route(0x10, 0x3, 0x0) (async) socket(0x1d, 0x2, 0x6) (async) r5 = socket(0x1d, 0x2, 0x6) r6 = socket$can_j1939(0x1d, 0x2, 0x7) (async) bind$l2tp6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x20) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0xfffffffd, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3f}}, 0x7, 0x1}, 0x20) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r5, 0x84, 0x1e, &(0x7f0000000180), &(0x7f00000003c0)=0x4) (async, rerun: 32) getpeername$l2tp6(0xffffffffffffffff, 0x0, 0x0) (rerun: 32) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f00000000c0)={'vcan0\x00'}) sendmsg$nl_route_sched(r4, 0x0, 0x8850) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)={0x3c, 0x36, 0x107, 0xfffffffc, 0x810000, {0x1, 0x7c}, [@nested={0x27, 0xa7, 0x0, 0x1, [@generic="72458ce3a4ae9a924f896e764e8b35", @typed={0x9, 0x93, 0x0, 0x0, @str='syz1\x00'}, @typed={0x8, 0xa0, 0x0, 0x0, @u32=0x8}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) (async) socket$can_j1939(0x1d, 0x2, 0x7) (async, rerun: 64) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) (async, rerun: 64) unshare(0x24020400) 1.672592097s ago: executing program 3 (id=3194): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000300)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x1}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb01001800001300000000000000002000000002000000000000000100000d00000000000000c279c0c31e095f7c3a10020000000000000000"], 0x0, 0x3a, 0x0, 0x1}, 0x28) sendmsg$tipc(r0, &(0x7f0000000540)={&(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x3, 0x3, 0x3}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x24010800}, 0xc000) 1.463914487s ago: executing program 3 (id=3195): socket$inet6_udplite(0xa, 0x2, 0x88) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000080)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000540), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x303, 0x37}, "475566172f45f011", "bd1406000f000000000092f94413582b", "bf1426b0", '\b\x00'}, 0x28) sendmmsg$inet6(r1, &(0x7f0000000700)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="680100"], 0x168}}], 0x1, 0x8000) listen(r0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="18020048060ea7e1727a3cd04e9000000000000000001c174d291e6e0f000000"], &(0x7f00000000c0)='GPL\x00'}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r3, @ANYRES32=r2, @ANYBLOB='\a'], 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYRES8=r1], 0x28}, 0x1, 0x0, 0x0, 0x40050}, 0x4000010) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r3, &(0x7f0000000240), &(0x7f0000000140)=@tcp6=r0}, 0x20) sendmmsg$inet6(r0, &(0x7f0000000b40)=[{{0x0, 0x0, &(0x7f0000000980)}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000024c0)="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", 0x1000}], 0x1}}, {{0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000380)="b2875c1207a149c35cf810aae4a83250951691812cb72d4269624ac2a3c43b81d44adbadf6503d48424299bc6f9378578a97f05808d0af05ca1c97ad6d68ea272878a81d2507512d7fee467aedd0b586e78073a3131a7bd8b9327acd3d497eb3301d310df7973bb02d51da0347f1aa", 0x6f}, {&(0x7f0000000400)="9642f2fb63f1a806c7c0140a602082dce1c975178cef1c703ff34e1babffad3399ec66f98d827f6b3dd4e6b2e32ec054c9319f296e5e84e7a2bc63d61372aedd1d8bc1e7844cfb764fdf6e7532e81818cbe17516a377a970edd7461a739fccc05ccfd0a0aceee06960ee27851a851d18c27ab0eb5c7911920eea15c6383cd9bad005a4e4d72e071242a9896910b3e0d0475ab700aa526f40279ad6a341bebccceb9cf9184e3f79104af9fa1c56fa04e762a24a61a7e6d0236a88bcf670ac86e862810535ebd3ba2f733444bc37576bf7d2", 0xd1}, {&(0x7f00000005c0)="23b6f192ca4efc6695b3c8586ede45f212b36dc84919d6483bb98ea6a14d0052965ba8b7ecc3ace5344a84009c68d51e4acc95d8e35ae665e3657d1022a22000cbb23725a48ed20348ff", 0x4a}, {&(0x7f0000000740)="5e0dafbfbeca30470fb90080d08b3a4575093b4cb946a78d89e686987bba8af950e0ec81d91f7d71ea6c041041cc5fa29d68c1f75c996eaef44d72002a778a4992379fdf4c95ea22ead8354a1aaa41d08cd248cdbdad6880644e5f95cd1ce71ec3db5623efdf71d94024d394db2a626caffeecd5060783c95358b20f6f81c2626a363492d04eba7090dc231b8fef3db3f5bbfcf27e3ee7b6aa2d779805da3fe4bcf0f60750a639945131ea68dfcc6483d14282983a9d7a316a21c0ea96ff54532203e89ef7d2ee7c73c596d5473a256a757f8fb56fab7e732dc2", 0xda}, {&(0x7f0000000840)="d02027ce052d9500bdf3798f87e766099560ae93b912668d0f2e9453ee5fbc6efc6d692a72cf0596cfced212f6bc2a7178717100655edd3fac11ab34e06f876851fede5890841406ecc174cad26539c898eb98f1e71c9cae2bf980b8dc1682fa1362a29498cbb39f62612fc2feae9282075953bfa9c48ffbbcd5de71058334f74d432d368660ca4c28ea3c6716318e5621e519bded49b5a7d6812e3d16374643b947ee2d968239d07c576238c88b9b28884da3d781daab3c413b92b7aa4fc2e84f4c0d849668ead3e89ed6de3047fdb51d", 0xd1}, {&(0x7f0000000940)="a84c6f19e3b424aa186926429a9d6928b61ab0a04ddf23bad43174ca6646ae0b22ae3b0e38f98953160755921426c1648ececf2f7ff5776d4a19049db932c2722fad136523287b3585f794edf2f8e2b3c8a5e621bd8262d80f25b62865cf341d759586f729991dcf798b6ff3c9e750b7f378124a07f52b827c1b28160ef24cdeab26dfbcbdd88521b007b0bdc835546d0f32e831", 0x94}, {&(0x7f0000000a00)="671ec07b000b3504c294647eeac507ef01c546ae5bd6e2b8606e6982592c04e497718654bf3193b93672d31911f3b67422edafac49e01b35f9a96f22d424476c9a42277912a35be456ef8edfd23f2a4bb0abc8b6", 0x54}], 0x7, &(0x7f0000000c00)=ANY=[@ANYBLOB="200000000000000029000000040000002b01000000000000050200ec01020000c615199c3b6195ebcb3c4e8abcf4487dac4550a4064c68158c20b8231633746de4a1f68cc8b1e53fb47e89c8a98a6576329644cfc71b7d60814c0d1736a0a5e5e21fdfdc9deeb26837feba9fb779ac1fedd7605276ca243661e0839beeec8499f9bcb57db8f13805138d59e6a50de3664ed3aa18345ccf47a9e7bdc87b23ee8b0e0a000036c0510b41269daf36670c081711451e77c90e8076c0f7601c6242c6da2e786e746076929afb4db89819e5bdf0b726cd48e31ebf4ba82f6ad738c406f9eea5be10ec49ba"], 0x20}}], 0x3, 0x24004010) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x3, @local, 0x3ff}, 0x1c) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000540)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha384\x00'}, 0x58) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000300)="87fb74cf4d67adbbd062637f514c1f5eb18d7b442e6457a356c6cb1f71a43dfae773c8489cce5145f92615d4bdb13ef54d6ae90ec7733180fcf5adf3e13fdb05b57b748bd14eda042a97fdd84498304a504a0a159b972e8200c2", 0x5a}], 0x1}, 0x0) socket$inet6(0xa, 0x2, 0x0) socket(0x10, 0x803, 0x0) r7 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000040)={0x802, 0x0, 0x0, 0x7}, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000005200010003000000000000000a0000000c00", @ANYRES32=r7], 0x20}}, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000002500012f8b74ae53050571ff050000000800030047"], 0x1c}, 0x1, 0x0, 0x0, 0x4048957}, 0x28040) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0) setsockopt$TIPC_DEST_DROPPABLE(0xffffffffffffffff, 0x10f, 0x81, &(0x7f00000002c0)=0x1a0000, 0x4) accept4(r5, 0x0, 0x0, 0x80800) 1.463277182s ago: executing program 1 (id=3196): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000240)=0x2, 0x4) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f00000002c0)=@req3={0x10000, 0x1, 0x100, 0x100}, 0x1c) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000000)=@req3={0xad7f, 0x0, 0x2, 0x0, 0x43, 0x80000000, 0x80000001}, 0x1c) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f00000000c0)=0x8) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001300)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0x5fc168c9d6b4368d}, {}, {0xa, 0x1}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x10) 163.717097ms ago: executing program 3 (id=3197): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=@newlink={0x48, 0x10, 0x1, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x1181}, [@IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}, @IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x400}}]}]}]}, 0x48}}, 0x0) (async, rerun: 64) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r1) sendmsg$IEEE802154_LLSEC_DEL_KEY(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x28, r2, 0xb26e82324748955d, 0x70bd2c, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x20080000}, 0x4000) (async) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), 0xffffffffffffffff) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000900), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f00000007c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(r4, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000002c0)={0x2c, r5, 0x11, 0x70bd26, 0x25dfdbff, {}, [@NL802154_ATTR_SEC_KEY={0x10, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0xc, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}]}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8080}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r1, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0xb4, r3, 0x10, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_SEC_LEVEL={0x14, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x1}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}]}, @NL802154_ATTR_SEC_LEVEL={0x24, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x1}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x81}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x8}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}]}, @NL802154_ATTR_SEC_LEVEL={0x34, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x2}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x7}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x2}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}]}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0xb4}, 0x1, 0x0, 0x0, 0x4000080}, 0x4000) 145.724798ms ago: executing program 2 (id=3198): sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000b00)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="a905000000007464", 0x8}], 0x1}}], 0x1, 0x24004044) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x1}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r0, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x48, r2, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x3}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x9}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000004}, 0x8000) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=ANY=[@ANYBLOB="600000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000003800128008000100736974002c00028008000100", @ANYRES32, @ANYBLOB="050009000400000006000e000200000006000f0001000000060011004e21000008000300"], 0x60}}, 0x0) write(r0, &(0x7f0000000000)="240000001a005f0214f9f407000904001f000000fe004000000000000800040001000000", 0x24) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c00028005001d00000000000500010004"], 0x4c}}, 0x0) 61.45181ms ago: executing program 0 (id=3199): pipe(0x0) r0 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000000040)={0x10000000}) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000000000000000ac1e0001821501f63ed02a1700000000000000000000001a79fe579dc84e3d93cd8d5abad2f0a26e32b7d3cadab7e4b7e0c6ea4e220c87d7cbcc44a273d93e0d2668e61361d3dacd7a8fe1e7f60c3e85a0f742cf1e9810bcbc547832c80ba53878af77647e329f960ec395df9659193a63ab9b0aa5c3e0a6f1a9adc975a5f26ba383277ed65bc55960fa1345a2c489d0ae5f750cc275aaa9863df6f1c990bdad4b4a59ac20ed83854728a482ee588d50f6add6565f59d5f8f1622052cfc74b6fd71655f4047a2fb76ae7701018d947c47155323c6b7a7c95c285e28874c3d12cb12253d48877f102397d7842c60aa1707d99d1641407534af7a7"], 0xb8}, 0x1, 0x0, 0x0, 0x40008c0}, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000080)=0x17, 0x4) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[], 0xb8}}, 0x0) 0s ago: executing program 1 (id=3200): r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz0\x00', 0x200002, 0x0) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_WPAN_PHY(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)={0x1c, r1, 0xb15, 0x70bd2a, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2008000}, 0x4) ioctl$XFS_IOC_FD_TO_HANDLE(r0, 0xc038586a, &(0x7f0000000180)={r0, &(0x7f0000000080)='}\xc5\xbal\xc7\x87O\x8c\x0e7c\xf8\x8bU\xb5\x1c\xe5\xd6\xab\x8d\xaa\xba\x92\a\xa7\f\xe8R\xaa\xea\v0\xff\x8a\x94e\f', 0x20000, &(0x7f00000000c0)={@align=0x18000000000, {0x100, 0x60a7, 0x200, 0x1}}, 0x8, &(0x7f0000000100)={@_ha_fsid}, &(0x7f0000000140)=0x3}) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000001800000018000000050000000100000001000013040000000200000088060000ff0f0000002e2e"], 0x0, 0x35, 0x0, 0x1}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000040)=ANY=[], &(0x7f0000000080)='GPL\x00', 0xd, 0x1000, &(0x7f0000002cc0)=""/4096, 0x40f00, 0x40, '\x00', 0x0, 0x0, r3, 0x19c00, 0x0, 0xfd7c, 0x10, &(0x7f0000000180)={0x0, 0x2, 0x5b, 0x9}, 0x10}, 0x94) r4 = openat$cgroup_ro(r0, &(0x7f0000000040)='cpu.stat\x00', 0x7a44, 0x1700) r5 = socket$inet(0x2, 0x6, 0x2) setsockopt$IP_VS_SO_SET_ADDDEST(r5, 0x0, 0x487, &(0x7f00000001c0)={{0x3a, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e21, 0x4, 'fo\x00', 0x0, 0x9, 0x6e}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e21, 0x10000, 0xf331, 0x0, 0xfffffff9}}, 0x44) sendfile(0xffffffffffffffff, r4, 0x0, 0x8000000000010000) socket$nl_xfrm(0x10, 0x3, 0x6) kernel console output (not intermixed with test programs): 36) Use of struct sctp_assoc_value in delayed_ack socket option. [ 256.213586][T10936] Use struct sctp_sack_info instead [ 256.313911][T10945] netlink: 'syz.3.1422': attribute type 1 has an invalid length. [ 256.435981][T10951] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1422'. [ 256.507140][T10957] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1427'. [ 256.542403][T10959] pim6reg99999999: entered allmulticast mode [ 256.565120][T10963] netlink: 'syz.0.1430': attribute type 1 has an invalid length. [ 256.565743][T10959] tipc: Enabling of bearer rejected, failed to enable media [ 256.687767][T10968] bond4: (slave vxcan1): The slave device specified does not support setting the MAC address [ 256.698828][T10968] bond4: (slave vxcan1): Error -95 calling set_mac_address [ 256.734925][T10957] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 256.745901][T10957] ip6erspan0: left promiscuous mode [ 256.779044][ T77] wlan1: Trigger new scan to find an IBSS to join [ 256.806219][T10963] bond4: (slave bridge4): Enslaving as an active interface with a down link [ 256.866562][T10980] bond4: (slave bridge5): Enslaving as an active interface with a down link [ 256.882855][ T1005] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 256.904087][ T1005] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 256.913002][ T1005] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 256.936139][T10968] macvlan2: entered promiscuous mode [ 256.941872][T10968] macvlan2: entered allmulticast mode [ 256.948856][T10968] bond4: entered promiscuous mode [ 256.955704][T10968] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 256.965396][T10968] bond4: left promiscuous mode [ 256.997785][T10983] _: entered promiscuous mode [ 257.043233][ T1005] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 257.397011][T11019] __nla_validate_parse: 1 callbacks suppressed [ 257.397026][T11019] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1446'. [ 257.447944][T11023] netlink: 'syz.0.1445': attribute type 11 has an invalid length. [ 257.467297][T11024] netlink: 64859 bytes leftover after parsing attributes in process `syz.2.1446'. [ 257.505098][T11027] netlink: 'syz.3.1447': attribute type 21 has an invalid length. [ 257.527488][T11027] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1447'. [ 257.537337][T11027] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1447'. [ 257.573989][T11021] wg1 speed is unknown, defaulting to 1000 [ 257.912550][T11045] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1452'. [ 258.051055][T11047] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1452'. [ 258.391823][T11058] syzkaller0: entered promiscuous mode [ 258.423390][T11058] syzkaller0: entered allmulticast mode [ 258.450828][T11062] syzkaller0: entered promiscuous mode [ 258.456534][T11062] syzkaller0: entered allmulticast mode [ 258.481302][T11064] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1458'. [ 258.550757][T11066] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1458'. [ 259.549070][T11070] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 259.567612][T11071] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 259.686469][T11079] trusted_key: syz.0.1461 sent an empty control message without MSG_MORE. [ 259.738850][ T3509] wlan1: Trigger new scan to find an IBSS to join [ 259.890033][T11096] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1466'. [ 259.942549][T11096] team0: Port device dummy0 removed [ 259.961778][T11096] bridge_slave_0: left allmulticast mode [ 259.978620][T11096] bridge_slave_0: left promiscuous mode [ 259.992416][T11096] bridge0: port 1(bridge_slave_0) entered disabled state [ 260.004458][T11096] bridge_slave_1: left allmulticast mode [ 260.010139][T11096] bridge_slave_1: left promiscuous mode [ 260.017226][T11096] bridge0: port 2(bridge_slave_1) entered disabled state [ 260.040429][T11096] bond0: (slave bond_slave_0): Releasing backup interface [ 260.056561][T11096] bond0: (slave bond_slave_1): Releasing backup interface [ 260.069991][T11096] team0: Port device team_slave_0 removed [ 260.077703][T11096] team0: Port device team_slave_1 removed [ 260.093923][T11096] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 260.152672][T11096] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 260.164647][T11096] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 260.335596][T11113] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1472'. [ 260.345727][T11113] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 260.702135][ T1005] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 260.868161][T11136] team1: entered promiscuous mode [ 260.873249][T11136] team1: entered allmulticast mode [ 260.907205][T11136] 8021q: adding VLAN 0 to HW filter on device team1 [ 260.937313][T11150] tipc: Enabled bearer , priority 0 [ 260.996210][T11157] tipc: Enabled bearer , priority 0 [ 261.024392][T11161] syzkaller0: entered promiscuous mode [ 261.034677][T11161] syzkaller0: entered allmulticast mode [ 261.052662][T11155] syzkaller0: entered promiscuous mode [ 261.062737][T11155] syzkaller0: entered allmulticast mode [ 261.095343][T11152] tipc: Resetting bearer [ 261.173377][T11152] tipc: Disabling bearer [ 261.209346][T11169] tipc: Resetting bearer [ 261.303222][T11172] openvswitch: netlink: Missing key (keys=40, expected=100) [ 261.726809][T11147] tipc: Resetting bearer [ 261.773391][T11147] tipc: Disabling bearer [ 261.907810][T11207] syzkaller0: entered promiscuous mode [ 261.913317][T11207] syzkaller0: entered allmulticast mode [ 262.013621][T11211] netlink: 'syz.0.1500': attribute type 39 has an invalid length. [ 262.066293][T11213] netlink: 'syz.0.1500': attribute type 5 has an invalid length. [ 262.112602][T11213] vlan3: entered allmulticast mode [ 262.118555][T11213] bridge_slave_0: entered allmulticast mode [ 262.365373][T11225] geneve2: entered promiscuous mode [ 262.370615][T11225] geneve2: entered allmulticast mode [ 262.400419][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.433426][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.458201][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.494171][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.551387][T11234] netlink: 'syz.3.1506': attribute type 9 has an invalid length. [ 262.569386][T11234] netlink: 'syz.3.1506': attribute type 11 has an invalid length. [ 262.589369][T11234] netlink: 'syz.3.1506': attribute type 12 has an invalid length. [ 262.605610][T11234] __nla_validate_parse: 14 callbacks suppressed [ 262.605626][T11234] netlink: 210020 bytes leftover after parsing attributes in process `syz.3.1506'. [ 262.613711][T11242] netlink: 'syz.1.1510': attribute type 5 has an invalid length. [ 262.649874][T11239] syzkaller1: entered promiscuous mode [ 262.659109][T11234] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1506'. [ 262.668395][T11239] syzkaller1: entered allmulticast mode [ 262.691557][T11243] netlink: 'syz.1.1510': attribute type 5 has an invalid length. [ 262.840836][T11246] syzkaller0: entered promiscuous mode [ 262.883872][T11246] syzkaller0: entered allmulticast mode [ 262.925726][T11251] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1513'. [ 262.951832][T11253] netlink: 'syz.1.1514': attribute type 1 has an invalid length. [ 262.962586][T11253] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 263.268447][T11277] sctp: [Deprecated]: syz.1.1520 (pid 11277) Use of int in maxseg socket option. [ 263.268447][T11277] Use struct sctp_assoc_value instead [ 263.366668][T11282] IPVS: set_ctl: invalid protocol: 136 255.255.255.255:20004 [ 263.481237][T11286] netlink: 'syz.3.1522': attribute type 32 has an invalid length. [ 263.481502][T11289] netlink: 'syz.3.1522': attribute type 32 has an invalid length. [ 263.507498][T11288] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1523'. [ 263.515903][T11286] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1522'. [ 263.536615][T11288] team0: entered promiscuous mode [ 263.541786][T11289] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1522'. [ 263.551447][T11288] team0: entered allmulticast mode [ 263.559260][T11288] 8021q: adding VLAN 0 to HW filter on device team0 [ 263.597870][T11286] bond2: option coupled_control: invalid value (21) [ 263.625625][T11286] bond2 (unregistering): Released all slaves [ 263.806127][T11289] bond2: option coupled_control: invalid value (21) [ 263.815797][T11289] bond2 (unregistering): Released all slaves [ 263.952299][T11306] netlink: 'syz.4.1528': attribute type 3 has an invalid length. [ 263.957699][T11308] RDS: rds_bind could not find a transport for fe80::28, load rds_tcp or rds_rdma? [ 264.017709][T11311] FAULT_INJECTION: forcing a failure. [ 264.017709][T11311] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 264.047022][T11311] CPU: 1 UID: 0 PID: 11311 Comm: syz.0.1529 Not tainted syzkaller #0 PREEMPT(full) [ 264.047046][T11311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 264.047055][T11311] Call Trace: [ 264.047062][T11311] [ 264.047069][T11311] dump_stack_lvl+0xe8/0x150 [ 264.047093][T11311] should_fail_ex+0x412/0x560 [ 264.047119][T11311] _copy_to_user+0x31/0xb0 [ 264.047138][T11311] bpf_prog_test_run_syscall+0x337/0x4c0 [ 264.047157][T11311] ? __pfx_bpf_prog_test_run_syscall+0x10/0x10 [ 264.047179][T11311] ? __pfx_bpf_prog_test_run_syscall+0x10/0x10 [ 264.047198][T11311] bpf_prog_test_run+0x2c7/0x340 [ 264.047223][T11311] __sys_bpf+0x643/0x950 [ 264.047244][T11311] ? __pfx___sys_bpf+0x10/0x10 [ 264.047277][T11311] ? ksys_write+0x242/0x270 [ 264.047298][T11311] ? __pfx_ksys_write+0x10/0x10 [ 264.047324][T11311] __x64_sys_bpf+0x7c/0x90 [ 264.047343][T11311] do_syscall_64+0x14d/0xf80 [ 264.047363][T11311] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 264.047379][T11311] ? trace_irq_disable+0x37/0x100 [ 264.047397][T11311] ? clear_bhb_loop+0x40/0x90 [ 264.047417][T11311] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 264.047432][T11311] RIP: 0033:0x7f1f21f9bf79 [ 264.047452][T11311] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 264.047465][T11311] RSP: 002b:00007f1f22dff028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 264.047483][T11311] RAX: ffffffffffffffda RBX: 00007f1f22215fa0 RCX: 00007f1f21f9bf79 [ 264.047495][T11311] RDX: 000000000000000c RSI: 0000200000000000 RDI: 000000000000000a [ 264.047506][T11311] RBP: 00007f1f22dff090 R08: 0000000000000000 R09: 0000000000000000 [ 264.047516][T11311] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 264.047525][T11311] R13: 00007f1f22216038 R14: 00007f1f22215fa0 R15: 00007ffd8bc7cb88 [ 264.047564][T11311] [ 264.262014][T11313] netlink: 'syz.3.1531': attribute type 32 has an invalid length. [ 264.277711][T11313] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1531'. [ 264.308377][T11313] bond2: option coupled_control: invalid value (92) [ 264.316600][T11313] bond2 (unregistering): Released all slaves [ 264.405717][T11319] netem: change failed [ 264.425387][T11322] raw_sendmsg: syz.0.1533 forgot to set AF_INET. Fix it! [ 265.151194][T11355] wg1 speed is unknown, defaulting to 1000 [ 265.155642][T11359] FAULT_INJECTION: forcing a failure. [ 265.155642][T11359] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 265.183810][T11359] CPU: 0 UID: 0 PID: 11359 Comm: syz.4.1543 Not tainted syzkaller #0 PREEMPT(full) [ 265.183834][T11359] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 265.183844][T11359] Call Trace: [ 265.183851][T11359] [ 265.183858][T11359] dump_stack_lvl+0xe8/0x150 [ 265.183890][T11359] should_fail_ex+0x412/0x560 [ 265.183918][T11359] _copy_to_user+0x31/0xb0 [ 265.183938][T11359] simple_read_from_buffer+0xe1/0x170 [ 265.183966][T11359] proc_fail_nth_read+0x1bb/0x230 [ 265.183990][T11359] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 265.184013][T11359] ? rw_verify_area+0x2a6/0x4d0 [ 265.184031][T11359] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 265.184053][T11359] vfs_read+0x20c/0xa70 [ 265.184070][T11359] ? fdget_pos+0x246/0x320 [ 265.184091][T11359] ? __pfx___mutex_lock+0x10/0x10 [ 265.184113][T11359] ? __pfx_vfs_read+0x10/0x10 [ 265.184133][T11359] ? __fget_files+0x2a/0x420 [ 265.184153][T11359] ? __fget_files+0x3a0/0x420 [ 265.184173][T11359] ? __fget_files+0x2a/0x420 [ 265.184197][T11359] ksys_read+0x150/0x270 [ 265.184218][T11359] ? __pfx_ksys_read+0x10/0x10 [ 265.184248][T11359] do_syscall_64+0x14d/0xf80 [ 265.184267][T11359] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 265.184283][T11359] ? trace_irq_disable+0x37/0x100 [ 265.184301][T11359] ? clear_bhb_loop+0x40/0x90 [ 265.184329][T11359] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 265.184345][T11359] RIP: 0033:0x7f1da815c84e [ 265.184365][T11359] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 265.184378][T11359] RSP: 002b:00007f1da90f2fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 265.184397][T11359] RAX: ffffffffffffffda RBX: 00007f1da90f36c0 RCX: 00007f1da815c84e [ 265.184409][T11359] RDX: 000000000000000f RSI: 00007f1da90f30a0 RDI: 0000000000000005 [ 265.184419][T11359] RBP: 00007f1da90f3090 R08: 0000000000000000 R09: 0000000000000000 [ 265.184433][T11359] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 265.184443][T11359] R13: 00007f1da8416038 R14: 00007f1da8415fa0 R15: 00007ffcb801cb38 [ 265.184472][T11359] [ 265.976263][T11386] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1552'. [ 266.294893][T11385] wg1 speed is unknown, defaulting to 1000 [ 266.460110][T11400] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1555'. [ 266.845103][T11420] ieee802154 phy0 wpan0: encryption failed: -22 [ 266.966443][T11425] bond5: entered promiscuous mode [ 266.974938][T11425] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1562'. [ 267.910971][T11469] __nla_validate_parse: 1 callbacks suppressed [ 267.910989][T11469] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1571'. [ 267.934507][T11475] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1572'. [ 267.960189][T11476] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1570'. [ 267.992388][T11476] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1570'. [ 268.071933][T11482] wg1 speed is unknown, defaulting to 1000 [ 268.204660][T11491] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1577'. [ 268.211754][T11487] validate_nla: 1 callbacks suppressed [ 268.211769][T11487] netlink: 'syz.2.1574': attribute type 10 has an invalid length. [ 268.241039][T11491] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1577'. [ 268.271101][T11491] netlink: 'syz.1.1577': attribute type 15 has an invalid length. [ 268.526710][T11501] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1578'. [ 268.651159][T11512] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1581'. [ 269.518942][T11496] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1578'. [ 269.528478][T11496] netlink: 245 bytes leftover after parsing attributes in process `syz.2.1578'. [ 269.909920][T11536] batman_adv: batadv0: Adding interface: wlan0 [ 269.936564][T11536] batman_adv: batadv0: The MTU of interface wlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 269.965232][T11536] batman_adv: batadv0: Not using interface wlan0 (retrying later): interface not active [ 269.979125][T11547] netlink: 'syz.2.1590': attribute type 1 has an invalid length. [ 270.028138][T11547] bond3: entered promiscuous mode [ 270.033526][T11547] 8021q: adding VLAN 0 to HW filter on device bond3 [ 270.092724][T11547] 8021q: adding VLAN 0 to HW filter on device bond3 [ 270.110539][T11547] bond3: (slave vcan1): The slave device specified does not support setting the MAC address [ 270.146663][T11547] bond3: (slave vcan1): Setting fail_over_mac to active for active-backup mode [ 270.218807][T11547] bond3: (slave vcan1): making interface the new active one [ 270.227299][T11547] vcan1: entered promiscuous mode [ 270.236063][T11547] bond3: (slave vcan1): Enslaving as an active interface with an up link [ 270.244865][T11534] wg1 speed is unknown, defaulting to 1000 [ 270.410951][T11558] team1: left promiscuous mode [ 270.422086][T11558] team1: left allmulticast mode [ 270.436521][T11558] bond5: left promiscuous mode [ 270.473932][T11558] hsr_slave_0: left promiscuous mode [ 270.482313][T11558] hsr_slave_1: left promiscuous mode [ 270.661888][T11565] pim6reg: entered allmulticast mode [ 271.197187][T11595] pim6reg1: entered promiscuous mode [ 271.202512][T11595] pim6reg1: entered allmulticast mode [ 271.217132][T11600] netlink: 'syz.1.1604': attribute type 13 has an invalid length. [ 271.256639][T11597] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 271.354183][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 271.480729][T11606] openvswitch: netlink: Message has 6 unknown bytes. [ 271.782040][T11618] syzkaller0: entered promiscuous mode [ 271.787824][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 271.814126][T11618] syzkaller0: entered allmulticast mode [ 272.083652][T11646] bridge_slave_1: left allmulticast mode [ 272.104271][T11646] bridge_slave_1: left promiscuous mode [ 272.110093][T11646] bridge0: port 2(bridge_slave_1) entered disabled state [ 272.161888][T11646] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 272.188171][T11643] netlink: 'syz.0.1622': attribute type 3 has an invalid length. [ 272.356179][T11652] syzkaller0: entered promiscuous mode [ 272.361670][T11652] syzkaller0: entered allmulticast mode [ 272.460859][T11659] netlink: 'syz.2.1627': attribute type 2 has an invalid length. [ 272.810167][T11669] netlink: 'syz.2.1630': attribute type 1 has an invalid length. [ 272.818250][T11669] netlink: 'syz.2.1630': attribute type 6 has an invalid length. [ 272.827996][T11669] netlink: 'syz.2.1630': attribute type 3 has an invalid length. [ 273.660872][T11664] wg1 speed is unknown, defaulting to 1000 [ 273.792780][T11681] __nla_validate_parse: 10 callbacks suppressed [ 273.792795][T11681] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1634'. [ 273.946796][T11693] pimreg: tun_chr_ioctl cmd 1074025677 [ 273.967002][T11693] pimreg: linktype set to 1 [ 273.984894][T11695] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1639'. [ 274.147495][T11709] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1641'. [ 274.162816][T11709] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1641'. [ 274.185078][T11709] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1641'. [ 274.314895][T11717] netlink: 'syz.0.1645': attribute type 8 has an invalid length. [ 274.503695][T11726] syzkaller0: entered promiscuous mode [ 274.516734][T11726] syzkaller0: entered allmulticast mode [ 274.530304][T11713] tipc: Enabled bearer , priority 0 [ 274.567957][T11712] tipc: Resetting bearer [ 274.957004][T11743] netlink: 'syz.0.1646': attribute type 1 has an invalid length. [ 275.626532][T11712] tipc: Disabling bearer [ 275.642979][T11727] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1644'. [ 275.692191][ T5876] tipc: Node number set to 2751165386 [ 275.775650][T11751] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1649'. [ 275.792526][T11751] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1649'. [ 275.991834][T11763] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1653'. [ 276.005730][T11763] bridge_slave_0: left allmulticast mode [ 276.011407][T11763] bridge_slave_0: left promiscuous mode [ 276.018807][T11763] bridge0: port 1(bridge_slave_0) entered disabled state [ 276.100342][T11773] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 276.200416][T11776] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 276.317200][T11782] netlink: 'syz.3.1654': attribute type 1 has an invalid length. [ 276.325964][T11782] netlink: 5636 bytes leftover after parsing attributes in process `syz.3.1654'. [ 276.796011][T11812] ip6erspan0: entered allmulticast mode [ 278.350324][T11848] wg1 speed is unknown, defaulting to 1000 [ 278.573414][T11866] openvswitch: netlink: IP tunnel dst address not specified [ 278.737639][T11880] macsec1: entered allmulticast mode [ 278.753328][T11880] macsec0: entered allmulticast mode [ 278.823075][T11885] netlink: 'syz.1.1687': attribute type 1 has an invalid length. [ 278.897922][T11895] __nla_validate_parse: 12 callbacks suppressed [ 278.897939][T11895] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1690'. [ 279.126604][T11910] netlink: 'syz.0.1694': attribute type 15 has an invalid length. [ 279.160690][T11908] syzkaller0: entered promiscuous mode [ 279.166289][T11908] syzkaller0: entered allmulticast mode [ 279.642468][T11921] syzkaller0: entered promiscuous mode [ 279.665933][T11921] syzkaller0: entered allmulticast mode [ 280.765225][T11945] netlink: 'syz.0.1705': attribute type 6 has an invalid length. [ 280.778188][T11945] netlink: 'syz.0.1705': attribute type 7 has an invalid length. [ 280.786944][T11945] netlink: 'syz.0.1705': attribute type 8 has an invalid length. [ 281.002573][T11976] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1715'. [ 281.029225][T11976] netlink: 92 bytes leftover after parsing attributes in process `syz.0.1715'. [ 281.068207][T11976] netlink: 'syz.0.1715': attribute type 29 has an invalid length. [ 281.086460][T11976] netlink: 'syz.0.1715': attribute type 29 has an invalid length. [ 281.099503][T11977] syzkaller0: entered promiscuous mode [ 281.102539][T11976] netlink: 524 bytes leftover after parsing attributes in process `syz.0.1715'. [ 281.105689][T11977] syzkaller0: entered allmulticast mode [ 281.134504][T11977] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 281.495512][T12006] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1727'. [ 281.522928][T12006] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1727'. [ 281.651030][T12018] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1731'. [ 281.747715][T12018] 8021q: adding VLAN 0 to HW filter on device bond3 [ 281.973069][T12035] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.1735'. [ 281.987250][T12025] 8021q: adding VLAN 0 to HW filter on device bond3 [ 281.999725][T12025] bond3: (slave sit1): The slave device specified does not support setting the MAC address [ 282.050292][T12025] bond3: (slave sit1): Error -95 calling set_mac_address [ 282.174367][T12050] sctp: [Deprecated]: syz.3.1739 (pid 12050) Use of struct sctp_assoc_value in delayed_ack socket option. [ 282.174367][T12050] Use struct sctp_sack_info instead [ 282.223241][T12050] sctp: [Deprecated]: syz.3.1739 (pid 12050) Use of struct sctp_assoc_value in delayed_ack socket option. [ 282.223241][T12050] Use struct sctp_sack_info instead [ 282.262489][T12054] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 282.312045][T12056] netlink: 207952 bytes leftover after parsing attributes in process `syz.1.1742'. [ 282.356513][T12058] syzkaller1: entered promiscuous mode [ 282.362165][T12058] syzkaller1: entered allmulticast mode [ 282.488395][T12069] netlink: 'syz.1.1746': attribute type 23 has an invalid length. [ 282.504385][T12070] netlink: 'syz.3.1747': attribute type 1 has an invalid length. [ 282.611295][T12076] dvmrp12: entered allmulticast mode [ 282.622922][T12072] dvmrp12: left allmulticast mode [ 282.733146][T12083] netlink: 'syz.3.1750': attribute type 8 has an invalid length. [ 282.761299][T12083] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1750'. [ 282.883657][T12083] bond0: entered promiscuous mode [ 282.924367][T12083] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 282.948868][T12083] gretap0: entered promiscuous mode [ 283.024884][T12083] bond0: left promiscuous mode [ 283.035405][T12083] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 283.071440][T12083] gretap0: left promiscuous mode [ 283.181382][T12095] bond4: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 283.197201][T12095] bond4 (unregistering): Released all slaves [ 283.238667][T12062] syz.4.1744 (12062) used greatest stack depth: 17592 bytes left [ 283.681962][T12122] pimreg: tun_chr_ioctl cmd 2147767520 [ 283.790692][T12128] sctp: [Deprecated]: syz.4.1768 (pid 12128) Use of struct sctp_assoc_value in delayed_ack socket option. [ 283.790692][T12128] Use struct sctp_sack_info instead [ 283.949708][T12134] __nla_validate_parse: 2 callbacks suppressed [ 283.949726][T12134] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1770'. [ 284.046300][T12143] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1773'. [ 284.077241][T12150] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1775'. [ 284.106818][T12154] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1776'. [ 284.316352][T12164] wg1 speed is unknown, defaulting to 1000 [ 284.806052][T12207] netlink: 'syz.4.1790': attribute type 21 has an invalid length. [ 284.835204][T12207] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1790'. [ 285.374114][T12235] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1799'. [ 285.408840][T12242] netlink: 'syz.4.1801': attribute type 3 has an invalid length. [ 285.445190][T12242] netlink: 666 bytes leftover after parsing attributes in process `syz.4.1801'. [ 285.566999][T12257] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 285.751918][T12274] bond6: peer notification delay (9) is not a multiple of miimon (100), value rounded to 0 ms [ 285.783966][T12274] bond6 (unregistering): Released all slaves [ 285.853795][T12277] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1807'. [ 285.910518][T12277] validate_nla: 1 callbacks suppressed [ 285.910531][T12277] netlink: 'syz.3.1807': attribute type 3 has an invalid length. [ 286.051676][T12299] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 286.061446][T12293] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1814'. [ 286.178767][T12309] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1816'. [ 286.219281][T12299] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 286.280787][T12309] ip6gretap0: entered promiscuous mode [ 286.310729][T12309] ip6gretap0: left promiscuous mode [ 286.347561][T12330] team0 (unregistering): Port device team_slave_0 removed [ 286.367590][T12330] team0 (unregistering): Port device team_slave_1 removed [ 289.085291][T12302] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 289.222007][T12365] netlink: 'syz.1.1829': attribute type 29 has an invalid length. [ 289.253355][T12365] netlink: 'syz.1.1829': attribute type 29 has an invalid length. [ 289.262369][T12365] __nla_validate_parse: 1 callbacks suppressed [ 289.262385][T12365] netlink: 500 bytes leftover after parsing attributes in process `syz.1.1829'. [ 289.285279][T12371] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 289.299582][T12374] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1832'. [ 289.317150][T12371] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1830'. [ 289.346121][T12374] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 289.432134][T12379] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1832'. [ 289.447744][T12379] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1832'. [ 289.756663][T12392] syzkaller0: entered promiscuous mode [ 289.762144][T12392] syzkaller0: entered allmulticast mode [ 290.045193][T12419] syzkaller0: entered promiscuous mode [ 290.050852][T12419] syzkaller0: entered allmulticast mode [ 290.320941][T12425] syzkaller0: create flow: hash 2198788501 index 1 [ 290.355850][ T5905] syzkaller0: tun_net_xmit 76 [ 290.366308][T12435] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1847'. [ 290.375581][T12425] syzkaller0: delete flow: hash 2198788501 index 1 [ 290.377019][T12436] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1847'. [ 290.606402][T12449] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1849'. [ 290.616730][T12449] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1849'. [ 291.474952][T12438] tipc: Enabled bearer , priority 0 [ 291.484382][T12441] syzkaller0: entered promiscuous mode [ 291.489874][T12441] syzkaller0: entered allmulticast mode [ 291.532168][T12461] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1851'. [ 291.569811][T12463] xt_TPROXY: Can be used only with -p tcp or -p udp [ 291.590995][T12458] tipc: Resetting bearer [ 291.616059][T12431] tipc: Resetting bearer [ 291.637111][T12466] x_tables: ip_tables: RATEEST.0 target: invalid size 32 (kernel) != (user) 0 [ 291.672067][T12431] tipc: Disabling bearer [ 291.703542][T12466] gretap1: entered promiscuous mode [ 291.917441][T12478] wg1 speed is unknown, defaulting to 1000 [ 292.436432][T12506] IPVS: length: 132 != 8 [ 292.441003][T12514] syz_tun: entered promiscuous mode [ 292.461932][T12514] syz_tun: refused to change device tx_queue_len [ 292.476783][T12514] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 292.517244][T12481] pimreg: entered allmulticast mode [ 292.554046][T12481] pimreg: left allmulticast mode [ 292.632417][ T1005] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 292.645116][ T1005] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 292.676169][ T1005] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 292.693164][ T1005] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 293.122551][T12542] wg1 speed is unknown, defaulting to 1000 [ 293.337142][ T3509] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 293.653318][T12552] bond0: (slave rose0): Releasing backup interface [ 294.206701][T12593] tipc: Enabled bearer , priority 10 [ 295.231821][T12651] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 295.250397][T12651] vlan2: entered promiscuous mode [ 295.255616][T12651] bridge0: entered promiscuous mode [ 295.337378][ T5904] tipc: Node number set to 3799411053 [ 296.310565][T12695] __nla_validate_parse: 8 callbacks suppressed [ 296.310583][T12695] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1910'. [ 296.384771][T12697] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1909'. [ 296.399172][T12697] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1909'. [ 296.417844][T12697] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1909'. [ 296.437193][T12697] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1909'. [ 296.814123][T12725] netlink: 484 bytes leftover after parsing attributes in process `syz.0.1915'. [ 296.867151][T12719] IPVS: Error connecting to the multicast addr [ 296.991854][T12739] netlink: 'syz.3.1918': attribute type 1 has an invalid length. [ 297.105283][T12748] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1918'. [ 297.418930][T12774] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1926'. [ 297.664391][T12799] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 297.740030][T12795] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1932'. [ 297.749276][T12795] openvswitch: netlink: Flow actions attr not present in new flow. [ 297.767497][T12804] netlink: 288 bytes leftover after parsing attributes in process `syz.3.1930'. [ 297.833213][T12801] sctp: [Deprecated]: syz.3.1930 (pid 12801) Use of int in max_burst socket option deprecated. [ 297.833213][T12801] Use struct sctp_assoc_value instead [ 297.906703][T12809] netlink: 'syz.2.1934': attribute type 2 has an invalid length. [ 298.096226][T12817] netlink: 'syz.2.1937': attribute type 10 has an invalid length. [ 298.104553][T12817] bond0: entered promiscuous mode [ 298.113813][T12817] ÿ: entered promiscuous mode [ 298.118974][T12817] bond_slave_1: entered promiscuous mode [ 298.134003][T12817] bridge_slave_1: entered promiscuous mode [ 298.143454][T12817] bridge0: port 2(bond0) entered blocking state [ 298.150847][T12817] bridge0: port 2(bond0) entered disabled state [ 298.159118][T12817] bond0: entered allmulticast mode [ 298.166123][T12817] ÿ: entered allmulticast mode [ 298.171897][T12817] bond_slave_1: entered allmulticast mode [ 298.178894][T12817] bridge_slave_1: entered allmulticast mode [ 298.213030][T12820] bond4: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 298.257565][T12820] bond4 (unregistering): Released all slaves [ 298.701308][T12867] netlink: 'syz.2.1949': attribute type 13 has an invalid length. [ 300.546297][T12882] veth4: entered allmulticast mode [ 301.782345][T12900] __nla_validate_parse: 4 callbacks suppressed [ 301.782364][T12900] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1956'. [ 301.822991][T12901] bond4: option updelay: invalid value (18446744072924056005) [ 301.852904][T12901] bond4: option updelay: allowed values 0 - 2147483647 [ 301.853071][T12909] ieee802154 phy0 wpan0: encryption failed: -22 [ 301.917947][T12901] bond4 (unregistering): Released all slaves [ 302.698939][T12985] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1970'. [ 302.871764][T12990] wg1 speed is unknown, defaulting to 1000 [ 302.904260][T12992] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 302.968111][T12995] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1974'. [ 302.989119][T12992] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 303.436970][T13002] xt_hashlimit: max too large, truncated to 1048576 [ 303.492849][T13005] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1977'. [ 303.506186][T13005] sch_tbf: burst 0 is lower than device lo mtu (1550) ! [ 305.561709][T12974] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 305.712634][T13017] netlink: 'syz.3.1982': attribute type 22 has an invalid length. [ 305.736003][T13022] syzkaller0: entered promiscuous mode [ 305.745230][T13022] syzkaller0: entered allmulticast mode [ 305.770132][T13017] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1982'. [ 305.786099][T13026] tipc: Enabled bearer , priority 0 [ 305.836069][T13022] tipc: Enabling of bearer rejected, already enabled [ 305.899470][T13022] tipc: Resetting bearer [ 305.933893][T13035] netlink: 'syz.3.1987': attribute type 1 has an invalid length. [ 305.960762][T13030] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1986'. [ 306.008197][T13022] tipc: Disabling bearer [ 306.019571][T13033] tipc: Enabling of bearer rejected, failed to enable media [ 306.253191][T13052] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1993'. [ 306.274743][T13052] openvswitch: netlink: Message has -1 unknown bytes. [ 306.309721][T13056] syzkaller1: tun_chr_ioctl cmd 35108 [ 306.351948][T13056] smc: removing ib device syz0 [ 306.571769][T13061] bond4 (unregistering): Released all slaves [ 306.828706][T13086] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1998'. [ 306.964478][T13086] bond4: (slave syz_tun): Enslaving as an active interface with an up link [ 307.261706][T13102] IPVS: set_ctl: invalid protocol: 0 224.0.0.2:20001 [ 307.332036][T13102] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2000'. [ 307.357242][T13100] xt_hashlimit: overflow, try lower: 18446744073709551615/255 [ 307.445175][T13107] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2003'. [ 307.573485][T13110] netlink: zone id is out of range [ 307.603982][T13109] netlink: 'syz.0.2005': attribute type 11 has an invalid length. [ 307.611835][T13109] netlink: 228 bytes leftover after parsing attributes in process `syz.0.2005'. [ 307.645085][T13110] netlink: zone id is out of range [ 307.650269][T13110] netlink: zone id is out of range [ 307.657354][T13110] netlink: zone id is out of range [ 307.662646][T13110] netlink: zone id is out of range [ 307.669111][T13110] netlink: zone id is out of range [ 307.678076][T13110] netlink: zone id is out of range [ 307.683364][T13110] netlink: zone id is out of range [ 307.728573][T13110] netlink: zone id is out of range [ 307.803819][T13128] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2006'. [ 307.880145][T13128] geneve0: entered promiscuous mode [ 307.915666][T13128] geneve0: entered allmulticast mode [ 307.923648][T13112] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 307.956891][T13112] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 308.087661][T13148] vlan2: entered allmulticast mode [ 308.093120][T13148] bridge0: port 3(vlan2) entered blocking state [ 308.113569][T13148] bridge0: port 3(vlan2) entered disabled state [ 308.140219][T13148] vlan2: entered promiscuous mode [ 308.147428][T13152] netlink: 'syz.2.2012': attribute type 83 has an invalid length. [ 308.970030][T13204] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2028'. [ 308.984161][T13204] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2028'. [ 309.001307][T13202] syzkaller0: entered promiscuous mode [ 309.007530][T13202] syzkaller0: entered allmulticast mode [ 309.032630][T13204] vlan3: entered allmulticast mode [ 309.042131][T13204] team0: entered allmulticast mode [ 309.060678][T13204] team_slave_0: entered allmulticast mode [ 309.066631][T13204] team_slave_1: entered allmulticast mode [ 309.089823][T13213] netlink: 'syz.4.2031': attribute type 5 has an invalid length. [ 309.105279][T13202] macsec3: entered promiscuous mode [ 309.110722][T13202] macsec3: entered allmulticast mode [ 309.116659][T13202] dummy0: entered allmulticast mode [ 309.139634][T13202] dummy0: left allmulticast mode [ 309.219809][T13217] tipc: Enabled bearer , priority 0 [ 309.304253][T13217] syzkaller0: entered promiscuous mode [ 309.309993][T13217] syzkaller0: entered allmulticast mode [ 309.316423][T13217] tipc: Resetting bearer [ 309.358910][T13223] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2034'. [ 309.371898][T13216] tipc: Resetting bearer [ 309.478215][T13226] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.2035'. [ 309.559287][T13231] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2036'. [ 310.546384][T13216] tipc: Disabling bearer [ 310.673616][T13233] geneve3: entered promiscuous mode [ 310.682467][ T5897] tipc: Node number set to 2427702689 [ 310.787742][T13252] netlink: 'syz.0.2042': attribute type 4 has an invalid length. [ 310.848107][T13240] bond0 (unregistering): left allmulticast mode [ 310.859400][T13240] ÿ: left allmulticast mode [ 310.876613][T13240] bond_slave_1: left allmulticast mode [ 310.889297][T13240] bridge_slave_1: left allmulticast mode [ 310.900698][T13240] bridge0: port 2(bond0) entered disabled state [ 310.922220][T13240] bond0 (unregistering): (slave c1ÿ): Releasing backup interface [ 310.931225][T13240] ÿ: left promiscuous mode [ 310.940046][T13261] sctp: [Deprecated]: syz.4.2041 (pid 13261) Use of int in max_burst socket option. [ 310.940046][T13261] Use struct sctp_assoc_value instead [ 310.957150][T13261] netlink: 'syz.4.2041': attribute type 5 has an invalid length. [ 310.965645][T13240] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 310.975779][T13240] bond_slave_1: left promiscuous mode [ 310.988455][T13240] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 311.007466][T13240] bridge_slave_1: left promiscuous mode [ 311.017134][T13240] bond0 (unregistering): Released all slaves [ 311.077646][T13268] batadv_slave_0: Caught tx_queue_len zero misconfig [ 311.153445][T13260] syzkaller0: entered promiscuous mode [ 311.171782][T13260] syzkaller0: entered allmulticast mode [ 311.540430][T13292] netlink: 'syz.4.2054': attribute type 1 has an invalid length. [ 311.551571][T13292] netlink: 'syz.4.2054': attribute type 1 has an invalid length. [ 311.898035][T13308] netlink: 'syz.3.2057': attribute type 1 has an invalid length. [ 311.916820][T13308] netlink: 'syz.3.2057': attribute type 2 has an invalid length. [ 312.078556][T13318] __nla_validate_parse: 5 callbacks suppressed [ 312.078574][T13318] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2061'. [ 312.094445][T13318] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2061'. [ 312.103321][T13318] netlink: 'syz.4.2061': attribute type 13 has an invalid length. [ 312.766742][T13335] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2064'. [ 312.777262][T13335] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2064'. [ 313.535724][T13345] macsec2: entered promiscuous mode [ 313.540971][T13345] ip6gretap0: entered promiscuous mode [ 313.574204][T13345] macsec2: entered allmulticast mode [ 313.587347][T13345] ip6gretap0: entered allmulticast mode [ 314.007302][T13387] netlink: 'syz.3.2076': attribute type 10 has an invalid length. [ 314.013507][T13392] tipc: Enabling of bearer rejected, failed to enable media [ 314.019859][T13387] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2076'. [ 314.030149][T13392] sctp: [Deprecated]: syz.4.2080 (pid 13392) Use of int in maxseg socket option. [ 314.030149][T13392] Use struct sctp_assoc_value instead [ 314.036548][T13387] dummy0: entered promiscuous mode [ 314.056362][T13387] bridge0: port 1(dummy0) entered blocking state [ 314.062942][T13387] bridge0: port 1(dummy0) entered disabled state [ 314.069697][T13387] dummy0: entered allmulticast mode [ 314.088426][T13385] syzkaller0: entered promiscuous mode [ 314.094360][T13385] syzkaller0: entered allmulticast mode [ 314.201771][T13403] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.2084'. [ 314.411040][T13415] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2087'. [ 314.489129][T13423] xt_TPROXY: Can be used only with -p tcp or -p udp [ 314.512866][T13425] syzkaller0: entered promiscuous mode [ 314.518544][T13425] syzkaller0: entered allmulticast mode [ 314.633492][T13430] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2090'. [ 314.640800][T13429] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2091'. [ 314.656212][T13429] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2091'. [ 314.757250][T13437] syzkaller0: entered promiscuous mode [ 314.762966][T13437] syzkaller0: entered allmulticast mode [ 314.779009][T13439] nftables ruleset with unbound set [ 314.944938][T13449] veth9: entered promiscuous mode [ 315.372403][T13482] sctp: [Deprecated]: syz.4.2106 (pid 13482) Use of struct sctp_assoc_value in delayed_ack socket option. [ 315.372403][T13482] Use struct sctp_sack_info instead [ 315.400599][T13485] syzkaller0: entered promiscuous mode [ 315.409660][T13485] syzkaller0: entered allmulticast mode [ 315.627746][T13493] netlink: 'syz.4.2111': attribute type 1 has an invalid length. [ 315.772069][T13468] netlink: 'syz.0.2103': attribute type 1 has an invalid length. [ 315.843344][T13498] 8021q: adding VLAN 0 to HW filter on device bond7 [ 315.873161][T13498] bond6: (slave bond7): making interface the new active one [ 315.916138][T13498] bond6: (slave bond7): Enslaving as an active interface with an up link [ 315.969392][T13505] netlink: 'syz.2.2112': attribute type 2 has an invalid length. [ 316.089115][T13507] netlink: 'syz.4.2113': attribute type 13 has an invalid length. [ 316.597608][T13527] netlink: 'syz.2.2117': attribute type 10 has an invalid length. [ 316.768436][T13539] netlink: 'syz.3.2122': attribute type 11 has an invalid length. [ 317.020450][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.043472][T13554] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.105702][T13556] __nla_validate_parse: 9 callbacks suppressed [ 317.105720][T13556] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2127'. [ 317.170683][T13554] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.269540][T13554] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.293148][T13562] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2128'. [ 317.372440][T13554] bond0: (slave netdevsim0): Releasing backup interface [ 317.383461][T13554] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.416442][T13572] syzkaller0: entered promiscuous mode [ 317.422063][T13572] syzkaller0: entered allmulticast mode [ 317.560803][T13120] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.578664][T13120] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.650109][T13120] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.692679][T13120] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.732763][T13587] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2136'. [ 317.798088][T13587] ip6gretap0: entered promiscuous mode [ 317.814534][T13587] ip6gretap0: left promiscuous mode [ 317.995445][T13595] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2140'. [ 318.012434][T13603] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2141'. [ 318.016597][T13115] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 318.044561][T13595] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 318.062643][T13115] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 318.066779][T13610] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2141'. [ 318.153981][T13612] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 318.344208][ T29] audit: type=1800 audit(1771118776.882:5): pid=13585 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2137" name="memory.events" dev="tmpfs" ino=2342 res=0 errno=0 [ 318.420600][T13610] bond0: (slave bridge6): Enslaving as an active interface with an up link [ 318.445675][T13603] 8021q: adding VLAN 0 to HW filter on device bond0 [ 318.500344][T13636] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2146'. [ 318.597098][T13644] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2147'. [ 318.607981][T13644] netlink: 'syz.1.2147': attribute type 1 has an invalid length. [ 318.800757][T13649] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2148'. [ 318.998469][T13671] IPv6: sit2: Disabled Multicast RS [ 319.062849][T13671] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2153'. [ 319.394071][T13697] netlink: 'syz.2.2163': attribute type 4 has an invalid length. [ 319.464509][T13702] workqueue: Failed to create a rescuer kthread for wq "nfc4_nci_tx_wq": -EINTR [ 319.677786][T13728] netlink: 'syz.1.2169': attribute type 1 has an invalid length. [ 319.692046][T13730] FAULT_INJECTION: forcing a failure. [ 319.692046][T13730] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 319.705068][T13726] syzkaller1: entered promiscuous mode [ 319.707990][T13730] CPU: 0 UID: 0 PID: 13730 Comm: syz.4.2171 Not tainted syzkaller #0 PREEMPT(full) [ 319.708013][T13730] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 319.708035][T13730] Call Trace: [ 319.708042][T13730] [ 319.708049][T13730] dump_stack_lvl+0xe8/0x150 [ 319.708076][T13730] should_fail_ex+0x412/0x560 [ 319.708102][T13730] _copy_from_user+0x2d/0xb0 [ 319.708120][T13730] ___sys_sendmsg+0x1c6/0x360 [ 319.708139][T13730] ? __lock_acquire+0x6b5/0x2cf0 [ 319.708160][T13730] ? __pfx____sys_sendmsg+0x10/0x10 [ 319.708209][T13730] ? __fget_files+0x2a/0x420 [ 319.708225][T13730] ? __fget_files+0x3a0/0x420 [ 319.708250][T13730] __x64_sys_sendmsg+0x1bd/0x2a0 [ 319.708272][T13730] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 319.708299][T13730] ? __pfx_ksys_write+0x10/0x10 [ 319.708329][T13730] do_syscall_64+0x14d/0xf80 [ 319.708349][T13730] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 319.708364][T13730] ? trace_irq_disable+0x37/0x100 [ 319.708381][T13730] ? clear_bhb_loop+0x40/0x90 [ 319.708400][T13730] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 319.708416][T13730] RIP: 0033:0x7f1da819bf79 [ 319.708431][T13730] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 319.708445][T13730] RSP: 002b:00007f1da90f3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 319.708463][T13730] RAX: ffffffffffffffda RBX: 00007f1da8415fa0 RCX: 00007f1da819bf79 [ 319.708475][T13730] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 319.708486][T13730] RBP: 00007f1da90f3090 R08: 0000000000000000 R09: 0000000000000000 [ 319.708496][T13730] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 319.708506][T13730] R13: 00007f1da8416038 R14: 00007f1da8415fa0 R15: 00007ffcb801cb38 [ 319.708533][T13730] [ 319.708910][T13728] netlink: 'syz.1.2169': attribute type 1 has an invalid length. [ 319.713178][T13726] syzkaller1: entered allmulticast mode [ 320.041795][T13737] pim6reg1: entered promiscuous mode [ 320.063795][T13737] pim6reg1: entered allmulticast mode [ 320.158837][T13744] netlink: 'syz.4.2173': attribute type 3 has an invalid length. [ 320.176914][T13744] netlink: 'syz.4.2173': attribute type 3 has an invalid length. [ 321.010758][T13761] ip6gretap0: entered promiscuous mode [ 321.055015][T13761] ip6gretap0: left promiscuous mode [ 321.134847][T13778] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 321.534968][T13823] 8021q: adding VLAN 0 to HW filter on device bond3 [ 321.563630][T13824] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 321.600223][T13824] bond3: (slave batadv1): Enslaving as an active interface with an up link [ 321.651180][T13827] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 321.659857][T13827] bond3: (slave batadv2): Enslaving as an active interface with an up link [ 321.976863][T13848] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 322.006388][T13857] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_rx_wq": -EINTR [ 322.046496][T13862] IPv6: NLM_F_CREATE should be specified when creating new route [ 322.278812][T13887] __nla_validate_parse: 15 callbacks suppressed [ 322.278828][T13887] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2208'. [ 322.373094][T13858] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 322.379889][T13858] syzkaller1: linktype set to 778 [ 322.410551][T13890] IPVS: Unknown mcast interface: vcan0 [ 322.422157][T13890] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2209'. [ 322.431920][T13890] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2209'. [ 322.534613][T13901] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2214'. [ 322.607647][T13906] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.715328][T13906] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.732843][T13914] netlink: 'syz.2.2217': attribute type 1 has an invalid length. [ 322.763235][T13914] netlink: 96 bytes leftover after parsing attributes in process `syz.2.2217'. [ 322.852802][T13906] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.896492][T13924] netlink: 165 bytes leftover after parsing attributes in process `syz.2.2221'. [ 322.927427][T13923] syzkaller0: entered promiscuous mode [ 322.932929][T13923] syzkaller0: entered allmulticast mode [ 322.998113][T13927] netlink: 'syz.3.2222': attribute type 1 has an invalid length. [ 323.006720][T13927] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2222'. [ 323.051665][T13926] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2222'. [ 323.061791][T13906] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.073553][T13926] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2222'. [ 323.225517][T13115] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.249764][T13942] netlink: 744 bytes leftover after parsing attributes in process `syz.1.2226'. [ 323.261559][T13119] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.344948][T13115] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.356614][T13115] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.475408][T13957] syzkaller0: entered promiscuous mode [ 323.480911][T13957] syzkaller0: entered allmulticast mode [ 324.095902][T14009] netlink: 'syz.2.2246': attribute type 34 has an invalid length. [ 324.124533][T14010] netlink: 'syz.2.2246': attribute type 1 has an invalid length. [ 324.504878][T14029] bond5: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 324.596141][T14029] bond5 (unregistering): Released all slaves [ 324.646195][T14036] syzkaller0: entered promiscuous mode [ 324.662160][T14036] syzkaller0: entered allmulticast mode [ 324.698855][ T3537] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 324.927456][T14044] bond5 (unregistering): Released all slaves [ 324.957722][T14049] tipc: Invalid UDP bearer configuration [ 324.957768][T14049] tipc: Enabling of bearer rejected, failed to enable media [ 325.039550][T14040] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 325.071853][T14052] netlink: 'syz.2.2260': attribute type 5 has an invalid length. [ 325.489047][T14075] xt_bpf: check failed: parse error [ 325.624754][T14083] xt_l2tp: missing protocol rule (udp|l2tpip) [ 325.692689][T14087] pim6reg: entered allmulticast mode [ 325.704491][T14087] netlink: 'syz.3.2270': attribute type 4 has an invalid length. [ 325.718890][T14085] bridge7: entered promiscuous mode [ 325.728194][T14085] bridge7: entered allmulticast mode [ 325.739073][T14085] team0: Port device bridge7 added [ 325.749640][T14087] netlink: 'syz.3.2270': attribute type 4 has an invalid length. [ 325.771470][T14087] pim6reg: left allmulticast mode [ 325.773967][T14094] net_ratelimit: 35 callbacks suppressed [ 325.773981][T14094] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 325.944714][T14103] netlink: 'syz.4.2275': attribute type 10 has an invalid length. [ 326.175681][T14115] syzkaller0: tun_chr_ioctl cmd 35092 [ 326.191788][T14115] syzkaller0: tun_chr_ioctl cmd 1074025673 [ 326.360921][T14128] pimreg3: entered allmulticast mode [ 327.185039][T14183] xfrm0: left promiscuous mode [ 327.190019][T14183] xfrm0: left allmulticast mode [ 327.257044][T14183] team1: left promiscuous mode [ 327.261844][T14183] team1: left allmulticast mode [ 327.269063][T14183] gtp0: left promiscuous mode [ 327.279432][T14183] gtp0: left allmulticast mode [ 327.355651][T14183] geneve2: left promiscuous mode [ 327.360802][T14183] geneve2: left allmulticast mode [ 327.418973][T14183] geneve3: left promiscuous mode [ 327.447226][T13120] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.464245][T13120] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.768298][T13120] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.828968][T14202] __nla_validate_parse: 18 callbacks suppressed [ 327.828987][T14202] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2302'. [ 327.848988][T13120] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.190669][T14222] geneve4: entered promiscuous mode [ 328.319356][T14225] syzkaller0: entered promiscuous mode [ 328.334230][T14225] syzkaller0: entered allmulticast mode [ 328.625542][T14236] netlink: 'syz.3.2314': attribute type 1 has an invalid length. [ 328.701950][T14230] netlink: 'syz.1.2313': attribute type 4 has an invalid length. [ 328.738462][T14246] openvswitch: netlink: Multiple metadata blocks provided [ 328.827388][T14244] bond4: (slave veth9): Enslaving as an active interface with a down link [ 328.869620][T14250] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2319'. [ 328.886159][T14252] 8021q: VLANs not supported on xfrm0 [ 328.889198][T14250] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2319'. [ 328.923593][T14248] tipc: Enabling of bearer rejected, failed to enable media [ 328.933333][T14236] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2314'. [ 328.971202][T14236] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2314'. [ 329.006404][T14236] 8021q: adding VLAN 0 to HW filter on device bond4 [ 329.224206][T14273] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2325'. [ 329.318254][T14278] openvswitch: netlink: Unexpected mask (mask=4000040, allowed=10048) [ 329.363309][T14280] veth11: entered promiscuous mode [ 330.022280][T14270] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 330.035269][T14289] netlink: 488 bytes leftover after parsing attributes in process `syz.3.2330'. [ 330.056279][T14289] netlink: 1041 bytes leftover after parsing attributes in process `syz.3.2330'. [ 330.163599][T14297] netlink: 'syz.4.2331': attribute type 1 has an invalid length. [ 330.185881][T14297] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 330.209504][T14306] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2334'. [ 330.230740][T14303] xt_hashlimit: size too large, truncated to 1048576 [ 330.245372][T14306] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2334'. [ 330.298722][T14312] netlink: 'syz.1.2334': attribute type 1 has an invalid length. [ 330.317350][T14303] xt_CT: No such helper "snmp_trap" [ 330.340573][T14309] syzkaller0: entered promiscuous mode [ 330.386886][T14309] syzkaller0: entered allmulticast mode [ 330.398812][T14313] lo: Caught tx_queue_len zero misconfig [ 332.182114][T14326] tipc: Enabling of bearer rejected, failed to enable media [ 332.191787][T14346] netlink: 'syz.0.2339': attribute type 1 has an invalid length. [ 332.516436][T14394] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 332.584780][T14400] netlink: 'syz.1.2351': attribute type 14 has an invalid length. [ 333.189472][T14402] __nla_validate_parse: 8 callbacks suppressed [ 333.189485][T14402] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2352'. [ 333.218206][T14402] 8021q: adding VLAN 0 to HW filter on device bond8 [ 333.234744][T14402] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 333.243170][T14402] bond8: (slave batadv1): Enslaving as an active interface with an up link [ 333.256126][T14402] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2352'. [ 333.265371][T14402] netlink: 11 bytes leftover after parsing attributes in process `syz.4.2352'. [ 333.275755][T14402] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2352'. [ 333.285370][T14402] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2352'. [ 333.296331][T14402] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2352'. [ 333.325664][T14402] bond8 (unregistering): (slave batadv1): Releasing backup interface [ 333.338949][T14402] bond8 (unregistering): Released all slaves [ 333.451313][T14414] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2355'. [ 333.495259][T14414] macvtap1: entered promiscuous mode [ 333.500589][T14414] dummy0: entered promiscuous mode [ 333.516511][T14414] macvtap1: entered allmulticast mode [ 333.522105][T14414] dummy0: entered allmulticast mode [ 333.530426][T14409] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2354'. [ 333.543301][T14409] netlink: 312 bytes leftover after parsing attributes in process `syz.0.2354'. [ 333.552728][T14409] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2354'. [ 334.326973][T14429] netlink: 'syz.0.2357': attribute type 3 has an invalid length. [ 335.447555][T14386] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 335.623014][T14441] netlink: 'syz.4.2360': attribute type 7 has an invalid length. [ 335.640708][T14441] netlink: 'syz.4.2360': attribute type 8 has an invalid length. [ 335.919330][T14464] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 335.971682][T14464] bond5: Unable to set down delay as MII monitoring is disabled [ 335.981259][T14464] bond5 (unregistering): Released all slaves [ 336.172207][T14476] netlink: set zone limit has 4 unknown bytes [ 336.619475][T14504] erspan0: left promiscuous mode [ 336.645154][T14504] bridge0: port 1(dummy0) entered blocking state [ 336.651652][T14504] bridge0: port 1(dummy0) entered forwarding state [ 336.665279][T14504] 8021q: adding VLAN 0 to HW filter on device bond0 [ 336.685697][T14504] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 336.722728][T14505] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 336.946050][T14523] netlink: 'syz.0.2379': attribute type 16 has an invalid length. [ 336.978027][T14523] netlink: 'syz.0.2379': attribute type 17 has an invalid length. [ 337.034479][T14523] 8021q: adding VLAN 0 to HW filter on device bond0 [ 337.058704][T14523] 8021q: adding VLAN 0 to HW filter on device team0 [ 337.098360][T14523] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 338.594270][T14579] netlink: 'syz.2.2393': attribute type 27 has an invalid length. [ 339.172976][T14610] __nla_validate_parse: 9 callbacks suppressed [ 339.172994][T14610] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2402'. [ 339.199850][T14610] nbd: couldn't find a device at index 0 [ 339.267880][T14624] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2402'. [ 339.297451][T14625] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2406'. [ 339.727741][T14654] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2416'. [ 339.734729][T14661] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2417'. [ 339.827223][T14670] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2420'. [ 339.884054][T14670] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2420'. [ 339.893030][T14670] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2420'. [ 339.924144][T14670] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2420'. [ 339.934684][T14670] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2420'. [ 340.011407][T14670] netlink: 'syz.0.2420': attribute type 1 has an invalid length. [ 340.850035][T14732] bond5: entered promiscuous mode [ 340.944196][T14685] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 341.183683][T14766] bridge: RTM_NEWNEIGH with unconfigured vlan 2 on bridge0 [ 341.726901][T14811] ip6gretap1: entered promiscuous mode [ 341.745073][T14811] ip6gretap1: entered allmulticast mode [ 341.872589][T14829] netlink: 'syz.4.2466': attribute type 96 has an invalid length. [ 341.893526][T14824] syzkaller0: entered promiscuous mode [ 341.900176][T14829] netlink: 'syz.4.2466': attribute type 1 has an invalid length. [ 341.901771][T14824] syzkaller0: entered allmulticast mode [ 342.027107][T14837] bond6: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 342.054450][T14837] bond6 (unregistering): Released all slaves [ 342.120357][T14842] tipc: Enabling of bearer rejected, failed to enable media [ 342.200702][T14848] syzkaller0: entered promiscuous mode [ 342.206771][T14848] syzkaller0: entered allmulticast mode [ 342.223535][T14838] tipc: Enabling of bearer rejected, failed to enable media [ 343.477538][T14865] netlink: 'syz.2.2475': attribute type 1 has an invalid length. [ 343.536038][T14865] 8021q: adding VLAN 0 to HW filter on device bond5 [ 343.580183][T14875] bond5: (slave veth5): Enslaving as an active interface with a down link [ 343.633440][T14865] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 343.643663][T14865] bond5: (slave batadv1): making interface the new active one [ 343.652888][T14865] batadv1: entered promiscuous mode [ 343.658713][T14865] bond5: (slave batadv1): Enslaving as an active interface with an up link [ 343.700421][T14879] batman_adv: batadv0: Adding interface: geneve3 [ 343.706876][T14879] batman_adv: batadv0: The MTU of interface geneve3 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 343.746811][T14879] batman_adv: batadv0: Interface activated: geneve3 [ 343.910589][T14887] syzkaller0: entered promiscuous mode [ 343.919512][T14887] syzkaller0: entered allmulticast mode [ 344.362675][T14926] __nla_validate_parse: 33 callbacks suppressed [ 344.362694][T14926] netlink: 136 bytes leftover after parsing attributes in process `syz.0.2492'. [ 344.382579][T14926] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 344.418642][T14935] netlink: 136 bytes leftover after parsing attributes in process `syz.0.2492'. [ 344.427763][T14935] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 344.580905][T14945] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2497'. [ 344.750653][T14964] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2498'. [ 344.801753][T14966] Cannot find set identified by id 65534 to match [ 344.877537][T14971] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2505'. [ 345.161854][T14995] pim6reg1: entered promiscuous mode [ 345.198222][T14995] pim6reg1: entered allmulticast mode [ 345.260093][T15001] netlink: 204 bytes leftover after parsing attributes in process `syz.1.2511'. [ 345.272324][T15001] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2511'. [ 345.409049][T15004] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2512'. [ 345.498631][T15011] syzkaller0: entered promiscuous mode [ 345.505036][T15011] syzkaller0: entered allmulticast mode [ 345.694597][T15023] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2519'. [ 345.740314][T15035] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2522'. [ 345.866846][T15042] dummy0: Caught tx_queue_len zero misconfig [ 345.873162][T15042] netem: unknown loss type 13 [ 345.902603][T15042] netem: change failed [ 345.964978][T15042] syzkaller1: entered promiscuous mode [ 345.970572][T15042] syzkaller1: entered allmulticast mode [ 346.197577][T15078] x_tables: duplicate underflow at hook 1 [ 346.266354][T15083] tipc: Enabling of bearer rejected, failed to enable media [ 346.471666][T15092] tipc: Enabled bearer , priority 0 [ 346.479414][T15092] syzkaller0: entered promiscuous mode [ 346.494280][T15092] syzkaller0: entered allmulticast mode [ 346.583505][T15100] tipc: Resetting bearer [ 346.745071][T15114] netlink: 'syz.2.2547': attribute type 1 has an invalid length. [ 346.780505][T15115] ipvlan2: entered allmulticast mode [ 346.788083][T15115] veth0_vlan: entered allmulticast mode [ 346.829863][T15117] netlink: 'syz.0.2550': attribute type 13 has an invalid length. [ 346.850326][T15118] bond6: (slave vxcan3): The slave device specified does not support setting the MAC address [ 346.865051][T15118] bond6: (slave vxcan3): Error -95 calling set_mac_address [ 346.874950][T15120] netlink: 'syz.1.2548': attribute type 1 has an invalid length. [ 346.932835][T15114] bond6: (slave gretap1): making interface the new active one [ 346.944745][T15114] bond6: (slave gretap1): Enslaving as an active interface with an up link [ 347.101925][T15124] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 0 [ 347.266944][T15144] netlink: 'syz.3.2557': attribute type 13 has an invalid length. [ 347.281182][T15134] bond4: entered promiscuous mode [ 347.325013][T15136] A link change request failed with some changes committed already. Interface bond1 may have been left with an inconsistent configuration, please check. [ 347.546034][T15091] tipc: Resetting bearer [ 347.562338][T15133] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 347.594009][T15091] tipc: Disabling bearer [ 347.612971][T15147] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 347.621053][T15147] syzkaller0: entered promiscuous mode [ 347.630123][T15147] syzkaller0: entered allmulticast mode [ 347.657937][T15144] tipc: Enabled bearer , priority 0 [ 347.803323][T15135] tipc: Resetting bearer [ 347.868419][T15135] tipc: Disabling bearer [ 347.960764][T15173] macsec3: entered promiscuous mode [ 347.967978][T15173] macsec3: entered allmulticast mode [ 348.147585][T15178] syzkaller0: entered promiscuous mode [ 348.157177][T15178] syzkaller0: entered allmulticast mode [ 348.451783][T15205] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 349.053667][T15239] netlink: 'syz.1.2586': attribute type 1 has an invalid length. [ 349.243430][T15251] bond3: entered allmulticast mode [ 349.248745][T15251] vcan1: entered allmulticast mode [ 349.351263][T15250] bond3: left allmulticast mode [ 349.372716][T15250] vcan1: left allmulticast mode [ 349.648122][T15297] bond4: (slave syz_tun): Releasing backup interface [ 349.698382][T15297] bridge0: port 1(bridge_slave_0) entered disabled state [ 349.721836][T15297] team_slave_0: left allmulticast mode [ 349.754555][T15297] team0: Port device team_slave_0 removed [ 349.774628][T15297] team_slave_1: left allmulticast mode [ 349.789000][T15297] team0: Port device team_slave_1 removed [ 349.798832][T15297] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 349.807594][T15297] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 349.817541][T15297] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 349.936239][T15315] __nla_validate_parse: 16 callbacks suppressed [ 349.936733][T15315] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2606'. [ 349.989713][T15319] sctp: [Deprecated]: syz.1.2608 (pid 15319) Use of int in max_burst socket option deprecated. [ 349.989713][T15319] Use struct sctp_assoc_value instead [ 350.001835][T15318] bond0: (slave rose0): Enslaving as an active interface with an up link [ 350.017071][T15318] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 350.090149][T15318] bridge0: port 1(dummy0) entered disabled state [ 350.159616][T15318] macsec0: left allmulticast mode [ 350.201297][T15318] batman_adv: batadv0: Interface deactivated: geneve3 [ 350.219767][T13120] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.229027][T13120] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.297345][T13120] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.315645][T15329] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2611'. [ 350.324722][T13120] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.355957][T15329] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2611'. [ 350.367173][T15331] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2611'. [ 350.397174][T15331] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2611'. [ 350.583982][T15353] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2615'. [ 350.593324][T15353] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2615'. [ 350.623495][T15355] netlink: 'syz.2.2618': attribute type 21 has an invalid length. [ 350.657514][T15355] IPv6: NLM_F_CREATE should be specified when creating new route [ 350.703818][T15355] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 350.711481][T15355] IPv6: NLM_F_CREATE should be set when creating new route [ 350.718807][T15355] IPv6: NLM_F_CREATE should be set when creating new route [ 350.726066][T15355] IPv6: NLM_F_CREATE should be set when creating new route [ 350.752069][T15360] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2619'. [ 350.982445][T15372] netlink: 'syz.3.2622': attribute type 1 has an invalid length. [ 351.045838][T15382] netlink: 'syz.1.2624': attribute type 21 has an invalid length. [ 351.066856][T15382] netlink: 'syz.1.2624': attribute type 22 has an invalid length. [ 351.092902][T15382] netlink: 'syz.1.2624': attribute type 23 has an invalid length. [ 351.118934][T15382] netlink: 136 bytes leftover after parsing attributes in process `syz.1.2624'. [ 351.212267][T15393] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2630'. [ 351.276530][T15396] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 351.311241][T15396] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 351.432619][T15407] IPVS: length: 164 != 24 [ 351.561404][T15414] syzkaller0: entered promiscuous mode [ 351.571892][T15414] syzkaller0: entered allmulticast mode [ 351.673292][T13119] tipc: Subscription rejected, illegal request [ 351.711106][T15429] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 351.837997][T15438] syzkaller0: entered promiscuous mode [ 351.850202][T15438] syzkaller0: entered allmulticast mode [ 352.013959][T15442] wg1 speed is unknown, defaulting to 1000 [ 352.021083][T15442] wg1 speed is unknown, defaulting to 1000 [ 352.038072][T15442] wg1 speed is unknown, defaulting to 1000 [ 352.059435][T15449] bridge0: entered allmulticast mode [ 352.086408][T15442] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 352.127728][T15442] infiniband sy+Û: RDMA CMA: cma_listen_on_dev, error -98 [ 352.202357][T15454] syzkaller1: entered promiscuous mode [ 352.209061][T15454] syzkaller1: entered allmulticast mode [ 352.217302][T15442] wg1 speed is unknown, defaulting to 1000 [ 352.218702][T15455] validate_nla: 1 callbacks suppressed [ 352.218714][T15455] netlink: 'syz.0.2648': attribute type 1 has an invalid length. [ 352.256900][T15459] netlink: 'syz.2.2649': attribute type 11 has an invalid length. [ 352.270646][T15442] wg1 speed is unknown, defaulting to 1000 [ 352.290286][T15454] 8021q: adding VLAN 0 to HW filter on device bond6 [ 352.300014][T15454] bond5: (slave bond6): making interface the new active one [ 352.308964][T15454] bond5: (slave bond6): Enslaving as an active interface with an up link [ 352.317583][T15442] wg1 speed is unknown, defaulting to 1000 [ 352.327824][T15454] bond5: (slave gretap1): Enslaving as a backup interface with an up link [ 352.336859][T15442] wg1 speed is unknown, defaulting to 1000 [ 352.344722][T15442] wg1 speed is unknown, defaulting to 1000 [ 352.371225][T15455] 8021q: adding VLAN 0 to HW filter on device bond5 [ 352.389426][T15454] vlan0: entered promiscuous mode [ 352.395338][T15454] bond5: entered promiscuous mode [ 352.400687][T15454] bond6: entered promiscuous mode [ 352.650132][T15479] netlink: 'syz.1.2655': attribute type 1 has an invalid length. [ 352.712129][T15479] bond5: entered promiscuous mode [ 352.730323][T15479] 8021q: adding VLAN 0 to HW filter on device bond5 [ 352.745113][T15484] 8021q: adding VLAN 0 to HW filter on device bond5 [ 352.752115][T15484] bond5: (slave wireguard0): The slave device specified does not support setting the MAC address [ 352.763279][T15484] bond5: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 352.777706][T15484] bond5: (slave wireguard0): making interface the new active one [ 352.785784][T15484] wireguard0: entered promiscuous mode [ 352.793421][T15484] bond5: (slave wireguard0): Enslaving as an active interface with an up link [ 352.906874][T15496] netlink: 'syz.2.2660': attribute type 4 has an invalid length. [ 352.916115][T15495] netlink: 'syz.2.2660': attribute type 4 has an invalid length. [ 352.966996][T15498] netlink: 'syz.3.2663': attribute type 1 has an invalid length. [ 353.315943][T15524] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 353.863874][T15532] netlink: 'syz.1.2671': attribute type 1 has an invalid length. [ 353.910612][T15531] wg1 speed is unknown, defaulting to 1000 [ 354.001719][T15539] openvswitch: netlink: Port 167772160 exceeds max allowable 65535 [ 354.018560][T15539] vlan4: entered promiscuous mode [ 354.079217][T15539] bond0: entered promiscuous mode [ 354.092272][T15539] bridge6: entered promiscuous mode [ 354.171906][T15554] netlink: 'syz.1.2676': attribute type 1 has an invalid length. [ 354.230336][T15562] x_tables: duplicate underflow at hook 1 [ 354.291938][T15553] 8021q: adding VLAN 0 to HW filter on device bond7 [ 354.302150][T15553] bond6: (slave bond7): making interface the new active one [ 354.310749][T15553] bond6: (slave bond7): Enslaving as an active interface with an up link [ 354.451295][T15574] netlink: 'syz.3.2683': attribute type 3 has an invalid length. [ 354.558681][T15570] syzkaller1: entered promiscuous mode [ 354.579561][T15570] syzkaller1: entered allmulticast mode [ 354.744260][T13121] batadv1: left promiscuous mode [ 354.954393][T15606] wg1 speed is unknown, defaulting to 1000 [ 354.978171][T15615] __nla_validate_parse: 34 callbacks suppressed [ 354.978189][T15615] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2695'. [ 355.005136][T15615] netlink: 'syz.1.2695': attribute type 16 has an invalid length. [ 355.018992][T15615] netlink: 'syz.1.2695': attribute type 17 has an invalid length. [ 355.051729][T15615] syz_tun: left promiscuous mode [ 355.062255][T15615] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 355.251686][T15625] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2696'. [ 355.516054][T15646] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2705'. [ 355.527777][T15647] netlink: 108 bytes leftover after parsing attributes in process `syz.0.2704'. [ 355.544313][T15647] netlink: 108 bytes leftover after parsing attributes in process `syz.0.2704'. [ 355.589572][T15655] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2707'. [ 355.623026][ T5904] IPVS: starting estimator thread 0... [ 355.651282][T15655] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2707'. [ 355.714141][T15659] IPVS: using max 34 ests per chain, 81600 per kthread [ 355.847638][T15674] bridge8: entered promiscuous mode [ 355.964689][T15675] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 355.978717][T15668] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 356.108002][T15685] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2717'. [ 356.199221][T15691] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2719'. [ 356.232820][T15700] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2717'. [ 356.367231][T15689] smc: net device wlan0 applied user defined pnetid SYZ0 [ 356.518647][T15716] rdma_op ffff88807d7d81f0 conn xmit_rdma 0000000000000000 [ 356.600241][T13723] udevd[13723]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 357.150640][T15742] bond8: (slave bridge6): making interface the new active one [ 357.175256][T15742] bond8: (slave bridge6): Enslaving as an active interface with an up link [ 357.227274][T15753] validate_nla: 2 callbacks suppressed [ 357.227289][T15753] netlink: 'syz.2.2734': attribute type 15 has an invalid length. [ 357.479818][T15766] ip6tnl0: Caught tx_queue_len zero misconfig [ 357.532142][T15770] netlink: 'syz.2.2741': attribute type 1 has an invalid length. [ 357.565978][T15770] netlink: 'syz.2.2741': attribute type 1 has an invalid length. [ 357.574225][T15770] netlink: 'syz.2.2741': attribute type 1 has an invalid length. [ 357.831007][T15791] tipc: Enabled bearer , priority 0 [ 357.841232][T15791] syzkaller0: entered promiscuous mode [ 357.847155][T15791] syzkaller0: entered allmulticast mode [ 357.859048][T15791] tipc: Enabling of bearer rejected, already enabled [ 357.879518][T15790] tipc: Resetting bearer [ 357.924624][T15790] tipc: Disabling bearer [ 358.109492][T15804] wg1 speed is unknown, defaulting to 1000 [ 358.980149][T15836] syzkaller0: entered promiscuous mode [ 358.989141][T15836] syzkaller0: entered allmulticast mode [ 361.402429][T15890] syzkaller1: entered promiscuous mode [ 361.408180][T15890] syzkaller1: entered allmulticast mode [ 361.613579][T15905] bond0: (slave rose0): Releasing backup interface [ 361.708858][T15915] __nla_validate_parse: 18 callbacks suppressed [ 361.708876][T15915] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2776'. [ 361.829092][T15924] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 361.847740][T15925] netlink: 'syz.1.2778': attribute type 21 has an invalid length. [ 361.880510][T15925] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2778'. [ 362.249159][T15950] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2788'. [ 362.451355][T15971] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2791'. [ 362.831347][T15993] wg1 speed is unknown, defaulting to 1000 [ 362.904601][T15997] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2797'. [ 362.992167][T15997] wg2: entered promiscuous mode [ 363.002794][T15997] wg2: entered allmulticast mode [ 363.491786][T16047] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2805'. [ 363.509561][T16044] netlink: 'syz.3.2807': attribute type 1 has an invalid length. [ 363.517443][T16044] netlink: 'syz.3.2807': attribute type 2 has an invalid length. [ 363.541377][T16045] syzkaller0: entered promiscuous mode [ 363.552177][T16045] syzkaller0: entered allmulticast mode [ 363.718725][T16055] netlink: zone id is out of range [ 363.742768][T16055] netlink: zone id is out of range [ 363.762317][T16055] netlink: zone id is out of range [ 363.772972][T16060] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2811'. [ 363.783402][T16055] netlink: zone id is out of range [ 363.814220][T16055] netlink: zone id is out of range [ 363.837530][T16055] netlink: zone id is out of range [ 363.850183][T16055] netlink: zone id is out of range [ 364.267122][T16045] netlink: 'syz.0.2808': attribute type 1 has an invalid length. [ 364.315553][T16087] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2819'. [ 364.326302][T16089] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2819'. [ 364.534900][T16104] delete_channel: no stack [ 364.704080][T16111] wg1 speed is unknown, defaulting to 1000 [ 364.777824][T16114] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2824'. [ 364.799336][T16114] mac80211_hwsim hwsim4 wlan1: entered promiscuous mode [ 364.832666][T16114] macvtap1: entered promiscuous mode [ 365.002355][T16133] batadv_slave_0: entered promiscuous mode [ 365.318618][T16133] batadv_slave_0: left promiscuous mode [ 365.531676][T16161] netlink: 'syz.2.2833': attribute type 15 has an invalid length. [ 365.757971][T16173] netlink: 'syz.0.2836': attribute type 10 has an invalid length. [ 365.982466][T16184] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.050631][T16195] netlink: 'syz.0.2842': attribute type 10 has an invalid length. [ 366.177665][T16184] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.328666][T16195] smc: removing net device wlan0 with user defined pnetid SYZ0 [ 366.337150][T16216] ip6t_srh: unknown srh match flags 4000 [ 366.395297][T16184] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.432626][T16214] ipvlan2: entered promiscuous mode [ 366.445650][T16209] syzkaller0: entered promiscuous mode [ 366.468147][T16209] syzkaller0: entered allmulticast mode [ 366.511103][T16207] wg1 speed is unknown, defaulting to 1000 [ 366.532883][T16209] netlink: 'syz.3.2846': attribute type 12 has an invalid length. [ 366.561511][T16184] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.843209][T13119] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.899223][T13119] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.959146][T13119] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.142137][T13119] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.248770][T16258] __nla_validate_parse: 8 callbacks suppressed [ 367.248790][T16258] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2851'. [ 367.396843][T16258] tipc: Resetting bearer [ 367.483613][T16271] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2853'. [ 367.620366][T16282] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2852'. [ 367.686193][T16287] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2852'. [ 367.705293][T16286] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2855'. [ 367.879394][T16301] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2856'. [ 368.212423][T16320] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2858'. [ 368.320494][T16315] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 368.336219][T16258] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 368.382953][T16258] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 369.016430][T16310] tipc: Enabled bearer , priority 10 [ 369.024167][ T5937] wg1 speed is unknown, defaulting to 1000 [ 369.039700][ T5937] sy+Û: Port: 1 Link DOWN [ 369.040819][T13121] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 369.081232][T13121] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.102100][T13121] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 369.111661][T13121] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.120429][T13121] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 369.129370][T13121] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.142713][T13121] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 369.151929][T13121] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.217150][T16355] mac80211_hwsim hwsim5 wlan1: Caught tx_queue_len zero misconfig [ 369.301953][T16365] netlink: 'syz.4.2863': attribute type 1 has an invalid length. [ 369.312044][T16367] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2863'. [ 369.609373][T16388] netlink: 136 bytes leftover after parsing attributes in process `syz.4.2870'. [ 369.619634][T16388] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 369.837814][T16400] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2873'. [ 369.872541][T16401] bond0: entered promiscuous mode [ 369.879311][T16401] gretap0: entered promiscuous mode [ 369.885557][T16401] hsr1: entered promiscuous mode [ 370.668470][T16432] A link change request failed with some changes committed already. Interface ip6tnl0 may have been left with an inconsistent configuration, please check. [ 370.765451][T16442] tipc: MTU too low for tipc bearer [ 370.809238][T16444] pim6reg: entered allmulticast mode [ 370.834800][T16444] pim6reg: left allmulticast mode [ 372.025404][T16487] syzkaller0: entered promiscuous mode [ 372.031190][T16487] syzkaller0: entered allmulticast mode [ 372.227491][T16499] nbd: must specify a device to reconfigure [ 372.251279][T16501] veth0: Caught tx_queue_len zero misconfig [ 372.542865][T16512] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 372.589758][T16529] __nla_validate_parse: 6 callbacks suppressed [ 372.589776][T16529] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2913'. [ 372.646964][T16532] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2914'. [ 372.665616][T13115] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 372.674702][T13115] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 372.715800][T16530] syzkaller0: entered promiscuous mode [ 372.721420][T16530] syzkaller0: entered allmulticast mode [ 372.730853][T13115] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 372.739919][T13115] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 373.118697][T16560] lo: Caught tx_queue_len zero misconfig [ 373.200824][T16563] bridge9: entered promiscuous mode [ 373.397426][T16575] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2923'. [ 373.495064][T16580] xt_TCPMSS: Only works on TCP SYN packets [ 373.695254][T16597] netlink: 'syz.2.2930': attribute type 1 has an invalid length. [ 373.929858][T16603] syzkaller1: entered promiscuous mode [ 373.935764][T16603] syzkaller1: entered allmulticast mode [ 373.944056][T16603] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2933'. [ 373.967591][T16612] wg1 speed is unknown, defaulting to 1000 [ 374.018646][T16596] netlink: 'syz.1.2931': attribute type 9 has an invalid length. [ 374.223710][T16615] dummy0: Caught tx_queue_len zero misconfig [ 374.495612][T16627] netlink: 'syz.3.2938': attribute type 1 has an invalid length. [ 374.710938][T16627] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 376.747982][T16632] tipc: Enabled bearer , priority 0 [ 376.838913][T16633] syzkaller0: entered promiscuous mode [ 376.844725][T16633] syzkaller0: entered allmulticast mode [ 376.852434][T16633] tipc: Resetting bearer [ 376.864071][T16640] lo: Caught tx_queue_len zero misconfig [ 376.869915][T16640] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2940'. [ 376.881616][T16626] tipc: Resetting bearer [ 376.960772][T16651] netlink: 'syz.0.2941': attribute type 7 has an invalid length. [ 377.040213][T16652] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.2943'. [ 378.088894][T16626] tipc: Disabling bearer [ 378.159617][ T836] tipc: Node number set to 4236005154 [ 378.292630][T16659] netlink: set zone limit has 4 unknown bytes [ 378.460884][ T1297] clip:clip_start_xmit: skb_dst(skb) == NULL [ 378.493855][T16678] netlink: 17 bytes leftover after parsing attributes in process `syz.4.2950'. [ 378.502862][T16678] tunl0: Caught tx_queue_len zero misconfig [ 378.564915][T16685] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2951'. [ 378.640249][T16689] syzkaller1: entered promiscuous mode [ 378.685020][ T5833] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 378.697414][ T5833] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 378.706319][ T5833] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 378.715309][ T5833] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 378.724114][ T5833] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 378.731233][T16689] syzkaller1: entered allmulticast mode [ 378.795201][T16698] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2953'. [ 378.826704][T16698] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2953'. [ 378.845280][T16701] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2953'. [ 378.855128][T16701] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2953'. [ 379.039316][T16706] bond9: option coupled_control: mode dependency failed, not supported in mode balance-rr(0) [ 379.051491][T16706] bond9 (unregistering): Released all slaves [ 379.144749][T16701] bond9: option coupled_control: mode dependency failed, not supported in mode balance-rr(0) [ 379.164323][T16718] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2958'. [ 379.173308][T16718] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2958'. [ 379.190932][T16701] bond9 (unregistering): Released all slaves [ 379.215254][T16708] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2955'. [ 379.237391][T16708] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2955'. [ 379.254290][T16690] wg1 speed is unknown, defaulting to 1000 [ 379.385313][T16727] netlink: 'syz.0.2962': attribute type 21 has an invalid length. [ 379.419923][T16727] netlink: 'syz.0.2962': attribute type 1 has an invalid length. [ 379.485066][T16730] syzkaller0: entered promiscuous mode [ 379.490973][T16730] syzkaller0: entered allmulticast mode [ 379.548233][T16734] bond9: option lp_interval: invalid value (0) [ 379.561978][T16734] bond9: option lp_interval: allowed values 1 - 2147483647 [ 379.592498][T16734] bond9 (unregistering): Released all slaves [ 379.668139][T16690] chnl_net:caif_netlink_parms(): no params data found [ 379.854628][T16690] bridge0: port 1(bridge_slave_0) entered blocking state [ 379.861834][T16690] bridge0: port 1(bridge_slave_0) entered disabled state [ 379.870497][T16690] bridge_slave_0: entered allmulticast mode [ 379.878595][T16690] bridge_slave_0: entered promiscuous mode [ 379.887170][T16690] bridge0: port 2(bridge_slave_1) entered blocking state [ 379.894416][T16690] bridge0: port 2(bridge_slave_1) entered disabled state [ 379.901624][T16690] bridge_slave_1: entered allmulticast mode [ 379.909943][T16690] bridge_slave_1: entered promiscuous mode [ 379.947207][T16690] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 379.959510][T16690] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 379.996614][T16690] team0: Port device team_slave_0 added [ 380.005084][T16690] team0: Port device team_slave_1 added [ 380.037378][T16690] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 380.044757][T16690] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 380.070855][T16690] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 380.084201][T16690] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 380.091153][T16690] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 380.117397][T16690] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 380.174877][T16690] hsr_slave_0: entered promiscuous mode [ 380.181747][T16690] hsr_slave_1: entered promiscuous mode [ 380.189321][T16690] debugfs: 'hsr0' already exists in 'hsr' [ 380.195951][T16690] Cannot create hsr debugfs directory [ 380.513003][T16780] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 380.568644][T16785] wg1 speed is unknown, defaulting to 1000 [ 380.637596][T16794] dummy0: Caught tx_queue_len zero misconfig [ 380.775689][ T5833] Bluetooth: hci5: command tx timeout [ 380.851588][T16805] wg1 speed is unknown, defaulting to 1000 [ 381.026108][T16690] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 381.037259][T16690] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 381.060771][T16690] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 381.165254][T16690] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 381.289949][T16816] wg1 speed is unknown, defaulting to 1000 [ 381.328917][T16827] netlink: 'syz.0.2985': attribute type 4 has an invalid length. [ 381.347439][T16827] .`: renamed from bond0 (while UP) [ 381.407459][T16827] wg1 speed is unknown, defaulting to 1000 [ 381.623243][T16690] 8021q: adding VLAN 0 to HW filter on device bond0 [ 381.722188][T16690] 8021q: adding VLAN 0 to HW filter on device team0 [ 381.749750][T13118] bridge0: port 1(bridge_slave_0) entered blocking state [ 381.756933][T13118] bridge0: port 1(bridge_slave_0) entered forwarding state [ 381.801724][T13118] bridge0: port 2(bridge_slave_1) entered blocking state [ 381.808921][T13118] bridge0: port 2(bridge_slave_1) entered forwarding state [ 382.256211][T16690] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 382.343448][T16690] veth0_vlan: entered promiscuous mode [ 382.363555][T16690] veth1_vlan: entered promiscuous mode [ 382.456314][T16690] veth0_macvtap: entered promiscuous mode [ 382.508405][T16690] veth1_macvtap: entered promiscuous mode [ 382.567700][T16690] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 382.599792][T16690] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 382.600865][T16869] IPVS: Scheduler module ip_vs_sip not found [ 382.618470][T16873] IPVS: length: 140 != 8 [ 382.640502][T13119] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.655906][T13119] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.690703][T13119] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.725245][T13119] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.855612][ T51] Bluetooth: hci5: command tx timeout [ 382.892451][T16888] netlink: 'syz.3.3001': attribute type 1 has an invalid length. [ 382.900478][T16888] netlink: 'syz.3.3001': attribute type 7 has an invalid length. [ 382.909190][T16888] netlink: 'syz.3.3001': attribute type 8 has an invalid length. [ 382.922962][T13119] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 382.928758][T16886] wg1 speed is unknown, defaulting to 1000 [ 382.931349][T16888] NCSI netlink: No device for ifindex 65584 [ 382.942868][T13119] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 383.052142][T16894] bridge0: Caught tx_queue_len zero misconfig [ 383.059691][T16891] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 383.133371][T13112] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 383.169905][T13112] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 383.321095][T16906] syzkaller0: entered promiscuous mode [ 383.327355][T16906] syzkaller0: entered allmulticast mode [ 383.771413][ T5143] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 383.780216][ T5143] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 383.796829][ T5143] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 383.817354][ T5143] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 383.831970][ T5143] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 384.903051][T16923] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 384.934207][ T5143] Bluetooth: hci5: command 0x040f tx timeout [ 385.012291][T16930] wg1 speed is unknown, defaulting to 1000 [ 385.018377][T16936] __nla_validate_parse: 12 callbacks suppressed [ 385.018393][T16936] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3012'. [ 385.082188][T16936] syzkaller0: entered promiscuous mode [ 385.094878][T16936] syzkaller0: entered allmulticast mode [ 385.126660][T16931] wg1 speed is unknown, defaulting to 1000 [ 385.361545][T16954] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3017'. [ 385.536542][T16963] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3018'. [ 385.603709][T16931] chnl_net:caif_netlink_parms(): no params data found [ 385.680511][T16968] openvswitch: netlink: Key type 11792 is out of range max 32 [ 385.722423][T16968] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3021'. [ 385.746227][T16968] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3021'. [ 385.872758][T16931] bridge0: port 1(bridge_slave_0) entered blocking state [ 385.903652][ T5143] Bluetooth: hci2: command tx timeout [ 385.915524][T16931] bridge0: port 1(bridge_slave_0) entered disabled state [ 385.937175][T16931] bridge_slave_0: entered allmulticast mode [ 385.949790][T16931] bridge_slave_0: entered promiscuous mode [ 385.966293][T16931] bridge0: port 2(bridge_slave_1) entered blocking state [ 385.977536][T16931] bridge0: port 2(bridge_slave_1) entered disabled state [ 385.985112][T16931] bridge_slave_1: entered allmulticast mode [ 385.993537][T16931] bridge_slave_1: entered promiscuous mode [ 386.038749][T16931] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 386.051737][T16931] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 386.113252][T16931] team0: Port device team_slave_0 added [ 386.122884][T16931] team0: Port device team_slave_1 added [ 386.165095][T16931] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 386.172148][T16931] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 386.198846][T16931] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 386.212420][T16931] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 386.223563][T16931] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 386.285096][T16931] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 386.381934][T16931] hsr_slave_0: entered promiscuous mode [ 386.389551][T16931] hsr_slave_1: entered promiscuous mode [ 386.400537][T16931] debugfs: 'hsr0' already exists in 'hsr' [ 386.408376][T16931] Cannot create hsr debugfs directory [ 386.624377][T17009] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3033'. [ 386.641798][T17010] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 386.800145][T17006] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3032'. [ 386.808634][T17017] tipc: Enabled bearer , priority 0 [ 386.816737][T17017] syzkaller0: entered promiscuous mode [ 386.822218][T17017] syzkaller0: entered allmulticast mode [ 386.919442][T17017] tipc: Resetting bearer [ 386.954310][T17019] netlink: 'syz.4.3036': attribute type 4 has an invalid length. [ 386.984708][T17016] tipc: Resetting bearer [ 387.009664][T17016] tipc: Disabling bearer [ 387.015932][T17022] netlink: 'syz.4.3036': attribute type 4 has an invalid length. [ 387.023850][ T5143] Bluetooth: hci5: command 0x040f tx timeout [ 387.231594][T17030] syzkaller1: entered promiscuous mode [ 387.241534][T17030] syzkaller1: entered allmulticast mode [ 387.974883][ T5143] Bluetooth: hci2: command tx timeout [ 388.168472][T17078] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3051'. [ 388.179170][T17078] netlink: zone id is out of range [ 388.184441][T17078] netlink: zone id is out of range [ 388.189656][T17078] netlink: zone id is out of range [ 388.195094][T17078] netlink: zone id is out of range [ 388.200277][T17078] netlink: zone id is out of range [ 388.205745][T17078] netlink: zone id is out of range [ 388.211176][T17078] netlink: zone id is out of range [ 388.216399][T17078] netlink: zone id is out of range [ 388.221810][T17078] netlink: zone id is out of range [ 389.093957][ T5143] Bluetooth: hci5: command 0x040f tx timeout [ 390.053904][ T5143] Bluetooth: hci2: command tx timeout [ 390.254701][T17034] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 390.267067][T16931] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 390.317270][T16931] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 390.398656][T16931] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 390.430646][T16931] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 390.587227][T17086] netlink: 'syz.4.3053': attribute type 6 has an invalid length. [ 390.630877][T16931] 8021q: adding VLAN 0 to HW filter on device bond0 [ 390.668804][T17119] netlink: 'syz.1.3058': attribute type 1 has an invalid length. [ 390.690401][T16931] 8021q: adding VLAN 0 to HW filter on device team0 [ 390.702251][T17119] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3058'. [ 390.753296][T13120] bridge0: port 1(bridge_slave_0) entered blocking state [ 390.760501][T13120] bridge0: port 1(bridge_slave_0) entered forwarding state [ 390.789802][T13119] bridge0: port 2(bridge_slave_1) entered blocking state [ 390.796970][T13119] bridge0: port 2(bridge_slave_1) entered forwarding state [ 390.888647][T17133] netlink: 'syz.4.3062': attribute type 83 has an invalid length. [ 391.017776][T17138] IPVS: set_ctl: invalid protocol: 60 172.20.20.187:20004 [ 391.095806][T17148] hsr0: entered promiscuous mode [ 391.109170][T17148] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3065'. [ 391.128000][T17150] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3066'. [ 391.142217][T17148] hsr_slave_0: left promiscuous mode [ 391.148693][T17148] hsr_slave_1: left promiscuous mode [ 391.160588][T17148] hsr0 (unregistering): left promiscuous mode [ 391.214555][T17150] 8021q: adding VLAN 0 to HW filter on device bond9 [ 391.234381][T17155] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 391.243032][T17155] bond9: (slave batadv2): Enslaving as an active interface with an up link [ 391.306615][T16931] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 391.313626][T17158] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 391.377494][T17158] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3068'. [ 391.561093][T16931] veth0_vlan: entered promiscuous mode [ 391.649271][T17176] syzkaller0: entered promiscuous mode [ 391.656647][T17176] syzkaller0: entered allmulticast mode [ 391.716965][T17182] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3073'. [ 391.726317][T17182] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3073'. [ 391.742765][T13118] syzkaller0: tun_net_xmit 48 [ 391.750834][T17184] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3073'. [ 391.762496][T17184] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3073'. [ 392.144251][ T5143] Bluetooth: hci2: command tx timeout [ 393.160858][T16931] veth1_vlan: entered promiscuous mode [ 393.218047][T17208] netlink: 'syz.2.3081': attribute type 15 has an invalid length. [ 393.232980][T17208] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3081'. [ 393.301820][T13119] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 2816 - 0 [ 393.387797][T13119] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 2816 - 0 [ 393.399069][T13119] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 2816 - 0 [ 393.434957][T13119] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 2816 - 0 [ 393.492160][T16931] veth0_macvtap: entered promiscuous mode [ 393.516534][T17223] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3086'. [ 393.523086][T16931] veth1_macvtap: entered promiscuous mode [ 393.537280][T17224] net_ratelimit: 45 callbacks suppressed [ 393.537295][T17224] openvswitch: netlink: Message has 158 unknown bytes. [ 393.556334][T17226] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 393.603596][T17223] vlan0: entered promiscuous mode [ 393.646860][T17233] xt_TCPMSS: Only works on TCP SYN packets [ 393.684216][T16931] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 393.728772][T16931] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 393.761093][T13119] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.771262][ T29] audit: type=1800 audit(1771118852.312:6): pid=17235 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.3091" name="memory.events" dev="tmpfs" ino=106 res=0 errno=0 [ 393.795124][T13119] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.827345][T13119] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.871717][T17245] syzkaller1: entered promiscuous mode [ 393.888271][T17245] syzkaller1: entered allmulticast mode [ 393.903417][T13119] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.955619][T17256] tipc: Started in network mode [ 393.965869][T17256] tipc: Node identity 5e01370566c4, cluster identity 4711 [ 393.974665][T17256] tipc: Enabled bearer , priority 0 [ 394.026291][T17253] syzkaller0: entered promiscuous mode [ 394.033469][T17253] syzkaller0: entered allmulticast mode [ 394.107207][T17256] tipc: Resetting bearer [ 394.148650][T17263] gretap2: entered promiscuous mode [ 394.168397][T17263] batman_adv: batadv0: Adding interface: gretap2 [ 394.176462][T17263] batman_adv: batadv0: The MTU of interface gretap2 is too small (1462) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1532. [ 394.200630][T17263] batman_adv: batadv0: Not using interface gretap2 (retrying later): interface not active [ 394.222853][T17252] tipc: Resetting bearer [ 394.246750][T17252] tipc: Disabling bearer [ 394.446892][T13118] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 394.477047][T13118] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 394.583514][T13112] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 394.602300][T13112] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 394.853056][T17287] netlink: 'syz.3.3104': attribute type 3 has an invalid length. [ 394.880029][T17286] syzkaller0: entered promiscuous mode [ 394.894932][T17286] syzkaller0: entered allmulticast mode [ 394.918657][T17283] syzkaller0: entered promiscuous mode [ 394.924591][T17283] syzkaller0: entered allmulticast mode [ 395.154870][ T5833] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 395.199719][ T5833] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 395.210293][ T5833] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 395.219480][ T5833] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 395.234209][ T5833] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 395.429439][T17291] wg1 speed is unknown, defaulting to 1000 [ 395.690994][T13121] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 395.795549][T13121] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 395.917288][T13121] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 395.960356][T17320] wg1 speed is unknown, defaulting to 1000 [ 396.062543][T17323] __nla_validate_parse: 3 callbacks suppressed [ 396.062559][T17323] netlink: 108 bytes leftover after parsing attributes in process `syz.0.3115'. [ 396.201732][T13121] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 396.498573][T13121] bridge_slave_1: left allmulticast mode [ 396.528538][T13121] bridge_slave_1: left promiscuous mode [ 396.543254][T13121] bridge0: port 2(bridge_slave_1) entered disabled state [ 396.568340][T13121] bridge_slave_0: left allmulticast mode [ 396.583919][T13121] bridge_slave_0: left promiscuous mode [ 396.595686][T13121] bridge0: port 1(bridge_slave_0) entered disabled state [ 396.778703][T13121] ip6gretap0 (unregistering): left allmulticast mode [ 396.791442][T13121] ip6gretap0 (unregistering): left promiscuous mode [ 396.832817][T17359] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3122'. [ 396.866452][T17359] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3122'. [ 397.040878][T13121] tipc: Disabling bearer [ 397.181978][T13121] bond2 (unregistering): (slave bridge1): Releasing active interface [ 397.344651][ T5143] Bluetooth: hci0: command tx timeout [ 397.399534][T13121] bond8 (unregistering): (slave bridge6): Releasing active interface [ 397.443355][T17362] IPv6: Can't replace route, no match found [ 397.530107][T13121] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 397.536817][ T29] audit: type=1800 audit(1771118856.092:7): pid=17366 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3126" name="x000000000000000800000000000000000000010" dev="tmpfs" ino=3220 res=0 errno=0 [ 397.565736][ T29] audit: type=1804 audit(1771118856.122:8): pid=17366 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.3126" name="x000000000000000800000000000000000000010" dev="tmpfs" ino=3220 res=1 errno=0 [ 397.565869][T13121] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 397.600032][T13121] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 397.616935][T13121] bond0 (unregistering): Released all slaves [ 397.630329][T13121] bond1 (unregistering): Released all slaves [ 397.649114][T13121] bond2 (unregistering): Released all slaves [ 397.678914][T13121] bond3 (unregistering): Released all slaves [ 397.695580][T13121] bond4 (unregistering): Released all slaves [ 397.708563][T13121] bond5 (unregistering): Released all slaves [ 397.727095][T13121] bond6 (unregistering): (slave bond7): Releasing backup interface [ 397.736759][T13121] bond6 (unregistering): Released all slaves [ 397.750882][T13121] bond7 (unregistering): Released all slaves [ 397.762914][T13121] bond8 (unregistering): Released all slaves [ 397.778354][T13121] bond9 (unregistering): (slave batadv2): Releasing backup interface [ 397.791685][T13121] bond9 (unregistering): Released all slaves [ 397.817017][T17291] chnl_net:caif_netlink_parms(): no params data found [ 398.009904][T13121] tipc: Left network mode [ 398.032395][T17381] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 398.157427][T17383] netlink: 'syz.1.3129': attribute type 5 has an invalid length. [ 398.316617][T17291] bridge0: port 1(bridge_slave_0) entered blocking state [ 398.344219][T17291] bridge0: port 1(bridge_slave_0) entered disabled state [ 398.360490][T17291] bridge_slave_0: entered allmulticast mode [ 398.375915][T17291] bridge_slave_0: entered promiscuous mode [ 398.395423][T17291] bridge0: port 2(bridge_slave_1) entered blocking state [ 398.412824][T17291] bridge0: port 2(bridge_slave_1) entered disabled state [ 398.443293][T17291] bridge_slave_1: entered allmulticast mode [ 398.462173][T17291] bridge_slave_1: entered promiscuous mode [ 398.660965][T17291] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 398.700806][T17408] gtp0: entered promiscuous mode [ 398.798828][T17291] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 398.996957][T17425] netlink: 'syz.3.3137': attribute type 10 has an invalid length. [ 399.004920][T17425] netlink: 228 bytes leftover after parsing attributes in process `syz.3.3137'. [ 399.063233][T17420] syzkaller1: entered promiscuous mode [ 399.069103][T17420] syzkaller1: entered allmulticast mode [ 399.117978][T17291] team0: Port device team_slave_0 added [ 399.241637][T17291] team0: Port device team_slave_1 added [ 399.286811][T17451] netlink: 144 bytes leftover after parsing attributes in process `syz.3.3143'. [ 399.342848][T17291] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 399.354172][T17291] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 399.386076][T17291] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 399.418506][ T5143] Bluetooth: hci0: command tx timeout [ 399.429619][T17444] syzkaller0: entered promiscuous mode [ 399.436131][T17444] syzkaller0: entered allmulticast mode [ 399.464803][T13121] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 399.478831][T13121] dummy0: left allmulticast mode [ 399.486458][T13121] dummy0: left promiscuous mode [ 399.619419][T13121] pimreg3 (unregistering): left allmulticast mode [ 400.098860][T17291] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 400.105863][T17291] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 400.134369][T17291] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 400.422798][T17495] xt_l2tp: invalid flags combination: 8 [ 400.431049][T17291] hsr_slave_0: entered promiscuous mode [ 400.438913][T17291] hsr_slave_1: entered promiscuous mode [ 400.476996][T17291] debugfs: 'hsr0' already exists in 'hsr' [ 400.500448][T17291] Cannot create hsr debugfs directory [ 400.806937][T17511] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3156'. [ 400.838585][T17511] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3156'. [ 401.050713][T13121] IPVS: stop unused estimator thread 0... [ 401.093700][T17527] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3158'. [ 401.257821][T17536] tipc: Enabled bearer , priority 0 [ 401.305321][T17536] syzkaller0: entered promiscuous mode [ 401.310824][T17536] syzkaller0: entered allmulticast mode [ 401.473849][T17536] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3160'. [ 401.494215][ T5143] Bluetooth: hci0: command tx timeout [ 401.502121][T17553] tipc: Resetting bearer [ 401.591675][T17534] tipc: Resetting bearer [ 401.623997][T17534] tipc: Disabling bearer [ 402.039483][T17291] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 402.067685][T17291] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 402.099438][T17291] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 402.130896][T17291] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 402.352529][T17590] netlink: 'syz.1.3169': attribute type 1 has an invalid length. [ 402.670337][T17291] 8021q: adding VLAN 0 to HW filter on device bond0 [ 402.727458][T17607] tipc: Enabled bearer , priority 0 [ 402.753670][T17600] syzkaller0: entered promiscuous mode [ 402.760069][T17600] syzkaller0: entered allmulticast mode [ 402.822754][T17291] 8021q: adding VLAN 0 to HW filter on device team0 [ 402.852134][T17600] tipc: Resetting bearer [ 402.925802][T17600] tipc: Disabling bearer [ 402.983762][T13120] bridge0: port 1(bridge_slave_0) entered blocking state [ 402.990909][T13120] bridge0: port 1(bridge_slave_0) entered forwarding state [ 403.020788][T13120] bridge0: port 2(bridge_slave_1) entered blocking state [ 403.027978][T13120] bridge0: port 2(bridge_slave_1) entered forwarding state [ 403.303661][T17639] netlink: 'syz.1.3180': attribute type 10 has an invalid length. [ 403.410113][T17639] veth0_vlan: left promiscuous mode [ 403.438908][T17639] veth0_vlan: entered promiscuous mode [ 403.457937][T17668] x_tables: duplicate underflow at hook 2 [ 403.488322][T17639] team0: Device veth0_vlan failed to register rx_handler [ 403.558647][T17670] tipc: Enabled bearer , priority 0 [ 403.574562][ T5143] Bluetooth: hci0: command tx timeout [ 403.663940][T17291] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 403.724302][T17668] IPVS: Scheduler module ip_vs_sip not found [ 403.741084][T17668] netlink: 'syz.2.3183': attribute type 39 has an invalid length. [ 403.765569][T17670] tipc: Disabling bearer [ 403.792450][T17681] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3184'. [ 403.978255][T17688] syzkaller1: entered promiscuous mode [ 404.004095][T17688] syzkaller1: entered allmulticast mode [ 404.338734][T17706] x_tables: duplicate underflow at hook 1 [ 404.529603][T17717] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3189'. [ 404.808096][T17640] bond5 (unregistering): (slave gretap1): Releasing backup interface [ 404.989513][T17640] bond1 (unregistering): (slave bridge1): Releasing active interface [ 405.080427][T17640] bond1 (unregistering): (slave bridge2): Releasing active interface [ 405.195030][T17640] bond4 (unregistering): (slave bridge4): Releasing active interface [ 405.265076][T17640] bond4 (unregistering): (slave bridge5): Releasing active interface [ 405.515847][T17640] .` (unregistering): Released all slaves [ 405.527433][T17640] bond1 (unregistering): Released all slaves [ 405.548398][T17640] bond2 (unregistering): Released all slaves [ 405.567969][T17640] bond3 (unregistering): Released all slaves [ 405.582375][T17640] bond4 (unregistering): Released all slaves [ 405.606228][T17640] bond5 (unregistering): (slave bond6): Releasing backup interface [ 405.617086][T17640] bond6 (unregistering): left promiscuous mode [ 405.623988][T17640] bond5 (unregistering): Released all slaves [ 405.638498][T17640] bond6 (unregistering): Released all slaves [ 405.805486][T17738] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3191'. [ 405.808456][T17739] syzkaller0: entered promiscuous mode [ 405.835859][T17738] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 405.853283][T17739] syzkaller0: entered allmulticast mode [ 405.896673][T17746] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3192'. [ 405.924491][T17640] tipc: Disabling bearer [ 405.934804][T17640] tipc: Left network mode [ 407.328603][T17765] bridge_slave_0: entered promiscuous mode [ 407.343477][T17763] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3198'. [ 407.517977][T17291] veth0_vlan: entered promiscuous mode [ 407.531199][T17779] netlink: 'syz.2.3202': attribute type 4 has an invalid length. [ 407.586953][T17779] netlink: 'syz.2.3202': attribute type 4 has an invalid length. [ 407.602178][T17291] veth1_vlan: entered promiscuous mode [ 407.781887][T17291] veth0_macvtap: entered promiscuous mode [ 407.795020][T17793] netlink: 'syz.2.3205': attribute type 10 has an invalid length. [ 407.802494][T17291] veth1_macvtap: entered promiscuous mode [ 407.810077][T17796] netlink: 'syz.3.3207': attribute type 2 has an invalid length. [ 407.879962][T17800] netlink: 'syz.3.3207': attribute type 2 has an invalid length. [ 407.901989][T17796] : entered promiscuous mode [ 408.058962][T17291] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 408.099779][T17793] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3205'. [ 408.113028][T17291] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 408.141015][ T3537] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 408.153892][ T3537] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 408.168444][ T3537] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 408.179447][ T3537] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 408.267593][T17640] hsr_slave_0: left promiscuous mode [ 408.273527][T17640] hsr_slave_1: left promiscuous mode [ 408.550842][T17660] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 408.559373][T17660] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 408.619572][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 408.629090][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 408.823111][T17640] IPVS: stop unused estimator thread 0... [ 409.174093][ C0] ------------[ cut here ]------------ [ 409.179937][ C0] ODEBUG: free active (active state 0) object: ffff8880578bc090 object type: timer_list hint: rose_t0timer_expiry+0x0/0x560 [ 409.192810][ C0] WARNING: lib/debugobjects.c:615 at debug_check_no_obj_freed+0x405/0x550, CPU#0: swapper/0/0 [ 409.203095][ C0] Modules linked in: [ 409.207250][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 409.216259][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 409.226341][ C0] RIP: 0010:debug_check_no_obj_freed+0x44a/0x550 [ 409.232682][ C0] Code: 89 44 24 20 e8 b7 6b 7e fd 48 8b 44 24 20 4c 8b 4d 00 4c 89 ef 48 c7 c6 40 6b 27 8c 48 c7 c2 c0 70 27 8c 8b 0c 24 4d 89 f8 50 <67> 48 0f b9 3a 48 83 c4 08 4c 8b 6c 24 18 48 b9 00 00 00 00 00 fc [ 409.252311][ C0] RSP: 0018:ffffc90000007b68 EFLAGS: 00010246 [ 409.258411][ C0] RAX: ffffffff8a888d00 RBX: ffffffff9a42da30 RCX: 0000000000000000 [ 409.266398][ C0] RDX: ffffffff8c2770c0 RSI: ffffffff8c276b40 RDI: ffffffff901b4570 [ 409.274387][ C0] RBP: ffffffff8bcf4a00 R08: ffff8880578bc090 R09: ffffffff8bcf5d20 [ 409.282342][ C0] R10: dffffc0000000000 R11: ffffffff81b099e0 R12: ffff8880578bc200 [ 409.290325][ C0] R13: ffffffff901b4570 R14: ffff8880578bc000 R15: ffff8880578bc090 [ 409.298310][ C0] FS: 0000000000000000(0000) GS:ffff8881254b0000(0000) knlGS:0000000000000000 [ 409.307254][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 409.313852][ C0] CR2: 00007f5da17e7198 CR3: 000000000e54a000 CR4: 00000000003526f0 [ 409.321807][ C0] Call Trace: [ 409.325096][ C0] [ 409.327939][ C0] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 409.333563][ C0] kfree+0x13a/0x610 [ 409.337492][ C0] ? rose_timer_expiry+0x4cb/0x600 [ 409.342615][ C0] rose_timer_expiry+0x4cb/0x600 [ 409.347565][ C0] ? call_timer_fn+0x178/0x5a0 [ 409.352334][ C0] call_timer_fn+0x192/0x5a0 [ 409.356931][ C0] ? __pfx_rose_timer_expiry+0x10/0x10 [ 409.362400][ C0] ? call_timer_fn+0xd4/0x5a0 [ 409.367082][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 409.372204][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 409.377414][ C0] ? __pfx_rose_timer_expiry+0x10/0x10 [ 409.382881][ C0] __run_timer_base+0x652/0x8b0 [ 409.387738][ C0] ? ktime_get+0x45/0x200 [ 409.392078][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 409.397457][ C0] ? sched_clock_cpu+0x74/0x440 [ 409.402317][ C0] run_timer_softirq+0xb7/0x170 [ 409.407176][ C0] handle_softirqs+0x22a/0x7c0 [ 409.411945][ C0] ? __irq_exit_rcu+0x5f/0x150 [ 409.416725][ C0] __irq_exit_rcu+0x5f/0x150 [ 409.421321][ C0] irq_exit_rcu+0x9/0x30 [ 409.425597][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 409.431234][ C0] [ 409.434177][ C0] [ 409.437115][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 409.443073][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 409.448714][ C0] Code: 44 7b 02 c3 cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 43 38 2b 00 fb f4 7c e8 02 00 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 409.468342][ C0] RSP: 0018:ffffffff8e407dc0 EFLAGS: 00000246 [ 409.474419][ C0] RAX: 00000000001c461b RBX: ffffffff8199661d RCX: 0000000080000001 [ 409.482389][ C0] RDX: 0000000000000001 RSI: ffffffff8dee2508 RDI: ffffffff8c276500 [ 409.490373][ C0] RBP: ffffffff8e407eb0 R08: ffff8880b863375b R09: 1ffff110170c66eb [ 409.498364][ C0] R10: dffffc0000000000 R11: ffffed10170c66ec R12: ffffffff90109070 [ 409.506352][ C0] R13: 1ffffffff1c929d8 R14: 0000000000000000 R15: 0000000000000000 [ 409.514340][ C0] ? do_idle+0x1bd/0x500 [ 409.518575][ C0] default_idle+0x9/0x20 [ 409.522803][ C0] default_idle_call+0x72/0xb0 [ 409.527574][ C0] do_idle+0x1bd/0x500 [ 409.531647][ C0] ? __pfx_do_idle+0x10/0x10 [ 409.536249][ C0] ? do_idle+0x4d6/0x500 [ 409.540501][ C0] cpu_startup_entry+0x43/0x60 [ 409.545278][ C0] rest_init+0x2de/0x300 [ 409.549529][ C0] start_kernel+0x380/0x3d0 [ 409.554052][ C0] x86_64_start_reservations+0x24/0x30 [ 409.559521][ C0] x86_64_start_kernel+0x143/0x1c0 [ 409.564646][ C0] common_startup_64+0x13e/0x147 [ 409.569606][ C0] [ 409.572615][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 409.579888][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 409.588820][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 409.598867][ C0] Call Trace: [ 409.602135][ C0] [ 409.604965][ C0] vpanic+0x1e0/0x670 [ 409.608943][ C0] panic+0xc5/0xd0 [ 409.612657][ C0] ? __pfx_panic+0x10/0x10 [ 409.617058][ C0] ? common_startup_64+0x13e/0x147 [ 409.622159][ C0] __warn+0x315/0x4a0 [ 409.626164][ C0] ? debug_check_no_obj_freed+0x405/0x550 [ 409.631906][ C0] ? debug_check_no_obj_freed+0x405/0x550 [ 409.637610][ C0] __report_bug+0x29a/0x540 [ 409.642183][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 409.647978][ C0] ? debug_check_no_obj_freed+0x405/0x550 [ 409.653679][ C0] ? __pfx___report_bug+0x10/0x10 [ 409.658701][ C0] ? kfree+0x1c1/0x610 [ 409.662756][ C0] ? rose_timer_expiry+0x4c3/0x600 [ 409.667851][ C0] ? call_timer_fn+0x192/0x5a0 [ 409.672603][ C0] ? __run_timer_base+0x652/0x8b0 [ 409.677606][ C0] ? run_timer_softirq+0xb7/0x170 [ 409.682613][ C0] ? handle_softirqs+0x22a/0x7c0 [ 409.687535][ C0] ? __irq_exit_rcu+0x5f/0x150 [ 409.692286][ C0] ? sysvec_apic_timer_interrupt+0xa6/0xc0 [ 409.698075][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 409.704215][ C0] ? pv_native_safe_halt+0xf/0x20 [ 409.709237][ C0] ? default_idle+0x9/0x20 [ 409.713639][ C0] ? default_idle_call+0x72/0xb0 [ 409.718572][ C0] report_bug_entry+0x19a/0x290 [ 409.723409][ C0] ? debug_check_no_obj_freed+0x44a/0x550 [ 409.729110][ C0] ? debug_check_no_obj_freed+0x44f/0x550 [ 409.734829][ C0] handle_bug+0xca/0x200 [ 409.739104][ C0] exc_invalid_op+0x1a/0x50 [ 409.743595][ C0] asm_exc_invalid_op+0x1a/0x20 [ 409.748428][ C0] RIP: 0010:debug_check_no_obj_freed+0x44a/0x550 [ 409.754792][ C0] Code: 89 44 24 20 e8 b7 6b 7e fd 48 8b 44 24 20 4c 8b 4d 00 4c 89 ef 48 c7 c6 40 6b 27 8c 48 c7 c2 c0 70 27 8c 8b 0c 24 4d 89 f8 50 <67> 48 0f b9 3a 48 83 c4 08 4c 8b 6c 24 18 48 b9 00 00 00 00 00 fc [ 409.774559][ C0] RSP: 0018:ffffc90000007b68 EFLAGS: 00010246 [ 409.780633][ C0] RAX: ffffffff8a888d00 RBX: ffffffff9a42da30 RCX: 0000000000000000 [ 409.788592][ C0] RDX: ffffffff8c2770c0 RSI: ffffffff8c276b40 RDI: ffffffff901b4570 [ 409.796546][ C0] RBP: ffffffff8bcf4a00 R08: ffff8880578bc090 R09: ffffffff8bcf5d20 [ 409.804523][ C0] R10: dffffc0000000000 R11: ffffffff81b099e0 R12: ffff8880578bc200 [ 409.812489][ C0] R13: ffffffff901b4570 R14: ffff8880578bc000 R15: ffff8880578bc090 [ 409.820461][ C0] ? __pfx_timer_debug_hint+0x10/0x10 [ 409.825832][ C0] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 409.831451][ C0] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 409.837073][ C0] kfree+0x13a/0x610 [ 409.840946][ C0] ? rose_timer_expiry+0x4cb/0x600 [ 409.846040][ C0] rose_timer_expiry+0x4cb/0x600 [ 409.850959][ C0] ? call_timer_fn+0x178/0x5a0 [ 409.855703][ C0] call_timer_fn+0x192/0x5a0 [ 409.860270][ C0] ? __pfx_rose_timer_expiry+0x10/0x10 [ 409.865711][ C0] ? call_timer_fn+0xd4/0x5a0 [ 409.870370][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 409.875467][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 409.880644][ C0] ? __pfx_rose_timer_expiry+0x10/0x10 [ 409.886086][ C0] __run_timer_base+0x652/0x8b0 [ 409.890915][ C0] ? ktime_get+0x45/0x200 [ 409.895233][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 409.900588][ C0] ? sched_clock_cpu+0x74/0x440 [ 409.905423][ C0] run_timer_softirq+0xb7/0x170 [ 409.910256][ C0] handle_softirqs+0x22a/0x7c0 [ 409.915004][ C0] ? __irq_exit_rcu+0x5f/0x150 [ 409.919772][ C0] __irq_exit_rcu+0x5f/0x150 [ 409.924351][ C0] irq_exit_rcu+0x9/0x30 [ 409.928597][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 409.934218][ C0] [ 409.937129][ C0] [ 409.940072][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 409.946027][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 409.951640][ C0] Code: 44 7b 02 c3 cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 43 38 2b 00 fb f4 7c e8 02 00 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 409.971222][ C0] RSP: 0018:ffffffff8e407dc0 EFLAGS: 00000246 [ 409.977274][ C0] RAX: 00000000001c461b RBX: ffffffff8199661d RCX: 0000000080000001 [ 409.985228][ C0] RDX: 0000000000000001 RSI: ffffffff8dee2508 RDI: ffffffff8c276500 [ 409.993193][ C0] RBP: ffffffff8e407eb0 R08: ffff8880b863375b R09: 1ffff110170c66eb [ 410.001157][ C0] R10: dffffc0000000000 R11: ffffed10170c66ec R12: ffffffff90109070 [ 410.009118][ C0] R13: 1ffffffff1c929d8 R14: 0000000000000000 R15: 0000000000000000 [ 410.017175][ C0] ? do_idle+0x1bd/0x500 [ 410.021439][ C0] default_idle+0x9/0x20 [ 410.025680][ C0] default_idle_call+0x72/0xb0 [ 410.030441][ C0] do_idle+0x1bd/0x500 [ 410.034523][ C0] ? __pfx_do_idle+0x10/0x10 [ 410.039125][ C0] ? do_idle+0x4d6/0x500 [ 410.043354][ C0] cpu_startup_entry+0x43/0x60 [ 410.048105][ C0] rest_init+0x2de/0x300 [ 410.052337][ C0] start_kernel+0x380/0x3d0 [ 410.056824][ C0] x86_64_start_reservations+0x24/0x30 [ 410.062269][ C0] x86_64_start_kernel+0x143/0x1c0 [ 410.067364][ C0] common_startup_64+0x13e/0x147 [ 410.072296][ C0] [ 410.075656][ C0] Kernel Offset: disabled [ 410.079963][ C0] Rebooting in 86400 seconds..