last executing test programs: 2m34.318681729s ago: executing program 0 (id=18839): socket(0x2b, 0x1, 0x1) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={0x14, 0x25, 0x109, 0x70bd2c, 0xfffffff9, {0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x1000c957}, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4e22, 0xcc15, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x9}, 0x1c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(0x0) splice(r1, 0x0, 0xffffffffffffffff, 0x0, 0xf3a, 0x0) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz0\x00', 0x1ff) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r4, &(0x7f0000000140)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) writev(r4, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x11) shutdown(r4, 0x1) write$cgroup_int(r3, &(0x7f0000000200)=0x10001, 0x12) sendfile(r3, r2, 0x0, 0xf03a0005) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a44, 0x1700) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000740)=ANY=[@ANYBLOB="40000000090601020000000000000000000000000900020073797a310000000005000100070000001800078008000140ff"], 0x40}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) write$cgroup_type(r6, &(0x7f00000000c0), 0x9) sendfile(r6, r5, 0x0, 0x10000) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) 2m29.707255295s ago: executing program 0 (id=18863): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4400000010000108fdffffff0001000800000000", @ANYRES32=0x0, @ANYBLOB="000000002104020008001b00000000001c001a800800028004000180100002800c"], 0x44}, 0x1, 0x0, 0x0, 0x4040040}, 0x8024) 2m28.836778178s ago: executing program 0 (id=18871): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x6, 0x4, 0x40, 0x5}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0), &(0x7f0000000380), 0xfff, r0, 0x0, 0xa0028000}, 0x38) 2m28.684038255s ago: executing program 0 (id=18872): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x18000000000002a0, 0xf, 0x0, &(0x7f00000020c0)="b9ff03316844268cb89e14f0080047", 0x0, 0x24, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 2m28.571626882s ago: executing program 0 (id=18875): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b80)={{0x14}, [@NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x101, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}], {0x14, 0x10}}, 0x54}}, 0x0) 2m28.427456504s ago: executing program 0 (id=18880): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x11, &(0x7f0000000000)={&(0x7f0000000080)={0x14, 0x26, 0x1, 0x7fffd, 0x1000, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008090) 2m13.345436148s ago: executing program 32 (id=18880): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x11, &(0x7f0000000000)={&(0x7f0000000080)={0x14, 0x26, 0x1, 0x7fffd, 0x1000, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008090) 5.288776278s ago: executing program 4 (id=20182): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c0000002000010027bd7000fbdbdf250a000040000000070600000008000d000500000018000e"], 0x2c}, 0x1, 0x0, 0x0, 0x24048860}, 0x44) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xaf1}, 0x8) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) bpf$ENABLE_STATS(0x20, &(0x7f0000000100), 0x4) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000780)={0x114, 0x36, 0x1, 0x0, 0x0, "", [@nested={0x101, 0x0, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64=0x7}, @typed={0x14, 0x3, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe8101000000010000008b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd"]}]}, 0x114}], 0x1, 0x0, 0x0, 0x4000080}, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="380000005400e50100000000fdffffff07000000", @ANYRES32=r8, @ANYBLOB="20000100", @ANYRES32=r11, @ANYBLOB="010101007f02"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000104000000000007000000000000", @ANYRES32=r5, @ANYBLOB="3f00000006020400280012800b0001006272696467650000180002800c002e000300000003000000050007"], 0x48}, 0x1, 0x0, 0x0, 0x44000}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffff000) bpf$MAP_CREATE(0x0, 0x0, 0x48) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20040014) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000000)=0xf) sendmsg$GTP_CMD_ECHOREQ(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008080}, 0x80) 5.150921137s ago: executing program 2 (id=20184): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000200)={0x2, 0x4, 0x40, 0x0, 0xe, 0x0, 0x70bd27, 0x25dfdbfd, [@sadb_address={0x5, 0x6, 0x2b, 0x0, 0x0, @in6={0xa, 0x4e23, 0x1000, @dev={0xfe, 0x80, '\x00', 0x39}}}, @sadb_sa={0x2, 0x1, 0x0, 0xf, 0x0, 0x7, 0x1, 0x1}, @sadb_address={0x5, 0x5, 0x0, 0x20, 0x0, @in6={0xa, 0x4e21, 0x10000000, @mcast2, 0xfff}}]}, 0x70}, 0x1, 0x7}, 0x0) sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f00000000c0)={0xa, 0x4e24, 0xa6, @mcast1, 0x11}, 0x1c, &(0x7f0000000a40)=[{&(0x7f0000000540)="0d1bc244b0c0d973495b27d945b6565be9c8906e9763ab9c4c278b3d358f001302f274e583b9301bc9b3842d8ce14047f861919f26812ab61d9c07685dec7823b2c726064d0d16df72000b8c2629208796bdd54ccb3913591e1a8b438f96831f8e5842babee61dc4439104afae32482a3ae2f55c4846a4e6ccbecffdf30d8011ddeae53de71b0b665a23b19e6dd050a3b7eecbf8ebdb1b8491462d633fc10f2c3058ecbddd4b506997", 0xa9}, {&(0x7f0000000600)="cb2ea40255f7ab3324939d4bb363020b1ff49d14c34a66b81aae978d9e6c4fada16e73e4ce72c857590c900f8eaa41720ce776dfe3c0484fbf78d0e4afe2f4df2f2666cbcc3cd571c746dce669468ce9033ae1ddb85368aade14563a32499301b29da93eca0f19b5de64b266dc6a85f2eb74c9fdf003d66e776717ecadb12958bbf1cdd29ac01abdbf670b8b6ec59cea477385fd3d47fd21b652b305730bfac00e9f2af7898407e9871aa7877e5c0634200070", 0xb3}, {&(0x7f00000007c0)="8b04dee41c6dbf7ea47400b51d9ea14f92991b9cfc40c60232c737a113a015bf72df17fa854ac1301e7edfa1be94a729e489b81e2950e19319e0cae02e2542428a18c57a80f3eb104f5f67710a8b84bf972cac95dba912fe71e3e0aec6f6773343843e8d69301335674de2e0e0cb0a81e78b997706d1387db96008a973427c475ae44a13a38867d7a9e66358aeec5c0ee840d988aed729a60e625875292f92d5c1743ea99f6cf4b13a1ae9dc82c4affef800878c24690121038b28b4f7ac820c0e59b3e48777c7bc8beab07d0fc62c3f99412c53cacebfd2455427366689c3df6b5d3cd7240f", 0xe6}, {&(0x7f0000000280)="17334dce6a0bb59784600a4bfe95ae91e8348b4838134bc9b8a9608ef1e3a6364beb775c593a27542267898168944abcda0400c91f91163416534cb8c5f44a2fbfa977e80b02a65e986142b1a3e6c9997b6a57c5715bce303296cffd", 0x5c}, {&(0x7f0000000940)="1f400aea67c5e3188e5551d8d39f0d7653dff5eb9098e3c67a5513c95a1f3b17ae1f1528d900d96c908ccbe27335efe3335a5b62f2bdb5efbfcea6a4dd60f5e91b2630584c2a30483f45c0669835cf953be8a77284de4448cbc58c29f1456c8b5ada90fc777f273d08e507dcf553d0f7bc590f86f0460e15b613ae1f1ac2d551cea4f99b99c51e4b64676644f31622082f97d2275df287758e58bafd3879b0b3b2757a8d0233c6995133a319be8e552a41", 0xb1}], 0x5}}, {{0x0, 0x0, 0x0}}], 0x2, 0x81) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_freezer_state(r2, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r3, &(0x7f0000000040)='FROZEN\x00', 0x7) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000012c0)=@newsa={0x37c, 0x1a, 0x713, 0x20, 0x25dfdbfd, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x4e21, 0x2, 0x0, 0xa0, 0x0, 0x6c, 0x0, 0xee00}, {@in6=@private1, 0xfe, 0x32}, @in=@broadcast, {0x0, 0x0, 0x0, 0x8, 0xffffffff00000001, 0x0, 0x80000000, 0xe}, {0x4, 0x7fffffffffffffff, 0x0, 0x1}, {}, 0x70bd2c, 0x3500, 0xa, 0x1, 0x0, 0x50}, [@mark={0xc, 0x15, {0x35075a, 0x7}}, @replay_thresh={0x8, 0xb, 0x2}, @lastused={0xc}, @replay_thresh={0x8, 0xb, 0x821}, @sa={0xe4, 0x6, {{@in=@multicast1, @in=@empty, 0x4e21, 0x3, 0x4e21, 0x0, 0xa, 0xa0, 0x0, 0x2b}, {@in6=@rand_addr=' \x01\x00', 0x4d6, 0x2b}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, {0x8000, 0x0, 0x8, 0x3ff, 0xfffffffffffffff8, 0x80, 0xffff, 0x2a}, {0x1, 0x4, 0x1, 0x40}, {0x1, 0x6, 0x9}, 0x70bd28, 0x0, 0x2, 0x3, 0x2, 0x83}}, @migrate={0x180, 0x11, [{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@empty, @in=@broadcast, @in6=@empty, 0x3c, 0x4, 0x0, 0x3500, 0x2, 0x2}, {@in=@multicast2, @in6=@private0, @in6=@mcast1, @in=@broadcast, 0x32, 0xc1396666e93af5c4, 0x0, 0x3506, 0xa, 0x2}, {@in=@empty, @in6=@private0, @in6=@dev={0xfe, 0x80, '\x00', 0x33}, @in6=@mcast2, 0x3c, 0x5, 0x0, 0x3507, 0xa, 0xa}, {@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in6=@dev={0xfe, 0x80, '\x00', 0x3d}, @in6=@dev={0xfe, 0x80, '\x00', 0x33}, @in=@local, 0x33, 0x0, 0x0, 0x3507, 0x0, 0xa}, {@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@loopback, @in6=@loopback, @in6=@mcast2, 0xff, 0x3, 0x0, 0x3503, 0x2, 0xa}]}]}, 0x37c}, 0x1, 0x0, 0x0, 0x20044890}, 0x2000) sendfile(r3, r3, 0x0, 0x9) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x88f}, [@call={0x85, 0x0, 0x0, 0x61}]}, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r6, 0x0, 0xcc0, 0x0, &(0x7f0000000200)="c8bb4e7dbd0d9773008865000800b0ad75acb9df", 0x0, 0x3, 0x0, 0x0, 0x37, 0x0, 0x0}, 0x50) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x74}}, 0x0) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000480)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x50) getpeername$packet(0xffffffffffffffff, &(0x7f00000006c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000700)=0x14) openat$cgroup_ro(r2, &(0x7f00000008c0)='memory.events.local\x00', 0x0, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=@bloom_filter={0x1e, 0x9, 0x4, 0x7, 0x4000a, r7, 0x10005, '\x00', r8, 0xffffffffffffffff, 0x4, 0x0, 0x1, 0x7}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040), &(0x7f0000000140), 0xca, r9}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000340)={r9, &(0x7f00000001c0), &(0x7f0000000300)=""/16}, 0x20) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000b40)=@filter={'filter\x00', 0x8000000, 0x4, 0x370, 0xffffffff, 0x0, 0x260, 0x260, 0xfeffffff, 0xffffffff, 0x380, 0x260, 0x380, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x29}, @private2, [0xffffffff, 0xff000000, 0xff, 0xffffff00], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], 'macvlan0\x00', 'sit0\x00', {}, {}, 0x87, 0x3, 0x4, 0x5}, 0x2f2, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x3, 0x5, {0x7}}}}, {{@ipv6={@private2, @empty, [], [0x0, 0x0, 0xff000000], 'sit0\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x5, {0x2000010}}}}, {{@ipv6={@private2, @private2={0xfc, 0x2, '\x00', 0x1}, [0x0, 0xffffff00, 0xff], [0x0, 0xffffff00, 0xf97f1f27bc0fd003, 0xff000000], 'bridge_slave_0\x00', 'ip6tnl0\x00', {}, {0xff}, 0x11, 0x80, 0x2, 0x6a}, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0) shutdown(r0, 0x1) r10 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) listen(r10, 0x4) r11 = socket(0x15, 0x3, 0x8) r12 = socket$phonet_pipe(0x23, 0x5, 0x2) unshare(0x600) getsockopt$bt_hci(r12, 0x0, 0x3, 0x0, 0x0) getsockname$packet(r11, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14) 4.967411543s ago: executing program 2 (id=20187): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) close(0x3) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0x806000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0xffffff5a}, {&(0x7f0000000300)="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", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) recvmsg$unix(r4, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000300) ioctl$FS_IOC_RESVSP(r2, 0x40305829, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) ioctl$sock_inet_SIOCGIFBRDADDR(r1, 0x8919, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) getsockname$packet(r5, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, 0x0, 0x0) 4.917280028s ago: executing program 4 (id=20188): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000040)=@buf={0x12, &(0x7f0000000000)="64dd85bcb708bcc747db483a3651ff67873a"}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x62040400) listen(0xffffffffffffffff, 0x0) r1 = socket(0x2b, 0x80801, 0x1) connect$inet6(r1, 0x0, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001980)={&(0x7f0000009b80)=@newchain={0x24, 0x64, 0x300, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x7, 0xfff2}, {0xf}, {0xa, 0x1ffe4}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x80) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x600, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="440000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000008001b000000000004001a80180002"], 0x44}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 4.893207399s ago: executing program 1 (id=20189): syz_open_procfs$namespace(0x0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r3 = accept(r1, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x40000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=@newlink={0x3c, 0x10, 0x503, 0xfffffffc, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1006}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0x800}, 0x10) recvfrom(r2, &(0x7f0000000080)=""/60, 0xfffffffffffffeeb, 0x101, 0x0, 0x0) 4.393574072s ago: executing program 5 (id=20192): r0 = socket$nl_generic(0x10, 0x3, 0x10) unshare(0x22020400) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) socket(0x10, 0x3, 0x0) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x20000000) close(0x3) socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r3, &(0x7f0000000100)='Y', 0x1, 0x20004001, &(0x7f0000000180)={0xa, 0x4e23, 0xf, @remote, 0x8}, 0x1c) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000580)={@in={{0x2, 0x4e23, @remote}}, 0x0, 0x0, 0x2f, 0x0, "ede10c90e0d6d4b2b1651d4ddc62e17b5f4fa4a45bc87ce8b6cab0b0bf7f4a73a775b18b108887c58ce5057146437a52ff5d0f912a8eff0b48b4c25e7d5ae1e974f8cdaa3dccaccd26482b83f2a4afd0"}, 0xd8) setsockopt$inet_tcp_TCP_MD5SIG(r4, 0x6, 0x20, &(0x7f0000000080)={@in={{0x2, 0x0, @multicast2}}, 0x3, 0x0, 0x1a, 0x0, "5ec800000000000000fabcaff49c2eeb8c4614c85b196a0c67a7768e058e3008931c08d43101cb8242bc42b8e0662749302c1ffcd1d1190000000000000000000000000000000000000000000200"}, 0xd8) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10) r5 = socket$inet_sctp(0x2, 0x1, 0x84) r6 = socket(0x2, 0x80805, 0x0) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r7, 0x0) close(r3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r7, 0x84, 0x7a, &(0x7f0000000340)={r8, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r6, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="3000000000000000f9b6000001000000000000000c0000000000000000000000000000000000000000000000186c84d06f748d3e8ff02fb285fa139955eb1df7b0c2d10d84709d5adab8c3f6b257727121938a58a5092f726e05522ab409aa2ff7cb5c3c50dec274d78e2476e832abb46b61e8ae467bc66af4dd4c68b9da2e7b7ea85a422324fa68589f9485000d8faf1ef2027870b8b3386caf2daee1c39b5dbd00a384548b0bfe6d3439ca71caec6c8c76989c24d58182f07913fdd5e2075da2fa04ef06055ac2c64e3298b502d1f23d5c48d8caca118134d1836ae2e39cb69938144377", @ANYRES32=0x0], 0x30}], 0x1, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4b, &(0x7f0000000000)=0x2, 0x4) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000280)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r3, 0x84, 0x17, 0x0, 0x9) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) 4.327678358s ago: executing program 2 (id=20193): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x13, 0x4, 0x0, &(0x7f00000000c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x6a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x130}, 0x94) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{&(0x7f0000000240)=@generic={0x21, "1aee2c4f6843c6782466293e62d4f664c2efa8906f0d97822ac0d88ecdd9d47e182b3b523c6243022c1be9fd662325c023ac48a28ae996c41561bb7e9903c408613b4d29da0b9d5af499caa7759c17c667af8acea6dc52148f1233494efd8f08aaab6382d5e33471a107ec47df5b5312764e134c68842fd1a2078151812e"}, 0x80, &(0x7f00000009c0)=[{&(0x7f00000002c0)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f86bae5e5c64e50ef25afb0295d0c303850b4bff4d088bf9df67e013836e2882dad3f7698b52997f7efa9eb96f09be1c3019445927c6b2fe32d38ae2bcad2ac0d85ebd42914fb18b7d0670f8b3be16755ead6a6fb713fa618ce2cf424ea7cc84b04016b9a2afbfaf68803f1c1acb74fef", 0x87}, {&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253db68e17cdd561fab504479f723388dda974e2a9fb1bcda474c08d6222179b19e902009ea3cb3e42408bab6c1f29cb62d05805063967de38327e", 0x9e}, {&(0x7f0000000480)}, {&(0x7f0000000780)}, {&(0x7f0000000800)="5193f0b40db29d9ce06f429ed3c2c6405967f1e559f08c35f5e63ad64c2746967cca1bbeaf6206a79c42badb4fb453f294c2932cb5552a5f9c1d633207a53c2f54d98c2f9e4323eac6c20c56e7607d212b210a0325f7c289d1a2552d7a3f2176", 0x60}, {&(0x7f0000000900)="a9be9b2ff3a19d5a1226e5243d37d1fd2894c1ae880dc2316aa2d5ad08944c7135eb837eff354282dd5863c051eb7b9b17be0e4fdd6560f3f2c2c04af73a6cb75b5d05d6037f91e8f4f08e90d5313fb91fbdc5acd212f7d8c8", 0x59}], 0x6}}], 0x1, 0x20000044) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00'}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$WPAN_SECURITY_LEVEL(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000100)=0xfffffffe, 0x4) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 4.168780528s ago: executing program 3 (id=20194): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7ffe}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newtfilter={0x44, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r3, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x884}, 0x2) close(r1) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4005) r4 = socket$inet6(0xa, 0x2, 0x0) r5 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmmsg$inet(r4, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @dev={0xac, 0x14, 0x14, 0x41}, @empty}}}], 0x20}}], 0x1, 0x8000004) 4.053938709s ago: executing program 2 (id=20195): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) r0 = socket(0xa, 0x5, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x620, 0x2c8, 0x1d0, 0x468, 0x468, 0x1d0, 0x550, 0x550, 0x550, 0x550, 0x550, 0x6, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @private0, [], [0xffffff00, 0x0, 0x0, 0x1f9814788dbf7ab2], 'veth1\x00', 'syz_tun\x00'}, 0x11e, 0xa8, 0x1d0, 0x1f000000, {0x0, 0x7}}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x0, 'unconfined\x00'}}}, {{@ipv6={@loopback, @dev, [], [], 'batadv_slave_0\x00', 'macvlan1\x00', {}, {}, 0x2b}, 0x0, 0xd0, 0xf8, 0x7400, {}, [@inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00', 0x0, {0x68}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x1, @ipv6=@mcast2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x680) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bind$inet(r1, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, 0x0, 0x0) connect$inet(r1, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000240)=0xffffffffffffffff, 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r3, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x22, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, 0xf, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x60, 0x10, 0x403, 0x300, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x20, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0x1e, 0x1f}}, @IFLA_VLAN_ID={0x6, 0x1, 0xffc}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x60}}, 0x8000) sendto(r1, &(0x7f0000000740), 0x0, 0x4008044, 0x0, 0x0) sendto$inet(r1, &(0x7f00000002c0)="01a4acc7cf28ab9f6c7fc745c30bfc165466072a660bbf56352083db9d40454a67f8010000004bd29585885c89773ca3ba28a1e85ffe2a9220e0ecd440e345b745bf2146835ad015c801f95be5b890e44fb3dfbe8e88a1e5176e584c970207f23b0073ca5375abddf56331be396eaa2398ea66b93a74fd4147e826abed1b5d1de578682288c19ac23c1ccc1cdd936d2571c3510b0000000000000000000000000000000000f32bb3874c926a8944caa4677d2eae3bc831e748000000", 0xfffffffffffffe88, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f0000000000)={0x7, 0x6, 0x3, 0x200000000000, 0x1, 0xa2, 0x1}, &(0x7f0000000200)={0x1f, 0x0, 0x5, 0x2128, 0x1, 0x0, 0x7, 0x4}, 0x0, 0x0, 0x0) 3.99687185s ago: executing program 3 (id=20196): r0 = socket$inet_udp(0x2, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$alg(0x26, 0x5, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r1, 0xfffffffc) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000000700000024000180060005004e230000060001000200051b08000300ac1414aa"], 0x38}, 0x1, 0x0, 0x0, 0x14}, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001400)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x20008004) 3.887233986s ago: executing program 3 (id=20197): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0xffffffdf, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x30bd2c, 0x25dfdc00, {0x0, 0x0, 0x0, r6, {0xfff5, 0x10}, {}, {0x8, 0xc}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x10, 0x7}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x24040810}, 0x20000000) r7 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x181001, 0x0) close(r7) socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r8 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r8, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r8, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x0, r6, 0xe}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf", 0x22}, {&(0x7f0000000c00)="4307ed2e", 0x4}], 0x2}, 0x4) 3.652061286s ago: executing program 3 (id=20198): openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) unshare(0x40400) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x4008054) write$nci(r0, &(0x7f0000000240)=ANY=[@ANYBLOB='p\x00\t'], 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket(0x1e, 0x4, 0x0) write$nci(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="5001", @ANYRES8=r1, @ANYRES16=r4], 0x14) socket$unix(0x1, 0x2, 0x0) 3.641851135s ago: executing program 1 (id=20199): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x13, 0x4, 0x0, &(0x7f00000000c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x6a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x130}, 0x94) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{&(0x7f0000000240)=@generic={0x21, "1aee2c4f6843c6782466293e62d4f664c2efa8906f0d97822ac0d88ecdd9d47e182b3b523c6243022c1be9fd662325c023ac48a28ae996c41561bb7e9903c408613b4d29da0b9d5af499caa7759c17c667af8acea6dc52148f1233494efd8f08aaab6382d5e33471a107ec47df5b5312764e134c68842fd1a2078151812e"}, 0x80, &(0x7f00000009c0)=[{&(0x7f00000002c0)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f86bae5e5c64e50ef25afb0295d0c303850b4bff4d088bf9df67e013836e2882dad3f7698b52997f7efa9eb96f09be1c3019445927c6b2fe32d38ae2bcad2ac0d85ebd42914fb18b7d0670f8b3be16755ead6a6fb713fa618ce2cf424ea7cc84b04016b9a2afbfaf68803f1c1acb74fef", 0x87}, {&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253db68e17cdd561fab504479f723388dda974e2a9fb1bcda474c08d6222179b19e902009ea3cb3e42408bab6c1f29cb62d05805063967de38327e", 0x9e}, {&(0x7f0000000480)}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed9ffee1584df7f06c7bccac71daf78bf3c68b8d5e56357654784bdbc700bceb1049c6a47d53c5ac29f83aed3ae9968fe8", 0x60}, {&(0x7f0000000800)="5193f0b40db29d9ce06f429ed3c2c6405967f1e559f08c35f5e63ad64c2746967cca1bbeaf6206a79c42badb4fb453f294c2932cb5552a5f9c1d633207a53c2f54d98c2f9e4323eac6c20c56e7607d212b210a0325f7c289d1a2552d7a3f2176a47e95bc46471fae9167768d58f22ff10ba3cc2050b1ee838ce9e4ac5a1544fec3e291272cfaaa4817539972fb8bb2ede331312f556ecea24236759bf0d51003477ec489820505cea6045a9939974c6f2ee3815378dc0a620982383e84", 0xbd}, {&(0x7f0000000900)="a9be9b2ff3a19d5a1226e5243d37d1fd2894c1ae880dc2316aa2d5ad08944c7135eb837eff354282dd5863c051eb7b9b17be0e4fdd6560f3f2c2c04af73a6cb75b5d05d6037f91e8f4f08e90d5313fb91fbdc5acd212f7d8c8", 0x59}], 0x6}}], 0x1, 0x20000044) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00'}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 3.520923213s ago: executing program 1 (id=20200): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="9feb010018000000000000001800000018000000040000000200000000000003"], 0x0, 0x34}, 0x28) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000200)={0x0, 0x48, 0x4, 0x10001, 0x6, 0x8}, &(0x7f00000004c0)=0x14) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000500)={r2, @in6={{0xa, 0x4e22, 0x100, @mcast2, 0x5}}, 0x7f, 0xfff6, 0x609, 0x9, 0xa0, 0x8001, 0x7}, &(0x7f00000005c0)=0x9c) r3 = socket$packet(0x11, 0x3, 0x300) sendmsg$inet(r3, 0x0, 0x41) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r4, @ANYBLOB], &(0x7f00000000c0)='GPL\x00', 0x8, 0x1002, &(0x7f0000002500)=""/4098, 0x41100}, 0x94) recvmsg(r1, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x10001) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000080), &(0x7f00000000c0)=0x14) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r5, &(0x7f0000000040)="09000000010001", 0x7) 3.416501922s ago: executing program 1 (id=20201): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0xa, 0x922000000003, 0x11) socket$kcm(0x2b, 0x1, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x4, 0x8000002, 0x200, 0xfffffffffffffffd}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x6, 0x0, 0x0, 0x7fffffff, 0xfffffffffffffffe}, 0x0, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1d19cb307b3472ab9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x3, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x2c}}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x41000}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r0, &(0x7f0000000e40)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x302, 0x0) 3.327303807s ago: executing program 5 (id=20202): r0 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r0, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) close(0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(0xffffffffffffffff, 0x28, 0x2, 0x0, 0x0) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="3c00000010000104000000000000000000000400", @ANYRES32=0x0, @ANYBLOB="00000000183e00001400350065727370616e3000000000000000000008000a00", @ANYRES32=r7], 0x3c}, 0x1, 0x0, 0x0, 0x70}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001cc0)=ANY=[@ANYBLOB="3c0000001000030500000000fcffffff00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001400128009000100626f6e64000000000400028008000a00", @ANYRES32=r1], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) 3.316334747s ago: executing program 3 (id=20203): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x22, 0x5, 0x81) connect$vsock_stream(r0, 0x0, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[], 0x0, 0x26}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) sendmmsg(r0, 0x0, 0x0, 0x24008094) accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r4], 0x1c}}, 0x840) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$nci(r1, &(0x7f00000009c0)=ANY=[@ANYBLOB="710509400205000a04e1078b6b"], 0x14f) setsockopt$MRT_DEL_VIF(0xffffffffffffffff, 0x0, 0xcb, &(0x7f0000000380)={0xffffffffffffffff, 0x6f301fb76ddb0649, 0x5, 0x40, @vifc_lcl_addr=@local, @multicast1}, 0x10) 3.064838686s ago: executing program 4 (id=20204): socket$inet_icmp(0x2, 0x2, 0x1) r0 = socket(0x2a, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, [@call={0x85, 0x0, 0x0, 0xb4}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r2, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000006000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc3c0000000c0a01010000000f000000000a0000060900020073797a31000000000900010073797a3100000000100003800c000080080003400000000214000000110001"], 0xa0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a480000000e0a050000000000000000000a0800250900010073797a31000000001c0003800c00008008000340000000020c00008008000340000000030900020073797a3100000000140000001100010000000000000000000500000a"], 0x70}, 0x1, 0x0, 0x0, 0x8080}, 0x24008040) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x78, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x6}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x9, 0x2, 0xffffffff, 0x0, 0xfea}, 0x43e, 0x0, 0x8, 0x7, 0x200, 0x4, 0x2, 0x0, 0x8, 0x51, {0x8, 0x6, 0x3, 0x6, 0x4, 0xe}}}}]}, 0x78}}, 0x20008001) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000740)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x4000) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2.861894996s ago: executing program 5 (id=20205): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x2, @dev={0xfe, 0x80, '\x00', 0x13}, 0x7}, 0x1c) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000140)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0x0, 0x22, 0x0, &(0x7f0000000600)="3d25ff005b19c4cbe601709b080041fe7a8a047963817ba0af112187b35b1bf32219", 0x0, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x58, 0x2, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=@setlink={0x3c, 0x13, 0x1, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_ALT_IFNAME={0x14, 0x35, 'dummy0\x00'}]}, 0x3c}}, 0x0) sendmsg$IPSET_CMD_TEST(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="640000000906010800000000000000000600000505000100070000003c0007801800148014000240fc0000000000000000000000000000011800018014000240ff01000000000000000000000000000105000300070000000900020073797a31"], 0x64}}, 0x4800) 2.675568583s ago: executing program 4 (id=20206): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x40040, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd0a, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0x0, 0x4}, {0xffff, 0xffff}, {0xfff2, 0xfff1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newtfilter={0x94, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0xb, 0xfff3}, {}, {0x7}}, [@filter_kind_options=@f_matchall={{0xd}, {0x60, 0x2, [@TCA_MATCHALL_ACT={0x5c, 0x2, [@m_skbedit={0x58, 0x1, 0x0, 0x0, {{0xc}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x8, 0x5, 0x2}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x0, 0x8, 0xffffffffffffffff, 0x6, 0x77}}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x4814}, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r8) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r9, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000002300)="81", 0x1}], 0x1}, 0x4) 2.615056636s ago: executing program 5 (id=20207): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010026bd7000ffdbdf25030000000800010000000000400007800c"], 0x5c}, 0x1, 0x0, 0x0, 0x4050}, 0x100) socket$netlink(0x10, 0x3, 0x0) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x80000000000000a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0) readv(0xffffffffffffffff, &(0x7f0000000200), 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) 2.471407603s ago: executing program 1 (id=20208): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x24, 0x24, 0xf0b, 0x70bd2e, 0x0, {0x0, 0x0, 0x12, 0x0, {0x0, 0x6}, {0xfff1, 0xffff}, {0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xf}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_TARGET={0x8, 0x1, 0x6}]}}]}, 0x40}}, 0x4000090) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000100)) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000140), &(0x7f0000000180)=0x14) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, 0x0, &(0x7f00000003c0)) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000540)={'ip6_vti0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) socket$packet(0x11, 0x3, 0x300) getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x56) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, 0x0, 0x84) sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000200)={0x6c, r1, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0x10}, 0xf8}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @mcast2}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x6c}}, 0x0) 2.343946099s ago: executing program 4 (id=20209): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0x14, 0x30, 0xffff, 0x0, 0x25dfdbff}, 0x14}}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(r2, 0x0, 0x0) write$tun(r0, 0x0, 0xfdef) r3 = socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg$inet_sctp(r3, &(0x7f0000003f40), 0x0, 0x200000d0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[], 0x32600) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$WG_CMD_GET_DEVICE(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x28, r6, 0x301, 0x70bd2c, 0x25dfdbfe, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x40080c0}, 0x20040000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) 1.745332792s ago: executing program 2 (id=20210): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) r3 = socket$isdn_base(0x22, 0x3, 0x0) close(r3) r4 = socket$kcm(0x29, 0x5, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000000), 0xffffff6a) r6 = socket$kcm(0x29, 0x5, 0x0) sendmsg$kcm(r6, 0x0, 0xc854) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r2) sendfile(r4, r5, 0x0, 0xffffffff000) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r5, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r7, 0x0, 0x70bd2c, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x44010}, 0x40000) sendmsg$NL80211_CMD_RELOAD_REGDB(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x14, r8, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) r9 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r9, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) connect$inet(r9, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r9, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r9, 0x6, 0xd, &(0x7f00000000c0)='bbr', 0x3) recvfrom$inet(r9, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) ioctl$AUTOFS_IOC_CATATONIC(r1, 0x9362, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000640)={'wlan1\x00'}) socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001980)={&(0x7f0000009b80)=@newchain={0x24, 0x64, 0x300, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x10, 0xfff2}, {0xc}, {0x1, 0x1ffe4}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x4000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="440000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000008001b00"], 0x44}}, 0x0) socket$netlink(0x10, 0x3, 0x0) 164.751641ms ago: executing program 1 (id=20211): socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) syz_init_net_socket$netrom(0x6, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="12000000400000000400000002"], 0x50) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r0, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r2}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) 107.406924ms ago: executing program 5 (id=20212): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{0x0}], 0x1}, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000200)={0x0, 0x4, 0x0, 0x9, 0x0, 0x0, 0x0, 0x5, 0x0, 0xfd}, 0xe) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292", 0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[], 0x5c}}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000540)={'ip_vti0\x00'}) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 106.845021ms ago: executing program 3 (id=20213): socketpair$unix(0x1, 0x5, 0x0, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20040040) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x10, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@ipv4_newroute={0x1c, 0x18, 0x35f32a6dfa748ddb, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}, 0x1c}}, 0x60800) r2 = socket$nl_route(0x10, 0x3, 0x0) bind$phonet(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_FLOW={0x8, 0xb, 0x7}]}, 0x24}}, 0x0) shutdown(0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000055c0), 0x400023c, 0x300, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000000, 0x110, 0xffffffffffffffff, 0xade77000) 106.60407ms ago: executing program 4 (id=20214): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007d80)=[{{0x0, 0x0, &(0x7f0000002640)=[{0x0}, {&(0x7f0000001440)=""/100, 0x64}], 0x1000000000000053}, 0xfffe}], 0x1, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1d19cb307b3472ab9cdb042d2", "643fcbb2c5a57df67d074af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070}, 0x94) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r1, &(0x7f0000000940)=[{{0x0, 0x0, &(0x7f0000000540), 0x2}, 0x3}], 0x4000048, 0x0, 0x0) sendmsg$AUDIT_TRIM(0xffffffffffffffff, 0x0, 0x8000) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, 0x0, 0x0) 65.973242ms ago: executing program 2 (id=20215): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xf, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r7, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x24, 0x29, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r10, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) 0s ago: executing program 5 (id=20216): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000014c0)=ANY=[@ANYBLOB="380000002300010324bd7002fadbdf25010000001800028014001c0000000000000003f86f161ed927187f830000000000ac1414bb00"/66], 0x38}}, 0xc004) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x2c, r1, 0x301, 0x70bd29, 0x25dfdbfc, {0x24}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8041}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r3, &(0x7f00000023c0)=[{{&(0x7f0000000300)={0xa, 0x4e21, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xa}, 0x1c, &(0x7f0000000000)=[{&(0x7f00000002c0)="474d107a", 0x4}], 0x1}}, {{&(0x7f00000004c0)={0xa, 0x4e21, 0x7, @private1={0xfc, 0x1, '\x00', 0x1}}, 0x1c, &(0x7f0000000500)}}], 0x2, 0x880) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x58, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_BC_QUEUE_LEN={0x8, 0x9, 0xffffffff}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x2}]}}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'macvlan0\x00'}]}, 0x58}}, 0x8000) r5 = accept$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000240)=0x14) getsockname$packet(r5, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000380)=0x14) recvmsg(r2, &(0x7f0000000600)={&(0x7f0000000540)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000480)}], 0x1, &(0x7f0000000700)=""/244, 0xf4}, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x4, 0x4, &(0x7f0000000180)=@framed={{}, [@ldst={0x0, 0x0, 0x1, 0x0, 0xb, 0x6, 0x1}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000800)="e7d5db91581aeab70fe741e73e6b675989d601d3bb352880fff9dfe6beb0707bb2b832063d11b7d4a7097ee1a50608e5762df970c080ffe4cfafad44f3db27195177901b1dc10b82f8da5f5e1c79ea378a8f86dade9652240bb83aeada6519620974c7fa9fc2ea384248155acb957586a0de9d1359c8cc0077a8db0505cb27b86d494fbf55c468c2f471430776685e877925831e7aefb6b13730af4ea0", 0x9d) kernel console output (not intermixed with test programs): [T20212] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 1353.097386][T20154] lo speed is unknown, defaulting to 1000 [ 1353.534210][ T2353] lo speed is unknown, defaulting to 1000 [ 1353.841960][T20228] netlink: 1084 bytes leftover after parsing attributes in process `syz.3.18521'. [ 1353.948053][T20228] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1353.991934][T20232] netlink: 56 bytes leftover after parsing attributes in process `syz.2.18523'. [ 1354.018615][T20232] netlink: 'syz.2.18523': attribute type 1 has an invalid length. [ 1354.026616][T20232] netlink: 224 bytes leftover after parsing attributes in process `syz.2.18523'. [ 1354.075552][T20215] lo speed is unknown, defaulting to 1000 [ 1354.170863][T20215] lo speed is unknown, defaulting to 1000 [ 1354.247996][T20239] netlink: 8 bytes leftover after parsing attributes in process `syz.2.18525'. [ 1354.577900][T20253] bond27: (slave bond_slave_1): Device is not our slave [ 1354.685012][T20253] bond27: option active_slave: invalid value (bond_slave_1) [ 1354.867904][T20253] bond27 (unregistering): Released all slaves [ 1355.022562][T20265] tipc: Resetting bearer [ 1355.323784][T20272] netlink: 8 bytes leftover after parsing attributes in process `syz.0.18528'. [ 1355.347556][T20272] netlink: 'syz.0.18528': attribute type 14 has an invalid length. [ 1355.360586][T20272] netlink: 32 bytes leftover after parsing attributes in process `syz.0.18528'. [ 1355.361130][T20215] lo speed is unknown, defaulting to 1000 [ 1355.383737][T20272] netlink: 'syz.0.18528': attribute type 3 has an invalid length. [ 1355.391670][T20272] netlink: 224 bytes leftover after parsing attributes in process `syz.0.18528'. [ 1355.528739][T20274] tipc: Enabled bearer , priority 0 [ 1355.712722][T20274] tipc: Resetting bearer [ 1355.871011][T20287] xt_CT: No such helper "syz1" [ 1356.104269][T20300] mac80211_hwsim hwsim4 syzkaller0: entered promiscuous mode [ 1356.126563][T20300] mac80211_hwsim hwsim4 syzkaller0: entered allmulticast mode [ 1356.220685][T20299] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 1356.470050][T20311] bond27: option mode: invalid value (254) [ 1356.486912][T20311] bond27 (unregistering): Released all slaves [ 1356.559941][T20315] netlink: 'syz.2.18535': attribute type 21 has an invalid length. [ 1356.568209][T20315] netlink: 128 bytes leftover after parsing attributes in process `syz.2.18535'. [ 1356.577662][T20284] lo speed is unknown, defaulting to 1000 [ 1356.578956][T20315] netlink: 'syz.2.18535': attribute type 4 has an invalid length. [ 1356.603226][T20315] netlink: 3 bytes leftover after parsing attributes in process `syz.2.18535'. [ 1356.622955][T20284] lo speed is unknown, defaulting to 1000 [ 1356.669506][T20315] netlink: 'syz.2.18535': attribute type 1 has an invalid length. [ 1356.697767][T20315] netlink: 224 bytes leftover after parsing attributes in process `syz.2.18535'. [ 1356.834127][T20315] bond39: option lacp_active: mode dependency failed, not supported in mode balance-alb(6) [ 1356.860806][T20315] bond39 (unregistering): Released all slaves [ 1356.954700][T20324] netlink: 'syz.1.18536': attribute type 33 has an invalid length. [ 1357.288639][T20329] bridge0: left promiscuous mode [ 1357.296604][T20329] bridge0: entered promiscuous mode [ 1357.310898][T20329] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1357.325457][T20329] 8021q: adding VLAN 0 to HW filter on device team0 [ 1357.336339][T20329] net_ratelimit: 53 callbacks suppressed [ 1357.336352][T20329] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1357.360703][ T5931] lo speed is unknown, defaulting to 1000 [ 1357.383728][T20304] lo speed is unknown, defaulting to 1000 [ 1357.392298][T20284] lo speed is unknown, defaulting to 1000 [ 1357.396244][T20304] lo speed is unknown, defaulting to 1000 [ 1357.398862][ T5931] syz2: Port: 1 Link ACTIVE [ 1357.437351][T20329] netlink: 'syz.1.18538': attribute type 2 has an invalid length. [ 1357.718182][T20304] lo speed is unknown, defaulting to 1000 [ 1358.635566][T20347] bond39: (slave bond_slave_1): Device is not bonding slave [ 1358.661146][T20347] bond39: option active_slave: invalid value (bond_slave_1) [ 1359.006543][T20347] bond39 (unregistering): Released all slaves [ 1359.194635][T20353] tipc: Enabling of bearer rejected, already enabled [ 1359.407790][T20365] __nla_validate_parse: 2 callbacks suppressed [ 1359.407817][T20365] netlink: 28 bytes leftover after parsing attributes in process `syz.3.18545'. [ 1359.434401][T20363] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 1359.443921][T20365] netlink: 28 bytes leftover after parsing attributes in process `syz.3.18545'. [ 1359.749649][T20375] netlink: 'syz.0.18548': attribute type 33 has an invalid length. [ 1360.103131][T20391] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 1360.825455][T20389] lo speed is unknown, defaulting to 1000 [ 1360.841712][T20389] lo speed is unknown, defaulting to 1000 [ 1360.999702][T20420] netlink: 8 bytes leftover after parsing attributes in process `syz.1.18556'. [ 1361.011448][T20417] bond26: (slave bond_slave_1): Device is not bonding slave [ 1361.011477][T20417] bond26: option active_slave: invalid value (bond_slave_1) [ 1361.036582][T20417] bond26 (unregistering): Released all slaves [ 1361.184893][T20422] netlink: 'syz.1.18556': attribute type 14 has an invalid length. [ 1361.210384][T20422] netlink: 32 bytes leftover after parsing attributes in process `syz.1.18556'. [ 1361.431675][T20389] lo speed is unknown, defaulting to 1000 [ 1362.022752][ T1301] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1362.033853][T20432] netlink: 28 bytes leftover after parsing attributes in process `syz.0.18560'. [ 1362.047431][ T1301] lec:lec_start_xmit: lec0:No lecd attached [ 1362.055577][ T1301] clip:clip_start_xmit: skb_dst(skb) == NULL [ 1362.190914][T20440] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 1362.336574][T20438] netlink: 'syz.0.18560': attribute type 1 has an invalid length. [ 1362.794465][T20447] netlink: 'syz.3.18561': attribute type 33 has an invalid length. [ 1363.020068][T20453] netlink: 28 bytes leftover after parsing attributes in process `syz.3.18562'. [ 1363.043236][T20453] netlink: 8 bytes leftover after parsing attributes in process `syz.3.18562'. [ 1363.470484][T20466] erspan0: entered promiscuous mode [ 1363.550590][T20466] macsec0: entered promiscuous mode [ 1363.607292][T20471] netlink: 8 bytes leftover after parsing attributes in process `syz.3.18567'. [ 1363.618773][T20466] erspan0: left promiscuous mode [ 1363.678713][T20474] netlink: 'syz.3.18567': attribute type 14 has an invalid length. [ 1363.703253][T20434] lo speed is unknown, defaulting to 1000 [ 1363.709505][T20474] netlink: 32 bytes leftover after parsing attributes in process `syz.3.18567'. [ 1363.766077][T20434] lo speed is unknown, defaulting to 1000 [ 1364.022595][T20463] lo speed is unknown, defaulting to 1000 [ 1364.345133][T20485] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 1364.358776][T20485] syzkaller1: linktype set to 825 [ 1364.459944][T20485] netlink: 16 bytes leftover after parsing attributes in process `syz.3.18570'. [ 1364.551461][T20434] lo speed is unknown, defaulting to 1000 [ 1364.557395][T20463] lo speed is unknown, defaulting to 1000 [ 1364.981423][T20491] netlink: 'syz.3.18572': attribute type 10 has an invalid length. [ 1365.074693][T20492] veth0: entered promiscuous mode [ 1365.084175][T20463] lo speed is unknown, defaulting to 1000 [ 1365.088062][T20492] bond0: entered promiscuous mode [ 1365.632031][T20490] bond0: left promiscuous mode [ 1365.650350][T20490] veth0: left promiscuous mode [ 1365.702090][T20404] Set syz1 is full, maxelem 65536 reached [ 1366.004380][T20497] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 1366.030990][T20497] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1366.039509][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1366.586094][T20501] vlan11: entered allmulticast mode [ 1366.591632][T20501] bridge_slave_0: entered allmulticast mode [ 1366.599493][T20501] bridge0: port 1(vlan11) entered blocking state [ 1366.606498][T20501] bridge0: port 1(vlan11) entered disabled state [ 1366.616255][T20501] vlan11: entered promiscuous mode [ 1366.621433][T20501] bridge_slave_0: entered promiscuous mode [ 1367.123434][T20528] netlink: zone id is out of range [ 1367.144117][T20528] netlink: zone id is out of range [ 1367.149533][T20528] netlink: zone id is out of range [ 1367.163188][T20528] netlink: zone id is out of range [ 1367.188797][T20528] netlink: zone id is out of range [ 1367.209916][T20530] netlink: 28 bytes leftover after parsing attributes in process `syz.4.18581'. [ 1367.219178][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5160 ms [ 1367.219214][ C1] lec:lec_tx_timeout: lec0 [ 1367.227251][T20528] netlink: zone id is out of range [ 1367.227557][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 1367.231868][T20528] netlink: zone id is out of range [ 1367.263668][T20530] netlink: 28 bytes leftover after parsing attributes in process `syz.4.18581'. [ 1367.360455][T20528] netlink: 'syz.2.18579': attribute type 2 has an invalid length. [ 1367.415753][T20535] netlink: 'syz.2.18579': attribute type 2 has an invalid length. [ 1367.632037][T20528] : entered promiscuous mode [ 1367.649158][T20500] lo speed is unknown, defaulting to 1000 [ 1367.680152][T20500] lo speed is unknown, defaulting to 1000 [ 1368.122982][T20562] netlink: 'syz.2.18586': attribute type 13 has an invalid length. [ 1368.144129][T20562] netlink: 'syz.2.18586': attribute type 17 has an invalid length. [ 1368.307498][T20562] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1368.331643][T20500] lo speed is unknown, defaulting to 1000 [ 1368.338915][T20571] netlink: 28 bytes leftover after parsing attributes in process `syz.3.18584'. [ 1368.350081][T20571] netlink: 28 bytes leftover after parsing attributes in process `syz.3.18584'. [ 1368.364881][T20571] netlink: 'syz.3.18584': attribute type 4 has an invalid length. [ 1368.445139][T20575] netlink: 28 bytes leftover after parsing attributes in process `syz.4.18585'. [ 1368.653649][T20578] netlink: 28 bytes leftover after parsing attributes in process `syz.1.18587'. [ 1368.765146][T20578] netlink: 32 bytes leftover after parsing attributes in process `syz.1.18587'. [ 1369.323656][T20578] netlink: 28 bytes leftover after parsing attributes in process `syz.1.18587'. [ 1369.429300][T20582] netlink: 1036 bytes leftover after parsing attributes in process `syz.1.18587'. [ 1370.028380][T20598] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 1370.110721][T20582] gretap5: entered promiscuous mode [ 1370.161746][T20582] batman_adv: batadv0: Adding interface: gretap5 [ 1370.190298][T20582] batman_adv: batadv0: The MTU of interface gretap5 is too small (1462) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1532. [ 1370.236159][T20582] batman_adv: batadv0: Not using interface gretap5 (retrying later): interface not active [ 1370.556056][T20596] lo speed is unknown, defaulting to 1000 [ 1370.564201][T20596] lo speed is unknown, defaulting to 1000 [ 1370.756630][T20605] netlink: 8 bytes leftover after parsing attributes in process `syz.2.18593'. [ 1370.809055][T20596] lo speed is unknown, defaulting to 1000 [ 1372.254145][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms [ 1372.262354][ C1] lec:lec_tx_timeout: lec0 [ 1372.358754][T20636] netlink: 28 bytes leftover after parsing attributes in process `syz.3.18596'. [ 1372.368109][T20636] netlink: 32 bytes leftover after parsing attributes in process `syz.3.18596'. [ 1372.377464][T20636] netlink: 28 bytes leftover after parsing attributes in process `syz.3.18596'. [ 1372.514037][T20642] net_ratelimit: 360 callbacks suppressed [ 1372.514060][T20642] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1373.124900][T20648] netlink: 'syz.4.18602': attribute type 2 has an invalid length. [ 1373.172087][T20648] !: entered promiscuous mode [ 1373.258850][T20658] netlink: 4 bytes leftover after parsing attributes in process `syz.0.18601'. [ 1373.337575][T20658] batman_adv: batadv0: Adding interface: ipvlan0 [ 1373.382680][T20658] batman_adv: batadv0: The MTU of interface ipvlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1373.443248][T20658] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1373.454920][T20658] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1373.477231][T20658] batman_adv: batadv0: Not using interface ipvlan0 (retrying later): interface not active [ 1373.974659][T20668] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 1374.005174][T20668] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1374.055225][T20668] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1374.087842][T20668] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1374.144581][T20668] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1374.153184][T20668] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1374.213997][T20668] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1374.254473][T20668] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1374.293344][T20668] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1374.332955][T20668] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1374.678260][T20670] lo speed is unknown, defaulting to 1000 [ 1374.706343][T20670] lo speed is unknown, defaulting to 1000 [ 1374.755203][T20680] netlink: 8 bytes leftover after parsing attributes in process `syz.0.18607'. [ 1374.774749][T20680] netlink: 'syz.0.18607': attribute type 14 has an invalid length. [ 1374.817183][T20680] netlink: 32 bytes leftover after parsing attributes in process `syz.0.18607'. [ 1375.185140][T20687] netlink: 28 bytes leftover after parsing attributes in process `syz.0.18609'. [ 1375.203574][T20687] netlink: 32 bytes leftover after parsing attributes in process `syz.0.18609'. [ 1375.218580][T20687] netlink: 28 bytes leftover after parsing attributes in process `syz.0.18609'. [ 1375.453685][ C0] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 1375.884491][T20670] lo speed is unknown, defaulting to 1000 [ 1375.899560][T20700] __nla_validate_parse: 2 callbacks suppressed [ 1375.899582][T20700] netlink: 4 bytes leftover after parsing attributes in process `syz.1.18612'. [ 1376.480937][T20714] netlink: 4 bytes leftover after parsing attributes in process `syz.4.18615'. [ 1376.792859][T20728] syzkaller0: entered promiscuous mode [ 1376.841264][T20728] syzkaller0: entered allmulticast mode [ 1377.957405][T20746] netlink: 28 bytes leftover after parsing attributes in process `syz.4.18620'. [ 1378.094723][T20746] netlink: 28 bytes leftover after parsing attributes in process `syz.4.18620'. [ 1378.445634][T20727] lo speed is unknown, defaulting to 1000 [ 1378.482398][T20727] lo speed is unknown, defaulting to 1000 [ 1378.615894][T20760] netlink: 12 bytes leftover after parsing attributes in process `syz.3.18622'. [ 1379.599531][T20727] lo speed is unknown, defaulting to 1000 [ 1379.751548][T20769] lo speed is unknown, defaulting to 1000 [ 1379.822364][T20769] lo speed is unknown, defaulting to 1000 [ 1380.068331][T20789] tipc: Enabling of bearer rejected, already enabled [ 1380.133369][T20786] mac80211_hwsim hwsim10 syzkaller0: entered promiscuous mode [ 1380.732185][T20769] lo speed is unknown, defaulting to 1000 [ 1381.010157][T20807] net_ratelimit: 20 callbacks suppressed [ 1381.010179][T20807] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check. [ 1381.104288][T20807] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 1381.299054][T20810] netlink: 8 bytes leftover after parsing attributes in process `syz.4.18629'. [ 1381.335733][T20810] netlink: 'syz.4.18629': attribute type 14 has an invalid length. [ 1381.344121][T20810] netlink: 32 bytes leftover after parsing attributes in process `syz.4.18629'. [ 1381.371795][T20810] netlink: 'syz.4.18629': attribute type 3 has an invalid length. [ 1381.380014][T20810] netlink: 224 bytes leftover after parsing attributes in process `syz.4.18629'. [ 1382.078700][T20828] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1382.088475][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1382.223912][T20822] netlink: 36 bytes leftover after parsing attributes in process `syz.4.18632'. [ 1382.235757][T20822] netlink: 36 bytes leftover after parsing attributes in process `syz.4.18632'. [ 1382.570256][T20838] netlink: 28 bytes leftover after parsing attributes in process `syz.4.18635'. [ 1382.582831][T20838] netlink: 28 bytes leftover after parsing attributes in process `syz.4.18635'. [ 1383.234297][T20859] block nbd0: server does not support multiple connections per device. [ 1383.243228][T20859] block nbd0: shutting down sockets [ 1383.368158][T20863] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1383.463797][T20863] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1383.473089][T20863] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1383.524023][T20871] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 1383.528598][T20863] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1383.586153][T20863] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1383.601496][T20863] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1383.607036][T20870] netlink: 12 bytes leftover after parsing attributes in process `syz.2.18643'. [ 1383.630242][T20863] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1383.640036][T20868] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 1383.844714][T20879] netlink: 'syz.4.18644': attribute type 2 has an invalid length. [ 1383.858753][T20881] xt_cgroup: invalid path, errno=-2 [ 1384.052785][T20888] netlink: 4 bytes leftover after parsing attributes in process `syz.2.18646'. [ 1384.107056][T20889] netlink: 8 bytes leftover after parsing attributes in process `syz.2.18646'. [ 1384.120626][T20888] macvtap0: entered promiscuous mode [ 1384.131503][T20888] veth0: entered promiscuous mode [ 1384.137951][T20888] macvtap0: entered allmulticast mode [ 1384.164292][T20889] veth0: left promiscuous mode [ 1384.182248][T20865] lo speed is unknown, defaulting to 1000 [ 1384.240388][T20865] lo speed is unknown, defaulting to 1000 [ 1384.269465][T20891] netlink: 'syz.4.18647': attribute type 3 has an invalid length. [ 1384.508058][T20901] netlink: 'syz.0.18649': attribute type 1 has an invalid length. [ 1384.670315][T20873] lo speed is unknown, defaulting to 1000 [ 1384.797394][T20865] lo speed is unknown, defaulting to 1000 [ 1384.797487][T20873] lo speed is unknown, defaulting to 1000 [ 1385.138498][T20873] lo speed is unknown, defaulting to 1000 [ 1385.689146][T20924] batadv_slave_0: entered promiscuous mode [ 1385.705666][T20924] batadv_slave_0: entered allmulticast mode [ 1386.999200][T20943] __nla_validate_parse: 5 callbacks suppressed [ 1386.999224][T20943] netlink: 8 bytes leftover after parsing attributes in process `syz.4.18657'. [ 1387.066541][T20944] netlink: 'syz.4.18657': attribute type 14 has an invalid length. [ 1387.075030][T20944] netlink: 32 bytes leftover after parsing attributes in process `syz.4.18657'. [ 1387.121528][T20945] netlink: 'syz.4.18657': attribute type 3 has an invalid length. [ 1387.131090][T20945] netlink: 224 bytes leftover after parsing attributes in process `syz.4.18657'. [ 1387.652109][T20962] netlink: 'syz.2.18663': attribute type 11 has an invalid length. [ 1387.681763][T20962] netlink: 'syz.2.18663': attribute type 23 has an invalid length. [ 1387.703598][T20962] netlink: 224 bytes leftover after parsing attributes in process `syz.2.18663'. [ 1387.828578][T20962] net_ratelimit: 1173 callbacks suppressed [ 1387.828605][T20962] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1387.870322][T20971] netlink: 'syz.0.18667': attribute type 1 has an invalid length. [ 1388.103921][T20971] 8021q: adding VLAN 0 to HW filter on device bond33 [ 1388.172062][T20971] netlink: 'syz.0.18667': attribute type 1 has an invalid length. [ 1388.331626][T20971] bond33: (slave batadv5): Opening slave failed [ 1388.553199][T21000] netlink: 'syz.2.18670': attribute type 13 has an invalid length. [ 1388.594801][T21000] netlink: 'syz.2.18670': attribute type 17 has an invalid length. [ 1388.728856][T21000] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1388.748787][T20999] netlink: 4 bytes leftover after parsing attributes in process `syz.2.18670'. [ 1388.803410][T21000] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 1389.007216][T21012] tipc: Resetting bearer [ 1389.053058][T20990] lo speed is unknown, defaulting to 1000 [ 1389.187391][T21027] Unsupported ieee802154 address type: 0 [ 1389.213899][T20990] lo speed is unknown, defaulting to 1000 [ 1389.613809][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1389.623658][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1389.654814][T20990] lo speed is unknown, defaulting to 1000 [ 1389.721470][T21050] netlink: 28 bytes leftover after parsing attributes in process `syz.4.18680'. [ 1389.849448][T21052] netlink: 'syz.0.18682': attribute type 1 has an invalid length. [ 1389.919211][T21052] 8021q: adding VLAN 0 to HW filter on device bond34 [ 1389.931814][T21030] lo speed is unknown, defaulting to 1000 [ 1389.985943][T21030] lo speed is unknown, defaulting to 1000 [ 1390.077153][T21054] netlink: 'syz.2.18681': attribute type 13 has an invalid length. [ 1390.077858][T21052] netlink: 'syz.0.18682': attribute type 1 has an invalid length. [ 1390.322879][T21052] bond34: (slave batadv5): Opening slave failed [ 1390.606983][T21061] bond32: (slave bond_slave_1): Device is not bonding slave [ 1390.630414][T21067] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1390.649228][T21061] bond32: option active_slave: invalid value (bond_slave_1) [ 1390.691832][T21061] bond32 (unregistering): Released all slaves [ 1390.966027][T21030] lo speed is unknown, defaulting to 1000 [ 1391.271408][T21079] mac80211_hwsim hwsim4 syzkaller0: Caught tx_queue_len zero misconfig [ 1391.335043][T21081] netlink: 148 bytes leftover after parsing attributes in process `syz.4.18687'. [ 1391.452743][T21085] netlink: 8 bytes leftover after parsing attributes in process `syz.4.18688'. [ 1391.462740][T21085] netlink: 32 bytes leftover after parsing attributes in process `syz.4.18688'. [ 1391.476738][T21085] netlink: 224 bytes leftover after parsing attributes in process `syz.4.18688'. [ 1391.822401][T21097] lo: Caught tx_queue_len zero misconfig [ 1391.918825][T21065] lo speed is unknown, defaulting to 1000 [ 1391.965272][T21065] lo speed is unknown, defaulting to 1000 [ 1392.176252][T21100] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1392.209820][T21100] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 1392.606615][T21065] lo speed is unknown, defaulting to 1000 [ 1393.592651][T21118] syzkaller0: entered promiscuous mode [ 1393.613745][T21118] syzkaller0: entered allmulticast mode [ 1393.668245][T21121] macsec3: entered promiscuous mode [ 1393.674734][T21121] erspan0: entered promiscuous mode [ 1393.689364][T21123] __nla_validate_parse: 1 callbacks suppressed [ 1393.689386][T21123] netlink: 212 bytes leftover after parsing attributes in process `syz.1.18700'. [ 1393.693886][T21121] erspan0: left promiscuous mode [ 1393.805521][T21118] validate_nla: 4 callbacks suppressed [ 1393.805547][T21118] netlink: 'syz.1.18700': attribute type 33 has an invalid length. [ 1394.116837][T21130] netlink: 8 bytes leftover after parsing attributes in process `syz.2.18702'. [ 1394.466065][T21141] netlink: 8 bytes leftover after parsing attributes in process `syz.0.18706'. [ 1394.472587][T21142] team_slave_1: Caught tx_queue_len zero misconfig [ 1394.555240][T21141] netlink: 'syz.0.18706': attribute type 14 has an invalid length. [ 1394.563241][T21141] netlink: 32 bytes leftover after parsing attributes in process `syz.0.18706'. [ 1394.638746][T21141] netlink: 'syz.0.18706': attribute type 3 has an invalid length. [ 1394.647479][T21141] netlink: 224 bytes leftover after parsing attributes in process `syz.0.18706'. [ 1395.216100][T21161] netlink: 'syz.2.18710': attribute type 13 has an invalid length. [ 1395.227951][T21161] netlink: 'syz.2.18710': attribute type 17 has an invalid length. [ 1395.268773][T21161] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 1396.317677][T21174] netlink: 'syz.4.18713': attribute type 33 has an invalid length. [ 1396.331362][T21174] netlink: 212 bytes leftover after parsing attributes in process `syz.4.18713'. [ 1396.348093][T21178] netlink: 8 bytes leftover after parsing attributes in process `syz.2.18715'. [ 1396.554923][T21184] netlink: 8 bytes leftover after parsing attributes in process `syz.2.18717'. [ 1396.575800][T21184] netlink: 'syz.2.18717': attribute type 14 has an invalid length. [ 1396.593786][T21184] netlink: 32 bytes leftover after parsing attributes in process `syz.2.18717'. [ 1396.643952][T21184] netlink: 'syz.2.18717': attribute type 3 has an invalid length. [ 1396.666011][T21184] netlink: 224 bytes leftover after parsing attributes in process `syz.2.18717'. [ 1397.207086][T21209] netlink: 'syz.2.18726': attribute type 33 has an invalid length. [ 1397.704773][T21202] lo speed is unknown, defaulting to 1000 [ 1397.721750][T21202] lo speed is unknown, defaulting to 1000 [ 1398.348345][T21233] bond39: option packets_per_slave: mode dependency failed, not supported in mode balance-tlb(5) [ 1398.452319][T21233] bond39 (unregistering): Released all slaves [ 1398.658893][T21237] bond32: option mode: invalid value (254) [ 1398.707844][T21237] bond32 (unregistering): Released all slaves [ 1398.822348][T21202] lo speed is unknown, defaulting to 1000 [ 1399.105031][T21254] netlink: 'syz.4.18736': attribute type 1 has an invalid length. [ 1399.318723][T21254] 8021q: adding VLAN 0 to HW filter on device bond32 [ 1399.403150][T21258] bond32: (slave veth53): Enslaving as an active interface with a down link [ 1399.746097][T21273] netlink: 'syz.0.18741': attribute type 39 has an invalid length. [ 1400.006542][T21273] bridge0: port 3(syz_tun) entered disabled state [ 1400.167226][T21273] syz_tun (unregistering): left promiscuous mode [ 1400.175452][T21273] bridge0: port 3(syz_tun) entered disabled state [ 1400.624297][T21298] netlink: 'syz.0.18749': attribute type 10 has an invalid length. [ 1400.690299][T21300] veth0: entered promiscuous mode [ 1400.760334][T21300] bond0: entered promiscuous mode [ 1401.079962][T21314] __nla_validate_parse: 2 callbacks suppressed [ 1401.080001][T21314] netlink: 28 bytes leftover after parsing attributes in process `syz.2.18755'. [ 1401.096191][T21314] netlink: 28 bytes leftover after parsing attributes in process `syz.2.18755'. [ 1401.195353][T21317] netlink: 28 bytes leftover after parsing attributes in process `syz.1.18753'. [ 1401.218853][T21317] netlink: 32 bytes leftover after parsing attributes in process `syz.1.18753'. [ 1401.280105][T21317] netlink: 28 bytes leftover after parsing attributes in process `syz.1.18753'. [ 1401.330427][T21323] netlink: 1044 bytes leftover after parsing attributes in process `syz.1.18753'. [ 1401.370009][T21317] netlink: 32 bytes leftover after parsing attributes in process `syz.1.18753'. [ 1401.398190][T21323] netlink: 8 bytes leftover after parsing attributes in process `syz.1.18753'. [ 1401.418655][T21295] bond0: left promiscuous mode [ 1401.424181][T21295] veth0: left promiscuous mode [ 1401.650928][T21328] tipc: Resetting bearer [ 1402.881931][T21345] bridge_slave_0 (unregistering): left promiscuous mode [ 1402.935099][T21345] bridge0: port 1(bridge_slave_0) entered disabled state [ 1403.089099][T21351] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1403.153811][T21351] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1403.162250][T21351] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1403.225457][T21358] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1403.260638][T21358] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1403.302845][T21358] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1403.343054][T21358] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1403.372865][T21358] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1403.413981][T21358] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1403.422497][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1403.457342][T21364] netlink: 'syz.3.18766': attribute type 1 has an invalid length. [ 1403.555565][T21364] 8021q: adding VLAN 0 to HW filter on device bond26 [ 1403.657010][T21370] bond26: (slave veth33): Enslaving as an active interface with a down link [ 1403.695192][T21368] netlink: 'syz.2.18767': attribute type 12 has an invalid length. [ 1403.753151][T21364] netlink: 'syz.3.18766': attribute type 1 has an invalid length. [ 1403.883688][T21370] 8021q: adding VLAN 0 to HW filter on device batadv3 [ 1403.904462][T21370] bond26: (slave batadv3): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 1403.976121][T21381] lo: left allmulticast mode [ 1403.986400][T21355] lo speed is unknown, defaulting to 1000 [ 1404.019671][T21355] lo speed is unknown, defaulting to 1000 [ 1404.116401][T21383] netlink: 28 bytes leftover after parsing attributes in process `syz.4.18771'. [ 1404.144431][T21383] netlink: 28 bytes leftover after parsing attributes in process `syz.4.18771'. [ 1404.757989][T21355] lo speed is unknown, defaulting to 1000 [ 1404.894384][T21406] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 1406.244705][T21433] netlink: 28 bytes leftover after parsing attributes in process `syz.4.18785'. [ 1406.270960][T21433] netlink: 28 bytes leftover after parsing attributes in process `syz.4.18785'. [ 1406.632033][T21459] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 1406.944874][T21467] netlink: 8 bytes leftover after parsing attributes in process `syz.0.18799'. [ 1406.955869][T21467] netlink: 'syz.0.18799': attribute type 14 has an invalid length. [ 1406.964193][T21467] netlink: 32 bytes leftover after parsing attributes in process `syz.0.18799'. [ 1406.985673][T21467] netlink: 'syz.0.18799': attribute type 3 has an invalid length. [ 1406.994172][T21467] netlink: 224 bytes leftover after parsing attributes in process `syz.0.18799'. [ 1407.019687][T21456] lo speed is unknown, defaulting to 1000 [ 1407.049534][T21456] lo speed is unknown, defaulting to 1000 [ 1407.473824][T21482] netlink: 20 bytes leftover after parsing attributes in process `syz.2.18806'. [ 1407.641863][T21490] netlink: 8 bytes leftover after parsing attributes in process `syz.0.18811'. [ 1407.645669][T21456] lo speed is unknown, defaulting to 1000 [ 1407.661952][T21490] netlink: 'syz.0.18811': attribute type 14 has an invalid length. [ 1407.680427][T21490] netlink: 32 bytes leftover after parsing attributes in process `syz.0.18811'. [ 1407.726916][T21492] netlink: 'syz.1.18810': attribute type 1 has an invalid length. [ 1407.756050][T21490] netlink: 'syz.0.18811': attribute type 3 has an invalid length. [ 1407.764112][T21490] netlink: 224 bytes leftover after parsing attributes in process `syz.0.18811'. [ 1407.776055][T21492] 8021q: adding VLAN 0 to HW filter on device bond27 [ 1407.861525][T21497] bond27: (slave veth37): Enslaving as an active interface with a down link [ 1407.900334][T21492] netlink: 14 bytes leftover after parsing attributes in process `syz.1.18810'. [ 1407.932492][T21492] netlink: 'syz.1.18810': attribute type 1 has an invalid length. [ 1408.127220][T21508] netlink: 'syz.2.18817': attribute type 14 has an invalid length. [ 1408.164511][T21508] netlink: 'syz.2.18817': attribute type 3 has an invalid length. [ 1408.236633][T21516] net_ratelimit: 26 callbacks suppressed [ 1408.236657][T21516] netlink: zone id is out of range [ 1408.265063][T21516] netlink: del zone limit has 8 unknown bytes [ 1408.792252][T21537] netlink: 'syz.3.18828': attribute type 1 has an invalid length. [ 1408.849842][T21537] 8021q: adding VLAN 0 to HW filter on device bond27 [ 1408.917349][T21542] bond27: (slave veth35): Enslaving as an active interface with a down link [ 1408.927344][T21544] netlink: 'syz.1.18830': attribute type 14 has an invalid length. [ 1408.939935][T21537] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1410.054818][T21535] lo speed is unknown, defaulting to 1000 [ 1410.062687][T21535] lo speed is unknown, defaulting to 1000 [ 1410.558448][T21599] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1410.583855][T21599] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1410.612708][T21599] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1410.652289][T21599] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1410.664732][T21599] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1410.673052][T21599] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1410.689473][T21599] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1410.766184][T21535] lo speed is unknown, defaulting to 1000 [ 1410.953275][T21567] lo speed is unknown, defaulting to 1000 [ 1410.985474][T21567] lo speed is unknown, defaulting to 1000 [ 1411.402415][T21567] lo speed is unknown, defaulting to 1000 [ 1411.411138][T21604] lo speed is unknown, defaulting to 1000 [ 1411.435989][T21604] lo speed is unknown, defaulting to 1000 [ 1411.992238][T21604] lo speed is unknown, defaulting to 1000 [ 1412.005476][T21612] lo speed is unknown, defaulting to 1000 [ 1412.053674][T21612] lo speed is unknown, defaulting to 1000 [ 1412.386597][T21622] __nla_validate_parse: 20 callbacks suppressed [ 1412.386620][T21622] netlink: 8 bytes leftover after parsing attributes in process `syz.2.18857'. [ 1412.497528][T21620] netlink: 4 bytes leftover after parsing attributes in process `syz.2.18857'. [ 1412.614293][T21612] lo speed is unknown, defaulting to 1000 [ 1415.187457][T21688] netlink: 8 bytes leftover after parsing attributes in process `syz.1.18879'. [ 1415.624638][T21705] bond39: (slave bond_slave_1): Device is not bonding slave [ 1415.633288][T21705] bond39: option active_slave: invalid value (bond_slave_1) [ 1415.671300][T21705] bond39 (unregistering): Released all slaves [ 1416.315164][T21729] validate_nla: 8 callbacks suppressed [ 1416.315188][T21729] netlink: 'syz.4.18892': attribute type 10 has an invalid length. [ 1416.330551][T21729] caif0: left allmulticast mode [ 1416.575945][T21722] lo speed is unknown, defaulting to 1000 [ 1416.610853][T21722] lo speed is unknown, defaulting to 1000 [ 1416.725823][T21742] netlink: 20 bytes leftover after parsing attributes in process `syz.3.18898'. [ 1416.753800][T21742] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1416.761231][T21742] IPv6: NLM_F_CREATE should be set when creating new route [ 1416.768567][T21742] IPv6: NLM_F_CREATE should be set when creating new route [ 1416.824642][T21739] syzkaller1: entered promiscuous mode [ 1416.850785][T21739] syzkaller1: entered allmulticast mode [ 1416.870213][T21722] lo speed is unknown, defaulting to 1000 [ 1417.110764][T21756] netlink: 'syz.4.18903': attribute type 29 has an invalid length. [ 1417.187973][T21759] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1417.300497][T21763] netlink: 'syz.4.18907': attribute type 8 has an invalid length. [ 1417.610081][T21770] netlink: 'syz.4.18909': attribute type 1 has an invalid length. [ 1417.820540][T21775] netlink: 'syz.4.18909': attribute type 1 has an invalid length. [ 1417.968348][T21770] 8021q: adding VLAN 0 to HW filter on device bond33 [ 1418.001488][T21773] bond33: (slave batadv5): Opening slave failed [ 1418.580799][T21787] syzkaller1: entered promiscuous mode [ 1418.586596][T21787] syzkaller1: entered allmulticast mode [ 1418.677030][T21786] syzkaller1: entered promiscuous mode [ 1418.689655][T21786] syzkaller1: entered allmulticast mode [ 1419.433926][T21825] netlink: 8 bytes leftover after parsing attributes in process `syz.4.18931'. [ 1419.455182][T21825] netlink: 'syz.4.18931': attribute type 14 has an invalid length. [ 1419.463152][T21825] netlink: 32 bytes leftover after parsing attributes in process `syz.4.18931'. [ 1419.897160][T21849] netlink: 'syz.4.18941': attribute type 1 has an invalid length. [ 1419.923709][T21849] netlink: 4 bytes leftover after parsing attributes in process `syz.4.18941'. [ 1420.014626][T21851] netlink: 44 bytes leftover after parsing attributes in process `syz.4.18943'. [ 1420.398681][T21874] netlink: 'syz.1.18948': attribute type 13 has an invalid length. [ 1420.413686][T21874] netlink: 'syz.1.18948': attribute type 17 has an invalid length. [ 1420.743217][T13090] lo speed is unknown, defaulting to 1000 [ 1420.940837][T21874] bridge0: left promiscuous mode [ 1420.954917][T21874] bridge0: entered promiscuous mode [ 1420.981030][T21874] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1420.997891][T21874] 8021q: adding VLAN 0 to HW filter on device team0 [ 1421.008883][T21874] net_ratelimit: 27 callbacks suppressed [ 1421.008896][T21874] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1421.037003][T21643] lo speed is unknown, defaulting to 1000 [ 1421.420087][T21898] netlink: 'syz.2.18955': attribute type 1 has an invalid length. [ 1421.443672][T21898] netlink: 224 bytes leftover after parsing attributes in process `syz.2.18955'. [ 1421.553223][T21897] ip6t_rpfilter: unknown options [ 1421.641479][T21905] bond28: option mode: invalid value (254) [ 1421.718627][T21905] bond28 (unregistering): Released all slaves [ 1421.835697][T21920] netlink: 24 bytes leftover after parsing attributes in process `syz.2.18962'. [ 1422.078871][T21927] netlink: 8 bytes leftover after parsing attributes in process `syz.3.18965'. [ 1422.116144][T21927] netlink: 'syz.3.18965': attribute type 14 has an invalid length. [ 1422.141578][T21927] netlink: 32 bytes leftover after parsing attributes in process `syz.3.18965'. [ 1422.170627][T21927] netlink: 'syz.3.18965': attribute type 3 has an invalid length. [ 1422.178866][T21927] netlink: 224 bytes leftover after parsing attributes in process `syz.3.18965'. [ 1422.249393][T21931] netlink: 'syz.1.18967': attribute type 1 has an invalid length. [ 1422.301070][T21931] 8021q: adding VLAN 0 to HW filter on device bond28 [ 1422.469217][T21931] netlink: 'syz.1.18967': attribute type 1 has an invalid length. [ 1422.502419][T21931] bond28: (slave batadv3): Opening slave failed [ 1422.590934][T21943] ip6t_rpfilter: unknown options [ 1422.809407][T21950] netlink: 28 bytes leftover after parsing attributes in process `syz.3.18974'. [ 1423.285260][T21963] syzkaller1: entered promiscuous mode [ 1423.291292][T21963] syzkaller1: entered allmulticast mode [ 1423.459027][ T1301] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1423.475808][ T1301] lec:lec_start_xmit: lec0:No lecd attached [ 1423.482532][ T1301] clip:clip_start_xmit: skb_dst(skb) == NULL [ 1424.801766][T22017] netlink: 'syz.4.18997': attribute type 1 has an invalid length. [ 1424.859349][T22017] 8021q: adding VLAN 0 to HW filter on device bond34 [ 1424.955719][T22025] bond34: (slave veth55): Enslaving as an active interface with a down link [ 1424.995128][T22017] __nla_validate_parse: 6 callbacks suppressed [ 1424.995151][T22017] netlink: 14 bytes leftover after parsing attributes in process `syz.4.18997'. [ 1425.055072][T22025] netlink: 'syz.4.18997': attribute type 1 has an invalid length. [ 1425.063006][T22025] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1425.679588][T22035] lo speed is unknown, defaulting to 1000 [ 1425.700109][T22035] lo speed is unknown, defaulting to 1000 [ 1426.162398][T22035] lo speed is unknown, defaulting to 1000 [ 1426.170786][T22065] rdma_rxe: rxe_newlink: failed to add bond0 [ 1426.417248][T22075] netlink: 'syz.2.19015': attribute type 1 has an invalid length. [ 1426.457284][T22075] 8021q: adding VLAN 0 to HW filter on device bond39 [ 1426.495870][T22075] bond39: (slave veth45): Enslaving as an active interface with a down link [ 1426.520576][T22075] netlink: 14 bytes leftover after parsing attributes in process `syz.2.19015'. [ 1426.531655][T22075] netlink: 'syz.2.19015': attribute type 1 has an invalid length. [ 1426.553712][T22075] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1427.132746][T22079] netlink: 8 bytes leftover after parsing attributes in process `syz.2.19017'. [ 1427.276150][T22084] netlink: 'syz.1.19018': attribute type 13 has an invalid length. [ 1427.284626][T22084] netlink: 'syz.1.19018': attribute type 17 has an invalid length. [ 1427.541291][T22091] netlink: 4 bytes leftover after parsing attributes in process `syz.1.19018'. [ 1427.598650][T21660] lo speed is unknown, defaulting to 1000 [ 1427.610671][T21660] syz2: Port: 1 Link DOWN [ 1427.651636][T22084] bridge0: left promiscuous mode [ 1427.658879][T22084] bridge0: entered promiscuous mode [ 1427.670056][T22084] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1427.685964][T22084] 8021q: adding VLAN 0 to HW filter on device team0 [ 1427.697661][T22084] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1427.726828][T21644] lo speed is unknown, defaulting to 1000 [ 1427.744558][T21644] syz2: Port: 1 Link ACTIVE [ 1427.857251][T22096] netlink: 'syz.2.19022': attribute type 1 has an invalid length. [ 1427.901136][T22096] 8021q: adding VLAN 0 to HW filter on device bond40 [ 1427.982758][T22102] bond40: (slave veth47): Enslaving as an active interface with a down link [ 1427.998332][T22096] netlink: 14 bytes leftover after parsing attributes in process `syz.2.19022'. [ 1428.009872][T22096] netlink: 'syz.2.19022': attribute type 1 has an invalid length. [ 1428.021224][T22096] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1428.543907][T22136] netlink: 'syz.2.19038': attribute type 1 has an invalid length. [ 1428.650558][T22136] 8021q: adding VLAN 0 to HW filter on device bond41 [ 1428.685365][T22136] netlink: 14 bytes leftover after parsing attributes in process `syz.2.19038'. [ 1428.804378][T22149] netlink: 'syz.2.19038': attribute type 1 has an invalid length. [ 1428.835648][T22140] bond41: (slave veth49): Enslaving as an active interface with a down link [ 1428.843573][T22149] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1428.964675][T22135] lo speed is unknown, defaulting to 1000 [ 1428.977017][T22135] lo speed is unknown, defaulting to 1000 [ 1429.099729][T22161] netlink: 8 bytes leftover after parsing attributes in process `syz.2.19047'. [ 1429.126335][T22161] netlink: 'syz.2.19047': attribute type 14 has an invalid length. [ 1429.151942][T22161] netlink: 32 bytes leftover after parsing attributes in process `syz.2.19047'. [ 1429.213485][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5740 ms [ 1429.221591][ C1] lec:lec_tx_timeout: lec0 [ 1429.226521][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 1429.235769][T22163] netlink: 'syz.2.19047': attribute type 3 has an invalid length. [ 1429.243864][T22163] netlink: 224 bytes leftover after parsing attributes in process `syz.2.19047'. [ 1429.379307][T22135] lo speed is unknown, defaulting to 1000 [ 1429.381523][T22167] netlink: 'syz.2.19050': attribute type 1 has an invalid length. [ 1429.502366][T22167] 8021q: adding VLAN 0 to HW filter on device bond42 [ 1429.517393][T22179] netlink: 28 bytes leftover after parsing attributes in process `syz.3.19052'. [ 1429.534771][T22177] bond42: (slave veth51): Enslaving as an active interface with a down link [ 1429.593191][T22174] 8021q: adding VLAN 0 to HW filter on device bond28 [ 1429.635087][T22167] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1429.726752][T22174] bond28: (slave batadv3): Opening slave failed [ 1429.862482][T22190] 8021q: adding VLAN 0 to HW filter on device bond35 [ 1429.939561][T22195] bond43: option mode: invalid value (254) [ 1429.959465][T22195] bond43 (unregistering): Released all slaves [ 1429.984493][T22190] bond35: (slave batadv5): Opening slave failed [ 1430.620920][T18826] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1430.639862][T18826] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1430.653978][T18826] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1430.662921][T18826] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1430.672259][T18826] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1430.803273][ T51] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1430.812568][ T51] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1430.822580][ T51] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1430.831318][ T51] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1430.839593][ T51] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1431.395478][T22235] 8021q: adding VLAN 0 to HW filter on device bond29 [ 1431.445679][T22218] lo speed is unknown, defaulting to 1000 [ 1431.526142][T22235] __nla_validate_parse: 1 callbacks suppressed [ 1431.526165][T22235] netlink: 14 bytes leftover after parsing attributes in process `syz.1.19065'. [ 1431.550030][T22232] bond29: (slave veth39): Enslaving as an active interface with a down link [ 1431.564499][T22218] lo speed is unknown, defaulting to 1000 [ 1431.765180][T22235] validate_nla: 6 callbacks suppressed [ 1431.765214][T22235] netlink: 'syz.1.19065': attribute type 1 has an invalid length. [ 1431.800280][T22235] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1432.021806][T22253] bond43: option mode: invalid value (254) [ 1432.065522][T22253] bond43 (unregistering): Released all slaves [ 1432.180055][T22218] lo speed is unknown, defaulting to 1000 [ 1432.336438][T22268] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 1432.496739][T22274] netlink: 'syz.4.19076': attribute type 1 has an invalid length. [ 1432.659251][T22274] 8021q: adding VLAN 0 to HW filter on device bond36 [ 1432.704057][T22292] netlink: 14 bytes leftover after parsing attributes in process `syz.4.19076'. [ 1432.811345][T22282] bond36: (slave veth57): Enslaving as an active interface with a down link [ 1432.860782][T22282] netlink: 'syz.4.19076': attribute type 1 has an invalid length. [ 1432.877046][T22282] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1432.896143][T22270] lo speed is unknown, defaulting to 1000 [ 1432.904342][T22270] lo speed is unknown, defaulting to 1000 [ 1432.910208][ T51] Bluetooth: hci5: command tx timeout [ 1433.212021][T22218] chnl_net:caif_netlink_parms(): no params data found [ 1433.221026][T22270] lo speed is unknown, defaulting to 1000 [ 1433.815641][T22218] bridge0: port 1(bridge_slave_0) entered blocking state [ 1433.846602][T22218] bridge0: port 1(bridge_slave_0) entered disabled state [ 1433.864082][T22218] bridge_slave_0: entered allmulticast mode [ 1433.938564][T22218] bridge_slave_0: entered promiscuous mode [ 1433.958399][T22218] bridge0: port 2(bridge_slave_1) entered blocking state [ 1433.977113][T22218] bridge0: port 2(bridge_slave_1) entered disabled state [ 1433.986380][T22218] bridge_slave_1: entered allmulticast mode [ 1433.996591][T22218] bridge_slave_1: entered promiscuous mode [ 1434.059741][T22218] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1434.090730][T22218] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1434.253564][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5030 ms [ 1434.261667][ C1] lec:lec_tx_timeout: lec0 [ 1434.288009][T22330] netlink: 'syz.3.19092': attribute type 1 has an invalid length. [ 1434.307700][T22218] team0: Port device team_slave_0 added [ 1434.321835][T22218] team0: Port device team_slave_1 added [ 1434.368283][T22330] 8021q: adding VLAN 0 to HW filter on device bond29 [ 1434.441871][T22332] bond29: (slave veth37): Enslaving as an active interface with a down link [ 1434.458350][T22218] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1434.463635][T22330] netlink: 14 bytes leftover after parsing attributes in process `syz.3.19092'. [ 1434.466159][T22218] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1434.501050][T22218] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1434.521572][T22218] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1434.528820][T22218] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1434.554982][T22218] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1434.570035][T22330] netlink: 'syz.3.19092': attribute type 1 has an invalid length. [ 1434.580107][T22330] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1434.649557][T22218] hsr_slave_0: entered promiscuous mode [ 1434.656830][T22218] hsr_slave_1: entered promiscuous mode [ 1434.683715][T22218] debugfs: 'hsr0' already exists in 'hsr' [ 1434.689544][T22218] Cannot create hsr debugfs directory [ 1434.814324][T22346] netlink: 8 bytes leftover after parsing attributes in process `syz.3.19096'. [ 1434.865754][T22350] netlink: 'syz.3.19096': attribute type 14 has an invalid length. [ 1434.885772][T22350] netlink: 32 bytes leftover after parsing attributes in process `syz.3.19096'. [ 1434.958340][T22346] netlink: 'syz.3.19096': attribute type 3 has an invalid length. [ 1434.966832][T22346] netlink: 224 bytes leftover after parsing attributes in process `syz.3.19096'. [ 1434.977920][ T51] Bluetooth: hci5: command tx timeout [ 1435.204277][T22365] netlink: 8 bytes leftover after parsing attributes in process `syz.4.19105'. [ 1435.240237][T22364] netlink: 8 bytes leftover after parsing attributes in process `syz.3.19106'. [ 1435.240784][T22365] netlink: 'syz.4.19105': attribute type 14 has an invalid length. [ 1435.254143][T22364] sch_tbf: burst 0 is lower than device lo mtu (18) ! [ 1435.267341][T22365] netlink: 32 bytes leftover after parsing attributes in process `syz.4.19105'. [ 1435.305424][T22369] netlink: 'syz.4.19105': attribute type 3 has an invalid length. [ 1435.313822][T22369] netlink: 224 bytes leftover after parsing attributes in process `syz.4.19105'. [ 1435.328588][T22218] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1435.359087][T22218] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1435.476508][T22218] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1435.505267][T22218] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1435.526618][T22218] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1435.564426][T22218] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1435.585108][T22218] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1435.630187][T22218] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1435.701897][T22387] block nbd0: not configured, cannot reconfigure [ 1436.296063][T22218] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1436.354911][T22218] 8021q: adding VLAN 0 to HW filter on device team0 [ 1436.390044][ T82] bridge0: port 1(bridge_slave_0) entered blocking state [ 1436.397324][ T82] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1436.406710][T22409] netlink: 'syz.3.19120': attribute type 1 has an invalid length. [ 1436.438773][T32353] bridge0: port 2(bridge_slave_1) entered blocking state [ 1436.446069][T32353] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1436.554426][T22419] netlink: 8 bytes leftover after parsing attributes in process `syz.1.19121'. [ 1436.574263][T22409] 8021q: adding VLAN 0 to HW filter on device bond30 [ 1436.588142][T22420] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1436.614923][T22422] netlink: 32 bytes leftover after parsing attributes in process `syz.1.19121'. [ 1436.671249][T22423] netlink: 224 bytes leftover after parsing attributes in process `syz.1.19121'. [ 1436.686830][T22414] bond30: (slave veth39): Enslaving as an active interface with a down link [ 1436.872122][T22429] netlink: 24 bytes leftover after parsing attributes in process `syz.1.19124'. [ 1436.958021][T22425] validate_nla: 3 callbacks suppressed [ 1436.958044][T22425] netlink: 'syz.2.19122': attribute type 1 has an invalid length. [ 1437.043179][T22425] 8021q: adding VLAN 0 to HW filter on device bond43 [ 1437.054435][ T51] Bluetooth: hci5: command tx timeout [ 1437.126752][T22436] bond43: (slave veth53): Enslaving as an active interface with a down link [ 1437.223890][T22425] netlink: 14 bytes leftover after parsing attributes in process `syz.2.19122'. [ 1437.246108][T22218] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1437.281506][T22425] netlink: 'syz.2.19122': attribute type 1 has an invalid length. [ 1437.292945][T22425] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1437.657097][T22470] netlink: 24 bytes leftover after parsing attributes in process `syz.4.19135'. [ 1437.711860][T22473] netlink: 'syz.1.19137': attribute type 1 has an invalid length. [ 1437.793819][T22473] 8021q: adding VLAN 0 to HW filter on device bond30 [ 1437.819623][T22484] netlink: 8 bytes leftover after parsing attributes in process `syz.1.19137'. [ 1437.895307][T22484] netlink: 4 bytes leftover after parsing attributes in process `syz.1.19137'. [ 1437.991367][T22492] netlink: 'syz.1.19137': attribute type 1 has an invalid length. [ 1438.062253][T22492] bond30: (slave batadv3): Opening slave failed [ 1438.137652][T22218] veth0_vlan: entered promiscuous mode [ 1438.167651][T22218] veth1_vlan: entered promiscuous mode [ 1438.258962][T22218] veth0_macvtap: entered promiscuous mode [ 1438.298470][T22218] veth1_macvtap: entered promiscuous mode [ 1438.358114][T22218] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1438.393120][T22218] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1438.456653][T32353] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1438.539209][T22509] netlink: 24 bytes leftover after parsing attributes in process `syz.2.19149'. [ 1438.651519][T32353] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1438.715618][T32353] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1438.742128][T32353] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1439.134131][ T51] Bluetooth: hci5: command tx timeout [ 1439.265093][T32353] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1439.290532][T32353] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1439.487441][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1439.498298][T22529] netlink: 'syz.4.19153': attribute type 1 has an invalid length. [ 1439.506412][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1439.571501][T22533] netlink: 8 bytes leftover after parsing attributes in process `syz.3.19155'. [ 1439.636165][T22529] 8021q: adding VLAN 0 to HW filter on device bond37 [ 1439.666752][T22540] netlink: 'syz.3.19155': attribute type 14 has an invalid length. [ 1439.736518][T22533] netlink: 'syz.3.19155': attribute type 3 has an invalid length. [ 1439.775586][T22535] netlink: 'syz.4.19153': attribute type 1 has an invalid length. [ 1439.897521][T22529] bond37: (slave batadv5): Opening slave failed [ 1440.145130][T22552] netlink: 'syz.3.19158': attribute type 1 has an invalid length. [ 1440.178280][T22552] 8021q: adding VLAN 0 to HW filter on device bond31 [ 1440.234997][T22550] bond31: (slave veth41): Enslaving as an active interface with a down link [ 1440.258603][T22558] netlink: 'syz.4.19161': attribute type 14 has an invalid length. [ 1440.264557][T22550] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1441.262840][T22581] 8021q: adding VLAN 0 to HW filter on device bond38 [ 1441.315891][T22581] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1441.470869][T22585] bond38: (slave veth59): Enslaving as an active interface with a down link [ 1441.711459][T22596] tap0: tun_chr_ioctl cmd 2147767521 [ 1441.823058][T22602] 8021q: adding VLAN 0 to HW filter on device bond31 [ 1441.966952][T22607] bond31: (slave batadv3): Opening slave failed [ 1442.237067][T22618] bond44: option mode: invalid value (254) [ 1442.250421][T22618] bond44 (unregistering): Released all slaves [ 1442.917325][T22638] __nla_validate_parse: 8 callbacks suppressed [ 1442.917347][T22638] netlink: 28 bytes leftover after parsing attributes in process `syz.1.19188'. [ 1442.956001][T22638] netlink: 28 bytes leftover after parsing attributes in process `syz.1.19188'. [ 1443.567354][T22660] netlink: 36 bytes leftover after parsing attributes in process `syz.2.19193'. [ 1443.672850][T22666] validate_nla: 6 callbacks suppressed [ 1443.672873][T22666] netlink: 'syz.3.19196': attribute type 33 has an invalid length. [ 1443.708677][T22666] netlink: 212 bytes leftover after parsing attributes in process `syz.3.19196'. [ 1443.724573][T22668] netlink: 8 bytes leftover after parsing attributes in process `syz.5.19197'. [ 1443.739510][T22668] netlink: 'syz.5.19197': attribute type 14 has an invalid length. [ 1443.749082][T22668] netlink: 32 bytes leftover after parsing attributes in process `syz.5.19197'. [ 1443.767194][T22668] netlink: 'syz.5.19197': attribute type 3 has an invalid length. [ 1443.776114][T22668] netlink: 224 bytes leftover after parsing attributes in process `syz.5.19197'. [ 1443.841588][T22673] netlink: 228 bytes leftover after parsing attributes in process `syz.4.19199'. [ 1443.979696][T22677] bond44: option mode: invalid value (254) [ 1443.998560][T22677] bond44 (unregistering): Released all slaves [ 1444.057531][T32353] tipc: Resetting bearer [ 1444.370605][T22703] netlink: 'syz.4.19207': attribute type 1 has an invalid length. [ 1444.422111][T22703] 8021q: adding VLAN 0 to HW filter on device bond39 [ 1444.488911][T22699] bond39: (slave veth61): Enslaving as an active interface with a down link [ 1444.504038][T22699] netlink: 14 bytes leftover after parsing attributes in process `syz.4.19207'. [ 1444.515224][T22699] netlink: 'syz.4.19207': attribute type 1 has an invalid length. [ 1444.524578][T22699] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1444.765053][T22718] syzkaller0: entered promiscuous mode [ 1444.774076][T22718] syzkaller0: entered allmulticast mode [ 1444.790917][T22718] netlink: 'syz.5.19214': attribute type 33 has an invalid length. [ 1444.800994][T22718] netlink: 212 bytes leftover after parsing attributes in process `syz.5.19214'. [ 1444.950050][T22735] netlink: 'syz.3.19222': attribute type 14 has an invalid length. [ 1444.967591][T22735] netlink: 'syz.3.19222': attribute type 3 has an invalid length. [ 1445.312703][T22746] netlink: 'syz.4.19225': attribute type 1 has an invalid length. [ 1445.377803][T22746] 8021q: adding VLAN 0 to HW filter on device bond40 [ 1445.430550][T22745] bond40: (slave veth63): Enslaving as an active interface with a down link [ 1445.468163][T22745] netlink: 'syz.4.19225': attribute type 1 has an invalid length. [ 1445.498148][T22745] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1445.582672][T22753] bond32 (unregistering): Released all slaves [ 1446.500190][T22780] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1446.888990][T22812] bond41: option mode: invalid value (254) [ 1446.905940][T22812] bond41 (unregistering): Released all slaves [ 1448.011089][T22859] bond41: option mode: invalid value (254) [ 1448.050909][T22859] bond41 (unregistering): Released all slaves [ 1448.421577][T22877] __nla_validate_parse: 21 callbacks suppressed [ 1448.421600][T22877] netlink: 28 bytes leftover after parsing attributes in process `syz.1.19271'. [ 1448.454011][T22877] netlink: 28 bytes leftover after parsing attributes in process `syz.1.19271'. [ 1448.482222][T22879] netlink: 28 bytes leftover after parsing attributes in process `syz.5.19272'. [ 1448.492070][T22879] netlink: 28 bytes leftover after parsing attributes in process `syz.5.19272'. [ 1448.768359][T22889] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1448.862462][T22889] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1448.976062][T22889] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1449.076170][T22889] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1449.347489][T11801] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1449.379661][T32353] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1449.429932][T30351] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1449.467493][T30351] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1449.477220][T22907] netlink: 8 bytes leftover after parsing attributes in process `syz.1.19280'. [ 1449.546302][T22912] bond41: option mode: invalid value (254) [ 1449.571880][T22912] bond41 (unregistering): Released all slaves [ 1450.240772][T22953] netlink: 28 bytes leftover after parsing attributes in process `syz.5.19295'. [ 1450.294965][T22953] netlink: 28 bytes leftover after parsing attributes in process `syz.5.19295'. [ 1450.481223][T22964] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1450.596309][T22964] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1450.695614][T22964] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1450.740051][T22979] netlink: 8 bytes leftover after parsing attributes in process `syz.4.19302'. [ 1450.775668][T22964] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1450.972117][T22989] netlink: 36 bytes leftover after parsing attributes in process `syz.2.19303'. [ 1451.425474][T23007] netlink: 8 bytes leftover after parsing attributes in process `syz.1.19310'. [ 1451.446151][T23007] validate_nla: 4 callbacks suppressed [ 1451.446174][T23007] netlink: 'syz.1.19310': attribute type 14 has an invalid length. [ 1451.465523][T23007] netlink: 'syz.1.19310': attribute type 3 has an invalid length. [ 1451.673261][T23014] syzkaller0: entered promiscuous mode [ 1451.689963][T23014] syzkaller0: entered allmulticast mode [ 1452.129871][T23030] netlink: 'syz.3.19320': attribute type 1 has an invalid length. [ 1452.195260][T23030] 8021q: adding VLAN 0 to HW filter on device bond32 [ 1452.236154][T23025] netlink: 'syz.3.19320': attribute type 1 has an invalid length. [ 1452.245369][T23025] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1452.323337][T23041] netlink: 'syz.4.19324': attribute type 14 has an invalid length. [ 1452.338385][T23041] netlink: 'syz.4.19324': attribute type 3 has an invalid length. [ 1452.560348][T23053] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 1452.929215][T23048] lo speed is unknown, defaulting to 1000 [ 1452.938150][T23048] lo speed is unknown, defaulting to 1000 [ 1453.253605][T23067] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 1453.361265][T23048] lo speed is unknown, defaulting to 1000 [ 1453.490634][T23070] netlink: 'syz.2.19335': attribute type 1 has an invalid length. [ 1453.532512][T32353] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1453.581091][T23070] 8021q: adding VLAN 0 to HW filter on device bond44 [ 1453.624561][T23070] __nla_validate_parse: 6 callbacks suppressed [ 1453.624584][T23070] netlink: 14 bytes leftover after parsing attributes in process `syz.2.19335'. [ 1453.648985][T32353] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1453.660461][T23066] lo speed is unknown, defaulting to 1000 [ 1453.711718][T23066] lo speed is unknown, defaulting to 1000 [ 1453.712294][T23070] netlink: 'syz.2.19335': attribute type 1 has an invalid length. [ 1453.737550][T11801] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1453.738593][T23070] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1453.842359][T11801] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1454.084871][T23080] netlink: 8 bytes leftover after parsing attributes in process `syz.2.19338'. [ 1454.234614][T23066] lo speed is unknown, defaulting to 1000 [ 1454.490357][T23091] netlink: 'syz.1.19341': attribute type 12 has an invalid length. [ 1454.514144][T23091] netlink: 'syz.1.19341': attribute type 29 has an invalid length. [ 1454.524289][T23091] netlink: 148 bytes leftover after parsing attributes in process `syz.1.19341'. [ 1455.265112][T23092] lo speed is unknown, defaulting to 1000 [ 1455.278968][T23092] lo speed is unknown, defaulting to 1000 [ 1455.870510][T23113] 8021q: adding VLAN 0 to HW filter on device bond45 [ 1455.887191][T23127] netlink: 14 bytes leftover after parsing attributes in process `syz.2.19346'. [ 1455.925208][T23113] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1455.950167][T23092] lo speed is unknown, defaulting to 1000 [ 1456.551735][T23144] validate_nla: 4 callbacks suppressed [ 1456.551760][T23144] netlink: 'syz.1.19355': attribute type 12 has an invalid length. [ 1457.059322][T23166] netlink: 36 bytes leftover after parsing attributes in process `syz.3.19359'. [ 1457.325278][T23140] lo speed is unknown, defaulting to 1000 [ 1457.419501][T23170] bond32: option mode: invalid value (254) [ 1457.439844][T23170] bond32 (unregistering): Released all slaves [ 1457.514985][T23140] lo speed is unknown, defaulting to 1000 [ 1457.681460][T23178] bond41: (slave bond_slave_1): Device is not bonding slave [ 1457.689110][T23178] bond41: option active_slave: invalid value (bond_slave_1) [ 1457.699401][T23178] bond41 (unregistering): Released all slaves [ 1457.762230][T23181] netlink: 8 bytes leftover after parsing attributes in process `syz.1.19363'. [ 1458.097786][T23140] lo speed is unknown, defaulting to 1000 [ 1458.476625][T23201] block nbd3: NBD_DISCONNECT [ 1458.502930][T23201] block nbd3: shutting down sockets [ 1459.516674][T23239] netlink: 'syz.3.19386': attribute type 1 has an invalid length. [ 1459.640114][T23239] 8021q: adding VLAN 0 to HW filter on device bond33 [ 1459.682733][T23243] netlink: 28 bytes leftover after parsing attributes in process `syz.1.19387'. [ 1459.692283][T23243] netlink: 28 bytes leftover after parsing attributes in process `syz.1.19387'. [ 1459.693712][T23239] netlink: 'syz.3.19386': attribute type 1 has an invalid length. [ 1459.761016][T23239] bond33: (slave batadv3): Opening slave failed [ 1460.065932][T23255] netlink: 8 bytes leftover after parsing attributes in process `syz.3.19392'. [ 1460.613998][T23278] netlink: 'syz.2.19397': attribute type 1 has an invalid length. [ 1460.705176][T23278] 8021q: adding VLAN 0 to HW filter on device bond46 [ 1460.771694][T23292] netlink: 14 bytes leftover after parsing attributes in process `syz.2.19397'. [ 1460.787191][T23293] netlink: 8 bytes leftover after parsing attributes in process `syz.1.19401'. [ 1460.854690][T23297] netlink: 'syz.1.19401': attribute type 3 has an invalid length. [ 1460.862676][T23297] netlink: 224 bytes leftover after parsing attributes in process `syz.1.19401'. [ 1460.888376][T23280] bond46: (slave veth55): Enslaving as an active interface with a down link [ 1460.984320][T23278] netlink: 'syz.2.19397': attribute type 1 has an invalid length. [ 1460.992248][T23278] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1461.082931][T23303] ip6t_rpfilter: unknown options [ 1461.362063][T23324] netlink: 8 bytes leftover after parsing attributes in process `syz.4.19413'. [ 1461.399380][T23324] netlink: 'syz.4.19413': attribute type 14 has an invalid length. [ 1461.426334][T23324] netlink: 32 bytes leftover after parsing attributes in process `syz.4.19413'. [ 1461.451364][T23324] netlink: 'syz.4.19413': attribute type 3 has an invalid length. [ 1461.471216][T23324] netlink: 224 bytes leftover after parsing attributes in process `syz.4.19413'. [ 1461.679362][T23337] netlink: 12 bytes leftover after parsing attributes in process `syz.4.19418'. [ 1461.737487][T23337] syz_tun: Device is already in use. [ 1461.795320][T23308] lo speed is unknown, defaulting to 1000 [ 1461.814188][T23308] lo speed is unknown, defaulting to 1000 [ 1462.501193][T23308] lo speed is unknown, defaulting to 1000 [ 1463.084452][T23375] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1463.357835][T23388] netlink: 'syz.1.19434': attribute type 3 has an invalid length. [ 1464.930711][T23441] syzkaller1: entered promiscuous mode [ 1464.944174][T23441] syzkaller1: entered allmulticast mode [ 1465.275795][T23432] lo speed is unknown, defaulting to 1000 [ 1465.291580][T23432] lo speed is unknown, defaulting to 1000 [ 1465.774766][T23432] lo speed is unknown, defaulting to 1000 [ 1466.110166][T23468] lo speed is unknown, defaulting to 1000 [ 1466.122570][T23468] lo speed is unknown, defaulting to 1000 [ 1466.380177][T23486] __nla_validate_parse: 5 callbacks suppressed [ 1466.380199][T23486] netlink: 8 bytes leftover after parsing attributes in process `syz.3.19464'. [ 1466.515716][T23491] netlink: 8 bytes leftover after parsing attributes in process `syz.2.19463'. [ 1466.529143][T23491] netlink: 'syz.2.19463': attribute type 3 has an invalid length. [ 1466.541748][T23491] netlink: 224 bytes leftover after parsing attributes in process `syz.2.19463'. [ 1466.736154][T23500] netlink: 'syz.1.19471': attribute type 3 has an invalid length. [ 1466.751197][T23500] netlink: 224 bytes leftover after parsing attributes in process `syz.1.19471'. [ 1467.256300][T23468] lo speed is unknown, defaulting to 1000 [ 1467.443289][T23517] netlink: 'syz.4.19476': attribute type 33 has an invalid length. [ 1467.468630][T23521] netlink: 8 bytes leftover after parsing attributes in process `syz.1.19478'. [ 1467.478955][T23517] netlink: 212 bytes leftover after parsing attributes in process `syz.4.19476'. [ 1467.604076][T23525] netlink: 'syz.3.19479': attribute type 3 has an invalid length. [ 1467.615789][T23525] netlink: 224 bytes leftover after parsing attributes in process `syz.3.19479'. [ 1467.830647][T23529] netlink: 'syz.4.19481': attribute type 1 has an invalid length. [ 1467.927912][T23536] netlink: 'syz.1.19483': attribute type 1 has an invalid length. [ 1467.943952][T23529] 8021q: adding VLAN 0 to HW filter on device bond41 [ 1468.011750][T23536] 8021q: adding VLAN 0 to HW filter on device bond32 [ 1468.023734][T23507] lo speed is unknown, defaulting to 1000 [ 1468.031447][T23529] netlink: 'syz.4.19481': attribute type 1 has an invalid length. [ 1468.047205][T23507] lo speed is unknown, defaulting to 1000 [ 1468.058698][T23536] netlink: 'syz.1.19483': attribute type 1 has an invalid length. [ 1468.074264][T23529] bond41: (slave batadv5): Opening slave failed [ 1468.160182][T23536] bond32: (slave batadv3): Opening slave failed [ 1468.577996][T23507] lo speed is unknown, defaulting to 1000 [ 1469.037824][T23561] netlink: 'syz.5.19491': attribute type 33 has an invalid length. [ 1469.047059][T23561] netlink: 212 bytes leftover after parsing attributes in process `syz.5.19491'. [ 1469.216755][T23563] netlink: 'syz.5.19492': attribute type 3 has an invalid length. [ 1469.224995][T23563] netlink: 224 bytes leftover after parsing attributes in process `syz.5.19492'. [ 1469.489870][T23575] netlink: 'syz.4.19496': attribute type 1 has an invalid length. [ 1469.563330][T23575] 8021q: adding VLAN 0 to HW filter on device bond42 [ 1469.620281][T23581] bond47: option mode: invalid value (254) [ 1469.625408][T23575] netlink: 'syz.4.19496': attribute type 1 has an invalid length. [ 1469.647032][T23581] bond47 (unregistering): Released all slaves [ 1469.701058][T23575] bond42: (slave batadv5): Opening slave failed [ 1469.961982][T23598] netlink: 8 bytes leftover after parsing attributes in process `syz.1.19502'. [ 1470.137489][T23608] netlink: 'syz.2.19507': attribute type 14 has an invalid length. [ 1470.169873][T23608] netlink: 'syz.2.19507': attribute type 3 has an invalid length. [ 1470.282821][T23612] netlink: 'syz.3.19510': attribute type 1 has an invalid length. [ 1470.356031][T23612] 8021q: adding VLAN 0 to HW filter on device bond34 [ 1470.444785][T23621] bond34: (slave veth43): Enslaving as an active interface with a down link [ 1470.493308][T23612] netlink: 'syz.3.19510': attribute type 1 has an invalid length. [ 1470.508310][T23612] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1470.538603][T23604] syzkaller1: entered promiscuous mode [ 1470.544692][T23604] syzkaller1: entered allmulticast mode [ 1470.916240][T23641] netlink: 'syz.4.19517': attribute type 3 has an invalid length. [ 1471.075083][T23642] bond35: option mode: invalid value (254) [ 1471.095936][T23642] bond35 (unregistering): Released all slaves [ 1471.235935][T23657] netlink: 'syz.1.19521': attribute type 1 has an invalid length. [ 1471.432917][T23663] __nla_validate_parse: 6 callbacks suppressed [ 1471.432940][T23663] netlink: 224 bytes leftover after parsing attributes in process `syz.4.19522'. [ 1471.516470][T23657] 8021q: adding VLAN 0 to HW filter on device bond33 [ 1471.618669][T23660] bond33: (slave batadv3): Opening slave failed [ 1471.873302][T23681] tls_set_device_offload: netdev not found [ 1472.160200][T23653] lo speed is unknown, defaulting to 1000 [ 1472.169247][T23653] lo speed is unknown, defaulting to 1000 [ 1472.438088][T23693] bond43: option mode: invalid value (254) [ 1472.466988][T23693] bond43 (unregistering): Released all slaves [ 1472.540592][T23685] lo speed is unknown, defaulting to 1000 [ 1472.601648][T23685] lo speed is unknown, defaulting to 1000 [ 1472.612945][T23653] lo speed is unknown, defaulting to 1000 [ 1473.036445][T23705] bond3: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1473.058308][T23705] bond3: (slave lo): Enslaving as an active interface with an up link [ 1473.116453][T23705] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 1473.148261][T21643] lo speed is unknown, defaulting to 1000 [ 1473.148286][T21658] lo speed is unknown, defaulting to 1000 [ 1473.160016][T21659] lo speed is unknown, defaulting to 1000 [ 1473.246948][T23709] netlink: 224 bytes leftover after parsing attributes in process `syz.3.19537'. [ 1473.338840][T23685] lo speed is unknown, defaulting to 1000 [ 1474.991983][T23743] 8021q: adding VLAN 0 to HW filter on device batadv3 [ 1475.217420][T23747] validate_nla: 3 callbacks suppressed [ 1475.217442][T23747] netlink: 'syz.1.19551': attribute type 3 has an invalid length. [ 1475.237885][T23747] netlink: 224 bytes leftover after parsing attributes in process `syz.1.19551'. [ 1475.292692][T23751] "syz.2.19552" (23751) uses obsolete ecb(arc4) skcipher [ 1475.542964][T23763] netlink: 'syz.4.19555': attribute type 25 has an invalid length. [ 1475.551413][T23763] netlink: 4 bytes leftover after parsing attributes in process `syz.4.19555'. [ 1475.572073][T23763] netlink: 'syz.4.19555': attribute type 25 has an invalid length. [ 1475.592035][T23763] netlink: 4 bytes leftover after parsing attributes in process `syz.4.19555'. [ 1476.443821][T23782] lo speed is unknown, defaulting to 1000 [ 1476.451851][T23782] lo speed is unknown, defaulting to 1000 [ 1476.684682][T23782] lo speed is unknown, defaulting to 1000 [ 1477.168475][T23803] lo speed is unknown, defaulting to 1000 [ 1477.176638][T23803] lo speed is unknown, defaulting to 1000 [ 1477.206124][T23813] ip6gre1: entered promiscuous mode [ 1477.211587][T23813] ip6gre1: entered allmulticast mode [ 1477.301033][T23815] A link change request failed with some changes committed already. Interface gre1 may have been left with an inconsistent configuration, please check. [ 1477.389031][T23817] syzkaller0: entered promiscuous mode [ 1477.395600][T23817] syzkaller0: entered allmulticast mode [ 1477.407630][T23817] netlink: 'syz.5.19574': attribute type 33 has an invalid length. [ 1477.417521][T23817] netlink: 212 bytes leftover after parsing attributes in process `syz.5.19574'. [ 1477.464271][T23803] lo speed is unknown, defaulting to 1000 [ 1478.555616][T23806] lo speed is unknown, defaulting to 1000 [ 1478.594029][T23806] lo speed is unknown, defaulting to 1000 [ 1478.849528][T23853] netlink: 'syz.2.19584': attribute type 8 has an invalid length. [ 1478.881825][T23853] netlink: 4 bytes leftover after parsing attributes in process `syz.2.19584'. [ 1478.958161][T23853] erspan0: entered promiscuous mode [ 1478.989033][T23853] erspan0: left promiscuous mode [ 1479.056109][T23856] syzkaller0: entered promiscuous mode [ 1479.076259][T23856] syzkaller0: entered allmulticast mode [ 1479.108493][T23856] netlink: 'syz.1.19585': attribute type 33 has an invalid length. [ 1479.117489][T23856] netlink: 212 bytes leftover after parsing attributes in process `syz.1.19585'. [ 1479.229072][T23859] netlink: 'syz.2.19587': attribute type 8 has an invalid length. [ 1479.271809][T23859] netlink: 4 bytes leftover after parsing attributes in process `syz.2.19587'. [ 1479.367595][T23806] lo speed is unknown, defaulting to 1000 [ 1479.386987][T23864] netlink: 'syz.1.19588': attribute type 12 has an invalid length. [ 1479.407055][T23864] netlink: 'syz.1.19588': attribute type 29 has an invalid length. [ 1479.428505][T23864] netlink: 148 bytes leftover after parsing attributes in process `syz.1.19588'. [ 1479.448193][T23864] netlink: 'syz.1.19588': attribute type 2 has an invalid length. [ 1479.933008][T23872] 8021q: adding VLAN 0 to HW filter on device bond34 [ 1479.948329][T23879] netlink: 14 bytes leftover after parsing attributes in process `syz.1.19590'. [ 1479.983378][T23851] lo speed is unknown, defaulting to 1000 [ 1479.991294][T23872] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1480.229218][T30351] nci: nci_extract_activation_params_nfc_dep: unsupported activation_rf_tech_and_mode 0x1 [ 1480.375698][T23890] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 1480.442736][T23869] lo speed is unknown, defaulting to 1000 [ 1480.505916][T23869] lo speed is unknown, defaulting to 1000 [ 1480.987664][T23903] validate_nla: 3 callbacks suppressed [ 1480.987684][T23903] netlink: 'syz.5.19598': attribute type 33 has an invalid length. [ 1481.023681][T23893] lo speed is unknown, defaulting to 1000 [ 1481.024474][T23903] netlink: 212 bytes leftover after parsing attributes in process `syz.5.19598'. [ 1481.055663][T23869] lo speed is unknown, defaulting to 1000 [ 1481.058729][T23851] lo speed is unknown, defaulting to 1000 [ 1481.222952][T23906] netlink: 'syz.5.19599': attribute type 29 has an invalid length. [ 1481.245165][T23907] netlink: 'syz.5.19599': attribute type 29 has an invalid length. [ 1481.263698][T23906] netlink: 'syz.5.19599': attribute type 32 has an invalid length. [ 1481.271953][T23906] netlink: 500 bytes leftover after parsing attributes in process `syz.5.19599'. [ 1481.355903][T23909] netlink: 'syz.5.19600': attribute type 1 has an invalid length. [ 1481.392537][T23909] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1481.409113][T23909] netlink: 'syz.5.19600': attribute type 1 has an invalid length. [ 1481.427729][T23909] bond1: (slave batadv1): Opening slave failed [ 1481.445167][T23893] lo speed is unknown, defaulting to 1000 [ 1481.895671][T23893] lo speed is unknown, defaulting to 1000 [ 1481.919257][T23851] lo speed is unknown, defaulting to 1000 [ 1482.138737][T23924] netlink: 28 bytes leftover after parsing attributes in process `syz.4.19604'. [ 1482.156302][T23924] netlink: 28 bytes leftover after parsing attributes in process `syz.4.19604'. [ 1483.141556][T23944] netlink: 'syz.2.19609': attribute type 33 has an invalid length. [ 1483.162254][T23944] netlink: 212 bytes leftover after parsing attributes in process `syz.2.19609'. [ 1483.351912][T23948] netlink: 'syz.4.19611': attribute type 1 has an invalid length. [ 1483.481834][T23957] netlink: 28 bytes leftover after parsing attributes in process `syz.2.19612'. [ 1483.491958][T23957] netlink: 28 bytes leftover after parsing attributes in process `syz.2.19612'. [ 1483.503868][T23958] netlink: 'syz.4.19611': attribute type 1 has an invalid length. [ 1483.517316][T23948] 8021q: adding VLAN 0 to HW filter on device bond43 [ 1483.602820][T23948] bond43: (slave batadv5): Opening slave failed [ 1484.204227][T23977] syzkaller1: entered promiscuous mode [ 1484.209912][T23977] syzkaller1: entered allmulticast mode [ 1484.402057][T23982] netlink: 68 bytes leftover after parsing attributes in process `syz.5.19619'. [ 1484.447188][T23990] bridge12: entered promiscuous mode [ 1484.452573][T23990] bridge12: entered allmulticast mode [ 1484.479093][T23990] team0: Failed to send port change of device bridge12 via netlink (err -105) [ 1484.490518][T23990] team0: Failed to send options change via netlink (err -105) [ 1484.500350][T23990] team0: Port device bridge12 added [ 1484.707781][T24002] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 1484.761457][T24004] netlink: 'syz.1.19625': attribute type 1 has an invalid length. [ 1484.898579][ T1301] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1484.913227][ T1301] lec:lec_start_xmit: lec0:No lecd attached [ 1484.923005][ T1301] clip:clip_start_xmit: skb_dst(skb) == NULL [ 1484.981944][T24004] 8021q: adding VLAN 0 to HW filter on device bond35 [ 1485.001786][T24014] bond35: (slave batadv4): Opening slave failed [ 1485.216717][T23996] lo speed is unknown, defaulting to 1000 [ 1485.224754][T23996] lo speed is unknown, defaulting to 1000 [ 1485.682425][T24039] syzkaller1: entered promiscuous mode [ 1485.697631][T24039] syzkaller1: entered allmulticast mode [ 1485.754213][T24041] netlink: 36 bytes leftover after parsing attributes in process `syz.3.19633'. [ 1485.774623][T23996] lo speed is unknown, defaulting to 1000 [ 1485.861330][T24046] netlink: 224 bytes leftover after parsing attributes in process `syz.3.19635'. [ 1485.940732][T24049] netlink: 28 bytes leftover after parsing attributes in process `syz.2.19634'. [ 1485.950204][T24049] netlink: 28 bytes leftover after parsing attributes in process `syz.2.19634'. [ 1486.307672][T24032] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1486.526271][T24062] netlink: 8 bytes leftover after parsing attributes in process `syz.1.19637'. [ 1487.672299][T24095] validate_nla: 2 callbacks suppressed [ 1487.672322][T24095] netlink: 'syz.1.19646': attribute type 3 has an invalid length. [ 1487.688068][T24095] netlink: 224 bytes leftover after parsing attributes in process `syz.1.19646'. [ 1487.759818][T24079] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1488.188707][T24110] bond35: option mode: invalid value (254) [ 1488.265397][T24120] netlink: 'syz.2.19650': attribute type 1 has an invalid length. [ 1488.275042][T24120] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1488.330190][T24110] bond35 (unregistering): Released all slaves [ 1488.628242][T24126] mac80211_hwsim hwsim4 syzkaller0: left promiscuous mode [ 1488.635997][T24126] mac80211_hwsim hwsim4 syzkaller0: left allmulticast mode [ 1488.885701][T24134] netlink: 'syz.2.19656': attribute type 3 has an invalid length. [ 1488.913650][T24134] __nla_validate_parse: 1 callbacks suppressed [ 1488.913674][T24134] netlink: 224 bytes leftover after parsing attributes in process `syz.2.19656'. [ 1489.168511][T24142] netlink: 4 bytes leftover after parsing attributes in process `syz.1.19657'. [ 1489.214911][T24145] netlink: 8 bytes leftover after parsing attributes in process `syz.1.19657'. [ 1489.749734][T24155] bond47: option mode: invalid value (254) [ 1489.798654][T24155] bond47 (unregistering): Released all slaves [ 1490.132740][T24180] netlink: 'syz.3.19669': attribute type 3 has an invalid length. [ 1490.162937][T24180] netlink: 224 bytes leftover after parsing attributes in process `syz.3.19669'. [ 1490.260134][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5340 ms [ 1490.268252][ C1] lec:lec_tx_timeout: lec0 [ 1490.273908][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 1494.074562][T24226] netlink: 'syz.5.19683': attribute type 1 has an invalid length. [ 1494.197727][T24226] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1494.219772][T24226] netlink: 14 bytes leftover after parsing attributes in process `syz.5.19683'. [ 1494.231263][T24226] netlink: 'syz.5.19683': attribute type 1 has an invalid length. [ 1494.242352][T24226] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1494.290444][T24230] bond2: (slave veth3): Enslaving as an active interface with a down link [ 1494.307209][T24236] syzkaller1: entered promiscuous mode [ 1494.313109][T24236] syzkaller1: entered allmulticast mode [ 1494.595442][T24253] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 1494.658442][T24198] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1494.812892][T24248] lo speed is unknown, defaulting to 1000 [ 1494.821301][T24248] lo speed is unknown, defaulting to 1000 [ 1495.283502][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 1495.291655][ C1] lec:lec_tx_timeout: lec0 [ 1495.469360][T24248] lo speed is unknown, defaulting to 1000 [ 1495.520266][T24268] lo speed is unknown, defaulting to 1000 [ 1495.545529][T24274] netlink: 'syz.4.19697': attribute type 1 has an invalid length. [ 1495.558704][T24268] lo speed is unknown, defaulting to 1000 [ 1495.610226][T24274] 8021q: adding VLAN 0 to HW filter on device bond44 [ 1495.715669][T24280] netlink: 14 bytes leftover after parsing attributes in process `syz.4.19697'. [ 1495.860954][T24277] bond44: (slave veth65): Enslaving as an active interface with a down link [ 1495.893102][T24274] netlink: 'syz.4.19697': attribute type 1 has an invalid length. [ 1495.903157][T24268] lo speed is unknown, defaulting to 1000 [ 1495.911828][T24274] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1496.200300][T24288] netlink: 8 bytes leftover after parsing attributes in process `syz.5.19700'. [ 1496.560755][T24306] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 1496.628304][T24305] netlink: 8 bytes leftover after parsing attributes in process `syz.5.19705'. [ 1496.708479][T24300] syzkaller1: entered promiscuous mode [ 1496.716921][T24300] syzkaller1: entered allmulticast mode [ 1497.648633][T24304] lo speed is unknown, defaulting to 1000 [ 1497.719575][T24304] lo speed is unknown, defaulting to 1000 [ 1498.456687][T24304] lo speed is unknown, defaulting to 1000 [ 1498.912728][T24318] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1499.244304][T24348] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 1499.921989][T24352] lo speed is unknown, defaulting to 1000 [ 1499.945170][T24352] lo speed is unknown, defaulting to 1000 [ 1500.517590][T24361] lo speed is unknown, defaulting to 1000 [ 1500.726664][T24352] lo speed is unknown, defaulting to 1000 [ 1500.726720][T24361] lo speed is unknown, defaulting to 1000 [ 1500.926852][T24390] netlink: 'syz.1.19727': attribute type 2 has an invalid length. [ 1500.953734][T24390] netlink: 'syz.1.19727': attribute type 1 has an invalid length. [ 1501.419193][T24361] lo speed is unknown, defaulting to 1000 [ 1501.426423][T24372] lo speed is unknown, defaulting to 1000 [ 1501.447909][T24372] lo speed is unknown, defaulting to 1000 [ 1502.134783][T24372] lo speed is unknown, defaulting to 1000 [ 1502.264538][T24410] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 1502.273160][T24410] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1502.290418][T24410] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1502.343924][T24410] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1502.438542][T24410] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1502.453745][T24410] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1502.462500][T24410] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1502.480760][T24410] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1502.503873][T24410] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1502.512424][T24410] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1502.521807][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1503.130944][T24412] lo speed is unknown, defaulting to 1000 [ 1503.145719][T24419] netlink: 19 bytes leftover after parsing attributes in process `syz.3.19736'. [ 1503.166055][T24412] lo speed is unknown, defaulting to 1000 [ 1503.734501][T24412] lo speed is unknown, defaulting to 1000 [ 1503.967038][T24430] lo speed is unknown, defaulting to 1000 [ 1503.983819][T24430] lo speed is unknown, defaulting to 1000 [ 1504.437686][T24431] lo speed is unknown, defaulting to 1000 [ 1504.456254][T24430] lo speed is unknown, defaulting to 1000 [ 1504.464747][T24431] lo speed is unknown, defaulting to 1000 [ 1505.244618][T24431] lo speed is unknown, defaulting to 1000 [ 1506.088135][T24461] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 1506.179446][T24470] netlink: 16 bytes leftover after parsing attributes in process `syz.1.19748'. [ 1506.232921][T24470] netlink: 64 bytes leftover after parsing attributes in process `syz.1.19748'. [ 1506.264192][T24470] netlink: 'syz.1.19748': attribute type 3 has an invalid length. [ 1506.272574][T24470] netlink: 224 bytes leftover after parsing attributes in process `syz.1.19748'. [ 1506.409718][T24472] netlink: 36 bytes leftover after parsing attributes in process `syz.1.19749'. [ 1506.888266][T24482] netlink: 8 bytes leftover after parsing attributes in process `syz.3.19753'. [ 1507.049825][T24488] netlink: 12 bytes leftover after parsing attributes in process `syz.1.19755'. [ 1507.069357][T24464] lo speed is unknown, defaulting to 1000 [ 1507.092415][T24464] lo speed is unknown, defaulting to 1000 [ 1507.112599][T24488] netlink: 'syz.1.19755': attribute type 1 has an invalid length. [ 1507.143134][T24488] netlink: 92 bytes leftover after parsing attributes in process `syz.1.19755'. [ 1507.367294][T24498] netlink: 'syz.3.19757': attribute type 4 has an invalid length. [ 1507.667843][T24467] lo speed is unknown, defaulting to 1000 [ 1507.687401][T24502] netlink: 8 bytes leftover after parsing attributes in process `syz.3.19761'. [ 1507.702977][T24464] lo speed is unknown, defaulting to 1000 [ 1507.710309][T24467] lo speed is unknown, defaulting to 1000 [ 1508.116158][T24511] ip6t_rpfilter: unknown options [ 1508.244976][T24467] lo speed is unknown, defaulting to 1000 [ 1508.488857][T24522] bond27: entered allmulticast mode [ 1508.502926][T24522] gre5: entered allmulticast mode [ 1508.641129][T24521] bond27: left allmulticast mode [ 1508.660327][T24521] gre5: left allmulticast mode [ 1509.002048][T24537] netlink: 12 bytes leftover after parsing attributes in process `syz.3.19772'. [ 1509.041732][T24534] netlink: 16 bytes leftover after parsing attributes in process `syz.2.19770'. [ 1509.835750][T24549] ip6t_rpfilter: unknown options [ 1509.866904][T24553] netlink: 'syz.1.19778': attribute type 1 has an invalid length. [ 1509.968639][T24553] bond36: entered promiscuous mode [ 1509.979253][T24553] 8021q: adding VLAN 0 to HW filter on device bond36 [ 1510.019444][T24557] bond36: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1510.032537][T24557] bond36: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 1510.043336][T24557] bond36: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 1510.394561][T24573] netlink: 28 bytes leftover after parsing attributes in process `syz.5.19783'. [ 1510.404362][T24573] netlink: 28 bytes leftover after parsing attributes in process `syz.5.19783'. [ 1510.558682][T24587] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1510.568759][T24588] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 1510.622280][T24587] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1510.696449][T24587] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1510.788030][T24587] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1511.107175][ T77] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1511.146686][ T77] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1511.191275][ T77] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1511.232364][T24604] ip6t_rpfilter: unknown options [ 1511.271569][T24586] lo speed is unknown, defaulting to 1000 [ 1511.310064][T30351] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1511.385224][T24607] netlink: 4 bytes leftover after parsing attributes in process `syz.1.19792'. [ 1511.395401][T24586] lo speed is unknown, defaulting to 1000 [ 1511.702602][T24594] lo speed is unknown, defaulting to 1000 [ 1512.012997][T24594] lo speed is unknown, defaulting to 1000 [ 1512.027031][T24586] lo speed is unknown, defaulting to 1000 [ 1512.217662][T24613] lo speed is unknown, defaulting to 1000 [ 1512.427898][T24613] lo speed is unknown, defaulting to 1000 [ 1512.752356][T24594] lo speed is unknown, defaulting to 1000 [ 1512.780668][T24613] lo speed is unknown, defaulting to 1000 [ 1513.147028][T24646] netlink: 28 bytes leftover after parsing attributes in process `syz.1.19804'. [ 1513.162237][T24646] netlink: 28 bytes leftover after parsing attributes in process `syz.1.19804'. [ 1513.701357][T24657] netlink: 4 bytes leftover after parsing attributes in process `syz.3.19806'. [ 1514.263935][T24665] netlink: 8 bytes leftover after parsing attributes in process `syz.3.19809'. [ 1514.455397][T24667] netlink: 28 bytes leftover after parsing attributes in process `syz.2.19810'. [ 1514.464858][T24667] netlink: 28 bytes leftover after parsing attributes in process `syz.2.19810'. [ 1515.274615][T24702] netlink: 'syz.5.19821': attribute type 10 has an invalid length. [ 1515.287346][T24702] 8021q: adding VLAN 0 to HW filter on device team0 [ 1515.297715][T24702] bond0: (slave team0): Enslaving as an active interface with an up link [ 1515.355606][T24704] tipc: Started in network mode [ 1515.360643][T24704] tipc: Node identity 8a04430d99e9, cluster identity 4711 [ 1515.368552][T24704] tipc: Enabled bearer , priority 0 [ 1515.382256][T24704] syzkaller0: MTU too low for tipc bearer [ 1515.388552][T24704] tipc: Disabling bearer [ 1515.689034][T24709] netlink: 8 bytes leftover after parsing attributes in process `syz.5.19824'. [ 1515.702160][T24709] netlink: 56 bytes leftover after parsing attributes in process `syz.5.19824'. [ 1515.718979][T24709] netlink: 'syz.5.19824': attribute type 3 has an invalid length. [ 1515.727326][T24709] netlink: 224 bytes leftover after parsing attributes in process `syz.5.19824'. [ 1515.780159][T24711] netlink: 12 bytes leftover after parsing attributes in process `syz.5.19825'. [ 1516.266199][T24713] lo speed is unknown, defaulting to 1000 [ 1516.274316][T24713] lo speed is unknown, defaulting to 1000 [ 1516.284429][T24721] syzkaller1: entered promiscuous mode [ 1516.292989][T24721] syzkaller1: entered allmulticast mode [ 1516.652980][T24734] netlink: 8 bytes leftover after parsing attributes in process `syz.2.19835'. [ 1516.695158][T24734] netlink: 32 bytes leftover after parsing attributes in process `syz.2.19835'. [ 1516.761466][T24734] netlink: 'syz.2.19835': attribute type 3 has an invalid length. [ 1516.787442][T24734] netlink: 224 bytes leftover after parsing attributes in process `syz.2.19835'. [ 1516.802962][T24713] lo speed is unknown, defaulting to 1000 [ 1517.273724][T24748] bond45: option mode: invalid value (254) [ 1517.286077][T24748] bond45 (unregistering): Released all slaves [ 1517.318601][T24730] lo speed is unknown, defaulting to 1000 [ 1517.370917][T24730] lo speed is unknown, defaulting to 1000 [ 1517.518605][T24751] syzkaller1: entered promiscuous mode [ 1517.524362][T24751] syzkaller1: entered allmulticast mode [ 1518.087883][T24730] lo speed is unknown, defaulting to 1000 [ 1518.909997][T24791] bond35: option mode: invalid value (254) [ 1518.942771][T24791] bond35 (unregistering): Released all slaves [ 1519.471078][T24798] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1519.571532][T24798] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1519.735165][T24798] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1519.740050][T24812] netlink: 'syz.3.19857': attribute type 1 has an invalid length. [ 1519.862774][T24812] 8021q: adding VLAN 0 to HW filter on device bond35 [ 1519.889458][T24798] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1519.955427][T24810] bond35: (slave veth45): Enslaving as an active interface with a down link [ 1519.970106][T24810] __nla_validate_parse: 2 callbacks suppressed [ 1519.970227][T24810] netlink: 14 bytes leftover after parsing attributes in process `syz.3.19857'. [ 1520.069928][T11801] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1520.117342][T30351] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1520.161815][T30351] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1520.219568][T30351] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1520.228715][T24824] netlink: 'syz.4.19861': attribute type 33 has an invalid length. [ 1520.237952][T24824] netlink: 212 bytes leftover after parsing attributes in process `syz.4.19861'. [ 1520.399276][T24830] net_ratelimit: 23 callbacks suppressed [ 1520.399301][T24830] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 1520.442019][T24832] netlink: 156 bytes leftover after parsing attributes in process `syz.4.19864'. [ 1520.460774][T24833] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 1520.482329][T24832] netlink: 156 bytes leftover after parsing attributes in process `syz.4.19864'. [ 1520.505864][T24832] netlink: 12 bytes leftover after parsing attributes in process `syz.4.19864'. [ 1520.640393][T24844] netlink: 8 bytes leftover after parsing attributes in process `syz.1.19868'. [ 1520.653041][T24844] netlink: 32 bytes leftover after parsing attributes in process `syz.1.19868'. [ 1520.655391][T24843] netlink: 8 bytes leftover after parsing attributes in process `syz.4.19870'. [ 1520.668261][T24844] netlink: 'syz.1.19868': attribute type 3 has an invalid length. [ 1520.681752][T24843] netlink: 32 bytes leftover after parsing attributes in process `syz.4.19870'. [ 1520.681894][T24844] netlink: 224 bytes leftover after parsing attributes in process `syz.1.19868'. [ 1520.707382][T24843] netlink: 'syz.4.19870': attribute type 3 has an invalid length. [ 1520.760925][T24846] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1520.768353][T24846] IPv6: NLM_F_CREATE should be set when creating new route [ 1520.856089][T24852] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1520.863523][T24852] IPv6: NLM_F_CREATE should be set when creating new route [ 1521.258672][T24873] syzkaller0: entered promiscuous mode [ 1521.265493][T24873] syzkaller0: entered allmulticast mode [ 1521.299730][T24873] netlink: 'syz.5.19875': attribute type 33 has an invalid length. [ 1522.330822][T24898] netlink: 'syz.2.19883': attribute type 3 has an invalid length. [ 1523.019298][T24931] netlink: 'syz.4.19895': attribute type 3 has an invalid length. [ 1524.034311][T24960] netlink: 'syz.3.19905': attribute type 1 has an invalid length. [ 1524.097155][T24960] 8021q: adding VLAN 0 to HW filter on device bond37 [ 1524.107903][T24960] bond36: (slave bond37): making interface the new active one [ 1524.116890][T24960] bond36: (slave bond37): Enslaving as an active interface with an up link [ 1524.141710][T24960] 8021q: adding VLAN 0 to HW filter on device bond36 [ 1524.278490][T24969] bond8: entered allmulticast mode [ 1524.286828][T24968] bond8: left allmulticast mode [ 1525.142354][T24986] lo speed is unknown, defaulting to 1000 [ 1525.152345][T24986] lo speed is unknown, defaulting to 1000 [ 1525.394688][T24986] lo speed is unknown, defaulting to 1000 [ 1525.632384][T24982] lec:lec_atm_close: lec0: Shut down! [ 1525.840563][T25014] __nla_validate_parse: 21 callbacks suppressed [ 1525.840586][T25014] netlink: 28 bytes leftover after parsing attributes in process `syz.4.19917'. [ 1525.868151][T25014] netlink: 28 bytes leftover after parsing attributes in process `syz.4.19917'. [ 1526.294564][T25036] netlink: 8 bytes leftover after parsing attributes in process `syz.1.19920'. [ 1526.522451][T25038] netlink: 8 bytes leftover after parsing attributes in process `syz.3.19921'. [ 1526.830439][T25042] netlink: 'syz.3.19922': attribute type 33 has an invalid length. [ 1526.845519][T25042] netlink: 212 bytes leftover after parsing attributes in process `syz.3.19922'. [ 1527.118277][T25061] netlink: 4 bytes leftover after parsing attributes in process `syz.3.19927'. [ 1527.305305][T25066] netlink: 'syz.3.19929': attribute type 39 has an invalid length. [ 1527.430259][T25056] lo speed is unknown, defaulting to 1000 [ 1527.438753][T25070] netlink: 8 bytes leftover after parsing attributes in process `syz.3.19931'. [ 1527.502129][T25056] lo speed is unknown, defaulting to 1000 [ 1527.796058][T25081] netlink: 28 bytes leftover after parsing attributes in process `syz.4.19935'. [ 1527.812377][T25083] netlink: 'syz.3.19936': attribute type 33 has an invalid length. [ 1527.821323][T25081] netlink: 28 bytes leftover after parsing attributes in process `syz.4.19935'. [ 1527.831809][T25083] netlink: 212 bytes leftover after parsing attributes in process `syz.3.19936'. [ 1528.427680][T25056] lo speed is unknown, defaulting to 1000 [ 1529.404393][T25140] netlink: 'syz.4.19951': attribute type 4 has an invalid length. [ 1529.449803][T25135] netlink: 'syz.4.19951': attribute type 4 has an invalid length. [ 1530.622556][T25172] syzkaller0: entered promiscuous mode [ 1530.683926][T25172] syzkaller0: entered allmulticast mode [ 1531.188670][T25181] syzkaller0: entered promiscuous mode [ 1531.207207][T25181] syzkaller0: entered allmulticast mode [ 1531.213424][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5590 ms [ 1531.221534][ C1] lec:lec_tx_timeout: lec0 [ 1531.652906][T25200] bond47: option mode: invalid value (254) [ 1531.667214][T25200] bond47 (unregistering): Released all slaves [ 1531.845709][T25209] tipc: Failed to remove unknown binding: 66,0,0/0:3920169818/3920169820 [ 1531.876672][T25209] tipc: Failed to remove unknown binding: 66,0,0/0:3920169818/3920169819 [ 1531.905371][T25213] tipc: Failed to remove unknown binding: 66,0,0/0:3920169818/3920169820 [ 1531.906792][T25212] __nla_validate_parse: 6 callbacks suppressed [ 1531.906810][T25212] netlink: 8 bytes leftover after parsing attributes in process `syz.3.19972'. [ 1531.934475][T25212] netlink: 8 bytes leftover after parsing attributes in process `syz.3.19972'. [ 1531.949757][T25212] netlink: 'syz.3.19972': attribute type 3 has an invalid length. [ 1531.959854][T25212] netlink: 224 bytes leftover after parsing attributes in process `syz.3.19972'. [ 1531.963318][T25213] tipc: Failed to remove unknown binding: 66,0,0/0:3920169818/3920169819 [ 1532.160980][T25219] mac80211_hwsim hwsim4 syzkaller0: entered promiscuous mode [ 1532.187485][T25219] mac80211_hwsim hwsim4 syzkaller0: entered allmulticast mode [ 1532.480799][T25229] block nbd4: not configured, cannot reconfigure [ 1532.798501][T25240] netlink: 28 bytes leftover after parsing attributes in process `syz.2.19982'. [ 1532.818099][T25240] netlink: 28 bytes leftover after parsing attributes in process `syz.2.19982'. [ 1533.152538][T25251] netlink: 8 bytes leftover after parsing attributes in process `syz.3.19983'. [ 1533.174966][T25251] netlink: 8 bytes leftover after parsing attributes in process `syz.3.19983'. [ 1533.196369][T25251] netlink: 'syz.3.19983': attribute type 3 has an invalid length. [ 1533.212514][T25251] netlink: 224 bytes leftover after parsing attributes in process `syz.3.19983'. [ 1533.325415][T25237] lo speed is unknown, defaulting to 1000 [ 1533.356586][T25237] lo speed is unknown, defaulting to 1000 [ 1533.962625][T25253] syzkaller1: entered promiscuous mode [ 1533.975112][T25253] syzkaller1: entered allmulticast mode [ 1533.988721][T25237] lo speed is unknown, defaulting to 1000 [ 1534.008499][T25269] tipc: Failed to remove unknown binding: 66,0,0/4278255617:3302569392/3302569394 [ 1534.035863][T25269] tipc: Failed to remove unknown binding: 66,0,0/4278255617:3302569392/3302569393 [ 1534.064038][T25271] tipc: Failed to remove unknown binding: 66,0,0/4278255617:3302569392/3302569394 [ 1534.084879][T25271] tipc: Failed to remove unknown binding: 66,0,0/4278255617:3302569392/3302569393 [ 1534.328938][T25278] netlink: 20 bytes leftover after parsing attributes in process `syz.3.19992'. [ 1534.349715][T25279] syzkaller0: entered promiscuous mode [ 1534.355659][T25279] syzkaller0: entered allmulticast mode [ 1534.748340][T25292] netlink: 8 bytes leftover after parsing attributes in process `syz.3.19996'. [ 1534.918361][T25295] syzkaller0: entered promiscuous mode [ 1534.935772][T25295] syzkaller0: entered allmulticast mode [ 1535.475227][T25320] syzkaller0: entered promiscuous mode [ 1535.481266][T25320] syzkaller0: entered allmulticast mode [ 1535.676679][T25325] netlink: 'syz.3.20003': attribute type 3 has an invalid length. [ 1535.915533][T25324] syzkaller1: entered promiscuous mode [ 1535.921092][T25324] syzkaller1: entered allmulticast mode [ 1535.921772][T25337] netlink: 'syz.2.20009': attribute type 3 has an invalid length. [ 1536.427748][T25344] tipc: Enabling of bearer rejected, already enabled [ 1536.466119][T25352] syzkaller0: entered promiscuous mode [ 1536.471899][T25352] syzkaller0: entered allmulticast mode [ 1536.852507][T25373] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1536.990492][T25373] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1537.070172][T25373] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1537.160157][T25373] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1537.296263][ T82] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1537.310772][T25359] lo speed is unknown, defaulting to 1000 [ 1537.332189][T11801] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1537.351783][T25359] lo speed is unknown, defaulting to 1000 [ 1537.395071][T11801] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1537.413651][T11801] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1537.571487][T25383] __nla_validate_parse: 8 callbacks suppressed [ 1537.571511][T25383] netlink: 8 bytes leftover after parsing attributes in process `syz.5.20020'. [ 1537.576575][T25359] lo speed is unknown, defaulting to 1000 [ 1537.584615][T25383] netlink: 'syz.5.20020': attribute type 3 has an invalid length. [ 1537.601895][T25383] netlink: 224 bytes leftover after parsing attributes in process `syz.5.20020'. [ 1537.932264][T25389] netlink: 8 bytes leftover after parsing attributes in process `syz.2.20022'. [ 1537.963037][T25389] netlink: 'syz.2.20022': attribute type 3 has an invalid length. [ 1537.972359][T25389] netlink: 224 bytes leftover after parsing attributes in process `syz.2.20022'. [ 1538.288829][T25395] syzkaller1: entered promiscuous mode [ 1538.298755][T25395] syzkaller1: entered allmulticast mode [ 1538.448875][T25399] tipc: Enabling of bearer rejected, already enabled [ 1538.481117][T25387] lo speed is unknown, defaulting to 1000 [ 1538.499113][T25387] lo speed is unknown, defaulting to 1000 [ 1538.718115][T25401] syzkaller1: entered promiscuous mode [ 1538.729190][T25401] syzkaller1: entered allmulticast mode [ 1538.811067][T25408] syzkaller0: entered promiscuous mode [ 1538.817662][T25408] syzkaller0: entered allmulticast mode [ 1538.981109][T25413] netlink: 28 bytes leftover after parsing attributes in process `syz.3.20030'. [ 1538.990618][T25413] netlink: 28 bytes leftover after parsing attributes in process `syz.3.20030'. [ 1538.990792][T25387] lo speed is unknown, defaulting to 1000 [ 1539.151615][T25419] netlink: 8 bytes leftover after parsing attributes in process `syz.2.20032'. [ 1539.198529][T25422] netlink: 8 bytes leftover after parsing attributes in process `syz.1.20033'. [ 1539.219368][T25419] netlink: 'syz.2.20032': attribute type 3 has an invalid length. [ 1539.231382][T25422] netlink: 'syz.1.20033': attribute type 3 has an invalid length. [ 1539.239560][T25422] netlink: 224 bytes leftover after parsing attributes in process `syz.1.20033'. [ 1539.253857][T25419] netlink: 224 bytes leftover after parsing attributes in process `syz.2.20032'. [ 1540.403251][T25443] lo speed is unknown, defaulting to 1000 [ 1540.421081][T25443] lo speed is unknown, defaulting to 1000 [ 1540.460142][T25452] syzkaller1: entered promiscuous mode [ 1540.475437][T25452] syzkaller1: entered allmulticast mode [ 1540.859221][T25460] ip6gre2: entered promiscuous mode [ 1540.868330][T25460] ip6gre2: entered allmulticast mode [ 1541.071842][T25443] lo speed is unknown, defaulting to 1000 [ 1541.090906][T25467] netlink: 'syz.3.20046': attribute type 3 has an invalid length. [ 1541.217936][T25470] syzkaller0: entered promiscuous mode [ 1541.223769][T25470] syzkaller0: entered allmulticast mode [ 1541.361288][T25473] syzkaller0: entered promiscuous mode [ 1541.379482][T25473] syzkaller0: entered allmulticast mode [ 1541.649291][T25489] syzkaller0: entered promiscuous mode [ 1541.666799][T25489] syzkaller0: entered allmulticast mode [ 1541.728654][T25491] netlink: 'syz.1.20053': attribute type 1 has an invalid length. [ 1542.047262][T25502] netlink: 'syz.1.20053': attribute type 1 has an invalid length. [ 1542.058233][T25502] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1542.152512][T25491] 8021q: adding VLAN 0 to HW filter on device bond37 [ 1542.591520][T25498] lo speed is unknown, defaulting to 1000 [ 1542.599327][T25514] __nla_validate_parse: 10 callbacks suppressed [ 1542.599351][T25514] netlink: 8 bytes leftover after parsing attributes in process `syz.3.20058'. [ 1542.599640][T25498] lo speed is unknown, defaulting to 1000 [ 1542.678097][T25514] netlink: 8 bytes leftover after parsing attributes in process `syz.3.20058'. [ 1542.729950][T25521] syzkaller1: entered promiscuous mode [ 1542.740454][T25521] syzkaller1: entered allmulticast mode [ 1542.989139][T25529] netlink: 8 bytes leftover after parsing attributes in process `syz.2.20061'. [ 1543.049579][T25529] netlink: 'syz.2.20061': attribute type 3 has an invalid length. [ 1543.093245][T25529] netlink: 224 bytes leftover after parsing attributes in process `syz.2.20061'. [ 1543.365086][T25498] lo speed is unknown, defaulting to 1000 [ 1543.401588][T25542] netlink: 8 bytes leftover after parsing attributes in process `syz.3.20066'. [ 1543.426762][T25542] netlink: 'syz.3.20066': attribute type 3 has an invalid length. [ 1543.441307][T25542] netlink: 224 bytes leftover after parsing attributes in process `syz.3.20066'. [ 1543.475777][T25540] netlink: 8 bytes leftover after parsing attributes in process `syz.2.20065'. [ 1543.507701][T25540] SET target dimension over the limit! [ 1543.602399][T25547] netlink: 28 bytes leftover after parsing attributes in process `syz.2.20068'. [ 1543.612446][T25547] netlink: 28 bytes leftover after parsing attributes in process `syz.2.20068'. [ 1543.898226][T25558] netlink: 8 bytes leftover after parsing attributes in process `syz.1.20070'. [ 1544.313656][T25568] netlink: 'syz.1.20075': attribute type 3 has an invalid length. [ 1544.401506][T25570] mac80211_hwsim hwsim9 syzkaller0: Caught tx_queue_len zero misconfig [ 1544.666838][T25580] netlink: 'syz.3.20079': attribute type 3 has an invalid length. [ 1544.743731][T25576] netlink: 'syz.4.20078': attribute type 1 has an invalid length. [ 1544.787266][T25576] syzkaller1: entered promiscuous mode [ 1544.802344][T25576] syzkaller1: entered allmulticast mode [ 1544.917116][T25587] syzkaller1: entered promiscuous mode [ 1544.929605][T25587] syzkaller1: entered allmulticast mode [ 1545.087391][T25592] netlink: 'syz.4.20084': attribute type 1 has an invalid length. [ 1545.358085][T25592] 8021q: adding VLAN 0 to HW filter on device bond45 [ 1545.413341][T25596] bond45: (slave veth67): Enslaving as an active interface with a down link [ 1545.481472][T25592] netlink: 'syz.4.20084': attribute type 1 has an invalid length. [ 1545.523779][T25592] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1545.603361][T25609] syzkaller0: entered promiscuous mode [ 1545.609445][T25609] syzkaller0: entered allmulticast mode [ 1545.626574][T25613] netem: change failed [ 1545.771258][T25617] netlink: 'syz.4.20087': attribute type 3 has an invalid length. [ 1545.940900][T25630] netlink: 'syz.5.20091': attribute type 1 has an invalid length. [ 1546.005197][T25630] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1546.047973][T25634] bond3: (slave veth5): Enslaving as an active interface with a down link [ 1546.061535][T25636] netlink: 'syz.3.20092': attribute type 3 has an invalid length. [ 1546.216873][T25634] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1546.225220][T25634] bond3: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 1546.338311][ T1301] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1546.350948][ T1301] lec:lec_start_xmit: lec0:No lecd attached [ 1546.358098][ T1301] clip:clip_start_xmit: skb_dst(skb) == NULL [ 1548.735814][T25616] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1548.766077][T25630] netlink: 'syz.5.20091': attribute type 1 has an invalid length. [ 1548.990797][T25667] __nla_validate_parse: 21 callbacks suppressed [ 1548.990820][T25667] netlink: 8 bytes leftover after parsing attributes in process `syz.4.20100'. [ 1549.012466][T25668] netlink: 'syz.3.20099': attribute type 1 has an invalid length. [ 1549.041938][T25665] netlink: 'syz.5.20098': attribute type 1 has an invalid length. [ 1549.062966][T25668] 8021q: adding VLAN 0 to HW filter on device bond38 [ 1549.072673][T25667] netlink: 8 bytes leftover after parsing attributes in process `syz.4.20100'. [ 1549.126837][T25665] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1549.142340][T25675] netlink: 'syz.4.20100': attribute type 3 has an invalid length. [ 1549.150927][T25675] netlink: 224 bytes leftover after parsing attributes in process `syz.4.20100'. [ 1549.227468][T25680] netlink: 14 bytes leftover after parsing attributes in process `syz.3.20099'. [ 1549.277923][T25676] netlink: 14 bytes leftover after parsing attributes in process `syz.5.20098'. [ 1549.308709][T25672] bond38: (slave veth47): Enslaving as an active interface with a down link [ 1549.361559][T25672] netlink: 'syz.3.20099': attribute type 1 has an invalid length. [ 1549.369766][T25674] bond4: (slave veth7): Enslaving as an active interface with a down link [ 1549.381254][T25672] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1549.400077][T25674] netlink: 'syz.5.20098': attribute type 1 has an invalid length. [ 1549.408243][T25674] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1549.421361][T25686] mac80211_hwsim hwsim10 syzkaller0: left promiscuous mode [ 1549.431023][T25686] mac80211_hwsim hwsim10 syzkaller0: left allmulticast mode [ 1549.439621][T25686] tipc: Resetting bearer [ 1549.446748][T25679] team0: No ports can be present during mode change [ 1549.892483][T25702] netlink: 36 bytes leftover after parsing attributes in process `syz.3.20106'. [ 1550.076314][T25708] netlink: 24 bytes leftover after parsing attributes in process `syz.2.20107'. [ 1550.808856][T25725] netlink: 8 bytes leftover after parsing attributes in process `syz.4.20113'. [ 1550.860566][T25730] netlink: 8 bytes leftover after parsing attributes in process `syz.4.20113'. [ 1550.919976][T25725] netlink: 'syz.4.20113': attribute type 3 has an invalid length. [ 1550.930032][T25725] netlink: 224 bytes leftover after parsing attributes in process `syz.4.20113'. [ 1551.124103][T25734] netlink: 'syz.5.20116': attribute type 1 has an invalid length. [ 1551.211599][T25734] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1551.294618][T25734] bond5: (slave veth9): Enslaving as an active interface with a down link [ 1551.363482][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 1551.364223][T25747] syzkaller0: entered promiscuous mode [ 1551.371630][ C1] lec:lec_tx_timeout: lec0 [ 1551.401073][T25747] syzkaller0: entered allmulticast mode [ 1551.422110][T25734] netlink: 'syz.5.20116': attribute type 1 has an invalid length. [ 1551.435114][T25734] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1551.640381][T25766] syzkaller0: entered promiscuous mode [ 1551.646898][T25766] syzkaller0: entered allmulticast mode [ 1551.725248][T25762] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 1551.733157][T25762] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1551.747580][T25762] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1551.780612][T25762] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1551.840134][T25762] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1551.849632][T25762] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1551.861399][T25762] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1551.939233][T25773] netlink: 'syz.1.20128': attribute type 3 has an invalid length. [ 1551.945127][T25762] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1552.182830][T25778] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1552.324184][T25780] bond6: (slave veth11): Enslaving as an active interface with a down link [ 1552.360998][T25778] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1552.370265][T25778] bond6: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 1552.449535][T25767] lo speed is unknown, defaulting to 1000 [ 1552.460696][T25767] lo speed is unknown, defaulting to 1000 [ 1553.067200][T25804] tipc: Enabling of bearer rejected, already enabled [ 1553.076383][T25804] mac80211_hwsim hwsim10 syzkaller0: entered promiscuous mode [ 1553.084141][T25804] mac80211_hwsim hwsim10 syzkaller0: entered allmulticast mode [ 1553.092685][T25804] tipc: Resetting bearer [ 1553.117884][T25767] lo speed is unknown, defaulting to 1000 [ 1553.182960][ T9388] lec:lec_start_xmit: lec0:No lecd attached [ 1553.655967][T25812] veth49: entered allmulticast mode [ 1553.730839][T25812] bond39: (slave veth49): Enslaving as an active interface with an up link [ 1553.825717][T25818] bond39 (unregistering): (slave veth49): Releasing backup interface [ 1553.840835][T25818] bond39 (unregistering): Released all slaves [ 1553.868508][T25832] tipc: Resetting bearer [ 1554.451710][T25851] tipc: Enabled bearer , priority 0 [ 1554.459607][T25851] syzkaller0: entered promiscuous mode [ 1554.468406][T25851] syzkaller0: entered allmulticast mode [ 1554.536867][T25851] tipc: Resetting bearer [ 1554.571325][T25853] tipc: Resetting bearer [ 1554.582539][T25850] tipc: Resetting bearer [ 1554.609383][T25850] tipc: Disabling bearer [ 1554.672991][T25858] validate_nla: 3 callbacks suppressed [ 1554.673013][T25858] netlink: 'syz.4.20156': attribute type 1 has an invalid length. [ 1554.821917][T25858] 8021q: adding VLAN 0 to HW filter on device bond46 [ 1554.915884][T25877] __nla_validate_parse: 8 callbacks suppressed [ 1554.916003][T25877] netlink: 4 bytes leftover after parsing attributes in process `syz.2.20157'. [ 1554.918685][T25858] netlink: 'syz.4.20156': attribute type 1 has an invalid length. [ 1554.923133][T25866] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 1554.969867][T25859] bond46: (slave veth69): Enslaving as an active interface with a down link [ 1554.999088][T25858] 8021q: adding VLAN 0 to HW filter on device batadv5 [ 1555.008006][T25858] bond46: (slave batadv5): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 1555.338668][T25893] netlink: 4 bytes leftover after parsing attributes in process `syz.2.20161'. [ 1555.550083][T25874] lo speed is unknown, defaulting to 1000 [ 1555.558395][T25874] lo speed is unknown, defaulting to 1000 [ 1555.728476][T25901] tipc: Enabling of bearer rejected, already enabled [ 1555.812633][T25886] lo speed is unknown, defaulting to 1000 [ 1555.914433][T25909] netlink: 8 bytes leftover after parsing attributes in process `syz.3.20169'. [ 1555.946706][T25905] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 1555.966565][T25909] netlink: 'syz.3.20169': attribute type 14 has an invalid length. [ 1555.986975][T25905] net_ratelimit: 25 callbacks suppressed [ 1555.986996][T25905] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1556.001214][T25909] netlink: 32 bytes leftover after parsing attributes in process `syz.3.20169'. [ 1556.022224][T25909] netlink: 'syz.3.20169': attribute type 3 has an invalid length. [ 1556.030310][T25909] netlink: 224 bytes leftover after parsing attributes in process `syz.3.20169'. [ 1556.047979][T25905] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1556.076967][T25905] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1556.118330][T25905] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1556.127717][T25905] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1556.137095][T25905] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1556.186162][T25905] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1556.195499][T25916] netlink: 'syz.3.20172': attribute type 1 has an invalid length. [ 1556.206863][T25905] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1556.216486][T25905] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1556.224975][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1556.272658][T25916] 8021q: adding VLAN 0 to HW filter on device bond40 [ 1556.280627][T25886] lo speed is unknown, defaulting to 1000 [ 1556.287577][T25874] lo speed is unknown, defaulting to 1000 [ 1556.347877][T25921] bond40: (slave veth51): Enslaving as an active interface with a down link [ 1556.412234][T25916] netlink: 'syz.3.20172': attribute type 1 has an invalid length. [ 1556.470805][T25916] 8021q: adding VLAN 0 to HW filter on device batadv3 [ 1556.481793][T25916] bond40: (slave batadv3): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 1556.582210][T25908] lo speed is unknown, defaulting to 1000 [ 1556.633259][T25908] lo speed is unknown, defaulting to 1000 [ 1556.633961][T25886] lo speed is unknown, defaulting to 1000 [ 1556.948928][T25927] netlink: 'syz.3.20174': attribute type 1 has an invalid length. [ 1556.997106][T25927] 8021q: adding VLAN 0 to HW filter on device bond41 [ 1557.059881][T25929] bond41: (slave veth53): Enslaving as an active interface with a down link [ 1557.103848][T25927] netlink: 14 bytes leftover after parsing attributes in process `syz.3.20174'. [ 1557.166778][T25908] lo speed is unknown, defaulting to 1000 [ 1557.174704][T25927] netlink: 'syz.3.20174': attribute type 1 has an invalid length. [ 1557.405656][T25936] tipc: Enabling of bearer rejected, already enabled [ 1557.699059][T25936] netlink: 44 bytes leftover after parsing attributes in process `syz.3.20177'. [ 1557.912834][T25942] mac80211_hwsim hwsim9 syzkaller0: left promiscuous mode [ 1557.932240][T25942] mac80211_hwsim hwsim9 syzkaller0: left allmulticast mode [ 1557.942618][T25942] tipc: Resetting bearer [ 1558.077045][T25944] mac80211_hwsim hwsim9 syzkaller0: entered promiscuous mode [ 1558.088675][T25944] mac80211_hwsim hwsim9 syzkaller0: entered allmulticast mode [ 1558.098096][T25944] tipc: Resetting bearer [ 1558.253434][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5070 ms [ 1558.261628][ C1] lec:lec_tx_timeout: lec0 [ 1558.263677][T25946] mac80211_hwsim hwsim9 syzkaller0: left allmulticast mode [ 1558.296536][T25946] tipc: Resetting bearer [ 1558.403217][T25949] netlink: 8 bytes leftover after parsing attributes in process `syz.4.20182'. [ 1558.435944][T25949] netlink: 'syz.4.20182': attribute type 14 has an invalid length. [ 1558.473803][T25949] netlink: 32 bytes leftover after parsing attributes in process `syz.4.20182'. [ 1558.498994][T25949] netlink: 'syz.4.20182': attribute type 3 has an invalid length. [ 1558.524970][T25949] netlink: 224 bytes leftover after parsing attributes in process `syz.4.20182'. [ 1558.877897][T25972] mac80211_hwsim hwsim9 syzkaller0: entered allmulticast mode [ 1558.899918][T25972] tipc: Resetting bearer [ 1558.949614][T25963] tipc: Resetting bearer [ 1558.956368][T25963] tipc: Resetting bearer [ 1559.513836][T25969] lo speed is unknown, defaulting to 1000 [ 1559.521803][T25969] lo speed is unknown, defaulting to 1000 [ 1559.717406][T25989] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 1560.128273][T25993] lo speed is unknown, defaulting to 1000 [ 1560.219925][T25993] lo speed is unknown, defaulting to 1000 [ 1560.249866][T25969] lo speed is unknown, defaulting to 1000 [ 1560.335603][T26012] __nla_validate_parse: 2 callbacks suppressed [ 1560.335628][T26012] netlink: 12 bytes leftover after parsing attributes in process `syz.5.20202'. [ 1560.432267][T26019] bridge3: port 1(erspan0) entered blocking state [ 1560.444237][T26019] bridge3: port 1(erspan0) entered disabled state [ 1560.492103][T26019] erspan0: entered allmulticast mode [ 1560.523857][T26019] erspan0: entered promiscuous mode [ 1560.545733][T26019] bridge3: port 1(erspan0) entered blocking state [ 1560.552509][T26019] bridge3: port 1(erspan0) entered forwarding state [ 1560.644619][T26012] bridge3: port 2(bond7) entered blocking state [ 1560.651247][T26012] bridge3: port 2(bond7) entered disabled state [ 1560.658338][T26012] bond7: entered allmulticast mode [ 1560.667018][T26012] bond7: entered promiscuous mode [ 1560.775943][T25993] lo speed is unknown, defaulting to 1000 [ 1563.344746][T26014] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1563.656528][T26054] ================================================================== [ 1563.664684][T26054] BUG: KASAN: slab-use-after-free in sk_skb_reason_drop+0x37/0x110 [ 1563.672834][T26054] Write of size 4 at addr ffff888028413ae4 by task syz.1.20211/26054 [ 1563.680934][T26054] [ 1563.683298][T26054] CPU: 1 UID: 0 PID: 26054 Comm: syz.1.20211 Not tainted syzkaller #0 PREEMPT(full) [ 1563.683327][T26054] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1563.683340][T26054] Call Trace: [ 1563.683349][T26054] [ 1563.683359][T26054] dump_stack_lvl+0xe8/0x150 [ 1563.683391][T26054] print_report+0xba/0x230 [ 1563.683416][T26054] ? sk_skb_reason_drop+0x37/0x110 [ 1563.683443][T26054] kasan_report+0x117/0x150 [ 1563.683471][T26054] ? sk_skb_reason_drop+0x37/0x110 [ 1563.683502][T26054] kasan_check_range+0x264/0x2c0 [ 1563.683526][T26054] sk_skb_reason_drop+0x37/0x110 [ 1563.683554][T26054] team_dummy_transmit+0x1a/0x30 [ 1563.683581][T26054] team_xmit+0x271/0x3d0 [ 1563.683608][T26054] ? __dev_direct_xmit+0x326/0x750 [ 1563.683629][T26054] __dev_direct_xmit+0x4af/0x750 [ 1563.683649][T26054] ? __pfx___dev_direct_xmit+0x10/0x10 [ 1563.683669][T26054] ? packet_parse_headers+0x575/0x790 [ 1563.683699][T26054] ? __pfx_packet_parse_headers+0x10/0x10 [ 1563.683723][T26054] ? team_select_queue+0x9b/0x130 [ 1563.683748][T26054] packet_xmit+0x1b4/0x320 [ 1563.683787][T26054] packet_sendmsg+0x3ebc/0x50f0 [ 1563.683831][T26054] ? lockdep_hardirqs_on+0x7a/0x110 [ 1563.683859][T26054] ? aa_sk_perm+0x6d5/0x900 [ 1563.683890][T26054] ? __pfx_packet_sendmsg+0x10/0x10 [ 1563.683924][T26054] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 1563.683953][T26054] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1563.683972][T26054] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1563.683999][T26054] ____sys_sendmsg+0x972/0x9f0 [ 1563.684039][T26054] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1563.684073][T26054] ? import_iovec+0x73/0xa0 [ 1563.684098][T26054] ___sys_sendmsg+0x2a5/0x360 [ 1563.684130][T26054] ? __pfx____sys_sendmsg+0x10/0x10 [ 1563.684164][T26054] ? __pfx_futex_wake_mark+0x10/0x10 [ 1563.684205][T26054] ? __fget_files+0x2a/0x420 [ 1563.684225][T26054] ? __fget_files+0x3a0/0x420 [ 1563.684250][T26054] __sys_sendmmsg+0x27c/0x4e0 [ 1563.684273][T26054] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1563.684292][T26054] ? do_futex+0x333/0x420 [ 1563.684323][T26054] ? __sys_getsockname+0x2a1/0x2d0 [ 1563.684363][T26054] ? rcu_is_watching+0x15/0xb0 [ 1563.684398][T26054] __x64_sys_sendmmsg+0xa0/0xc0 [ 1563.684419][T26054] do_syscall_64+0x14d/0xf80 [ 1563.684444][T26054] ? trace_irq_disable+0x3b/0x150 [ 1563.684464][T26054] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1563.684485][T26054] ? clear_bhb_loop+0x40/0x90 [ 1563.684510][T26054] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1563.684530][T26054] RIP: 0033:0x7f8bbef9c819 [ 1563.684551][T26054] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1563.684572][T26054] RSP: 002b:00007f8bbd1f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1563.684596][T26054] RAX: ffffffffffffffda RBX: 00007f8bbf215fa0 RCX: 00007f8bbef9c819 [ 1563.684613][T26054] RDX: 0000000000000001 RSI: 0000200000000440 RDI: 000000000000000c [ 1563.684628][T26054] RBP: 00007f8bbf032c91 R08: 0000000000000000 R09: 0000000000000000 [ 1563.684642][T26054] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1563.684655][T26054] R13: 00007f8bbf216038 R14: 00007f8bbf215fa0 R15: 00007ffd0576f838 [ 1563.684682][T26054] [ 1563.684691][T26054] [ 1563.997996][T26054] Allocated by task 26054: [ 1564.002531][T26054] kasan_save_track+0x3e/0x80 [ 1564.007232][T26054] __kasan_slab_alloc+0x6c/0x80 [ 1564.012179][T26054] kmem_cache_alloc_node_noprof+0x384/0x690 [ 1564.018084][T26054] __alloc_skb+0x1d0/0x7d0 [ 1564.022531][T26054] alloc_skb_with_frags+0xca/0x890 [ 1564.027661][T26054] sock_alloc_send_pskb+0x878/0x990 [ 1564.032882][T26054] packet_sendmsg+0x33eb/0x50f0 [ 1564.038093][T26054] ____sys_sendmsg+0x972/0x9f0 [ 1564.042874][T26054] ___sys_sendmsg+0x2a5/0x360 [ 1564.047569][T26054] __sys_sendmmsg+0x27c/0x4e0 [ 1564.052251][T26054] __x64_sys_sendmmsg+0xa0/0xc0 [ 1564.057108][T26054] do_syscall_64+0x14d/0xf80 [ 1564.061720][T26054] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1564.067716][T26054] [ 1564.070046][T26054] Freed by task 26054: [ 1564.074112][T26054] kasan_save_track+0x3e/0x80 [ 1564.078815][T26054] kasan_save_free_info+0x46/0x50 [ 1564.083850][T26054] __kasan_slab_free+0x5c/0x80 [ 1564.088623][T26054] kmem_cache_free+0x187/0x630 [ 1564.093399][T26054] __tcf_kfree_skb_list+0x15c/0x330 [ 1564.098726][T26054] __dev_queue_xmit+0x21ba/0x3980 [ 1564.103786][T26054] team_xmit+0x1d2/0x3d0 [ 1564.108071][T26054] __dev_direct_xmit+0x4af/0x750 [ 1564.113035][T26054] packet_xmit+0x1b4/0x320 [ 1564.117463][T26054] packet_sendmsg+0x3ebc/0x50f0 [ 1564.122334][T26054] ____sys_sendmsg+0x972/0x9f0 [ 1564.127256][T26054] ___sys_sendmsg+0x2a5/0x360 [ 1564.131979][T26054] __sys_sendmmsg+0x27c/0x4e0 [ 1564.136763][T26054] __x64_sys_sendmmsg+0xa0/0xc0 [ 1564.141627][T26054] do_syscall_64+0x14d/0xf80 [ 1564.146233][T26054] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1564.152219][T26054] [ 1564.154551][T26054] The buggy address belongs to the object at ffff888028413a00 [ 1564.154551][T26054] which belongs to the cache skbuff_head_cache of size 240 [ 1564.169221][T26054] The buggy address is located 228 bytes inside of [ 1564.169221][T26054] freed 240-byte region [ffff888028413a00, ffff888028413af0) [ 1564.183209][T26054] [ 1564.185547][T26054] The buggy address belongs to the physical page: [ 1564.192068][T26054] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x28413 [ 1564.200836][T26054] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 1564.207949][T26054] page_type: f5(slab) [ 1564.211939][T26054] raw: 00fff00000000000 ffff88823be66000 dead000000000122 0000000000000000 [ 1564.220532][T26054] raw: 0000000000000000 00000008000c000c 00000000f5000000 0000000000000000 [ 1564.229199][T26054] page dumped because: kasan: bad access detected [ 1564.235611][T26054] page_owner tracks the page as allocated [ 1564.241333][T26054] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd2cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 26054, tgid 26050 (syz.1.20211), ts 1563638120754, free_ts 1563541372252 [ 1564.262542][T26054] post_alloc_hook+0x231/0x280 [ 1564.267341][T26054] get_page_from_freelist+0x24dc/0x2580 [ 1564.272918][T26054] __alloc_frozen_pages_noprof+0x18d/0x380 [ 1564.278747][T26054] allocate_slab+0x77/0x660 [ 1564.283268][T26054] refill_objects+0x331/0x3c0 [ 1564.287967][T26054] __pcs_replace_empty_main+0x2e6/0x730 [ 1564.293614][T26054] kmem_cache_alloc_noprof+0x37d/0x650 [ 1564.299080][T26054] skb_clone+0x212/0x3a0 [ 1564.303332][T26054] netlink_broadcast_filtered+0x5f8/0xeb0 [ 1564.309072][T26054] netlink_broadcast+0x37/0x50 [ 1564.313941][T26054] kobject_uevent_net_broadcast+0x378/0x560 [ 1564.319851][T26054] kobject_uevent_env+0x55c/0x9e0 [ 1564.324888][T26054] device_add+0x557/0xb70 [ 1564.329229][T26054] rfkill_register+0x17a/0x9c0 [ 1564.334003][T26054] nfc_register_device+0x14a/0x380 [ 1564.339124][T26054] nci_register_device+0x8a1/0xa00 [ 1564.344264][T26054] page last free pid 26052 tgid 26049 stack trace: [ 1564.350766][T26054] __free_frozen_pages+0xc2b/0xdb0 [ 1564.355889][T26054] __folio_put+0x414/0x4f0 [ 1564.360329][T26054] af_alg_free_resources+0x55f/0x750 [ 1564.365648][T26054] skcipher_recvmsg+0xbb8/0x1140 [ 1564.370701][T26054] sock_recvmsg+0x172/0x1b0 [ 1564.375225][T26054] ____sys_recvmsg+0x1e6/0x4a0 [ 1564.380012][T26054] ___sys_recvmsg+0x215/0x590 [ 1564.384715][T26054] __x64_sys_recvmsg+0x1ba/0x2a0 [ 1564.389659][T26054] do_syscall_64+0x14d/0xf80 [ 1564.394262][T26054] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1564.400253][T26054] [ 1564.402667][T26054] Memory state around the buggy address: [ 1564.408300][T26054] ffff888028413980: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1564.416490][T26054] ffff888028413a00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1564.424561][T26054] >ffff888028413a80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fc fc [ 1564.432635][T26054] ^ [ 1564.439885][T26054] ffff888028413b00: fc fc fc fc fc fc fc fc fa fb fb fb fb fb fb fb [ 1564.447971][T26054] ffff888028413b80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1564.456131][T26054] ================================================================== [ 1564.464589][T26054] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1564.471904][T26054] CPU: 1 UID: 0 PID: 26054 Comm: syz.1.20211 Not tainted syzkaller #0 PREEMPT(full) [ 1564.481409][T26054] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1564.491509][T26054] Call Trace: [ 1564.494829][T26054] [ 1564.497800][T26054] vpanic+0x56c/0xa60 [ 1564.501854][T26054] ? __pfx_vpanic+0x10/0x10 [ 1564.506398][T26054] panic+0xc5/0xd0 [ 1564.510145][T26054] ? __pfx_panic+0x10/0x10 [ 1564.514713][T26054] ? sk_skb_reason_drop+0x37/0x110 [ 1564.519855][T26054] ? sk_skb_reason_drop+0x37/0x110 [ 1564.525068][T26054] check_panic_on_warn+0x89/0xb0 [ 1564.530018][T26054] ? sk_skb_reason_drop+0x37/0x110 [ 1564.535144][T26054] end_report+0x73/0x180 [ 1564.539400][T26054] ? sk_skb_reason_drop+0x37/0x110 [ 1564.544535][T26054] kasan_report+0x128/0x150 [ 1564.549060][T26054] ? sk_skb_reason_drop+0x37/0x110 [ 1564.554191][T26054] kasan_check_range+0x264/0x2c0 [ 1564.559146][T26054] sk_skb_reason_drop+0x37/0x110 [ 1564.564191][T26054] team_dummy_transmit+0x1a/0x30 [ 1564.569148][T26054] team_xmit+0x271/0x3d0 [ 1564.573411][T26054] ? __dev_direct_xmit+0x326/0x750 [ 1564.578639][T26054] __dev_direct_xmit+0x4af/0x750 [ 1564.583674][T26054] ? __pfx___dev_direct_xmit+0x10/0x10 [ 1564.589146][T26054] ? packet_parse_headers+0x575/0x790 [ 1564.594796][T26054] ? __pfx_packet_parse_headers+0x10/0x10 [ 1564.600540][T26054] ? team_select_queue+0x9b/0x130 [ 1564.605582][T26054] packet_xmit+0x1b4/0x320 [ 1564.610026][T26054] packet_sendmsg+0x3ebc/0x50f0 [ 1564.614907][T26054] ? lockdep_hardirqs_on+0x7a/0x110 [ 1564.620122][T26054] ? aa_sk_perm+0x6d5/0x900 [ 1564.624644][T26054] ? __pfx_packet_sendmsg+0x10/0x10 [ 1564.629859][T26054] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 1564.636311][T26054] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1564.641344][T26054] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1564.646645][T26054] ____sys_sendmsg+0x972/0x9f0 [ 1564.651438][T26054] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1564.656747][T26054] ? import_iovec+0x73/0xa0 [ 1564.661263][T26054] ___sys_sendmsg+0x2a5/0x360 [ 1564.665962][T26054] ? __pfx____sys_sendmsg+0x10/0x10 [ 1564.671193][T26054] ? __pfx_futex_wake_mark+0x10/0x10 [ 1564.676510][T26054] ? __fget_files+0x2a/0x420 [ 1564.681108][T26054] ? __fget_files+0x3a0/0x420 [ 1564.685809][T26054] __sys_sendmmsg+0x27c/0x4e0 [ 1564.690522][T26054] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1564.695824][T26054] ? do_futex+0x333/0x420 [ 1564.700266][T26054] ? __sys_getsockname+0x2a1/0x2d0 [ 1564.705402][T26054] ? rcu_is_watching+0x15/0xb0 [ 1564.710187][T26054] __x64_sys_sendmmsg+0xa0/0xc0 [ 1564.715047][T26054] do_syscall_64+0x14d/0xf80 [ 1564.719653][T26054] ? trace_irq_disable+0x3b/0x150 [ 1564.724688][T26054] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1564.730792][T26054] ? clear_bhb_loop+0x40/0x90 [ 1564.735514][T26054] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1564.741413][T26054] RIP: 0033:0x7f8bbef9c819 [ 1564.745850][T26054] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1564.765469][T26054] RSP: 002b:00007f8bbd1f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1564.773900][T26054] RAX: ffffffffffffffda RBX: 00007f8bbf215fa0 RCX: 00007f8bbef9c819 [ 1564.781985][T26054] RDX: 0000000000000001 RSI: 0000200000000440 RDI: 000000000000000c [ 1564.790055][T26054] RBP: 00007f8bbf032c91 R08: 0000000000000000 R09: 0000000000000000 [ 1564.798123][T26054] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1564.806187][T26054] R13: 00007f8bbf216038 R14: 00007f8bbf215fa0 R15: 00007ffd0576f838 [ 1564.814181][T26054] [ 1564.817632][T26054] Kernel Offset: disabled [ 1564.821956][T26054] Rebooting in 86400 seconds..