last executing test programs: 2.351712877s ago: executing program 1 (id=1961): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x5, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000000d0300000000000000000000000000c3d37ae75963759be59c3ae90f060af870cb331b99c367d4e57e8d5fee2d1b7ddad8532824d57c"], 0x14}}, 0x0) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="18000000111401090000000000000000080005"], 0x18}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000e40)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd2d, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0x0, 0x3}, {}, {0xfff3, 0xffe0}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x50}, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=@delchain={0x24, 0x66, 0x221, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, r9, {0x0, 0x1}, {}, {0xb, 0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x20004800) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x3, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="180000000000000000000000000000009110af000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1e}, 0x94) syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), r7) ioctl$SIOCRSACCEPT(r0, 0x89e3) r10 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r10, 0x0, 0x1, &(0x7f00000001c0), 0x4) r11 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r11, 0x0, 0x40, &(0x7f0000000740)=@filter={'filter\x00', 0x42, 0x4, 0x350, 0xffffffff, 0x0, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x2b8, 0x2b8, 0x2b8, 0xffffffff, 0x4, 0x0, {[{{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xff000000, 0x0, 'netpci0\x00', 'pimreg\x00', {}, {}, 0x6, 0x3}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@ttl={{0x28}, {0x3}}, @common=@unspec=@connlimit={{0x40}, {[0xff, 0xff, 0xffffffff, 0xff], 0x0, 0x1, {0x7ff}}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}, {{@ip={@remote, @multicast2, 0x0, 0x0, 'veth1_macvtap\x00', 'ip6_vti0\x00'}, 0x0, 0xa0, 0x100, 0x0, {0x60010000}, [@common=@unspec=@connmark={{0x30}, {0x0, 0x0, 0x41}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @empty, 0x0, 0xfffc, [0x16, 0x0, 0x0, 0x0, 0x1c, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x100], 0x1, 0xfffffffd}}}, {{@uncond, 0x0, 0x90, 0xb8, 0x0, {}, [@common=@socket0={{0x20}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3b0) 2.087195049s ago: executing program 0 (id=1967): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(r2, 0x114, 0xa, &(0x7f00000000c0)=0x1, 0x4) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r1) (async) r4 = socket$kcm(0x2, 0xd, 0x2) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, &(0x7f00000000c0)={r0}) (async) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40080}, 0x20008840) (async) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0xa, 0x80010, r0, 0x6fabf000) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000008c0)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001c00010029bd7000fadbdfa5ff000000", @ANYRES32=r6, @ANYBLOB="0200c40a0a000200aaaaaaaaaa0c0000"], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'wg2\x00', 0x8000}) 1.592751402s ago: executing program 1 (id=1970): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt(r0, 0x66f9, 0x100, 0x0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000240)={@local, @random="b0c942034375", @void, {@ipv4={0x8864, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x22, 0x0, 0x0, 0x6, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xc, &(0x7f0000000680)=@assoc_value={0x0}, &(0x7f0000000500)=0x8) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r2, 0x84, 0x19, &(0x7f00000002c0)={r3, 0x7}, 0x8) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f0000000000)={r3, @in6={{0xa, 0x4e24, 0x5, @private2, 0x2}}, 0xedc, 0x34700, 0x1, 0x81, 0x5}, &(0x7f00000000c0)=0x98) 1.591030689s ago: executing program 0 (id=1971): ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000440)={'syztnl1\x00', &(0x7f00000003c0)={'syztnl0\x00', 0x0, 0x29, 0x9, 0x0, 0xa03f, 0x4, @rand_addr=' \x01\x00', @rand_addr=' \x01\x00', 0x7, 0x80, 0xfffffff8, 0x3ff}}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x3, 0x28011, r1, 0xc6e9f000) mmap(&(0x7f0000867000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0xffffe000) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', r0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xad}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r2}, 0x10) r3 = socket$inet_sctp(0x2, 0x1, 0x84) unshare(0x400) r4 = socket$kcm(0x2, 0x922000000001, 0x106) setsockopt$sock_attach_bpf(r4, 0x1, 0xd, 0x0, 0x0) sendto$inet(r3, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r3, 0xfff) r5 = accept4(r3, 0x0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r5, 0x84, 0x76, &(0x7f0000000040), 0x8) r6 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r6, &(0x7f0000000000)={0x27}, 0x74) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, &(0x7f0000000240)=@gcm_128={{0x304}, "0b6fd8b28f6c3314", "07db2559ffd4ccb62446b41e1eb62622", "5772036b", "14b746f29ae79485"}, 0x28) r7 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$sock_int(r7, 0x1, 0xa, &(0x7f0000000080)=0x4, 0x4) ioctl$sock_SIOCINQ(r7, 0x541b, &(0x7f0000000100)) sendmmsg$unix(r6, &(0x7f0000000b00)=[{{&(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x814}}, {{&(0x7f0000000e80)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000740)=[{&(0x7f0000001dc0)="bb", 0x1}, {0x0}], 0x2}}, {{&(0x7f0000000580)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f00000006c0)=[{&(0x7f0000000600)='z', 0x1}], 0x1}}], 0x3, 0x0) r8 = socket(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x9) sendmsg$nl_route(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x14c}}, 0x0) unshare(0x20000400) syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) 1.5893817s ago: executing program 1 (id=1972): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x1c, &(0x7f0000000400)=[@in6={0xa, 0x4e22, 0x7, @local, 0x5}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000280)={0x2, [0x0, 0x0]}, &(0x7f0000000240)=0xc) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000100)={0x7ea1, 0x9, 0xa, 0x4, 0x8, 0x5, 0x3c4, 0x9, r2}, &(0x7f0000000140)=0x20) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb010018000000003e00000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x1}, 0x28) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000001740)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x5, 0xa8, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x10}, 0x94) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x0, 0x0}, 0x8) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1c, 0x3, &(0x7f0000000640)=ANY=[@ANYBLOB="18027a00"/24], &(0x7f00000000c0)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r5, r4}, 0x94) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380), 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{}, &(0x7f00000004c0), &(0x7f0000000500)=r6}, 0x20) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000580)={0xffffffffffffffff, 0x4}, 0xc) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r7, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r8 = syz_init_net_socket$ax25(0x3, 0x3, 0x16a) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095000000000000008f0ce10bb8b70a440ec81b3340ca3e6a11b7b0b11cce32ff6ec154113437070e63eea0c5f584932ed915033fa59ecf392d28d72b5dafaf83858d36121823d60c83f2e3f6a11f7a8f1ab061a1410a82d2e25b37b4de906f556916cb8a9bd959d6a5b815ca7e249437c102e37c637a6d503a4cb1c53c4ea7b4412e15fddc615e6759d0"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r9}, 0x10) connect$ax25(r8, &(0x7f0000000000)={{0x3, @default, 0x10000}, [@null, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) preadv(r7, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000080)={'netdevsim0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x9, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000c6000100250000008510000001000000950000000000000018400000020000000000000000000000950000000000000095"], &(0x7f0000000100)='GPL\x00', 0x8, 0x0, 0x0, 0x41100, 0x0, '\x00', r11, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x807}, 0x94) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000900)={0x6}, 0x8) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000980)=@generic={&(0x7f0000000940)='./file0\x00', 0x0, 0x8}, 0x18) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000009c0)={0x0, 0x0, 0x18}, 0xc) r12 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c0000000300000001"], 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000200)={0x0, &(0x7f0000001d80)=""/183, &(0x7f0000000500), &(0x7f00000006c0), 0x3, r12}, 0x38) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000a40)=@generic={&(0x7f0000000a00)='./file0\x00', 0x0, 0x8}, 0x18) socket$nl_route(0x10, 0x3, 0x0) 1.481972577s ago: executing program 0 (id=1977): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="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", @ANYRES8], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000900)={@in={{0x2, 0x4e24, @remote}}, 0x0, 0x0, 0x1e, 0x0, "a1e6c7030e64fe0110f53a64d4d17bde44eb9bc4a67e5693d9695f4918d4334e64441a7fdb5521c32a13c9609690275c1895f8c78c0514baf150cc88eb6d97feb1bff8b13b8405ae2f0f428030503a06"}, 0xd8) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000080)={@in={{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x10}}}, 0x0, 0x0, 0xf, 0x0, "df6e1ca3102112016f1e9ba020f5ea3d74c012ad64494e41eff5108cd341662409ec80cd68fd3ba2e96ee3f8d8a3e4e561e68eaddb300484fa8eb74c3f59fb9fd1ee3a622d36454a2d231c9584a4dd07"}, 0xd8) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, 0x0, 0x0, 0x70bd2b, 0x25dfdbfd, {}, [@ETHTOOL_A_LINKMODES_MASTER_SLAVE_CFG={0x5}, @ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0x5}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0x8b}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0x3}, @ETHTOOL_A_LINKMODES_MASTER_SLAVE_CFG={0x5, 0x7, 0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x4080) 1.301902258s ago: executing program 0 (id=1978): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'pim6reg\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000004c0)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20040091}, 0xc0) (async) r2 = socket(0x10, 0x80002, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000040)={'ip6gre0\x00', 0x0, 0x29, 0x10, 0x4, 0x0, 0x50, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @remote, 0x7, 0x40, 0x5}}) getsockopt$PNPIPE_IFINDEX(r2, 0x113, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x4) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000200)={'syztnl1\x00', &(0x7f0000000180)={'syztnl0\x00', 0x0, 0x7, 0x1, 0x0, 0x2, {{0x13, 0x4, 0x0, 0x7, 0x4c, 0x65, 0x0, 0x0, 0xa226d3844fe3f36d, 0x0, @empty, @loopback, {[@timestamp_prespec={0x44, 0x1c, 0x10, 0x3, 0x2, [{@dev={0xac, 0x14, 0x14, 0x3f}, 0x7fff}, {@multicast2, 0x4}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0xfffffffc}]}, @timestamp_prespec={0x44, 0xc, 0xf3, 0x3, 0x8, [{@multicast2, 0x1}]}, @rr={0x7, 0xf, 0x21, [@loopback, @rand_addr=0x64010101, @loopback]}]}}}}}) (async) r3 = socket(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000400)=@newqdisc={0x40, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_FLOWS={0x8}]}}]}, 0x40}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000000c0)={'macsec0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c00000010000100"/20, @ANYRES32=r8, @ANYBLOB="84110000040000001c0012800b0001006d616373656300000c000280060002404e23000068e8f8ae986251101a"], 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) (async) r10 = socket$nl_generic(0x10, 0x3, 0x10) (async) r11 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ADD(r10, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x18, r11, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x4}]}, 0x18}}, 0x0) (async) r12 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_PRI(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x30, r12, 0x1, 0x70bd25, 0x25dfdbfe, {{}, {}, {0x14, 0x18, {0x8003, @bearer=@udp='udp:syz2\x00'}}}}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) (async) getsockopt$inet_mreqn(r2, 0x0, 0x24, &(0x7f0000000240)={@loopback, @loopback}, &(0x7f0000000280)=0xc) (async) r13 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r13, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x10, 0x1403, 0x8, 0x70bd2a, 0x25dfdbfd}, 0x10}, 0x1, 0x0, 0x0, 0x800}, 0x4000) (async) ioctl$SIOCSIFHWADDR(r4, 0x8924, &(0x7f00000003c0)={'ipvlan1\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000002c0)={'vxcan1\x00'}) r14 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) setsockopt$packet_add_memb(r14, 0x107, 0x1, &(0x7f00000001c0)={r15, 0x1, 0x1, @local}, 0x10) (async) setsockopt$packet_add_memb(r14, 0x107, 0x1, &(0x7f0000000780)={r15, 0x1, 0x6, @local}, 0x10) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000380)={'ip6gre0\x00', &(0x7f0000000300)={'ip6_vti0\x00', 0x0, 0x29, 0xab, 0x0, 0x5, 0x64, @private0, @mcast2, 0x1, 0x7, 0x4, 0x8}}) 1.299028803s ago: executing program 2 (id=1979): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, 0x0, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, 0x0, 0x0) getsockopt(r1, 0x111, 0x2, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="30000000101401002cbd7000fedbdf25080003000100000008004a0001000000080001000000000008004b0013000040"], 0x30}, 0x1, 0x0, 0x0, 0x24044836}, 0xc094) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_mtu(r3, 0x29, 0x4e, &(0x7f0000000400), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000480)=ANY=[@ANYRES8=0x0, @ANYRES16=r2, @ANYRES32=r1, @ANYRESDEC=r1], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='net_prio.prioidx\x00', 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x10, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000500)='page_pool_state_release\x00', r6}, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000500)='page_pool_state_release\x00', r7}, 0x10) getsockopt$inet6_buf(r5, 0x29, 0x1c, &(0x7f00000002c0)=""/4, &(0x7f0000000300)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r9 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'bond0\x00', 0x0}) setsockopt$packet_int(r9, 0x107, 0xf, &(0x7f0000000000)=0x3da, 0x4) sendto$packet(r9, &(0x7f00000000c0)="3f03fe7f0302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r10, 0x1, 0x0, 0x6, @multicast}, 0x14) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r11, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) socket$inet6_tcp(0xa, 0x1, 0x0) 1.143111226s ago: executing program 3 (id=1983): socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) close(0x4) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') (async) unshare(0x40000) r0 = socket$netlink(0x10, 0x3, 0x8) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, 0x0, 0x0) (async) sendmsg$nl_netfilter(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x48, 0xa, 0x3, 0x801, 0x70bd27, 0x25dfdbfe, {0x7, 0x0, 0x7}, [@generic="b02451ea08eebdc60b446a9c7f8c558f07390d752405e17b8f784ee62581cafd6be80eaeab0269e8c60406161deccfc94f"]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x80) 1.038312404s ago: executing program 2 (id=1984): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000e8ff0000000000ff000044850000000e000000a500000050000000"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000580)='kfree\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x5c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xb00}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth1_to_batadv\x00'}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x2}]}], {0x14, 0x10}}, 0xa4}, 0x1, 0x0, 0x0, 0x20000050}, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, r2) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) bind$can_raw(r3, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)={0x2, 0x4, 0x8, 0x1, 0x80, r2, 0x8, '\x00', 0x0, r3, 0x5, 0x4, 0x1}, 0x50) 1.035485712s ago: executing program 0 (id=1985): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) (async, rerun: 64) r4 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) sendmsg$NL80211_CMD_DEAUTHENTICATE(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x84, r2, 0x1, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x6, 0x28}}}}, [@NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_SSID={0xd, 0x34, @random="a4bd5ca5106b029c56"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_SSID={0x10, 0x34, @random="9614b0ca33e01a98736b4429"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}]}, 0x84}, 0x1, 0x0, 0x0, 0x20004005}, 0x84) (async) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) listen(r5, 0x1) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000880)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000080)={&(0x7f0000000240)={0x610, r2, 0x300, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0xe, 0x1b}}}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x8d8}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x18a}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x6, 0xcd, [0x101]}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x12be}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_FRAME={0x349, 0x33, @probe_response={{{0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1}, {0x40}, @broadcast, @device_a, @from_mac=@broadcast, {0x9, 0x40}}, 0x101, @default, 0x2088, @val={0x0, 0x6, @default_ibss_ssid}, @val={0x1, 0x6, [{0x24}, {0x60, 0x1}, {0x2}, {0x3}, {0x9}, {0xb, 0x1}]}, @val={0x3, 0x1, 0x40}, @val={0x4, 0x6, {0xc, 0x0, 0x2, 0x1}}, @val={0x6, 0x2, 0x6}, @val={0x2d, 0x1a, {0x8, 0x3, 0x6, 0x0, {0xfffffffffffffffb, 0x3, 0x0, 0x3fe}, 0x6, 0x9b, 0xc0}}, @void, @void, [{0xdd, 0x67, "b74ce9487a895be78c1a5ac63e008cacb8acab63f196151ac5ee331bf38e0fa21510d230a6cadcea79e9d4e7cb7e38d89d2823febc3a535674f3fd18b1eea96240d487e39966413c7a776508ab16a6c566504cb40b76edb03a757ac04b63c72edd5fd0d468e2db"}, {0xdd, 0x6c, "ee5a84a33c90a4c726513b8be5e559d7c8fca7f9b81f333bd8eccf47d2e24c82ed9b1c422f812f4d836dc5c48cea3d7239ae726a5032b243019a65858c2450568b069e4c658a92a1051069350670681802ca8b8f77d8a3923bd2a71237072d93e954089449ff8a14b2efca27"}, {0xdd, 0xc9, "3f08a7e2418216aaca48af3ce9ae8646a4f83a1d53e6684ed584a6a9ab47d1f9d2521457d172c4c879b2c8238f28f419b9d3dd7b36f3d555de3fb3eed1fba6e498abe979611e21607f6a0789d665141c6a2ae6510a41364889ea9724a728d4a12efac7c2158886eeb0a1e70dce30ace10ee075490de50f99b9b8bef88e7aaf92dae90edf9f9247e8ad859f75f05ef31d5bb8f355807464af2b19c6e996e1397528d2075560a2d767309517fc1a3eda78c7e55afbab8619a7bbd0b44134cc433a8aada56a5f3948f5d5"}, {0xdd, 0x41, "9ba709ea2c05edee32efd3b66fbb19a7e300af57d8d0f8bbc5c4a4f69d7d6ddf3138c6938b51ac9c2427a2f1ce98e8336f683130fcf3b3033f429d0f783fc67d85"}, {0xdd, 0xf7, "65a1887db233441ad454ae97a4dc5e02e140a749585bcbc0bd800a76e01156cf862c4c767faad12081895293e79326cdf0384b431f3553abfc909f105e53cdfd64d6bfc7c1ccc5594d745446d7f60d3aed0b1c118c12317862b316055ffec8fdd1b3758785a30c45cb62890132d97abda2c1fd06068c9c5c83013248537606caeca1280f6c4b4bf4931076358a0b23e15176ab8165228974815bbf90c5815a234a0f9d868e383fff8a2e52514f70b2ce75e09649a40ec6ee2f9f691b837147bb9f9258bc10249f98418af757354ce17f64ec5151b661cc32874424fb82d446414532559cf856686b1defb9f9c417919e5b87f8a655435a"}, {0xdd, 0x6, "67300552b4b4"}]}}, @NL80211_ATTR_FRAME={0x270, 0x33, @reassoc_resp={{{0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1}, {0x7}, @broadcast, @device_a, @random="50796fd151b8", {0x3, 0xff}, @value=@ver_80211n={0x0, 0x6, 0x1, 0x1, 0x0, 0x2, 0x1, 0x0, 0x0, 0x1}}, 0x8041, 0x3a, @default, @void, @val={0x2d, 0x1a, {0x4000, 0x0, 0x7, 0x0, {0x8, 0xc, 0x0, 0x6, 0x0, 0x0, 0x0, 0x3, 0x1}, 0x1, 0x3, 0x6}}, [{0xdd, 0x5a, "ca5f9b994d9a9e278e0c38c8b6c29b6b135f188067b99a22891d11d2b30f1427f0a1713c2182fc52c1aeea29a32fb3a780a6ed97f896330322a5ae72f84e580c4d1de1ffe7b5286a3d375842d1c51a10f84c4d2dbaddbb4a6e14"}, {0xdd, 0xaf, "3ecfbd980134ebd3379f8f5983b682a32c6eeb16ae7efc9cfc498c3f61c4016f2f7ab647d6732ea03213594790760246e1a19c554335169e34d320048586a3a4b853da8cea33ac1c7744e404c07eeedc038f491bfc4487a1cefc1fbcae6a487f222a2e38a72469dfa484fcd7ae8e886a348ff34be45093551b535f1ef1da7181cac4b41f8708803ed3a3007ec89c5b8af1cb6aed0f4a276dab50f3e36cdcc35c6a4d87de0b3a474e5811f8bf75359d"}, {0xdd, 0x95, "e6f93fb3e27044a8d8149a284954c8f414cec6751ee0658298f33d939858561b59f3522a736efafdb9f483acf12f30cc0f2b81d935eb6f9cfdf0c3cdbddf449a4da05d94168af2d90abcb3e3daa7f44f8e91540cdef33b38de947db2d316ee7ecf48c754863b44ea6e0439190027b2f35c1ab5189a7f0e43052cd2ba801294cf13f8d2cdca63ed1492be34e1c7b9a8aed4239a6731"}, {0xdd, 0x1f, "156537da229bfa20bff77ba32c713309e2408cb82443205e6d13d664748df3"}, {0xdd, 0x67, "53be607b409415c11facaf734fc00f85ebc280564f1b1710ba9f84b71e4708ed05d0ce2065b8317aec7248fd8f4c13d2d0807849e23f30c64241aff25b6c0baa28acbc507b29b5e5ca6602b3fbc91ffeca2d36e7b5cd8388f5f0f2d7ce815a0b3cc39742492afb"}]}}]}, 0x610}, 0x1, 0x0, 0x0, 0x44004}, 0x41) 939.412144ms ago: executing program 4 (id=1986): r0 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @broadcast}}, &(0x7f0000000040)=0x1c, 0x80800) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_256={{0x304}, "646f4c370016e8a8", "b9a390786674af2759035555b160c4d927625bf58969974f656bce6fb66855f3", "c68de14d", "133cc0467c5adb63"}, 0x38) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x5, &(0x7f0000000740)=@framed={{}, [@btf_id={0x18, 0x2, 0x3, 0x0, 0x3}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 904.296612ms ago: executing program 2 (id=1987): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000080)={0x42, 0x800000, 0x8, 0x7, 0x0, 0x81}) (async) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000080)={0x42, 0x800000, 0x8, 0x7, 0x0, 0x81}) write$bt_hci(r0, &(0x7f0000000080)=ANY=[], 0x6) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x240, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) (async) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) ioctl$TUNSETPERSIST(r1, 0x400454cb, 0x1) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000000)={0x4, 0x9, 0x1, 0xf, 0x8001}) (async) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000000)={0x4, 0x9, 0x1, 0xf, 0x8001}) close(r1) (async) close(r1) 860.210886ms ago: executing program 3 (id=1988): pipe(&(0x7f00000045c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r2, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r2, 0x0) (async) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r2, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f00000010c0)="2ae2", 0x2}], 0x1, 0x1) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) accept4(r4, 0x0, 0x0, 0x0) (async) r5 = accept4(r4, 0x0, 0x0, 0x0) ppoll(&(0x7f00000001c0)=[{r5, 0x8038}], 0x1, &(0x7f00000003c0), 0x0, 0x0) (async) ppoll(&(0x7f00000001c0)=[{r5, 0x8038}], 0x1, &(0x7f00000003c0), 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r6, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000140)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) (async) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000140)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) ioctl$SIOCGETNODEID(r1, 0x89e1, &(0x7f0000000100)={0x4}) r7 = accept4(r3, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r7) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r7) splice(r0, 0x0, r7, 0x0, 0x10000000000066, 0xa) 803.526615ms ago: executing program 4 (id=1989): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x41071, 0xffffffffffffffff, 0x0) getsockopt$sock_buf(r0, 0x1, 0x4d, 0xffffffffffffffff, &(0x7f0000000000)) 747.656786ms ago: executing program 1 (id=1990): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f00000001c0)={0x1, &(0x7f0000000140)=[{0x6, 0x8, 0x3, 0x4}]}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001c80)=@newtaction={0x6c, 0x30, 0x871a15abc695fb3d, 0x0, 0x80000, {}, [{0x58, 0x1, [@m_vlan={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x7ea}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0xfffff800, 0x40, 0x1, 0x3, 0x80000001}, 0x2}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000044}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={0xffffffffffffffff, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb, 0x0, 0x0, 0x10, &(0x7f0000000380), 0x0, 0x0, 0xc1, 0x8, 0x0, 0x0}}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="100100002e00090027bd70000000000004000000fa0017"], 0x110}, 0x1, 0x0, 0x0, 0x42845}, 0x84) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_DEL_KEY(r6, &(0x7f0000000440)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="000127bd7000fddbdf25280000000600060001000000060006000300000006000400a0aa0000"], 0x2c}, 0x1, 0x0, 0x0, 0x95}, 0x4) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x44, 0x10, 0x403, 0xfffffffd, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8, 0x3, 0x280}, @IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0x9}]}}}]}, 0x44}}, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x26}}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x60040, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_SET(r9, &(0x7f0000000300)={&(0x7f00000001c0), 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x58, r10, 0x1, 0x0, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x9}}]}, 0x58}}, 0x110) close(r8) ioctl$BTRFS_IOC_TREE_SEARCH(r5, 0xd0009411, &(0x7f00000006c0)={{0x0, 0x8, 0x5, 0x6, 0x3, 0x2, 0x8, 0x7, 0x2, 0x2, 0x8001, 0xffffffffffff0000, 0x8, 0x0, 0x10001}}) ioctl$BTRFS_IOC_INO_LOOKUP(r5, 0xd0009412, &(0x7f00000022c0)={r11, 0x4e1}) socket$unix(0x1, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 682.565754ms ago: executing program 3 (id=1991): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) r3 = socket$kcm(0x21, 0x2, 0x2) sendmsg$inet(r3, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x4014011) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r5, &(0x7f0000000000), 0x4b, 0x20008005, &(0x7f0000000000)={0x2, 0x4e20}, 0x10) recvmmsg(r5, &(0x7f0000000280)=[{{0x0, 0x0, 0x0}, 0x10000}], 0x1, 0x18041, 0x0) recvfrom(r5, 0x0, 0x0, 0x8219c12b6235dce5, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xd, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa30e, 0x1, 0xfffffffa}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040001}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=@newtfilter={0x54, 0x2c, 0xd3f, 0x70b524, 0x25dfdbfa, {0x0, 0x0, 0x0, r4, {0xfff3, 0xffe0}, {}, {0x7, 0xfff2}}, [@filter_kind_options=@f_flow={{0x9}, {0x24, 0x2, [@TCA_FLOW_ADDEND={0x8, 0x5, 0xc3e1}, @TCA_FLOW_DIVISOR={0x8, 0x8, 0x5}, @TCA_FLOW_KEYS={0x8, 0x1, 0x18d0b}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4008848}, 0xc884) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000600)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r8, @ANYBLOB="0c00990000000000000000000800a000c215000008009f000d000000080026000816"], 0x40}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 679.087525ms ago: executing program 2 (id=1992): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x38}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=@newtaction={0x5c, 0x30, 0x301, 0x0, 0x0, {}, [{0x48, 0x1, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xffffffff}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x5c}}, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)={0x118, 0x2f, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x107, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac08}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast2}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be", @typed={0x8, 0xe9, 0x0, 0x0, @ipv4=@remote}]}]}, 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) 623.370407ms ago: executing program 4 (id=1993): r0 = socket(0x2c, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xff}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r1, &(0x7f0000000140), &(0x7f0000000080)=@udp6=r0}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r1, &(0x7f0000000140), &(0x7f0000000080)=@udp=r0}, 0x20) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1005c, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x31, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1b}, 0xa1) writev(r2, &(0x7f0000000700), 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x401c5820, &(0x7f0000000080)) 507.953131ms ago: executing program 4 (id=1994): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x3, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x42}, [], {0x95, 0x0, 0x5a5}}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x94) r3 = socket(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r5) getsockopt$inet_sctp_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000000180)={0x0, 0x5}, &(0x7f00000001c0)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r3, 0x84, 0x19, &(0x7f00000002c0)={r6, 0xd300}, 0x8) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0xfffffffe, 0x8}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newtfilter={0x68, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {}, {0xfff1, 0x4}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x38, 0x2, [@TCA_CGROUP_ACT={0x34}]}}]}, 0x68}}, 0x0) bind$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x0, @any, 0xfffc, 0x1}, 0xe) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000980)={0x30, r1, 0x1, 0x0, 0x8000000, {}, [@WGDEVICE_A_PEERS={0x8, 0x8, 0x0, 0x1, [{0x4}]}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x3, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x42}, [], {0x95, 0x0, 0x5a5}}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x94) (async) socket(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket(0x10, 0x803, 0x2) (async) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r5) (async) getsockopt$inet_sctp_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000000180)={0x0, 0x5}, &(0x7f00000001c0)=0x8) (async) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r3, 0x84, 0x19, &(0x7f00000002c0)={r6, 0xd300}, 0x8) (async) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) (async) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) (async) sendmsg$nl_route_sched(r3, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0xfffffffe, 0x8}}]}}]}, 0x48}}, 0x0) (async) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newtfilter={0x68, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {}, {0xfff1, 0x4}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x38, 0x2, [@TCA_CGROUP_ACT={0x34}]}}]}, 0x68}}, 0x0) (async) bind$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x0, @any, 0xfffc, 0x1}, 0xe) (async) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000980)={0x30, r1, 0x1, 0x0, 0x8000000, {}, [@WGDEVICE_A_PEERS={0x8, 0x8, 0x0, 0x1, [{0x4}]}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) (async) 391.40854ms ago: executing program 3 (id=1995): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f0000000080)=0x2, 0x4) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x4300, 0xc, 0xc, 0x2, [@const={0x0, 0x0, 0x0, 0x9, 0x3}]}}, 0x0, 0x26}, 0x20) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'veth0_vlan\x00'}) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='io.stat\x00', 0x0, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000180)=@ipv4_delrule={0x24, 0x21, 0x1, 0x0, 0x0, {}, [@FRA_GENERIC_POLICY=@FRA_PROTOCOL={0x5, 0x15, 0x3}]}, 0x24}}, 0x40) (async) write$tcp_mem(r3, &(0x7f0000000200)={0x5, 0x20, 0x8, 0x20, 0x8}, 0x48) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000001c0)={'bond_slave_0\x00', &(0x7f0000000280)=@ethtool_gstrings}) sendto$inet6(r0, 0x0, 0x0, 0x8c41c9fbe1f2d01f, &(0x7f0000000180)={0xa, 0x4e20, 0xfdf, @loopback, 0x9}, 0x1c) 287.332456ms ago: executing program 2 (id=1996): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000009e00000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x3, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5}, 0x50) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x14, r4, 0x1, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000580)={0x2c, r6, 0x1, 0x70bd2d, 0x0, {0x22}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}]}]}, 0x2c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xb, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x0, 0x700}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x6, 0x0, 0x6, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff0, 0x50}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x5, 0x0, 0xd, 0x0}, {0x18, 0x2, 0x2, 0x0, r2}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x5, 0x1, 0x5, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) tee(r0, r1, 0x27073e12, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x3a) 284.627257ms ago: executing program 4 (id=1997): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000100)={'lo\x00', &(0x7f0000000140)=@ethtool_per_queue_op={0x4b, 0xf, [0x2, 0x8, 0x10000, 0x7, 0x100, 0xfffffff9, 0xfffffffb, 0xb3, 0x3, 0x10001, 0x3107a6ef, 0xa889, 0xff, 0x401, 0x6, 0xfffffffd, 0xe03b, 0x2, 0x2, 0x2, 0x7f, 0x6, 0x7, 0x84, 0x0, 0x0, 0x9, 0x9, 0x1, 0x8, 0x0, 0xab, 0xb09, 0x1e, 0x2, 0xfffffffb, 0x10, 0x6, 0x0, 0x7, 0x5, 0xffff, 0x2, 0xf974, 0x45c, 0x0, 0x7e, 0x4, 0x0, 0xffffffff, 0x100, 0x1d65, 0x2, 0x4, 0x80e, 0x9, 0xffff0001, 0x1, 0x3, 0x10000, 0x100, 0xb12, 0x10001, 0x800, 0x1, 0x5, 0x4, 0x8, 0x2, 0xa, 0x10001, 0xffff, 0x2, 0x0, 0xb, 0x3ff, 0x8, 0x68, 0x800, 0x1000, 0xffffaa53, 0x1, 0x5a5, 0xc, 0x1, 0x1, 0x9, 0x52, 0x2, 0x2, 0x3, 0x2, 0x3, 0x7f, 0x10, 0x6, 0x9, 0x9, 0x3, 0x7fffffff, 0x400, 0x8, 0x4, 0x401, 0xfffffff9, 0x6867bc93, 0x8, 0x6, 0x10000, 0x834, 0x1, 0x1, 0xa021, 0xc, 0x3, 0x5b, 0x6, 0x2, 0x1, 0x4d51, 0x5, 0xc, 0x1a5, 0x1, 0x7, 0x8, 0x101, 0x3]}}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x300, 0xffffffff, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x3, 0x2, 0x0, 0x1, [@IFLA_GENEVE_DF={0x0, 0xd, 0x7}]}}}]}, 0x3c}}, 0x0) 215.568448ms ago: executing program 1 (id=1998): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f00000000c0)=@gcm_256={{0x303}, "0000000000000208", "5171bb74cd3660dab9e200", "d8a024e5", "20000926000200"}, 0x38) (async) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) sendmsg(r0, &(0x7f0000000640)={&(0x7f00000000c0)=@ieee802154={0x24, @long={0x3, 0x3, {0xaaaaaaaaaaaa0202}}}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x11000000}, 0x0) (async) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, 0x58) (async) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/153, 0x99, 0x0, &(0x7f0000000140)=""/112, 0x70}, &(0x7f0000000080)=0x40) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000001840), 0x4) 212.23243ms ago: executing program 3 (id=1999): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x2, &(0x7f0000000100)=@raw=[@ldst={0x1, 0x0, 0x4, 0x0, 0x1, 0x82}, @jmp={0x5, 0x0, 0x9}], &(0x7f0000000280)='GPL\x00'}, 0x90) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)=ANY=[@ANYBLOB="580000000009030000000000000000000700000008000540000b1ed7f408000140000006000000010073797a300000000024000200140001800800bed6937e98122bf85d9a4dd0a5600100e0000002080002000000"], 0x58}, 0x1, 0x0, 0x0, 0x4040884}, 0x0) 149.29498ms ago: executing program 4 (id=2000): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r0) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000580)={0x1c8, r1, 0x100, 0x70bd29, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}, {0xc, 0x8f, 0x9}, {0xc, 0x90, 0x3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}, {0xc, 0x8f, 0x89a9}, {0xc, 0x90, 0x7fffffff}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}, {0xc, 0x8f, 0x1}, {0xc, 0x90, 0x600}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}, {0xc, 0x8f, 0x3}, {0xc, 0x90, 0x6}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x3}, {0xc, 0x8f, 0x400}, {0xc, 0x90, 0x7}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x2}, {0xc, 0x8f, 0x7fffffffffffffff}, {0xc, 0x90, 0x8001}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}, {0xc, 0x8f, 0x7e}, {0xc, 0x90, 0xa1}}]}, 0x1c8}}, 0x40014) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4001, 0xfffffffc, @loopback, 0xfffffffa}, 0x1c) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x62}}}, @IFLA_MASTER={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40c8030}, 0x0) 54.956979ms ago: executing program 1 (id=2001): r0 = accept$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @remote}, &(0x7f0000000040)=0x10) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000280)=[@in={0x2, 0x4e22, @rand_addr=0x64010100}, @in={0x2, 0x4e21, @empty}, @in={0x2, 0x4e23, @empty}], 0x19) r1 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x4) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000180)={@local, 0x0}, &(0x7f00000001c0)=0x14) r4 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x4e21, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x5}, 0x1c) r5 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) setsockopt$inet6_IPV6_PKTINFO(r4, 0x29, 0x32, &(0x7f0000000140)={@private0={0xfc, 0x0, '\x00', 0x1}, r6}, 0x14) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f00000002c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7be", 0x10) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r9, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r9, &(0x7f0000000380)={0x2, 0x4e21, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r9, 0x6, 0xd, &(0x7f0000000040)='bbr', 0x3) connect$inet(r9, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1f}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r9, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r9, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r9, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) r10 = accept4(r8, 0x0, 0x0, 0x80800) sendmmsg$alg(r10, &(0x7f0000000040)=[{0x0, 0x0, 0x0}], 0x1, 0x40800) recvmsg(r10, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x48, 0x10, 0x1, 0x0, 0x2, {0x0, 0x0, 0x0, r11, 0x18f40, 0x22008}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e24}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e24}]}}}]}, 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000200)=@RTM_DELMDB={0x78, 0x55, 0x2, 0x70bd29, 0x25dfdbfb, {0x7, r2}, [@MDBA_SET_ENTRY={0x20, 0x1, {r3, 0x1, 0x2, 0x4, {@ip4=@local, 0x800}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r6, 0x0, 0x2, 0x3, {@ip4=@empty, 0x86dd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r11, 0x1, 0x1, 0x2, {@in6_addr=@mcast2, 0x86dd}}}]}, 0x78}}, 0x40080) 53.717875ms ago: executing program 2 (id=2002): socket$phonet_pipe(0x23, 0x5, 0x2) socket$nl_route(0x10, 0x3, 0x0) socket(0x25, 0x5, 0x0) socket$phonet(0x23, 0x2, 0x1) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000050000000900010073797a30000000002c000000030a01010000000000000000050000000900010073797a30000000000900030073797a"], 0xc8}}, 0x0) socket$packet(0x11, 0x3, 0x300) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004000000001000"], 0x0, 0x26, 0x0, 0x1}, 0x28) socket$inet_mptcp(0x2, 0x1, 0x106) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r1, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000400)=r2, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x20000, 0x0) socket(0x400000000010, 0x3, 0x0) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)=@updpolicy={0xb8, 0x19, 0x1, 0x70bd29, 0x25dfdbfe, {{@in6=@dev={0xfe, 0x80, '\x00', 0x17}, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x4, 0x0, 0x3, 0x0, 0x2, 0xfffffffffffffffd}, {0x0, 0x800, 0x6}, 0x0, 0x0, 0x1, 0x0, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x24008040}, 0x8000) syz_emit_ethernet(0x46, &(0x7f0000000400)={@local, @random="df00004000", @void, {@ipv4={0x800, @tcp={{0x9, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x11}, {[@ssrr={0x89, 0x7, 0xa2, [@broadcast]}, @cipso={0x86, 0x6, 0x1}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) 53.423806ms ago: executing program 0 (id=2003): r0 = socket(0x2a, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="540100001800010000000000000000001d0100001500030000000000000000008ca5be073cff296e020000001e01060001", @ANYRESOCT], 0x154}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000000), 0x4) syz_emit_ethernet(0x44, &(0x7f0000000100)={@broadcast, @link_local, @void, {@llc={0x4, {@snap={0x0, 0x1, "5080", "dd22e9", 0x8848, "16430801ee6a95fea33ec248e5866096d94bac91d4e2f33024c002efa8aab77f0d325dba3ce6ca8ac00fba70f6"}}}}}, 0x0) 0s ago: executing program 3 (id=2004): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000001c0)={'team0\x00', 0x0}) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={0x20, 0x1405, 0x621, 0x0, 0x0, "", [{{0x8}, {0x8}}]}, 0x20}}, 0x0) syz_genetlink_get_family_id$smc(&(0x7f0000000c00), r3) r4 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'team_slave_1\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)={0x5c, r1, 0x1, 0x70bd28, 0x25dfdbff, {}, [{{0x8, 0x1, r2}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x400}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) r6 = socket$phonet_pipe(0x23, 0x5, 0x2) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x28, r8, 0x1, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_POWER_MODE={0x8, 0x1a, 0x2}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x80c0) sendmsg$NL80211_CMD_AUTHENTICATE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)={0xa8, r8, 0x301, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x8, 0x1000}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x4}, @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_SSID={0x17, 0x34, @random="58126166b6ae60d52938ebde402e53caac63b4"}, @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xc}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x81}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3a}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1716}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2d}]]}, 0xa8}, 0x1, 0x0, 0x0, 0x4000004}, 0x48004) kernel console output (not intermixed with test programs): ed promiscuous mode [ 87.649662][ T5835] debugfs: 'hsr0' already exists in 'hsr' [ 87.655479][ T5835] Cannot create hsr debugfs directory [ 87.674853][ T5825] team0: Port device team_slave_1 added [ 87.706070][ T5831] hsr_slave_0: entered promiscuous mode [ 87.712918][ T5831] hsr_slave_1: entered promiscuous mode [ 87.719769][ T5831] debugfs: 'hsr0' already exists in 'hsr' [ 87.725516][ T5831] Cannot create hsr debugfs directory [ 87.736477][ T5826] hsr_slave_0: entered promiscuous mode [ 87.743000][ T5826] hsr_slave_1: entered promiscuous mode [ 87.749831][ T5826] debugfs: 'hsr0' already exists in 'hsr' [ 87.755660][ T5826] Cannot create hsr debugfs directory [ 87.824141][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.831608][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.858312][ T5825] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.896395][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.903516][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.930326][ T5825] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.163752][ T5825] hsr_slave_0: entered promiscuous mode [ 88.172474][ T5825] hsr_slave_1: entered promiscuous mode [ 88.180497][ T5825] debugfs: 'hsr0' already exists in 'hsr' [ 88.186253][ T5825] Cannot create hsr debugfs directory [ 88.558074][ T5835] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 88.571635][ T5835] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 88.582861][ T5835] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 88.594609][ T5835] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 88.658324][ T5833] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 88.677037][ T5833] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 88.711871][ T5833] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 88.735130][ T5833] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 88.800211][ T5826] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 88.812700][ T5826] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 88.824768][ T5826] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 88.836181][ T5826] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 88.935711][ T5831] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 88.950533][ T5831] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 88.965977][ T5831] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 88.979023][ T5831] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 89.031768][ T5835] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.105575][ T5835] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.119935][ T5828] Bluetooth: hci1: command tx timeout [ 89.120343][ T5834] Bluetooth: hci0: command tx timeout [ 89.125533][ T5846] Bluetooth: hci3: command tx timeout [ 89.157089][ T1010] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.164401][ T1010] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.198627][ T5846] Bluetooth: hci2: command tx timeout [ 89.198636][ T5828] Bluetooth: hci4: command tx timeout [ 89.216398][ T5833] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.224899][ T5825] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 89.250655][ T1010] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.257866][ T1010] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.267616][ T5825] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 89.281208][ T5825] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 89.301484][ T5825] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 89.337212][ T5833] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.372581][ T1328] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.379783][ T1328] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.410452][ T1010] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.417645][ T1010] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.511619][ T5831] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.549608][ T5826] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.584837][ T5831] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.651558][ T5826] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.671503][ T1151] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.678714][ T1151] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.735495][ T1328] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.742700][ T1328] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.771695][ T1328] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.779011][ T1328] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.816065][ T1328] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.823317][ T1328] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.906071][ T5825] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.946884][ T5835] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.985379][ T5831] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 90.037383][ T5825] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.091071][ T1151] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.098359][ T1151] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.143754][ T5833] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.162751][ T1151] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.170001][ T1151] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.310951][ T5835] veth0_vlan: entered promiscuous mode [ 90.414737][ T5835] veth1_vlan: entered promiscuous mode [ 90.481095][ T5833] veth0_vlan: entered promiscuous mode [ 90.527221][ T5833] veth1_vlan: entered promiscuous mode [ 90.540643][ T5835] veth0_macvtap: entered promiscuous mode [ 90.580360][ T5835] veth1_macvtap: entered promiscuous mode [ 90.605242][ T5831] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.658662][ T5826] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.679904][ T5833] veth0_macvtap: entered promiscuous mode [ 90.714905][ T5833] veth1_macvtap: entered promiscuous mode [ 90.735603][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.771624][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.809473][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.837081][ T1010] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.847367][ T1010] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.860160][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.903361][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.913213][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.945599][ T5825] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.957063][ T5831] veth0_vlan: entered promiscuous mode [ 90.973817][ T1328] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.982811][ T1328] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.020151][ T1328] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.032769][ T1328] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.094380][ T5831] veth1_vlan: entered promiscuous mode [ 91.182372][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.198335][ T5846] Bluetooth: hci3: command tx timeout [ 91.201103][ T5828] Bluetooth: hci1: command tx timeout [ 91.203779][ T5846] Bluetooth: hci0: command tx timeout [ 91.213140][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.247193][ T5825] veth0_vlan: entered promiscuous mode [ 91.278284][ T5846] Bluetooth: hci2: command tx timeout [ 91.279505][ T5828] Bluetooth: hci4: command tx timeout [ 91.303795][ T1151] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.315667][ T5831] veth0_macvtap: entered promiscuous mode [ 91.319620][ T1151] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.340373][ T5825] veth1_vlan: entered promiscuous mode [ 91.377381][ T5826] veth0_vlan: entered promiscuous mode [ 91.400517][ T5831] veth1_macvtap: entered promiscuous mode [ 91.401369][ T1328] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.423272][ T1328] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.433945][ T5826] veth1_vlan: entered promiscuous mode [ 91.471944][ T1010] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.485736][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.495488][ T1010] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.527457][ T5825] veth0_macvtap: entered promiscuous mode [ 91.551726][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.561930][ T5835] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 91.563695][ T5825] veth1_macvtap: entered promiscuous mode [ 91.627503][ T1116] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.642342][ T1116] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.733901][ T1116] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.745243][ T1116] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.810895][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.826438][ T5948] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2'. [ 91.885147][ T5826] veth0_macvtap: entered promiscuous mode [ 91.909198][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.927009][ T1328] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.936414][ T1328] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.962202][ T5826] veth1_macvtap: entered promiscuous mode [ 91.980346][ T1116] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.989448][ T1116] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.023561][ T1116] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.032999][ T1116] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.098847][ T1328] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.111703][ T1328] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.121728][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.170238][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.253189][ T1116] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.315171][ T1116] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.326322][ T1116] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.346317][ T1010] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.361631][ T1010] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.389166][ T1116] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.466301][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.485225][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.636585][ T5965] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7'. [ 92.686786][ T5965] netlink: 'syz.1.7': attribute type 29 has an invalid length. [ 92.719627][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.727512][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.754777][ T5969] netlink: 'syz.1.7': attribute type 29 has an invalid length. [ 92.806486][ T5971] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10'. [ 92.827923][ T5971] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.857537][ T5965] netlink: 'syz.1.7': attribute type 29 has an invalid length. [ 92.882363][ T5965] netlink: 'syz.1.7': attribute type 29 has an invalid length. [ 92.911263][ T5965] netlink: 'syz.1.7': attribute type 29 has an invalid length. [ 92.944919][ T5971] xt_ipcomp: unknown flags 1D [ 92.959740][ T5965] netlink: 'syz.1.7': attribute type 29 has an invalid length. [ 92.972113][ T5965] netlink: 'syz.1.7': attribute type 29 has an invalid length. [ 92.983311][ T5973] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 93.027382][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.058089][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.278874][ T5828] Bluetooth: hci1: command tx timeout [ 93.279138][ T5846] Bluetooth: hci3: command tx timeout [ 93.284340][ T5828] Bluetooth: hci0: command tx timeout [ 93.355331][ T5985] netlink: 4 bytes leftover after parsing attributes in process `syz.2.15'. [ 93.366182][ T5828] Bluetooth: hci2: command tx timeout [ 93.373188][ T5834] Bluetooth: hci4: command tx timeout [ 93.548676][ T1328] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 93.674973][ T6005] netlink: 72 bytes leftover after parsing attributes in process `syz.2.18'. [ 93.684790][ T6005] netlink: 72 bytes leftover after parsing attributes in process `syz.2.18'. [ 94.400062][ T6026] ksmbd: Unknown IPC event: 3, ignore. [ 94.457373][ T6028] netlink: 12 bytes leftover after parsing attributes in process `syz.2.26'. [ 94.481054][ T6028] netlink: 132 bytes leftover after parsing attributes in process `syz.2.26'. [ 94.721885][ T6040] x_tables: unsorted entry at hook 1 [ 94.858706][ T6029] infiniband !yz!: set active [ 94.865191][ T6029] infiniband !yz!: added team_slave_0 [ 94.972974][ T6029] RDS/IB: !yz!: added [ 94.981928][ T6029] smc: adding ib device !yz! with port count 1 [ 95.003748][ T6029] smc: ib device !yz! port 1 has no pnetid [ 95.036119][ T6047] netlink: 'syz.2.32': attribute type 1 has an invalid length. [ 95.079492][ T6047] netlink: 4 bytes leftover after parsing attributes in process `syz.2.32'. [ 95.105153][ T6047] netlink: 4 bytes leftover after parsing attributes in process `syz.2.32'. [ 96.586560][ T6102] netlink: 'syz.4.50': attribute type 1 has an invalid length. [ 96.651563][ T6102] gretap1: entered promiscuous mode [ 96.752946][ T6105] netlink: 'syz.4.50': attribute type 1 has an invalid length. [ 96.854445][ T6108] trusted_key: syz.1.51 sent an empty control message without MSG_MORE. [ 97.134227][ T43] cfg80211: failed to load regulatory.db [ 97.338755][ T6130] __nla_validate_parse: 5 callbacks suppressed [ 97.338774][ T6130] netlink: 8 bytes leftover after parsing attributes in process `syz.4.57'. [ 97.368390][ T6130] netlink: 48 bytes leftover after parsing attributes in process `syz.4.57'. [ 97.388436][ T6132] netlink: 20 bytes leftover after parsing attributes in process `syz.3.56'. [ 97.455342][ T6133] netlink: 96 bytes leftover after parsing attributes in process `syz.4.57'. [ 98.086658][ T6166] netlink: 16 bytes leftover after parsing attributes in process `syz.3.66'. [ 98.327470][ T6172] netlink: 256 bytes leftover after parsing attributes in process `syz.1.68'. [ 98.356822][ T6172] validate_nla: 1 callbacks suppressed [ 98.356840][ T6172] netlink: 'syz.1.68': attribute type 9 has an invalid length. [ 98.430428][ T6177] tipc: Started in network mode [ 98.435801][ T6177] tipc: Node identity ea446f60d36, cluster identity 4711 [ 98.443665][ T6177] tipc: Enabled bearer , priority 0 [ 98.555235][ T6177] tipc: Disabling bearer [ 98.602753][ T6181] x_tables: duplicate underflow at hook 2 [ 98.626464][ T6181] x_tables: duplicate underflow at hook 2 [ 98.835497][ T6189] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 99.067627][ T6196] erspan0: entered promiscuous mode [ 99.116439][ T6196] erspan0: entered allmulticast mode [ 99.130407][ T6199] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 99.404593][ T6211] netlink: 96 bytes leftover after parsing attributes in process `syz.1.81'. [ 99.437509][ T6199] netlink: 8 bytes leftover after parsing attributes in process `syz.4.77'. [ 99.513473][ T6217] Zero length message leads to an empty skb [ 99.525772][ T6218] netlink: 52 bytes leftover after parsing attributes in process `syz.2.83'. [ 99.551170][ T6218] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.559061][ T6218] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.581421][ T6218] netlink: 52 bytes leftover after parsing attributes in process `syz.2.83'. [ 100.098039][ T6243] hsr_slave_0: left promiscuous mode [ 100.118378][ T6243] hsr_slave_1: left promiscuous mode [ 100.191006][ T6245] warning: `syz.4.92' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 100.373102][ T6263] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 100.429363][ T6261] tipc: Enabling of bearer rejected, failed to enable media [ 100.699806][ T6277] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 100.993716][ T6293] sctp: [Deprecated]: syz.0.105 (pid 6293) Use of struct sctp_assoc_value in delayed_ack socket option. [ 100.993716][ T6293] Use struct sctp_sack_info instead [ 101.046125][ T6291] tipc: Started in network mode [ 101.056715][ T6291] tipc: Node identity 2ecb95b3898c, cluster identity 4711 [ 101.064300][ T6291] tipc: Enabled bearer , priority 0 [ 101.101179][ T6291] syzkaller0: entered promiscuous mode [ 101.140050][ T6291] syzkaller0: entered allmulticast mode [ 101.270139][ T6291] tipc: Resetting bearer [ 101.361168][ T6291] tipc: Resetting bearer [ 101.436338][ T6291] tipc: Disabling bearer [ 101.499716][ T6312] syzkaller0: entered promiscuous mode [ 101.505257][ T6312] syzkaller0: entered allmulticast mode [ 101.765668][ T6328] bond1: option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 101.786999][ T6328] bond1 (unregistering): Released all slaves [ 101.932947][ T6344] tc_dump_action: action bad kind [ 102.109527][ T6352] netlink: 'syz.4.122': attribute type 1 has an invalid length. [ 102.119336][ T6346] delete_channel: no stack [ 102.141613][ T6352] gretap1: entered promiscuous mode [ 102.212088][ T6355] netlink: 'syz.0.124': attribute type 23 has an invalid length. [ 102.377061][ T6368] bridge: RTM_NEWNEIGH with invalid state 0x8 [ 102.503615][ T6377] __nla_validate_parse: 8 callbacks suppressed [ 102.503639][ T6377] netlink: 12 bytes leftover after parsing attributes in process `syz.0.130'. [ 102.583654][ T6377] netlink: 36 bytes leftover after parsing attributes in process `syz.0.130'. [ 102.665538][ T6389] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.133'. [ 102.867514][ T6397] netlink: 44 bytes leftover after parsing attributes in process `syz.0.135'. [ 102.910916][ T6397] netlink: 24 bytes leftover after parsing attributes in process `syz.0.135'. [ 102.942536][ T6397] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 103.278825][ T6415] netlink: 16 bytes leftover after parsing attributes in process `syz.0.141'. [ 103.295275][ T6416] IPVS: set_ctl: invalid protocol: 136 0.0.0.0:20004 [ 103.382629][ T6422] netlink: 40 bytes leftover after parsing attributes in process `syz.1.146'. [ 103.399437][ T6422] ip6gre1: entered promiscuous mode [ 103.404877][ T6422] ip6gre1: entered allmulticast mode [ 103.471738][ T6425] netlink: 'syz.4.143': attribute type 12 has an invalid length. [ 103.480804][ T6425] netlink: 'syz.4.143': attribute type 29 has an invalid length. [ 103.523310][ T6425] netlink: 148 bytes leftover after parsing attributes in process `syz.4.143'. [ 103.552720][ T6425] netlink: 59 bytes leftover after parsing attributes in process `syz.4.143'. [ 103.580558][ T6431] netlink: 'syz.4.143': attribute type 2 has an invalid length. [ 103.630067][ T6431] netlink: 'syz.4.143': attribute type 2 has an invalid length. [ 103.685445][ T6431] netlink: 'syz.4.143': attribute type 1 has an invalid length. [ 103.709281][ T6431] netlink: 'syz.4.143': attribute type 2 has an invalid length. [ 103.755933][ T6431] netlink: 'syz.4.143': attribute type 1 has an invalid length. [ 103.778224][ T6431] netlink: 'syz.4.143': attribute type 2 has an invalid length. [ 103.786142][ T6431] netlink: 'syz.4.143': attribute type 2 has an invalid length. [ 103.958270][ T6451] delete_channel: no stack [ 104.030935][ T6453] netlink: 64 bytes leftover after parsing attributes in process `syz.2.153'. [ 104.038484][ T6455] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 104.364243][ T6474] netlink: 'syz.4.159': attribute type 1 has an invalid length. [ 104.903754][ T6501] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 105.064871][ T6508] syz.3.168 uses obsolete (PF_INET,SOCK_PACKET) [ 105.369369][ T6526] tunl0: entered promiscuous mode [ 105.660959][ T6532] syzkaller0: entered promiscuous mode [ 105.684046][ T6532] syzkaller0: entered allmulticast mode [ 105.942547][ T6550] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 106.495925][ T6578] bond2: entered allmulticast mode [ 106.523464][ T6578] 8021q: adding VLAN 0 to HW filter on device bond2 [ 106.535328][ T6578] bridge0: port 3(bond2) entered blocking state [ 106.542290][ T6578] bridge0: port 3(bond2) entered disabled state [ 106.588600][ T6578] bond2: entered promiscuous mode [ 106.613676][ T6578] bridge0: port 3(bond2) entered blocking state [ 106.620221][ T6578] bridge0: port 3(bond2) entered forwarding state [ 106.695002][ T6582] tipc: Started in network mode [ 106.700102][ T6582] tipc: Node identity 7206b9d3d237, cluster identity 4711 [ 106.714549][ T6582] tipc: Enabled bearer , priority 0 [ 106.838405][ T6590] syzkaller0: entered promiscuous mode [ 106.845359][ T6590] syzkaller0: entered allmulticast mode [ 106.888053][ T6579] tipc: Resetting bearer [ 106.950938][ T6579] tipc: Disabling bearer [ 107.022458][ T1328] bridge0: port 3(bond2) entered disabled state [ 107.161598][ T6618] batman_adv: batadv0: Adding interface: netdevsim0 [ 107.205251][ T6618] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 107.293740][ T6618] batman_adv: batadv0: Interface activated: netdevsim0 [ 107.593639][ T6642] __nla_validate_parse: 4 callbacks suppressed [ 107.593657][ T6642] netlink: 12 bytes leftover after parsing attributes in process `syz.1.205'. [ 107.650281][ T6639] syzkaller0: entered promiscuous mode [ 107.655987][ T6639] syzkaller0: entered allmulticast mode [ 107.676118][ T6633] netlink: 4 bytes leftover after parsing attributes in process `syz.0.204'. [ 107.744525][ T6645] netlink: 20 bytes leftover after parsing attributes in process `syz.0.204'. [ 108.059081][ T6659] netlink: 8 bytes leftover after parsing attributes in process `syz.0.211'. [ 108.087638][ T6659] PF_CAN: dropped non conform CAN XL skbuff: dev type 280, len 40 [ 108.260234][ T6662] Illegal XDP return value 187437 on prog (id 42) dev syz_tun, expect packet loss! [ 108.466796][ T6672] netlink: 8 bytes leftover after parsing attributes in process `syz.2.215'. [ 108.595037][ T6679] bridge: RTM_NEWNEIGH with invalid ether address [ 108.754672][ T6682] netlink: 44 bytes leftover after parsing attributes in process `syz.0.219'. [ 108.984140][ T6685] netlink: 4 bytes leftover after parsing attributes in process `syz.3.221'. [ 109.006822][ T6685] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 109.059376][ T6685] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 109.105253][ T6712] netlink: 8 bytes leftover after parsing attributes in process `syz.0.225'. [ 109.116110][ T6712] netlink: 24 bytes leftover after parsing attributes in process `syz.0.225'. [ 109.436839][ T6719] netlink: 24 bytes leftover after parsing attributes in process `syz.3.229'. [ 109.527632][ T6719] bond1 (unregistering): Released all slaves [ 110.507511][ T6753] bond0: entered promiscuous mode [ 110.512758][ T6753] bond_slave_0: entered promiscuous mode [ 110.520814][ T6753] bond_slave_1: entered promiscuous mode [ 110.534432][ T6753] batadv0: entered promiscuous mode [ 110.560221][ T6753] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 111.085157][ T6778] Bluetooth: MGMT ver 1.23 [ 111.254780][ T6775] syzkaller0: entered promiscuous mode [ 111.260585][ T6775] syzkaller0: entered allmulticast mode [ 111.267646][ T6776] syzkaller0: entered promiscuous mode [ 111.273360][ T6776] syzkaller0: entered allmulticast mode [ 111.459015][ T6793] validate_nla: 6 callbacks suppressed [ 111.459036][ T6793] netlink: 'syz.3.252': attribute type 2 has an invalid length. [ 111.472516][ T6793] netlink: 'syz.3.252': attribute type 11 has an invalid length. [ 112.464314][ T6801] netlink: 'syz.3.253': attribute type 3 has an invalid length. [ 112.746711][ T6817] netlink: 'syz.3.259': attribute type 10 has an invalid length. [ 112.853714][ T6817] 8021q: adding VLAN 0 to HW filter on device team0 [ 112.891181][ T6817] bond0: (slave team0): Enslaving as an active interface with an up link [ 113.295016][ T6844] __nla_validate_parse: 5 callbacks suppressed [ 113.295037][ T6844] netlink: 8 bytes leftover after parsing attributes in process `syz.0.264'. [ 113.429407][ T6852] netlink: 11 bytes leftover after parsing attributes in process `syz.4.266'. [ 113.493435][ T6844] 8021q: adding VLAN 0 to HW filter on device bond1 [ 113.518841][ T6859] netlink: 24 bytes leftover after parsing attributes in process `syz.3.268'. [ 113.528094][ T6859] openvswitch: netlink: Flow key attr not present in new flow. [ 113.532430][ T6844] bond1: entered promiscuous mode [ 113.565462][ T6844] bond0: (slave bond1): Enslaving as an active interface with an up link [ 113.615125][ T6859] vlan2: entered allmulticast mode [ 114.271467][ T6889] openvswitch: netlink: nsh attribute has 65492 unknown bytes. [ 114.297441][ T6889] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 114.307614][ T6895] netlink: 'syz.0.280': attribute type 1 has an invalid length. [ 114.525138][ T6911] netlink: 24 bytes leftover after parsing attributes in process `syz.1.283'. [ 114.584820][ T6895] veth3: entered promiscuous mode [ 114.585118][ T6915] openvswitch: netlink: Message has 4 unknown bytes. [ 114.603955][ T6916] netlink: 48 bytes leftover after parsing attributes in process `syz.2.286'. [ 114.614076][ T6895] bond2: (slave veth3): Enslaving as a backup interface with a down link [ 114.662298][ T6909] tipc: Started in network mode [ 114.679882][ T6909] tipc: Node identity aaaaaaaaaa32, cluster identity 4711 [ 114.698184][ T6909] tipc: Enabled bearer , priority 10 [ 114.778158][ T6902] netlink: 8 bytes leftover after parsing attributes in process `syz.1.283'. [ 114.863136][ T6930] xt_l2tp: invalid flags combination: 8 [ 115.714996][ T6966] syzkaller1: entered promiscuous mode [ 115.770225][ T6966] syzkaller1: entered allmulticast mode [ 115.828536][ T43] tipc: Node number set to 10005162 [ 115.852030][ T6969] netlink: 12 bytes leftover after parsing attributes in process `syz.4.301'. [ 115.964875][ T6975] ieee802154 phy0 wpan0: encryption failed: -22 [ 116.056085][ T6980] netlink: 12 bytes leftover after parsing attributes in process `syz.0.306'. [ 116.594245][ T7009] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 117.048420][ T7032] netlink: 'syz.2.319': attribute type 1 has an invalid length. [ 117.149593][ T7032] 8021q: adding VLAN 0 to HW filter on device bond1 [ 117.191304][ T7036] vlan2: entered promiscuous mode [ 117.205910][ T7036] bond0: entered promiscuous mode [ 117.233089][ T7036] bond_slave_0: entered promiscuous mode [ 117.239479][ T7036] bond_slave_1: entered promiscuous mode [ 117.248288][ T7041] netlink: 'syz.0.321': attribute type 1 has an invalid length. [ 117.256731][ T7041] netlink: 12 bytes leftover after parsing attributes in process `syz.0.321'. [ 117.504268][ T7058] dvmrp0: entered allmulticast mode [ 117.587348][ T7063] openvswitch: netlink: Key type 31 is not supported [ 117.607542][ T7064] netlink: 8 bytes leftover after parsing attributes in process `syz.1.326'. [ 117.623704][ T7066] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 117.808366][ T7070] netlink: 'syz.2.332': attribute type 6 has an invalid length. [ 117.902547][ T7078] IPVS: set_ctl: invalid protocol: 46 172.20.20.64:20000 [ 118.020711][ T7083] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 118.196943][ T7090] syzkaller0: entered promiscuous mode [ 118.212034][ T7090] syzkaller0: entered allmulticast mode [ 118.250420][ T1213] IPVS: starting estimator thread 0... [ 118.258660][ T7094] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 118.322017][ T7094] syzkaller0: entered promiscuous mode [ 118.328605][ T7098] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 118.329403][ T7094] syzkaller0: entered allmulticast mode [ 118.336049][ T7098] IPv6: NLM_F_CREATE should be set when creating new route [ 118.378532][ T7095] IPVS: using max 25 ests per chain, 60000 per kthread [ 118.504474][ T7104] sctp: [Deprecated]: syz.4.342 (pid 7104) Use of int in maxseg socket option. [ 118.504474][ T7104] Use struct sctp_assoc_value instead [ 118.554314][ T7108] __nla_validate_parse: 4 callbacks suppressed [ 118.554334][ T7108] netlink: 4 bytes leftover after parsing attributes in process `syz.1.343'. [ 118.575063][ T7111] netlink: 4 bytes leftover after parsing attributes in process `syz.1.343'. [ 118.598861][ T7112] openvswitch: netlink: IP tunnel dst address not specified [ 118.659493][ T7114] netlink: 'syz.4.346': attribute type 1 has an invalid length. [ 118.682011][ T7116] netlink: 'syz.1.345': attribute type 1 has an invalid length. [ 118.753936][ T7114] veth3: entered promiscuous mode [ 118.838209][ T7116] netlink: 28 bytes leftover after parsing attributes in process `syz.1.345'. [ 118.863665][ T7117] 8021q: adding VLAN 0 to HW filter on device bond4 [ 118.874883][ T7117] bond3: (slave bond4): making interface the new active one [ 118.893523][ T7117] bond3: (slave bond4): Enslaving as an active interface with an up link [ 118.934441][ T7128] netlink: 48 bytes leftover after parsing attributes in process `syz.3.348'. [ 118.945383][ T7121] bond3: (slave gretap1): Enslaving as a backup interface with an up link [ 118.958947][ T7116] 8021q: adding VLAN 0 to HW filter on device bond3 [ 118.967365][ T7126] veth1_macvtap: left promiscuous mode [ 119.226758][ T7136] netlink: 12 bytes leftover after parsing attributes in process `syz.4.352'. [ 119.252563][ T7139] netlink: 'syz.3.354': attribute type 12 has an invalid length. [ 119.287064][ T7143] netlink: 'syz.2.355': attribute type 8 has an invalid length. [ 119.414141][ T7143] sctp: [Deprecated]: syz.2.355 (pid 7143) Use of int in maxseg socket option. [ 119.414141][ T7143] Use struct sctp_assoc_value instead [ 119.460218][ T7143] netlink: 8 bytes leftover after parsing attributes in process `syz.2.355'. [ 119.579972][ T7156] netlink: 28 bytes leftover after parsing attributes in process `syz.3.357'. [ 119.674621][ T7159] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 120.200875][ T7179] syzkaller0: entered promiscuous mode [ 120.206422][ T7179] syzkaller0: entered allmulticast mode [ 120.451783][ T7197] netlink: 12 bytes leftover after parsing attributes in process `syz.1.370'. [ 120.951030][ T7205] netlink: 'syz.2.373': attribute type 21 has an invalid length. [ 122.327662][ T7227] netlink: 8 bytes leftover after parsing attributes in process `syz.2.378'. [ 122.668683][ T7255] tipc: Enabled bearer , priority 0 [ 122.676976][ T7255] syzkaller0: entered promiscuous mode [ 122.682870][ T7255] syzkaller0: entered allmulticast mode [ 123.183085][ T7266] veth0_to_batadv: mtu less than device minimum [ 123.293822][ T7252] tipc: Resetting bearer [ 123.409257][ T7252] tipc: Disabling bearer [ 123.602287][ T7292] netlink: 8 bytes leftover after parsing attributes in process `syz.4.396'. [ 123.631754][ T7298] netlink: 12 bytes leftover after parsing attributes in process `syz.1.397'. [ 123.655516][ T7298] netlink: 24 bytes leftover after parsing attributes in process `syz.1.397'. [ 123.669791][ T7304] netlink: 516 bytes leftover after parsing attributes in process `syz.2.398'. [ 123.930174][ T7324] netlink: 36 bytes leftover after parsing attributes in process `syz.2.403'. [ 124.116816][ T7338] netlink: 8 bytes leftover after parsing attributes in process `syz.3.405'. [ 124.681840][ T7348] netlink: 4 bytes leftover after parsing attributes in process `syz.0.407'. [ 124.717239][ T60] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 124.731089][ T7348] netlink: 4 bytes leftover after parsing attributes in process `syz.0.407'. [ 124.743892][ T60] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 124.768517][ T60] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 124.873450][ T60] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 125.517163][ T7393] netlink: 'syz.0.419': attribute type 4 has an invalid length. [ 125.541818][ T7393] netlink: 'syz.0.419': attribute type 1 has an invalid length. [ 125.566394][ T7393] netlink: 'syz.0.419': attribute type 1 has an invalid length. [ 125.575281][ T7393] netlink: 'syz.0.419': attribute type 1 has an invalid length. [ 125.585939][ T7393] netlink: 'syz.0.419': attribute type 2 has an invalid length. [ 125.594755][ T7393] netlink: 76 bytes leftover after parsing attributes in process `syz.0.419'. [ 125.961356][ T7402] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.970012][ T7402] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.113970][ T7402] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 126.130925][ T7402] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 126.321032][ T1010] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 126.349186][ T1010] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.424893][ T1010] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 126.447957][ T1010] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.467619][ T1010] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 126.489089][ T1010] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.520708][ T1010] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 126.557040][ T1010] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.567942][ T7425] netlink: 4 bytes leftover after parsing attributes in process `syz.0.427'. [ 127.231685][ T7459] netlink: 'syz.3.438': attribute type 1 has an invalid length. [ 127.246125][ T7461] netlink: 'syz.2.440': attribute type 1 has an invalid length. [ 127.277076][ T7459] 8021q: adding VLAN 0 to HW filter on device bond1 [ 127.318003][ T7461] netlink: 'syz.2.440': attribute type 2 has an invalid length. [ 127.391964][ T7459] bond1: (slave veth5): Enslaving as an active interface with a down link [ 127.433542][ T7464] bond1: (slave veth0_to_bond): making interface the new active one [ 127.444556][ T7464] veth0_to_bond: entered promiscuous mode [ 127.451933][ T7464] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 127.609994][ T7473] netlink: 'syz.4.442': attribute type 1 has an invalid length. [ 127.623302][ T7473] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 128.304564][ T7514] dvmrp0: entered allmulticast mode [ 128.500745][ T7521] netlink: 'syz.0.455': attribute type 13 has an invalid length. [ 128.617187][ T7521] veth3: left promiscuous mode [ 128.655395][ T7539] SET target dimension over the limit! [ 128.958822][ T7560] __nla_validate_parse: 5 callbacks suppressed [ 128.958840][ T7560] netlink: 8 bytes leftover after parsing attributes in process `syz.2.468'. [ 129.365300][ T7580] netlink: 8 bytes leftover after parsing attributes in process `syz.3.473'. [ 129.395977][ T7580] netlink: 4 bytes leftover after parsing attributes in process `syz.3.473'. [ 130.182192][ T7636] bond0: Device is already in use. [ 130.285554][ T7641] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 131.199248][ T7710] validate_nla: 5 callbacks suppressed [ 131.199269][ T7710] netlink: 'syz.0.513': attribute type 26 has an invalid length. [ 131.344289][ T7721] netlink: 28 bytes leftover after parsing attributes in process `syz.2.516'. [ 131.501367][ T5930] IPVS: starting estimator thread 0... [ 131.516753][ T7729] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 131.548385][ T7729] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 131.602359][ T7731] IPVS: using max 25 ests per chain, 60000 per kthread [ 131.630150][ T7735] vlan3: entered promiscuous mode [ 131.635434][ T7735] hsr_slave_1: entered promiscuous mode [ 131.641978][ T7735] vlan3: entered allmulticast mode [ 131.642508][ T7736] netlink: 'syz.2.520': attribute type 1 has an invalid length. [ 131.647333][ T7735] hsr_slave_1: entered allmulticast mode [ 131.663991][ T7736] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 131.696416][ T7743] netlink: 20 bytes leftover after parsing attributes in process `syz.0.522'. [ 131.829959][ T7748] netlink: 4 bytes leftover after parsing attributes in process `syz.4.521'. [ 131.852822][ T7750] vlan1: entered allmulticast mode [ 131.880225][ T7750] veth0_vlan: entered allmulticast mode [ 131.950453][ T7750] netlink: 104 bytes leftover after parsing attributes in process `syz.2.524'. [ 131.976592][ T7756] netlink: 76 bytes leftover after parsing attributes in process `syz.1.525'. [ 132.035368][ T7762] netlink: 72 bytes leftover after parsing attributes in process `syz.0.527'. [ 132.075785][ T7756] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.525'. [ 132.147223][ T7762] netlink: 'syz.0.527': attribute type 10 has an invalid length. [ 132.182772][ T7762] bridge0: port 3(team0) entered blocking state [ 132.212002][ T7762] bridge0: port 3(team0) entered disabled state [ 132.271036][ T7762] team0: entered allmulticast mode [ 132.276305][ T7762] team_slave_0: entered allmulticast mode [ 132.284194][ T7762] team_slave_1: entered allmulticast mode [ 132.293255][ T7762] team0: entered promiscuous mode [ 132.300382][ T7762] team_slave_0: entered promiscuous mode [ 132.326466][ T7762] team_slave_1: entered promiscuous mode [ 133.983774][ T7824] __nla_validate_parse: 5 callbacks suppressed [ 133.983792][ T7824] netlink: 4 bytes leftover after parsing attributes in process `syz.4.545'. [ 134.056060][ T7826] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 134.084816][ T7826] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 134.120488][ T7826] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 134.256098][ T7841] netlink: 12 bytes leftover after parsing attributes in process `syz.2.548'. [ 134.538543][ T7849] syzkaller0: refused to change device tx_queue_len [ 134.658615][ T7854] netlink: 16 bytes leftover after parsing attributes in process `syz.3.554'. [ 134.690646][ T7858] netlink: 24 bytes leftover after parsing attributes in process `syz.2.553'. [ 134.839264][ T7858] bond2 (unregistering): Released all slaves [ 134.861791][ T7864] veth1_to_bond: entered allmulticast mode [ 134.870267][ T7864] netlink: 4 bytes leftover after parsing attributes in process `syz.4.556'. [ 134.917022][ T7864] bond0: (slave bond_slave_1): Releasing backup interface [ 134.983510][ T7870] netlink: 16 bytes leftover after parsing attributes in process `syz.4.556'. [ 135.065000][ T7864] veth1_to_bond (unregistering): left allmulticast mode [ 135.105290][ T7867] netlink: 28 bytes leftover after parsing attributes in process `syz.4.556'. [ 135.543305][ T7900] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 135.547921][ T7901] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 135.591528][ T60] syzkaller0: tun_net_xmit 76 [ 135.630733][ T60] syzkaller0: tun_net_xmit 48 [ 135.635735][ T60] syzkaller0: tun_net_xmit 76 [ 135.861087][ T7925] ip6t_srh: unknown srh invflags 4000 [ 136.960524][ T7930] netlink: 132 bytes leftover after parsing attributes in process `syz.4.574'. [ 136.970886][ T7939] netlink: 4 bytes leftover after parsing attributes in process `syz.0.576'. [ 137.044243][ T7945] netlink: 'syz.4.577': attribute type 2 has an invalid length. [ 137.126122][ T7947] netlink: 4 bytes leftover after parsing attributes in process `syz.3.578'. [ 137.290899][ T7958] pim6reg: entered allmulticast mode [ 137.331137][ T7958] netlink: 'syz.1.582': attribute type 7 has an invalid length. [ 137.348527][ T7958] netlink: 'syz.1.582': attribute type 8 has an invalid length. [ 137.533646][ T7972] syzkaller0: entered promiscuous mode [ 137.539395][ T7972] syzkaller0: entered allmulticast mode [ 138.083529][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.094453][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.245549][ T8018] tipc: Enabled bearer , priority 0 [ 138.263693][ T8018] syzkaller0: entered promiscuous mode [ 138.280509][ T8018] syzkaller0: entered allmulticast mode [ 138.353869][ T8018] tipc: Resetting bearer [ 138.382368][ T8017] tipc: Resetting bearer [ 138.407613][ T8017] tipc: Disabling bearer [ 138.552521][ T8042] tc_dump_action: action bad kind [ 138.641089][ T8047] tipc: Enabled bearer , priority 0 [ 138.670016][ T8047] syzkaller0: entered promiscuous mode [ 138.675547][ T8047] syzkaller0: entered allmulticast mode [ 138.709420][ T8047] tipc: Resetting bearer [ 138.748157][ T12] veth0_to_bond: left promiscuous mode [ 138.764919][ T8059] IPVS: set_ctl: invalid protocol: 22 100.1.1.1:20003 [ 138.856730][ T8065] syzkaller0: entered promiscuous mode [ 138.866758][ T8065] syzkaller0: entered allmulticast mode [ 138.943746][ T8071] netlink: 'syz.0.616': attribute type 1 has an invalid length. [ 139.242410][ T8090] __nla_validate_parse: 8 callbacks suppressed [ 139.242429][ T8090] netlink: 24 bytes leftover after parsing attributes in process `syz.0.623'. [ 139.511905][ T8045] tipc: Resetting bearer [ 139.577529][ T8045] tipc: Disabling bearer [ 139.593239][ T8090] syzkaller0: entered promiscuous mode [ 139.599305][ T8090] syzkaller0: entered allmulticast mode [ 139.778842][ T8104] netlink: 32 bytes leftover after parsing attributes in process `syz.3.625'. [ 139.880682][ T8117] netlink: 16146 bytes leftover after parsing attributes in process `syz.4.628'. [ 139.934685][ T8120] netlink: 'syz.2.629': attribute type 4 has an invalid length. [ 139.988307][ T8118] IPVS: set_ctl: invalid protocol: 47 172.20.20.170:20004 [ 140.281279][ T8145] netlink: 4 bytes leftover after parsing attributes in process `syz.4.634'. [ 140.575803][ T8157] netlink: 'syz.2.639': attribute type 1 has an invalid length. [ 140.585935][ T8157] netlink: 'syz.2.639': attribute type 3 has an invalid length. [ 140.602513][ T8157] netlink: 'syz.2.639': attribute type 7 has an invalid length. [ 140.611832][ T8157] netlink: 'syz.2.639': attribute type 8 has an invalid length. [ 140.621257][ T8157] netlink: 184 bytes leftover after parsing attributes in process `syz.2.639'. [ 140.632050][ T8157] NCSI netlink: No device for ifindex 131092 [ 140.654224][ T8162] netlink: 16 bytes leftover after parsing attributes in process `syz.0.640'. [ 140.673907][ T8162] netlink: 92 bytes leftover after parsing attributes in process `syz.0.640'. [ 140.891766][ T8171] netlink: 'syz.2.643': attribute type 1 has an invalid length. [ 140.920963][ T8174] netlink: 6 bytes leftover after parsing attributes in process `syz.4.644'. [ 140.944569][ T8171] netlink: 28 bytes leftover after parsing attributes in process `syz.2.643'. [ 140.951622][ T8174] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 141.097445][ T8176] bond5: option all_slaves_active: invalid value (222) [ 141.106847][ T8176] bond5 (unregistering): Released all slaves [ 141.243775][ T8180] 8021q: adding VLAN 0 to HW filter on device bond1 [ 141.381758][ T8199] netlink: 8 bytes leftover after parsing attributes in process `syz.4.647'. [ 141.407479][ T8187] bond1: (slave veth3): Enslaving as an active interface with a down link [ 141.529482][ T8180] vlan5: entered allmulticast mode [ 141.574627][ T8180] bond1: entered allmulticast mode [ 141.591243][ T8180] bond1: (slave vlan5): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 141.692378][ T8214] tun0: tun_chr_ioctl cmd 1074025675 [ 141.703509][ T8214] tun0: persist disabled [ 141.816236][ T8219] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 141.839032][ T8219] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 141.851390][ T8219] batadv0: entered promiscuous mode [ 141.856642][ T8219] batadv0: entered allmulticast mode [ 141.874314][ T8219] bond0: (slave batadv0): Releasing backup interface [ 141.886849][ T8219] bridge0: port 3(batadv0) entered blocking state [ 141.903537][ T8219] bridge0: port 3(batadv0) entered disabled state [ 142.050612][ T49] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 142.060338][ T49] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 142.592583][ T8259] netlink: zone id is out of range [ 142.598229][ T8259] netlink: zone id is out of range [ 142.603492][ T8259] netlink: zone id is out of range [ 142.609062][ T8259] netlink: zone id is out of range [ 142.614405][ T8259] netlink: zone id is out of range [ 142.620075][ T8259] netlink: zone id is out of range [ 142.625212][ T8259] netlink: zone id is out of range [ 142.643343][ T8259] netlink: zone id is out of range [ 142.650149][ T8259] netlink: zone id is out of range [ 142.677118][ T8263] tipc: Enabled bearer , priority 0 [ 142.683328][ T8267] validate_nla: 3 callbacks suppressed [ 142.683348][ T8267] netlink: 'syz.4.672': attribute type 4 has an invalid length. [ 142.689610][ T8263] syzkaller0: entered promiscuous mode [ 142.689631][ T8263] syzkaller0: entered allmulticast mode [ 142.722399][ T8263] tipc: Resetting bearer [ 142.743183][ T8262] tipc: Resetting bearer [ 142.777948][ T8262] tipc: Disabling bearer [ 142.788235][ T8269] netlink: 'syz.2.673': attribute type 1 has an invalid length. [ 142.795913][ T8269] netlink: 'syz.2.673': attribute type 2 has an invalid length. [ 142.808423][ T8269] netlink: 'syz.2.673': attribute type 1 has an invalid length. [ 143.176703][ T8287] netlink: 'syz.4.679': attribute type 4 has an invalid length. [ 143.374922][ T8305] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge_slave_1, syncid = 0, id = 0 [ 143.392161][ T8303] syzkaller0: entered promiscuous mode [ 143.414449][ T8303] syzkaller0: entered allmulticast mode [ 143.476305][ T8310] veth1: entered allmulticast mode [ 143.666334][ T8318] netlink: 'syz.0.689': attribute type 1 has an invalid length. [ 143.691185][ T8320] netlink: 'syz.0.689': attribute type 1 has an invalid length. [ 143.770959][ T8327] delete_channel: no stack [ 144.271690][ T8356] netlink: 'syz.3.699': attribute type 3 has an invalid length. [ 144.333195][ T8361] netlink: 'syz.0.701': attribute type 1 has an invalid length. [ 144.417038][ T8361] bond3: entered promiscuous mode [ 144.434859][ T8361] bond3: entered allmulticast mode [ 144.451129][ T8361] 8021q: adding VLAN 0 to HW filter on device bond3 [ 144.499851][ T8365] macvlan2: entered promiscuous mode [ 144.507182][ T8365] macvlan2: entered allmulticast mode [ 144.515830][ T8365] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 144.603038][ T8367] __nla_validate_parse: 13 callbacks suppressed [ 144.603058][ T8367] netlink: 40 bytes leftover after parsing attributes in process `syz.3.702'. [ 145.146599][ T8410] netlink: 'syz.4.707': attribute type 1 has an invalid length. [ 145.419613][ T8385] bridge0: port 2(bridge_slave_1) entered disabled state [ 145.427357][ T8385] bridge0: port 1(bridge_slave_0) entered disabled state [ 145.527271][ T8385] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 145.546122][ T8385] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 145.695708][ T8385] ip6gre1: left promiscuous mode [ 145.794522][ T13] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.806913][ T13] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.826723][ T13] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.896094][ T13] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.925978][ T1213] IPVS: starting estimator thread 0... [ 145.979260][ T8428] netlink: 8 bytes leftover after parsing attributes in process `syz.4.710'. [ 145.992647][ T8429] netlink: 52 bytes leftover after parsing attributes in process `syz.1.712'. [ 146.032687][ T8426] IPVS: using max 30 ests per chain, 72000 per kthread [ 146.174089][ T8439] netlink: 4 bytes leftover after parsing attributes in process `syz.1.714'. [ 146.259146][ T8444] netlink: 28 bytes leftover after parsing attributes in process `syz.4.716'. [ 146.475929][ T8470] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 146.736232][ T8481] netlink: 12 bytes leftover after parsing attributes in process `syz.4.725'. [ 146.766544][ T8487] bridge0: port 4(veth0_to_bridge) entered blocking state [ 146.775040][ T8487] bridge0: port 4(veth0_to_bridge) entered disabled state [ 146.784590][ T8487] veth0_to_bridge: entered allmulticast mode [ 146.795305][ T8487] veth0_to_bridge: entered promiscuous mode [ 146.841632][ T8481] 8021q: adding VLAN 0 to HW filter on device bond0 [ 146.866126][ T8481] bond0: (slave rose0): Enslaving as an active interface with an up link [ 147.231010][ T8513] netlink: 8 bytes leftover after parsing attributes in process `syz.4.730'. [ 147.547566][ T8525] Bluetooth: MGMT ver 1.23 [ 148.445234][ T8558] netlink: 164 bytes leftover after parsing attributes in process `syz.0.738'. [ 148.638824][ T8555] tipc: Enabling of bearer rejected, failed to enable media [ 149.257229][ T8586] bond0: entered promiscuous mode [ 149.281336][ T8586] bond_slave_0: entered promiscuous mode [ 149.296462][ T8586] bond_slave_1: entered promiscuous mode [ 149.331741][ T8598] netlink: 'syz.4.745': attribute type 11 has an invalid length. [ 149.565762][ T8604] sctp: [Deprecated]: syz.2.747 (pid 8604) Use of struct sctp_assoc_value in delayed_ack socket option. [ 149.565762][ T8604] Use struct sctp_sack_info instead [ 149.867470][ T8618] netlink: 'syz.2.749': attribute type 32 has an invalid length. [ 149.875837][ T8618] netlink: 8 bytes leftover after parsing attributes in process `syz.2.749'. [ 149.890286][ T8615] block nbd1: Unsupported socket: should be TCP or UNIX. [ 150.000835][ T8618] bond2: Setting coupled_control to off (0) [ 150.047887][ T8615] veth1_macvtap: left promiscuous mode [ 150.114570][ T8622] netlink: 20 bytes leftover after parsing attributes in process `syz.4.750'. [ 150.606364][ T8643] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.755'. [ 150.785395][ T8650] netlink: 324 bytes leftover after parsing attributes in process `syz.3.757'. [ 151.456243][ T8680] ieee802154 phy0 wpan0: encryption failed: -22 [ 151.650442][ T8691] sit1: entered allmulticast mode [ 151.879975][ T8702] vlan2: entered promiscuous mode [ 151.885087][ T8702] bond0: entered promiscuous mode [ 151.892269][ T8702] bond_slave_0: entered promiscuous mode [ 151.904031][ T8702] bond_slave_1: entered promiscuous mode [ 151.912906][ T8702] team0: entered promiscuous mode [ 151.957953][ T8702] team_slave_0: entered promiscuous mode [ 151.974275][ T8702] team_slave_1: entered promiscuous mode [ 152.222043][ T49] syzkaller0: tun_net_xmit 76 [ 152.227113][ T49] syzkaller0: tun_net_xmit 48 [ 152.232530][ T8724] syzkaller0: create flow: hash 227419830 index 2 [ 152.248599][ T812] syzkaller0: tun_net_xmit 76 [ 152.379013][ T8730] syzkaller0: delete flow: hash 227419830 index 2 [ 152.394225][ T8735] netlink: 'syz.2.784': attribute type 3 has an invalid length. [ 152.709308][ T8755] netlink: 4 bytes leftover after parsing attributes in process `syz.1.791'. [ 152.933131][ T8760] netlink: 'syz.3.793': attribute type 42 has an invalid length. [ 154.357528][ T8785] netlink: 60 bytes leftover after parsing attributes in process `syz.3.801'. [ 154.400126][ T8789] netlink: 60 bytes leftover after parsing attributes in process `syz.3.801'. [ 154.441789][ T8783] netlink: 248 bytes leftover after parsing attributes in process `syz.0.800'. [ 154.451013][ T8783] netlink: 52 bytes leftover after parsing attributes in process `syz.0.800'. [ 154.518956][ T8803] gre0: entered promiscuous mode [ 154.524113][ T8803] gre0: entered allmulticast mode [ 154.648034][ T30] audit: type=1800 audit(1763422576.100:2): pid=8807 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.806" name=4996AE17DFFC2E43C8174B54B620636894AAACF28FF62616363C70A440AEC4014CAF28C0ADC04308 dev="tmpfs" ino=915 res=0 errno=0 [ 154.908627][ T8822] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 154.923051][ T8822] team0: Device macvtap1 is already an upper device of the team interface [ 154.966663][ T8830] IPVS: set_ctl: invalid protocol: 92 224.0.0.1:20004 [ 155.148735][ T8837] sctp: [Deprecated]: syz.0.815 (pid 8837) Use of int in max_burst socket option deprecated. [ 155.148735][ T8837] Use struct sctp_assoc_value instead [ 155.253730][ T8844] netlink: 24 bytes leftover after parsing attributes in process `syz.2.817'. [ 155.270532][ T8844] netlink: 80 bytes leftover after parsing attributes in process `syz.2.817'. [ 155.281746][ T8844] netlink: 24 bytes leftover after parsing attributes in process `syz.2.817'. [ 155.306119][ T8844] netlink: 8 bytes leftover after parsing attributes in process `syz.2.817'. [ 155.322438][ T8846] netlink: 32 bytes leftover after parsing attributes in process `syz.4.818'. [ 155.324571][ T8844] netlink: 24 bytes leftover after parsing attributes in process `syz.2.817'. [ 155.341174][ T8844] netlink: 80 bytes leftover after parsing attributes in process `syz.2.817'. [ 155.350151][ T8844] netlink: 24 bytes leftover after parsing attributes in process `syz.2.817'. [ 155.940101][ T8882] netlink: 8 bytes leftover after parsing attributes in process `syz.4.829'. [ 155.955330][ T8882] netlink: 8 bytes leftover after parsing attributes in process `syz.4.829'. [ 156.114955][ T8889] bond5: option xmit_hash_policy: invalid value (64) [ 156.129408][ T8889] bond5 (unregistering): Released all slaves [ 156.595158][ T8919] net_ratelimit: 2 callbacks suppressed [ 156.595178][ T8919] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 156.821157][ T8942] tipc: Enabling of bearer rejected, failed to enable media [ 157.257210][ T8966] netlink: 'syz.3.850': attribute type 5 has an invalid length. [ 157.537078][ T8986] unsupported nlmsg_type 40 [ 157.761751][ T9003] vlan1: entered promiscuous mode [ 157.772200][ T9003] geneve1: entered promiscuous mode [ 157.777971][ T9003] vlan1: entered allmulticast mode [ 157.788795][ T9003] geneve1: entered allmulticast mode [ 157.896567][ T9013] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 158.339091][ T9039] netlink: 'syz.0.875': attribute type 2 has an invalid length. [ 158.347191][ T9037] netlink: 'syz.0.875': attribute type 2 has an invalid length. [ 158.407490][ T9039] 9: entered promiscuous mode [ 158.458424][ T9046] Cannot find del_set index 49151 as target [ 158.471154][ T9050] Cannot find del_set index 49151 as target [ 158.589540][ T9052] tipc: Enabled bearer , priority 0 [ 158.597263][ T9052] syzkaller0: entered promiscuous mode [ 158.603154][ T9052] syzkaller0: entered allmulticast mode [ 158.639539][ T9054] netlink: 'syz.0.880': attribute type 29 has an invalid length. [ 158.645231][ T9052] tipc: Resetting bearer [ 158.662055][ T9051] tipc: Resetting bearer [ 158.697062][ T9051] tipc: Disabling bearer [ 158.801379][ T5834] Bluetooth: hci4: command 0x0405 tx timeout [ 158.886700][ T9072] netlink: 'syz.0.887': attribute type 11 has an invalid length. [ 158.894705][ T9072] netlink: 'syz.0.887': attribute type 11 has an invalid length. [ 159.010793][ T9075] : entered promiscuous mode [ 159.029671][ T9078] netlink: 'syz.1.888': attribute type 1 has an invalid length. [ 159.086267][ T9084] SET target dimension over the limit! [ 159.111158][ T9078] bond5: (slave xfrm1): The slave device specified does not support setting the MAC address [ 159.122175][ T9078] bond5: (slave xfrm1): Setting fail_over_mac to active for active-backup mode [ 159.134905][ T9078] bond5: (slave xfrm1): making interface the new active one [ 159.144282][ T9078] bond5: (slave xfrm1): Enslaving as an active interface with an up link [ 159.161146][ T9078] bond5 (unregistering): (slave xfrm1): Releasing backup interface [ 159.176242][ T9078] bond5 (unregistering): Released all slaves [ 159.241719][ T9095] netlink: 'syz.0.892': attribute type 13 has an invalid length. [ 159.249886][ T9095] netlink: 'syz.0.892': attribute type 27 has an invalid length. [ 159.497517][ T9108] veth0_macvtap: left promiscuous mode [ 159.503469][ T9108] veth0_macvtap: entered promiscuous mode [ 159.509905][ T9108] veth0_macvtap: entered allmulticast mode [ 159.763180][ T9129] netlink: 'syz.4.905': attribute type 1 has an invalid length. [ 160.111162][ T9148] openvswitch: netlink: Key type 234 is out of range max 32 [ 160.401439][ T9164] __nla_validate_parse: 19 callbacks suppressed [ 160.401460][ T9164] netlink: 4 bytes leftover after parsing attributes in process `syz.0.912'. [ 160.937348][ T9188] netlink: 'syz.3.922': attribute type 1 has an invalid length. [ 161.023024][ T9188] gretap1: entered promiscuous mode [ 161.032182][ T9188] bond2: (slave gretap1): making interface the new active one [ 161.046693][ T9188] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 161.052891][ T9194] netlink: 'syz.2.924': attribute type 1 has an invalid length. [ 161.255612][ T9198] bond3: (slave ip6gretap1): making interface the new active one [ 161.264658][ T9198] bond3: (slave ip6gretap1): Enslaving as an active interface with an up link [ 161.278847][ T9210] 8021q: adding VLAN 0 to HW filter on device team0 [ 161.288430][ T9210] team0: Cannot enslave team device to itself [ 161.492235][ T9224] veth5: entered allmulticast mode [ 161.573307][ T9235] bridge4: entered promiscuous mode [ 161.578931][ T9235] bridge4: entered allmulticast mode [ 161.586798][ T9235] team0: Port device bridge4 added [ 161.594127][ T9235] bridge0: port 3(team0) entered blocking state [ 161.609300][ T9235] bridge0: port 3(team0) entered disabled state [ 161.615852][ T9235] team0: entered allmulticast mode [ 161.621341][ T9235] team_slave_0: entered allmulticast mode [ 161.627829][ T9235] team_slave_1: entered allmulticast mode [ 161.638371][ T9235] team0: entered promiscuous mode [ 161.643625][ T9235] team_slave_0: entered promiscuous mode [ 161.649674][ T9235] team_slave_1: entered promiscuous mode [ 161.677485][ T9242] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 162.240404][ T9275] bond3: (slave ip6gretap1): making interface the new active one [ 162.273443][ T9275] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 162.293892][ T9277] netlink: 16 bytes leftover after parsing attributes in process `syz.1.946'. [ 162.335915][ T9275] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 162.356550][ T9275] bond3: (slave ip6gretap1): Enslaving as an active interface with an up link [ 162.408589][ T9277] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 162.905661][ T9294] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.951'. [ 162.944625][ T9294] validate_nla: 1 callbacks suppressed [ 162.944646][ T9294] netlink: 'syz.2.951': attribute type 1 has an invalid length. [ 162.979436][ T9294] netlink: 28 bytes leftover after parsing attributes in process `syz.2.951'. [ 163.174611][ T9307] netlink: 108 bytes leftover after parsing attributes in process `syz.4.955'. [ 163.197327][ T9307] netlink: 108 bytes leftover after parsing attributes in process `syz.4.955'. [ 163.208430][ T9307] netlink: 108 bytes leftover after parsing attributes in process `syz.4.955'. [ 163.261468][ T9315] netlink: 8 bytes leftover after parsing attributes in process `syz.1.958'. [ 163.293306][ T9315] netlink: 'syz.1.958': attribute type 22 has an invalid length. [ 163.307901][ T9315] netlink: 4 bytes leftover after parsing attributes in process `syz.1.958'. [ 163.343261][ T9314] syzkaller0: entered promiscuous mode [ 163.349366][ T9314] syzkaller0: entered allmulticast mode [ 163.409093][ T9315] netlink: 8 bytes leftover after parsing attributes in process `syz.1.958'. [ 163.410905][ T1116] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 163.437316][ T1116] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 163.457071][ T9315] netlink: 'syz.1.958': attribute type 22 has an invalid length. [ 163.472961][ T1116] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 163.501905][ T13] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 164.977571][ T9336] vlan2: entered allmulticast mode [ 165.415472][ T9379] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.653334][ T9393] __nla_validate_parse: 2 callbacks suppressed [ 165.653356][ T9393] netlink: 44 bytes leftover after parsing attributes in process `syz.1.980'. [ 165.699532][ T9393] netlink: 28 bytes leftover after parsing attributes in process `syz.1.980'. [ 165.781252][ T9395] tipc: Enabling of bearer rejected, failed to enable media [ 165.878976][ T9410] lo: entered allmulticast mode [ 165.884339][ T9410] lo: left allmulticast mode [ 165.918820][ T9412] IPVS: length: 218 != 24 [ 166.393645][ T9441] netlink: 8 bytes leftover after parsing attributes in process `syz.1.994'. [ 166.450594][ T9448] netlink: 48 bytes leftover after parsing attributes in process `syz.1.994'. [ 166.498223][ T9448] netlink: 'syz.1.994': attribute type 13 has an invalid length. [ 166.506098][ T9448] netlink: 'syz.1.994': attribute type 17 has an invalid length. [ 166.765060][ T9448] 8021q: adding VLAN 0 to HW filter on device bond0 [ 166.798116][ T9448] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 166.967088][ T9472] TCP: TCP_TX_DELAY enabled [ 166.976059][ T9472] netlink: 'syz.4.1001': attribute type 39 has an invalid length. [ 166.990995][ T9474] syz.3.1003: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 167.017867][ T9474] CPU: 1 UID: 0 PID: 9474 Comm: syz.3.1003 Not tainted syzkaller #0 PREEMPT(full) [ 167.017897][ T9474] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 167.017917][ T9474] Call Trace: [ 167.017926][ T9474] [ 167.017935][ T9474] dump_stack_lvl+0x189/0x250 [ 167.017971][ T9474] ? __pfx_dump_stack_lvl+0x10/0x10 [ 167.018000][ T9474] ? __pfx__printk+0x10/0x10 [ 167.018021][ T9474] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 167.018050][ T9474] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 167.018081][ T9474] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 167.018112][ T9474] warn_alloc+0x214/0x310 [ 167.018142][ T9474] ? stack_depot_save_flags+0x40/0x860 [ 167.018178][ T9474] ? __pfx_warn_alloc+0x10/0x10 [ 167.018211][ T9474] ? kasan_save_track+0x3e/0x80 [ 167.018239][ T9474] ? __kasan_kmalloc+0x93/0xb0 [ 167.018270][ T9474] ? xsk_setsockopt+0x4dc/0x8d0 [ 167.018292][ T9474] ? do_sock_setsockopt+0x17c/0x1b0 [ 167.018322][ T9474] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 167.018340][ T9474] ? do_syscall_64+0xfa/0xfa0 [ 167.018367][ T9474] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.018395][ T9474] __vmalloc_node_range_noprof+0x125/0x12d0 [ 167.018452][ T9474] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 167.018484][ T9474] ? __kasan_kmalloc+0x93/0xb0 [ 167.018519][ T9474] vmalloc_user_noprof+0xad/0xf0 [ 167.018548][ T9474] ? xskq_create+0xbf/0x170 [ 167.018574][ T9474] xskq_create+0xbf/0x170 [ 167.018615][ T9474] xsk_init_queue+0xb0/0x110 [ 167.018645][ T9474] xsk_setsockopt+0x4dc/0x8d0 [ 167.018674][ T9474] ? __pfx_xsk_setsockopt+0x10/0x10 [ 167.018702][ T9474] ? __pfx_aa_sk_perm+0x10/0x10 [ 167.018732][ T9474] ? aa_sock_opt_perm+0xff/0x1b0 [ 167.018767][ T9474] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 167.018787][ T9474] ? __pfx_xsk_setsockopt+0x10/0x10 [ 167.018815][ T9474] do_sock_setsockopt+0x17c/0x1b0 [ 167.018842][ T9474] __x64_sys_setsockopt+0x13f/0x1b0 [ 167.018870][ T9474] do_syscall_64+0xfa/0xfa0 [ 167.018898][ T9474] ? lockdep_hardirqs_on+0x9c/0x150 [ 167.018927][ T9474] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.018945][ T9474] ? clear_bhb_loop+0x60/0xb0 [ 167.018968][ T9474] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.018987][ T9474] RIP: 0033:0x7f4fce58f6c9 [ 167.019019][ T9474] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 167.019036][ T9474] RSP: 002b:00007f4fcf3cb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 167.019057][ T9474] RAX: ffffffffffffffda RBX: 00007f4fce7e5fa0 RCX: 00007f4fce58f6c9 [ 167.019071][ T9474] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000005 [ 167.019082][ T9474] RBP: 00007f4fce611f91 R08: 0000000000000004 R09: 0000000000000000 [ 167.019093][ T9474] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 167.019105][ T9474] R13: 00007f4fce7e6038 R14: 00007f4fce7e5fa0 R15: 00007ffc17163b08 [ 167.019137][ T9474] [ 167.019149][ T9474] Mem-Info: [ 167.110886][ T9483] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1005'. [ 167.137160][ T9474] active_anon:4682 inactive_anon:0 isolated_anon:0 [ 167.137160][ T9474] active_file:2504 inactive_file:39900 isolated_file:0 [ 167.137160][ T9474] unevictable:768 dirty:98 writeback:0 [ 167.137160][ T9474] slab_reclaimable:11261 slab_unreclaimable:144829 [ 167.137160][ T9474] mapped:28897 shmem:1356 pagetables:1057 [ 167.137160][ T9474] sec_pagetables:0 bounce:0 [ 167.137160][ T9474] kernel_misc_reclaimable:0 [ 167.137160][ T9474] free:1284364 free_pcp:15489 free_cma:0 [ 167.379119][ T9474] Node 0 active_anon:18928kB inactive_anon:0kB active_file:10016kB inactive_file:159400kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:115588kB dirty:388kB writeback:0kB shmem:3888kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12624kB pagetables:4192kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 167.418721][ T9481] bond0: entered allmulticast mode [ 167.422734][ T9474] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:136kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 167.423921][ T9481] bond_slave_0: entered allmulticast mode [ 167.423948][ T9481] bond_slave_1: entered allmulticast mode [ 167.476041][ T9474] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 167.541735][ T9474] lowmem_reserve[]: 0 2505 2505 2505 2505 [ 167.551859][ T9474] Node 0 DMA32 free:1235188kB boost:0kB min:34308kB low:42884kB high:51460kB reserved_highatomic:0KB free_highatomic:0KB active_anon:18728kB inactive_anon:0kB active_file:10016kB inactive_file:159400kB unevictable:1536kB writepending:388kB zspages:0kB present:3129332kB managed:2565160kB mlocked:0kB bounce:0kB free_pcp:40680kB local_pcp:20940kB free_cma:0kB [ 167.628108][ T9474] lowmem_reserve[]: 0 0 0 0 0 [ 167.637620][ T9474] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 167.652535][ T9496] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1007'. [ 167.705203][ T9474] lowmem_reserve[]: 0 0 0 0 0 [ 167.715327][ T9474] Node 1 Normal free:3886908kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:21324kB local_pcp:16716kB free_cma:0kB [ 167.870641][ T9474] lowmem_reserve[]: 0 0 0 0 0 [ 167.877921][ T9474] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 167.909850][ T9513] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1012'. [ 167.927531][ T9474] Node 0 DMA32: 1925*4kB (UME) 890*8kB (UME) 175*16kB (ME) 632*32kB (UM) 151*64kB (UME) 88*128kB (UM) 44*256kB (UM) 30*512kB (UM) 21*1024kB (UME) 9*2048kB (UME) 271*4096kB (M) = 1235348kB [ 167.953041][ T9474] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 167.978539][ T9474] Node 1 Normal: 110*4kB (UME) 29*8kB (UME) 23*16kB (UME) 65*32kB (UME) 19*64kB (UME) 5*128kB (UME) 4*256kB (UM) 4*512kB (UME) 2*1024kB (UM) 1*2048kB (E) 946*4096kB (M) = 3886960kB [ 168.078415][ T9474] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 168.106439][ T9474] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 168.127993][ T9474] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 168.165812][ T9474] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 168.219776][ T9474] 43756 total pagecache pages [ 168.244350][ T9474] 0 pages in swap cache [ 168.266011][ T9474] Free swap = 124996kB [ 168.284035][ T9474] Total swap = 124996kB [ 168.321015][ T9474] 2097051 pages RAM [ 168.360475][ T9474] 0 pages HighMem/MovableOnly [ 168.376481][ T9474] 424119 pages reserved [ 168.397487][ T9474] 0 pages cma reserved [ 169.328898][ T9574] 8021q: VLANs not supported on ip_vti0 [ 169.450451][ T9581] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1034'. [ 169.502961][ T9585] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1035'. [ 169.517464][ T9585] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1035'. [ 169.544780][ T9581] IPv6: sit2: Disabled Multicast RS [ 169.551762][ T9581] sit2: entered allmulticast mode [ 169.774737][ T9601] netlink: 'syz.0.1041': attribute type 1 has an invalid length. [ 169.824159][ T9601] bridge2: the hash_elasticity option has been deprecated and is always 16 [ 169.899208][ T9605] lo: entered allmulticast mode [ 169.904388][ T9605] lo: left allmulticast mode [ 170.066389][ T9618] syzkaller1: entered promiscuous mode [ 170.072454][ T9618] syzkaller1: entered allmulticast mode [ 170.794543][ T9657] netlink: 'syz.2.1059': attribute type 1 has an invalid length. [ 170.874251][ T9657] 8021q: adding VLAN 0 to HW filter on device bond4 [ 170.883469][ T9665] netlink: 'syz.1.1064': attribute type 1 has an invalid length. [ 170.920627][ T9663] bond4: (slave veth5): Enslaving as an active interface with a down link [ 170.989636][ T9657] veth7: entered promiscuous mode [ 171.003264][ T9657] bond4: (slave veth7): Enslaving as an active interface with a down link [ 171.030563][ T9670] bond6: entered promiscuous mode [ 171.036106][ T9670] macvlan2: entered promiscuous mode [ 171.042489][ T9670] macvlan2: entered allmulticast mode [ 171.051334][ T9670] bond6: entered allmulticast mode [ 171.056970][ T9670] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 171.067198][ T9670] bond6: left promiscuous mode [ 171.075646][ T9676] __nla_validate_parse: 5 callbacks suppressed [ 171.075665][ T9676] netlink: 112 bytes leftover after parsing attributes in process `syz.0.1066'. [ 171.125727][ T9671] bond6: entered promiscuous mode [ 171.131540][ T9671] macvlan2: entered promiscuous mode [ 171.137443][ T9671] macvlan2: entered allmulticast mode [ 171.144682][ T9671] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 171.158182][ T9671] bond6: left promiscuous mode [ 171.286524][ T9680] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 171.322149][ T9680] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1068'. [ 171.678854][ T9710] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1079'. [ 171.696476][ T9709] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1079'. [ 171.746283][ T9702] netlink: 144 bytes leftover after parsing attributes in process `syz.4.1077'. [ 171.782925][ T9702] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1077'. [ 171.888179][ T9702] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 171.930693][ T9702] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 172.175438][ T9727] tipc: Enabling of bearer rejected, failed to enable media [ 172.227476][ T9732] sctp: [Deprecated]: syz.3.1087 (pid 9732) Use of struct sctp_assoc_value in delayed_ack socket option. [ 172.227476][ T9732] Use struct sctp_sack_info instead [ 172.251467][ T9731] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1086'. [ 172.260999][ T9731] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1086'. [ 172.279323][ T9731] netlink: 'syz.4.1086': attribute type 20 has an invalid length. [ 172.297349][ T8153] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 172.307604][ T8153] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 172.324513][ T8153] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 172.335981][ T9731] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1086'. [ 172.345442][ T8153] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 172.354745][ T9731] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1086'. [ 172.365113][ T9731] netlink: 'syz.4.1086': attribute type 20 has an invalid length. [ 172.650264][ T9754] netlink: 'syz.1.1091': attribute type 10 has an invalid length. [ 172.658932][ T9754] bridge_slave_1: left allmulticast mode [ 172.664704][ T9754] bridge_slave_1: left promiscuous mode [ 172.670869][ T9754] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.690401][ T9754] bridge_slave_1: entered promiscuous mode [ 172.697242][ T9754] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 173.083017][ T9781] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 173.119131][ T9783] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 173.384064][ T9807] netlink: 'syz.3.1108': attribute type 5 has an invalid length. [ 173.423431][ T9811] netlink: 'syz.2.1107': attribute type 21 has an invalid length. [ 173.449690][ T9812] netlink: 'syz.1.1109': attribute type 10 has an invalid length. [ 173.922170][ T9820] netlink: 'syz.2.1111': attribute type 7 has an invalid length. [ 173.956602][ T8153] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 174.059004][ T9827] 8021q: adding VLAN 0 to HW filter on device bond4 [ 174.074933][ T9827] bond4: entered promiscuous mode [ 174.089564][ T9827] bond0: (slave bond4): Enslaving as an active interface with a down link [ 174.100959][ T8153] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 174.117062][ T9835] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 174.160104][ T49] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 174.197534][ T49] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 174.346211][ T9848] syzkaller1: entered promiscuous mode [ 174.351959][ T9848] syzkaller1: entered allmulticast mode [ 174.639476][ T9871] 8021q: adding VLAN 0 to HW filter on device bond5 [ 174.658643][ T9857] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 174.697150][ T9871] bond5: (slave veth9): Enslaving as an active interface with a down link [ 174.725533][ T9875] tipc: Enabling of bearer rejected, failed to enable media [ 174.810319][ T9876] bond5: (slave veth0_to_bond): making interface the new active one [ 174.822946][ T9876] veth0_to_bond: entered promiscuous mode [ 174.829329][ T9876] bond5: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 174.854128][ T9881] validate_nla: 2 callbacks suppressed [ 174.854148][ T9881] netlink: 'syz.0.1130': attribute type 1 has an invalid length. [ 174.933208][ T9881] 8021q: adding VLAN 0 to HW filter on device bond5 [ 174.944384][ T9887] RDS: rds_bind could not find a transport for fe80::2a, load rds_tcp or rds_rdma? [ 174.946498][ T9881] bond4: (slave bond5): making interface the new active one [ 174.963147][ T9881] bond4: (slave bond5): Enslaving as an active interface with an up link [ 176.131444][ T9953] __nla_validate_parse: 9 callbacks suppressed [ 176.131461][ T9953] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.1149'. [ 176.133925][ T9957] netlink: 'syz.1.1151': attribute type 9 has an invalid length. [ 176.152576][ T9959] netlink: 'syz.0.1152': attribute type 1 has an invalid length. [ 176.173646][ T9959] netlink: 'syz.0.1152': attribute type 4 has an invalid length. [ 176.184498][ T9959] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.1152'. [ 176.200992][ T9959] Bluetooth: MGMT ver 1.23 [ 176.434431][ T9974] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1157'. [ 176.448802][ T9974] netlink: 'syz.1.1157': attribute type 1 has an invalid length. [ 176.458552][ T9974] netlink: 'syz.1.1157': attribute type 2 has an invalid length. [ 176.480829][ T5930] IPVS: starting estimator thread 0... [ 176.581450][ T9984] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1159'. [ 176.587887][ T9982] IPVS: using max 27 ests per chain, 64800 per kthread [ 176.603611][ T9984] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1159'. [ 176.675027][ T9988] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1160'. [ 176.696425][ T9987] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1161'. [ 176.707487][ T9987] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1161'. [ 176.753877][ T9987] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1161'. [ 176.763368][ T9987] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1161'. [ 177.070952][T10017] No such timeout policy "syz0" [ 177.451754][T10029] IPVS: set_ctl: invalid protocol: 60 172.30.1.1:20004 [ 177.545454][T10031] netlink: 'syz.4.1173': attribute type 10 has an invalid length. [ 177.579777][T10031] team0: Device veth1_macvtap failed to register rx_handler [ 177.782214][T10040] bond5: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 177.857299][T10040] bond5 (unregistering): Released all slaves [ 178.238892][ T5834] Bluetooth: hci2: command 0x0401 tx timeout [ 178.245170][ T5828] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 178.269641][T10068] syzkaller0: entered promiscuous mode [ 178.275267][T10068] syzkaller0: entered allmulticast mode [ 178.738347][T10089] netlink: 'syz.2.1187': attribute type 1 has an invalid length. [ 178.799519][T10089] 8021q: adding VLAN 0 to HW filter on device bond6 [ 178.840707][T10095] veth11: entered promiscuous mode [ 178.850622][T10095] bond6: (slave veth11): Enslaving as an active interface with an up link [ 179.311141][T10118] syzkaller0: entered promiscuous mode [ 179.321617][T10118] syzkaller0: entered allmulticast mode [ 179.335571][T10118] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 179.945437][T10150] netlink: 'syz.3.1205': attribute type 22 has an invalid length. [ 179.997192][ T1328] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 179.997365][T10150] netlink: 'syz.3.1205': attribute type 22 has an invalid length. [ 180.017168][ T1328] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 180.060088][ T1328] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 180.069995][ T1328] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 180.113541][T10154] veth0: entered promiscuous mode [ 180.123167][T10151] veth0: left promiscuous mode [ 180.443133][T10177] netlink: 'syz.0.1214': attribute type 4 has an invalid length. [ 180.838906][T10203] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 180.846405][T10203] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 180.855769][T10203] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 180.864018][T10203] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 180.872379][T10203] batman_adv: batadv0: Interface deactivated: netdevsim0 [ 180.880019][T10203] batman_adv: batadv0: Removing interface: netdevsim0 [ 180.905988][T10204] syzkaller0: entered promiscuous mode [ 180.911955][T10204] syzkaller0: entered allmulticast mode [ 181.238714][T10215] __nla_validate_parse: 27 callbacks suppressed [ 181.238736][T10215] netlink: 192 bytes leftover after parsing attributes in process `syz.3.1229'. [ 181.263804][T10210] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 181.321355][T10220] netlink: 'syz.1.1231': attribute type 1 has an invalid length. [ 181.337495][T10220] netlink: 'syz.1.1231': attribute type 1 has an invalid length. [ 181.534866][T10230] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1235'. [ 181.549308][T10229] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1233'. [ 181.569179][T10230] netlink: 5 bytes leftover after parsing attributes in process `syz.4.1235'. [ 181.569184][T10232] netlink: 5 bytes leftover after parsing attributes in process `syz.4.1235'. [ 181.789337][T10255] netlink: 'syz.0.1242': attribute type 1 has an invalid length. [ 181.974466][T10259] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 182.005366][T10259] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 182.614859][T10308] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1257'. [ 182.903782][T10321] netlink: 'syz.4.1261': attribute type 1 has an invalid length. [ 183.109330][ T13] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 183.137850][ T13] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 183.157336][ T13] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 183.192397][ T13] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 183.580569][T10366] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1273'. [ 183.725314][T10376] netlink: 'syz.0.1275': attribute type 2 has an invalid length. [ 183.809511][T10382] syz_tun: entered allmulticast mode [ 184.132038][T10410] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 184.284888][T10423] netlink: 'syz.4.1289': attribute type 10 has an invalid length. [ 184.298738][T10423] bridge0: port 3(team0) entered blocking state [ 184.305399][T10423] bridge0: port 3(team0) entered disabled state [ 184.313541][T10423] team0: entered allmulticast mode [ 184.320079][T10423] team_slave_0: entered allmulticast mode [ 184.326194][T10423] team_slave_1: entered allmulticast mode [ 184.335736][T10423] team0: entered promiscuous mode [ 184.341525][T10423] team_slave_0: entered promiscuous mode [ 184.347590][T10423] team_slave_1: entered promiscuous mode [ 184.360267][T10423] bridge0: port 3(team0) entered blocking state [ 184.366673][T10423] bridge0: port 3(team0) entered forwarding state [ 184.551661][T10374] syz_tun: left allmulticast mode [ 184.664517][T10442] netlink: zone id is out of range [ 184.739778][T10442] netlink: set zone limit has 4 unknown bytes [ 184.813885][T10444] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1297'. [ 184.843334][T10446] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1298'. [ 185.020789][T10456] tipc: Started in network mode [ 185.038646][T10456] tipc: Node identity d292e4af946c, cluster identity 4711 [ 185.061312][T10456] tipc: Enabled bearer , priority 0 [ 185.083167][T10457] syzkaller0: entered promiscuous mode [ 185.089770][T10457] syzkaller0: entered allmulticast mode [ 185.133233][T10461] netlink: 'syz.3.1302': attribute type 10 has an invalid length. [ 185.151598][T10461] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1302'. [ 185.163936][T10457] tipc: Resetting bearer [ 185.188681][T10457] tipc: Disabling bearer [ 185.200806][T10461] dummy0: entered promiscuous mode [ 185.209482][T10461] bridge0: port 4(dummy0) entered blocking state [ 185.216375][T10461] bridge0: port 4(dummy0) entered disabled state [ 185.223569][T10461] dummy0: entered allmulticast mode [ 185.512413][T10478] netlink: 'syz.2.1306': attribute type 16 has an invalid length. [ 185.530131][T10478] netlink: 'syz.2.1306': attribute type 17 has an invalid length. [ 185.571047][T10476] tipc: Resetting bearer [ 185.577030][T10476] tipc: Resetting bearer [ 185.606416][T10478] tunl0: left promiscuous mode [ 185.627745][T10478] gre0: left promiscuous mode [ 185.708401][T10478] gre0: left allmulticast mode [ 185.769541][T10495] Cannot find add_set index 0 as target [ 185.832176][T10478] bond0: left promiscuous mode [ 185.861181][T10478] bond_slave_0: left promiscuous mode [ 185.866904][T10478] bond_slave_1: left promiscuous mode [ 185.882393][T10478] bond0: left allmulticast mode [ 185.887499][T10478] bond_slave_0: left allmulticast mode [ 185.895387][T10478] bond_slave_1: left allmulticast mode [ 185.919350][T10478] 8021q: adding VLAN 0 to HW filter on device bond0 [ 185.932779][T10478] bridge0: port 3(team0) entered blocking state [ 185.939614][T10478] bridge0: port 3(team0) entered forwarding state [ 185.961679][T10478] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 185.984427][ T13] bridge0: port 3(team0) entered disabled state [ 185.998718][ T13] tipc: Resetting bearer [ 186.028002][ T13] veth0_to_bond: left promiscuous mode [ 186.152616][T10511] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 186.182295][T10514] netlink: 'syz.1.1318': attribute type 21 has an invalid length. [ 186.359129][T10520] IPVS: length: 34 != 24 [ 186.524760][T10533] __nla_validate_parse: 1 callbacks suppressed [ 186.524781][T10533] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1325'. [ 186.658433][T10539] netlink: 'syz.3.1329': attribute type 1 has an invalid length. [ 186.742610][T10541] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1327'. [ 186.766574][T10546] netlink: 'syz.4.1331': attribute type 1 has an invalid length. [ 186.866646][T10546] 8021q: adding VLAN 0 to HW filter on device bond3 [ 186.922276][T10546] veth7: entered promiscuous mode [ 186.933034][T10546] bond3: (slave veth7): Enslaving as an active interface with a down link [ 186.996160][T10546] vlan5: entered allmulticast mode [ 187.001806][T10546] bond3: entered allmulticast mode [ 187.010673][T10546] bond3: (slave vlan5): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 187.084494][T10566] netlink: 220 bytes leftover after parsing attributes in process `syz.0.1337'. [ 187.133857][T10568] netlink: 'syz.3.1336': attribute type 1 has an invalid length. [ 187.164509][T10570] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.1338'. [ 187.243582][T10572] FAULT_INJECTION: forcing a failure. [ 187.243582][T10572] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 187.272076][T10572] CPU: 1 UID: 0 PID: 10572 Comm: syz.0.1339 Not tainted syzkaller #0 PREEMPT(full) [ 187.272105][T10572] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 187.272117][T10572] Call Trace: [ 187.272125][T10572] [ 187.272133][T10572] dump_stack_lvl+0x189/0x250 [ 187.272167][T10572] ? __pfx____ratelimit+0x10/0x10 [ 187.272195][T10572] ? __pfx_dump_stack_lvl+0x10/0x10 [ 187.272223][T10572] ? __pfx__printk+0x10/0x10 [ 187.272241][T10572] ? __might_fault+0xb0/0x130 [ 187.272282][T10572] should_fail_ex+0x414/0x560 [ 187.272320][T10572] _copy_from_user+0x2d/0xb0 [ 187.272348][T10572] ___sys_sendmsg+0x158/0x2a0 [ 187.272375][T10572] ? __pfx____sys_sendmsg+0x10/0x10 [ 187.272441][T10572] ? __fget_files+0x2a/0x420 [ 187.272461][T10572] ? __fget_files+0x3a0/0x420 [ 187.272490][T10572] __x64_sys_sendmsg+0x19b/0x260 [ 187.272517][T10572] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 187.272549][T10572] ? __pfx_ksys_write+0x10/0x10 [ 187.272581][T10572] ? do_syscall_64+0xbe/0xfa0 [ 187.272615][T10572] do_syscall_64+0xfa/0xfa0 [ 187.272642][T10572] ? lockdep_hardirqs_on+0x9c/0x150 [ 187.272671][T10572] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 187.272691][T10572] ? clear_bhb_loop+0x60/0xb0 [ 187.272714][T10572] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 187.272733][T10572] RIP: 0033:0x7f32dc18f6c9 [ 187.272762][T10572] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 187.272778][T10572] RSP: 002b:00007f32dd0f8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 187.272808][T10572] RAX: ffffffffffffffda RBX: 00007f32dc3e5fa0 RCX: 00007f32dc18f6c9 [ 187.272823][T10572] RDX: 0000000000000080 RSI: 0000200000003040 RDI: 0000000000000003 [ 187.272835][T10572] RBP: 00007f32dd0f8090 R08: 0000000000000000 R09: 0000000000000000 [ 187.272847][T10572] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 187.272858][T10572] R13: 00007f32dc3e6038 R14: 00007f32dc3e5fa0 R15: 00007ffe71b76478 [ 187.272891][T10572] [ 187.530416][T10584] netlink: 140 bytes leftover after parsing attributes in process `syz.3.1343'. [ 187.821046][T10601] workqueue: name exceeds WQ_NAME_LEN. Truncating to: &%Q0@jʫ} [ 188.264014][T10621] bond4: option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 188.282698][T10621] bond4 (unregistering): Released all slaves [ 188.337195][T10632] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1356'. [ 188.630808][T10646] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1359'. [ 188.916878][T10655] gre0: entered promiscuous mode [ 189.083653][T10661] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1364'. [ 189.104146][T10664] syzkaller0: entered promiscuous mode [ 189.118723][T10664] syzkaller0: entered allmulticast mode [ 189.163809][T10661] syzkaller0: entered promiscuous mode [ 189.173210][T10661] syzkaller0: entered allmulticast mode [ 189.789953][T10697] netlink: 'syz.4.1377': attribute type 13 has an invalid length. [ 189.884020][T10697] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 190.228697][T10712] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1381'. [ 190.498627][T10731] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1386'. [ 190.696727][T10739] team0: Device geneve2 is up. Set it down before adding it as a team port [ 191.877676][T10805] __nla_validate_parse: 17 callbacks suppressed [ 191.898480][T10805] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1409'. [ 191.958252][T10808] openvswitch: netlink: nsh attribute has 996 unknown bytes. [ 191.971030][T10808] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 191.992447][T10808] netlink: 'syz.3.1410': attribute type 3 has an invalid length. [ 192.085570][T10805] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1409'. [ 192.111210][T10805] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1409'. [ 192.312917][T10825] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1415'. [ 192.459448][T10833] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1415'. [ 192.524757][T10836] netlink: 160 bytes leftover after parsing attributes in process `syz.0.1418'. [ 192.543922][T10841] netlink: 'syz.3.1420': attribute type 7 has an invalid length. [ 192.712235][T10856] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 192.865790][T10860] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1423'. [ 192.925693][T10862] tipc: Enabled bearer , priority 0 [ 192.933757][T10862] syzkaller0: entered promiscuous mode [ 192.939584][T10862] syzkaller0: entered allmulticast mode [ 192.951250][T10862] netlink: 288 bytes leftover after parsing attributes in process `syz.1.1424'. [ 192.998580][T10862] tipc: Resetting bearer [ 193.014545][T10861] tipc: Resetting bearer [ 193.048338][T10861] tipc: Disabling bearer [ 193.065773][T10864] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1425'. [ 193.158346][T10873] tc_dump_action: action bad kind [ 193.208733][T10875] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1430'. [ 193.250543][T10880] netlink: 'syz.2.1431': attribute type 10 has an invalid length. [ 193.510560][T10883] bridge0: port 4(ipvlan1) entered blocking state [ 193.535154][T10883] bridge0: port 4(ipvlan1) entered disabled state [ 193.560277][T10883] ipvlan1: entered allmulticast mode [ 193.584208][T10883] bridge0: entered allmulticast mode [ 193.608868][T10883] ipvlan1: left allmulticast mode [ 193.622690][T10883] bridge0: left allmulticast mode [ 193.851089][T10913] netlink: 'syz.0.1438': attribute type 19 has an invalid length. [ 193.959834][T10922] netlink: 'syz.0.1438': attribute type 1 has an invalid length. [ 193.961138][T10913] bond7: Unable to set peer notification delay as MII monitoring is disabled [ 193.968751][T10920] netlink: 'syz.4.1439': attribute type 2 has an invalid length. [ 193.989974][T10913] bond7 (unregistering): Released all slaves [ 194.190940][T10920] 9: entered promiscuous mode [ 194.214957][T10922] syzkaller0: entered promiscuous mode [ 194.240699][T10922] syzkaller0: entered allmulticast mode [ 194.340401][T10913] bond7: (slave ipvlan1): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 194.362009][T10913] bond7: (slave ipvlan1): The slave device specified does not support setting the MAC address [ 194.384096][T10913] bond7: (slave ipvlan1): Setting fail_over_mac to active for active-backup mode [ 194.430675][T10945] x_tables: duplicate underflow at hook 2 [ 194.645484][T10940] pim6reg1: entered promiscuous mode [ 194.664319][T10940] pim6reg1: entered allmulticast mode [ 194.785973][T10962] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 194.797091][T10965] FAULT_INJECTION: forcing a failure. [ 194.797091][T10965] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 194.813210][T10965] CPU: 1 UID: 0 PID: 10965 Comm: syz.0.1449 Not tainted syzkaller #0 PREEMPT(full) [ 194.813246][T10965] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 194.813261][T10965] Call Trace: [ 194.813271][T10965] [ 194.813282][T10965] dump_stack_lvl+0x189/0x250 [ 194.813318][T10965] ? __pfx____ratelimit+0x10/0x10 [ 194.813349][T10965] ? __pfx_dump_stack_lvl+0x10/0x10 [ 194.813380][T10965] ? __pfx__printk+0x10/0x10 [ 194.813404][T10965] ? __might_fault+0xb0/0x130 [ 194.813450][T10965] should_fail_ex+0x414/0x560 [ 194.813490][T10965] _copy_from_user+0x2d/0xb0 [ 194.813528][T10965] kstrtouint_from_user+0xc4/0x170 [ 194.813556][T10965] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 194.813600][T10965] proc_fail_nth_write+0x88/0x200 [ 194.813630][T10965] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 194.813665][T10965] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 194.813696][T10965] vfs_write+0x27e/0xb30 [ 194.813738][T10965] ? __pfx_vfs_write+0x10/0x10 [ 194.813772][T10965] ? __fget_files+0x2a/0x420 [ 194.813799][T10965] ? __fget_files+0x3a0/0x420 [ 194.813820][T10965] ? __fget_files+0x2a/0x420 [ 194.813852][T10965] ksys_write+0x145/0x250 [ 194.813892][T10965] ? __pfx_ksys_write+0x10/0x10 [ 194.813928][T10965] ? do_syscall_64+0xbe/0xfa0 [ 194.813964][T10965] do_syscall_64+0xfa/0xfa0 [ 194.813993][T10965] ? lockdep_hardirqs_on+0x9c/0x150 [ 194.814024][T10965] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 194.814046][T10965] ? clear_bhb_loop+0x60/0xb0 [ 194.814073][T10965] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 194.814095][T10965] RIP: 0033:0x7f32dc18e17f [ 194.814116][T10965] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 194.814134][T10965] RSP: 002b:00007f32dd0f8030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 194.814160][T10965] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f32dc18e17f [ 194.814176][T10965] RDX: 0000000000000001 RSI: 00007f32dd0f80a0 RDI: 0000000000000005 [ 194.814190][T10965] RBP: 00007f32dd0f8090 R08: 0000000000000000 R09: 0000000000000000 [ 194.814205][T10965] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 194.814219][T10965] R13: 00007f32dc3e6038 R14: 00007f32dc3e5fa0 R15: 00007ffe71b76478 [ 194.814258][T10965] [ 195.711563][T10998] netlink: 'syz.2.1458': attribute type 5 has an invalid length. [ 195.794144][T11017] netlink: 'syz.0.1462': attribute type 8 has an invalid length. [ 196.155244][T11036] SET target dimension over the limit! [ 196.623052][T11076] netlink: 'syz.1.1478': attribute type 12 has an invalid length. [ 196.658237][T11076] netlink: 'syz.1.1478': attribute type 29 has an invalid length. [ 196.991285][T11096] __nla_validate_parse: 6 callbacks suppressed [ 196.991305][T11096] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1484'. [ 196.992999][T11088] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.1481'. [ 197.053907][T11101] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1486'. [ 197.064887][T11100] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1485'. [ 197.088556][T11100] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1485'. [ 197.113198][T11104] netlink: 'syz.1.1487': attribute type 13 has an invalid length. [ 197.134371][T11100] gretap0: entered promiscuous mode [ 197.182978][T11100] gretap0: left promiscuous mode [ 197.235301][T11104] veth1: left allmulticast mode [ 197.281654][T11107] netlink: 108 bytes leftover after parsing attributes in process `syz.3.1488'. [ 197.308040][T11104] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 197.340689][T11104] ip6gre1: left allmulticast mode [ 197.428640][T11114] x_tables: duplicate underflow at hook 1 [ 197.627000][T11128] netlink: 'syz.1.1495': attribute type 1 has an invalid length. [ 197.781127][T11128] veth5: entered promiscuous mode [ 197.870026][T11132] bond7: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 197.918445][T11141] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1499'. [ 197.978916][T11130] netlink: 'syz.2.1497': attribute type 5 has an invalid length. [ 198.031024][T11147] netlink: 'syz.1.1501': attribute type 1 has an invalid length. [ 198.215045][T11147] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1501'. [ 198.230797][T11147] bond8 (unregistering): Released all slaves [ 198.263125][T11156] netlink: 'syz.2.1505': attribute type 1 has an invalid length. [ 198.450015][T11166] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1505'. [ 198.515997][T11164] bond7: (slave ip6gretap2): Enslaving as a backup interface with an up link [ 198.564175][T11156] veth15: entered promiscuous mode [ 198.574158][T11156] bond7: (slave veth15): Enslaving as a backup interface with a down link [ 198.609944][ T8153] bond7: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 198.643251][T11176] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1508'. [ 198.661660][T11166] 8021q: adding VLAN 0 to HW filter on device bond7 [ 198.691498][T11174] IPv6: sit2: Disabled Multicast RS [ 198.699237][T11174] sit2: entered allmulticast mode [ 198.748660][ T8153] bond7: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 198.797902][T11176] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 198.893259][T11188] vxcan1: tx drop: invalid da for name 0x0000000000000002 [ 198.952673][T11188] macvlan2: entered promiscuous mode [ 198.959683][T11188] macvlan2: entered allmulticast mode [ 198.966882][T11188] bond0: (slave macvlan2): Error -98 calling set_mac_address [ 199.262419][T11210] netlink: 'syz.4.1518': attribute type 10 has an invalid length. [ 199.323379][T11210] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 199.522661][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.530471][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 199.597184][T11226] bond9: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 199.626063][T11226] bond9 (unregistering): Released all slaves [ 199.832565][T11235] delete_channel: no stack [ 199.912684][T11257] dvmrp0: entered allmulticast mode [ 199.940733][T11257] dvmrp0: left allmulticast mode [ 199.951668][T11257] vlan1: left allmulticast mode [ 199.959493][T11257] veth0_vlan: left allmulticast mode [ 200.161172][T11263] bridge0: port 3(team0) entered disabled state [ 200.167792][T11263] bridge0: port 2(bridge_slave_1) entered disabled state [ 200.175583][T11263] bridge0: port 1(bridge_slave_0) entered disabled state [ 200.444785][T11263] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 200.581313][T11289] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 200.713241][T11273] tap0: tun_chr_ioctl cmd 1074025677 [ 200.723564][T11273] tap0: linktype set to 65534 [ 200.762924][T11287] wg2: entered promiscuous mode [ 200.773080][T11287] wg2: entered allmulticast mode [ 200.781570][ T1151] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 200.791644][ T1151] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.803546][ T1151] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 200.822799][ T1151] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.908783][T11293] bond5: option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 200.928702][T11303] xt_TCPMSS: Only works on TCP SYN packets [ 200.936757][T11293] bond5 (unregistering): Released all slaves [ 200.976115][ T1151] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 200.990746][ T1151] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.009631][ T1151] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 201.027301][ T1151] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.481579][T11330] netlink: 'syz.3.1549': attribute type 1 has an invalid length. [ 201.575478][T11336] netlink: 'syz.0.1551': attribute type 2 has an invalid length. [ 201.612925][T11336] netlink: 'syz.0.1551': attribute type 7 has an invalid length. [ 202.314001][T11377] __nla_validate_parse: 73 callbacks suppressed [ 202.314025][T11377] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1566'. [ 202.752470][T11396] netlink: 'syz.2.1573': attribute type 2 has an invalid length. [ 202.782168][T11396] netlink: 'syz.2.1573': attribute type 1 has an invalid length. [ 202.879250][T11396] 8021q: adding VLAN 0 to HW filter on device bond8 [ 203.081057][T11414] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1578'. [ 203.223259][T11424] tunl0: entered promiscuous mode [ 203.248199][T11424] netlink: 'syz.0.1580': attribute type 3 has an invalid length. [ 203.275468][T11424] netlink: 9 bytes leftover after parsing attributes in process `syz.0.1580'. [ 203.460219][T11440] netlink: 'syz.3.1585': attribute type 1 has an invalid length. [ 203.560836][T11447] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1586'. [ 203.578385][T11440] bond5: (slave veth7): Enslaving as an active interface with a down link [ 203.590315][T11440] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1585'. [ 203.602938][T11440] 8021q: adding VLAN 0 to HW filter on device bond5 [ 203.801500][T11462] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1589'. [ 203.850587][T11463] netlink: 220 bytes leftover after parsing attributes in process `syz.2.1590'. [ 204.083243][T11473] xt_l2tp: v2 doesn't support IP mode [ 204.153168][T11476] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1596'. [ 204.185369][T11480] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 204.201717][T11476] sch_tbf: burst 88 is lower than device veth9 mtu (1514) ! [ 204.230790][T11473] netlink: 108 bytes leftover after parsing attributes in process `syz.0.1596'. [ 204.553060][T11503] netlink: 'syz.0.1600': attribute type 4 has an invalid length. [ 204.614865][T11482] syzkaller1: entered promiscuous mode [ 204.621142][T11482] syzkaller1: entered allmulticast mode [ 204.920824][T11525] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1610'. [ 204.961792][T11527] netlink: 'syz.1.1611': attribute type 30 has an invalid length. [ 205.317109][T11552] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 205.584048][ T1151] syzkaller0: tun_net_xmit 76 [ 205.589260][ T1151] syzkaller0: tun_net_xmit 48 [ 207.137886][T11571] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 207.143952][T11571] syzkaller0: Linktype set failed because interface is up [ 207.215632][T10323] syzkaller0: tun_net_xmit 76 [ 207.523838][T11627] bpq0: entered promiscuous mode [ 207.596260][T11635] sctp: [Deprecated]: syz.0.1636 (pid 11635) Use of int in maxseg socket option. [ 207.596260][T11635] Use struct sctp_assoc_value instead [ 207.706399][T11640] __nla_validate_parse: 6 callbacks suppressed [ 207.706419][T11640] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1641'. [ 207.724063][T11637] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1640'. [ 207.735552][T11640] netlink: 'syz.1.1641': attribute type 7 has an invalid length. [ 207.960818][T11647] netlink: 'syz.1.1644': attribute type 64 has an invalid length. [ 207.979263][T11647] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1644'. [ 207.990413][T11647] netlink: 'syz.1.1644': attribute type 64 has an invalid length. [ 208.000121][T11647] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1644'. [ 208.048346][T11647] xt_bpf: check failed: parse error [ 208.696823][T11688] netlink: 'syz.1.1656': attribute type 11 has an invalid length. [ 208.725687][T11688] netlink: 100 bytes leftover after parsing attributes in process `syz.1.1656'. [ 208.894142][T11694] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1657'. [ 208.903208][T11694] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1657'. [ 208.918345][T11694] IPVS: set_ctl: invalid protocol: 108 100.1.1.2:20004 [ 209.404721][T11725] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1666'. [ 210.130266][T11755] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1674'. [ 210.233418][T11755] hsr_slave_0: left promiscuous mode [ 210.313667][T11755] hsr_slave_1: left promiscuous mode [ 210.944336][T11787] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1682'. [ 211.227641][T11817] syzkaller0: entered promiscuous mode [ 211.243627][T11817] syzkaller0: entered allmulticast mode [ 211.413557][T11830] wlan0 speed is unknown, defaulting to 1000 [ 211.421250][T11830] wlan0 speed is unknown, defaulting to 1000 [ 211.428525][T11830] wlan0 speed is unknown, defaulting to 1000 [ 211.454890][T11832] bpq0: left promiscuous mode [ 211.464243][T11830] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 211.515227][T11830] wlan0 speed is unknown, defaulting to 1000 [ 211.527907][T11830] wlan0 speed is unknown, defaulting to 1000 [ 211.542575][T11830] wlan0 speed is unknown, defaulting to 1000 [ 211.552109][T11830] wlan0 speed is unknown, defaulting to 1000 [ 211.560615][T11830] wlan0 speed is unknown, defaulting to 1000 [ 211.730375][T11845] netlink: 'syz.3.1704': attribute type 4 has an invalid length. [ 211.839857][T11858] Bluetooth: MGMT ver 1.23 [ 211.847820][ T52] Bluetooth: hci0: command 0x0406 tx timeout [ 211.853779][ T5844] Bluetooth: hci3: command 0x0406 tx timeout [ 211.853882][ T52] Bluetooth: hci1: command 0x0406 tx timeout [ 211.860031][ T5844] Bluetooth: hci2: command 0x0401 tx timeout [ 212.113387][T11867] netlink: 'syz.3.1712': attribute type 12 has an invalid length. [ 212.124392][T11867] netlink: 'syz.3.1712': attribute type 29 has an invalid length. [ 212.517303][T11880] bridge0: port 4(ipvlan0) entered blocking state [ 212.525269][T11880] bridge0: port 4(ipvlan0) entered disabled state [ 212.548459][T11880] ipvlan0: entered allmulticast mode [ 212.550505][T11892] netlink: 'syz.2.1720': attribute type 1 has an invalid length. [ 212.553800][T11880] bridge0: entered allmulticast mode [ 212.563065][T11880] ipvlan0: left allmulticast mode [ 212.577010][T11880] bridge0: left allmulticast mode [ 212.584793][T11895] netlink: 'syz.2.1720': attribute type 1 has an invalid length. [ 212.612482][T11881] bridge0: port 4(ipvlan0) entered blocking state [ 212.619335][T11881] bridge0: port 4(ipvlan0) entered disabled state [ 212.626139][T11881] ipvlan0: entered allmulticast mode [ 212.631957][T11881] bridge0: entered allmulticast mode [ 212.643081][T11881] ipvlan0: left allmulticast mode [ 212.648446][T11881] bridge0: left allmulticast mode [ 212.664343][T11890] syzkaller0: entered promiscuous mode [ 212.670261][T11890] syzkaller0: entered allmulticast mode [ 212.697605][T11898] bond9 (unregistering): Released all slaves [ 212.718472][T11887] __nla_validate_parse: 8 callbacks suppressed [ 212.718494][T11887] netlink: 16215 bytes leftover after parsing attributes in process `syz.1.1718'. [ 212.753335][T11900] netlink: 204 bytes leftover after parsing attributes in process `syz.4.1719'. [ 212.836093][T11906] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1723'. [ 212.912218][T11910] netlink: 'syz.2.1724': attribute type 1 has an invalid length. [ 212.970380][T11910] 8021q: adding VLAN 0 to HW filter on device bond9 [ 213.213177][T11933] xt_TCPMSS: Only works on TCP SYN packets [ 213.267477][T11936] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1732'. [ 213.319345][T11936] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1732'. [ 213.601013][T11957] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1738'. [ 213.605166][T11962] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1739'. [ 213.631712][T11962] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1739'. [ 213.807933][T11969] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1742'. [ 213.873552][T11969] syzkaller1: entered promiscuous mode [ 213.898368][T11969] syzkaller1: entered allmulticast mode [ 213.975841][T11982] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1742'. [ 213.980490][T11969] bond6: down delay (33554432) is not a multiple of miimon (640), value rounded to 33553920 ms [ 214.596129][T12011] netlink: 'syz.1.1751': attribute type 1 has an invalid length. [ 214.625335][T12011] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 214.645640][T12011] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 214.676627][T12018] gtp0: entered promiscuous mode [ 214.682428][T12018] gtp0: entered allmulticast mode [ 214.703066][T12011] netlink: 'syz.1.1751': attribute type 2 has an invalid length. [ 214.723135][T12024] x_tables: ip6_tables: NETMAP.0 target: invalid size 40 (kernel) != (user) 0 [ 214.940981][T12029] netlink: 'syz.1.1756': attribute type 33 has an invalid length. [ 215.357805][ T5828] Bluetooth: hci4: command 0x0405 tx timeout [ 215.510565][T12062] tipc: Enabling of bearer rejected, failed to enable media [ 215.643734][T12070] xfrm2: entered promiscuous mode [ 215.679638][T12070] xfrm2: entered allmulticast mode [ 215.751539][T12079] tipc: Enabled bearer , priority 0 [ 215.788772][T12081] tipc: Enabling of bearer rejected, already enabled [ 215.798697][T12079] syzkaller0: entered promiscuous mode [ 215.817292][T12079] syzkaller0: entered allmulticast mode [ 215.884976][T12074] tipc: Resetting bearer [ 215.912596][T12072] tipc: Resetting bearer [ 215.969304][T12072] tipc: Disabling bearer [ 216.026334][T12092] netlink: 'syz.1.1773': attribute type 12 has an invalid length. [ 216.164381][T12036] wlan0 speed is unknown, defaulting to 1000 [ 217.269631][T12153] netlink: 'syz.1.1790': attribute type 9 has an invalid length. [ 217.908839][T12180] __nla_validate_parse: 13 callbacks suppressed [ 217.908859][T12180] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1798'. [ 218.032887][T12187] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1802'. [ 218.084878][T12189] netlink: ct family unspecified [ 218.090313][T12189] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 218.116428][T12191] openvswitch: netlink: Actions may not be safe on all matching packets [ 218.147063][T12191] xt_cgroup: invalid path, errno=-2 [ 218.373758][T12199] bond10: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-xor(2) [ 218.462973][T12199] bond10 (unregistering): Released all slaves [ 218.514952][T12222] netlink: 'syz.3.1810': attribute type 1 has an invalid length. [ 218.722694][T12228] netlink: zone id is out of range [ 218.754160][T12228] netlink: zone id is out of range [ 218.801680][T12228] netlink: zone id is out of range [ 218.828268][T12228] netlink: zone id is out of range [ 218.852631][T12228] netlink: zone id is out of range [ 219.003838][T12239] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1816'. [ 219.079069][T12239] bond0: (slave bridge_slave_1): Releasing backup interface [ 219.086855][T12250] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1820'. [ 219.091924][T12251] netlink: 'syz.3.1821': attribute type 1 has an invalid length. [ 219.104413][T12239] bridge_slave_1 (unregistering): left promiscuous mode [ 219.176598][T12256] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1822'. [ 219.271824][T12259] netlink: 'syz.0.1823': attribute type 1 has an invalid length. [ 219.287876][T12259] netlink: 228 bytes leftover after parsing attributes in process `syz.0.1823'. [ 219.288978][T12260] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.1825'. [ 219.303566][T12259] : renamed from bridge_slave_0 [ 219.398477][ T5908] IPVS: starting estimator thread 0... [ 219.498938][T12267] IPVS: using max 28 ests per chain, 67200 per kthread [ 219.518289][T12276] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 219.744441][T12291] IPVS: ip_vs_edit_dest(): server weight less than zero [ 219.769311][T12291] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1832'. [ 219.780874][T12291] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1832'. [ 219.826604][T12295] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.1833'. [ 220.252732][T12327] x_tables: ip_tables: tcp match: only valid for protocol 6 [ 220.494157][T12330] net_ratelimit: 7 callbacks suppressed [ 220.494180][T12330] sock: sock_set_timeout: `syz.4.1844' (pid 12330) tries to set negative timeout [ 220.524673][T12349] pim6reg: left allmulticast mode [ 220.591265][T12343] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 220.849574][T12373] vlan3: entered promiscuous mode [ 220.879331][T12373] bridge0: entered promiscuous mode [ 221.067285][T12388] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 221.189467][T12395] tipc: Enabled bearer , priority 0 [ 221.230846][T12395] Cannot find add_set index 2 as target [ 221.412318][T12412] syzkaller0: entered promiscuous mode [ 221.418183][T12412] syzkaller0: entered allmulticast mode [ 221.510364][T12394] tipc: Disabling bearer [ 221.520608][T12420] netlink: 'syz.3.1867': attribute type 1 has an invalid length. [ 221.717559][T12426] 8021q: adding VLAN 0 to HW filter on device bond4 [ 221.735268][T12433] ip6gre1: entered allmulticast mode [ 221.754553][T12434] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 221.765584][T12434] bond4: (slave macvlan2): Enslaving as a backup interface with an up link [ 221.820011][ T8153] bond4: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 221.871259][ T8153] bond4: (slave macvlan2): link status up again after 0 ms [ 221.904659][ T8153] bond4: (slave macvlan2): failed to get link speed/duplex [ 221.979982][ T8153] bond4: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 222.038961][ T1151] bond4: (slave macvlan2): failed to get link speed/duplex [ 222.126669][T12449] openvswitch: netlink: Flow key attr not present in new flow. [ 222.158808][ T1151] bond4: (slave macvlan2): failed to get link speed/duplex [ 222.280246][ T13] bond4: (slave macvlan2): failed to get link speed/duplex [ 222.402216][T12469] x_tables: duplicate underflow at hook 2 [ 222.408227][ T8153] bond4: (slave macvlan2): failed to get link speed/duplex [ 222.597381][T12482] xt_policy: neither incoming nor outgoing policy selected [ 222.750133][T12494] netlink: 'syz.2.1889': attribute type 1 has an invalid length. [ 222.817389][T12498] tipc: Enabling of bearer rejected, failed to enable media [ 223.176937][T12529] netlink: 'syz.0.1898': attribute type 2 has an invalid length. [ 223.188031][T12529] __nla_validate_parse: 14 callbacks suppressed [ 223.188049][T12529] netlink: 84 bytes leftover after parsing attributes in process `syz.0.1898'. [ 223.194300][T12536] netlink: 'syz.1.1900': attribute type 4 has an invalid length. [ 223.291178][T12540] bond0: entered promiscuous mode [ 223.295033][T12536] netlink: 'syz.1.1900': attribute type 4 has an invalid length. [ 223.303003][T12540] bond_slave_0: entered promiscuous mode [ 223.310208][T12540] syz_tun: entered promiscuous mode [ 223.320352][T12540] bond0: left promiscuous mode [ 223.325180][T12540] bond_slave_0: left promiscuous mode [ 223.342035][T12540] syz_tun: left promiscuous mode [ 223.448775][T12550] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1903'. [ 223.555762][T12557] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1906'. [ 223.747227][T12568] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1908'. [ 223.879252][T12575] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1911'. [ 224.315851][T12606] syzkaller0: entered promiscuous mode [ 224.323613][T12606] syzkaller0: entered allmulticast mode [ 224.341638][T12610] netlink: 'syz.0.1924': attribute type 1 has an invalid length. [ 224.374838][T12610] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1924'. [ 224.456914][T12614] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1925'. [ 224.800640][T12634] syzkaller0: entered promiscuous mode [ 224.823263][T12634] syzkaller0: entered allmulticast mode [ 224.857280][T12637] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1930'. [ 225.105596][T12648] tipc: Enabled bearer , priority 0 [ 225.126393][T12648] syzkaller0: entered promiscuous mode [ 225.136125][T12651] netlink: 'syz.1.1937': attribute type 1 has an invalid length. [ 225.154665][T12648] syzkaller0: entered allmulticast mode [ 225.168139][T12651] netlink: 'syz.1.1937': attribute type 7 has an invalid length. [ 225.175940][T12651] netlink: 'syz.1.1937': attribute type 8 has an invalid length. [ 225.198960][T12648] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 225.223934][T12651] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1937'. [ 225.233294][T12659] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1937'. [ 225.247380][T12648] sch_tbf: burst 2 is lower than device syzkaller0 mtu (1514) ! [ 225.334622][T12648] tipc: Resetting bearer [ 225.356001][T12667] syzkaller0: entered promiscuous mode [ 225.378152][T12667] syzkaller0: entered allmulticast mode [ 225.430264][T12647] tipc: Resetting bearer [ 225.447978][T12662] netlink: 'syz.3.1938': attribute type 10 has an invalid length. [ 225.461837][T12647] tipc: Disabling bearer [ 225.507827][ T1116] net_ratelimit: 22 callbacks suppressed [ 225.507850][ T1116] bond4: (slave macvlan2): failed to get link speed/duplex [ 225.565761][T12662] mac80211_hwsim hwsim7 wlan1: entered promiscuous mode [ 225.612460][T12662] bond0: (slave wlan1): Enslaving as an active interface with a down link [ 225.627836][ T1151] bond4: (slave macvlan2): failed to get link speed/duplex [ 225.737834][ T1151] bond4: (slave macvlan2): failed to get link speed/duplex [ 225.829063][T12682] raw_sendmsg: syz.2.1946 forgot to set AF_INET. Fix it! [ 225.861124][T12686] gretap2: entered promiscuous mode [ 225.901702][T12686] bond10: (slave gretap2): making interface the new active one [ 225.922626][T12686] bond10: (slave gretap2): Enslaving as an active interface with an up link [ 225.944654][ T8153] bond4: (slave macvlan2): failed to get link speed/duplex [ 226.025899][T12679] bond10: entered promiscuous mode [ 226.040247][T12679] macvlan2: entered promiscuous mode [ 226.046149][T12679] macvlan2: entered allmulticast mode [ 226.052300][T12679] bond10: entered allmulticast mode [ 226.058660][T12679] gretap2: entered allmulticast mode [ 226.092494][T12679] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 226.122189][T12679] bond10: left promiscuous mode [ 226.188154][ T1151] bond4: (slave macvlan2): failed to get link speed/duplex [ 226.200457][T12699] x_tables: duplicate entry at hook 3 [ 226.297906][ T1116] bond4: (slave macvlan2): failed to get link speed/duplex [ 226.408112][ T1151] bond4: (slave macvlan2): failed to get link speed/duplex [ 226.517943][ T1151] bond4: (slave macvlan2): failed to get link speed/duplex [ 226.637911][ T1116] bond4: (slave macvlan2): failed to get link speed/duplex [ 226.855196][ T8399] bond4: (slave macvlan2): failed to get link speed/duplex [ 226.879604][T12747] xt_ipcomp: unknown flags 1D [ 227.420277][T12776] bond7: (slave geneve3): Enslaving as an active interface with an up link [ 227.429878][ T8153] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 227.442225][T12772] block nbd2: server does not support multiple connections per device. [ 227.451844][T12772] block nbd2: shutting down sockets [ 227.468469][ T8153] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 227.488519][T12779] xt_CT: You must specify a L4 protocol and not use inversions on it [ 227.499638][ T8153] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 227.518015][ T8153] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 227.614438][T12783] validate_nla: 5 callbacks suppressed [ 227.614457][T12783] netlink: 'syz.3.1980': attribute type 16 has an invalid length. [ 227.635487][T12786] 8021q: VLANs not supported on ip6tnl0 [ 228.264694][T12829] netlink: 'syz.1.1990': attribute type 23 has an invalid length. [ 228.343910][T12836] netlink: 'syz.2.1992': attribute type 1 has an invalid length. [ 228.352244][T12836] __nla_validate_parse: 13 callbacks suppressed [ 228.352264][T12836] netlink: 228 bytes leftover after parsing attributes in process `syz.2.1992'. [ 228.423675][T12843] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1994'. [ 228.445739][T12829] bond11 (unregistering): Released all slaves [ 228.493767][T12831] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1990'. [ 228.704878][T12853] nbd: must specify an index to disconnect [ 228.775333][T12861] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1999'. [ 228.860974][T12866] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2000'. [ 228.921080][T12870] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2003'. [ 228.965876][T12872] ------------[ cut here ]------------ [ 228.971915][T12872] WARNING: CPU: 0 PID: 12872 at net/ipv4/route.c:1275 ip_rt_bug+0x2c/0x110 [ 228.980636][T12872] Modules linked in: [ 228.984852][T12872] CPU: 0 UID: 0 PID: 12872 Comm: syz.2.2002 Not tainted syzkaller #0 PREEMPT(full) [ 228.994307][T12872] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 229.004436][T12872] RIP: 0010:ip_rt_bug+0x2c/0x110 [ 229.009458][T12872] Code: 1e fa 41 57 41 56 41 55 41 54 53 48 89 d3 e8 bb 42 0f f8 66 90 e8 b4 42 0f f8 31 ff 48 89 de ba 02 00 00 00 e8 35 02 6f ff 90 <0f> 0b 90 31 c0 5b 41 5c 41 5d 41 5e 41 5f c3 cc cc cc cc cc f3 0f [ 229.029239][T12872] RSP: 0018:ffffc90003d1f180 EFLAGS: 00010286 [ 229.035362][T12872] RAX: 0906cfda3413ba00 RBX: ffff888073b66b40 RCX: 0906cfda3413ba00 [ 229.043424][T12872] RDX: 0000000000000002 RSI: ffffffff8d70dfda RDI: ffffffff8bbf0760 [ 229.051482][T12872] RBP: 0000000000000001 R08: ffffffff8f7ce877 R09: 1ffffffff1ef9d0e [ 229.059532][T12872] R10: dffffc0000000000 R11: fffffbfff1ef9d0f R12: dffffc0000000000 [ 229.067544][T12872] R13: dffffc0000000000 R14: ffff888073b66b40 R15: ffff8881452d1e00 [ 229.075605][T12872] FS: 00007fc9448bf6c0(0000) GS:ffff88812613b000(0000) knlGS:0000000000000000 [ 229.084628][T12872] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 229.091294][T12872] CR2: 0000200000000081 CR3: 0000000047f92000 CR4: 00000000003526f0 [ 229.099352][T12872] Call Trace: [ 229.102665][T12872] [ 229.105628][T12872] ip_push_pending_frames+0xbe/0x150 [ 229.111011][T12872] __icmp_send+0xfc3/0x1320 [ 229.115568][T12872] ? __icmp_send+0x1b9/0x1320 [ 229.120339][T12872] ? __pfx___icmp_send+0x10/0x10 [ 229.125357][T12872] ? pskb_expand_head+0xb3a/0x1150 [ 229.130567][T12872] ip_options_compile+0x80/0xb0 [ 229.135465][T12872] ip_rcv_finish_core+0xaa2/0x1c00 [ 229.140779][T12872] ip_rcv_finish+0x14c/0x2f0 [ 229.145435][T12872] NF_HOOK+0x30c/0x3a0 [ 229.149588][T12872] ? __pfx_ip_rcv_finish+0x10/0x10 [ 229.154742][T12872] ? NF_HOOK+0x9a/0x3a0 [ 229.158973][T12872] ? __pfx_NF_HOOK+0x10/0x10 [ 229.163601][T12872] ? ip_rcv_core+0x7f7/0xd00 [ 229.168803][T12872] ? __pfx_ip_rcv_finish+0x10/0x10 [ 229.173979][T12872] ? __pfx_ip_rcv+0x10/0x10 [ 229.178558][T12872] __netif_receive_skb+0x143/0x380 [ 229.183726][T12872] ? netif_receive_skb+0x115/0x790 [ 229.188924][T12872] netif_receive_skb+0x1cb/0x790 [ 229.193904][T12872] ? __pfx___local_bh_disable_ip+0x10/0x10 [ 229.199809][T12872] ? __pfx_netif_receive_skb+0x10/0x10 [ 229.205327][T12872] ? tun_rx_batched+0x160/0x730 [ 229.210265][T12872] tun_rx_batched+0x1b9/0x730 [ 229.214984][T12872] ? __lock_acquire+0xab9/0xd20 [ 229.219921][T12872] ? __pfx_tun_rx_batched+0x10/0x10 [ 229.225170][T12872] ? tun_get_user+0x272f/0x3e90 [ 229.230128][T12872] tun_get_user+0x2b65/0x3e90 [ 229.234863][T12872] ? tun_get_user+0x6f6/0x3e90 [ 229.239727][T12872] ? tun_get_user+0x272f/0x3e90 [ 229.244664][T12872] ? aa_file_perm+0x44d/0x1550 [ 229.249507][T12872] ? __pfx_tun_get_user+0x10/0x10 [ 229.254604][T12872] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 229.260592][T12872] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 229.266973][T12872] ? ref_tracker_alloc+0x318/0x460 [ 229.272170][T12872] ? __lock_acquire+0xab9/0xd20 [ 229.277065][T12872] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 229.282610][T12872] ? tun_get+0x1c/0x2f0 [ 229.286816][T12872] ? tun_get+0x1c/0x2f0 [ 229.291070][T12872] ? tun_get+0x1c/0x2f0 [ 229.295275][T12872] tun_chr_write_iter+0x113/0x200 [ 229.300388][T12872] vfs_write+0x5c9/0xb30 [ 229.304680][T12872] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 229.310313][T12872] ? __pfx_vfs_write+0x10/0x10 [ 229.315140][T12872] ? __fget_files+0x2a/0x420 [ 229.319840][T12872] ksys_write+0x145/0x250 [ 229.324273][T12872] ? __pfx_ksys_write+0x10/0x10 [ 229.329214][T12872] ? do_syscall_64+0xbe/0xfa0 [ 229.333946][T12872] do_syscall_64+0xfa/0xfa0 [ 229.338534][T12872] ? lockdep_hardirqs_on+0x9c/0x150 [ 229.343780][T12872] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 229.349942][T12872] ? clear_bhb_loop+0x60/0xb0 [ 229.354669][T12872] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 229.360641][T12872] RIP: 0033:0x7fc94398e17f [ 229.365090][T12872] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 229.384789][T12872] RSP: 002b:00007fc9448bf000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 229.393303][T12872] RAX: ffffffffffffffda RBX: 00007fc943be5fa0 RCX: 00007fc94398e17f [ 229.401363][T12872] RDX: 0000000000000046 RSI: 0000200000000400 RDI: 00000000000000c8 [ 229.409405][T12872] RBP: 00007fc943a11f91 R08: 0000000000000000 R09: 0000000000000000 [ 229.417493][T12872] R10: 0000000000000046 R11: 0000000000000293 R12: 0000000000000000 [ 229.425658][T12872] R13: 00007fc943be6038 R14: 00007fc943be5fa0 R15: 00007ffda8b75858 [ 229.433828][T12872] [ 229.436908][T12872] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 229.444219][T12872] CPU: 0 UID: 0 PID: 12872 Comm: syz.2.2002 Not tainted syzkaller #0 PREEMPT(full) [ 229.453619][T12872] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 229.463707][T12872] Call Trace: [ 229.467014][T12872] [ 229.469998][T12872] dump_stack_lvl+0x99/0x250 [ 229.474650][T12872] ? __asan_memcpy+0x40/0x70 [ 229.479300][T12872] ? __pfx_dump_stack_lvl+0x10/0x10 [ 229.484545][T12872] ? __pfx__printk+0x10/0x10 [ 229.489186][T12872] vpanic+0x237/0x6d0 [ 229.493207][T12872] ? __pfx_vpanic+0x10/0x10 [ 229.497767][T12872] panic+0xb9/0xc0 [ 229.501531][T12872] ? __pfx_panic+0x10/0x10 [ 229.506103][T12872] __warn+0x31b/0x4b0 [ 229.510125][T12872] ? ip_rt_bug+0x2c/0x110 [ 229.514501][T12872] ? ip_rt_bug+0x2c/0x110 [ 229.518871][T12872] report_bug+0x2be/0x4f0 [ 229.523240][T12872] ? ip_rt_bug+0x2c/0x110 [ 229.527618][T12872] ? ip_rt_bug+0x2c/0x110 [ 229.531988][T12872] ? ip_rt_bug+0x2e/0x110 [ 229.536365][T12872] handle_bug+0x84/0x160 [ 229.540642][T12872] exc_invalid_op+0x1a/0x50 [ 229.545170][T12872] asm_exc_invalid_op+0x1a/0x20 [ 229.550034][T12872] RIP: 0010:ip_rt_bug+0x2c/0x110 [ 229.554998][T12872] Code: 1e fa 41 57 41 56 41 55 41 54 53 48 89 d3 e8 bb 42 0f f8 66 90 e8 b4 42 0f f8 31 ff 48 89 de ba 02 00 00 00 e8 35 02 6f ff 90 <0f> 0b 90 31 c0 5b 41 5c 41 5d 41 5e 41 5f c3 cc cc cc cc cc f3 0f [ 229.574623][T12872] RSP: 0018:ffffc90003d1f180 EFLAGS: 00010286 [ 229.580707][T12872] RAX: 0906cfda3413ba00 RBX: ffff888073b66b40 RCX: 0906cfda3413ba00 [ 229.588689][T12872] RDX: 0000000000000002 RSI: ffffffff8d70dfda RDI: ffffffff8bbf0760 [ 229.596677][T12872] RBP: 0000000000000001 R08: ffffffff8f7ce877 R09: 1ffffffff1ef9d0e [ 229.604659][T12872] R10: dffffc0000000000 R11: fffffbfff1ef9d0f R12: dffffc0000000000 [ 229.612639][T12872] R13: dffffc0000000000 R14: ffff888073b66b40 R15: ffff8881452d1e00 [ 229.620640][T12872] ip_push_pending_frames+0xbe/0x150 [ 229.625954][T12872] __icmp_send+0xfc3/0x1320 [ 229.630475][T12872] ? __icmp_send+0x1b9/0x1320 [ 229.635166][T12872] ? __pfx___icmp_send+0x10/0x10 [ 229.640234][T12872] ? pskb_expand_head+0xb3a/0x1150 [ 229.645375][T12872] ip_options_compile+0x80/0xb0 [ 229.650246][T12872] ip_rcv_finish_core+0xaa2/0x1c00 [ 229.655377][T12872] ip_rcv_finish+0x14c/0x2f0 [ 229.659983][T12872] NF_HOOK+0x30c/0x3a0 [ 229.664062][T12872] ? __pfx_ip_rcv_finish+0x10/0x10 [ 229.669186][T12872] ? NF_HOOK+0x9a/0x3a0 [ 229.673356][T12872] ? __pfx_NF_HOOK+0x10/0x10 [ 229.677962][T12872] ? ip_rcv_core+0x7f7/0xd00 [ 229.682570][T12872] ? __pfx_ip_rcv_finish+0x10/0x10 [ 229.687707][T12872] ? __pfx_ip_rcv+0x10/0x10 [ 229.692227][T12872] __netif_receive_skb+0x143/0x380 [ 229.697361][T12872] ? netif_receive_skb+0x115/0x790 [ 229.702508][T12872] netif_receive_skb+0x1cb/0x790 [ 229.707459][T12872] ? __pfx___local_bh_disable_ip+0x10/0x10 [ 229.713276][T12872] ? __pfx_netif_receive_skb+0x10/0x10 [ 229.718770][T12872] ? tun_rx_batched+0x160/0x730 [ 229.723649][T12872] tun_rx_batched+0x1b9/0x730 [ 229.728340][T12872] ? __lock_acquire+0xab9/0xd20 [ 229.733209][T12872] ? __pfx_tun_rx_batched+0x10/0x10 [ 229.738421][T12872] ? tun_get_user+0x272f/0x3e90 [ 229.743300][T12872] tun_get_user+0x2b65/0x3e90 [ 229.747997][T12872] ? tun_get_user+0x6f6/0x3e90 [ 229.752776][T12872] ? tun_get_user+0x272f/0x3e90 [ 229.757640][T12872] ? aa_file_perm+0x44d/0x1550 [ 229.762422][T12872] ? __pfx_tun_get_user+0x10/0x10 [ 229.767469][T12872] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 229.773376][T12872] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 229.779727][T12872] ? ref_tracker_alloc+0x318/0x460 [ 229.784851][T12872] ? __lock_acquire+0xab9/0xd20 [ 229.789715][T12872] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 229.795191][T12872] ? tun_get+0x1c/0x2f0 [ 229.799363][T12872] ? tun_get+0x1c/0x2f0 [ 229.803528][T12872] ? tun_get+0x1c/0x2f0 [ 229.807704][T12872] tun_chr_write_iter+0x113/0x200 [ 229.812743][T12872] vfs_write+0x5c9/0xb30 [ 229.817007][T12872] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 229.822573][T12872] ? __pfx_vfs_write+0x10/0x10 [ 229.827362][T12872] ? __fget_files+0x2a/0x420 [ 229.831972][T12872] ksys_write+0x145/0x250 [ 229.836327][T12872] ? __pfx_ksys_write+0x10/0x10 [ 229.841195][T12872] ? do_syscall_64+0xbe/0xfa0 [ 229.845894][T12872] do_syscall_64+0xfa/0xfa0 [ 229.850409][T12872] ? lockdep_hardirqs_on+0x9c/0x150 [ 229.855622][T12872] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 229.861709][T12872] ? clear_bhb_loop+0x60/0xb0 [ 229.866483][T12872] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 229.872388][T12872] RIP: 0033:0x7fc94398e17f [ 229.876831][T12872] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 229.896448][T12872] RSP: 002b:00007fc9448bf000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 229.904878][T12872] RAX: ffffffffffffffda RBX: 00007fc943be5fa0 RCX: 00007fc94398e17f [ 229.912862][T12872] RDX: 0000000000000046 RSI: 0000200000000400 RDI: 00000000000000c8 [ 229.920864][T12872] RBP: 00007fc943a11f91 R08: 0000000000000000 R09: 0000000000000000 [ 229.928861][T12872] R10: 0000000000000046 R11: 0000000000000293 R12: 0000000000000000 [ 229.936835][T12872] R13: 00007fc943be6038 R14: 00007fc943be5fa0 R15: 00007ffda8b75858 [ 229.944833][T12872] [ 229.948021][T12872] Kernel Offset: disabled [ 229.952456][T12872] Rebooting in 86400 seconds..