last executing test programs: 2.811884028s ago: executing program 2 (id=8820): r0 = socket(0x1a, 0x6, 0x10001) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c0000001800dd8d000000000000000002000000000000060000000006001500010000001800168014000100800000000000000000001000000011"], 0x3c}, 0x1, 0x0, 0x0, 0x20000010}, 0x200000a0) setsockopt$inet_opts(r0, 0x0, 0x0, &(0x7f0000000040)="a396d36d994f99b4a508eb2364642869e29deee87befe8e5098cb34e6a3085413b9dc8839bd1b011384ea2155d69fdc31a05aeaad909ae720a62e184fc3c0362f452025d1faa55", 0x47) sendmmsg(r0, &(0x7f0000000000), 0x0, 0x0) 2.66036246s ago: executing program 2 (id=8824): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket(0x10, 0x3, 0x0) (async) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newlink={0x40, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ppp={{0x8}, {0xc, 0x2, 0x0, 0x1, {0x8, 0x1, r2}}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0xc}]}, 0x40}}, 0x0) (async) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x3c1, 0x3, 0x318, 0x168, 0x6c, 0x0, 0x168, 0x0, 0x248, 0x258, 0x258, 0x248, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @private0, [], [], 'wlan1\x00', 'ip6gre0\x00', {}, {}, 0x11, 0x0, 0x0, 0x48}, 0x0, 0x100, 0x168, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x2, 0x0, 0x5}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0xfffffffd, 'netbios-ns\x00', 'syz1\x00'}}}, {{@ipv6={@dev, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'netdevsim0\x00', 'lo\x00'}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x2001}}, {0x28}}}}, 0x378) 2.252681135s ago: executing program 2 (id=8831): sendmsg$NFQNL_MSG_VERDICT(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20008050}, 0x4814) r0 = socket$kcm(0xa, 0x5, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8910, &(0x7f0000000000)={'vlan0\x00', @random="010000201000"}) r1 = socket$nl_audit(0x10, 0x3, 0x9) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@func_proto={0x2, 0x0, 0x0, 0x13, 0x2}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x28}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xf, &(0x7f0000000580)=@ringbuf, &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f00000003c0)={0x0, 0x0, 0x401}, 0x10}, 0x90) ioctl$XFS_IOC_GETPARENTS_BY_HANDLE(r2, 0xc040583f, &(0x7f0000000100)={{@align=0x9, {0x81, 0x4, 0xfffffc4d, 0xffffffffffffff71}}, {{[0x3, 0x7, 0x2, 0xffffffff]}, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)=[{{@_ha_fsid={[0x0, 0x8]}, {0xad, 0x7fff, 0x8, 0x3ff}}, 0x8, 0x0, 'vlan0\x00'}, {{@_ha_fsid={[0x7fff, 0xfff]}, {0x5, 0x2, 0x7, 0x6}}, 0x8, 0x0, '\\\\}\x00'}, {{@align=0x1, {0x6, 0x7, 0x100, 0x2}}, 0x0, 0x0, '[\x00'}]}}) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_SET(r2, &(0x7f0000000300)={&(0x7f00000001c0), 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x58, r4, 0x1, 0x0, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x9}}]}, 0x58}}, 0x110) r5 = socket$rxrpc(0x21, 0x2, 0xa) connect$rxrpc(r5, &(0x7f0000000000)=@in6={0x21, 0x0, 0x2, 0x7, {0xa, 0x0, 0x0, @remote}}, 0x24) r6 = socket$qrtr(0x2a, 0x2, 0x0) sendmsg(r6, &(0x7f0000003040)={&(0x7f0000000000)=@qipcrtr={0x2a, 0x1, 0x2}, 0x80, 0x0}, 0x0) sendmsg$AUDIT_USER_AVC(r1, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000003c0)={&(0x7f0000000140)={0x8c, 0x453, 0x4, 0x70bd27, 0x25dfdbfa, "d98b8d359ef78c9525e8cd0455fd41caee80c3cbd9a0eb3005e40381990c6c8574bfdd952fd6ff208e1e36f28aa88ae79b429dc15f11a1d873e45074e0cc43b2164af4902c292c59f263465cb639770030700242f2d5879b0976a76ecfcf782cf7ac73976158f422a2efc1ecaee8972ff48b235d6a9a824e287bf27f"}, 0x8c}, 0x1, 0x0, 0x0, 0x4000000}, 0x50) sendmsg$DEVLINK_CMD_PORT_SET(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000700)={&(0x7f0000000440)={0xfc, r4, 0x200, 0x70bd2b, 0x25dfdbff, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}, {0x6}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x6}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x6, 0x4, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x6, 0x4, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x6, 0x4, 0x1}}]}, 0xfc}, 0x1, 0x0, 0x0, 0x40044}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="02000000040000000800002782f26a7d8c000100000080000000f6c9de2d1f107952a2c9b1000000000000008a39bf64ded56d08ee2f20d412eee66c8c0cff4a8d7f5220410699d448ebb8ba80b12116015907060139f57cc2ed2db968ee2e5e70613580c74df4c22e6210fa43aac3e4d61cdd0e570b611d8696f309bf0dc38da0ebde012eca3f5318fed91c45c99ec16d24bc107993e010b0eb26f2b5b819", @ANYRES32, @ANYRES64=r1, @ANYRES32=0x0, @ANYRES16=r1, @ANYBLOB="000040000000000000000000001cab208ecce61737e94d617ed514a930e0796f6585c78ee68041c763657016891e5cd315a6c507ca02572c441c5452f99fcc32e589d8eb28339eff477aa649b9dc2ba2bf5863d60c985c39959a56e9beb19a113345a45f6fd13a2cc3ccb33ac431aa0d0be3466c2fe6381055ac53e9e901a010304a6d0d9698d91c64f9614a046bff5d06cb8121cd2ecfc3c700000000"], 0x48) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x1, &(0x7f0000000540)=@raw=[@alu={0x4, 0x0, 0x0, 0xe53b9dcf120d5ac9, 0x7, 0x58, 0xfffffffffffffff0}], &(0x7f0000000080)='GPL\x00', 0x8000000}, 0x94) 2.134093424s ago: executing program 1 (id=8833): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0xffffffff) r2 = accept4(r1, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000000)={0x1ff, 0x4, 0x2, 0x2}, &(0x7f0000000040)=0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)={0x1c, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}, [@nested={0x8, 0x1a, 0x0, 0x1, [@nested={0x4, 0x4}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x84) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r4, &(0x7f00000002c0)={0x0, 0x4, &(0x7f0000000280)={&(0x7f0000012100)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0xf}, {0x0, 0x8}}}, 0x24}}, 0x0) recvmmsg(r4, &(0x7f0000001d00)=[{{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000001e00)=""/229, 0xe5}], 0x1}}], 0x2, 0x11, 0x0) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r4, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x3, 0x2, 0x201, 0x0, 0x0, {0xd, 0x0, 0xa}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x49001}, 0x44000) 2.054522729s ago: executing program 2 (id=8835): r0 = socket$qrtr(0x2a, 0x2, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="14010000350001000000000000000000010100800c00010000000000000000001400030020"], 0x114}], 0x1}, 0x0) ioctl$sock_qrtr_SIOCGIFADDR(r0, 0x891b, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x11, 0xb0}, [@ldst={0x6}], {0x95, 0x0, 0xc00}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0xfffffffc}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 1.844559485s ago: executing program 2 (id=8838): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000280), r0) (async) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x64, r1, 0x8, 0x70bd2b, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x2}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x48, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010102}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x10}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010102}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x40}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x40000}, 0xc01) 1.786771412s ago: executing program 1 (id=8840): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r0, 0x0, 0x33, &(0x7f00000001c0)=0x80000002, 0x4) listen(r0, 0xea) r1 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_emit_ethernet(0x36, &(0x7f00000000c0)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast}, @timestamp_reply={0xe, 0x0, 0x0, 0x7fff, 0x1ff, 0xfffffff3, 0xc, 0x8000}}}}}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000600)={'macvtap0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000001400010000000000fbdbdf250a00a100", @ANYRES32=r3, @ANYBLOB="14000100ff05000000000000dfce00000000000108000800"], 0x34}}, 0x0) r4 = socket(0x10, 0x6, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3400000015"], 0x34}, 0x1, 0x0, 0x0, 0x41c1}, 0x4040800) 1.719017915s ago: executing program 1 (id=8842): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f0000000080)={0x1c4, r1, 0x800, 0x70bd27, 0x25dfdbfb, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x7}, {0x6, 0x11, 0x7ff}, {0x8, 0x15, 0xffffff76}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x3}, {0x6, 0x11, 0x4}, {0x8, 0x15, 0x9}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x100}, {0x6, 0x11, 0x3ff}, {0x8, 0x15, 0xc}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x200}, {0x6, 0x11, 0x4}, {0x8, 0x15, 0x2}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0xa69b}, {0x6}, {0x8, 0x15, 0x10}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0xde9}, {0x6, 0x11, 0x6}, {0x8, 0x15, 0xd7b3}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0xff800000}, {0x6, 0x11, 0x8001}, {0x8, 0x15, 0x4}}]}, 0x1c4}, 0x1, 0x0, 0x0, 0x10040}, 0x4000000) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x24, r2, 0x4, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x20}, @val={0x8, 0x3, r3}, @void}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x20004054}, 0x4041) r4 = socket$inet(0x2, 0x3, 0x7fffffff) ioctl$sock_SIOCGPGRP(r4, 0x8904, &(0x7f0000000480)) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r5, 0x84, 0x20, &(0x7f00000004c0)=0xbd4c, 0x4) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r0, &(0x7f0000000780)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000740)={&(0x7f0000000540)={0x1f0, r1, 0x2, 0x70bd2d, 0x25dfdbfb, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0xfffffffa}, {0x6, 0x16, 0x800}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x6742}, {0x8, 0xb, 0x9}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x6}, {0x6, 0x16, 0x1}, {0x5}, {0x6, 0x11, 0x3}, {0x8, 0xb, 0x828}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0xe}, {0x6, 0x16, 0x1}, {0x5}, {0x6, 0x11, 0x6}, {0x8, 0xb, 0x32ec}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0xfffffffb}, {0x6, 0x16, 0xb}, {0x5}, {0x6, 0x11, 0xc0ec}, {0x8, 0xb, 0xffffffff}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x7}, {0x6, 0x16, 0xd1}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x400}, {0x8, 0xb, 0x3}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x2}, {0x6, 0x16, 0x1}, {0x5}, {0x6, 0x11, 0x93ee}, {0x8}}]}, 0x1f0}, 0x1, 0x0, 0x0, 0x200008c0}, 0x800) ioctl$XFS_IOC_FD_TO_HANDLE(r0, 0xc038586a, &(0x7f00000008c0)={r4, &(0x7f00000007c0)='pci\x00', 0x800, &(0x7f0000000800)={@align, {0x46b, 0x1ff, 0x1}}, 0x2, &(0x7f0000000840)={@_ha_fsid}, &(0x7f0000000880)=0x3}) sendmsg$IPCTNL_MSG_EXP_GET(r6, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000940)={0x5c, 0x1, 0x2, 0x5, 0x0, 0x0, {0x0, 0x0, 0xa}, [@CTA_EXPECT_MASTER={0x10, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}]}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x9}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x1}, @CTA_EXPECT_FN={0x13, 0xb, 'callforwarding\x00'}, @CTA_EXPECT_CLASS={0x8}, @CTA_EXPECT_MASTER={0xc, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x2000c000}, 0x4) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r6, 0x0, 0x61, &(0x7f0000000a40)={'filter\x00', 0x4}, 0x68) sendmsg$NL80211_CMD_EXTERNAL_AUTH(0xffffffffffffffff, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x54, r2, 0x10, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "2425a38a7c0924588387fc451cbbcc03"}, @NL80211_ATTR_PMKID={0x14, 0x55, "61ce1923d0b51955c59f8f9faff5e295"}, @NL80211_ATTR_BSSID={0xa, 0xf5, @random="d10d842224a9"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r7 = syz_genetlink_get_family_id$fou(&(0x7f0000000c40), r6) sendmsg$FOU_CMD_DEL(r6, &(0x7f0000000d00)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x2c, r7, 0x2, 0x70bd26, 0x25dfdbfe, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_IPPROTO={0x5}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x850}, 0x0) sendmsg$NL80211_CMD_TDLS_MGMT(r6, &(0x7f0000000e00)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d80)={0x20, r2, 0x8, 0x70bd26, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x20}, 0x1, 0x0, 0x0, 0x13}, 0x8800) sendmsg$alg(r6, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)=[{&(0x7f0000000e40)="e780611aff98184e172b7ca0", 0xc}, {&(0x7f0000000e80)="27d806fe4a1becf5b57d4d1fb53fa94f2f23d100c6366b4725bb85133429f8f700a65cc75c12c9d6c93188a7921e676773f53499e012cfd6819a7531a9c26ed908c5b318f1d46e5fba6a12d1e12465a45b776dd455eb88171af623196fcecaca77314c0453d3c703fcc68fcc190143213bc75187d631c13813b815873b6ee911cae385229d8a14524d20016c9257963dfbd9b08c7e0f8a0a71646a061d5e0b2d600dcdfcb10e191b4d95561a8cbf79dc037fd1bec82036", 0xb7}, {&(0x7f0000000f40)="81f61d7b9aa11422a28af7e77decac42bf6079edc277db09205f8a15443d289f663b9f236c0dcc3fed5b7163e19520b099442aac8b1e90941f6d97f3539553f08c51e9e0a7ab4e0bab28e923f0d7de865c74f70029f781f6e3cf17d373f73f72c3b329ad4a3054faeb65c4fc11720a1ae943b31f9e581b2649e6446637225a512dcec44eea6a7f6b", 0x88}, {&(0x7f0000001000)="303531a49abe46e7c31833799765630dd46adf3a26bf17c0a25f37b1e099927e708450200caf01e60f3cb4ea95fe6630de197bfa892311ecdf33823207027b9dffe8efd9c54aa8c1ae84eaa9b97691ddd7c47fba1c3f5cf13f5e4f89e340c98d488cdf2ac363b066e63934a69078958efa6f630186a08b92927e57797b09d4b25555708628dda62d500c142624cc9fd03bc4acd0f5", 0x95}], 0x4}, 0x8000) sendmsg$inet(r6, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)=[{&(0x7f0000001140)="2f9dd43d13c58e9a8278d5fa2f8e56a949fe23cf353102f43ad16877082a1eb6ecd2ec09379b328f560bcb51a14062ba21dd380e39d5573caead2da0c6c53ed9c00c9ffc379e957923a46bcbf5930229c43a8840b4575f8f4bbef652ffcdd08f2e488448d0165e7df37a400c7f96af7ff9c91f5d884574576af28e5a82e060c8e9b7a90ca61fe32ade073c5a475d5b79f9b5e3ac8330b62f5446a67767a0e28e6dd569", 0xa3}], 0x1}, 0x40000) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$NL80211_CMD_SET_WDS_PEER(r6, &(0x7f0000001380)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001340)={&(0x7f00000012c0)={0x5c, r2, 0x20, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x1000, 0x19}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @random="b278b8b71be5"}, @NL80211_ATTR_MAC={0xa, 0x6, @random="8e67cb275747"}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @random="ed5677dfe379"}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x400c0c4) ioctl$sock_inet_SIOCGIFADDR(r8, 0x8915, &(0x7f00000013c0)={'syzkaller1\x00', {0x2, 0x0, @initdev}}) sendmsg$NFT_MSG_GETSET(r5, &(0x7f00000014c0)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001480)={&(0x7f0000001440)={0x20, 0xa, 0xa, 0x3, 0x0, 0x0, {0x6fcc180e194179f9, 0x0, 0x2}, [@NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x24004080}, 0x4044044) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r4, 0xc0385868, &(0x7f0000001600)={r4, &(0x7f0000001500)='\x02\x02\x02\x02\x02\x02', 0x200, &(0x7f0000001540)={@align=0xfffffffffffffff7, {0x4, 0x2, 0x3, 0x100}}, 0x81, &(0x7f0000001580)={@_ha_fsid}, &(0x7f00000015c0)=0x3}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001840)={r9, 0x0, 0xd, 0x6b, &(0x7f0000001640)="2e5415cba28261f2414500a8c4", &(0x7f0000001680)=""/107, 0x5, 0x0, 0xf7, 0x2e, &(0x7f0000001700)="44bde541c81f4c710a1fc0e4cd6bd7f85ea09faccd5069a28af7599e8aa2030957ba635dcae1a97572de54d0a22a96120e7e5b9a97a2e646bb3ff8d5826616d502d8c4663f9094401525154bbadb3c658d410b75f3a12ac3aacff97b12a06e152c1cdea3c66c105da6d8d4646a733d9d765109cf602bff436778781ed0cf3b0c4d84c165697959f9628a63f7a8340318f6a75666fd395cc48c3ae240c31012c5dffd87655a48e74b1ba713d230c36f80bcc440d905f188f9eb1d3c19b66ee8187bc05120bde37327d3697aa2e9f841e3a3bfd3bd60657d7b2503d293e066d04d6203d40eb557eeb72666afa15027b06861d7a46f786d4e", &(0x7f0000001800)="afabf98569791988f65b60509a52303e21df981328278b10273a3f3349ddc3c4ad9698878aa2fc3fa5133a367906", 0x0, 0x0, 0x8}, 0x50) r10 = socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r10, 0x111, 0x1, 0xffffffff, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000001980)={&(0x7f00000018c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x40, 0x4, 0x6, 0x12fc1c6cc027a98e, 0x0, 0x0, {0x5, 0x0, 0x4}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x40800) 1.692441294s ago: executing program 2 (id=8844): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f00000000c0)=0x400) r1 = getpid() ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f0000000140)=r1) syz_open_procfs$namespace(r1, &(0x7f0000000100)='ns/pid_for_children\x00') unshare(0x6a040000) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, &(0x7f0000001c40)=ANY=[@ANYBLOB="85000000a800000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13}, 0x90) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r3, 0x29, 0x10, 0x0, 0x0) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16, @ANYBLOB="00042bbd7000ffdbdf52120000000a000600ff"], 0x48}, 0x1, 0x0, 0x0, 0x4040810}, 0x40000) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0041, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNSETVNETHDRSZ(r4, 0x400454d8, &(0x7f0000000140)=0x90) write$tun(r4, &(0x7f0000000080)=ANY=[@ANYRESOCT], 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r2, 0x0, 0x0, 0xffffffffffffffe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x48) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1c, 0x16, &(0x7f0000000f40)=ANY=[@ANYBLOB="611289000000000061134c0000000000bf2000000000000007000000080000002d0301"], 0x0, 0xa, 0x0, 0x0, 0xa177df1c56ff4b40, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xd}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b02d25a806f8c6394f90724fc60040f03", 0x17}], 0x1}, 0x0) r5 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r5, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe000058"], 0xfe33) 1.584347935s ago: executing program 1 (id=8847): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='dctcp', 0x5) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendto$inet(r1, &(0x7f0000000180)="89", 0x1, 0x4040, 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)={0x30, 0x40, 0x107, 0x70bd2b, 0x0, {0x1, 0x7c}, [@nested={0xc, 0x142, 0x0, 0x1, [@typed={0x8, 0x7, 0x0, 0x0, @ipv4=@loopback}]}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x4, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc020) getsockopt$netlink(r3, 0x10e, 0x3, &(0x7f0000000200)=""/167, &(0x7f0000000000)=0xa7) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r2, 0x84, 0x12, 0x0, &(0x7f00000000c0)) 1.482831502s ago: executing program 3 (id=8849): r0 = socket$tipc(0x1e, 0x5, 0x0) getsockopt$sock_buf(r0, 0x1, 0x37, &(0x7f0000000280)=""/4096, &(0x7f0000000100)=0x1000) getsockopt$TIPC_IMPORTANCE(r0, 0x10f, 0x7f, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000200)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000000800010002081000418e00000004fcff", 0x58}], 0x1) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r1, 0x10e, 0x8, &(0x7f0000000000)=0x9, 0x4) 1.472126404s ago: executing program 4 (id=8850): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f00000001c0), r0) sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x14, r1, 0x301}, 0x14}}, 0x0) 1.401060269s ago: executing program 0 (id=8851): mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x41071, 0xffffffffffffffff, 0x0) r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, &(0x7f0000000000)=0x1, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="00010000", @ANYRES16=r2, @ANYBLOB="00042dbd7000fedbdf25090000000800040009000000080006000700000008000500ff7f0000780003800800010001000000060007004e22000014000600000000000000000000000000000000010800050000000000050008000100000014000600fe8000000000000000000000000000bb14000600fc0000000000000000000000000000000800030004000000060007004e23000008000300020000001c000280080003000100000006000e004e21000008000700ff07000008000400af000000080005000c000000080006000e000000"], 0xd8}, 0x1, 0x0, 0x0, 0x841}, 0x4000004) r3 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000540)={r1, 0xffffffffffffffff, 0xd, 0x0, @val=@perf_event={0x3}}, 0x18) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r4, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa017242ba9380d424000000000000000100000051000000", 0xfe60) bpf$LINK_DETACH(0x22, &(0x7f0000000340)=r3, 0x4) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c0000004600070128bd700001000000017c0000080002"], 0x1c}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r9, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}, 0x1, 0x0, 0x0, 0x4081}, 0x0) getsockopt$SO_J1939_SEND_PRIO(r7, 0x6b, 0x3, &(0x7f00000004c0), &(0x7f0000000500)=0x4) r10 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) write(r10, &(0x7f0000000000)="b892d60d79265b0555f218d2", 0xc) syz_emit_ethernet(0x7a, &(0x7f0000004540)={@link_local, @empty, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "9a83c9", 0x4, 0x2f, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x88be}}}}}}}, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newlink={0x4c, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x3}, @IFLA_GRE_REMOTE={0x8, 0x7, @loopback}]}}}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x4c}}, 0x4000) 1.315684664s ago: executing program 1 (id=8852): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r1, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f00000002c0)={0x0, 0x6, 0x1, '%'}, 0x9) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r1, 0x84, 0x23, &(0x7f0000000000)={0x0, 0x6}, 0x8) syz_emit_ethernet(0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}, 0x1c) sendmsg$inet6(r2, &(0x7f0000000480)={&(0x7f0000000040)={0xa, 0x4e20, 0xfffffffc, @remote, 0x2}, 0x1c, 0x0}, 0x20008814) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) syz_emit_ethernet(0x64, &(0x7f0000000540)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x3, 0x56, 0x67, 0x0, 0x7, 0x6, 0x0, @remote, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2d53dd0688184eee, 0x6071, 0x0, 0xe7}, {"528b635764e07fe7c9251a707733701c932f7c2e0dd430b3d71435872078091ebb935655b9f1f3208bd6558334cf"}}}}}}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f00000001c0)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000001400)=ANY=[@ANYBLOB='\x00\x00\x00\f'], 0x152) 1.315425076s ago: executing program 4 (id=8853): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000080)={@initdev, @remote, 0x0}, &(0x7f00000000c0)=0xc) sendmsg$ETHTOOL_MSG_EEE_GET(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x34, r1, 0x100, 0x70bd25, 0x25dfdbfd, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x34}}, 0x80) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x84, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x58, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x2}]}}}, {0x30, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_NAT_REG_PROTO_MAX={0x8, 0x6, 0x1, 0x0, 0xb}, @NFTA_NAT_REG_PROTO_MIN={0x8, 0x5, 0x1, 0x0, 0x3}, @NFTA_NAT_TYPE={0x8}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xac}}, 0x0) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000001a14010002000000fcdbdf2508004b0013000000080001000000000008004f0000000000080015000400000008000300"], 0x38}}, 0x80) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000700)={0x14, r5, 0x10, 0x70bd26, 0x25dfdbfc, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x44}, 0x20000400) 1.274931054s ago: executing program 3 (id=8854): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x10, 0xb, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6622b533, 0x0, 0x0, 0x0, 0x6}, [@printk={@llx, {0x3, 0x0, 0x3, 0xa, 0x0}, {0x5}, {0x6, 0x0, 0x2}, {}, {}, {0x85, 0x0, 0x0, 0x8}}]}, &(0x7f0000000200)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$l2tp(0x2, 0x2, 0x73) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x3c1, 0x3, 0x3b8, 0x0, 0xc8, 0x8, 0x0, 0x5803, 0x2e8, 0x2e8, 0x2e8, 0x2e8, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x100, 0x168, 0x0, {0x0, 0x2000000000000}, [@common=@ipv6header={{0x28}, {0x6, 0x4d, 0x1}}, @common=@inet=@l2tp={{0x30}, {0x3, 0x3, 0x3, 0x1, 0x8}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x6, 0x5, 0x8, 0x401, 'pptp\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x160, 0x180, 0x0, {}, [@common=@inet=@set1={{0x28}, {{0x2, 0x0, 0x7}}}, @common=@srh1={{0x90}, {0x2f, 0x11, 0x0, 0xd, 0x1c, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @empty, @dev={0xfe, 0x80, '\x00', 0x1e}, [0xffffffff, 0x0, 0xffffffff, 0xff], [0xff000000, 0x0, 0xff000000, 0xffffffff], [0xffffffff, 0xff000000, 0xff000000, 0x7fffff00], 0x0, 0x1000}}]}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x418) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES16=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}, 0x1, 0x0, 0x0, 0x40480c4}, 0x0) getsockname$packet(r1, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r5 = socket$inet(0xa, 0x801, 0x84) connect$inet(r5, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r5, 0x8) r6 = accept4(r5, 0x0, 0x0, 0x0) write(r6, &(0x7f0000000000)="ea", 0x1) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r6, 0x84, 0x22, &(0x7f0000000100)={0x3}, 0x10) sendto$inet6(r6, &(0x7f0000000200)='x', 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7b, &(0x7f0000000040)={0x0, 0x2}, 0x8) close(r6) r7 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000000280)=@raw={'raw\x00', 0x8, 0x3, 0x290, 0x0, 0xa, 0x148, 0x120, 0x60, 0x1f8, 0x2a8, 0x2a8, 0x1f8, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc0, 0x120, 0x0, {0x200003ae, 0x7f00}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}, {0x10}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @empty, 0xb6, 0x8, [0xb, 0x24, 0x24, 0x19, 0x3e, 0x19, 0x31, 0x3b, 0x5, 0x40, 0x12, 0x33, 0x3b, 0x3f, 0x3b, 0x7], 0x0, 0x7fff, 0x1}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00', {}, {}, 0x67, 0x0, 0x4}, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x14, 0x1, 0x81, 0x0, 'netbios-ns\x00', 'syz1\x00', {0x9}}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x2f0) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000001814010000000000000000000800010000000000080003"], 0x20}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000180)={&(0x7f00000003c0)={0x34, r2, 0x400, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xfffffff8}], @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x4014) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r11 = openat$cgroup_ro(r10, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r11, &(0x7f0000000200)=0x2, 0x12) sendmsg$nl_route(r0, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000140)=ANY=[@ANYBLOB="2c000000130005002cbd70000000000000000000", @ANYRES32=r3, @ANYBLOB="07030000000000000a0001006907"], 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x42) 1.274451048s ago: executing program 0 (id=8855): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x3}, @NFTA_RULE_EXPRESSIONS={0x50, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x3}]}}}, {0x1c, 0x1, 0x0, 0x1, @last={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_LAST_SET={0x8, 0x1, 0x1, 0x0, 0x40494989}]}}}, {0x10, 0x1, 0x0, 0x1, @last={{0x9}, @void}}]}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x3}]}], {0x14}}, 0xe8}}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xf8, 0xf8, 0x9, [@func={0x8, 0x0, 0x0, 0xc, 0x5}, @enum={0x0, 0x4, 0x0, 0x6, 0x4, [{0x2, 0xfcc}, {0x8, 0x200}, {0x9, 0x1}, {0xa, 0x4}]}, @enum={0x6, 0x2, 0x0, 0x6, 0x4, [{0xc, 0x2}, {0x4}]}, @decl_tag={0x10, 0x0, 0x0, 0x11, 0x2, 0xa}, @enum64={0xe, 0x8, 0x0, 0x13, 0x0, 0x4, [{0x1, 0x1ee, 0x9}, {0x3, 0x100, 0x9}, {0xb, 0x4, 0x7f}, {0x2, 0xa60, 0x6}, {0x6, 0x5, 0x7}, {0x4, 0x7, 0x1}, {0xf, 0x3, 0xd}, {0x5, 0xff, 0x1c6}]}, @fwd={0x4}, @ptr={0x7}, @var={0x5, 0x0, 0x0, 0xe, 0x5, 0x1}]}, {0x0, [0x2e, 0x0, 0x5f, 0x61, 0x61, 0x5f, 0x2e]}}, &(0x7f0000000480)=""/26, 0x119, 0x1a, 0x1, 0x1fffe, 0x10000}, 0x28) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, 0x25, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r2, r4, 0x5}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x20000, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_bfifo={{0xa}, {0x8, 0x2, 0x148}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r9, {0x0, 0xd}, {0x8, 0xb}, {0xd, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x240040f0}, 0x4008000) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r5}, &(0x7f0000000000), &(0x7f0000000080)=r1}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r2}, &(0x7f0000000140), &(0x7f0000000180)=r1}, 0x20) pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r10, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xffffff9b}], 0x1, 0x1) r11 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r11, 0xc0189436, &(0x7f00000003c0)={'ip6gre0\x00', &(0x7f0000000340)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @local}}) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r12, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a98000000060a0b040000000000000000020000006c00048018000180080001006f7366000c000280080001400000000424000180090001006d6574610000000014000280080002400000000e08000340000000046c0001800a0001006c696d69740000001c0002800c00014000000000000000640c00024000000000000000010900010073797a30000000000900020073797a32"], 0xc0}}, 0x0) 1.153368986s ago: executing program 4 (id=8856): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000000)={0x0, 0x7fffffff}, &(0x7f0000000080)=0x8) r2 = socket$tipc(0x1e, 0x5, 0x0) connect$tipc(r2, &(0x7f00000000c0)=@name={0x1e, 0x2, 0x3, {{0x0, 0x1}}}, 0x10) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f00000000c0)={r1, 0x0, 0x9, 0x4}, 0x10) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmsg$sock(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000100)='&', 0x1}, {0x0, 0x4000}], 0x2}, 0x0) r4 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r4, &(0x7f0000000180)={0xa, 0x10000000004e20, 0x0, @empty, 0x6}, 0x1c) r5 = socket(0x15, 0x5, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) getsockopt(r5, 0x200000000114, 0x2710, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002) ioctl$XFS_IOC_PATH_TO_HANDLE(r4, 0xc0385869, &(0x7f0000000280)={r0, &(0x7f0000000140)='@-.\x00', 0x800, &(0x7f00000001c0)={@align, {0x5, 0xc, 0x2, 0x200}}, 0x4, &(0x7f0000000200)={@_ha_fsid}, &(0x7f0000000240)=0x3}) setsockopt$inet6_udp_int(r4, 0x11, 0xb, &(0x7f0000000100)=0x17, 0x4) syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97004d88c19e9ace5ffb2e9fc603dd282100000002ff02000000000000000000000000000104004e20004db0"], 0x0) 1.019422416s ago: executing program 3 (id=8857): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r2, 0x400448ca, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x13, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007311690000000000851000000200000085"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) r3 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8481f", 0x15}], 0x1}, 0x20) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r5 = socket(0x10, 0x803, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r7) sendmsg$NFC_CMD_DEV_UP(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x14, r8, 0x1, 0x70bd28, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r10 = socket(0x23, 0x6, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r9, {0x0, 0xffe0}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x81}, 0x20000010) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r10, 0x84, 0x1b, &(0x7f00000019c0)={0x0, 0x1000, "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"}, &(0x7f00000001c0)=0x1008) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r5, 0x84, 0x71, &(0x7f0000000240)={r11, 0x9}, 0x8) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="1c0000005e"], 0xfe33) r12 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r12, &(0x7f0000001980)={0x0, 0x0, &(0x7f0000001940)={0x0, 0xf4}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000) getsockname$packet(r12, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x34080}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r13}, @IFLA_GRE_REMOTE={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x28}}]}}}]}, 0x44}}, 0x0) 1.018545041s ago: executing program 0 (id=8858): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000001c0)={'veth0_to_batadv\x00', 0x7101}) unshare(0x20000) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$F2FS_IOC_SET_COMPRESS_OPTION(r1, 0x4002f516, &(0x7f0000000080)={0x5, 0xb}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x0, @private2}]}, &(0x7f0000000180)=0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x13, &(0x7f0000000440)=ANY=[@ANYRES8=r2], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x89) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x10, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000010000000000000000006c43de6d58c5756f00"], &(0x7f0000000040)='GPL\x00', 0xfb, 0x3e, 0x0, 0x40f00, 0x29, '\x00', 0x0, 0xf}, 0x94) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x85, &(0x7f0000000000)={r5, @in={{0x2, 0x0, @empty}}, 0x27c0}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x85, &(0x7f00000001c0)={r5, @in6={{0xa, 0x4e20, 0xffffffff, @empty, 0xffffffff}}}, 0x90) socket$unix(0x1, 0x2, 0x0) r6 = socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r6, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e20, @multicast1}, 0xffff, 0xfffe, 0x0, 0x4}}, 0x26) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100001d, 0x4008031, 0xffffffffffffffff, 0x0) ioctl$PPPIOCGL2TPSTATS(r6, 0x80487436, &(0x7f0000000080)) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'hsr0\x00', 0x0}) r8 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000280)=[@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x2a}}]}, &(0x7f0000000180)=0x10) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r9, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x54) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000d80)={0xffffffffffffffff}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="9feb01001800000000000000440000004400000004000000020000000036f4f8e9bd4c28eddd96c136631d000011040000000000000000000000000000030000000f8fb94b387351ca20a1601a4f0004000000010000000000008d0bed2cb472"], 0x0, 0x60}, 0x20) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r10, 0x89f8, &(0x7f0000001000)={'sit0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {0xffff}, {0xffff, 0x9}}}, 0x24}}, 0x4000) 1.017401689s ago: executing program 4 (id=8859): bind$can_j1939(0xffffffffffffffff, &(0x7f0000000300)={0x1d, 0x0, 0x1, {0x2, 0x0, 0x3}, 0x2}, 0x18) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000004140)=[{&(0x7f0000000240)=""/212, 0xd4}], 0x1}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e23, 0x9, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4}, 0x1c) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c030000160001000000000000000000fc010000000000000000000000000000fe88000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac141400000000000000000000000000000000006c000000ac14140000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000025bd7000000000000000000000000000000000000300000006"], 0x34c}}, 0x0) 918.409478ms ago: executing program 4 (id=8860): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb010018000000000000001800000018000000050000000000000001000005e80000000300000003000000400000000000005f00"], 0x0, 0x35}, 0x20) 810.552569ms ago: executing program 4 (id=8861): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r1, &(0x7f0000002380)=[{{&(0x7f0000000480)={0xa, 0x0, 0x0, @private0, 0x7fffffff}, 0x1c, &(0x7f0000000b00)=[{&(0x7f0000000580)='3', 0x1}], 0x1}}], 0x1, 0x44191) listen(r1, 0x100) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r1, 0x29, 0x37, &(0x7f0000000540)={0x3b}, 0x8) accept4(r1, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="3000000010000108fdff763f0000000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008001b000000000008001a8004002d"], 0x30}}, 0x0) 727.653387ms ago: executing program 3 (id=8862): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) splice(r2, &(0x7f0000000040), r1, 0x0, 0x800000000ff, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000000301011100000000000000000a0000000800034000002400140019"], 0x30}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x14, 0x1, 0x0, 0x800, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x800, 0x1000, 0x0, 0xa, 0x20}, {}, {0x1, 0x6, 0x0, 0xfffffffffffffffe}, 0x0, 0x6e6bbc}}, 0xb8}, 0x1, 0x0, 0x0, 0x404c830}, 0x0) 671.451607ms ago: executing program 3 (id=8863): r0 = socket$alg(0x26, 0x5, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r2 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x8, 0x3, 0x328, 0x190, 0xffffffff, 0xffffffff, 0x190, 0xffffffff, 0x258, 0xffffffff, 0xffffffff, 0x258, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@loopback, @private0, [0xff, 0x0, 0xff000000], [0x0, 0x0, 0x0, 0xff000000], 'wlan0\x00', 'veth0_to_team\x00', {0xff}, {}, 0x2c, 0xc7, 0x6, 0x61}, 0x0, 0x168, 0x190, 0x0, {}, [@common=@ah={{0x30}, {[0x4d6, 0x4d6], 0x8, 0xe, 0x2}}, @common=@srh1={{0x90}, {0x3a, 0x2, 0xf, 0x0, 0x9, @private1, @ipv4={'\x00', '\xff\xff', @remote}, @dev={0xfe, 0x80, '\x00', 0xd}, [0xffffffff, 0xffffff00, 0xffffffff, 0xff000000], [0xff000000, 0xff, 0xffffff00, 0xff], [0xffffffff, 0xffffffff, 0x0, 0xffffff00], 0x13a8, 0x1e8}}]}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x2, 0x4, 0x6}}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x36}}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0xa8, 0xc8}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x388) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) ioctl$TUNSETSNDBUF(r1, 0x400454d4, &(0x7f00000001c0)) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000900)=@newlink={0x38, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x40489}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r5}]}}}]}, 0x38}}, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0x439, 0x40, 0x0, {0x0, 0x0, 0xe403, r5, 0xa000}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @remote}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x48050}, 0x200080d0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha20\x00'}, 0x58) r6 = accept4(r0, 0x0, 0x0, 0x80000) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x41071, 0xffffffffffffffff, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, 0x0, 0x0) r8 = accept4(r7, 0x0, 0x0, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r9, 0x8933, &(0x7f0000000040)={'wg1\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x38, 0x10, 0x401, 0x2000000, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, 0x0, 0x1084}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x20044840) sendmsg$nl_generic(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001bc0)=ANY=[], 0x11a0}, 0x1, 0x0, 0x0, 0x8040}, 0x8080) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r8) setsockopt$SO_TIMESTAMP(r6, 0x1, 0x1d, &(0x7f0000000040)=0x2, 0x4) 296.89947ms ago: executing program 0 (id=8864): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x14, 0x25, 0x1, 0xfffffffd, 0x0, {0x2, 0x2}}, 0x14}}, 0x20000090) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x609, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_LIMIT={0x5, 0xb, 0x7}]}}}]}, 0x40}}, 0x0) 115.580084ms ago: executing program 0 (id=8865): r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r0, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10}, 0x24) sendmmsg(r0, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) sendmmsg(r0, &(0x7f0000000300)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000001001000001000000ec"], 0x18, 0x7000000}, 0xf401}], 0x1, 0x0) setsockopt$inet_int(r0, 0x0, 0x1, &(0x7f0000000000)=0x8, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@ipv6_newrule={0x30, 0x20, 0x2d2c6d60ea1da725, 0x70bd26, 0x25dfdbfd, {0xa, 0x0, 0x0, 0xcd, 0xff, 0x0, 0x0, 0x1, 0x10002}, [@FIB_RULE_POLICY=@FRA_PRIORITY={0x8}, @FIB_RULE_POLICY=@FRA_UID_RANGE={0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x20008081}, 0x0) socket(0x2000000000000021, 0x2, 0x10000000000002) (async) connect$rxrpc(r0, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10}, 0x24) (async) sendmmsg(r0, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) (async) sendmmsg(r0, &(0x7f0000000300)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000001001000001000000ec"], 0x18, 0x7000000}, 0xf401}], 0x1, 0x0) (async) setsockopt$inet_int(r0, 0x0, 0x1, &(0x7f0000000000)=0x8, 0x4) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@ipv6_newrule={0x30, 0x20, 0x2d2c6d60ea1da725, 0x70bd26, 0x25dfdbfd, {0xa, 0x0, 0x0, 0xcd, 0xff, 0x0, 0x0, 0x1, 0x10002}, [@FIB_RULE_POLICY=@FRA_PRIORITY={0x8}, @FIB_RULE_POLICY=@FRA_UID_RANGE={0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x20008081}, 0x0) (async) 104.907811ms ago: executing program 0 (id=8866): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)) ioctl$SIOCSIFHWADDR(r0, 0xc0189436, &(0x7f0000000000)={'wlan1\x00', @random='\x00\x00\\ \x00'}) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(r2, 0x8917, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x61, &(0x7f0000000040)={'filter\x00', 0x4}, 0x68) socket$inet6_mptcp(0xa, 0x1, 0x106) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x114, 0x20, 0x1, 0x0, 0x25dfdbfb, "", [@nested={0x101, 0x117, 0x0, 0x1, [@typed={0xc, 0x16, 0x0, 0x0, @u64=0x7f}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @empty}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c", @typed={0x4, 0xeb}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) 87.708572ms ago: executing program 1 (id=8867): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_CCA_MODE(r0, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0x50, r1, 0x2, 0x70bd2d, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_CCA_OPT={0x8}, @NL802154_ATTR_CCA_MODE={0x8, 0xc, 0x2}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000}, 0x41) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x2000000}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}], {0x14}}, 0x64}}, 0x0) 0s ago: executing program 3 (id=8868): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_RECV_OWN_MSGS(r2, 0x65, 0x4, 0x0, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="b80000001900010000000000fcdbdf2500000000000000000000000000000000fe8000000000000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xb8}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000080)={0x42, 0x800000, 0x8, 0x7, 0x0, 0x81}) write$bt_hci(r3, &(0x7f0000000080)=ANY=[], 0x6) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SCAUSEDIAG(r4, 0x89ec, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000400)={@local, @random="df00004000", @void, {@ipv4={0x800, @tcp={{0x9, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x11}, {[@ssrr={0x89, 0x7, 0xa6, [@broadcast]}, @cipso={0x86, 0x6, 0x1}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}]}, @NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_XFRM_DIR={0x5, 0x3, 0x1}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xe0}}, 0x0) kernel console output (not intermixed with test programs): index 0 [ 741.149714][T31559] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6762'. [ 741.500538][T31595] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 741.825255][T31628] netlink: 'syz.0.6776': attribute type 1 has an invalid length. [ 741.858431][T31632] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6775'. [ 741.900772][T31635] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6774'. [ 742.058934][T31640] lo speed is unknown, defaulting to 1000 [ 742.141009][T31647] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 742.174215][T31647] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 742.241192][T31648] ip6_vti0: entered promiscuous mode [ 742.274700][T31648] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6777'. [ 742.287135][T31660] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6780'. [ 742.560264][T31682] syzkaller0: entered promiscuous mode [ 742.566247][T31682] syzkaller0: entered allmulticast mode [ 745.802948][T31690] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 745.814113][T31703] netlink: 'syz.1.6789': attribute type 1 has an invalid length. [ 745.824914][T31703] netlink: 228 bytes leftover after parsing attributes in process `syz.1.6789'. [ 746.011638][T31717] netlink: 'syz.3.6796': attribute type 1 has an invalid length. [ 746.040711][T31717] netlink: 'syz.3.6796': attribute type 1 has an invalid length. [ 746.127668][T31722] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 746.140438][T31722] netlink: 240 bytes leftover after parsing attributes in process `syz.0.6794'. [ 746.188019][T31722] netlink: 'syz.0.6794': attribute type 10 has an invalid length. [ 746.197522][T31731] hsr0 speed is unknown, defaulting to 1000 [ 746.203796][T31731] hsr0 speed is unknown, defaulting to 1000 [ 746.216989][T31722] team0 (unregistering): Port device team_slave_0 removed [ 746.232249][T31722] team0 (unregistering): Port device 26 removed [ 746.256235][T31731] hsr0 speed is unknown, defaulting to 1000 [ 746.287833][T31731] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 746.338714][T31731] hsr0 speed is unknown, defaulting to 1000 [ 746.358043][T31731] hsr0 speed is unknown, defaulting to 1000 [ 746.367045][T31731] hsr0 speed is unknown, defaulting to 1000 [ 746.376856][T31731] hsr0 speed is unknown, defaulting to 1000 [ 746.402591][T31731] hsr0 speed is unknown, defaulting to 1000 [ 746.417982][T31731] hsr0 speed is unknown, defaulting to 1000 [ 746.444481][T31731] hsr0 speed is unknown, defaulting to 1000 [ 746.468681][T31731] hsr0 speed is unknown, defaulting to 1000 [ 746.620037][T31754] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6804'. [ 746.651555][T31763] netlink: 'syz.4.6806': attribute type 1 has an invalid length. [ 746.662950][T31760] netlink: 'syz.1.6805': attribute type 10 has an invalid length. [ 746.735751][T31760] bridge_slave_1: left allmulticast mode [ 746.741728][T31760] bridge_slave_1: left promiscuous mode [ 746.747572][T31760] bridge0: port 2(bridge_slave_1) entered disabled state [ 746.793935][T31760] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 746.831604][T31754] netlink: 60 bytes leftover after parsing attributes in process `syz.3.6804'. [ 746.867879][T31754] netlink: 60 bytes leftover after parsing attributes in process `syz.3.6804'. [ 746.959255][T31777] lo: entered promiscuous mode [ 746.973512][T31777] netlink: 'syz.4.6809': attribute type 2 has an invalid length. [ 746.985587][T31782] netlink: 'syz.1.6810': attribute type 4 has an invalid length. [ 746.996455][T31777] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 747.014533][T31782] netlink: 'syz.1.6810': attribute type 1 has an invalid length. [ 747.022786][T31782] netlink: 228 bytes leftover after parsing attributes in process `syz.1.6810'. [ 747.254992][T31791] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6812'. [ 747.269821][T31791] netlink: 'syz.4.6812': attribute type 7 has an invalid length. [ 747.282957][T31791] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6812'. [ 747.346506][T31794] netlink: 232 bytes leftover after parsing attributes in process `syz.3.6813'. [ 747.407432][ T1300] lec:lec_start_xmit: lec0:No lecd attached [ 747.418500][T31798] netlink: zone id is out of range [ 747.424453][T31798] netlink: del zone limit has 4 unknown bytes [ 747.553625][T31799] netlink: 576 bytes leftover after parsing attributes in process `syz.1.6814'. [ 749.510716][T31747] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 749.972752][T31823] netlink: 'syz.3.6822': attribute type 12 has an invalid length. [ 750.179663][T31840] netlink: 'syz.3.6828': attribute type 1 has an invalid length. [ 750.245957][T31840] 8021q: adding VLAN 0 to HW filter on device bond1 [ 750.409537][T31845] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 750.600243][T31869] netlink: 'syz.2.6835': attribute type 11 has an invalid length. [ 750.609866][T31875] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 2, id = 0 [ 750.847814][T31888] __nla_validate_parse: 1 callbacks suppressed [ 750.847837][T31888] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6841'. [ 750.905505][T31892] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6843'. [ 750.970031][T31896] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6843'. [ 750.998398][T31896] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6843'. [ 751.016666][T31892] 8021q: adding VLAN 0 to HW filter on device bond3 [ 751.028353][T31896] 8021q: adding VLAN 0 to HW filter on device bond0 [ 751.039096][T31896] bond3: (slave bond0): making interface the new active one [ 751.050386][T31896] bond3: (slave bond0): Enslaving as an active interface with an up link [ 751.072307][T31892] netlink: 'syz.0.6843': attribute type 4 has an invalid length. [ 751.080333][T31892] netlink: 152 bytes leftover after parsing attributes in process `syz.0.6843'. [ 751.100020][T31892] .`: renamed from bond0 (while UP) [ 751.224562][T31901] bridge0: port 2(bridge_slave_1) entered disabled state [ 751.232381][T31901] bridge0: port 1(bridge_slave_0) entered disabled state [ 751.406786][T31901] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 751.424150][T31901] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 751.436758][T31915] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6847'. [ 751.520377][T31924] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6850'. [ 751.570517][T31926] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6850'. [ 751.653494][ T5833] hsr0 speed is unknown, defaulting to 1000 [ 751.659801][ T5833] syz2: Port: 1 Link DOWN [ 751.664376][T31915] team1 (uninitialized): Failed to send options change via netlink (err -105) [ 751.726569][T31915] team1: entered promiscuous mode [ 751.731758][T31915] team1: entered allmulticast mode [ 751.737568][ T6703] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 751.747404][ T6703] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 751.757480][ T6703] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 751.791376][ T6703] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 751.836694][T31935] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6853'. [ 751.854560][T31616] bond3: (slave .`): link status definitely down, disabling slave [ 751.875954][T31616] bond3: now running without any active interface! [ 751.905469][T31937] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6853'. [ 752.382829][T31968] netlink: 'syz.4.6861': attribute type 2 has an invalid length. [ 752.407142][T31973] set match dimension is over the limit! [ 752.554025][T31980] netlink: 'syz.2.6867': attribute type 1 has an invalid length. [ 752.673271][T31980] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 753.073177][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5660 ms [ 753.089618][ C0] lec:lec_tx_timeout: lec0 [ 753.467457][T31992] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 755.813921][T32095] netlink: 'syz.0.6891': attribute type 32 has an invalid length. [ 755.824707][T32096] netlink: 'syz.0.6891': attribute type 32 has an invalid length. [ 755.897394][T32101] bond0 (unregistering): Released all slaves [ 756.806708][T32064] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 756.828167][T32076] __nla_validate_parse: 9 callbacks suppressed [ 756.828187][T32076] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6884'. [ 757.129619][T32122] syzkaller0: entered promiscuous mode [ 757.161903][T32122] syzkaller0: entered allmulticast mode [ 757.209941][T11681] lec:lec_start_xmit: lec0:No lecd attached [ 757.346113][T32138] No such timeout policy "syz0" [ 757.352987][T32139] netlink: 'syz.1.6901': attribute type 4 has an invalid length. [ 757.365094][T32139] netlink: 17 bytes leftover after parsing attributes in process `syz.1.6901'. [ 757.393456][T32138] netlink: 'syz.2.6900': attribute type 1 has an invalid length. [ 757.432909][T32142] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6901'. [ 757.442291][T32141] netlink: 4552 bytes leftover after parsing attributes in process `syz.3.6902'. [ 757.442383][T32141] netlink: 4552 bytes leftover after parsing attributes in process `syz.3.6902'. [ 757.669840][ T83] gretap0: left allmulticast mode [ 757.688173][ T83] bridge0: port 2(gretap0) entered disabled state [ 757.709591][ T83] bridge_slave_0: left allmulticast mode [ 757.722095][ T83] bridge_slave_0: left promiscuous mode [ 757.738432][ T83] bridge0: port 1(bridge_slave_0) entered disabled state [ 757.965801][T32170] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6908'. [ 757.999281][ T83] bond6 (unregistering): (slave gretap1): Releasing active interface [ 758.061082][ T83] bond3 (unregistering): (slave geneve2): Releasing active interface [ 758.175890][ T83] bond1 (unregistering): (slave bridge2): Releasing backup interface [ 758.340032][ T83] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 758.350572][ T83] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 758.362197][ T83] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 758.374324][ T83] bond0 (unregistering): Released all slaves [ 758.385671][ T83] bond1 (unregistering): Released all slaves [ 758.404714][ T83] bond2 (unregistering): Released all slaves [ 758.420136][ T83] bond3 (unregistering): Released all slaves [ 758.445735][ T83] bond4 (unregistering): Released all slaves [ 758.467092][ T83] bond5 (unregistering): (slave veth5): Releasing active interface [ 758.476049][ T83] bond5 (unregistering): Released all slaves [ 758.494971][ T83] bond6 (unregistering): Released all slaves [ 758.515874][ T83] bond7 (unregistering): Released all slaves [ 758.535857][ T83] bond8 (unregistering): Released all slaves [ 758.734586][ T83] 9: left promiscuous mode [ 758.781759][T32181] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6911'. [ 758.805177][T32178] bridge5: entered promiscuous mode [ 758.812141][T32178] bridge5: entered allmulticast mode [ 758.827622][T32178] team0: Port device bridge5 added [ 758.871657][ T83] tipc: Left network mode [ 759.187005][T32199] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.6919'. [ 759.307531][T32204] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6918'. [ 759.345889][T32204] netlink: 232 bytes leftover after parsing attributes in process `syz.2.6918'. [ 760.184460][ T83] IPVS: stop unused estimator thread 0... [ 760.876589][T32164] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 761.147937][T32217] netlink: 'syz.2.6923': attribute type 5 has an invalid length. [ 761.256795][T32217] syzkaller1: entered promiscuous mode [ 761.264769][T32217] syzkaller1: entered allmulticast mode [ 761.402594][T32222] bridge4: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 761.594810][T32243] x_tables: duplicate underflow at hook 1 [ 761.914949][T32271] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 40 [ 762.095288][T32276] __nla_validate_parse: 4 callbacks suppressed [ 762.095310][T32276] netlink: 48 bytes leftover after parsing attributes in process `syz.1.6942'. [ 762.110823][T32276] netlink: 48 bytes leftover after parsing attributes in process `syz.1.6942'. [ 762.209894][T32278] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6943'. [ 762.220988][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 762.229228][ C0] lec:lec_tx_timeout: lec0 [ 763.193468][T32286] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6946'. [ 764.151014][T32292] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6948'. [ 764.151542][T32293] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6948'. [ 764.178912][T32292] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6948'. [ 764.572293][T32242] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 764.760856][T32298] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6950'. [ 764.775406][T32298] netlink: 80 bytes leftover after parsing attributes in process `syz.2.6950'. [ 764.808120][T32298] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6950'. [ 764.880361][T32303] netlink: 'syz.1.6953': attribute type 5 has an invalid length. [ 764.914105][T32309] xt_hashlimit: overflow, try lower: 3/0 [ 765.071406][T32318] bond2: option min_links: invalid value (18446744073709551614) [ 765.096168][T32318] bond2: option min_links: allowed values 0 - 2147483647 [ 765.519151][T32318] bond2 (unregistering): Released all slaves [ 765.774621][T32323] syzkaller0: entered promiscuous mode [ 765.780580][T32323] syzkaller0: entered allmulticast mode [ 765.790153][T32323] 0: reclassify loop, rule prio 0, protocol 800 [ 765.983742][T32342] netlink: 'syz.2.6960': attribute type 1 has an invalid length. [ 766.447081][T32369] bond2: (slave bond_slave_1): Device is not our slave [ 766.455019][T32369] bond2: option active_slave: invalid value (bond_slave_1) [ 766.476374][T32369] bond2 (unregistering): Released all slaves [ 766.493051][T32377] x_tables: unsorted entry at hook 3 [ 766.673363][T32385] netlink: zone id is out of range [ 766.680864][T32385] netlink: zone id is out of range [ 766.692123][T32385] netlink: zone id is out of range [ 766.697377][T32385] netlink: zone id is out of range [ 766.702747][T32385] netlink: zone id is out of range [ 766.708173][T32385] netlink: zone id is out of range [ 766.714048][T32385] netlink: zone id is out of range [ 766.719315][T32385] netlink: zone id is out of range [ 766.727468][T32385] netlink: zone id is out of range [ 766.847041][T32394] netlink: 'syz.3.6977': attribute type 4 has an invalid length. [ 766.881751][T32394] netlink: 'syz.3.6977': attribute type 4 has an invalid length. [ 766.964242][T32394] bond2: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 766.976615][T32394] bond2 (unregistering): Released all slaves [ 769.164702][T32351] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 769.509233][T32424] __nla_validate_parse: 4 callbacks suppressed [ 769.509255][T32424] netlink: 516 bytes leftover after parsing attributes in process `syz.1.6987'. [ 769.526880][T32424] netlink: 256 bytes leftover after parsing attributes in process `syz.1.6987'. [ 769.681664][T32438] netlink: 'syz.2.6988': attribute type 10 has an invalid length. [ 769.714560][T32438] netlink: 396 bytes leftover after parsing attributes in process `syz.2.6988'. [ 769.939405][T32449] netlink: 256 bytes leftover after parsing attributes in process `syz.2.6993'. [ 769.953589][ T51] Bluetooth: hci2: command 0x0406 tx timeout [ 770.096662][T32455] netlink: 'syz.3.6995': attribute type 10 has an invalid length. [ 770.120980][T32455] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6995'. [ 770.232162][T32460] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 770.251555][T32460] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 770.259754][T32460] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 770.275483][T32460] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 770.295223][T32469] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6998'. [ 770.383153][T32469] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6998'. [ 771.032159][T32499] netlink: 120 bytes leftover after parsing attributes in process `syz.4.7008'. [ 771.084602][T32506] net_ratelimit: 52 callbacks suppressed [ 771.084624][T32506] openvswitch: netlink: Key type 30 is not supported [ 771.144756][T32504] netlink: 220 bytes leftover after parsing attributes in process `syz.2.7009'. [ 771.162855][T32504] netlink: 220 bytes leftover after parsing attributes in process `syz.2.7009'. [ 771.590542][T32522] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 771.681173][T32524] nbd: must specify a device to reconfigure [ 771.699592][T32524] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 772.178767][T32532] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 772.387033][ T13] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 772.414961][ T13] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 772.446991][ T13] netdevsim netdevsim1 netdevsim0: unset [1, 1] type 2 family 0 port 20004 - 0 [ 772.471413][ T13] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 772.482232][ T13] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 772.492173][ T13] netdevsim netdevsim1 netdevsim1: unset [1, 1] type 2 family 0 port 20004 - 0 [ 772.519298][T32551] xt_hashlimit: size too large, truncated to 1048576 [ 772.535076][ T13] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 772.554993][ T13] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 772.641092][ T13] netdevsim netdevsim1 netdevsim2: unset [1, 1] type 2 family 0 port 20004 - 0 [ 772.682228][ T13] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 772.695070][ T13] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 772.754955][ T13] netdevsim netdevsim1 netdevsim3: unset [1, 1] type 2 family 0 port 20004 - 0 [ 775.425545][T32616] __nla_validate_parse: 10 callbacks suppressed [ 775.425567][T32616] netlink: 92 bytes leftover after parsing attributes in process `syz.4.7039'. [ 775.630636][T32636] sctp: [Deprecated]: syz.3.7044 (pid 32636) Use of int in maxseg socket option. [ 775.630636][T32636] Use struct sctp_assoc_value instead [ 775.653864][T32640] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7042'. [ 775.671005][T32640] netlink: 'syz.0.7042': attribute type 5 has an invalid length. [ 775.678876][T32640] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7042'. [ 775.697632][T32638] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 775.712211][T32640] geneve2: entered promiscuous mode [ 775.717494][T32640] geneve2: entered allmulticast mode [ 775.725684][ T83] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 256 - 0 [ 775.736188][ T83] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 256 - 0 [ 775.753699][ T83] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 256 - 0 [ 775.771094][ T83] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 256 - 0 [ 775.814455][T32645] netlink: 192 bytes leftover after parsing attributes in process `syz.1.7047'. [ 775.900745][T32647] netlink: 'syz.3.7048': attribute type 12 has an invalid length. [ 775.994395][T32655] syzkaller1: entered promiscuous mode [ 775.999972][T32655] syzkaller1: entered allmulticast mode [ 776.396484][T32672] netlink: 294 bytes leftover after parsing attributes in process `syz.1.7056'. [ 776.431334][T32672] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 776.482434][T32677] netlink: 68 bytes leftover after parsing attributes in process `syz.3.7060'. [ 776.493825][T32677] netlink: 'syz.3.7060': attribute type 1 has an invalid length. [ 776.525824][T32677] 8021q: adding VLAN 0 to HW filter on device bond2 [ 776.631641][T32684] x_tables: unsorted entry at hook 2 [ 777.150228][T32719] x_tables: duplicate underflow at hook 2 [ 777.268028][T32711] netlink: 'syz.2.7063': attribute type 4 has an invalid length. [ 777.290225][T32710] 8021q: VLANs not supported on lo [ 777.354552][T32722] netlink: 'syz.1.7067': attribute type 30 has an invalid length. [ 777.380186][T32722] bond3: option arp_missed_max: invalid value (0) [ 777.388156][T32722] bond3: option arp_missed_max: allowed values 1 - 255 [ 777.397591][T32722] bond3 (unregistering): Released all slaves [ 777.489461][ T29] audit: type=1800 audit(1772816419.300:7): pid=32725 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.7068" name="memory.events" dev="tmpfs" ino=675 res=0 errno=0 [ 777.515299][ T29] audit: type=1804 audit(1772816419.310:8): pid=32725 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.7068" name="/newroot/129/memory.events" dev="tmpfs" ino=675 res=1 errno=0 [ 777.539838][ T29] audit: type=1804 audit(1772816419.330:9): pid=32725 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.7068" name="/newroot/129/memory.events" dev="tmpfs" ino=675 res=1 errno=0 [ 777.573793][ T29] audit: type=1800 audit(1772816419.330:10): pid=32725 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.7068" name="memory.events" dev="tmpfs" ino=675 res=0 errno=0 [ 777.629098][T32730] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7069'. [ 777.822146][T32737] netlink: 32 bytes leftover after parsing attributes in process `syz.1.7072'. [ 778.065489][T32750] netlink: 'syz.0.7077': attribute type 1 has an invalid length. [ 778.082735][T32750] netlink: 96 bytes leftover after parsing attributes in process `syz.0.7077'. [ 778.108969][T32750] netlink: 1 bytes leftover after parsing attributes in process `syz.0.7077'. [ 778.129902][T32750] netlink: 'syz.0.7077': attribute type 1 has an invalid length. [ 778.434183][ T307] netlink: 'syz.0.7083': attribute type 2 has an invalid length. [ 778.457746][ T306] batadv1: entered allmulticast mode [ 778.463922][ T307] netlink: 'syz.0.7083': attribute type 11 has an invalid length. [ 778.623107][ T320] xt_bpf: check failed: parse error [ 778.701386][ T29] audit: type=1800 audit(1772816420.520:11): pid=323 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.7089" name="memory.events" dev="tmpfs" ino=711 res=0 errno=0 [ 778.753067][ T29] audit: type=1804 audit(1772816420.520:12): pid=323 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.7089" name="/newroot/136/memory.events" dev="tmpfs" ino=711 res=1 errno=0 [ 779.867302][ T378] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 779.895016][ T378] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 779.922194][ T378] gretap1: entered promiscuous mode [ 779.927495][ T378] gretap1: entered allmulticast mode [ 780.581267][ T427] __nla_validate_parse: 10 callbacks suppressed [ 780.581291][ T427] netlink: 44 bytes leftover after parsing attributes in process `syz.4.7119'. [ 780.688663][ T430] bond4: entered allmulticast mode [ 780.753317][ T431] bond5: entered allmulticast mode [ 780.851572][ T449] netlink: 'syz.3.7125': attribute type 1 has an invalid length. [ 780.859454][ T449] netlink: 'syz.3.7125': attribute type 1 has an invalid length. [ 780.934307][ T449] netlink: 'syz.3.7125': attribute type 2 has an invalid length. [ 780.958788][ T454] vlan1: entered allmulticast mode [ 780.969077][ T454] geneve1: entered allmulticast mode [ 781.243823][ T470] bond3 (unregistering): Released all slaves [ 781.429565][ T482] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7134'. [ 781.495636][ T486] lo speed is unknown, defaulting to 1000 [ 781.504607][ T490] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.7137'. [ 781.546014][ T495] nbd: couldn't find a device at index 0 [ 781.776004][ T503] netlink: 'syz.4.7140': attribute type 4 has an invalid length. [ 781.811610][ T503] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7140'. [ 781.824229][ T506] netlink: 56 bytes leftover after parsing attributes in process `syz.1.7139'. [ 781.844296][ T505] sch_tbf: peakrate 5 is lower than or equals to rate 16783679728848008391 ! [ 782.067589][ T486] hsr0 speed is unknown, defaulting to 1000 [ 782.359542][ T527] openvswitch: netlink: Duplicate or invalid key (type 0). [ 782.391185][ T531] x_tables: duplicate underflow at hook 2 [ 782.398981][ T527] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 782.543461][ T535] IPv6: NLM_F_CREATE should be specified when creating new route [ 782.555572][ T535] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7147'. [ 782.696229][ T543] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7150'. [ 782.880497][ T549] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 782.889881][ T548] netlink: 'syz.1.7152': attribute type 10 has an invalid length. [ 783.031308][ T556] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 783.947197][ T599] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7166'. [ 784.089935][ T604] netlink: 248 bytes leftover after parsing attributes in process `syz.4.7168'. [ 784.108143][ T604] netlink: 'syz.4.7168': attribute type 1 has an invalid length. [ 784.127386][ T604] netlink: 224 bytes leftover after parsing attributes in process `syz.4.7168'. [ 784.141057][ T604] NCSI netlink: No device for ifindex 0 [ 784.543276][ T629] bond0: option miimon: invalid value (18446744073709551585) [ 784.561067][ T629] bond0: option miimon: allowed values 0 - 2147483647 [ 784.631860][ T629] bond0 (unregistering): Released all slaves [ 785.117624][ T655] netlink: 'syz.0.7182': attribute type 1 has an invalid length. [ 785.210344][ T655] 8021q: adding VLAN 0 to HW filter on device bond0 [ 785.315439][ T660] 8021q: adding VLAN 0 to HW filter on device bond0 [ 785.381610][ T660] bond0: (slave vxcan3): The slave device specified does not support setting the MAC address [ 785.409719][ T660] bond0: (slave vxcan3): Error -95 calling set_mac_address [ 785.505983][ T655] veth5: entered promiscuous mode [ 785.520618][ T655] bond0: (slave veth5): Enslaving as an active interface with a down link [ 785.765410][ T697] __nla_validate_parse: 5 callbacks suppressed [ 785.765433][ T697] netlink: 60 bytes leftover after parsing attributes in process `syz.1.7194'. [ 785.815278][ T684] team0: Device ip6gre2 is of different type [ 786.026825][ T714] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7197'. [ 786.052772][ T714] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7197'. [ 786.084677][ T716] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 786.107931][ T716] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7198'. [ 786.108565][ T718] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7199'. [ 786.168227][ T721] netem: change failed [ 786.178713][ T721] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7200'. [ 786.205203][T22663] IPVS: starting estimator thread 0... [ 786.219813][ T721] bridge0: entered promiscuous mode [ 786.250498][ T721] macsec1: entered promiscuous mode [ 786.272297][ T721] macsec1: entered allmulticast mode [ 786.288052][ T721] bridge0: entered allmulticast mode [ 786.300141][ T721] bridge0: port 3(macsec1) entered blocking state [ 786.311386][ T723] IPVS: using max 25 ests per chain, 60000 per kthread [ 786.335745][ T721] bridge0: port 3(macsec1) entered disabled state [ 786.389484][ T721] bridge0: left allmulticast mode [ 786.407114][ T721] bridge0: left promiscuous mode [ 786.648960][ T748] netlink: 'syz.0.7207': attribute type 2 has an invalid length. [ 786.650750][ T747] netlink: 'syz.2.7206': attribute type 1 has an invalid length. [ 786.665357][ T747] netlink: 'syz.2.7206': attribute type 4 has an invalid length. [ 786.673857][ T747] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.7206'. [ 786.912526][ T754] bond6: entered allmulticast mode [ 786.930072][ T760] bridge8: entered promiscuous mode [ 786.938800][ T760] bridge8: entered allmulticast mode [ 786.959428][ T760] bond6: (slave bridge8): Enslaving as an active interface with an up link [ 786.995923][ T759] bridge2: entered allmulticast mode [ 787.004966][ T763] bridge_slave_0: left allmulticast mode [ 787.010735][ T763] bridge_slave_0: left promiscuous mode [ 787.017198][ T763] bridge0: port 1(bridge_slave_0) entered disabled state [ 787.070064][ T763] bridge_slave_1: left allmulticast mode [ 787.092816][ T763] bridge_slave_1: left promiscuous mode [ 787.118131][ T763] bridge0: port 2(bridge_slave_1) entered disabled state [ 787.197858][ T763] bond0: (slave bond_slave_0): Releasing backup interface [ 787.210144][ T763] bond0: (slave bond_slave_1): Releasing backup interface [ 787.222191][ T763] team0: Port device team_slave_0 removed [ 787.230556][ T763] team0: Port device team_slave_1 removed [ 787.269761][ T763] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 787.303361][ T763] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 787.321897][ T763] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 787.363021][T22663] syz1: Port: 1 Link DOWN [ 787.751326][ T803] netlink: 'syz.1.7219': attribute type 3 has an invalid length. [ 788.269213][ T835] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7229'. [ 788.532640][ T849] netlink: 40 bytes leftover after parsing attributes in process `syz.4.7232'. [ 788.881204][ T859] netlink: 'syz.3.7235': attribute type 12 has an invalid length. [ 788.917962][ T865] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7237'. [ 788.966458][ T860] can: request_module (can-proto-0) failed. [ 790.831167][ T859] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 791.195862][ T910] delete_channel: no stack [ 791.221912][ T909] netlink: 212360 bytes leftover after parsing attributes in process `syz.2.7244'. [ 791.329855][ T925] netlink: 'syz.2.7245': attribute type 3 has an invalid length. [ 792.937042][ T917] sit0: entered promiscuous mode [ 792.942283][ T917] sit0: entered allmulticast mode [ 793.146439][ T947] openvswitch: netlink: Key 2 has unexpected len 16 expected 4 [ 793.191778][ T947] openvswitch: netlink: Key 2 has unexpected len 16 expected 4 [ 793.384152][ T972] netlink: 'syz.3.7255': attribute type 12 has an invalid length. [ 793.599004][ T986] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7259'. [ 794.349523][ T1006] openvswitch: netlink: EtherType 50a is less than min 600 [ 794.426619][ T1011] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7268'. [ 794.497975][ T1015] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 794.539989][ T1022] netlink: 'syz.1.7269': attribute type 1 has an invalid length. [ 794.600730][ T1022] 8021q: adding VLAN 0 to HW filter on device bond3 [ 794.644569][ T1013] bond3: (slave geneve3): making interface the new active one [ 794.679182][ T1013] bond3: (slave geneve3): Enslaving as an active interface with an up link [ 794.688431][ T156] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 794.700294][ T156] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 794.735117][T12384] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 795.236634][ T1055] netlink: 'syz.0.7277': attribute type 8 has an invalid length. [ 795.336985][ T1076] netlink: 'syz.3.7281': attribute type 1 has an invalid length. [ 795.356548][ T1068] syzkaller0: entered promiscuous mode [ 795.365482][ T1068] syzkaller0: entered allmulticast mode [ 795.448659][ T1083] gretap1: entered promiscuous mode [ 795.558754][ T1083] bond3: (slave gretap1): making interface the new active one [ 795.622126][ T1083] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 795.649709][ T1086] netlink: 27 bytes leftover after parsing attributes in process `syz.1.7283'. [ 795.719556][ T1088] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 795.741745][ T1089] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7284'. [ 795.911116][ T1103] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7288'. [ 796.109398][ T1113] netlink: 'syz.0.7294': attribute type 1 has an invalid length. [ 796.120829][ T1113] nbd: error processing sock list [ 796.199709][ T1118] netlink: 'syz.4.7296': attribute type 1 has an invalid length. [ 796.222728][ T1116] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7293'. [ 796.264134][ T1116] netlink: 148 bytes leftover after parsing attributes in process `syz.1.7293'. [ 796.549163][ T1148] ip6gre2: entered promiscuous mode [ 796.576355][ T1148] ip6gre2: entered allmulticast mode [ 796.682046][ T1158] netlink: 'syz.4.7305': attribute type 1 has an invalid length. [ 796.706289][ T1158] netlink: 'syz.4.7305': attribute type 1 has an invalid length. [ 797.024976][ T1185] netlink: 'syz.1.7314': attribute type 1 has an invalid length. [ 797.036918][ T1192] syzkaller0: entered promiscuous mode [ 797.044384][ T1192] syzkaller0: entered allmulticast mode [ 797.108949][ T1199] tipc: Failed to remove unknown binding: 66,0,0/0:2081955077/2081955079 [ 797.118711][ T1199] tipc: Failed to remove unknown binding: 66,0,0/0:2081955077/2081955078 [ 797.132569][ T1199] tipc: Failed to remove unknown binding: 66,0,0/0:2081955077/2081955079 [ 797.150425][ T1199] tipc: Failed to remove unknown binding: 66,0,0/0:2081955077/2081955078 [ 797.200705][ T1201] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7317'. [ 797.389389][ T1217] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7321'. [ 797.615288][ T1225] gtp1: entered promiscuous mode [ 797.620412][ T1225] gtp1: entered allmulticast mode [ 797.652539][ T1225] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7323'. [ 797.690673][ T1225] netlink: 'syz.3.7323': attribute type 1 has an invalid length. [ 797.861737][ T1244] siw: device registration error -23 [ 798.326914][ T1268] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 798.390266][ T1266] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7335'. [ 798.587843][ T1282] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 798.607559][ T1284] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 798.635798][ T1279] netlink: 'syz.4.7339': attribute type 1 has an invalid length. [ 798.651680][ T1290] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 798.661325][ T1279] netlink: 228 bytes leftover after parsing attributes in process `syz.4.7339'. [ 798.671707][ T1280] lo speed is unknown, defaulting to 1000 [ 798.691009][ T1279] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7339'. [ 798.706208][ T1276] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7341'. [ 798.745429][ T1282] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7340'. [ 798.755450][ T1284] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7340'. [ 798.921366][ T1284] hsr_slave_0 (unregistering): left promiscuous mode [ 798.962746][ T1306] FAULT_INJECTION: forcing a failure. [ 798.962746][ T1306] name failslab, interval 1, probability 0, space 0, times 0 [ 798.975679][ T1306] CPU: 1 UID: 0 PID: 1306 Comm: syz.4.7346 Not tainted syzkaller #0 PREEMPT(full) [ 798.975709][ T1306] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 798.975724][ T1306] Call Trace: [ 798.975732][ T1306] [ 798.975743][ T1306] dump_stack_lvl+0xe8/0x150 [ 798.975779][ T1306] should_fail_ex+0x412/0x560 [ 798.975814][ T1306] should_failslab+0xa8/0x100 [ 798.975845][ T1306] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 798.975872][ T1306] ? __alloc_skb+0x1d0/0x7d0 [ 798.975900][ T1306] ? __local_bh_enable_ip+0xd0/0x130 [ 798.975937][ T1306] __alloc_skb+0x1d0/0x7d0 [ 798.975967][ T1306] ? netlink_ack_tlv_len+0x6c/0x210 [ 798.976000][ T1306] netlink_ack+0x146/0xa50 [ 798.976025][ T1306] ? __pfx_genl_rcv_msg+0x10/0x10 [ 798.976046][ T1306] ? __pfx_nl802154_pre_doit+0x10/0x10 [ 798.976077][ T1306] ? __pfx_nl802154_post_doit+0x10/0x10 [ 798.976108][ T1306] ? __lock_acquire+0x6b5/0x2cf0 [ 798.976150][ T1306] netlink_rcv_skb+0x2b6/0x4b0 [ 798.976180][ T1306] ? __pfx_genl_rcv_msg+0x10/0x10 [ 798.976205][ T1306] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 798.976255][ T1306] ? down_read+0x272/0x2e0 [ 798.976276][ T1306] ? genl_rcv+0xd/0x40 [ 798.976299][ T1306] genl_rcv+0x28/0x40 [ 798.976317][ T1306] netlink_unicast+0x80f/0x9b0 [ 798.976353][ T1306] ? __pfx_netlink_unicast+0x10/0x10 [ 798.976381][ T1306] ? netlink_sendmsg+0x650/0xb40 [ 798.976409][ T1306] ? skb_put+0x11b/0x210 [ 798.976444][ T1306] netlink_sendmsg+0x813/0xb40 [ 798.976485][ T1306] ? __pfx_netlink_sendmsg+0x10/0x10 [ 798.976527][ T1306] ? aa_sock_msg_perm+0xf1/0x1b0 [ 798.976558][ T1306] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 798.976586][ T1306] ____sys_sendmsg+0x972/0x9f0 [ 798.976642][ T1306] ? __pfx_____sys_sendmsg+0x10/0x10 [ 798.976686][ T1306] ? import_iovec+0x73/0xa0 [ 798.976727][ T1306] ___sys_sendmsg+0x2a5/0x360 [ 798.976755][ T1306] ? __pfx____sys_sendmsg+0x10/0x10 [ 798.976815][ T1306] ? __fget_files+0x2a/0x420 [ 798.976847][ T1306] ? __fget_files+0x3a0/0x420 [ 798.976890][ T1306] __x64_sys_sendmsg+0x1bd/0x2a0 [ 798.976917][ T1306] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 798.976950][ T1306] ? __pfx_ksys_write+0x10/0x10 [ 798.976988][ T1306] do_syscall_64+0x14d/0xf80 [ 798.977021][ T1306] ? trace_irq_disable+0x3b/0x150 [ 798.977053][ T1306] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 798.977075][ T1306] ? clear_bhb_loop+0x40/0x90 [ 798.977103][ T1306] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 798.977126][ T1306] RIP: 0033:0x7facdb59c799 [ 798.977148][ T1306] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 798.977167][ T1306] RSP: 002b:00007facdc40d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 798.977191][ T1306] RAX: ffffffffffffffda RBX: 00007facdb815fa0 RCX: 00007facdb59c799 [ 798.977208][ T1306] RDX: 0000000000000000 RSI: 00002000000003c0 RDI: 0000000000000004 [ 798.977222][ T1306] RBP: 00007facdc40d090 R08: 0000000000000000 R09: 0000000000000000 [ 798.977237][ T1306] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 798.977250][ T1306] R13: 00007facdb816038 R14: 00007facdb815fa0 R15: 00007ffe4cc912e8 [ 798.977286][ T1306] [ 799.484451][ T1280] hsr0 speed is unknown, defaulting to 1000 [ 799.769553][ T1329] batadv_slave_1: default FDB implementation only supports local addresses [ 799.794720][ T1335] netlink: 'syz.0.7354': attribute type 12 has an invalid length. [ 800.155329][ T1349] bridge_slave_0: entered allmulticast mode [ 800.224310][ T1351] FAULT_INJECTION: forcing a failure. [ 800.224310][ T1351] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 800.250040][ T1351] CPU: 0 UID: 0 PID: 1351 Comm: syz.2.7359 Not tainted syzkaller #0 PREEMPT(full) [ 800.250071][ T1351] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 800.250086][ T1351] Call Trace: [ 800.250095][ T1351] [ 800.250105][ T1351] dump_stack_lvl+0xe8/0x150 [ 800.250143][ T1351] should_fail_ex+0x412/0x560 [ 800.250178][ T1351] _copy_to_user+0x31/0xb0 [ 800.250225][ T1351] simple_read_from_buffer+0xe1/0x170 [ 800.250262][ T1351] proc_fail_nth_read+0x1bb/0x230 [ 800.250300][ T1351] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 800.250336][ T1351] ? rw_verify_area+0x2a6/0x4d0 [ 800.250359][ T1351] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 800.250391][ T1351] vfs_read+0x20c/0xa70 [ 800.250413][ T1351] ? fdget_pos+0x246/0x320 [ 800.250450][ T1351] ? __pfx___mutex_lock+0x10/0x10 [ 800.250472][ T1351] ? __pfx_vfs_read+0x10/0x10 [ 800.250497][ T1351] ? __fget_files+0x2a/0x420 [ 800.250534][ T1351] ? __fget_files+0x3a0/0x420 [ 800.250564][ T1351] ? __fget_files+0x2a/0x420 [ 800.250611][ T1351] ksys_read+0x150/0x270 [ 800.250638][ T1351] ? __pfx_ksys_read+0x10/0x10 [ 800.250674][ T1351] do_syscall_64+0x14d/0xf80 [ 800.250706][ T1351] ? trace_irq_disable+0x3b/0x150 [ 800.250739][ T1351] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 800.250762][ T1351] ? clear_bhb_loop+0x40/0x90 [ 800.250790][ T1351] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 800.250813][ T1351] RIP: 0033:0x7fda0db5cfce [ 800.250833][ T1351] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 800.250853][ T1351] RSP: 002b:00007fda0e9b9fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 800.250881][ T1351] RAX: ffffffffffffffda RBX: 00007fda0e9ba6c0 RCX: 00007fda0db5cfce [ 800.250897][ T1351] RDX: 000000000000000f RSI: 00007fda0e9ba0a0 RDI: 0000000000000003 [ 800.250910][ T1351] RBP: 00007fda0e9ba090 R08: 0000000000000000 R09: 0000000000000000 [ 800.250924][ T1351] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 800.250937][ T1351] R13: 00007fda0de16038 R14: 00007fda0de15fa0 R15: 00007ffc02320858 [ 800.250973][ T1351] [ 800.378379][T12391] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 800.606811][T12391] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 800.629539][T12391] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 800.672299][ T1289] Bluetooth: hci5: command 0x0406 tx timeout [ 800.697350][T12391] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 800.723090][ T1366] netlink: 'syz.2.7365': attribute type 1 has an invalid length. [ 800.775944][ T1364] vlan2: entered allmulticast mode [ 800.781829][ T1364] bridge2: entered allmulticast mode [ 800.873581][ T1364] bridge2: port 1(veth3) entered blocking state [ 800.879992][ T1364] bridge2: port 1(veth3) entered disabled state [ 800.891157][ T1364] veth3: entered allmulticast mode [ 800.903834][ T1364] veth3: entered promiscuous mode [ 800.983642][ T1379] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 801.009479][ T1377] pim6reg1: entered promiscuous mode [ 801.015846][ T1377] pim6reg1: entered allmulticast mode [ 801.368876][ T1402] __nla_validate_parse: 12 callbacks suppressed [ 801.368899][ T1402] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7375'. [ 801.390678][ T1398] bond7: option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 801.410548][ T1406] netlink: 60 bytes leftover after parsing attributes in process `syz.1.7376'. [ 801.426640][ T1398] bond7 (unregistering): Released all slaves [ 801.687892][ T1414] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7378'. [ 801.728594][ T1414] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7378'. [ 801.745725][ T1414] bond0: entered promiscuous mode [ 801.751468][ T1414] bond_slave_0: entered promiscuous mode [ 801.757421][ T1414] bond_slave_1: entered promiscuous mode [ 801.771250][ T1414] bridge_slave_1: entered promiscuous mode [ 801.793751][ T1414] gretap0: entered promiscuous mode [ 801.800727][ T1414] debugfs: 'hsr1' already exists in 'hsr' [ 801.812767][ T1414] Cannot create hsr debugfs directory [ 801.818712][ T1414] hsr1: entered promiscuous mode [ 801.918606][ T1422] netlink: 'syz.2.7381': attribute type 1 has an invalid length. [ 801.974588][ T1422] 8021q: adding VLAN 0 to HW filter on device bond7 [ 802.011897][ T1427] netlink: 'syz.1.7383': attribute type 12 has an invalid length. [ 802.040685][ T1427] netlink: 190972 bytes leftover after parsing attributes in process `syz.1.7383'. [ 802.086317][ T1422] bond7: (slave veth7): Enslaving as an active interface with a down link [ 802.480830][ T1451] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7389'. [ 802.923409][ T1491] tipc: Enabled bearer , priority 0 [ 802.985469][ T1497] sctp: [Deprecated]: syz.4.7401 (pid 1497) Use of struct sctp_assoc_value in delayed_ack socket option. [ 802.985469][ T1497] Use struct sctp_sack_info instead [ 803.084114][T12391] nci: nci_rf_intf_activated_ntf_packet: unsupported rf_interface 0xe2 [ 803.103042][ T1487] syzkaller0: entered promiscuous mode [ 803.109102][ T1487] syzkaller0: entered allmulticast mode [ 803.115965][ T1487] tipc: Resetting bearer [ 803.181429][ T1480] tipc: Resetting bearer [ 805.053999][ T1480] tipc: Disabling bearer [ 805.074663][ T1526] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 805.103877][T14824] tipc: Node number set to 2695470179 [ 805.319866][ T1543] xt_HMARK: spi-set and port-set can't be combined [ 805.446162][ T1547] syz_tun: refused to change device tx_queue_len [ 805.606949][ T1566] veth1_to_bond: entered allmulticast mode [ 805.656302][ T1565] veth1_to_bond: left allmulticast mode [ 805.763475][ T1577] netlink: 100 bytes leftover after parsing attributes in process `syz.1.7425'. [ 805.928957][ T1582] bridge10: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 806.105452][ T1598] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7430'. [ 806.267946][ T1607] Cannot find add_set index 0 as target [ 806.385951][ T1614] Bluetooth: MGMT ver 1.23 [ 806.439584][ T1611] bond4: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 806.459677][ T1611] bond4: (slave lo): Enslaving as an active interface with an up link [ 806.470559][ T1611] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 806.627276][ T1625] sctp: [Deprecated]: syz.4.7442 (pid 1625) Use of struct sctp_assoc_value in delayed_ack socket option. [ 806.627276][ T1625] Use struct sctp_sack_info instead [ 806.646688][ T1621] syzkaller0: entered allmulticast mode [ 806.673753][ T1625] netlink: 44 bytes leftover after parsing attributes in process `syz.4.7442'. [ 806.903540][ T1641] xt_TPROXY: Can be used only with -p tcp or -p udp [ 806.935191][ T1640] lo speed is unknown, defaulting to 1000 [ 807.179757][ T1659] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7452'. [ 807.318190][ T1669] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7455'. [ 807.328073][ T1669] xt_ecn: cannot match TCP bits for non-tcp packets [ 807.362293][ T1669] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7455'. [ 807.377386][ T1672] : renamed from team_slave_1 (while UP) [ 807.407717][ T1671] netlink: 'syz.3.7456': attribute type 58 has an invalid length. [ 807.422866][ T1640] hsr0 speed is unknown, defaulting to 1000 [ 807.437590][ T1672] netlink: 'syz.3.7456': attribute type 58 has an invalid length. [ 807.451570][ T1672] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7456'. [ 807.473122][ T1671] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7456'. [ 807.475273][ T1677] netlink: 'syz.0.7458': attribute type 21 has an invalid length. [ 807.502366][ T1677] netlink: 152 bytes leftover after parsing attributes in process `syz.0.7458'. [ 807.648852][ T1686] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7459'. [ 807.666795][ T1686] netlink: 'syz.2.7459': attribute type 7 has an invalid length. [ 807.709764][ T1686] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7459'. [ 807.756713][ T1698] netlink: 'syz.0.7461': attribute type 10 has an invalid length. [ 807.842653][ T1693] bond4 (unregistering): Released all slaves [ 807.965306][ T1686] veth0_to_batadv: entered promiscuous mode [ 807.973370][ T1686] team_slave_1: entered promiscuous mode [ 807.979357][ T1686] team_slave_1: left promiscuous mode [ 807.999296][ T1686] veth0_to_batadv: left promiscuous mode [ 808.139534][ T1709] nbd: couldn't find a device at index 0 [ 808.144476][ T1713] veth0_to_bridge: vlans aren't supported yet for dev_uc|mc_add() [ 808.374246][ T1729] block nbd4: Unsupported socket: should be TCP or UNIX. [ 808.550657][ T1741] netlink: 144 bytes leftover after parsing attributes in process `syz.1.7476'. [ 808.574904][ T1742] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 808.598838][ T1747] team0: Device gtp1 is up. Set it down before adding it as a team port [ 808.609189][ T1748] sctp: [Deprecated]: syz.2.7477 (pid 1748) Use of int in maxseg socket option. [ 808.609189][ T1748] Use struct sctp_assoc_value instead [ 808.651271][ T1742] netlink: 'syz.3.7474': attribute type 1 has an invalid length. [ 808.666334][ T1749] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 808.726903][ T1749] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 808.750411][ T1742] bond4: entered promiscuous mode [ 808.760600][ T1742] 8021q: adding VLAN 0 to HW filter on device bond4 [ 808.770163][ T1749] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 808.779724][ T1749] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 808.788385][ T1749] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 808.800752][ T1743] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 808.840033][ T1300] lec:lec_start_xmit: lec0:No lecd attached [ 808.952671][ T1764] nbd: must specify a size in bytes for the device [ 809.422892][ T1799] netlink: 'syz.2.7493': attribute type 30 has an invalid length. [ 809.481846][ T1804] netlink: 'syz.2.7493': attribute type 30 has an invalid length. [ 809.516583][ T1808] netlink: 'syz.2.7493': attribute type 30 has an invalid length. [ 809.656389][ T1810] syzkaller0: entered promiscuous mode [ 809.668393][ T1810] syzkaller0: entered allmulticast mode [ 809.676362][ T1814] tipc: Started in network mode [ 809.687721][ T1814] tipc: Node identity d615262233c4, cluster identity 4711 [ 809.713520][ T1814] tipc: Enabled bearer , priority 0 [ 809.755750][ T1809] tipc: Resetting bearer [ 809.796941][ T1809] tipc: Disabling bearer [ 809.875940][ T1823] netlink: 'syz.1.7501': attribute type 2 has an invalid length. [ 809.916215][ T1824] bridge11: port 1(veth0_to_bond) entered blocking state [ 809.941132][ T1824] bridge11: port 1(veth0_to_bond) entered disabled state [ 809.948469][ T1824] veth0_to_bond: entered allmulticast mode [ 809.961775][ T1824] veth0_to_bond: entered promiscuous mode [ 809.984845][ T1834] x_tables: duplicate underflow at hook 1 [ 809.991934][ T1835] x_tables: duplicate underflow at hook 1 [ 810.153084][ T1840] xt_policy: output policy not valid in PREROUTING and INPUT [ 810.173134][ T1840] xt_policy: output policy not valid in PREROUTING and INPUT [ 810.279926][ T1855] ipip0: entered promiscuous mode [ 810.362353][ T1857] netlink: 'syz.1.7511': attribute type 11 has an invalid length. [ 810.422608][ T1859] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 810.441822][ T1862] lo: entered allmulticast mode [ 810.446822][ T1862] lo: left allmulticast mode [ 810.819142][T14824] IPVS: starting estimator thread 0... [ 810.917408][ T51] Bluetooth: hci3: command 0x0406 tx timeout [ 810.923697][ T1891] IPVS: using max 26 ests per chain, 62400 per kthread [ 811.428117][ T1925] vcan1: entered promiscuous mode [ 811.450821][ T1925] vcan1: entered allmulticast mode [ 811.581321][ T1932] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 811.663053][ T1936] openvswitch: netlink: Flow actions attr not present in new flow. [ 811.722017][ T1935] __nla_validate_parse: 46 callbacks suppressed [ 811.722039][ T1935] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7535'. [ 811.738067][ T1935] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7535'. [ 811.747682][ T1935] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7535'. [ 811.839455][ T1944] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7538'. [ 811.938987][ T1950] netlink: 36 bytes leftover after parsing attributes in process `syz.4.7541'. [ 811.977589][ T1950] netlink: 36 bytes leftover after parsing attributes in process `syz.4.7541'. [ 812.144715][ T1960] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7543'. [ 812.413034][ T1979] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7546'. [ 812.454315][ T1969] team0 (unregistering): Port device team_slave_0 removed [ 812.500701][ T1983] netlink: 44 bytes leftover after parsing attributes in process `syz.0.7546'. [ 812.531489][ T1969] team0 (unregistering): Port device team_slave_1 removed [ 812.569676][ T1969] team0 (unregistering): Port device bridge5 removed [ 812.772575][ T1995] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7554'. [ 812.793728][ T1999] xt_l2tp: missing protocol rule (udp|l2tpip) [ 812.802136][ T1995] validate_nla: 34 callbacks suppressed [ 812.802157][ T1995] netlink: 'syz.2.7554': attribute type 7 has an invalid length. [ 812.893355][ T2006] netlink: 'syz.4.7558': attribute type 1 has an invalid length. [ 812.945225][ T2009] xt_hashlimit: invalid rate [ 812.972831][ T2009] x_tables: duplicate underflow at hook 2 [ 813.212345][ T2032] netlink: 'syz.0.7563': attribute type 15 has an invalid length. [ 813.234045][ T2032] netlink: 'syz.0.7563': attribute type 15 has an invalid length. [ 813.241197][ T2033] syzkaller0: entered promiscuous mode [ 813.250255][ T2033] syzkaller0: entered allmulticast mode [ 813.274483][T31614] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 2816 - 0 [ 813.287735][T31614] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 2816 - 0 [ 813.314675][T31614] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 2816 - 0 [ 813.324942][ T2036] syzkaller0: entered promiscuous mode [ 813.330719][ T2036] syzkaller0: entered allmulticast mode [ 813.339553][T31614] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 2816 - 0 [ 813.571481][ T2048] siw: device registration error -23 [ 813.590177][ T2045] syzkaller1: entered promiscuous mode [ 813.597041][ T2045] syzkaller1: entered allmulticast mode [ 813.956568][ T2023] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 814.030957][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5190 ms [ 814.039230][ C0] lec:lec_tx_timeout: lec0 [ 814.131881][ T2057] Cannot find set identified by id 0 to match [ 814.140595][ T2056] xt_connbytes: Forcing CT accounting to be enabled [ 814.219245][ T2059] openvswitch: netlink: Key 2 has unexpected len 0 expected 4 [ 814.671552][ T2094] veth0: entered promiscuous mode [ 814.680703][ T2094] veth0 (unregistering): left promiscuous mode [ 814.726851][ T2097] xfrm2: entered promiscuous mode [ 814.761475][ T2097] xfrm2: entered allmulticast mode [ 814.849180][ T2107] netlink: 'syz.2.7591': attribute type 10 has an invalid length. [ 814.910617][ T2107] mac80211_hwsim hwsim52 wlan1: entered promiscuous mode [ 814.920621][ T2107] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 814.930551][ T2102] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 814.939675][ T2102] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 814.948629][ T2102] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 815.008734][ T2093] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 815.037151][ T2093] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 815.056180][ T2113] netlink: 'syz.1.7593': attribute type 11 has an invalid length. [ 815.204303][ T2118] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 815.216392][ T2118] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 815.312822][T19837] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 815.437201][ T2118] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 815.448366][ T2118] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 815.495094][ T2144] netlink: 'syz.3.7601': attribute type 14 has an invalid length. [ 815.505887][ T2146] netlink: 'syz.3.7601': attribute type 14 has an invalid length. [ 815.534412][ T2149] erspan1: entered allmulticast mode [ 815.575126][ T2118] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 815.586988][ T2118] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 815.685904][ T2118] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 815.696643][ T2118] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 815.846053][T31614] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 2816 - 0 [ 815.856129][T31614] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 815.950107][T31614] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 2816 - 0 [ 815.960418][T31614] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 815.994553][T12391] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 2816 - 0 [ 816.021559][T12391] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 816.066588][ T2162] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 816.088446][T31614] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 2816 - 0 [ 816.101543][T31614] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 816.264265][ T2178] netlink: 'syz.1.7614': attribute type 1 has an invalid length. [ 816.355090][T19837] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 816.896612][ T2234] IPVS: set_ctl: invalid protocol: 4 172.20.20.170:20004 [ 816.905362][ T2234] IPVS: set_ctl: invalid protocol: 1 127.0.0.1:20000 [ 816.997246][T22663] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 817.225708][ T2254] __nla_validate_parse: 16 callbacks suppressed [ 817.225730][ T2254] netlink: 88 bytes leftover after parsing attributes in process `syz.3.7636'. [ 817.269654][ T2254] netlink: 96 bytes leftover after parsing attributes in process `syz.3.7636'. [ 817.299923][ T2255] netlink: 68 bytes leftover after parsing attributes in process `syz.1.7638'. [ 817.321212][ T2255] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7638'. [ 817.392418][ T799] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 817.451415][ T2261] netlink: 'syz.3.7639': attribute type 6 has an invalid length. [ 817.483121][ T2261] set match dimension is over the limit! [ 817.831846][ T2276] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7643'. [ 817.851711][ T2276] netlink: 'syz.3.7643': attribute type 5 has an invalid length. [ 817.887126][ T2276] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7643'. [ 817.918976][ T2276] geneve3: entered promiscuous mode [ 817.924889][ T2276] geneve3: entered allmulticast mode [ 817.944379][T31620] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 817.962335][T31620] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 817.988889][T31620] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 818.001279][T31620] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 818.236028][ T2292] netlink: 'syz.3.7646': attribute type 3 has an invalid length. [ 818.281155][ T2292] netlink: 'syz.3.7646': attribute type 3 has an invalid length. [ 818.433259][T14824] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 818.441904][T14824] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 818.579050][ T2314] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7657'. [ 818.599949][ T2314] netlink: 'syz.0.7657': attribute type 30 has an invalid length. [ 818.634629][ T2319] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7657'. [ 818.639928][T31614] netdevsim netdevsim0 eth0: set [0, 1] type 1 family 0 port 8472 - 0 [ 818.652485][T31614] netdevsim netdevsim0 eth1: set [0, 1] type 1 family 0 port 8472 - 0 [ 818.665178][T31614] netdevsim netdevsim0 eth2: set [0, 1] type 1 family 0 port 8472 - 0 [ 818.674717][ T2319] netlink: 'syz.0.7657': attribute type 30 has an invalid length. [ 818.678000][T31614] netdevsim netdevsim0 eth3: set [0, 1] type 1 family 0 port 8472 - 0 [ 818.684009][ T2318] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7659'. [ 818.703088][ T2314] netlink: 'syz.0.7657': attribute type 1 has an invalid length. [ 818.711074][ T2314] netlink: 96 bytes leftover after parsing attributes in process `syz.0.7657'. [ 818.720247][ T2314] netlink: 'syz.0.7657': attribute type 1 has an invalid length. [ 818.742946][ T2314] netlink: 'syz.0.7657': attribute type 8 has an invalid length. [ 818.917246][ T2329] xt_hashlimit: size too large, truncated to 1048576 [ 818.990001][ T2328] bond8: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5) [ 819.052649][ T2328] bond8 (unregistering): Released all slaves [ 819.472301][T19837] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 819.500574][ T2359] netlink: 'syz.1.7668': attribute type 3 has an invalid length. [ 820.041604][T22663] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 820.511562][T19837] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 820.705890][ T2417] bond4: entered promiscuous mode [ 820.717574][ T2417] bond4: entered allmulticast mode [ 820.724480][ T2417] 8021q: adding VLAN 0 to HW filter on device bond4 [ 821.151492][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 821.160585][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 821.169439][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 821.178054][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 821.187465][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 821.196205][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 821.551491][T19837] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 821.562450][T11681] lec:lec_start_xmit: lec0:No lecd attached [ 821.624959][ T2501] netlink: 'syz.0.7700': attribute type 7 has an invalid length. [ 822.309777][ T2560] x_tables: unsorted underflow at hook 3 [ 822.524120][ T2569] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 823.047078][ T2571] bond0: (slave batadv0): Releasing backup interface [ 823.233080][ T2571] bond0: (slave bond_slave_0): Releasing backup interface [ 823.250454][ T2571] bond0: (slave bond_slave_1): Releasing backup interface [ 823.272541][ T2571] team0: Port device team_slave_0 removed [ 823.297750][ T2571] team0: Port device 26 removed [ 823.309443][ T2571] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 823.323343][ T2571] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 823.340085][ T2571] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 823.352291][ T2571] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 823.368269][ T2571] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 823.486544][ T2578] bond8: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 823.527970][ T2578] bond8: (slave lo): Enslaving as an active interface with an up link [ 823.537556][ T2625] IPVS: set_ctl: invalid protocol: 117 172.20.20.170:20000 [ 823.550465][ T2578] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 823.592208][ T2598] vlan1: entered promiscuous mode [ 823.603040][ T2598] vlan1: entered allmulticast mode [ 823.609745][ T2598] hsr_slave_1: entered allmulticast mode [ 823.777448][ T2634] __nla_validate_parse: 12 callbacks suppressed [ 823.777469][ T2634] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7726'. [ 826.743612][ T2632] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 826.752809][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 827.080981][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5520 ms [ 827.089165][ C0] lec:lec_tx_timeout: lec0 [ 827.368210][ T2721] batadv_slave_1: entered promiscuous mode [ 827.399444][ T2715] batadv_slave_1: left promiscuous mode [ 827.495167][ T2738] netlink: 148 bytes leftover after parsing attributes in process `syz.2.7746'. [ 827.534946][ T2730] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 827.611273][ T2739] netlink: 36 bytes leftover after parsing attributes in process `syz.3.7750'. [ 827.639075][ T2739] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7750'. [ 827.653923][ T2739] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7750'. [ 827.681519][ T2739] validate_nla: 2 callbacks suppressed [ 827.681543][ T2739] netlink: 'syz.3.7750': attribute type 4 has an invalid length. [ 827.697007][ T2744] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7752'. [ 827.714179][ T2742] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7751'. [ 827.716163][ T2739] netlink: 152 bytes leftover after parsing attributes in process `syz.3.7750'. [ 827.805789][ T2739] .`: renamed from bond0 [ 827.941955][ T2759] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7755'. [ 828.040487][ T2771] netlink: 212344 bytes leftover after parsing attributes in process `syz.3.7756'. [ 828.409449][ T2785] pimreg3: entered allmulticast mode [ 828.652794][ T2807] A link change request failed with some changes committed already. Interface vlan2 may have been left with an inconsistent configuration, please check. [ 828.711685][ T2809] A link change request failed with some changes committed already. Interface vlan2 may have been left with an inconsistent configuration, please check. [ 828.979811][ T2829] __nla_validate_parse: 2 callbacks suppressed [ 828.979832][ T2829] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7767'. [ 829.008425][ T2829] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 829.019669][ T2829] team0: Port device batadv1 added [ 829.065779][ T2829] syzkaller0: entered promiscuous mode [ 829.086228][ T2829] syzkaller0: entered allmulticast mode [ 829.106986][ T2840] netlink: 'syz.1.7769': attribute type 5 has an invalid length. [ 829.148100][ T2846] SET target dimension over the limit! [ 829.156787][ T2829] tipc: Enabled bearer , priority 0 [ 829.308772][ T2859] netlink: 'syz.4.7770': attribute type 4 has an invalid length. [ 829.428160][ T2869] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7774'. [ 829.762003][ T2826] tipc: Resetting bearer [ 829.818923][ T2826] tipc: Disabling bearer [ 829.967158][ T2903] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7781'. [ 829.995622][ T2902] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7781'. [ 830.009105][ T2912] netlink: 'syz.4.7783': attribute type 39 has an invalid length. [ 830.131241][ T2918] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7785'. [ 830.380087][ T2935] netlink: 9 bytes leftover after parsing attributes in process `syz.1.7789'. [ 830.389803][ T2935] 0: renamed from hsr_slave_1 [ 830.399903][ T2934] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7791'. [ 830.400103][ T2935] 0: entered allmulticast mode [ 830.419556][ T2935] A link change request failed with some changes committed already. Interface c0 may have been left with an inconsistent configuration, please check. [ 830.504975][ T2934] 8021q: adding VLAN 0 to HW filter on device bond5 [ 830.613483][ T2948] netlink: 'syz.1.7792': attribute type 83 has an invalid length. [ 830.883046][ T2964] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7797'. [ 830.988017][ T2974] netlink: 'syz.3.7801': attribute type 20 has an invalid length. [ 831.002743][ T2974] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7801'. [ 831.026826][T31614] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 831.040367][T31614] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 831.050052][ T2974] netlink: 'syz.3.7801': attribute type 20 has an invalid length. [ 831.059068][T31614] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 831.068811][T31614] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 831.078209][ T2974] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7801'. [ 831.222433][ T2987] netlink: 'syz.3.7805': attribute type 14 has an invalid length. [ 831.302774][ T2993] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 831.575810][ T2999] 8021q: adding VLAN 0 to HW filter on device bond9 [ 831.640618][ T2999] vxcan3: entered promiscuous mode [ 831.652471][ T2999] vxcan3: entered allmulticast mode [ 831.685560][ T3009] netlink: 'syz.1.7810': attribute type 58 has an invalid length. [ 832.479540][ T3038] netlink: 'syz.4.7821': attribute type 4 has an invalid length. [ 832.558499][ T3043] syzkaller0: entered promiscuous mode [ 832.576263][ T3043] syzkaller0: entered allmulticast mode [ 833.101077][ T3069] validate_nla: 1 callbacks suppressed [ 833.101098][ T3069] netlink: 'syz.2.7830': attribute type 21 has an invalid length. [ 833.163468][ T3069] netlink: 'syz.2.7830': attribute type 5 has an invalid length. [ 833.238740][ T3072] netlink: 'syz.2.7830': attribute type 21 has an invalid length. [ 833.251633][ T3072] netlink: 'syz.2.7830': attribute type 5 has an invalid length. [ 833.849473][ T3107] lo speed is unknown, defaulting to 1000 [ 834.209632][ T3117] __nla_validate_parse: 18 callbacks suppressed [ 834.209682][ T3117] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7844'. [ 834.256225][ T3117] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7844'. [ 834.272846][ T3107] hsr0 speed is unknown, defaulting to 1000 [ 834.303687][ T3118] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 834.661836][ T3132] netlink: 204436 bytes leftover after parsing attributes in process `syz.4.7848'. [ 835.156928][ T3159] openvswitch: netlink: IP tunnel dst address not specified [ 835.231221][ T3167] tipc: Failed to remove unknown binding: 66,0,0/0:612401715/612401717 [ 835.257801][ T3167] tipc: Failed to remove unknown binding: 66,0,0/0:612401715/612401716 [ 835.276812][ T3167] tipc: Failed to remove unknown binding: 66,0,0/0:612401715/612401717 [ 835.299217][ T3167] tipc: Failed to remove unknown binding: 66,0,0/0:612401715/612401716 [ 835.372286][ T3173] Cannot find del_set index 5 as target [ 835.658905][ T3193] netlink: 76 bytes leftover after parsing attributes in process `syz.2.7863'. [ 835.678676][ T3195] bridge3: entered allmulticast mode [ 835.690785][ T3195] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 836.003374][ T3194] bridge3: left allmulticast mode [ 836.240108][ T3224] netlink: 'syz.3.7871': attribute type 4 has an invalid length. [ 836.258709][ T3224] netlink: 'syz.3.7871': attribute type 1 has an invalid length. [ 836.268312][ T3228] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7872'. [ 836.304714][ T3224] netlink: 228 bytes leftover after parsing attributes in process `syz.3.7871'. [ 836.373878][ T3228] macsec2: entered promiscuous mode [ 836.389065][ T3228] bridge0: entered promiscuous mode [ 836.411676][ T3228] macsec2: entered allmulticast mode [ 836.417338][ T3228] bridge0: entered allmulticast mode [ 836.424728][ T3228] bridge0: port 1(macsec2) entered blocking state [ 836.448663][ T3228] bridge0: port 1(macsec2) entered disabled state [ 836.459552][ T3239] SET target dimension over the limit! [ 836.493229][ T3228] bridge0: left allmulticast mode [ 836.498717][ T3228] bridge0: left promiscuous mode [ 836.546453][ T3236] netlink: 'syz.1.7874': attribute type 15 has an invalid length. [ 836.599488][ T3236] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7874'. [ 836.745239][ T3250] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7878'. [ 836.771444][ T3250] netlink: 'syz.4.7878': attribute type 1 has an invalid length. [ 836.779242][ T3250] netlink: 'syz.4.7878': attribute type 2 has an invalid length. [ 836.935980][ T3259] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7881'. [ 837.039162][ T3224] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 837.334260][ T3265] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7882'. [ 837.381491][ T3265] tap0: tun_chr_ioctl cmd 1074025678 [ 837.402965][ T3265] tap0: group set to 0 [ 837.700594][ T3307] xt_l2tp: v2 doesn't support IP mode [ 837.716915][ T3307] xt_hashlimit: size too large, truncated to 1048576 [ 838.048115][ T3334] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 838.265567][ T3346] xfrm1: entered promiscuous mode [ 838.270684][ T3346] xfrm1: entered allmulticast mode [ 838.604755][ T3368] bridge0: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 838.617159][ T3368] bridge0: entered allmulticast mode [ 838.765825][ T3375] syzkaller0: entered promiscuous mode [ 838.772006][ T3375] syzkaller0: entered allmulticast mode [ 839.354671][ T3404] __nla_validate_parse: 4 callbacks suppressed [ 839.354693][ T3404] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7915'. [ 840.750060][ T3377] netlink: 64 bytes leftover after parsing attributes in process `syz.1.7912'. [ 840.803944][ T3403] C: renamed from lo (while UP) [ 840.823442][ T3403] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 840.941534][ T3410] nbd: must specify a device to reconfigure [ 841.045586][ T3419] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7919'. [ 841.074352][ T3422] 8021q: VLANs not supported on gre0 [ 841.285581][ T3437] xt_TCPMSS: Only works on TCP SYN packets [ 841.523362][ T3449] syzkaller0: entered promiscuous mode [ 841.528957][ T3449] syzkaller0: entered allmulticast mode [ 841.544026][ T3452] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7932'. [ 841.554462][ T3453] netlink: 104 bytes leftover after parsing attributes in process `syz.4.7926'. [ 841.634929][ T1289] Bluetooth: hci1: command 0x0406 tx timeout [ 841.831530][ T3458] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7932'. [ 841.841050][ T3462] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 841.859404][ T3470] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7935'. [ 842.463474][ T3512] openvswitch: netlink: Duplicate key (type 2). [ 842.547874][ T3515] syzkaller0: entered promiscuous mode [ 842.553798][ T3515] syzkaller0: entered allmulticast mode [ 842.639472][ T3519] netlink: 348 bytes leftover after parsing attributes in process `syz.4.7948'. [ 842.997201][ T3544] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7956'. [ 843.304614][T31622] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 843.339599][T31622] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 843.371085][ T83] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 843.444446][ T3561] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7960'. [ 843.460517][ T3561] netlink: 'syz.3.7960': attribute type 30 has an invalid length. [ 843.505076][ T3565] netlink: 'syz.3.7960': attribute type 30 has an invalid length. [ 843.878494][ T3587] syzkaller0: entered promiscuous mode [ 843.889961][ T3587] syzkaller0: entered allmulticast mode [ 844.008221][ T3593] siw: device registration error -23 [ 844.242472][ T3611] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 844.267389][ T3617] netlink: 'syz.2.7977': attribute type 1 has an invalid length. [ 844.284517][ T3613] netlink: 'syz.3.7979': attribute type 1 has an invalid length. [ 844.297643][ T3611] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 844.322882][ T3611] netlink: 'syz.0.7975': attribute type 1 has an invalid length. [ 844.338327][ T3613] bond0: entered promiscuous mode [ 844.344202][ T3613] 8021q: adding VLAN 0 to HW filter on device bond0 [ 844.377899][ T3613] __nla_validate_parse: 2 callbacks suppressed [ 844.377919][ T3613] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7979'. [ 844.583122][ T3629] geneve3: entered promiscuous mode [ 844.598450][ T3629] geneve3: entered allmulticast mode [ 844.877342][ T3646] openvswitch: netlink: IPv4 tun info is not correct [ 844.926401][ T3648] netlink: 'syz.0.7984': attribute type 5 has an invalid length. [ 845.099012][ T3658] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7987'. [ 845.105786][ T3655] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7987'. [ 845.332884][ T3675] netlink: 'syz.3.7994': attribute type 9 has an invalid length. [ 845.370113][ T3676] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7995'. [ 845.585922][ T3689] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8001'. [ 845.807678][ T3702] netlink: 36 bytes leftover after parsing attributes in process `syz.1.8006'. [ 845.818180][ T3700] erspan0: entered allmulticast mode [ 845.885742][ T3704] netlink: 'syz.2.8008': attribute type 4 has an invalid length. [ 846.043557][ T3715] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8010'. [ 846.063333][ T3713] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.8009'. [ 846.087395][ T3713] netlink: Conntrack attr type has unexpected length (type=2, length=0, expected=2) [ 846.103412][ T3717] netlink: 52 bytes leftover after parsing attributes in process `syz.0.8011'. [ 846.349895][ T3721] xt_NFQUEUE: number of queues (62232) out of range (got 67565) [ 846.427927][ T3730] x_tables: duplicate entry at hook 1 [ 846.441351][ T3721] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 846.500162][ T3730] syzkaller1: entered promiscuous mode [ 846.506061][ T3730] syzkaller1: entered allmulticast mode [ 846.671280][ T51] Bluetooth: hci4: command tx timeout [ 846.710260][ T3749] x_tables: (null)_tables: NFQUEUE.1 target: invalid size 8 (kernel) != (user) 16 [ 846.742181][ T3743] tipc: Enabled bearer , priority 2 [ 846.772560][ T3743] syzkaller1: entered promiscuous mode [ 846.778118][ T3743] syzkaller1: entered allmulticast mode [ 846.852413][ T3754] sctp: [Deprecated]: syz.0.8022 (pid 3754) Use of struct sctp_assoc_value in delayed_ack socket option. [ 846.852413][ T3754] Use struct sctp_sack_info instead [ 846.893579][ T3751] xt_ct_set_timeout: 23 callbacks suppressed [ 846.893600][ T3751] xt_CT: You must specify a L4 protocol and not use inversions on it [ 846.987522][ T3770] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.8028'. [ 847.372238][ T3796] netlink: 'syz.0.8036': attribute type 1 has an invalid length. [ 847.391531][ T3796] netlink: 'syz.0.8036': attribute type 4 has an invalid length. [ 847.626900][ T3786] bridge0: port 2(bridge_slave_1) entered disabled state [ 847.634676][ T3786] bridge0: port 1(bridge_slave_0) entered disabled state [ 848.406208][T31622] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 848.415206][T31622] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 848.500330][T31622] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 848.895143][ T3840] xt_hashlimit: size too large, truncated to 1048576 [ 849.295516][ T3873] xt_hashlimit: max too large, truncated to 1048576 [ 849.655661][ T3893] __nla_validate_parse: 11 callbacks suppressed [ 849.655683][ T3893] netlink: 44 bytes leftover after parsing attributes in process `syz.3.8065'. [ 849.905707][ T3919] sctp: [Deprecated]: syz.0.8072 (pid 3919) Use of int in max_burst socket option. [ 849.905707][ T3919] Use struct sctp_assoc_value instead [ 849.927601][ T3923] netlink: zone id is out of range [ 849.952717][ T3919] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8072'. [ 849.966843][ T3923] netlink: zone id is out of range [ 849.987294][ T3923] netlink: zone id is out of range [ 849.998142][ T3919] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 850.007603][ T3923] netlink: zone id is out of range [ 850.031664][ T3923] netlink: zone id is out of range [ 850.045926][ T3923] netlink: zone id is out of range [ 850.084203][ T3923] netlink: zone id is out of range [ 850.089422][ T3923] netlink: zone id is out of range [ 850.157924][ T3934] netlink: 80 bytes leftover after parsing attributes in process `syz.1.8078'. [ 850.208102][ T3933] tipc: Started in network mode [ 850.225599][ T3933] tipc: Node identity 1278e326ed64, cluster identity 4711 [ 850.245298][ T3933] tipc: Enabled bearer , priority 0 [ 850.322176][ T3952] netlink: 48 bytes leftover after parsing attributes in process `syz.2.8082'. [ 850.412883][ T3933] tipc: Disabling bearer [ 850.481129][ T3962] netlink: 108 bytes leftover after parsing attributes in process `syz.3.8085'. [ 850.518070][ T3962] netlink: 'syz.3.8085': attribute type 29 has an invalid length. [ 850.543758][ T3962] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8085'. [ 850.582210][ T3946] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8082'. [ 850.643739][ T3967] netlink: 'syz.1.8086': attribute type 2 has an invalid length. [ 850.678388][ T3967] xt_TPROXY: Can be used only with -p tcp or -p udp [ 860.031952][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 870.278415][ T1300] lec:lec_start_xmit: lec0:No lecd attached [ 870.684126][ T3982] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8091'. [ 870.715133][ T3981] netlink: 'syz.4.8092': attribute type 1 has an invalid length. [ 870.741307][ T3982] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8091'. [ 870.750599][ T3982] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8091'. [ 870.774870][ T3982] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8091'. [ 870.823566][ T3982] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8091'. [ 870.846624][ T3981] 8021q: adding VLAN 0 to HW filter on device bond5 [ 870.855034][ T3982] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8091'. [ 870.898715][ T3982] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8091'. [ 870.930322][ T3982] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8091'. [ 870.988650][ T3982] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8091'. [ 871.038074][ T3982] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8091'. [ 871.148870][ T4007] netlink: 'syz.0.8096': attribute type 3 has an invalid length. [ 871.257770][ T4013] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 871.282766][ T4013] team0: Port device batadv1 added [ 871.294062][ T4018] x9: renamed from bridge_slave_0 [ 871.535275][ T4034] debugfs: 'Ku crK:̥B| lS-!' already exists in 'ieee80211' [ 871.579956][ T4039] x_tables: duplicate underflow at hook 3 [ 871.900334][ T4054] net_ratelimit: 4 callbacks suppressed [ 871.900358][ T4054] openvswitch: netlink: Unexpected mask (mask=200440, allowed=10048) [ 871.935080][ T4052] netlink: 'syz.2.8112': attribute type 2 has an invalid length. [ 871.944176][ T4052] netlink: 'syz.2.8112': attribute type 2 has an invalid length. [ 872.165661][ T4069] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 872.763767][ T4109] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 873.310103][ T4145] veth0_to_bond: entered allmulticast mode [ 873.412384][ T4154] syzkaller0: entered promiscuous mode [ 873.417917][ T4154] syzkaller0: entered allmulticast mode [ 873.477388][ T4161] netlink: 'syz.2.8149': attribute type 7 has an invalid length. [ 873.524924][ T4160] netlink: 'syz.1.8148': attribute type 29 has an invalid length. [ 873.552332][ T4162] netlink: 'syz.1.8148': attribute type 29 has an invalid length. [ 873.821213][ T29] audit: type=1107 audit(1772816515.630:13): pid=4177 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 873.843425][ T4187] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 875.059498][T31617] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 875.109664][T31617] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 875.129997][T31617] netdevsim netdevsim3 netdevsim0: unset [1, 1] type 2 family 0 port 256 - 0 [ 875.161080][T31617] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 875.170038][T31617] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 875.235075][T31617] netdevsim netdevsim3 netdevsim1: unset [1, 1] type 2 family 0 port 256 - 0 [ 875.251391][T31617] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 875.279506][T31617] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 875.289289][T31617] netdevsim netdevsim3 netdevsim2: unset [1, 1] type 2 family 0 port 256 - 0 [ 875.308570][ T4213] dvmrp0: entered allmulticast mode [ 875.323293][ T4219] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 875.336032][ T4222] gre3: entered promiscuous mode [ 875.342688][ T4222] gre3: entered allmulticast mode [ 875.370709][T31617] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 875.380072][T31617] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 875.420161][T31617] netdevsim netdevsim3 netdevsim3: unset [1, 1] type 2 family 0 port 256 - 0 [ 875.506717][ T4237] netlink: 'syz.0.8170': attribute type 4 has an invalid length. [ 875.563000][ T4241] netlink: 'syz.1.8171': attribute type 11 has an invalid length. [ 875.701947][ T4249] netlink: 'syz.1.8175': attribute type 23 has an invalid length. [ 875.752901][ T4249] __nla_validate_parse: 46 callbacks suppressed [ 875.752922][ T4249] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8175'. [ 875.922563][ T4258] syz_tun: entered allmulticast mode [ 875.947204][ T4258] dvmrp8: entered allmulticast mode [ 875.961053][ T4258] dvmrp6: left allmulticast mode [ 875.971715][ T4260] netlink: 'syz.0.8180': attribute type 1 has an invalid length. [ 875.979855][ T4258] dvmrp8: left allmulticast mode [ 876.030902][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5750 ms [ 876.039052][ C0] lec:lec_tx_timeout: lec0 [ 876.116088][ T4260] 8021q: adding VLAN 0 to HW filter on device bond6 [ 876.178176][ T4256] syz_tun: left allmulticast mode [ 876.325012][ T4290] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.8186'. [ 876.345380][ T4292] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.8185'. [ 876.365282][ T4290] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8186'. [ 876.384680][ T4290] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8186'. [ 876.688421][ T4305] bond6: (slave ip6_vti0): Device is not bonding slave [ 876.695828][ T4305] bond6: option active_slave: invalid value (ip6_vti0) [ 876.704866][ T4305] bond6 (unregistering): Released all slaves [ 876.793478][ T4319] netlink: 36 bytes leftover after parsing attributes in process `syz.3.8193'. [ 876.884830][ T4323] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 876.893473][ T4314] lo speed is unknown, defaulting to 1000 [ 876.900783][ T4319] policy can only be matched on NF_INET_PRE_ROUTING [ 876.900815][ T4319] unable to load match [ 876.931568][ T4320] policy can only be matched on NF_INET_PRE_ROUTING [ 876.931591][ T4320] unable to load match [ 877.047234][ T4333] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8198'. [ 877.573425][ T4314] hsr0 speed is unknown, defaulting to 1000 [ 877.579739][ T4371] FAULT_INJECTION: forcing a failure. [ 877.579739][ T4371] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 877.604968][ T4371] CPU: 1 UID: 0 PID: 4371 Comm: syz.2.8205 Not tainted syzkaller #0 PREEMPT(full) [ 877.604998][ T4371] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 877.605013][ T4371] Call Trace: [ 877.605022][ T4371] [ 877.605031][ T4371] dump_stack_lvl+0xe8/0x150 [ 877.605068][ T4371] should_fail_ex+0x412/0x560 [ 877.605102][ T4371] _copy_from_user+0x2d/0xb0 [ 877.605138][ T4371] ___sys_sendmsg+0x1c6/0x360 [ 877.605168][ T4371] ? __pfx____sys_sendmsg+0x10/0x10 [ 877.605253][ T4371] ? __fget_files+0x2a/0x420 [ 877.605286][ T4371] ? __fget_files+0x3a0/0x420 [ 877.605339][ T4371] __x64_sys_sendmsg+0x1bd/0x2a0 [ 877.605365][ T4371] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 877.605398][ T4371] ? __pfx_ksys_write+0x10/0x10 [ 877.605436][ T4371] do_syscall_64+0x14d/0xf80 [ 877.605469][ T4371] ? trace_irq_disable+0x3b/0x150 [ 877.605502][ T4371] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 877.605525][ T4371] ? clear_bhb_loop+0x40/0x90 [ 877.605552][ T4371] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 877.605575][ T4371] RIP: 0033:0x7fda0db9c799 [ 877.605596][ T4371] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 877.605616][ T4371] RSP: 002b:00007fda0e9ba028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 877.605645][ T4371] RAX: ffffffffffffffda RBX: 00007fda0de15fa0 RCX: 00007fda0db9c799 [ 877.605663][ T4371] RDX: 0000000000000080 RSI: 0000200000000140 RDI: 0000000000000004 [ 877.605677][ T4371] RBP: 00007fda0e9ba090 R08: 0000000000000000 R09: 0000000000000000 [ 877.605692][ T4371] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 877.605705][ T4371] R13: 00007fda0de16038 R14: 00007fda0de15fa0 R15: 00007ffc02320858 [ 877.605742][ T4371] [ 877.846524][ T4373] netlink: 72 bytes leftover after parsing attributes in process `syz.3.8206'. [ 877.976983][ T4376] netlink: 48 bytes leftover after parsing attributes in process `syz.3.8208'. [ 878.008217][ T4380] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8209'. [ 878.071899][ T4383] tipc: New replicast peer: 255.255.255.255 [ 878.078593][ T4383] tipc: Enabled bearer , priority 10 [ 878.086738][ T4381] bridge0: left allmulticast mode [ 878.105424][ T4380] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 878.121675][ T4380] xt_socket: unknown flags 0x50 [ 878.152371][ T4376] netlink: 'syz.3.8208': attribute type 1 has an invalid length. [ 878.405077][ T4397] tipc: Enabled bearer , priority 10 [ 878.539677][ T4397] netlink: 'syz.1.8213': attribute type 5 has an invalid length. [ 878.680305][ T4409] macsec0: entered promiscuous mode [ 878.693520][ T4409] macsec0: entered allmulticast mode [ 878.709498][ T4409] veth1_macvtap: entered allmulticast mode [ 878.724822][ T4409] macsec0: left promiscuous mode [ 878.737368][ T4409] macsec0: left allmulticast mode [ 878.753375][ T4409] veth1_macvtap: left allmulticast mode [ 879.198859][ T2593] tipc: Node number set to 3855689250 [ 879.243795][ T4429] bridge6: the hash_elasticity option has been deprecated and is always 16 [ 879.314068][ T4432] netlink: 'syz.3.8226': attribute type 5 has an invalid length. [ 879.401574][ T2615] tipc: Node number set to 4280083238 [ 879.433960][ T4439] lo speed is unknown, defaulting to 1000 [ 879.474645][ T4435] openvswitch: netlink: Flow key attr not present in new flow. [ 879.490136][ T4442] xt_ecn: cannot match TCP bits for non-tcp packets [ 879.547948][ T4442] tipc: New replicast peer: 255.255.255.255 [ 879.571813][ T4442] tipc: Enabled bearer , priority 10 [ 879.906828][ T4439] hsr0 speed is unknown, defaulting to 1000 [ 880.404282][ T4483] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 880.701878][ T4497] netlink: 'syz.4.8243': attribute type 64 has an invalid length. [ 880.766934][ T4499] __nla_validate_parse: 11 callbacks suppressed [ 880.766954][ T4499] netlink: 104 bytes leftover after parsing attributes in process `syz.3.8244'. [ 880.944060][ T4492] lo speed is unknown, defaulting to 1000 [ 881.016634][ T4505] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8245'. [ 881.029365][ T4506] xt_CT: You must specify a L4 protocol and not use inversions on it [ 881.058197][ T4505] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8245'. [ 881.120449][ T4509] netlink: 'syz.3.8247': attribute type 1 has an invalid length. [ 881.281772][ T4503] netlink: 72 bytes leftover after parsing attributes in process `syz.4.8245'. [ 881.301662][ T4503] netlink: 72 bytes leftover after parsing attributes in process `syz.4.8245'. [ 881.386246][ T4509] netlink: 'syz.3.8247': attribute type 1 has an invalid length. [ 881.472072][ T4508] bond5: (slave bridge5): making interface the new active one [ 881.480442][ T4508] bond5: (slave bridge5): Enslaving as an active interface with an up link [ 881.547052][ T4518] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 881.571798][ T4509] netlink: 'syz.3.8247': attribute type 1 has an invalid length. [ 881.682520][ T4508] bond5: (slave bridge6): Enslaving as an active interface with a down link [ 881.709778][ T4508] bond5: (slave bridge7): Enslaving as an active interface with a down link [ 881.733812][ T4508] bond5: (slave bridge8): Enslaving as an active interface with a down link [ 881.756281][ T4508] bond5: (slave bridge9): Enslaving as an active interface with a down link [ 881.779617][ T4508] bond5: (slave bridge10): Enslaving as an active interface with a down link [ 881.803443][ T4508] bond5: (slave bridge11): Enslaving as an active interface with a down link [ 881.826055][ T4508] bond5: (slave bridge12): Enslaving as an active interface with a down link [ 881.842161][ T4492] hsr0 speed is unknown, defaulting to 1000 [ 881.850540][ T4509] netlink: 'syz.3.8247': attribute type 1 has an invalid length. [ 881.896018][ T4508] bond5: (slave bridge13): Enslaving as an active interface with a down link [ 881.908718][ T4509] netlink: 'syz.3.8247': attribute type 1 has an invalid length. [ 881.955292][ T4508] bond5: (slave bridge14): Enslaving as an active interface with a down link [ 882.256093][ T4537] netlink: 164 bytes leftover after parsing attributes in process `syz.1.8256'. [ 882.349698][ T4542] netdevsim netdevsim3 : renamed from netdevsim0 [ 882.889491][ T4561] x_tables: duplicate underflow at hook 1 [ 882.924497][ T4566] sock: sock_set_timeout: `syz.3.8266' (pid 4566) tries to set negative timeout [ 883.077296][ T4574] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8270'. [ 883.324593][ T4586] mac80211_hwsim hwsim60 : renamed from wlan1 [ 883.429665][ T4590] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8274'. [ 883.520411][ T4594] netlink: 'syz.0.8277': attribute type 17 has an invalid length. [ 883.561364][ T4597] netlink: 'syz.1.8276': attribute type 10 has an invalid length. [ 883.575614][ T4597] netlink: 396 bytes leftover after parsing attributes in process `syz.1.8276'. [ 883.588091][ T4595] netlink: 165 bytes leftover after parsing attributes in process `syz.4.8275'. [ 883.763673][ T4606] netlink: 'syz.4.8281': attribute type 8 has an invalid length. [ 883.808818][ T4606] syzkaller0: entered promiscuous mode [ 883.819507][ T4606] syzkaller0: entered allmulticast mode [ 884.267840][ T4640] syzkaller0: entered promiscuous mode [ 884.273965][ T4640] syzkaller0: entered allmulticast mode [ 884.538122][ T4649] tipc: Enabling of bearer rejected, failed to enable media [ 884.885317][ T4681] sctp: [Deprecated]: syz.4.8305 (pid 4681) Use of struct sctp_assoc_value in delayed_ack socket option. [ 884.885317][ T4681] Use struct sctp_sack_info instead [ 884.958367][ T4684] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 885.129015][ T4703] vlan1: entered allmulticast mode [ 885.139989][ T4703] veth0_vlan: entered allmulticast mode [ 885.249440][ T4706] bond6: entered allmulticast mode [ 885.279464][ T4712] bridge6: entered promiscuous mode [ 885.285854][ T4712] bridge6: entered allmulticast mode [ 885.295387][ T4712] bond6: (slave bridge6): Enslaving as an active interface with an up link [ 885.321219][ T4710] veth0: entered promiscuous mode [ 885.332209][ T4709] veth0: left promiscuous mode [ 885.453246][ T4720] netlink: 'syz.3.8317': attribute type 83 has an invalid length. [ 885.559677][ T4734] netlink: 'syz.2.8321': attribute type 5 has an invalid length. [ 885.736983][T11681] lec:lec_start_xmit: lec0:No lecd attached [ 885.937768][ T4755] __nla_validate_parse: 8 callbacks suppressed [ 885.937790][ T4755] netlink: 7064 bytes leftover after parsing attributes in process `syz.0.8327'. [ 885.955237][ T4755] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 886.131515][ T4764] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 886.310183][ T51] Bluetooth: hci4: link tx timeout [ 886.317416][ T51] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 886.368145][ T4783] syzkaller0: entered promiscuous mode [ 886.381002][ T4783] syzkaller0: entered allmulticast mode [ 886.435260][ T4783] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8333'. [ 886.688077][ T4797] syz_tun: entered allmulticast mode [ 886.779152][ T4802] netlink: 48 bytes leftover after parsing attributes in process `syz.1.8339'. [ 886.919211][ T4814] xt_hashlimit: size too large, truncated to 1048576 [ 886.985422][ T4820] netlink: 80 bytes leftover after parsing attributes in process `syz.0.8342'. [ 887.013794][ T4821] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8344'. [ 887.047772][ T4820] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8342'. [ 887.279568][ T4831] bond4: option mode: unable to set because the bond device has slaves [ 887.330820][ T4833] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 887.569986][ T4856] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8351'. [ 887.649468][ T4856] tunl0: entered promiscuous mode [ 887.654996][ T4856] tunl0: entered allmulticast mode [ 888.351415][ T51] Bluetooth: hci4: command 0x0406 tx timeout [ 889.903471][ T4822] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 889.912578][ T4839] netlink: 116 bytes leftover after parsing attributes in process `syz.2.8347'. [ 890.098901][ T4865] netlink: 'syz.3.8352': attribute type 16 has an invalid length. [ 890.121471][ T4865] netlink: 'syz.3.8352': attribute type 17 has an invalid length. [ 890.181493][ T4865] erspan0: left allmulticast mode [ 890.251864][ T4865] 8021q: adding VLAN 0 to HW filter on device .` [ 890.262838][ T4865] 8021q: adding VLAN 0 to HW filter on device team0 [ 890.275888][ T4865] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 890.296334][ T4877] netlink: 2 bytes leftover after parsing attributes in process `syz.0.8357'. [ 890.443714][ T4888] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 890.443833][ T4886] netlink: 40 bytes leftover after parsing attributes in process `syz.1.8362'. [ 890.475269][ T4888] macvtap1: entered promiscuous mode [ 890.485002][ T4888] macvtap1: entered allmulticast mode [ 890.490451][ T4888] veth1_vlan: entered allmulticast mode [ 890.531120][ T4889] macvtap2: entered promiscuous mode [ 890.545721][ T4889] macvtap2: entered allmulticast mode [ 890.594577][ T4893] macvtap2: entered promiscuous mode [ 890.600257][ T4893] macvtap2: entered allmulticast mode [ 890.775456][ T4903] nbd: couldn't find a device at index 0 [ 890.814012][ T4905] netlink: 'syz.1.8367': attribute type 12 has an invalid length. [ 890.916109][ T4914] openvswitch: netlink: Missing key (keys=40, expected=100) [ 891.071046][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5330 ms [ 891.079141][ C0] lec:lec_tx_timeout: lec0 [ 891.111619][ T4919] netlink: 'syz.4.8371': attribute type 1 has an invalid length. [ 891.119442][ T4919] __nla_validate_parse: 4 callbacks suppressed [ 891.119459][ T4919] netlink: 228 bytes leftover after parsing attributes in process `syz.4.8371'. [ 891.822363][ T4975] syzkaller0: entered promiscuous mode [ 891.828000][ T4975] syzkaller0: entered allmulticast mode [ 894.589925][ T4956] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 894.815915][ T4999] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8389'. [ 895.010113][ T5008] netlink: 'syz.0.8394': attribute type 2 has an invalid length. [ 895.023384][ T5011] netlink: 27 bytes leftover after parsing attributes in process `syz.3.8397'. [ 895.052291][ T5011] netlink: 368 bytes leftover after parsing attributes in process `syz.3.8397'. [ 895.167019][ T5015] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8399'. [ 895.407369][ T5031] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8405'. [ 895.474294][ T5045] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8408'. [ 895.556514][ T5052] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8408'. [ 895.571464][ T5053] netlink: 'syz.0.8410': attribute type 29 has an invalid length. [ 895.579938][ T5053] netlink: 'syz.0.8410': attribute type 29 has an invalid length. [ 895.697031][ T5065] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8412'. [ 895.738352][ T5069] netlink: 'syz.3.8414': attribute type 2 has an invalid length. [ 895.749165][ T5069] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8414'. [ 895.774698][ T5069] netlink: 'syz.3.8414': attribute type 2 has an invalid length. [ 895.983596][ T5082] IPv6: NLM_F_CREATE should be specified when creating new route [ 896.050714][ T5085] netlink: 'syz.3.8421': attribute type 1 has an invalid length. [ 896.113442][ T5085] 8021q: adding VLAN 0 to HW filter on device bond6 [ 896.143432][ T5095] bond6: (slave ip6erspan0): making interface the new active one [ 896.154089][ T5095] bond6: (slave ip6erspan0): Enslaving as an active interface with an up link [ 896.464951][ T5116] __nla_validate_parse: 5 callbacks suppressed [ 896.464972][ T5116] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8428'. [ 896.518543][ T5122] netlink: 212344 bytes leftover after parsing attributes in process `syz.1.8430'. [ 897.133089][ T5488] veth0_macvtap: left promiscuous mode [ 897.211347][ T5177] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8436'. [ 899.396310][ T5113] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 899.618605][ T5192] netlink: 68 bytes leftover after parsing attributes in process `syz.4.8442'. [ 899.636810][ T5192] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8442'. [ 899.653838][ T5192] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8442'. [ 918.969759][ T5236] team0: Device batadv1 failed to change mtu [ 918.977355][ T5236] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8447'. [ 918.998693][ T5242] bridge4: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 919.065277][ T5245] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8451'. [ 919.402051][ T5267] team0 (unregistering): Port device team_slave_0 removed [ 919.430584][ T5267] team0 (unregistering): Port device team_slave_1 removed [ 919.462468][ T5273] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 9 [ 919.544807][ T5280] 8021q: adding VLAN 0 to HW filter on device .` [ 919.571079][ T5280] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 919.580296][ T5285] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8462'. [ 919.624795][ T5285] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 919.647224][ T5275] syzkaller0: entered promiscuous mode [ 919.653341][ T5275] syzkaller0: entered allmulticast mode [ 919.660588][ T5286] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 919.667254][ T5286] syzkaller1: linktype set to 823 [ 919.681559][ T83] bond3: (slave .`): failed to get link speed/duplex [ 919.861553][ T83] bond3: (slave .`): failed to get link speed/duplex [ 919.981011][T31617] bond3: (slave .`): failed to get link speed/duplex [ 920.091551][T31617] bond3: (slave .`): failed to get link speed/duplex [ 920.163335][ T5319] netlink: 40 bytes leftover after parsing attributes in process `syz.2.8471'. [ 920.251694][T31617] bond3: (slave .`): failed to get link speed/duplex [ 920.335858][ T5331] : entered promiscuous mode [ 920.381016][T31617] bond3: (slave .`): failed to get link speed/duplex [ 920.476103][ T5339] bond7: option mode: invalid value (133) [ 920.504314][ T5339] bond7 (unregistering): Released all slaves [ 920.559462][ T5354] netlink: 'syz.1.8480': attribute type 1 has an invalid length. [ 920.569119][ T5354] netlink: 'syz.1.8480': attribute type 2 has an invalid length. [ 920.581810][T31621] bond3: (slave .`): failed to get link speed/duplex [ 920.620451][ T5354] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8480'. [ 920.721233][T31621] bond3: (slave .`): failed to get link speed/duplex [ 921.017022][ T5383] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8487'. [ 921.061572][ T5383] bridge7: the hash_elasticity option has been deprecated and is always 16 [ 921.071970][ T5383] bridge7: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 921.123698][ T5328] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 921.129684][ T5328] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 921.203851][ T5328] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 921.212178][ T5328] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 921.262663][ T5328] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 921.268637][ T5328] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 921.321104][ T5397] netlink: 116 bytes leftover after parsing attributes in process `syz.4.8491'. [ 921.353397][ T5328] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 921.389760][ T5328] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 921.399122][ T5401] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 921.421654][ T5401] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 921.468559][ T5328] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 921.484230][ T5328] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 921.654650][ T5416] netlink: 'syz.0.8497': attribute type 2 has an invalid length. [ 921.700466][ T5416] 9: entered promiscuous mode [ 922.027619][ T5437] lo speed is unknown, defaulting to 1000 [ 922.048435][ T5441] netlink: 'syz.1.8501': attribute type 2 has an invalid length. [ 922.108392][ T5441] netlink: 244 bytes leftover after parsing attributes in process `syz.1.8501'. [ 922.267939][ T5452] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8503'. [ 922.473411][ T6724] netdevsim netdevsim3 : set [0, 0] type 1 family 0 port 8472 - 0 [ 922.491570][ T6724] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 922.520276][ T6724] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 922.586103][ T6724] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 922.755374][ T5437] hsr0 speed is unknown, defaulting to 1000 [ 923.188750][ T5494] netlink: 27 bytes leftover after parsing attributes in process `syz.2.8510'. [ 923.267782][ T5494] vxcan4: entered allmulticast mode [ 923.457994][ T5503] netlink: 'syz.3.8514': attribute type 3 has an invalid length. [ 924.212031][ T5542] xt_hashlimit: size too large, truncated to 1048576 [ 924.666916][ T5550] bond0: left promiscuous mode [ 924.694161][ T5550] 8021q: adding VLAN 0 to HW filter on device bond0 [ 924.722818][ T5549] nbd4: detected capacity change from 0 to 127 [ 924.800630][ T1289] block nbd4: Receive control failed (result -104) [ 924.822874][ T6724] net_ratelimit: 25 callbacks suppressed [ 924.822897][ T6724] bond3: (slave .`): failed to get link speed/duplex [ 924.991460][T31622] bond3: (slave .`): failed to get link speed/duplex [ 925.101338][ T83] bond3: (slave .`): failed to get link speed/duplex [ 925.121795][ T5578] __nla_validate_parse: 5 callbacks suppressed [ 925.121816][ T5578] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8531'. [ 925.171820][ T5578] netlink: 'syz.3.8531': attribute type 1 has an invalid length. [ 925.179664][ T5578] netlink: 224 bytes leftover after parsing attributes in process `syz.3.8531'. [ 925.213111][T31617] bond3: (slave .`): failed to get link speed/duplex [ 925.332630][T31617] bond3: (slave .`): failed to get link speed/duplex [ 925.395216][ T5596] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8535'. [ 925.411639][ T5596] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8535'. [ 925.451344][T31622] bond3: (slave .`): failed to get link speed/duplex [ 925.572604][T31617] bond3: (slave .`): failed to get link speed/duplex [ 925.681004][T31617] bond3: (slave .`): failed to get link speed/duplex [ 925.703082][ T5618] syzkaller0: entered promiscuous mode [ 925.708759][ T5618] syzkaller0: entered allmulticast mode [ 925.729068][ T5618] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 925.834668][ T5623] sch_fq: defrate 0 ignored. [ 925.862460][T31617] bond3: (slave .`): failed to get link speed/duplex [ 925.913596][ T5631] netlink: 'syz.2.8545': attribute type 58 has an invalid length. [ 925.921746][ T5631] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8545'. [ 926.084502][ T5638] veth7: entered promiscuous mode [ 926.093677][ T5638] veth7: entered allmulticast mode [ 926.101030][ T5640] netlink: 'syz.4.8549': attribute type 1 has an invalid length. [ 926.245153][ T5649] syzkaller0: entered promiscuous mode [ 926.259195][ T5649] syzkaller0: entered allmulticast mode [ 926.474782][ T5670] netlink: 64 bytes leftover after parsing attributes in process `syz.1.8553'. [ 926.621101][ T5676] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8556'. [ 926.877133][ T5690] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8559'. [ 926.954777][ T5693] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8562'. [ 927.313640][ T5726] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8573'. [ 927.406736][ T5728] IPVS: length: 239 != 24 [ 927.588570][ T5741] syzkaller0: entered promiscuous mode [ 927.596238][ T5741] syzkaller0: entered allmulticast mode [ 927.731689][ T5746] lo speed is unknown, defaulting to 1000 [ 927.993742][ T5746] hsr0 speed is unknown, defaulting to 1000 [ 928.169335][ T5775] netlink: 'syz.4.8589': attribute type 1 has an invalid length. [ 928.221023][ T5775] netlink: 'syz.4.8589': attribute type 7 has an invalid length. [ 928.234765][ T5775] netlink: 'syz.4.8589': attribute type 8 has an invalid length. [ 928.243867][ T5780] netlink: 'syz.4.8589': attribute type 30 has an invalid length. [ 928.584656][ T5789] veth0_virt_wifi: entered promiscuous mode [ 928.592142][ T5789] veth0_virt_wifi: entered allmulticast mode [ 928.870367][ T5820] netlink: 'syz.1.8602': attribute type 13 has an invalid length. [ 928.912513][ T5820] netlink: 'syz.1.8602': attribute type 58 has an invalid length. [ 929.378835][ T5842] macsec2: entered promiscuous mode [ 929.401273][ T5842] bridge0: entered promiscuous mode [ 929.416411][ T5842] macsec2: entered allmulticast mode [ 929.429580][ T5842] bridge0: entered allmulticast mode [ 929.449289][ T5842] bridge0: port 1(macsec2) entered blocking state [ 929.471381][ T5842] bridge0: port 1(macsec2) entered disabled state [ 929.495101][ T5842] bridge0: left allmulticast mode [ 929.506691][ T5842] bridge0: left promiscuous mode [ 929.717168][ T5861] bond5 (unregistering): Released all slaves [ 929.953895][T31621] net_ratelimit: 28 callbacks suppressed [ 929.953919][T31621] bond3: (slave .`): failed to get link speed/duplex [ 930.073498][T31620] bond3: (slave .`): failed to get link speed/duplex [ 930.180591][ T5891] : entered promiscuous mode [ 930.211347][T31620] bond3: (slave .`): failed to get link speed/duplex [ 930.331093][ T6724] bond3: (slave .`): failed to get link speed/duplex [ 930.385102][ T5901] __nla_validate_parse: 15 callbacks suppressed [ 930.385123][ T5901] netlink: 64 bytes leftover after parsing attributes in process `syz.3.8626'. [ 930.403188][ T5901] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8626'. [ 930.547983][ T5909] netlink: 32 bytes leftover after parsing attributes in process `syz.4.8628'. [ 930.559325][T31620] bond3: (slave .`): failed to get link speed/duplex [ 930.681449][ T6724] bond3: (slave .`): failed to get link speed/duplex [ 930.840462][ T5920] netlink: 'syz.4.8633': attribute type 1 has an invalid length. [ 930.857312][ T5920] netlink: 'syz.4.8633': attribute type 1 has an invalid length. [ 930.880935][ T6724] bond3: (slave .`): failed to get link speed/duplex [ 930.995690][ T5924] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8635'. [ 931.033037][T31617] bond3: (slave .`): failed to get link speed/duplex [ 931.151365][ T6724] bond3: (slave .`): failed to get link speed/duplex [ 931.243696][ T5943] netlink: 32 bytes leftover after parsing attributes in process `syz.1.8640'. [ 931.262968][T31617] bond3: (slave .`): failed to get link speed/duplex [ 931.523790][ T5966] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8648'. [ 931.587486][ T5968] syzkaller0: entered promiscuous mode [ 931.594126][ T5968] syzkaller0: entered allmulticast mode [ 931.635572][ T5978] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8648'. [ 931.651118][ T5966] hsr_slave_1: left promiscuous mode [ 931.689053][ T5987] netlink: 'syz.4.8651': attribute type 1 has an invalid length. [ 931.718402][ T1300] lec:lec_start_xmit: lec0:No lecd attached [ 931.872876][ T5995] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8653'. [ 931.933136][ T5993] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8653'. [ 931.957865][ T5990] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8652'. [ 932.293209][ T6026] netlink: 'syz.3.8661': attribute type 1 has an invalid length. [ 932.314013][ T6029] netlink: 'syz.2.8663': attribute type 2 has an invalid length. [ 932.329744][ T6029] 9: entered promiscuous mode [ 933.332549][ T6106] delete_channel: no stack [ 933.708984][ T6120] can: request_module (can-proto-4) failed. [ 933.738533][ T6119] can: request_module (can-proto-4) failed. [ 933.789417][ T6131] syzkaller0: entered promiscuous mode [ 933.795266][ T6131] syzkaller0: entered allmulticast mode [ 934.231669][ T6157] syzkaller1: entered promiscuous mode [ 934.237523][ T6157] syzkaller1: entered allmulticast mode [ 934.371831][ T6163] xt_l2tp: missing protocol rule (udp|l2tpip) [ 934.425792][ T6169] veth0_to_bond: entered allmulticast mode [ 934.818508][ T6197] netlink: 'syz.0.8716': attribute type 142 has an invalid length. [ 934.833096][ T6197] netlink: 'syz.0.8716': attribute type 142 has an invalid length. [ 935.080794][ T6200] bond11: ARP target 1.0.0.0 is already present [ 935.099789][ T6209] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 935.121032][ T6200] bond11: option arp_ip_target: invalid value (1) [ 935.152950][ T6200] bond11 (unregistering): Released all slaves [ 935.212199][ T6211] netlink: 'syz.3.8719': attribute type 1 has an invalid length. [ 935.261297][T31617] net_ratelimit: 26 callbacks suppressed [ 935.261320][T31617] bond3: (slave .`): failed to get link speed/duplex [ 935.392992][T31617] bond3: (slave .`): failed to get link speed/duplex [ 935.443078][ T6222] sctp: [Deprecated]: syz.2.8724 (pid 6222) Use of int in max_burst socket option. [ 935.443078][ T6222] Use struct sctp_assoc_value instead [ 935.465016][ T6223] netlink: 'syz.1.8723': attribute type 4 has an invalid length. [ 935.502114][T31620] bond3: (slave .`): failed to get link speed/duplex [ 935.578003][ T6225] syz_tun: entered promiscuous mode [ 935.602335][ T6225] macvtap1: entered promiscuous mode [ 935.632853][ T6225] syz_tun: left promiscuous mode [ 935.791294][ T6724] bond3: (slave .`): failed to get link speed/duplex [ 935.798716][ T6244] __nla_validate_parse: 16 callbacks suppressed [ 935.798739][ T6244] netlink: 192 bytes leftover after parsing attributes in process `syz.2.8729'. [ 935.819139][ T6202] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 935.848790][ T6245] netlink: 192 bytes leftover after parsing attributes in process `syz.2.8729'. [ 935.887651][ T6244] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8729'. [ 935.921008][ T6244] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8729'. [ 935.930246][ T6244] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8729'. [ 935.993337][ T6244] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8729'. [ 936.051403][T31620] bond3: (slave .`): failed to get link speed/duplex [ 936.145053][ T6263] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8731'. [ 936.161534][T31620] bond3: (slave .`): failed to get link speed/duplex [ 936.234640][ T6272] netlink: 'syz.4.8734': attribute type 2 has an invalid length. [ 936.289165][ T6724] bond3: (slave .`): failed to get link speed/duplex [ 936.421263][ T6724] bond3: (slave .`): failed to get link speed/duplex [ 936.511151][ T6290] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8739'. [ 936.541296][T31620] bond3: (slave .`): failed to get link speed/duplex [ 936.693455][ T6724] bond3: (slave .`): failed to get link speed/duplex [ 936.901377][ T6311] netlink: 'syz.4.8747': attribute type 16 has an invalid length. [ 936.914387][ T6311] netlink: 'syz.4.8747': attribute type 3 has an invalid length. [ 936.936873][ T6311] netlink: 132 bytes leftover after parsing attributes in process `syz.4.8747'. [ 937.005927][ T6317] syzkaller0: entered promiscuous mode [ 937.021495][ T6317] syzkaller0: entered allmulticast mode [ 937.035671][ T6317] netlink: 60 bytes leftover after parsing attributes in process `syz.3.8750'. [ 937.070983][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5350 ms [ 937.079234][ C0] lec:lec_tx_timeout: lec0 [ 937.217954][ T6326] netlink: 'syz.4.8752': attribute type 21 has an invalid length. [ 937.228671][ T6326] IPv6: NLM_F_CREATE should be specified when creating new route [ 937.441059][ T29] audit: type=1800 audit(1772816579.240:14): pid=6343 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.8761" name=4996AE17DFFC2E43C8174B54B620636894AAACF28FF62616363C70A440AEC4014CAF28C0ADC04308 dev="tmpfs" ino=2766 res=0 errno=0 [ 937.903522][ T6374] netlink: 'syz.2.8769': attribute type 2 has an invalid length. [ 937.920327][ T6374] C: entered promiscuous mode [ 937.926332][ T6374] tunl0: entered promiscuous mode [ 937.936484][ T6374] gre0: entered promiscuous mode [ 937.945377][ T6374] gretap0: entered promiscuous mode [ 937.966784][ T6374] erspan0: entered promiscuous mode [ 937.978527][ T6374] ip_vti0: entered promiscuous mode [ 938.007384][ T6378] netlink: 'syz.1.8772': attribute type 2 has an invalid length. [ 938.082238][ T6378] v: entered promiscuous mode [ 938.627547][ T6416] bond8: (slave bond_slave_1): Device is not bonding slave [ 938.641290][ T6416] bond8: option active_slave: invalid value (bond_slave_1) [ 938.683474][ T6416] bond8 (unregistering): Released all slaves [ 939.689258][ T6483] SET target dimension over the limit! [ 939.831619][ T6493] netlink: 'syz.0.8806': attribute type 1 has an invalid length. [ 939.839872][ T6493] netlink: 'syz.0.8806': attribute type 1 has an invalid length. [ 939.882467][ T6487] can: request_module (can-proto-3) failed. [ 940.227010][ T6529] 8021q: VLANs not supported on gre0 [ 940.341405][ T6724] net_ratelimit: 28 callbacks suppressed [ 940.341429][ T6724] bond3: (slave .`): failed to get link speed/duplex [ 940.382929][ T6539] openvswitch: netlink: IP tunnel dst address not specified [ 940.435277][ T6545] netlink: 'syz.0.8818': attribute type 1 has an invalid length. [ 940.541944][ T6545] bond8: entered promiscuous mode [ 940.547610][ T6545] bond8: entered allmulticast mode [ 940.553813][ T6545] 8021q: adding VLAN 0 to HW filter on device bond8 [ 940.572368][ T6724] bond3: (slave .`): failed to get link speed/duplex [ 940.646148][ T6559] netlink: 'syz.3.8825': attribute type 1 has an invalid length. [ 940.675016][ T6556] netlink: 'syz.1.8823': attribute type 1 has an invalid length. [ 940.701028][T31622] bond3: (slave .`): failed to get link speed/duplex [ 940.730564][ T6565] xt_CT: You must specify a L4 protocol and not use inversions on it [ 940.795173][ T6564] syzkaller0: entered promiscuous mode [ 940.801420][ T6564] syzkaller0: entered allmulticast mode [ 940.894775][ T6724] bond3: (slave .`): failed to get link speed/duplex [ 941.021506][T31622] bond3: (slave .`): failed to get link speed/duplex [ 941.066951][ T6579] __nla_validate_parse: 15 callbacks suppressed [ 941.066982][ T6579] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8831'. [ 941.109153][ T29] audit: type=1107 audit(1772816582.920:15): pid=6578 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='ً5%UA٠0 ltݕ/ 6򊨊B_sPtCJ,),YcF\9w' [ 941.134020][ T6724] bond3: (slave .`): failed to get link speed/duplex [ 941.284060][ T6591] netlink: 224 bytes leftover after parsing attributes in process `syz.2.8835'. [ 941.328307][T31620] bond3: (slave .`): failed to get link speed/duplex [ 941.450770][T31622] bond3: (slave .`): failed to get link speed/duplex [ 941.561884][T31622] bond3: (slave .`): failed to get link speed/duplex [ 941.584184][ T6612] netlink: 48 bytes leftover after parsing attributes in process `syz.0.8843'. [ 941.775210][ T6626] lo speed is unknown, defaulting to 1000 [ 942.059816][ T6644] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8854'. [ 942.070437][ T6646] syzkaller1: entered promiscuous mode [ 942.090022][ T6646] syzkaller1: entered allmulticast mode [ 942.112234][ T6646] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 324 [ 942.126579][ T6644] ipt_rpfilter: unknown options [ 942.251136][ T6653] validate_nla: 2 callbacks suppressed [ 942.251158][ T6653] netlink: 'syz.4.8859': attribute type 29 has an invalid length. [ 942.269049][ T6653] netlink: 'syz.4.8859': attribute type 29 has an invalid length. [ 942.299218][ T6626] hsr0 speed is unknown, defaulting to 1000 [ 942.373132][ T6652] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 942.506073][ T6661] netlink: 104 bytes leftover after parsing attributes in process `syz.3.8862'. [ 943.219349][ T6682] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8867'. [ 943.225643][ T6685] netlink: 'syz.0.8866': attribute type 1 has an invalid length. [ 943.236404][ T6684] ------------[ cut here ]------------ [ 943.236518][ T6684] 1 [ 943.242077][ T6684] WARNING: net/ipv4/route.c:1275 at ip_rt_bug+0x2d/0x140, CPU#0: syz.3.8868/6684 [ 943.254193][ T6684] Modules linked in: [ 943.258389][ T6684] CPU: 0 UID: 0 PID: 6684 Comm: syz.3.8868 Not tainted syzkaller #0 PREEMPT(full) [ 943.258651][ T6685] netlink: 224 bytes leftover after parsing attributes in process `syz.0.8866'. [ 943.267747][ T6684] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 943.267766][ T6684] RIP: 0010:ip_rt_bug+0x2d/0x140 [ 943.267796][ T6684] Code: fa 55 41 57 41 56 41 55 41 54 53 48 89 d3 e8 7a 47 bb f7 66 90 e8 73 47 bb f7 31 ff 48 89 de ba 02 00 00 00 e8 f4 3b 6a ff 90 <0f> 0b 90 31 c0 5b 41 5c 41 5d 41 5e 41 5f 5d e9 7f 56 a6 01 cc 49 [ 943.267817][ T6684] RSP: 0018:ffffc900062771e0 EFLAGS: 00010282 [ 943.267841][ T6684] RAX: c7cb05c7c7b75800 RBX: ffff88803430e8c0 RCX: 0000000080000401 [ 943.267861][ T6684] RDX: 0000000000000002 RSI: ffffffff8def34ce RDI: ffffffff8c27b280 [ 943.334544][ T6684] RBP: ffffc900062774e0 R08: ffffffff901195b7 R09: 1ffffffff20232b6 [ 943.342719][ T6684] R10: dffffc0000000000 R11: fffffbfff20232b7 R12: dffffc0000000000 [ 943.350741][ T6684] R13: 0000000000000000 R14: ffff88803430e8c0 R15: dffffc0000000000 [ 943.358805][ T6684] FS: 00007fa47a39c6c0(0000) GS:ffff888125463000(0000) knlGS:0000000000000000 [ 943.367921][ T6684] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 943.374663][ T6684] CR2: 0000000000000000 CR3: 0000000076d9e000 CR4: 00000000003526f0 [ 943.382740][ T6684] Call Trace: [ 943.386324][ T6684] [ 943.389307][ T6684] ip_push_pending_frames+0x8b/0x110 [ 943.394728][ T6684] __icmp_send+0x118d/0x1590 [ 943.399463][ T6684] ? __icmp_send+0x22b/0x1590 [ 943.404443][ T6684] ? __pfx___icmp_send+0x10/0x10 [ 943.409470][ T6684] ? ip_route_input_noref+0xad/0x270 [ 943.414886][ T6684] ? __pfx_ip_route_input_noref+0x10/0x10 [ 943.420675][ T6684] ? tcp_v4_early_demux+0x4b3/0x9a0 [ 943.426008][ T6684] ip_options_compile+0x80/0xb0 [ 943.431072][ T6684] ip_rcv_finish_core+0xaa2/0x1c00 [ 943.436260][ T6684] ip_rcv_finish+0x14c/0x2a0 [ 943.441050][ T6684] NF_HOOK+0x336/0x3c0 [ 943.445192][ T6684] ? __pfx_ip_rcv_finish+0x10/0x10 [ 943.450358][ T6684] ? NF_HOOK+0x9e/0x3c0 [ 943.454628][ T6684] ? __pfx_NF_HOOK+0x10/0x10 [ 943.459289][ T6684] ? __pfx_ip_rcv_finish+0x10/0x10 [ 943.464529][ T6684] ? netif_receive_skb+0x102/0xc50 [ 943.469753][ T6684] ? __pfx_ip_rcv+0x10/0x10 [ 943.474370][ T6684] netif_receive_skb+0x45b/0xc50 [ 943.479465][ T6684] ? __pfx_netif_receive_skb+0x10/0x10 [ 943.485064][ T6684] ? __lock_acquire+0x6b5/0x2cf0 [ 943.490105][ T6684] ? tun_rx_batched+0x185/0x790 [ 943.495092][ T6684] tun_rx_batched+0x1de/0x790 [ 943.499915][ T6684] ? __build_skb+0x62/0x440 [ 943.504547][ T6684] ? __pfx_tun_rx_batched+0x10/0x10 [ 943.509831][ T6684] ? tun_get_user+0x2354/0x3dd0 [ 943.514797][ T6684] ? __local_bh_enable_ip+0xd0/0x130 [ 943.520151][ T6684] ? tun_get_user+0x2669/0x3dd0 [ 943.525124][ T6684] tun_get_user+0x2a78/0x3dd0 [ 943.529886][ T6684] ? aa_file_perm+0x50e/0x15e0 [ 943.534772][ T6684] ? __pfx_tun_get_user+0x10/0x10 [ 943.539862][ T6684] ? aa_file_perm+0x192/0x15e0 [ 943.544832][ T6684] ? ref_tracker_alloc+0x35c/0x4c0 [ 943.550032][ T6684] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 943.556048][ T6684] ? tun_get+0x1c/0x2f0 [ 943.560279][ T6684] ? tun_get+0x1c/0x2f0 [ 943.564533][ T6684] ? tun_get+0x1c/0x2f0 [ 943.568851][ T6684] tun_chr_write_iter+0x113/0x200 [ 943.573996][ T6684] vfs_write+0x61d/0xb90 [ 943.578309][ T6684] ? __pfx_vfs_write+0x10/0x10 [ 943.583201][ T6684] ? __fget_files+0x2a/0x420 [ 943.587872][ T6684] ksys_write+0x150/0x270 [ 943.592392][ T6684] ? __pfx_ksys_write+0x10/0x10 [ 943.597364][ T6684] do_syscall_64+0x14d/0xf80 [ 943.602154][ T6684] ? trace_irq_disable+0x3b/0x150 [ 943.607422][ T6684] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 943.613692][ T6684] ? clear_bhb_loop+0x40/0x90 [ 943.618436][ T6684] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 943.624570][ T6684] RIP: 0033:0x7fa47955cfce [ 943.629180][ T6684] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 943.649228][ T6684] RSP: 002b:00007fa47a39bfb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 943.657855][ T6684] RAX: ffffffffffffffda RBX: 00007fa47a39c6c0 RCX: 00007fa47955cfce [ 943.666175][ T6684] RDX: 0000000000000046 RSI: 0000200000000400 RDI: 00000000000000c8 [ 943.674367][ T6684] RBP: 00007fa479632bd9 R08: 0000000000000000 R09: 0000000000000000 [ 943.682417][ T6684] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 943.690479][ T6684] R13: 00007fa479816038 R14: 00007fa479815fa0 R15: 00007fff2284f148 [ 943.698601][ T6684] [ 943.701717][ T6684] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 943.709218][ T6684] CPU: 0 UID: 0 PID: 6684 Comm: syz.3.8868 Not tainted syzkaller #0 PREEMPT(full) [ 943.718528][ T6684] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 943.728611][ T6684] Call Trace: [ 943.731918][ T6684] [ 943.734871][ T6684] vpanic+0x56c/0xa60 [ 943.738933][ T6684] ? __pfx__printk+0x10/0x10 [ 943.743679][ T6684] ? __pfx_vpanic+0x10/0x10 [ 943.748248][ T6684] ? is_bpf_text_address+0x292/0x2b0 [ 943.753673][ T6684] ? is_bpf_text_address+0x26/0x2b0 [ 943.759283][ T6684] panic+0xc5/0xd0 [ 943.763218][ T6684] ? __pfx_panic+0x10/0x10 [ 943.767693][ T6684] __warn+0x315/0x4f0 [ 943.771705][ T6684] ? ip_rt_bug+0x2d/0x140 [ 943.776086][ T6684] ? ip_rt_bug+0x2d/0x140 [ 943.780446][ T6684] __report_bug+0x29a/0x540 [ 943.785148][ T6684] ? NF_HOOK+0x336/0x3c0 [ 943.789470][ T6684] ? netif_receive_skb+0x45b/0xc50 [ 943.794688][ T6684] ? tun_rx_batched+0x1de/0x790 [ 943.799700][ T6684] ? ip_rt_bug+0x2d/0x140 [ 943.804063][ T6684] ? __pfx___report_bug+0x10/0x10 [ 943.809146][ T6684] ? ip_rt_bug+0x2d/0x140 [ 943.813500][ T6684] report_bug+0x16a/0x220 [ 943.817871][ T6684] ? ip_rt_bug+0x2d/0x140 [ 943.822400][ T6684] ? ip_rt_bug+0x2f/0x140 [ 943.826758][ T6684] handle_bug+0x9c/0x200 [ 943.831037][ T6684] exc_invalid_op+0x1a/0x50 [ 943.835625][ T6684] asm_exc_invalid_op+0x1a/0x20 [ 943.840530][ T6684] RIP: 0010:ip_rt_bug+0x2d/0x140 [ 943.845607][ T6684] Code: fa 55 41 57 41 56 41 55 41 54 53 48 89 d3 e8 7a 47 bb f7 66 90 e8 73 47 bb f7 31 ff 48 89 de ba 02 00 00 00 e8 f4 3b 6a ff 90 <0f> 0b 90 31 c0 5b 41 5c 41 5d 41 5e 41 5f 5d e9 7f 56 a6 01 cc 49 [ 943.865531][ T6684] RSP: 0018:ffffc900062771e0 EFLAGS: 00010282 [ 943.871650][ T6684] RAX: c7cb05c7c7b75800 RBX: ffff88803430e8c0 RCX: 0000000080000401 [ 943.879672][ T6684] RDX: 0000000000000002 RSI: ffffffff8def34ce RDI: ffffffff8c27b280 [ 943.887693][ T6684] RBP: ffffc900062774e0 R08: ffffffff901195b7 R09: 1ffffffff20232b6 [ 943.895709][ T6684] R10: dffffc0000000000 R11: fffffbfff20232b7 R12: dffffc0000000000 [ 943.903716][ T6684] R13: 0000000000000000 R14: ffff88803430e8c0 R15: dffffc0000000000 [ 943.911915][ T6684] ip_push_pending_frames+0x8b/0x110 [ 943.917336][ T6684] __icmp_send+0x118d/0x1590 [ 943.921979][ T6684] ? __icmp_send+0x22b/0x1590 [ 943.926717][ T6684] ? __pfx___icmp_send+0x10/0x10 [ 943.931806][ T6684] ? ip_route_input_noref+0xad/0x270 [ 943.937157][ T6684] ? __pfx_ip_route_input_noref+0x10/0x10 [ 943.942929][ T6684] ? tcp_v4_early_demux+0x4b3/0x9a0 [ 943.948192][ T6684] ip_options_compile+0x80/0xb0 [ 943.953104][ T6684] ip_rcv_finish_core+0xaa2/0x1c00 [ 943.958275][ T6684] ip_rcv_finish+0x14c/0x2a0 [ 943.962919][ T6684] NF_HOOK+0x336/0x3c0 [ 943.967045][ T6684] ? __pfx_ip_rcv_finish+0x10/0x10 [ 943.972183][ T6684] ? NF_HOOK+0x9e/0x3c0 [ 943.976371][ T6684] ? __pfx_NF_HOOK+0x10/0x10 [ 943.980997][ T6684] ? __pfx_ip_rcv_finish+0x10/0x10 [ 943.986150][ T6684] ? netif_receive_skb+0x102/0xc50 [ 943.991292][ T6684] ? __pfx_ip_rcv+0x10/0x10 [ 943.995917][ T6684] netif_receive_skb+0x45b/0xc50 [ 944.000898][ T6684] ? __pfx_netif_receive_skb+0x10/0x10 [ 944.006408][ T6684] ? __lock_acquire+0x6b5/0x2cf0 [ 944.011401][ T6684] ? tun_rx_batched+0x185/0x790 [ 944.016385][ T6684] tun_rx_batched+0x1de/0x790 [ 944.021269][ T6684] ? __build_skb+0x62/0x440 [ 944.025807][ T6684] ? __pfx_tun_rx_batched+0x10/0x10 [ 944.031053][ T6684] ? tun_get_user+0x2354/0x3dd0 [ 944.035956][ T6684] ? __local_bh_enable_ip+0xd0/0x130 [ 944.041289][ T6684] ? tun_get_user+0x2669/0x3dd0 [ 944.046178][ T6684] tun_get_user+0x2a78/0x3dd0 [ 944.050931][ T6684] ? aa_file_perm+0x50e/0x15e0 [ 944.055806][ T6684] ? __pfx_tun_get_user+0x10/0x10 [ 944.060879][ T6684] ? aa_file_perm+0x192/0x15e0 [ 944.065707][ T6684] ? ref_tracker_alloc+0x35c/0x4c0 [ 944.070860][ T6684] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 944.076364][ T6684] ? tun_get+0x1c/0x2f0 [ 944.080567][ T6684] ? tun_get+0x1c/0x2f0 [ 944.084749][ T6684] ? tun_get+0x1c/0x2f0 [ 944.088940][ T6684] tun_chr_write_iter+0x113/0x200 [ 944.094002][ T6684] vfs_write+0x61d/0xb90 [ 944.098277][ T6684] ? __pfx_vfs_write+0x10/0x10 [ 944.103077][ T6684] ? __fget_files+0x2a/0x420 [ 944.107713][ T6684] ksys_write+0x150/0x270 [ 944.112076][ T6684] ? __pfx_ksys_write+0x10/0x10 [ 944.117048][ T6684] do_syscall_64+0x14d/0xf80 [ 944.121675][ T6684] ? trace_irq_disable+0x3b/0x150 [ 944.126731][ T6684] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 944.132855][ T6684] ? clear_bhb_loop+0x40/0x90 [ 944.137566][ T6684] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 944.143666][ T6684] RIP: 0033:0x7fa47955cfce [ 944.148160][ T6684] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 944.168158][ T6684] RSP: 002b:00007fa47a39bfb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 944.176706][ T6684] RAX: ffffffffffffffda RBX: 00007fa47a39c6c0 RCX: 00007fa47955cfce [ 944.184789][ T6684] RDX: 0000000000000046 RSI: 0000200000000400 RDI: 00000000000000c8 [ 944.192876][ T6684] RBP: 00007fa479632bd9 R08: 0000000000000000 R09: 0000000000000000 [ 944.200962][ T6684] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 944.208974][ T6684] R13: 00007fa479816038 R14: 00007fa479815fa0 R15: 00007fff2284f148 [ 944.217005][ T6684] [ 944.220648][ T6684] Kernel Offset: disabled [ 944.224988][ T6684] Rebooting in 86400 seconds..