last executing test programs: 4.133430444s ago: executing program 3 (id=9269): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3000000040000701f9fffffffc5bdf25047c00000c4000000700800000000000290001800b00200064756d6d79300000"], 0x30}}, 0xc000) 3.840352031s ago: executing program 3 (id=9273): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r3, @ANYRES32=r2, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r3, &(0x7f0000000240), &(0x7f0000000140)=@tcp6=r1}, 0x20) sendmmsg$inet6(r1, &(0x7f0000002440)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000600)="e2", 0x1}], 0x1}}], 0x1, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) writev(r1, &(0x7f0000000880), 0x1) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0xff05, 0x8000000, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0x157f}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @multicast}]}, 0x40}}, 0x20000840) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="050000000800000000e0fc463cd1fb569607b50a0000000c0000000000000074164014df630190", @ANYRES32, @ANYBLOB='\x00'/10, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r4) sendmsg$TIPC_NL_NET_SET(r5, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000280)={&(0x7f00000009c0)={0x274, r6, 0x200, 0x70bd28, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x64, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x80}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xe}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xbfa7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x10}]}, @TIPC_NLA_MEDIA={0x5c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffe}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffff}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_NODE={0xc4, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8}, @TIPC_NLA_NODE_KEY={0x49, 0x4, {'gcm(aes)\x00', 0x21, "e4b851f34d8dce35745f26174e07f862740659ad1f76b437278589b3c503e2ece8"}}, @TIPC_NLA_NODE_ID={0x6c, 0x3, "25b4d824f6ce204a973d8c9ba691b0271e9756eb18c20bd299ff0844bbe9ab83ef38d9aaebb658abb0c729fc408458a028842c3ecc3be259f9f7b1295e61764ce91c73a3ae21f6ca3f456c249b10fb9ea70da08d171cd61507af150ec78cea81ee3c0141dbd817ed"}]}, @TIPC_NLA_BEARER={0x90, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x71b3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8001}]}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}]}]}, @TIPC_NLA_BEARER={0x24, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}, @TIPC_NLA_MEDIA={0x28, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffff}]}]}]}, 0x274}}, 0x30008004) close(0x4) unshare(0x6a040000) socket$inet6_mptcp(0xa, 0x1, 0x106) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x6, 0x4, &(0x7f0000002180)=ANY=[@ANYBLOB="180200000000000000000000cfffffff850000001700000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x90) socket$inet_icmp_raw(0x2, 0x3, 0x1) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000440)={r7, 0x0, 0x25, 0x2, @void}, 0x10) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r8, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) syz_emit_ethernet(0x3e, &(0x7f0000000080)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x7, 0x4, 0x0, 0x1, 0x30, 0x0, 0x0, 0x0, 0x5, 0x0, @dev={0xac, 0x14, 0x14, 0xff}, @private=0xa010100, {[@cipso={0x86, 0x8, 0x2, [{0x1, 0x2}]}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x0, 0xfffe}}}}}}, 0x0) 3.423925487s ago: executing program 4 (id=9277): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000005c0), 0x4200, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r0, 0xf50f, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c00000004000000000000000000000300000000030000000300000000000101010000000000000c00000000010000000100000506000000010000000200000000000000005f"], 0x0, 0x58, 0x0, 0xa}, 0x28) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x58, 0x58, 0x5, [@const={0x4, 0x0, 0x0, 0xa, 0x3}, @float={0x8, 0x0, 0x0, 0x10, 0xc}, @type_tag={0x7, 0x0, 0x0, 0x12, 0x2}, @func={0x9, 0x0, 0x0, 0xc, 0x2}, @decl_tag={0xd, 0x0, 0x0, 0x11, 0x1, 0x2}, @restrict={0x0, 0x0, 0x0, 0xb, 0x4}, @func={0xf, 0x0, 0x0, 0xc, 0x2}]}, {0x0, [0x0, 0x2e, 0x30]}}, &(0x7f0000000380)=""/71, 0x75, 0x47, 0x1, 0x7, 0x10000}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000580)={r1, 0x20, &(0x7f0000000540)={&(0x7f0000000400)=""/235, 0xeb, 0x0, &(0x7f0000000500)=""/22, 0x16}}, 0x10) r2 = socket$nl_crypto(0x10, 0x3, 0x15) r3 = socket$kcm(0x10, 0x400000002, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@ipv6_newaddr={0x48, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40}, [@IFA_CACHEINFO={0x14, 0x6, {0x3, 0xffffffff, 0x1000, 0x4}}, @IFA_FLAGS={0x8}, @IFA_LOCAL={0x14, 0x2, @remote}]}, 0x48}}, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r4, 0x541b, &(0x7f0000000600)) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) recvmsg(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000004700)=""/4093, 0xffd}, {&(0x7f0000001840)=""/4074, 0xfea}, {&(0x7f0000003540)=""/4130, 0x1022}, {&(0x7f0000000200)=""/115, 0x73}, {&(0x7f0000000780)=""/190, 0xbe}, {&(0x7f0000000340)=""/174, 0xae}, {&(0x7f0000000400)=""/193, 0xc1}], 0x7}, 0x102) sendmsg$nl_crypto(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000740)=ANY=[@ANYBLOB="e00000001000010025bd7000ffdbdf25647262675f6e6f70725f6374725f6165733139320000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000009c000000000000000200000000000000000000000000000000001300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f105368900ba0a"], 0xe0}, 0x1, 0x0, 0x0, 0x60000801}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x12, &(0x7f0000000040)=ANY=[@ANYBLOB="180200000000000000000000000031d0851000000600000018040000", @ANYRES32=0x0, @ANYBLOB="0000000000000041bfff00000000000018000000000000000000000000000000950000000000000018010000202070250000000000202020db1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b502000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0xb9, &(0x7f0000000100)=""/185, 0x0, 0x49, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xecc}, 0x94) 3.297300284s ago: executing program 4 (id=9278): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="000000005e44f954c6b311a854a7ce673b46342911d1f0619eb513229688763fe15f0d4aa096c02e25cced2fcbf03a1058b204cd4e661b715479c92805e4805e1a6a5d8a", @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB='\x00'/27], 0x50) socket$can_bcm(0x1d, 0x2, 0x2) (async) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f00000002c0), 0x10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, 0x0, 0x0) readv(r1, &(0x7f0000000200)=[{&(0x7f0000001b80)=""/4096, 0x1000}], 0x1) sendmsg$can_bcm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES64=0x0], 0x80}}, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000640), 0x0, 0x8000}, 0x38) bpf$PROG_LOAD(0x2, &(0x7f0000000680)={0x3, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000080)={0x8, 0x8, 0x204}, 0x10) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="500000000206030000000000000000000d0000000c000300686173683a69700005000400000000000900020073797a31000000000c000780080008400000005d05000500020000000500010006"], 0x50}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000740)={0x40, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0xfffffffe}}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x8}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) (async) sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000740)={0x40, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0xfffffffe}}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x8}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) recvmsg(r4, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPSET_CMD_LIST(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) socket$unix(0x1, 0x2, 0x0) (async) socket$unix(0x1, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x4d2f02, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000d00), 0xffffffffffffffff) (async) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000d00), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)={0x40, r6, 0x1, 0x1, 0x25dfdbf8, {}, [@ETHTOOL_A_FEATURES_WANTED={0x14, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x8}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="120000000400000004000000"], 0x48) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=@newtfilter={0x54, 0x2c, 0xd27, 0x30bd29, 0x40000002, {0x0, 0x0, 0x0, 0x0, {0x0, 0x6}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{0x7}, {0x7, 0xffffffffffffff5c}}}]}]}]}}]}, 0x54}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=@newtfilter={0x54, 0x2c, 0xd27, 0x30bd29, 0x40000002, {0x0, 0x0, 0x0, 0x0, {0x0, 0x6}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{0x7}, {0x7, 0xffffffffffffff5c}}}]}]}]}}]}, 0x54}}, 0x0) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000000406010200000000000000000000000105000100"], 0x24}, 0x1, 0x0, 0x0, 0x20000020}, 0x800) (async) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000000406010200000000000000000000000105000100"], 0x24}, 0x1, 0x0, 0x0, 0x20000020}, 0x800) sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x40, 0xb, 0x6, 0x5, 0x0, 0x0, {0xa}, [@IPSET_ATTR_ADT={0x20, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x42}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0xfda}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x40d0}, 0x4000000) 3.034095192s ago: executing program 4 (id=9282): socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xaf1}, 0x8) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback, 0x1}, 0x1c, &(0x7f0000000380)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x885) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbfa, {0x0, 0x0, 0x0, 0x0, 0x40810}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4008011}, 0x4004) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x5, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x50) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket(0x10, 0x80003, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001440)={&(0x7f0000000fc0)=@delpolicy={0x5c, 0x14, 0x1, 0x70bd26, 0x25dfdbfb, {{@in6=@dev={0xfe, 0x80, '\x00', 0x23}, @in6=@private1, 0x4e23, 0x0, 0x4e22, 0xc, 0xa, 0xa0, 0x20, 0x2f}, 0x7fffffc, 0x2}, [@sec_ctx={0xc, 0x8, {0x8, 0x8, 0x0, 0x4}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8001}, 0x4000000) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x5, 0x2, {{0x6, 0x1, 0x3, 0x0, 0x8}, 0x7, 0x0, 0x5, 0xffffffff, 0x2, 0x1, 0x12, 0x19, 0xfd, 0x87, {0x7, 0x7, 0x2, 0x0, 0xe9ac, 0x1}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x2000000}, 0x0) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000002060101000000000000000000000000050005000a000000050001000700000005000400030000000900020073797a310000000011000300686173683a6e65742c6e65740000000048225137a8016a1dcbe2e88b61a93149b574bc416dc82d1a595a42ba836857b98ad1e470e03f8e6f26255b72044124bafb57cc2269453cd65d849278e7c2137be7c4d4f277eb375149cd158e7a0d5894da5fad30819f"], 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x2000000, 0x12, r8, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000440)={0x3, 0x4, 0x4, 0xa, 0x0, r2, 0x6b3c0fe, '\x00', 0x0, r8, 0x1, 0x0, 0x4}, 0x50) r9 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000a80)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0xc, 0x4}, {}, {0xb, 0x9}}}, 0x24}}, 0x20040054) bind$bt_l2cap(r9, &(0x7f0000000000)={0x1f, 0x2, @any, 0x0, 0x2}, 0xe) sendmsg$IPSET_CMD_DESTROY(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c0000000306010200000000008000000700000a0500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40814) 2.186036591s ago: executing program 1 (id=9290): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x44000, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r1, &(0x7f0000001140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001100)={&(0x7f0000000140)={0xfa8, r2, 0x100, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0xf, 0x71}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_FRAME={0x13b, 0x33, @mgmt_frame=@assoc_resp={{{0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1}, {0x5}, @broadcast, @device_b, @initial, {0x2, 0xb}}, 0x86, 0x68, @random=0x3, @void, @void, [{0xdd, 0x28, "b151db9a50fca7567eb9d66f6bf5c6118373a9135be555004c5d9121470a09a70f6527cad6627398"}, {0xdd, 0xed, "6ef7790a53a849fb47a5a2cd9f4297969372c70dcbb96f266c1e8c0b66172e2d9a49b010bf2a3f8ea7c4a5d26715e5d188de0b45b431e6cf413bf6ddaaa59bec5b890a5b85695a4eedbbc9a8894dde446a73e01a478fdb207ac55dbc737b70f5a65caac26b5b4f56f4c9afb93c3b5dc73f370f52cc493eb607a95a89bdddc29790d629a147d25d56922a321f1c6f70cfec1d82aebd395ea2b90bc3e948f80676139641b4e93508b5be8b8a5457e2194b255f540360bffea5918e31903eeeeb814a545fcee7f6190b2cff6ce8e64f31185afe3620046d3841b0d822188ce5853d878420dc8b08d00d07da9373a8"}]}}, @NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@rts={{}, {0x34f5}, @device_a, @device_b}}, @NL80211_ATTR_FRAME={0x208, 0x33, @data_frame={@msdu=@type11={{0x0, 0x2, 0xb, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1}, {0x9}, @broadcast, @broadcast, @broadcast, {0x2, 0x4}, @device_a, @value={0x5, 0x0, 0x2, 0x0, 0x9}, @value=@ver_80211n={0x0, 0xac1, 0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x1}}, @a_msdu=[{@device_a, @device_b, 0x58, "dc815adcf31129e9cf8c6ec281c14186d83265d98fd2c88e111586370b4da12a7f2ff71da940a7976f39b06856080806d0fddcf9f116de123b17095505e87a799e37d787633891fc49639f559f223c9e3826dc1ded48af36"}, {@device_b, @device_b, 0x64, "8c04fa0fd6f967d2b66ef8966385fe6ce185e2a4c8dd42ec45543a6478bfa968026be64176ed755bb0de382e0818a27115e356ce79dc9831f360679dfc5d3e978c43f2787180f121ea9fb6293908ee7c312ac872ffdffa164771c3d151c33aaad8fcc891"}, {@device_b, @device_b, 0xb6, "599c28e71252703bdc558058028d6c906d6f8b2f28de44fc6719c141633d76a724696143fcb397532827a3bd15328a73e6b2047162d03195dd77178cc02f3b0c938280e08a81fc035cb3013600ebe781a6c9749c828a123831783a4cda807b60213474962d54ad1ccb7e14aff6389e1d89c7ccb3fe8667de029fb918c6fb3c6ba0b6bcb17a50fddadde3f4c02dd01da7c89e2e6fa7effe8bb1282d9824a1802b0aa91158bfc94d6fcfffe5145765d4874d7bcbb40adf"}, {@device_a, @broadcast, 0x30, "a510232d99e10f03f3a1b31d71a73a7b390ebf2b2b625938c1ece5da3a02ec0df8154b39efc41e9386ba6bce0e84aac5"}]}}, @NL80211_ATTR_FRAME={0x839, 0x33, @data_frame={@a_msdu=@type01={{0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1}, {0x4d}, @device_b, @random="3ff9a777bc6d", @random="105c576650e1", {0x7, 0x6}}, @random="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"}}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_FRAME={0x3c6, 0x33, @data_frame={@msdu=@type10={{0x0, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1}, {0x2}, @random="cf9bf494839c", @device_a, @device_b, {0xf, 0x6}}, @random="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"}}]}, 0xfa8}, 0x1, 0x0, 0x0, 0x20000040}, 0x10) sendmsg$TIPC_CMD_SET_NETID(0xffffffffffffffff, &(0x7f0000001240)={&(0x7f0000001180), 0xc, &(0x7f0000001200)={&(0x7f00000011c0)={0x24, 0x0, 0x200, 0x70bd26, 0x25dfdbfe, {{}, {}, {0x8, 0x2, 0x2}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x8040) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r0, 0x4008941a, &(0x7f0000001280)=0x2) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, &(0x7f0000001840)=0x0, &(0x7f0000001880)=0x4) sendmsg$inet(r1, &(0x7f0000001980)={&(0x7f00000012c0)={0x2, 0x4e22, @multicast1}, 0x10, &(0x7f00000017c0)=[{&(0x7f0000001300)="fd9b446cf5ec7ed69b492ec420ebd55e3591b3cbbf8a29b46219c349248787979d4005e5f8dbbb24b8f554753d3a48b7c069d8e0b95635d51d4310ef577d7ea9cab1de8eaa91b9dc1d7ddafbe03ca5a2c2aaf527dac087ec70dbdddc7813c4b6de9a62848be0c42db2be71e964744656b0e710635637a7c6987f1c4d90f2453cbcd24ddde3bd492ef8038115c14837311594c5686cbed1afc3d2286f6f1f5e9b637a9455e6a7ac1532932396e99055f5b062ee7f3c4d734f83c65588", 0xbc}, {&(0x7f00000013c0)="ee938a3ac8081866cef43a7b36637df5abdcc8c724b9e7e69eeaf1efe91d3fe3dee071905e641970877aef4a89f2a9b0b4537bc2947b8d73c5c56812bc6b5d1af3efd74443da10c395224ff98bac608114914b269fec0ac1b098cfc79982c3114d8153989d3b6fc67e02f17cb2b743d48a5fb1421149bc80c79406f2cf8becdadc212f329e6d8a80f754eb3423dd80e422b775eedc7b927203f43ee7bff68c591bc6adb4cb4225194812410737c0284d25698ceffb5744e4b27a7f00bb217952984f960a", 0xc4}, {&(0x7f00000014c0)="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", 0xfb}, {&(0x7f00000015c0)="d612689da7cef53df5693113012777c3eb52d1b0a9a280c9cdc2e6cc42332839eee67d6cbd91bdfc19c6f99c69fe74be1e46827187a24766f3da975e37f3261913f51190033b79f25f279c0b34909d89f13ff5243ff3cf5c551e59ab99b0d64eb59fbf270c5b4cca9f9a9d9d2ffff4b827102dc52e42c37017e4b644842595fa69efe248b97facabf64bdbe927ae64ecac31c167370101ca6483f3e1dc0a785beb51107610ee98f281158e16c20d15cf7e4eb99f8a93efaf527308d68d8cda1565ebe509883a2f891dfaf6bf5d8de44fe6543934dd7201f36ecac25193d7af27ad43ec6121987f", 0xe7}, {&(0x7f00000016c0)="5ece2de49bceed8aaa01dd13bc85cbbc196be24518b4e31beadc6cdf89426e93d21e9ca780baa457dafca39a9e812acf45534234c6e44d6b4a269cddc65e49b2e49d413010a4cc60ea72aba551b48873e1bf491dc9b6e3388f95b28ed9088e41ff01eb26ef7d5df7a78b0f04f69a6bb2c0eba13e25bb8585a587b6", 0x7b}, {&(0x7f0000001740)="9957afae46290c03ef04df76ea28396d217958", 0x13}, {&(0x7f0000001780)="5db34e28bcf1301c23d851988147e51157c6de48", 0x14}], 0x7, &(0x7f00000018c0)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0xcb}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @loopback, @rand_addr=0x64010101}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x4}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @rand_addr=0x64010102, @rand_addr=0x64010101}}}], 0x90}, 0x20050041) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, &(0x7f00000019c0)={r1}) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_BEACON(r5, &(0x7f0000002300)={&(0x7f0000001a00)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000022c0)={&(0x7f0000001a40)={0x874, r2, 0x400, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IE_PROBE_RESP={0xc7, 0x7f, [@preq={0x82, 0x20, {{0x0, 0x0, 0x1, 0x0, 0x1}, 0x4, 0x13, 0x0, @device_a, 0x548f, @value=@device_b, 0x4, 0x3}}, @supported_rates={0x1, 0x3, [{0x18, 0x1}, {0x9, 0x1}, {0x4}]}, @ext_channel_switch={0x3c, 0x4, {0x1, 0x3, 0x24, 0x1}}, @gcr_ga={0xbd, 0x6, @broadcast}, @random={0x6, 0x8c, "95b86daa426746fae4e495fba6e0c796c69d667b46d816b6fca35a817601bead9cb80dc5c4c9bfccf595714b3fe66508fa98d38233fde7ad82bc44ec9ef99c7b4296ed79a62a4d5ca31db36a3838b1d512fa51a241ade2f71e79c0b89866a2c1a9f67ef77b3d14b18c71cd7a99d22b52bfe8b56846a9ad441f1a1812de1fb06eb77e8a27ee5e8199e44d3b07"}]}, @NL80211_ATTR_FTM_RESPONDER={0x54, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_LCI={0x4d, 0x2, "374c4a523478b899dfe4d35276753a0d9920d1f47f292b226bc80cf017b21c6ac237eaf8866cbc49f009f5dafd507b587dd32df096c3c1b91d6522f2132f5bd5df1c425a5cadc615da"}]}, @NL80211_ATTR_PROBE_RESP={0x58a, 0x91, "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"}, @NL80211_ATTR_BEACON_TAIL={0x119, 0xf, [@measure_req={0x26, 0x98, {0x8, 0xb, 0xed, "1ca671095f5844e8de6db58ebe3864b2a09a8ec2ea54b70c75c44a9a037367a3358538dafd575a1520db8d73db1174cb1c2bd1b0f4c158e61483e06b5ddf35f49d5c5ed44017430702f360bbb7ff597d958dbe04ee94003fc65174ef90506eb222d101b800bc35d9d03bae6ac172e699646140e3c7499722bcc7b2501930e0986aebfd6d9e6c66602136fa32e3fc60714c3d6e1dcc"}}, @tim={0x5, 0x79, {0x9, 0xd7, 0x4, "1f52ff97864ae703f1239f083e69d63ba60bf60cf30a96cbd68cffc8d97e59c155db776421790d53ef47506acc978d617b41b375a24c1071e3c1381974a8535d6304cdd06e1492cc553c769723229781df7851e8a7d725560b98d594b88223878c088edca8349caa021ca8c69984421e18a261952d20"}}]}, @NL80211_ATTR_BEACON_TAIL={0x94, 0xf, [@gcr_ga={0xbd, 0x6, @device_b}, @preq={0x82, 0x4c, {{0x1, 0x1, 0x1, 0x0, 0x1}, 0x40, 0x74, 0xc, @device_b, 0x9, @value, 0x0, 0x7fff, 0x4, [{{0x0, 0x0, 0x1}, @device_a, 0x1}, {{0x1, 0x0, 0x1}, @device_a, 0x5}, {{0x1, 0x0, 0x1}, @device_b, 0xff}, {{0x1, 0x0, 0x1}, @device_a, 0x8}]}}, @dsss={0x3, 0x1, 0x5}, @perr={0x84, 0x35, {0x6, 0x3, [{{}, @device_b, 0xc, @void, 0x23}, {{0x0, 0x1}, @broadcast, 0xb, @value=@broadcast, 0x3f}, {{0x0, 0x1}, @device_b, 0x7f, @value, 0x1c}]}}]}]}, 0x874}, 0x1, 0x0, 0x0, 0x6028}, 0x80) sendmsg$NL80211_CMD_GET_MPP(r5, &(0x7f0000002400)={&(0x7f0000002340)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000023c0)={&(0x7f0000002380)={0x38, r2, 0x300, 0x70bd2d, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0xe, 0x77}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x38}}, 0x4008800) ioctl$sock_inet_SIOCRTMSG(r1, 0x890d, &(0x7f0000002480)={0x0, {0x2, 0x4e24, @private=0xa010100}, {0x2, 0x4e24, @local}, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x2a}}, 0x108, 0x0, 0x0, 0x0, 0x5, &(0x7f0000002440)='ipvlan1\x00', 0x2, 0x0, 0x1000}) sendmmsg$inet(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000002500)="b0587631660e9ce76e52416e45410a9f6604229d540858b9e298d0fb6dddabdf4c63f583596ff311b6ae0b88506137b78d230f79f0f8c3504f5978f892abdaf305caa35ba779bbc8402a35cc99deab4df7d57ed24f738174d84d38412927721f8b3dcaa811a6a84f94c775b466296bfc67d801e48d60627859", 0x79}], 0x1, &(0x7f00000025c0)=[@ip_ttl={{0x14, 0x0, 0x2, 0x3}}, @ip_retopts={{0x68, 0x0, 0x7, {[@rr={0x7, 0xf, 0xe, [@empty, @multicast1, @rand_addr=0x64010101]}, @ssrr={0x89, 0xb, 0x64, [@loopback, @multicast2]}, @noop, @timestamp={0x44, 0x2c, 0xc5, 0x0, 0x9, [0x80, 0xdf5, 0x101, 0xff, 0x5, 0x7, 0x1, 0x8, 0x8, 0x9]}, @ssrr={0x89, 0xf, 0x16, [@rand_addr=0x64010102, @multicast1, @broadcast]}]}}}], 0x80}}, {{&(0x7f0000002640)={0x2, 0x4e23, @multicast1}, 0x10, &(0x7f0000003680)=[{&(0x7f0000002680)="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", 0x1000}], 0x1}}, {{&(0x7f00000036c0)={0x2, 0x4e20, @local}, 0x10, &(0x7f0000003780)=[{&(0x7f0000003700)="d615b1116c1aa343cba0c631d34fb73e5c090a5d4f78395e06314a99c8cdbdb9a829fd8d2eb6dc89384694574e0b2df63b252aef7d53", 0x36}, {&(0x7f0000003740)="d11de4d3e40b72c3811ca8782479b649fbc85e1b1432520fa307a1d2f82dde6fb81a27bee51f583c152f4f1ff25af1814e59dad2a0bb827a905b8259c446df5e", 0x40}], 0x2, &(0x7f00000037c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @remote, @rand_addr=0x64010100}}}], 0x20}}, {{&(0x7f0000003800)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10, &(0x7f0000003b80)=[{&(0x7f0000003840)="20d6b5467f0cb041fe0aa83e78fe6f5780a628803f0c67ef54accaac3e9b1858843d7b295c492eaf", 0x28}, {&(0x7f0000003880)="618dfe55e1ce9dd6f2350cea56d0e4807c4a7452744f771b3c571ef914066f3a95a1332c0c149c88ec6e50619b7d81ffbb6b963899751f5b655eea532afaf287a3b86ab7150561d9ed514e8befc2ba01ae8645fa3c51f5943f95150f23deeefdc09eb38bdf97466d43e3b16e30ca459a54ef5ab76c6f3fadb3c40814efd794c334179a2d5754b3d4b745d76095e8844b2ae7806105d0feac446bdbce9c1f3ee29c840c6da4418b0846e2f3ee9a025c9578353e8800c8d3ae58f98849a4b3", 0xbe}, {&(0x7f0000003940)="dbffa2ea40e798ff893460e4e7502f27ec37787462ac35ffa8c5ac9edfd3e1e9d5eaf65f056c4309d94c45d96ff0d10f64c5ce723b5bceeec7ede425d822f71bf3c3957d6f7ba1441c3e283cf466479c168cd3c7688c99884a4b2e40f83c731c462ae456f25d9e3028bbd4e07577", 0x6e}, {&(0x7f00000039c0)="47cac990742ea0ff4488645f91ee039137c3ad95dd0d480f7ed561cfb9f715755f2cd43c859a00c57c70c124857d99f7850fa750f301652279442ef4932c5a3b7586e01015477b080596198a1548a9cf41fee0ff0b8e8e6fb390652d7796286aeeb0de68c1ce77fa117827c7bbd4036944896b632077e6a3710d1936e80b9f562c356a317041e4d01b3a83f25068c26f7163b3ef4526", 0x96}, {&(0x7f0000003a80)="5a668887c8fbe19f81be92b90b11b6d330294203656179fcdb801634a463de177dc7c69eb8014212ff26ae245f9efa5b9b9eb341918d91de55", 0x39}, {&(0x7f0000003ac0)="2014cd265c075df23f049ec18c09e2acd01ed3020642c3a14a89b54ca51662f107f39761619bd28edd4ebcb053052ca8a31d3cd8fdd2eb1eb6ec06059f4a6fb9f46dac6634dd102a3d2d9fa98f48eb110769913d2ea6308d1b8513cb40fa721277cf0dafd341a6a402c70e4afa5f1e6b3059841c8d4a9e2e29cd8e68829b7c9902b6cb6aa1139b8ad1b34008db74ff5a71ec79c2dd", 0x95}], 0x6, &(0x7f0000003c00)=[@ip_retopts={{0x84, 0x0, 0x7, {[@rr={0x7, 0xb, 0xfd, [@loopback, @multicast2]}, @lsrr={0x83, 0x1f, 0x56, [@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @dev={0xac, 0x14, 0x14, 0x43}, @remote, @local, @loopback]}, @noop, @lsrr={0x83, 0xf, 0x97, [@broadcast, @loopback, @multicast1]}, @timestamp_addr={0x44, 0x24, 0x5e, 0x1, 0x7, [{@empty, 0x601}, {@rand_addr=0x64010102}, {@multicast2, 0x8}, {@dev={0xac, 0x14, 0x14, 0x12}, 0x1}]}, @end, @timestamp={0x44, 0x10, 0x3d, 0x0, 0xb, [0x3, 0x1, 0x1cf]}, @ra={0x94, 0x4}, @end]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x9}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x8}}], 0xb8}}], 0x4, 0x44800) sendmsg$NL80211_CMD_TDLS_OPER(r5, &(0x7f0000003e80)={&(0x7f0000003dc0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000003e40)={&(0x7f0000003e00)={0x34, r2, 0x8, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0xc140, 0x6f}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x34}, 0x1, 0x0, 0x0, 0x4001}, 0x4008000) sendmsg$NL80211_CMD_LEAVE_IBSS(r1, &(0x7f0000003f80)={&(0x7f0000003ec0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000003f40)={&(0x7f0000003f00)={0x1c, r2, 0x100, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x48804}, 0xc000) getsockopt$IP_VS_SO_GET_SERVICES(r5, 0x0, 0x482, &(0x7f0000003fc0)=""/137, &(0x7f0000004080)=0x89) pselect6(0x40, &(0x7f00000040c0)={0x2, 0x10000, 0x0, 0x8, 0x7f, 0x44, 0x8, 0x1}, &(0x7f0000004100)={0xe1, 0x8000, 0xae4, 0x8, 0x9, 0xf, 0xfffffffffffff8e7, 0x2}, &(0x7f0000004140)={0x15, 0xf, 0x6, 0xdf5, 0x10000, 0x7, 0x9, 0xf66}, &(0x7f0000004180)={0x77359400}, &(0x7f0000004200)={&(0x7f00000041c0)={[0x8]}, 0x8}) ioctl$int_out(r0, 0x0, &(0x7f0000004240)) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000004280), r6) sendmsg$nl_route_sched(r1, &(0x7f0000004c80)={&(0x7f00000042c0)={0x10, 0x0, 0x0, 0x10106000}, 0xc, &(0x7f0000004c40)={&(0x7f0000004300)=@deltfilter={0x920, 0x2d, 0x206, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xffff, 0x1}, {0xe, 0xfff3}, {0x8, 0x6}}, [@TCA_RATE={0x6, 0x5, {0x5, 0xf}}, @filter_kind_options=@f_flower={{0xb}, {0x58, 0x2, [@TCA_FLOWER_CLASSID={0x8, 0x1, {0x1, 0xe}}, @TCA_FLOWER_KEY_FLAGS_MASK={0x8, 0x30, 0x1000}, @TCA_FLOWER_KEY_CVLAN_ID={0x6, 0x4d, 0x4fc}, @TCA_FLOWER_KEY_ENC_IPV6_DST_MASK={0x14, 0x22, [0xffffff00, 0xff, 0xffffffff, 0xffffffff]}, @TCA_FLOWER_KEY_SCTP_DST_MASK={0x6}, @TCA_FLOWER_KEY_PORT_SRC_MAX={0x6, 0x58, 0x4e23}, @TCA_FLOWER_FLAGS={0x8, 0x16, 0x9}, @TCA_FLOWER_KEY_CT_ZONE={0x6, 0x5d, 0x1}, @TCA_FLOWER_KEY_PORT_DST_MAX={0x6, 0x5a, 0x4e24}]}}, @TCA_RATE={0x6, 0x5, {0x80, 0x3}}, @TCA_CHAIN={0x8, 0xb, 0x7}, @TCA_RATE={0x6, 0x5, {0x34, 0x4}}, @TCA_RATE={0x6, 0x5, {0x8, 0x1}}, @TCA_CHAIN={0x8, 0xb, 0x7}, @filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_FROM={0x8, 0x3, 0xa4}]}}, @filter_kind_options=@f_fw={{0x7}, {0x848, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0xfff3, 0x5}}, @TCA_FW_POLICE={0x83c, 0x2, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x7}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x1}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x4}, @TCA_POLICE_RATE64={0xc, 0x8, 0x8000000000000001}, @TCA_POLICE_RATE={0x404, 0x2, [0x4d, 0x4, 0x5, 0x4, 0x2, 0x0, 0x4, 0x1, 0x8, 0x8000, 0x5, 0x6, 0xffff, 0x8, 0x2, 0x9, 0x2, 0x3, 0x2, 0xeb57, 0x8, 0x0, 0x4, 0x50, 0x8f1f, 0x3, 0x432e3d68, 0x9, 0x57e, 0x7ff, 0x5, 0x9, 0x2673, 0x7fff, 0xa2c, 0x2, 0xabbe, 0x3, 0x1, 0x5, 0xffffffff, 0x5, 0x40000000, 0x10, 0x1, 0x3, 0xfffffe00, 0xd, 0xffff8001, 0x6, 0x7, 0x8, 0x215, 0x3, 0x379, 0x401, 0xc209, 0xa0cf, 0x24000, 0xcd5, 0xf, 0x3, 0xcc, 0x3ff, 0x9f1, 0xffffffff, 0x101, 0x717, 0xfffffffd, 0x1, 0x4, 0x80000001, 0x86, 0xc5b, 0x10, 0x4, 0x800, 0x101, 0x3, 0xe8, 0x6b, 0x7, 0x7, 0x2, 0x6, 0x2, 0xfff, 0x10000, 0x2, 0x10, 0x101, 0x4df, 0x9, 0xe, 0x7, 0x8, 0x4, 0x80, 0x1, 0x4, 0x5, 0x1, 0x101, 0x7, 0x8, 0xda6e06a6, 0x8, 0x2, 0x0, 0x6d, 0x8fc, 0x1, 0x6, 0xffd, 0x100, 0x6, 0x6, 0x9, 0x5fa, 0x86, 0x6, 0x0, 0x800, 0x1, 0x8, 0x7, 0x1ff, 0x100, 0x393, 0x873, 0x80, 0xfffffffd, 0xffffffff, 0x213c, 0x4, 0xfffffff0, 0x10000, 0x8, 0x2, 0x3, 0x3, 0x3, 0x0, 0xfff, 0x1, 0xffff0001, 0x1a09, 0x2305, 0x3, 0xd8, 0xe75, 0x5, 0xffffffff, 0x7, 0x8, 0x6, 0x7, 0x4, 0x0, 0x2, 0xae, 0x3, 0x9, 0xff, 0x10000, 0x1, 0x6, 0x2a, 0x7fff, 0x0, 0xffffffff, 0x4, 0x8, 0x5, 0xff, 0x9, 0xfffffff9, 0x1, 0x80, 0xc, 0x800, 0x5, 0x3ff, 0x80, 0x16ca4917, 0x2, 0x9, 0x3ff8, 0x3, 0x4, 0x5, 0x9, 0x1, 0x5, 0x8, 0x7f, 0x80000000, 0x6, 0x7f, 0x18be331f, 0x4, 0x80000000, 0x6d30e886, 0x9, 0x4, 0x6, 0x1, 0x9, 0x4, 0x400, 0xffff, 0x401, 0x0, 0x2, 0x4ead, 0x6, 0xb, 0xb, 0x4, 0x2, 0x5, 0xffffffff, 0x6, 0xfffffffc, 0x0, 0x8001, 0x42ac703a, 0x81, 0x5, 0x5c5, 0x10, 0x100, 0x6, 0x1000, 0xd19, 0x2b42, 0x6, 0x80000001, 0xb8, 0xea9, 0x0, 0x4, 0x400, 0x8, 0xfaf, 0x3, 0x4, 0xfa3a, 0xced6, 0x6, 0xfffffffb, 0xe0000000, 0x9, 0x8, 0x9, 0x401]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x4}, @TCA_POLICE_RATE={0x404, 0x2, [0x3ff, 0x0, 0x0, 0xff, 0x3, 0xcf3a, 0x9, 0x7, 0x5, 0x9, 0xffffffff, 0x80000000, 0x52, 0x1, 0xfffffffa, 0xcd, 0xcb5, 0x305d, 0xa229, 0x4, 0x9, 0x3, 0x2, 0x5, 0x3c, 0x8da2, 0x3, 0xfff, 0x7, 0x9fd, 0x0, 0x4, 0x7, 0x1, 0x0, 0x0, 0x7fff, 0x8000, 0xdb, 0xffffffff, 0xf, 0xded, 0x6, 0x5, 0x4, 0x9, 0xf, 0x8000, 0x8001, 0x2, 0xa7b, 0x6, 0xc, 0x1, 0x5, 0xf, 0x40, 0x0, 0x2, 0x0, 0x5, 0x3ff, 0x1, 0x10, 0x1, 0x0, 0x4, 0xd, 0x7, 0x4, 0xfffffffd, 0x3, 0xa, 0x2655, 0xff, 0x99a, 0x1, 0x8, 0x0, 0x7, 0x7, 0x57, 0x2, 0x53, 0x1b, 0xb, 0x8, 0x8, 0xd2d, 0xa, 0x9, 0xe0, 0x81, 0xff7, 0x3ff, 0x9, 0x3, 0x9, 0xfffffff5, 0x0, 0xffffff01, 0x2, 0x1, 0xd2b, 0x9, 0x7, 0x6, 0xffff, 0x99c, 0x4, 0x4, 0x1, 0x6, 0x3, 0x80000001, 0x4, 0x66, 0x6, 0x1, 0x2, 0xfffffffe, 0x6, 0x2, 0x6, 0x1000, 0x0, 0x3, 0x3ff, 0x9, 0x7, 0x9, 0x2, 0x2, 0xe01, 0x431f, 0x597c, 0x4, 0x4, 0x1, 0x80000001, 0x0, 0x3, 0x5, 0x5, 0x8, 0x30, 0xb604, 0x200, 0x6, 0x1000000, 0x3, 0x7, 0x7, 0x4, 0x1, 0x42938b4, 0x5, 0x1bf, 0xfff, 0x7, 0x40, 0xffffc0c9, 0x81, 0x8, 0x3, 0x7ff, 0x7, 0x6, 0x8, 0xff, 0xaf, 0x2ae, 0x1, 0x81, 0x7fffffff, 0x3, 0x8, 0xc6f1, 0x6, 0x2f, 0x6, 0x2, 0x6, 0xa, 0x1000, 0x3, 0x5, 0x0, 0xf3, 0x7, 0x8, 0x0, 0x81, 0x4, 0x6, 0x672, 0x8, 0x6, 0x4, 0x40, 0x8000, 0x0, 0xb9, 0x8, 0xffffffff, 0xb, 0x2, 0x8, 0xd94, 0x0, 0x8, 0x8, 0x4, 0x8, 0x9, 0x5, 0x4, 0x1022, 0x8, 0x1, 0x3ff, 0x2, 0x0, 0x79cbb445, 0xfff, 0xe014, 0x8, 0x3, 0x7, 0x3, 0xe306, 0x0, 0x6d, 0x7e, 0xed, 0x3ff, 0x9, 0x9, 0x1dc5, 0x4, 0x5, 0x6, 0x80000001, 0x4, 0x8, 0xa2, 0xfffffffe, 0x1, 0x101, 0x10, 0x25, 0x8, 0x6, 0xd, 0xde8a, 0x40]}]}]}}]}, 0x920}, 0x1, 0x0, 0x0, 0x4060060}, 0x0) sendmmsg$inet(r1, &(0x7f0000005440)=[{{&(0x7f0000004cc0)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000005040)=[{&(0x7f0000004d00)="a2dfecf74d1dc9c72562fb8e98dff6b4457896257ed8e64be1692e904db8400bdf0eaae1c8fccb564152d70be924239d7660a01efed6209faa48941f808cfb1dbf85d94e58e0d33a9698e2d09ece8c2bb70bd7f747fdcbff58ee0ad0b644e9cf2c769ecef8c6500381ed8e27a975b95f5e880ba52d7d1fc8879a63d47039008edb98302daafcf4bb344ffb", 0x8b}, {&(0x7f0000004dc0)="7dbcd580e6cb9fc885447e26011051f2051b99", 0x13}, {&(0x7f0000004e00)="d6d9caf97a5c742dd2e1601f7023d3c4e7f6536e023c9ac86ceaa3ed7f1032dac3073aef2e78db8c645211ad5d873181ef7d63701f1abe2fefa8327395103e72f052aa149796f1e08c9433bc40e6438d9058b32cf48716e4829f902d516404b241455b3c75ea8c06ae8e85e926dbf17e71ccd5224752d7b64784699a844f38ac888ded96eb2ab7665b07a645c22d61c11647db2f326d0c7537a6103763897f7e5cf711f816205409ef47d5130f9ae22057f2faa5255239a09dfe94f0b41d0605e7071c1fe74765a89c4523dba4538a14e5daddd8ceee851e7306", 0xda}, {&(0x7f0000004f00)="e2b9f585a3d42d5fa98bd3a40b34c29993346f3a3649cf56b294c0203e923c916ffec034c7a8cf64762ef2b642681bde4b19", 0x32}, {&(0x7f0000004f40)="4f5f1584f695e774c3873688b18363d294bf81fb3245b34cab17398f24de4c6c0cf357dc8f8341ac2e349d9d5e30ae49862a94b7e4085fae709d437506da1ed33e80847411b58d37117e092a93b7cf82e444b9c42854c83d184315726995b7333c34c8164909538451c279eac754aac35e41458101aaf65744ae76385491cdaae7c8b48818d32d2933afcf1e4354781559c80384e268743a79168d2cb759965f68449ef4fb954944d277f3fc", 0xac}, {&(0x7f0000005000)="20ba200820e1d27f93b2da694b4285ddce52fe8815d7b261dd5102ea4e345210b1301e2aa5fa6f4296a4b730d201b8cba5427f76f4c90b5fa028f44772e2", 0x3e}], 0x6, &(0x7f00000050c0)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x4}}, @ip_retopts={{0x4c, 0x0, 0x7, {[@timestamp_addr={0x44, 0x3c, 0x82, 0x1, 0x3, [{@empty, 0x5}, {@private=0xa010100, 0x3}, {@multicast1}, {@rand_addr=0x64010101, 0x7c2c}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x9}, {@empty, 0x6}, {@loopback, 0xfffffc41}]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x6}}, @ip_retopts={{0x3c, 0x0, 0x7, {[@end, @noop, @timestamp_prespec={0x44, 0x24, 0xc8, 0x3, 0x9, [{@dev={0xac, 0x14, 0x14, 0x60}, 0x5}, {@local, 0x800}, {@multicast2, 0x2}, {@empty, 0xb07}]}, @generic={0x44, 0x6, "45e477bf"}]}}}, @ip_retopts={{0x78, 0x0, 0x7, {[@lsrr={0x83, 0x13, 0x73, [@empty, @dev={0xac, 0x14, 0x14, 0x44}, @private=0xa010102, @broadcast]}, @timestamp_addr={0x44, 0x54, 0x53, 0x1, 0x5, [{@local, 0x8001}, {@broadcast, 0x1ff}, {@rand_addr=0x64010101, 0xa81}, {@local, 0x9}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3}, {@multicast1, 0xffff}, {@local, 0x7}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x6}, {@dev={0xac, 0x14, 0x14, 0x34}, 0x10}, {@rand_addr=0x64010102, 0x41}]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @broadcast, @empty}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x200}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xd4}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @loopback}}}, @ip_retopts={{0x88, 0x0, 0x7, {[@ra={0x94, 0x4}, @timestamp_prespec={0x44, 0x2c, 0xed, 0x3, 0xd, [{@loopback, 0xfffffffd}, {@empty, 0x400}, {@local, 0x5}, {@broadcast}, {@multicast1, 0x5}]}, @lsrr={0x83, 0xf, 0x5c, [@multicast2, @local, @private=0xa010101]}, @cipso={0x86, 0x31, 0x1, [{0x0, 0xb, "8fc81822f843f2705b"}, {0x7, 0x8, "cb7a559170fa"}, {0x1, 0x12, "7d3de527972ddb2764f378334f2e7591"}, {0x6, 0x6, "55898374"}]}, @ra={0x94, 0x4}, @end]}}}], 0x230}}, {{&(0x7f0000005300)={0x2, 0x4e22, @empty}, 0x10, &(0x7f0000005380)=[{&(0x7f0000005340)}], 0x1, &(0x7f00000053c0)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x1}}, @ip_ttl={{0x14, 0x0, 0x2, 0x3}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x3ff}}], 0x48}}], 0x2, 0x40000) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000005500), r1) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r5, &(0x7f00000055c0)={&(0x7f00000054c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000005580)={&(0x7f0000005540)={0x2c, r8, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0x1}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x33c}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x1d}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2404c045}, 0x40048c0) sendmsg$IPVS_CMD_SET_SERVICE(r6, &(0x7f0000005800)={&(0x7f0000005600)={0x10, 0x0, 0x0, 0x1400b}, 0xc, &(0x7f00000057c0)={&(0x7f0000005640)={0x16c, 0x0, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5cb}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x777b7571}, @IPVS_CMD_ATTR_DEST={0x18, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@local}]}, @IPVS_CMD_ATTR_DAEMON={0x70, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @empty}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vlan0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip6erspan0\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip_vti0\x00'}]}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x4}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x7f}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x9}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x80000000}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0x84, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @empty}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip6erspan0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'syzkaller0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x6d}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_to_bridge\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3ff}]}, 0x16c}, 0x1, 0x0, 0x0, 0x880}, 0x4000) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r5, &(0x7f0000005980)={&(0x7f0000005840)={0x10, 0x0, 0x0, 0x80000008}, 0xc, &(0x7f0000005940)={&(0x7f0000005880)={0x90, r7, 0x100, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x19}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x400}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x2}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xbd}], @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x30a}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x19}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x40}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x6}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x80}]}, 0x90}, 0x1, 0x0, 0x0, 0x14}, 0x0) sendmsg$NL80211_CMD_GET_MPP(r6, &(0x7f0000005ac0)={&(0x7f00000059c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000005a80)={&(0x7f0000005a00)={0x80, r7, 0x20, 0x70bd26, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x4, 0x36}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa}]}, 0x80}, 0x1, 0x0, 0x0, 0x80}, 0x0) socket$netlink(0x10, 0x3, 0xb) 2.107376576s ago: executing program 3 (id=9291): socket$kcm(0x10, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x0, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x20, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x2}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x80000}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x7}}}}]}]}, 0x70}}, 0x20040000) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$alg(0x26, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r0, @ANYBLOB="08000100", @ANYRES32=r1], 0x90}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x14) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000061127b000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb}, 0x94) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000480)={0x5b, 0x1403, 0x1, 0x0, 0x100, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'bridge0\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'nr0\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x88}}, 0x20000000) 2.048055241s ago: executing program 1 (id=9292): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$igmp6(0xa, 0x3, 0x2) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000440)={@dev={0xfe, 0x80, '\x00', 0x34}, 0x12, r5}) ioctl$sock_inet6_SIOCDIFADDR(r3, 0x8936, &(0x7f0000000140)={@loopback, 0x80, r5}) setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r2, &(0x7f0000000380)={0x2, 0x4e21, @multicast1}, 0x10) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.bfq.io_merged_recursive\x00', 0x0, 0x0) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000200)='veno', 0xfe01) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000800)=@newae={0x64, 0x1e, 0x301, 0x70bd2a, 0x24dfdbfe, {{@in6=@private1, 0x4d4, 0x2, 0x2b}, @in=@private=0xa010101, 0x3, 0x3500}, [@lifetime_val={0x24, 0x9, {0x5, 0x100000001, 0x8, 0x8000000000000000}}]}, 0x64}, 0x1, 0x0, 0x0, 0x40800}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r2, &(0x7f0000000480)="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", 0xffffffffffffff94, 0x404008f, 0x0, 0x57) recvfrom$inet(r2, &(0x7f0000000080)=""/8, 0x8dcacfa1c6c2afd6, 0xc9100120, 0x0, 0xfffffffffffffd25) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x2}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6b, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 1.97219776s ago: executing program 4 (id=9293): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x2, 0x80805, 0x0) unshare(0x28000600) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYRESOCT=0x0, @ANYRES32, @ANYRESHEX=r1, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000080), &(0x7f00000001c0)='%+9llu \x00'}, 0x20) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)}, &(0x7f0000000140)=0x10) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f00000002c0)={r1, 0x680000, 0xffffffffffffffff, 0x7}) setsockopt$RDS_GET_MR_FOR_DEST(r5, 0x114, 0x7, &(0x7f0000000640)={@llc={0x1a, 0x7, 0x3, 0x7, 0x9, 0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, {&(0x7f00000005c0)=""/69, 0x45}, &(0x7f0000000300), 0x18}, 0xa0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x7a, &(0x7f0000000340)={r4, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) r7 = socket$isdn(0x22, 0x2, 0x22) close(r7) sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000000400)={r6, 0xfe, "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"}, &(0x7f0000000240)=0x106) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000280)={r6, 0x3}, &(0x7f00000000c0)=0x8) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000002e00010027bd700000000000040000000800180009ac0f"], 0x20}, 0x1, 0x0, 0x0, 0x4a804}, 0xe46a0daacb79ca8) 1.783512821s ago: executing program 4 (id=9295): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r2 = socket$packet(0x11, 0x2, 0x300) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r3, 0x4) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000020000103feffffff000000000a000000000000000400010008000a000008000005001e"], 0x50}}, 0x4000850) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="4400000010005204000000fe0500000000000080", @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100626f6e64000000001400028005001100000000000500100000000000"], 0x44}}, 0x0) ioctl$sock_SIOCOUTQ(r4, 0x5411, &(0x7f0000000000)) 1.702922109s ago: executing program 2 (id=9296): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r1) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r1) socket$inet_tcp(0x2, 0x1, 0x0) (async) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r3, &(0x7f0000000940), 0x10) close(0x3) (async) close(0x3) listen(r3, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet_sctp_SCTP_EVENTS(r5, 0x84, 0xb, 0x0, 0x0) connect$vsock_stream(r4, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0xe, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="180200000b0000000000000000000000180100005e6c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000095"], &(0x7f0000000000)='GPL\x00'}, 0x94) (async) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0xe, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="180200000b0000000000000000000000180100005e6c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000095"], &(0x7f0000000000)='GPL\x00'}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r6, @ANYRES32=r7, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r6, &(0x7f0000000340), &(0x7f0000000040)=@tcp=r2}, 0x20) getsockname$packet(r1, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x40) (async) getsockname$packet(r1, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x40) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000300)=@newlink={0x3c, 0x10, 0x501, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, 0x6001, 0x110}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x36}}]}}}]}, 0x3c}}, 0x84000) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r8, 0x12e1b, 0x1a001}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast2}]}}}]}, 0x3c}}, 0x20004000) 1.629770107s ago: executing program 3 (id=9297): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) close(0x3) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x13, r1, 0x6dcf7000) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x1c, 0x140f, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0xc, 0x45, 'rdma_cm\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40004}, 0x0) socket(0x2, 0x80805, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x7a, 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0xac}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x71be}, 0x0, 0x0) close(0x4) 1.574281168s ago: executing program 2 (id=9298): socket$inet_smc(0x2b, 0x1, 0x0) r0 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x80400) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_TIMESTAMP(r3, 0x1, 0x40, &(0x7f00000000c0)=0x1, 0x4) bind$inet(r3, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x28040041, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) sendmsg$inet(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000280)="1f", 0x1}], 0x1}, 0x8c0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000040)=0x193a, 0x4) recvmmsg(r3, &(0x7f00000005c0), 0x40000000000026c, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x20, 0x0, 0x0, 0xfffff010}, {0x6}]}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000002280)=@newchain={0x34, 0x64, 0x400, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xfffb, 0x10}, {0xb, 0x8}, {0xffff, 0xffe8}}, [@TCA_CHAIN={0x8, 0xb, 0x7}, @TCA_RATE={0x6, 0x5, {0x0, 0xc}}]}, 0x34}}, 0x4000) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x3, &(0x7f0000000580)=@framed={{0x18, 0x5, 0x0, 0x0, 0xb}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r0, 0x8982, &(0x7f0000000080)={0x7, 'veth1_macvtap\x00', {0x9}, 0x1}) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r4, &(0x7f0000000040)='n\"', 0x2, 0x24004055, &(0x7f0000000140)={0xa, 0x4e21, 0x9e11, @private0={0xfc, 0x0, '\x00', 0x1}, 0xa}, 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r4, 0x84, 0x70, &(0x7f0000000240)={0x0, @in6={{0xa, 0x4e21, 0xffff, @empty, 0xffff}}, [0xc, 0xfec, 0x5, 0xdd4e, 0xffffffffffffbd95, 0x8, 0x3, 0x10001, 0x3, 0x7fffffff, 0x80000000, 0xf6, 0x0, 0x8, 0x8]}, &(0x7f00000000c0)=0x100) setsockopt$inet_sctp6_SCTP_CONTEXT(r4, 0x84, 0x11, &(0x7f0000000340)={r5}, 0x8) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000200)={@loopback, 0x0, 0x0, 0x1, 0x3, 0xff01, 0x6}, 0x20) socket$nl_netfilter(0x10, 0x3, 0xc) close(0x4) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) socket$inet6(0xa, 0x3, 0x5) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000001e00), 0xffffffffffffffff) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff56}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r8}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001e40)) ioctl$PPPIOCNEWUNIT(r7, 0xc004743e, &(0x7f00000001c0)=0x3) 1.500423604s ago: executing program 3 (id=9299): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="3800000010000507000000000004000000000000", @ANYRES32=r2, @ANYBLOB="0000000a010000001800120008000100736974000c0002000800030036"], 0x38}}, 0x0) r3 = socket(0x10, 0x803, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) ioctl$FICLONE(r5, 0x40049409, r4) (async) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001400b5950072bacfdc5f299642655111000000000002010a400000f53b81f972cef31f", @ANYRES32=r7, @ANYBLOB="1400020000000000000000000000ffff00000000"], 0x2c}}, 0x0) r8 = socket(0x10, 0x803, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r7}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_ADDRESS={0x14, 0x1, @rand_addr=' \x01\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x41}, 0x0) 1.33604571s ago: executing program 4 (id=9300): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=@newlink={0x44, 0x10, 0x200, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FLAGS={0x8, 0x8, 0x40000039}, @IFLA_IPTUN_FLOWINFO={0x8, 0x7, 0x5}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000014}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0xb, &(0x7f0000000100)=0x80000000, 0x4) getsockopt$inet6_buf(r1, 0x29, 0x6, 0xffffffffffffffff, &(0x7f00000001c0)=0xa4) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}}, 0x4008840) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_POOL_GET(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f00000003c0)={0x1ac, r3, 0x400, 0x70bd26, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x7}, {0x6, 0x11, 0x7fff}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x7}, {0x6, 0x11, 0x9}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x1}, {0x6, 0x11, 0xfffa}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x7}, {0x6, 0x11, 0x851}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x9a}, {0x6, 0x11, 0xff}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7}, {0x6, 0x11, 0x10}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x40}, {0x6, 0x11, 0x7fff}}, {@pci={{0x8}, {0x11}}, {0x8}, {0x6, 0x11, 0x3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7391}, {0x6, 0x11, 0x1}}]}, 0x1ac}, 0x1, 0x0, 0x0, 0x1d5bbaa8f7dd5dd0}, 0x800) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=@newlink={0x44, 0x10, 0x200, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FLAGS={0x8, 0x8, 0x40000039}, @IFLA_IPTUN_FLOWINFO={0x8, 0x7, 0x5}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000014}, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) setsockopt$inet6_int(r1, 0x29, 0xb, &(0x7f0000000100)=0x80000000, 0x4) (async) getsockopt$inet6_buf(r1, 0x29, 0x6, 0xffffffffffffffff, &(0x7f00000001c0)=0xa4) (async) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}}, 0x4008840) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) (async) sendmsg$DEVLINK_CMD_SB_POOL_GET(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f00000003c0)={0x1ac, r3, 0x400, 0x70bd26, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x7}, {0x6, 0x11, 0x7fff}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x7}, {0x6, 0x11, 0x9}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x1}, {0x6, 0x11, 0xfffa}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x7}, {0x6, 0x11, 0x851}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x9a}, {0x6, 0x11, 0xff}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7}, {0x6, 0x11, 0x10}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x40}, {0x6, 0x11, 0x7fff}}, {@pci={{0x8}, {0x11}}, {0x8}, {0x6, 0x11, 0x3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7391}, {0x6, 0x11, 0x1}}]}, 0x1ac}, 0x1, 0x0, 0x0, 0x1d5bbaa8f7dd5dd0}, 0x800) (async) 1.335523937s ago: executing program 0 (id=9301): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000180), r0) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x58, r1, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_SECCTX={0x27, 0x7, 'system_u:object_r:kmsg_device_t:s0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'macvlan0\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}]}, 0x58}, 0x1, 0x0, 0x0, 0x14}, 0x20000811) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000004c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000007f3ffff070004000a01010108000500"], 0x24}, 0x1, 0x0, 0x0, 0x90}, 0x20040040) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000), 0x31) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7050000080000a8c5000000a5000000180100002020640500000000000400007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70400000000000085000000a700000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r3, 0x0, 0x0, 0xfffffffffffffdf3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.244482021s ago: executing program 3 (id=9302): syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='batadv_slave_1\x00', 0x10) r1 = socket$inet(0x2, 0x801, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e23, @multicast1}, 0x10) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) socket$netlink(0x10, 0x3, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) ppoll(&(0x7f0000000500)=[{r3}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0xfffffffffffffffc, 0xfffffffffffffffd, 0x4c38}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x9, 0xfffffffffffffffd, 0x0, 0x80000001}, 0x0, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000100)=0x1) sendto$inet6(r2, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) 1.227149431s ago: executing program 0 (id=9303): sendmsg$NLBL_UNLABEL_C_STATICLIST(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x84}, 0x1, 0x0, 0x0, 0x4040000}, 0x40) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000002380), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000023c0)={'wpan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000023c0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r0, &(0x7f00000024c0)={0x0, 0x0, &(0x7f0000002480)={&(0x7f0000002400)={0x38, r1, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_SEC_LEVEL={0x1c, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x3}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_FRAME={0x8}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x10008}, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_REQ_SET_REG(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x20, r4, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x80) r5 = socket$inet6(0xa, 0x1, 0x0) sendmsg$inet6(r5, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1400000000000000010000000c"], 0x30}, 0x4000010) (async) sendmsg$inet6(r5, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1400000000000000010000000c"], 0x30}, 0x4000010) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@deltaction={0x58, 0x18, 0x1, 0x70bd2a, 0x25dfdc00, {0xa}, [@TCA_ACT_TAB={0x44, 0x1, [{0xc, 0xb, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x14, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0x10, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0x10, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x44000}, 0x20040844) 1.132704136s ago: executing program 2 (id=9304): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) (async) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) close(0x4) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000040)=0x0) syz_open_procfs$namespace(r4, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) (async) sendmsg$NL80211_CMD_SET_WOWLAN(0xffffffffffffffff, 0x0, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r5, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000005880), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r6, &(0x7f0000005d00)={0x0, 0x0, &(0x7f0000005cc0)={&(0x7f0000000180)={0x68, r7, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0x14, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffff0}]}, @TIPC_NLA_LINK_PROP={0x4}]}, @TIPC_NLA_SOCK={0x40, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xe97}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x800}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x800}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}]}]}]}, 0x68}}, 0x8040) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) (async) sendto$inet6(r5, &(0x7f0000000100)="b8", 0xffe0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) (async) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r5, 0x84, 0x19, &(0x7f0000000080)={0x0, 0x6}, 0x8) (async) openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) (async) socket$kcm(0x2, 0x3, 0x2) (async) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x85, 0x0, 0x0) (async) socketpair(0x8, 0x6, 0x86f6, &(0x7f0000000000)) (async) unshare(0x400) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 1.117075376s ago: executing program 1 (id=9305): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pfifo={{0xa}, {0x8}}]}, 0x38}}, 0x0) (async) syz_emit_ethernet(0x6a, &(0x7f0000000080)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa0008004503005c00050000002f907800020000e0000001248088a800"], 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') (async) unshare(0x6a040000) (async) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x6) accept4(r3, 0x0, 0x0, 0x80800) (async) shutdown(r3, 0x0) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x6180, 0x0) (async) socket(0x8, 0x0, 0x8000) r4 = socket$packet(0x11, 0x3, 0x300) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r6, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r6, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=ANY=[@ANYBLOB="40009900100039040000000000000000000080a7", @ANYRES32=r7, @ANYBLOB="01980600000000002000128008000100677265001400028008000700ac14140206000e0001000000"], 0x40}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) (async) sendto$packet(r4, &(0x7f00000001c0)="11eb0300fc0baf745836da8886dd", 0xe, 0x2404c081, &(0x7f0000000200)={0x11, 0x88a8, r7, 0x1, 0x4, 0x6, @multicast}, 0x14) (async) r8 = socket$inet(0xa, 0x801, 0x84) getsockopt$IPT_SO_GET_INFO(r8, 0x0, 0x40, &(0x7f0000000140)={'filter\x00', 0x0, [0x8, 0x0, 0x7, 0x4, 0x9]}, &(0x7f0000000200)=0x54) socket$netlink(0x10, 0x3, 0x13) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000008c0)=ANY=[@ANYBLOB="08150000000511040000000000000000010000055402010000000000000000080611000000000000f3a9cebc342a903bfbab79968fe9fa43a6919561b77def462207940fc09d5063"], 0x1508}}, 0x0) (async) socket(0x10, 0x3, 0x0) 1.112859885s ago: executing program 0 (id=9306): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYRES64=r0], 0x7c}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a84000000060a010400000000000000000200000058000480540001800b00010065787468647200004400028005000200830000000800034000000000080004400000003208000640000000020800014000000008080005400000000108000540d052aec108000640000000020900010073797a30000000000900020073797a32"], 0x6034}}, 0x4000800) 1.015100001s ago: executing program 2 (id=9308): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x11, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000040000000000000100000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000f0000000000000000000018570000100000899ee71d83109a3c800000000000000000bf91000000000000b7021000000000008500000084000000b70000000000000095000000000000003b3a56cad8815d5829105367a63aaf735a6f96803737f781bb3857d95695f7fe39e500e29d543772f67503ebfa449ed003665e932d04c97cbc1833e279d9b2b5994b1f42c2c519662d7acb96981a4ca219811f26692c99ccb1f1c44fc3"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x52, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0), 0x0, 0x10, 0x10000}, 0x94) 774.524008ms ago: executing program 0 (id=9309): r0 = socket$netlink(0x10, 0x3, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02}) socket$inet6(0xa, 0x2, 0x0) readv(r1, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000980)=""/4096, 0x734}], 0x2) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$TUNSETVNETHDRSZ(r1, 0x400454d8, &(0x7f0000000100)=0x730) (async) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) (async) getsockopt$netrom_NETROM_T1(0xffffffffffffffff, 0x103, 0x1, 0x0, 0x0) (async) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000780)=ANY=[@ANYBLOB="50000000100023ff000000000040000000000000", @ANYRES32=0x0, @ANYBLOB="0000000010560100280012800b000100697036746e6c0000180002801400020000000000000000000000ffffac14142a080004"], 0x50}, 0x1, 0x0, 0x0, 0x20040001}, 0x8000) 756.5459ms ago: executing program 1 (id=9310): r0 = socket(0xa, 0x3, 0x87) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000000)={{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x29}}, {0x0, @multicast}, 0x4, {0x2, 0x4e20, @private=0xa010100}, 'hsr0\x00'}) socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000140)={0x0, 0xd}, &(0x7f00000001c0)=0x8) sendmsg(r0, &(0x7f0000000100)={&(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x5, @dev={0xfe, 0x80, '\x00', 0x43}, 0x7, 0x2}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000440)="326f249f", 0x4}, {0x0}], 0x2}, 0x4c804) 632.535836ms ago: executing program 2 (id=9311): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f00000000c0)={0x58, 0x4, 0x3, 0x7, 0x4fe}) (async) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f00000000c0)={0x58, 0x4, 0x3, 0x7, 0x4fe}) write$bt_hci(r0, &(0x7f0000000080)=ANY=[], 0x6) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r2, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000c00)=ANY=[@ANYBLOB="200000000f14ad4c"], 0x20}, 0x1, 0x0, 0x0, 0x8804}, 0x4008014) (async) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r2, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000c00)=ANY=[@ANYBLOB="200000000f14ad4c"], 0x20}, 0x1, 0x0, 0x0, 0x8804}, 0x4008014) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xc0041, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNSETVNETHDRSZ(r3, 0x400454d8, &(0x7f0000000140)=0x1009e) syz_emit_ethernet(0x4a, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd608a37f200142c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa3b000003"], 0x0) write$tun(r3, &(0x7f0000000380)=ANY=[@ANYRES16=r3, @ANYBLOB="e1ed6f24d61a58cec867a7232e84e348930eeb2518c47315734d"], 0xfdef) socket(0x0, 0x3, 0x7) (async) socket(0x0, 0x3, 0x7) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r1}, 0x8) (async) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r1}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x13, &(0x7f0000000440)=ANY=[@ANYRESHEX=r3, @ANYBLOB="d4be32f581516677c79d794cf2de36026d83f39445f09408838d8ce925e88a82d7e602089cb4ae29388d9cd489f0375aace33d", @ANYBLOB="00000000000000006600000000000000180000000000000000000000000000009500000000000000360a000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x40f00}, 0x94) r4 = socket$alg(0x26, 0x5, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) (async) close(0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000980), 0xffffffffffffffff) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000980), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_GET(r5, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000100)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRESDEC=r5, @ANYRES16=r5, @ANYRES16=r0], 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x800) (async) sendmsg$TIPC_NL_BEARER_GET(r5, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000100)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRESDEC=r5, @ANYRES16=r5, @ANYRES16=r0], 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x800) close(r4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket(0x8, 0x3, 0x0) ioctl$IMGETCOUNT(r6, 0x61e3, &(0x7f0000000000)) 477.898393ms ago: executing program 1 (id=9312): syz_emit_ethernet(0x3b, &(0x7f00000001c0)={@remote, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @val={@val={0x88a8, 0x3, 0x0, 0x1}, {0x8100, 0x2, 0x1, 0x4}}, {@arp={0x806, @generic={0x200, 0x6003, 0x6, 0x2, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, "3389", @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, "a3aa0a356ddd7cc377b0a6d9bc8444"}}}}, &(0x7f0000000200)={0x0, 0x1, [0xe55, 0x291, 0x3bf, 0xdea]}) r0 = socket$kcm(0x10, 0x2, 0x4) close(r0) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000140)="5c00000010006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36504001ac00800400004000500020000000064bc24eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='mctp_key_release\x00', r1, 0x0, 0x40}, 0x18) epoll_create(0x6) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000001ec0), 0xffffffffffffffff) 264.478856ms ago: executing program 0 (id=9313): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'tunl0\x00'}) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x42804}, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="016f0800010000000000200000004500003c00000000008490783fffffffac1414aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="de37523e92671fe57af83f2c4aaa000700901b0900000300050a"], 0x4a) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000680)=[{{&(0x7f0000000200)={0x2, 0x0, @rand_addr=0x64010101}, 0x10, 0x0}}], 0x1, 0x4000000) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018400000000000001c0000001c00000009000000050000000000001102000000ffffffff0700000000000008000000000000302e5f61306100"], 0x0, 0x3d, 0x0, 0x1}, 0x28) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) bpf$PROG_LOAD(0x5, &(0x7f0000001b40)={0x1c, 0x20000000000000bb, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) sendmsg$rds(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10, 0x0}, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x800) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r5, 0x29, 0x8, &(0x7f0000000180)=0xffff7b6e, 0x4) setsockopt$inet6_int(r5, 0x29, 0x2, &(0x7f00000001c0)=0x10, 0x4) getsockopt$inet6_buf(r5, 0x29, 0x6, 0x0, &(0x7f0000000280)) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/78, 0x7ffff037}, {&(0x7f0000000600)=""/87, 0x20000253}], 0xcbb, 0x0, 0xffffffffffffff21}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r7, @ANYBLOB="01000000000000e14f0e3b00000008000300", @ANYRES32=r8, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0, 0x0}, &(0x7f00000013c0)=0xc) r11 = gettid() sendmmsg$unix(r2, &(0x7f0000001380)=[{{&(0x7f0000000040)=@abs={0x1, 0x0, 0x4e20}, 0x6e, 0x0, 0x0, &(0x7f00000025c0)=[@cred={{0x1c, 0x1, 0x2, {r11, r9, r10}}}, @rights={{0x14, 0x1, 0x1, [r2]}}], 0x38, 0x4000}}], 0x1, 0x840) sendmsg$nl_xfrm(r1, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)=@getpolicy={0x70, 0x15, 0x0, 0x70bd2c, 0x25dfdbfc, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@private=0xa010101, 0x6e20, 0x0, 0x4e20, 0x7, 0xa, 0xa0, 0x20, 0x0, 0x0, r9}, 0x6e6bb3, 0x1}, [@policy_type={0xa, 0x10, {0x1}}, @coaddr={0x14, 0xe, @in=@empty}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000000}, 0x4048080) 160.12942ms ago: executing program 2 (id=9314): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x38, 0x1403, 0x1, 0x70bd26, 0x25dfdbff, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'wg1\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x4008010) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) socket$igmp6(0xa, 0x3, 0x2) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r2) r3 = socket(0x2b, 0x80801, 0x1) setsockopt$inet6_mtu(r3, 0x29, 0x17, &(0x7f0000000040)=0x5, 0x4) listen(r3, 0x5) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), &(0x7f0000000080)=r2}, 0x20) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0800034000000004400000000b0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d10300002c0000000e0a010200000000000000000a0000000900010073797a3100000000090002"], 0xd8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r5 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r5, 0x10e, 0xc, &(0x7f0000000000)=0x7f, 0x4) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r7, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000507000000000000000000", @ANYRES32=r8, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) r10 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r9, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_add_memb(r10, 0x107, 0x1, &(0x7f0000000080)={r11, 0x13, 0x6, @local}, 0x10) setsockopt$packet_add_memb(r10, 0x107, 0x1, &(0x7f0000000040)={r11, 0x1, 0x6, @multicast}, 0x10) r12 = socket$netlink(0x10, 0x3, 0x4) write(r12, &(0x7f0000000040)="2700000014000707030e0000120f0a0011000100f5fe009d2fb112ff000000008a151f75080039", 0x27) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000005c0)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) 159.216519ms ago: executing program 1 (id=9315): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x9c, 0x10, 0x421, 0x0, 0x2, {}, [@IFLA_LINKINFO={0x7c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x6c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FLOWINFO={0x8, 0x7, 0x9}, @IFLA_IPTUN_FLAGS={0x8, 0x8, 0x2a}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @remote}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0x1}, @IFLA_IPTUN_PROTO={0x5}, @IFLA_IPTUN_LINK={0x8, 0x1, r1}, @IFLA_IPTUN_FLOWINFO={0x8, 0x7, 0x6}, @IFLA_IPTUN_ENCAP_SPORT={0x6, 0x11, 0x4e21}, @IFLA_IPTUN_ENCAP_LIMIT={0x5, 0x6, 0x39}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @local}]}}}]}, 0x9c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 0s ago: executing program 0 (id=9316): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'team_slave_1\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000340)={@ipv4={'\x00', '\xff\xff', @multicast2}, 0x9, r1}) (async) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000004c40)={@ipv4={'\x00', '\xff\xff', @multicast2}, r1}, 0x14) (async) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000000)=ANY=[], 0x14}, 0x1, 0x6000000}, 0x0) kernel console output (not intermixed with test programs): ter parsing attributes in process `syz.2.7786'. [ 1237.331364][ T4080] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7786'. [ 1237.390554][ T4080] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7786'. [ 1237.422686][ T4080] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7786'. [ 1237.448180][ T4080] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7786'. [ 1237.525306][ T4092] sctp: [Deprecated]: syz.4.7788 (pid 4092) Use of int in max_burst socket option. [ 1237.525306][ T4092] Use struct sctp_assoc_value instead [ 1237.595261][ T4096] RDS: rds_bind could not find a transport for ::ffff:172.20.20.45, load rds_tcp or rds_rdma? [ 1237.690764][ T4094] netlink: 60 bytes leftover after parsing attributes in process `syz.0.7790'. [ 1238.452541][ T4135] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1238.479411][ T4138] netlink: 'syz.3.7803': attribute type 1 has an invalid length. [ 1238.508228][ T4138] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1238.542807][ T4143] openvswitch: netlink: IP tunnel dst address not specified [ 1238.565022][ T4138] netlink: 'syz.3.7803': attribute type 1 has an invalid length. [ 1238.589458][ T4138] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1238.629019][ T4149] netlink: 'syz.2.7807': attribute type 1 has an invalid length. [ 1238.670997][ T4149] netlink: 'syz.2.7807': attribute type 1 has an invalid length. [ 1239.063567][ T4172] x_tables: duplicate underflow at hook 2 [ 1239.422419][ T4181] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1239.443674][ T4181] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1239.460789][ T4181] bond0 (unregistering): (slave syz_tun): Releasing backup interface [ 1239.480710][ T4181] bond0 (unregistering): Released all slaves [ 1239.620554][ T4185] bond2: option arp_validate: invalid value (18446744073491447809) [ 1239.673614][ T4185] bond2 (unregistering): Released all slaves [ 1239.917101][ T4211] syzkaller0: entered promiscuous mode [ 1239.924279][ T4211] syzkaller0: entered allmulticast mode [ 1242.204565][ T4195] lo speed is unknown, defaulting to 1000 [ 1242.295724][ T4195] wg1 speed is unknown, defaulting to 1000 [ 1242.304741][ T4195] wg1 speed is unknown, defaulting to 1000 [ 1242.440323][ T4236] __nla_validate_parse: 6 callbacks suppressed [ 1242.440344][ T4236] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7833'. [ 1242.475300][ T4236] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7833'. [ 1242.511847][ T4236] syzkaller1: entered promiscuous mode [ 1242.517894][ T4236] syzkaller1: entered allmulticast mode [ 1242.951503][ T4263] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1243.431741][ T4288] netlink: 92 bytes leftover after parsing attributes in process `syz.2.7845'. [ 1243.584777][ T4298] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7849'. [ 1243.595717][ T4298] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7849'. [ 1243.623077][ T4298] netlink: 'syz.2.7849': attribute type 1 has an invalid length. [ 1243.634096][ T4298] netlink: 'syz.2.7849': attribute type 2 has an invalid length. [ 1243.644691][ T4298] netlink: 'syz.2.7849': attribute type 1 has an invalid length. [ 1243.665125][ T4298] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7849'. [ 1243.670980][ T4300] syzkaller0: entered promiscuous mode [ 1243.680729][ T4300] syzkaller0: entered allmulticast mode [ 1244.424026][ T4324] gretap2: entered allmulticast mode [ 1244.548626][ T4337] syzkaller0: entered promiscuous mode [ 1244.554184][ T4337] syzkaller0: entered allmulticast mode [ 1244.588151][ T4337] tipc: Enabled bearer , priority 0 [ 1244.676300][ T4334] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7857'. [ 1244.879332][ T4358] netlink: 'syz.1.7864': attribute type 29 has an invalid length. [ 1244.981493][ T4368] netlink: 'syz.1.7864': attribute type 29 has an invalid length. [ 1245.035171][ T4368] netlink: 500 bytes leftover after parsing attributes in process `syz.1.7864'. [ 1245.719077][ T10] tipc: Node number set to 3405896196 [ 1245.779813][ T4406] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7874'. [ 1245.818030][ T4404] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7874'. [ 1245.849556][ T4408] netlink: 'syz.4.7875': attribute type 10 has an invalid length. [ 1245.902929][ T4408] 8021q: adding VLAN 0 to HW filter on device team0 [ 1245.946112][ T4408] team0: entered promiscuous mode [ 1246.008273][ T4408] bond0: (slave team0): Enslaving as an active interface with an up link [ 1246.070667][ T4414] netlink: 'syz.0.7877': attribute type 10 has an invalid length. [ 1246.367207][ T4392] Bluetooth: hci1: Opcode 0x0401 failed: -4 [ 1246.949484][ T4434] lo speed is unknown, defaulting to 1000 [ 1246.963043][ T4434] wg1 speed is unknown, defaulting to 1000 [ 1246.982963][ T4434] wg1 speed is unknown, defaulting to 1000 [ 1247.039333][ T4466] openvswitch: netlink: Port -1 exceeds max allowable 65535 [ 1247.273919][ T4438] lo speed is unknown, defaulting to 1000 [ 1247.282273][ T4438] wg1 speed is unknown, defaulting to 1000 [ 1247.291072][ T4438] wg1 speed is unknown, defaulting to 1000 [ 1247.590749][ T4319] Bluetooth: hci1: command 0x0406 tx timeout [ 1248.188358][ T4504] tipc: Resetting bearer [ 1248.707084][ T4319] Bluetooth: hci2: command 0x0405 tx timeout [ 1248.878653][ T4540] __nla_validate_parse: 2 callbacks suppressed [ 1248.878675][ T4540] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7906'. [ 1248.980737][ T4545] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7908'. [ 1249.432520][ T4578] macsec0: entered promiscuous mode [ 1249.466408][ T4578] macsec0: left promiscuous mode [ 1249.490507][ T4582] macsec0: entered promiscuous mode [ 1249.629340][ T4591] tipc: Enabled bearer , priority 0 [ 1249.655740][ T4590] tipc: Disabling bearer [ 1249.849046][ T4599] xt_socket: unknown flags 0x50 [ 1249.922347][ T4605] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7923'. [ 1249.972662][ T4605] ip6gretap1: entered promiscuous mode [ 1249.995148][ T4605] ip6gretap1: entered allmulticast mode [ 1250.523616][ T4613] tipc: Enabled bearer , priority 0 [ 1250.592740][ T4613] netlink: 'syz.4.7924': attribute type 1 has an invalid length. [ 1250.744929][ T4613] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1250.923537][ T4617] veth7: entered promiscuous mode [ 1250.959415][ T4617] bond8: (slave veth7): Enslaving as an active interface with an up link [ 1251.004532][ T4612] tipc: Disabling bearer [ 1251.216107][ T4646] netlink: 36 bytes leftover after parsing attributes in process `syz.4.7930'. [ 1251.230502][ T4646] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7930'. [ 1251.240702][ T4646] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7930'. [ 1251.313396][ T4646] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1251.601374][ T4659] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7933'. [ 1251.676131][ T4663] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7934'. [ 1251.749450][ T4667] netlink: 72 bytes leftover after parsing attributes in process `syz.3.7935'. [ 1251.852281][ T4672] openvswitch: netlink: Message has 4 unknown bytes. [ 1252.255844][ T4696] netlink: 'syz.1.7941': attribute type 21 has an invalid length. [ 1252.270410][ T4696] netlink: 152 bytes leftover after parsing attributes in process `syz.1.7941'. [ 1252.339995][ T30] audit: type=1804 audit(1765505307.863:19): pid=4700 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.7944" name="/newroot/306/cgroup.controllers" dev="tmpfs" ino=1592 res=1 errno=0 [ 1252.364270][ T30] audit: type=1800 audit(1765505307.863:20): pid=4700 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.7944" name="cgroup.controllers" dev="tmpfs" ino=1592 res=0 errno=0 [ 1252.450214][ T4707] bridge6: entered promiscuous mode [ 1252.462962][ T4707] bridge6: entered allmulticast mode [ 1252.551475][ T4712] 8021q: VLANs not supported on ip6tnl0 [ 1252.899656][ T4733] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1253.062244][ T4739] syzkaller1: entered promiscuous mode [ 1253.071419][ T4739] syzkaller1: entered allmulticast mode [ 1253.195924][ T4733] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1253.336118][ T4733] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1253.353161][ T4755] xt_TCPMSS: Only works on TCP SYN packets [ 1253.488225][ T4733] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1253.698044][ T4773] macvtap1: entered allmulticast mode [ 1253.712119][ T4772] sctp: [Deprecated]: syz.3.7959 (pid 4772) Use of int in maxseg socket option. [ 1253.712119][ T4772] Use struct sctp_assoc_value instead [ 1253.728169][ T4773] mac80211_hwsim hwsim56 wlan0: entered allmulticast mode [ 1253.739819][ T4773] mac80211_hwsim hwsim56 wlan0: left allmulticast mode [ 1253.884929][ T6433] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1253.902682][ T6433] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1253.950459][ T4784] bond0: Error: Cannot enslave bond to itself. [ 1253.960838][ T6433] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1254.049086][ T6433] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1254.110626][ T4786] __nla_validate_parse: 8 callbacks suppressed [ 1254.110648][ T4786] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7964'. [ 1254.361104][ T4786] bond0: (slave bond_slave_1): Releasing backup interface [ 1254.375493][ T4786] bond_slave_1 (unregistering): left promiscuous mode [ 1254.649407][ T4791] lo speed is unknown, defaulting to 1000 [ 1254.668035][ T4791] wg1 speed is unknown, defaulting to 1000 [ 1254.712774][ T4791] wg1 speed is unknown, defaulting to 1000 [ 1254.726313][ T4809] veth2: entered allmulticast mode [ 1255.112113][ T4820] geneve2: entered promiscuous mode [ 1255.121351][ T6433] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20002 - 0 [ 1255.133657][ T6433] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20002 - 0 [ 1255.206036][ T6433] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20002 - 0 [ 1255.215878][ T6433] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20002 - 0 [ 1255.231838][ T4833] netlink: 'syz.0.7976': attribute type 4 has an invalid length. [ 1255.375059][ T4840] netlink: 'syz.0.7978': attribute type 32 has an invalid length. [ 1255.599553][ T4848] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1255.680930][ T4850] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7981'. [ 1255.911962][ T4858] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1255.982792][ T4858] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1256.058990][ T4858] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1256.120138][ T4870] netlink: 68 bytes leftover after parsing attributes in process `syz.2.7987'. [ 1256.145614][ T4858] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1256.383557][T14166] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1256.455056][T14177] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1256.502637][T14177] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1256.541189][T14177] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1256.568040][ T4873] lo speed is unknown, defaulting to 1000 [ 1256.575863][ T4873] wg1 speed is unknown, defaulting to 1000 [ 1256.583811][ T4873] wg1 speed is unknown, defaulting to 1000 [ 1256.936596][ T4885] pim6reg: entered allmulticast mode [ 1257.130158][ T4892] netlink: 'syz.1.7992': attribute type 1 has an invalid length. [ 1257.139085][ T4892] netlink: 'syz.1.7992': attribute type 3 has an invalid length. [ 1257.148767][ T4892] netlink: 224 bytes leftover after parsing attributes in process `syz.1.7992'. [ 1257.436441][ T4864] lo speed is unknown, defaulting to 1000 [ 1257.533025][ T4904] : renamed from wg2 [ 1257.541735][ T4864] wg1 speed is unknown, defaulting to 1000 [ 1257.589066][ T4864] wg1 speed is unknown, defaulting to 1000 [ 1257.748533][ T4913] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_bond, syncid = 0, id = 0 [ 1258.042779][ T4912] lo speed is unknown, defaulting to 1000 [ 1258.051734][ T4912] wg1 speed is unknown, defaulting to 1000 [ 1258.059642][ T4912] wg1 speed is unknown, defaulting to 1000 [ 1258.552605][ T4926] netlink: 'syz.2.8002': attribute type 1 has an invalid length. [ 1258.634471][ T4926] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1258.697466][ T4925] bond6: (slave veth9): Enslaving as an active interface with a down link [ 1259.011449][ T4934] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8004'. [ 1259.369737][ T4956] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8010'. [ 1259.379924][ T4956] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8010'. [ 1259.943834][ T4957] lo speed is unknown, defaulting to 1000 [ 1259.951878][ T4957] wg1 speed is unknown, defaulting to 1000 [ 1259.960452][ T4957] wg1 speed is unknown, defaulting to 1000 [ 1260.111980][ T4982] netlink: 'syz.4.8020': attribute type 8 has an invalid length. [ 1260.138883][ T4982] bridge4: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 1260.263091][ T4987] syzkaller0: left promiscuous mode [ 1260.270846][ T4989] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8021'. [ 1260.282343][ T4987] syzkaller0: left allmulticast mode [ 1260.290646][ T4993] netlink: 'syz.4.8022': attribute type 1 has an invalid length. [ 1260.304007][ T4993] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR [ 1260.532754][ T5000] netlink: 'syz.4.8023': attribute type 1 has an invalid length. [ 1260.585238][ T5000] netlink: 224 bytes leftover after parsing attributes in process `syz.4.8023'. [ 1260.764172][ T5010] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8028'. [ 1261.091224][ T5029] netlink: 'syz.0.8032': attribute type 6 has an invalid length. [ 1261.375073][ T5044] netlink: 'syz.3.8037': attribute type 1 has an invalid length. [ 1261.805639][ T5059] dummy0: mtu less than device minimum [ 1261.935763][ T5063] netlink: 260 bytes leftover after parsing attributes in process `syz.2.8042'. [ 1261.959427][ T5047] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8038'. [ 1262.223452][ T5075] ip6tnl0: Caught tx_queue_len zero misconfig [ 1262.885427][ T5107] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8054'. [ 1262.918727][ T5109] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8053'. [ 1263.759677][ T5137] x_tables: duplicate underflow at hook 2 [ 1263.912914][ T5146] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8066'. [ 1264.841380][ T5188] netlink: 'syz.1.8071': attribute type 1 has an invalid length. [ 1264.935905][ T5188] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1265.136654][ T5193] veth1: entered promiscuous mode [ 1265.158979][ T5193] bond2: (slave veth1): Enslaving as an active interface with a down link [ 1265.279874][ T5179] lo speed is unknown, defaulting to 1000 [ 1265.291011][ T5179] wg1 speed is unknown, defaulting to 1000 [ 1265.312623][ T5179] wg1 speed is unknown, defaulting to 1000 [ 1265.799394][ T5202] lo speed is unknown, defaulting to 1000 [ 1265.819888][ T5202] wg1 speed is unknown, defaulting to 1000 [ 1265.855871][ T5202] wg1 speed is unknown, defaulting to 1000 [ 1266.019572][ T5220] netlink: 'syz.4.8077': attribute type 13 has an invalid length. [ 1266.029412][ T5220] netlink: 'syz.4.8077': attribute type 27 has an invalid length. [ 1266.095666][ T5218] bond10: option arp_validate: invalid value (18446744073491447809) [ 1266.108014][ T5218] bond10 (unregistering): Released all slaves [ 1266.772371][ T6777] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1266.828092][T14169] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1266.856871][T14169] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1266.865355][T14169] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1267.288575][ T5238] __nla_validate_parse: 6 callbacks suppressed [ 1267.288595][ T5238] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8083'. [ 1267.489557][ T5243] syzkaller0: entered promiscuous mode [ 1267.495372][ T5243] syzkaller0: entered allmulticast mode [ 1267.651998][ T5246] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8085'. [ 1267.688128][ T5246] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8085'. [ 1267.809702][ T5246] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1267.896080][ T5246] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1267.939439][ T5249] netlink: 'syz.4.8086': attribute type 1 has an invalid length. [ 1267.993008][ T5249] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1268.005365][ T5246] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1268.022534][ T5249] netlink: 44 bytes leftover after parsing attributes in process `syz.4.8086'. [ 1268.095858][ T5246] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1268.229401][T14185] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1268.264453][T14185] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1268.289838][T14185] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1268.342362][T14185] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1268.574855][ T5275] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8093'. [ 1268.591234][ T5280] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 1269.071911][ T5303] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 1269.125088][ T5306] tipc: Enabling of bearer rejected, already enabled [ 1269.422361][ T5314] netlink: 'syz.2.8103': attribute type 1 has an invalid length. [ 1269.440330][ T5314] ip6gretap1: entered allmulticast mode [ 1269.525839][ T5331] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8106'. [ 1269.838090][ T5344] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 1269.884519][ T5344] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8110'. [ 1270.038695][ T5352] netlink: 'syz.0.8113': attribute type 21 has an invalid length. [ 1270.049079][ T5356] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1270.059121][ T5352] netlink: 132 bytes leftover after parsing attributes in process `syz.0.8113'. [ 1270.080068][ T5352] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8113'. [ 1270.192725][ T5359] netlink: 464 bytes leftover after parsing attributes in process `syz.2.8116'. [ 1270.345863][ T5369] x_tables: duplicate underflow at hook 1 [ 1270.387863][ T5369] No such timeout policy "syz1" [ 1270.453728][ T5372] netlink: 'syz.2.8119': attribute type 9 has an invalid length. [ 1270.555215][ T5354] lo speed is unknown, defaulting to 1000 [ 1270.563715][ T5354] wg1 speed is unknown, defaulting to 1000 [ 1270.571678][ T5354] wg1 speed is unknown, defaulting to 1000 [ 1271.137922][ T5400] xt_connbytes: Forcing CT accounting to be enabled [ 1271.217016][ T30] audit: type=1800 audit(1765505326.733:21): pid=5406 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.8122" name="3" dev="tmpfs" ino=2206 res=0 errno=0 [ 1271.353696][ T5392] nbd2: detected capacity change from 0 to 63 [ 1271.397903][ T5401] block nbd2: NBD_DISCONNECT [ 1271.423608][ T5401] block nbd2: Disconnected due to user request. [ 1271.436158][ T5408] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1271.473783][ T5401] block nbd2: shutting down sockets [ 1271.684504][ T5424] @0: renamed from bond_slave_1 [ 1271.903921][ T5431] sctp: [Deprecated]: syz.2.8130 (pid 5431) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1271.903921][ T5431] Use struct sctp_sack_info instead [ 1272.119140][ T5445] netlink: 'syz.4.8134': attribute type 2 has an invalid length. [ 1272.353282][ T5458] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1272.390320][ T5460] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1272.462443][ T5465] netlink: 'syz.0.8138': attribute type 3 has an invalid length. [ 1273.102426][ T5470] lo speed is unknown, defaulting to 1000 [ 1273.119761][ T5470] wg1 speed is unknown, defaulting to 1000 [ 1273.136603][ T5470] wg1 speed is unknown, defaulting to 1000 [ 1273.553723][ T1092] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1273.573548][ T1092] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1273.603155][ T1092] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1273.632845][ T1092] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1278.660840][ T5499] __nla_validate_parse: 3 callbacks suppressed [ 1278.660862][ T5499] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8149'. [ 1278.721005][ T5504] netlink: 'syz.4.8151': attribute type 1 has an invalid length. [ 1278.737911][ T5512] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8147'. [ 1278.775568][ T5508] Bluetooth: MGMT ver 1.23 [ 1278.871053][ T5514] netlink: 80 bytes leftover after parsing attributes in process `syz.2.8152'. [ 1278.880980][ T5514] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1278.961258][ T5514] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1279.102066][ T5525] sit0: left promiscuous mode [ 1279.126898][ T5529] netlink: 'syz.4.8154': attribute type 58 has an invalid length. [ 1279.164999][ T5529] netlink: 20 bytes leftover after parsing attributes in process `syz.4.8154'. [ 1279.264905][ T5525] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1279.299400][ T5525] 8021q: adding VLAN 0 to HW filter on device team0 [ 1279.321191][ T5542] netlink: 'syz.3.8160': attribute type 3 has an invalid length. [ 1279.351390][ T5542] netlink: 'syz.3.8160': attribute type 1 has an invalid length. [ 1279.368762][ T5525] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1279.381146][ T5542] netlink: 212 bytes leftover after parsing attributes in process `syz.3.8160'. [ 1279.426864][ T5542] NCSI netlink: No device for ifindex 813332851 [ 1279.437873][ T5543] netlink: 'syz.0.8159': attribute type 4 has an invalid length. [ 1279.439223][ T5551] batman_adv: batadv0: Adding interface: dummy0 [ 1279.453633][ T5551] batman_adv: batadv0: The MTU of interface dummy0 is too small (1536) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1568 would solve the problem. [ 1279.483098][ T5551] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 1279.638801][ T5560] netlink: 'syz.1.8165': attribute type 5 has an invalid length. [ 1279.699386][ T5557] syzkaller0: entered promiscuous mode [ 1279.704935][ T5557] syzkaller0: entered allmulticast mode [ 1279.848982][ T5564] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8166'. [ 1279.963277][ T5567] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8167'. [ 1282.053860][ T5566] veth11: entered promiscuous mode [ 1282.253414][ T5596] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8171'. [ 1282.470910][ T5615] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8176'. [ 1282.511072][ T5618] syzkaller0: entered allmulticast mode [ 1282.648773][ T5620] bond8: option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 1282.691048][ T5620] bond8 (unregistering): Released all slaves [ 1282.759688][ T5554] lo speed is unknown, defaulting to 1000 [ 1282.770615][ T5554] wg1 speed is unknown, defaulting to 1000 [ 1282.779435][ T5554] wg1 speed is unknown, defaulting to 1000 [ 1282.932224][ T30] audit: type=1107 audit(1765505338.453:22): pid=5629 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='q53eGzɺirphWK [ 1285.704177][ T8089] wg1 speed is unknown, defaulting to 1000 [ 1285.795191][ T5741] netlink: 76 bytes leftover after parsing attributes in process `syz.3.8211'. [ 1285.851208][ T5748] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.8213'. [ 1285.852477][ T5744] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8212'. [ 1287.090022][ T5790] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8222'. [ 1287.103802][ T5761] lo speed is unknown, defaulting to 1000 [ 1287.136562][ T5761] wg1 speed is unknown, defaulting to 1000 [ 1287.169871][ T5761] wg1 speed is unknown, defaulting to 1000 [ 1287.201532][ T70] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 1287.432414][ T5804] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1287.439761][ T5804] IPv6: NLM_F_CREATE should be set when creating new route [ 1287.447088][ T5804] IPv6: NLM_F_CREATE should be set when creating new route [ 1287.454344][ T5804] IPv6: NLM_F_CREATE should be set when creating new route [ 1287.531547][ T5806] veth11: entered promiscuous mode [ 1287.643921][ T5807] openvswitch: netlink: Multiple metadata blocks provided [ 1287.670500][ T5812] syzkaller0: entered promiscuous mode [ 1287.676624][ T5812] syzkaller0: entered allmulticast mode [ 1287.683842][ T5807] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1287.696310][ T5812] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8224'. [ 1288.139820][ T5825] syzkaller0: entered promiscuous mode [ 1288.145629][ T5825] syzkaller0: entered allmulticast mode [ 1288.427557][ T5846] batadv_slave_0: left promiscuous mode [ 1288.629156][ T5876] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8234'. [ 1288.744695][ T5881] netlink: 'syz.2.8236': attribute type 1 has an invalid length. [ 1288.886079][ T5898] netlink: 'syz.1.8238': attribute type 1 has an invalid length. [ 1288.901615][ T5881] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1288.935271][ T5881] veth11: entered promiscuous mode [ 1288.944986][ T5881] bond7: (slave veth11): Enslaving as a backup interface with a down link [ 1289.008030][ T5898] netlink: 'syz.1.8238': attribute type 5 has an invalid length. [ 1289.015982][ T5898] netlink: 'syz.1.8238': attribute type 6 has an invalid length. [ 1289.578253][ T5948] xt_hashlimit: size too large, truncated to 1048576 [ 1289.635084][ T5948] syz.1.8251: vmalloc error: size 10485760, failed to allocated page array size 20480, mode:0xcc2(GFP_KERNEL|__GFP_HIGHMEM), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1289.687414][ T5948] CPU: 1 UID: 0 PID: 5948 Comm: syz.1.8251 Not tainted syzkaller #0 PREEMPT(full) [ 1289.687444][ T5948] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1289.687458][ T5948] Call Trace: [ 1289.687467][ T5948] [ 1289.687478][ T5948] dump_stack_lvl+0x189/0x250 [ 1289.687511][ T5948] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1289.687534][ T5948] ? __pfx__printk+0x10/0x10 [ 1289.687564][ T5948] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 1289.687598][ T5948] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 1289.687633][ T5948] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 1289.687669][ T5948] warn_alloc+0x214/0x310 [ 1289.687705][ T5948] ? __pfx_warn_alloc+0x10/0x10 [ 1289.687742][ T5948] ? __get_vm_area_node+0x28f/0x300 [ 1289.687769][ T5948] ? htable_create+0x101/0x7a0 [ 1289.687802][ T5948] __vmalloc_node_range_noprof+0x690/0x12d0 [ 1289.687861][ T5948] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1289.687887][ T5948] ? htable_create+0x101/0x7a0 [ 1289.687915][ T5948] ? rcu_is_watching+0x15/0xb0 [ 1289.687941][ T5948] ? htable_create+0x101/0x7a0 [ 1289.687969][ T5948] __kvmalloc_node_noprof+0x670/0x910 [ 1289.687997][ T5948] ? htable_create+0x101/0x7a0 [ 1289.688022][ T5948] ? hashlimit_pernet+0x23/0x240 [ 1289.688050][ T5948] ? hashlimit_pernet+0x23/0x240 [ 1289.688075][ T5948] ? hashlimit_pernet+0x23/0x240 [ 1289.688111][ T5948] htable_create+0x101/0x7a0 [ 1289.688148][ T5948] hashlimit_mt_check_common+0x719/0xa10 [ 1289.688199][ T5948] xt_check_match+0x3d1/0xab0 [ 1289.688233][ T5948] ? __pfx_xt_check_match+0x10/0x10 [ 1289.688265][ T5948] ? pcpu_alloc_noprof+0xf95/0x1750 [ 1289.688307][ T5948] ? xt_find_match+0x1f7/0x250 [ 1289.688340][ T5948] translate_table+0x1553/0x2040 [ 1289.688386][ T5948] ? __pfx_translate_table+0x10/0x10 [ 1289.688411][ T5948] ? __might_fault+0xb0/0x130 [ 1289.688458][ T5948] ? _copy_from_user+0x94/0xb0 [ 1289.688495][ T5948] do_ip6t_set_ctl+0x970/0xce0 [ 1289.688522][ T5948] ? rcu_is_watching+0x15/0xb0 [ 1289.688547][ T5948] ? trace_contention_end+0x39/0x100 [ 1289.688572][ T5948] ? __pfx_do_ip6t_set_ctl+0x10/0x10 [ 1289.688621][ T5948] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1289.688657][ T5948] ? file_init_path+0x3b/0x590 [ 1289.688690][ T5948] nf_setsockopt+0x26f/0x290 [ 1289.688723][ T5948] rawv6_setsockopt+0x23b/0x5b0 [ 1289.688752][ T5948] ? __pfx_rawv6_setsockopt+0x10/0x10 [ 1289.688775][ T5948] ? aa_sock_opt_perm+0xff/0x1a0 [ 1289.688798][ T5948] ? sock_common_setsockopt+0x36/0xc0 [ 1289.688824][ T5948] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 1289.688853][ T5948] do_sock_setsockopt+0x17c/0x1b0 [ 1289.688887][ T5948] __x64_sys_setsockopt+0x13f/0x1b0 [ 1289.688923][ T5948] do_syscall_64+0xfa/0xf80 [ 1289.688950][ T5948] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1289.688971][ T5948] ? clear_bhb_loop+0x60/0xb0 [ 1289.688997][ T5948] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1289.689017][ T5948] RIP: 0033:0x7f3e9a58f749 [ 1289.689037][ T5948] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1289.689055][ T5948] RSP: 002b:00007f3e987f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1289.689077][ T5948] RAX: ffffffffffffffda RBX: 00007f3e9a7e6090 RCX: 00007f3e9a58f749 [ 1289.689093][ T5948] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 000000000000001d [ 1289.689106][ T5948] RBP: 00007f3e9a613f91 R08: 0000000000000588 R09: 0000000000000000 [ 1289.689119][ T5948] R10: 00002000000014c0 R11: 0000000000000246 R12: 0000000000000000 [ 1289.689133][ T5948] R13: 00007f3e9a7e6128 R14: 00007f3e9a7e6090 R15: 00007ffde4addf38 [ 1289.689177][ T5948] [ 1289.695619][ T5948] Mem-Info: [ 1289.988048][ T5926] lo speed is unknown, defaulting to 1000 [ 1290.003357][ T5948] active_anon:9241 inactive_anon:0 isolated_anon:0 [ 1290.003357][ T5948] active_file:3268 inactive_file:40275 isolated_file:0 [ 1290.003357][ T5948] unevictable:768 dirty:52 writeback:0 [ 1290.003357][ T5948] slab_reclaimable:14490 slab_unreclaimable:311740 [ 1290.003357][ T5948] mapped:31941 shmem:4242 pagetables:1306 [ 1290.003357][ T5948] sec_pagetables:0 bounce:0 [ 1290.003357][ T5948] kernel_misc_reclaimable:0 [ 1290.003357][ T5948] free:1089039 free_pcp:21549 free_cma:0 [ 1290.020221][ T5926] wg1 speed is unknown, defaulting to 1000 [ 1290.068707][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1290.083903][ T5948] Node 0 active_anon:36912kB inactive_anon:0kB active_file:13072kB inactive_file:160904kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:127808kB dirty:204kB writeback:0kB shmem:15500kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:17560kB pagetables:5088kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1290.133123][ T5926] wg1 speed is unknown, defaulting to 1000 [ 1290.155568][ T5930] x_tables: duplicate underflow at hook 1 [ 1290.212313][ T5948] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:168kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1290.267746][ T5948] Node 0 DMA free:10536kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:100kB local_pcp:96kB free_cma:0kB [ 1290.300809][ T5948] lowmem_reserve[]: 0 2504 2504 2504 2504 [ 1290.308462][ T5948] Node 0 DMA32 free:711360kB boost:0kB min:34308kB low:42884kB high:51460kB reserved_highatomic:0KB free_highatomic:0KB active_anon:36912kB inactive_anon:0kB active_file:13072kB inactive_file:160904kB unevictable:1536kB writepending:204kB zspages:0kB present:3129332kB managed:2564516kB mlocked:0kB bounce:0kB free_pcp:27052kB local_pcp:9944kB free_cma:0kB [ 1290.343187][ T5948] lowmem_reserve[]: 0 0 0 0 0 [ 1290.348905][ T5948] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1290.380104][ T5948] lowmem_reserve[]: 0 0 0 0 0 [ 1290.385022][ T5948] Node 1 Normal free:3634272kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:58308kB local_pcp:25612kB free_cma:0kB [ 1290.464966][ T5968] syzkaller0: entered promiscuous mode [ 1290.465053][ T5948] lowmem_reserve[]: [ 1290.470713][ T5968] syzkaller0: entered allmulticast mode [ 1290.483381][ T5948] 0 0 0 0 0 [ 1290.492231][ T5948] Node 0 DMA: 0*4kB 3*8kB (ME) 1*16kB (M) 4*32kB (ME) 0*64kB 1*128kB (M) 2*256kB (ME) 1*512kB (M) 3*1024kB (UME) 1*2048kB (E) 1*4096kB (M) = 10536kB [ 1290.554082][ T5970] __nla_validate_parse: 29 callbacks suppressed [ 1290.554105][ T5970] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8255'. [ 1290.579080][ T5948] Node 0 DMA32: 2766*4kB (UME) 1118*8kB (UME) 694*16kB (UME) 223*32kB (UM) 123*64kB (UM) 308*128kB (UME) 554*256kB (UM) 428*512kB (UM) 268*1024kB (UM) 0*2048kB 0*4096kB = 720936kB [ 1290.604224][ T5970] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8255'. [ 1290.632843][ T5948] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1290.665346][ T5948] Node 1 Normal: 193*4kB (UME) 54*8kB (UME) 46*16kB (UME) 242*32kB (UE) 93*64kB (UME) 15*128kB (UME) 6*256kB (UME) 7*512kB (UME) 7*1024kB (UME) 2*2048kB (UE) 879*4096kB (UM) = 3634324kB [ 1290.695800][ T5948] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1290.725718][ T5948] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1290.764670][ T5972] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8256'. [ 1290.778613][ T5973] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8255'. [ 1290.787188][ T5948] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1290.808143][ T5948] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1290.828403][ T5948] 44999 total pagecache pages [ 1290.846379][ T5972] "syz.3.8256" (5972) uses obsolete ecb(arc4) skcipher [ 1290.865969][ T5948] 0 pages in swap cache [ 1290.882942][ T5948] Free swap = 124996kB [ 1290.893249][ T5948] Total swap = 124996kB [ 1290.899819][ T5984] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8258'. [ 1290.917936][ T5948] 2097051 pages RAM [ 1290.921838][ T5948] 0 pages HighMem/MovableOnly [ 1290.937055][ T5984] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8258'. [ 1290.946568][ T5948] 424280 pages reserved [ 1290.953223][ T5948] 0 pages cma reserved [ 1291.178816][ T5997] netlink: 36 bytes leftover after parsing attributes in process `syz.4.8263'. [ 1291.203263][ T5997] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8263'. [ 1291.908254][ T5993] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1292.118473][ T6043] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8274'. [ 1292.152485][ T6043] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8274'. [ 1292.190426][ T6043] hsr_slave_0: left promiscuous mode [ 1292.208079][ T6043] hsr_slave_1: left promiscuous mode [ 1292.534802][ T6057] syzkaller0: left promiscuous mode [ 1292.560754][ T6057] syzkaller0: left allmulticast mode [ 1292.571970][ T6060] netlink: 'syz.3.8279': attribute type 16 has an invalid length. [ 1292.580299][ T6060] netlink: 'syz.3.8279': attribute type 17 has an invalid length. [ 1292.659538][ T6060] tipc: Resetting bearer [ 1292.729984][ T6433] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1292.749083][ T6433] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 1292.778110][ T6433] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1292.791339][ T6433] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 1292.858034][ T6433] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1292.870610][ T6433] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 20000 - 0 [ 1292.879914][ T6433] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1292.911317][ T6433] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 20000 - 0 [ 1292.968496][ T6072] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1292.991498][ T6076] netlink: 'syz.4.8284': attribute type 10 has an invalid length. [ 1293.001039][ T6074] netlink: 'syz.4.8284': attribute type 10 has an invalid length. [ 1293.062835][ T6076] bridge0: entered promiscuous mode [ 1293.081167][ T6076] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 1293.372754][ T6091] pim6reg: entered allmulticast mode [ 1293.381368][ T6091] pim6reg: left allmulticast mode [ 1294.262351][ T6089] lo speed is unknown, defaulting to 1000 [ 1294.291851][ T6089] wg1 speed is unknown, defaulting to 1000 [ 1294.323633][ T6089] wg1 speed is unknown, defaulting to 1000 [ 1294.639956][ T6093] lo speed is unknown, defaulting to 1000 [ 1294.648253][ T6093] wg1 speed is unknown, defaulting to 1000 [ 1294.656335][ T6093] wg1 speed is unknown, defaulting to 1000 [ 1295.225673][ T6126] lo speed is unknown, defaulting to 1000 [ 1295.237278][ T6126] wg1 speed is unknown, defaulting to 1000 [ 1295.256354][ T6126] wg1 speed is unknown, defaulting to 1000 [ 1295.296312][ T6142] netlink: 'syz.4.8302': attribute type 10 has an invalid length. [ 1295.369213][ T6148] netlink: 'syz.4.8302': attribute type 10 has an invalid length. [ 1295.378589][ T6142] dummy0: entered promiscuous mode [ 1295.402305][ T6142] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 1295.434164][ T6142] team0: Failed to send options change via netlink (err -105) [ 1295.478330][ T6142] team0: Port device dummy0 added [ 1295.523398][ T6148] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 1295.593305][ T6159] __nla_validate_parse: 1 callbacks suppressed [ 1295.593325][ T6159] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8306'. [ 1295.594999][ T6148] dummy0: left promiscuous mode [ 1295.690733][ T6148] team0: Failed to send options change via netlink (err -105) [ 1295.717102][ T6148] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 1295.731575][ T6148] team0: Port device dummy0 removed [ 1295.752564][ T6148] dummy0: entered promiscuous mode [ 1295.769306][ T6165] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8307'. [ 1295.779242][ T6148] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1295.810501][ T6166] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8306'. [ 1295.842418][ T6159] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1295.859571][ T6169] netlink: 56 bytes leftover after parsing attributes in process `syz.3.8307'. [ 1295.940110][ T6169] bond5 (unregistering): Released all slaves [ 1295.964980][ T6166] nbd: socks must be embedded in a SOCK_ITEM attr [ 1296.024005][ T6162] bond8: option ad_select: unable to set because the bond device is up [ 1296.148984][ T6182] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8307'. [ 1296.364385][ T6179] syzkaller1: entered promiscuous mode [ 1296.370300][ T6179] syzkaller1: entered allmulticast mode [ 1297.210181][ T6156] lo speed is unknown, defaulting to 1000 [ 1297.850379][ T6161] lo speed is unknown, defaulting to 1000 [ 1297.898200][ T6156] wg1 speed is unknown, defaulting to 1000 [ 1298.018557][ T6156] wg1 speed is unknown, defaulting to 1000 [ 1298.033339][ T6161] wg1 speed is unknown, defaulting to 1000 [ 1298.064877][ T6161] wg1 speed is unknown, defaulting to 1000 [ 1298.263004][ T6230] lo speed is unknown, defaulting to 1000 [ 1298.376549][ T6230] wg1 speed is unknown, defaulting to 1000 [ 1298.515860][ T6240] netlink: 'syz.0.8323': attribute type 1 has an invalid length. [ 1298.524887][ T6240] netlink: 'syz.0.8323': attribute type 4 has an invalid length. [ 1298.534308][ T6240] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.8323'. [ 1298.545231][ T6240] netlink: 'syz.0.8323': attribute type 1 has an invalid length. [ 1298.554736][ T6240] netlink: 'syz.0.8323': attribute type 4 has an invalid length. [ 1298.566054][ T6240] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.8323'. [ 1298.679200][ T6230] wg1 speed is unknown, defaulting to 1000 [ 1298.958686][ T6254] netlink: 3 bytes leftover after parsing attributes in process `syz.3.8325'. [ 1299.039597][ T6254] syz_tun: entered promiscuous mode [ 1299.480773][ T6267] netlink: 212088 bytes leftover after parsing attributes in process `syz.2.8330'. [ 1299.600904][ T6269] IPVS: set_ctl: invalid protocol: 0 127.0.0.1:20003 [ 1299.688354][ T6272] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8332'. [ 1299.846249][ T6280] netlink: 'syz.2.8335': attribute type 1 has an invalid length. [ 1300.449702][ T6299] bridge12: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 1300.842708][ T6292] lo speed is unknown, defaulting to 1000 [ 1300.852876][ T6293] netlink: 'syz.3.8338': attribute type 10 has an invalid length. [ 1300.872363][ T6292] wg1 speed is unknown, defaulting to 1000 [ 1300.888674][ T6292] wg1 speed is unknown, defaulting to 1000 [ 1300.938956][ T6312] __nla_validate_parse: 3 callbacks suppressed [ 1300.938976][ T6312] netlink: 152 bytes leftover after parsing attributes in process `syz.1.8345'. [ 1301.010763][ T6312] netlink: 152 bytes leftover after parsing attributes in process `syz.1.8345'. [ 1301.466423][ T6334] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8351'. [ 1301.496324][ T6334] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8351'. [ 1301.680914][ T6334] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8351'. [ 1301.754018][ T6334] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8351'. [ 1301.984142][ T6334] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8351'. [ 1302.037288][ T6334] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8351'. [ 1302.303292][ T6363] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8356'. [ 1302.346067][ T6328] lo speed is unknown, defaulting to 1000 [ 1302.356504][ T6328] wg1 speed is unknown, defaulting to 1000 [ 1302.409580][ T6328] wg1 speed is unknown, defaulting to 1000 [ 1302.524840][ T6377] netlink: 'syz.1.8360': attribute type 1 has an invalid length. [ 1302.533783][ T6377] netlink: 244 bytes leftover after parsing attributes in process `syz.1.8360'. [ 1302.544271][ T6377] NCSI netlink: No device for ifindex 0 [ 1302.810541][ T6384] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1303.154075][ T6413] Bluetooth: MGMT ver 1.23 [ 1303.264751][ T6418] netlink: 'syz.3.8372': attribute type 11 has an invalid length. [ 1303.448402][ T6502] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 1303.476331][ T6432] x_tables: duplicate underflow at hook 2 [ 1304.211444][ T6444] block nbd2: Unsupported socket: should be TCP or UNIX. [ 1304.240940][ T6446] syzkaller0: entered promiscuous mode [ 1304.246632][ T6446] syzkaller0: entered allmulticast mode [ 1304.256371][ T6444] syz_tun: entered allmulticast mode [ 1304.330904][ T6443] syz_tun: left allmulticast mode [ 1304.390808][ T6455] sch_fq: defrate 8675 ignored. [ 1304.509622][ T6458] veth0_to_hsr: Caught tx_queue_len zero misconfig [ 1304.683400][ T6454] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1305.317403][ T6472] lo speed is unknown, defaulting to 1000 [ 1305.325167][ T6472] wg1 speed is unknown, defaulting to 1000 [ 1305.333181][ T6472] wg1 speed is unknown, defaulting to 1000 [ 1305.514607][ T6491] nbd: socks must be embedded in a SOCK_ITEM attr [ 1306.181659][ T6531] __nla_validate_parse: 4 callbacks suppressed [ 1306.181680][ T6531] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8402'. [ 1306.218142][ T6531] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8402'. [ 1306.313152][ T6537] netlink: 32 bytes leftover after parsing attributes in process `syz.1.8403'. [ 1306.323465][ T6538] netlink: 52 bytes leftover after parsing attributes in process `syz.1.8403'. [ 1306.837669][ T6549] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.8406'. [ 1306.879157][ T6546] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.8406'. [ 1306.966346][ T6560] netlink: 'syz.2.8410': attribute type 2 has an invalid length. [ 1307.073985][ T6560] !: entered promiscuous mode [ 1307.094007][ T6565] netlink: 'syz.1.8412': attribute type 12 has an invalid length. [ 1307.116528][ T6565] netlink: 'syz.1.8412': attribute type 29 has an invalid length. [ 1307.159620][ T6565] netlink: 148 bytes leftover after parsing attributes in process `syz.1.8412'. [ 1307.200495][ T6565] netlink: 'syz.1.8412': attribute type 2 has an invalid length. [ 1307.244288][ T6565] netlink: 23 bytes leftover after parsing attributes in process `syz.1.8412'. [ 1307.254738][ T6568] syzkaller1: entered promiscuous mode [ 1307.277781][ T6568] syzkaller1: entered allmulticast mode [ 1307.290044][ T6565] netlink: 'syz.1.8412': attribute type 12 has an invalid length. [ 1307.303257][ T6565] netlink: 'syz.1.8412': attribute type 29 has an invalid length. [ 1307.327236][ T6565] netlink: 148 bytes leftover after parsing attributes in process `syz.1.8412'. [ 1307.342368][ T6565] netlink: 'syz.1.8412': attribute type 2 has an invalid length. [ 1307.351431][ T6565] netlink: 23 bytes leftover after parsing attributes in process `syz.1.8412'. [ 1307.441124][ T6565] netlink: 'syz.1.8412': attribute type 12 has an invalid length. [ 1307.452707][ T6565] netlink: 'syz.1.8412': attribute type 29 has an invalid length. [ 1307.461978][ T6565] netlink: 'syz.1.8412': attribute type 2 has an invalid length. [ 1307.869894][ T6611] vlan3: entered promiscuous mode [ 1307.875020][ T6611] bond0: entered promiscuous mode [ 1307.888280][ T6611] bond_slave_0: entered promiscuous mode [ 1307.896985][ T6611] bond_slave_1: entered promiscuous mode [ 1307.904154][ T6611] batadv0: entered promiscuous mode [ 1309.099687][ T6666] tipc: Enabling of bearer rejected, already enabled [ 1309.314426][ T6675] geneve4: entered promiscuous mode [ 1309.323177][T14169] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 1309.343059][T14169] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 1309.363180][T14169] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 1309.372531][T14169] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 1310.350900][ T6725] bond0: (slave bridge0): Releasing backup interface [ 1310.373660][ T6725] bridge0: left promiscuous mode [ 1310.446605][ T6725] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 1310.731323][ T6732] bond8: option arp_validate: invalid value (18446744073491447809) [ 1310.759441][ T6732] bond8 (unregistering): Released all slaves [ 1310.828866][ T6737] openvswitch: netlink: Flow key attr not present in new flow. [ 1310.881865][ T6745] tipc: Enabled bearer , priority 0 [ 1310.889994][ T6745] syzkaller0: entered promiscuous mode [ 1310.895524][ T6745] syzkaller0: entered allmulticast mode [ 1310.933638][ T6745] tipc: Resetting bearer [ 1310.942690][ T6744] tipc: Resetting bearer [ 1310.993093][ T6744] tipc: Disabling bearer [ 1311.414881][ T6765] __nla_validate_parse: 137 callbacks suppressed [ 1311.414903][ T6765] netlink: 40 bytes leftover after parsing attributes in process `syz.1.8463'. [ 1311.434987][ T6768] netlink: 40 bytes leftover after parsing attributes in process `syz.3.8464'. [ 1311.445518][ T6768] netlink: 560 bytes leftover after parsing attributes in process `syz.3.8464'. [ 1311.574949][ T6752] lo speed is unknown, defaulting to 1000 [ 1311.590893][ T6752] wg1 speed is unknown, defaulting to 1000 [ 1311.643028][ T6776] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 1311.654892][ T6752] wg1 speed is unknown, defaulting to 1000 [ 1311.965573][ T6788] tipc: Enabled bearer , priority 0 [ 1311.974650][ T6790] xt_addrtype: ipv6 does not support BROADCAST matching [ 1311.974785][ T6788] syzkaller0: entered promiscuous mode [ 1311.988333][ T6788] syzkaller0: entered allmulticast mode [ 1312.079237][ T6788] tipc: Resetting bearer [ 1312.099907][ T6787] tipc: Resetting bearer [ 1312.188711][ T6787] tipc: Disabling bearer [ 1312.286187][ T6796] validate_nla: 220 callbacks suppressed [ 1312.286209][ T6796] netlink: 'syz.3.8472': attribute type 1 has an invalid length. [ 1312.488297][ T6809] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8472'. [ 1312.542035][ T6805] bond5: (slave veth13): Enslaving as an active interface with a down link [ 1312.564909][ T6796] : renamed from veth0_to_bond [ 1312.590784][ T6809] bond5 (unregistering): (slave veth13): Releasing active interface [ 1312.642499][ T6809] bond5 (unregistering): Released all slaves [ 1312.905025][ T6819] bond0: (slave wlan1): Releasing backup interface [ 1312.940380][ T6832] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8478'. [ 1313.077712][ T6817] tipc: Enabled bearer , priority 0 [ 1313.085498][ T6821] syzkaller0: entered promiscuous mode [ 1313.091477][ T6821] syzkaller0: entered allmulticast mode [ 1313.139523][ T6817] tipc: Resetting bearer [ 1313.208135][ T6815] tipc: Resetting bearer [ 1313.222314][ T6843] netlink: 64 bytes leftover after parsing attributes in process `syz.3.8482'. [ 1313.261406][ T6843] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8482'. [ 1313.275508][ T6815] tipc: Disabling bearer [ 1313.295824][ T6850] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8484'. [ 1313.374617][ T6856] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8484'. [ 1313.468356][ T6859] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8484'. [ 1313.703284][ T6872] netlink: 'syz.4.8488': attribute type 6 has an invalid length. [ 1313.865181][ T6872] hsr_slave_1 (unregistering): left promiscuous mode [ 1313.912110][ T6883] netlink: 'syz.0.8491': attribute type 18 has an invalid length. [ 1314.132732][ T6897] netlink: 'syz.4.8494': attribute type 30 has an invalid length. [ 1314.376043][ T6907] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1317.041373][ T6899] lo speed is unknown, defaulting to 1000 [ 1317.049034][ T6899] wg1 speed is unknown, defaulting to 1000 [ 1317.072044][ T6899] wg1 speed is unknown, defaulting to 1000 [ 1317.265335][ T6949] __nla_validate_parse: 11 callbacks suppressed [ 1317.265359][ T6949] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8507'. [ 1317.282223][ T1139] bond0: (slave bond_slave_0): interface is now down [ 1317.297466][ T1139] bond0: (slave bond_slave_1): interface is now down [ 1317.327283][ T1139] bond0: (slave batadv0): interface is now down [ 1317.365908][ T1139] bond0: now running without any active interface! [ 1317.674557][ T6924] lo speed is unknown, defaulting to 1000 [ 1317.682681][ T6924] wg1 speed is unknown, defaulting to 1000 [ 1317.708762][ T6924] wg1 speed is unknown, defaulting to 1000 [ 1318.152960][ T6983] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8513'. [ 1318.170134][ T6986] tipc: Invalid UDP bearer configuration [ 1318.170189][ T6986] tipc: Enabling of bearer rejected, failed to enable media [ 1318.239886][ T6991] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8513'. [ 1318.549847][ T7003] netlink: 1 bytes leftover after parsing attributes in process `syz.3.8517'. [ 1318.872783][ T7023] ip6t_srh: unknown srh match flags 4000 [ 1318.902566][ T7023] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8523'. [ 1318.954105][ T7027] netlink: 'syz.4.8523': attribute type 4 has an invalid length. [ 1318.992475][ T7023] netlink: 'syz.4.8523': attribute type 4 has an invalid length. [ 1319.181966][ T7037] netlink: 36 bytes leftover after parsing attributes in process `syz.2.8526'. [ 1319.817776][ T7061] netlink: 48 bytes leftover after parsing attributes in process `syz.2.8533'. [ 1319.832217][ T7033] lo speed is unknown, defaulting to 1000 [ 1319.860080][ T7033] wg1 speed is unknown, defaulting to 1000 [ 1319.899854][ T7033] wg1 speed is unknown, defaulting to 1000 [ 1320.277010][ T7080] netlink: 'syz.3.8539': attribute type 13 has an invalid length. [ 1320.676395][ T7062] lo speed is unknown, defaulting to 1000 [ 1320.740887][ T7062] wg1 speed is unknown, defaulting to 1000 [ 1320.839654][ T7062] wg1 speed is unknown, defaulting to 1000 [ 1321.065127][ T7094] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1321.294339][ T7103] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8544'. [ 1321.393513][ T7109] xt_hashlimit: invalid interval [ 1321.399111][ T7108] xt_hashlimit: invalid interval [ 1321.633789][ T7121] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8550'. [ 1321.678902][ T7093] lo speed is unknown, defaulting to 1000 [ 1321.686516][ T7093] wg1 speed is unknown, defaulting to 1000 [ 1321.839438][ T7093] wg1 speed is unknown, defaulting to 1000 [ 1321.845596][ T7130] netlink: zone id is out of range [ 1321.868264][ T7130] netlink: zone id is out of range [ 1321.873458][ T7130] netlink: zone id is out of range [ 1321.897859][ T7130] netlink: zone id is out of range [ 1321.949878][ T7130] netlink: zone id is out of range [ 1321.955210][ T7130] netlink: zone id is out of range [ 1321.960948][ T7130] netlink: zone id is out of range [ 1321.966239][ T7130] netlink: zone id is out of range [ 1321.975137][ T7130] netlink: zone id is out of range [ 1322.361227][ T7151] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8557'. [ 1322.760231][ T7162] tipc: Enabled bearer , priority 0 [ 1322.768740][ T7162] syzkaller0: entered promiscuous mode [ 1322.774264][ T7162] syzkaller0: entered allmulticast mode [ 1322.848362][ T7169] x_tables: duplicate underflow at hook 1 [ 1322.897302][ T7162] tipc: Resetting bearer [ 1322.914750][ T7178] erspan0: left allmulticast mode [ 1322.938256][ T7178] syz_tun: left promiscuous mode [ 1322.960675][ T7178] veth0_to_team: left promiscuous mode [ 1322.992839][ T7178] bond1: left allmulticast mode [ 1323.009318][ T7178] geneve3: left promiscuous mode [ 1323.022603][ T7178] veth11: left promiscuous mode [ 1323.041731][ T7178] syzkaller0: left promiscuous mode [ 1323.048425][ T7178] syzkaller0: left allmulticast mode [ 1323.054389][ T7178] ip6gretap1: left promiscuous mode [ 1323.061434][ T7178] ip6gretap1: left allmulticast mode [ 1323.070216][ T7162] tipc: Resetting bearer [ 1323.133567][ T7162] tipc: Disabling bearer [ 1323.895714][ T7219] syz_tun: entered allmulticast mode [ 1324.037317][ T7199] lo speed is unknown, defaulting to 1000 [ 1324.052921][ T7199] wg1 speed is unknown, defaulting to 1000 [ 1324.076203][ T7199] wg1 speed is unknown, defaulting to 1000 [ 1324.106598][ T7225] netlink: 'syz.4.8573': attribute type 3 has an invalid length. [ 1324.124988][ T7225] netlink: 'syz.4.8573': attribute type 1 has an invalid length. [ 1324.145147][ T7225] netlink: 224 bytes leftover after parsing attributes in process `syz.4.8573'. [ 1324.193514][ T7225] NCSI netlink: No device for ifindex 23016 [ 1324.194470][ T7226] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8573'. [ 1324.478615][ T7228] netlink: 63 bytes leftover after parsing attributes in process `syz.0.8574'. [ 1324.608273][ T7234] batadv1: entered promiscuous mode [ 1324.710734][ T7221] syz_tun: left allmulticast mode [ 1324.730601][ T7238] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8576'. [ 1324.782492][ T7242] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8576'. [ 1325.262234][ T7234] lo speed is unknown, defaulting to 1000 [ 1325.270705][ T7234] wg1 speed is unknown, defaulting to 1000 [ 1325.282264][ T7234] wg1 speed is unknown, defaulting to 1000 [ 1325.500584][ T7260] netlink: 'syz.3.8580': attribute type 11 has an invalid length. [ 1325.527798][ T7260] netlink: 224 bytes leftover after parsing attributes in process `syz.3.8580'. [ 1325.820984][ T7274] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8584'. [ 1325.862027][ T7274] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8584'. [ 1325.928696][ T7281] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8586'. [ 1325.971944][ T7278] ip6gre1: entered allmulticast mode [ 1326.334152][ T7290] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1326.345877][ T7290] team0: Port device bond10 added [ 1328.964915][ T7337] __nla_validate_parse: 2 callbacks suppressed [ 1328.964936][ T7337] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8597'. [ 1328.990752][ T7340] xt_socket: unknown flags 0x50 [ 1329.299539][ T7365] netlink: 'syz.0.8606': attribute type 30 has an invalid length. [ 1329.347612][ T7360] netlink: 'syz.4.8605': attribute type 29 has an invalid length. [ 1329.788752][ T7401] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8612'. [ 1329.812794][ T7400] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8612'. [ 1330.208196][ T7419] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8616'. [ 1330.389861][ T7424] netlink: 20 bytes leftover after parsing attributes in process `syz.4.8619'. [ 1330.426418][ T7424] netlink: 'syz.4.8619': attribute type 1 has an invalid length. [ 1330.498994][ T7426] netlink: 6 bytes leftover after parsing attributes in process `syz.3.8618'. [ 1330.548890][ T7426] net_ratelimit: 2 callbacks suppressed [ 1330.548912][ T7426] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1330.626116][ T7413] lo speed is unknown, defaulting to 1000 [ 1330.644222][ T7413] wg1 speed is unknown, defaulting to 1000 [ 1330.656007][ T7413] wg1 speed is unknown, defaulting to 1000 [ 1330.882442][ T7434] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8620'. [ 1331.136946][ T7425] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 1331.788763][ T7479] bond3: option mode: unable to set because the bond device has slaves [ 1331.941794][ T7490] netlink: 48 bytes leftover after parsing attributes in process `syz.0.8634'. [ 1332.037892][ T7495] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8636'. [ 1332.069499][ T7495] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1332.092331][ T7495] netlink: 'syz.0.8636': attribute type 1 has an invalid length. [ 1332.110178][ T7493] xt_CT: No such helper "netbios-ns" [ 1332.211706][ T7495] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1332.358742][ T7505] veth5: entered promiscuous mode [ 1332.400477][ T7505] bond9: (slave veth5): Enslaving as an active interface with a down link [ 1332.429977][ T7495] erspan0: entered allmulticast mode [ 1332.460739][ T7495] bond9: (slave erspan0): making interface the new active one [ 1332.515639][ T7495] erspan0: entered promiscuous mode [ 1332.534337][ T7495] bond9: (slave erspan0): Enslaving as an active interface with an up link [ 1332.611228][ T7514] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1332.919176][ T7507] Cannot find del_set index 4 as target [ 1332.941401][ T7527] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8644'. [ 1333.333055][ T7541] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 1333.374098][ T7530] lo speed is unknown, defaulting to 1000 [ 1333.382008][ T7530] wg1 speed is unknown, defaulting to 1000 [ 1333.391400][ T7530] wg1 speed is unknown, defaulting to 1000 [ 1333.836142][ T7570] netlink: zone id is out of range [ 1333.886207][ T7570] netlink: get zone limit has 4 unknown bytes [ 1333.995335][ T7569] workqueue: Failed to create a rescuer kthread for wq "bond12": -EINTR [ 1334.165173][ T7593] pimreg: entered allmulticast mode [ 1334.224027][ T7593] macvlan2: entered allmulticast mode [ 1334.239419][ T7593] veth1_vlan: entered allmulticast mode [ 1334.266355][ T7593] macvlan2: entered promiscuous mode [ 1334.288248][ T7593] bond0: (slave macvlan2): Enslaving as an active interface with an up link [ 1334.402083][ T7603] __nla_validate_parse: 5 callbacks suppressed [ 1334.402104][ T7603] netlink: 6 bytes leftover after parsing attributes in process `syz.3.8662'. [ 1334.418637][ T7603] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1334.431176][ T7575] lo speed is unknown, defaulting to 1000 [ 1334.448692][ T7592] pimreg: left allmulticast mode [ 1334.547909][ T7575] wg1 speed is unknown, defaulting to 1000 [ 1334.614916][ T7599] netlink: 'syz.0.8661': attribute type 13 has an invalid length. [ 1334.635246][ T7598] bond10: option arp_validate: invalid value (18446744073491447809) [ 1334.657385][ T7607] netlink: 'syz.3.8663': attribute type 21 has an invalid length. [ 1334.698395][ T7598] bond10 (unregistering): Released all slaves [ 1334.953074][ T7617] netlink: 64 bytes leftover after parsing attributes in process `syz.4.8666'. [ 1335.185870][ T7607] netlink: 156 bytes leftover after parsing attributes in process `syz.3.8663'. [ 1335.195456][ T7575] wg1 speed is unknown, defaulting to 1000 [ 1335.213169][ T7617] team0: Mode changed to "loadbalance" [ 1335.237396][ T6777] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1335.245817][ T6777] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1335.268132][ T6777] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1335.298097][ T6777] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1335.339494][ T6777] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1335.356179][ T6777] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1335.365365][ T7462] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1335.387175][ T7462] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1335.479909][ T7629] tipc: Enabling of bearer rejected, already enabled [ 1335.493556][ T7629] syzkaller0: entered promiscuous mode [ 1335.510192][ T7629] syzkaller0: entered allmulticast mode [ 1335.575744][ T7629] netem: change failed [ 1335.583286][ T7633] netlink: 'syz.4.8670': attribute type 10 has an invalid length. [ 1335.615640][ T7629] netlink: 44 bytes leftover after parsing attributes in process `syz.3.8672'. [ 1335.643105][ T7633] netlink: 228 bytes leftover after parsing attributes in process `syz.4.8670'. [ 1335.664985][ T7629] tipc: Resetting bearer [ 1335.741968][ T7639] netlink: 'syz.0.8673': attribute type 10 has an invalid length. [ 1335.751032][ T7639] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8673'. [ 1335.879931][ T7628] lo speed is unknown, defaulting to 1000 [ 1335.888221][ T7628] wg1 speed is unknown, defaulting to 1000 [ 1335.975357][ T7649] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8675'. [ 1336.002076][ T7628] wg1 speed is unknown, defaulting to 1000 [ 1336.612362][ T7676] netlink: 6 bytes leftover after parsing attributes in process `syz.0.8682'. [ 1336.631597][ T7676] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8682'. [ 1336.657660][ T7674] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8681'. [ 1337.145850][ T7668] lo speed is unknown, defaulting to 1000 [ 1337.179193][ T7668] wg1 speed is unknown, defaulting to 1000 [ 1337.242268][ T7668] wg1 speed is unknown, defaulting to 1000 [ 1338.196291][ T7714] lo speed is unknown, defaulting to 1000 [ 1338.205326][ T7714] wg1 speed is unknown, defaulting to 1000 [ 1338.227720][ T7714] wg1 speed is unknown, defaulting to 1000 [ 1338.244310][ T7725] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1338.603686][ T7737] gretap0: entered promiscuous mode [ 1338.618906][ T7737] gretap0: left promiscuous mode [ 1338.683026][ T7743] veth0_to_team: entered promiscuous mode [ 1338.865518][ T7754] xt_ecn: cannot match TCP bits for non-tcp packets [ 1338.973673][ T7759] veth0_to_bridge: entered promiscuous mode [ 1339.021731][ T7761] syzkaller0: left promiscuous mode [ 1339.027388][ T7761] syzkaller0: left allmulticast mode [ 1339.033697][ T7756] pim6reg1: entered promiscuous mode [ 1339.043929][ T7756] pim6reg1: entered allmulticast mode [ 1339.055893][ T30] audit: type=1800 audit(1765505394.583:23): pid=7765 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.8708" name="blkio.bfq.time_recursive" dev="tmpfs" ino=2620 res=0 errno=0 [ 1339.185916][ T7755] veth0_to_bridge: left promiscuous mode [ 1339.620422][ T7773] lo speed is unknown, defaulting to 1000 [ 1339.639087][ T7773] wg1 speed is unknown, defaulting to 1000 [ 1339.654512][ T7773] wg1 speed is unknown, defaulting to 1000 [ 1339.749465][ T7752] delete_channel: no stack [ 1339.878785][ T7797] netlink: 'syz.3.8717': attribute type 1 has an invalid length. [ 1340.050530][ T7809] batadv1: entered promiscuous mode [ 1340.088747][ T7811] __nla_validate_parse: 4 callbacks suppressed [ 1340.088768][ T7811] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8721'. [ 1340.219954][ T7811] bond5: entered promiscuous mode [ 1340.225375][ T7811] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1340.362167][ T7836] SET target dimension over the limit! [ 1340.413475][ T7836] netlink: 96 bytes leftover after parsing attributes in process `syz.2.8727'. [ 1340.605919][ T7844] tipc: Enabling of bearer rejected, failed to enable media [ 1340.658430][ T7843] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8729'. [ 1340.720746][ T7853] netlink: 36 bytes leftover after parsing attributes in process `syz.4.8731'. [ 1340.785096][ T7858] netlink: 56 bytes leftover after parsing attributes in process `syz.4.8731'. [ 1341.092781][ T7865] syzkaller0: entered promiscuous mode [ 1341.100941][ T7865] syzkaller0: entered allmulticast mode [ 1341.101340][ T7868] Cannot find del_set index 4 as target [ 1341.127065][ T7866] netlink: 'syz.3.8735': attribute type 6 has an invalid length. [ 1341.148645][ T7865] netlink: 40 bytes leftover after parsing attributes in process `syz.4.8734'. [ 1341.259374][ T7870] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8736'. [ 1341.376108][ T7877] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8737'. [ 1341.430361][ T7877] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1341.700089][ T7895] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8741'. [ 1341.751650][ T7894] nbd: socks must be embedded in a SOCK_ITEM attr [ 1341.851713][ T7900] netlink: 44 bytes leftover after parsing attributes in process `syz.1.8742'. [ 1341.853351][ T7899] netlink: 'syz.1.8742': attribute type 21 has an invalid length. [ 1341.922450][ T7900] netlink: 'syz.1.8742': attribute type 6 has an invalid length. [ 1341.983732][ T7900] netlink: 'syz.1.8742': attribute type 5 has an invalid length. [ 1344.112831][ T7899] netlink: 'syz.1.8742': attribute type 6 has an invalid length. [ 1344.122293][ T7880] lo speed is unknown, defaulting to 1000 [ 1344.131882][ T7880] wg1 speed is unknown, defaulting to 1000 [ 1344.153665][ T7880] wg1 speed is unknown, defaulting to 1000 [ 1344.342979][ T7914] veth0: entered promiscuous mode [ 1344.460860][ T7914] veth0 (unregistering): left promiscuous mode [ 1344.732831][ T7930] xt_hashlimit: size too large, truncated to 1048576 [ 1345.193681][ T7917] lo speed is unknown, defaulting to 1000 [ 1345.227469][ T7917] wg1 speed is unknown, defaulting to 1000 [ 1345.278701][ T7942] netlink: 'syz.2.8752': attribute type 3 has an invalid length. [ 1345.306210][ T7917] wg1 speed is unknown, defaulting to 1000 [ 1345.307749][ T7942] netlink: 'syz.2.8752': attribute type 3 has an invalid length. [ 1345.359943][ T7942] __nla_validate_parse: 6 callbacks suppressed [ 1345.359965][ T7942] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8752'. [ 1345.470762][ T7950] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8754'. [ 1345.681308][ T7951] .70: left allmulticast mode [ 1345.686241][ T7951] hsr_slave_0: left allmulticast mode [ 1345.720386][ T7951] geneve2: left promiscuous mode [ 1345.736374][ T7951] bond4: left promiscuous mode [ 1345.747441][ T7951] bond4: left allmulticast mode [ 1345.768055][ T7951] bond5: left promiscuous mode [ 1345.773793][ T7951] bridge1: left promiscuous mode [ 1345.784462][ T7951] geneve3: left promiscuous mode [ 1345.792222][ T7951] bond7: left promiscuous mode [ 1345.798781][ T7951] veth3: left promiscuous mode [ 1345.806119][ T7951] veth7: left promiscuous mode [ 1345.815961][ T7951] bond11: left promiscuous mode [ 1345.822535][ T7951] veth9: left promiscuous mode [ 1345.830003][ T7951] veth11: left promiscuous mode [ 1345.835696][ T7951] ip6gre1: left allmulticast mode [ 1345.843415][ T7951] veth1_vlan: left allmulticast mode [ 1345.850705][ T7951] macvlan2: left allmulticast mode [ 1346.198154][ T7940] lo speed is unknown, defaulting to 1000 [ 1346.234684][ T7940] wg1 speed is unknown, defaulting to 1000 [ 1346.251142][ T7940] wg1 speed is unknown, defaulting to 1000 [ 1346.599873][ T7983] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8762'. [ 1346.670519][ T7987] netlink: 'syz.4.8765': attribute type 11 has an invalid length. [ 1346.888238][ T7997] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1346.918171][ T8002] Cannot find del_set index 2 as target [ 1347.097401][ T8013] netlink: 108 bytes leftover after parsing attributes in process `syz.2.8771'. [ 1347.106794][ T8013] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8771'. [ 1347.137087][ T8009] tipc: Enabling of bearer rejected, failed to enable media [ 1347.327849][ T8023] netlink: 'syz.0.8774': attribute type 2 has an invalid length. [ 1347.351478][ T8025] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8775'. [ 1347.369404][ T8026] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8773'. [ 1347.375423][ T8023] !9: entered promiscuous mode [ 1347.388204][ T8023] netlink: 'syz.0.8774': attribute type 2 has an invalid length. [ 1347.431968][ T8029] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8773'. [ 1347.576089][ T8043] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8774'. [ 1347.621280][ T8025] batadv0 (unregistering): left promiscuous mode [ 1347.630990][ T8040] xt_CT: No such helper "snmp" [ 1347.702908][ T8026] team0: entered promiscuous mode [ 1347.709784][ T8026] team0: entered allmulticast mode [ 1347.715352][ T8026] 8021q: adding VLAN 0 to HW filter on device team0 [ 1347.722813][ T8023] !9: left promiscuous mode [ 1347.752758][ T8029] team1 (uninitialized): Failed to send options change via netlink (err -105) [ 1347.794463][ T8029] team1: entered promiscuous mode [ 1347.800245][ T8029] team1: entered allmulticast mode [ 1347.806114][ T8029] 8021q: adding VLAN 0 to HW filter on device team1 [ 1348.505514][ T8085] bond10: Unable to set down delay as MII monitoring is disabled [ 1348.546269][ T8085] bond10 (unregistering): Released all slaves [ 1348.659972][ T8083] tipc: Enabling of bearer rejected, already enabled [ 1348.717674][ T8091] netem: change failed [ 1348.879644][ T8108] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1349.059230][ T8113] xt_hashlimit: size too large, truncated to 1048576 [ 1349.074334][ T8113] xt_hashlimit: max too large, truncated to 1048576 [ 1349.155643][ T8113] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1349.458767][ T8125] netlink: 277 bytes leftover after parsing attributes in process `syz.4.8798'. [ 1349.850256][ T8139] sctp: [Deprecated]: syz.0.8796 (pid 8139) Use of int in max_burst socket option. [ 1349.850256][ T8139] Use struct sctp_assoc_value instead [ 1350.688610][ T8187] __nla_validate_parse: 2 callbacks suppressed [ 1350.688633][ T8187] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8816'. [ 1350.879303][ T8192] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8818'. [ 1351.059134][ T5848] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1351.072003][ T5848] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1351.081162][ T5848] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1351.093733][ T5848] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1351.101686][ T5848] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1351.896068][ T8220] syzkaller0: entered promiscuous mode [ 1351.905925][ T8220] syzkaller0: entered allmulticast mode [ 1351.944294][ T8222] bond0: (slave dummy0): Releasing backup interface [ 1351.968686][ T8222] dummy0: left promiscuous mode [ 1352.272226][ T8200] lo speed is unknown, defaulting to 1000 [ 1352.292800][ T8200] wg1 speed is unknown, defaulting to 1000 [ 1352.322220][ T8200] wg1 speed is unknown, defaulting to 1000 [ 1352.544921][ T8242] netlink: 48 bytes leftover after parsing attributes in process `syz.3.8831'. [ 1352.866449][ T8259] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8834'. [ 1352.891633][ T8259] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8834'. [ 1352.975532][ T8200] chnl_net:caif_netlink_parms(): no params data found [ 1353.046145][ T8269] tipc: Enabling of bearer rejected, failed to enable media [ 1353.189554][ T5848] Bluetooth: hci0: command tx timeout [ 1353.364833][ T8290] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.8841'. [ 1353.418985][ T8200] bridge0: port 1(bridge_slave_0) entered blocking state [ 1353.426269][ T8200] bridge0: port 1(bridge_slave_0) entered disabled state [ 1353.441694][ T8200] bridge_slave_0: entered allmulticast mode [ 1353.451090][ T8200] bridge_slave_0: entered promiscuous mode [ 1353.461686][ T8200] bridge0: port 2(bridge_slave_1) entered blocking state [ 1353.469507][ T8200] bridge0: port 2(bridge_slave_1) entered disabled state [ 1353.477156][ T8200] bridge_slave_1: entered allmulticast mode [ 1353.486017][ T8200] bridge_slave_1: entered promiscuous mode [ 1353.529276][ T8297] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8844'. [ 1353.618557][ T8200] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1353.635487][ T8200] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1353.910439][ T8308] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8847'. [ 1353.920507][ T8309] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8847'. [ 1353.934299][ T8200] team0: Port device team_slave_0 added [ 1353.940690][ T8295] lo speed is unknown, defaulting to 1000 [ 1353.950022][ T8200] team0: Port device team_slave_1 added [ 1353.983895][ T8295] wg1 speed is unknown, defaulting to 1000 [ 1354.065877][ T8200] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1354.073281][ T8200] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1354.102589][ T8295] wg1 speed is unknown, defaulting to 1000 [ 1354.112201][ T8200] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1354.158448][ T8200] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1354.165579][ T8200] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1354.192688][ T8200] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1354.235661][ T8317] syzkaller0: left promiscuous mode [ 1354.241840][ T8317] syzkaller0: left allmulticast mode [ 1354.493900][ T8200] hsr_slave_0: entered promiscuous mode [ 1354.502528][ T8200] hsr_slave_1: entered promiscuous mode [ 1354.509527][ T8200] debugfs: 'hsr0' already exists in 'hsr' [ 1354.515404][ T8200] Cannot create hsr debugfs directory [ 1354.521959][ T8329] tipc: Enabling of bearer rejected, already enabled [ 1354.619926][ T8336] tipc: Enabling of bearer rejected, failed to enable media [ 1354.706358][ T8345] netlink: 72 bytes leftover after parsing attributes in process `syz.2.8858'. [ 1354.959351][ T10] IPVS: starting estimator thread 0... [ 1355.050152][ T8360] IPVS: using max 28 ests per chain, 67200 per kthread [ 1355.267554][ T5848] Bluetooth: hci0: command tx timeout [ 1355.345742][ T8200] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0 [ 1355.364625][ T8200] netdevsim netdevsim1 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 1355.523060][ T8200] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0 [ 1355.535393][ T8200] netdevsim netdevsim1 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 1355.538066][ T8372] netlink: 'syz.0.8866': attribute type 9 has an invalid length. [ 1355.572902][ T8372] netlink: 'syz.0.8866': attribute type 10 has an invalid length. [ 1355.652861][ T8200] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0 [ 1355.678579][ T8200] netdevsim netdevsim1 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 1355.743756][ T8200] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0 [ 1355.759169][ T8200] netdevsim netdevsim1 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 1356.141163][ T8200] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1356.162553][ T8200] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1356.213573][ T8200] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1356.238471][ T8382] __nla_validate_parse: 6 callbacks suppressed [ 1356.238495][ T8382] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8870'. [ 1356.267730][ T8200] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1356.307391][ T8386] netlink: 'syz.2.8871': attribute type 3 has an invalid length. [ 1356.494350][ T8200] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1356.565785][ T8200] 8021q: adding VLAN 0 to HW filter on device team0 [ 1356.600915][ T1139] bridge0: port 1(bridge_slave_0) entered blocking state [ 1356.608193][ T1139] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1356.646716][ T1139] bridge0: port 2(bridge_slave_1) entered blocking state [ 1356.653950][ T1139] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1356.672431][ T8402] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1356.714599][ T8402] netlink: 'syz.3.8874': attribute type 1 has an invalid length. [ 1356.771556][ T8402] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1356.873396][ T8406] xt_hashlimit: max too large, truncated to 1048576 [ 1356.894124][ T8404] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1356.913463][ T8404] bond7: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1356.926638][ T8404] bond7: (slave vxcan3): Error -95 calling set_mac_address [ 1356.973829][ T8402] veth15: entered promiscuous mode [ 1356.993799][ T8402] bond7: (slave veth15): Enslaving as an active interface with a down link [ 1357.138169][ T8406] tipc: Enabled bearer , priority 0 [ 1357.162493][ T8419] syzkaller0: entered promiscuous mode [ 1357.177626][ T8419] syzkaller0: entered allmulticast mode [ 1357.264859][ T8421] netlink: 'syz.2.8878': attribute type 6 has an invalid length. [ 1357.292388][ T8406] tipc: Resetting bearer [ 1357.310369][ T8405] tipc: Resetting bearer [ 1357.357145][ T5848] Bluetooth: hci0: command tx timeout [ 1357.378966][ T8421] tipc: Trying to set illegal importance in message [ 1357.427432][ T8405] tipc: Disabling bearer [ 1357.616951][ T8410] lo speed is unknown, defaulting to 1000 [ 1357.624655][ T8410] wg1 speed is unknown, defaulting to 1000 [ 1357.649933][ T8410] wg1 speed is unknown, defaulting to 1000 [ 1357.872960][ T8200] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1358.006703][ T8200] veth0_vlan: entered promiscuous mode [ 1358.079442][ T8200] veth1_vlan: entered promiscuous mode [ 1358.174590][ T8200] veth0_macvtap: entered promiscuous mode [ 1358.205939][ T8200] veth1_macvtap: entered promiscuous mode [ 1358.397656][ T8825] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1358.402896][ T8455] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8888'. [ 1358.409323][ T8200] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1358.515254][ T8456] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1358.537307][ T8455] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8888'. [ 1358.596025][ T8200] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1358.657583][ T6777] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1358.683746][T14185] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1358.699768][ T6777] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1358.733043][ T6777] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1358.751368][ T6777] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1358.800153][ T8474] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8893'. [ 1359.010294][T14165] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1359.054763][T14165] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1359.117344][ T5891] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1359.249512][ T8489] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8895'. [ 1359.283990][ T8489] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 1359.310895][ T7463] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1359.327751][ T8505] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8898'. [ 1359.353609][ T7463] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1359.434007][ T5848] Bluetooth: hci0: command tx timeout [ 1359.441585][ T8505] macsec3: entered promiscuous mode [ 1359.448319][ T8505] macsec3: entered allmulticast mode [ 1359.702343][ T8515] nbd: nbd1 already in use [ 1359.710889][ T8515] nbd: must specify an index to disconnect [ 1359.749338][ T1139] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1359.762624][ T1139] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1360.160364][ T8539] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8905'. [ 1360.247386][ T8547] netlink: 7906 bytes leftover after parsing attributes in process `syz.1.8906'. [ 1360.337324][T31221] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1360.426496][ T8558] netlink: 584 bytes leftover after parsing attributes in process `syz.4.8904'. [ 1360.781898][ T8566] syzkaller0: entered promiscuous mode [ 1360.798208][ T8566] syzkaller0: entered allmulticast mode [ 1361.064643][ T8578] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1361.294169][ T8597] syz_tun: entered allmulticast mode [ 1361.303913][ T8596] syz_tun: left allmulticast mode [ 1361.394957][ T8600] batadv1: entered promiscuous mode [ 1361.460430][ T8612] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8922'. [ 1361.481366][ T8612] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8922'. [ 1361.550096][ T8614] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8924'. [ 1361.615856][ T8614] batman_adv: batadv0: Adding interface: bond1 [ 1361.622908][ T8614] batman_adv: batadv0: The MTU of interface bond1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1361.649465][ T8614] batman_adv: batadv0: Not using interface bond1 (retrying later): interface not active [ 1361.841152][ T8628] tipc: Invalid UDP bearer configuration [ 1361.841213][ T8628] tipc: Enabling of bearer rejected, failed to enable media [ 1362.006236][ T8600] lo speed is unknown, defaulting to 1000 [ 1362.014475][ T8600] wg1 speed is unknown, defaulting to 1000 [ 1362.023183][ T8600] wg1 speed is unknown, defaulting to 1000 [ 1362.293814][ T8623] lo speed is unknown, defaulting to 1000 [ 1362.344775][ T8623] wg1 speed is unknown, defaulting to 1000 [ 1362.352973][ T8623] wg1 speed is unknown, defaulting to 1000 [ 1362.609136][ T8636] smc: net device geneve0 applied user defined pnetid SYZ0 [ 1362.701035][ T8643] x_tables: duplicate underflow at hook 1 [ 1362.803639][ T8642] bridge: RTM_NEWNEIGH with invalid ether address [ 1363.560098][ T8691] netlink: 64 bytes leftover after parsing attributes in process `syz.3.8943'. [ 1363.570440][ T8691] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8943'. [ 1363.667113][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1363.752061][ T8699] netlink: 'syz.3.8946': attribute type 10 has an invalid length. [ 1363.764098][ T8699] netlink: 40 bytes leftover after parsing attributes in process `syz.3.8946'. [ 1364.083398][ T8717] netlink: 92 bytes leftover after parsing attributes in process `syz.0.8953'. [ 1364.203547][ T8728] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8955'. [ 1364.223315][ T8728] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8955'. [ 1364.446481][ T8742] netlink: 996 bytes leftover after parsing attributes in process `syz.0.8957'. [ 1364.724401][ T8758] bond2: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 1364.739983][ T8758] bond2 (unregistering): Released all slaves [ 1365.396048][ T8786] bond0: entered promiscuous mode [ 1365.404641][ T8788] nbd: must specify at least one socket [ 1365.424665][ T8786] bond0: entered allmulticast mode [ 1365.458590][ T8786] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1365.527420][ T8795] bridge_slave_1: left allmulticast mode [ 1365.534561][ T8795] bridge_slave_1: left promiscuous mode [ 1365.544811][ T8795] bridge0: port 2(bridge_slave_1) entered disabled state [ 1365.695207][ T8809] tipc: Enabling of bearer rejected, already enabled [ 1365.717970][ T8809] syzkaller0: entered promiscuous mode [ 1365.723595][ T8809] syzkaller0: entered allmulticast mode [ 1366.121489][ T8832] batadv_slave_1: entered promiscuous mode [ 1366.179863][ T8832] batadv_slave_1 (unregistering): left promiscuous mode [ 1366.647613][ T8842] __nla_validate_parse: 15 callbacks suppressed [ 1366.647635][ T8842] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8990'. [ 1366.884727][ T8851] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8992'. [ 1367.045463][ T8858] netem: incorrect gi model size [ 1367.064121][ T8858] netem: change failed [ 1367.124322][ T8864] netlink: 'syz.4.8997': attribute type 12 has an invalid length. [ 1367.641717][T30523] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1367.662455][T30523] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1367.672200][T30523] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1367.693048][T30523] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1367.704694][T30523] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1367.743628][ T8876] Bluetooth: MGMT ver 1.23 [ 1367.992655][ T8880] tipc: Enabled bearer , priority 0 [ 1368.020582][ T8880] syzkaller0: entered promiscuous mode [ 1368.026180][ T8880] syzkaller0: entered allmulticast mode [ 1368.040379][ T8873] lo speed is unknown, defaulting to 1000 [ 1368.049245][ T8873] wg1 speed is unknown, defaulting to 1000 [ 1368.058997][ T8880] tipc: Resetting bearer [ 1368.100827][ T8880] tipc: Disabling bearer [ 1368.117650][ T8873] wg1 speed is unknown, defaulting to 1000 [ 1368.301571][ T8886] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9003'. [ 1368.512875][ T8899] netlink: 44 bytes leftover after parsing attributes in process `syz.0.9006'. [ 1368.614640][ T8905] netlink: 68 bytes leftover after parsing attributes in process `syz.0.9006'. [ 1368.760197][ T8915] ipvlan4: entered promiscuous mode [ 1368.838017][ T8873] chnl_net:caif_netlink_parms(): no params data found [ 1368.844288][ T8920] netlink: 32 bytes leftover after parsing attributes in process `syz.0.9009'. [ 1368.883724][ T8921] syzkaller0: entered promiscuous mode [ 1368.896265][ T8921] syzkaller0: entered allmulticast mode [ 1369.151733][ T8873] bridge0: port 1(bridge_slave_0) entered blocking state [ 1369.160698][ T8873] bridge0: port 1(bridge_slave_0) entered disabled state [ 1369.169260][ T8873] bridge_slave_0: entered allmulticast mode [ 1369.178489][ T8873] bridge_slave_0: entered promiscuous mode [ 1369.188834][ T8873] bridge0: port 2(bridge_slave_1) entered blocking state [ 1369.196170][ T8873] bridge0: port 2(bridge_slave_1) entered disabled state [ 1369.203694][ T8873] bridge_slave_1: entered allmulticast mode [ 1369.212396][ T8873] bridge_slave_1: entered promiscuous mode [ 1369.395149][ T8927] lo speed is unknown, defaulting to 1000 [ 1369.400285][ T8873] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1369.426267][ T8873] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1369.449276][ T8927] wg1 speed is unknown, defaulting to 1000 [ 1369.501135][ T8927] wg1 speed is unknown, defaulting to 1000 [ 1369.649940][ T8873] team0: Port device team_slave_0 added [ 1369.673658][ T8873] team0: Port device team_slave_1 added [ 1369.747370][ T5848] Bluetooth: hci4: command tx timeout [ 1369.791120][ T8873] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1369.799991][ T8873] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1369.826985][ T8873] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1369.840784][ T8873] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1369.848127][ T8873] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1369.875764][ T8873] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1370.125313][ T8873] hsr_slave_0: entered promiscuous mode [ 1370.134520][ T8873] hsr_slave_1: entered promiscuous mode [ 1370.141385][ T8873] debugfs: 'hsr0' already exists in 'hsr' [ 1370.148613][ T8873] Cannot create hsr debugfs directory [ 1370.296640][ T8873] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1370.356579][ T8873] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1370.432003][ T8873] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1370.495983][ T8873] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1370.675903][ T8873] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1370.697670][ T8873] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1370.714398][ T8873] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1370.731237][ T8873] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1370.756292][ T8977] netlink: 96 bytes leftover after parsing attributes in process `syz.3.9023'. [ 1370.962947][ T8873] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1371.032155][ T8873] 8021q: adding VLAN 0 to HW filter on device team0 [ 1371.057544][ T8994] netlink: 72 bytes leftover after parsing attributes in process `syz.0.9027'. [ 1371.069218][ T70] bridge0: port 1(bridge_slave_0) entered blocking state [ 1371.076436][ T70] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1371.113826][ T70] bridge0: port 2(bridge_slave_1) entered blocking state [ 1371.121085][ T70] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1371.174654][ T8996] nbd: couldn't find device at index 3 [ 1371.346913][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1371.489386][ T8873] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1371.602561][ T8873] veth0_vlan: entered promiscuous mode [ 1371.639524][ T8873] veth1_vlan: entered promiscuous mode [ 1371.752980][ T8873] veth0_macvtap: entered promiscuous mode [ 1371.801680][ T8873] veth1_macvtap: entered promiscuous mode [ 1371.818853][ T9027] netlink: 40 bytes leftover after parsing attributes in process `syz.4.9036'. [ 1371.838616][ T5848] Bluetooth: hci4: command tx timeout [ 1371.860696][ T8873] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1371.899522][ T8873] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1371.922070][ T9032] netlink: 'syz.3.9037': attribute type 3 has an invalid length. [ 1371.937901][ T9032] netlink: 3 bytes leftover after parsing attributes in process `syz.3.9037'. [ 1371.990446][T14169] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1372.021318][T14169] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1372.081249][T14169] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1372.133878][ T9030] bridge_slave_0: entered promiscuous mode [ 1372.156537][ T9030] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 1372.178386][T14169] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1372.386140][ T9040] bond2: Removing last ns target with arp_interval on [ 1372.617193][T19868] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1372.625075][T19868] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1372.722250][T19868] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1372.757537][T19868] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1372.848248][ T9066] gre0: entered promiscuous mode [ 1372.854339][ T9066] gre0: entered allmulticast mode [ 1372.936407][ T9074] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x1 [ 1373.033336][ T9077] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9050'. [ 1373.183008][ T9085] xt_cgroup: invalid path, errno=-2 [ 1373.190960][ T9085] xt_cgroup: invalid path, errno=-2 [ 1373.208298][ T9085] xt_cgroup: invalid path, errno=-2 [ 1373.213707][ T9085] xt_cgroup: invalid path, errno=-2 [ 1373.669347][T30523] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1373.718468][T30523] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1373.727614][T30523] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1373.737728][T30523] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1373.753814][T30523] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1373.907738][ T5848] Bluetooth: hci4: command tx timeout [ 1375.497619][ T9095] netlink: 20 bytes leftover after parsing attributes in process `syz.0.9054'. [ 1375.696163][ T9105] netlink: 36 bytes leftover after parsing attributes in process `syz.4.9053'. [ 1375.910673][ T5848] Bluetooth: hci3: command tx timeout [ 1375.986859][ T5848] Bluetooth: hci4: command tx timeout [ 1376.082787][ T9115] netem: change failed [ 1376.083930][ T9120] netlink: 'syz.1.9059': attribute type 1 has an invalid length. [ 1376.095355][ T9089] lo speed is unknown, defaulting to 1000 [ 1376.103305][ T9089] wg1 speed is unknown, defaulting to 1000 [ 1376.155445][ T9089] wg1 speed is unknown, defaulting to 1000 [ 1376.210629][ T9120] bond3: (slave xfrm1): The slave device specified does not support setting the MAC address [ 1376.267137][ T9120] bond3: (slave xfrm1): Setting fail_over_mac to active for active-backup mode [ 1376.306196][ T9120] bond3: (slave xfrm1): making interface the new active one [ 1376.315813][ T9125] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9061'. [ 1376.332146][ T9120] bond3: (slave xfrm1): Enslaving as an active interface with an up link [ 1376.360441][ T9126] tipc: Can't add remote ip to TIPC UDP multicast bearer [ 1376.405746][ T9125] netlink: 20 bytes leftover after parsing attributes in process `syz.2.9061'. [ 1376.476401][ T9130] netlink: 'syz.1.9062': attribute type 1 has an invalid length. [ 1376.486399][ T9130] netlink: 52 bytes leftover after parsing attributes in process `syz.1.9062'. [ 1376.503957][ T9101] lo speed is unknown, defaulting to 1000 [ 1376.512254][ T9101] wg1 speed is unknown, defaulting to 1000 [ 1376.520209][ T9101] wg1 speed is unknown, defaulting to 1000 [ 1376.698502][ T9140] netlink: 'syz.2.9064': attribute type 1 has an invalid length. [ 1376.898903][ T9146] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9068'. [ 1376.901627][ T9089] chnl_net:caif_netlink_parms(): no params data found [ 1377.378797][ T9172] Bluetooth: MGMT ver 1.23 [ 1377.579673][ T9180] netlink: 20 bytes leftover after parsing attributes in process `syz.0.9075'. [ 1377.619765][ T9185] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9073'. [ 1377.620483][ T9181] tipc: Started in network mode [ 1377.630722][ T9185] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9073'. [ 1377.648712][ T9181] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 1377.684084][ T9181] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 1377.712864][ T9181] tipc: Enabled bearer , priority 10 [ 1377.722815][ T9089] bridge0: port 1(bridge_slave_0) entered blocking state [ 1377.732011][ T9089] bridge0: port 1(bridge_slave_0) entered disabled state [ 1377.740017][ T9089] bridge_slave_0: entered allmulticast mode [ 1377.749126][ T9089] bridge_slave_0: entered promiscuous mode [ 1377.763405][ T9182] netlink: 20 bytes leftover after parsing attributes in process `syz.0.9075'. [ 1377.772593][ T9185] macvlan0: entered allmulticast mode [ 1377.779289][ T9185] veth1_vlan: entered allmulticast mode [ 1377.786575][ T9089] bridge0: port 2(bridge_slave_1) entered blocking state [ 1377.800239][ T9089] bridge0: port 2(bridge_slave_1) entered disabled state [ 1377.809951][ T9089] bridge_slave_1: entered allmulticast mode [ 1377.820415][ T9089] bridge_slave_1: entered promiscuous mode [ 1377.860261][ T9191] netlink: 'syz.0.9077': attribute type 30 has an invalid length. [ 1377.915156][ T9089] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1377.932052][ T9089] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1377.979348][ T9089] team0: Port device team_slave_0 added [ 1377.987206][ T5848] Bluetooth: hci3: command tx timeout [ 1377.989777][ T9089] team0: Port device team_slave_1 added [ 1378.081610][ T9195] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 1378.096360][ T9089] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1378.114812][ T9089] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1378.143276][ T9089] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1378.158044][ T9089] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1378.173319][ T9089] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1378.200110][ T9089] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1378.256631][ T9209] netlink: 'syz.4.9081': attribute type 2 has an invalid length. [ 1378.350627][ T9089] hsr_slave_0: entered promiscuous mode [ 1378.362027][ T9089] hsr_slave_1: entered promiscuous mode [ 1378.390438][ T9089] debugfs: 'hsr0' already exists in 'hsr' [ 1378.396249][ T9089] Cannot create hsr debugfs directory [ 1378.421666][ T9209] : entered promiscuous mode [ 1378.511051][ T9216] netlink: 40 bytes leftover after parsing attributes in process `syz.2.9083'. [ 1378.553810][ T9216] xt_hashlimit: max too large, truncated to 1048576 [ 1378.599458][ T9218] netlink: 'syz.1.9084': attribute type 4 has an invalid length. [ 1378.840286][ T6018] tipc: Node number set to 1 [ 1378.843845][ T9228] netlink: 'syz.1.9086': attribute type 1 has an invalid length. [ 1378.907951][ T9228] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1378.946369][ T9230] erspan0: entered allmulticast mode [ 1378.973318][ T9230] bond4: (slave erspan0): making interface the new active one [ 1378.984406][ T9230] bond4: (slave erspan0): Enslaving as an active interface with an up link [ 1378.996073][ T9233] bridge_slave_1: left allmulticast mode [ 1379.003339][ T9233] bridge_slave_1: left promiscuous mode [ 1379.009977][ T9233] bridge0: port 2(bridge_slave_1) entered disabled state [ 1379.094041][ T9228] bond4: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 1379.154011][ T9239] netlink: 'syz.2.9089': attribute type 3 has an invalid length. [ 1379.162437][ T9239] netlink: 132 bytes leftover after parsing attributes in process `syz.2.9089'. [ 1379.339673][ T9245] IPVS: lblcr: FWM 3 0x00000003 - no destination available [ 1379.495223][ T9247] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9091'. [ 1379.635108][ T9247] hsr_slave_1 (unregistering): left promiscuous mode [ 1379.765187][ T9243] lo speed is unknown, defaulting to 1000 [ 1379.776088][ T9243] wg1 speed is unknown, defaulting to 1000 [ 1379.794293][ T9243] wg1 speed is unknown, defaulting to 1000 [ 1379.875910][ T9260] gretap0: entered promiscuous mode [ 1380.086543][T30523] Bluetooth: hci3: command tx timeout [ 1380.277528][ T9089] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1380.324724][ T9089] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1380.367308][ T9089] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1380.401730][ T9089] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1380.459012][ T9273] block nbd7: Unsupported socket: should be TCP or UNIX. [ 1380.685558][ T9282] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9100'. [ 1380.701569][ T9089] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1380.728183][ T9282] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.9100'. [ 1380.771802][ T9089] 8021q: adding VLAN 0 to HW filter on device team0 [ 1380.781588][ T9282] rdma_rxe: rxe_newlink: failed to add ip6_vti0 [ 1380.800662][ T7463] bridge0: port 1(bridge_slave_0) entered blocking state [ 1380.803930][ T9285] netlink: 'syz.1.9102': attribute type 2 has an invalid length. [ 1380.807897][ T7463] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1380.824616][ T9285] netlink: 'syz.1.9102': attribute type 8 has an invalid length. [ 1380.861166][T19872] bridge0: port 2(bridge_slave_1) entered blocking state [ 1380.868418][T19872] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1380.935056][ T9289] veth0: entered promiscuous mode [ 1380.972197][ T9288] veth0: left promiscuous mode [ 1381.495824][ T9316] team0: Port device bridge11 added [ 1381.529688][ T9316] bridge0: port 4(team0) entered blocking state [ 1381.536204][ T9316] bridge0: port 4(team0) entered disabled state [ 1381.558528][ T9316] team0: entered allmulticast mode [ 1381.563714][ T9316] team_slave_0: entered allmulticast mode [ 1381.588008][ T9316] team_slave_1: entered allmulticast mode [ 1381.593808][ T9316] bridge11: entered allmulticast mode [ 1381.613702][ T9317] IPVS: length: 35 != 1560 [ 1381.613907][ T9316] team0: left allmulticast mode [ 1381.646131][ T9316] team_slave_0: left allmulticast mode [ 1381.665968][ T9316] team_slave_1: left allmulticast mode [ 1381.684886][ T9316] bridge11: left allmulticast mode [ 1381.712507][ T9089] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1381.849005][ T9089] veth0_vlan: entered promiscuous mode [ 1381.862366][ T9311] lo speed is unknown, defaulting to 1000 [ 1381.884740][ T9089] veth1_vlan: entered promiscuous mode [ 1381.920093][ T9311] wg1 speed is unknown, defaulting to 1000 [ 1381.949940][ T9311] wg1 speed is unknown, defaulting to 1000 [ 1382.076086][ T9328] __nla_validate_parse: 2 callbacks suppressed [ 1382.085478][ T9328] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9113'. [ 1382.147152][T30523] Bluetooth: hci3: command 0x0419 tx timeout [ 1382.305431][ T9338] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9115'. [ 1382.353801][ T9089] veth0_macvtap: entered promiscuous mode [ 1382.419950][ T9343] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.9116'. [ 1382.437091][ T9089] veth1_macvtap: entered promiscuous mode [ 1382.445558][ T9343] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.9116'. [ 1382.464731][ T9338] bridge1: entered allmulticast mode [ 1382.470316][ T9343] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.9116'. [ 1382.471300][ T9343] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.9116'. [ 1382.498790][ T9343] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.9116'. [ 1382.509523][ T9343] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.9116'. [ 1382.522730][ T9343] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.9116'. [ 1382.535427][ T9343] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.9116'. [ 1382.554298][ T9089] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1382.600376][ T9089] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1382.643335][T14165] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1382.655196][T14165] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1382.680753][ T9328] lo speed is unknown, defaulting to 1000 [ 1382.691025][T14165] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1382.722875][ T9328] wg1 speed is unknown, defaulting to 1000 [ 1382.722894][T14165] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1382.771409][ T9328] wg1 speed is unknown, defaulting to 1000 [ 1382.929816][ T9355] netlink: 'syz.4.9119': attribute type 1 has an invalid length. [ 1383.364872][ T9366] bond12 (unregistering): Released all slaves [ 1383.501484][ T9334] lo speed is unknown, defaulting to 1000 [ 1383.533096][ T9334] wg1 speed is unknown, defaulting to 1000 [ 1383.569035][ T9334] wg1 speed is unknown, defaulting to 1000 [ 1383.754318][T19872] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1383.770107][T19872] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1383.975236][T19872] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1383.989670][ T9369] bridge0: port 2(bridge_slave_1) entered disabled state [ 1383.997482][ T9369] bridge0: port 1(bridge_slave_0) entered disabled state [ 1384.010519][T19872] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1384.037706][ T9378] netlink: 'syz.2.9122': attribute type 21 has an invalid length. [ 1384.230615][T30523] Bluetooth: hci3: command 0x0419 tx timeout [ 1384.511453][ T9385] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1384.610166][ T9386] syzkaller0: entered promiscuous mode [ 1384.615711][ T9386] syzkaller0: entered allmulticast mode [ 1385.131051][ T9420] bond1: option xmit_hash_policy: invalid value (10) [ 1385.143124][ T9420] bond1 (unregistering): Released all slaves [ 1385.171613][ T9431] veth1_to_bond: entered allmulticast mode [ 1385.222445][ T9431] bond0: (slave bond_slave_1): Releasing backup interface [ 1385.232764][ T9431] bond_slave_1 (unregistering): left promiscuous mode [ 1385.275117][ T9431] veth1_to_bond (unregistering): left allmulticast mode [ 1385.393802][ T9438] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1385.719600][ T9454] xt_cgroup: invalid path, errno=-2 [ 1385.874580][ T9462] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 1385.895698][ T9462] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1386.802689][ T9503] Cannot find set identified by id 0 to match [ 1386.930598][ T5848] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1386.942036][ T5848] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1386.951613][ T5848] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1386.959950][ T5848] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1386.978580][ T5848] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1387.347714][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1387.416749][ T9527] __nla_validate_parse: 35 callbacks suppressed [ 1387.416770][ T9527] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9165'. [ 1387.441228][ T9527] geneve2: entered promiscuous mode [ 1387.446493][ T9527] geneve2: entered allmulticast mode [ 1387.478746][ T6777] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 35832 - 0 [ 1387.508067][ T9507] lo speed is unknown, defaulting to 1000 [ 1387.519305][ T9529] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9166'. [ 1387.568701][ T6777] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 35832 - 0 [ 1387.590957][ T6777] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 35832 - 0 [ 1387.695323][ T9507] wg1 speed is unknown, defaulting to 1000 [ 1387.695432][ T6777] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 35832 - 0 [ 1387.739038][ T9507] wg1 speed is unknown, defaulting to 1000 [ 1387.812153][ T9528] !: renamed from dummy0 (while UP) [ 1387.953109][ T9538] netlink: 20 bytes leftover after parsing attributes in process `syz.1.9168'. [ 1388.205312][ T9510] lo speed is unknown, defaulting to 1000 [ 1388.230388][ T9510] wg1 speed is unknown, defaulting to 1000 [ 1388.249046][ T9510] wg1 speed is unknown, defaulting to 1000 [ 1388.538704][ T9526] lo speed is unknown, defaulting to 1000 [ 1388.551850][ T9526] wg1 speed is unknown, defaulting to 1000 [ 1388.700860][ T9551] netlink: 24 bytes leftover after parsing attributes in process `syz.3.9172'. [ 1388.727516][ T9526] wg1 speed is unknown, defaulting to 1000 [ 1388.728770][ T9558] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1389.027517][T30523] Bluetooth: hci1: command tx timeout [ 1389.233076][ T9510] chnl_net:caif_netlink_parms(): no params data found [ 1389.739718][ T9510] bridge0: port 1(bridge_slave_0) entered blocking state [ 1389.765392][ T9510] bridge0: port 1(bridge_slave_0) entered disabled state [ 1389.784673][ T9510] bridge_slave_0: entered allmulticast mode [ 1389.802610][ T9510] bridge_slave_0: entered promiscuous mode [ 1389.839025][ T9510] bridge0: port 2(bridge_slave_1) entered blocking state [ 1389.846366][ T9510] bridge0: port 2(bridge_slave_1) entered disabled state [ 1389.853754][ T9592] SET target dimension over the limit! [ 1389.860712][ T9510] bridge_slave_1: entered allmulticast mode [ 1389.872955][ T9592] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9180'. [ 1389.890749][ T9510] bridge_slave_1: entered promiscuous mode [ 1389.912751][ T9592] veth0_virt_wifi: entered promiscuous mode [ 1389.941100][ T9592] veth0_virt_wifi: left promiscuous mode [ 1390.184058][ T9602] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9184'. [ 1390.193386][ T9602] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9184'. [ 1390.207613][ T9603] xt_hashlimit: size too large, truncated to 1048576 [ 1390.350124][ T9510] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1390.393952][ T9510] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1390.522651][ T9616] netlink: 'syz.3.9187': attribute type 22 has an invalid length. [ 1390.538986][ T9615] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9188'. [ 1390.563856][ T9510] team0: Port device team_slave_0 added [ 1390.577258][ T9510] team0: Port device team_slave_1 added [ 1390.700390][ T9510] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1390.723404][ T9510] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1390.765134][ T9510] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1390.797417][ T9510] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1390.814791][ T9510] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1390.842299][ T9510] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1390.949087][ T9631] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9194'. [ 1390.956372][ T9510] hsr_slave_0: entered promiscuous mode [ 1390.974171][ T9510] hsr_slave_1: entered promiscuous mode [ 1390.982049][ T9510] debugfs: 'hsr0' already exists in 'hsr' [ 1390.988912][ T9510] Cannot create hsr debugfs directory [ 1391.037188][ T9637] tipc: Enabling of bearer rejected, already enabled [ 1391.059899][ T9641] netlink: 'syz.4.9193': attribute type 11 has an invalid length. [ 1391.087255][ T9641] netlink: 'syz.4.9193': attribute type 11 has an invalid length. [ 1391.107244][T30523] Bluetooth: hci1: command tx timeout [ 1391.131779][ T9641] netlink: 224 bytes leftover after parsing attributes in process `syz.4.9193'. [ 1392.132188][ T9657] lo speed is unknown, defaulting to 1000 [ 1392.141101][ T9510] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1392.167126][ T9510] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1392.187042][ T9657] wg1 speed is unknown, defaulting to 1000 [ 1392.193650][ T9510] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1392.230833][ T9657] wg1 speed is unknown, defaulting to 1000 [ 1392.237545][ T9510] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1392.951343][ T9690] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1392.980985][ T9690] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1393.183439][ T9661] lo speed is unknown, defaulting to 1000 [ 1393.190842][T30523] Bluetooth: hci1: command tx timeout [ 1393.229668][ T7002] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1393.299849][ T9661] wg1 speed is unknown, defaulting to 1000 [ 1393.299868][ T7002] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1393.356491][ T9661] wg1 speed is unknown, defaulting to 1000 [ 1393.364974][ T7002] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1393.457751][ T9705] netlink: 'syz.2.9212': attribute type 1 has an invalid length. [ 1393.530826][ T7002] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1393.592979][ T9717] tipc: Enabling of bearer rejected, failed to enable media [ 1393.874483][ T9725] __nla_validate_parse: 2 callbacks suppressed [ 1393.874503][ T9725] netlink: 48 bytes leftover after parsing attributes in process `syz.1.9215'. [ 1393.894106][ T9724] netlink: 'syz.4.9216': attribute type 1 has an invalid length. [ 1393.902896][ T9724] netlink: 92 bytes leftover after parsing attributes in process `syz.4.9216'. [ 1393.963606][ T9510] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1394.011714][ T9510] 8021q: adding VLAN 0 to HW filter on device team0 [ 1394.052479][T23107] bridge0: port 1(bridge_slave_0) entered blocking state [ 1394.059807][T23107] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1394.088352][ T1139] bridge0: port 2(bridge_slave_1) entered blocking state [ 1394.095651][ T1139] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1394.120047][ T9735] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9217'. [ 1394.180945][ T9735] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9217'. [ 1394.196535][ T9735] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9217'. [ 1394.219630][ T9735] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1394.333180][ T9737] netlink: 32 bytes leftover after parsing attributes in process `syz.4.9218'. [ 1394.413187][ T9718] lo speed is unknown, defaulting to 1000 [ 1394.477857][ T9718] wg1 speed is unknown, defaulting to 1000 [ 1394.492884][ T9718] wg1 speed is unknown, defaulting to 1000 [ 1394.605383][ T9747] openvswitch: netlink: Geneve opt len 17 is not a multiple of 4. [ 1394.893391][ T9510] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1395.262878][ T9510] veth0_vlan: entered promiscuous mode [ 1395.269801][T30523] Bluetooth: hci1: command tx timeout [ 1395.307734][ T9510] veth1_vlan: entered promiscuous mode [ 1395.391473][ T9765] netlink: 256 bytes leftover after parsing attributes in process `syz.2.9225'. [ 1395.433739][ T9510] veth0_macvtap: entered promiscuous mode [ 1395.465473][ T9510] veth1_macvtap: entered promiscuous mode [ 1395.529742][ T9510] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1395.565540][ T9510] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1395.589894][ T9770] netlink: 52 bytes leftover after parsing attributes in process `syz.4.9227'. [ 1395.623500][ T70] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1395.637779][ T9776] netlink: 'syz.3.9230': attribute type 35 has an invalid length. [ 1395.646299][ T70] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1395.681454][ T9777] netlink: 'syz.1.9228': attribute type 12 has an invalid length. [ 1395.709353][ T70] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1395.738018][ T70] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1395.981162][ T9795] netlink: 'syz.3.9231': attribute type 1 has an invalid length. [ 1396.011472][ T9796] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1396.016849][ T9795] netlink: 'syz.3.9231': attribute type 2 has an invalid length. [ 1396.077209][T23107] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1396.085078][T23107] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1396.094421][ T9795] netlink: 'syz.3.9231': attribute type 2 has an invalid length. [ 1396.126881][ T9795] netlink: 'syz.3.9231': attribute type 1 has an invalid length. [ 1396.166355][ T9799] netlink: 96 bytes leftover after parsing attributes in process `syz.4.9233'. [ 1396.185887][T19872] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1396.199121][T19872] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1396.318576][ T9801] netlink: 'syz.3.9234': attribute type 9 has an invalid length. [ 1396.338181][ T9801] netlink: 'syz.3.9234': attribute type 11 has an invalid length. [ 1396.348883][ T9801] netlink: 'syz.3.9234': attribute type 12 has an invalid length. [ 1396.360586][ T9801] netlink: 210020 bytes leftover after parsing attributes in process `syz.3.9234'. [ 1397.375307][ T9838] bond1 (unregistering): Released all slaves [ 1398.203646][ T9872] netlink: 'syz.3.9254': attribute type 142 has an invalid length. [ 1398.609861][ T9901] !: entered promiscuous mode [ 1398.631723][ T9901] !: left promiscuous mode [ 1398.727722][ T9785] IPVS: starting estimator thread 0... [ 1398.820219][ T9887] lo speed is unknown, defaulting to 1000 [ 1398.828950][ T9887] wg1 speed is unknown, defaulting to 1000 [ 1398.832603][ T9911] IPVS: using max 28 ests per chain, 67200 per kthread [ 1398.836942][ T9887] wg1 speed is unknown, defaulting to 1000 [ 1399.114325][ T9932] __nla_validate_parse: 9 callbacks suppressed [ 1399.114348][ T9932] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9269'. [ 1399.130547][ T9929] 8021q: VLANs not supported on lo [ 1399.197547][ T9932] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 1399.563735][ T9949] batadv1: entered promiscuous mode [ 1400.098621][ T9934] lo speed is unknown, defaulting to 1000 [ 1400.128460][ T9934] wg1 speed is unknown, defaulting to 1000 [ 1400.150574][ T9934] wg1 speed is unknown, defaulting to 1000 [ 1400.308684][ T9990] bridge_slave_0: left promiscuous mode [ 1400.494028][T10004] IPVS: set_ctl: invalid protocol: 94 224.0.0.1:20000 [ 1400.553701][ T9990] netlink: 68 bytes leftover after parsing attributes in process `syz.4.9282'. [ 1400.737926][ T9954] lo speed is unknown, defaulting to 1000 [ 1400.745515][ T9954] wg1 speed is unknown, defaulting to 1000 [ 1400.779577][ T9954] wg1 speed is unknown, defaulting to 1000 [ 1401.204632][T10028] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9291'. [ 1401.248820][T10028] validate_nla: 4 callbacks suppressed [ 1401.248839][T10028] netlink: 'syz.3.9291': attribute type 7 has an invalid length. [ 1401.253333][T10038] delete_channel: no stack [ 1401.264659][T10028] netlink: 'syz.3.9291': attribute type 8 has an invalid length. [ 1401.287494][T10039] netlink: 15 bytes leftover after parsing attributes in process `syz.3.9291'. [ 1401.336016][T10028] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9291'. [ 1401.535763][T10044] netlink: 36 bytes leftover after parsing attributes in process `syz.4.9295'. [ 1401.879787][T10060] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9300'. [ 1401.892046][T10060] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9300'. [ 1401.902546][T10060] netlink: 'syz.4.9300': attribute type 7 has an invalid length. [ 1401.918969][T10060] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9300'. [ 1401.959512][T10060] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9300'. [ 1401.980641][T10060] netlink: 'syz.4.9300': attribute type 7 has an invalid length. [ 1402.020113][T10065] IPv6: NLM_F_CREATE should be specified when creating new route [ 1402.594349][T10067] lo speed is unknown, defaulting to 1000 [ 1402.610678][T10067] wg1 speed is unknown, defaulting to 1000 [ 1402.618634][T10067] wg1 speed is unknown, defaulting to 1000 [ 1403.080980][T10109] siw: device registration error -23 [ 1403.109582][T10109] netlink: 'syz.2.9314': attribute type 3 has an invalid length. [ 1403.150608][T10109] batadv_slave_1: entered promiscuous mode [ 1403.167398][T10106] batadv_slave_1: left promiscuous mode [ 1403.192149][T30858] Oops: general protection fault, probably for non-canonical address 0xdffffc000000000b: 0000 [#1] SMP KASAN PTI [ 1403.204097][T30858] KASAN: null-ptr-deref in range [0x0000000000000058-0x000000000000005f] [ 1403.212532][T30858] CPU: 1 UID: 0 PID: 30858 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 1403.222086][T30858] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1403.232145][T30858] RIP: 0010:klist_remove+0x14a/0x340 [ 1403.237443][T30858] Code: 4d 89 f5 49 c1 ed 03 43 80 7c 3d 00 00 74 08 4c 89 f7 e8 99 67 e7 f6 4d 8b 26 49 83 e4 fe 49 8d 7c 24 58 48 89 f8 48 c1 e8 03 <42> 80 3c 38 00 74 05 e8 7a 67 e7 f6 49 8b 44 24 58 48 89 44 24 08 [ 1403.257057][T30858] RSP: 0018:ffffc9000b25f5e0 EFLAGS: 00010202 [ 1403.263125][T30858] RAX: 000000000000000b RBX: ffff8880327fbd00 RCX: 0000000000000000 [ 1403.271096][T30858] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000058 [ 1403.279071][T30858] RBP: ffffc9000b25f6e0 R08: ffffffff8f671743 R09: 1ffffffff1ece2e8 [ 1403.287055][T30858] R10: dffffc0000000000 R11: fffffbfff1ece2e9 R12: 0000000000000000 [ 1403.295031][T30858] R13: 1ffff11009dfc90c R14: ffff88804efe4860 R15: dffffc0000000000 [ 1403.303002][T30858] FS: 0000000000000000(0000) GS:ffff8881261b1000(0000) knlGS:0000000000000000 [ 1403.311935][T30858] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1403.318525][T30858] CR2: 0000000000000000 CR3: 000000007c070000 CR4: 00000000003526f0 [ 1403.326497][T30858] Call Trace: [ 1403.329803][T30858] [ 1403.333270][T30858] ? __pfx_klist_remove+0x10/0x10 [ 1403.338312][T30858] ? kobject_move+0x5a6/0x6e0 [ 1403.343002][T30858] ? __pfx_kobject_move+0x10/0x10 [ 1403.348038][T30858] ? do_raw_spin_unlock+0x122/0x240 [ 1403.353264][T30858] ? get_device_parent+0x366/0x3a0 [ 1403.358403][T30858] device_move+0x193/0x700 [ 1403.362853][T30858] hci_conn_del_sysfs+0xb8/0x170 [ 1403.367803][T30858] hci_conn_del+0xc36/0x11b0 [ 1403.372398][T30858] hci_conn_hash_flush+0x191/0x230 [ 1403.377515][T30858] hci_dev_close_sync+0x821/0xff0 [ 1403.382567][T30858] ? __pfx_hci_dev_close_sync+0x10/0x10 [ 1403.388114][T30858] ? up_write+0x1ac/0x410 [ 1403.392448][T30858] ? rcu_is_watching+0x15/0xb0 [ 1403.397215][T30858] hci_unregister_dev+0x21a/0x510 [ 1403.402247][T30858] vhci_release+0x152/0x1a0 [ 1403.406766][T30858] ? __pfx_vhci_release+0x10/0x10 [ 1403.411841][T30858] __fput+0x44c/0xa70 [ 1403.415834][T30858] task_work_run+0x1d4/0x260 [ 1403.420434][T30858] ? __pfx_task_work_run+0x10/0x10 [ 1403.425553][T30858] ? kmem_cache_free+0x197/0x620 [ 1403.430495][T30858] ? do_exit+0x6c0/0x2310 [ 1403.434832][T30858] do_exit+0x6c5/0x2310 [ 1403.439004][T30858] ? do_raw_spin_lock+0x121/0x290 [ 1403.444041][T30858] ? __pfx_do_exit+0x10/0x10 [ 1403.448637][T30858] ? cgroup1_freezing+0x20/0x350 [ 1403.453587][T30858] do_group_exit+0x21c/0x2d0 [ 1403.458182][T30858] ? lockdep_hardirqs_on+0x98/0x140 [ 1403.463388][T30858] get_signal+0x1285/0x1340 [ 1403.467913][T30858] arch_do_signal_or_restart+0x9a/0x7a0 [ 1403.473473][T30858] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1403.479750][T30858] ? exit_to_user_mode_loop+0x55/0x4f0 [ 1403.485213][T30858] exit_to_user_mode_loop+0x87/0x4f0 [ 1403.490500][T30858] ? rcu_is_watching+0x15/0xb0 [ 1403.495273][T30858] do_syscall_64+0x2e3/0xf80 [ 1403.499873][T30858] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1403.505943][T30858] ? clear_bhb_loop+0x60/0xb0 [ 1403.510625][T30858] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1403.516527][T30858] RIP: 0033:0x7f9aa8f8e15c [ 1403.520942][T30858] Code: Unable to access opcode bytes at 0x7f9aa8f8e132. [ 1403.527955][T30858] RSP: 002b:00007ffda12128d0 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1403.536371][T30858] RAX: fffffffffffffe00 RBX: 0000000000000003 RCX: 00007f9aa8f8e15c [ 1403.544344][T30858] RDX: 0000000000000030 RSI: 00007ffda1212990 RDI: 00000000000000f9 [ 1403.552324][T30858] RBP: 00007ffda121293c R08: 0000000000000000 R09: 0079746972756365 [ 1403.560298][T30858] R10: 00007ffda1212290 R11: 0000000000000246 R12: 0000000000000258 [ 1403.568276][T30858] R13: 00000000000927c0 R14: 0000000000156481 R15: 00007ffda1212990 [ 1403.576262][T30858] [ 1403.579298][T30858] Modules linked in: [ 1403.584723][T30858] ---[ end trace 0000000000000000 ]--- SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1403.624095][T30858] RIP: 0010:klist_remove+0x14a/0x340 [ 1403.631987][T30858] Code: 4d 89 f5 49 c1 ed 03 43 80 7c 3d 00 00 74 08 4c 89 f7 e8 99 67 e7 f6 4d 8b 26 49 83 e4 fe 49 8d 7c 24 58 48 89 f8 48 c1 e8 03 <42> 80 3c 38 00 74 05 e8 7a 67 e7 f6 49 8b 44 24 58 48 89 44 24 08 [ 1403.679534][T30858] RSP: 0018:ffffc9000b25f5e0 EFLAGS: 00010202 [ 1403.685645][T30858] RAX: 000000000000000b RBX: ffff8880327fbd00 RCX: 0000000000000000 [ 1403.737000][T30858] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000058 [ 1403.745039][T30858] RBP: ffffc9000b25f6e0 R08: ffffffff8f671743 R09: 1ffffffff1ece2e8 [ 1403.799148][T30858] R10: dffffc0000000000 R11: fffffbfff1ece2e9 R12: 0000000000000000 [ 1403.811858][T30858] R13: 1ffff11009dfc90c R14: ffff88804efe4860 R15: dffffc0000000000 [ 1403.820081][T30858] FS: 0000000000000000(0000) GS:ffff8881260b1000(0000) knlGS:0000000000000000 [ 1403.831533][T30858] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1403.838365][T30858] CR2: 00007f71547add58 CR3: 000000009c914000 CR4: 00000000003526f0 [ 1403.846386][T30858] Kernel panic - not syncing: Fatal exception [ 1403.852841][T30858] Kernel Offset: disabled [ 1403.857169][T30858] Rebooting in 86400 seconds..