last executing test programs: 9.532515834s ago: executing program 1 (id=1792): socket$inet(0x2, 0x1, 0x0) r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000200040010000800014004000000", 0x58}], 0x1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r5 = socket$inet_sctp(0x2, 0x5, 0x84) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r9, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000507000000000000000016000000", @ANYRES32=r10, @ANYBLOB="0000000200000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r12) getsockname$packet(r12, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) sendmsg$nl_route_sched(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@delchain={0x3c, 0x2c, 0xf31, 0x600, 0x25dfcbfb, {0x0, 0x0, 0x0, r13, {}, {0xfff2, 0xffff}, {0xffff, 0x1}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_CLASSID={0x8, 0x1, {0x0, 0xe}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4008844}, 0x4010) r14 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r14, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newlink={0x4c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bond={{0x9}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x4}, @IFLA_BOND_AD_ACTOR_SYSTEM={0x8, 0x1a, @initdev={0xac, 0x1e, 0x0, 0x0}}, @IFLA_BOND_AD_USER_PORT_KEY={0x6}]}}}]}, 0x4c}}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r6, 0x84, 0x74, &(0x7f00000001c0)={r15, 0x6e4, 0x10, 0xa, 0xb1aa}, &(0x7f0000000040)=0x18) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x7c, &(0x7f0000000000)={r15, 0x3, 0x8a69}, &(0x7f0000000040)=0x8) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="110027bd7000fedbdf258100000008000300", @ANYRES32=r4, @ANYBLOB="17bf6a0175034c78e3626cfc26e6f0ec81e07db440e48bcc9dfd586801147184990359381fd91f0224e4409554448731a5e7fb853f26266f3b60eb7eed2dac418585624e3e7b7593f19e9be8c9ebcb42ddf06a56b207c0794eca68ac2fab9ffc6fbb90bbcf388e634c43054aceb6ea1b8b6a101f5d0f3721ad59b5f0"], 0x1c}, 0x1, 0x0, 0x0, 0x4000040}, 0x4000000) 9.060270673s ago: executing program 1 (id=1798): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000002000010000000000000000000a000080ffffffffffff0000140011"], 0x30}}, 0x0) (async, rerun: 32) r2 = socket(0x10, 0x3, 0x0) (async, rerun: 32) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'tunl0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=@newlink={0x38, 0x10, 0x401, 0x2, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x8, 0x2, 0x0, 0x1, [@IFLA_IPTUN_COLLECT_METADATA={0x4}]}}}]}, 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000040)={&(0x7f0000000200)=@getlink={0x88, 0x12, 0x4, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, 0x2180, 0x4}, [@IFLA_BROADCAST={0xa, 0x2, @link_local}, @IFLA_MAP={0x24, 0xe, {0x8000, 0x0, 0xffffffff, 0x1, 0x5, 0x10}}, @IFLA_OPERSTATE={0x5, 0x10, 0x2}, @IFLA_LINKMODE={0x5, 0x11, 0x7}, @IFLA_MTU={0x8, 0x4, 0x9}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x4}, @IFLA_CARRIER={0x5, 0x21, 0x5}, @IFLA_NUM_RX_QUEUES={0x8, 0x20, 0x9f}, @IFLA_PROMISCUITY={0x8, 0x1e, 0x7}]}, 0x88}, 0x1, 0x0, 0x0, 0x4}, 0x40041) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="940000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0300000000000000640012800b0001006970366772650000540002800800150061db0a0008000100", @ANYBLOB="2327b572fb09edf819aa88dfcfb0266099cbc097ffd328e104ca2def54383f822149fa4cf79cfc1259434ded437febf6e500db964d5f23398586455b09e3ff104bde848ae7b5d726ae192cbd17619c907637c0e91e0abe26c6cf28b3df85e4c42aa9d49a3fa64aa89602c7c0e0854e95f3a5bb5d8fded5f89218f2e91f9f239f88f28500dbb3c506aae99325d4e7243b383e", @ANYBLOB="14000700fe8000000000000000000000000000aa08000d005fe1ffff060010004e22000008000500200c000014000600fc"], 0x94}}, 0x4004040) 8.659749673s ago: executing program 1 (id=1802): r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0xffffffff, @mcast2, 0x9}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000080)=ANY=[@ANYBLOB="3a00fe"], 0x8) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4001c00) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000200)=0xffffffffffffffff, 0x4) r3 = gettid() r4 = getuid() r5 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000240)={r0}) r7 = accept(r0, 0x0, &(0x7f0000000280)) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r8, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x14, r9, 0x800, 0x70bd28, 0x25dfdbfc, {{}, {@void, @void}}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x11}, 0x8040) r10 = getuid() r11 = gettid() sendmsg$nl_generic(r8, &(0x7f0000000c40)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000c00)={&(0x7f0000000c80)={0x1adc, 0x31, 0x8, 0x70bd28, 0x25dfdbfe, {0xc}, [@typed={0x8, 0x102, 0x0, 0x0, @uid=r10}, @nested={0x13e, 0x8b, 0x0, 0x1, [@typed={0xed, 0x112, 0x0, 0x0, @binary="a2cfa0047728504927ffeb3044349b5219c9c30b66b48ef574d1fc03c873c8ba943364542a6d44f7fac873841979abea99f444516fe07773101e8f033cf2dbc4e89585334549a4be43b8a7b85b6a83ee3fef9698b785c8358b682734e6b2e013fb8a132182e0a374b13bc42aa2767b173714c0790889538fc8702a9f8c60ab3b898bca3021d8d93d1fdd1cfacf17a7a129de82d2f93145bbb74ca708a45ea2b663c9ae9a62dacb17d3842913d400715d1aad70e96f78a7a2b295b34c04711d0f0dea0b5e728b8548d4c113ccb10d897b5e3f7e7da60a29cb0ea56dfa7d2d0b37132ad4ba1e38666669"}, @typed={0xc, 0x50, 0x0, 0x0, @u64=0x8}, @typed={0x8, 0x115, 0x0, 0x0, @pid=r11}, @nested={0x4, 0x8e}, @typed={0x4, 0x3, 0x0, 0x0, @binary}, @generic="372dc53c23b5ed9f1008b64892e17fc8fdcfa29bed39e0ffd479598aa291684f96d8fd6890ca0fb00e0e44a0e640"]}, @generic="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", @generic="25687bfb54e5a9615d6aaa4b42b8574426ce53e34d6a843c0e7b7943a0396cc13d8e", @nested={0xc, 0xe6, 0x0, 0x1, [@typed={0x8, 0xe8, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x43}}]}, @nested={0x1852, 0x126, 0x0, 0x1, [@generic="b2edea947ecd344e6d73c680692234cdb1d2e6d6b8c3e3bb3593684da15ca1cd15efe06b1dd8fd4319a68439f777edc57daf44b2aedb03760dbd59", @generic="78a4d7e2dd83a9178be6df3f60ec0f3f8063509c54990b92e9fdd8ed93a2477d9fe9522a618079fffbac187a83b464d3d2745a349d0f2fb1f7cad839dfedc28d747f6d725a03e30fe1391a7cba7556aded0b434516d64c567bf9f5f7", @typed={0x8, 0x8, 0x0, 0x0, @str='-\\!\x00'}, @nested={0x113, 0xfc, 0x0, 0x1, [@typed={0x8, 0xe8, 0x0, 0x0, @uid=r10}, @nested={0x21, 0xd9, 0x0, 0x1, [@nested={0x4, 0x101}, @nested={0x4, 0x113}, @generic="e77403898274d869b50a5fb02d", @nested={0x4, 0xd0}, @nested={0x4, 0x114}]}, @generic="c673ecd21c8a09a15f5bf352d1efcbf3c4a52616c41b6b9fe2b7de3979c62e852495aa7b41b255e848f566316468a862539c1181569c7139680eb05730d53a9ce8a21a4e146b6c2e57a95a5d45337db4fed7c91cdfe6aadfdf22122a3e26a5c6bb9e77624067a83f941d501d245d791e526ac694d92f549061f5cb956615bcd7f2cac2ba4eafb14255cea35fe54ca4fcd731e94455d9294db9f23696ec708dc03c4fbcd408ab99baeedf23b95e9b7b268ec779b27d3ccc81ccc95efb4e8696ef195eb56a965449e3e0f16302df0144f6105e73c037f852a44a1a5ee3f5c54c3f6d9c30"]}, @nested={0x30c, 0x21, 0x0, 0x1, [@nested={0x307, 0x3, 0x0, 0x1, [@nested={0x4, 0x6c}, @typed={0xe4, 0x6a, 0x0, 0x0, @binary="0d2b0a209a89d0e04f7eacf33e99d34ebaee493245406b3979810572dfb87dc0de503225aff50918ba5028a1446f7bf0d6a83ffe1e9044a8efacf17b425b8c693794c97cf53426ea2298f1b7185008e76a6a6a5a9d60d9198be353e77556ada9a4c027824b903600bedbfd9aad95c9355bfcd514dd20c00e94f04e050a15ca66582c8cd655a44b889fd6f81621fecf9ece5e57aae83f02f2a4d16e570a6861cbc15d4c7e6dcbd283d39adba2b12ddd09ed8191aa8994b756483b42200ce85ac9db05f0ab0ce69049418b9a7c30cefb3aadd6586ba74d5d15f03fbbe7f6e97ca5"}, @nested={0x4, 0xb0}, @nested={0x4, 0x128}, @generic="a8f7e9115bd5b45c3f21fad685f9d1135d053bf67161907e3f6d571adb338ae0559bf9691a2376701c4d52ae7c0a87e7b72133cb3d016028f810c08126f8cb76a30b39d7b202a727fbeb83aa3eec2bbe2ffc702fab809b997f3dc7497e8b4388071bfbab0f91811fb8cc79fc43c18c613b8433cd396b", @generic="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", @typed={0x8, 0x40, 0x0, 0x0, @u32=0x9}, @generic="cd16a0707156869f7a0614d4c8f62ce7ae2281a5681ee301c24887fb17773c0e11ab3313d00049a6643ce6ee0700c4d463e976c525ae59ef43d9b2e8aee2203ff5d432ee168b988e904402f8316d254644c77d38064311ed5188fd5e487d1e4f454436a8972650f8311b4156698aa9dcc3731a7c3c3a7fba3432389a2efd5ef2381b14a158ed27ebf327d616692d197dd1f5e1925a14bacf"]}]}, @generic="fbca90754419caab4e4fd2a4c08c6f258c82515d1c3000fd4bd211b9633884722a3b75f3fd55919fc2a502fbff119a5d8a2c5b72f9c4390647bfd12f2b8c3aae4c35bfbfaa018e5ee7067afdca4a5992c07b697980511f7855bff00d6ab2f30fdc9fc104899c586612c7a085608712a98d97c7683ccd29aab4ddc6d6701d28d231cdc09294dc13fd3278337bb210bc4cd9f5b19e148951c260e7f67f88207da0dce5b986b210947376a6ec5351a61e25141de72f4589aeccbccdfb0788d7a0d83e3e20d9ac78f13db9d6f8a52368de61c0247fd9ed82a575b4b8e7", @generic="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", @generic="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", @generic="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", @generic="36becb743c2f40850cb02ef889e6d344aaf6f7b251c797ea0ec952e65fda7d0b58cc4d47f812fc00876e667943c9663e91afe9d2d54e878ca69c40a670c1b25b4cf049245f63482b07050a6f2a5e4c53a402006438c2a3011d3037466a1f6506d4e993a63c8a42713d7e587fc8e35ab516f157f1da814a8605d66a76bc631ea79ef6941982fcf769b1ecd7c8b55df8f0ed0c39ebc036ad438bc6188a6b21177ce7c9f65c37c942c58f286a696501ffdbabce7bcbecb22247c05b48e0933764"]}]}, 0x1adc}, 0x1, 0x0, 0x0, 0x10044}, 0x800) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nl802154(&(0x7f0000004240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000004280)={'wpan4\x00'}) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r12, &(0x7f0000004380)={&(0x7f0000004200)={0x10, 0x0, 0x0, 0x40980}, 0xfffffffffffffe48, &(0x7f0000004340)={&(0x7f0000000400)={0x34, r13, 0x1, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_PID={0x8, 0x1c, r11}, @NL802154_ATTR_WPAN_DEV={0x0, 0x6, 0x200000002}, @NL802154_ATTR_NETNS_FD={0x8}, @NL802154_ATTR_NETNS_FD={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x4000) r14 = socket$nl_generic(0x10, 0x3, 0x10) r15 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r14, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x14, r15, 0x800, 0x70bd28, 0x25dfdbfc, {{}, {@void, @void}}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x11}, 0x8040) r16 = getuid() r17 = gettid() sendmsg$nl_generic(r14, &(0x7f00000003c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000c00)={&(0x7f0000000900)={0x2a0, 0x31, 0x8, 0x70bd28, 0x25dfdbfe, {0xc}, [@typed={0x8, 0x102, 0x0, 0x0, @uid=r16}, @nested={0x13e, 0x8b, 0x0, 0x1, [@typed={0xed, 0x112, 0x0, 0x0, @binary="a2cfa0047728504927ffeb3044349b5219c9c30b66b48ef574d1fc03c873c8ba943364542a6d44f7fac873841979abea99f444516fe07773101e8f033cf2dbc4e89585334549a4be43b8a7b85b6a83ee3fef9698b785c8358b682734e6b2e013fb8a132182e0a374b13bc42aa2767b173714c0790889538fc8702a9f8c60ab3b898bca3021d8d93d1fdd1cfacf17a7a129de82d2f93145bbb74ca708a45ea2b663c9ae9a62dacb17d3842913d400715d1aad70e96f78a7a2b295b34c04711d0f0dea0b5e728b8548d4c113ccb10d897b5e3f7e7da60a29cb0ea56dfa7d2d0b37132ad4ba1e38666669"}, @typed={0xc, 0x50, 0x0, 0x0, @u64=0x8}, @typed={0x8, 0x115, 0x0, 0x0, @pid=r17}, @nested={0x4, 0x8e}, @typed={0x4, 0x3, 0x0, 0x0, @binary}, @generic="372dc53c23b5ed9f1008b64892e17fc8fdcfa29bed39e0ffd479598aa291684f96d8fd6890ca0fb00e0e44a0e640"]}, @generic="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", @generic="25687bfb54e5a9615d6aaa4b42b8574426ce53e34d6a843c0e7b7943a0396cc13d8e", @nested={0xc, 0xe6, 0x0, 0x1, [@typed={0x8, 0xe8, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x43}}]}, @nested={0x18, 0x126, 0x0, 0x1, [@typed={0x14, 0x58, 0x0, 0x0, @ipv6=@empty}]}]}, 0x2a0}, 0x1, 0x0, 0x0, 0x10044}, 0x800) r18 = getgid() sendmmsg$unix(r1, &(0x7f0000000380)=[{{&(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000040)=[{&(0x7f0000000140)="c1419c768eb6bda6fbcb92ff5da77240c877f434c71d52eb9b4900ece8af57163f8d82c8e806c6a249df32bfdcde231ca1c1ef414d5627900b1b0ca725dfaa0d9f384331f0663218536ecbda185cd1640c01464555fb1219f8b346416b75ef542d0197ba25cf6b68c530c6291946034a73e4d114fa23cbe26217a8754acf01c4be2b408df369", 0x86}], 0x1, &(0x7f00000002c0)=[@rights={{0x2c, 0x1, 0x1, [r0, r0, r0, r0, r0, r0, r2]}}, @rights={{0x18, 0x1, 0x1, [r0, r0]}}, @cred={{0x1c, 0x1, 0x2, {r3, r4, 0xffffffffffffffff}}}, @rights={{0x38, 0x1, 0x1, [r0, r0, r5, r6, r0, r0, r0, r0, r0, r7]}}, @cred={{0x1c, 0x1, 0x2, {r11, r16, r18}}}], 0xc0, 0x8040}}], 0x1, 0x4000840) 8.470767244s ago: executing program 1 (id=1807): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x80, 0x2, 0x1, 0x3, 0x0, 0x0, {0x3, 0x0, 0x5}, [@CTA_SYNPROXY={0x2c, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x9}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x6}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x400}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x4174}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0xfff}]}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x2}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x1}, @CTA_PROTOINFO={0x28, 0x4, 0x0, 0x1, @CTA_PROTOINFO_DCCP={0x24, 0x2, 0x0, 0x1, [@CTA_PROTOINFO_DCCP_STATE={0x5, 0x1, 0x7}, @CTA_PROTOINFO_DCCP_STATE={0x5, 0x1, 0x3}, @CTA_PROTOINFO_DCCP_ROLE={0x5, 0x2, 0x3}, @CTA_PROTOINFO_DCCP_ROLE={0x5, 0x2, 0x81}]}}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x4}]}, 0x80}, 0x1, 0x0, 0x0, 0x16dd084034628e4f}, 0x4005) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x4c, r2, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@ETHTOOL_A_COALESCE_USE_ADAPTIVE_RX={0x5, 0xb, 0x1}, @ETHTOOL_A_COALESCE_USE_ADAPTIVE_RX={0x5, 0xb, 0x1}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES_IRQ={0x8, 0x9, 0x12b5}, @ETHTOOL_A_COALESCE_RX_USECS_HIGH={0x8, 0x13, 0x7}, @ETHTOOL_A_COALESCE_PKT_RATE_LOW={0x8, 0xd, 0x7}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES={0x8, 0x7, 0x4}, @ETHTOOL_A_COALESCE_TX_USECS_IRQ={0x8, 0x8, 0x3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4004895}, 0x4000050) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000300), r1) sendmsg$L2TP_CMD_SESSION_GET(r1, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x54, r3, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @private=0xa010102}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x1ff}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x1}, @L2TP_ATTR_RECV_TIMEOUT={0xc}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @private=0xa010102}]}, 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x4000) connect$pppl2tp(r1, &(0x7f0000000440)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x4, 0x3, 0x4, 0x1}}, 0x26) r4 = syz_genetlink_get_family_id$devlink(&(0x7f00000004c0), r1) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r1, &(0x7f00000006c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000680)={&(0x7f0000000500)={0x180, r4, 0x100, 0x70bd29, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x2}, {0xc, 0x8f, 0x6}, {0xc, 0x90, 0x81}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}, {0xc, 0x8f, 0x2}, {0xc, 0x90, 0x10001}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x3}, {0xc, 0x8f, 0xb63}, {0xc, 0x90, 0xfffffffffffffff8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0xcb83e0f7c62a2221}, {0xc, 0x8f, 0x3}, {0xc, 0x90, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x3}, {0xc, 0x8f, 0x2}, {0xc, 0x90, 0x8}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x3}, {0xc, 0x8f, 0x40}, {0xc, 0x90, 0xc00000000000000}}]}, 0x180}, 0x1, 0x0, 0x0, 0x41}, 0x40000) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x78, 0x13, 0xa, 0x305, 0x0, 0x0, {0x1, 0x0, 0x6}, [@NFTA_OBJ_USERDATA={0x55, 0x8, "e66b405a0f6893c1286af7318ffa327c67cf4b5782c88b0bfaf77e4cd2ac16a3f9d4c287ad7f4d5a493f0289947e4c92ed0116be39eeb743fba1e91526cb1ff33b9184c5ca0baa3353c0daf7404c416c51"}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}]}, 0x78}, 0x1, 0x0, 0x0, 0x4004}, 0x8000) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000880), r1) sendmsg$NL80211_CMD_DEL_PMKSA(r5, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x28, r6, 0x800, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "0a330b690a84560c2f8d23ae5f5d061c"}]}, 0x28}, 0x1, 0x0, 0x0, 0x44}, 0x44) sendmsg$nl_generic(r5, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x20, 0x39, 0x1, 0x70bd29, 0x25dfdbfc, {0xb}, [@typed={0xc, 0x151, 0x0, 0x0, @u64}]}, 0x20}, 0x1, 0x0, 0x0, 0x4044}, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000a80), r7) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r5, 0xf504, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r5, 0x8982, &(0x7f0000000ac0)) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000b40), r0) sendmsg$TIPC_NL_LINK_GET(r5, &(0x7f0000000e00)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000b80)={0x238, r8, 0x300, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x3c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0xbbbe, @private1, 0xfffffff4}}, {0x14, 0x2, @in={0x2, 0x4e22, @rand_addr=0x64010102}}}}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xa6c}]}, @TIPC_NLA_SOCK={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x10}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1ff}, @TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xb}]}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}]}]}, @TIPC_NLA_MEDIA={0x30, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_NODE={0x10, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}]}, @TIPC_NLA_LINK={0x10c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5de}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xff}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xafcc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffff8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x66d89727}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8c5a}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}]}, @TIPC_NLA_NET={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6}]}]}, 0x238}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000004) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(r9, 0x5411, &(0x7f0000000e40)) r10 = accept(r9, &(0x7f0000000e80)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private1}}, &(0x7f0000000f00)=0x80) setsockopt$bt_BT_VOICE(r10, 0x112, 0xb, &(0x7f0000000f40)=0x60, 0x2) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r10, 0x89f2, &(0x7f00000010c0)={'tunl0\x00', &(0x7f0000000fc0)={'tunl0\x00', 0x0, 0x1, 0x40, 0x7, 0x2, {{0x2b, 0x4, 0x3, 0x2c, 0xac, 0x68, 0x0, 0xb, 0x2f, 0x0, @broadcast, @rand_addr=0x64010100, {[@cipso={0x86, 0x1f, 0x3, [{0x1, 0x2}, {0x1, 0x4, "dbc0"}, {0x5, 0xc, "5ce5a72ab3beea5a7698"}, {0x7, 0x7, "bbd7f9d507"}]}, @timestamp={0x44, 0x8, 0x2a, 0x0, 0xd, [0x0]}, @timestamp_addr={0x44, 0x4c, 0x21, 0x1, 0x5, [{@broadcast, 0xfffffff7}, {@broadcast, 0x10000}, {@broadcast, 0x4}, {@multicast1, 0xd}, {@local, 0x5}, {@multicast1, 0x6}, {@multicast1, 0x194}, {@loopback, 0x5334}, {@broadcast, 0xff}]}, @generic={0x83, 0x4, "40ee"}, @ssrr={0x89, 0x1f, 0x9c, [@multicast1, @dev={0xac, 0x14, 0x14, 0x37}, @remote, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @broadcast]}]}}}}}) getsockopt$PNPIPE_IFINDEX(r10, 0x113, 0x2, &(0x7f0000001100)=0x0, &(0x7f0000001140)=0x4) getsockopt$PNPIPE_IFINDEX(r10, 0x113, 0x2, &(0x7f0000001180)=0x0, &(0x7f00000011c0)=0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000001200)={'vxcan0\x00', 0x0}) sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f0000001300)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000012c0)={&(0x7f0000001240)={0x80, r2, 0x220, 0x70bd2b, 0x25dfdbfb, {}, [@ETHTOOL_A_DEBUG_HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x4040884}, 0x40084) 8.019722882s ago: executing program 1 (id=1811): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) socket$pppl2tp(0x18, 0x1, 0x1) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x1, 0x0, 0x25dfdbfe, {{@in6=@private0={0xfc, 0x0, '\x00', 0x40}, @in=@multicast1, 0x0, 0x0, 0x4e20, 0x0, 0xa, 0x60, 0x80, 0x32, 0x0, 0xee01}, {}, {}, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[], 0xb8}}, 0x0) (async) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e00010000"], 0xb8}}, 0x0) (async) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0xaa3, 0xfffffffffffffff8}, {0x0, 0x8}}}, 0xb8}}, 0x0) r3 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)=@o_path={&(0x7f0000000040)='./file0\x00', 0x0, 0xc, r0}, 0x18) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0x40, 0x25dfdbfb, {}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_EXPECTED_FD={0x8, 0x8, r3}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20048050}, 0x0) 7.879593399s ago: executing program 1 (id=1816): r0 = socket$can_j1939(0x1d, 0x2, 0x7) (async, rerun: 64) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) (rerun: 64) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000080)='svc_unregister\x00', r1, 0x0, 0xfaf}, 0x18) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000080)='svc_unregister\x00', r3, 0x0, 0xfaf}, 0x18) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="1400000025000100000000000000040006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) shutdown(r0, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x10, 0x2, &(0x7f0000000040)=ANY=[@ANYBLOB="911007000000000095"], &(0x7f0000000000)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000180)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8000000, 0x0, 0x1, 0xa, 0x0, 0x2}, 0x20) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x28, 0x38, 0x1, 0x20, 0x0, {0xb}, [@typed={0x14, 0x1, 0x0, 0x0, @ipv6=@private2}]}, 0x28}, 0x1, 0x0, 0x0, 0xc0}, 0x40010) 1.045457117s ago: executing program 2 (id=1894): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x503, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4004, 0x6230}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x3, @random="3a71c4b556b8"}]}, 0x40}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x503, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4004, 0x6230}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x3, @random="3a71c4b556b8"}]}, 0x40}}, 0x0) (async) 1.022709566s ago: executing program 3 (id=1895): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000600)="4bafcd7ebae5f0def07fcee3888dd79853b9ece6de358600db1551c185e070e028fa0818037da842b28d42ca81e281e87483f9ba845046d5af66abc540e0cd73a0036bf756d117a318fb", 0x4a}], 0x1}], 0x1, 0x0) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/73, 0x49}], 0x1}, 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r4, 0x1, 0x0, 0x0, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000008500000056000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000a000000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 936.262318ms ago: executing program 4 (id=1896): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x770, 0x0, 0xbabd}, 0x1c) write(0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f0000000000), 0x4) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a3100000000080005400000002b090002"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0x7}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0x8370}, 0x1c) listen(r3, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000340)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa5a86dd60f900f500180600fe8000000000000000000000000000aafe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="00000022a2e5ab0000000000"], 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x12, 0x2, 0x8, 0x8}, 0x50) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000600)=ANY=[@ANYBLOB="200000001a14010000000000000000000800030000000000080003"], 0x20}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000280), r6) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x20, r7, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xea}]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x20040000) close(r1) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) syz_emit_ethernet(0xfc6, &(0x7f00000022c0)=ANY=[], 0x0) 914.183421ms ago: executing program 3 (id=1897): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'veth1_to_bond\x00', 0x0}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a300000000050000000060a010400000000000000000100000808000b400000000028000480240001800b0001007470726f7879000014000280080003400000000a08000140000000420900010073797a30"], 0xc4}}, 0x4008800) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000300)={'ip6_vti0\x00', r1, 0x4, 0x0, 0x0, 0x1, 0x4, @mcast1, @private2, 0x700, 0x8, 0x8, 0x3}}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e21, 0x679, @ipv4={'\x00', '\xff\xff', @remote}, 0x1}, 0x1c) getsockopt$inet6_int(r5, 0x29, 0x10, 0x0, &(0x7f0000000200)) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa30e, 0x1, 0xfffffffa}}}}]}, 0x44}}, 0x0) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r6, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x39}}, 0x10) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r2, 0x4018f50b, &(0x7f0000000040)={0x1, 0xa, 0x10000}) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="01000000000000000000100000001800018014000200776c616e3100000000000000000000000800070000000000"], 0x34}}, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000540)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r11, {0x0, 0x6}, {0x0, 0xa}, {0x0, 0x6}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 894.34372ms ago: executing program 2 (id=1898): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900030073797a30000000000900010073797a300000000058000000060a010400000000000000000100000008000b40000000000900010073797a3000000000300004802c0001800a00010071756575650000001c000280060002400ffe009b06000140fa"], 0xcc}, 0x1, 0x0, 0x0, 0x24000090}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="6800000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000014060000400012800b00010067656e6576650000300002801400070000000000000000000000ffffac14140005000a0002000000050009"], 0x68}, 0x9}, 0x0) 844.508178ms ago: executing program 4 (id=1899): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000c40), r0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x14, r1, 0x1, 0x0, 0x0, {0x6, 0x0, 0x900}}, 0x14}, 0x2, 0x34005}, 0x0) (async) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_IPV6_PKTINFO(r2, 0x29, 0x4b, 0x0, 0x0) 806.598222ms ago: executing program 4 (id=1901): r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r2, 0x400, 0x70bd2d, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x4000000) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000800)=ANY=[@ANYBLOB="090000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003a971f12e3a0000000000000001000000024000007f0000010204"], 0x110) socket$inet_udplite(0x2, 0x2, 0x88) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$L2TP_CMD_TUNNEL_GET(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r2, 0x400, 0x70bd2d, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x4000000) (async) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000800)=ANY=[@ANYBLOB="090000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003a971f12e3a0000000000000001000000024000007f0000010204"], 0x110) (async) 592.143635ms ago: executing program 4 (id=1903): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x76a9bba1a690db0f, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3cb140bb}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) (async) r1 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r1, 0x29, 0x24, &(0x7f0000000080), 0x4) (async) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$F2FS_IOC_SEC_TRIM_FILE(r2, 0x4018f514, &(0x7f0000000040)={0x8000000000000000, 0x7, 0x2}) (async) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) (async, rerun: 32) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x14, 0x0, &(0x7f0000000180)) (async, rerun: 32) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x8, @mcast1, 0x3, 0xffffffff}, 0x80, &(0x7f0000001880)=[{&(0x7f0000000780)="f4000900062b2c25fe80000000000000dc8b850f238466cc00007a000000ad6e911b51818462b400", 0x28}], 0x1}, 0x0) 591.321062ms ago: executing program 2 (id=1904): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x4a, &(0x7f0000000080)=ANY=[@ANYBLOB="aaa3d63403aaaaaaaa0180c2001f196871f19a000086dd2c7b57843c127eb9cd602a84350014060000000000000400"], 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001000000000000000000dc020078000000000000000000000000ff02000000000000e26ea7250000000100000000000000000a"], 0xb8}, 0x1, 0x0, 0x0, 0x4008004}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="650100001b"], 0x188}}, 0x0) clock_gettime(0x0, &(0x7f0000002f40)={0x0, 0x0}) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000002e40)=[{{&(0x7f0000000140), 0x6e, &(0x7f0000000040)=[{&(0x7f0000000640)=""/120, 0x78}, {&(0x7f0000000380)=""/152, 0x98}, {&(0x7f0000003080)=""/169, 0xa9}, {&(0x7f0000000580)=""/147, 0x93}], 0x4, &(0x7f0000002fc0)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xb0}}, {{&(0x7f00000006c0)=@abs, 0x6e, &(0x7f0000000300)=[{&(0x7f00000001c0)=""/4, 0x4}, {&(0x7f0000000740)=""/4096, 0x1000}], 0x2}}, {{&(0x7f0000001740)=@abs, 0x6e, &(0x7f0000002940)=[{&(0x7f00000028c0)=""/69, 0x45}, {&(0x7f00000017c0)=""/223, 0xdf}, {&(0x7f00000018c0)=""/4096, 0x1000}], 0x3}}, {{&(0x7f0000002980)=@abs, 0x6e, &(0x7f0000002c80)=[{&(0x7f0000002a00)=""/169, 0xa9}, {&(0x7f0000002ac0)=""/198, 0xc6}, {&(0x7f0000002bc0)=""/169, 0xa9}], 0x3, &(0x7f0000002cc0)=[@cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x168}}], 0x4, 0x40000000, &(0x7f0000002f80)={r2, r3+60000000}) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01000000010000000000010000000000000001410000001c001700000000000000006574683a7379a4bee846fe4814f3348345"], 0x38}}, 0x0) 573.015728ms ago: executing program 3 (id=1905): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d80)={&(0x7f0000001c40)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000060000000400000000000007000000000000000061"], 0x0, 0x2a}, 0x20) bpf$MAP_CREATE(0xe4ffffff00000000, &(0x7f0000001000)=ANY=[@ANYBLOB="1000000004000000040000000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="00000000010000ffffffeb0000009444ed2d03000000000000000000"], 0x48) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000cc0)=@newqdisc={0x50, 0x24, 0xd0f, 0x3, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0x2}, {0xffff, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x20, 0x2, {{0x10, 0x3, 0x1, 0x3, 0x400, 0x8}, [@TCA_NETEM_DELAY_DIST={0x4}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x40001d4}, 0x8840) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000008850000007600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x2) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r8, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) shutdown(0xffffffffffffffff, 0x1) unshare(0x6020400) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) setsockopt$bt_BT_SECURITY(r5, 0x112, 0x4, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000008c0)=@newtaction={0x70, 0x30, 0xffffffffffffffff, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_bpf={0x58, 0x1, 0x0, 0x0, {{0x8}, {0x32, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18}, @TCA_ACT_BPF_FD={0x8, 0x5, r4}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r11, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)={0x2, 0x5, 0x0, 0x6, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @empty}}, @sadb_sa={0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}]}, 0x50}, 0x1, 0x7}, 0x0) setsockopt$bt_hci_HCI_DATA_DIR(r7, 0x0, 0x1, &(0x7f0000000280)=0x6, 0x4) r12 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="0100000000000000000001000010000000000b"], 0x28}}, 0x0) getsockopt$sock_buf(r9, 0x1, 0x1f, &(0x7f0000001c80)=""/4096, &(0x7f0000000000)=0x1000) 517.262745ms ago: executing program 4 (id=1906): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x305240, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0xfffffffd, 0xc5, 0xe23, 0x1, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x80000, {0x0, 0x0, 0x0, r7, {}, {0xffe6, 0xb}, {0xffe0, 0x3}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_ATM={0x8, 0x4, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 464.286555ms ago: executing program 2 (id=1907): sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x2c, 0x0, 0x4, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x40}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4800) (async) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x42}, [@call={0x85, 0x0, 0x0, 0x87}, @printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x17}}]}, &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_ADD(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="09180000000000000000010000000800020002000000080001"], 0x24}}, 0x0) (async) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="140100001f000504000000000000000005"], 0x114}], 0x1}, 0x0) 463.445103ms ago: executing program 0 (id=1908): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=ANY=[@ANYBLOB="980000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="05220000000000003400128009004b00766c616e000000e9cb7d3e102c70c93f62391c00240002800c0002000000000000000000100003800c00010003001c5ab4c95c86fedf574e0d3c00000800000004000480440012800b000100697036677265000034000280060010004e2300000800040009000000060011004e20000008000d000500000006000f00"], 0x98}, 0x1, 0xba01}, 0x0) 388.824479ms ago: executing program 0 (id=1909): ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000040)=0x0) syz_open_procfs$namespace(r0, &(0x7f0000000000)='ns/uts\x00') 388.218376ms ago: executing program 2 (id=1910): r0 = socket$kcm(0x10, 0x3, 0x10) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x9, 0x0, &(0x7f0000000180)={&(0x7f0000000540)={0x2, 0x3, 0x0, 0x3, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xd}]}, 0x20}, 0x1, 0x7}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x9006000, &(0x7f00000030c0)=[{&(0x7f0000000180)="1400000016001963d25a80648c56915a19aa2bfe", 0x14}], 0x1}, 0x0) 302.678476ms ago: executing program 0 (id=1911): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={0x50, r1, 0xe17, 0x0, 0x0, {0x1, 0x0, 0x6000}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @ipv4={'\x00', '\xff\xff', @dev}}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @loopback}]}, 0x50}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_SET(r2, &(0x7f0000000180)={0x0, 0x1e, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002abd7000000000001100000024010908000100f0ffffff080001000100000008000200040000020600010009000002"], 0x38}, 0x1, 0x0, 0x0, 0x240280d0}, 0x2000c890) (async) sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0xd4, r3, 0x24, 0x70bd2a, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfffffc01}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x40}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xc6}]}, @TIPC_NLA_NET={0x6c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x10}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xffff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xfffffffffffffffe}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}, @TIPC_NLA_NET_NODEID={0xc}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x4048800}, 0x4000040) 236.143264ms ago: executing program 2 (id=1912): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="200000309ebba44be1dc543032a4d7a1d4f33bb8f2c2a1452b7528313100"], 0x20}}, 0x0) recvmmsg(r0, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000400)=""/203, 0xcb}, {&(0x7f0000002080)=""/4096, 0x1000}, {&(0x7f0000000740)=""/191, 0xbf}], 0x3}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_SET_VLAN(r4, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x2c, 0x0, 0x200, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48000}, 0xc884) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0x17, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000218110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r3, @ANYRESHEX=r2, @ANYRES32=r3, @ANYBLOB="0000000000000000b7020000000000008500000017000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xa, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0xfca804a0, 0xe, 0x0, &(0x7f0000000580)="b80022ab98d1db1b883e04000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64\x00'}, 0x58) setsockopt$ALG_SET_KEY(r9, 0x117, 0x7, &(0x7f00000000c0)="fcffffff", 0x4) getsockopt$inet_int(r8, 0x0, 0x33, 0x0, &(0x7f0000000080)) r10 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r10, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x12041) sendmsg$NL80211_CMD_VENDOR(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01070000000000a859fd9c35691f41490800", @ANYRES32=r7, @ANYBLOB="0800c300000000000800c40000000000"], 0x2c}}, 0x0) sendmsg$NL80211_CMD_GET_MPATH(r4, &(0x7f0000000680)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x2c, r1, 0x10, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x2c}, 0x1, 0x0, 0x0, 0x14080}, 0x1) 235.172839ms ago: executing program 4 (id=1913): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x40001) recvmmsg(r0, &(0x7f00000086c0)=[{{0x0, 0x0, 0x0}, 0x104}, {{0x0, 0x0, 0x0}, 0x80000001}, {{0x0, 0x0, 0x0}, 0x8001}, {{0x0, 0x0, &(0x7f0000002b00)=[{&(0x7f00000029c0)=""/190, 0xbe}, {&(0x7f00000028c0)=""/236, 0xec}, {&(0x7f0000000840)=""/4115, 0x1013}, {&(0x7f0000000640)=""/68, 0x44}, {&(0x7f0000000500)=""/240, 0xf0}, {&(0x7f0000000740)=""/251, 0xfb}], 0x6}, 0x9}], 0x4, 0x4022, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f000001a100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f000001a040)=@bridge_delneigh={0x1c, 0x1d, 0x0, 0x0, 0x25dfdbf8, {0xa, 0x0, 0x0, 0x0, 0x20, 0x0, 0x4}}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x0) 191.30237ms ago: executing program 3 (id=1914): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r1, 0x0, 0x22, 0x0, 0x0) write$tun(r0, &(0x7f0000000000)=ANY=[], 0x38) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x10012, r0, 0x0) (async) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_WANTLQI(r2, 0x0, 0x3, &(0x7f0000000140), 0x4) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x22041, 0x0) (async) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000604000000002e"], 0x0, 0x37}, 0x28) unshare(0x26020480) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x3, 0x0, 0x1001, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000080)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, r3}, 0x94) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000580)={'veth0\x00'}) (async) getsockopt$IP_VS_SO_GET_TIMEOUT(r4, 0x0, 0x486, &(0x7f00000000c0), &(0x7f0000000100)=0xc) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000040)=[@in={0x2, 0x4e22, @local}, @in6={0xa, 0x4e24, 0x4, @mcast1, 0x6}], 0x2c) 183.904424ms ago: executing program 0 (id=1915): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\x00', @ANYRES32=0x0, @ANYBLOB="000000000a000100aaaaaaaaaaaa000008000f0000000000"], 0x30}}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"/1664], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x702, 0xe, 0x0, &(0x7f0000000380)="e46033449fdd0200000000000000", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001780)={0x34, 0x3e, 0x1, 0x7fffc, 0x4, {0x1}, [@nested={0x8, 0x48, 0x0, 0x1, [@typed={0x4, 0x8}]}, @nested={0xc, 0x1, 0x0, 0x1, [@nested={0x8, 0x10, 0x0, 0x1, [@nested={0x4, 0x51}]}]}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x34}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) ioctl$PPPIOCSMRU(0xffffffffffffffff, 0x40047452, &(0x7f0000000140)=0x10001) 55.893651ms ago: executing program 3 (id=1916): getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000000)={0x0, @in6={{0xa, 0x4e22, 0x100, @loopback, 0x4}}, 0x3, 0x9}, &(0x7f00000000c0)=0x90) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x5, &(0x7f0000000100)={r0, @in6={{0xa, 0x4e24, 0x8, @private1={0xfc, 0x1, '\x00', 0x1}, 0x6cc}}}, 0x84) r1 = socket$inet6_icmp(0xa, 0x2, 0x3a) sendto$inet6(r1, &(0x7f00000001c0)="d1b3884b24437685c4457ffc3320176728f55e8522e0a666aca4c8634643e16d01a54f057a658b179b577ffaa2f2a3f04cf4dd8f044548ec21397d33b6e1cb52db50a10ce541348b546be54763f4297a0469432187767c86943b439f9a58fddd367740d67aba75cfbc2aff41ca6080c65674", 0x72, 0x40000, &(0x7f0000000240)={0xa, 0x4e20, 0x68ad, @mcast1, 0xc}, 0x1c) r2 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000280)) r3 = socket$netlink(0x10, 0x3, 0x9) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.net/syz0\x00', 0x200002, 0x0) r5 = socket$pppoe(0x18, 0x1, 0x0) ppoll(&(0x7f0000000300)=[{r3, 0x4380}, {r4, 0xe144}, {r2}, {r1, 0x1000}, {r5, 0x8040}, {r2, 0x2020}, {r1}], 0x7, &(0x7f0000000340)={0x0, 0x3938700}, &(0x7f0000000380)={[0x2]}, 0x8) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r3, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x20, r6, 0x10, 0x70bd25, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x80000000, 0x4a}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x4000001) setsockopt$inet6_opts(r4, 0x29, 0x37, &(0x7f0000000500)=@routing={0x33, 0xe, 0x2, 0xa2, 0x0, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private2, @remote, @empty, @mcast2, @mcast2, @private1={0xfc, 0x1, '\x00', 0x1}]}, 0x78) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_TX_POWER(r7, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x30, r8, 0x8, 0x70bd26, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x890}, 0x2000c080) bind$inet6(r1, &(0x7f00000006c0)={0xa, 0x4e22, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}, 0x6}, 0x1c) getsockopt$EBT_SO_GET_INFO(r2, 0x0, 0x80, &(0x7f0000000700)={'broute\x00', 0x0, 0x0, 0x0, [0x0, 0xfffffffffffffff7, 0x2, 0xffff, 0xe103, 0xff]}, &(0x7f0000000780)=0x78) getsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f00000007c0), 0x10) ioctl$sock_SIOCGPGRP(r5, 0x8904, &(0x7f0000000840)=0x0) sendmsg$AUDIT_SET(r3, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x102}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x3c, 0x3e9, 0x2, 0x70bd2a, 0x25dfdbfe, {0x41, 0x0, 0x2, r9, 0x5028, 0x3, 0x3, 0x4, 0x0, 0x83d, 0x9}, ["", "", "", "", "", ""]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x20000004) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000980), r3) sendmsg$ETHTOOL_MSG_COALESCE_SET(r3, &(0x7f0000000a80)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x64, r10, 0x4, 0x70bd2b, 0x25dfdbfd, {}, [@ETHTOOL_A_COALESCE_TX_MAX_FRAMES_IRQ={0x8, 0x9, 0xc76}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES_HIGH={0x8, 0x16, 0x1}, @ETHTOOL_A_COALESCE_RATE_SAMPLE_INTERVAL={0x8, 0x17, 0x2}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES={0x8, 0x7, 0x9b1}, @ETHTOOL_A_COALESCE_RATE_SAMPLE_INTERVAL={0x8, 0x17, 0x1}, @ETHTOOL_A_COALESCE_TX_USECS_IRQ={0x8}, @ETHTOOL_A_COALESCE_RX_USECS_HIGH={0x8, 0x13, 0x6}, @ETHTOOL_A_COALESCE_PKT_RATE_LOW={0x8, 0xd, 0x3}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES_IRQ={0x8, 0x9, 0x8}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES={0x8, 0x3, 0x101}]}, 0x64}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) ioctl$F2FS_IOC_MOVE_RANGE(r5, 0xc020f509, &(0x7f0000000ac0)={r5, 0x1, 0x4, 0x100}) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r11, 0x84, 0x6, &(0x7f0000000b00)={r0, @in={{0x2, 0x4e23, @multicast2}}}, &(0x7f0000000bc0)=0x84) r12 = syz_genetlink_get_family_id$nbd(&(0x7f0000000c40), r7) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000c80)={0xffffffffffffffff}) pipe(&(0x7f0000000cc0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r7, &(0x7f0000000e00)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d00)={0x90, r12, 0x100, 0x70bd29, 0xfffffffa, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x100}, @NBD_ATTR_SOCKETS={0x64, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r11}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r11}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r11}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r11}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r13}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r14}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r11}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r11}}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}]}, 0x90}, 0x1, 0x0, 0x0, 0x4801}, 0x44081) syz_emit_ethernet(0x96, &(0x7f0000000e40)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x32}, @val={@val={0x88a8, 0x3, 0x0, 0x1}, {0x8100, 0x0, 0x1, 0x1}}, {@llc_tr={0x11, {@snap={0x0, 0x0, 'H', 'WN^', 0x600, "88bd1fbda8d6723608de573da82ae1a1b0b7d4dc69b61821142aadb9a7d86e8a270be29b69a08c95cb0576d8fe9837779a5cf66ea53bcd5f4e2fb36b4894861a2a6be6f5a4d17e85ba3f4e363abef76d2cd9d908426bbb7b6c775e23e6c1d9979dbd3b368f414ef13efa1d593d6624f1e6ed61c252446fc1"}}}}}, 0x0) 55.001652ms ago: executing program 0 (id=1917): syz_emit_ethernet(0xa6, &(0x7f0000000200)=ANY=[@ANYBLOB="bbbbbbbbbbbbaa32aaaaaabb86dd6000021000703a7f000000000000000000000000000000bbff0200000000000000000000000000010400907800000000608bb91d0000f0ffffff0000000000000000004dce0c8e010000000000000000000000000000000087000519680000000006000000000000050200000106000000000000002207009ab13f6e142b20582c8d220c698a74dbf13dfc0ad1f526dfc433137593006da5c7bd160a73a17cc66b9c1d0489643abc5fee427b25cbd0e042f04e70d7bf8b99d3a2a68992df"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000071123e000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000080)={0xa, 0x0, 0xb3, @ipv4={'\x00', '\xff\xff', @local}, 0x8}, 0x20) 5.65389ms ago: executing program 0 (id=1918): r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x9, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @fallback=0x9, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) (async, rerun: 32) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (rerun: 32) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000500)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x4}, 0x48) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02}) r2 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) getsockopt$bt_BT_CHANNEL_POLICY(r2, 0x112, 0xa, &(0x7f0000000040)=0x6, &(0x7f0000000080)=0x4) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000002c0)={r2}) setsockopt$llc_int(r3, 0x10c, 0x9, &(0x7f0000000300)=0x9, 0x4) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=@framed={{0x72, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0x1b}}, &(0x7f0000000480)='GPL\x00'}, 0x80) (async) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)={0x114, 0x2d, 0x1, 0x0, 0x0, "", [@nested={0x103, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@loopback}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd3f8c"]}]}, 0x114}], 0x1}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/syz1\x00', 0x1ff) (async, rerun: 64) setsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, &(0x7f0000000180)=0x52, 0x4) (async, rerun: 64) socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r5, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) (async) ioctl$sock_inet_SIOCSIFDSTADDR(r5, 0x8918, &(0x7f0000000280)={'veth0_to_bond\x00', {0x2, 0x4e21, @rand_addr=0x401}}) (async) syz_emit_ethernet(0x46, &(0x7f0000000200)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0xfe, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x1, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffd, 0x0, 0x1, 0x0, @loopback, @loopback}, "00186371ae9b1c03"}}}}}, 0x0) (async) readv(r1, &(0x7f00000001c0)=[{&(0x7f0000001400)=""/227, 0x10}], 0x4) (async) socket$kcm(0x2, 0xa, 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000010"], 0x38}}, 0x0) (async) r6 = socket$inet_sctp(0x2, 0x5, 0x84) (async) r7 = socket(0x2, 0x80805, 0x0) (async) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r3) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000003c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r7, &(0x7f0000000580)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)={0x50, r8, 0x8, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x4, 0x56}}}}, [@NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0xc}, @NL80211_ATTR_PMKID={0x14, 0x55, "677416a2f6c18bf6d540f67377624c8d"}, @NL80211_ATTR_BSSID={0xa, 0xf5, @random="f7cccd282c33"}]}, 0x50}, 0x1, 0x0, 0x0, 0x48080}, 0x4041801) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r6, 0x84, 0x10, &(0x7f0000000140)=@sack_info={r10, 0x6, 0x100}, 0xc) 0s ago: executing program 3 (id=1919): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r1, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x19, &(0x7f0000000340), 0x8) r2 = socket$unix(0x1, 0x2, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x44, r3, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x7ff, 0x70}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x44}, 0x1, 0x0, 0x0, 0x91}, 0x24044884) r5 = socket$inet6(0xa, 0x1, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r6, &(0x7f0000000080)={0x10, 0x0, 0x0, 0xfffffffffffffffd}, 0xc) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1, 0x0, 0x9833bf88d1b218f5, 0x3}, {{@in=@empty, 0x4d6, 0x6c}, 0x0, @in=@remote, 0x0, 0x0, 0x0, 0x7, 0x8}}, 0xe8) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) kernel console output (not intermixed with test programs): 82.927962][ T5873] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.956237][ T3558] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.963620][ T3558] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.987104][ T5869] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.027703][ T3558] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.034868][ T3558] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.054720][ T5876] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.101185][ T5869] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.120584][ T5876] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.144555][ T1086] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.152738][ T1086] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.181966][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.190036][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.201593][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.208968][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.231091][ T5864] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.242764][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.250266][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.372821][ T5878] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.395465][ T5864] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.475448][ T1153] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.482696][ T1153] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.531680][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.539318][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.595534][ T5878] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.651862][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.659182][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.744064][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.751459][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.854686][ T5873] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.982140][ T5878] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 84.032956][ T5876] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.061377][ T5869] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.155596][ T5869] veth0_vlan: entered promiscuous mode [ 84.195068][ T5869] veth1_vlan: entered promiscuous mode [ 84.215161][ T5873] veth0_vlan: entered promiscuous mode [ 84.313800][ T5873] veth1_vlan: entered promiscuous mode [ 84.354106][ T5869] veth0_macvtap: entered promiscuous mode [ 84.365190][ T5876] veth0_vlan: entered promiscuous mode [ 84.432176][ T5869] veth1_macvtap: entered promiscuous mode [ 84.444536][ T5864] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.454796][ T5876] veth1_vlan: entered promiscuous mode [ 84.487921][ T5873] veth0_macvtap: entered promiscuous mode [ 84.511589][ T5878] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.533456][ T5873] veth1_macvtap: entered promiscuous mode [ 84.572796][ T5869] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.595174][ T5873] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.609781][ T5869] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.626257][ T5186] Bluetooth: hci0: command tx timeout [ 84.643834][ T5873] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.668835][ T5876] veth0_macvtap: entered promiscuous mode [ 84.684582][ T1086] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.695399][ T1086] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.716086][ T5186] Bluetooth: hci1: command tx timeout [ 84.733038][ T5876] veth1_macvtap: entered promiscuous mode [ 84.749585][ T1153] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.786467][ T5186] Bluetooth: hci2: command tx timeout [ 84.792031][ T5186] Bluetooth: hci4: command tx timeout [ 84.801638][ T5874] Bluetooth: hci3: command tx timeout [ 84.824664][ T1153] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.836983][ T5864] veth0_vlan: entered promiscuous mode [ 84.847089][ T1153] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.891828][ T1153] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.901875][ T1153] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.919939][ T5876] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.938810][ T5864] veth1_vlan: entered promiscuous mode [ 84.956291][ T1114] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.969902][ T5876] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.064992][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.076707][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.103658][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.114014][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.136450][ T3558] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.145285][ T3558] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.163890][ T5864] veth0_macvtap: entered promiscuous mode [ 85.198485][ T5864] veth1_macvtap: entered promiscuous mode [ 85.269737][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.278970][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.293478][ T5878] veth0_vlan: entered promiscuous mode [ 85.314343][ T5864] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.337126][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.344878][ T5878] veth1_vlan: entered promiscuous mode [ 85.352747][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.363271][ T5864] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.420645][ T48] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.420885][ T1086] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.440646][ T1086] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.450812][ T48] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.512864][ T5869] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 85.514440][ T48] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.537994][ T48] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.631259][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.645572][ T5878] veth0_macvtap: entered promiscuous mode [ 85.652763][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.700233][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.710054][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.730438][ T5878] veth1_macvtap: entered promiscuous mode [ 85.769409][ T5988] pim6reg1: entered promiscuous mode [ 85.774755][ T5988] pim6reg1: entered allmulticast mode [ 85.806415][ T5987] netlink: 116 bytes leftover after parsing attributes in process `syz.1.2'. [ 85.849331][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.867653][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.889433][ T5878] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.021749][ T5878] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.073575][ T5996] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7'. [ 86.107497][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.117582][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.131993][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.141162][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.175213][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.216655][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.258013][ T6000] warning: `syz.1.8' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 86.361894][ T6000] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8'. [ 86.464315][ T6013] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 86.533778][ T3558] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.544017][ T3558] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.605591][ T6013] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 86.658521][ T6013] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1'. [ 86.689424][ T1114] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.704445][ T6013] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 86.716457][ T5186] Bluetooth: hci0: command tx timeout [ 86.722013][ T1114] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.786494][ T5186] Bluetooth: hci1: command tx timeout [ 86.819771][ T6013] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 86.865812][ T5186] Bluetooth: hci4: command tx timeout [ 86.871533][ T5874] Bluetooth: hci3: command tx timeout [ 86.871543][ T5867] Bluetooth: hci2: command tx timeout [ 86.950915][ T121] cfg80211: failed to load regulatory.db [ 87.204106][ T6033] netlink: 52 bytes leftover after parsing attributes in process `syz.3.16'. [ 87.717288][ T6055] netlink: 32 bytes leftover after parsing attributes in process `syz.4.21'. [ 87.764073][ T6055] netlink: 32 bytes leftover after parsing attributes in process `syz.4.21'. [ 87.924861][ T6063] netlink: 12 bytes leftover after parsing attributes in process `syz.1.24'. [ 88.019029][ T6063] netlink: 8 bytes leftover after parsing attributes in process `syz.1.24'. [ 88.048842][ T6070] Zero length message leads to an empty skb [ 88.435161][ T6089] netlink: 'syz.2.26': attribute type 1 has an invalid length. [ 88.479361][ T6089] netlink: 224 bytes leftover after parsing attributes in process `syz.2.26'. [ 88.539313][ T6091] xfrm1: entered allmulticast mode [ 88.626146][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 88.788521][ T6108] netlink: 'syz.1.32': attribute type 13 has an invalid length. [ 88.819081][ T6106] 0ªî{X¹¦: renamed from gretap0 (while UP) [ 88.831586][ T6106] 0ªî{X¹¦: entered allmulticast mode [ 88.858366][ T6106] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 88.887595][ T6113] netlink: 'syz.3.34': attribute type 1 has an invalid length. [ 88.895368][ T6113] block nbd1: not configured, cannot reconfigure [ 88.954518][ T6115] Bluetooth: MGMT ver 1.23 [ 88.973915][ T6115] netlink: 'syz.2.35': attribute type 1 has an invalid length. [ 89.024402][ T6108] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 89.106616][ T6109] veth3: entered allmulticast mode [ 89.166081][ T6131] syz.4.38 uses obsolete (PF_INET,SOCK_PACKET) [ 89.184709][ T6121] netlink: 'syz.0.37': attribute type 9 has an invalid length. [ 89.193446][ T6120] netlink: 'syz.0.37': attribute type 9 has an invalid length. [ 89.709787][ T6156] netlink: 'syz.3.44': attribute type 12 has an invalid length. [ 89.809737][ T6159] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 89.956692][ T6163] netdevsim netdevsim4 : renamed from netdevsim0 (while UP) [ 89.965763][ T6169] netlink: 'syz.1.51': attribute type 1 has an invalid length. [ 90.008600][ T6169] netlink: 'syz.1.51': attribute type 83 has an invalid length. [ 90.422432][ T6190] macvtap1: entered promiscuous mode [ 90.428541][ T6190] vlan0: entered promiscuous mode [ 90.434447][ T6190] macvtap1: entered allmulticast mode [ 90.440805][ T6190] vlan0: entered allmulticast mode [ 90.446390][ T6190] veth0_vlan: entered allmulticast mode [ 90.457483][ T12] nci: nci_rf_discover_ntf_packet: unsupported rf_tech_and_mode 0x7d [ 90.609572][ T6190] macvtap2: entered promiscuous mode [ 90.615416][ T6190] macvtap2: entered allmulticast mode [ 90.748654][ T6190] macvtap3: entered promiscuous mode [ 90.754727][ T6190] macvtap3: entered allmulticast mode [ 90.848183][ T6190] macvtap4: entered promiscuous mode [ 90.867503][ T6190] macvtap4: entered allmulticast mode [ 90.875219][ T6190] __nla_validate_parse: 12 callbacks suppressed [ 90.875235][ T6190] netlink: 4 bytes leftover after parsing attributes in process `syz.2.58'. [ 90.894218][ T6213] netlink: 4 bytes leftover after parsing attributes in process `syz.0.62'. [ 91.041737][ T6190] macvtap5: entered promiscuous mode [ 91.050938][ T6190] macvtap5: entered allmulticast mode [ 91.061404][ T6190] netlink: 4 bytes leftover after parsing attributes in process `syz.2.58'. [ 91.140773][ T6190] macvtap6: entered promiscuous mode [ 91.147092][ T6190] macvtap6: entered allmulticast mode [ 91.318244][ T6219] netlink: 'syz.1.63': attribute type 2 has an invalid length. [ 91.628610][ T6230] sctp: [Deprecated]: syz.2.67 (pid 6230) Use of struct sctp_assoc_value in delayed_ack socket option. [ 91.628610][ T6230] Use struct sctp_sack_info instead [ 91.862256][ T6246] netlink: 100 bytes leftover after parsing attributes in process `syz.3.69'. [ 91.977208][ T6240] unknown channel width for channel at 909000KHz? [ 92.108149][ T6230] syz.2.67 (6230) used greatest stack depth: 18008 bytes left [ 92.125056][ T6242] syz.2.67 (6242) used greatest stack depth: 16904 bytes left [ 92.364084][ T6264] netlink: 24 bytes leftover after parsing attributes in process `syz.1.73'. [ 92.456016][ T6261] netlink: 248 bytes leftover after parsing attributes in process `syz.1.73'. [ 92.510172][ T6261] netlink: 24 bytes leftover after parsing attributes in process `syz.1.73'. [ 92.590860][ T6267] mac80211_hwsim hwsim6 wlan1: entered allmulticast mode [ 92.946409][ T6292] netlink: 64 bytes leftover after parsing attributes in process `syz.0.78'. [ 93.119847][ T6304] netlink: 8 bytes leftover after parsing attributes in process `syz.2.83'. [ 93.145459][ T6304] openvswitch: netlink: nsh attribute has 2338 unknown bytes. [ 93.235513][ T6304] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 93.276690][ T6311] netlink: 324 bytes leftover after parsing attributes in process `syz.4.85'. [ 93.776659][ T6329] validate_nla: 3 callbacks suppressed [ 93.776678][ T6329] netlink: 'syz.2.90': attribute type 1 has an invalid length. [ 93.824128][ T6329] netlink: 'syz.2.90': attribute type 2 has an invalid length. [ 93.867460][ T6314] syzkaller1: entered promiscuous mode [ 93.895055][ T6314] syzkaller1: entered allmulticast mode [ 94.042093][ T6339] netlink: 'syz.2.93': attribute type 10 has an invalid length. [ 94.132995][ T6339] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.144275][ T6339] bridge_slave_1: left allmulticast mode [ 94.151870][ T6339] bridge_slave_1: left promiscuous mode [ 94.159543][ T6339] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.175418][ T6339] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 94.321190][ T6350] raw_sendmsg: syz.4.96 forgot to set AF_INET. Fix it! [ 94.345572][ T6348] unsupported nla_type 28168 [ 94.415561][ T6353] macsec0: entered promiscuous mode [ 94.437308][ T6353] macsec0: entered allmulticast mode [ 94.468091][ T6353] veth1_macvtap: entered allmulticast mode [ 94.498375][ T6353] bridge0: port 3(macsec0) entered blocking state [ 94.505278][ T6353] bridge0: port 3(macsec0) entered disabled state [ 94.517450][ T6353] bridge0: port 3(macsec0) entered blocking state [ 94.524219][ T6353] bridge0: port 3(macsec0) entered forwarding state [ 94.535369][ T6356] chnl_net:caif_netlink_parms(): no params data found [ 94.918054][ T6378] netlink: 'syz.1.104': attribute type 11 has an invalid length. [ 95.299445][ T6394] netlink: 'syz.2.106': attribute type 2 has an invalid length. [ 95.798906][ T6416] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 95.862694][ T6419] tipc: Enabling of bearer rejected, failed to enable media [ 95.906493][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 95.988780][ T6432] __nla_validate_parse: 4 callbacks suppressed [ 95.988798][ T6432] netlink: 8 bytes leftover after parsing attributes in process `syz.1.116'. [ 96.049122][ T6432] netlink: 8 bytes leftover after parsing attributes in process `syz.1.116'. [ 96.301762][ T6420] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.310654][ T6420] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.543192][ T6420] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 96.568629][ T6420] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 96.722055][ T12] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.758716][ T12] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.789592][ T12] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.866175][ T12] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.938311][ T6452] tipc: Started in network mode [ 96.960378][ T6452] tipc: Node identity 9a2565c19596, cluster identity 4711 [ 97.002588][ T6452] tipc: Enabled bearer , priority 0 [ 97.034327][ T6454] syzkaller0: entered promiscuous mode [ 97.065515][ T6454] syzkaller0: entered allmulticast mode [ 97.135107][ T6452] tipc: Resetting bearer [ 97.185342][ T6451] tipc: Resetting bearer [ 97.254526][ T6451] tipc: Disabling bearer [ 97.562150][ T6490] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 97.602719][ T6486] netlink: 16 bytes leftover after parsing attributes in process `syz.0.128'. [ 97.671965][ T6497] netlink: 'syz.4.131': attribute type 1 has an invalid length. [ 97.799383][ T6503] netlink: 'syz.0.134': attribute type 25 has an invalid length. [ 97.850842][ T6507] netlink: 36 bytes leftover after parsing attributes in process `syz.3.133'. [ 97.964646][ T5236] udevd[5236]: worker [5991] terminated by signal 33 (Unknown signal 33) [ 98.033019][ T6513] netlink: 277 bytes leftover after parsing attributes in process `syz.0.136'. [ 98.322805][ T6532] netlink: 4 bytes leftover after parsing attributes in process `syz.1.144'. [ 98.383742][ T6536] pim6reg1: entered promiscuous mode [ 98.394343][ T6536] pim6reg1: entered allmulticast mode [ 98.557603][ T6548] netlink: 12 bytes leftover after parsing attributes in process `syz.1.147'. [ 98.599894][ T6549] netlink: 12 bytes leftover after parsing attributes in process `syz.1.147'. [ 98.701417][ T6557] bridge_slave_0: left allmulticast mode [ 98.712170][ T6557] bridge_slave_0: left promiscuous mode [ 98.721044][ T6557] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.734464][ T6557] bridge_slave_1: left allmulticast mode [ 98.742501][ T6557] bridge_slave_1: left promiscuous mode [ 98.748933][ T6557] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.761595][ T6557] bond0: (slave bond_slave_0): Releasing backup interface [ 98.772840][ T6557] bond0: (slave bond_slave_1): Releasing backup interface [ 98.791236][ T6557] team0: Port device team_slave_0 removed [ 98.803925][ T6557] team0: Port device team_slave_1 removed [ 98.812039][ T6557] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 98.819744][ T6557] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 98.828546][ T6557] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 98.837056][ T6557] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 98.854601][ T6558] team0: Mode changed to "broadcast" [ 98.973791][ T6565] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 99.042278][ T6569] netlink: 16 bytes leftover after parsing attributes in process `syz.1.153'. [ 99.379008][ T6591] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 99.386540][ T6596] netlink: 32 bytes leftover after parsing attributes in process `syz.4.161'. [ 99.411358][ T6591] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 99.451508][ T6591] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 99.478676][ T6591] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 99.492938][ T6591] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 99.504554][ T6591] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 99.931011][ T6626] netlink: 'syz.1.171': attribute type 9 has an invalid length. [ 99.983482][ T6626] netlink: 'syz.1.171': attribute type 9 has an invalid length. [ 100.266447][ T6644] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 100.380832][ T6650] sctp: [Deprecated]: syz.0.176 (pid 6650) Use of struct sctp_assoc_value in delayed_ack socket option. [ 100.380832][ T6650] Use struct sctp_sack_info instead [ 100.487341][ T6654] netlink: 'syz.1.178': attribute type 23 has an invalid length. [ 100.565286][ T6655] netlink: 'syz.1.178': attribute type 23 has an invalid length. [ 100.638900][ T6659] syzkaller0: entered promiscuous mode [ 100.659964][ T6659] syzkaller0: entered allmulticast mode [ 101.011047][ T6690] ip6gretap0: entered promiscuous mode [ 101.122017][ T6690] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.300510][ T6690] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.451726][ T6690] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.605039][ T6690] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.709009][ T6730] netlink: 'syz.3.202': attribute type 4 has an invalid length. [ 101.771674][ T6735] tipc: Started in network mode [ 101.799142][ T6735] tipc: Node identity a60cf67c1f4e, cluster identity 4711 [ 101.816108][ T6735] tipc: Enabled bearer , priority 0 [ 101.824071][ T6687] ip6gretap0: left promiscuous mode [ 101.856132][ T6740] syzkaller0: entered promiscuous mode [ 101.871188][ T6740] syzkaller0: entered allmulticast mode [ 101.946348][ T6740] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 101.995261][ T59] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.034378][ T12] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.057073][ T6735] tipc: Resetting bearer [ 102.082971][ T59] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.095156][ T6749] __nla_validate_parse: 4 callbacks suppressed [ 102.095175][ T6749] netlink: 45 bytes leftover after parsing attributes in process `syz.1.208'. [ 102.146562][ T6734] tipc: Resetting bearer [ 102.169967][ T6734] tipc: Disabling bearer [ 102.191892][ T59] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.202491][ T6751] netlink: 16 bytes leftover after parsing attributes in process `syz.4.209'. [ 102.339592][ T6755] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 102.356504][ T6755] team0: Port device batadv1 added [ 102.447807][ T6767] tipc: Enabled bearer , priority 0 [ 102.486884][ T6767] syzkaller0: entered promiscuous mode [ 102.492765][ T6767] syzkaller0: entered allmulticast mode [ 102.589382][ T6774] tipc: Resetting bearer [ 102.635998][ T6759] tipc: Resetting bearer [ 102.681524][ T6759] tipc: Disabling bearer [ 102.745566][ T6785] netlink: 'syz.2.219': attribute type 16 has an invalid length. [ 102.754363][ T6785] netlink: 'syz.2.219': attribute type 17 has an invalid length. [ 102.781562][ T6779] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.809445][ T6779] bond0: (slave sit0): The slave device specified does not support setting the MAC address [ 102.827469][ T6779] bond0: (slave sit0): Error -95 calling set_mac_address [ 102.837790][ T6793] netlink: 68 bytes leftover after parsing attributes in process `syz.3.221'. [ 102.907011][ T6001] net_ratelimit: 53 callbacks suppressed [ 102.907031][ T6001] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 102.951538][ T6785] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 103.244917][ T6813] netlink: 4 bytes leftover after parsing attributes in process `syz.3.226'. [ 103.269882][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 103.373014][ T6823] netlink: 36 bytes leftover after parsing attributes in process `syz.4.229'. [ 103.435856][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 103.526048][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 103.624395][ T6840] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 103.719904][ T6842] netlink: 'syz.4.233': attribute type 39 has an invalid length. [ 104.029093][ T6858] delete_channel: no stack [ 104.034705][ T6858] netlink: 'syz.3.237': attribute type 10 has an invalid length. [ 104.057476][ T6858] netlink: 4 bytes leftover after parsing attributes in process `syz.3.237'. [ 104.106023][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 104.230098][ T6864] netlink: 28 bytes leftover after parsing attributes in process `syz.2.238'. [ 104.360879][ T6876] netlink: 64 bytes leftover after parsing attributes in process `syz.3.242'. [ 104.390820][ T6876] netlink: 64 bytes leftover after parsing attributes in process `syz.3.242'. [ 104.487224][ T6881] netlink: 108 bytes leftover after parsing attributes in process `syz.0.243'. [ 104.549502][ T6883] team0: No ports can be present during mode change [ 105.158340][ T6925] netlink: 'syz.3.251': attribute type 4 has an invalid length. [ 105.358219][ T6936] netlink: 'syz.4.256': attribute type 15 has an invalid length. [ 105.468674][ T6929] sctp: failed to load transform for md5: -4 [ 105.732459][ T6955] netlink: 'syz.0.260': attribute type 3 has an invalid length. [ 105.769851][ T6964] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 106.197544][ T6996] netlink: 'syz.3.266': attribute type 23 has an invalid length. [ 106.308824][ T7006] netlink: 'syz.0.267': attribute type 7 has an invalid length. [ 106.327867][ T7006] netlink: 'syz.0.267': attribute type 8 has an invalid length. [ 106.991198][ T7053] netlink: 'syz.1.276': attribute type 16 has an invalid length. [ 108.706054][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 111.906495][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 131.971699][ T7085] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 131.990147][ T7086] netlink: 'syz.2.283': attribute type 29 has an invalid length. [ 131.999552][ T7088] __nla_validate_parse: 26 callbacks suppressed [ 131.999571][ T7088] netlink: 24 bytes leftover after parsing attributes in process `syz.4.285'. [ 132.025093][ T7089] netlink: 'syz.1.282': attribute type 4 has an invalid length. [ 132.075228][ T7092] netlink: 40 bytes leftover after parsing attributes in process `syz.3.286'. [ 132.094347][ T7090] netlink: 'syz.2.283': attribute type 29 has an invalid length. [ 132.104665][ T7086] netlink: 500 bytes leftover after parsing attributes in process `syz.2.283'. [ 132.178716][ T7098] netlink: 8 bytes leftover after parsing attributes in process `syz.4.285'. [ 132.192109][ T7093] sch_tbf: burst 88 is lower than device veth3 mtu (1514) ! [ 132.259929][ T7100] netlink: 12 bytes leftover after parsing attributes in process `syz.0.287'. [ 132.283509][ T7100] netlink: 12 bytes leftover after parsing attributes in process `syz.0.287'. [ 132.322816][ T7104] (unnamed net_device) (uninitialized): option fail_over_mac: invalid value (3) [ 132.681484][ T7121] netlink: 4 bytes leftover after parsing attributes in process `syz.2.295'. [ 132.726965][ T7121] netlink: 12 bytes leftover after parsing attributes in process `syz.2.295'. [ 132.830452][ T7124] netlink: 'syz.1.296': attribute type 3 has an invalid length. [ 132.968748][ T7135] netlink: 24 bytes leftover after parsing attributes in process `syz.0.298'. [ 133.001640][ T7135] lo: entered promiscuous mode [ 133.008468][ T7140] netlink: 12 bytes leftover after parsing attributes in process `syz.4.301'. [ 133.035000][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.042775][ T7135] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 133.122934][ T7145] netlink: 'syz.1.302': attribute type 10 has an invalid length. [ 133.148815][ T7145] 8021q: adding VLAN 0 to HW filter on device team0 [ 133.166291][ T7147] x_tables: ip6_tables: quota.0 match: invalid size 24 (kernel) != (user) 144 [ 133.177782][ T7145] bond0: (slave team0): Enslaving as an active interface with an up link [ 133.207493][ T7149] netlink: 'syz.1.302': attribute type 10 has an invalid length. [ 133.234152][ T7149] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 133.342493][ T7145] 8021q: adding VLAN 0 to HW filter on device bond1 [ 133.702954][ T7175] NCSI netlink: No device for ifindex 0 [ 133.735806][ T7173] netlink: 'syz.4.310': attribute type 21 has an invalid length. [ 134.062086][ T7198] netlink: 'syz.4.317': attribute type 4 has an invalid length. [ 134.202192][ T7198] netlink: 'syz.4.317': attribute type 4 has an invalid length. [ 134.358808][ T7213] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 134.815796][ T7227] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 134.888142][ T7250] 8021q: adding VLAN 0 to HW filter on device bond1 [ 135.180093][ T7259] tipc: Started in network mode [ 135.185087][ T7259] tipc: Node identity bafeb69f33de, cluster identity 4711 [ 135.209402][ T7259] tipc: Enabled bearer , priority 0 [ 135.232809][ T7259] syzkaller0: entered promiscuous mode [ 135.255999][ T7259] syzkaller0: entered allmulticast mode [ 135.283834][ T7259] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 135.317431][ T7259] tipc: Resetting bearer [ 135.347443][ T7258] tipc: Resetting bearer [ 135.402720][ T7258] tipc: Disabling bearer [ 135.812032][ T7289] netlink: 'syz.3.341': attribute type 21 has an invalid length. [ 135.830649][ T7293] openvswitch: netlink: Key 11 has unexpected len 4525 expected 2 [ 135.986148][ T7300] 8021q: adding VLAN 0 to HW filter on device bond2 [ 136.051388][ T7302] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 137.339022][ T7358] __nla_validate_parse: 18 callbacks suppressed [ 137.339041][ T7358] netlink: 28 bytes leftover after parsing attributes in process `syz.0.360'. [ 137.625089][ T7374] validate_nla: 2 callbacks suppressed [ 137.625107][ T7374] netlink: 'syz.4.363': attribute type 3 has an invalid length. [ 137.676316][ T7374] netlink: 'syz.4.363': attribute type 3 has an invalid length. [ 137.707015][ T7374] netlink: 'syz.4.363': attribute type 3 has an invalid length. [ 137.723975][ T7374] netlink: 'syz.4.363': attribute type 3 has an invalid length. [ 137.724702][ T7378] netlink: 4 bytes leftover after parsing attributes in process `syz.1.364'. [ 137.735508][ T7374] netlink: 'syz.4.363': attribute type 3 has an invalid length. [ 137.762211][ T7383] netlink: 'syz.3.365': attribute type 1 has an invalid length. [ 137.769283][ T7374] netlink: 'syz.4.363': attribute type 3 has an invalid length. [ 137.775640][ T7379] netlink: 12 bytes leftover after parsing attributes in process `syz.1.364'. [ 137.781257][ T7374] netlink: 'syz.4.363': attribute type 3 has an invalid length. [ 137.799190][ T7374] netlink: 'syz.4.363': attribute type 3 has an invalid length. [ 137.810992][ T7374] netlink: 'syz.4.363': attribute type 3 has an invalid length. [ 137.859552][ T7387] netlink: 4 bytes leftover after parsing attributes in process `syz.0.366'. [ 137.868913][ C0] af_packet: tpacket_rcv: packet too big, clamped from 40 to 4294967272. macoff=96 [ 137.971421][ T7387] netlink: 4 bytes leftover after parsing attributes in process `syz.0.366'. [ 138.009869][ T1086] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 138.031790][ T1086] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 138.044705][ T1086] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 138.054294][ T1086] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 138.145763][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 138.167937][ T7406] openvswitch: netlink: Actions may not be safe on all matching packets [ 138.169294][ T7405] sctp: [Deprecated]: syz.2.370 (pid 7405) Use of struct sctp_assoc_value in delayed_ack socket option. [ 138.169294][ T7405] Use struct sctp_sack_info instead [ 138.358768][ T7420] ipvlan0: entered allmulticast mode [ 138.364790][ T7420] veth0_vlan: entered allmulticast mode [ 138.443514][ T1086] nci: nci_ntf_packet: unsupported ntf opcode 0xf05 [ 138.469135][ T7437] syzkaller0: entered promiscuous mode [ 138.479838][ T7437] syzkaller0: entered allmulticast mode [ 138.866358][ T5186] Bluetooth: hci4: command tx timeout [ 139.300811][ T7451] netlink: 'syz.2.383': attribute type 11 has an invalid length. [ 139.313448][ T7451] netlink: 'syz.2.383': attribute type 11 has an invalid length. [ 139.324165][ T7451] netlink: 152 bytes leftover after parsing attributes in process `syz.2.383'. [ 139.356933][ T7453] netlink: 36 bytes leftover after parsing attributes in process `syz.2.383'. [ 139.499389][ T7460] netlink: 4 bytes leftover after parsing attributes in process `syz.1.386'. [ 139.516329][ T7461] netlink: 8 bytes leftover after parsing attributes in process `syz.4.387'. [ 139.525236][ T7461] netlink: 40 bytes leftover after parsing attributes in process `syz.4.387'. [ 139.765906][ T7460] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 139.789140][ T7460] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 139.800946][ T7460] bond0 (unregistering): (slave team0): Releasing backup interface [ 139.821820][ T7460] bond0 (unregistering): (slave syz_tun): Releasing backup interface [ 139.843813][ T7460] bond0 (unregistering): Released all slaves [ 139.894250][ T7472] lo: left promiscuous mode [ 139.908991][ T7472] 0ªî{X¹¦: left allmulticast mode [ 140.021228][ T7472] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 140.525019][ T7492] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.106839][ T7492] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 141.149870][ T7492] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 141.357757][ T7518] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 141.561188][ T7492] macvtap1: left promiscuous mode [ 141.579026][ T7492] macvtap2: left promiscuous mode [ 141.593103][ T7492] macvtap3: left promiscuous mode [ 141.602682][ T7492] macvtap4: left promiscuous mode [ 141.612158][ T7492] macvtap5: left promiscuous mode [ 141.620597][ T7492] vlan0: left allmulticast mode [ 141.628231][ T7492] veth0_vlan: left allmulticast mode [ 141.633739][ T7492] vlan0: left promiscuous mode [ 141.639057][ T7492] macvtap6: left promiscuous mode [ 141.654506][ T1348] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.804850][ T1348] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.831568][ T1348] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.853693][ T1348] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.934476][ T7537] tipc: Started in network mode [ 141.941535][ T7537] tipc: Node identity e66374f2f0a6, cluster identity 4711 [ 141.951009][ T7537] tipc: Enabled bearer , priority 0 [ 142.041211][ T7537] syzkaller0: entered promiscuous mode [ 142.047415][ T7537] syzkaller0: entered allmulticast mode [ 142.054643][ T7537] tipc: Resetting bearer [ 142.086271][ T7535] tipc: Resetting bearer [ 143.079012][ T6992] tipc: Node number set to 382039282 [ 143.973976][ T7535] tipc: Disabling bearer [ 144.006431][ T7568] tipc: Enabled bearer , priority 0 [ 144.029911][ T7569] syzkaller0: entered promiscuous mode [ 144.049537][ T7569] syzkaller0: entered allmulticast mode [ 144.081460][ T7580] validate_nla: 54 callbacks suppressed [ 144.081478][ T7580] netlink: 'syz.4.418': attribute type 2 has an invalid length. [ 144.122414][ T7580] __nla_validate_parse: 9 callbacks suppressed [ 144.122430][ T7580] netlink: 8 bytes leftover after parsing attributes in process `syz.4.418'. [ 144.186169][ T7577] tipc: Resetting bearer [ 144.192912][ T7581] netlink: 36 bytes leftover after parsing attributes in process `syz.1.417'. [ 144.245161][ T7577] tipc: Disabling bearer [ 144.276351][ T7587] netlink: 11 bytes leftover after parsing attributes in process `syz.4.418'. [ 144.407197][ T7593] netlink: 8 bytes leftover after parsing attributes in process `syz.3.421'. [ 144.425735][ T7593] netlink: 24 bytes leftover after parsing attributes in process `syz.3.421'. [ 144.448962][ T7593] netlink: 8 bytes leftover after parsing attributes in process `syz.3.421'. [ 144.455492][ T7594] netlink: 28 bytes leftover after parsing attributes in process `syz.2.420'. [ 144.469086][ T7593] netlink: 24 bytes leftover after parsing attributes in process `syz.3.421'. [ 144.541980][ T7599] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 145.091185][ T7634] IPv6: sit1: Disabled Multicast RS [ 145.120901][ T7634] sit1: entered allmulticast mode [ 145.264116][ T7645] netlink: 16 bytes leftover after parsing attributes in process `syz.0.431'. [ 145.524817][ T7661] ip6gre1: entered allmulticast mode [ 145.616521][ T7663] openvswitch: netlink: VXLAN extension 173 out of range max 1 [ 145.688004][ T7670] netlink: 32 bytes leftover after parsing attributes in process `syz.2.436'. [ 145.697250][ T7671] bridge1: entered promiscuous mode [ 145.702662][ T7671] bridge1: entered allmulticast mode [ 146.556644][ T7738] netlink: 'syz.4.454': attribute type 11 has an invalid length. [ 147.666083][ T5867] Bluetooth: hci4: command 0x0405 tx timeout [ 147.845164][ T7814] openvswitch: netlink: ct_state flags 0000ee01 unsupported [ 147.856275][ T7817] bridge0: port 3(macsec0) entered disabled state [ 147.875215][ T7817] bridge_slave_1: left allmulticast mode [ 147.891865][ T7820] netlink: 'syz.1.479': attribute type 1 has an invalid length. [ 147.904138][ T7817] bridge_slave_1: left promiscuous mode [ 147.911245][ T7817] bridge0: port 2(bridge_slave_1) entered disabled state [ 147.923257][ T7817] bridge_slave_0: left allmulticast mode [ 147.931463][ T7817] bridge_slave_0: left promiscuous mode [ 147.942124][ T7817] bridge0: port 1(bridge_slave_0) entered disabled state [ 147.992374][ T6993] IPVS: starting estimator thread 0... [ 148.051831][ T7820] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR [ 148.086173][ T7830] IPVS: using max 51 ests per chain, 122400 per kthread [ 148.110947][ T7824] tipc: Enabled bearer , priority 0 [ 148.136034][ T7824] syzkaller0: entered promiscuous mode [ 148.155201][ T7824] syzkaller0: entered allmulticast mode [ 148.186356][ T7824] tipc: Resetting bearer [ 148.208131][ T7837] openvswitch: netlink: IP tunnel dst address not specified [ 148.217293][ T7837] sctp: [Deprecated]: syz.4.483 (pid 7837) Use of int in maxseg socket option. [ 148.217293][ T7837] Use struct sctp_assoc_value instead [ 148.261090][ T7823] tipc: Resetting bearer [ 148.279424][ T7823] tipc: Disabling bearer [ 148.331322][ T7839] bond4: entered promiscuous mode [ 148.340386][ T7839] bond4: entered allmulticast mode [ 148.348390][ T7839] 8021q: adding VLAN 0 to HW filter on device bond4 [ 148.542521][ T7839] bond4 (unregistering): Released all slaves [ 148.761066][ T7857] syzkaller1: entered promiscuous mode [ 148.773048][ T7857] syzkaller1: entered allmulticast mode [ 148.809550][ T7863] netlink: 'syz.2.492': attribute type 10 has an invalid length. [ 148.864361][ T7864] netlink: 'syz.2.492': attribute type 10 has an invalid length. [ 148.879265][ T7869] netlink: 'syz.3.494': attribute type 30 has an invalid length. [ 148.892211][ T7863] team0: Port device dummy0 added [ 148.926544][ T7864] team0: Port device dummy0 removed [ 148.957557][ T7864] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 148.992744][ T7875] IPVS: set_ctl: invalid protocol: 0 172.30.0.4:20002 [ 149.130082][ T7884] trusted_key: syz.0.499 sent an empty control message without MSG_MORE. [ 149.227367][ T7892] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 149.331176][ T7900] __nla_validate_parse: 13 callbacks suppressed [ 149.331195][ T7900] netlink: 8 bytes leftover after parsing attributes in process `syz.1.504'. [ 149.369084][ T7903] netlink: 8 bytes leftover after parsing attributes in process `syz.0.505'. [ 149.596142][ T7902] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.604069][ T7902] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.746049][ T5867] Bluetooth: hci4: command 0x0405 tx timeout [ 149.854557][ T7902] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 149.896435][ T7902] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 150.287520][ T7900] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 150.404279][ T3558] netdevsim netdevsim4 : unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.437040][ T3558] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.457264][ T7927] bridge_slave_0: left allmulticast mode [ 150.463629][ T7927] bridge_slave_0: left promiscuous mode [ 150.486122][ T7927] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.526734][ T7927] bridge_slave_1: left allmulticast mode [ 150.532444][ T7927] bridge_slave_1: left promiscuous mode [ 150.539576][ T7927] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.560667][ T7927] bond0: (slave bond_slave_0): Releasing backup interface [ 150.571598][ T7927] bond0: (slave bond_slave_1): Releasing backup interface [ 150.581899][ T7927] team0: Port device team_slave_0 removed [ 150.589334][ T7927] team0: Port device team_slave_1 removed [ 150.596930][ T7927] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 150.607113][ T7927] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 150.633420][ T7927] team0: Port device batadv1 removed [ 150.640024][ T3558] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.750258][ T3558] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.814047][ T7946] netlink: 'syz.1.513': attribute type 1 has an invalid length. [ 150.837660][ T7945] unknown channel width for channel at 909000KHz? [ 150.844164][ T7945] unknown channel width for channel at 909000KHz? [ 150.932032][ T7946] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 150.941923][ T7956] netlink: 'syz.0.517': attribute type 2 has an invalid length. [ 150.960128][ T7956] netlink: 244 bytes leftover after parsing attributes in process `syz.0.517'. [ 151.042008][ T7960] netlink: 248 bytes leftover after parsing attributes in process `syz.3.518'. [ 151.135304][ T7968] netlink: 4 bytes leftover after parsing attributes in process `syz.1.521'. [ 151.148610][ T7968] bridge_slave_1: left allmulticast mode [ 151.154566][ T7968] bridge_slave_1: left promiscuous mode [ 151.161161][ T7968] bridge0: port 2(bridge_slave_1) entered disabled state [ 151.172254][ T7968] bridge_slave_0: left allmulticast mode [ 151.185084][ T7968] bridge_slave_0: left promiscuous mode [ 151.192014][ T7968] bridge0: port 1(bridge_slave_0) entered disabled state [ 151.339937][ T7974] netdevsim netdevsim0: Direct firmware load for /.€ failed with error -2 [ 151.351945][ T7974] netdevsim netdevsim0: Falling back to sysfs fallback for: /.€ [ 151.479223][ T7987] netlink: 40 bytes leftover after parsing attributes in process `syz.1.526'. [ 151.597733][ T7995] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 151.633378][ T7997] netlink: 104 bytes leftover after parsing attributes in process `syz.3.530'. [ 151.747840][ T8005] netlink: 'syz.3.532': attribute type 14 has an invalid length. [ 151.758476][ T8010] netlink: 12 bytes leftover after parsing attributes in process `syz.4.533'. [ 151.784795][ T8008] netlink: 4 bytes leftover after parsing attributes in process `syz.4.533'. [ 151.909227][ T8022] netlink: 1196 bytes leftover after parsing attributes in process `syz.3.536'. [ 152.645552][ T8072] netlink: 'syz.3.552': attribute type 1 has an invalid length. [ 152.655699][ T8072] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 153.172373][ T8110] netlink: 'syz.3.566': attribute type 10 has an invalid length. [ 153.190633][ T8110] team0: Port device geneve0 added [ 153.374042][ T8120] netlink: 'syz.3.571': attribute type 10 has an invalid length. [ 153.426604][ T8120] team0: Port device dummy0 added [ 153.435008][ T8120] netlink: 'syz.3.571': attribute type 10 has an invalid length. [ 153.531797][ T8120] team0: Port device dummy0 removed [ 153.542889][ T8120] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 153.697878][ T8137] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !寿$ûÌÌULÙvy¸ÚØ¢…D£øUDŒw˜}z [ 153.772729][ T8137] netlink: 'syz.0.574': attribute type 6 has an invalid length. [ 153.786685][ T8137] netlink: 'syz.0.574': attribute type 5 has an invalid length. [ 154.122050][ T8165] netlink: 'syz.3.585': attribute type 1 has an invalid length. [ 154.378195][ T8184] __nla_validate_parse: 16 callbacks suppressed [ 154.378212][ T8184] netlink: 4 bytes leftover after parsing attributes in process `syz.0.589'. [ 154.480036][ T8194] netlink: 4 bytes leftover after parsing attributes in process `syz.4.590'. [ 154.640510][ T8202] geneve0: entered promiscuous mode [ 154.646800][ T8202] geneve0: entered allmulticast mode [ 154.658115][ T7413] netdevsim netdevsim4 : set [1, 0] type 2 family 0 port 6081 - 0 [ 154.667087][ T7413] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.676859][ T7413] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.692882][ T7413] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.785296][ T8208] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 154.958955][ T8213] 8021q: adding VLAN 0 to HW filter on device bond5 [ 154.982690][ T8213] bond4: (slave bond5): making interface the new active one [ 155.031374][ T8223] netlink: 28 bytes leftover after parsing attributes in process `syz.4.600'. [ 155.050721][ T8213] bond4: (slave bond5): Enslaving as an active interface with an up link [ 155.079247][ T8218] bond4: (slave gretap2): Enslaving as a backup interface with an up link [ 155.099664][ T8223] 8021q: adding VLAN 0 to HW filter on device bond4 [ 155.199936][ T8235] netlink: 24 bytes leftover after parsing attributes in process `syz.4.608'. [ 155.224645][ T8237] netlink: 260 bytes leftover after parsing attributes in process `syz.0.607'. [ 155.238702][ T8237] netlink: 20 bytes leftover after parsing attributes in process `syz.0.607'. [ 155.283931][ T8238] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 155.333110][ T8244] netlink: 4 bytes leftover after parsing attributes in process `syz.0.611'. [ 155.371636][ T8246] 8021q: VLANs not supported on ip_vti0 [ 155.524449][ T8259] netlink: 20 bytes leftover after parsing attributes in process `syz.4.616'. [ 155.668904][ T8265] tipc: Enabled bearer , priority 0 [ 155.680421][ T8265] syzkaller0: entered promiscuous mode [ 155.691790][ T8265] syzkaller0: entered allmulticast mode [ 155.711477][ T8265] netlink: 269 bytes leftover after parsing attributes in process `syz.3.619'. [ 155.743509][ T8265] tipc: Resetting bearer [ 155.761384][ T8264] tipc: Resetting bearer [ 155.791112][ T8264] tipc: Disabling bearer [ 155.875486][ T8225] Bluetooth: hci0: Opcode 0x0c20 failed: -4 [ 155.940741][ T8280] validate_nla: 2 callbacks suppressed [ 155.940759][ T8280] netlink: 'syz.2.623': attribute type 33 has an invalid length. [ 156.005237][ T8280] netlink: 152 bytes leftover after parsing attributes in process `syz.2.623'. [ 156.906573][ T8304] netlink: 'syz.4.629': attribute type 8 has an invalid length. [ 157.106097][ T5186] Bluetooth: hci0: command 0x0c20 tx timeout [ 158.232799][ T8287] bond0: (slave dummy0): Releasing backup interface [ 158.254322][ T8296] tap0: tun_chr_ioctl cmd 2148553947 [ 158.265431][ T8303] (unnamed net_device) (uninitialized): down delay (33554432) is not a multiple of miimon (640), value rounded to 33553920 ms [ 158.507579][ T8310] netlink: 'syz.4.631': attribute type 1 has an invalid length. [ 158.821533][ T8330] vlan2: entered promiscuous mode [ 158.827026][ T8330] bond0: entered promiscuous mode [ 159.180210][ T8363] netlink: 'syz.3.648': attribute type 12 has an invalid length. [ 159.259770][ T8366] netlink: 'syz.3.648': attribute type 12 has an invalid length. [ 159.296637][ T8372] netlink: 'syz.4.650': attribute type 10 has an invalid length. [ 159.312831][ T8372] mac80211_hwsim hwsim11 wlan1: entered promiscuous mode [ 159.326766][ T8372] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 159.444393][ T8382] 8021q: VLANs not supported on caif0 [ 159.452935][ T8382] netlink: 'syz.2.653': attribute type 1 has an invalid length. [ 159.461502][ T8382] __nla_validate_parse: 11 callbacks suppressed [ 159.461520][ T8382] netlink: 8 bytes leftover after parsing attributes in process `syz.2.653'. [ 159.477382][ T8382] netlink: 'syz.2.653': attribute type 1 has an invalid length. [ 159.485129][ T8382] netlink: 8 bytes leftover after parsing attributes in process `syz.2.653'. [ 159.515430][ T8381] netlink: 'syz.2.653': attribute type 1 has an invalid length. [ 159.543543][ T8381] netlink: 8 bytes leftover after parsing attributes in process `syz.2.653'. [ 159.561976][ T8381] netlink: 'syz.2.653': attribute type 1 has an invalid length. [ 159.570251][ T8381] netlink: 8 bytes leftover after parsing attributes in process `syz.2.653'. [ 160.180415][ T8417] gtp0: entered promiscuous mode [ 160.185511][ T8417] gtp0: entered allmulticast mode [ 160.361797][ T8425] netlink: 16 bytes leftover after parsing attributes in process `syz.0.666'. [ 160.390465][ T8425] netlink: 16 bytes leftover after parsing attributes in process `syz.0.666'. [ 160.509177][ T8436] tipc: New replicast peer: 255.255.255.255 [ 160.516261][ T8436] tipc: Enabled bearer , priority 10 [ 160.859845][ T8461] netlink: 24 bytes leftover after parsing attributes in process `syz.0.674'. [ 161.026972][ T8477] netlink: 512 bytes leftover after parsing attributes in process `syz.0.674'. [ 161.039561][ T8479] netlink: 28 bytes leftover after parsing attributes in process `syz.2.679'. [ 161.100256][ T8469] netlink: 8 bytes leftover after parsing attributes in process `syz.0.674'. [ 161.635866][ T6987] tipc: Node number set to 2300622495 [ 161.688793][ T8473] netlink: 'syz.1.677': attribute type 33 has an invalid length. [ 161.853723][ T8492] netlink: 'syz.4.682': attribute type 15 has an invalid length. [ 162.413051][ T8536] netlink: 'syz.2.697': attribute type 1 has an invalid length. [ 162.484723][ T8536] 8021q: adding VLAN 0 to HW filter on device bond1 [ 164.449043][ T8583] netlink: 'syz.1.708': attribute type 17 has an invalid length. [ 164.460675][ T8585] netlink: 'syz.0.710': attribute type 10 has an invalid length. [ 164.515864][ T8593] __nla_validate_parse: 10 callbacks suppressed [ 164.515883][ T8593] netlink: 52 bytes leftover after parsing attributes in process `syz.0.710'. [ 164.529591][ T8585] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 164.671351][ T8604] bridge0: port 1(syz_tun) entered blocking state [ 164.678787][ T8604] bridge0: port 1(syz_tun) entered disabled state [ 164.692039][ T8604] syz_tun: entered allmulticast mode [ 164.705449][ T8604] syz_tun: entered promiscuous mode [ 164.735244][ T8604] bridge0: port 1(syz_tun) entered blocking state [ 164.742144][ T8604] bridge0: port 1(syz_tun) entered forwarding state [ 164.768414][ T8606] bridge_slave_0: default FDB implementation only supports local addresses [ 165.002424][ T8627] erspan0: entered allmulticast mode [ 165.024228][ T8630] netlink: 16 bytes leftover after parsing attributes in process `syz.2.724'. [ 165.033329][ T8631] netlink: 666 bytes leftover after parsing attributes in process `syz.1.725'. [ 165.065885][ T8630] netlink: 92 bytes leftover after parsing attributes in process `syz.2.724'. [ 165.083435][ T8633] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 165.188397][ T8639] netlink: 'syz.2.728': attribute type 2 has an invalid length. [ 165.209165][ T8640] netlink: 'syz.2.728': attribute type 11 has an invalid length. [ 165.251766][ T8633] bridge0: port 1(syz_tun) entered disabled state [ 165.283896][ T8633] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 165.658136][ T8666] netlink: 24 bytes leftover after parsing attributes in process `syz.1.736'. [ 165.836507][ T8676] netlink: 'syz.2.738': attribute type 2 has an invalid length. [ 165.890405][ T8676] netlink: 48 bytes leftover after parsing attributes in process `syz.2.738'. [ 166.061470][ T8695] netlink: 'syz.3.745': attribute type 1 has an invalid length. [ 166.236899][ T6986] IPVS: starting estimator thread 0... [ 166.339591][ T8712] IPVS: using max 40 ests per chain, 96000 per kthread [ 166.483645][ T8725] netlink: 8 bytes leftover after parsing attributes in process `syz.1.755'. [ 166.679988][ T8731] netlink: 40 bytes leftover after parsing attributes in process `syz.0.757'. [ 166.761250][ T8740] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 166.780766][ T8740] netlink: 160 bytes leftover after parsing attributes in process `syz.1.759'. [ 166.944776][ T8745] netlink: 96 bytes leftover after parsing attributes in process `syz.1.761'. [ 167.467378][ T8769] netlink: 'syz.2.767': attribute type 1 has an invalid length. [ 167.506782][ T8774] netlink: 'syz.3.768': attribute type 26 has an invalid length. [ 168.155831][ T1114] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 168.196100][ T1114] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 168.223963][ T1114] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 168.235682][ T1114] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 168.412646][ T8828] netlink: 'syz.3.784': attribute type 11 has an invalid length. [ 168.582059][ T8840] vxcan1: tx address claim with different name [ 168.857799][ T8866] veth0: entered promiscuous mode [ 168.884864][ T8865] veth0: left promiscuous mode [ 169.083472][ T1086] tipc: Subscription rejected, illegal request [ 169.360223][ T8881] syzkaller1: entered promiscuous mode [ 169.366053][ T8881] syzkaller1: entered allmulticast mode [ 169.660856][ T8871] netlink: 'syz.0.798': attribute type 12 has an invalid length. [ 169.763604][ T8884] __nla_validate_parse: 7 callbacks suppressed [ 169.763632][ T8884] netlink: 116 bytes leftover after parsing attributes in process `syz.1.800'. [ 169.785002][ T8889] netlink: 20 bytes leftover after parsing attributes in process `syz.2.802'. [ 169.795059][ T8889] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 169.835040][ T8886] tipc: Enabled bearer , priority 0 [ 169.858388][ T8887] syzkaller0: entered promiscuous mode [ 169.863919][ T8887] syzkaller0: entered allmulticast mode [ 170.000731][ T8887] tipc: Resetting bearer [ 170.024316][ T8887] tipc: Disabling bearer [ 170.237661][ T8916] netlink: 24 bytes leftover after parsing attributes in process `syz.0.809'. [ 170.360406][ T8922] netlink: 20 bytes leftover after parsing attributes in process `syz.0.812'. [ 170.691047][ T8938] netlink: 'syz.0.815': attribute type 11 has an invalid length. [ 171.387658][ T8971] netlink: 44 bytes leftover after parsing attributes in process `syz.0.822'. [ 171.435224][ T8977] netlink: 'syz.2.823': attribute type 3 has an invalid length. [ 171.635982][ T8993] netlink: 'syz.0.827': attribute type 1 has an invalid length. [ 171.652439][ T8993] netlink: 4 bytes leftover after parsing attributes in process `syz.0.827'. [ 171.830271][ T9007] veth0: entered promiscuous mode [ 171.846639][ T9000] tipc: Enabled bearer , priority 0 [ 171.853927][ T9008] netlink: 8 bytes leftover after parsing attributes in process `syz.0.831'. [ 171.859806][ T9000] syzkaller0: entered promiscuous mode [ 171.893538][ T9000] syzkaller0: entered allmulticast mode [ 171.925422][ T9012] netlink: 8 bytes leftover after parsing attributes in process `syz.2.832'. [ 171.946738][ T9004] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 172.040784][ T9006] veth0: left promiscuous mode [ 172.070262][ T9004] tipc: Resetting bearer [ 172.095995][ T9000] sch_tbf: burst 127 is lower than device syzkaller0 mtu (313) ! [ 172.228699][ T9013] tipc: Resetting bearer [ 172.290905][ T9013] tipc: Disabling bearer [ 172.319769][ T9035] netlink: 16 bytes leftover after parsing attributes in process `syz.4.835'. [ 172.341063][ T9034] netlink: 24 bytes leftover after parsing attributes in process `syz.2.836'. [ 172.428758][ T9039] netlink: 'syz.3.837': attribute type 32 has an invalid length. [ 172.457477][ T9039] (unnamed net_device) (uninitialized): option coupled_control: invalid value (12) [ 172.690265][ T9059] 8021q: adding VLAN 0 to HW filter on device bond4 [ 173.256839][ T9080] ªªªªª5: renamed from vcan0 [ 173.644944][ T9108] ieee802154 phy1 wpan1: encryption failed: -22 [ 173.663878][ T9107] tipc: New replicast peer: 0.0.0.0 [ 173.669997][ T9108] ieee802154 phy1 wpan1: encryption failed: -22 [ 173.671069][ T9107] tipc: Enabled bearer , priority 10 [ 173.680635][ T9108] ieee802154 phy1 wpan1: encryption failed: -22 [ 173.689796][ T9108] ieee802154 phy1 wpan1: encryption failed: -22 [ 173.744939][ T9121] tipc: Enabling of bearer rejected, already enabled [ 174.108691][ T9156] netlink: 'syz.3.867': attribute type 3 has an invalid length. [ 174.118896][ T9156] netlink: 'syz.3.867': attribute type 1 has an invalid length. [ 174.142246][ T9156] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 174.154767][ T9156] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 174.265159][ T9165] tipc: Enabled bearer , priority 0 [ 174.278500][ T9165] tipc: Resetting bearer [ 174.292464][ T9164] tipc: Disabling bearer [ 174.325551][ T9169] veth0_to_team: entered promiscuous mode [ 174.331975][ T9169] veth0_to_team: entered allmulticast mode [ 174.719366][ T9193] tipc: Enabling of bearer rejected, failed to enable media [ 174.786554][ T6986] tipc: Node number set to 3108173436 [ 174.813883][ T9197] __nla_validate_parse: 9 callbacks suppressed [ 174.813903][ T9197] netlink: 48 bytes leftover after parsing attributes in process `syz.2.882'. [ 175.064933][ T9215] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 175.201428][ T9227] netlink: 8 bytes leftover after parsing attributes in process `syz.1.892'. [ 175.237923][ T9230] netlink: 'syz.0.893': attribute type 25 has an invalid length. [ 175.272248][ T9231] netlink: 'syz.0.893': attribute type 25 has an invalid length. [ 175.318404][ T9234] netlink: 72 bytes leftover after parsing attributes in process `syz.3.894'. [ 175.342391][ T9234] netlink: 72 bytes leftover after parsing attributes in process `syz.3.894'. [ 175.383201][ T9234] netlink: 72 bytes leftover after parsing attributes in process `syz.3.894'. [ 175.417275][ T9234] netlink: 72 bytes leftover after parsing attributes in process `syz.3.894'. [ 175.432561][ T9234] netlink: 72 bytes leftover after parsing attributes in process `syz.3.894'. [ 175.442901][ T9234] netlink: 72 bytes leftover after parsing attributes in process `syz.3.894'. [ 175.509735][ T9234] netlink: 72 bytes leftover after parsing attributes in process `syz.3.894'. [ 175.520827][ T9234] netlink: 72 bytes leftover after parsing attributes in process `syz.3.894'. [ 175.982696][ T9261] netlink: 'syz.0.902': attribute type 10 has an invalid length. [ 176.015932][ T9261] team0: Device hsr_slave_0 failed to register rx_handler [ 176.155045][ T9272] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 176.633115][ T9306] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 177.528736][ T9367] vcan0: entered allmulticast mode [ 177.561126][ T9372] netlink: 'syz.4.938': attribute type 1 has an invalid length. [ 177.595108][ T9372] netlink: 'syz.4.938': attribute type 1 has an invalid length. [ 177.623609][ T9372] netlink: 'syz.4.938': attribute type 2 has an invalid length. [ 177.721084][ T9379] netlink: 'syz.0.940': attribute type 10 has an invalid length. [ 177.755546][ T9379] team0: Port device geneve0 added [ 178.253951][ T9425] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 178.391529][ T9434] veth0_vi: renamed from ipvlan1 [ 178.913392][ T9477] 8021q: adding VLAN 0 to HW filter on device team0 [ 178.922687][ T9477] team0: Cannot enslave team device to itself [ 178.937414][ T9479] team0: Cannot enslave team device to itself [ 179.430726][ T9518] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 179.639225][ T9533] netlink: 'syz.1.986': attribute type 2 has an invalid length. [ 179.715855][ T9537] bridge0: port 1(syz_tun) entered blocking state [ 179.722484][ T9537] bridge0: port 1(syz_tun) entered disabled state [ 179.729936][ T9537] syz_tun: entered allmulticast mode [ 179.737411][ T9537] syz_tun: entered promiscuous mode [ 179.759026][ T9536] ip6gre1: entered allmulticast mode [ 179.808808][ T30] audit: type=1107 audit(1756918307.547:2): pid=9542 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 179.809386][ T30] audit: type=1107 audit(1756918307.547:3): pid=9542 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 179.915268][ T30] audit: type=1107 audit(1756918307.547:4): pid=9542 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 180.014730][ T30] audit: type=1107 audit(1756918307.547:5): pid=9542 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 180.150275][ T30] audit: type=1107 audit(1756918307.547:6): pid=9542 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 180.264611][ T30] audit: type=1107 audit(1756918307.547:7): pid=9542 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 180.404536][ T30] audit: type=1107 audit(1756918307.547:8): pid=9542 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 180.507408][ T30] audit: type=1107 audit(1756918307.547:9): pid=9542 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 180.614726][ T30] audit: type=1107 audit(1756918307.547:10): pid=9542 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 180.735296][ T30] audit: type=1107 audit(1756918307.547:11): pid=9542 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 181.110571][ T9581] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 181.418891][ T9609] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 181.420782][ T9609] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 181.896829][ T9604] bond7 (unregistering): Released all slaves [ 182.056541][ T9626] __nla_validate_parse: 43 callbacks suppressed [ 182.056561][ T9626] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1014'. [ 182.266956][ T9632] openvswitch: netlink: Key type 29 is not supported [ 182.353326][ T9648] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1020'. [ 183.096369][ T9692] netlink: 'syz.4.1031': attribute type 21 has an invalid length. [ 183.104248][ T9692] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1031'. [ 183.185916][ T9692] netlink: 'syz.4.1031': attribute type 21 has an invalid length. [ 183.193777][ T9692] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1031'. [ 183.217122][ T9700] nbd: must specify at least one socket [ 183.252249][ T9702] netlink: 'syz.3.1033': attribute type 1 has an invalid length. [ 183.281521][ T9702] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1033'. [ 183.482823][ T9715] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1037'. [ 183.528595][ T9715] xfrm1: entered promiscuous mode [ 183.535120][ T9715] xfrm1: entered allmulticast mode [ 183.545066][ T9721] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1037'. [ 183.685324][ T9731] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1042'. [ 183.699049][ T9731] nbd: illegal input index -8454144 [ 183.768245][ T9740] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1042'. [ 183.811442][ T9742] skbuff: bad partial csum: csum=65535/127 headroom=178 headlen=65664 [ 183.855434][ T9745] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 184.260113][ T6991] hid-generic 0005:0C45:0009.0001: unknown main item tag 0x0 [ 184.292833][ T6991] hid-generic 0005:0C45:0009.0001: hidraw0: BLUETOOTH HID v0.09 Device [syz1] on aa:aa:aa:aa:aa:aa [ 184.364019][ T9776] netlink: 'syz.0.1060': attribute type 23 has an invalid length. [ 184.381767][ T9775] syz.0.1060: vmalloc error: size 4722688, failed to allocated page array size 9224, mode:0x500dc2(GFP_HIGHUSER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 184.442441][ T9775] CPU: 1 UID: 0 PID: 9775 Comm: syz.0.1060 Not tainted syzkaller #0 PREEMPT(full) [ 184.442468][ T9775] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 184.442484][ T9775] Call Trace: [ 184.442491][ T9775] [ 184.442498][ T9775] dump_stack_lvl+0x189/0x250 [ 184.442521][ T9775] ? __pfx_rcu_read_unlock_special+0x10/0x10 [ 184.442545][ T9775] ? __pfx_dump_stack_lvl+0x10/0x10 [ 184.442563][ T9775] ? __pfx__printk+0x10/0x10 [ 184.442584][ T9775] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 184.442603][ T9775] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 184.442626][ T9775] warn_alloc+0x214/0x310 [ 184.442654][ T9775] ? __pfx_warn_alloc+0x10/0x10 [ 184.442684][ T9775] ? __get_vm_area_node+0x28f/0x300 [ 184.442703][ T9775] ? bpf_prog_alloc_no_stats+0x4a/0x4b0 [ 184.442725][ T9775] __vmalloc_node_range_noprof+0x67e/0x12f0 [ 184.442744][ T9775] ? rcu_is_watching+0x15/0xb0 [ 184.442781][ T9775] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 184.442803][ T9775] ? css_rstat_updated+0x23a/0x4f0 [ 184.442825][ T9775] ? bpf_prog_alloc_no_stats+0x4a/0x4b0 [ 184.442843][ T9775] __vmalloc_noprof+0xb1/0xf0 [ 184.442862][ T9775] ? bpf_prog_alloc_no_stats+0x4a/0x4b0 [ 184.442884][ T9775] bpf_prog_alloc_no_stats+0x4a/0x4b0 [ 184.442908][ T9775] bpf_prog_alloc+0x3c/0x1a0 [ 184.442929][ T9775] bpf_prog_load+0x735/0x1930 [ 184.442961][ T9775] ? __pfx_bpf_prog_load+0x10/0x10 [ 184.443004][ T9775] ? bpf_lsm_bpf+0x9/0x20 [ 184.443021][ T9775] ? security_bpf+0x7e/0x300 [ 184.443043][ T9775] __sys_bpf+0x528/0x870 [ 184.443064][ T9775] ? __pfx___sys_bpf+0x10/0x10 [ 184.443093][ T9775] ? sched_clock_cpu+0x74/0x430 [ 184.443143][ T9775] __x64_sys_bpf+0x7c/0x90 [ 184.443162][ T9775] do_syscall_64+0xfa/0x3b0 [ 184.443180][ T9775] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 184.443195][ T9775] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 184.443211][ T9775] ? clear_bhb_loop+0x60/0xb0 [ 184.443231][ T9775] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 184.443246][ T9775] RIP: 0033:0x7f84be18ebe9 [ 184.443268][ T9775] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 184.443281][ T9775] RSP: 002b:00007f84befc4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 184.443299][ T9775] RAX: ffffffffffffffda RBX: 00007f84be3c5fa0 RCX: 00007f84be18ebe9 [ 184.443311][ T9775] RDX: 0000000000000094 RSI: 00002000000007c0 RDI: 0000000000000005 [ 184.443320][ T9775] RBP: 00007f84be211e19 R08: 0000000000000000 R09: 0000000000000000 [ 184.443330][ T9775] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 184.443339][ T9775] R13: 00007f84be3c6038 R14: 00007f84be3c5fa0 R15: 00007ffd42d7f7d8 [ 184.443363][ T9775] [ 184.443614][ T9775] Mem-Info: [ 184.463921][ T9779] tipc: Enabling of bearer rejected, failed to enable media [ 184.692395][ T9796] openvswitch: netlink: Missing key (keys=40, expected=80) [ 184.720231][ T9775] active_anon:4578 inactive_anon:0 isolated_anon:0 [ 184.720231][ T9775] active_file:2885 inactive_file:39882 isolated_file:0 [ 184.720231][ T9775] unevictable:768 dirty:53 writeback:0 [ 184.720231][ T9775] slab_reclaimable:12444 slab_unreclaimable:120544 [ 184.720231][ T9775] mapped:30049 shmem:1358 pagetables:1166 [ 184.720231][ T9775] sec_pagetables:0 bounce:0 [ 184.720231][ T9775] kernel_misc_reclaimable:0 [ 184.720231][ T9775] free:1302246 free_pcp:15422 free_cma:0 [ 184.805855][ T9775] Node 0 active_anon:18512kB inactive_anon:0kB active_file:11540kB inactive_file:159324kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:124296kB dirty:212kB writeback:0kB shmem:3896kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13640kB pagetables:4540kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 184.920372][ T9798] bridge: RTM_NEWNEIGH with invalid ether address [ 184.947032][ T9775] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:124kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 184.986662][ T9807] netlink: 'syz.4.1065': attribute type 21 has an invalid length. [ 184.995268][ T9807] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 185.023050][ T9807] netlink: 'syz.4.1065': attribute type 27 has an invalid length. [ 185.025628][ T9775] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 185.068627][ T9775] lowmem_reserve[]: 0 2497 2499 2499 2499 [ 185.074817][ T9775] Node 0 DMA32 free:1306448kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:18184kB inactive_anon:0kB active_file:11540kB inactive_file:157748kB unevictable:1536kB writepending:212kB present:3129332kB managed:2557452kB mlocked:0kB bounce:0kB free_pcp:39820kB local_pcp:21068kB free_cma:0kB [ 185.115697][ T9775] lowmem_reserve[]: 0 0 1 1 1 [ 185.120472][ T9775] Node 0 Normal free:12kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1576kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 185.152485][ T9775] lowmem_reserve[]: 0 0 0 0 0 [ 185.161619][ T9775] Node 1 Normal free:3890048kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:20480kB local_pcp:10752kB free_cma:0kB [ 185.204122][ T9775] lowmem_reserve[]: 0 0 0 0 0 [ 185.218196][ T5186] Bluetooth: hci4: link tx timeout [ 185.223899][ T5186] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 185.233223][ T9775] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 185.277620][ T9775] Node 0 DMA32: 1432*4kB (UME) 446*8kB (UME) 170*16kB (UM) 599*32kB (UM) 193*64kB (UM) 41*128kB (UME) 13*256kB (UME) 7*512kB (ME) 8*1024kB (ME) 5*2048kB (M) 301*4096kB (UM) = 1307024kB [ 185.353182][ T9775] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 185.388239][ T9775] Node 1 Normal: 224*4kB (UME) 64*8kB (UME) 48*16kB (UME) 70*32kB (UME) 25*64kB (UME) 6*128kB (UME) 3*256kB (UM) 3*512kB (UM) 4*1024kB (UME) 1*2048kB (E) 946*4096kB (M) = 3890048kB [ 185.425919][ T9775] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 185.436676][ T9775] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 185.447014][ T9775] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 185.459754][ T9775] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 185.469294][ T9775] 44121 total pagecache pages [ 185.474309][ T9775] 0 pages in swap cache [ 185.478614][ T9775] Free swap = 124996kB [ 185.482972][ T9775] Total swap = 124996kB [ 185.487664][ T9775] 2097051 pages RAM [ 185.491494][ T9775] 0 pages HighMem/MovableOnly [ 185.507917][ T9775] 425662 pages reserved [ 185.534097][ T9775] 0 pages cma reserved [ 185.693188][ T9835] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1075'. [ 185.753982][ T9844] netlink: 'syz.3.1077': attribute type 1 has an invalid length. [ 186.128669][ T9873] netlink: 'syz.4.1082': attribute type 1 has an invalid length. [ 186.572355][ T9899] 8021q: VLANs not supported on wg1 [ 186.772021][ T9914] netlink: 'syz.1.1097': attribute type 39 has an invalid length. [ 186.784756][ T9917] syzkaller0: entered promiscuous mode [ 186.795966][ T9917] syzkaller0: entered allmulticast mode [ 186.855322][ T9922] sch_tbf: peakrate 7 is lower than or equals to rate 2147483647 ! [ 187.147445][ T9941] __nla_validate_parse: 7 callbacks suppressed [ 187.147462][ T9941] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1104'. [ 187.270419][ T9950] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1106'. [ 187.280029][ T5867] Bluetooth: hci4: command 0x0405 tx timeout [ 187.404109][ T9953] bridge3: port 1(veth7) entered blocking state [ 187.427742][ T9953] bridge3: port 1(veth7) entered disabled state [ 187.434214][ T9962] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 187.434272][ T9953] veth7: entered allmulticast mode [ 187.469877][ T9953] veth7: entered promiscuous mode [ 187.509941][ T9950] bridge3: port 2(veth0_to_bond) entered blocking state [ 187.539855][ T9950] bridge3: port 2(veth0_to_bond) entered disabled state [ 187.547829][ T9950] veth0_to_bond: entered allmulticast mode [ 187.562761][ T9950] veth0_to_bond: entered promiscuous mode [ 187.574886][ T9971] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 187.808876][ T9989] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1116'. [ 187.933158][ T9996] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1121'. [ 188.338133][T10024] openvswitch: netlink: Actions may not be safe on all matching packets [ 188.557773][T10038] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1137'. [ 188.585809][T10041] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1138'. [ 188.631725][T10041] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1138'. [ 188.734344][T10053] xt_limit: Overflow, try lower: 271964/0 [ 189.037924][T10066] geneve2: entered promiscuous mode [ 189.046828][T10066] geneve2: entered allmulticast mode [ 189.060552][ T48] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 189.085389][ T48] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 189.096348][T10075] openvswitch: netlink: Multiple metadata blocks provided [ 189.121961][T10075] openvswitch: netlink: Multiple metadata blocks provided [ 189.162808][ T48] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 189.190615][ T48] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0 [ 189.271564][T10073] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.283090][T10073] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 189.322241][T10088] tipc: Enabled bearer , priority 0 [ 189.333058][T10083] syzkaller0: entered allmulticast mode [ 189.348131][T10085] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1152'. [ 189.351924][T10083] tipc: Resetting bearer [ 189.414526][T10073] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.434977][T10073] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 189.476032][T10085] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 189.521265][T10082] tipc: Disabling bearer [ 189.538661][T10092] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1153'. [ 189.552209][T10091] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1153'. [ 189.624445][T10073] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.635972][T10073] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 189.778529][T10073] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.799120][T10073] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 189.963543][T10123] netlink: 'syz.2.1163': attribute type 1 has an invalid length. [ 190.111338][ T9162] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 19999 - 0 [ 190.143249][ T9162] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 190.163411][ T9162] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 19999 - 0 [ 190.183070][ T9162] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 190.252078][ T9163] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 19999 - 0 [ 190.268869][ T9163] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 190.332990][ T9163] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 19999 - 0 [ 190.347277][ T9163] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 190.751326][T10146] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 190.815940][T10146] veth1_macvtap: left allmulticast mode [ 190.822246][T10146] macsec0: left promiscuous mode [ 190.837002][T10146] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 190.867790][T10146] bridge1: left promiscuous mode [ 190.880672][T10146] xfrm1: left promiscuous mode [ 190.916118][T10169] tipc: Enabled bearer , priority 0 [ 190.923220][ T9162] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 190.940354][ T9162] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.965784][ T12] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 190.998760][ T12] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.020186][ T12] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 191.033823][ T12] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.047138][T10173] tipc: Enabled bearer , priority 10 [ 191.065904][ T12] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 191.125043][ T12] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.176771][T10170] syzkaller0: entered promiscuous mode [ 191.192542][T10170] syzkaller0: entered allmulticast mode [ 191.280238][T10163] tipc: Resetting bearer [ 191.302221][T10184] IPVS: set_ctl: invalid protocol: 47 172.20.20.187:20003 [ 191.315698][ T9] IPVS: starting estimator thread 0... [ 191.372352][T10163] tipc: Disabling bearer [ 191.409902][T10194] IPVS: using max 31 ests per chain, 74400 per kthread [ 191.494185][T10196] hsr_slave_1 (unregistering): left promiscuous mode [ 191.545486][T10197] sch_fq: defrate 0 ignored. [ 191.569878][T10203] bond0: entered allmulticast mode [ 192.219728][T10235] bridge0: port 1(syz_tun) entered blocking state [ 192.226422][T10235] bridge0: port 1(syz_tun) entered forwarding state [ 192.266801][T10235] 8021q: adding VLAN 0 to HW filter on device bond0 [ 192.295384][T10235] 8021q: adding VLAN 0 to HW filter on device team0 [ 192.323594][T10242] IPVS: ip_vs_add_dest(): server weight less than zero [ 192.330880][T10235] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 192.364431][T10236] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 192.373543][T10246] __nla_validate_parse: 11 callbacks suppressed [ 192.373561][T10246] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1192'. [ 192.388711][ C1] Illegal XDP return value 16128 on prog (id 194) dev lo, expect packet loss! [ 192.469719][T10248] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 192.495189][T10250] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1194'. [ 192.524495][T10248] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1193'. [ 192.829783][T10275] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1193'. [ 193.117947][T10292] netlink: 'syz.1.1202': attribute type 1 has an invalid length. [ 193.178703][T10293] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 193.226600][T10305] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1205'. [ 193.493466][T10326] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.1211'. [ 193.511284][T10325] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1211'. [ 193.796574][T10349] netlink: 'syz.4.1218': attribute type 11 has an invalid length. [ 193.829249][T10349] netlink: 'syz.4.1218': attribute type 11 has an invalid length. [ 193.838001][T10355] netlink: 'syz.1.1220': attribute type 13 has an invalid length. [ 193.850400][T10355] macvtap0: entered allmulticast mode [ 193.856084][T10349] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1218'. [ 193.866254][T10355] macvtap0: refused to change device tx_queue_len [ 194.345422][T10391] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1230'. [ 194.470838][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.554442][T10405] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1235'. [ 194.573133][T10405] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 194.801772][T10414] netlink: 'syz.0.1238': attribute type 16 has an invalid length. [ 194.845815][T10414] netlink: 'syz.0.1238': attribute type 17 has an invalid length. [ 194.900323][T10414] macsec0: left allmulticast mode [ 194.915375][T10414] ip6gre1: left allmulticast mode [ 194.936188][T10414] bridge1: left allmulticast mode [ 194.957094][T10414] xfrm1: left allmulticast mode [ 195.106104][T10440] netlink: 'syz.4.1244': attribute type 4 has an invalid length. [ 195.505703][T10467] netlink: 'syz.0.1252': attribute type 12 has an invalid length. [ 195.529166][T10467] netlink: 'syz.0.1252': attribute type 12 has an invalid length. [ 195.618497][T10472] vlan0: entered promiscuous mode [ 195.624031][T10472] vlan0: entered allmulticast mode [ 195.633929][T10472] hsr_slave_1: entered allmulticast mode [ 195.751518][T10484] netlink: 'syz.2.1256': attribute type 1 has an invalid length. [ 195.849180][T10484] 8021q: adding VLAN 0 to HW filter on device bond3 [ 195.861446][T10484] bond2: (slave bond3): making interface the new active one [ 195.869496][T10484] bond2: (slave bond3): Enslaving as an active interface with an up link [ 195.874638][T10491] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.896722][T10484] bond2: entered promiscuous mode [ 195.901915][T10484] bond3: entered promiscuous mode [ 195.912147][T10484] bond2: entered allmulticast mode [ 195.918043][T10484] bond3: entered allmulticast mode [ 195.924451][T10484] 8021q: adding VLAN 0 to HW filter on device bond2 [ 196.032830][T10497] mac80211_hwsim hwsim4 wlan1: entered allmulticast mode [ 196.325380][T10518] tipc: Enabled bearer , priority 0 [ 196.374442][T10518] syzkaller0: entered promiscuous mode [ 196.385374][T10518] syzkaller0: entered allmulticast mode [ 196.424520][T10523] gtp0: entered promiscuous mode [ 196.455775][T10523] gtp0: entered allmulticast mode [ 196.485785][T10518] tipc: Resetting bearer [ 196.520610][T10516] tipc: Resetting bearer [ 196.550951][T10516] tipc: Disabling bearer [ 196.562250][T10524] tipc: Enabling of bearer rejected, failed to enable media [ 196.632136][T10532] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 196.657265][T10532] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 196.715537][T10546] netlink: 'syz.1.1277': attribute type 21 has an invalid length. [ 197.046617][T10571] netlink: 'syz.1.1285': attribute type 1 has an invalid length. [ 197.857321][T10630] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap4 [ 197.871675][T10630] gretap4: default qdisc (pfifo_fast) fail, fallback to noqueue [ 197.899681][T10630] gretap4: entered promiscuous mode [ 197.924649][T10630] gretap4: entered allmulticast mode [ 198.428527][T10653] __nla_validate_parse: 17 callbacks suppressed [ 198.428606][T10653] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1304'. [ 201.667309][ T5882] Bluetooth: hci0: command 0x0c20 tx timeout [ 201.671493][ T5872] Bluetooth: hci1: command 0x0406 tx timeout [ 201.674078][ T5882] Bluetooth: hci3: command 0x0406 tx timeout [ 201.681276][ T5872] Bluetooth: hci2: command 0x0406 tx timeout [ 202.195975][T10705] netlink: 88 bytes leftover after parsing attributes in process `syz.1.1311'. [ 202.261937][T10715] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1313'. [ 202.286716][T10715] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1313'. [ 202.332929][T10715] netlink: 'syz.0.1313': attribute type 6 has an invalid length. [ 202.646279][T10733] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1318'. [ 203.148413][T10751] gtp0: entered promiscuous mode [ 203.171852][T10751] gtp0: entered allmulticast mode [ 203.207730][T10758] netlink: 'syz.0.1320': attribute type 29 has an invalid length. [ 203.302574][T10751] 8021q: adding VLAN 0 to HW filter on device bond6 [ 203.366189][T10766] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1326'. [ 203.423947][T10767] openvswitch: netlink: Multiple metadata blocks provided [ 203.915908][T10790] can: request_module (can-proto-3) failed. [ 203.931566][T10800] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1335'. [ 204.071476][T10804] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1337'. [ 204.125715][T10807] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1339'. [ 204.293331][T10807] hsr_slave_0 (unregistering): left promiscuous mode [ 204.545215][T10829] netlink: 'syz.1.1345': attribute type 12 has an invalid length. [ 205.060310][T10852] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1351'. [ 205.092845][T10852] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1351'. [ 205.477941][T10873] (unnamed net_device) (uninitialized): ARP target 1.0.0.0 is already present [ 205.508502][T10873] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (1) [ 205.954748][T10894] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1363'. [ 206.129158][T10899] netlink: 'syz.2.1365': attribute type 4 has an invalid length. [ 206.203072][T10909] netlink: 'syz.0.1369': attribute type 1 has an invalid length. [ 206.229731][T10909] netlink: 228 bytes leftover after parsing attributes in process `syz.0.1369'. [ 206.285458][T10916] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1371'. [ 206.304610][T10917] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1372'. [ 206.408347][T10920] wg1: entered promiscuous mode [ 206.777155][T10950] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1380'. [ 206.943898][T10952] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 207.133664][T10958] netlink: 'syz.1.1384': attribute type 1 has an invalid length. [ 207.166031][T10958] gretap1: entered promiscuous mode [ 208.095205][T10984] bond4: entered promiscuous mode [ 208.106926][T10984] bond4: entered allmulticast mode [ 208.126089][T10984] 8021q: adding VLAN 0 to HW filter on device bond4 [ 208.569121][T11005] openvswitch: netlink: IPv4 tun info is not correct [ 208.625155][T10984] bond4 (unregistering): Released all slaves [ 208.784739][T11005] ip6gre1: entered allmulticast mode [ 208.868555][T11011] netlink: 'syz.3.1401': attribute type 4 has an invalid length. [ 208.907125][T11011] (unnamed net_device) (uninitialized): option packets_per_slave: mode dependency failed, not supported in mode balance-xor(2) [ 208.967373][T11013] __nla_validate_parse: 5 callbacks suppressed [ 208.967390][T11013] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1402'. [ 209.391426][T11033] tipc: Enabled bearer , priority 0 [ 209.443096][T11033] syzkaller0: entered promiscuous mode [ 209.452539][T11038] netlink: 'syz.1.1409': attribute type 10 has an invalid length. [ 209.476365][T11033] syzkaller0: entered allmulticast mode [ 209.502674][T11036] netlink: 'syz.4.1408': attribute type 3 has an invalid length. [ 209.524061][T11036] netlink: 766 bytes leftover after parsing attributes in process `syz.4.1408'. [ 209.534909][T11038] mac80211_hwsim hwsim4 wlan1: left allmulticast mode [ 209.603009][T11033] tipc: Resetting bearer [ 209.623481][T11032] tipc: Resetting bearer [ 209.626040][T11042] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1411'. [ 209.672610][T11042] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1411'. [ 209.689231][T11032] tipc: Disabling bearer [ 209.714324][T11042] gretap1: entered promiscuous mode [ 209.725934][T11042] gretap1: entered allmulticast mode [ 209.802937][T11053] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1414'. [ 209.920389][T11055] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap0 [ 209.945265][T11055] gretap0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 209.962328][T11055] gretap0: entered promiscuous mode [ 209.969103][T11055] gretap0: entered allmulticast mode [ 210.023557][T11059] veth0: entered promiscuous mode [ 210.038909][T11064] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1415'. [ 210.128528][T11052] veth0: left promiscuous mode [ 210.408376][T11082] netlink: 168 bytes leftover after parsing attributes in process `syz.4.1421'. [ 210.505484][T11087] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1424'. [ 210.546716][T11091] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on [ 210.634329][T11095] netlink: 'syz.3.1426': attribute type 21 has an invalid length. [ 210.682771][T11095] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1426'. [ 210.851206][T11107] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1430'. [ 210.892595][T11107] vlan2: entered allmulticast mode [ 210.907114][T11107] bond0: entered allmulticast mode [ 210.912998][T11107] bond_slave_0: entered allmulticast mode [ 210.935184][T11107] bond_slave_1: entered allmulticast mode [ 210.944293][T11107] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode [ 210.987776][T11116] syzkaller0: entered promiscuous mode [ 210.993421][T11116] syzkaller0: entered allmulticast mode [ 211.315284][T11143] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 211.889458][ T7422] netdevsim netdevsim4 : unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.898722][ T7422] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.914326][ T7422] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.923922][ T7422] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.948405][T10591] tipc: Subscription rejected, illegal request [ 213.154008][T11237] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 213.176691][T11237] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 213.631490][T11251] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 213.782007][T11267] netlink: 'syz.1.1473': attribute type 1 has an invalid length. [ 213.974047][T11274] 8021q: adding VLAN 0 to HW filter on device bond4 [ 213.983644][T11274] bond3: (slave bond4): making interface the new active one [ 213.993050][T11274] bond3: (slave bond4): Enslaving as an active interface with an up link [ 214.047538][T11274] __nla_validate_parse: 14 callbacks suppressed [ 214.047557][T11274] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1473'. [ 214.139226][T11295] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1481'. [ 214.143404][T11267] bond3: (slave gretap1): Enslaving as a backup interface with an up link [ 214.200412][T11274] 8021q: adding VLAN 0 to HW filter on device bond3 [ 214.337218][T11307] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1483'. [ 214.433757][T11316] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1486'. [ 214.648715][T11321] openvswitch: netlink: IP tunnel TTL not specified. [ 214.722490][T11326] veth0_to_team: entered promiscuous mode [ 214.776367][T11326] veth0_to_team: entered allmulticast mode [ 214.798769][T11332] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1490'. [ 214.823112][T11332] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1490'. [ 215.286962][T11358] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1499'. [ 215.320671][T11358] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1499'. [ 215.336991][T11361] veth5: entered promiscuous mode [ 215.342072][T11361] veth5: entered allmulticast mode [ 215.545222][T11369] ieee802154 phy1 wpan1: encryption failed: -22 [ 216.277523][T11388] netlink: 277 bytes leftover after parsing attributes in process `syz.3.1507'. [ 216.296975][T11391] tipc: Enabled bearer , priority 0 [ 216.329298][T11402] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1511'. [ 216.439653][T11391] syzkaller0: entered promiscuous mode [ 216.450337][T11391] syzkaller0: entered allmulticast mode [ 216.457579][T11391] tipc: Resetting bearer [ 216.514660][T11391] tipc: Resetting bearer [ 218.384314][T11391] tipc: Disabling bearer [ 218.401727][T11409] ip6gre2: entered allmulticast mode [ 218.526970][T11427] netlink: 'syz.3.1518': attribute type 10 has an invalid length. [ 218.550606][T11427] 8021q: adding VLAN 0 to HW filter on device team0 [ 218.563254][T11427] bond0: (slave team0): Enslaving as an active interface with an up link [ 218.954599][T11460] sctp: [Deprecated]: syz.1.1527 (pid 11460) Use of struct sctp_assoc_value in delayed_ack socket option. [ 218.954599][T11460] Use struct sctp_sack_info instead [ 219.025124][T11460] sctp: [Deprecated]: syz.1.1527 (pid 11460) Use of struct sctp_assoc_value in delayed_ack socket option. [ 219.025124][T11460] Use struct sctp_sack_info instead [ 219.069263][T11468] __nla_validate_parse: 3 callbacks suppressed [ 219.069282][T11468] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1531'. [ 219.301436][T11489] netlink: 'syz.0.1536': attribute type 83 has an invalid length. [ 219.470242][T11497] unknown channel width for channel at 909000KHz? [ 219.479978][T11501] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1541'. [ 219.547242][T11504] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1542'. [ 219.558710][T11501] bond0: (slave bond_slave_0): Releasing backup interface [ 219.563368][T11508] netlink: 'syz.4.1543': attribute type 1 has an invalid length. [ 219.574695][T11507] netlink: 'syz.4.1543': attribute type 1 has an invalid length. [ 219.576945][T11501] bond_slave_0: left allmulticast mode [ 219.592208][T11501] bond0: (slave bond_slave_1): Releasing backup interface [ 219.604946][T11501] bond_slave_1: left allmulticast mode [ 219.607404][T11509] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1542'. [ 219.622643][T11501] team0: Port device team_slave_0 removed [ 219.634476][T11501] team0: Port device team_slave_1 removed [ 219.641526][T11501] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 219.654852][T11501] team0: Port device geneve0 removed [ 219.662646][T11501] bond0: (slave wlan1): Releasing backup interface [ 219.670739][T11501] mac80211_hwsim hwsim9 wlan1: left allmulticast mode [ 219.852953][T11523] netlink: 'syz.3.1548': attribute type 7 has an invalid length. [ 219.865511][T11523] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1548'. [ 219.980825][T11527] syzkaller0: entered promiscuous mode [ 219.988555][T11527] syzkaller0: entered allmulticast mode [ 222.046295][T11559] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1559'. [ 222.192467][T11570] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1560'. [ 222.555294][T11592] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1566'. [ 222.601186][T11595] tipc: Started in network mode [ 222.601309][T11592] netlink: 'syz.0.1566': attribute type 32 has an invalid length. [ 222.606288][T11595] tipc: Node identity , cluster identity 4711 [ 222.625167][T11595] tipc: Failed to obtain node identity [ 222.631108][T11592] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1566'. [ 222.641915][T11595] tipc: Enabling of bearer rejected, failed to enable media [ 222.653275][T11592] (unnamed net_device) (uninitialized): option coupled_control: invalid value (52) [ 222.806568][T11610] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.1571'. [ 223.976514][T11689] netlink: 'syz.2.1599': attribute type 10 has an invalid length. [ 224.034050][T11690] syzkaller1: entered promiscuous mode [ 224.040271][T11690] syzkaller1: entered allmulticast mode [ 224.102451][T11695] tipc: Started in network mode [ 224.107648][T11695] tipc: Node identity 040000000000000006, cluster identity 4711 [ 224.140021][T11697] __nla_validate_parse: 5 callbacks suppressed [ 224.140048][T11697] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1603'. [ 224.157148][T11669] netlink: 'syz.1.1593': attribute type 13 has an invalid length. [ 224.165070][T11669] netlink: 'syz.1.1593': attribute type 17 has an invalid length. [ 225.207215][T11725] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 225.283166][T11721] syzkaller0: entered promiscuous mode [ 225.303500][T11721] syzkaller0: entered allmulticast mode [ 225.339715][T11721] netlink: 'syz.3.1613': attribute type 2 has an invalid length. [ 225.353659][T11734] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1615'. [ 225.417275][T11740] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1616'. [ 226.024475][T11751] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1620'. [ 227.494598][T11760] netlink: 192 bytes leftover after parsing attributes in process `syz.0.1623'. [ 227.920305][T11787] netlink: 4124 bytes leftover after parsing attributes in process `syz.0.1634'. [ 227.935790][T11787] openvswitch: netlink: Flow key attr not present in new flow. [ 228.066695][T11803] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1637'. [ 228.468815][T11826] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1641'. [ 228.704544][T11836] netlink: 'syz.0.1646': attribute type 1 has an invalid length. [ 228.811212][T11836] bond2 (unregistering): Released all slaves [ 228.936949][T11850] Bluetooth: MGMT ver 1.23 [ 229.031658][T11857] netlink: 'syz.0.1652': attribute type 1 has an invalid length. [ 229.099077][T11854] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1651'. [ 229.460440][T11873] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1656'. [ 229.471112][T11873] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1656'. [ 229.484187][T11873] 8021q: VLANs not supported on wg1 [ 229.571195][T11883] netlink: 'syz.1.1660': attribute type 1 has an invalid length. [ 229.582072][T11877] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.1658'. [ 229.582072][T11878] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.1658'. [ 229.640557][T11883] 8021q: adding VLAN 0 to HW filter on device bond5 [ 229.648280][T11887] netlink: 'syz.2.1661': attribute type 10 has an invalid length. [ 229.678943][T11884] bond5: (slave veth3): Enslaving as an active interface with a down link [ 229.693910][T11883] bond5: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 229.775340][T11890] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 230.441195][T11943] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 230.499563][T11946] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1678'. [ 230.510069][T11946] netlink: 120 bytes leftover after parsing attributes in process `syz.3.1678'. [ 230.531617][T11946] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1678'. [ 230.653448][T11958] netlink: 'syz.3.1683': attribute type 10 has an invalid length. [ 230.668736][T11958] bond0: (slave dummy0): Releasing backup interface [ 230.676167][T11958] bond0: (slave dummy0): the permanent HWaddr of slave - aa:aa:aa:aa:aa:24 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 230.711065][T11958] team0: Port device dummy0 added [ 230.883374][T11974] lo: entered allmulticast mode [ 230.899983][T11979] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1689'. [ 230.944369][T11981] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1690'. [ 231.122881][T11991] netlink: 92 bytes leftover after parsing attributes in process `syz.3.1694'. [ 231.263065][T12004] erspan0: entered allmulticast mode [ 231.464562][ T1348] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 231.479004][ T1348] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 231.491094][ T1348] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 231.502646][ T48] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 231.560712][T12017] syzkaller1: entered promiscuous mode [ 231.566968][T12017] syzkaller1: entered allmulticast mode [ 231.791611][T12029] netlink: 'syz.4.1704': attribute type 12 has an invalid length. [ 231.868138][T12038] sctp: [Deprecated]: syz.4.1707 (pid 12038) Use of int in maxseg socket option. [ 231.868138][T12038] Use struct sctp_assoc_value instead [ 231.886082][T12038] sctp: [Deprecated]: syz.4.1707 (pid 12038) Use of int in maxseg socket option. [ 231.886082][T12038] Use struct sctp_assoc_value instead [ 231.901441][T12038] sctp: [Deprecated]: syz.4.1707 (pid 12038) Use of int in maxseg socket option. [ 231.901441][T12038] Use struct sctp_assoc_value instead [ 231.917728][T12038] sctp: [Deprecated]: syz.4.1707 (pid 12038) Use of int in maxseg socket option. [ 231.917728][T12038] Use struct sctp_assoc_value instead [ 231.932646][T12038] sctp: [Deprecated]: syz.4.1707 (pid 12038) Use of int in maxseg socket option. [ 231.932646][T12038] Use struct sctp_assoc_value instead [ 231.947642][T12038] sctp: [Deprecated]: syz.4.1707 (pid 12038) Use of int in maxseg socket option. [ 231.947642][T12038] Use struct sctp_assoc_value instead [ 231.962553][T12038] sctp: [Deprecated]: syz.4.1707 (pid 12038) Use of int in maxseg socket option. [ 231.962553][T12038] Use struct sctp_assoc_value instead [ 232.005724][T12038] sctp: [Deprecated]: syz.4.1707 (pid 12038) Use of int in maxseg socket option. [ 232.005724][T12038] Use struct sctp_assoc_value instead [ 232.059917][T12038] sctp: [Deprecated]: syz.4.1707 (pid 12038) Use of int in maxseg socket option. [ 232.059917][T12038] Use struct sctp_assoc_value instead [ 232.075036][T12038] sctp: [Deprecated]: syz.4.1707 (pid 12038) Use of int in maxseg socket option. [ 232.075036][T12038] Use struct sctp_assoc_value instead [ 232.109106][T12050] tipc: Can't bind to reserved service type 0 [ 232.119911][T12052] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 232.354822][T12073] syzkaller1: entered promiscuous mode [ 232.399136][T12073] syzkaller1: entered allmulticast mode [ 232.473730][T12077] tipc: Enabled bearer , priority 0 [ 232.483309][T12077] syzkaller0: entered promiscuous mode [ 232.492250][T12077] syzkaller0: entered allmulticast mode [ 232.541223][T12077] tipc: Resetting bearer [ 232.563970][T12076] tipc: Resetting bearer [ 232.598167][T12076] tipc: Disabling bearer [ 233.144325][T12119] 0ªî{X¹¦: entered promiscuous mode [ 233.159480][T12119] geneve2: entered promiscuous mode [ 233.164848][T12119] geneve2: entered allmulticast mode [ 233.184894][ T9163] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 19999 - 0 [ 233.205023][ T9163] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 19999 - 0 [ 233.233114][ T9163] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 19999 - 0 [ 233.250630][T12122] netlink: 'syz.2.1730': attribute type 33 has an invalid length. [ 233.257132][ T9163] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 19999 - 0 [ 233.495389][T12132] netlink: 'syz.4.1732': attribute type 4 has an invalid length. [ 233.496624][T12131] netlink: 'syz.4.1732': attribute type 4 has an invalid length. [ 233.542490][T12085] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 233.555261][T12085] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 233.619068][T12085] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 233.628845][T12085] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 233.694193][T12085] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 233.721223][T12085] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 233.730274][T12151] netlink: zone id is out of range [ 233.747005][T12151] netlink: del zone limit has 4 unknown bytes [ 233.791408][T12085] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 233.803887][T12085] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 233.830748][T12085] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 233.865304][T12085] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 234.278004][T12181] netlink: 'syz.0.1743': attribute type 30 has an invalid length. [ 234.360971][ T9163] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 234.399993][ T9163] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 234.415965][T12189] netlink: 'syz.1.1745': attribute type 22 has an invalid length. [ 234.424478][ T9163] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 234.489934][T12189] netlink: 'syz.1.1745': attribute type 22 has an invalid length. [ 234.500615][ T48] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 234.523114][T12189] __nla_validate_parse: 30 callbacks suppressed [ 234.523132][T12189] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1745'. [ 234.871974][T12208] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1750'. [ 235.232309][T12232] netlink: 84 bytes leftover after parsing attributes in process `syz.2.1757'. [ 235.468575][T12243] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 235.860884][T12262] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1764'. [ 236.431283][T12287] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1772'. [ 236.478546][T12287] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1772'. [ 236.663083][T12302] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1775'. [ 236.904546][T12319] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1779'. [ 237.342563][T12338] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1784'. [ 237.423891][T12346] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1785'. [ 237.692574][T12360] netlink: 'syz.4.1790': attribute type 12 has an invalid length. [ 237.772593][T12368] netlink: 'syz.2.1791': attribute type 4 has an invalid length. [ 237.830660][T12371] netlink: 'syz.2.1791': attribute type 4 has an invalid length. [ 238.125292][T12393] netlink: 'syz.3.1797': attribute type 1 has an invalid length. [ 238.361981][T12396] 8021q: adding VLAN 0 to HW filter on device bond9 [ 238.371817][T12396] bond8: (slave bond9): making interface the new active one [ 238.382759][T12396] bond8: (slave bond9): Enslaving as an active interface with an up link [ 238.395480][T12393] bond8: entered promiscuous mode [ 238.401125][T12393] bond9: entered promiscuous mode [ 238.411298][T12393] bond8: entered allmulticast mode [ 238.427157][T12393] bond9: entered allmulticast mode [ 238.434256][T12393] 8021q: adding VLAN 0 to HW filter on device bond8 [ 238.560714][T12414] tipc: Enabling of bearer rejected, failed to enable media [ 238.725957][T12427] mac80211_hwsim hwsim6 wlan1: left allmulticast mode [ 238.749810][T12427] bridge_slave_0: left allmulticast mode [ 238.771021][T12427] bridge_slave_0: left promiscuous mode [ 238.781396][T12427] bridge0: port 1(bridge_slave_0) entered disabled state [ 238.834752][T12427] bond0: (slave bridge_slave_1): Releasing backup interface [ 238.858550][T12427] bond0: (slave bond_slave_0): Releasing backup interface [ 238.879387][T12427] bond0: (slave bond_slave_1): Releasing backup interface [ 238.919325][T12427] team0: Port device team_slave_0 removed [ 238.933614][T12427] team0: Port device team_slave_1 removed [ 238.940315][T12427] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 238.968038][T12427] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 238.983877][T12427] bond2: (slave bond3): Releasing backup interface [ 239.005071][T12427] bond3: left promiscuous mode [ 239.016034][T12427] bond3: left allmulticast mode [ 239.353696][T12467] netlink: 'syz.4.1814': attribute type 7 has an invalid length. [ 239.393207][T12467] netlink: 'syz.4.1814': attribute type 8 has an invalid length. [ 239.791590][T12494] netlink: 'syz.0.1821': attribute type 83 has an invalid length. [ 239.956487][T12505] __nla_validate_parse: 12 callbacks suppressed [ 239.956505][T12505] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1822'. [ 240.064925][T12514] vcan0: entered allmulticast mode [ 240.329329][T12525] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1827'. [ 240.354102][T12525] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1827'. [ 240.387066][T12525] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1827'. [ 240.398990][T12525] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1827'. [ 240.409349][T12525] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1827'. [ 240.418993][T12525] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1827'. [ 240.432660][T12525] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1827'. [ 240.442622][T12525] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1827'. [ 240.468296][T12525] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1827'. [ 240.721530][T12538] netlink: 'syz.4.1831': attribute type 3 has an invalid length. [ 240.738235][T12538] netlink: 'syz.4.1831': attribute type 3 has an invalid length. [ 241.028699][T12552] bridge0: port 1(syz_tun) entered disabled state [ 241.053083][T12558] syz.0.1836 uses old SIOCAX25GETINFO [ 241.072129][T12560] netlink: 'syz.0.1836': attribute type 2 has an invalid length. [ 241.100996][T12560] netlink: 'syz.0.1836': attribute type 2 has an invalid length. [ 241.121920][T12560] netlink: 'syz.0.1836': attribute type 2 has an invalid length. [ 241.135528][T12552] syz_tun (unregistering): left allmulticast mode [ 241.144897][T12552] syz_tun (unregistering): left promiscuous mode [ 241.185897][T12552] bridge0: port 1(syz_tun) entered disabled state [ 241.789847][T12593] netlink: 'syz.0.1842': attribute type 11 has an invalid length. [ 241.816090][T12599] 8021q: VLANs not supported on ip_vti0 [ 241.998038][T12611] netlink: 'syz.4.1847': attribute type 21 has an invalid length. [ 242.747718][T12668] 8021q: VLANs not supported on ip6_vti0 [ 244.952345][T12709] ip6gre3: entered allmulticast mode [ 245.090111][T12721] __nla_validate_parse: 36 callbacks suppressed [ 245.090129][T12721] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1872'. [ 245.093842][T12720] validate_nla: 5 callbacks suppressed [ 245.093862][T12720] netlink: 'syz.3.1871': attribute type 1 has an invalid length. [ 245.187327][T12729] bond10: (slave geneve3): making interface the new active one [ 245.204911][T12729] bond10: (slave geneve3): Enslaving as an active interface with an up link [ 245.226054][T10595] netdevsim netdevsim3 eth0: set [1, 2] type 2 family 0 port 20004 - 0 [ 245.247704][T12731] netlink: 'syz.4.1874': attribute type 4 has an invalid length. [ 245.305125][T12734] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 245.324295][T10595] netdevsim netdevsim3 eth1: set [1, 2] type 2 family 0 port 20004 - 0 [ 245.357129][T10595] netdevsim netdevsim3 eth2: set [1, 2] type 2 family 0 port 20004 - 0 [ 245.382760][T10595] netdevsim netdevsim3 eth3: set [1, 2] type 2 family 0 port 20004 - 0 [ 245.426430][T12739] pim6reg: entered allmulticast mode [ 245.463494][T12734] pim6reg: left allmulticast mode [ 245.468980][T12734] vcan0: left allmulticast mode [ 245.543879][T12746] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1879'. [ 245.764380][T12755] netlink: 'syz.4.1883': attribute type 21 has an invalid length. [ 245.884322][T12768] netlink: 'syz.2.1886': attribute type 1 has an invalid length. [ 245.895398][T12768] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1886'. [ 245.944060][T12771] netlink: 212316 bytes leftover after parsing attributes in process `syz.0.1888'. [ 245.951090][T12768] vlan3: entered allmulticast mode [ 245.958799][T12768] hsr0: entered allmulticast mode [ 246.057057][T12780] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 246.086271][T12780] team0: Device macvtap1 is already an upper device of the team interface [ 246.168730][T12783] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1891'. [ 246.370773][T12801] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode [ 246.399614][T12804] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1898'. [ 246.423726][T12807] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1897'. [ 246.450863][T12809] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1898'. [ 246.468204][T12809] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1898'. [ 246.648701][T12822] netlink: 165 bytes leftover after parsing attributes in process `syz.2.1904'. [ 246.711167][T12824] netem: change failed [ 246.761677][T12830] tipc: Enabled bearer , priority 0 [ 246.785292][T12830] tipc: Resetting bearer [ 247.253918][T12859] netlink: 'syz.0.1918': attribute type 11 has an invalid length. [ 247.269953][T12862] ================================================================== [ 247.278076][T12862] BUG: KASAN: slab-use-after-free in xfrm_state_find+0x2cf2/0x5400 [ 247.285986][T12862] Read of size 1 at addr ffff88807bb28770 by task syz.3.1919/12862 [ 247.293887][T12862] [ 247.296212][T12862] CPU: 0 UID: 0 PID: 12862 Comm: syz.3.1919 Not tainted syzkaller #0 PREEMPT(full) [ 247.296236][T12862] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 247.296259][T12862] Call Trace: [ 247.296268][T12862] [ 247.296278][T12862] dump_stack_lvl+0x189/0x250 [ 247.296304][T12862] ? __kasan_check_byte+0x12/0x40 [ 247.296330][T12862] ? __pfx_dump_stack_lvl+0x10/0x10 [ 247.296351][T12862] ? lock_release+0x4b/0x3e0 [ 247.296379][T12862] ? __virt_addr_valid+0x4a5/0x5c0 [ 247.296401][T12862] print_report+0xca/0x240 [ 247.296416][T12862] ? xfrm_state_find+0x2cf2/0x5400 [ 247.296433][T12862] kasan_report+0x118/0x150 [ 247.296457][T12862] ? xfrm_state_find+0x2cf2/0x5400 [ 247.296479][T12862] xfrm_state_find+0x2cf2/0x5400 [ 247.296496][T12862] ? unwind_get_return_address+0x4d/0x90 [ 247.296515][T12862] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 247.296547][T12862] ? xfrm_state_find+0x1da/0x5400 [ 247.296567][T12862] ? __pfx_xfrm_state_find+0x10/0x10 [ 247.296587][T12862] ? trace_fib_table_lookup+0x85/0x200 [ 247.296610][T12862] xfrm_resolve_and_create_bundle+0x768/0x2f80 [ 247.296645][T12862] ? fib_rules_lookup+0xc55/0xe90 [ 247.296664][T12862] ? __pfx_xfrm_resolve_and_create_bundle+0x10/0x10 [ 247.296685][T12862] ? __lock_acquire+0xab9/0xd20 [ 247.296718][T12862] ? xfrm_sk_policy_lookup+0x9d/0x750 [ 247.296746][T12862] ? xfrm_sk_policy_lookup+0x9d/0x750 [ 247.296770][T12862] ? xfrm_expand_policies+0x41f/0x6a0 [ 247.296794][T12862] xfrm_lookup_with_ifid+0x2a7/0x1a70 [ 247.296818][T12862] ? __pfx_xfrm_lookup_with_ifid+0x10/0x10 [ 247.296838][T12862] ? __pfx_rcuref_put+0x10/0x10 [ 247.296860][T12862] ? string+0x279/0x2b0 [ 247.296882][T12862] xfrm_lookup_route+0x3c/0x1c0 [ 247.296904][T12862] tcp_v4_connect+0x846/0x1a00 [ 247.296938][T12862] ? __pfx_tcp_v4_connect+0x10/0x10 [ 247.296961][T12862] ? tcp_v6_connect+0x62f/0x1870 [ 247.296980][T12862] tcp_v6_connect+0xab1/0x1870 [ 247.297003][T12862] ? __pfx_tcp_v6_connect+0x10/0x10 [ 247.297020][T12862] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 247.297051][T12862] __inet_stream_connect+0x2ae/0xe80 [ 247.297076][T12862] ? __local_bh_enable_ip+0x12d/0x1c0 [ 247.297093][T12862] ? __pfx___inet_stream_connect+0x10/0x10 [ 247.297114][T12862] ? __local_bh_enable_ip+0x12d/0x1c0 [ 247.297130][T12862] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 247.297161][T12862] inet_stream_connect+0x66/0xa0 [ 247.297184][T12862] __sys_connect+0x316/0x440 [ 247.297210][T12862] ? __pfx___sys_connect+0x10/0x10 [ 247.297242][T12862] ? rcu_is_watching+0x15/0xb0 [ 247.297264][T12862] __x64_sys_connect+0x7a/0x90 [ 247.297287][T12862] do_syscall_64+0xfa/0x3b0 [ 247.297303][T12862] ? lockdep_hardirqs_on+0x9c/0x150 [ 247.297325][T12862] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 247.297342][T12862] ? clear_bhb_loop+0x60/0xb0 [ 247.297361][T12862] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 247.297378][T12862] RIP: 0033:0x7f1f9538ebe9 [ 247.297395][T12862] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 247.297412][T12862] RSP: 002b:00007f1f9612a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 247.297432][T12862] RAX: ffffffffffffffda RBX: 00007f1f955c5fa0 RCX: 00007f1f9538ebe9 [ 247.297445][T12862] RDX: 000000000000001c RSI: 0000200000000000 RDI: 0000000000000006 [ 247.297458][T12862] RBP: 00007f1f95411e19 R08: 0000000000000000 R09: 0000000000000000 [ 247.297470][T12862] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 247.297481][T12862] R13: 00007f1f955c6038 R14: 00007f1f955c5fa0 R15: 00007ffeb42b4358 [ 247.297504][T12862] [ 247.297510][T12862] [ 247.653062][T12862] Allocated by task 11620: [ 247.657553][T12862] kasan_save_track+0x3e/0x80 [ 247.662231][T12862] __kasan_slab_alloc+0x6c/0x80 [ 247.667076][T12862] kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 247.672537][T12862] xfrm_state_alloc+0x24/0x2f0 [ 247.677476][T12862] xfrm_add_sa+0x17d1/0x4070 [ 247.682239][T12862] xfrm_user_rcv_msg+0x7a3/0xab0 [ 247.687249][T12862] netlink_rcv_skb+0x205/0x470 [ 247.692095][T12862] xfrm_netlink_rcv+0x79/0x90 [ 247.697051][T12862] netlink_unicast+0x82c/0x9e0 [ 247.701826][T12862] netlink_sendmsg+0x805/0xb30 [ 247.706607][T12862] __sock_sendmsg+0x21c/0x270 [ 247.711567][T12862] ____sys_sendmsg+0x505/0x830 [ 247.716347][T12862] ___sys_sendmsg+0x21f/0x2a0 [ 247.721196][T12862] __x64_sys_sendmsg+0x19b/0x260 [ 247.726206][T12862] do_syscall_64+0xfa/0x3b0 [ 247.730690][T12862] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 247.736587][T12862] [ 247.738908][T12862] Freed by task 7916: [ 247.742870][T12862] kasan_save_track+0x3e/0x80 [ 247.747538][T12862] kasan_save_free_info+0x46/0x50 [ 247.752635][T12862] __kasan_slab_free+0x5b/0x80 [ 247.757399][T12862] kmem_cache_free+0x18f/0x400 [ 247.762170][T12862] xfrm_state_gc_task+0x52d/0x6b0 [ 247.767200][T12862] process_scheduled_works+0xae1/0x17b0 [ 247.772829][T12862] worker_thread+0x8a0/0xda0 [ 247.777427][T12862] kthread+0x70e/0x8a0 [ 247.781489][T12862] ret_from_fork+0x3f9/0x770 [ 247.786177][T12862] ret_from_fork_asm+0x1a/0x30 [ 247.790938][T12862] [ 247.793269][T12862] The buggy address belongs to the object at ffff88807bb28440 [ 247.793269][T12862] which belongs to the cache xfrm_state of size 928 [ 247.807227][T12862] The buggy address is located 816 bytes inside of [ 247.807227][T12862] freed 928-byte region [ffff88807bb28440, ffff88807bb287e0) [ 247.821060][T12862] [ 247.823384][T12862] The buggy address belongs to the physical page: [ 247.829807][T12862] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88807bb2aec0 pfn:0x7bb28 [ 247.839880][T12862] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 247.848469][T12862] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 247.856096][T12862] page_type: f5(slab) [ 247.860089][T12862] raw: 00fff00000000040 ffff888142ef7c80 dead000000000122 0000000000000000 [ 247.868677][T12862] raw: ffff88807bb2aec0 00000000800f000a 00000000f5000000 0000000000000000 [ 247.877249][T12862] head: 00fff00000000040 ffff888142ef7c80 dead000000000122 0000000000000000 [ 247.886038][T12862] head: ffff88807bb2aec0 00000000800f000a 00000000f5000000 0000000000000000 [ 247.895492][T12862] head: 00fff00000000002 ffffea0001eeca01 00000000ffffffff 00000000ffffffff [ 247.904261][T12862] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 247.913059][T12862] page dumped because: kasan: bad access detected [ 247.919585][T12862] page_owner tracks the page as allocated [ 247.925542][T12862] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 6036, tgid 6035 (syz.0.17), ts 87325973384, free_ts 87143888932 [ 247.944820][T12862] post_alloc_hook+0x240/0x2a0 [ 247.949622][T12862] get_page_from_freelist+0x21e4/0x22c0 [ 247.955255][T12862] __alloc_frozen_pages_noprof+0x181/0x370 [ 247.961065][T12862] alloc_pages_mpol+0x232/0x4a0 [ 247.966013][T12862] allocate_slab+0x8a/0x370 [ 247.970503][T12862] ___slab_alloc+0xbeb/0x1410 [ 247.975181][T12862] kmem_cache_alloc_noprof+0x283/0x3c0 [ 247.980648][T12862] xfrm_state_alloc+0x24/0x2f0 [ 247.985413][T12862] xfrm_add_sa+0x17d1/0x4070 [ 247.990129][T12862] xfrm_user_rcv_msg+0x7a3/0xab0 [ 247.995065][T12862] netlink_rcv_skb+0x205/0x470 [ 247.999822][T12862] xfrm_netlink_rcv+0x79/0x90 [ 248.004486][T12862] netlink_unicast+0x82c/0x9e0 [ 248.009327][T12862] netlink_sendmsg+0x805/0xb30 [ 248.014077][T12862] __sock_sendmsg+0x21c/0x270 [ 248.018749][T12862] ____sys_sendmsg+0x505/0x830 [ 248.023501][T12862] page last free pid 5876 tgid 5876 stack trace: [ 248.029810][T12862] __free_frozen_pages+0xbc4/0xd30 [ 248.034941][T12862] __slab_free+0x303/0x3c0 [ 248.039388][T12862] qlist_free_all+0x97/0x140 [ 248.044072][T12862] kasan_quarantine_reduce+0x148/0x160 [ 248.049532][T12862] __kasan_slab_alloc+0x22/0x80 [ 248.054477][T12862] kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 248.059941][T12862] ptlock_alloc+0x20/0x70 [ 248.064349][T12862] pte_alloc_one+0x7d/0x170 [ 248.068924][T12862] __pte_alloc+0x25/0x1a0 [ 248.073261][T12862] copy_pmd_range+0x6a91/0x71d0 [ 248.078137][T12862] copy_page_range+0xc14/0x1270 [ 248.083251][T12862] dup_mmap+0xf57/0x1ac0 [ 248.087508][T12862] copy_mm+0x13c/0x4b0 [ 248.091584][T12862] copy_process+0x1706/0x3c00 [ 248.096247][T12862] kernel_clone+0x21e/0x840 [ 248.100737][T12862] __x64_sys_clone+0x18b/0x1e0 [ 248.105499][T12862] [ 248.107896][T12862] Memory state around the buggy address: [ 248.113588][T12862] ffff88807bb28600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 248.121718][T12862] ffff88807bb28680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 248.130058][T12862] >ffff88807bb28700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 248.138193][T12862] ^ [ 248.145891][T12862] ffff88807bb28780: fb fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 248.154029][T12862] ffff88807bb28800: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 248.162092][T12862] ================================================================== [ 248.174117][T12862] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 248.181346][T12862] CPU: 0 UID: 0 PID: 12862 Comm: syz.3.1919 Not tainted syzkaller #0 PREEMPT(full) [ 248.190722][T12862] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 248.200858][T12862] Call Trace: [ 248.204331][T12862] [ 248.207345][T12862] dump_stack_lvl+0x99/0x250 [ 248.211950][T12862] ? __asan_memcpy+0x40/0x70 [ 248.216552][T12862] ? __pfx_dump_stack_lvl+0x10/0x10 [ 248.221752][T12862] ? __pfx__printk+0x10/0x10 [ 248.226355][T12862] vpanic+0x281/0x750 [ 248.230480][T12862] ? preempt_schedule+0xae/0xc0 [ 248.235343][T12862] ? __pfx_vpanic+0x10/0x10 [ 248.239840][T12862] ? preempt_schedule_common+0x83/0xd0 [ 248.245295][T12862] ? preempt_schedule+0xae/0xc0 [ 248.250150][T12862] ? __pfx_preempt_schedule+0x10/0x10 [ 248.255553][T12862] panic+0xb9/0xc0 [ 248.259393][T12862] ? __pfx_panic+0x10/0x10 [ 248.263819][T12862] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 248.269822][T12862] ? xfrm_state_find+0x2cf2/0x5400 [ 248.275099][T12862] check_panic_on_warn+0x89/0xb0 [ 248.280027][T12862] ? xfrm_state_find+0x2cf2/0x5400 [ 248.285151][T12862] end_report+0x78/0x160 [ 248.289590][T12862] kasan_report+0x129/0x150 [ 248.294092][T12862] ? xfrm_state_find+0x2cf2/0x5400 [ 248.299221][T12862] xfrm_state_find+0x2cf2/0x5400 [ 248.304145][T12862] ? unwind_get_return_address+0x4d/0x90 [ 248.309772][T12862] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 248.316060][T12862] ? xfrm_state_find+0x1da/0x5400 [ 248.321104][T12862] ? __pfx_xfrm_state_find+0x10/0x10 [ 248.326392][T12862] ? trace_fib_table_lookup+0x85/0x200 [ 248.331980][T12862] xfrm_resolve_and_create_bundle+0x768/0x2f80 [ 248.338332][T12862] ? fib_rules_lookup+0xc55/0xe90 [ 248.343363][T12862] ? __pfx_xfrm_resolve_and_create_bundle+0x10/0x10 [ 248.350027][T12862] ? __lock_acquire+0xab9/0xd20 [ 248.354933][T12862] ? xfrm_sk_policy_lookup+0x9d/0x750 [ 248.360334][T12862] ? xfrm_sk_policy_lookup+0x9d/0x750 [ 248.365702][T12862] ? xfrm_expand_policies+0x41f/0x6a0 [ 248.371161][T12862] xfrm_lookup_with_ifid+0x2a7/0x1a70 [ 248.376535][T12862] ? __pfx_xfrm_lookup_with_ifid+0x10/0x10 [ 248.382328][T12862] ? __pfx_rcuref_put+0x10/0x10 [ 248.387258][T12862] ? string+0x279/0x2b0 [ 248.391508][T12862] xfrm_lookup_route+0x3c/0x1c0 [ 248.396534][T12862] tcp_v4_connect+0x846/0x1a00 [ 248.401383][T12862] ? __pfx_tcp_v4_connect+0x10/0x10 [ 248.406583][T12862] ? tcp_v6_connect+0x62f/0x1870 [ 248.411513][T12862] tcp_v6_connect+0xab1/0x1870 [ 248.416382][T12862] ? __pfx_tcp_v6_connect+0x10/0x10 [ 248.421668][T12862] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 248.427110][T12862] __inet_stream_connect+0x2ae/0xe80 [ 248.432399][T12862] ? __local_bh_enable_ip+0x12d/0x1c0 [ 248.437802][T12862] ? __pfx___inet_stream_connect+0x10/0x10 [ 248.443597][T12862] ? __local_bh_enable_ip+0x12d/0x1c0 [ 248.449007][T12862] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 248.454742][T12862] inet_stream_connect+0x66/0xa0 [ 248.459671][T12862] __sys_connect+0x316/0x440 [ 248.464258][T12862] ? __pfx___sys_connect+0x10/0x10 [ 248.469367][T12862] ? rcu_is_watching+0x15/0xb0 [ 248.474125][T12862] __x64_sys_connect+0x7a/0x90 [ 248.478894][T12862] do_syscall_64+0xfa/0x3b0 [ 248.483472][T12862] ? lockdep_hardirqs_on+0x9c/0x150 [ 248.488693][T12862] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 248.494755][T12862] ? clear_bhb_loop+0x60/0xb0 [ 248.499514][T12862] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 248.505481][T12862] RIP: 0033:0x7f1f9538ebe9 [ 248.509887][T12862] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 248.529599][T12862] RSP: 002b:00007f1f9612a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 248.538193][T12862] RAX: ffffffffffffffda RBX: 00007f1f955c5fa0 RCX: 00007f1f9538ebe9 [ 248.546154][T12862] RDX: 000000000000001c RSI: 0000200000000000 RDI: 0000000000000006 [ 248.554116][T12862] RBP: 00007f1f95411e19 R08: 0000000000000000 R09: 0000000000000000 [ 248.562090][T12862] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 248.570058][T12862] R13: 00007f1f955c6038 R14: 00007f1f955c5fa0 R15: 00007ffeb42b4358 [ 248.578030][T12862] [ 248.581364][T12862] Kernel Offset: disabled [ 248.585721][T12862] Rebooting in 86400 seconds..