last executing test programs: 13.969958986s ago: executing program 0 (id=2867): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="2e0000000000000000000000000000002f110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10) (async) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) recvmsg$kcm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000002780)=[{&(0x7f0000000480)=""/217, 0xd9}], 0x1}, 0x10101) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) (async) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) (async) recvmmsg(r3, &(0x7f0000006e40)=[{{0x0, 0x0, &(0x7f0000005300)=[{&(0x7f0000000700)=""/86, 0x56}], 0x1}, 0x7}], 0x1, 0x2, 0x0) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1, 0x8, 0x4, 0xff, 0x0, 0x1}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001580)=@ipv6_newaddrlabel={0x38, 0x48, 0x3, 0x0, 0x0, {}, [@IFAL_LABEL={0x8}, @IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x38}}, 0x0) 13.629604621s ago: executing program 0 (id=2874): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) r2 = accept$alg(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000000080), 0x0, 0x4000) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000000)={0x30, r1, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7}, @NBD_ATTR_SOCKETS={0x4}]}, 0x30}}, 0x0) 13.449665008s ago: executing program 0 (id=2878): r0 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan4\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="10002cbd7000fddbdf25300000000aec01007770616e30000000050033000500040008000200", @ANYRES32=r1, @ANYBLOB="050034000f000000"], 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x8010) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0x18, 0xd, &(0x7f0000000700)=@raw=[@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xe95b}}], &(0x7f0000000800)='syzkaller\x00', 0xfffffffb, 0x0, 0x0, 0x41000, 0x2c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x90) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSGL2CALL(r3, 0x89e5, &(0x7f0000000180)=@bcast) sendmsg$nl_xfrm(r2, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3401000017000100000000000000000000000000000000000000ffffffffffff0000000000000000ac141400000000000000000000000000fe8000000000000000000000000000bbac1414bb00"/104, @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="fc0000000000000000000000000000000000000000000000000000000000000100000000000000000200000000000000", @ANYRES32=r1, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000fdffffffffffffff00000000000000000000000000000000fcffffffffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000289c62833e5e259c44c9913ad9"], 0x134}}, 0x20040044) 13.198953145s ago: executing program 0 (id=2883): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r0) sendmsg$DEVLINK_CMD_RATE_SET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)={0x44, r1, 0x1, 0x0, 0x0, {0x2a}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x58}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0xffffffff}]}, 0x44}, 0x1, 0x0, 0x0, 0x4001}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x24, 0x24, 0x200, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x0, 0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, r3, 0x1, 0x70bd25, 0x25dfdbfc, {{}, {}, {0x18, 0x17, {0x17, 0x1, @l2={'ib', 0x3a, 'rose0\x00'}}}}}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x40001) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r0) (async) sendmsg$DEVLINK_CMD_RATE_SET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)={0x44, r1, 0x1, 0x0, 0x0, {0x2a}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x58}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0xffffffff}]}, 0x44}, 0x1, 0x0, 0x0, 0x4001}, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x24, 0x24, 0x200, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x0, 0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) (async) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) (async) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, r3, 0x1, 0x70bd25, 0x25dfdbfc, {{}, {}, {0x18, 0x17, {0x17, 0x1, @l2={'ib', 0x3a, 'rose0\x00'}}}}}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x40001) (async) 2.600770559s ago: executing program 3 (id=2974): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)={0x1b, 0x0, 0x0, 0x3, 0x0, 0xffffffffffffffff, 0x80a, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000200)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000280), &(0x7f00000002c0)}, 0x20) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x1e, 0x28, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1ff}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffa}}, @map_idx={0x18, 0x1, 0x5, 0x0, 0x9}, @generic={0x0, 0x9, 0x6, 0x7, 0x4}, @jmp={0x5, 0x0, 0xa, 0x0, 0x2, 0xc, 0x8}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) 2.38422127s ago: executing program 3 (id=2977): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0041, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_mreq(r1, 0x29, 0x1b, 0x0, 0x0) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r3 = socket$packet(0x11, 0x3, 0x300) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19}, 0x42) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f00000008c0)=r4, 0x4) write$tun(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="034886dd09032800050030"], 0xfdef) socket$inet_tcp(0x2, 0x1, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCSIFBR(r5, 0x890c, &(0x7f0000000000)=@add_del={0x2, &(0x7f0000000040)='wg1\x00'}) 2.346490814s ago: executing program 2 (id=2978): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x38, 0x24, 0x3fe3aa0262d8c583, 0x0, 0xfffffffe, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)={0x128, r5, 0x1, 0xfffffffc, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_STA_EXT_CAPABILITY={0x101, 0xac, "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"}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x4}]}, 0x128}}, 0x24008004) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3000000, 0x1010, r4, 0x20612000) r7 = socket$kcm(0x11, 0x3, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="f6ff0300000000000000410000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000000"], 0x3c}}, 0x20000040) sendmsg$kcm(r7, &(0x7f0000000080)={&(0x7f0000000000)=@hci={0x1f, 0x5865, 0x31}, 0x80, &(0x7f0000000500)=[{&(0x7f00000000c0)="b8b28225ea772f0daee8c7c98100", 0xe}], 0x1}, 0x0) r10 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000002c0), r0) r11 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_TIMEOUT(r11, 0x0, 0x48a, &(0x7f0000000140)={0x3, 0x7}, 0xc) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r10, 0x1}, 0x14}}, 0x0) 2.11167864s ago: executing program 2 (id=2982): r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000100), 0x0) 2.052587514s ago: executing program 3 (id=2983): sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000300)={0x0, 0x40}, 0x1, 0x0, 0x0, 0x7125b53aceaf6a0c}, 0x4010) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='\t\x00\x00\x00\n\x00\x00\x00B\x00\x00\x00@\x00'], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000080), 0x200, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0), 0x0, 0x3, r0}, 0x38) r1 = socket(0x1, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)=ANY=[@ANYRES32=r3, @ANYRES32=r2, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r3, &(0x7f0000000180), &(0x7f00000000c0)=@tcp6=r1}, 0x20) bind$unix(r1, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000001680)=[{{&(0x7f0000000380)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}], 0x1, 0x0) recvmmsg(r1, &(0x7f0000000d40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000500)=""/65, 0x41}], 0x1}}], 0x2, 0x0, 0x0) r4 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet_int(r4, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x1}, 0x1c) r5 = socket(0x1, 0x803, 0x0) sendto$unix(r5, 0x0, 0x0, 0x800, &(0x7f0000000700)=@file={0x1, './file0\x00'}, 0x6e) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="180100003e000100fbff0700040000000100000004000000f30001851a13d7f7778a67bbcc66ed45b61d31030eaa4f9f1b827d0fdb931dfebaa4a71104fffff3e3c6ddcc6ba1106ea1ace5af6e56e41ed222b28ea1a9875ae2dead42a8415e41465e7d3744bdf5890b29df5ee661b5417e3411c83e673ad1d336aa041fde40d87b49ec691958f7b80998831dd423d4b3bc48260cc21ae8560863a126f773f7fb2c8598e53755f8d62e8ee6ee2f287d7de97ca69cd03a411bc40b17e6e91d5049384d5a4b44d0ff309d30bd3fa89ae5f8173a8c33632d1b14fc53abdd262cdf84f79c2697edf9c73eaa15a4d2cfa716577e4114", @ANYRES32=r1, @ANYBLOB="0b00df005e245e7d28270000080075000b000000000c0002000000000000000000"], 0x118}, 0x1, 0x0, 0x0, 0x400c850}, 0x4008094) 1.912602574s ago: executing program 2 (id=2986): socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, 0x0, 0x4814) socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000003d80)={0x1, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) syz_emit_ethernet(0x6a, &(0x7f0000000240)={@random="8b44c1531c44", @link_local, @void, {@ipv4={0x800, @gre={{0x6, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x2f, 0x0, @private=0xe0, @multicast1=0xe000c800, {[@ra={0x94, 0x4}]}}, {{0x0, 0x0, 0x1, 0x0, 0xb, 0x0, 0x0, 0x4, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {0x8, 0x88be, 0x0, {{}, 0xfffff788}}}}}}}, 0x0) r1 = socket(0x14, 0x2, 0x4) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000000071041d000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) getsockopt$inet6_mptcp_buf(r1, 0x11c, 0x1, 0x0, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000080), r1) ioctl$FS_IOC_GETFSLABEL(r1, 0x81009431, &(0x7f0000000300)) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r3, &(0x7f0000004380)=[{{&(0x7f0000004440)={0xa, 0x4e22, 0x0, @private1}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000800)='P', 0x1}], 0x1}}], 0x1, 0x0) shutdown(r3, 0x1) setsockopt(r3, 0x84, 0x80, &(0x7f00000002c0)="1af3050000f2bd5b", 0x8) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r3, 0x84, 0x5, &(0x7f0000000380)={0x0, @in={{0x2, 0x6e20, @local}}}, 0x84) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r4, 0x6) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f00000002c0)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x65, 0x0, 0xf, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0xffff}}}}}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000001100)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe0351244d391edad}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x17, 0x3c, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0xa, 0x4, 0x0, 0x0, 0x1000, {[@md5sig={0x13, 0x12, "527b5ff867216b003c9a0e6e83551c2b"}]}}}}}}}, 0x0) 1.785109927s ago: executing program 3 (id=2988): r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000140), &(0x7f0000000180)=0xc) r1 = socket(0x200000000000011, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x18, 0x10, 0x3}, @TCA_FQ_FLOW_MAX_RATE={0x2, 0x2}, @TCA_FQ_QUANTUM={0x2, 0x2, 0x10270000}]}}]}, 0x48}}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000005500e502000000000000000007000000", @ANYRES32=r5, @ANYBLOB="20000100", @ANYRES32=r5], 0x38}}, 0x0) r6 = socket(0x10, 0x803, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001300)={{0x14}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}}, @NFT_MSG_NEWCHAIN={0x34, 0x3, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0xfffc}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x4}]}, @NFT_MSG_DELRULE={0x2c, 0x8, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x9c}}, 0x0) setsockopt$packet_tx_ring(r7, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x1000005, 0x100010, r7, 0x0) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0xc, 0x8, 0x2, 0x3}]}, 0x10) socket$kcm(0x29, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000140), &(0x7f0000000180)=0xc) (async) socket(0x200000000000011, 0x2, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00'}) (async) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x18, 0x10, 0x3}, @TCA_FQ_FLOW_MAX_RATE={0x2, 0x2}, @TCA_FQ_QUANTUM={0x2, 0x2, 0x10270000}]}}]}, 0x48}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) (async) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000005500e502000000000000000007000000", @ANYRES32=r5, @ANYBLOB="20000100", @ANYRES32=r5], 0x38}}, 0x0) (async) socket(0x10, 0x803, 0x0) (async) socket$packet(0x11, 0x3, 0x300) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001300)={{0x14}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}}, @NFT_MSG_NEWCHAIN={0x34, 0x3, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0xfffc}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x4}]}, @NFT_MSG_DELRULE={0x2c, 0x8, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x9c}}, 0x0) (async) setsockopt$packet_tx_ring(r7, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) (async) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x1000005, 0x100010, r7, 0x0) (async) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0xc, 0x8, 0x2, 0x3}]}, 0x10) (async) socket$kcm(0x29, 0x2, 0x0) (async) 1.64068449s ago: executing program 1 (id=2989): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r1, &(0x7f0000000880)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c, 0x0}}, {{&(0x7f00000001c0)={0xa, 0x4e22, 0x8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x1}, 0x1c, 0x0, 0x0, &(0x7f00000004c0)=[@hoplimit={{0x14, 0x29, 0x34, 0xf9b}}], 0x18}}], 0x2, 0x4001) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000003e000701feffffff00000000017c0000040042800c0001800600060008060000200002"], 0x44}, 0x1, 0x0, 0x0, 0x40040c0}, 0xc000) 1.521364415s ago: executing program 1 (id=2990): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x9, 0x0, 0x0, 0x0, 0x0, 0xf}}) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)={0x24, 0x1e, 0x505, 0x0, 0x0, "", [@typed={0x13, 0x12b, 0x0, 0x0, @binary="461dc071caf2d43500d1f6c8a6ef34"}]}, 0x24}], 0x1}, 0x0) 1.512530864s ago: executing program 3 (id=2991): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b7050000000400007910a800000000005d0a0000000000009500000000000000"], &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x2a) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0x10) openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYRESHEX=r1, @ANYRES32=0x1, @ANYBLOB="000000002ae99b6b561b97b20000000000000000", @ANYRES32=0x0, @ANYRESHEX=r3, @ANYBLOB='\x00'/28], 0x48) close(r3) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x43}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x6cc2825284ca98ba}, 0x4048840) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001000010400b5000000000400000000", @ANYRES32=0x0, @ANYBLOB="00000000001400001c00128009000100626f6e64000000"], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@gettclass={0x24, 0x2a, 0x2, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0xffff}, {0x2, 0x5}, {0x14, 0x8}}, ["", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x24008080}, 0x0) r4 = socket$inet(0xa, 0x6, 0x9) connect$inet(r4, &(0x7f0000004cc0)={0x2, 0x6e22, @private=0xa010102}, 0x10) listen(r4, 0x8) r5 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) setsockopt$bt_rfcomm_RFCOMM_LM(r5, 0x12, 0x3, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) setsockopt$packet_add_memb(r7, 0x107, 0x1, 0x0, 0x0) setsockopt$packet_add_memb(r7, 0x107, 0x1, &(0x7f0000000000)={0x0, 0x1, 0x6, @local}, 0x10) setsockopt$inet6_tcp_TCP_CONGESTION(r6, 0x6, 0xd, 0x0, 0x0) bind$inet6(r6, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) 1.392727769s ago: executing program 4 (id=2992): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000580)={'veth1_to_bond\x00', 0x0}) r3 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000300)={r0, r2, 0x25, 0x4}, 0x14) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r6, @ANYBLOB="08002600ad160000400033001000000008021100000008021100000008021100000100000000000001000100"], 0x68}}, 0x0) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x3, &(0x7f0000000480)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000680)={r3, r7, 0x4, r0}, 0x10) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001500010000200000000000000a"], 0x14}}, 0x0) (async) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) unshare(0x22020600) (async) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1e00000000000000ff7f00000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000000000005f0cf953980e2317ef944347d33357a7c4804384c620c"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000080)={r10, 0x0, 0x0, 0x4}, 0x20) sendmsg$NFT_BATCH(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x30, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x4}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x58}}, 0x0) 1.228813706s ago: executing program 1 (id=2993): r0 = socket(0x10, 0x803, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffe91}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r9, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000300)=ANY=[@ANYRES32=r1, @ANYRES32=r1, @ANYBLOB='/\x00'/12, @ANYRES32, @ANYBLOB="dca81f0ccef6a1ec15e8cdf9d58927e39ed2238c9ddc3ceefbbd00c29f5fbca06bc9bccbdaa43f54eefd0016ca323d7d062d8f32046466477fd92bab2521a0d05ec97351d81710e01cfa82c55a1d0f828c057479b7c0cf56d15e62100175e86ea5dcc8283bd46ec06635af96a9555c51543e87062fa9e0ac167b2631dc2dda7846d964ac00ac014c678d92a85a48dac329dd982c3c87d75cad59143ce7981b538515ff049c6fad33c9b155d49543c5b1b90e989a41c1225c717630108a4d7eb26679cb231b05b91f47240c14805b8fb146200feb61e5b99b616e2e", @ANYRES64=0x0], 0x20) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r0, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r10, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xe, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000071103b000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$SIOCSIFHWADDR(r12, 0x8923, &(0x7f00000000c0)={'dummy0\x00', @random="0130210100ff"}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001d00)=ANY=[@ANYBLOB="3c00000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001400128009000100626f6e64000000000400028008000a00", @ANYRES32=r10], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0xc0b0) 1.18684369s ago: executing program 4 (id=2994): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x38, &(0x7f0000000040)=[@in6={0xa, 0x4e22, 0x8, @remote, 0x71c19c0c}, @in6={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x33}}}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000080)=@sack_info={r1, 0x5121, 0xa}, 0xc) 1.088616427s ago: executing program 3 (id=2995): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0200000004000000e27f000001"], 0x50) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000000)={0x44, r2, 0x1, 0x70bd2a, 0x0, {{}, {@void, @val={0x8, 0x3, r3}, @val={0xc, 0x99, {0xfff, 0x2}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'pim6reg0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}, @mon_options]}, 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) r4 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@ipv6_newnexthop={0x34, 0x68, 0x1, 0x70bd25, 0xfffffffe, {}, [@NHA_ENCAP={0xc, 0x8, 0x0, 0x1, @ILA_ATTR_IDENT_TYPE={0x5}}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x7}, @NHA_OIF={0x8, 0x5, r5}]}, 0x34}, 0x1, 0x0, 0x0, 0x8810}, 0x40040d0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000180)={'gre0\x00', &(0x7f0000000080)={'gretap0\x00', 0x0, 0x7800, 0x10, 0x40, 0x5, {{0x2b, 0x4, 0x3, 0x1d, 0xac, 0x67, 0x0, 0xff, 0x29, 0x0, @empty, @rand_addr=0x64010102, {[@cipso={0x86, 0x28, 0x3, [{0x1, 0x6, "fc5d3d84"}, {0x5, 0xb, "90482504543bb7cd87"}, {0x2, 0x11, "c981bc5369d34b90c0b242404675de"}]}, @generic={0x86, 0x5, "43c08c"}, @end, @ssrr={0x89, 0x17, 0xe6, [@loopback, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010102, @rand_addr=0x64010100]}, @timestamp_addr={0x44, 0x2c, 0x33, 0x1, 0x6, [{@rand_addr=0x64010101, 0x5}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}, {@broadcast, 0x8}, {@empty, 0x100}, {@private=0xa010100, 0x1}]}, @ra={0x94, 0x4}, @cipso={0x86, 0x23, 0x2, [{0x2, 0x12, "78b4e2595d7dcaa5c86114d88848be10"}, {0x1, 0xb, "ba6b7d96adb12cbb5b"}]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000380)={'syztnl2\x00', r6, 0x2f, 0x4, 0xf, 0x80000000, 0x13, @remote, @private1, 0x0, 0x700, 0x5, 0x554c7299}}) (async) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000134c2651638af8ff00000000bfa200000000000007020000fcffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000e80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.085528423s ago: executing program 0 (id=2885): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_PMK(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x58, r1, 0x400, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x3, 0x7c}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x58}, 0x1, 0x0, 0x0, 0x801}, 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x8c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r4, {}, {0xffff, 0xffff}, {0x5}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8], 0x0, [0x5, 0x4, 0x2, 0x0, 0x8, 0x1000, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x40800}, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000ec0)=ANY=[@ANYBLOB="580000001000810500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000380012800b000100697036746e6c0000280002800500090000000000050004008000000014000300ff"], 0x58}}, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) r8 = accept4(r7, 0x0, 0x0, 0x0) r9 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r9, 0x8946, &(0x7f0000000300)={'tunl0\x00', &(0x7f0000000280)=@ethtool_gfeatures}) sendmsg$NL80211_CMD_SET_COALESCE(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000700)=ANY=[], 0x240}, 0x1, 0x0, 0x0, 0xd0}, 0x4048010) syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), r8) socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=@newlink={0x48, 0x10, 0x503, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6230}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x18, 0x2, 0x0, 0x1, @val={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x110a1}}}}}}]}, 0x48}}, 0x0) 972.402725ms ago: executing program 4 (id=2996): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x8000, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f000000cbc0)=@newtaction={0xe98, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe70, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe44, 0x2, {{{}, 0x0, 0x0, [{}, {}]}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) socket(0x2a, 0x1, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) sendmsg$netlink(r4, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000003c0)={0x2c, 0x2c, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid=r6}, @nested={0xb, 0x0, 0x0, 0x1, [@generic="976b6408686030"]}, @nested={0x8, 0x1, 0x0, 0x1, [@typed={0x4, 0xf3}]}]}, 0x2c}], 0x1}, 0x0) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x1) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)={0x454, 0x3c, 0x100, 0xfffffff9, 0x0, {0x11, 0x7c}, [@nested={0x29f, 0xab, 0x0, 0x1, [@typed={0x8, 0xe0, 0x0, 0x0, @uid=r6}, @generic="e4a07484aede0d8421886d13d7e829d04d1ce9c0a29a048f1bb994b0afd5303ec80315747158030e72e8c804b7941f95d7be688c77123f90beb268f55e2af9cfb3d9a09dce616632002cfac9759967cf3654d3beefe49d7d9c7d0088031948926f538b492fc69cddd6619f3448af983ae27ceee2a037f381efd3ee1875cdbe88fa4d4683c3773f7a8e52a7248f", @generic="37e8cd1a2e0d37b499d6e1a8cefa747bf4e4d80b1b2faf407ecaffa852e2389f0cb011f0925d88132756b452038630498f6d6acf574a5b9e7726cd8b71013942", @nested={0x1bb, 0x5f, 0x0, 0x1, [@generic="e952ef9d34b48d7677783963e12c86624894686e9c4f85d234ed04f3a34505fa8611d0195d238892205c51613c403992972a701795bb9a9d4138b326dc732830b19dd35463396ced2cbbd1ddb9994d92eebf085fbed7c7cc810cf7ca0849d3f613729540306647b9c55c6698cf8c214e78415d427ca6e3dd2447bc4cf01515ae7c7b2f452989ef0d1f9c17c90873150d23578058dcefd90781291ea0f0feca5a4805e6705ec551e41fbef9b275af1ee48340d714598650446e1cef0db13bac", @typed={0xc9, 0xbf, 0x0, 0x0, @binary="1abfdcd5e12da44bfc31602ac644d685a381a93b612ea37c9714e48065f9379c6f2b39e43b6237e234454bfbec63bc227fb845089b600ff065694910bd1e6435f24a6b2a56fb8e34db7229a940cb6170f650f4e1b78b17a1f4da771bf3e1be750764bff60d8bd557b82d2d1490987c0c29471e953a522a24e9d81a1da09b5d62d396fce426397bb1ed0d303fc847b01c48639934b79a9c265c58f166526101db307cb3f9512e0afbd0aa2be3721b0e5e647b9bd4ae176bb3eb261c1b678b0254416d788328"}, @typed={0x14, 0x88, 0x0, 0x0, @ipv6=@mcast2}, @nested={0x4, 0x14e}, @nested={0x4, 0x136}, @typed={0xc, 0x19, 0x0, 0x0, @u64=0x1}, @nested={0x4, 0x13e}]}, @generic="6e5041008a880b853e47"]}, @generic="c25f512c1abf0d3eda7ca7a3d98421f809b6fae2903954f57dca3ec3867602eaaa6241d56fde98c5062eeaf25553321659e1314446f4ebfce8fa4464177793008d34971937cf86fd3833f239fbaba0de49292e34c2a5bb41f4847ed9ab98b5836b042695bdc34c85de720e07115074b3e7dcf7ffcb18ca70dfb49ce9f1937af0e02eeaabd588a40d1b", @typed={0xc, 0x2b, 0x0, 0x0, @u64=0x8}, @nested={0x105, 0x27, 0x0, 0x1, [@nested={0x8, 0x56, 0x0, 0x1, [@nested={0x4, 0x3f}]}, @generic="245ef98784b69384dab56a56e0a1a6f71fc86ffef23ae4bd29cb445a3596e0501d8cb346a8f4309f33716a4792155d3a19684913eb5f24d1c1055c03f36138d3f54b757b575fabc48cf332cd38450c6598b9bd5c1752d0092e71b6faf38fb7a644cadcfadf8c61178286c26355241da84c9ed7b3409790d289e94f719aaec1791d6758620b9b350d220eeb3c971809f3d4af455891d1d7babcff32bf4198fccccc47a0094b8b565efc82a8f090c5b86fa52d82c4542858699310b6f88cf0538de367", @generic="3c03aabb94ae2ced16687ca577f5178553cde4c4f34eeb9f5d1f6a1df190e66f1d9df210a291567c8b70910de7c4afeeabe92bd106e8fa"]}]}, 0x454}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r7, &(0x7f00000004c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000400)={0x9c, r8, 0x2, 0x70bd25, 0x25dfdbfc, {}, [@NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x2c, 0x5}, @NL802154_ATTR_SEC_ENABLED={0x5}, @NL802154_ATTR_SEC_OUT_KEY_ID={0x68, 0x2b, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x14, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa2}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x20, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}]}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0xa94}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xb27a}]}, @NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x2a, 0x3}, @NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x2c, 0xbbb8}]}, 0x9c}, 0x1, 0x0, 0x0, 0x4044810}, 0x40) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f00000000c0)={'netdevsim0\x00', @broadcast}) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @masq={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_MASQ_FLAGS={0x8, 0x1, 0x1, 0x0, 0x25}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x74}}, 0x0) 846.13638ms ago: executing program 1 (id=2997): r0 = socket$inet6_udp(0xa, 0x2, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r1) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r1, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000480)={0x28, r2, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x3, 0x4d}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x0) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r4, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="219500005c4ff551a8e7ca3e8c0431a04786cd555c3d6040294489d592b5c5809a22a2bb5be39cc63378deab104e0011fe649ace1772af30189e04285b4ef1b05c06e26f2b07e4cf7fe8ac7360a9dfeae50e839896066a9109dc6eb1a4170bf8a48ef3a8a331a2cf7d5b19695aaa054260eb297faa170662807ffe7e46dc4a7237126b56c6aee0653aeaf097942cfc180109064490a3d3dab25fa8f48cc73e430a43c37c0528440bbf7cd5a9953b5b944f1a3affb2b405b871db13e0b36e455f6f821a5b989aa153de54b249955ab2e0c9739a39f690ff19252574673bc44f83ec432682abc144de6911e4b06d52e0b3b02eeb070b137869eff3362bc92a04db8b7d1a38cc27cb71347ca45aae245b8e7f0fd15e203cf00167506274d45e77bb01276e36dd91abcfa1f233850ffe605a53111bb0436bbe849cd989a491088c22e81053b2f280618e3d318045ff20b9f76edfd04a6363a1bbf7ae39edbf1812fff09a88c23c43f1c67f94c4477dfc88ab9f9062687bc127eb377d6357acf583189ea8633691cb4d1db5aa599a98da5b98526bdf07ca3a251ed71ecb774dd364220e55abf2bc7755d9dd26e387dd070d82fd5ec1d1eadeb4aee4022407c01f482a14f78f7c7361d8eae5e8e0b96d437d292c1b66b929c5dffa41237ea9987c0ed9a20d3dd3d91b2c8dceb532c79b05522096bed34f6f8fbed65dc588162522563a390159a73b524009c0d807b7364f8c348420b826afe3af1bab13fb5dd26efd60507a968f3bfe92f6939f1cad73f08883195b8e7b3bd5363194a4ca00edfe369fbab3d644c153e31e0dfdc2309621084ebec2ce6675dc0c29350b7fbadbd9293bb3e62a961999a2bf88eed0177799beb1fb716ca8f013382d598f8e0fbb6a4d4b401098abde0cf801da919b363f6a428a70db115d4e8b44afe0bd18d2695e4da7849756ea8a213efcb3c95cf9454287e9736ddae72d281880dbe7355c06b65db21cf8b82855fd840ac217a76f10f8d61d661b4ad1115f2cab5f2da9fabd62f86e152317536d9444b2d0f6bfc1786babeaab857e3242f0fcc8f644a02e972c553ba9f805cb196aade0c215d8d7", @ANYRES16=r5, @ANYBLOB="476429bd7000fedbdf258100000008000300", @ANYRES32=r6, @ANYBLOB="14003300b4008100ffffffffffff0802110000010a0006000802110000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x814}, 0x0) 650.961277ms ago: executing program 1 (id=2999): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xc}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa30e, 0x1, 0xfffffffa}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000780)=@newtfilter={0x4c, 0x2c, 0xd3f, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0x7, 0xc}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}, @TCA_BPF_CLASSID={0x8, 0x3, {0xfff6, 0xf}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40008cc}, 0x20004004) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000940)=@delchain={0x50, 0x64, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x9}, {0x10, 0xffff}}, [@filter_kind_options=@f_flower={{0xb}, {0xffffffffffffff9f, 0x2, [@TCA_FLOWER_KEY_ENC_IPV6_DST_MASK={0x14, 0x22, [0xffff00, 0xffffffff, 0xffffff00, 0xff]}, @TCA_FLOWER_KEY_ICMPV4_TYPE={0x5}]}}]}, 0x50}}, 0x4040004) 611.661831ms ago: executing program 4 (id=3000): r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'nr0\x00', 0x2000}) (async) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0x3, &(0x7f00000000c0)=0x1000, 0x4) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x4, 0x8002}, 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x90, 0x30, 0xffd7, 0x0, 0x0, {}, [{0x7c, 0x1, [@m_police={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc}}}, @m_gact={0x48, 0x41f, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x2}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x90}}, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xb007}, 0x4) socket$netlink(0x10, 0x3, 0x2) (async) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'nr0\x00', 0x1}) 503.677246ms ago: executing program 2 (id=3001): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008001500b7040000000000008500000058"], 0x0}, 0x94) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r2}, 0x10) 372.636325ms ago: executing program 4 (id=3002): r0 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=@getchain={0x24, 0x65, 0xfcd66a900070b049, 0x0, 0x3, {0x0, 0x0, 0x0, r3, {}, {}, {0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x55}, 0x0) (async, rerun: 32) sendmsg$TIPC_CMD_SHOW_PORTS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r0, 0x0, 0x70bd25, 0x25dfdbfe, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040}, 0x18080) (async, rerun: 32) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=@newlink={0x40, 0x10, 0x401, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bond={{0x9}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0x9}, @IFLA_BOND_ARP_IP_TARGET={0x4}]}}}]}, 0x40}}, 0x8004) 336.58841ms ago: executing program 2 (id=3003): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d4", 0x5) (async) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x80) (async) recvmmsg$unix(r1, &(0x7f0000003680)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/18, 0x12}], 0x1}}], 0x1, 0x2, 0x0) r2 = socket(0x10, 0x3, 0x0) (async) socket$inet6(0xa, 0xa, 0x9) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000180)={0x1000003}, 0x10) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)={@broadcast, @loopback}, 0xc) (async) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x2, 0x0, 0x25dfdbfe, {{@in6=@private0, @in=@remote, 0x0, 0x400, 0x0, 0x0, 0xa, 0x60, 0x0, 0x3b, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xffffffffffffffff}, {0x3}, 0x6}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000001e00010000000000000000000710"], 0x1c}}, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e99900000000fedbdf25fc000000000000000000000000000000ac1414bb00000000000000000000000000000400000000000a0060", @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\t\x00'/110], 0xb8}, 0x1, 0x0, 0x0, 0xc0}, 0x0) (async) sendmsg$nl_xfrm(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x9, 0xfffffffffffffffe}, {0x0, 0x0, 0x1}}}, 0xb8}}, 0x4000) (async) r8 = socket(0x840000000002, 0x3, 0x100) setsockopt$inet_msfilter(r8, 0x0, 0x21, &(0x7f00000000c0)=ANY=[], 0x14) (async) write(r2, &(0x7f00000000c0)="2400000012005fe914f9f407000904001f000000fe0000000000000008000f00fd000000", 0x24) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0xb, &(0x7f00000009c0)=@framed={{}, [@printk={@p, {0x3, 0x0, 0x6, 0xa, 0x1, 0xfff8, 0xa1}, {}, {0x7, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffe00}, {}, {}, {0x85, 0x0, 0x0, 0x76}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) sendmsg$ETHTOOL_MSG_RINGS_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r9, @ANYBLOB="010b000000000000000011"], 0x14}}, 0x0) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADD(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0) 92.646331ms ago: executing program 4 (id=3004): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xb, &(0x7f00000003c0)=ANY=[@ANYBLOB="18020000dc36000000000000000000001801400020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000036e0000009500000000000000994dfb99279cef93e12e0eceea53ce7ac91f1478b82211778cdd8ada7b2d73a16635083da38ba39c8aeaa6cbe4e9e9da922d9df421211951c0b9b8c7f7e198d60a56b117562738627608bbb6ba093190603a3906165f278d8b44a59afc4f715823f7d42922c7604d0f01197d9cad11aa3582e8a87c3f23542ddde527efe00c612826fdf349ef5eb135541bcde541aef8cda16602a89c95ecbc36bbbd8432fd3da915ef82cbd3a87d17ed3c37d5e2f852401378d9e9befa09729bc29af68da019a177f09989bebf6ac73fe418a3a2eaa6b0ab2e90992b751188000aba8d5376a3dbbe145d604e057ed8c451fc267ac4eb2033a875405ae791260d40"], &(0x7f0000000180)='GPL\x00'}, 0x90) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x7, 0x4932, 0x7f, 0x1, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0xca, r1}, 0x38) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600) close(r1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r1}, &(0x7f00000000c0), &(0x7f0000000100)=r2}, 0x20) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_MATCH_INFO={0x18, 0x3, "d67a8527f76ec1d39e537c4c3060c6a405106c72"}, @NFTA_MATCH_NAME={0x8, 0x1, 'bpf\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}}, 0x4048010) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) 16.712244ms ago: executing program 2 (id=3005): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x7) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x8}, {0xfff1, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, r3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, 0x0) r5 = socket(0x14, 0x2, 0x4) ioctl$sock_SIOCGIFINDEX(r5, 0x61d0, &(0x7f0000000100)={'dvmrp0\x00'}) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000a80)=@delchain={0x2c, 0x64, 0xf31, 0xffffffff, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xfff3, 0xffff}, {0xe, 0x1b}}, [@TCA_CHAIN={0x8, 0xb, 0xffff647b}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x0) 15.506451ms ago: executing program 0 (id=3006): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x0, &(0x7f0000000140)}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000020000002c00048028000180080001006f7366001c0002800800014000000000080003400500000105000200000000000900010073797a30000000000900020073797a32"], 0x80}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x10, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="18000000000000000000000f0000000071100100000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x94) getsockopt$ARPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x63, &(0x7f0000000000)={'IDLETIMER\x00'}, &(0x7f0000000040)=0x1e) 0s ago: executing program 1 (id=3007): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b708000000000000738af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000485000000a600000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1d, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) (async) recvmmsg(r2, &(0x7f0000002840)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000007c0)=""/65, 0x41}], 0x1, &(0x7f0000000880)=""/98, 0x62}, 0x933}], 0x2, 0x10020, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) kernel console output (not intermixed with test programs): ireguard0 is of different type [ 134.182346][ T7734] netlink: 212316 bytes leftover after parsing attributes in process `syz.2.492'. [ 134.326147][ T7736] netlink: 64 bytes leftover after parsing attributes in process `syz.1.491'. [ 134.335380][ T7737] netlink: 64 bytes leftover after parsing attributes in process `syz.1.491'. [ 134.357804][ T7742] netlink: 64 bytes leftover after parsing attributes in process `syz.2.493'. [ 134.379293][ T7742] netlink: 36 bytes leftover after parsing attributes in process `syz.2.493'. [ 134.465934][ T7747] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.496'. [ 134.496698][ T7747] netlink: 12 bytes leftover after parsing attributes in process `syz.4.496'. [ 134.579778][ T7747] netlink: 4 bytes leftover after parsing attributes in process `syz.4.496'. [ 134.624842][ T7757] netlink: 8 bytes leftover after parsing attributes in process `syz.3.498'. [ 134.673340][ T7757] netlink: 'syz.3.498': attribute type 1 has an invalid length. [ 134.699287][ T7757] netlink: 'syz.3.498': attribute type 1 has an invalid length. [ 135.097763][ T7783] netlink: 'syz.2.504': attribute type 9 has an invalid length. [ 135.167699][ T7783] netlink: 'syz.2.504': attribute type 9 has an invalid length. [ 135.494397][ T7806] can: request_module (can-proto-5) failed. [ 135.939135][ T7842] netlink: 'syz.3.521': attribute type 5 has an invalid length. [ 136.316196][ T7862] pim6reg1: entered promiscuous mode [ 136.324003][ T7862] pim6reg1: entered allmulticast mode [ 136.474622][ T7873] tipc: Enabled bearer , priority 10 [ 136.754704][ T7890] : entered promiscuous mode [ 137.038005][ T7903] netlink: 'syz.3.543': attribute type 1 has an invalid length. [ 137.066232][ T7903] netlink: 'syz.3.543': attribute type 2 has an invalid length. [ 137.125124][ T7915] net_ratelimit: 20 callbacks suppressed [ 137.125147][ T7915] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048) [ 137.590750][ T5872] tipc: Node number set to 387249021 [ 137.962023][ T5872] hid-generic 0005:16BF:5505.0001: unknown main item tag 0x0 [ 137.976404][ T5872] hid-generic 0005:16BF:5505.0001: hidraw0: BLUETOOTH HID vc3.b8 Device [syz0] on aa:aa:aa:aa:aa:aa [ 138.721315][ T7981] netlink: 'syz.0.559': attribute type 6 has an invalid length. [ 138.729544][ T7981] netlink: 'syz.0.559': attribute type 1 has an invalid length. [ 138.740191][ T7981] __nla_validate_parse: 16 callbacks suppressed [ 138.740212][ T7981] netlink: 181400 bytes leftover after parsing attributes in process `syz.0.559'. [ 139.389209][ T7983] netlink: 248 bytes leftover after parsing attributes in process `syz.0.559'. [ 139.802387][ T8009] syzkaller1: entered promiscuous mode [ 139.817856][ T8009] syzkaller1: entered allmulticast mode [ 139.995470][ T8013] bond1: entered promiscuous mode [ 139.996220][ T8025] netlink: 36 bytes leftover after parsing attributes in process `syz.0.572'. [ 140.002200][ T8023] netlink: 12 bytes leftover after parsing attributes in process `syz.1.571'. [ 140.039907][ T8013] bond1: entered allmulticast mode [ 140.049072][ T8013] 8021q: adding VLAN 0 to HW filter on device bond1 [ 140.064945][ T8030] netlink: 1760 bytes leftover after parsing attributes in process `syz.0.572'. [ 140.178008][ T8025] netlink: 28 bytes leftover after parsing attributes in process `syz.0.572'. [ 140.335069][ T8030] bond1 (unregistering): Released all slaves [ 140.350423][ T8031] netlink: 28 bytes leftover after parsing attributes in process `syz.0.572'. [ 140.462366][ T8051] sctp: [Deprecated]: syz.4.578 (pid 8051) Use of struct sctp_assoc_value in delayed_ack socket option. [ 140.462366][ T8051] Use struct sctp_sack_info instead [ 140.880782][ T8061] syzkaller0: entered promiscuous mode [ 140.907153][ T8061] syzkaller0: entered allmulticast mode [ 140.984685][ T8068] netlink: 20 bytes leftover after parsing attributes in process `syz.1.582'. [ 141.004232][ T8068] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 141.242302][ T8085] netlink: 12 bytes leftover after parsing attributes in process `syz.1.586'. [ 141.274233][ T8081] tipc: Enabling of bearer rejected, failed to enable media [ 141.580652][ T8088] macvlan2: entered promiscuous mode [ 141.585718][ T8099] netlink: 4 bytes leftover after parsing attributes in process `syz.3.589'. [ 141.619433][ T8088] macvlan2: entered allmulticast mode [ 141.685728][ T8088] bond2: entered promiscuous mode [ 141.698045][ T8088] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 141.772843][ T8088] bond2: left promiscuous mode [ 142.195958][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 142.202674][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 142.209325][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 142.215781][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 142.223835][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 142.231744][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 142.239791][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 142.247698][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 142.255682][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 142.263650][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 142.271678][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 142.279588][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 142.287605][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 142.295458][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 142.303554][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 142.311455][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 142.319476][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 142.327372][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 143.314412][ T8164] veth1_to_bond: entered allmulticast mode [ 143.335737][ T8165] netlink: 'syz.4.608': attribute type 21 has an invalid length. [ 143.453468][ T8164] bond0: (slave bond_slave_1): Releasing backup interface [ 143.502879][ T8164] veth1_to_bond (unregistering): left allmulticast mode [ 143.520764][ T30] audit: type=1800 audit(1755733849.432:2): pid=8179 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.612" name="memory.events" dev="tmpfs" ino=636 res=0 errno=0 [ 143.548641][ T8175] tipc: Enabled bearer , priority 0 [ 143.559000][ T8176] netlink: 'syz.3.607': attribute type 1 has an invalid length. [ 143.567495][ T8177] syzkaller0: entered promiscuous mode [ 143.573744][ T8177] syzkaller0: entered allmulticast mode [ 143.597494][ T30] audit: type=1804 audit(1755733849.462:3): pid=8185 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.612" name="/newroot/121/memory.events" dev="tmpfs" ino=636 res=1 errno=0 [ 143.623178][ T30] audit: type=1800 audit(1755733849.472:4): pid=8180 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.612" name="memory.events" dev="tmpfs" ino=636 res=0 errno=0 [ 143.728097][ T8165] tipc: Resetting bearer [ 143.743693][ T8163] tipc: Resetting bearer [ 143.793952][ T8163] tipc: Disabling bearer [ 143.882483][ T8194] __nla_validate_parse: 5 callbacks suppressed [ 143.882509][ T8194] netlink: 24 bytes leftover after parsing attributes in process `syz.3.616'. [ 144.043095][ T8199] netlink: 12 bytes leftover after parsing attributes in process `syz.4.618'. [ 144.094356][ T8201] netlink: 8 bytes leftover after parsing attributes in process `syz.2.619'. [ 144.339628][ T8208] netlink: 244 bytes leftover after parsing attributes in process `syz.4.622'. [ 144.603756][ T8226] netlink: 8 bytes leftover after parsing attributes in process `syz.3.628'. [ 144.615709][ T8232] netlink: 8 bytes leftover after parsing attributes in process `syz.4.629'. [ 144.640481][ T8235] netlink: 8 bytes leftover after parsing attributes in process `syz.0.630'. [ 144.671119][ T8238] netlink: 20 bytes leftover after parsing attributes in process `syz.0.630'. [ 144.686090][ T8232] netlink: 40 bytes leftover after parsing attributes in process `syz.4.629'. [ 144.735011][ T30] audit: type=1800 audit(1755733850.652:5): pid=8241 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.626" name=4996AE17DFFC2E43C8174B54B620636894AAACF28FF62616363C70A440AEC4014CAF28C0ADC04308 dev="tmpfs" ino=654 res=0 errno=0 [ 144.896595][ T8249] sctp: [Deprecated]: syz.3.632 (pid 8249) Use of int in max_burst socket option deprecated. [ 144.896595][ T8249] Use struct sctp_assoc_value instead [ 144.976314][ T8252] netlink: 9 bytes leftover after parsing attributes in process `syz.4.633'. [ 144.988110][ T8252] gretap0: entered promiscuous mode [ 145.001567][ T8252] 0{X: renamed from gretap0 [ 145.016328][ T8252] 0{X: left promiscuous mode [ 145.031561][ T8252] 0{X: entered allmulticast mode [ 145.049397][ T8252] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 145.116703][ T8258] netlink: 'syz.1.636': attribute type 11 has an invalid length. [ 145.168800][ T8261] netlink: 'syz.0.637': attribute type 12 has an invalid length. [ 145.653157][ T8286] netlink: 'syz.4.645': attribute type 1 has an invalid length. [ 145.992540][ T8302] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 146.002637][ T8300] netlink: 'syz.3.650': attribute type 1 has an invalid length. [ 146.024186][ T8300] netlink: 'syz.3.650': attribute type 1 has an invalid length. [ 146.040957][ T8280] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 146.147800][ T8302] netlink: 'syz.2.651': attribute type 3 has an invalid length. [ 146.165805][ T8302] veth0_to_bridge: entered promiscuous mode [ 146.174002][ T8302] veth0_to_bridge: left promiscuous mode [ 146.749040][ T8333] tipc: New replicast peer: 255.255.255.255 [ 146.782259][ T8333] tipc: Enabled bearer , priority 10 [ 146.921551][ T8343] gretap0: entered promiscuous mode [ 146.934804][ T8343] 0{X: renamed from gretap0 [ 146.964056][ T8343] 0{X: left promiscuous mode [ 146.978618][ T8343] 0{X: entered allmulticast mode [ 146.986626][ T8345] netlink: 'syz.4.663': attribute type 6 has an invalid length. [ 147.009379][ T8343] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 147.069891][ T8349] ieee802154 phy0 wpan0: encryption failed: -22 [ 147.083770][ T8350] netlink: 'syz.0.667': attribute type 21 has an invalid length. [ 147.310407][ T8357] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 147.950003][ T8401] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 148.469689][ T8429] nbd: socks must be embedded in a SOCK_ITEM attr [ 148.923112][ T8441] tipc: Enabling of bearer rejected, failed to enable media [ 149.060400][ T8447] __nla_validate_parse: 16 callbacks suppressed [ 149.060427][ T8447] netlink: 32 bytes leftover after parsing attributes in process `syz.2.687'. [ 150.083114][ T8488] validate_nla: 1 callbacks suppressed [ 150.083136][ T8488] netlink: 'syz.2.696': attribute type 1 has an invalid length. [ 150.089038][ T8486] netlink: 32 bytes leftover after parsing attributes in process `syz.0.695'. [ 150.108863][ T8490] netlink: 28 bytes leftover after parsing attributes in process `syz.4.697'. [ 150.118446][ T8491] netlink: 28 bytes leftover after parsing attributes in process `syz.4.697'. [ 150.147696][ T8490] netlink: 'syz.4.697': attribute type 7 has an invalid length. [ 150.162324][ T8491] netlink: 'syz.4.697': attribute type 7 has an invalid length. [ 150.170393][ T8490] netlink: 'syz.4.697': attribute type 8 has an invalid length. [ 150.170427][ T8490] netlink: 4 bytes leftover after parsing attributes in process `syz.4.697'. [ 150.218786][ T8491] netlink: 'syz.4.697': attribute type 8 has an invalid length. [ 150.230494][ T8491] netlink: 4 bytes leftover after parsing attributes in process `syz.4.697'. [ 150.240649][ T8488] gretap0: entered promiscuous mode [ 150.253716][ T8488] bond2: (slave gretap0): making interface the new active one [ 150.262400][ T8488] bond2: (slave gretap0): Enslaving as an active interface with an up link [ 150.396219][ T8488] syzkaller0: entered promiscuous mode [ 150.410872][ T8488] syzkaller0: entered allmulticast mode [ 150.532406][ T8488] macvlan0: entered promiscuous mode [ 150.562395][ T8488] macvlan0: entered allmulticast mode [ 150.592160][ T8488] bond2: entered promiscuous mode [ 150.617433][ T8488] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 150.644532][ T8488] bond2: (slave macvlan0): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 150.707587][ T8488] bond2: left promiscuous mode [ 152.423876][ T8536] bridge1: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 152.643909][ T8552] netlink: 8 bytes leftover after parsing attributes in process `syz.0.712'. [ 152.879215][ T8566] tipc: Enabled bearer , priority 0 [ 152.891640][ T8566] syzkaller0: entered promiscuous mode [ 152.899076][ T8566] syzkaller0: entered allmulticast mode [ 153.006524][ T8566] tipc: Resetting bearer [ 153.053548][ T8562] tipc: Resetting bearer [ 153.182628][ T8562] tipc: Disabling bearer [ 153.189281][ T8583] netlink: 20 bytes leftover after parsing attributes in process `syz.4.722'. [ 153.296456][ T8589] delete_channel: no stack [ 153.398082][ T8596] netlink: 4 bytes leftover after parsing attributes in process `syz.3.724'. [ 153.441119][ T8596] nbd: must specify at least one socket [ 153.512333][ T8609] netlink: 'syz.4.728': attribute type 5 has an invalid length. [ 153.551324][ T8609] netlink: 12 bytes leftover after parsing attributes in process `syz.4.728'. [ 154.308540][ T8650] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 154.404733][ T8659] __nla_validate_parse: 1 callbacks suppressed [ 154.404757][ T8659] netlink: 20 bytes leftover after parsing attributes in process `syz.4.742'. [ 154.656127][ T8670] netlink: 232 bytes leftover after parsing attributes in process `syz.0.746'. [ 154.726459][ T8674] netlink: 4 bytes leftover after parsing attributes in process `syz.2.747'. [ 154.925895][ T8674] hsr_slave_1 (unregistering): left promiscuous mode [ 154.972733][ T8680] tipc: Enabling of bearer rejected, already enabled [ 154.983948][ T8680] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00aa [ 155.238289][ T8701] netlink: 28 bytes leftover after parsing attributes in process `syz.4.753'. [ 155.341523][ T8704] netlink: 'syz.1.754': attribute type 1 has an invalid length. [ 155.362065][ T8704] netlink: 224 bytes leftover after parsing attributes in process `syz.1.754'. [ 155.371292][ T8704] netlink: 8 bytes leftover after parsing attributes in process `syz.1.754'. [ 155.572196][ T8728] netlink: 14544 bytes leftover after parsing attributes in process `syz.3.760'. [ 155.576958][ T8724] sctp: [Deprecated]: syz.1.761 (pid 8724) Use of int in max_burst socket option. [ 155.576958][ T8724] Use struct sctp_assoc_value instead [ 155.619466][ T8729] netlink: 14544 bytes leftover after parsing attributes in process `syz.3.760'. [ 155.723033][ T8737] netlink: 8 bytes leftover after parsing attributes in process `syz.2.763'. [ 155.835544][ T8745] bridge_slave_0: left allmulticast mode [ 155.842764][ T8745] bridge_slave_0: left promiscuous mode [ 155.854547][ T8745] bridge0: port 1(bridge_slave_0) entered disabled state [ 155.886123][ T8745] bond0: (slave bridge_slave_1): Releasing backup interface [ 155.900002][ T8745] bond0: (slave bond_slave_0): Releasing backup interface [ 155.916513][ T8745] bond0: (slave bond_slave_1): Releasing backup interface [ 155.931071][ T8745] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 155.938653][ T8745] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 155.952436][ T8745] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 155.961056][ T8745] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 156.132230][ T8762] netlink: 24 bytes leftover after parsing attributes in process `syz.4.767'. [ 156.285781][ T8765] sch_tbf: burst 88 is lower than device veth5 mtu (1514) ! [ 156.562039][ T8774] geneve2: entered promiscuous mode [ 157.105420][ T8808] bridge_slave_0: default FDB implementation only supports local addresses [ 157.435062][ T8821] batadv_slave_0: entered promiscuous mode [ 157.488727][ T8820] batadv_slave_0: left promiscuous mode [ 157.804531][ T8841] netlink: 'syz.1.795': attribute type 1 has an invalid length. [ 158.008975][ T8841] 8021q: adding VLAN 0 to HW filter on device bond3 [ 158.167792][ T8854] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 158.709807][ T8888] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.739899][ T8888] netlink: 'syz.3.806': attribute type 1 has an invalid length. [ 158.808075][ T8888] bond2 (unregistering): Released all slaves [ 159.180089][ T8909] tipc: Enabled bearer , priority 0 [ 159.208081][ T8909] syzkaller0: entered promiscuous mode [ 159.227106][ T8909] syzkaller0: entered allmulticast mode [ 159.368801][ T8909] tipc: Resetting bearer [ 159.465301][ T8908] tipc: Resetting bearer [ 159.528453][ T8908] tipc: Disabling bearer [ 159.641947][ T8948] __nla_validate_parse: 7 callbacks suppressed [ 159.641969][ T8948] netlink: 12 bytes leftover after parsing attributes in process `syz.2.818'. [ 159.730296][ T8935] netlink: 'syz.1.816': attribute type 2 has an invalid length. [ 159.740664][ T8949] netlink: 12 bytes leftover after parsing attributes in process `syz.2.818'. [ 160.044744][ T8968] netlink: 'syz.2.823': attribute type 2 has an invalid length. [ 160.052838][ T8968] netlink: 8 bytes leftover after parsing attributes in process `syz.2.823'. [ 160.215727][ T8973] sctp: [Deprecated]: syz.3.824 (pid 8973) Use of int in max_burst socket option deprecated. [ 160.215727][ T8973] Use struct sctp_assoc_value instead [ 160.243110][ T8965] syzkaller1: entered promiscuous mode [ 160.245732][ T8975] netlink: 16 bytes leftover after parsing attributes in process `syz.2.825'. [ 160.249613][ T8965] syzkaller1: entered allmulticast mode [ 160.291722][ T8975] team0: No ports can be present during mode change [ 160.545553][ T8988] xfrm1: entered promiscuous mode [ 160.741965][ T8994] netlink: 24 bytes leftover after parsing attributes in process `syz.3.832'. [ 161.128554][ T9009] netlink: 20 bytes leftover after parsing attributes in process `syz.1.837'. [ 161.169198][ T9016] netlink: 16 bytes leftover after parsing attributes in process `syz.3.839'. [ 161.318704][ T9020] netlink: 'syz.4.840': attribute type 3 has an invalid length. [ 161.325196][ T9021] netlink: 12 bytes leftover after parsing attributes in process `syz.3.841'. [ 161.358173][ T9021] netlink: 696 bytes leftover after parsing attributes in process `syz.3.841'. [ 161.403299][ T9021] netlink: 8 bytes leftover after parsing attributes in process `syz.3.841'. [ 161.416220][ T9021] netlink: 'syz.3.841': attribute type 1 has an invalid length. [ 162.590892][ T9034] Bluetooth: MGMT ver 1.23 [ 162.614756][ T9033] delete_channel: no stack [ 162.643773][ T9033] netlink: 'syz.1.846': attribute type 3 has an invalid length. [ 163.048507][ T9057] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 163.558993][ T9090] tipc: Enabling of bearer rejected, failed to enable media [ 163.604673][ T9090] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 163.634699][ T9090] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 163.658874][ T9090] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 163.801163][ T9099] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 164.043417][ T9113] netlink: 'syz.3.873': attribute type 9 has an invalid length. [ 164.079636][ T9113] macvlan2: entered promiscuous mode [ 164.098128][ T9113] netlink: 'syz.3.873': attribute type 9 has an invalid length. [ 164.136281][ T9113] macvlan3: entered promiscuous mode [ 164.177577][ T9116] netlink: 'syz.0.874': attribute type 1 has an invalid length. [ 164.185379][ T9116] netlink: 'syz.0.874': attribute type 3 has an invalid length. [ 164.321070][ T9124] netlink: 'syz.3.876': attribute type 10 has an invalid length. [ 164.338900][ T9124] team0: Device ipvlan1 failed to register rx_handler [ 164.677426][ T9151] pim6reg: entered allmulticast mode [ 164.691014][ T9143] __nla_validate_parse: 7 callbacks suppressed [ 164.691033][ T9143] netlink: 12 bytes leftover after parsing attributes in process `syz.0.881'. [ 164.747585][ T9155] !: renamed from dummy0 (while UP) [ 164.858669][ T9157] netlink: 'syz.3.888': attribute type 23 has an invalid length. [ 164.912351][ T9157] netlink: 32 bytes leftover after parsing attributes in process `syz.3.888'. [ 165.032696][ T9165] netlink: 20 bytes leftover after parsing attributes in process `syz.1.891'. [ 165.056958][ T9165] netlink: 20 bytes leftover after parsing attributes in process `syz.1.891'. [ 165.251138][ T9179] tipc: Enabled bearer , priority 0 [ 165.259663][ T9179] syzkaller0: entered promiscuous mode [ 165.275753][ T9179] syzkaller0: entered allmulticast mode [ 165.443605][ T9194] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 165.507662][ T9179] tipc: Resetting bearer [ 165.572922][ T9176] tipc: Resetting bearer [ 165.636556][ T9200] netlink: 'syz.1.897': attribute type 1 has an invalid length. [ 165.734631][ T9176] tipc: Disabling bearer [ 165.874053][ T9212] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 165.885652][ T5944] IPVS: starting estimator thread 0... [ 166.014208][ T9224] netlink: 24 bytes leftover after parsing attributes in process `syz.2.904'. [ 166.025399][ T9219] IPVS: using max 26 ests per chain, 62400 per kthread [ 166.060285][ T9225] netlink: 232 bytes leftover after parsing attributes in process `syz.4.903'. [ 166.091389][ T9225] netlink: 8 bytes leftover after parsing attributes in process `syz.4.903'. [ 166.167132][ T9230] syzkaller1: entered promiscuous mode [ 166.186650][ T9230] syzkaller1: entered allmulticast mode [ 166.197959][ T9238] netlink: 4 bytes leftover after parsing attributes in process `syz.1.908'. [ 166.213696][ T9224] syzkaller1: entered promiscuous mode [ 166.230907][ T9224] syzkaller1: entered allmulticast mode [ 166.372422][ T9230] bond2: entered promiscuous mode [ 166.378002][ T9230] bond2: entered allmulticast mode [ 166.395486][ T9247] netlink: 'syz.4.909': attribute type 2 has an invalid length. [ 166.403919][ T9230] 8021q: adding VLAN 0 to HW filter on device bond2 [ 166.424109][ T9249] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 166.425783][ T9248] IPVS: stopping master sync thread 9249 ... [ 166.641986][ T9258] netlink: 4 bytes leftover after parsing attributes in process `syz.1.914'. [ 166.688959][ T9264] netlink: 'syz.2.915': attribute type 1 has an invalid length. [ 166.907211][ T9277] netlink: 8 bytes leftover after parsing attributes in process `syz.4.919'. [ 167.650673][ T9324] veth9: entered allmulticast mode [ 167.755572][ T9327] veth11: entered allmulticast mode [ 167.787094][ T6847] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 167.804019][ T6847] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 167.822266][ T6847] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 167.836117][ T6847] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 169.115974][ T9399] netlink: 'syz.2.956': attribute type 1 has an invalid length. [ 169.835474][ T9403] vlan0: left allmulticast mode [ 169.841164][ T9403] veth0_vlan: left allmulticast mode [ 169.846508][ T9403] vlan0: left promiscuous mode [ 169.852287][ T9403] macvtap1: left promiscuous mode [ 169.857898][ T9403] macvtap1: left allmulticast mode [ 169.961930][ T6842] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 170.006963][ T6842] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.015947][ T6842] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 170.018286][ T9426] xt_limit: Overflow, try lower: 271964/0 [ 170.041399][ T6842] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.059883][ T6842] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 170.069551][ T6842] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.085170][ T9429] openvswitch: netlink: Message has 4 unknown bytes. [ 170.139217][ T6842] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 170.162976][ T6842] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.163062][ T9431] __nla_validate_parse: 12 callbacks suppressed [ 170.163080][ T9431] netlink: 12 bytes leftover after parsing attributes in process `syz.2.964'. [ 170.226253][ T9434] netlink: 20 bytes leftover after parsing attributes in process `syz.1.965'. [ 170.227476][ T9431] netlink: 12 bytes leftover after parsing attributes in process `syz.2.964'. [ 170.261251][ T9434] netlink: 20 bytes leftover after parsing attributes in process `syz.1.965'. [ 170.963094][ T9476] netlink: 8 bytes leftover after parsing attributes in process `syz.4.978'. [ 170.983153][ T9473] 8021q: adding VLAN 0 to HW filter on device bond4 [ 170.992406][ T9473] team0: Port device bond4 added [ 171.072814][ T9484] netlink: 'syz.3.982': attribute type 30 has an invalid length. [ 171.235773][ T9494] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 171.315882][ T9501] netlink: 12 bytes leftover after parsing attributes in process `syz.3.986'. [ 171.511133][ T9506] netlink: 48 bytes leftover after parsing attributes in process `syz.3.986'. [ 171.716567][ T6840] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 171.757040][ T6840] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 171.884227][ T9532] netlink: 24 bytes leftover after parsing attributes in process `syz.1.996'. [ 172.021885][ T9544] netlink: 20 bytes leftover after parsing attributes in process `syz.2.999'. [ 172.060288][ T9548] (unnamed net_device) (uninitialized): Unable to set down delay as MII monitoring is disabled [ 172.149343][ T9551] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1002'. [ 172.427868][ T9574] netlink: 'syz.2.1008': attribute type 33 has an invalid length. [ 172.587667][ T5873] Bluetooth: hci0: command 0x0c1a tx timeout [ 172.589061][ T5882] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 172.802967][ T9591] sctp: [Deprecated]: syz.1.1014 (pid 9591) Use of int in max_burst socket option deprecated. [ 172.802967][ T9591] Use struct sctp_assoc_value instead [ 172.968538][ T9603] netlink: 'syz.3.1019': attribute type 1 has an invalid length. [ 173.075006][ T9605] netlink: 'syz.0.1018': attribute type 10 has an invalid length. [ 173.160384][ T9607] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.304646][ T9621] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 173.412633][ T9607] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 173.431955][ T9607] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 173.591514][ T9607] team1: left promiscuous mode [ 173.599113][ T9607] ipvlan2: left promiscuous mode [ 173.607086][ T9607] vlan0: left allmulticast mode [ 173.612004][ T9607] veth0_vlan: left allmulticast mode [ 173.617930][ T9607] vlan0: left promiscuous mode [ 173.623413][ T9607] macvtap1: left promiscuous mode [ 173.632819][ T9607] bond1: left promiscuous mode [ 173.639994][ T9607] macvlan2: left promiscuous mode [ 173.645304][ T9607] macvlan3: left promiscuous mode [ 173.651957][ T9607] bond2: left promiscuous mode [ 173.690807][ T9605] bridge0: port 1(dummy0) entered blocking state [ 173.697942][ T9605] bridge0: port 1(dummy0) entered disabled state [ 173.704683][ T9605] dummy0: entered allmulticast mode [ 173.713083][ T9605] dummy0: left allmulticast mode [ 173.718741][ T9605] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 173.771530][ T9623] vlan2: entered allmulticast mode [ 173.782308][ T9623] mac80211_hwsim hwsim10 wlan0: entered allmulticast mode [ 173.822235][ T6840] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.851622][ T6840] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.932641][ T6840] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.951566][ T6840] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.024920][ T9639] netlink: 'syz.2.1029': attribute type 15 has an invalid length. [ 174.087766][ T9639] netlink: 'syz.2.1029': attribute type 15 has an invalid length. [ 174.192147][ T9651] netlink: 'syz.3.1031': attribute type 30 has an invalid length. [ 174.282085][ T9662] netlink: 'syz.2.1035': attribute type 1 has an invalid length. [ 174.329852][ T9665] netlink: 'syz.3.1031': attribute type 21 has an invalid length. [ 174.597578][ T9677] netlink: 'syz.4.1040': attribute type 33 has an invalid length. [ 174.677282][ T9673] nbd1: detected capacity change from 0 to 127 [ 174.882705][ T9690] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 174.940618][ T5882] block nbd1: Receive control failed (result -32) [ 174.952135][ T9693] netdevsim netdevsim4: Direct firmware load for failed with error -2 [ 174.983325][ T9693] netdevsim netdevsim4: Falling back to sysfs fallback for: [ 175.112950][ T9697] tipc: Enabled bearer , priority 0 [ 175.122527][ T9697] syzkaller0: entered promiscuous mode [ 175.128232][ T9697] syzkaller0: entered allmulticast mode [ 175.167726][ T9697] tipc: Resetting bearer [ 175.186534][ T9696] tipc: Resetting bearer [ 175.260295][ T9706] __nla_validate_parse: 13 callbacks suppressed [ 175.260320][ T9706] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1050'. [ 175.285036][ T9696] tipc: Disabling bearer [ 175.517439][ T9720] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 175.586539][ T9731] netlink: 'syz.2.1055': attribute type 1 has an invalid length. [ 176.033866][ T9753] tipc: Enabled bearer , priority 0 [ 176.158126][ T9753] syzkaller0: entered promiscuous mode [ 176.169913][ T9753] syzkaller0: entered allmulticast mode [ 176.232634][ T9753] tipc: Resetting bearer [ 176.250895][ T9753] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1063'. [ 176.273097][ T9753] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1063'. [ 176.294343][ T9753] gretap0: entered promiscuous mode [ 176.303154][ T9753] gretap0: left promiscuous mode [ 176.332525][ T9767] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1067'. [ 176.332862][ T9764] 8021q: adding VLAN 0 to HW filter on device ipvlan3 [ 176.372318][ T9752] tipc: Resetting bearer [ 176.424565][ T9752] tipc: Disabling bearer [ 176.642811][ T9781] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1071'. [ 177.227572][ T9823] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1084'. [ 177.270662][ T9825] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1085'. [ 177.282254][ T9830] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1086'. [ 177.295564][ T9825] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1085'. [ 177.656641][ T9854] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1093'. [ 178.352608][ T9881] validate_nla: 1 callbacks suppressed [ 178.352630][ T9881] netlink: 'syz.3.1103': attribute type 2 has an invalid length. [ 178.355239][ T9871] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 178.512097][ T9871] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 178.572172][ T9892] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 178.846220][ T9903] netem: change failed [ 179.953329][ T9945] batadv_slave_1: entered promiscuous mode [ 180.013212][ T9943] batadv_slave_1: left promiscuous mode [ 180.316465][ T9962] __nla_validate_parse: 5 callbacks suppressed [ 180.316489][ T9962] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1127'. [ 180.359417][ T9968] netlink: 'syz.3.1128': attribute type 12 has an invalid length. [ 180.367550][ T9968] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1128'. [ 180.402965][ T6847] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 180.403080][ T9968] netlink: 'syz.3.1128': attribute type 12 has an invalid length. [ 180.439202][ T6847] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 180.451206][ T9968] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1128'. [ 180.472792][ T6847] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 180.491999][ T6847] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 180.652501][ T9979] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1133'. [ 180.965298][T10002] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1140'. [ 181.099490][T10012] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1143'. [ 181.132818][T10012] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 181.261911][T10027] netlink: 196 bytes leftover after parsing attributes in process `syz.0.1148'. [ 181.262984][T10022] openvswitch: netlink: IP tunnel TTL not specified. [ 181.288284][T10027] netlink: 196 bytes leftover after parsing attributes in process `syz.0.1148'. [ 181.333300][T10027] netlink: 19 bytes leftover after parsing attributes in process `syz.0.1148'. [ 181.402929][T10027] netlink: 'syz.0.1148': attribute type 10 has an invalid length. [ 181.536132][T10036] tipc: Enabled bearer , priority 0 [ 181.551675][T10036] syzkaller0: entered promiscuous mode [ 181.569826][T10036] syzkaller0: entered allmulticast mode [ 181.636241][T10035] tipc: Resetting bearer [ 181.715737][T10035] tipc: Disabling bearer [ 181.729859][T10051] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 181.803432][T10053] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1155'. [ 181.892795][T10064] tipc: Enabled bearer , priority 0 [ 181.959607][T10054] syzkaller0: entered promiscuous mode [ 181.965153][T10054] syzkaller0: entered allmulticast mode [ 181.984774][T10063] tipc: Enabling of bearer rejected, already enabled [ 182.045568][ T43] IPVS: starting estimator thread 0... [ 182.053030][T10054] tipc: Resetting bearer [ 182.110325][T10052] tipc: Resetting bearer [ 182.159904][T10072] IPVS: using max 26 ests per chain, 62400 per kthread [ 182.178366][T10052] tipc: Disabling bearer [ 182.461898][T10092] tipc: Enabled bearer , priority 0 [ 182.642320][T10092] syzkaller0: entered promiscuous mode [ 182.663122][T10092] syzkaller0: entered allmulticast mode [ 182.694757][T10092] tipc: Resetting bearer [ 182.762657][T10091] tipc: Resetting bearer [ 183.478157][ T5953] tipc: Node number set to 2402836199 [ 184.153443][T10091] tipc: Disabling bearer [ 184.452958][T10143] netlink: 'syz.1.1181': attribute type 83 has an invalid length. [ 184.484348][T10146] netlink: 'syz.3.1183': attribute type 12 has an invalid length. [ 184.713193][T10164] netlink: 'syz.4.1187': attribute type 1 has an invalid length. [ 184.757311][T10164] netlink: 'syz.4.1187': attribute type 2 has an invalid length. [ 184.814571][T10172] IPVS: length: 157 != 24 [ 184.873028][T10178] openvswitch: netlink: Actions may not be safe on all matching packets [ 185.026009][T10192] tipc: Bearer : already 2 bearers with priority 10 [ 185.050816][T10192] tipc: Bearer : trying with adjusted priority [ 185.075520][T10192] tipc: New replicast peer: 255.255.255.255 [ 185.086132][T10192] tipc: Enabled bearer , priority 9 [ 185.158213][T10196] bond5: entered promiscuous mode [ 185.163431][T10196] bond5: entered allmulticast mode [ 185.170165][T10196] 8021q: adding VLAN 0 to HW filter on device bond5 [ 185.255682][T10204] netlink: 'syz.0.1198': attribute type 1 has an invalid length. [ 185.312482][T10206] IPVS: Error connecting to the multicast addr [ 185.676475][T10233] __nla_validate_parse: 8 callbacks suppressed [ 185.676508][T10233] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1205'. [ 185.738087][T10235] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1207'. [ 185.852842][T10242] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1209'. [ 185.863037][T10239] lo: entered allmulticast mode [ 185.863255][T10239] lo: left allmulticast mode [ 185.882927][T10242] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1209'. [ 185.995301][T10250] netlink: 'syz.2.1212': attribute type 1 has an invalid length. [ 186.003421][T10250] netlink: 'syz.2.1212': attribute type 1 has an invalid length. [ 186.274847][T10264] sctp: [Deprecated]: syz.3.1215 (pid 10264) Use of struct sctp_assoc_value in delayed_ack socket option. [ 186.274847][T10264] Use struct sctp_sack_info instead [ 186.332292][T10267] (unnamed net_device) (uninitialized): option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 186.355170][T10270] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1220'. [ 186.366221][T10267] netlink: 'syz.1.1218': attribute type 13 has an invalid length. [ 186.629821][T10284] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1225'. [ 186.640611][T10286] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1225'. [ 186.883999][T10295] tipc: Enabled bearer , priority 0 [ 186.912505][T10295] syzkaller0: entered promiscuous mode [ 186.934133][T10295] syzkaller0: entered allmulticast mode [ 186.993023][T10295] tipc: Resetting bearer [ 187.077114][T10294] tipc: Resetting bearer [ 187.158138][T10294] tipc: Disabling bearer [ 187.348074][T10317] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1232'. [ 187.502529][T10321] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1235'. [ 187.893911][T10342] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1241'. [ 188.174720][T10355] tipc: Enabled bearer , priority 0 [ 188.202592][T10355] syzkaller0: entered promiscuous mode [ 188.220941][T10355] syzkaller0: entered allmulticast mode [ 188.293538][T10355] tipc: Resetting bearer [ 188.342448][T10353] tipc: Resetting bearer [ 188.426574][T10353] tipc: Disabling bearer [ 189.173781][ T2941] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 189.190328][ T2941] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 189.201771][ T2941] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 189.214349][ T2941] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 189.689069][T10427] netlink: 'syz.0.1258': attribute type 1 has an invalid length. [ 189.747301][T10425] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap0 [ 189.843857][T10425] gretap0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 189.872664][T10425] gretap0: entered promiscuous mode [ 189.885574][T10425] gretap0: entered allmulticast mode [ 189.952235][T10438] tipc: Enabling of bearer rejected, media not registered [ 190.090503][T10447] netlink: 'syz.4.1264': attribute type 1 has an invalid length. [ 190.404742][T10462] netlink: 'syz.2.1267': attribute type 13 has an invalid length. [ 190.447345][T10462] lo: entered promiscuous mode [ 190.452199][T10462] lo: entered allmulticast mode [ 190.489976][T10462] tunl0: entered promiscuous mode [ 190.495228][T10462] tunl0: entered allmulticast mode [ 190.524961][T10462] gre0: entered promiscuous mode [ 190.541332][T10462] gre0: entered allmulticast mode [ 190.575410][T10462] 0{X: entered promiscuous mode [ 190.671881][T10462] 0{X: refused to change device tx_queue_len [ 190.680381][T10462] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 190.757415][T10486] __nla_validate_parse: 4 callbacks suppressed [ 190.757438][T10486] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1273'. [ 190.869530][T10494] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1276'. [ 190.938099][T10497] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 191.111230][T10506] netlink: 'syz.3.1281': attribute type 4 has an invalid length. [ 191.201136][T10510] bridge4: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 191.220122][T10508] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 191.265245][T10508] syzkaller0: entered promiscuous mode [ 191.292650][T10508] syzkaller0: entered allmulticast mode [ 191.357413][T10525] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1287'. [ 191.440843][T10524] veth13: entered allmulticast mode [ 191.564431][T10534] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1291'. [ 191.645116][T10538] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1292'. [ 192.255159][T10573] netlink: 'syz.0.1305': attribute type 2 has an invalid length. [ 192.497207][T10590] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1308'. [ 192.783550][T10611] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 192.824741][T10611] netlink: 80 bytes leftover after parsing attributes in process `syz.4.1314'. [ 193.367882][T10628] netlink: 'syz.0.1321': attribute type 12 has an invalid length. [ 193.643129][T10636] geneve2: entered promiscuous mode [ 193.649015][T10636] geneve2: entered allmulticast mode [ 193.656496][ T6836] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.678128][ T6836] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.703046][ T6836] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.732403][ T6836] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.081670][T10660] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.1332'. [ 194.279309][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.323443][T10673] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1336'. [ 194.901585][T10680] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1337'. [ 195.064504][T10688] netlink: 'syz.4.1340': attribute type 10 has an invalid length. [ 195.569276][T10718] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 195.674886][T10721] netlink: 'syz.1.1349': attribute type 1 has an invalid length. [ 195.971864][T10738] IPVS: length: 157 != 24 [ 196.024239][T10742] IPVS: set_ctl: invalid protocol: 43 172.30.0.5:20000 [ 196.110087][T10733] __nla_validate_parse: 9 callbacks suppressed [ 196.110113][T10733] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1353'. [ 196.184042][T10748] openvswitch: netlink: Flow key attr not present in new flow. [ 196.328154][T10755] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1361'. [ 196.438664][T10764] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1364'. [ 196.475365][T10766] x_tables: ip6_tables: quota.0 match: invalid size 24 (kernel) != (user) 144 [ 196.574255][T10761] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1362'. [ 196.769926][T10776] netlink: 84 bytes leftover after parsing attributes in process `syz.1.1366'. [ 196.880665][T10787] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1371'. [ 196.890090][T10787] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1371'. [ 196.923275][T10787] veth15: entered allmulticast mode [ 197.084177][T10790] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.1372'. [ 197.264301][T10812] netlink: 256 bytes leftover after parsing attributes in process `syz.2.1375'. [ 197.295890][T10814] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1377'. [ 197.472919][T10804] "syz.2.1375" (10804) uses obsolete ecb(arc4) skcipher [ 197.838187][T10840] netlink: 'syz.3.1383': attribute type 11 has an invalid length. [ 198.161536][T10858] netlink: 'syz.1.1389': attribute type 2 has an invalid length. [ 198.355698][T10869] netlink: 'syz.3.1394': attribute type 9 has an invalid length. [ 198.387433][T10870] netlink: 'syz.0.1393': attribute type 1 has an invalid length. [ 198.894306][T10899] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 199.113658][T10910] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 199.131841][T10910] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 199.304567][T10918] tipc: Enabled bearer , priority 0 [ 199.352415][T10924] netlink: 'syz.0.1414': attribute type 142 has an invalid length. [ 199.380894][T10918] syzkaller0: entered promiscuous mode [ 199.386536][T10918] syzkaller0: entered allmulticast mode [ 199.452513][T10918] tipc: Resetting bearer [ 199.505760][T10918] 8021q: adding VLAN 0 to HW filter on device bond0 [ 199.532380][T10918] 8021q: adding VLAN 0 to HW filter on device team0 [ 199.553925][T10918] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 199.653689][T10934] tipc: Resetting bearer [ 199.784605][T10934] tipc: Disabling bearer [ 200.080561][T10964] openvswitch: netlink: nsh attribute has 13 unknown bytes. [ 200.088437][T10964] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 200.422359][T10984] atomic_op ffff8880295e3198 conn xmit_atomic 0000000000000000 [ 201.154838][T11022] tipc: Enabled bearer , priority 0 [ 201.241395][T11026] __nla_validate_parse: 17 callbacks suppressed [ 201.241418][T11026] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1443'. [ 201.271609][T11022] syzkaller0: entered promiscuous mode [ 201.294430][T11022] syzkaller0: entered allmulticast mode [ 201.460321][T11048] netlink: 23712 bytes leftover after parsing attributes in process `syz.1.1449'. [ 202.277314][ T5953] tipc: Node number set to 1314353001 [ 202.907173][ T5882] Bluetooth: hci0: command 0x0c1a tx timeout [ 202.913947][T11022] tipc: Resetting bearer [ 202.962021][T11020] tipc: Resetting bearer [ 203.053726][T11020] tipc: Disabling bearer [ 203.270331][T11080] netlink: 'syz.2.1458': attribute type 21 has an invalid length. [ 203.419038][T11087] netlink: del zone limit has 4 unknown bytes [ 203.471870][T11086] netlink: set zone limit has 4 unknown bytes [ 203.969863][T11128] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1471'. [ 204.033018][T11126] netlink: 576 bytes leftover after parsing attributes in process `syz.3.1472'. [ 204.209047][T11143] netlink: 'syz.3.1477': attribute type 83 has an invalid length. [ 204.364194][T11151] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1479'. [ 204.384936][T11151] netlink: 'syz.0.1479': attribute type 5 has an invalid length. [ 204.406074][T11151] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1479'. [ 204.432581][T11151] geneve2: entered promiscuous mode [ 204.440425][T11151] geneve2: entered allmulticast mode [ 204.450935][ T6837] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 256 - 0 [ 204.481036][ T6837] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 256 - 0 [ 204.501509][ T6837] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 256 - 0 [ 204.532865][ T6837] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 256 - 0 [ 204.594361][T11163] netlink: 'syz.0.1485': attribute type 1 has an invalid length. [ 204.648031][T11167] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1486'. [ 204.649882][T11163] netlink: 'syz.0.1485': attribute type 15 has an invalid length. [ 204.667630][T11163] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1485'. [ 204.717000][T11167] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1486'. [ 204.837536][T11157] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1482'. [ 204.890927][T11174] bridge0: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 205.147667][ T5882] Bluetooth: hci4: command tx timeout [ 205.313754][T11200] netlink: 'syz.2.1495': attribute type 1 has an invalid length. [ 205.352343][T11200] netlink: 'syz.2.1495': attribute type 2 has an invalid length. [ 205.577888][T11218] team0: Device gtp0 is of different type [ 205.599351][T11223] netlink: 'syz.1.1500': attribute type 1 has an invalid length. [ 205.622473][T11222] netlink: 'syz.2.1502': attribute type 1 has an invalid length. [ 205.632833][T11223] netlink: 'syz.1.1500': attribute type 10 has an invalid length. [ 205.698887][T11222] 8021q: adding VLAN 0 to HW filter on device bond3 [ 205.732280][T11229] bond3: (slave geneve2): making interface the new active one [ 205.744474][T11229] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 206.048267][T11247] syzkaller0: entered promiscuous mode [ 206.053852][T11247] syzkaller0: entered allmulticast mode [ 206.111984][T11252] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 206.152310][T11247] bridge_slave_0: left allmulticast mode [ 206.183441][T11247] bridge_slave_0: left promiscuous mode [ 206.194460][T11247] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.226268][T11247] bridge_slave_1: left allmulticast mode [ 206.238535][T11247] bridge_slave_1: left promiscuous mode [ 206.245008][T11247] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.293059][T11247] bond0: (slave bond_slave_0): Releasing backup interface [ 206.330339][T11247] team0: Port device team_slave_0 removed [ 206.341373][T11261] __nla_validate_parse: 4 callbacks suppressed [ 206.341394][T11261] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1514'. [ 206.356757][T11261] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1514'. [ 206.359786][T11247] team0: Port device team_slave_1 removed [ 206.375187][T11247] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 206.383487][T11247] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 206.399053][T11265] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1515'. [ 207.830082][T11275] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 208.066218][T11297] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1522'. [ 208.495220][T11319] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1530'. [ 208.695225][T11334] netlink: 51 bytes leftover after parsing attributes in process `syz.3.1536'. [ 208.733723][T11334] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1536'. [ 208.819257][T11333] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 208.834526][T11333] syzkaller0: entered promiscuous mode [ 208.848232][T11333] syzkaller0: entered allmulticast mode [ 209.074382][T11357] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1544'. [ 209.096529][T11357] validate_nla: 3 callbacks suppressed [ 209.096550][T11357] netlink: 'syz.0.1544': attribute type 7 has an invalid length. [ 209.120110][T11357] netlink: 'syz.0.1544': attribute type 8 has an invalid length. [ 209.141718][T11357] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1544'. [ 209.510893][T11379] netlink: zone id is out of range [ 209.521298][T11379] netlink: zone id is out of range [ 209.548634][T11379] netlink: zone id is out of range [ 209.564262][T11379] netlink: zone id is out of range [ 209.591155][T11379] netlink: zone id is out of range [ 209.626394][T11379] netlink: zone id is out of range [ 209.663355][T11379] netlink: zone id is out of range [ 209.692987][T11379] netlink: del zone limit has 4 unknown bytes [ 209.770755][T11398] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1556'. [ 209.930504][T11401] sch_tbf: burst 88 is lower than device veth7 mtu (1514) ! [ 210.364233][T11424] netlink: 'syz.1.1563': attribute type 1 has an invalid length. [ 210.385201][T11423] netlink: 'syz.1.1563': attribute type 1 has an invalid length. [ 210.466463][T11423] bond6 (unregistering): Released all slaves [ 210.521873][T11429] netlink: 'syz.4.1565': attribute type 2 has an invalid length. [ 210.583058][T11424] ip6tnl1: entered promiscuous mode [ 210.595498][T11424] ip6tnl1: entered allmulticast mode [ 210.892848][T11444] syzkaller1: entered promiscuous mode [ 210.902177][T11444] syzkaller1: entered allmulticast mode [ 211.454615][T11468] syzkaller0: entered promiscuous mode [ 211.468732][T11468] syzkaller0: entered allmulticast mode [ 211.590763][T11482] __nla_validate_parse: 3 callbacks suppressed [ 211.590789][T11482] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1580'. [ 211.663065][T11489] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 211.717581][ T51] Bluetooth: hci1: command 0x0406 tx timeout [ 211.719117][ T5867] Bluetooth: hci0: command 0x0c1a tx timeout [ 211.723750][ T51] Bluetooth: hci3: command 0x0406 tx timeout [ 211.730950][ T5867] Bluetooth: hci2: command 0x0406 tx timeout [ 211.832988][T11494] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1583'. [ 213.150736][ T5882] Bluetooth: hci4: command 0x0405 tx timeout [ 213.388184][T11493] IPVS: Error connecting to the multicast addr [ 213.580163][T11513] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1588'. [ 213.662648][T11513] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1588'. [ 213.703753][T11513] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1588'. [ 213.716033][T11525] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1592'. [ 213.784454][T11529] netlink: 348 bytes leftover after parsing attributes in process `syz.1.1595'. [ 214.012775][T11545] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1599'. [ 214.079079][T11553] 8021q: VLANs not supported on wlan1 [ 214.323021][T11566] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1607'. [ 214.363392][T11566] netlink: 'syz.3.1607': attribute type 7 has an invalid length. [ 214.387814][T11566] netlink: 'syz.3.1607': attribute type 8 has an invalid length. [ 214.426937][T11566] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1607'. [ 215.064422][T11609] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 215.883111][ T6847] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 215.898493][ T6847] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 215.916284][ T6847] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 215.938243][ T6847] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 216.091284][T11659] netlink: 'syz.3.1635': attribute type 1 has an invalid length. [ 216.106144][ T5882] Bluetooth: hci4: link tx timeout [ 216.113389][ T5882] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 216.135522][T11657] netlink: 'syz.2.1634': attribute type 1 has an invalid length. [ 216.183371][T11659] 8021q: adding VLAN 0 to HW filter on device bond4 [ 216.287893][T11657] 8021q: adding VLAN 0 to HW filter on device bond5 [ 216.370002][T11657] veth17: entered promiscuous mode [ 216.390895][T11657] bond5: (slave veth17): Enslaving as a backup interface with a down link [ 216.583126][T11686] netlink: 'syz.1.1642': attribute type 196 has an invalid length. [ 216.609412][T11688] __nla_validate_parse: 7 callbacks suppressed [ 216.609433][T11688] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1643'. [ 216.906473][T11704] bond5 (unregistering): Released all slaves [ 217.086540][T11716] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1649'. [ 217.500637][T11745] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1659'. [ 217.872599][T11763] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1666'. [ 217.899116][T11763] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1666'. [ 217.912526][T11766] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1664'. [ 217.938441][T11766] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1664'. [ 217.968273][T11766] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1664'. [ 218.015995][T11774] macvtap2: entered promiscuous mode [ 218.029667][T11766] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1664'. [ 218.034861][T11774] vlan0: entered promiscuous mode [ 218.054162][T11778] netlink: 'syz.4.1668': attribute type 1 has an invalid length. [ 218.065021][T11774] macvtap2: entered allmulticast mode [ 218.070730][T11774] vlan0: entered allmulticast mode [ 218.076180][T11774] veth0_vlan: entered allmulticast mode [ 218.191722][ T5882] Bluetooth: hci4: command 0x0405 tx timeout [ 219.350549][T11848] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1694'. [ 219.522989][T11854] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 219.725090][T11872] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 219.742873][T11872] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 219.759615][T11873] veth0: entered promiscuous mode [ 219.807399][T11873] veth0 (unregistering): left promiscuous mode [ 220.236353][T11899] netlink: 'syz.0.1709': attribute type 58 has an invalid length. [ 220.572854][T11918] netlink: 'syz.1.1714': attribute type 4 has an invalid length. [ 220.664005][T11925] netlink: 'syz.4.1718': attribute type 10 has an invalid length. [ 220.697174][T11927] netlink: 'syz.2.1717': attribute type 1 has an invalid length. [ 220.700937][T11925] dummy0: entered promiscuous mode [ 220.720294][T11925] bridge0: port 1(dummy0) entered blocking state [ 220.730239][T11925] bridge0: port 1(dummy0) entered disabled state [ 220.740724][T11925] dummy0: entered allmulticast mode [ 220.943938][T11937] tipc: Enabled bearer , priority 0 [ 220.969736][T11937] tipc: Resetting bearer [ 221.018828][T11935] tipc: Disabling bearer [ 221.115334][ T30] audit: type=1107 audit(1755733927.032:6): pid=11945 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 221.119396][T11947] veth0_to_team: entered promiscuous mode [ 221.264503][T11947] veth0_to_team: entered allmulticast mode [ 221.607343][T11971] netlink: 'syz.1.1733': attribute type 1 has an invalid length. [ 221.632609][T11976] netlink: 'syz.0.1734': attribute type 4 has an invalid length. [ 221.642866][T11976] __nla_validate_parse: 28 callbacks suppressed [ 221.642886][T11976] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1734'. [ 221.682024][T11976] `: renamed from bond0 [ 221.868101][ T6847] wlan1: Trigger new scan to find an IBSS to join [ 222.479564][T12030] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1750'. [ 222.533234][T12029] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1749'. [ 222.716493][T12036] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1753'. [ 222.823712][T12042] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1754'. [ 222.865670][T12043] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1754'. [ 222.952504][T12050] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1757'. [ 222.967926][T12048] netlink: 'syz.3.1756': attribute type 1 has an invalid length. [ 222.986012][T12048] netlink: 244 bytes leftover after parsing attributes in process `syz.3.1756'. [ 223.407230][T12063] tipc: Enabling not permitted [ 223.412908][T12063] tipc: Enabling of bearer rejected, failed to enable media [ 223.542834][T12079] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1767'. [ 223.631990][T12088] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 223.931135][T12102] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.1771'. [ 224.153182][T12095] netlink: 'syz.1.1768': attribute type 1 has an invalid length. [ 224.283058][T12133] openvswitch: netlink: Multiple metadata blocks provided [ 224.368717][T12139] netlink: 'syz.2.1777': attribute type 12 has an invalid length. [ 224.403037][T12139] netlink: 'syz.2.1777': attribute type 29 has an invalid length. [ 224.809031][T12159] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode [ 224.847827][T12159] mac80211_hwsim hwsim7 wlan1: left allmulticast mode [ 224.865560][T12159] wlan1: mtu less than device minimum [ 224.908648][ T6847] wlan1: Trigger new scan to find an IBSS to join [ 224.922990][T12159] `: (slave wlan1): Error -22 calling dev_set_mtu [ 225.190925][T12167] sctp: [Deprecated]: syz.0.1788 (pid 12167) Use of int in max_burst socket option. [ 225.190925][T12167] Use struct sctp_assoc_value instead [ 225.207255][T12169] sctp: [Deprecated]: syz.3.1786 (pid 12169) Use of int in max_burst socket option deprecated. [ 225.207255][T12169] Use struct sctp_assoc_value instead [ 225.475960][T12189] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 225.720286][T12201] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 225.846117][T12205] veth13: entered allmulticast mode [ 226.090223][T12225] validate_nla: 5 callbacks suppressed [ 226.090251][T12225] netlink: 'syz.0.1804': attribute type 58 has an invalid length. [ 226.163556][T12228] netlink: 'syz.1.1805': attribute type 1 has an invalid length. [ 226.184114][T12230] syz.3.1806 uses old SIOCAX25GETINFO [ 227.395814][T12294] syz0: rxe_newlink: already configured on ipvlan1 [ 227.425851][T12292] syzkaller0: refused to change device tx_queue_len [ 227.868777][ T6839] wlan1: Trigger new scan to find an IBSS to join [ 227.923837][T12319] __nla_validate_parse: 10 callbacks suppressed [ 227.923861][T12319] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1834'. [ 227.943374][T12318] netlink: 'syz.4.1835': attribute type 1 has an invalid length. [ 227.958499][T12319] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 227.996700][T12323] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1835'. [ 228.143358][T12332] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1837'. [ 228.217279][T12318] 8021q: adding VLAN 0 to HW filter on device bond4 [ 228.651808][T12355] netlink: 'syz.3.1841': attribute type 49 has an invalid length. [ 228.708946][T12323] bond4 (unregistering): Released all slaves [ 228.860184][T12359] netlink: 'syz.0.1842': attribute type 11 has an invalid length. [ 229.049365][T12367] netlink: 'syz.2.1846': attribute type 4 has an invalid length. [ 229.072340][T12367] netlink: 'syz.2.1846': attribute type 11 has an invalid length. [ 229.096525][T12367] netlink: 'syz.2.1846': attribute type 11 has an invalid length. [ 229.110471][T12367] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1846'. [ 229.124610][T12367] netlink: 'syz.2.1846': attribute type 1 has an invalid length. [ 229.158030][T12379] netlink: 'syz.0.1850': attribute type 1 has an invalid length. [ 229.183926][T12379] netlink: 'syz.0.1850': attribute type 11 has an invalid length. [ 229.220256][T12379] netlink: 220 bytes leftover after parsing attributes in process `syz.0.1850'. [ 229.277675][ T6839] nci: nci_rsp_packet: unsupported rsp opcode 0xf2d [ 229.478859][T12402] netdevsim netdevsim2: Direct firmware load for .. failed with error -2 [ 229.489406][T12402] netdevsim netdevsim2: Falling back to sysfs fallback for: .. [ 229.941278][T12398] netlink: 'syz.3.1854': attribute type 1 has an invalid length. [ 229.965198][T12398] netlink: 232 bytes leftover after parsing attributes in process `syz.3.1854'. [ 229.988727][T12398] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1854'. [ 230.329127][T12430] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1863'. [ 230.329320][T12427] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1861'. [ 230.367169][T12427] netlink: 108 bytes leftover after parsing attributes in process `syz.1.1861'. [ 230.921361][ T6854] wlan1: Trigger new scan to find an IBSS to join [ 231.539780][T12498] nbd: illegal input index -8454144 [ 231.546695][T12500] nbd: illegal input index -8454144 [ 231.742383][T12514] validate_nla: 1 callbacks suppressed [ 231.742405][T12514] netlink: 'syz.1.1890': attribute type 1 has an invalid length. [ 231.761482][T12514] netlink: 'syz.1.1890': attribute type 1 has an invalid length. [ 231.899626][T12531] netlink: 'syz.4.1894': attribute type 10 has an invalid length. [ 231.910130][T12531] bridge0: port 1(dummy0) entered blocking state [ 231.916890][T12531] bridge0: port 1(dummy0) entered forwarding state [ 231.932895][ T6836] wlan1: Creating new IBSS network, BSSID 6e:06:cf:74:12:3e [ 231.952744][T12531] bridge0: port 1(dummy0) entered disabled state [ 232.304765][T12547] netlink: 'syz.3.1901': attribute type 6 has an invalid length. [ 232.313062][T12548] netlink: 'syz.3.1901': attribute type 6 has an invalid length. [ 232.735303][T12570] veth0: entered promiscuous mode [ 232.804058][T12569] veth0: left promiscuous mode [ 233.053569][T12593] netlink: 'syz.4.1917': attribute type 2 has an invalid length. [ 233.061074][T12587] delete_channel: no stack [ 233.150519][T12596] __nla_validate_parse: 13 callbacks suppressed [ 233.150544][T12596] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1914'. [ 233.303212][T12609] netlink: 'syz.1.1922': attribute type 2 has an invalid length. [ 233.314001][T12610] netlink: 'syz.1.1922': attribute type 2 has an invalid length. [ 233.321503][T12603] netlink: 192 bytes leftover after parsing attributes in process `syz.4.1919'. [ 233.343159][T12610] netlink: 'syz.1.1922': attribute type 2 has an invalid length. [ 233.509509][T12627] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1923'. [ 233.584314][T12627] hsr_slave_1 (unregistering): left promiscuous mode [ 233.973953][T12636] team0: Refused to change device type [ 234.061758][T12650] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1933'. [ 234.316479][T12666] 8021q: adding VLAN 0 to HW filter on device bond0 [ 234.343688][T12670] netlink: 'syz.4.1936': attribute type 2 has an invalid length. [ 234.457391][T12683] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1941'. [ 234.545939][T12678] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 234.587781][T12678] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.786672][T12678] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 234.801679][T12678] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.872391][T12712] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1948'. [ 234.973325][T12716] sctp: [Deprecated]: syz.1.1950 (pid 12716) Use of int in max_burst socket option. [ 234.973325][T12716] Use struct sctp_assoc_value instead [ 235.037288][T12678] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 235.052717][T12678] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.095052][T12718] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 235.177911][T12718] syzkaller0: entered promiscuous mode [ 235.183735][T12718] syzkaller0: entered allmulticast mode [ 235.354313][T12737] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1955'. [ 235.384397][T12678] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 235.396226][T12678] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.416635][T12727] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 235.469079][T12739] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1955'. [ 235.557663][T12741] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1956'. [ 236.984622][ T6837] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 236.994855][ T6837] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.065414][ T6837] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 237.084294][ T6837] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.134545][ T6853] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 237.153219][ T6853] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.192570][ T6853] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 237.220852][ T6853] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.303514][T12779] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1968'. [ 237.461478][T12790] bond4: entered promiscuous mode [ 237.466605][T12790] bond4: entered allmulticast mode [ 237.472970][T12790] 8021q: adding VLAN 0 to HW filter on device bond4 [ 237.679963][T12790] bond4 (unregistering): Released all slaves [ 237.994615][T12808] validate_nla: 4 callbacks suppressed [ 237.994641][T12808] netlink: 'syz.4.1975': attribute type 4 has an invalid length. [ 238.110673][T12817] netlink: 'syz.2.1976': attribute type 1 has an invalid length. [ 238.118859][T12817] netlink: 'syz.2.1976': attribute type 10 has an invalid length. [ 238.234925][T12821] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 238.351883][T12827] __nla_validate_parse: 4 callbacks suppressed [ 238.351909][T12827] netlink: 92 bytes leftover after parsing attributes in process `syz.3.1982'. [ 238.384400][T12827] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1982'. [ 238.401725][T12831] netlink: 92 bytes leftover after parsing attributes in process `syz.3.1982'. [ 238.486577][T12839] tipc: Bearer : already 2 bearers with priority 10 [ 238.495073][T12839] tipc: Bearer : trying with adjusted priority [ 238.505828][T12839] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 238.531614][T12841] syzkaller1: entered promiscuous mode [ 238.545260][T12841] syzkaller1: entered allmulticast mode [ 238.601524][T12848] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1988'. [ 238.722908][T12850] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 238.753883][T12850] syzkaller0: entered promiscuous mode [ 238.762905][T12850] syzkaller0: entered allmulticast mode [ 238.833729][T12860] netlink: 100 bytes leftover after parsing attributes in process `syz.2.1992'. [ 238.959937][T12864] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1994'. [ 239.252412][T12882] x_tables: ip6_tables: quota.0 match: invalid size 24 (kernel) != (user) 144 [ 239.333874][T12884] netlink: 'syz.3.2002': attribute type 1 has an invalid length. [ 239.373771][T12884] 8021q: adding VLAN 0 to HW filter on device bond6 [ 239.400531][T12884] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2002'. [ 239.468419][T12887] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2004'. [ 239.513747][T12889] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2003'. [ 239.562903][T12894] netlink: 'syz.3.2006': attribute type 16 has an invalid length. [ 239.574496][T12894] netlink: 'syz.3.2006': attribute type 17 has an invalid length. [ 239.889521][T12914] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2010'. [ 240.351731][T12943] netdevsim netdevsim0: Direct firmware load for failed with error -2 [ 240.365915][T12943] netdevsim netdevsim0: Falling back to sysfs fallback for: [ 241.893909][T12974] veth3: left promiscuous mode [ 241.902314][T12974] veth5: left promiscuous mode [ 241.926275][T12974] bond5: left promiscuous mode [ 241.936137][T12974] ip6tnl1: left promiscuous mode [ 241.945042][T12983] sch_tbf: burst 8 is lower than device ip6tnl0 mtu (1452) ! [ 242.010667][ T12] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 242.032244][ T12] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.085700][ T12] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 242.131375][ T12] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.164673][ T12] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 242.197475][ T12] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.206487][ T12] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 242.250684][ T12] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.299103][T13034] sch_tbf: burst 88 is lower than device veth3 mtu (1514) ! [ 242.361904][T13040] netlink: 'syz.2.2035': attribute type 7 has an invalid length. [ 242.487722][T13040] : entered promiscuous mode [ 243.355905][T13102] veth0: entered promiscuous mode [ 243.379209][T13102] __nla_validate_parse: 7 callbacks suppressed [ 243.379230][T13102] netlink: 100 bytes leftover after parsing attributes in process `syz.4.2055'. [ 243.398567][T13101] veth0: left promiscuous mode [ 243.565684][T13114] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2057'. [ 243.777127][T13122] lo: left allmulticast mode [ 243.782184][T13122] tunl0: left allmulticast mode [ 243.788770][T13122] gre0: left allmulticast mode [ 243.795454][T13122] 0{X: left allmulticast mode [ 243.830439][T13122] macvtap0: left allmulticast mode [ 243.841651][T13122] veth5: left allmulticast mode [ 243.851242][T13122] veth9: left allmulticast mode [ 243.856385][T13122] veth11: left allmulticast mode [ 243.866056][T13122] veth13: left allmulticast mode [ 243.872603][T13122] veth15: left allmulticast mode [ 244.131236][T13135] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2063'. [ 244.144935][T13135] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2063'. [ 244.418165][T13148] IPv6: sit1: Disabled Multicast RS [ 244.424630][T13148] sit1: entered allmulticast mode [ 244.546615][T13155] syz.4.2070 (13155) used obsolete PPPIOCDETACH ioctl [ 244.710405][T13167] netlink: 'syz.2.2073': attribute type 4 has an invalid length. [ 244.768281][T13167] netlink: 'syz.2.2073': attribute type 4 has an invalid length. [ 244.897182][T13178] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2076'. [ 244.969007][T13183] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2077'. [ 245.239977][T13203] netlink: 1284 bytes leftover after parsing attributes in process `syz.4.2085'. [ 245.397520][T13208] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2086'. [ 245.512188][ T1331] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 245.536704][ T1331] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 245.569466][ T1331] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 245.601270][ T1331] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 245.873152][T13241] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2095'. [ 246.143448][T13253] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2098'. [ 246.213499][T13250] syzkaller0: entered promiscuous mode [ 246.233050][T13250] syzkaller0: entered allmulticast mode [ 246.691077][T13278] ip6gre0: Master is either lo or non-ether device [ 246.698511][T13275] ip6gre0: Master is either lo or non-ether device [ 247.177819][T13305] netlink: 'syz.0.2115': attribute type 1 has an invalid length. [ 247.345929][ T59] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 247.407750][ T59] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 247.416555][ T59] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 247.496870][ T59] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 247.726070][T13337] netlink: 'syz.2.2122': attribute type 4 has an invalid length. [ 248.473647][T13398] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 248.692037][T13413] nbd: device at index 0 is going down [ 255.720652][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 269.147001][ T59] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 269.844324][T13476] bond6: entered promiscuous mode [ 269.849654][T13476] bond6: entered allmulticast mode [ 269.855210][T13476] 8021q: adding VLAN 0 to HW filter on device bond6 [ 269.982100][T13476] bond6 (unregistering): Released all slaves [ 270.002417][T13482] bridge: RTM_NEWNEIGH with invalid ether address [ 270.011125][T13491] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 270.176750][T13499] __nla_validate_parse: 15 callbacks suppressed [ 270.176772][T13499] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2164'. [ 270.183363][T13498] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 270.199468][T13498] IPv6: NLM_F_CREATE should be set when creating new route [ 270.229418][T13499] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2164'. [ 270.398895][T13518] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2170'. [ 270.456438][T13518] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2170'. [ 270.495267][T13518] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2170'. [ 270.525916][T13518] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2170'. [ 270.556246][T13518] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2170'. [ 270.576230][T13518] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2170'. [ 270.597205][T13518] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2170'. [ 270.606537][T13518] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2170'. [ 270.757668][T13544] delete_channel: no stack [ 271.192697][T13577] pim6reg1: entered promiscuous mode [ 271.211391][T13577] pim6reg1: entered allmulticast mode [ 271.340863][T13588] tipc: Enabled bearer , priority 0 [ 271.435528][T13588] syzkaller0: MTU too low for tipc bearer [ 271.451916][T13588] tipc: Disabling bearer [ 271.692251][T13606] netlink: 'syz.4.2194': attribute type 1 has an invalid length. [ 271.773061][T13606] 8021q: adding VLAN 0 to HW filter on device bond6 [ 271.863440][T13606] 8021q: adding VLAN 0 to HW filter on device bond6 [ 271.874702][T13606] bond6: (slave vxcan3): The slave device specified does not support setting the MAC address [ 271.892252][T13606] bond6: (slave vxcan3): Error -95 calling set_mac_address [ 271.974574][T13608] veth15: entered promiscuous mode [ 272.005400][T13608] bond6: (slave veth15): Enslaving as an active interface with a down link [ 272.071666][T13618] vlan3: entered allmulticast mode [ 272.077258][T13618] bond6: entered allmulticast mode [ 272.911564][T13678] netlink: 'syz.3.2217': attribute type 4 has an invalid length. [ 272.963298][T13684] netlink: 'syz.3.2217': attribute type 4 has an invalid length. [ 273.015023][T13687] netlink: 'syz.4.2221': attribute type 5 has an invalid length. [ 273.032373][T13689] netlink: 'syz.2.2222': attribute type 1 has an invalid length. [ 273.050263][T13689] nbd: illegal input index 1048576 [ 273.179934][T13699] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 273.220847][T13702] netlink: 'syz.4.2225': attribute type 2 has an invalid length. [ 273.829400][T13743] syzkaller1: entered promiscuous mode [ 273.870755][T13743] syzkaller1: entered allmulticast mode [ 274.381689][T13791] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 274.420860][T13795] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 274.457255][T13795] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.574514][T13795] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 274.596096][T13795] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.680164][T13795] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 274.718021][T13795] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.821632][T13795] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 274.849015][T13795] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.127298][ T6833] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 275.157596][ T6833] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.234091][ T2910] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 275.267371][ T2910] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.287449][ T12] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 275.310750][T13849] __nla_validate_parse: 39 callbacks suppressed [ 275.310774][T13849] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2263'. [ 275.326753][ T12] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.385662][ T6847] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 275.405300][ T6847] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.209988][T13877] tipc: Enabled bearer , priority 0 [ 276.227772][T13877] syzkaller0: entered promiscuous mode [ 276.233420][T13877] syzkaller0: entered allmulticast mode [ 276.395768][T13883] tipc: Resetting bearer [ 276.413439][T13876] tipc: Resetting bearer [ 276.469563][T13890] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2275'. [ 276.479998][T13876] tipc: Disabling bearer [ 276.606523][T13890] netlink: 'syz.4.2275': attribute type 29 has an invalid length. [ 277.068275][T13902] bridge0: port 1(veth0_to_bridge) entered blocking state [ 277.077974][T13902] bridge0: port 1(veth0_to_bridge) entered disabled state [ 277.085661][T13902] veth0_to_bridge: entered allmulticast mode [ 277.096580][T13902] veth0_to_bridge: entered promiscuous mode [ 277.171153][T13904] netlink: 256 bytes leftover after parsing attributes in process `syz.0.2279'. [ 277.303356][T13909] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2280'. [ 277.387557][T13916] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2284'. [ 278.091408][T13958] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2296'. [ 278.266324][T13970] vlan1: entered allmulticast mode [ 278.295035][T13970] veth0_vlan: entered allmulticast mode [ 278.528717][T13986] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 278.786746][T13998] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2306'. [ 278.804103][T13998] lo: left promiscuous mode [ 278.830623][ T34] tipc: Subscription rejected, illegal request [ 278.831379][T13998] tunl0: left promiscuous mode [ 278.907353][T13998] gre0: left promiscuous mode [ 278.912963][T13998] 0{X: left promiscuous mode [ 279.364357][T14018] netlink: 9 bytes leftover after parsing attributes in process `syz.3.2313'. [ 279.613569][T13998] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 279.680541][T14018] gretap0: entered promiscuous mode [ 279.786747][T14027] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 279.864570][T14030] netlink: 'syz.2.2314': attribute type 19 has an invalid length. [ 280.127805][T14034] netlink: 96 bytes leftover after parsing attributes in process `syz.3.2318'. [ 280.310316][T14044] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2322'. [ 280.412442][T14050] veth1_macvtap: left promiscuous mode [ 280.652025][T14065] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2329'. [ 280.690779][T14062] netlink: 'syz.2.2330': attribute type 1 has an invalid length. [ 280.719096][T14062] netlink: 236 bytes leftover after parsing attributes in process `syz.2.2330'. [ 281.059855][T14096] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2337'. [ 281.602085][T14135] tipc: Enabling of bearer rejected, failed to enable media [ 281.859859][T14149] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 281.898048][T14150] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 281.993113][T14152] netlink: 348 bytes leftover after parsing attributes in process `syz.1.2352'. [ 282.185489][T14169] netlink: 256 bytes leftover after parsing attributes in process `syz.4.2357'. [ 282.206652][T14166] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2358'. [ 282.268340][T14166] vxcan2: entered allmulticast mode [ 282.333379][T14169] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2357'. [ 282.348753][T14169] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2357'. [ 282.688638][T14198] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2367'. [ 282.721427][T14196] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 282.747476][T14198] sctp: [Deprecated]: syz.0.2367 (pid 14198) Use of int in maxseg socket option. [ 282.747476][T14198] Use struct sctp_assoc_value instead [ 282.775202][T14198] 8021q: VLANs not supported on ip6_vti0 [ 282.850361][T14208] macsec2: entered promiscuous mode [ 282.855888][T14208] macsec2: entered allmulticast mode [ 283.016607][T14217] netlink: ct family unspecified [ 283.022204][T14219] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 283.044101][T14214] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2373'. [ 283.050818][T14217] openvswitch: netlink: Actions may not be safe on all matching packets [ 283.211096][T14231] tipc: Enabled bearer , priority 0 [ 283.234946][T14230] netlink: 'syz.0.2377': attribute type 1 has an invalid length. [ 283.246403][T14217] syzkaller0: entered promiscuous mode [ 283.254550][T14217] syzkaller0: entered allmulticast mode [ 283.293209][T14217] tipc: Resetting bearer [ 283.354764][T14215] tipc: Resetting bearer [ 283.374115][T14215] tipc: Disabling bearer [ 283.453949][T14236] netlink: 'syz.3.2380': attribute type 1 has an invalid length. [ 283.731627][T14253] netlink: 'syz.1.2386': attribute type 1 has an invalid length. [ 283.843739][T14263] netlink: 'syz.3.2389': attribute type 21 has an invalid length. [ 283.853504][T14263] netlink: 'syz.3.2389': attribute type 22 has an invalid length. [ 283.862401][T14265] netlink: 'syz.2.2388': attribute type 21 has an invalid length. [ 283.884365][T14265] netlink: 'syz.2.2388': attribute type 6 has an invalid length. [ 283.897977][T14263] netlink: 'syz.3.2389': attribute type 23 has an invalid length. [ 284.236609][T12992] IPVS: starting estimator thread 0... [ 284.249199][T14284] tipc: New replicast peer: 0.0.0.0 [ 284.254753][T14284] tipc: Enabled bearer , priority 10 [ 284.263210][T14284] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00aa [ 284.288250][T14290] pim6reg527: entered allmulticast mode [ 284.367025][T14289] IPVS: using max 23 ests per chain, 55200 per kthread [ 285.367237][ T850] tipc: Node number set to 4205941840 [ 285.446488][T14362] validate_nla: 2 callbacks suppressed [ 285.446522][T14362] netlink: 'syz.4.2419': attribute type 1 has an invalid length. [ 285.465278][T14362] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 285.859304][T14387] __nla_validate_parse: 12 callbacks suppressed [ 285.859333][T14387] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2425'. [ 286.019355][T14396] netlink: 'syz.4.2428': attribute type 1 has an invalid length. [ 286.038303][T14396] netlink: 140 bytes leftover after parsing attributes in process `syz.4.2428'. [ 286.068123][T14396] netlink: 'syz.4.2428': attribute type 1 has an invalid length. [ 286.348821][T14412] netlink: 'syz.1.2432': attribute type 1 has an invalid length. [ 286.431635][T14412] 8021q: adding VLAN 0 to HW filter on device bond6 [ 286.499355][T14412] veth13: entered promiscuous mode [ 286.515833][T14412] bond6: (slave veth13): Enslaving as a backup interface with a down link [ 286.614045][T14436] netlink: 'syz.3.2439': attribute type 83 has an invalid length. [ 287.140714][T14470] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2449'. [ 287.373001][T14483] netlink: 'syz.4.2452': attribute type 1 has an invalid length. [ 287.390062][T14478] tap0: tun_chr_ioctl cmd 1074025678 [ 287.397717][T14478] tap0: group set to 0 [ 287.401849][T14487] : left promiscuous mode [ 287.502298][T14483] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2452'. [ 287.605975][T14505] netlink: 'syz.3.2457': attribute type 10 has an invalid length. [ 287.621406][T14505] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 287.937533][T14524] bond0: option mode: unable to set because the bond device is up [ 288.167369][T14539] tipc: Enabled bearer , priority 0 [ 288.185490][T14539] syzkaller0: entered promiscuous mode [ 288.192168][T14539] syzkaller0: entered allmulticast mode [ 288.283885][T14539] tipc: Resetting bearer [ 288.370247][T14548] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2471'. [ 288.390110][T14539] tipc: Resetting bearer [ 288.447209][T14539] tipc: Disabling bearer [ 288.690817][T14565] netlink: 'syz.3.2475': attribute type 1 has an invalid length. [ 288.845125][T14565] 8021q: adding VLAN 0 to HW filter on device bond9 [ 288.957826][T14577] netlink: 'syz.4.2479': attribute type 1 has an invalid length. [ 288.999597][T14578] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2478'. [ 289.203277][T14586] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2483'. [ 289.391684][T14608] netlink: 'syz.0.2489': attribute type 61 has an invalid length. [ 289.434362][T14608] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2489'. [ 289.491524][T14613] netlink: 14560 bytes leftover after parsing attributes in process `syz.2.2488'. [ 289.553942][T14618] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2490'. [ 289.758211][T14635] netlink: 'syz.1.2494': attribute type 11 has an invalid length. [ 290.054028][T14619] delete_channel: no stack [ 290.502419][T14671] netlink: 'syz.4.2506': attribute type 1 has an invalid length. [ 290.839827][T14687] syzkaller1: entered promiscuous mode [ 290.849826][T14687] syzkaller1: entered allmulticast mode [ 290.915517][T14699] __nla_validate_parse: 4 callbacks suppressed [ 290.915574][T14699] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.2512'. [ 291.061654][T14711] netlink: 'syz.1.2517': attribute type 10 has an invalid length. [ 291.085763][T14707] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2515'. [ 291.104261][T14707] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2515'. [ 291.112653][T14711] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2517'. [ 291.133540][T14711] batadv0: entered promiscuous mode [ 291.141820][T14711] batadv0: entered allmulticast mode [ 291.160350][T14711] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 291.305298][T14724] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2521'. [ 291.373832][T14730] netlink: 'syz.3.2523': attribute type 13 has an invalid length. [ 291.383161][T14731] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2521'. [ 291.392743][T14730] netlink: 'syz.3.2523': attribute type 58 has an invalid length. [ 291.400964][T14730] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2523'. [ 291.490565][T14734] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2524'. [ 291.527382][T14734] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2524'. [ 291.650208][T14742] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2527'. [ 291.704347][T14752] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 291.927114][T14764] netlink: 'syz.4.2533': attribute type 1 has an invalid length. [ 292.041580][T14769] netlink: 'syz.2.2534': attribute type 1 has an invalid length. [ 292.158924][T14775] netlink: 'syz.3.2536': attribute type 7 has an invalid length. [ 293.244895][T14837] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 293.679430][T14864] pim6reg1: entered promiscuous mode [ 293.684821][T14864] pim6reg1: entered allmulticast mode [ 293.897124][T14883] netlink: 'syz.0.2568': attribute type 1 has an invalid length. [ 293.919082][T14886] netlink: 'syz.4.2569': attribute type 5 has an invalid length. [ 294.084601][T14883] 8021q: adding VLAN 0 to HW filter on device bond2 [ 294.207886][T14902] netlink: 'syz.3.2572': attribute type 1 has an invalid length. [ 295.404262][T14965] 8021q: adding VLAN 0 to HW filter on device bond10 [ 295.462989][T14965] vlan3: entered allmulticast mode [ 295.471498][T14965] veth1: entered allmulticast mode [ 295.479619][T14965] bond10: (slave vlan3): Opening slave failed [ 295.940318][T15008] __nla_validate_parse: 17 callbacks suppressed [ 295.940343][T15008] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2604'. [ 296.045166][T15012] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2605'. [ 296.431937][T15037] netlink: 204 bytes leftover after parsing attributes in process `syz.0.2614'. [ 296.463480][T15041] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2615'. [ 296.500989][T15042] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2611'. [ 296.598627][T15045] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2616'. [ 296.613980][T15050] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2611'. [ 296.795324][T15055] validate_nla: 3 callbacks suppressed [ 296.795349][T15055] netlink: 'syz.4.2620': attribute type 1 has an invalid length. [ 296.840114][T15055] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2620'. [ 297.255163][T15074] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2625'. [ 297.552784][T15091] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2629'. [ 297.581390][T15091] netlink: 'syz.1.2629': attribute type 7 has an invalid length. [ 298.162036][T15138] erspan0: entered allmulticast mode [ 298.293668][T15142] netlink: 'syz.4.2639': attribute type 11 has an invalid length. [ 298.427044][T15145] netlink: 'syz.0.2641': attribute type 1 has an invalid length. [ 298.465178][T15150] C: renamed from team_slave_0 [ 298.484039][T15150] netlink: 'syz.3.2643': attribute type 1 has an invalid length. [ 298.496284][T15150] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 298.526350][T15148] netlink: 'syz.1.2642': attribute type 1 has an invalid length. [ 298.535505][T15148] netlink: 'syz.1.2642': attribute type 2 has an invalid length. [ 298.726019][T15175] netlink: 'syz.3.2648': attribute type 3 has an invalid length. [ 298.866451][T15180] netlink: 'syz.0.2650': attribute type 19 has an invalid length. [ 298.927572][T15179] netlink: 'syz.0.2650': attribute type 19 has an invalid length. [ 299.130929][T15203] netlink: 'syz.3.2656': attribute type 1 has an invalid length. [ 299.318261][T15203] bond10: entered promiscuous mode [ 299.324206][T15203] 8021q: adding VLAN 0 to HW filter on device bond10 [ 300.892270][T15287] tipc: Enabled bearer , priority 0 [ 300.973902][T15287] tipc: Resetting bearer [ 301.078918][T15281] tipc: Disabling bearer [ 301.148776][ T34] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 301.509674][T15323] ip6gre1: entered allmulticast mode [ 301.520845][T15323] __nla_validate_parse: 149 callbacks suppressed [ 301.520867][T15323] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2688'. [ 301.538706][T15323] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2688'. [ 301.586890][T15323] geneve4: entered promiscuous mode [ 301.596052][T15323] geneve4: entered allmulticast mode [ 301.981167][T15348] tipc: Enabled bearer , priority 0 [ 301.989821][T15348] syzkaller0: entered promiscuous mode [ 301.995488][T15348] syzkaller0: entered allmulticast mode [ 302.108473][T15348] tipc: Resetting bearer [ 302.129080][T15347] tipc: Resetting bearer [ 302.180344][T15347] tipc: Disabling bearer [ 302.192627][T15356] validate_nla: 4 callbacks suppressed [ 302.192650][T15356] netlink: 'syz.3.2700': attribute type 1 has an invalid length. [ 302.211877][T15356] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2700'. [ 302.233080][T15360] netlink: 'syz.3.2700': attribute type 1 has an invalid length. [ 302.242322][T15360] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2700'. [ 302.367827][T15364] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !寿$ULvyآDUDw}z [ 302.386720][T15368] IPVS: length: 80 != 18456 [ 302.442248][T15370] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2705'. [ 302.876102][T15392] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2711'. [ 302.919133][T15395] netlink: 9 bytes leftover after parsing attributes in process `syz.3.2711'. [ 302.927046][T15394] netlink: 5 bytes leftover after parsing attributes in process `syz.3.2711'. [ 302.949173][T15394] 0{X: renamed from gretap0 [ 302.971968][T15394] 0{X: left promiscuous mode [ 302.977813][T15394] 0{X: entered allmulticast mode [ 302.989160][T15394] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 303.109295][T15397] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2712'. [ 303.168209][T15397] netlink: 'syz.1.2712': attribute type 11 has an invalid length. [ 303.196490][T15397] netlink: 228 bytes leftover after parsing attributes in process `syz.1.2712'. [ 303.371437][T15414] netlink: 'syz.1.2718': attribute type 1 has an invalid length. [ 303.398039][T15417] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 303.436574][T15414] 8021q: adding VLAN 0 to HW filter on device bond8 [ 303.546620][T15421] bond8: (slave geneve2): making interface the new active one [ 303.578961][T15421] bond8: (slave geneve2): Enslaving as an active interface with an up link [ 303.608548][ T6833] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.631502][ T6833] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.677975][ T6833] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.687140][ T6847] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.929964][T15443] netlink: 'syz.3.2724': attribute type 1 has an invalid length. [ 303.965298][T15445] syz.1.2726: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 303.990007][T15443] netlink: 'syz.3.2724': attribute type 2 has an invalid length. [ 304.109497][T15445] CPU: 1 UID: 0 PID: 15445 Comm: syz.1.2726 Not tainted syzkaller #0 PREEMPT(full) [ 304.109542][T15445] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 304.109566][T15445] Call Trace: [ 304.109576][T15445] [ 304.109589][T15445] dump_stack_lvl+0x189/0x250 [ 304.109630][T15445] ? __pfx_dump_stack_lvl+0x10/0x10 [ 304.109659][T15445] ? __pfx__printk+0x10/0x10 [ 304.109693][T15445] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 304.109721][T15445] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 304.109751][T15445] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 304.109780][T15445] warn_alloc+0x214/0x310 [ 304.109815][T15445] ? stack_depot_save_flags+0x40/0x860 [ 304.109849][T15445] ? __pfx_warn_alloc+0x10/0x10 [ 304.109885][T15445] ? kasan_save_track+0x4f/0x80 [ 304.109914][T15445] ? xskq_create+0x56/0x170 [ 304.109942][T15445] ? xsk_init_queue+0xb0/0x110 [ 304.109968][T15445] ? xsk_setsockopt+0x4dc/0x8d0 [ 304.109994][T15445] ? do_sock_setsockopt+0x17c/0x1b0 [ 304.110025][T15445] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 304.110042][T15445] ? do_syscall_64+0xfa/0x3b0 [ 304.110070][T15445] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 304.110099][T15445] __vmalloc_node_range_noprof+0x125/0x12f0 [ 304.110160][T15445] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 304.110197][T15445] ? __kasan_kmalloc+0x93/0xb0 [ 304.110228][T15445] vmalloc_user_noprof+0xad/0xf0 [ 304.110259][T15445] ? xskq_create+0xbf/0x170 [ 304.110289][T15445] xskq_create+0xbf/0x170 [ 304.110321][T15445] xsk_init_queue+0xb0/0x110 [ 304.110352][T15445] xsk_setsockopt+0x4dc/0x8d0 [ 304.110384][T15445] ? __pfx_xsk_setsockopt+0x10/0x10 [ 304.110414][T15445] ? __pfx_aa_sk_perm+0x10/0x10 [ 304.110451][T15445] ? aa_sock_opt_perm+0xff/0x1b0 [ 304.110488][T15445] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 304.110515][T15445] ? __pfx_xsk_setsockopt+0x10/0x10 [ 304.110544][T15445] do_sock_setsockopt+0x17c/0x1b0 [ 304.110585][T15445] __x64_sys_setsockopt+0x13f/0x1b0 [ 304.110611][T15445] do_syscall_64+0xfa/0x3b0 [ 304.110640][T15445] ? lockdep_hardirqs_on+0x9c/0x150 [ 304.110667][T15445] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 304.110689][T15445] ? clear_bhb_loop+0x60/0xb0 [ 304.110714][T15445] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 304.110734][T15445] RIP: 0033:0x7fb3cb98ebe9 [ 304.110763][T15445] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 304.110784][T15445] RSP: 002b:00007fb3cc79e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 304.110809][T15445] RAX: ffffffffffffffda RBX: 00007fb3cbbb5fa0 RCX: 00007fb3cb98ebe9 [ 304.110826][T15445] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 304.110840][T15445] RBP: 00007fb3cba11e19 R08: 0000000000000004 R09: 0000000000000000 [ 304.110853][T15445] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 304.110866][T15445] R13: 00007fb3cbbb6038 R14: 00007fb3cbbb5fa0 R15: 00007ffdd655ee78 [ 304.110897][T15445] [ 304.110912][T15445] Mem-Info: [ 304.434551][T15445] active_anon:9940 inactive_anon:0 isolated_anon:0 [ 304.434551][T15445] active_file:3081 inactive_file:39903 isolated_file:0 [ 304.434551][T15445] unevictable:768 dirty:76 writeback:0 [ 304.434551][T15445] slab_reclaimable:12501 slab_unreclaimable:108736 [ 304.434551][T15445] mapped:29090 shmem:6865 pagetables:1202 [ 304.434551][T15445] sec_pagetables:0 bounce:0 [ 304.434551][T15445] kernel_misc_reclaimable:0 [ 304.434551][T15445] free:1306595 free_pcp:16414 free_cma:0 [ 304.537129][T15445] Node 0 active_anon:42960kB inactive_anon:0kB active_file:12324kB inactive_file:159408kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:116460kB dirty:300kB writeback:0kB shmem:28824kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14276kB pagetables:4576kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 304.571837][T15460] openvswitch: netlink: IP tunnel TTL not specified. [ 304.598078][T15445] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:132kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 304.711308][T15445] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 304.744325][T15445] lowmem_reserve[]: 0 2497 2499 2499 2499 [ 304.755953][T15445] Node 0 DMA32 free:1322388kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:37016kB inactive_anon:0kB active_file:12324kB inactive_file:157828kB unevictable:1536kB writepending:300kB present:3129332kB managed:2557476kB mlocked:0kB bounce:0kB free_pcp:53124kB local_pcp:20988kB free_cma:0kB [ 304.794770][T15445] lowmem_reserve[]: 0 0 1 1 1 [ 304.804012][T15445] Node 0 Normal free:12kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1580kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 304.845517][T15445] lowmem_reserve[]: 0 0 0 0 0 [ 304.854862][T15445] Node 1 Normal free:3888320kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:16416kB local_pcp:10048kB free_cma:0kB [ 304.918739][T15445] lowmem_reserve[]: 0 0 0 0 0 [ 304.923555][T15445] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 304.945580][T15445] Node 0 DMA32: 2244*4kB (UME) 712*8kB (UM) 349*16kB (UME) 589*32kB (UME) 144*64kB (UME) 114*128kB (UM) 53*256kB (UM) 23*512kB (UME) 2*1024kB (U) 0*2048kB 307*4096kB (M) = 1347776kB [ 304.973585][T15445] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 304.993978][T15467] netlink: 'syz.3.2732': attribute type 3 has an invalid length. [ 304.995857][T15445] Node 1 Normal: 232*4kB (UME) 42*8kB (UME) 49*16kB (UME) 142*32kB (UME) 42*64kB (UME) 11*128kB (UME) 3*256kB (ME) 4*512kB (UME) 2*1024kB (UM) 1*2048kB (E) 945*4096kB (M) = 3888320kB [ 305.022646][T15467] netlink: 'syz.3.2732': attribute type 5 has an invalid length. [ 305.029353][T15445] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 305.040930][T15469] netlink: 'syz.4.2731': attribute type 29 has an invalid length. [ 305.050687][T15469] netlink: 'syz.4.2731': attribute type 29 has an invalid length. [ 305.062768][T15445] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 305.078307][T15445] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 305.091075][T15445] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 305.104295][T15445] 44356 total pagecache pages [ 305.110638][T15445] 0 pages in swap cache [ 305.115016][T15445] Free swap = 124996kB [ 305.121690][T15445] Total swap = 124996kB [ 305.126043][T15445] 2097051 pages RAM [ 305.131180][T15445] 0 pages HighMem/MovableOnly [ 305.135967][T15445] 425656 pages reserved [ 305.142323][T15445] 0 pages cma reserved [ 306.021475][T15509] netlink: 'syz.1.2744': attribute type 1 has an invalid length. [ 306.392817][T15540] netlink: 'syz.0.2752': attribute type 11 has an invalid length. [ 306.433874][ T5880] Bluetooth: hci4: command 0x0405 tx timeout [ 306.613597][T15553] macvtap1: entered promiscuous mode [ 306.619243][T15553] vlan0: entered promiscuous mode [ 306.624806][T15553] macvtap1: entered allmulticast mode [ 306.635121][T15553] vlan0: entered allmulticast mode [ 307.028951][T15582] __nla_validate_parse: 16 callbacks suppressed [ 307.028976][T15582] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2766'. [ 307.181554][T15590] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2769'. [ 307.199820][T15591] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2769'. [ 307.223932][T15590] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2769'. [ 307.235107][T15591] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2769'. [ 307.316431][T15599] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.2773'. [ 307.363735][T15600] dvmrp1: entered allmulticast mode [ 308.105725][T15641] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 308.142849][T15648] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 308.441955][T15662] validate_nla: 1 callbacks suppressed [ 308.441982][T15662] netlink: 'syz.0.2791': attribute type 1 has an invalid length. [ 308.466491][T15663] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2790'. [ 308.518849][T15662] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2791'. [ 308.560458][T15665] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2792'. [ 308.786190][T15677] netlink: 216 bytes leftover after parsing attributes in process `syz.4.2795'. [ 308.893487][ T2910] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 308.928784][T15684] netlink: 'syz.3.2799': attribute type 12 has an invalid length. [ 308.929019][T13008] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 308.951806][ T2910] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 309.045531][T15690] netlink: 'syz.2.2802': attribute type 1 has an invalid length. [ 309.237603][T13008] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 309.325517][T15702] netlink: 'syz.0.2807': attribute type 4 has an invalid length. [ 309.464322][T15714] netlink: 'syz.1.2813': attribute type 21 has an invalid length. [ 309.473922][T15714] netlink: 'syz.1.2813': attribute type 5 has an invalid length. [ 309.787693][T13009] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 309.912152][T15736] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 310.813588][T15796] bond9: entered promiscuous mode [ 310.819375][T15796] bond9: entered allmulticast mode [ 310.826447][T15796] 8021q: adding VLAN 0 to HW filter on device bond9 [ 310.835222][T15789] sctp: [Deprecated]: syz.3.2835 (pid 15789) Use of int in max_burst socket option deprecated. [ 310.835222][T15789] Use struct sctp_assoc_value instead [ 310.882591][T15805] netlink: 'syz.0.2840': attribute type 29 has an invalid length. [ 310.892134][T15805] netlink: 'syz.0.2840': attribute type 29 has an invalid length. [ 311.014251][T15807] tipc: Enabled bearer , priority 0 [ 311.032302][T15807] syzkaller0: entered promiscuous mode [ 311.046148][T15807] syzkaller0: entered allmulticast mode [ 311.099317][T15807] tipc: Resetting bearer [ 311.111357][T15806] tipc: Resetting bearer [ 311.152800][T15806] tipc: Disabling bearer [ 311.366750][T15830] netlink: 'syz.0.2850': attribute type 1 has an invalid length. [ 311.393527][T15830] netlink: 'syz.0.2850': attribute type 3 has an invalid length. [ 311.420246][T15830] NCSI netlink: No device for ifindex 813332851 [ 311.684600][T15845] tipc: New replicast peer: 255.255.255.255 [ 311.717723][T15845] tipc: Enabled bearer , priority 10 [ 311.837624][T15858] tipc: Enabled bearer , priority 0 [ 311.860736][T15858] syzkaller0: entered promiscuous mode [ 311.885250][T15858] syzkaller0: entered allmulticast mode [ 312.196733][T15849] tipc: Resetting bearer [ 312.225476][T15849] tipc: Disabling bearer [ 312.461262][T15896] __nla_validate_parse: 25 callbacks suppressed [ 312.461286][T15896] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2868'. [ 312.473027][T15897] netlink: 96 bytes leftover after parsing attributes in process `syz.3.2866'. [ 312.510239][T15897] 8021q: VLANs not supported on sit0 [ 312.837612][T13009] tipc: Node number set to 548104576 [ 312.959970][T15924] tipc: New replicast peer: 255.255.255.255 [ 312.998796][T15924] tipc: Enabled bearer , priority 10 [ 313.018805][T15925] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2878'. [ 313.111004][T15922] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2876'. [ 313.307048][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 313.375911][T15954] netlink: 404 bytes leftover after parsing attributes in process `syz.1.2886'. [ 313.399691][T15954] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2886'. [ 313.447083][T15954] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2886'. [ 313.479256][T15954] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2886'. [ 313.491984][T15955] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 313.510959][T15960] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2889'. [ 313.888101][T15969] pim6reg1: entered promiscuous mode [ 313.903126][T15969] pim6reg1: entered allmulticast mode [ 314.153749][T15981] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2894'. [ 314.183508][ T5880] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 314.203157][ T5880] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 314.217630][ T5880] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 314.228490][ T5880] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 314.250885][ T5880] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 314.786222][ T34] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 314.989339][ T34] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 315.141173][ T30] audit: type=1800 audit(1755734021.052:7): pid=16013 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2905" name="memory.events" dev="tmpfs" ino=2936 res=0 errno=0 [ 315.201384][ T34] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 315.370082][ T34] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 315.536058][T16024] syzkaller1: entered promiscuous mode [ 315.552034][T16024] syzkaller1: entered allmulticast mode [ 315.619470][T15980] chnl_net:caif_netlink_parms(): no params data found [ 315.879620][T16053] validate_nla: 1 callbacks suppressed [ 315.879644][T16053] netlink: 'syz.4.2914': attribute type 1 has an invalid length. [ 316.020121][T16057] bond0: (slave rose0): Error: Device can not be enslaved while up [ 316.347491][ T5882] Bluetooth: hci5: command tx timeout [ 316.890519][ T34] ` (unregistering): Released all slaves [ 316.917612][ T34] bond1 (unregistering): Released all slaves [ 317.065269][ T34] bond0 (unregistering): Released all slaves [ 317.192336][ T34] bond2 (unregistering): Released all slaves [ 317.222068][T16070] sch_fq: defrate 0 ignored. [ 317.322330][T16082] syzkaller1: entered promiscuous mode [ 317.338041][T16082] syzkaller1: entered allmulticast mode [ 317.384137][T15980] bridge0: port 1(bridge_slave_0) entered blocking state [ 317.403835][T15980] bridge0: port 1(bridge_slave_0) entered disabled state [ 317.416258][T15980] bridge_slave_0: entered allmulticast mode [ 317.424551][T15980] bridge_slave_0: entered promiscuous mode [ 317.455499][T16094] openvswitch: netlink: ct_state flags 9c1308ca unsupported [ 317.463601][ T34] : left promiscuous mode [ 317.508629][T15980] bridge0: port 2(bridge_slave_1) entered blocking state [ 317.516028][T15980] bridge0: port 2(bridge_slave_1) entered disabled state [ 317.547792][T15980] bridge_slave_1: entered allmulticast mode [ 317.555947][T15980] bridge_slave_1: entered promiscuous mode [ 317.635923][T16099] __nla_validate_parse: 9 callbacks suppressed [ 317.635946][T16099] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2928'. [ 317.688616][ T34] tipc: Disabling bearer [ 317.698926][ T34] tipc: Disabling bearer [ 317.729965][ T34] tipc: Disabling bearer [ 317.735589][ T34] tipc: Left network mode [ 317.806507][T15980] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 318.068306][T15980] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 318.253348][T16111] Bluetooth: hci1: Opcode 0x0401 failed: -4 [ 318.380689][T15980] team0: Port device team_slave_0 added [ 318.400663][T15980] team0: Port device team_slave_1 added [ 318.430274][ T5882] Bluetooth: hci5: command tx timeout [ 318.479967][T16114] IPv6: Can't replace route, no match found [ 318.770285][T15980] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 318.787902][T15980] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 318.815675][T15980] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 318.831603][T16136] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2937'. [ 318.842732][T15980] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 318.852800][T15980] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 318.895403][T15980] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 318.978120][T16145] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2939'. [ 319.027031][T16149] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2938'. [ 319.064029][T16145] bridge_slave_1: left allmulticast mode [ 319.074364][T16149] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2938'. [ 319.101612][T16149] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2938'. [ 319.106180][T16145] bridge_slave_1: left promiscuous mode [ 319.113481][T16149] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2938'. [ 319.126226][T16145] bridge0: port 2(bridge_slave_1) entered disabled state [ 319.141672][T16145] bridge_slave_0: left allmulticast mode [ 319.148569][T16145] bridge_slave_0: left promiscuous mode [ 319.155404][T16145] bridge0: port 1(bridge_slave_0) entered disabled state [ 319.254740][T15980] hsr_slave_0: entered promiscuous mode [ 319.269964][T15980] hsr_slave_1: entered promiscuous mode [ 319.284407][T15980] debugfs: 'hsr0' already exists in 'hsr' [ 319.316944][T15980] Cannot create hsr debugfs directory [ 319.564608][T16163] netlink: 5120 bytes leftover after parsing attributes in process `syz.3.2945'. [ 319.622574][ T34] batadv_slave_1: left promiscuous mode [ 319.661944][T16169] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2946'. [ 319.747632][ T34] hsr_slave_0: left promiscuous mode [ 319.758485][T16176] netlink: 'syz.2.2946': attribute type 83 has an invalid length. [ 319.773503][ T34] hsr_slave_1: left promiscuous mode [ 320.267162][ T5882] Bluetooth: hci1: command 0x0406 tx timeout [ 320.517615][ T5882] Bluetooth: hci5: command tx timeout [ 320.844736][T16195] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2951'. [ 321.627058][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 322.393931][ T34] IPVS: stop unused estimator thread 0... [ 322.586908][ T5882] Bluetooth: hci5: command tx timeout [ 322.931981][T15980] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 322.964709][T15980] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 323.008013][T15980] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 323.034680][T15980] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 323.236009][T15980] 8021q: adding VLAN 0 to HW filter on device bond0 [ 323.250174][T16247] netlink: 'syz.4.2966': attribute type 6 has an invalid length. [ 323.276245][T16247] netlink: 'syz.4.2966': attribute type 6 has an invalid length. [ 323.298565][ T30] audit: type=1800 audit(1755734029.212:8): pid=16252 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2968" name="memory.events" dev="tmpfs" ino=3064 res=0 errno=0 [ 323.298762][T16252] __nla_validate_parse: 3 callbacks suppressed [ 323.298781][T16252] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2968'. [ 323.332984][T15980] 8021q: adding VLAN 0 to HW filter on device team0 [ 323.363724][T16247] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2966'. [ 323.383493][ T30] audit: type=1804 audit(1755734029.222:9): pid=16252 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.2968" name="/newroot/597/memory.events" dev="tmpfs" ino=3064 res=1 errno=0 [ 323.431401][ T6833] bridge0: port 1(bridge_slave_0) entered blocking state [ 323.438757][ T6833] bridge0: port 1(bridge_slave_0) entered forwarding state [ 323.472479][ T6833] bridge0: port 2(bridge_slave_1) entered blocking state [ 323.479742][ T6833] bridge0: port 2(bridge_slave_1) entered forwarding state [ 323.531283][T16259] veth19: entered allmulticast mode [ 323.977348][T16277] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2976'. [ 324.015408][T15980] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 324.266465][T15980] veth0_vlan: entered promiscuous mode [ 324.302230][T15980] veth1_vlan: entered promiscuous mode [ 324.373589][T16298] netlink: 84 bytes leftover after parsing attributes in process `syz.4.2984'. [ 324.405992][T16296] openvswitch: netlink: Flow key attr not present in new flow. [ 324.411304][T15980] veth0_macvtap: entered promiscuous mode [ 324.454691][T15980] veth1_macvtap: entered promiscuous mode [ 324.523419][T15980] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 324.565873][T16307] netlink: 'syz.4.2987': attribute type 10 has an invalid length. [ 324.576110][T15980] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 324.633810][ T1331] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.663819][ T6833] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.682756][ T6833] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.713669][T16314] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 324.725500][ T6833] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.953631][T16319] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2990'. [ 324.979783][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 325.003304][T16325] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2992'. [ 325.015091][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 325.117070][ T2910] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 325.137556][ T2910] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 325.250034][T16332] bond10 (unregistering): Released all slaves [ 325.448828][T16346] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2996'. [ 325.842907][T16356] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2999'. [ 326.013179][T16364] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2999'. [ 326.384452][T16383] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3005'. [ 326.495247][ T5876] Oops: general protection fault, probably for non-canonical address 0xdffffc000000000b: 0000 [#1] SMP KASAN PTI [ 326.507189][ T5876] KASAN: null-ptr-deref in range [0x0000000000000058-0x000000000000005f] [ 326.515632][ T5876] CPU: 1 UID: 0 PID: 5876 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 326.525117][ T5876] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 326.535185][ T5876] RIP: 0010:klist_remove+0x14a/0x340 [ 326.540493][ T5876] Code: 4d 89 f5 49 c1 ed 03 43 80 7c 3d 00 00 74 08 4c 89 f7 e8 e9 8c b3 f6 4d 8b 26 49 83 e4 fe 49 8d 7c 24 58 48 89 f8 48 c1 e8 03 <42> 80 3c 38 00 74 05 e8 ca 8c b3 f6 49 8b 44 24 58 48 89 44 24 08 [ 326.560104][ T5876] RSP: 0018:ffffc9000414f600 EFLAGS: 00010202 [ 326.566184][ T5876] RAX: 000000000000000b RBX: ffff88802eae5a00 RCX: 0000000000000000 [ 326.574164][ T5876] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000058 [ 326.582144][ T5876] RBP: ffffc9000414f6e8 R08: ffffffff8f89f843 R09: 1ffffffff1f13f08 [ 326.590122][ T5876] R10: dffffc0000000000 R11: fffffbfff1f13f09 R12: 0000000000000000 [ 326.598096][ T5876] R13: 1ffff1100b0ea10c R14: ffff888058750860 R15: dffffc0000000000 [ 326.606075][ T5876] FS: 0000000000000000(0000) GS:ffff888125d1b000(0000) knlGS:0000000000000000 [ 326.615012][ T5876] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 326.621595][ T5876] CR2: 0000200000001300 CR3: 000000007b1c2000 CR4: 00000000003526f0 [ 326.629574][ T5876] Call Trace: [ 326.632860][ T5876] [ 326.635801][ T5876] ? __pfx_klist_remove+0x10/0x10 [ 326.640842][ T5876] ? __pfx_kobject_move+0x10/0x10 [ 326.645970][ T5876] ? get_device_parent+0x366/0x3a0 [ 326.651085][ T5876] device_move+0x193/0x700 [ 326.655509][ T5876] hci_conn_del_sysfs+0xb8/0x170 [ 326.660469][ T5876] hci_conn_del+0x9b7/0xd60 [ 326.665007][ T5876] hci_conn_hash_flush+0x191/0x230 [ 326.670141][ T5876] hci_dev_close_sync+0xaef/0x1330 [ 326.675270][ T5876] ? __pfx_hci_dev_close_sync+0x10/0x10 [ 326.680826][ T5876] ? up_write+0x1c4/0x420 [ 326.685172][ T5876] hci_unregister_dev+0x21a/0x510 [ 326.690226][ T5876] vhci_release+0x80/0xd0 [ 326.694571][ T5876] ? __pfx_vhci_release+0x10/0x10 [ 326.699624][ T5876] __fput+0x44c/0xa70 [ 326.703625][ T5876] task_work_run+0x1d1/0x260 [ 326.708233][ T5876] ? __pfx_task_work_run+0x10/0x10 [ 326.713358][ T5876] ? kmem_cache_free+0x18f/0x400 [ 326.718312][ T5876] do_exit+0x6b5/0x2300 [ 326.722480][ T5876] ? do_raw_spin_lock+0x121/0x290 [ 326.727554][ T5876] ? __pfx_do_exit+0x10/0x10 [ 326.732160][ T5876] do_group_exit+0x21c/0x2d0 [ 326.736767][ T5876] ? lockdep_hardirqs_on+0x9c/0x150 [ 326.741984][ T5876] get_signal+0x1286/0x1340 [ 326.746504][ T5876] arch_do_signal_or_restart+0x9a/0x750 [ 326.752244][ T5876] ? fput_close_sync+0x119/0x200 [ 326.757189][ T5876] ? kmem_cache_free+0x309/0x400 [ 326.762138][ T5876] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 326.768316][ T5876] ? exit_to_user_mode_loop+0x40/0x110 [ 326.773946][ T5876] exit_to_user_mode_loop+0x75/0x110 [ 326.779246][ T5876] do_syscall_64+0x2bd/0x3b0 [ 326.783855][ T5876] ? lockdep_hardirqs_on+0x9c/0x150 [ 326.789064][ T5876] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 326.795136][ T5876] ? clear_bhb_loop+0x60/0xb0 [ 326.799825][ T5876] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 326.805725][ T5876] RIP: 0033:0x7f781998d5fc [ 326.810153][ T5876] Code: Unable to access opcode bytes at 0x7f781998d5d2. [ 326.817173][ T5876] RSP: 002b:00007ffe98777060 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 326.825621][ T5876] RAX: fffffffffffffe00 RBX: 0000000000000003 RCX: 00007f781998d5fc [ 326.833607][ T5876] RDX: 0000000000000030 RSI: 00007ffe98777120 RDI: 00000000000000f9 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 326.841598][ T5876] RBP: 00007ffe987770cc R08: 0000000000000000 R09: 00007ffe98776dd7 [ 326.849663][ T5876] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000025c [ 326.857642][ T5876] R13: 00000000000927c0 R14: 000000000004f736 R15: 00007ffe98777120 [ 326.865629][ T5876] [ 326.868670][ T5876] Modules linked in: [ 326.874177][ T5876] ---[ end trace 0000000000000000 ]--- [ 326.999268][ T5876] RIP: 0010:klist_remove+0x14a/0x340 [ 327.004635][ T5876] Code: 4d 89 f5 49 c1 ed 03 43 80 7c 3d 00 00 74 08 4c 89 f7 e8 e9 8c b3 f6 4d 8b 26 49 83 e4 fe 49 8d 7c 24 58 48 89 f8 48 c1 e8 03 <42> 80 3c 38 00 74 05 e8 ca 8c b3 f6 49 8b 44 24 58 48 89 44 24 08 [ 327.050720][ T5876] RSP: 0018:ffffc9000414f600 EFLAGS: 00010202 [ 327.076977][ T5876] RAX: 000000000000000b RBX: ffff88802eae5a00 RCX: 0000000000000000 [ 327.085071][ T5876] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000058 [ 327.135222][ T5876] RBP: ffffc9000414f6e8 R08: ffffffff8f89f843 R09: 1ffffffff1f13f08 [ 327.173527][ T5876] R10: dffffc0000000000 R11: fffffbfff1f13f09 R12: 0000000000000000 [ 327.207293][ T5876] R13: 1ffff1100b0ea10c R14: ffff888058750860 R15: dffffc0000000000 [ 327.215354][ T5876] FS: 0000000000000000(0000) GS:ffff888125c1b000(0000) knlGS:0000000000000000 [ 327.254125][ T5876] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 327.261259][ T5876] CR2: 0000563e1d56a000 CR3: 000000000df36000 CR4: 00000000003526f0 [ 327.269682][ T5876] Kernel panic - not syncing: Fatal exception [ 327.276187][ T5876] Kernel Offset: disabled [ 327.280528][ T5876] Rebooting in 86400 seconds..