last executing test programs: 38.95567405s ago: executing program 3 (id=3066): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_TYPE={0x5}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB="240000000104010200000180000000000000000008000540000000000500010001"], 0x24}}, 0x0) (async) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000280)={0x24, 0x1, 0x4, 0x5, 0x0, 0x0, {}, [@NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x3}, @NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x24}}, 0x0) r2 = syz_init_net_socket$ax25(0x3, 0x2, 0xcf) ioctl$SIOCAX25OPTRT(r2, 0x89e7, &(0x7f00000000c0)={@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x2, 0x56}) (async) r3 = socket(0x10, 0x803, 0x0) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x900, 0x0) close(r5) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r6) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) (async) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) r8 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r8) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x5c, 0x3, 0xa, 0x301, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_HOOK_DEV={0x14, 0x3, 'gretap0\x00'}]}]}], {0x14}}, 0xa4}}, 0x0) (async) r10 = socket$unix(0x1, 0x1, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000200)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r12, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff3, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x40000006}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0xd, 0xfffffffffffffff8, 0x2, 0x8001, 0x8000059, 0x3ff}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x2000c040}, 0x0) (async) sendmsg$nl_route_sched(r11, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56f41, 0x1070b923, 0x80001, {0x0, 0x0, 0x0, r12, {0x0, 0xd}, {0xd, 0xb}, {0xd, 0xd}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}}, 0x4008000) (async) ioctl$SIOCSIFHWADDR(r8, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) (async) sendto(r3, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r3, 0x0, 0x61, &(0x7f0000000100)={'filter\x00', 0x4}, 0x68) 38.644479035s ago: executing program 3 (id=3068): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f0000001c80)=[{{&(0x7f0000000240)={0xa, 0x4e21, 0x8000001, @private0}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000000440)="14", 0x1}], 0x1}}], 0x1, 0x931766f6319eed40) shutdown(r0, 0x1) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}, {0x0}, {&(0x7f0000001480)}], 0x3) ioctl$FS_IOC_GETFSMAP(r0, 0x40305839, &(0x7f0000000100)=ANY=[@ANYBLOB="00000000000800000000000000000000000000000002ac8fcb528515ea1bce63ede2f4bbf1dfa950dc08041e21b24f64292fa67634b8b84ab71d433e6a91dabd2a93a5692ac50ed17447a031bd5b98650acd837dd8cbac41b3c8ba67aa6d886b5f497698eb83ceaa7c96b24c2e7e1ccb2fc1a776b796d864540e325633f8cd821fc7f8a34203004e091976c78a2958"]) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_timeval(r1, 0x1, 0x2, 0x0, 0x48) getsockopt$inet6_mptcp_buf(r1, 0x11c, 0x4, &(0x7f0000000000)=""/152, &(0x7f00000005c0)=0x98) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0xc, [@struct={0x4, 0x1, 0x0, 0x4, 0x0, 0x1, [{0xa, 0x3, 0x6}]}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x20}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2}}]}, {0x0, [0x61, 0x0, 0x2e, 0x2e, 0x61, 0x61, 0x2e, 0x61, 0x0, 0x5f]}}, 0x0, 0x64}, 0x28) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000000)={0x0, 0xb8, "d4f5e53c11cf9ccada6d0b4f8515a3e7400582aea6ca94aeedb597d4a77e1f5b1b6e89f52ed2a02747e5da1def3405dda5e139dba36bda52fcf694c63d55e1ed3ae036132a4d0c94f84ebe67defcf7273963259cfcfce895f3c19f0265f7b194c7d6e92193f14f4cafbdd8eb11020375cf384ab4f93d26316ef7fba46cc7213c9f5acd1b935f195f6c3788999b385a025d91a2b9dc957f455bc59959f01b62ec8235e1283c203b2dff6c75470406126a5ebeea175baaf867"}, &(0x7f00000000c0)=0xc0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newtaction={0xb4, 0x30, 0x48b, 0x0, 0x0, {}, [{0xa0, 0x1, [@m_ctinfo={0x48, 0x2, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3f, {0x1, 0x7, 0x7, 0x1, 0x3}}]}, {0x4}, {0xc}, {0xc}}}, @m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x18, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{}, @multicast2, @remote}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xb4}}, 0x980) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000280)={r2, 0x9}, &(0x7f0000000340)=0x8) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$pptp(0x18, 0x1, 0x2) ioctl$sock_bt_hci(r4, 0x800448d2, &(0x7f0000000240)="74ad96f494") 38.362654086s ago: executing program 3 (id=3070): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket(0xa, 0x5, 0x0) sendmsg$inet_sctp(r1, &(0x7f00000000c0)={&(0x7f0000000000)=@in6={0xa, 0x4e24, 0xff, @loopback, 0x5}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000100)="e6", 0x1}], 0x1, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x30, 0x4855}, 0x24000052) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000100)={0x3, &(0x7f0000000000)=[{0x40, 0x4, 0x3, 0xfff00000}, {0x50, 0x7, 0x5, 0xfffffffc}, {0x6, 0x25, 0x7, 0x205}]}, 0x10) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r0) 37.349083325s ago: executing program 3 (id=3073): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x0, @local}, 0x2}}, 0x26) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB='<\f\x00\x00', @ANYRES16=r2, @ANYBLOB="010027bd60000400000005000000080009000200000008000c00a80a0000060001000700000008000b0020000000050012007f000000"], 0x3c}}, 0x20) 28.392340575s ago: executing program 2 (id=3122): r0 = socket$inet6_udp(0xa, 0x2, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000002b40), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)={0x3c, r2, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000480)={0x220, r2, 0x400, 0x70bd29, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}]}, 0x220}, 0x1, 0x0, 0x0, 0x40000}, 0x4810) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xf, 0x4, 0x8, 0x9}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r3, &(0x7f0000000bc0), &(0x7f0000000c00)=@udp6=r0}, 0x20) (async) close(0x3) 28.209269547s ago: executing program 2 (id=3125): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 28.05113729s ago: executing program 2 (id=3128): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000040)=0x3) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000080)={0x281, 0x3}) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_ADD_KEY(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r1, 0x10, 0x70bd25, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x1c}]}, 0x1c}, 0x1, 0x0, 0x0, 0x810}, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x0, 0x0) (async) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000040)=0x3) (async) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000080)={0x281, 0x3}) (async) syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), 0xffffffffffffffff) (async) sendmsg$IEEE802154_LLSEC_ADD_KEY(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r1, 0x10, 0x70bd25, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x1c}]}, 0x1c}, 0x1, 0x0, 0x0, 0x810}, 0x0) (async) 27.561362348s ago: executing program 2 (id=3131): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0x44, 0x10, 0xc362e63b3f31ba5f, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@IFLA_GROUP={0x8}, @IFLA_VFINFO_LIST={0x1c, 0x16, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0xfffffffd, 0x40000000800}}]}]}]}, 0x44}}, 0x0) (async, rerun: 32) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000006b00)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 32) sendmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [r3]}}], 0x18, 0x4060019}, 0x20000041) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) ioctl$TUNGETVNETBE(r0, 0x800454df, &(0x7f0000000100)) 27.477528159s ago: executing program 1 (id=3132): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="467ca03784ad5e70140000002d000b0000000000"], 0x14}, 0x1, 0x0, 0x0, 0x8005}, 0xc00) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0) r2 = accept4$x25(r1, 0x0, &(0x7f00000000c0), 0x80000) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@setlink={0x44, 0x13, 0x5, 0x2, 0x8000, {0x0, 0x0, 0x0, 0x0, 0x408, 0xc002}, [@IFLA_IFNAME={0x14, 0x3, 'bridge_slave_1\x00'}, @IFLA_MASTER={0x8}, @IFLA_PORT_SELF={0x8, 0x19, 0x0, 0x1, [@IFLA_PORT_PROFILE={0x4}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000084}, 0x0) ioctl$SIOCX25SSUBSCRIP(r2, 0x89e1, &(0x7f0000000200)={'veth1_to_bond\x00', 0x2, 0x7}) 27.30087199s ago: executing program 2 (id=3133): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB="200000006a00010028bd7000ff5bdf97366317bd6caa36ff070001"], 0x20}, 0x1, 0x0, 0x0, 0x84}, 0x24000010) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000000)={0x0, @in={{0x2, 0x4e23, @private=0xa010101}}, 0x7ff}, &(0x7f00000000c0)=0x90) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000100)={r2, 0x15}, &(0x7f0000000140)=0x8) 27.283290902s ago: executing program 1 (id=3134): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) close(0xffffffffffffffff) r1 = socket(0x2b, 0x80801, 0x1) connect$inet6(r1, &(0x7f00000001c0)={0xa, 0x4e23, 0x3ff, @empty, 0xfffffffe}, 0x1c) sendmsg$TIPC_NL_MON_GET(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={0x0}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000) sendmsg$L2TP_CMD_SESSION_CREATE(r1, 0x0, 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b19, &(0x7f0000000000)={'wlan0\x00', @random="002400009e4f"}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth1_vlan\x00', 0x0}) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$inet(r3, &(0x7f00000005c0)={&(0x7f0000000380)={0x2, 0x4e22, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@ip_ttl={{0x14, 0x0, 0x34, 0x254c}}], 0x18}, 0x24008004) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000001c0)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000000)={@ipv4={'\x00', '\xff\xff', @broadcast}, 0x21, r5}) setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000004c40)={@remote, r5}, 0x14) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_TSINFO_GET(r6, &(0x7f0000000100)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="08002bbd7000fddbdf251900000004000180040001800c00018008000100", @ANYRES32=r2, @ANYBLOB="2908179ece4ce7da040001804406edfa4670c0f5c13d0f46c1ceb1bba65de6d1c3b2"], 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x41004) ioctl$sock_netdev_private(r0, 0x8918, &(0x7f0000000540)="cc1a0f34d4739cbca5a66c2108a56098e55981abd37a0ccfb0406b76a621f804e8cba28117f09c4e27854a0fe01067c9c61e19a320b6c21bd4b20d084564d21c261e7bc3fd4871c04d4155fef0833a618c5f03f1ef6e86e159d2486e") syz_init_net_socket$rose(0xb, 0x5, 0x0) r7 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r7, 0x0, 0x0) connect$rose(r7, &(0x7f00000000c0)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, 0x6, [@default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x40) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000600)=ANY=[@ANYBLOB="36ed5b859df3c78b8394e5ad4913b39ee1989c9029bb83347819a4ce9f1c6af53ea1133dc95d95d1355de353d5c87b53b8cc2e3b8d1aa03cccad9eef5ddbce732ad042470ccda5f3f5574ad461a361af841c7b3b3904caf2da57365904944a2b5c2647335905ea1b13e617502a416414b1e35916fb4ee9c73692f0ec5f80d2bbc317f08b4b08ddb71048677e787a9592828c1c5ccc99b9037e968da317f76ecd9688d42e73a0f2"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x31}, 0x94) bind$alg(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4008840) socket(0x26, 0x80805, 0x7) 25.798660666s ago: executing program 2 (id=3135): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000100)={'wpan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000100)={'wpan0\x00', 0x0}) syz_genetlink_get_family_id$nl802154(&(0x7f00000009c0), r0) (async) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f00000009c0), r0) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a00)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES8=r1, @ANYBLOB="010026bd7000fddbdf252100000008000300", @ANYRES16=r2, @ANYBLOB="24002d00040001"], 0x40}, 0x1, 0x0, 0x0, 0xc041}, 0x0) (async) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a00)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES8=r1, @ANYBLOB="010026bd7000fddbdf252100000008000300", @ANYRES16=r2, @ANYBLOB="24002d00040001"], 0x40}, 0x1, 0x0, 0x0, 0xc041}, 0x0) unshare(0x6a040000) r3 = socket$l2tp(0x2, 0x2, 0x73) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xe, 0x4, 0x4, 0x1}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x4, &(0x7f0000000680)={{r4}, &(0x7f0000000540), 0x0}, 0x20) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)=0x20) write$bt_hci(r5, &(0x7f0000000040)=ANY=[], 0x6) bind$inet(r3, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) connect$inet(r3, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) (async) connect$inet(r3, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000004340)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x4004844}, 0x0) sendmmsg$inet(r3, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x94173000) bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0)={0x0, r3}, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="9beb01031800000000000000000000008000000002"], 0x0, 0x1a}, 0x28) socket$kcm(0xa, 0x5, 0x0) (async) r6 = socket$kcm(0xa, 0x5, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000100)={@void, @val={0x0, 0x4, 0x2, 0xb5a, 0x8, 0x8de}, @llc={@snap={0xaa, 0x1, "f8", "9ea6e9", 0x6004, "668536ebb71d264b10f185530aaf57cef6898769175549209e00c4a0bc9f556435121a284680928ae9f59d452dc78113b2458e732e9e826716391e589af387e2e2bc2d1ce9e296fbc142c04ff2edd978befcff3713f9d346dccbe7958e5ac9f559d935787412d0fd714fac13633dce1df9a4e3f0dcb3b937ea2f317689bed0dc058ad9fc6881"}}}, 0x98) ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x8916, &(0x7f0000000000)={r6}) 25.695998209s ago: executing program 0 (id=3136): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x13, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000fd3f0000000000000900000085000000b50000009500000000000000e22effa19c570d295dada9fdfb750300000000000000dfe6e93dab03135588cbb6d54163e51f4c5af4f705d55dfc74e2487b2a7ba97cf565137ac0be2f22717b1eb5847faebcbce7e21de401ec714eaab6d1d867c561ef84506ccff50fa276252773e61063f374844cf652f5fd39e7d4f0bc78a9e4fe2880a55bb2aa8f66d293022855a732cc1d03e0592041e1ce5db67a1734c706e0a16e246f5b1279"], &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0xc, 0xb, &(0x7f00000000c0)=ANY=[@ANYBLOB="18040000000000000000000000000000180000002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], &(0x7f00000005c0)='GPL\x00'}, 0x90) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="4c0000001800ddd000000000000000000200000000000d0500000000060015000500000028001680240001009e"], 0x4c}}, 0x0) (async) r1 = socket$inet6(0xa, 0x2, 0x3a) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000300)={&(0x7f0000000080)={0x28, 0x3, 0x8, 0x401, 0x0, 0x0, {0x2}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x86dd}]}, 0x28}, 0x1, 0x0, 0x0, 0x14}, 0x4040841) sendmmsg$inet6(r1, &(0x7f0000000800)=[{{&(0x7f00000000c0)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x40}, 0x6}, 0x1c, &(0x7f0000000b40)=[{&(0x7f0000000380)="89c3d2487d86afcd5ec4a72f272b9cdcda7d9b9e6faebfb4642f679b1b2e22428b262a002fef1d222d4c5675bf87f51a3f1ab59d5cf4210f9e4889b1ba5b849807395ee789eb0ccc0e06fd7aba6d605154e768d43d76d418d84ef8a40a648b5a0cca95d93d2348a7d51e00efc7bf82a30325cb53e9fb7551d2d0d744bcc675ccffa7647aea5bb5a9f137b4e358992d179bc41eef9582076caf1c102c", 0x9c}], 0x1, &(0x7f0000000440)=[@rthdrdstopts={{0x20, 0x29, 0x37, {0x0, 0x0, '\x00', [@pad1, @pad1]}}}, @dstopts_2292={{0x88, 0x29, 0x4, {0xc, 0xd, '\x00', [@hao={0xc9, 0x10, @empty}, @hao={0xc9, 0x10, @loopback}, @hao={0xc9, 0x10, @local}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @hao={0xc9, 0x10, @private0}, @jumbo={0xc2, 0x4, 0x6c0}, @hao={0xc9, 0x10, @private0={0xfc, 0x0, '\x00', 0x1}}, @ra={0x5, 0x2, 0xf9cc}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}]}}}, @dstopts_2292={{0x38, 0x29, 0x4, {0x2c, 0x3, '\x00', [@hao={0xc9, 0x10, @private2}, @jumbo, @ra={0x5, 0x2, 0x7f}]}}}, @flowinfo={{0x14, 0x29, 0xb, 0xfc}}], 0xf8}}], 0x1, 0x4c0c0) (async) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'ipvlan1\x00', 0x1}) 25.695573359s ago: executing program 1 (id=3137): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 25.489744146s ago: executing program 0 (id=3139): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000001500000000000000000000000200000000000000000008"], 0x1c}}, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e00000027f0000010000000003"], 0x1c) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f00000008c0)={0x1, {{0x2, 0x0, @multicast2}}}, 0x88) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) 25.393262158s ago: executing program 1 (id=3140): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={@mcast2, @empty, @mcast1, 0x9, 0x5, 0x1, 0x0, 0xea43, 0x900003}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000080)={'ip6gre0\x00', 0x0, 0x2f, 0xe8, 0xa8, 0x6, 0x53, @mcast1, @private2, 0x20, 0x8000, 0x0, 0x4}}) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-160\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) r5 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r5, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x34004811) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r6, 0x0, 0x0) r7 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08061cdc030ec080fffffffe0000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800030006010000bdad446b9bbc7a46e3988285dcdf12f2130809d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff000000000000000000", 0x89}], 0x1}, 0x0) recvmsg(r4, &(0x7f0000000c00)={0x0, 0x0, 0x0}, 0x2000) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0), 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000000c0)='ns/net\x00') pipe(&(0x7f0000000240)={0xffffffffffffffff}) splice(r10, &(0x7f00000002c0)=0x3, r9, 0x0, 0xfffffffffffffff7, 0x0) r11 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newtaction={0x6c, 0x30, 0x871a15abc695f91d, 0x0, 0x80000, {}, [{0x58, 0x1, [@m_vlan={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xcc1}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x3468802, 0x40, 0x1, 0x3, 0x80000000}, 0x3}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) sendmmsg(r11, &(0x7f00000002c0), 0x40000000000009f, 0x0) ioctl$INCFS_IOC_PERMIT_FILL(r9, 0x40046721, &(0x7f0000000340)={r11}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r13 = socket$nl_route(0x10, 0x3, 0x0) r14 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r14, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xffe0, 0x10}, {0xd}, {0xe, 0x10}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x400c800}, 0x0) sendmsg$nl_route_sched(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0xd0f, 0x0, 0x25dfdbfb, {0x60, 0x0, 0x0, r12, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8}}]}, 0x30}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x6, '\x00', r2, 0xffffffffffffffff, 0x4, 0x1, 0x1}, 0x50) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000840)=ANY=[@ANYBLOB="3c0000001800ef0100000000000000000a00000000000000000000000c00090008000000", @ANYRES32=r12, @ANYBLOB="1400050000000000000000000000e3"], 0x3c}, 0x1, 0x11}, 0x0) 25.284507592s ago: executing program 4 (id=3141): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'macvlan0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10111}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}}, 0x40) r3 = socket(0x10, 0x3, 0x0) socket$alg(0x26, 0x5, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r3, 0x84, 0x6c, &(0x7f0000000200)={0x0, 0x22, "c301ecf75aa658c2811c12870faf982889766b32008a65a89d9969f14680e0233507"}, &(0x7f0000000240)=0x2a) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000280)={r4, 0xff}, &(0x7f00000002c0)=0x8) socket$inet6_sctp(0xa, 0x5, 0x84) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newtaction={0x60, 0x30, 0xcac229faa96ee7df, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x60}, 0x1, 0x500}, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r5, 0x800452d2, &(0x7f0000000100)) syz_genetlink_get_family_id$ipvs(0x0, r2) 25.260818403s ago: executing program 0 (id=3142): socket$kcm(0x10, 0x2, 0x0) (async) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000026006bab9a3fe3d86e17aa31106b876c1d0000007ea60864160af36504001a0038001d004231a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb5b64f69853362ac3407173ec", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4080) recvmsg$kcm(r0, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) (async) recvmsg$kcm(r0, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) recvmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x40000100) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000004c0)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0xffffffffffffffff, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x40597, 0x4b7bc}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20004844}, 0x8000002) recvmsg$kcm(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x1c1341, 0x0) (async) r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x1c1341, 0x0) socket(0x10, 0x3, 0x0) (async) r5 = socket(0x10, 0x3, 0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'macvlan0\x00'}) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="54000000100101000000", @ANYRES32, @ANYBLOB="7240146c00000000340012800c0001006d6163766c616e0024"], 0x54}}, 0x0) (async) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="54000000100101000000", @ANYRES32, @ANYBLOB="7240146c00000000340012800c0001006d6163766c616e0024"], 0x54}}, 0x0) r7 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r8) ioctl$IOCTL_GET_NCIDEV_IDX(r7, 0x0, &(0x7f00000000c0)) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r7, 0x0, &(0x7f00000000c0)=0x0) bind$rds(r5, &(0x7f0000000300)={0x2, 0x4e24, @multicast2}, 0x10) (async) bind$rds(r5, &(0x7f0000000300)={0x2, 0x4e24, @multicast2}, 0x10) sendmsg$NFC_CMD_DEV_UP(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r9, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r10], 0x1c}}, 0x0) connect$nfc_llcp(r5, &(0x7f0000000240)={0x27, r10, 0xffffffffffffffff, 0x7, 0xc0, 0xd, "9c11e06f108bfa75f452db90f13394ee33c7bb2f1cd76d71e97ed2a5149aad0417f0b706226dd1bae52f9b5d61d1bda3668a3e0efb4cc3cf70e085267f8744", 0xb}, 0x60) ioctl$TUNSETIFF(r4, 0x400454ca, 0x0) r11 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000001c0)="d8000000180081084e81f782db44b904021d080006007c06e8fe55a10a0015400600142603600e120800060000000801a80016000800014003e01100036010fab94dcf5c0461c1d67f6f94007134cf6ee08000c5e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb79104005ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4023f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cade81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x4090) socket$inet6(0xa, 0x3, 0x7) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) (async) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) bpf$BPF_PROG_DETACH(0x1c, 0x0, 0x20) (async) bpf$BPF_PROG_DETACH(0x1c, 0x0, 0x20) socket$l2tp6(0xa, 0x2, 0x73) 24.684786001s ago: executing program 1 (id=3143): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000700)='notify_on_release\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f00000003c0)=0xfffffffffffff2a6, 0x12) mkdirat$cgroup(r0, &(0x7f0000000040)='syz0\x00', 0x1ff) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfe37}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r2, 0x18000000000002a0, 0xe80, 0x0, &(0x7f0000000040)="b907ef19edfff007049e0ff0888e", 0x0, 0x102a, 0x18000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r3, &(0x7f0000002300)={0x0, 0x0, &(0x7f00000022c0)={&(0x7f0000002240)=ANY=[@ANYBLOB="3000000010140100"], 0x30}, 0x1, 0x0, 0x0, 0x24000000}, 0x20010014) 24.684464317s ago: executing program 4 (id=3144): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000680)={0x0, 0x61, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e1406ca000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) 24.671167579s ago: executing program 0 (id=3145): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000000)) r1 = getuid() ioctl$TUNSETOWNER(r0, 0x400454cc, r1) syz_emit_ethernet(0x7a, &(0x7f0000000040)={@broadcast, @remote, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "f7d8ff", 0x44, 0x3c, 0x0, @local, @mcast2, {[@srh={0x0, 0x4, 0x4, 0x2, 0xff, 0x8, 0xc, [@mcast1, @dev={0xfe, 0x80, '\x00', 0x1a}]}, @hopopts={0x0, 0x0, '\x00', [@padn]}], {0x0, 0x0, 0xc, 0x0, @gue={{0x1, 0x0, 0x3, 0x0, 0x0, @void}}}}}}}}, 0x0) tee(r0, r0, 0x9, 0xe) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) (async) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000000)) (async) getuid() (async) ioctl$TUNSETOWNER(r0, 0x400454cc, r1) (async) syz_emit_ethernet(0x7a, &(0x7f0000000040)={@broadcast, @remote, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "f7d8ff", 0x44, 0x3c, 0x0, @local, @mcast2, {[@srh={0x0, 0x4, 0x4, 0x2, 0xff, 0x8, 0xc, [@mcast1, @dev={0xfe, 0x80, '\x00', 0x1a}]}, @hopopts={0x0, 0x0, '\x00', [@padn]}], {0x0, 0x0, 0xc, 0x0, @gue={{0x1, 0x0, 0x3, 0x0, 0x0, @void}}}}}}}}, 0x0) (async) tee(r0, r0, 0x9, 0xe) (async) 24.570198511s ago: executing program 1 (id=3146): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r1, 0x1) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000700)={0x0, 0x81, 0x10}, &(0x7f0000000040)=0xc) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) r3 = socket$packet(0x11, 0x3, 0x300) bpf$MAP_CREATE(0x0, 0x0, 0x48) setsockopt$packet_int(r3, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) recvmmsg(r3, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0x1c, &(0x7f0000000140)={r5, 0xffffffffffffffff, 0x24}, 0xc) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000000), 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) unshare(0x62040200) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000280)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="7e5dd0a72245a3674a9574abf025ba7ceb0c6d919febd27320e1ab01857ab191d36a8b0bcca069980c0ff34101", @ANYRES16=r7, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r8, @ANYBLOB="0a00340002020202020200000400930008003500000000000800350001000000"], 0x3c}, 0x1, 0x0, 0x0, 0x1088}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x2e) 24.442642161s ago: executing program 4 (id=3147): r0 = socket(0x25, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000680)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0xa, 0x0, 0x300, 0x5, 0x400, 0x0, 0x2, 0xfffffffd}}) r1 = socket$inet6(0xa, 0x3, 0x8) setsockopt$inet6_int(r1, 0x29, 0x4b, &(0x7f0000000000)=0x93f, 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a"], 0xd8}}, 0x0) sendmmsg$inet6(r1, &(0x7f0000004580)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='$\x00\x00\x00\x00\x00\x00\x00)\x00\x00\x002'], 0x28}}], 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x7, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4050000000000007910a800000000005500ffff000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080)={0x0, 0x1}, 0x10}, 0x94) 24.312978513s ago: executing program 0 (id=3148): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="020300000e000000000000000000000005000600000000000a00000000000000000000000000000000000000000000000000000000400000020001000000000000000a18ff00000005000500000000000a"], 0x70}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x503, 0x80000000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x800}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ACTIVE_SLAVE={0x8, 0x2, r4}]}}}]}, 0x3c}}, 0x40) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000580)=ANY=[@ANYBLOB="4400000010000104000002000000000000000000", @ANYRES32=0x0, @ANYBLOB="03800000000000001c0012800b00010067726574617000000c00028008000100", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r5], 0x44}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f0000000140)={0xa, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f00000001c0)=0x2c) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r6, 0x84, 0x22, &(0x7f0000000200)={0xea, 0x0, 0x2, 0x3, r7}, 0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r6, 0x84, 0xc, &(0x7f0000000280)=@assoc_value={0x0}, &(0x7f0000000880)=0x8) r9 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r9, &(0x7f0000000c00)=[{{&(0x7f0000000180)={0x2, 0x4e20, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f00000004c0)="89", 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r9, 0x84, 0x17, &(0x7f0000001140)=@sack_info={r8, 0xef, 0x6}, 0xc) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r9, 0x89f0, &(0x7f0000000000)={'gre0\x00', &(0x7f0000000080)={'ip_vti0\x00', r5, 0x10, 0x7800, 0x0, 0x10001, {{0xd, 0x4, 0x2, 0x34, 0x34, 0x66, 0x0, 0x3, 0x2f, 0x0, @remote, @local, {[@timestamp={0x44, 0x14, 0x43, 0x0, 0x7, [0x10000, 0x6, 0x80, 0x100]}, @end, @timestamp={0x44, 0x8, 0x17, 0x0, 0x1, [0x5]}, @end]}}}}}) 24.299441201s ago: executing program 4 (id=3149): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 24.183287465s ago: executing program 4 (id=3150): mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x8528c000) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="00040006000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x18, &(0x7f0000000380)=ANY=[@ANYBLOB="180000008f00000000000000da41000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000fcff00008500000086000000bf09000000000000550901008004000095000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000350d00008500000006000000d500f4fffcffffffbf91000000000000b70200000300100085000000ae000000b7000000000000009500"], &(0x7f0000000080)='GPL\x00', 0xb, 0xffe, &(0x7f0000000cc0)=""/4094, 0x41100, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) recvmsg(r2, 0x0, 0x40) syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r2) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r2, 0x84, 0x16, &(0x7f0000000000)={0x6, [0xd9d5, 0x200, 0xeef, 0x0, 0xfffc, 0x1ff]}, &(0x7f0000000040)=0x10) 24.048754626s ago: executing program 4 (id=3151): unshare(0x6a040000) (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$rds(0x15, 0x5, 0x0) (async) getsockopt$rose(0xffffffffffffffff, 0x104, 0x7, 0x0, 0x0) bind$rds(r2, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) (async) sendmsg$rds(r2, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000640)}, 0x0) (async) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095", @ANYRESDEC=r1], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) (async) getuid() (async) ppoll(&(0x7f0000000500)=[{r4}], 0x1, 0x0, 0x0, 0x0) (async) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) write$cgroup_int(r0, &(0x7f0000000200), 0xffffffc1) (async) r8 = socket$inet6(0xa, 0x2, 0x0) (async) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async) r10 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r10, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000001580)=ANY=[@ANYBLOB="020ae8cb78fe3d36a42b3300973adf25"], 0x10}}, 0x810) (async) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYRES16=r7, @ANYRESHEX=r6, @ANYRES16=r10, @ANYRESOCT=r1, @ANYRES32=r3, @ANYRESOCT=r6, @ANYRESOCT=r1], 0xfdef) (async) ioctl$sock_SIOCETHTOOL(r8, 0x89f0, &(0x7f0000000040)={'bridge_slave_1\x00', &(0x7f0000000540)=@ethtool_gstrings={0x1b, 0x4, 0xda, "6cee5084e131cb5dcc1515e2a4eb00000000000000000000fc6ce3b1469dfef6fd4706000000b8d759aac7e61adea1f45095852c58fcddbb1de9d715e32b05c146a2a75f3d1cced6256c2b7f674650fa6bce1aaabcd77027b7a7117cfc446085dcc8dce2172683951ff41f472b5226de10f9221f509bdb77627ede3c9cdc900f2d303cd7157118ca0b47c03b8656c89adfd37113d682fadc8ab529106f0f5509bdad03eccdf45d15bdc170175e6e4cdde76fdbdccf7f2f3be7cd839ccc59429e13233aeff07e18f53dd0b7bb00"/218}}) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r0, 0x0) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r11, 0x0) (async) mmap(&(0x7f00007a6000/0x3000)=nil, 0x3000, 0x100000c, 0x22051, r0, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0xba0c29e690d41d4b, 0x20000000ec071, 0xffffffffffffffff, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 23.886599282s ago: executing program 0 (id=3152): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, 0x0, 0x0) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x35, 0x0, 0x6f}, {0x6, 0x0, 0x0, 0x1}]}, 0x10) r2 = accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000080), 0x800) bind(r2, &(0x7f00000000c0)=@hci={0x1f, 0x4, 0x1}, 0x80) (async) bind(r2, &(0x7f00000000c0)=@hci={0x1f, 0x4, 0x1}, 0x80) unshare(0x6a040000) (async) unshare(0x6a040000) unshare(0x8000280) 23.210863804s ago: executing program 3 (id=3074): r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000000), &(0x7f0000000040)=0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth1_to_team\x00'}) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x408041, 0x0) ioctl$PPPIOCSACTIVE(r1, 0x40107446, &(0x7f0000000140)={0x5, &(0x7f0000000100)=[{0x81b, 0x6, 0x0, 0x7}, {0x800, 0x1, 0x8, 0xffffffff}, {0x0, 0xa, 0x80, 0x1a5}, {0x100, 0xf8, 0x2, 0x10001}, {0x8d, 0xb4, 0x8, 0x3}]}) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000180)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001500)={{0x1, 0xffffffffffffffff}, &(0x7f0000001480), &(0x7f00000014c0)}, 0x20) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000001540)={&(0x7f00000001c0)="62d9faead0c2ff183e6c742f1cab21cd0721a02c89ce7aa53060b1188d73c752696fa2bfe97bff3157c07e91d6a0b9c314dc46c8292f8c6dde96f984525e760e13a46775bb47ab57d019931561f608b473091c062946ded5158d55719d737d20e2b4d1a6443c2831815b81876b66c4585b0dd6657208baa223d2880fd9e1f10762127704d5132caac946122785fce2f96e57e8714c79896b2347f44f9be6475906cf34030913626c885535364aaed4fb2b4f685d8b36e8cba8431fa080159708710d7e9b731ea746cc249d927c3bfddc685857062fc9b5bf028fbdbe7577d76ba41b41239822760632bbdc763fd04b04bccddf52a77da5fab44077e16e", &(0x7f00000002c0)=""/190, &(0x7f0000000380)="7e42ad355c705451860e2c867086f6209bf90b04c97dbf0de9cff7d8fac31d14297fb1ef9e8282ac0b1a29b8ad66d321866316268c9c2b9b6b65324deddc598133c1c2d69db4844e3befa3726530c25cd30a8fb8bb303616f4b42f2cabdf85810e1324611506bf574728a9377d3e311478d6ec1a05f410df9d731d2db26b1aa7849c2055511caf00fd3df69e7ccd71720b8c3c88e80a3269bb0b50d4c5fbe78014ed9e63bbb76f7435057e85417a6398020153a82e13f57eb45dd4821dffeff6fb91df1a427270a97eaa1b0984d31211", &(0x7f0000000480)="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", 0x3ff, r2, 0x4}, 0x38) r3 = socket$inet6_sctp(0xa, 0x0, 0x84) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000001580)={{{@in6=@loopback, @in=@multicast1}}, {{@in6=@mcast1}, 0x0, @in=@multicast2}}, &(0x7f0000001680)=0xe8) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000017c0)=0xffffffffffffffff, 0x4) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000001880)={0x4, 0x0}, 0x8) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x17, 0x8, &(0x7f00000016c0)=@raw=[@jmp={0x5, 0x0, 0x2, 0x4, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff}, @map_idx={0x18, 0x6, 0x5, 0x0, 0x6}, @map_fd={0x18, 0xa, 0x1, 0x0, r2}, @jmp={0x5, 0x1, 0x8, 0x1, 0x1, 0xfffffffffffffff8, 0x10}, @map_idx={0x18, 0x0, 0x5, 0x0, 0x5}], &(0x7f0000001700)='syzkaller\x00', 0x8, 0x48, &(0x7f0000001740)=""/72, 0x40f00, 0x21, '\x00', 0x0, @cgroup_sysctl, r4, 0x8, &(0x7f0000001800)={0xa, 0x2}, 0x8, 0x10, &(0x7f0000001840)={0x1, 0x1, 0x80000000, 0x8}, 0x10, r5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) getsockopt$ARPT_SO_GET_ENTRIES(r0, 0x0, 0x61, &(0x7f0000001980)={'filter\x00', 0x2, "4118"}, &(0x7f00000019c0)=0x26) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000001a00)={{{@in=@broadcast, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@local}}, &(0x7f0000001b00)=0xe8) r8 = epoll_create(0x3) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001bc0)={{r2, 0xffffffffffffffff}, &(0x7f0000001b40), &(0x7f0000001b80)=r6}, 0x20) r10 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001c00)={0x0, 0x800, 0x8}, 0xc) r11 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001f00)={0x3, 0x4, 0x4, 0xa, 0x0, r2, 0xe6e, '\x00', r7, r4, 0x5, 0x0, 0x3}, 0x50) r12 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000001fc0)=@o_path={&(0x7f0000001f80)='./file0\x00', 0x0, 0x6000, r3}, 0x18) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000002080)={0x1f, 0x30, &(0x7f0000001c40)=@raw=[@printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r9}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}}, @exit, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x3}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @map_fd={0x18, 0xa, 0x1, 0x0, r10}, @map_val={0x18, 0x1, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x2}, @map_val={0x18, 0x1, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0xe359}], &(0x7f0000001dc0)='syzkaller\x00', 0xf, 0x7d, &(0x7f0000001e00)=""/125, 0x40f00, 0x58, '\x00', r7, @fallback=0x35, r4, 0x8, &(0x7f0000001e80)={0x6, 0x3}, 0x8, 0x10, &(0x7f0000001ec0)={0x1, 0xf, 0xfffffffd, 0x10}, 0x10, r5, r6, 0x4, &(0x7f0000002000)=[r2, 0xffffffffffffffff, r2, r2, r11, r12], &(0x7f0000002040)=[{0x2, 0x3, 0x8, 0x9}, {0x4, 0x3, 0xb, 0x7}, {0x4, 0x5, 0x6, 0xa}, {0x3, 0x2, 0x4, 0xc}], 0x10, 0x1f2}, 0x94) r14 = socket$igmp(0x2, 0x3, 0x2) socket$nl_route(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_QGROUP_LIMIT(r13, 0x8030942b, &(0x7f0000002140)={0x3, {0x24, 0x0, 0x6, 0x7, 0xa904}}) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r8, 0x8008f511, &(0x7f0000002180)) r15 = bpf$MAP_CREATE(0x0, &(0x7f00000021c0)=@bloom_filter={0x1e, 0x82, 0x6f, 0x7, 0x40, 0x1, 0x5, '\x00', 0x0, r4, 0x1, 0x400, 0x1, 0x6}, 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000022c0)={r15, &(0x7f0000002240)="199f3fb62fedbfa40a7a9ceec0931a8c5fe8bb0dda58d87d3deab1774cc742dede1260c414f71cd38f409281e9", &(0x7f0000002280)=""/28}, 0x20) getsockopt$inet_IP_XFRM_POLICY(r14, 0x0, 0x11, &(0x7f0000002300)={{{@in=@local, @in=@empty}}, {{@in=@multicast1}, 0x0, @in=@multicast1}}, &(0x7f0000002400)=0xe8) r16 = syz_genetlink_get_family_id$mptcp(&(0x7f0000002480), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000002580)={&(0x7f0000002440)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000002540)={&(0x7f00000024c0)={0x5c, r16, 0x300, 0x70bd2a, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x5}]}, 0x5c}}, 0x4008800) 23.024746903s ago: executing program 3 (id=3153): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) (async, rerun: 64) unshare(0x62040200) (rerun: 64) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x5}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0xc, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x800000}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r1}, {}, {}, {}, {0x7, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffe00}, {}, {}, {0x85, 0x0, 0x0, 0x55}}]}, &(0x7f0000000300)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 32) shutdown(0xffffffffffffffff, 0x1) (async, rerun: 32) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x7, &(0x7f0000000d00), 0x4) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="280000002100010000000000000000000a00000000000001016200000c0014808004002380000000fc1d19edf194f75888f9ad652640958ea33ab833744a2b68a5adcd6b0dc37a63e168316e5d9b4b509aabed85363ac2853693ed702d9f5b111585d2033f69a57e6116c78de3d9e29c8a1794bd078c8ae3020c4c8c75a4bb36e069860e6d0981501ac5ca2a"], 0x28}], 0x1}, 0x0) connect$bt_l2cap(r2, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) (async) r4 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r4, 0x400448c8, &(0x7f0000000340)={r2, r2, 0x8, 0x0, 0x0, 0x82, 0x4a, 0x15c2, 0x5886, 0x801, 0x0, 0x8, 'syz1\x00'}) (async, rerun: 32) ioctl$sock_bt_hidp_HIDPCONNDEL(r4, 0x400448c9, &(0x7f0000000000)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}) (rerun: 32) 9.100605843s ago: executing program 32 (id=3135): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000100)={'wpan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000100)={'wpan0\x00', 0x0}) syz_genetlink_get_family_id$nl802154(&(0x7f00000009c0), r0) (async) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f00000009c0), r0) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a00)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES8=r1, @ANYBLOB="010026bd7000fddbdf252100000008000300", @ANYRES16=r2, @ANYBLOB="24002d00040001"], 0x40}, 0x1, 0x0, 0x0, 0xc041}, 0x0) (async) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a00)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES8=r1, @ANYBLOB="010026bd7000fddbdf252100000008000300", @ANYRES16=r2, @ANYBLOB="24002d00040001"], 0x40}, 0x1, 0x0, 0x0, 0xc041}, 0x0) unshare(0x6a040000) r3 = socket$l2tp(0x2, 0x2, 0x73) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xe, 0x4, 0x4, 0x1}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x4, &(0x7f0000000680)={{r4}, &(0x7f0000000540), 0x0}, 0x20) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)=0x20) write$bt_hci(r5, &(0x7f0000000040)=ANY=[], 0x6) bind$inet(r3, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) connect$inet(r3, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) (async) connect$inet(r3, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000004340)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x4004844}, 0x0) sendmmsg$inet(r3, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x94173000) bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0)={0x0, r3}, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="9beb01031800000000000000000000008000000002"], 0x0, 0x1a}, 0x28) socket$kcm(0xa, 0x5, 0x0) (async) r6 = socket$kcm(0xa, 0x5, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000100)={@void, @val={0x0, 0x4, 0x2, 0xb5a, 0x8, 0x8de}, @llc={@snap={0xaa, 0x1, "f8", "9ea6e9", 0x6004, "668536ebb71d264b10f185530aaf57cef6898769175549209e00c4a0bc9f556435121a284680928ae9f59d452dc78113b2458e732e9e826716391e589af387e2e2bc2d1ce9e296fbc142c04ff2edd978befcff3713f9d346dccbe7958e5ac9f559d935787412d0fd714fac13633dce1df9a4e3f0dcb3b937ea2f317689bed0dc058ad9fc6881"}}}, 0x98) ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x8916, &(0x7f0000000000)={r6}) 6.189236455s ago: executing program 33 (id=3152): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, 0x0, 0x0) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x35, 0x0, 0x6f}, {0x6, 0x0, 0x0, 0x1}]}, 0x10) r2 = accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000080), 0x800) bind(r2, &(0x7f00000000c0)=@hci={0x1f, 0x4, 0x1}, 0x80) (async) bind(r2, &(0x7f00000000c0)=@hci={0x1f, 0x4, 0x1}, 0x80) unshare(0x6a040000) (async) unshare(0x6a040000) unshare(0x8000280) 4.300086726s ago: executing program 34 (id=3146): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r1, 0x1) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000700)={0x0, 0x81, 0x10}, &(0x7f0000000040)=0xc) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) r3 = socket$packet(0x11, 0x3, 0x300) bpf$MAP_CREATE(0x0, 0x0, 0x48) setsockopt$packet_int(r3, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) recvmmsg(r3, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0x1c, &(0x7f0000000140)={r5, 0xffffffffffffffff, 0x24}, 0xc) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000000), 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) unshare(0x62040200) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000280)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="7e5dd0a72245a3674a9574abf025ba7ceb0c6d919febd27320e1ab01857ab191d36a8b0bcca069980c0ff34101", @ANYRES16=r7, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r8, @ANYBLOB="0a00340002020202020200000400930008003500000000000800350001000000"], 0x3c}, 0x1, 0x0, 0x0, 0x1088}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x2e) 2.268696869s ago: executing program 35 (id=3153): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) (async, rerun: 64) unshare(0x62040200) (rerun: 64) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x5}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0xc, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x800000}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r1}, {}, {}, {}, {0x7, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffe00}, {}, {}, {0x85, 0x0, 0x0, 0x55}}]}, &(0x7f0000000300)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 32) shutdown(0xffffffffffffffff, 0x1) (async, rerun: 32) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x7, &(0x7f0000000d00), 0x4) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="280000002100010000000000000000000a00000000000001016200000c0014808004002380000000fc1d19edf194f75888f9ad652640958ea33ab833744a2b68a5adcd6b0dc37a63e168316e5d9b4b509aabed85363ac2853693ed702d9f5b111585d2033f69a57e6116c78de3d9e29c8a1794bd078c8ae3020c4c8c75a4bb36e069860e6d0981501ac5ca2a"], 0x28}], 0x1}, 0x0) connect$bt_l2cap(r2, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) (async) r4 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r4, 0x400448c8, &(0x7f0000000340)={r2, r2, 0x8, 0x0, 0x0, 0x82, 0x4a, 0x15c2, 0x5886, 0x801, 0x0, 0x8, 'syz1\x00'}) (async, rerun: 32) ioctl$sock_bt_hidp_HIDPCONNDEL(r4, 0x400448c9, &(0x7f0000000000)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}) (rerun: 32) 0s ago: executing program 36 (id=3151): unshare(0x6a040000) (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$rds(0x15, 0x5, 0x0) (async) getsockopt$rose(0xffffffffffffffff, 0x104, 0x7, 0x0, 0x0) bind$rds(r2, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) (async) sendmsg$rds(r2, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000640)}, 0x0) (async) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095", @ANYRESDEC=r1], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) (async) getuid() (async) ppoll(&(0x7f0000000500)=[{r4}], 0x1, 0x0, 0x0, 0x0) (async) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) write$cgroup_int(r0, &(0x7f0000000200), 0xffffffc1) (async) r8 = socket$inet6(0xa, 0x2, 0x0) (async) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async) r10 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r10, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000001580)=ANY=[@ANYBLOB="020ae8cb78fe3d36a42b3300973adf25"], 0x10}}, 0x810) (async) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYRES16=r7, @ANYRESHEX=r6, @ANYRES16=r10, @ANYRESOCT=r1, @ANYRES32=r3, @ANYRESOCT=r6, @ANYRESOCT=r1], 0xfdef) (async) ioctl$sock_SIOCETHTOOL(r8, 0x89f0, &(0x7f0000000040)={'bridge_slave_1\x00', &(0x7f0000000540)=@ethtool_gstrings={0x1b, 0x4, 0xda, "6cee5084e131cb5dcc1515e2a4eb00000000000000000000fc6ce3b1469dfef6fd4706000000b8d759aac7e61adea1f45095852c58fcddbb1de9d715e32b05c146a2a75f3d1cced6256c2b7f674650fa6bce1aaabcd77027b7a7117cfc446085dcc8dce2172683951ff41f472b5226de10f9221f509bdb77627ede3c9cdc900f2d303cd7157118ca0b47c03b8656c89adfd37113d682fadc8ab529106f0f5509bdad03eccdf45d15bdc170175e6e4cdde76fdbdccf7f2f3be7cd839ccc59429e13233aeff07e18f53dd0b7bb00"/218}}) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r0, 0x0) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r11, 0x0) (async) mmap(&(0x7f00007a6000/0x3000)=nil, 0x3000, 0x100000c, 0x22051, r0, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0xba0c29e690d41d4b, 0x20000000ec071, 0xffffffffffffffff, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) kernel console output (not intermixed with test programs): ink: 14436 bytes leftover after parsing attributes in process `syz.3.1787'. [ 292.212853][T12803] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 292.309716][T12813] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1792'. [ 292.408524][T12809] vxcan1 speed is unknown, defaulting to 1000 [ 292.762902][T12831] bond8 (unregistering): Released all slaves [ 292.892518][T12834] 8021q: adding VLAN 0 to HW filter on device bond0 [ 292.943020][T12834] bond0: (slave rose0): Enslaving as an active interface with an up link [ 293.010682][T12842] pim6reg: entered allmulticast mode [ 293.048439][T12844] gre1: entered allmulticast mode [ 293.435534][T12859] syzkaller0: entered promiscuous mode [ 293.441195][T12859] syzkaller0: entered allmulticast mode [ 293.616601][T12864] netlink: 'syz.3.1805': attribute type 1 has an invalid length. [ 293.837250][T12864] 8021q: adding VLAN 0 to HW filter on device bond4 [ 294.021527][T12877] netlink: 'syz.1.1808': attribute type 1 has an invalid length. [ 294.029614][T12877] netlink: 'syz.1.1808': attribute type 1 has an invalid length. [ 294.038877][T12877] netlink: 'syz.1.1808': attribute type 1 has an invalid length. [ 294.048313][T12875] geneve3: entered promiscuous mode [ 294.957090][T12912] bond0: Error: Cannot enslave bond to itself. [ 295.724673][T12927] tipc: Enabling of bearer rejected, media not registered [ 295.805097][T12929] __nla_validate_parse: 5 callbacks suppressed [ 295.805116][T12929] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1820'. [ 295.956968][T12934] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1821'. [ 296.060375][T12938] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1821'. [ 296.102568][T12938] netlink: 35 bytes leftover after parsing attributes in process `syz.2.1821'. [ 296.125413][T12938] netlink: 'syz.2.1821': attribute type 6 has an invalid length. [ 296.133852][T12938] netlink: 'syz.2.1821': attribute type 5 has an invalid length. [ 296.151893][T12938] netlink: 35 bytes leftover after parsing attributes in process `syz.2.1821'. [ 296.231336][T12941] netlink: 'syz.2.1821': attribute type 4 has an invalid length. [ 296.280705][T12934] netlink: 'syz.2.1821': attribute type 4 has an invalid length. [ 296.542068][T12950] Bluetooth: MGMT ver 1.23 [ 296.623029][T12956] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1826'. [ 296.926722][T12974] tuvҫ#: renamed from lo (while UP) [ 296.973909][T12968] netlink: 'syz.2.1828': attribute type 4 has an invalid length. [ 297.002690][T12979] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1831'. [ 297.114687][T12968] ieee802154 phy1 wpan1: encryption failed: -22 [ 297.252134][T12982] bond0: Error: Cannot enslave bond to itself. [ 297.627550][T13000] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1836'. [ 297.887387][T13007] vxcan1 speed is unknown, defaulting to 1000 [ 297.892078][T13011] netlink: 'syz.1.1839': attribute type 1 has an invalid length. [ 298.053565][T13017] netlink: 'syz.0.1840': attribute type 2 has an invalid length. [ 298.058044][ T5839] Bluetooth: hci4: command 0x0405 tx timeout [ 298.119312][T13017] netlink: 'syz.0.1840': attribute type 4 has an invalid length. [ 298.161688][T13017] netlink: 'syz.0.1840': attribute type 8 has an invalid length. [ 298.181919][T13017] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1840'. [ 298.757246][T13040] IPVS: length: 203 != 24 [ 298.765302][T13040] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1846'. [ 299.626558][T13096] tipc: Enabled bearer , priority 0 [ 299.728642][T13101] IPVS: length: 203 != 24 [ 299.760922][T13096] tipc: Disabling bearer [ 299.831779][T13095] vxcan1 speed is unknown, defaulting to 1000 [ 300.109633][T13114] sch_tbf: burst 0 is lower than device tunl0 mtu (1480) ! [ 300.781886][T13141] IPVS: length: 203 != 24 [ 301.219710][T13160] __nla_validate_parse: 42 callbacks suppressed [ 301.219730][T13160] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1875'. [ 301.240045][T13169] netlink: 'syz.0.1879': attribute type 21 has an invalid length. [ 301.265602][T13169] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1879'. [ 301.276415][ T30] audit: type=1800 audit(1760171133.656:5): pid=13164 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1877" name="memory.events" dev="tmpfs" ino=1971 res=0 errno=0 [ 301.636606][T13181] netlink: 'syz.2.1882': attribute type 2 has an invalid length. [ 301.657717][T13181] netlink: 'syz.2.1882': attribute type 2 has an invalid length. [ 301.671394][T13181] sit0: entered promiscuous mode [ 301.678200][T13181] netlink: 'syz.2.1882': attribute type 1 has an invalid length. [ 301.688631][T13181] netlink: 1 bytes leftover after parsing attributes in process `syz.2.1882'. [ 301.701447][T13181] IPVS: Error connecting to the multicast addr [ 301.778949][T13187] netlink: 'syz.0.1883': attribute type 13 has an invalid length. [ 301.805757][T13187] netlink: 'syz.0.1883': attribute type 17 has an invalid length. [ 301.882558][T13187] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 301.917240][T13190] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1885'. [ 302.020002][T13188] vxcan1 speed is unknown, defaulting to 1000 [ 302.367842][T13207] netlink: 'syz.4.1889': attribute type 1 has an invalid length. [ 302.375452][T13211] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1890'. [ 302.403508][T13207] netlink: 172 bytes leftover after parsing attributes in process `syz.4.1889'. [ 302.407798][T13211] ip6gretap0: entered promiscuous mode [ 302.428644][T13207] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1889'. [ 302.459305][T13211] ip6gretap0: left promiscuous mode [ 302.559942][T13221] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1893'. [ 302.579920][T13217] Bluetooth: MGMT ver 1.23 [ 302.718123][T13226] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1894'. [ 302.741653][T13226] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1894'. [ 302.980417][T13237] netlink: 'syz.4.1898': attribute type 1 has an invalid length. [ 303.023594][T13239] bridge0: entered allmulticast mode [ 303.151550][T13237] bond4: (slave veth13): Enslaving as an active interface with a down link [ 303.280627][T13235] vxcan1 speed is unknown, defaulting to 1000 [ 303.294119][T13246] 8021q: adding VLAN 0 to HW filter on device bond4 [ 303.509737][T13264] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 303.658985][T10358] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.677975][T10358] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.714058][T10358] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.732889][T10358] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.751563][T13277] syz_tun: entered allmulticast mode [ 303.819154][T13277] syz_tun (unregistering): left allmulticast mode [ 304.361586][T13293] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 304.374004][T13293] batadv_slave_0: entered promiscuous mode [ 304.543989][T13304] netlink: del zone limit has 8 unknown bytes [ 304.619885][ T5830] Bluetooth: hci2: command 0x0406 tx timeout [ 304.626411][ T5839] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 304.720780][T13308] veth0: entered promiscuous mode [ 304.764283][T13308] veth0 (unregistering): left promiscuous mode [ 305.886940][T13338] netlink: 'syz.0.1923': attribute type 43 has an invalid length. [ 305.939777][T13340] 8021q: adding VLAN 0 to HW filter on device bond5 [ 305.999742][T13347] vlan3: entered promiscuous mode [ 306.004831][T13347] bond0: entered promiscuous mode [ 306.276195][T13365] __nla_validate_parse: 10 callbacks suppressed [ 306.276215][T13365] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1931'. [ 306.292508][T13365] nbd: couldn't find a device at index 0 [ 306.557841][T13380] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1939'. [ 306.578104][T13377] syzkaller1: entered promiscuous mode [ 306.585113][T13377] syzkaller1: entered allmulticast mode [ 306.602009][T13380] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1939'. [ 306.682902][T13392] syzkaller1: left promiscuous mode [ 306.696726][T13392] syzkaller1: left allmulticast mode [ 307.055810][T13402] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1943'. [ 307.057289][T13404] 8021q: adding VLAN 0 to HW filter on device bond5 [ 307.450067][T13422] vxcan1 speed is unknown, defaulting to 1000 [ 307.694377][T13435] netlink: 19 bytes leftover after parsing attributes in process `syz.4.1952'. [ 308.250924][T13455] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 309.748678][T13464] vxcan1 speed is unknown, defaulting to 1000 [ 309.781381][T13468] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1961'. [ 309.965408][T13468] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1961'. [ 310.001238][T13479] netlink: 'syz.2.1961': attribute type 74 has an invalid length. [ 310.202995][T13484] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1962'. [ 310.364590][T13488] netlink: 'syz.0.1963': attribute type 11 has an invalid length. [ 310.645441][T13495] vlan2: entered promiscuous mode [ 310.650521][T13495] hsr_slave_1: entered promiscuous mode [ 310.661892][T13495] vlan2: entered allmulticast mode [ 310.667268][T13495] hsr_slave_1: entered allmulticast mode [ 310.730548][T13498] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1965'. [ 310.747993][T13499] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1964'. [ 311.211086][T13515] openvswitch: netlink: Message has 512 unknown bytes. [ 311.502148][T13525] ipvlan2: entered promiscuous mode [ 311.691685][T13529] bond0: Error: Cannot enslave bond to itself. [ 311.992765][T13549] __nla_validate_parse: 2 callbacks suppressed [ 311.992787][T13549] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1979'. [ 312.399979][T13571] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1985'. [ 312.556642][T13585] netlink: del zone limit has 4 unknown bytes [ 312.583202][T13585] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1988'. [ 312.894122][T13600] vxcan1 speed is unknown, defaulting to 1000 [ 312.948534][T13609] netlink: 'syz.3.1995': attribute type 13 has an invalid length. [ 312.958036][T13609] netlink: 'syz.3.1995': attribute type 17 has an invalid length. [ 312.973710][T13609] netdevsim0: left promiscuous mode [ 313.036017][T13609] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 313.280344][ T30] audit: type=1107 audit(1760171145.666:6): pid=13632 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='+sQ|^-.j$ޯ.U"{.;f5>e pFMf(ANN' [ 313.662840][T13610] vxcan1 speed is unknown, defaulting to 1000 [ 313.841301][T13660] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2007'. [ 314.018327][T13669] netlink: 'syz.2.2009': attribute type 15 has an invalid length. [ 314.269239][T13626] vxcan1 speed is unknown, defaulting to 1000 [ 314.330750][T13674] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2010'. [ 314.407950][T13677] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2010'. [ 314.483336][T13679] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2010'. [ 314.737658][T13667] vxcan1 speed is unknown, defaulting to 1000 [ 314.821583][T13685] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2012'. [ 315.187364][T13662] vxcan1 speed is unknown, defaulting to 1000 [ 315.376344][T13704] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2018'. [ 315.397553][T13704] netlink: 'syz.1.2018': attribute type 1 has an invalid length. [ 315.406663][T13704] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2018'. [ 315.712046][T13713] tipc: Invalid UDP bearer configuration [ 315.712106][T13713] tipc: Enabling of bearer rejected, failed to enable media [ 316.005158][T13724] veth0: entered promiscuous mode [ 316.010339][T13724] veth0: entered allmulticast mode [ 316.144585][T13729] netlink: 'syz.2.2025': attribute type 9 has an invalid length. [ 316.558507][T13740] sctp: [Deprecated]: syz.2.2026 (pid 13740) Use of int in maxseg socket option. [ 316.558507][T13740] Use struct sctp_assoc_value instead [ 317.341673][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.771655][T13763] bond0: Error: Cannot enslave bond to itself. [ 317.964497][T13779] netlink: 'syz.1.2035': attribute type 10 has an invalid length. [ 317.985074][T13779] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2035'. [ 318.013136][T13779] `: Port device geneve0 added [ 318.027865][ T3033] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.031049][T13781] netlink: 6032 bytes leftover after parsing attributes in process `syz.4.2036'. [ 318.049463][ T3033] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.158818][ T3033] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.167847][ T3033] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.288115][T13786] netlink: 'syz.4.2037': attribute type 1 has an invalid length. [ 318.379468][T13793] sctp: [Deprecated]: syz.2.2039 (pid 13793) Use of int in max_burst socket option. [ 318.379468][T13793] Use struct sctp_assoc_value instead [ 318.725539][T13804] vlan0: entered promiscuous mode [ 318.795718][T13804] vxcan1 speed is unknown, defaulting to 1000 [ 319.056420][T13813] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2044'. [ 319.069336][T13813] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2044'. [ 319.138116][T13816] netlink: 240 bytes leftover after parsing attributes in process `syz.3.2042'. [ 319.185289][T13815] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2044'. [ 319.388557][T13818] netlink: 'syz.2.2045': attribute type 10 has an invalid length. [ 319.430118][T13818] team0: Port device dummy0 added [ 319.744326][T13826] bond0: Error: Cannot enslave bond to itself. [ 320.288624][T13852] netlink: 'syz.4.2056': attribute type 30 has an invalid length. [ 320.334035][T13857] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2055'. [ 320.344153][T13850] syzkaller1: entered promiscuous mode [ 320.350023][T13850] syzkaller1: entered allmulticast mode [ 320.362628][T13854] netlink: 428 bytes leftover after parsing attributes in process `syz.4.2056'. [ 320.599922][T13866] vxcan1 speed is unknown, defaulting to 1000 [ 320.709697][T13875] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2058'. [ 320.814356][T13879] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2060'. [ 321.154328][T13891] 8021q: adding VLAN 0 to HW filter on device bond6 [ 321.198717][T13891] bond0: (slave bond6): Enslaving as an active interface with an up link [ 322.127406][T13924] tipc: Enabling of bearer rejected, failed to enable media [ 323.381526][T13949] IPVS: length: 29 != 8 [ 323.719334][T13956] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 323.799562][T13960] syzkaller0: entered promiscuous mode [ 323.811873][T13960] syzkaller0: entered allmulticast mode [ 324.015872][T13970] IPVS: length: 203 != 24 [ 324.049075][T13970] __nla_validate_parse: 3 callbacks suppressed [ 324.049095][T13970] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2084'. [ 324.107770][T13970] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2084'. [ 324.158937][T13976] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2084'. [ 324.176714][T13974] vxcan1 speed is unknown, defaulting to 1000 [ 326.079096][T13967] syzkaller1: entered promiscuous mode [ 326.084627][T13967] syzkaller1: entered allmulticast mode [ 326.396248][T14010] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2088'. [ 327.050999][T14042] wg1 speed is unknown, defaulting to 1000 [ 327.076628][T14042] wg1 speed is unknown, defaulting to 1000 [ 327.127821][T14042] wg1 speed is unknown, defaulting to 1000 [ 327.143442][T14042] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 327.192267][T14046] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2098'. [ 327.229141][T14042] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 327.338639][T14048] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2099'. [ 327.338731][T14052] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2100'. [ 327.385545][T14052] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2100'. [ 327.394463][T14052] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2100'. [ 327.462033][T14042] wg1 speed is unknown, defaulting to 1000 [ 327.515831][T14042] wg1 speed is unknown, defaulting to 1000 [ 327.524455][T14042] wg1 speed is unknown, defaulting to 1000 [ 327.532730][T14042] wg1 speed is unknown, defaulting to 1000 [ 327.545031][T14053] vxcan1 speed is unknown, defaulting to 1000 [ 327.583037][T14042] wg1 speed is unknown, defaulting to 1000 [ 327.667896][T14042] wg1 speed is unknown, defaulting to 1000 [ 328.159937][T14069] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2105'. [ 328.402475][T14077] ieee802154 phy1 wpan1: encryption failed: -22 [ 328.689669][T14083] netlink: 'syz.4.2109': attribute type 1 has an invalid length. [ 328.706549][T14083] netlink: 'syz.4.2109': attribute type 1 has an invalid length. [ 328.792248][T14070] vxcan1 speed is unknown, defaulting to 1000 [ 329.053477][T14085] vxcan1 speed is unknown, defaulting to 1000 [ 329.231077][T14099] pimreg: entered allmulticast mode [ 329.239033][T14099] pimreg: left allmulticast mode [ 329.298182][T14102] __nla_validate_parse: 6 callbacks suppressed [ 329.298202][T14102] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2113'. [ 329.342813][T14100] bond4: peer notification delay (9) is not a multiple of miimon (100), value rounded to 0 ms [ 329.369053][T14100] bond4 (unregistering): Released all slaves [ 329.656901][T14110] bond0: option arp_validate: invalid value (18446744073491447809) [ 329.668672][ T12] bond0: (slave bond_slave_0): interface is now down [ 329.679629][ T12] bond0: (slave bond_slave_1): interface is now down [ 329.687441][ T12] bond0: (slave wlan1): interface is now down [ 329.694067][ T12] bond0: (slave bond6): interface is now down [ 329.707342][ T12] bond0: now running without any active interface! [ 330.040905][T14085] wg1 speed is unknown, defaulting to 1000 [ 330.082960][T14070] wg1 speed is unknown, defaulting to 1000 [ 330.605677][T14125] vxcan1 speed is unknown, defaulting to 1000 [ 331.312926][T14131] team0: Port device dummy0 removed [ 331.327578][T14131] bond2: (slave geneve2): Releasing active interface [ 331.334314][T14131] geneve2: left promiscuous mode [ 331.529037][T14136] netlink: 'syz.2.2123': attribute type 23 has an invalid length. [ 331.740712][T14139] ipvlan2: entered promiscuous mode [ 331.896233][T14125] wg1 speed is unknown, defaulting to 1000 [ 331.994809][T14148] IPVS: length: 203 != 24 [ 332.039408][T14148] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2127'. [ 332.051404][T14148] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2127'. [ 332.092270][T14151] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2127'. [ 332.572188][T14165] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2131'. [ 332.608414][T14163] ip6gre1: entered allmulticast mode [ 332.786718][T14171] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2133'. [ 332.812720][T14171] netlink: 'syz.3.2133': attribute type 1 has an invalid length. [ 332.823247][T14174] lo: entered promiscuous mode [ 332.830838][T14174] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 332.939546][T14180] vxcan1: entered allmulticast mode [ 333.279324][T14197] vxcan1 speed is unknown, defaulting to 1000 [ 333.289762][T14200] xt_TCPMSS: Only works on TCP SYN packets [ 333.507077][T14206] bridge5: entered promiscuous mode [ 333.632188][T14208] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2144'. [ 333.804358][T14210] netlink: 'syz.3.2145': attribute type 5 has an invalid length. [ 334.137379][T14218] vxcan1 speed is unknown, defaulting to 1000 [ 334.248317][T14226] netlink: 80 bytes leftover after parsing attributes in process `syz.1.2149'. [ 334.391204][T14197] wg1 speed is unknown, defaulting to 1000 [ 334.831115][T14228] vxcan1 speed is unknown, defaulting to 1000 [ 335.090095][T14237] vxcan1 speed is unknown, defaulting to 1000 [ 335.419627][T14250] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) ! [ 335.453072][T14237] wg1 speed is unknown, defaulting to 1000 [ 335.953529][T14228] wg1 speed is unknown, defaulting to 1000 [ 336.047727][T14218] wg1 speed is unknown, defaulting to 1000 [ 337.517130][T14289] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2167'. [ 337.517134][T14290] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2167'. [ 337.747856][T14297] vxcan1 speed is unknown, defaulting to 1000 [ 338.111651][T14317] netlink: 116 bytes leftover after parsing attributes in process `syz.4.2173'. [ 339.878930][T14317] netlink: 'syz.4.2173': attribute type 12 has an invalid length. [ 340.219527][T14355] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2179'. [ 340.253668][T14297] wg1 speed is unknown, defaulting to 1000 [ 341.043038][T14369] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2183'. [ 341.167536][T14373] vxcan1 speed is unknown, defaulting to 1000 [ 341.314232][T14375] erspan0: entered promiscuous mode [ 341.365983][T14378] netlink: 'syz.3.2186': attribute type 1 has an invalid length. [ 341.382872][T14378] netlink: 'syz.3.2186': attribute type 2 has an invalid length. [ 341.520949][T14387] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2187'. [ 341.852110][T14373] wg1 speed is unknown, defaulting to 1000 [ 341.912869][ T30] audit: type=1800 audit(1760171174.306:7): pid=14401 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2189" name="memory.events" dev="tmpfs" ino=2030 res=0 errno=0 [ 342.686143][T14447] IPVS: lblc: FWM 3 0x00000003 - no destination available [ 342.790935][T14447] vxcan1 speed is unknown, defaulting to 1000 [ 342.890235][T14457] netlink: 'syz.2.2202': attribute type 16 has an invalid length. [ 342.900085][T14457] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2202'. [ 343.207813][T14465] netlink: 184 bytes leftover after parsing attributes in process `syz.4.2206'. [ 343.259761][T14467] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2207'. [ 343.422030][T14473] sch_tbf: burst 88 is lower than device veth7 mtu (1514) ! [ 343.439742][T14447] wg1 speed is unknown, defaulting to 1000 [ 343.644187][T14483] netlink: 6 bytes leftover after parsing attributes in process `syz.4.2211'. [ 343.731238][T14483] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 343.898234][T14485] batadv0: entered promiscuous mode [ 343.905033][T14485] macsec2: entered allmulticast mode [ 343.910627][T14485] batadv0: entered allmulticast mode [ 343.936358][T14485] batadv0: left allmulticast mode [ 343.942012][T14485] batadv0: left promiscuous mode [ 344.329132][T14504] !: renamed from dummy0 [ 344.609988][T14506] vxcan1 speed is unknown, defaulting to 1000 [ 344.906127][T14526] netlink: 'syz.0.2224': attribute type 1 has an invalid length. [ 344.928455][T14526] netlink: 'syz.0.2224': attribute type 1 has an invalid length. [ 345.059550][T14537] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2227'. [ 345.099512][T14537] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2227'. [ 345.271500][T14548] netlink: 'syz.4.2226': attribute type 1 has an invalid length. [ 345.279450][T14548] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2226'. [ 345.649681][T14573] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2233'. [ 345.720110][T14574] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2232'. [ 345.778420][T14541] vxcan1 speed is unknown, defaulting to 1000 [ 345.812305][T14576] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2232'. [ 346.086127][T14582] 8021q: adding VLAN 0 to HW filter on device bond6 [ 346.311783][T14506] wg1 speed is unknown, defaulting to 1000 [ 346.846776][T14541] wg1 speed is unknown, defaulting to 1000 [ 347.253387][T14634] vlan3: entered promiscuous mode [ 347.259148][T14634] bond0: entered promiscuous mode [ 347.264379][T14634] bond_slave_0: entered promiscuous mode [ 347.272961][T14634] bond_slave_1: entered promiscuous mode [ 347.280241][T14634] mac80211_hwsim hwsim11 wlan1: entered promiscuous mode [ 347.290389][T14634] bond6: entered promiscuous mode [ 348.232579][T14679] xt_CT: You must specify a L4 protocol and not use inversions on it [ 348.459165][T14689] 8021q: adding VLAN 0 to HW filter on device bond4 [ 348.512370][T14690] veth0_to_batadv: entered promiscuous mode [ 348.626230][T14700] netlink: 'syz.1.2266': attribute type 1 has an invalid length. [ 348.637004][T14692] veth0_to_batadv: left promiscuous mode [ 348.652856][T14700] netlink: 'syz.1.2266': attribute type 2 has an invalid length. [ 348.886183][T14725] __nla_validate_parse: 7 callbacks suppressed [ 348.886202][T14725] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2271'. [ 349.274336][T14737] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2274'. [ 349.303591][T14736] vxcan1 speed is unknown, defaulting to 1000 [ 349.536540][T14751] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2279'. [ 349.679841][T14756] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2281'. [ 349.760440][T14758] tipc: Enabled bearer , priority 0 [ 349.774359][T14758] syzkaller0: entered promiscuous mode [ 349.785953][T14758] syzkaller0: entered allmulticast mode [ 349.870871][T14758] tipc: Resetting bearer [ 350.145072][T14771] netlink: 'syz.0.2283': attribute type 10 has an invalid length. [ 350.354214][T14793] netlink: 17 bytes leftover after parsing attributes in process `syz.2.2290'. [ 350.368796][T14793] netlink: 'syz.2.2290': attribute type 1 has an invalid length. [ 350.377264][T14736] wg1 speed is unknown, defaulting to 1000 [ 350.378270][T14793] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2290'. [ 350.666216][T14757] tipc: Resetting bearer [ 350.693599][T14757] tipc: Disabling bearer [ 350.715755][T14802] xt_cgroup: invalid path, errno=-2 [ 350.762544][ T8829] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 350.793105][ T8829] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 350.823046][ T8829] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 350.833207][ T8829] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 351.147950][T14824] netlink: 'syz.0.2300': attribute type 11 has an invalid length. [ 351.155096][T14831] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2301'. [ 351.178644][T14824] netlink: 'syz.0.2300': attribute type 11 has an invalid length. [ 351.254385][T14824] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2300'. [ 351.931035][T14864] tipc: Enabled bearer , priority 10 [ 351.940786][T14864] netlink: 'syz.0.2308': attribute type 10 has an invalid length. [ 352.031550][T14871] gtp0: entered promiscuous mode [ 352.038458][T14871] gtp0: entered allmulticast mode [ 352.048725][T14872] IPVS: length: 24 != 119185342488 [ 352.088770][T14878] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2307'. [ 352.224137][T14884] netlink: 'syz.4.2314': attribute type 1 has an invalid length. [ 352.298342][T14887] ipvlan0: entered promiscuous mode [ 352.867245][T14903] tipc: Enabling of bearer rejected, failed to enable media [ 352.919862][T14907] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2319'. [ 353.198676][T14921] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.381228][T14921] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.428703][T14918] vxcan1 speed is unknown, defaulting to 1000 [ 353.480474][T14921] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.799823][T14921] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.892572][T14931] vxcan1 speed is unknown, defaulting to 1000 [ 353.940578][T14942] __nla_validate_parse: 5 callbacks suppressed [ 353.940606][T14942] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2328'. [ 354.098558][ T60] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.139229][ T60] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.208143][ T60] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.257415][ T50] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.337291][T14951] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2329'. [ 354.367064][T14944] 8021q: adding VLAN 0 to HW filter on device bond8 [ 354.379048][T14944] bond8: entered promiscuous mode [ 354.385538][T14944] bond0: (slave bond8): Enslaving as an active interface with a down link [ 354.659296][T14951] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 354.669387][T14951] bond_slave_0: left promiscuous mode [ 354.680783][T14951] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 354.689983][T14951] bond_slave_1: left promiscuous mode [ 354.703895][T14951] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 354.713340][T14951] mac80211_hwsim hwsim11 wlan1: left promiscuous mode [ 354.729901][T14951] bond0 (unregistering): (slave bond6): Releasing backup interface [ 354.738668][T14951] bond6: left promiscuous mode [ 354.747401][T14951] bond0 (unregistering): (slave bond8): Releasing backup interface [ 354.756830][T14951] bond8: left promiscuous mode [ 354.762687][T14961] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2331'. [ 354.772067][T14951] bond0 (unregistering): Released all slaves [ 354.772209][T14961] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2331'. [ 354.802299][T14918] wg1 speed is unknown, defaulting to 1000 [ 355.033952][T14970] netlink: zone id is out of range [ 355.063968][T14970] netlink: zone id is out of range [ 355.160795][T14970] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2334'. [ 355.175483][T14970] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2334'. [ 355.431039][T14931] wg1 speed is unknown, defaulting to 1000 [ 355.947440][T15002] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2340'. [ 356.063683][T15010] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2342'. [ 356.083601][T15010] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2342'. [ 356.123176][T15010] netlink: 'syz.1.2342': attribute type 5 has an invalid length. [ 356.164473][T15015] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2341'. [ 356.198025][T15010] netlink: 'syz.1.2342': attribute type 6 has an invalid length. [ 356.824309][T15009] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 356.892298][T15032] sctp: [Deprecated]: syz.2.2346 (pid 15032) Use of int in max_burst socket option deprecated. [ 356.892298][T15032] Use struct sctp_assoc_value instead [ 357.637405][T15085] vxcan1 speed is unknown, defaulting to 1000 [ 357.738888][T15089] netlink: 'syz.1.2359': attribute type 10 has an invalid length. [ 357.750240][T15089] `: Port device macvlan1 added [ 357.900639][T15085] wg1 speed is unknown, defaulting to 1000 [ 358.534396][T15101] vxcan1 speed is unknown, defaulting to 1000 [ 358.703744][T15110] vti0: entered promiscuous mode [ 358.787819][T15112] tipc: New replicast peer: 255.255.255.255 [ 358.812487][T15112] tipc: Enabled bearer , priority 10 [ 359.003737][T15118] ipt_REJECT: TCP_RESET invalid for non-tcp [ 359.189385][T15123] __nla_validate_parse: 5 callbacks suppressed [ 359.189404][T15123] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2370'. [ 359.267126][T15123] netlink: 'syz.4.2370': attribute type 4 has an invalid length. [ 359.305334][T15128] netlink: 'syz.4.2370': attribute type 4 has an invalid length. [ 359.410391][ T6066] IPVS: starting estimator thread 0... [ 359.414950][T15101] wg1 speed is unknown, defaulting to 1000 [ 359.477138][T15138] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 359.506060][T15134] IPVS: using max 32 ests per chain, 76800 per kthread [ 359.623174][T15144] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 360.165470][T15172] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2385'. [ 360.176110][T15172] netlink: 'syz.2.2385': attribute type 1 has an invalid length. [ 360.183956][T15172] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2385'. [ 360.208880][T15172] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 360.322554][T15180] RDS: rds_bind could not find a transport for ::ffff:10.1.1.0, load rds_tcp or rds_rdma? [ 360.424359][T15177] vxcan1 speed is unknown, defaulting to 1000 [ 360.700392][T15194] bridge: RTM_NEWNEIGH with invalid ether address [ 360.810748][T15197] syzkaller1: entered promiscuous mode [ 360.817224][T15197] syzkaller1: entered allmulticast mode [ 360.971111][T15200] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2392'. [ 361.010945][T15200] bond5: entered promiscuous mode [ 361.017396][T15200] 8021q: adding VLAN 0 to HW filter on device bond5 [ 361.168958][T15204] tipc: Enabled bearer , priority 0 [ 361.203134][T15204] batadv0: mtu less than device minimum [ 361.322374][T15204] tipc: Disabling bearer [ 361.422430][T15191] delete_channel: no stack [ 361.441739][T15212] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2397'. [ 361.451025][T15212] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2397'. [ 361.551808][T15212] bond6: entered promiscuous mode [ 361.557883][T15212] bond6: entered allmulticast mode [ 361.558218][T15216] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2397'. [ 361.563652][T15212] 8021q: adding VLAN 0 to HW filter on device bond6 [ 361.580738][T15177] wg1 speed is unknown, defaulting to 1000 [ 361.597305][T15222] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2400'. [ 361.646800][T15222] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 361.654325][T15222] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2400'. [ 361.681321][T15222] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 361.827999][T15232] netlink: 'syz.0.2403': attribute type 10 has an invalid length. [ 361.837155][T15212] vxcan1 speed is unknown, defaulting to 1000 [ 362.108626][T15230] vxcan1 speed is unknown, defaulting to 1000 [ 362.358300][T15239] vxcan1 speed is unknown, defaulting to 1000 [ 362.363026][T15230] wg1 speed is unknown, defaulting to 1000 [ 362.856206][T15251] netlink: 'syz.4.2407': attribute type 4 has an invalid length. [ 362.905191][T15250] netlink: 'syz.4.2407': attribute type 4 has an invalid length. [ 363.060078][T15212] wg1 speed is unknown, defaulting to 1000 [ 363.246814][T15257] vxcan1 speed is unknown, defaulting to 1000 [ 363.324693][T15262] netlink: 5 bytes leftover after parsing attributes in process `syz.1.2410'. [ 363.345728][T15262] 0XD: renamed from gretap0 [ 363.364392][T15262] 0XD: entered allmulticast mode [ 363.393562][T15262] A link change request failed with some changes committed already. Interface 30XD may have been left with an inconsistent configuration, please check. [ 363.947246][T15239] wg1 speed is unknown, defaulting to 1000 [ 364.233742][T15284] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2416'. [ 364.305843][T15286] tipc: Enabled bearer , priority 0 [ 364.333351][T15290] syzkaller0: entered promiscuous mode [ 364.350116][T15290] syzkaller0: entered allmulticast mode [ 364.387825][T15281] tipc: Resetting bearer [ 364.399053][T15280] tipc: Resetting bearer [ 364.439409][T15280] tipc: Disabling bearer [ 364.457390][T15292] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2417'. [ 364.624809][T15257] wg1 speed is unknown, defaulting to 1000 [ 365.209042][T15304] vxcan1 speed is unknown, defaulting to 1000 [ 365.313666][T15311] tipc: Enabled bearer , priority 0 [ 365.324685][T15311] syzkaller0: entered promiscuous mode [ 365.331255][T15311] syzkaller0: entered allmulticast mode [ 365.380052][T15311] tipc: Resetting bearer [ 365.402588][T15310] tipc: Resetting bearer [ 365.455657][T15310] tipc: Disabling bearer [ 365.571525][T15319] netlink: 'syz.0.2425': attribute type 6 has an invalid length. [ 365.634818][T15320] IPv6: syztnl2: Disabled Multicast RS [ 365.791716][T15304] wg1 speed is unknown, defaulting to 1000 [ 367.827019][T15344] vxcan1 speed is unknown, defaulting to 1000 [ 368.380250][T15364] bond6: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 368.427512][T15364] bond6 (unregistering): Released all slaves [ 368.511814][T15366] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2436'. [ 368.540045][T15366] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2436'. [ 368.620729][T15374] tipc: Enabling of bearer rejected, failed to enable media [ 368.786502][T15344] wg1 speed is unknown, defaulting to 1000 [ 369.066737][T15396] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2442'. [ 369.086966][T15396] netlink: 356 bytes leftover after parsing attributes in process `syz.3.2442'. [ 369.873060][T15420] netlink: 'syz.1.2448': attribute type 1 has an invalid length. [ 370.262501][T15437] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2451'. [ 370.272663][T15437] netlink: 'syz.3.2451': attribute type 21 has an invalid length. [ 370.499404][T15446] vxcan1 speed is unknown, defaulting to 1000 [ 370.573112][T15450] tun0: tun_chr_ioctl cmd 1074025675 [ 370.594140][T15450] tun0: persist disabled [ 370.911637][T15463] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2458'. [ 371.071294][T15466] pim6reg: entered allmulticast mode [ 371.105882][T15466] pim6reg: left allmulticast mode [ 371.213858][T15471] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2461'. [ 371.233163][T15473] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2462'. [ 371.636495][T15446] wg1 speed is unknown, defaulting to 1000 [ 371.676857][T15501] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2471'. [ 371.958325][T15511] bond0: (slave bond_slave_0): Releasing backup interface [ 371.999744][T15511] bond_slave_0: left promiscuous mode [ 372.007138][T15511] bond_slave_0: left allmulticast mode [ 372.046270][T15511] bond0: (slave bond_slave_1): Releasing backup interface [ 372.082315][T15511] bond_slave_1: left promiscuous mode [ 372.094188][T15511] bond_slave_1: left allmulticast mode [ 372.120668][T15511] team0: Port device team_slave_0 removed [ 372.175076][T15511] team0: Port device team_slave_1 removed [ 372.188726][T15511] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 372.215942][T15511] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 372.225716][T15511] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 372.233166][T15511] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 372.357266][T15511] team0: Port device geneve0 removed [ 372.387576][T15511] bond2: (slave ip6gretap1): Releasing active interface [ 372.413949][T15511] bond3: (slave gre0): Releasing backup interface [ 372.425724][T15511] gre0: left promiscuous mode [ 372.543680][T15524] bridge7: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 373.088948][T15562] tipc: Enabling of bearer rejected, already enabled [ 373.183162][T15577] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2486'. [ 373.406571][T15574] vxcan1 speed is unknown, defaulting to 1000 [ 373.760668][T15582] syzkaller0: entered promiscuous mode [ 373.775187][T15582] syzkaller0: entered allmulticast mode [ 375.863551][T15579] vxcan1 speed is unknown, defaulting to 1000 [ 376.289635][T15594] vxcan1 speed is unknown, defaulting to 1000 [ 376.378653][T15574] wg1 speed is unknown, defaulting to 1000 [ 376.889406][T15579] wg1 speed is unknown, defaulting to 1000 [ 377.413021][T15594] wg1 speed is unknown, defaulting to 1000 [ 378.176419][T15574] delete_channel: no stack [ 378.181113][T15574] delete_channel: no stack [ 378.188402][T15574] delete_channel: no stack [ 378.193033][T15574] delete_channel: no stack [ 378.205310][T15622] netlink: 'syz.1.2498': attribute type 1 has an invalid length. [ 378.213635][T15574] delete_channel: no stack [ 378.233903][T15574] delete_channel: no stack [ 378.240004][T15574] delete_channel: no stack [ 378.246587][T15574] delete_channel: no stack [ 378.251486][T15574] delete_channel: no stack [ 378.271153][T15574] delete_channel: no stack [ 378.277105][T15574] delete_channel: no stack [ 378.282607][T15574] delete_channel: no stack [ 378.307310][T15574] delete_channel: no stack [ 378.311997][T15574] delete_channel: no stack [ 378.319147][T15574] delete_channel: no stack [ 378.323796][T15574] delete_channel: no stack [ 378.338252][T15574] delete_channel: no stack [ 378.348337][T15574] delete_channel: no stack [ 378.353729][T15574] delete_channel: no stack [ 378.370090][T15574] delete_channel: no stack [ 378.374742][T15574] delete_channel: no stack [ 378.431090][T15574] delete_channel: no stack [ 378.448358][T15574] delete_channel: no stack [ 378.453313][T15574] delete_channel: no stack [ 378.464822][T15574] delete_channel: no stack [ 378.505387][T15574] delete_channel: no stack [ 378.510059][T15574] delete_channel: no stack [ 378.511120][T15624] bond8: (slave vxcan3): The slave device specified does not support setting the MAC address [ 378.514705][T15574] delete_channel: no stack [ 378.548026][T15624] bond8: (slave vxcan3): Error -95 calling set_mac_address [ 378.555986][T15574] delete_channel: no stack [ 378.556168][T15574] delete_channel: no stack [ 378.566663][T15574] delete_channel: no stack [ 378.571310][T15574] delete_channel: no stack [ 378.585911][T15574] delete_channel: no stack [ 378.590682][T15574] delete_channel: no stack [ 378.600630][T15574] delete_channel: no stack [ 378.612567][T15574] delete_channel: no stack [ 378.622326][T15574] delete_channel: no stack [ 378.633172][T15574] delete_channel: no stack [ 378.643035][T15574] delete_channel: no stack [ 378.653663][T15574] delete_channel: no stack [ 378.665724][T15574] delete_channel: no stack [ 378.678499][T15574] delete_channel: no stack [ 378.679684][T15625] bond8: (slave bridge4): Enslaving as an active interface with a down link [ 378.690123][T15574] delete_channel: no stack [ 378.704217][T15574] delete_channel: no stack [ 378.715983][T15574] delete_channel: no stack [ 378.725717][T15574] delete_channel: no stack [ 378.738752][T15574] delete_channel: no stack [ 378.755945][T15574] delete_channel: no stack [ 378.760675][T15574] delete_channel: no stack [ 378.767168][T15574] delete_channel: no stack [ 378.778610][T15574] delete_channel: no stack [ 378.791417][T15574] delete_channel: no stack [ 378.801853][T15574] delete_channel: no stack [ 378.808644][T15622] bond8: (slave gretap0): making interface the new active one [ 378.811469][T15574] delete_channel: no stack [ 378.821230][T15622] bond8: (slave gretap0): Enslaving as an active interface with an up link [ 378.835653][T15574] delete_channel: no stack [ 378.839154][T15626] macvlan2: entered promiscuous mode [ 378.840384][T15574] delete_channel: no stack [ 378.850927][T15574] delete_channel: no stack [ 378.855524][T15626] macvlan2: entered allmulticast mode [ 378.856291][T15626] bond8: entered promiscuous mode [ 378.861987][T15574] delete_channel: no stack [ 378.872208][T15574] delete_channel: no stack [ 378.877182][T15574] delete_channel: no stack [ 378.881788][T15574] delete_channel: no stack [ 378.885651][T15626] gretap0: entered promiscuous mode [ 378.886616][T15574] delete_channel: no stack [ 378.892446][T15626] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 378.896318][T15574] delete_channel: no stack [ 378.908558][T15574] delete_channel: no stack [ 378.913222][T15574] delete_channel: no stack [ 378.923015][T15626] bond8: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap0 [ 378.946824][T15626] bond8: left promiscuous mode [ 378.951727][T15626] gretap0: left promiscuous mode [ 379.085137][T15626] syz.1.2498 (15626) used greatest stack depth: 17784 bytes left [ 379.614225][T15653] netlink: 'syz.4.2506': attribute type 1 has an invalid length. [ 379.646047][T15650] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2504'. [ 379.997240][T15656] bridge0: port 3(syz_tun) entered disabled state [ 380.044186][T15656] bridge0: port 2(bridge_slave_1) entered disabled state [ 380.051848][T15656] bridge0: port 1(bridge_slave_0) entered disabled state [ 380.179185][T15665] netlink: 'syz.3.2508': attribute type 1 has an invalid length. [ 380.283607][T15670] netlink: 'syz.3.2508': attribute type 1 has an invalid length. [ 380.299511][T15656] wg0: left allmulticast mode [ 380.343881][T15656] tipc: Resetting bearer [ 380.437716][T15656] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 380.486161][T15656] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 380.501185][T15656] xfrm0: left promiscuous mode [ 380.507161][T15656] xfrm0: left allmulticast mode [ 380.683802][T15656] vlan0: left promiscuous mode [ 380.772124][T15656] bridge3: left promiscuous mode [ 380.777244][T15656] bridge3: left allmulticast mode [ 380.783412][T15656] geneve3: left promiscuous mode [ 380.789401][T15656] geneve3: left allmulticast mode [ 380.868327][T15656] vlan3: left promiscuous mode [ 380.875345][T15656] geneve1: left promiscuous mode [ 380.880648][T15656] vlan3: left allmulticast mode [ 380.887649][T15656] geneve1: left allmulticast mode [ 380.901773][T15656] gre1: left allmulticast mode [ 380.925668][T15653] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR [ 381.020833][T15668] bond7: (slave gretap1): making interface the new active one [ 381.041406][T15668] bond7: (slave gretap1): Enslaving as an active interface with an up link [ 381.056282][ T8524] vxcan1 speed is unknown, defaulting to 1000 [ 381.064344][ T8524] syz2: Port: 1 Link DOWN [ 381.080489][ T8829] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 381.096693][ T8829] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 256 - 0 [ 381.118871][T15693] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2510'. [ 381.120591][ T8829] netdevsim netdevsim0 eth0: unset [1, 1] type 2 family 0 port 6081 - 0 [ 381.136877][ T8829] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 381.146050][ T8829] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 256 - 0 [ 381.155178][ T8829] netdevsim netdevsim0 eth1: unset [1, 1] type 2 family 0 port 6081 - 0 [ 381.173804][ T6066] vxcan1 speed is unknown, defaulting to 1000 [ 381.181974][ T8829] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 381.205562][ T8829] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 256 - 0 [ 381.221217][ T8829] netdevsim netdevsim0 eth2: unset [1, 1] type 2 family 0 port 6081 - 0 [ 381.231195][ T8829] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 381.239722][ T8829] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 256 - 0 [ 381.248129][ T8829] netdevsim netdevsim0 eth3: unset [1, 1] type 2 family 0 port 6081 - 0 [ 381.256715][T15657] vxcan1 speed is unknown, defaulting to 1000 [ 381.299804][T15702] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:65535 [ 382.027813][T15739] netlink: 'syz.1.2525': attribute type 11 has an invalid length. [ 382.028410][T15740] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2525'. [ 382.091075][T15657] wg1 speed is unknown, defaulting to 1000 [ 383.037299][T15777] netlink: 'syz.1.2535': attribute type 1 has an invalid length. [ 383.142959][T15784] vxcan1 speed is unknown, defaulting to 1000 [ 383.238376][T15793] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2537'. [ 383.249177][T15794] lo: left promiscuous mode [ 383.256708][T15794] 0XD: left allmulticast mode [ 383.278537][T15794] syz_tun: left promiscuous mode [ 383.285414][T15794] vxcan1: left allmulticast mode [ 383.320199][T15794] bond5: left promiscuous mode [ 383.325705][T15794] bond5: left allmulticast mode [ 383.331098][T15794] bond6: left promiscuous mode [ 383.348104][T15794] vti0: left promiscuous mode [ 383.366405][T10357] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.385997][T10357] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.413428][T10357] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.436255][T10357] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.438384][T15797] netlink: 'syz.2.2541': attribute type 10 has an invalid length. [ 383.484693][T15801] netlink: 'syz.0.2542': attribute type 1 has an invalid length. [ 383.493951][T15797] bond0: (slave wlan1): Opening slave failed [ 383.530051][T15801] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2542'. [ 383.656084][ T5931] hid-generic 0005:16C0:5505.0001: unknown main item tag 0x0 [ 383.673448][T15806] netlink: 'syz.1.2545': attribute type 58 has an invalid length. [ 383.689980][ T5931] hid-generic 0005:16C0:5505.0001: hidraw0: BLUETOOTH HID v0.87 Device [syz0] on aa:aa:aa:aa:aa:aa [ 383.753220][T15806] vxcan1 speed is unknown, defaulting to 1000 [ 383.766916][T15812] netlink: 'syz.2.2547': attribute type 5 has an invalid length. [ 383.809252][T15812] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2547'. [ 383.828926][T15816] netlink: 240 bytes leftover after parsing attributes in process `syz.3.2546'. [ 383.836021][T15817] sit0: left promiscuous mode [ 383.852444][T15817] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 383.876143][T15784] wg1 speed is unknown, defaulting to 1000 [ 384.870450][T15806] wg1 speed is unknown, defaulting to 1000 [ 384.877102][T15838] tipc: Enabled bearer , priority 0 [ 384.880711][T15838] syzkaller0: entered promiscuous mode [ 384.925912][T15838] syzkaller0: entered allmulticast mode [ 384.976881][T15838] tipc: Resetting bearer [ 384.986992][T15837] tipc: Resetting bearer [ 385.018838][T15837] tipc: Disabling bearer [ 385.244436][T15853] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2557'. [ 385.347863][T15850] netlink: 'syz.3.2556': attribute type 4 has an invalid length. [ 385.702428][T15863] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2560'. [ 386.715351][T15890] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 386.720566][T15891] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2569'. [ 386.741205][T15891] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2569'. [ 387.048282][T15912] vxcan1 speed is unknown, defaulting to 1000 [ 387.967718][T15912] wg1 speed is unknown, defaulting to 1000 [ 387.987042][T15941] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2581'. [ 388.031715][T15941] hsr_slave_0: left promiscuous mode [ 388.046671][T15941] hsr_slave_1: left promiscuous mode [ 388.154655][T15946] `: Port device macvlan1 removed [ 388.174820][T15946] `: Port device geneve0 removed [ 388.191461][T15946] bond3: (slave wlan0): Releasing active interface [ 388.202999][T15946] bond8: (slave bridge4): Releasing active interface [ 388.213323][T15946] bond8: (slave gretap0): Releasing active interface [ 388.430333][T15961] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2585'. [ 388.442688][T15961] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2585'. [ 388.515413][T15961] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2585'. [ 388.940879][T15980] vxcan4: entered allmulticast mode [ 389.055744][T15985] xt_NFQUEUE: number of queues (65532) out of range (got 118598) [ 389.150353][T15920] infiniband syz!: set down [ 389.161569][T15988] x_tables: duplicate underflow at hook 3 [ 389.196063][T15920] infiniband syz!: added team_slave_0 [ 389.210110][T15920] syz!: rxe_create_cq: returned err = -12 [ 389.280663][T15920] infiniband syz!: Couldn't create ib_mad CQ [ 389.328083][T15920] infiniband syz!: Couldn't open port 1 [ 389.444445][T15920] RDS/IB: syz!: added [ 389.482827][T15920] smc: adding ib device syz! with port count 1 [ 389.513689][T15920] smc: ib device syz! port 1 has no pnetid [ 389.557738][T15996] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2594'. [ 390.466926][T16012] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 390.681955][T16039] netlink: 'syz.0.2605': attribute type 3 has an invalid length. [ 390.715033][T16039] netlink: 3 bytes leftover after parsing attributes in process `syz.0.2605'. [ 390.828297][T16043] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2608'. [ 391.557834][T16063] ip6tnl3: entered promiscuous mode [ 391.586996][T16063] ip6tnl3: entered allmulticast mode [ 391.714645][T16066] bridge2: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 392.273341][T16088] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2621'. [ 392.315597][T16089] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2621'. [ 392.322347][T16092] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2622'. [ 392.347560][T16092] netlink: 14436 bytes leftover after parsing attributes in process `syz.1.2622'. [ 392.364410][T16092] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 392.459633][T16101] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2625'. [ 392.758122][T16109] ip6gre2: entered promiscuous mode [ 392.784820][T16109] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2628'. [ 392.912057][T16118] tipc: Enabled bearer , priority 0 [ 392.921587][T16118] syzkaller0: entered promiscuous mode [ 392.927971][T16118] syzkaller0: entered allmulticast mode [ 393.000970][T16114] tipc: Resetting bearer [ 393.113588][T16114] tipc: Disabling bearer [ 393.371323][T16136] netlink: 'syz.2.2634': attribute type 1 has an invalid length. [ 393.392163][T16140] block nbd1: NBD_DISCONNECT [ 393.406031][T16140] block nbd1: Send disconnect failed -32 [ 393.419252][T16140] block nbd1: shutting down sockets [ 393.472574][T16146] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2635'. [ 393.569674][T16146] macsec0: entered promiscuous mode [ 393.585039][T16146] ip6gretap0: entered promiscuous mode [ 393.826239][T16164] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2642'. [ 393.888494][T16166] vxcan1 speed is unknown, defaulting to 1000 [ 393.970610][T16176] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 394.404796][T16181] vxcan1 speed is unknown, defaulting to 1000 [ 395.037164][T16166] wg1 speed is unknown, defaulting to 1000 [ 395.688928][T16181] wg1 speed is unknown, defaulting to 1000 [ 396.253572][T16221] __nla_validate_parse: 2 callbacks suppressed [ 396.253591][T16221] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2657'. [ 397.754815][T16265] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2667'. [ 398.219571][ T30] audit: type=1804 audit(1760171230.616:8): pid=16287 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.2673" name="/newroot/505/cgroup.controllers" dev="tmpfs" ino=2606 res=1 errno=0 [ 398.224299][T16287] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2673'. [ 398.286857][ T30] audit: type=1800 audit(1760171230.616:9): pid=16287 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2673" name="cgroup.controllers" dev="tmpfs" ino=2606 res=0 errno=0 [ 398.356442][T16287] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2673'. [ 398.370621][T16287] netlink: 'syz.0.2673': attribute type 6 has an invalid length. [ 398.382991][ T30] audit: type=1800 audit(1760171230.616:10): pid=16287 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2673" name="cgroup.controllers" dev="tmpfs" ino=2606 res=0 errno=0 [ 398.601969][T16291] vxcan1 speed is unknown, defaulting to 1000 [ 398.751824][T16294] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2675'. [ 399.185831][T16313] bridge5: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 399.267359][T16316] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2682'. [ 399.358548][T16320] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2683'. [ 399.504197][T16323] netlink: 'syz.1.2684': attribute type 6 has an invalid length. [ 399.517169][T16327] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2685'. [ 399.532160][T16323] netlink: 'syz.1.2684': attribute type 6 has an invalid length. [ 399.565684][T16323] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2684'. [ 399.613673][T16291] wg1 speed is unknown, defaulting to 1000 [ 399.779996][T16337] vxcan1 speed is unknown, defaulting to 1000 [ 399.943354][T16353] sctp: [Deprecated]: syz.0.2691 (pid 16353) Use of int in maxseg socket option. [ 399.943354][T16353] Use struct sctp_assoc_value instead [ 400.002505][T16353] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2691'. [ 401.069188][T16337] wg1 speed is unknown, defaulting to 1000 [ 401.412021][T16392] netlink: 'syz.3.2702': attribute type 4 has an invalid length. [ 401.571513][T16390] netlink: 'syz.3.2702': attribute type 4 has an invalid length. [ 402.026241][T16417] __nla_validate_parse: 1 callbacks suppressed [ 402.026264][T16417] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2708'. [ 402.670409][T16444] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2713'. [ 402.716433][T16441] vxcan1 speed is unknown, defaulting to 1000 [ 403.053424][T16449] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2715'. [ 403.206605][T16456] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2717'. [ 403.319968][T16456] netlink: 'syz.0.2717': attribute type 3 has an invalid length. [ 403.494000][T16468] netlink: 'syz.3.2719': attribute type 1 has an invalid length. [ 403.525620][T16469] openvswitch: netlink: Port -1 exceeds max allowable 65535 [ 403.567122][T16473] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2719'. [ 403.697578][T16478] gretap2: entered promiscuous mode [ 403.702842][T16478] gretap2: entered allmulticast mode [ 403.712029][T16478] bond8: (slave gretap2): making interface the new active one [ 403.721352][T16478] bond8: (slave gretap2): Enslaving as an active interface with an up link [ 404.107356][T16503] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2724'. [ 404.279383][T16441] wg1 speed is unknown, defaulting to 1000 [ 404.361866][T16511] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2730'. [ 404.469745][T16516] netlink: 'syz.0.2731': attribute type 6 has an invalid length. [ 404.534247][T16519] netlink: 27 bytes leftover after parsing attributes in process `syz.0.2731'. [ 405.432788][T16555] vxcan1 speed is unknown, defaulting to 1000 [ 405.456018][T16559] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2743'. [ 405.804207][T16567] netlink: 'syz.0.2744': attribute type 1 has an invalid length. [ 406.061052][T16574] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2746'. [ 406.316512][T16574] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 406.753445][T16563] vxcan1 speed is unknown, defaulting to 1000 [ 406.882228][T16590] bond7: entered promiscuous mode [ 407.549549][T16555] wg1 speed is unknown, defaulting to 1000 [ 407.585888][T16606] af_packet: tpacket_rcv: packet too big, clamped from 384 to 4294967272. macoff=96 [ 407.787534][T16610] netlink: 'syz.2.2753': attribute type 1 has an invalid length. [ 407.828398][T16610] netlink: 'syz.2.2753': attribute type 2 has an invalid length. [ 407.854288][T16615] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2755'. [ 407.870180][T16615] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2755'. [ 407.880774][T16615] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2755'. [ 408.131712][T16621] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2758'. [ 408.155185][T16623] netlink: 71 bytes leftover after parsing attributes in process `syz.3.2759'. [ 408.226669][T16563] wg1 speed is unknown, defaulting to 1000 [ 408.361439][T16625] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2760'. [ 408.530656][T16632] vxcan1 speed is unknown, defaulting to 1000 [ 408.566439][T16641] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2763'. [ 408.576178][T16625] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2760'. [ 409.152978][T16632] wg1 speed is unknown, defaulting to 1000 [ 409.554288][T16656] vxcan1 speed is unknown, defaulting to 1000 [ 410.163860][T16670] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2771'. [ 410.287566][T16672] vlan2: entered promiscuous mode [ 410.295267][T16672] bond0: entered promiscuous mode [ 410.643493][T16674] syzkaller0: entered promiscuous mode [ 410.655674][T16674] syzkaller0: entered allmulticast mode [ 412.375990][T16656] wg1 speed is unknown, defaulting to 1000 [ 412.507374][T16677] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2774'. [ 413.222727][T16698] pimreg: entered allmulticast mode [ 413.228635][T16698] pimreg: left allmulticast mode [ 413.329217][T16703] netlink: 'syz.1.2781': attribute type 64 has an invalid length. [ 413.583254][T16703] vxcan1 speed is unknown, defaulting to 1000 [ 414.067157][T16715] __nla_validate_parse: 1 callbacks suppressed [ 414.067179][T16715] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2784'. [ 414.280880][T16724] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2788'. [ 414.499743][T16724] 8021q: adding VLAN 0 to HW filter on device bond6 [ 415.187981][T16703] wg1 speed is unknown, defaulting to 1000 [ 415.453732][T16759] vxcan1 speed is unknown, defaulting to 1000 [ 415.517931][T16762] 8021q: VLANs not supported on caif0 [ 415.530513][T16762] 8021q: VLANs not supported on caif0 [ 415.540710][T16767] netlink: 'syz.2.2801': attribute type 1 has an invalid length. [ 415.556257][T16763] netlink: 20824 bytes leftover after parsing attributes in process `syz.3.2800'. [ 415.936148][T16777] syzkaller0: entered promiscuous mode [ 415.966396][T16777] syzkaller0: entered allmulticast mode [ 416.007978][T16781] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2804'. [ 416.046533][T16769] vxcan1 speed is unknown, defaulting to 1000 [ 416.660187][T16769] wg1 speed is unknown, defaulting to 1000 [ 417.109671][T16806] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.2815'. [ 417.191172][T16759] wg1 speed is unknown, defaulting to 1000 [ 417.225957][T16809] netlink: 'syz.3.2818': attribute type 2 has an invalid length. [ 417.245468][T16809] netlink: 'syz.3.2818': attribute type 1 has an invalid length. [ 417.253348][T16809] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.2818'. [ 417.263509][T16809] nbd: must specify at least one socket [ 418.472679][T16840] netlink: 9275 bytes leftover after parsing attributes in process `syz.4.2830'. [ 418.521869][T16844] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2832'. [ 418.542323][T16844] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2832'. [ 418.720197][T16849] netlink: 'syz.1.2834': attribute type 10 has an invalid length. [ 418.728945][T16849] macvlan1: entered allmulticast mode [ 418.735413][T16849] veth1_vlan: entered allmulticast mode [ 418.755759][T16849] `: Port device macvlan1 added [ 418.806192][T16851] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2835'. [ 419.078621][T16861] __nla_validate_parse: 3 callbacks suppressed [ 419.078642][T16861] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2840'. [ 419.104251][T16861] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2840'. [ 420.288962][T16901] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2859'. [ 420.313513][T16901] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 420.320864][T16901] IPv6: NLM_F_CREATE should be set when creating new route [ 420.472249][T16904] netlink: 'syz.3.2858': attribute type 10 has an invalid length. [ 420.507475][T16904] syz_tun: entered promiscuous mode [ 420.518965][T16904] syz_tun: entered allmulticast mode [ 420.525185][T10357] __ib_cache_gid_add: unable to add gid fe80:0000:0000:0000:a8aa:aaff:feaa:aaaa error=-28 [ 420.551953][T16904] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 420.596853][T16909] tipc: Enabled bearer , priority 0 [ 420.620266][T16909] syzkaller0: entered promiscuous mode [ 420.636114][T16909] syzkaller0: entered allmulticast mode [ 420.712533][T16909] tipc: Resetting bearer [ 420.736720][T16908] tipc: Resetting bearer [ 420.801023][T16908] tipc: Disabling bearer [ 421.126155][ T5830] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 421.145675][ T5830] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 421.155603][ T5830] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 421.163752][ T5830] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 421.182588][ T5830] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 421.184125][T16927] netlink: 'syz.2.2867': attribute type 3 has an invalid length. [ 421.203226][T16927] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2867'. [ 421.309193][T16928] xt_hashlimit: max too large, truncated to 1048576 [ 421.409531][T16923] vxcan1 speed is unknown, defaulting to 1000 [ 421.615087][T16952] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2871'. [ 421.671295][T16952] xfrm1: entered promiscuous mode [ 421.695196][T16952] xfrm1: entered allmulticast mode [ 421.711706][T16952] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2871'. [ 421.789170][T16966] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2874'. [ 421.967843][T16971] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2875'. [ 422.031102][T16974] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2876'. [ 422.116460][ T12] ip6gretap0 (unregistering): left promiscuous mode [ 422.118163][T16977] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2877'. [ 422.981894][ T12] bond0 (unregistering): Released all slaves [ 422.997525][ T12] bond1 (unregistering): Released all slaves [ 423.098657][ T12] bond2 (unregistering): Released all slaves [ 423.198039][ T12] bond3 (unregistering): Released all slaves [ 423.211282][ T12] bond4 (unregistering): Released all slaves [ 423.258669][ T5839] Bluetooth: hci3: command tx timeout [ 423.311737][ T12] bond5 (unregistering): Released all slaves [ 423.413782][ T12] bond6 (unregistering): Released all slaves [ 423.427493][ T12] bond7 (unregistering): Released all slaves [ 423.440445][ T12] bond8 (unregistering): Released all slaves [ 423.481868][T16923] wg1 speed is unknown, defaulting to 1000 [ 423.607450][ T12] tipc: Disabling bearer [ 423.658093][ T12] tipc: Left network mode [ 424.152507][T17013] netlink: 'syz.2.2884': attribute type 1 has an invalid length. [ 424.161013][T17013] __nla_validate_parse: 4 callbacks suppressed [ 424.161033][T17013] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2884'. [ 424.162413][T17016] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2885'. [ 424.271710][T17026] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2885'. [ 424.291101][T17016] team1: entered promiscuous mode [ 424.304980][T17016] team1: entered allmulticast mode [ 424.315420][T17016] 8021q: adding VLAN 0 to HW filter on device team1 [ 424.420509][T17021] vxcan1 speed is unknown, defaulting to 1000 [ 424.618843][T17041] netlink: 'syz.3.2887': attribute type 16 has an invalid length. [ 424.627186][T17041] netlink: 'syz.3.2887': attribute type 17 has an invalid length. [ 424.978826][T17041] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 425.134210][T17044] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2890'. [ 425.143904][T17044] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2890'. [ 425.155156][T17044] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2890'. [ 425.166017][T17044] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2890'. [ 425.202328][T17034] vxcan1 speed is unknown, defaulting to 1000 [ 425.354975][ T5839] Bluetooth: hci3: command tx timeout [ 425.420452][T17048] netlink: 248 bytes leftover after parsing attributes in process `syz.4.2891'. [ 425.551033][T16923] chnl_net:caif_netlink_parms(): no params data found [ 425.875451][T17064] netlink: 'syz.4.2894': attribute type 16 has an invalid length. [ 425.883327][T17064] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2894'. [ 425.893471][T17021] wg1 speed is unknown, defaulting to 1000 [ 425.943747][T16923] bridge0: port 1(bridge_slave_0) entered blocking state [ 425.958033][T16923] bridge0: port 1(bridge_slave_0) entered disabled state [ 425.965657][T16923] bridge_slave_0: entered allmulticast mode [ 425.974116][T16923] bridge_slave_0: entered promiscuous mode [ 425.995887][T16923] bridge0: port 2(bridge_slave_1) entered blocking state [ 426.003215][T16923] bridge0: port 2(bridge_slave_1) entered disabled state [ 426.025780][T16923] bridge_slave_1: entered allmulticast mode [ 426.033749][T16923] bridge_slave_1: entered promiscuous mode [ 426.180904][T16923] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 426.201857][T16923] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 426.290020][T16923] team0: Port device team_slave_0 added [ 426.314475][T16923] team0: Port device team_slave_1 added [ 426.418607][T16923] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 426.438393][T16923] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 426.465763][T16923] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 426.477455][T17034] wg1 speed is unknown, defaulting to 1000 [ 426.498656][T16923] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 426.514888][T16923] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 426.542753][T16923] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 426.754271][ T12] veth1_vlan: left allmulticast mode [ 426.863056][T17086] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input5 [ 426.934075][ T12] ` (unregistering): Port device macvlan1 removed [ 427.420599][ T5839] Bluetooth: hci3: command tx timeout [ 427.625382][T17084] bond0: Error: Cannot enslave bond to itself. [ 427.645807][T16923] hsr_slave_0: entered promiscuous mode [ 427.654961][T16923] hsr_slave_1: entered promiscuous mode [ 427.723915][T17091] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 427.757559][T17081] vxcan1 speed is unknown, defaulting to 1000 [ 428.118922][ T12] IPVS: stop unused estimator thread 0... [ 428.217517][T17101] sctp: [Deprecated]: syz.3.2904 (pid 17101) Use of int in max_burst socket option deprecated. [ 428.217517][T17101] Use struct sctp_assoc_value instead [ 428.245760][T17101] sctp: [Deprecated]: syz.3.2904 (pid 17101) Use of int in max_burst socket option deprecated. [ 428.245760][T17101] Use struct sctp_assoc_value instead [ 428.350200][T17106] veth1_to_bond: entered allmulticast mode [ 428.357422][T17106] veth1_to_bond: entered promiscuous mode [ 428.364131][T17106] netlink: 'syz.3.2905': attribute type 2 has an invalid length. [ 428.420766][T17105] veth1_to_bond: left promiscuous mode [ 428.435751][T17105] veth1_to_bond: left allmulticast mode [ 428.671981][T16923] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 428.692479][T16923] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 428.705813][T16923] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 428.718759][T16923] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 428.789863][T17121] tipc: Enabled bearer , priority 0 [ 428.849855][T17111] tipc: Disabling bearer [ 428.910890][T17081] wg1 speed is unknown, defaulting to 1000 [ 428.966604][T16923] 8021q: adding VLAN 0 to HW filter on device bond0 [ 428.994512][T16923] 8021q: adding VLAN 0 to HW filter on device team0 [ 429.048884][ T3033] bridge0: port 1(bridge_slave_0) entered blocking state [ 429.056171][ T3033] bridge0: port 1(bridge_slave_0) entered forwarding state [ 429.120603][ T8829] bridge0: port 2(bridge_slave_1) entered blocking state [ 429.127821][ T8829] bridge0: port 2(bridge_slave_1) entered forwarding state [ 429.313442][T17124] bond0: Error: Cannot enslave bond to itself. [ 429.495258][ T5839] Bluetooth: hci3: command tx timeout [ 429.514546][T16923] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 429.904306][T16923] veth0_vlan: entered promiscuous mode [ 429.918852][T16923] veth1_vlan: entered promiscuous mode [ 429.990135][T16923] veth0_macvtap: entered promiscuous mode [ 430.063609][T16923] veth1_macvtap: entered promiscuous mode [ 430.200232][T16923] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 430.259707][T17137] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 430.274572][T16923] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 430.325035][T17137] netlink: 'syz.2.2911': attribute type 24 has an invalid length. [ 430.333365][T17137] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2911'. [ 430.717493][T17137] bond8: option ad_actor_sys_prio: invalid value (0) [ 430.731842][T17137] bond8: option ad_actor_sys_prio: allowed values 1 - 65535 [ 430.777341][T17137] bond8 (unregistering): Released all slaves [ 430.915631][ T3033] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 430.924421][ T3033] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 430.985488][ T3033] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 431.030331][ T3033] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 431.369658][ T3033] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 431.378603][ T3033] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 431.457817][ T8829] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 431.476851][ T8829] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 431.582655][ T5839] Bluetooth: hci3: command tx timeout [ 431.688530][T17164] tipc: Started in network mode [ 431.693562][T17164] tipc: Node identity c275e02a56e9, cluster identity 4711 [ 431.702525][T17164] tipc: Enabled bearer , priority 0 [ 431.713031][T17164] syzkaller0: entered promiscuous mode [ 431.718845][T17164] syzkaller0: entered allmulticast mode [ 431.743773][T17166] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2917'. [ 431.828340][T17164] tipc: Resetting bearer [ 431.860829][T17163] tipc: Resetting bearer [ 431.943665][T17163] tipc: Disabling bearer [ 432.017050][T17183] netlink: 'syz.2.2921': attribute type 13 has an invalid length. [ 432.086737][T17193] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2926'. [ 432.158269][T17200] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2927'. [ 432.309313][T17193] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2926'. [ 432.321334][T17196] tipc: Enabled bearer , priority 0 [ 432.330112][T17201] syzkaller0: entered promiscuous mode [ 432.338774][T17201] syzkaller0: entered allmulticast mode [ 432.355641][T17206] dvmrp12: entered allmulticast mode [ 432.413387][T17187] tipc: Resetting bearer [ 432.445200][T17199] dvmrp12: left allmulticast mode [ 432.727188][T17186] tipc: Resetting bearer [ 432.756347][T17240] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2936'. [ 432.782913][T17186] tipc: Disabling bearer [ 432.857393][T17247] netlink: 428 bytes leftover after parsing attributes in process `syz.3.2937'. [ 432.867160][T17247] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2937'. [ 433.055347][T17259] bond0: Error: Cannot enslave bond to itself. [ 433.110514][T17261] netlink: 200 bytes leftover after parsing attributes in process `syz.2.2941'. [ 433.179291][T17270] netlink: 'syz.3.2940': attribute type 83 has an invalid length. [ 433.258570][T17274] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2942'. [ 433.691334][T17271] vxcan1 speed is unknown, defaulting to 1000 [ 434.322029][T17302] tipc: Invalid UDP bearer configuration [ 434.322089][T17302] tipc: Enabling of bearer rejected, failed to enable media [ 434.367001][ T30] audit: type=1804 audit(1760171266.746:11): pid=17298 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.2950" name="cgroup.controllers" dev="tmpfs" ino=48 res=1 errno=0 [ 434.422131][T17297] netlink: 'syz.4.2951': attribute type 4 has an invalid length. [ 434.435646][ T30] audit: type=1800 audit(1760171266.746:12): pid=17298 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2950" name="cgroup.controllers" dev="tmpfs" ino=48 res=0 errno=0 [ 434.467439][T17297] netlink: 'syz.4.2951': attribute type 2 has an invalid length. [ 434.549044][ T5830] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 434.559351][ T5830] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 434.568247][ T5830] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 434.576639][ T5830] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 434.584723][ T5830] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 434.738342][T17310] vxcan1 speed is unknown, defaulting to 1000 [ 435.030656][T17331] bond0: Error: Cannot enslave bond to itself. [ 435.099589][T17333] IPVS: length: 241 != 8 [ 435.186826][T17271] wg1 speed is unknown, defaulting to 1000 [ 435.319308][T17335] vxcan1 speed is unknown, defaulting to 1000 [ 435.481684][T17310] wg1 speed is unknown, defaulting to 1000 [ 435.737026][T17339] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 435.737042][T17344] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR [ 436.404134][T17335] wg1 speed is unknown, defaulting to 1000 [ 436.618615][ T5830] Bluetooth: hci1: command tx timeout [ 436.659617][T17310] chnl_net:caif_netlink_parms(): no params data found [ 437.064745][T17384] vxcan1 speed is unknown, defaulting to 1000 [ 437.337138][T17310] bridge0: port 1(bridge_slave_0) entered blocking state [ 437.375099][T17310] bridge0: port 1(bridge_slave_0) entered disabled state [ 437.382510][T17310] bridge_slave_0: entered allmulticast mode [ 437.402736][T17310] bridge_slave_0: entered promiscuous mode [ 437.413517][T17310] bridge0: port 2(bridge_slave_1) entered blocking state [ 437.421263][T17310] bridge0: port 2(bridge_slave_1) entered disabled state [ 437.428841][T17310] bridge_slave_1: entered allmulticast mode [ 437.450884][T17310] bridge_slave_1: entered promiscuous mode [ 437.569738][T17310] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 437.586112][T17310] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 437.626601][T17389] vxcan1 speed is unknown, defaulting to 1000 [ 437.629434][T17310] team0: Port device team_slave_0 added [ 437.642597][T17310] team0: Port device team_slave_1 added [ 437.736549][T17310] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 437.744515][T17310] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 437.794885][T17310] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 437.817666][T17310] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 437.824656][T17310] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 437.895123][T17310] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 437.999142][T17310] hsr_slave_0: entered promiscuous mode [ 438.006529][T17310] hsr_slave_1: entered promiscuous mode [ 438.013166][T17310] debugfs: 'hsr0' already exists in 'hsr' [ 438.018977][T17310] Cannot create hsr debugfs directory [ 438.024601][T17369] vxcan1 speed is unknown, defaulting to 1000 [ 438.391340][T17369] wg1 speed is unknown, defaulting to 1000 [ 438.607703][T17310] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 438.637441][T17310] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 438.660554][T17310] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 438.690354][T17310] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 438.697769][ T5830] Bluetooth: hci1: command tx timeout [ 438.860062][T17310] 8021q: adding VLAN 0 to HW filter on device bond0 [ 438.900546][T17310] 8021q: adding VLAN 0 to HW filter on device team0 [ 438.928407][ T8829] bridge0: port 1(bridge_slave_0) entered blocking state [ 438.935613][ T8829] bridge0: port 1(bridge_slave_0) entered forwarding state [ 438.967831][ T8829] bridge0: port 2(bridge_slave_1) entered blocking state [ 438.975050][ T8829] bridge0: port 2(bridge_slave_1) entered forwarding state [ 438.987752][T17384] wg1 speed is unknown, defaulting to 1000 [ 439.504603][T17310] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 439.594742][T17310] veth0_vlan: entered promiscuous mode [ 439.620376][T17310] veth1_vlan: entered promiscuous mode [ 439.670897][T17310] veth0_macvtap: entered promiscuous mode [ 439.686749][T17310] veth1_macvtap: entered promiscuous mode [ 439.713699][T17310] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 439.733458][T17310] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 439.769886][T10357] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 439.790865][T10357] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 439.801716][T10357] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 439.812814][T10357] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 439.918266][T17389] wg1 speed is unknown, defaulting to 1000 [ 440.101492][T17428] vxcan1 speed is unknown, defaulting to 1000 [ 440.368010][ T8829] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 440.385890][ T8829] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 440.461330][ T8829] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 440.486718][ T8829] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 440.734583][T17433] __nla_validate_parse: 1 callbacks suppressed [ 440.734602][T17433] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2976'. [ 440.776524][ T5830] Bluetooth: hci1: command tx timeout [ 441.124356][T17437] tipc: Resetting bearer [ 441.406739][T17428] wg1 speed is unknown, defaulting to 1000 [ 441.935341][T17456] syzkaller0: entered promiscuous mode [ 441.940853][T17456] syzkaller0: entered allmulticast mode [ 442.719626][T17484] macvlan2: entered promiscuous mode [ 442.741562][T17484] vlan0: entered promiscuous mode [ 442.803031][T17484] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2993'. [ 442.817337][T17486] netlink: 'syz.1.2994': attribute type 1 has an invalid length. [ 442.831286][T17486] netlink: 'syz.1.2994': attribute type 2 has an invalid length. [ 442.841730][T17484] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2993'. [ 442.861883][ T5830] Bluetooth: hci1: command tx timeout [ 442.875398][T17486] netlink: 'syz.1.2994': attribute type 1 has an invalid length. [ 442.884131][T17484] nbd: socks must be embedded in a SOCK_ITEM attr [ 442.902832][T17486] netlink: 27 bytes leftover after parsing attributes in process `syz.1.2994'. [ 443.224659][T17507] netlink: 'syz.2.2998': attribute type 13 has an invalid length. [ 443.235599][T17507] netlink: 'syz.2.2998': attribute type 17 has an invalid length. [ 443.451004][T17517] netlink: 'syz.1.3000': attribute type 1 has an invalid length. [ 443.491118][T17507] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 443.526998][T17517] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3000'. [ 443.570453][T17517] macvtap0: entered promiscuous mode [ 443.588583][T17517] macvtap0: entered allmulticast mode [ 443.614744][T17517] veth0_macvtap: entered allmulticast mode [ 443.863924][T17521] sch_tbf: burst 0 is lower than device veth0_to_team mtu (1514) ! [ 443.907239][T17526] siw: device registration error -23 [ 443.967574][T17526] vxcan1 speed is unknown, defaulting to 1000 [ 444.063468][T17528] netlink: 'syz.1.3004': attribute type 13 has an invalid length. [ 444.619752][T17544] atomic_op ffff888023890998 conn xmit_atomic 0000000000000000 [ 444.738364][T17548] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3011'. [ 444.789506][T17548] netlink: 'syz.2.3011': attribute type 5 has an invalid length. [ 444.835825][T17548] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3011'. [ 444.878185][T17554] vxcan1 speed is unknown, defaulting to 1000 [ 444.978228][T17548] geneve2: entered promiscuous mode [ 444.983478][T17548] geneve2: entered allmulticast mode [ 445.117905][ T3033] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 445.157807][ T3033] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 445.188613][ T3033] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 445.236962][ T3033] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 445.421702][ T5839] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 445.438749][ T5839] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 445.460893][ T5839] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 445.471824][ T5839] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 445.473873][T17563] "syz.3.3013" (17563) uses obsolete ecb(arc4) skcipher [ 445.489090][ T5839] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 445.662769][T17576] netlink: 3 bytes leftover after parsing attributes in process `syz.2.3015'. [ 445.777213][T17565] vxcan1 speed is unknown, defaulting to 1000 [ 445.784795][T17579] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3015'. [ 445.806296][T17579] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3015'. [ 445.818159][T17576] batadv1: entered promiscuous mode [ 445.823407][T17576] batadv1: entered allmulticast mode [ 445.889911][T17554] wg1 speed is unknown, defaulting to 1000 [ 446.381735][T17598] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3022'. [ 446.397681][T17598] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3022'. [ 446.407610][T17598] netlink: 'syz.2.3022': attribute type 5 has an invalid length. [ 446.412638][T17600] vxcan1 speed is unknown, defaulting to 1000 [ 446.418357][T17598] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3022'. [ 446.431393][ T5931] IPVS: starting estimator thread 0... [ 446.525075][T17602] IPVS: using max 30 ests per chain, 72000 per kthread [ 446.604033][T17606] Cannot find map_set index 8 as target [ 446.684225][T17606] Bluetooth: MGMT ver 1.23 [ 446.782082][T17565] wg1 speed is unknown, defaulting to 1000 [ 447.263039][T17618] netlink: 'syz.3.3028': attribute type 83 has an invalid length. [ 447.350042][T17624] tipc: Enabled bearer , priority 0 [ 447.381100][T17626] syzkaller0: entered promiscuous mode [ 447.405758][T17626] syzkaller0: entered allmulticast mode [ 447.517499][T17621] tipc: Resetting bearer [ 447.575096][ T5839] Bluetooth: hci4: command tx timeout [ 447.589798][T17620] tipc: Resetting bearer [ 447.628374][T17620] tipc: Disabling bearer [ 447.723642][T17632] vxcan1 speed is unknown, defaulting to 1000 [ 447.769601][T17600] wg1 speed is unknown, defaulting to 1000 [ 448.002798][T17565] chnl_net:caif_netlink_parms(): no params data found [ 448.359427][T17565] bridge0: port 1(bridge_slave_0) entered blocking state [ 448.367342][T17565] bridge0: port 1(bridge_slave_0) entered disabled state [ 448.374648][T17565] bridge_slave_0: entered allmulticast mode [ 448.397400][T17565] bridge_slave_0: entered promiscuous mode [ 448.407452][T17565] bridge0: port 2(bridge_slave_1) entered blocking state [ 448.414730][T17565] bridge0: port 2(bridge_slave_1) entered disabled state [ 448.422619][T17565] bridge_slave_1: entered allmulticast mode [ 448.447786][T17565] bridge_slave_1: entered promiscuous mode [ 448.613111][T17565] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 448.727975][T17565] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 448.860503][T17663] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3036'. [ 448.929385][T17632] wg1 speed is unknown, defaulting to 1000 [ 448.938999][T17565] team0: Port device team_slave_0 added [ 448.991228][T17565] team0: Port device team_slave_1 added [ 449.075383][T17667] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3038'. [ 449.091469][T17565] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 449.104889][T17565] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 449.155353][T17565] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 449.168457][T17565] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 449.179896][T17565] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 449.238236][T17565] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 449.422919][T17565] hsr_slave_0: entered promiscuous mode [ 449.470257][T17565] hsr_slave_1: entered promiscuous mode [ 449.477533][T17565] debugfs: 'hsr0' already exists in 'hsr' [ 449.483502][T17565] Cannot create hsr debugfs directory [ 449.655082][ T5839] Bluetooth: hci4: command tx timeout [ 449.677049][T17680] netlink: 'syz.0.3042': attribute type 12 has an invalid length. [ 449.708451][T17680] netlink: 9472 bytes leftover after parsing attributes in process `syz.0.3042'. [ 449.822918][T17679] netlink: 220 bytes leftover after parsing attributes in process `syz.0.3042'. [ 450.961957][T17565] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 451.001516][T17565] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 451.105068][T17695] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3045'. [ 451.151903][T17697] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3045'. [ 451.370884][T17565] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 451.382679][T17565] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 451.425529][T17702] ip6tnl0: Caught tx_queue_len zero misconfig [ 451.536320][T17565] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 451.549377][T17565] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 451.652206][T17565] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 451.663216][T17565] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 451.737420][ T5839] Bluetooth: hci4: command tx timeout [ 451.744479][T17716] bond0: Error: Cannot enslave bond to itself. [ 451.760719][T17728] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3052'. [ 451.778495][T17728] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3052'. [ 451.788144][T17728] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3052'. [ 452.068105][T17565] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 452.111734][T17565] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 452.343992][T17565] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 452.378812][T17565] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 452.710086][T17747] vxcan1 speed is unknown, defaulting to 1000 [ 452.748822][T17745] bond7: Unable to set up delay as MII monitoring is disabled [ 453.058816][T17745] bond7 (unregistering): Released all slaves [ 453.275391][T17565] 8021q: adding VLAN 0 to HW filter on device bond0 [ 453.302234][T17746] vxcan1 speed is unknown, defaulting to 1000 [ 453.350005][T17565] 8021q: adding VLAN 0 to HW filter on device team0 [ 453.366921][T17762] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3060'. [ 453.389868][ T8829] bridge0: port 1(bridge_slave_0) entered blocking state [ 453.397166][ T8829] bridge0: port 1(bridge_slave_0) entered forwarding state [ 453.412603][ T3033] bridge0: port 2(bridge_slave_1) entered blocking state [ 453.419842][ T3033] bridge0: port 2(bridge_slave_1) entered forwarding state [ 453.467750][T17766] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 453.533777][T17766] netlink: 88 bytes leftover after parsing attributes in process `syz.0.3061'. [ 453.816715][ T5839] Bluetooth: hci4: command tx timeout [ 454.040004][T17565] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 454.380099][T17747] wg1 speed is unknown, defaulting to 1000 [ 454.450425][T17792] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3067'. [ 454.743218][T17802] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3068'. [ 454.753650][T17802] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3068'. [ 454.943997][T17565] veth0_vlan: entered promiscuous mode [ 454.983657][T17565] veth1_vlan: entered promiscuous mode [ 455.067296][T17565] veth0_macvtap: entered promiscuous mode [ 455.091437][T17565] veth1_macvtap: entered promiscuous mode [ 455.155424][T17565] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 455.181313][T17565] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 455.273427][T10357] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 455.283787][T10357] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 455.382337][T10357] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 455.395163][T10357] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 455.673104][ T8829] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 455.686729][T17817] vxcan1 speed is unknown, defaulting to 1000 [ 455.692533][ T3033] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 455.696414][ T8829] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 455.700908][ T3033] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 455.874560][T17746] wg1 speed is unknown, defaulting to 1000 [ 456.060047][T17824] netlink: 'syz.4.3008': attribute type 10 has an invalid length. [ 456.276771][T17824] veth0_vlan: entered allmulticast mode [ 456.297308][T17824] veth0_vlan: left promiscuous mode [ 456.304663][T17824] veth0_vlan: entered promiscuous mode [ 456.316362][T17824] team0: Device veth0_vlan failed to register rx_handler [ 456.666730][T17828] bond1: option arp_validate: invalid value (18446744073491447809) [ 456.756920][T17828] bond1 (unregistering): Released all slaves [ 456.801027][ T5830] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 456.812232][ T5830] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 456.821534][ T5830] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 456.831493][ T5830] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 456.846321][ T5830] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 457.020437][ T5834] bond0: (slave syz_tun): Releasing backup interface [ 457.073975][ T5834] syz_tun (unregistering): left allmulticast mode [ 457.245501][T17817] wg1 speed is unknown, defaulting to 1000 [ 457.579915][ T60] smc: removing ib device syz1 [ 457.597343][T17832] vxcan1 speed is unknown, defaulting to 1000 [ 458.043673][T17836] __nla_validate_parse: 4 callbacks suppressed [ 458.043693][T17836] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3076'. [ 458.945141][ T5839] Bluetooth: hci5: command tx timeout [ 458.967221][T17832] wg1 speed is unknown, defaulting to 1000 [ 459.197653][T17744] Set syz1 is full, maxelem 65536 reached [ 459.453968][T17860] bridge0: entered promiscuous mode [ 459.463978][T17859] bridge0: left promiscuous mode [ 460.049415][T17878] netlink: 'syz.0.3085': attribute type 13 has an invalid length. [ 460.063039][T17878] netlink: 'syz.0.3085': attribute type 17 has an invalid length. [ 460.104496][T17878] netlink: 'syz.0.3085': attribute type 27 has an invalid length. [ 460.468776][T17878] vxcan1 speed is unknown, defaulting to 1000 [ 460.745851][T17902] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3094'. [ 460.961732][T17905] netlink: 'syz.4.3094': attribute type 14 has an invalid length. [ 461.016907][ T5839] Bluetooth: hci5: command tx timeout [ 461.297624][T17920] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3099'. [ 461.309124][T17920] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3099'. [ 461.337108][T17920] netlink: 'syz.2.3099': attribute type 3 has an invalid length. [ 461.528944][T17926] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3100'. [ 461.577606][ T1152] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 461.611501][ T5889] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 461.619769][ T1152] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 461.640371][T17832] chnl_net:caif_netlink_parms(): no params data found [ 461.696274][T17878] wg1 speed is unknown, defaulting to 1000 [ 461.907846][T17936] netlink: 'syz.4.3103': attribute type 12 has an invalid length. [ 462.011976][T17832] bridge0: port 1(bridge_slave_0) entered blocking state [ 462.019891][T17832] bridge0: port 1(bridge_slave_0) entered disabled state [ 462.028477][T17832] bridge_slave_0: entered allmulticast mode [ 462.037913][T17832] bridge_slave_0: entered promiscuous mode [ 462.047426][T17832] bridge0: port 2(bridge_slave_1) entered blocking state [ 462.054664][T17832] bridge0: port 2(bridge_slave_1) entered disabled state [ 462.063869][T17832] bridge_slave_1: entered allmulticast mode [ 462.072527][T17832] bridge_slave_1: entered promiscuous mode [ 462.124362][T17832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 462.142396][T17832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 462.153259][T17932] vxcan1 speed is unknown, defaulting to 1000 [ 462.159914][ T5946] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 462.475411][ T5946] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 462.773363][T17832] team0: Port device team_slave_0 added [ 462.844287][T17832] team0: Port device team_slave_1 added [ 462.958492][T17832] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 462.968579][T17832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 462.978984][T17953] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3106'. [ 462.995549][T17832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 463.004753][T17953] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3106'. [ 463.032855][T17932] wg1 speed is unknown, defaulting to 1000 [ 463.038949][T17953] netlink: 'syz.4.3106': attribute type 1 has an invalid length. [ 463.040327][T17832] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 463.047341][T17953] netlink: 10 bytes leftover after parsing attributes in process `syz.4.3106'. [ 463.057645][T17832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 463.089661][T17832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 463.100729][ T5839] Bluetooth: hci5: command tx timeout [ 463.225967][T17832] hsr_slave_0: entered promiscuous mode [ 463.234702][T17832] hsr_slave_1: entered promiscuous mode [ 463.243418][T17832] debugfs: 'hsr0' already exists in 'hsr' [ 463.251218][T17832] Cannot create hsr debugfs directory [ 463.287058][T17955] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3107'. [ 463.340118][T17955] syzkaller0: entered promiscuous mode [ 463.348844][T17955] syzkaller0: entered allmulticast mode [ 463.362275][T17957] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3108'. [ 463.404584][T17957] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3108'. [ 463.531090][T17961] x_tables: ip_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 463.766960][T17970] netlink: 'syz.1.3111': attribute type 13 has an invalid length. [ 463.775182][T17970] netlink: 14589 bytes leftover after parsing attributes in process `syz.1.3111'. [ 464.037187][T17975] vxlan0: entered promiscuous mode [ 464.052695][T17975] vxlan0: entered allmulticast mode [ 464.130822][ T12] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 464.148003][ T12] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 464.236815][ T12] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 464.256299][ T12] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 464.319574][T17832] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 464.332966][T17984] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3116'. [ 464.487320][T17832] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 464.613214][T17832] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 464.722819][T17832] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 464.755505][T18003] vxcan1 speed is unknown, defaulting to 1000 [ 465.089201][T17832] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 465.121914][T17832] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 465.147539][T17832] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 465.177739][ T5839] Bluetooth: hci5: command tx timeout [ 465.197905][T17832] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 465.254459][T18031] syzkaller0: entered promiscuous mode [ 465.261979][T18031] syzkaller0: entered allmulticast mode [ 465.300972][T18003] wg1 speed is unknown, defaulting to 1000 [ 465.317303][T18034] FAULT_INJECTION: forcing a failure. [ 465.317303][T18034] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 465.334187][T18034] CPU: 1 UID: 0 PID: 18034 Comm: syz.1.3129 Not tainted syzkaller #0 PREEMPT(full) [ 465.334217][T18034] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 465.334237][T18034] Call Trace: [ 465.334243][T18034] [ 465.334253][T18034] dump_stack_lvl+0x189/0x250 [ 465.334280][T18034] ? __pfx____ratelimit+0x10/0x10 [ 465.334304][T18034] ? __pfx_dump_stack_lvl+0x10/0x10 [ 465.334324][T18034] ? __pfx__printk+0x10/0x10 [ 465.334345][T18034] ? __might_fault+0xb0/0x130 [ 465.334383][T18034] should_fail_ex+0x414/0x560 [ 465.334413][T18034] _copy_from_user+0x2d/0xb0 [ 465.334433][T18034] ___sys_sendmsg+0x158/0x2a0 [ 465.334460][T18034] ? __pfx____sys_sendmsg+0x10/0x10 [ 465.334520][T18034] ? __fget_files+0x2a/0x420 [ 465.334537][T18034] ? __fget_files+0x3a0/0x420 [ 465.334565][T18034] __x64_sys_sendmsg+0x19b/0x260 [ 465.334590][T18034] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 465.334624][T18034] ? __pfx_ksys_write+0x10/0x10 [ 465.334655][T18034] ? do_syscall_64+0xbe/0xfa0 [ 465.334682][T18034] do_syscall_64+0xfa/0xfa0 [ 465.334702][T18034] ? lockdep_hardirqs_on+0x9c/0x150 [ 465.334723][T18034] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 465.334742][T18034] ? clear_bhb_loop+0x60/0xb0 [ 465.334766][T18034] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 465.334788][T18034] RIP: 0033:0x7ff8ffb8eec9 [ 465.334809][T18034] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 465.334823][T18034] RSP: 002b:00007ff900a28038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 465.334842][T18034] RAX: ffffffffffffffda RBX: 00007ff8ffde5fa0 RCX: 00007ff8ffb8eec9 [ 465.334855][T18034] RDX: 0000000000000000 RSI: 0000200000000680 RDI: 0000000000000003 [ 465.334865][T18034] RBP: 00007ff900a28090 R08: 0000000000000000 R09: 0000000000000000 [ 465.334875][T18034] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 465.334885][T18034] R13: 00007ff8ffde6038 R14: 00007ff8ffde5fa0 R15: 00007ffe6b9ec8c8 [ 465.334916][T18034] [ 465.389522][T17832] 8021q: adding VLAN 0 to HW filter on device bond0 [ 465.502537][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 465.575398][T17832] 8021q: adding VLAN 0 to HW filter on device team0 [ 465.599017][ T1152] bridge0: port 1(bridge_slave_0) entered blocking state [ 465.606239][ T1152] bridge0: port 1(bridge_slave_0) entered forwarding state [ 465.631357][ T3033] bridge0: port 2(bridge_slave_1) entered blocking state [ 465.638620][ T3033] bridge0: port 2(bridge_slave_1) entered forwarding state [ 465.709564][T18039] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 465.810124][T18043] bridge_slave_1: left allmulticast mode [ 465.818282][T18043] bridge_slave_1: left promiscuous mode [ 465.824308][T18043] bridge0: port 2(bridge_slave_1) entered disabled state [ 465.844565][T18043] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 466.300107][ T8829] bond7 (unregistering): (slave gretap1): Releasing active interface [ 466.324185][ T8829] bond8 (unregistering): (slave gretap2): Releasing active interface [ 466.658887][ T8829] bond0 (unregistering): Released all slaves [ 466.774437][ T8829] bond1 (unregistering): Released all slaves [ 466.790468][ T8829] bond2 (unregistering): Released all slaves [ 466.898658][ T8829] bond3 (unregistering): Released all slaves [ 467.007785][ T8829] bond4 (unregistering): Released all slaves [ 467.134499][ T8829] bond5 (unregistering): Released all slaves [ 467.247558][ T8829] bond6 (unregistering): Released all slaves [ 467.261668][ T8829] bond7 (unregistering): Released all slaves [ 467.275586][ T8829] bond8 (unregistering): Released all slaves [ 467.289095][ T8829] bond9 (unregistering): Released all slaves [ 467.304166][ T8829] bond10 (unregistering): Released all slaves [ 467.341235][T18045] netlink: 'syz.2.3133': attribute type 1 has an invalid length. [ 467.538111][ T8829] tipc: Left network mode [ 467.628562][T18053] vxcan1 speed is unknown, defaulting to 1000 [ 467.889162][T18070] netlink: 'syz.0.3139': attribute type 4 has an invalid length. [ 467.955119][T18074] netlink: 'syz.1.3140': attribute type 16 has an invalid length. [ 467.989728][T18074] netlink: 'syz.1.3140': attribute type 17 has an invalid length. [ 468.117473][T18083] IPv6: NLM_F_REPLACE set, but no existing node found! [ 468.189904][T18074] bridge0: port 1(bridge_slave_0) entered disabled state [ 468.289943][T18074] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 468.303147][T18074] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 468.367781][T18074] veth0_macvtap: left allmulticast mode [ 468.411422][T18080] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3140'. [ 468.421146][T18080] lo: Caught tx_queue_len zero misconfig [ 468.436417][T18081] macsec1: entered promiscuous mode [ 468.441919][T18081] macvlan0: entered promiscuous mode [ 468.497472][T18053] wg1 speed is unknown, defaulting to 1000 [ 468.499840][ T60] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 468.526777][ T60] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 468.567422][T18091] netlink: 'syz.4.3144': attribute type 10 has an invalid length. [ 468.588124][ T60] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 468.604574][T18089] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3143'. [ 468.605630][ T60] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 468.668095][T18091] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 468.697002][ T60] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 468.719844][ T60] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 468.786101][ T60] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 468.809202][ T60] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 468.822796][T18100] netlink: 'syz.1.3146': attribute type 13 has an invalid length. [ 468.840720][T18100] netlink: 'syz.1.3146': attribute type 17 has an invalid length. [ 469.002021][T18100] 8021q: adding VLAN 0 to HW filter on device bond0 [ 469.011838][T18100] 8021q: adding VLAN 0 to HW filter on device team0 [ 469.031832][T18100] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 469.054744][T17832] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 469.141326][T18103] bond7: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 469.157273][T18103] bond7 (unregistering): Released all slaves [ 469.193497][T18108] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 469.208298][T18108] batman_adv: batadv0: Adding interface: gretap1 [ 469.215462][T18108] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 469.242396][T18108] batman_adv: batadv0: Interface activated: gretap1 [ 469.337579][T18096] vxcan1 speed is unknown, defaulting to 1000 [ 469.601453][T17832] veth0_vlan: entered promiscuous mode [ 469.614712][T17832] veth1_vlan: entered promiscuous mode [ 469.662100][T17832] veth0_macvtap: entered promiscuous mode [ 469.674617][T17832] veth1_macvtap: entered promiscuous mode [ 469.696339][T18114] vxcan1 speed is unknown, defaulting to 1000 [ 469.699939][T17832] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 469.717207][T17832] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 469.743535][ T60] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 469.759295][ T60] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 469.786252][ T60] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 469.796415][ T60] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 469.883052][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 469.892385][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 469.937930][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 469.947240][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 469.965282][T18120] vxcan1 speed is unknown, defaulting to 1000 [ 472.244361][T18120] wg1 speed is unknown, defaulting to 1000 [ 473.498874][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 475.051665][T18114] wg1 speed is unknown, defaulting to 1000 [ 475.064658][T18129] vxcan1 speed is unknown, defaulting to 1000 [ 475.883253][T18096] wg1 speed is unknown, defaulting to 1000 [ 489.500540][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 509.874735][T18119] vxcan1 speed is unknown, defaulting to 1000 [ 510.551809][ T5830] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 510.884274][ T5830] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 511.163401][ T5830] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 511.783236][ T5830] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 512.291163][ T5830] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 515.263696][ T5842] Bluetooth: hci2: command tx timeout [ 515.374224][ T5842] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 515.404257][ T5842] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 515.582252][T18144] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 515.683623][T18144] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 515.702270][T18143] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 516.063037][T18143] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 516.093427][T18143] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 516.623339][T18143] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 516.912440][T18143] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 517.251938][T18143] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 517.341616][T18143] Bluetooth: hci2: command tx timeout [ 519.434114][T18144] Bluetooth: hci2: command tx timeout [ 519.780026][ T5830] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 519.882332][ T5830] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 520.003227][ T5830] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 520.222197][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 520.594382][ T5830] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 520.822589][ T5830] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 521.122969][T18144] Bluetooth: hci6: command tx timeout [ 521.203315][T18144] Bluetooth: hci7: command tx timeout [ 521.514694][T18144] Bluetooth: hci2: command tx timeout [ 522.954244][T18144] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 523.194694][T18144] Bluetooth: hci6: command tx timeout [ 523.222301][ T5830] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 523.264343][T18144] Bluetooth: hci7: command tx timeout [ 523.403827][ T5830] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 523.583091][ T5830] Bluetooth: hci8: command tx timeout [ 524.084514][ T5830] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 524.472354][ T5830] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 525.262326][ T5830] Bluetooth: hci6: command tx timeout [ 525.344738][ T5830] Bluetooth: hci7: command tx timeout [ 525.662857][ T5830] Bluetooth: hci8: command tx timeout [ 527.361125][ T5830] Bluetooth: hci6: command tx timeout [ 527.431471][ T5830] Bluetooth: hci7: command tx timeout [ 527.673564][ T5830] Bluetooth: hci9: command tx timeout [ 527.752961][ T5830] Bluetooth: hci8: command tx timeout [ 529.743469][ T5830] Bluetooth: hci9: command tx timeout [ 529.822358][ T5830] Bluetooth: hci8: command tx timeout [ 531.832494][ T5830] Bluetooth: hci9: command tx timeout [ 533.902717][ T5830] Bluetooth: hci9: command tx timeout [ 560.102846][T18143] Bluetooth: hci1: command 0x0406 tx timeout [ 560.123986][T18144] Bluetooth: hci3: command 0x0406 tx timeout [ 561.133343][ T8829] vlan0: left promiscuous mode [ 562.992217][ T8829] veth1_macvtap: left promiscuous mode [ 563.241307][ T8829] veth0_macvtap: left promiscuous mode [ 563.391598][ T8829] veth1_vlan: left promiscuous mode [ 563.512924][ T8829] veth0_vlan: left promiscuous mode [ 569.584545][T18143] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 569.783821][T18143] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 569.914454][T18143] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 570.302228][T18143] Bluetooth: hci4: command 0x0406 tx timeout [ 570.444279][T18143] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 570.483361][T18143] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 570.644180][T18143] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 570.692769][T18143] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 571.013617][T18158] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 571.314358][ T5830] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 571.582628][ T5839] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 573.902460][ T5839] Bluetooth: hci10: command tx timeout [ 574.312565][T18144] Bluetooth: hci11: command tx timeout [ 574.703667][T18144] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 574.834207][T18144] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 574.994339][T18144] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 575.492474][T18144] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 575.740832][T18144] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 575.992146][ T5839] Bluetooth: hci10: command tx timeout [ 576.408403][T18144] Bluetooth: hci11: command tx timeout [ 576.763894][ T5839] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 576.953577][ T5839] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 577.104367][ T5839] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 577.682588][ T5839] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 577.852846][ T5839] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 578.074276][T18158] Bluetooth: hci10: command tx timeout [ 578.142904][T18158] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 578.242019][T18158] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 578.302790][T18158] Bluetooth: hci12: command tx timeout [ 578.482715][T18158] Bluetooth: hci11: command tx timeout [ 578.673115][ T5842] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 579.212953][ T5842] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 579.432997][ T5842] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 580.174459][ T5842] Bluetooth: hci10: command tx timeout [ 580.391221][ T5842] Bluetooth: hci12: command tx timeout [ 580.542905][ T5842] Bluetooth: hci11: command tx timeout [ 580.562347][ T5842] Bluetooth: hci5: command 0x0406 tx timeout [ 581.431882][ T5839] Bluetooth: hci13: command tx timeout [ 582.142414][ T5839] Bluetooth: hci14: command tx timeout [ 582.483816][ T5839] Bluetooth: hci12: command tx timeout [ 583.514106][ T5839] Bluetooth: hci13: command tx timeout [ 583.581772][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 584.232538][ T5839] Bluetooth: hci14: command tx timeout [ 584.572368][ T5839] Bluetooth: hci12: command tx timeout [ 585.582368][ T5839] Bluetooth: hci13: command tx timeout [ 586.314271][ T5839] Bluetooth: hci14: command tx timeout [ 587.661919][ T5839] Bluetooth: hci13: command tx timeout [ 588.394221][ T5839] Bluetooth: hci14: command tx timeout [ 626.633947][ T5830] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 626.752673][ T5830] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 626.843535][ T5830] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 627.441506][ T5842] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 628.084235][ T5842] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 630.952013][ T5842] Bluetooth: hci15: command tx timeout [ 632.212660][ T5839] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 632.412028][ T5839] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 632.483940][ T5839] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 633.023183][ T5839] Bluetooth: hci15: command tx timeout [ 633.052205][ T5839] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 633.273829][ T5839] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 634.374352][ T5842] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 634.474546][ T5842] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 634.772604][ T5842] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 635.102499][ T5842] Bluetooth: hci15: command tx timeout [ 635.389146][ T5842] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 635.934218][T18144] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 636.072571][T18144] Bluetooth: hci16: command tx timeout [ 636.703726][T18144] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1 [ 636.832071][T18144] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9 [ 636.861616][T18144] Bluetooth: hci2: command 0x0406 tx timeout [ 637.013608][T18144] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9 [ 637.193185][ T5839] Bluetooth: hci15: command tx timeout [ 637.262361][ T5839] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4 [ 637.392704][ T5839] Bluetooth: hci19: unexpected cc 0x0c03 length: 249 > 1 [ 637.622956][ T5839] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2 [ 637.861745][T18158] Bluetooth: hci19: unexpected cc 0x1003 length: 249 > 9 [ 638.182226][T18158] Bluetooth: hci16: command tx timeout [ 638.203923][ T5842] Bluetooth: hci19: unexpected cc 0x1001 length: 249 > 9 [ 638.604536][ T5842] Bluetooth: hci19: unexpected cc 0x0c23 length: 249 > 4 [ 638.622149][ T5842] Bluetooth: hci17: command tx timeout [ 638.773181][ T5842] Bluetooth: hci19: unexpected cc 0x0c38 length: 249 > 2 [ 640.302827][ T5830] Bluetooth: hci16: command tx timeout [ 640.322079][T18158] Bluetooth: hci18: command tx timeout [ 640.701862][T18158] Bluetooth: hci17: command tx timeout [ 641.453309][T18158] Bluetooth: hci19: command tx timeout [ 642.003432][T18158] Bluetooth: hci6: command 0x0406 tx timeout [ 642.014173][ T5830] Bluetooth: hci7: command 0x0406 tx timeout [ 642.391955][ T5830] Bluetooth: hci18: command tx timeout [ 642.392810][T18158] Bluetooth: hci16: command tx timeout [ 642.789459][ T5842] Bluetooth: hci17: command tx timeout [ 643.503832][T18144] Bluetooth: hci19: command tx timeout [ 644.472513][T18144] Bluetooth: hci18: command tx timeout [ 644.868848][T18144] Bluetooth: hci17: command tx timeout [ 645.583207][ T5842] Bluetooth: hci19: command tx timeout [ 646.552910][ T5842] Bluetooth: hci18: command tx timeout [ 647.102914][ T5842] Bluetooth: hci8: command 0x0406 tx timeout [ 647.662708][ T5842] Bluetooth: hci19: command tx timeout [ 652.234275][ T5842] Bluetooth: hci9: command 0x0406 tx timeout [ 657.583456][ T8829] tuvҫ# (unregistering): left allmulticast mode [ 658.594691][T18137] vxcan1 speed is unknown, defaulting to 1000 [ 658.742802][T18129] wg1 speed is unknown, defaulting to 1000 [ 687.633146][T18145] vxcan1 speed is unknown, defaulting to 1000 [ 689.233040][ T31] INFO: task syz.0.3152:18120 blocked for more than 143 seconds. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 689.442606][ T31] Not tainted syzkaller #0 [ 689.703209][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 690.013898][ T31] task:syz.0.3152 state:D stack:24448 pid:18120 tgid:18118 ppid:5827 task_flags:0x400140 flags:0x00080003 [ 690.352849][ T31] Call Trace: [ 690.543399][ T31] [ 690.611976][ T31] __schedule+0x1798/0x4cc0 [ 690.744078][ T31] ? __lock_acquire+0xab9/0xd20 [ 691.212883][ T31] ? __lock_acquire+0xab9/0xd20 [ 691.381544][ T31] ? __pfx___schedule+0x10/0x10 [ 691.552363][ T31] ? schedule+0x91/0x360 [ 691.782136][ T31] schedule+0x165/0x360 [ 691.953109][ T31] schedule_preempt_disabled+0x13/0x30 [ 692.074208][ T31] rwsem_down_write_slowpath+0x872/0xfe0 [ 692.512689][ T31] ? rwsem_down_write_slowpath+0x472/0xfe0 [ 692.662426][ T31] ? __pfx_rwsem_down_write_slowpath+0x10/0x10 [ 692.863837][ T31] ? __lock_acquire+0xab9/0xd20 [ 693.001135][ T31] ? rdma_dev_exit_net+0x8c/0x340 [ 693.181244][ T31] down_write+0x1ab/0x1f0 [ 693.392890][ T31] ? __pfx_down_write+0x10/0x10 [ 693.520881][ T31] ? rdma_net_to_dev_net+0x23/0x240 [ 693.761868][ T31] ? rdma_net_to_dev_net+0x23/0x240 [ 693.992266][ T31] ? rdma_net_to_dev_net+0x1ed/0x240 [ 694.232761][ T31] rdma_dev_exit_net+0x8c/0x340 [ 694.364626][ T31] ? __pfx___might_resched+0x10/0x10 [ 694.572687][ T31] ? __pfx_rdma_dev_exit_net+0x10/0x10 [ 694.751763][ T31] ? net_generic+0x1e/0x240 [ 694.892161][ T31] ? mutex_is_locked+0x17/0x50 [ 695.032730][ T31] ? rtnl_is_locked+0x15/0x20 [ 695.141949][ T31] ops_undo_list+0x49a/0x990 [ 695.353446][ T31] ? __pfx_ops_undo_list+0x10/0x10 [ 695.471855][ T31] ? ops_init+0x469/0x5c0 [ 695.691893][ T31] setup_net+0x2d6/0x320 [ 695.862635][ T31] ? __pfx_setup_net+0x10/0x10 [ 696.033611][ T31] ? copy_net_ns+0x337/0x4e0 [ 696.243351][ T31] ? down_read_killable+0x1d1/0x350 [ 696.374471][ T31] ? preinit_net+0x47d/0x740 [ 696.522675][ T31] copy_net_ns+0x34e/0x4e0 [ 696.753123][ T31] create_new_namespaces+0x3f3/0x720 [ 696.891169][ T31] ? security_capable+0x7e/0x2e0 [ 697.042745][ T31] unshare_nsproxy_namespaces+0x11c/0x170 [ 697.252151][ T31] ksys_unshare+0x4c8/0x8c0 [ 697.424311][ T31] ? __pfx_ksys_unshare+0x10/0x10 [ 697.653302][ T31] __x64_sys_unshare+0x38/0x50 [ 697.823153][ T31] do_syscall_64+0xfa/0xfa0 [ 697.974166][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 698.134356][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 698.332331][ T31] ? clear_bhb_loop+0x60/0xb0 [ 698.514460][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 698.763845][ T31] RIP: 0033:0x7f4e0b78eec9 [ 698.992666][ T31] RSP: 002b:00007f4e0c55f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110