last executing test programs: 4.545110008s ago: executing program 2 (id=3992): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_GET_BYNAME(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x34, 0xe, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040000}, 0x4000001) r1 = socket$l2tp(0x2, 0x2, 0x73) connect$inet(r1, &(0x7f0000000200)={0x2, 0xce20, @remote}, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newlink={0x3c, 0x10, 0x3, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x0, 0xa1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6, 0x5, 0x4e21}]}}}]}, 0x3c}, 0x1, 0x2}, 0x0) 4.480175313s ago: executing program 1 (id=3993): r0 = socket$tipc(0x1e, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x0, 0x21, 0xffffffff, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1}, 0x48) getsockopt$TIPC_CONN_TIMEOUT(r0, 0x10f, 0x82, &(0x7f00000001c0), &(0x7f0000002640)=0x4) r1 = socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg$inet_sctp(r1, &(0x7f0000003f40)=[{&(0x7f0000000080)=@in={0x2, 0x4e1f, @remote}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000040)="1c", 0x1}], 0x1, &(0x7f0000000000)=ANY=[@ANYRESHEX=r1], 0x18, 0x48060}], 0x1, 0x240000d0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_netrom_SIOCADDRT(r4, 0x890b, &(0x7f0000000280)={0x0, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bpq0, 0xfffd, 'syz0\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0xfffffdb8, 0x2, [@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @bcast, @default, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) ioctl$sock_netrom_SIOCADDRT(r4, 0x890b, &(0x7f00000001c0)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x2, 'syz1\x00', @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x5, 0x1, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@assoc={0x18, 0x117, 0x4, 0x30}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) pselect6(0x40, &(0x7f0000000540)={0x9, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0xfffffffffffffffd, 0x0, 0x2}, 0x0, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r1, 0x84, 0x74, 0x0, 0x0) 4.453116786s ago: executing program 2 (id=3995): r0 = socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) (async) r1 = socket(0x10, 0x3, 0x0) (async) r2 = socket$packet(0x11, 0x3, 0x300) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd29, 0x25dfdafd, {0x0, 0x0, 0x0, r6, {0xc, 0xc}, {0x1, 0xfff1}, {0x0, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x4801}, 0x4041080) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) (async, rerun: 32) bind$inet(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 32) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) (rerun: 32) bind$netlink(r8, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r9 = socket$inet6(0xa, 0x80003, 0x6) (async) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r12 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r12, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(r10, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x50, r11, 0x1, 0x20000006, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r13}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @key_params=[@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}], @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @key_params=[@NL80211_ATTR_KEY={0xc, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x5}]}]]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x84) (async) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_MPATH(r4, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000440)={&(0x7f0000000280)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="04002abd7000ffdbdf251600000008000300", @ANYRES32=r14, @ANYBLOB="0c00991581000000450000000a001a000830110000010000"], 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x20000001) (async) connect$inet6(r9, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r9, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x3e, 0x0, 0x4}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@private, 0x0, 0x33}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x3, 0x1, 0x5}}, 0xe8) (async) sendmmsg(r9, &(0x7f0000000480), 0x2e9, 0x0) (async) r15 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r15, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000540)=ANY=[@ANYBLOB="020602000200000002000000"], 0x10}}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000d40)=@newqdisc={0x3a8, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x378, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x0, 0x0, 0x0, 0x2}}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x64, 0x2, 0x4000003, 0x17, 0xd, 0x8, 0x1}}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0x2}, @TCA_CHOKE_PARMS={0x14}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x1f}}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}]}}]}, 0x3a8}}, 0x0) (async, rerun: 32) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newtaction={0x98, 0x30, 0x100, 0x70bd29, 0x0, {}, [{0x34, 0x1, [@m_ctinfo={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4, 0x2, 0x0, 0x0}, {0x2}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) (rerun: 32) 3.970789226s ago: executing program 2 (id=4002): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0xffffff}, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001bc0)=ANY=[], 0x11a0}, 0x1, 0x0, 0x0, 0x8040}, 0x8080) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r2) write(r0, &(0x7f0000000000)="240000001a00590214f9f407000904101f00000000000100000200000800040001000000", 0x24) 3.720118668s ago: executing program 2 (id=4004): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c00000003060500000305a3b308000700"/28], 0x1c}, 0x1, 0x0, 0x0, 0x2004c008}, 0x4000880) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0xa, 0x3, &(0x7f0000003080)=ANY=[@ANYBLOB="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"/3584], &(0x7f0000014ff5)='GPL\x00', 0x2, 0x1000, &(0x7f0000014000)=""/4096, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r2, 0x10c, 0x8, &(0x7f0000000200)=0x7b8d, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r1, 0x3a, 0xcc0, 0xcc0, &(0x7f0000000200)="e460cdfbef2408322900119386dd6a00000000072feb311ccd3ec8a755c1e1380081ffad008036e8d50000ff010000001400000500242f09880bd320d98a61a90057e9bf", 0x0, 0x401, 0x0, 0xa8, 0x0, &(0x7f00000011c0)="59235bd7a9324ff307d87177332368fbdeefaa1544600ea1870645446c357de433206896637019b84d57c3de1ea07638e494dd701db1af6fc15db78cf79f5ab4bc7aee8553677ffe377a35b4afdb989fb7da1ff63956ffb796d51daf1c268b9f1a4a06583f8c03ec1671b151a8a495c1b006fa5f2f3a54a46aeee8005b178b9516d2b928984ccb942fa2278a2e33a0b619f2dd814fc91942e03c48fd9b7d19d9a6612b46805b267ef3132a724cbfcd1c715be67930e2ae2b9a2479c5a4b2fecd301a745a6fd67598a5e5ecc1e56e58159c47def7f9285acfedc980596377e6f9ee076fa094e5d8f838b718ed63ff8265a1dbc1549bed03e6b27b6fc2b8a07373506a1a41d5a71cbf0eaa24ec737b02a8a2d5114c3c4e5810a2c3eae3373fd341800cfb0fb35cefe04ca4da2b02a83c40126e23cdf3c817b530bbe7b431bc0b7d864e3e6dd1ab90259a8bd7ad7dd4c6366ea6da661fd016b394adcce5988fff85fbc832a927c97b89337e195f562cd284911eef1ee52e4ff033b33beedea7cf43c4d0cc0471fa91011e1e7e8733bf82c01346d6ecb49f1a84e92d063c81a7227d89be33f7273b87e29ae53a5f38dc94cf391fcb82c9432821ef1a0f6bbfe8f7d6574479a8f621e1d8f7d9bb20f3d8d469e6d232d7d7837ff12a224a65c604907e787baaf7c863ad48a5edecbe1470c20507a6ee5dee75e9ef84c71af5af800a9ce9787ebdee9e1c8189fbf66048d5c3757fb2b697ce68cfd316a7b25a385111e0cd2fddb81602e36e74c4f99b403cb304a4774e648054c0456c7869f9d97873ff80e2664c1265292941a9b767c7f40767cfccdbcaa156453d6a910fd5440f7a2bf8f4bb6d6d9fd443f2304617a684b6afa99c157dcf70e51fdb55fd0dbf5c6733841024599f8d1791a07c5dc3a4ccaf4d7c0ca3d101b2beba3a49d2378c9fe4fdb10babd95083a0c4db5a30c4490828d97efe807a13e587fbac1089843964facfd27d287262759384fe9b610f81048be430c1e8fe6327c0f2fd003021d20563ec0c7e39aec6718649c958da2e02cb3848c76924492678889c18bea02ed5ee080106e9838cbca9ad5f66c0434182225b13a236b342cf80562c10d4a3459aea17589b84904d3d2c2b", &(0x7f00000004c0)="b33620dad49cc786c86a5c5444e76c2a1ef9224fb91083d2ba4368e98a14467703e9ee585196fa95320bd53c6a76ad443b81dc833b22016aeaafb4597c06919ecf7e5ea4d0a8995feaaf9a9feb0c4b5277398049a2f5475f6ceb26bd128189f4b1b3c662d3d1630717791de0cdac3ce6e01c5719b670da5ded7dfa9dda53f04ad151cb952d708eaa69e983dcfab36b2dac3f3fe85e1d86b3d73d4879fb11cfac51f3cb669a50", 0x1, 0xfffffffd}, 0x22) 3.623253169s ago: executing program 2 (id=4005): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2, &(0x7f0000000680)=ANY=[@ANYBLOB="6110bd000000000095"], &(0x7f0000000200)='GPL\x00'}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="01000000050000000200000007"], 0x50) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) r2 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$NFT_BATCH(r4, &(0x7f0000000400)={&(0x7f0000000280), 0xc, &(0x7f00000003c0)={&(0x7f0000001780)=ANY=[@ANYBLOB="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"/1816], 0x718}, 0x1, 0x0, 0x0, 0x10}, 0x40) (async) sendmsg$NFT_BATCH(r4, &(0x7f0000000400)={&(0x7f0000000280), 0xc, &(0x7f00000003c0)={&(0x7f0000001780)=ANY=[@ANYBLOB="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"/1816], 0x718}, 0x1, 0x0, 0x0, 0x10}, 0x40) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) r7 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) (async) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)=@newtfilter={0x2c, 0x2c, 0xd27, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0x0, 0x2}, {0xffe0}, {0x10, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x2c, 0x6}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000850}, 0x20084084) setsockopt$inet_mreqn(r1, 0x0, 0x25, &(0x7f0000000080)={@multicast1, @local}, 0xc) socket$vsock_stream(0x28, 0x1, 0x0) ioctl$PPPIOCGL2TPSTATS(r1, 0x80487436, &(0x7f0000000780)="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") bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0xfffffffffffffe8b, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0xfffffffffffffe8b, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x12, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') (async) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r11, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44) (async) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r11, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="840000001000f5a400000000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000000000000006400128009000100626f6e640000000054000280050001000500000005000d000200000008000200", @ANYRESHEX], 0x84}}, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000006c0)={r10, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xc}, 0x50) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r9, 0x0, 0x0}, 0x10) 3.44404428s ago: executing program 0 (id=4007): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x7, &(0x7f00000000c0)="fdffffff", 0x4) r1 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_SECURITY_KEY(r1, 0x110, 0x1, &(0x7f0000000040)='\x00', 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48) socket$alg(0x26, 0x5, 0x0) (async) bind$alg(r0, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha256\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x7, &(0x7f00000000c0)="fdffffff", 0x4) (async) socket$rxrpc(0x21, 0x2, 0x2) (async) setsockopt$RXRPC_SECURITY_KEY(r1, 0x110, 0x1, &(0x7f0000000040)='\x00', 0x1) (async) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48) (async) 3.290306199s ago: executing program 0 (id=4009): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x9, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0xbe3) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x63, 0x11, 0xa4}, [@ldst={0x4}]}, &(0x7f0000000080)='GPL\x00', 0x8, 0x3e0, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76}, 0x48) setsockopt$inet_mreqsrc(r0, 0x0, 0xf, &(0x7f00000000c0)={@private=0xa010101, @local, @rand_addr=0x64010100}, 0xc) 3.155179132s ago: executing program 2 (id=4011): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3, 0x2}, 0x50) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000040)) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="38000000031401002abd7000fedbdf250900020073017a31000000000800410072786500140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(r1, 0xf505, 0x0) 3.060283131s ago: executing program 0 (id=4012): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x91}]}, 0x44}}, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e00300002800800010010000000100005800a000400aaaaaaaaaabb000008000300030000000a000400aaaaaaaab1aa000008000500", @ANYRES32=r5], 0x68}}, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getchain={0x24, 0x11, 0x839, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r5, {0x1, 0x6}, {0xd}, {0x11, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x84}, 0x0) r6 = socket(0x10, 0x803, 0x0) sendto(r6, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) (async) recvmmsg(r6, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) (async) socket$inet6_udplite(0xa, 0x2, 0x88) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x7, &(0x7f0000000040)=ANY=[@ANYRES32=0x0], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) (async) socket$inet6_sctp(0xa, 0x5, 0x84) 2.986907293s ago: executing program 1 (id=4013): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c000000100005ff00200000001800000000004a", @ANYRES32=0x0, @ANYBLOB="19220000040902001c0012800b00010062726964676500000c0002800500240001000000"], 0x3c}}, 0x0) socket$packet(0x11, 0x3, 0x300) r1 = socket$netlink(0x10, 0x3, 0x7) write(r1, &(0x7f0000000040)="2700000014000707030e0000120f0a0011000e000000000000000000078a151f7508003900050021", 0x28) r2 = socket(0x21, 0x80000, 0x0) sendto(r2, &(0x7f0000000000)="120000003200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1) sendmsg$NL80211_CMD_LEAVE_MESH(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r3, 0x400, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x3ff, 0x43}}}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x804}, 0x4004804) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f00000001c0)={0x0, 0x2b, 0x7, [0x6a, 0xff, 0x6620, 0x5, 0x5, 0x5, 0x81]}, &(0x7f0000000240)=0x16) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f00000002c0)=[@in={0x2, 0x4e22, @empty}, @in6={0xa, 0x4e20, 0x7, @mcast1, 0x7}, @in6={0xa, 0x4e21, 0x3, @remote}, @in6={0xa, 0x4e21, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}, 0xfffffffd}, @in6={0xa, 0x4e22, 0x7fffffff, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, 0x3}, @in6={0xa, 0x4e21, 0x2, @loopback, 0x82dd}, @in={0x2, 0x4e23, @broadcast}], 0xac) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r4, 0x84, 0x78, &(0x7f0000000280)=r5, 0x4) 2.542239302s ago: executing program 1 (id=4016): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f00000026c0), r1) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000027c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="5d4525060040fcdbdf25010000000c000200010000cfd4a6ae000000e0ffffff030000002f2db96eef7f997c0000000000000000000000000000000085000000"], 0x3c}, 0x1, 0x0, 0x0, 0x4040005}, 0x20000080) 2.335912793s ago: executing program 1 (id=4017): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{0x1, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000001240)={@loopback, 0x0}, &(0x7f0000001280)=0x14) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000013c0)={&(0x7f00000012c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x38, 0x38, 0x5, [@const={0x5, 0x0, 0x0, 0xa, 0x4}, @decl_tag={0x2, 0x0, 0x0, 0x11, 0x1, 0x7}, @int={0x7, 0x0, 0x0, 0x1, 0x0, 0x56, 0x0, 0x71, 0x2}, @ptr={0x7, 0x0, 0x0, 0x2, 0x5}]}, {0x0, [0x61, 0x30, 0x0]}}, &(0x7f0000001340)=""/122, 0x55, 0x7a, 0x1, 0xdbb, 0x10000}, 0x28) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001500)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000001480), &(0x7f00000014c0)='%pB \x00'}, 0x20) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001540)=@base={0x2, 0x9, 0x1, 0xa, 0x400c0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x2, 0x2}, 0x50) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001680)={0x6, 0x10, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8c52, 0x0, 0x0, 0x0, 0xf}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @call={0x85, 0x0, 0x0, 0x2}, @map_idx={0x18, 0x2, 0x5, 0x0, 0x10}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}]}, &(0x7f0000000200)='GPL\x00', 0x5b, 0x1000, &(0x7f0000000240)=""/4096, 0x41000, 0x1, '\x00', r2, 0x25, r3, 0x8, &(0x7f0000001400)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001440)={0x2, 0x10, 0xfffffc01, 0x7}, 0x10, 0x0, 0x0, 0x7, &(0x7f00000015c0)=[r4, r5], &(0x7f0000001600)=[{0x3, 0x5, 0x2, 0xa}, {0x1, 0x5, 0x0, 0xb}, {0x4, 0x5, 0xf, 0x5}, {0x4, 0x4, 0x1, 0x6}, {0x2, 0x1, 0x9, 0xa}, {0x4, 0x5, 0xe, 0xa}, {0x3, 0x1, 0x4, 0xb}], 0x10, 0xbee}, 0x94) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000001740)={0xffffffffffffffff}) getsockopt$TIPC_NODE_RECVQ_DEPTH(r7, 0x10f, 0x83, &(0x7f0000001780), &(0x7f00000017c0)=0x4) getsockopt$sock_buf(r7, 0x1, 0x3b, &(0x7f0000001800)=""/96, &(0x7f0000001880)=0x60) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000018c0)={0x2, 0x4, 0x8, 0x1, 0x80, r1, 0x5384, '\x00', r2, 0xffffffffffffffff, 0x1, 0x4, 0x3}, 0x50) r9 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000019c0)={r8, &(0x7f0000001940)="6749633ce313bece280da0e3cbd9f9ff1a7ba25355", &(0x7f0000001980)=@udp=r9}, 0x20) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000001a00)={0x0, @in={{0x2, 0x4e24, @private=0xa010102}}}, &(0x7f0000001ac0)=0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000001bc0)={r10, 0x9c, &(0x7f0000001b00)=[@in6={0xa, 0x4e23, 0x70, @dev={0xfe, 0x80, '\x00', 0x3f}, 0x8}, @in6={0xa, 0x4e24, 0x33f, @mcast2, 0x9}, @in6={0xa, 0x4e24, 0x5, @loopback, 0x4}, @in6={0xa, 0x4e23, 0x8, @remote, 0x8}, @in={0x2, 0x4e24, @broadcast}, @in6={0xa, 0x4e24, 0xcdd, @loopback, 0x3}]}, &(0x7f0000001c00)=0x10) setsockopt$netrom_NETROM_T1(r7, 0x103, 0x1, &(0x7f0000001c40)=0x4, 0x4) r11 = syz_genetlink_get_family_id$devlink(&(0x7f0000001cc0), r7) sendmsg$DEVLINK_CMD_PORT_SPLIT(r7, &(0x7f0000001e40)={&(0x7f0000001c80)={0x10, 0x0, 0x0, 0x8002}, 0xc, &(0x7f0000001e00)={&(0x7f0000001d00)={0xf8, r11, 0x4, 0x70bd29, 0x25dfdbfd, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0x9, 0x6}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0x9, 0x3}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x2}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x1}}]}, 0xf8}, 0x1, 0x0, 0x0, 0x40}, 0x800) setsockopt$sock_int(r9, 0x1, 0x2b, &(0x7f0000001e80)=0x8, 0x4) r12 = socket$kcm(0x29, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r12, 0x89e2, &(0x7f0000001ec0)={r7}) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r13, &(0x7f0000001fc0)={&(0x7f0000001f00)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001f80)={&(0x7f0000001f40)={0x28, 0x0, 0x100, 0x70bd28, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x0, 0xd}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x1165}]}, 0x28}, 0x1, 0x0, 0x0, 0x11}, 0x20000000) ioctl$EXT4_IOC_GETSTATE(r6, 0x40046629, &(0x7f0000002000)) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r4, 0x84, 0x12, &(0x7f0000002040), &(0x7f0000002080)=0x4) ioctl$sock_inet6_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f00000020c0)) r14 = syz_genetlink_get_family_id$ethtool(&(0x7f0000002140), r7) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r7, 0x89f2, &(0x7f0000002280)={'syztnl2\x00', &(0x7f0000002180)={'ip_vti0\x00', 0x0, 0x1, 0x7, 0x6, 0x2, {{0x33, 0x4, 0x3, 0x22, 0xcc, 0x67, 0x0, 0x5, 0x29, 0x0, @multicast1, @dev={0xac, 0x14, 0x14, 0x10}, {[@timestamp_prespec={0x44, 0x14, 0xee, 0x3, 0xa, [{@private=0xa010101, 0x7fff}, {@empty, 0x6}]}, @timestamp={0x44, 0xc, 0x9e, 0x0, 0x4, [0x1, 0x2]}, @ssrr={0x89, 0x2b, 0x8d, [@multicast1, @empty, @multicast2, @empty, @empty, @rand_addr=0x64010101, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010100, @private=0xa010100]}, @timestamp={0x44, 0x14, 0x48, 0x0, 0x7, [0x4, 0x3, 0x3, 0x5102]}, @timestamp_prespec={0x44, 0x24, 0x7f, 0x3, 0x1, [{@broadcast, 0x6}, {@dev={0xac, 0x14, 0x14, 0x32}, 0x3}, {@private=0xa010100, 0x5}, {@private=0xa010100, 0xff}]}, @lsrr={0x83, 0x17, 0x81, [@local, @rand_addr=0x64010101, @broadcast, @empty, @empty]}, @end, @cipso={0x86, 0x1c, 0x2, [{0x2, 0xb, "1575323433008d5a45"}, {0x2, 0xb, "5dea03741583390852"}]}]}}}}}) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r7, &(0x7f0000002380)={&(0x7f0000002100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000002340)={&(0x7f00000022c0)={0x74, r14, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x4}, 0x80c0) ioctl$BTRFS_IOC_SPACE_INFO(r0, 0xc0109414, &(0x7f00000023c0)={0xbc, 0xf0c, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) bind$inet(r13, &(0x7f0000003580)={0x2, 0x4e24, @empty}, 0x10) 2.246412224s ago: executing program 0 (id=4019): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x8) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x6, 0xf, &(0x7f0000000900)=@ringbuf={{0x18, 0x7}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x64}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) 2.072041404s ago: executing program 1 (id=4021): socket$packet(0x11, 0x3, 0x300) (async) r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000d00), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_LINK_GET(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="030700000000000000000800000068000480"], 0x7c}}, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x4) 1.980851349s ago: executing program 0 (id=4023): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$sock_int(r3, 0x1, 0x52, &(0x7f0000000040)=0x92c, 0x4) recvmmsg(r3, &(0x7f0000004f40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x10000, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="780000001000830404000000fedbdf2500007400", @ANYRES32=r1, @ANYBLOB="0008000007500500580012800b0001006272696467650000480002800500190002000000050017"], 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x0) close(r0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x12a0, 0x1100, 0x18c, 0x203, 0x1100, 0x19030000, 0x11d0, 0x2e0, 0x2e0, 0x11d0, 0x2e0, 0x7fffffe, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, [0x0, 0x0, 0xff, 0xff], [0x7fffffff, 0xff000000, 0xff000000, 0xff000000], 'bond_slave_1\x00', 'bond0\x00', {}, {}, 0x84, 0x7, 0x2, 0x55}, 0x300, 0x10d8, 0x1100, 0x0, {0x1000000}, [@common=@unspec=@cgroup1={{0x1030}, {0x1, 0x0, 0x1, 0x1, './cgroup.cpu/syz1\x00', 0xfffffffc, {0x3}}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x4}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x1, 0x8d, 0x74c}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x1300) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x0, 0x0, 0x0}, 0x94) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='h\x00'], 0x68}, 0x9}, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) r7 = syz_init_net_socket$rose(0xb, 0x5, 0x0) listen(r7, 0x1) connect$rose(r7, &(0x7f0000000e80)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, 0x1, @default}, 0x1c) connect$unix(r6, &(0x7f00000019c0)=@abs, 0x6e) sendmsg$nl_route_sched(r5, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)=@gettaction={0x48, 0x32, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x10001}, @action_gd=@TCA_ACT_TAB={0x2c, 0x1, [{0x10, 0x18, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0xd, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8001}}, {0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x8844) 1.864008673s ago: executing program 1 (id=4024): r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000001380)={r1, &(0x7f00000004c0)}, 0x20) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) (async) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x9, 0x5}}}}]}, 0x44}}, 0x0) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r3, &(0x7f0000004dc0)=[{{&(0x7f0000001140)={0xa, 0x4e23, 0x3, @private2, 0x8}, 0x1c, &(0x7f00000013c0)=[{&(0x7f00000016c0)="99", 0x1}], 0x1}}, {{&(0x7f0000000100)={0xa, 0x4e23, 0x80000001, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x5}, 0x1c, &(0x7f0000000940)=[{&(0x7f0000000540)="a69c7e", 0x3}], 0x1}}], 0x2, 0x4000090) setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, 0x0, 0x0) (async) setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newtfilter={0x58, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xc4f7b7778a6bc3da}, {0x1, 0xfff1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x28, 0x2, [@TCA_CGROUP_EMATCHES={0x24, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x14, 0x1, 0x0, 0x0, {{0x3, 0x9, 0x81}, [@TCA_EM_IPT_HOOK={0x8, 0x1, 0x4}]}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}]}]}}]}, 0x58}}, 0x1) r4 = socket$netlink(0x10, 0x3, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) close(0x3) socket$caif_stream(0x25, 0x1, 0x3) (async) socket$caif_stream(0x25, 0x1, 0x3) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, 0x0, 0x0) (async) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, 0x0, 0x0) syz_emit_ethernet(0x62, &(0x7f00000005c0)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x3, 0x54, 0x64, 0x0, 0x7, 0x6, 0x0, @remote, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x10, 0x10, 0x6071, 0x0, 0xe7, {[@mptcp=@add_addr={0x1e, 0xa, 0x0, 0xa, 0xe, @multicast1}, @mss={0x2, 0x4, 0x3}, @timestamp={0x8, 0xa, 0x400040, 0x7fffffff}, @mss={0x2, 0x4, 0x7ff}, @sack={0x5, 0xe, [0x40, 0x8, 0x5]}]}}}}}}}, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) (async) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') (async) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) (async) unshare(0x6a040000) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80) write(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2688a24c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.57632158s ago: executing program 3 (id=4027): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x50, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2, 0x0, 0x10}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}]}]}, 0x50}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a03000000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140004"], 0xa4}}, 0x24044011) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a78000000060a030400000000000000000a0000010900010073797a31000000004c000480480001800b000100746172676574000038000280240003000739f2f10455afb9fdd672bad09dfb78c7699c74e891a0c700000000000000000800024000000000080001004c4f47000900020073797a32"], 0xa0}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) listen(0xffffffffffffffff, 0x0) socket(0x2b, 0x80000, 0x5) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r4, &(0x7f0000000240), &(0x7f0000000140)=@tcp6}, 0x20) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002440)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000600)="e2", 0x1}], 0x1}}, {{0x0, 0x1, &(0x7f0000000480), 0x14}}], 0x400, 0x10) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r5, 0x89f4, &(0x7f0000000040)={'sit0\x00', &(0x7f00000001c0)={@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1, 0x0, 0x50, 0x0, [{@dev}, {@multicast1}, {@loopback}, {@multicast2}, {@initdev}]}}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001800dd8d000800000400000000000000000000060000000006006f00040000000c00168008000240e0000001"], 0x30}}, 0x0) 1.575024411s ago: executing program 0 (id=4028): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x881, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r1, r2, 0x1a, 0x0, @void}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], 0x0}, 0x94) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x2}, 0x94) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000001100)={0x0, 0x0}, 0x8) r5 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000040)=r4, 0x4) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000440)={r5, r3}, 0xc) write$rfkill(r0, &(0x7f0000000080)={0x2, 0x0, 0x3, 0x1}, 0x8) 1.412610716s ago: executing program 3 (id=4029): syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa010102, @local}, {{0x1, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x400000000000016b, 0x0, 0x0, 0x0, 0x0, {[@md5sig={0x13, 0x12, "b3e480a7613088fd714100027d003b11"}]}}}}}}}, 0x0) (async) bpf$TOKEN_CREATE(0x24, &(0x7f0000000ac0), 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x16, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x41000, 0xe4bd6a1de0769c90, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x94) (async) r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) (async) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) (async) r2 = socket(0x10, 0x803, 0x0) (async) r3 = socket(0x10, 0x803, 0x0) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r4, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000740)=ANY=[@ANYBLOB="3000000003010102000000e318946c000a0000000c0019800800010094fb"], 0x30}}, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) readv(r5, &(0x7f00000008c0)=[{&(0x7f0000000080)=""/26, 0x1a}, {&(0x7f0000000340)=""/199, 0xc7}, {&(0x7f0000000180)=""/43, 0x2b}, {&(0x7f00000005c0)=""/232, 0xe8}, {&(0x7f0000000240)=""/182, 0xb6}, {&(0x7f00000006c0)=""/232, 0xe8}, {&(0x7f00000007c0)=""/195, 0xc3}, {&(0x7f0000000440)=""/127, 0x7f}], 0x8) (async) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r5, 0x84, 0xf, &(0x7f0000000bc0)={0x0, @in6={{0xa, 0x4e23, 0x63c0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3}}, 0x7, 0x7, 0x81, 0xcff1, 0x1}, &(0x7f0000000c80)=0x98) r8 = socket$igmp(0x2, 0x3, 0x2) getsockopt$inet_mtu(r8, 0x0, 0xa, &(0x7f0000000080), &(0x7f00000000c0)=0x1) (async) syz_emit_ethernet(0x5e, &(0x7f0000002e40)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "7428dd", 0x28, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_na={0x89, 0x0, 0x0, 0x0, '\x00', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [{0x0, 0x2, "122b472e41e24b11f34b608816e5"}]}}}}}}, 0x0) (async) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r5, 0x84, 0x22, &(0x7f0000000cc0)={0x9, 0x202, 0x2, 0xf, r7}, 0x10) (async) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r5, 0x8983, &(0x7f0000000140)={0x0, 'wlan0\x00', {0x2}, 0x7}) (async) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000001400b59527bd7000fcdbdf2523090000", @ANYRES32=r6, @ANYBLOB="140002"], 0x34}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000feff03000000000000000000850800007a0000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000d40), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f0000000e00)={&(0x7f0000000d00), 0xc, &(0x7f0000000dc0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r9, @ANYBLOB="00022abd7000fbdbdfff7f0000000800010002000000"], 0x1c}, 0x1, 0x0, 0x0, 0x2040}, 0x850) (async) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000980), r3) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r5, &(0x7f0000000a80)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000e40)={0x70, r10, 0x0, 0x70bd2d, 0x25dfdbfe, {}, [@HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x8040}, 0x40) (async) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3400000015"], 0x34}, 0x1, 0x0, 0x0, 0x41c1}, 0x4040800) 1.343510376s ago: executing program 4 (id=4030): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="81ffffff000000001c0012800b00010067726574617000000c00028008000100", @ANYRES32, @ANYBLOB="08000d000000000008000400080008"], 0x4c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x69, 0x10, 0x50}, [@ldst={0x4}]}, &(0x7f0000000080)='GPL\x00', 0x2, 0x3f7, &(0x7f000000cf3d)=""/195}, 0x48) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@newtaction={0x88, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x74, 0x1, [@m_mirred={0x70, 0x1, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x4, {{0x6}}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x88}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001840)=@newtaction={0xe68, 0x30, 0x25, 0x0, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x0, 0x0, 0x2}, 0x3}, [{}, {}, {0x0, 0x8000}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x9, 0xfffffffc, 0x0, 0x0, 0x9}, {}, {0x0, 0x1}, {0x0, 0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x0, 0x0, 0xffffffff}, {}, {0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3cf}, {0x0, 0x7}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x3}, {}, {}, {}, {0x0, 0x0, 0x4000}, {}, {0xfffffffd}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x200}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {0x8, 0x0, 0x0, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x6d8}, {}, {}, {}, {0x7f, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0xfffffffd}, {0x0, 0xffffff01}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x0, 0x0, 0xdf}, {0x0, 0xfffffff2}, {}, {}, {}, {}, {}, {0x0, 0xfffffffe}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x4}, {}, {}, {0x0, 0x0, 0x2, 0xf}, {}, {}, {}, {0x0, 0x0, 0x10}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, {}, {0x0, 0x0, 0x100}, {}, {0xfffffffc, 0x3}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x4}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x4, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x0, 0x2, 0x0, 0x0, 0x4000000}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {0x71233a422d7de35b}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {0x3}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@gettaction={0x28, 0x32, 0x6dd711a25f4cb68b, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}]}]}, 0x28}}, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r4) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x5, 0x0, 0x7, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x10000}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xf1}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x9, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe5}, 0x94) 1.207052972s ago: executing program 3 (id=4031): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x44, 0x32, 0x20, 0x70bd25, 0x25dfdbfd, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x4048801) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x470bd2c, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xfff3}, {0xffff, 0xffff}, {0x2, 0xfff3}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_QUANTUM={0x8, 0x7, 0xc}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000016}, 0x2000400c) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x18000000000002a0, 0x2b, 0x0, &(0x7f00000001c0)="b1ff03076856330106e5dbc2fdffffffffffffffd56988c04200cbe8eb1cf2d35115060b00000014f088a8", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r6 = socket(0x10, 0x80002, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000002c0)={'syztnl1\x00', &(0x7f0000000380)={'gretap0\x00', 0x0, 0x80, 0x700, 0x4, 0x401, {{0x1d, 0x4, 0x2, 0x3, 0x74, 0x66, 0x0, 0x92, 0x4, 0x0, @remote, @empty, {[@ssrr={0x89, 0x2b, 0x80, [@local, @local, @empty, @empty, @private=0xa010100, @multicast2, @private=0xa010100, @multicast1, @rand_addr=0x64010102, @remote]}, @timestamp={0x44, 0x14, 0xed, 0x0, 0x4, [0x3, 0xffffffff, 0xf, 0x0]}, @rr={0x7, 0x17, 0x5e, [@local, @broadcast, @local, @multicast1, @multicast2]}, @rr={0x7, 0x7, 0x45, [@broadcast]}]}}}}}) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000300)=0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000440)={{{@in=@private=0xa010102, @in=@rand_addr=0x64010100, 0x4e21, 0x0, 0x4e21, 0x3, 0xa, 0x20, 0x80, 0x5c, r7, r8}, {0x5, 0xc9, 0xd23, 0x7, 0x4, 0x9, 0x5, 0x4}, {0x8, 0x4, 0xc, 0x7f}, 0x8f7, 0x6e6bb3, 0x2, 0x0, 0x0, 0x2}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4d5, 0x3c}, 0x2, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x34ff, 0x4, 0x3, 0xe, 0x5, 0xcc9, 0x733}}, 0xe8) r9 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r9, 0x0, 0xc8, &(0x7f0000000000), 0x4) setsockopt$MRT_ADD_MFC_PROXY(r9, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0x0, "ff00000058b274e6d845167fefe42897ae48fc3c7b00000000000000fcff00", 0xb2, 0xc, 0x6, 0x6}, 0x3c) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r5, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002"], 0x44}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xb, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000000900000000000000001801000820dedfac08000000002020207b1af81a0000bfa100000001000007010000f8ffffff0000009f41bcce88e56cfe969e319624050085"], &(0x7f0000000080)='GPL\x00'}, 0x90) 997.384722ms ago: executing program 4 (id=4032): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x5c, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x5c}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r1) sendmsg$NFC_CMD_DEP_LINK_UP(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002abd7000fbdbdf250400000006000a006b983800080001"], 0x24}, 0x1, 0x0, 0x0, 0x40080c0}, 0x8000) 863.203119ms ago: executing program 3 (id=4033): sendmsg$NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x3c, 0x0, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_IFTYPE={0x8, 0x5, 0x2}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan3\x00'}, @NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, {0xaaaaaaaaaaaa0102}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0) r0 = socket$kcm(0x29, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f00000019c0)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000380)="932bef51674891937195028bfb9ddcc5f289d4c06cd33775b265a695fe2842cee87842b3d9", 0x25}, {&(0x7f00000003c0)="447dc715a9fd2eb529f00ba1d689049fdda4396e1a86e8333afac319937f", 0x1e}, {&(0x7f0000000400)="a2e7ecd0e3347b5dc77022bc6d07d63fb4693ead37aab314d326ad332e835f45cacb0bd08ce08db61c96d1f831871a0d8e7d38c5f3f094816d7236bfb5ae1ab013c3ae38bc429bb3e0412477c5e996feed5a6870b031c1b9630d04fc9da3cc11021a144eb2d10c74fae3855c774be478ea2e2b54c25aeaa3f772d80addc319e7f1b6f04c6ad5fae1e69690", 0x8b}, {&(0x7f00000004c0)="8b4217e26339cad426d7a04e9b193e3d768f9074d1bc24db0e4aee131824ddb8ab4f1e57af389e5ee911b06169873450f388dbc0bbca005cb8603abf5d96", 0x3e}, {&(0x7f0000000500)="147365e4a375ba266f7f96c0b985cf2d64cfe2688b5b5bb00c8b9ccb60dae61d32ddc032416eac4341ff401b8b27532222076807f530b2d3832b59e0cc05f94a7a1f35a441eec4dd0feb3b7d2b7efc9c45367ad23ff3e9dcd03d3ca647a0", 0x5e}, {&(0x7f0000000580)="7fc7fb810ef80be34637cf58fc58eadbd44a2a82fd7c79e1855eec6b6e33cb842d47bd799a1367b0075bad3537558edadfd5daea192c27abb384f3810aab50148ce48e30065329e4bc3bbc18c4bac148b43b9c0ca4b1a406160ec28463c572a036a049b7ffbd88c3a3ac623f9cfbd16ebed03c3fa1657fb03707d2432a1f98bb340651b6d7731ead030c8d9a145aa2cc252a192cb8b9a66e2ad6054c0ce0f41d1aee0a6303e76e", 0xa7}, {&(0x7f0000000640)="814a2e41", 0x4}], 0x7, &(0x7f0000000700)=[{0xd0, 0x1, 0x44, "dee48910a23d0ca4901cdc462f34803569cc973a432858988f8eff2c37f21e2a93b37b2263535f985646ff737dc1285e986ae07daa30421eb3b667e3aca85162f3ae01eccb79fa81c2d25513f115a668bf2d186f9470f8afc422fbefe80e585c9b368e144264b06b31b773a49ff16be041bf6e6c1917a1ae16712f2129181a3d0e9442431e831295cc40fbd261b822046af01bdf98b41b10930a457a8d33ed9fdec750c5ec0090fd393311784dce78327d768664e5d905f99b706804c8242829"}, {0xd0, 0x104, 0x1000, "3b046fe6f7319bd548550488e4e81991886805e5f9d38cfa507fdb87a35c9ee102e0e21025c8e6d40b3a7438fec954be96d4d889b984c5957485b97afa88df25c9fdc5b8376e75fee25e61e7b2da0af05e541139e1b9eaefe97bc7b681a13f6195bf266f1d1c8e3cde2e54bc51b680bfd113b9babdadde45614da6fd442336fda4652e2090587de45457d55631cf5df1de51f08d85f10bd9a1d6dfa4f306223b0b7435ac7ebe3df61b3894633fb5e3cd856bf6652bbbdea4115b05658b"}, {0xe0, 0x10c, 0x3, "bd165d76fc729d7d3778a9590b9f126fe2db19c3131c77507d49e62f458ab99b9af06ffd0c761ab97064b83dacfe02a3cd215e7419614c78c4b1fd5b7db70dd995a3115918980ed368b0bc0e1b360bbd7f64795b57b1c9a5544da02cbfa74187c7975d238d2baa73ada38644a882c6fe861ec23a31c0c16d0121d671d35b274395d1b3261ffaaabfe7f70d28e551f3a27b509836d50660dd177ef8696bdbadde15081634805defcb1666e2cb07643b367c4641323c2b78bc85401c41fb6770bd29340621573c1b511b84"}, {0x1010, 0x11, 0x100, "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"}], 0x1290}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r2, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x1c}}, 0x20040001) 699.157413ms ago: executing program 4 (id=4034): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)=@newlink={0x40, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4048b, 0x40000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipoib={{0xa}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @multicast}]}, 0x40}}, 0x88890) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000020000103feffffff0000000002000000000000000400010008000a000008000005001e"], 0x50}}, 0x4000850) (async, rerun: 32) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) (rerun: 32) setsockopt(r2, 0x84, 0x7d, &(0x7f0000000040)="01003840500d9136", 0x8) 650.106479ms ago: executing program 3 (id=4035): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x12, 0x0, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f00000006c0)={0x0, 'bridge0\x00', {0x101}, 0x2}) socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000900006440000008001b00000000000500100004"], 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x54, 0x10, 0x200, 0x70bd25, 0x25dfdbfc, {0x6, 0x0, 0x8100, 0x0, {0x1, 0x10}, {0xfff1}, {0xe, 0x10}}, [@TCA_RATE={0x6, 0x5, {0xfc}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x400c800}, 0x0) socket$nl_route(0x10, 0x3, 0x0) pipe(0x0) pipe(0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r5, &(0x7f00000000c0)={0x1d, r6}, 0x18) connect$can_j1939(r5, &(0x7f0000000140)={0x1d, r6, 0x1000000, {0x2, 0x0, 0x4}, 0xfe}, 0x18) sendmmsg(r5, &(0x7f000000a200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x60008800) setsockopt$inet_tcp_int(r0, 0x6, 0x24, &(0x7f0000000080)=0xfffffffb, 0x4) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1ce5ffff2300010000000000000000000000000006000400e9000000"], 0x1c}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB="0000200000800000000000822c43fc587450bbf927328eff00", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) sendmsg$inet(r4, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) 648.660866ms ago: executing program 4 (id=4036): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3800000055003d0902000000fcdbdf2507000000", @ANYRES32=r5, @ANYBLOB="20000100", @ANYRES32=r5, @ANYBLOB="01030100e000200200000000000000000000000008"], 0x38}}, 0x4000000) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01012abd7000000008002b00000008000300", @ANYRES32=r2, @ANYBLOB="040046000500340076000000080026006c09"], 0x58}}, 0x4804) 244.095855ms ago: executing program 4 (id=4037): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c00000100000000000300000000000007000000", @ANYRES32=0xffffffffffffffff], 0x2c}}, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x4001}, 0xfea3) r2 = socket$inet6(0xa, 0x3, 0x2f) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@multicast2, @in6=@loopback, 0x0, 0x0, 0x6e21, 0xfffc, 0xa, 0x0, 0x10}, {0x0, 0x6, 0x0, 0x0, 0x0, 0x4}, {}, 0x0, 0x0, 0x1, 0x0, 0x1}, {{@in=@empty, 0x0, 0x2b}, 0x0, @in=@dev, 0x0, 0xbcfbddc4f0d79c8f}}, 0xe8) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_ifreq(r3, 0x891c, &(0x7f0000000080)={'ip6tnl0\x00', @ifru_addrs=@l2tp={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x32}}}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0xfffffffffffffd01, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYRES64=r3, @ANYRESOCT, @ANYRESHEX=r0], 0x1c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000340)=@newtaction={0x88c, 0x30, 0x12f, 0x0, 0x0, {}, [{0x878, 0x1, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x864, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404}], [@TCA_POLICE_RATE={0x404}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x88c}}, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r1, 0x80286722, &(0x7f0000000000)={&(0x7f0000000080)=""/85, 0x55, 0x0, 0x1}) r5 = socket$inet(0x2, 0x2, 0x0) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000540)=@bpf_tracing={0x1a, 0x9, &(0x7f0000000280)=@raw=[@map_idx_val={0x18, 0x7, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2}, @initr0={0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x2e}, @ldst={0x3, 0x0, 0x1, 0x9, 0x2, 0x40, 0xfffffffffffffffc}, @map_fd={0x18, 0x2}], &(0x7f0000000100)='GPL\x00', 0x7ff, 0x7, &(0x7f0000000200)=""/7, 0x1f00, 0x20, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x7, 0x3}, 0x8, 0x10, &(0x7f0000000380)={0x0, 0xf, 0x8, 0x3}, 0x10, 0x2bd35, 0xffffffffffffffff, 0x3, &(0x7f00000004c0)=[0x1, 0x1, 0xffffffffffffffff], &(0x7f0000000500)=[{0x5, 0x3, 0x3, 0x6}, {0x3, 0x1, 0xf, 0x4}, {0x0, 0x1, 0x8, 0x1}], 0x10, 0xb}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000a00)=r6, 0x4) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000600)=@nat={'nat\x00', 0x670, 0x5, 0x368, 0xd8, 0x170, 0xffffffff, 0xd8, 0x228, 0x2d0, 0x2d0, 0xffffffff, 0x2d0, 0x2d0, 0x5, 0x0, {[{{@ip={@rand_addr=0x64010100, @rand_addr=0x64010101, 0xff, 0x0, 'veth1_macvtap\x00', 'ipvlan1\x00', {0xff}, {}, 0x33, 0x2, 0x14}, 0x0, 0xa0, 0xd8, 0x48, {}, [@common=@ah={{0x30}, {[0x1, 0x3]}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0xf, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id=0x67, @port=0x4e24}}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, 0x0, 0x0, 'virt_wifi0\x00', 'veth1_vlan\x00'}, 0x0, 0x70, 0xb8}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0xe, @ipv6=@ipv4={'\x00', '\xff\xff', @empty}, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @icmp_id=0x65, @port=0x4e21}}}, {{@ip={@private=0xa010100, @empty, 0x0, 0x0, 'nicvf0\x00', 'nr0\x00'}, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @rand_addr, @dev={0xac, 0x14, 0x14, 0x2a}, @gre_key=0xe, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c8) 213.851948ms ago: executing program 3 (id=4038): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000002c0)={0x38, r2, 0x1, 0xffffffff, 0x0, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}]}, 0x38}}, 0x20000000) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) r4 = syz_genetlink_get_family_id$nfc(&(0x7f00000001c0), r1) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000200)=0x0) sendmsg$NFC_CMD_DEP_LINK_DOWN(r0, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r4, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008041}, 0x40) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r3, 0x8982, &(0x7f0000000140)={0x0, 'veth0_to_bridge\x00', {0x1}, 0x6}) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000080)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000540)={0x1d8, 0x0, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_SEC_KEY={0xd4, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "28421f699ceb5bb5865b390c150112e246674b4b9b4c43aad25425dc51731623"}, @NL802154_KEY_ATTR_ID={0x58, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x6f}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x1c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa0}]}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x10, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}]}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x9}]}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "c22cd175df86a880418157d4ac294d2b"}, @NL802154_KEY_ATTR_ID={0x24, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xa7}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xb}]}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x3}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "75875d34f417cc8aa6c0f9305e64bd72"}]}, @NL802154_ATTR_SEC_KEY={0x3c, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "6c424a55bc418efcee42685a62e512fa"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "f32a57db801b268fd476ba435bb2a8598a04bb62972ac177747372e92118725e"}]}, @NL802154_ATTR_SEC_KEY={0x8c, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x7}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "87a1cf43b438be6b1c7a9b30da28fe4a"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "b82cf864d0ce89e9826eb5a938e9aa98275f81f5f2af6b38c468b34f9d201946"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "7fec1dfdd618b30f54a09c41492034c505cdf758549cd44be77617408940b3ed"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "4e5a86e22ed7418b8dedfdf5bb998b4025b4bb10140fde4b7bedfbb17a8b3fd5"}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x1d8}, 0x1, 0x0, 0x0, 0x200000c0}, 0x4040000) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x1c, r2, 0x1, 0x70bd29, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x400c000) 0s ago: executing program 4 (id=4039): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r0, 0x0, 0x33, &(0x7f0000000000)=0x80000000, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e24, @local}, 0x10) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) r2 = socket(0x10, 0x3, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x0, @private2}]}, &(0x7f0000000180)=0x10) sendto$inet(r0, &(0x7f0000001fc0)="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", 0x1000, 0x0, &(0x7f0000000300)={0x2, 0x4e20, @private=0xa010101}, 0x10) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x85, &(0x7f00000001c0)={r5, @in6={{0xa, 0x4e20, 0xffffffff, @private2, 0xffffffff}}, 0x0, 0x1}, 0x90) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000880)={{{@in=@local, @in6=@private2, 0x4e20, 0x3, 0x4e23, 0xfff8, 0xa, 0x40, 0xa0, 0x3c, 0x0, 0xee01}, {0x6, 0xffffffff, 0x4, 0x2, 0x94, 0x2, 0xfff, 0x4}, {0x0, 0x3, 0x1, 0x7000000000}, 0x6, 0x0, 0x1, 0x0, 0x2, 0x1}, {{@in=@multicast2, 0x4d2, 0x32}, 0xa, @in=@empty, 0x3506, 0x2, 0x2, 0x72, 0x93, 0x1, 0xfc4}}, 0xe8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x1, 0x8, 0x0, r5}, 0x10) sendmsg$nl_route(r2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@ipv6_newnexthop={0x1c, 0x68, 0x601, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x4}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) accept$inet(r0, 0x0, &(0x7f00000000c0)) setsockopt$inet_int(r1, 0x0, 0x33, &(0x7f0000000000)=0x80001000, 0x4) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@delchain={0x12c, 0x65, 0x300, 0x70bd27, 0x0, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x4}, {0x0, 0xa}}, [@TCA_CHAIN={0x8}, @TCA_CHAIN={0x8, 0xb, 0x89f}, @filter_kind_options=@f_u32={{0x8}, {0xf0, 0x2, [@TCA_U32_SEL={0x14, 0x5, {0x2, 0x7, 0x2, 0x0, 0x7, 0xd, 0x94, 0x2}}, @TCA_U32_ACT={0xd8, 0x7, [@m_mirred={0x90, 0x6, 0x0, 0x0, {{0xb}, {0x64, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x3, 0xa612, 0x7, 0x5, 0x465}, 0x1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x600, 0x800, 0x5, 0xd, 0x10001}, 0x1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x7, 0xd7f, 0x4, 0x101, 0xf2ee}, 0x4}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_ife={0x44, 0x1a, 0x0, 0x0, {{0x8}, {0x4}, {0x19, 0x6, "59b69513e97e708c0dc836f724775dbb59b2f21e01"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}}]}, 0x12c}, 0x1, 0x0, 0x0, 0x91}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000d80)=@newsa={0x140, 0x10, 0x1, 0x0, 0x25dfdbfd, {{@in=@local, @in6=@empty, 0x4000, 0x0, 0x3, 0x3}, {@in=@broadcast, 0x0, 0x33}, @in6=@mcast2, {0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x4}, {}, {}, 0x0, 0x0, 0xa, 0x1}, [@tfcpad={0x8, 0x23, 0xd19}, @algo_auth={0x48, 0x1, {{'sha256\x00'}}}]}, 0x140}}, 0x20000000) sendto(0xffffffffffffffff, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) kernel console output (not intermixed with test programs): 297.681839][T13982] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2220'. [ 297.684384][T13985] netlink: 'syz.3.2220': attribute type 64 has an invalid length. [ 297.784407][T13985] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2220'. [ 297.931019][T13997] tipc: Enabling of bearer rejected, media not registered [ 298.029067][T14004] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 298.124691][T14012] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2228'. [ 298.144795][T14012] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2228'. [ 298.157763][T14014] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2229'. [ 298.272103][T14014] gretap4: entered promiscuous mode [ 298.277468][T14014] gretap4: entered allmulticast mode [ 298.560293][T14031] 8021q: VLANs not supported on ip6tnl0 [ 298.678115][T14041] xt_bpf: check failed: parse error [ 299.386848][T14098] nbd: nbd1 already in use [ 299.733801][T14132] netlink: 'syz.1.2259': attribute type 1 has an invalid length. [ 299.741948][T14131] netlink: 'syz.1.2259': attribute type 1 has an invalid length. [ 299.823295][T14136] bond6: (slave ip6gretap1): making interface the new active one [ 299.831838][T14136] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 299.840572][T14136] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 299.848471][T14136] bond6: (slave ip6gretap1): Enslaving as an active interface with an up link [ 300.263627][ T5886] net_ratelimit: 5 callbacks suppressed [ 300.263648][ T5886] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 300.508879][T14174] tipc: Enabled bearer , priority 0 [ 300.517028][T14174] syzkaller0: entered promiscuous mode [ 300.523156][T14174] syzkaller0: entered allmulticast mode [ 300.581279][T14174] tipc: Resetting bearer [ 300.840816][T14190] netlink: 'syz.3.2270': attribute type 11 has an invalid length. [ 300.870752][T14180] sit0: left promiscuous mode [ 300.961343][T14180] wg1: left promiscuous mode [ 300.966424][T14180] wg1: left allmulticast mode [ 301.107910][T14180] gretap1: left promiscuous mode [ 301.115891][T14180] A link change request failed with some changes committed already. Interface gretap1 may have been left with an inconsistent configuration, please check. [ 301.134291][T14182] netlink: 'syz.3.2270': attribute type 3 has an invalid length. [ 301.191976][T14173] tipc: Resetting bearer [ 301.292694][T14173] tipc: Disabling bearer [ 301.304379][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 301.363248][T14215] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 301.371459][T12410] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.390021][T12410] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.401910][T12410] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.421014][T12410] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.681174][T14240] netlink: 'syz.2.2285': attribute type 1 has an invalid length. [ 301.700479][T14240] __nla_validate_parse: 6 callbacks suppressed [ 301.700499][T14240] netlink: 212 bytes leftover after parsing attributes in process `syz.2.2285'. [ 301.729455][T14240] netlink: 5 bytes leftover after parsing attributes in process `syz.2.2285'. [ 301.771030][T14241] netlink: 'syz.2.2285': attribute type 1 has an invalid length. [ 301.778827][T14241] netlink: 212 bytes leftover after parsing attributes in process `syz.2.2285'. [ 301.805857][T14241] netlink: 5 bytes leftover after parsing attributes in process `syz.2.2285'. [ 301.823629][T14240] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2285'. [ 302.129701][T14273] tipc: Enabling of bearer rejected, failed to enable media [ 302.145944][T14276] netlink: 'syz.3.2290': attribute type 58 has an invalid length. [ 302.154509][T14276] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2290'. [ 302.204072][T14273] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2292'. [ 302.219222][T14273] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 302.340319][T14199] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 302.357398][T14281] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2294'. [ 302.370202][T14281] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2294'. [ 302.379739][T14281] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2294'. [ 302.431620][T14288] tipc: Enabled bearer , priority 0 [ 302.451888][T14288] tipc: Resetting bearer [ 302.476126][T14286] tipc: Disabling bearer [ 302.579875][T12410] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 302.626430][T14302] netlink: 'syz.2.2299': attribute type 83 has an invalid length. [ 302.712636][T14305] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 303.382661][T14200] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 303.428870][T14348] syzkaller0: entered promiscuous mode [ 303.436747][T14348] syzkaller0: entered allmulticast mode [ 303.490689][T14355] netlink: 'syz.0.2313': attribute type 7 has an invalid length. [ 303.567945][T14360] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 303.591240][T14360] : entered promiscuous mode [ 303.654770][T14362] tipc: Enabled bearer , priority 0 [ 303.663357][T14362] syzkaller0: entered promiscuous mode [ 303.676057][T14362] syzkaller0: entered allmulticast mode [ 303.695978][T14361] tipc: Resetting bearer [ 303.712972][T14361] tipc: Disabling bearer [ 303.887594][T14378] xt_TPROXY: Can be used only with -p tcp or -p udp [ 304.241506][T14397] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 304.581604][T12411] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 305.043319][T14437] netlink: 'syz.3.2338': attribute type 20 has an invalid length. [ 305.077462][ T49] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 305.086698][T14437] netlink: 'syz.3.2338': attribute type 20 has an invalid length. [ 305.095030][ T49] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 305.106368][ T49] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 305.118504][ T49] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 305.224380][T14445] netlink: 'syz.1.2342': attribute type 2 has an invalid length. [ 305.556699][T14465] bridge0: port 1(bridge_slave_0) entered disabled state [ 305.586604][T14465] bridge0: port 2(bridge_slave_1) entered disabled state [ 305.779907][T14200] net_ratelimit: 4 callbacks suppressed [ 305.779930][T14200] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 305.936494][T14482] netlink: 'syz.1.2353': attribute type 2 has an invalid length. [ 306.418227][T14520] gtp2: entered promiscuous mode [ 306.437481][T14520] gtp2: entered allmulticast mode [ 306.499684][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 306.782437][T14557] __nla_validate_parse: 33 callbacks suppressed [ 306.782461][T14557] netlink: 100 bytes leftover after parsing attributes in process `syz.1.2371'. [ 306.964141][T14200] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 307.135989][T14571] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 307.147561][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 307.176021][T14571] netlink: 116 bytes leftover after parsing attributes in process `syz.1.2376'. [ 307.627635][T14604] bond0: entered allmulticast mode [ 307.635697][T14604] bond_slave_0: entered allmulticast mode [ 307.642127][T14604] bridge_slave_1: entered allmulticast mode [ 307.761904][T14610] netlink: 'syz.4.2386': attribute type 21 has an invalid length. [ 307.780091][T12415] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 307.788644][T14610] netlink: 'syz.4.2386': attribute type 22 has an invalid length. [ 307.809554][T14610] netlink: 'syz.4.2386': attribute type 23 has an invalid length. [ 307.840693][T14610] netlink: 'syz.4.2386': attribute type 25 has an invalid length. [ 307.854388][T14610] netlink: 96 bytes leftover after parsing attributes in process `syz.4.2386'. [ 307.882966][T14617] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2387'. [ 307.965119][T14620] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2385'. [ 308.021248][T14199] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 308.268410][T14638] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2390'. [ 308.286514][T14639] netlink: 'syz.2.2389': attribute type 3 has an invalid length. [ 308.302789][T14639] netlink: 766 bytes leftover after parsing attributes in process `syz.2.2389'. [ 308.373126][T14641] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2392'. [ 308.406904][T14630] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2390'. [ 308.582356][T14651] netlink: 18 bytes leftover after parsing attributes in process `syz.0.2394'. [ 308.862454][T14671] bond15: (slave vxcan1): The slave device specified does not support setting the MAC address [ 308.874386][T14671] bond15: (slave vxcan1): Error -95 calling set_mac_address [ 308.965385][T14663] macvlan4: entered promiscuous mode [ 308.978446][T14663] macvlan4: entered allmulticast mode [ 308.987643][T14663] bond15: (slave macvlan4): Error -98 calling set_mac_address [ 309.064078][T14200] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 309.277225][T14703] veth1_macvtap: left promiscuous mode [ 309.347022][T14703] macsec0: entered promiscuous mode [ 309.353046][T14703] macsec0: entered allmulticast mode [ 309.367414][T14708] veth1_macvtap: entered promiscuous mode [ 309.379676][T14708] veth1_macvtap: entered allmulticast mode [ 309.419643][T14708] macsec0: left promiscuous mode [ 309.424885][T14708] macsec0: left allmulticast mode [ 309.451544][T14708] veth1_macvtap: left allmulticast mode [ 309.467224][T14717] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 309.541952][T14722] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 309.551394][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 309.714221][T14737] netlink: 'syz.4.2413': attribute type 1 has an invalid length. [ 309.723400][T14732] macsec2: entered promiscuous mode [ 309.732551][T14732] macsec2: entered allmulticast mode [ 309.738889][T14732] bridge0: entered allmulticast mode [ 309.766296][T14732] bridge0: port 3(macsec2) entered blocking state [ 309.792250][T14732] bridge0: port 3(macsec2) entered disabled state [ 309.804316][T14732] bridge0: left allmulticast mode [ 309.884321][T14738] bond6: (slave ip6gretap1): making interface the new active one [ 309.893173][T14738] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 309.901886][T14738] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 309.910306][T14738] bond6: (slave ip6gretap1): Enslaving as an active interface with an up link [ 310.000302][T14751] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 310.189150][T14770] netlink: 'syz.0.2422': attribute type 3 has an invalid length. [ 310.643736][T14809] netlink: 'syz.0.2429': attribute type 5 has an invalid length. [ 310.758665][T14815] macsec1: entered promiscuous mode [ 311.001997][T14835] netlink: 'syz.1.2436': attribute type 21 has an invalid length. [ 311.037746][T14835] netlink: 'syz.1.2436': attribute type 4 has an invalid length. [ 311.053870][T14835] netlink: 'syz.1.2436': attribute type 5 has an invalid length. [ 311.090443][T14843] netlink: 'syz.1.2436': attribute type 21 has an invalid length. [ 311.112378][T14843] netlink: 'syz.1.2436': attribute type 4 has an invalid length. [ 311.124899][T14843] netlink: 'syz.1.2436': attribute type 5 has an invalid length. [ 311.141344][T14199] net_ratelimit: 2 callbacks suppressed [ 311.141365][T14199] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 311.214671][T14844] 8021q: adding VLAN 0 to HW filter on device bond5 [ 311.533122][T14871] netlink: 'syz.0.2449': attribute type 1 has an invalid length. [ 311.639075][T14877] bond16: (slave gretap5): making interface the new active one [ 311.648222][T14877] bond16: (slave gretap5): Enslaving as an active interface with an up link [ 311.772996][T14879] bridge0: port 2(bridge_slave_1) entered disabled state [ 311.804917][T14879] bridge_slave_1: left allmulticast mode [ 311.824484][T14879] bridge_slave_1: left promiscuous mode [ 311.833898][T14879] bridge0: port 2(bridge_slave_1) entered disabled state [ 311.853085][T14898] __nla_validate_parse: 21 callbacks suppressed [ 311.853106][T14898] netlink: 356 bytes leftover after parsing attributes in process `syz.4.2457'. [ 311.854773][T14879] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 311.995918][T14892] bond17: option packets_per_slave: mode dependency failed, not supported in mode active-backup(1) [ 312.022355][T14892] bond17 (unregistering): Released all slaves [ 312.180057][T14200] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 312.288625][T14917] netlink: 'syz.0.2462': attribute type 2 has an invalid length. [ 312.306650][T14917] netlink: 244 bytes leftover after parsing attributes in process `syz.0.2462'. [ 312.336893][T14912] syzkaller0: entered promiscuous mode [ 312.350211][T14912] syzkaller0: entered allmulticast mode [ 312.550407][T14933] netlink: 'syz.1.2464': attribute type 1 has an invalid length. [ 312.558287][T14933] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2464'. [ 312.677335][T14941] xt_ecn: cannot match TCP bits for non-tcp packets [ 312.827708][T14944] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2466'. [ 312.891450][T14948] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2466'. [ 312.901427][T12415] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 313.221736][T14199] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 314.203621][T14958] netlink: 'syz.2.2469': attribute type 18 has an invalid length. [ 314.260072][ T5886] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 314.333162][T14958] team0: Device gtp3 is of different type [ 314.593104][T14979] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2477'. [ 314.608118][T14975] syzkaller0: entered promiscuous mode [ 314.645806][T14975] syzkaller0: entered allmulticast mode [ 314.693842][T14987] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2480'. [ 314.733464][T14988] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 314.742180][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 314.868318][T14989] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2477'. [ 315.076030][T15003] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 315.085086][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 315.447958][T15023] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2488'. [ 315.498404][T15024] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2488'. [ 316.340150][T14199] net_ratelimit: 2 callbacks suppressed [ 316.340174][T14199] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 317.067338][T15033] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2488'. [ 317.076664][T15033] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2488'. [ 317.241787][T15058] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 317.388298][ T5886] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 317.397037][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.407133][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.476203][T15079] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2500'. [ 317.684411][T15091] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2503'. [ 317.853906][T15100] validate_nla: 1 callbacks suppressed [ 317.853926][T15100] netlink: 'syz.0.2505': attribute type 13 has an invalid length. [ 317.859601][T15098] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2506'. [ 317.917564][T15098] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2506'. [ 317.978165][T15100] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 318.130580][T15121] netlink: 'syz.4.2512': attribute type 1 has an invalid length. [ 318.161186][T15121] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2512'. [ 318.259617][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 318.270912][T15129] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2514'. [ 318.419970][ T5886] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 318.492898][T15132] netlink: 'syz.0.2516': attribute type 10 has an invalid length. [ 318.502238][T15132] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2516'. [ 318.521155][T15132] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 318.637616][T15158] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2521'. [ 318.662006][T15158] ip6_vti0: entered promiscuous mode [ 319.167035][T15184] ªªªªªªZ7nz>RAÌ: renamed from lo (while UP) [ 319.191498][T15183] tipc: Enabled bearer , priority 0 [ 319.205343][T15183] syzkaller0: entered promiscuous mode [ 319.216519][T15183] syzkaller0: entered allmulticast mode [ 319.431713][T15207] nft_compat: unsupported protocol 0 [ 319.463803][T15181] tipc: Resetting bearer [ 319.512708][T15181] tipc: Disabling bearer [ 319.869265][T15229] syzkaller1: entered promiscuous mode [ 319.876135][T15229] syzkaller1: entered allmulticast mode [ 321.018211][T15309] netlink: 'syz.1.2565': attribute type 1 has an invalid length. [ 321.104694][T15309] 8021q: adding VLAN 0 to HW filter on device bond7 [ 322.524760][T15310] __nla_validate_parse: 6 callbacks suppressed [ 322.524785][T15310] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2563'. [ 322.630791][T15320] openvswitch: netlink: Flow actions attr not present in new flow. [ 322.692954][T15324] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2567'. [ 322.709461][T15324] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2567'. [ 322.834164][T15329] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2570'. [ 322.857180][T15329] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2570'. [ 322.880307][T15329] bridge0: port 2(vlan2) entered blocking state [ 322.886922][T15329] bridge0: port 2(vlan2) entered disabled state [ 322.893919][T15329] vlan2: entered allmulticast mode [ 322.902880][T15329] bridge0: entered allmulticast mode [ 322.923321][T15329] vlan2: left allmulticast mode [ 322.931786][T15329] bridge0: left allmulticast mode [ 322.982154][T15333] syzkaller0: entered promiscuous mode [ 322.987811][T15333] syzkaller0: entered allmulticast mode [ 323.432411][T15362] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2580'. [ 323.459260][T15369] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2582'. [ 323.609039][T15374] tipc: Enabled bearer , priority 0 [ 323.628074][T15374] syzkaller0: entered promiscuous mode [ 323.638825][T15374] syzkaller0: entered allmulticast mode [ 323.779188][T15364] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2579'. [ 323.809202][T15375] tipc: Resetting bearer [ 323.841325][T15384] tipc: Enabled bearer , priority 0 [ 324.061641][T15373] tipc: Resetting bearer [ 324.083966][T15373] tipc: Disabling bearer [ 324.106748][T15381] tipc: Disabling bearer [ 324.136317][T15395] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2589'. [ 324.187249][T15398] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2590'. [ 324.609866][T15420] ieee802154 phy0 wpan0: encryption failed: -22 [ 324.903598][T15438] netlink: 'syz.4.2606': attribute type 29 has an invalid length. [ 324.923146][T15438] netlink: 'syz.4.2606': attribute type 29 has an invalid length. [ 324.945810][T15443] xt_time: unknown flags 0xf4 [ 325.226357][T15463] xt_hashlimit: size too large, truncated to 1048576 [ 325.511419][T15480] bridge0: port 1(vlan0) entered blocking state [ 325.518063][T15480] bridge0: port 1(vlan0) entered disabled state [ 325.524858][T15480] vlan0: entered allmulticast mode [ 325.533261][T15480] bridge0: entered allmulticast mode [ 325.545995][T15480] vlan0: left allmulticast mode [ 325.561401][T15480] bridge0: left allmulticast mode [ 325.660415][T15488] netlink: 'syz.3.2619': attribute type 1 has an invalid length. [ 325.741549][T15488] bond9: entered promiscuous mode [ 325.746910][T15488] bond9: entered allmulticast mode [ 325.752871][T15488] 8021q: adding VLAN 0 to HW filter on device bond9 [ 325.783029][T15492] macvlan0: entered promiscuous mode [ 325.788611][T15492] macvlan0: entered allmulticast mode [ 325.800349][T15492] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 326.812843][T15567] netlink: 'syz.4.2641': attribute type 18 has an invalid length. [ 326.860193][T15567] netlink: 'syz.4.2641': attribute type 18 has an invalid length. [ 327.428468][T15616] netlink: zone id is out of range [ 327.451003][T15616] netlink: set zone limit has 4 unknown bytes [ 327.612308][T15633] __nla_validate_parse: 13 callbacks suppressed [ 327.612330][T15633] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2659'. [ 327.740167][T15640] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 327.804130][T15647] xt_l2tp: missing protocol rule (udp|l2tpip) [ 327.885075][T15655] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2664'. [ 328.482224][T15686] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2673'. [ 328.520686][T15686] netlink: 'syz.2.2673': attribute type 11 has an invalid length. [ 328.529258][T15686] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2673'. [ 328.542201][T15686] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2673'. [ 328.548718][T15692] netlink: 'syz.4.2676': attribute type 2 has an invalid length. [ 328.553366][T15684] netlink: 'syz.0.2674': attribute type 1 has an invalid length. [ 328.576696][T15694] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2675'. [ 328.579487][T15693] netlink: 'syz.0.2674': attribute type 1 has an invalid length. [ 328.590311][T15692] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2676'. [ 328.619766][T15692] netlink: 'syz.4.2676': attribute type 2 has an invalid length. [ 328.638058][T15692] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2676'. [ 328.670594][T15694] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2675'. [ 328.709807][T15700] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2677'. [ 328.930612][T15710] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 328.966606][T15716] tipc: Enabled bearer , priority 0 [ 328.980938][T15715] syzkaller0: entered promiscuous mode [ 328.987537][T15715] syzkaller0: entered allmulticast mode [ 329.141123][T15723] syzkaller1: entered promiscuous mode [ 329.157005][T15723] syzkaller1: entered allmulticast mode [ 329.226565][T15715] tipc: Resetting bearer [ 329.266837][T15715] tipc: Disabling bearer [ 329.405017][T15743] tipc: Enabled bearer , priority 0 [ 329.413450][T15743] syzkaller0: entered allmulticast mode [ 329.427301][T15742] tipc: Disabling bearer [ 329.740710][T15764] team0: Device vti0 is of different type [ 329.888697][T15770] pim6reg1: entered promiscuous mode [ 329.906164][T15770] pim6reg1: entered allmulticast mode [ 330.248466][T15787] 8021q: adding VLAN 0 to HW filter on device bond0 [ 330.273763][T15787] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 330.323433][T15793] syzkaller0: entered promiscuous mode [ 330.330402][T15793] syzkaller0: entered allmulticast mode [ 330.479150][T15793] bond8: option min_links: invalid value (18446744073709551614) [ 330.496430][T15793] bond8: option min_links: allowed values 0 - 2147483647 [ 330.507015][T15793] bond8 (unregistering): Released all slaves [ 330.617957][T15810] netlink: 'syz.1.2700': attribute type 29 has an invalid length. [ 330.662297][T15817] netlink: 'syz.1.2700': attribute type 29 has an invalid length. [ 330.919237][T15828] A link change request failed with some changes committed already. Interface ªªªªªªZ7nz>RAÌ may have been left with an inconsistent configuration, please check. [ 330.965321][T15833] netlink: 'syz.1.2709': attribute type 1 has an invalid length. [ 331.052345][T15833] bond8 (unregistering): Released all slaves [ 331.107815][T15840] netlink: 'syz.4.2712': attribute type 21 has an invalid length. [ 331.462693][T15859] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 331.791463][T15884] netlink: 'syz.0.2724': attribute type 11 has an invalid length. [ 332.427637][T15914] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 332.443855][T15921] netlink: 'syz.0.2737': attribute type 1 has an invalid length. [ 332.564572][T15921] bond0: (slave bridge_slave_1): Releasing backup interface [ 332.577373][T15921] bridge_slave_1: left allmulticast mode [ 332.590583][T15921] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 332.767372][T15935] __nla_validate_parse: 14 callbacks suppressed [ 332.767393][T15935] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2741'. [ 332.860804][T15940] netlink: 'syz.4.2743': attribute type 1 has an invalid length. [ 333.143762][T15952] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2745'. [ 333.211317][T15952] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2745'. [ 333.579655][T15969] netlink: 192 bytes leftover after parsing attributes in process `syz.4.2751'. [ 333.673257][T15974] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2753'. [ 333.704361][T15976] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2752'. [ 333.714924][T15976] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2752'. [ 333.792953][T12415] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 333.802391][T12415] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 333.839408][T12415] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 333.848549][T12415] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 333.928712][T15981] bond8: entered promiscuous mode [ 333.934131][T15981] bond8: entered allmulticast mode [ 333.942243][T15981] 8021q: adding VLAN 0 to HW filter on device bond8 [ 333.979484][T15991] nbd: illegal input index 2958377 [ 334.114007][T16000] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2757'. [ 334.118382][T15999] vti0: entered promiscuous mode [ 334.487956][T16025] netlink: 380 bytes leftover after parsing attributes in process `syz.3.2764'. [ 334.675491][T16036] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2769'. [ 334.797314][T16043] ieee802154 phy0 wpan0: encryption failed: -90 [ 334.828588][T16043] ieee802154 phy0 wpan0: encryption failed: -90 [ 334.835263][T16043] ieee802154 phy0 wpan0: encryption failed: -90 [ 334.842282][T16043] ieee802154 phy0 wpan0: encryption failed: -90 [ 334.850576][T16043] ieee802154 phy0 wpan0: encryption failed: -90 [ 334.857578][T16043] ieee802154 phy0 wpan0: encryption failed: -90 [ 334.869716][T16043] ieee802154 phy0 wpan0: encryption failed: -90 [ 334.872486][T16041] bond10: entered allmulticast mode [ 334.876203][T16043] ieee802154 phy0 wpan0: encryption failed: -90 [ 334.888101][T16043] ieee802154 phy0 wpan0: encryption failed: -90 [ 334.894887][T16043] ieee802154 phy0 wpan0: encryption failed: -90 [ 334.897650][T16041] 8021q: adding VLAN 0 to HW filter on device bond10 [ 334.902149][T16043] ieee802154 phy0 wpan0: encryption failed: -90 [ 334.915738][T16043] ieee802154 phy0 wpan0: encryption failed: -90 [ 334.922348][T16043] ieee802154 phy0 wpan0: encryption failed: -90 [ 334.928787][T16043] ieee802154 phy0 wpan0: encryption failed: -90 [ 334.935853][T16043] ieee802154 phy0 wpan0: encryption failed: -90 [ 334.942380][T16043] ieee802154 phy0 wpan0: encryption failed: -90 [ 334.949058][T16043] ieee802154 phy0 wpan0: encryption failed: -90 [ 334.957050][T16043] ieee802154 phy0 wpan0: encryption failed: -90 [ 334.963898][T16043] ieee802154 phy0 wpan0: encryption failed: -90 [ 334.971268][T16043] ieee802154 phy0 wpan0: encryption failed: -90 [ 334.978018][T16043] ieee802154 phy0 wpan0: encryption failed: -90 [ 334.984815][T16043] ieee802154 phy0 wpan0: encryption failed: -90 [ 334.991826][T16043] ieee802154 phy0 wpan0: encryption failed: -90 [ 334.998415][T16043] ieee802154 phy0 wpan0: encryption failed: -90 [ 335.005099][T16043] ieee802154 phy0 wpan0: encryption failed: -90 [ 335.011945][T16043] ieee802154 phy0 wpan0: encryption failed: -90 [ 335.019992][T16043] ieee802154 phy0 wpan0: encryption failed: -90 [ 335.026508][T16043] ieee802154 phy0 wpan0: encryption failed: -90 [ 335.033657][T16043] ieee802154 phy0 wpan0: encryption failed: -90 [ 335.041428][T16043] ieee802154 phy0 wpan0: encryption failed: -90 [ 335.057880][T16054] bridge7: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 335.096227][T16043] ieee802154 phy0 wpan0: encryption failed: -90 [ 335.140683][T16043] ieee802154 phy0 wpan0: encryption failed: -90 [ 335.147310][T16043] ieee802154 phy0 wpan0: encryption failed: -90 [ 335.170174][T16055] syzkaller0: entered promiscuous mode [ 335.175767][T16055] syzkaller0: entered allmulticast mode [ 335.387481][T16070] netlink: 'syz.1.2776': attribute type 1 has an invalid length. [ 335.634235][T16066] bond8: (slave vxcan3): The slave device specified does not support setting the MAC address [ 335.709515][T16066] bond8: (slave vxcan3): Error -95 calling set_mac_address [ 336.461761][T16123] netlink: 'syz.2.2789': attribute type 2 has an invalid length. [ 336.803476][T16141] tipc: Enabling of bearer rejected, failed to enable media [ 336.995166][T16156] netlink: 'syz.0.2797': attribute type 18 has an invalid length. [ 337.020536][T16156] netlink: 'syz.0.2797': attribute type 18 has an invalid length. [ 337.057648][T16165] netlink: 'syz.1.2800': attribute type 2 has an invalid length. [ 337.313358][T16180] wg2: entered promiscuous mode [ 337.321124][T16180] wg2: entered allmulticast mode [ 337.341492][T16186] bond_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 337.578935][T16198] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 338.283010][ T5829] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 338.301784][ T5829] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 338.334102][T16221] __nla_validate_parse: 10 callbacks suppressed [ 338.334125][T16221] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2814'. [ 338.361893][ T5829] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 338.371250][ T5829] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 338.389768][ T5829] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 338.441955][ T5148] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 338.458200][ T5148] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 338.467975][ T5148] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 338.491970][ T5148] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 338.510919][ T5148] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 338.533682][T12415] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 338.811537][T12415] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 338.843601][T16230] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2817'. [ 338.862965][T16214] vxcan1 speed is unknown, defaulting to 1000 [ 338.931500][T12415] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 339.006497][T16232] syzkaller0: entered promiscuous mode [ 339.020512][T16232] syzkaller0: entered allmulticast mode [ 339.049953][T16235] openvswitch: netlink: Message has 8 unknown bytes. [ 339.061217][T16235] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 339.199824][T12415] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 339.599426][T16249] netlink: 'syz.2.2822': attribute type 1 has an invalid length. [ 339.689003][T16252] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 339.729971][T16251] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 339.814804][T16258] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2827'. [ 339.855358][T12415] bond6 (unregistering): (slave ip6gretap1): Releasing active interface [ 340.055941][T12415] bond3 (unregistering): (slave gretap1): Releasing active interface [ 340.065378][T12415] gretap1 (unregistering): left allmulticast mode [ 340.116942][T12415] dvmrp6 (unregistering): left allmulticast mode [ 340.580134][ T5829] Bluetooth: hci1: command tx timeout [ 340.607111][T12415]  (unregistering): Released all slaves [ 340.620790][T12415] bond1 (unregistering): Released all slaves [ 340.769792][T12415] bond2 (unregistering): Released all slaves [ 340.790190][T12415] bond3 (unregistering): Released all slaves [ 340.816160][T12415] bond4 (unregistering): Released all slaves [ 340.943362][T12415] bond5 (unregistering): Released all slaves [ 340.963505][T12415] bond0 (unregistering): Released all slaves [ 340.984995][T12415] bond6 (unregistering): Released all slaves [ 341.018212][T12415] bond7 (unregistering): Released all slaves [ 341.121301][T12415] bond8 (unregistering): Released all slaves [ 341.154392][T16273] netlink: 284 bytes leftover after parsing attributes in process `syz.0.2830'. [ 341.358610][T12415] : left promiscuous mode [ 341.494373][T12415] tipc: Left network mode [ 341.609735][T16286] syzkaller0: entered promiscuous mode [ 341.615362][T16286] syzkaller0: entered allmulticast mode [ 341.623389][T16214] chnl_net:caif_netlink_parms(): no params data found [ 341.636667][T16291] syzkaller0: entered promiscuous mode [ 341.643010][T16291] syzkaller0: entered allmulticast mode [ 342.659917][ T5829] Bluetooth: hci1: command tx timeout [ 343.093877][T16291] tipc: Enabled bearer , priority 0 [ 343.124026][T16299] tipc: Resetting bearer [ 343.162985][T16299] tipc: Disabling bearer [ 343.392474][T16313] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2839'. [ 343.425116][T16320] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 343.508270][T16325] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2841'. [ 343.518700][T16317] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2842'. [ 343.557832][T16330] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2844'. [ 343.613664][T16325] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 343.632705][T16214] bridge0: port 1(bridge_slave_0) entered blocking state [ 343.658265][T16214] bridge0: port 1(bridge_slave_0) entered disabled state [ 343.673596][T16214] bridge_slave_0: entered allmulticast mode [ 343.730350][T16214] bridge_slave_0: entered promiscuous mode [ 343.743431][T16214] bridge0: port 2(bridge_slave_1) entered blocking state [ 343.761045][T16336] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2845'. [ 343.762304][T16214] bridge0: port 2(bridge_slave_1) entered disabled state [ 343.778666][T16214] bridge_slave_1: entered allmulticast mode [ 343.788497][T16214] bridge_slave_1: entered promiscuous mode [ 343.828201][T16331] wg2: entered promiscuous mode [ 343.843389][T16331] wg2: entered allmulticast mode [ 344.088904][T12415] mac80211_hwsim hwsim10 wlan0 (unregistering): left promiscuous mode [ 344.102814][T16317] syz.2.2842 (16317) used greatest stack depth: 17832 bytes left [ 344.158864][T16352] netlink: 666 bytes leftover after parsing attributes in process `syz.1.2848'. [ 344.183367][T16214] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 344.205280][T16214] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 344.243183][T16356] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2849'. [ 344.327128][T16362] netlink: 'syz.3.2851': attribute type 1 has an invalid length. [ 344.410287][T16373] IPv6: sit4: Disabled Multicast RS [ 344.416982][T16373] sit4: entered allmulticast mode [ 344.462126][T16214] team0: Port device team_slave_0 added [ 344.567679][T16214] team0: Port device team_slave_1 added [ 344.700807][T16356] syzkaller0: entered promiscuous mode [ 344.706350][T16356] syzkaller0: entered allmulticast mode [ 344.740392][ T5829] Bluetooth: hci1: command tx timeout [ 344.742148][T16384] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.2856'. [ 344.769396][T12415] batadv_slave_0: left promiscuous mode [ 344.780985][T12415] hsr_slave_0: left promiscuous mode [ 344.787714][T12415] hsr_slave_1: left promiscuous mode [ 344.896309][T12415] pim6reg527 (unregistering): left allmulticast mode [ 345.962169][T12415] lo (unregistering): left allmulticast mode [ 345.984494][T16214] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 345.991790][T16214] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 346.018713][T16214] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 346.113337][T16214] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 346.121242][T16214] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 346.160784][T16214] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 346.212314][T16401] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2862'. [ 346.298584][T16406] netlink: 512 bytes leftover after parsing attributes in process `syz.3.2863'. [ 346.314129][T16409] netlink: 'syz.2.2866': attribute type 2 has an invalid length. [ 346.352917][T16214] hsr_slave_0: entered promiscuous mode [ 346.384987][T16214] hsr_slave_1: entered promiscuous mode [ 346.400503][T16214] debugfs: 'hsr0' already exists in 'hsr' [ 346.406303][T16214] Cannot create hsr debugfs directory [ 346.630651][T16433] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 346.643687][T16434] netlink: 'syz.2.2869': attribute type 1 has an invalid length. [ 346.661310][T16433] netlink: 'syz.2.2869': attribute type 1 has an invalid length. [ 346.757207][T12415] IPVS: stop unused estimator thread 0... [ 346.819619][ T5829] Bluetooth: hci1: command tx timeout [ 347.310192][T16470] openvswitch: netlink: IP tunnel dst address not specified [ 347.527221][T16481] x_tables: ip6_tables: NETMAP.0 target: invalid size 40 (kernel) != (user) 0 [ 347.542179][T16214] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 347.559749][T16214] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 347.580309][T16214] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 347.596234][T16214] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 347.797203][T16214] 8021q: adding VLAN 0 to HW filter on device bond0 [ 347.837931][T16214] 8021q: adding VLAN 0 to HW filter on device team0 [ 347.865172][T16499] bridge0: port 1(ipvlan2) entered blocking state [ 347.872254][T16499] bridge0: port 1(ipvlan2) entered disabled state [ 347.879014][T16499] ipvlan2: entered allmulticast mode [ 347.887037][T16499] bridge0: entered allmulticast mode [ 347.895684][T16499] ipvlan2: left allmulticast mode [ 347.901169][T16499] bridge0: left allmulticast mode [ 347.923211][T12414] bridge0: port 1(bridge_slave_0) entered blocking state [ 347.930587][T12414] bridge0: port 1(bridge_slave_0) entered forwarding state [ 347.954861][T16506] xt_hashlimit: invalid rate [ 347.962405][T12415] bridge0: port 2(bridge_slave_1) entered blocking state [ 347.969691][T12415] bridge0: port 2(bridge_slave_1) entered forwarding state [ 347.973755][T16506] netlink: 'syz.0.2891': attribute type 24 has an invalid length. [ 348.549229][T16527] __nla_validate_parse: 6 callbacks suppressed [ 348.549249][T16527] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2897'. [ 348.552659][T16214] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 348.572217][T16527] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2897'. [ 348.914108][T16214] veth0_vlan: entered promiscuous mode [ 348.927402][T16214] veth1_vlan: entered promiscuous mode [ 348.968238][T16214] veth0_macvtap: entered promiscuous mode [ 349.002462][T16214] veth1_macvtap: entered promiscuous mode [ 349.047354][T16214] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 349.072522][T16214] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 349.107165][T12410] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.117156][T12410] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.137175][ T1141] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.165676][ T1141] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.256507][ T1141] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 349.277266][ T1141] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 349.359063][T12409] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 349.389443][T12409] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 349.882109][T16582] bond0: (slave vetè0_virt_wifi): Releasing backup interface [ 349.932214][T16582] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 350.002455][T14206] vxcan1 speed is unknown, defaulting to 1000 [ 350.094590][T16587] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2912'. [ 350.202427][T16587] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2912'. [ 350.304071][T16592] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2914'. [ 350.341279][T16592] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2914'. [ 350.363868][T16592] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2914'. [ 350.401920][T16592] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2914'. [ 350.464025][ T5148] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 350.483084][ T5148] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 350.492095][ T5148] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 350.504653][ T5148] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 350.519619][ T5148] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 350.569735][T16601] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2917'. [ 350.578675][T16601] netlink: 'syz.2.2917': attribute type 22 has an invalid length. [ 350.646078][T16597] vxcan1 speed is unknown, defaulting to 1000 [ 350.654064][T16601] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2917'. [ 350.826006][T16601] netlink: 'syz.2.2917': attribute type 22 has an invalid length. [ 351.064886][T16627] dvmrp6: entered allmulticast mode [ 351.415831][T16654] tipc: Enabled bearer , priority 0 [ 351.424079][T16654] syzkaller0: entered promiscuous mode [ 351.429624][T16654] syzkaller0: entered allmulticast mode [ 351.473340][T16654] tipc: Resetting bearer [ 351.524294][T16652] tipc: Resetting bearer [ 351.587809][T16652] tipc: Disabling bearer [ 351.856499][T16597] chnl_net:caif_netlink_parms(): no params data found [ 352.036738][T16673] macvtap1: entered promiscuous mode [ 352.047069][T16673] macvtap1: entered allmulticast mode [ 352.094883][T16683] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 352.298254][T16597] bridge0: port 1(bridge_slave_0) entered blocking state [ 352.310028][T16597] bridge0: port 1(bridge_slave_0) entered disabled state [ 352.317343][T16597] bridge_slave_0: entered allmulticast mode [ 352.330846][T16597] bridge_slave_0: entered promiscuous mode [ 352.348665][T16687] netlink: 'syz.4.2939': attribute type 1 has an invalid length. [ 352.396947][T16597] bridge0: port 2(bridge_slave_1) entered blocking state [ 352.405941][T16597] bridge0: port 2(bridge_slave_1) entered disabled state [ 352.413343][T16597] bridge_slave_1: entered allmulticast mode [ 352.421728][T16597] bridge_slave_1: entered promiscuous mode [ 352.571976][T16597] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 352.579623][ T5829] Bluetooth: hci4: command tx timeout [ 352.605838][T16597] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 352.767871][T16597] team0: Port device team_slave_0 added [ 352.792149][T16597] team0: Port device team_slave_1 added [ 352.920968][T16725] bond0: (slave rose0): Error: Device can not be enslaved while up [ 352.938128][T16597] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 352.955927][T16597] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 352.983619][T16597] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 352.996801][T16597] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 353.006707][T16597] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 353.035685][T16597] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 353.087084][T16736] netlink: 'syz.2.2952': attribute type 2 has an invalid length. [ 353.236027][T16597] hsr_slave_0: entered promiscuous mode [ 353.237787][T16743] openvswitch: netlink: nsh attr 60 is out of range max 3 [ 353.254215][T16597] hsr_slave_1: entered promiscuous mode [ 353.260671][T16743] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 353.266129][T16597] debugfs: 'hsr0' already exists in 'hsr' [ 353.282594][T16597] Cannot create hsr debugfs directory [ 353.288839][T16741] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 353.866815][T16597] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 353.899685][T16597] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.060302][T16597] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 354.078189][T16597] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.152110][T16597] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 354.180737][T16597] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.279870][T16597] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 354.293506][T16597] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.314212][T16773] netlink: 'syz.1.2963': attribute type 1 has an invalid length. [ 354.335165][T16769] xt_hashlimit: size too large, truncated to 1048576 [ 354.662123][ T5829] Bluetooth: hci4: command tx timeout [ 354.927670][T16597] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 354.942729][T16597] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 354.956609][T16597] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 354.984810][T16597] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 354.996801][T16797] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 355.273495][T16597] 8021q: adding VLAN 0 to HW filter on device bond0 [ 355.353086][T16597] 8021q: adding VLAN 0 to HW filter on device team0 [ 355.393314][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 355.400563][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 355.488941][T12410] bridge0: port 2(bridge_slave_1) entered blocking state [ 355.496287][T12410] bridge0: port 2(bridge_slave_1) entered forwarding state [ 355.560637][T16827] dvmrp6: entered allmulticast mode [ 355.783781][T16837] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 355.854685][T16841] 8021q: adding VLAN 0 to HW filter on device bond11 [ 355.973926][T16850] Bluetooth: MGMT ver 1.23 [ 355.992421][T16850] sctp: [Deprecated]: syz.2.2985 (pid 16850) Use of int in maxseg socket option. [ 355.992421][T16850] Use struct sctp_assoc_value instead [ 356.027829][T16860] netlink: 'syz.1.2987': attribute type 11 has an invalid length. [ 356.163875][T16597] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 356.233869][T16867] netlink: 'syz.3.2988': attribute type 12 has an invalid length. [ 356.324362][T16597] veth0_vlan: entered promiscuous mode [ 356.367054][T16597] veth1_vlan: entered promiscuous mode [ 356.416558][T16873] __nla_validate_parse: 19 callbacks suppressed [ 356.416579][T16873] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2993'. [ 356.453407][T16876] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2991'. [ 356.499084][T16597] veth0_macvtap: entered promiscuous mode [ 356.547640][T16597] veth1_macvtap: entered promiscuous mode [ 356.609892][T16878] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 356.634274][T16878] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 356.649888][T16878] gretap1: entered promiscuous mode [ 356.655232][T16878] gretap1: entered allmulticast mode [ 356.664235][T16888] xt_addrtype: ipv6 does not support BROADCAST matching [ 356.702645][T16597] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 356.723690][T16889] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 356.742140][T16597] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 356.749521][ T5829] Bluetooth: hci4: command tx timeout [ 356.758045][T16889] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2996'. [ 356.888887][T12410] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.913380][T12410] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.934116][T12410] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.952879][T12410] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.960766][T16910] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3000'. [ 357.037733][T16910] syzkaller0: entered promiscuous mode [ 357.048029][T16910] syzkaller0: entered allmulticast mode [ 357.062441][T16910] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3000'. [ 357.162690][T12414] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 357.177839][T12414] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 357.267303][T12416] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 357.279534][T12416] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 357.435970][T16928] tipc: Started in network mode [ 357.444277][T16928] tipc: Node identity 5a2c8d880316, cluster identity 4711 [ 357.453291][T16928] tipc: Enabled bearer , priority 0 [ 357.476090][T16928] syzkaller0: entered promiscuous mode [ 357.482491][T16928] syzkaller0: entered allmulticast mode [ 357.576294][T16928] tipc: Resetting bearer [ 357.589570][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 357.598005][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 357.628056][T16927] tipc: Resetting bearer [ 357.773395][T16927] tipc: Disabling bearer [ 358.262200][T16956] netlink: 'syz.3.3013': attribute type 10 has an invalid length. [ 358.444792][T16961] bond1 (unregistering): Released all slaves [ 358.600630][T16956] veth0_virt_wifi: entered allmulticast mode [ 358.618774][ T5148] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 358.648605][ T5148] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 358.658763][ T5148] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 358.676892][ T5148] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 358.685425][ T5148] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 358.743407][T16975] vxcan1 speed is unknown, defaulting to 1000 [ 358.819619][ T5829] Bluetooth: hci4: command tx timeout [ 358.880412][T16978] tipc: Enabled bearer , priority 0 [ 358.993548][T16991] xt_CT: You must specify a L4 protocol and not use inversions on it [ 359.019589][T16978] syzkaller0: entered promiscuous mode [ 359.033860][T16978] syzkaller0: entered allmulticast mode [ 359.052290][T16978] tipc: Resetting bearer [ 359.062061][T16982] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3018'. [ 359.072035][T16982] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3018'. [ 359.081191][T16982] netlink: 'syz.3.3018': attribute type 3 has an invalid length. [ 359.110635][T16997] xt_CT: You must specify a L4 protocol and not use inversions on it [ 359.148444][T16977] tipc: Resetting bearer [ 359.246242][T17002] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3024'. [ 359.880219][T14200] tipc: Node number set to 1497009544 [ 360.654169][T16977] tipc: Disabling bearer [ 360.749570][ T5829] Bluetooth: hci3: command tx timeout [ 361.046710][T16975] chnl_net:caif_netlink_parms(): no params data found [ 361.117215][T17035] netlink: 7 bytes leftover after parsing attributes in process `syz.3.3031'. [ 361.231489][T17037] netlink: 'syz.4.3032': attribute type 1 has an invalid length. [ 361.239778][T17037] netlink: 'syz.4.3032': attribute type 2 has an invalid length. [ 361.370804][T17045] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3034'. [ 361.461817][T16975] bridge0: port 1(bridge_slave_0) entered blocking state [ 361.469036][T16975] bridge0: port 1(bridge_slave_0) entered disabled state [ 361.486209][T16975] bridge_slave_0: entered allmulticast mode [ 361.517357][T16975] bridge_slave_0: entered promiscuous mode [ 361.546216][T16975] bridge0: port 2(bridge_slave_1) entered blocking state [ 361.563413][T16975] bridge0: port 2(bridge_slave_1) entered disabled state [ 361.576726][T16975] bridge_slave_1: entered allmulticast mode [ 361.586327][T16975] bridge_slave_1: entered promiscuous mode [ 361.588245][T17059] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3037'. [ 361.701655][T16975] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 361.723580][T16975] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 361.815114][T17070] netlink: 'syz.2.3041': attribute type 10 has an invalid length. [ 361.817863][T16975] team0: Port device team_slave_0 added [ 361.841404][T16975] team0: Port device team_slave_1 added [ 361.884621][T17070] team0: Port device vetè0_virt_wifi added [ 361.898171][T17066] tipc: Enabled bearer , priority 0 [ 361.910225][T17072] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.3041'. [ 361.920499][T17072] ksmbd: Unknown IPC event: 1, ignore. [ 361.949980][T17074] syzkaller0: entered promiscuous mode [ 361.955563][T17074] syzkaller0: entered allmulticast mode [ 361.968883][T16975] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 361.978643][T16975] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 362.007569][T16975] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 362.019508][T17075] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3042'. [ 362.041687][T17075] netlink: 'syz.4.3042': attribute type 30 has an invalid length. [ 362.054551][T17066] tipc: Resetting bearer [ 362.070324][T16975] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 362.077411][T16975] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 362.104635][T16975] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 362.138451][T17064] tipc: Resetting bearer [ 362.187025][T17086] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3045'. [ 362.198480][T17064] tipc: Disabling bearer [ 362.222884][T12409] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 362.239986][T17088] netlink: 'syz.4.3046': attribute type 13 has an invalid length. [ 362.287540][T12409] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 362.355196][T12409] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 362.386242][T17091] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3048'. [ 362.410728][T17091] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3048'. [ 362.416709][T16975] hsr_slave_0: entered promiscuous mode [ 362.431841][T16975] hsr_slave_1: entered promiscuous mode [ 362.440523][T16975] debugfs: 'hsr0' already exists in 'hsr' [ 362.446309][T16975] Cannot create hsr debugfs directory [ 362.452676][T12409] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 362.462952][T17091] netlink: 'syz.2.3048': attribute type 4 has an invalid length. [ 362.513550][T17094] netlink: 'syz.2.3048': attribute type 4 has an invalid length. [ 362.772977][T17100] xt_CT: No such helper "syz1" [ 362.822817][ T5829] Bluetooth: hci3: command tx timeout [ 362.947813][T16975] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 362.971176][T16975] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 363.176156][T16975] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 363.187949][T16975] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 363.396056][T16975] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 363.421539][T16975] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 363.613357][T16975] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 363.660536][T16975] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 363.684043][T17154] netlink: 'syz.4.3068': attribute type 6 has an invalid length. [ 363.697944][T17150] mac80211_hwsim hwsim9 ÿ: renamed from wlan1 [ 363.713340][T17154] netlink: 'syz.4.3068': attribute type 6 has an invalid length. [ 363.743442][T17154] netlink: 120 bytes leftover after parsing attributes in process `syz.4.3068'. [ 363.853752][T17160] x_tables: duplicate entry at hook 2 [ 363.873604][T17160] erspan0: entered allmulticast mode [ 363.969501][T16975] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 363.984353][T17167] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3071'. [ 363.998866][T16975] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 364.132484][T17167] bond1 (unregistering): Released all slaves [ 364.233249][T16975] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 364.326504][T17181] bond1: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-xor(2) [ 364.344708][T17181] bond1 (unregistering): Released all slaves [ 364.374520][T16975] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 364.377890][T17190] netlink: zone id is out of range [ 364.386990][T17190] netlink: zone id is out of range [ 364.396862][T17190] netlink: zone id is out of range [ 364.402318][T17190] netlink: zone id is out of range [ 364.407924][T17190] netlink: zone id is out of range [ 364.418885][T17190] netlink: zone id is out of range [ 364.424180][T17190] netlink: zone id is out of range [ 364.437031][T17190] netlink: zone id is out of range [ 364.443131][T17190] netlink: zone id is out of range [ 364.448379][T17190] netlink: zone id is out of range [ 364.626519][T17207] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3079'. [ 364.628870][T17202] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3080'. [ 364.698341][T16975] 8021q: adding VLAN 0 to HW filter on device bond0 [ 364.745024][T16975] 8021q: adding VLAN 0 to HW filter on device team0 [ 364.780518][T12416] bridge0: port 1(bridge_slave_0) entered blocking state [ 364.787777][T12416] bridge0: port 1(bridge_slave_0) entered forwarding state [ 364.847708][T12416] bridge0: port 2(bridge_slave_1) entered blocking state [ 364.855076][T12416] bridge0: port 2(bridge_slave_1) entered forwarding state [ 364.909518][ T5829] Bluetooth: hci3: command tx timeout [ 365.444558][T16975] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 365.616766][T16975] veth0_vlan: entered promiscuous mode [ 365.630844][T17245] netlink: 'syz.3.3090': attribute type 3 has an invalid length. [ 365.661849][T16975] veth1_vlan: entered promiscuous mode [ 365.866102][T16975] veth0_macvtap: entered promiscuous mode [ 365.885891][T16975] veth1_macvtap: entered promiscuous mode [ 365.999658][T16975] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 366.062348][T17260] vlan3: entered promiscuous mode [ 366.077716][T17260] bridge0: entered promiscuous mode [ 366.137170][T16975] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 366.217029][T12410] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.241774][T12410] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.253090][T12410] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.289574][T12410] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.616736][T12410] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 366.641282][T12410] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 366.743627][T17285] ipt_REJECT: TCP_RESET invalid for non-tcp [ 366.776143][T12410] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 366.801896][T12410] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 366.851165][T17287] netlink: 'syz.3.3101': attribute type 2 has an invalid length. [ 366.853309][T17281] ipvlan18: entered promiscuous mode [ 366.979640][ T5829] Bluetooth: hci3: command tx timeout [ 366.982910][T17290] __nla_validate_parse: 10 callbacks suppressed [ 366.982927][T17290] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3103'. [ 367.003310][T17287] xt_SECMARK: invalid mode: 9 [ 367.067037][T17296] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3103'. [ 367.111083][T17297] netlink: 'syz.1.3006': attribute type 1 has an invalid length. [ 367.124423][T17294] ip6erspan0: entered promiscuous mode [ 367.125031][T17297] netlink: 'syz.1.3006': attribute type 3 has an invalid length. [ 367.141496][T17294] ip6erspan0: entered allmulticast mode [ 367.175258][T17297] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3006'. [ 367.418100][T17311] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3107'. [ 368.047660][ T5148] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 368.058819][ T5148] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 368.072407][ T5148] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 368.081764][ T5148] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 368.089833][ T5148] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 368.106669][T17333] macsec1: entered promiscuous mode [ 368.402309][T17345] ip6gre1: entered allmulticast mode [ 368.511771][T17336] vxcan1 speed is unknown, defaulting to 1000 [ 368.685600][T17362] x_tables: duplicate underflow at hook 2 [ 368.698778][T17362] x_tables: duplicate underflow at hook 2 [ 368.714153][T17362] x_tables: duplicate underflow at hook 2 [ 369.079669][T17344] infiniband !yz!: set active [ 369.087030][T17344] infiniband !yz!: added team_slave_0 [ 369.100772][T17344] !yz!: rxe_create_cq: returned err = -12 [ 369.107270][T17344] infiniband !yz!: Couldn't create ib_mad CQ [ 369.114346][T17344] infiniband !yz!: Couldn't open port 1 [ 369.149929][T17344] RDS/IB: !yz!: added [ 369.154068][T17344] smc: adding ib device !yz! with port count 1 [ 369.162638][T17344] smc: ib device !yz! port 1 has no pnetid [ 369.463677][T17336] chnl_net:caif_netlink_parms(): no params data found [ 369.707660][T17396] sctp: [Deprecated]: syz.0.3122 (pid 17396) Use of int in maxseg socket option. [ 369.707660][T17396] Use struct sctp_assoc_value instead [ 369.865317][T17336] bridge0: port 1(bridge_slave_0) entered blocking state [ 369.873739][T17336] bridge0: port 1(bridge_slave_0) entered disabled state [ 369.881223][T17336] bridge_slave_0: entered allmulticast mode [ 369.890784][T17336] bridge_slave_0: entered promiscuous mode [ 369.905118][T17336] bridge0: port 2(bridge_slave_1) entered blocking state [ 369.913327][T17336] bridge0: port 2(bridge_slave_1) entered disabled state [ 369.926361][T17336] bridge_slave_1: entered allmulticast mode [ 369.938189][T17336] bridge_slave_1: entered promiscuous mode [ 369.973438][T17411] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3125'. [ 370.078862][T17336] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 370.105115][T17336] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 370.134386][T17416] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3128'. [ 370.174122][T17336] team0: Port device team_slave_0 added [ 370.181605][ T5148] Bluetooth: hci5: command tx timeout [ 370.190428][T17416] net_ratelimit: 13 callbacks suppressed [ 370.190449][T17416] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 370.210166][T17336] team0: Port device team_slave_1 added [ 370.320096][T17336] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 370.333529][T17336] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 370.397044][T17336] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 370.426971][T17422] ip6t_srh: unknown srh invflags 4000 [ 370.441426][T17336] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 370.448543][T17336] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 370.475782][T17336] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 370.583950][T17336] hsr_slave_0: entered promiscuous mode [ 370.591619][T17336] hsr_slave_1: entered promiscuous mode [ 370.598590][T17336] debugfs: 'hsr0' already exists in 'hsr' [ 370.604802][T17336] Cannot create hsr debugfs directory [ 370.987695][T17336] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 370.999593][T17336] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 371.011707][T17336] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 371.041333][T17429] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3133'. [ 371.174456][T17336] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 371.185213][T17336] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 371.196090][T17336] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 371.361694][T17336] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 371.379371][T17336] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 371.409404][T17336] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 371.602285][T17336] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 371.618368][T17336] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 371.644382][T17336] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 371.710149][T17450] vlan4: entered promiscuous mode [ 371.715503][T17450] vlan4: entered allmulticast mode [ 371.736246][T17450] hsr_slave_1: entered allmulticast mode [ 371.991471][T17465] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3142'. [ 372.071212][T17472] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3143'. [ 372.142702][T17336] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 372.175555][T17336] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 372.259690][ T5148] Bluetooth: hci5: command tx timeout [ 372.263823][T17336] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 372.313984][T17480] sch_fq: defrate 0 ignored. [ 372.326709][T17481] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.3145'. [ 372.340169][T17336] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 372.390174][T17481] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3145'. [ 372.456916][T17485] ip6gre2: entered allmulticast mode [ 372.716074][T17336] 8021q: adding VLAN 0 to HW filter on device bond0 [ 372.734374][T14202] IPVS: starting estimator thread 0... [ 372.788903][T17336] 8021q: adding VLAN 0 to HW filter on device team0 [ 372.820885][T12410] bridge0: port 1(bridge_slave_0) entered blocking state [ 372.828091][T12410] bridge0: port 1(bridge_slave_0) entered forwarding state [ 372.840227][T17504] IPVS: using max 23 ests per chain, 55200 per kthread [ 372.892651][T12410] bridge0: port 2(bridge_slave_1) entered blocking state [ 372.893296][T17508] netlink: 148 bytes leftover after parsing attributes in process `syz.0.3152'. [ 372.899892][T12410] bridge0: port 2(bridge_slave_1) entered forwarding state [ 373.030481][T17513] netlink: 108 bytes leftover after parsing attributes in process `syz.2.3154'. [ 373.089652][T17515] netlink: 108 bytes leftover after parsing attributes in process `syz.2.3154'. [ 373.183223][T17518] netlink: 5 bytes leftover after parsing attributes in process `syz.0.3155'. [ 373.192505][T17518] openvswitch: netlink: Tunnel attr 15060 out of range max 16 [ 373.505610][T17533] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3160'. [ 373.512410][T17336] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 373.543672][T17533] xfrm1: entered promiscuous mode [ 373.549209][T17533] xfrm1: entered allmulticast mode [ 373.557648][T17533] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3160'. [ 373.695360][T17336] veth0_vlan: entered promiscuous mode [ 373.733415][T17336] veth1_vlan: entered promiscuous mode [ 373.922832][T17336] veth0_macvtap: entered promiscuous mode [ 373.944970][T17336] veth1_macvtap: entered promiscuous mode [ 374.000689][T17551] A link change request failed with some changes committed already. Interface ªªªªªªZ7nz>RAÌ may have been left with an inconsistent configuration, please check. [ 374.045047][T17551] netlink: 'syz.2.3168': attribute type 1 has an invalid length. [ 374.051327][T17336] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 374.095630][T17336] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 374.184552][T12416] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.233222][T12416] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.252109][T12416] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.288648][T12416] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.341077][ T5148] Bluetooth: hci5: command tx timeout [ 374.506545][T12411] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 374.531042][T12411] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 374.637326][T12411] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 374.653943][T12411] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 374.765289][T17584] syzkaller1: entered promiscuous mode [ 374.781558][T17584] syzkaller1: entered allmulticast mode [ 375.047158][T17596] xt_hashlimit: size too large, truncated to 1048576 [ 375.194135][T14200] IPVS: starting estimator thread 0... [ 375.321249][T17610] IPVS: using max 25 ests per chain, 60000 per kthread [ 375.332400][T17614] netlink: 'syz.4.3185': attribute type 39 has an invalid length. [ 376.109103][T17636] x_tables: duplicate underflow at hook 2 [ 376.116370][ T5829] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 376.128925][ T5829] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 376.141740][ T5829] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 376.160322][ T5829] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 376.169207][ T5829] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 376.224140][T17635] vxcan1 speed is unknown, defaulting to 1000 [ 376.420001][ T5829] Bluetooth: hci5: command tx timeout [ 376.930842][T17671] openvswitch: netlink: Flow actions attr not present in new flow. [ 376.999778][T17662] bridge0: port 2(bridge_slave_1) entered disabled state [ 377.019848][T17662] bridge_slave_1: left allmulticast mode [ 377.025572][T17662] bridge_slave_1: left promiscuous mode [ 377.044926][T17674] __nla_validate_parse: 5 callbacks suppressed [ 377.044945][T17674] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3202'. [ 377.071121][T17662] bridge0: port 2(bridge_slave_1) entered disabled state [ 377.098984][T17662] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 377.261275][T17680] netlink: 'syz.3.3203': attribute type 4 has an invalid length. [ 377.472337][T17689] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3207'. [ 377.555694][T17698] nftables ruleset with unbound set [ 377.652576][T17693] bond1: option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 377.675232][T17693] bond1 (unregistering): Released all slaves [ 377.765518][T17691] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 377.978158][T17703] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 378.156623][T17723] syzkaller0: entered promiscuous mode [ 378.162419][T17723] syzkaller0: entered allmulticast mode [ 378.205426][T17635] chnl_net:caif_netlink_parms(): no params data found [ 378.259562][ T5829] Bluetooth: hci0: command tx timeout [ 378.455906][T17635] bridge0: port 1(bridge_slave_0) entered blocking state [ 378.465631][T17635] bridge0: port 1(bridge_slave_0) entered disabled state [ 378.475925][T17635] bridge_slave_0: entered allmulticast mode [ 378.490844][T17635] bridge_slave_0: entered promiscuous mode [ 378.566877][T17635] bridge0: port 2(bridge_slave_1) entered blocking state [ 378.577174][T17635] bridge0: port 2(bridge_slave_1) entered disabled state [ 378.585240][T17635] bridge_slave_1: entered allmulticast mode [ 378.593973][T17635] bridge_slave_1: entered promiscuous mode [ 378.723781][T17635] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 378.755531][T17635] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 378.780660][T17744] netlink: 'syz.4.3222': attribute type 1 has an invalid length. [ 378.833871][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.840633][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.971604][T17747] 8021q: adding VLAN 0 to HW filter on device bond2 [ 378.983384][T17747] bond1: (slave bond2): making interface the new active one [ 378.992219][T17747] bond1: (slave bond2): Enslaving as an active interface with an up link [ 379.005850][T17635] team0: Port device team_slave_0 added [ 379.073237][T17635] team0: Port device team_slave_1 added [ 379.090154][T17752] tipc: Started in network mode [ 379.099407][T17752] tipc: Node identity a228eed18d98, cluster identity 4711 [ 379.122427][T17752] tipc: Enabled bearer , priority 0 [ 379.165594][T17765] netlink: 'syz.4.3229': attribute type 2 has an invalid length. [ 379.186006][T17749] SET target dimension over the limit! [ 379.222739][T17770] netlink: 'syz.4.3229': attribute type 10 has an invalid length. [ 379.263298][T17749] syzkaller0: entered promiscuous mode [ 379.269208][T17749] syzkaller0: entered allmulticast mode [ 379.276720][T17757] syzkaller0: entered promiscuous mode [ 379.283522][T17757] syzkaller0: entered allmulticast mode [ 379.343426][T17770] batadv0: entered allmulticast mode [ 379.362008][T17770] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 379.373567][T17770] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 380.243510][T14206] tipc: Node number set to 800124625 [ 381.056398][T17635] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 381.064597][T17635] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 381.091394][T17635] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 381.105498][T17635] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 381.115015][T17635] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 381.144181][T17635] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 381.167125][T17773] tipc: Resetting bearer [ 381.201728][T17751] tipc: Resetting bearer [ 381.270191][T17787] Bluetooth: MGMT ver 1.23 [ 381.271721][T17751] tipc: Disabling bearer [ 381.293123][T17786] netlink: 'syz.0.3233': attribute type 16 has an invalid length. [ 381.322162][T17786] netlink: 'syz.0.3233': attribute type 17 has an invalid length. [ 381.403173][T17786] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 381.572992][T17635] hsr_slave_0: entered promiscuous mode [ 381.603073][T17635] hsr_slave_1: entered promiscuous mode [ 381.616907][T17635] debugfs: 'hsr0' already exists in 'hsr' [ 381.629795][T17635] Cannot create hsr debugfs directory [ 381.687408][T17807] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3238'. [ 381.845436][T17807] netlink: 212304 bytes leftover after parsing attributes in process `syz.0.3238'. [ 381.856249][T17807] openvswitch: netlink: Message has 5 unknown bytes. [ 381.896152][T17822] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3242'. [ 381.960232][T17827] netlink: 'syz.1.3243': attribute type 1 has an invalid length. [ 381.985405][T17827] netlink: 'syz.1.3243': attribute type 2 has an invalid length. [ 382.235743][T17846] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3249'. [ 382.253442][T17635] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 382.267127][T17635] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.277839][T17635] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 382.454663][T17635] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 382.480945][T17635] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.495007][T17635] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 382.621567][T17857] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3251'. [ 382.657511][T17635] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 382.676771][T17635] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.701475][T17635] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 382.742870][T17870] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3254'. [ 382.757999][T17869] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 382.768545][T17868] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 382.895699][T17635] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 382.904610][T17882] netlink: 'syz.4.3258': attribute type 1 has an invalid length. [ 382.907506][T17635] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.930143][T17635] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 383.067302][T17882] 8021q: adding VLAN 0 to HW filter on device bond3 [ 383.153903][T17883] bond3: (slave veth3): Enslaving as an active interface with a down link [ 383.192317][T17889] bond3: (slave veth5): Enslaving as an active interface with a down link [ 383.255295][T17905] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3260'. [ 383.584132][T17918] netlink: 'syz.3.3266': attribute type 29 has an invalid length. [ 383.618614][T17918] netlink: 'syz.3.3266': attribute type 29 has an invalid length. [ 383.648979][T17918] netlink: 'syz.3.3266': attribute type 29 has an invalid length. [ 383.754949][T17635] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 383.778937][T17928] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3268'. [ 383.803505][T17924] bond0: entered promiscuous mode [ 383.808689][T17924] bond_slave_0: entered promiscuous mode [ 383.829852][T17924] bond_slave_1: entered promiscuous mode [ 383.860385][T17924] batadv0: entered promiscuous mode [ 383.868791][T17924] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 383.885363][T17926] 8021q: VLANs not supported on caif0 [ 383.891157][T17635] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 383.957453][T17635] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 384.028235][T17635] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 384.152686][T17962] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3273'. [ 384.324728][T17970] validate_nla: 1 callbacks suppressed [ 384.324749][T17970] netlink: 'syz.1.3277': attribute type 58 has an invalid length. [ 384.343928][T17635] 8021q: adding VLAN 0 to HW filter on device bond0 [ 384.369562][T17970] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3277'. [ 384.488711][T17635] 8021q: adding VLAN 0 to HW filter on device team0 [ 384.510274][T12414] bridge0: port 1(bridge_slave_0) entered blocking state [ 384.517480][T12414] bridge0: port 1(bridge_slave_0) entered forwarding state [ 384.603091][T12414] bridge0: port 2(bridge_slave_1) entered blocking state [ 384.610346][T12414] bridge0: port 2(bridge_slave_1) entered forwarding state [ 384.826549][T17991] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3285'. [ 385.186489][T18015] openvswitch: netlink: Duplicate or invalid key (type 0). [ 385.195390][T18013] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3291'. [ 385.201742][T18015] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 385.214510][T17635] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 385.364864][T17635] veth0_vlan: entered promiscuous mode [ 385.394867][T17635] veth1_vlan: entered promiscuous mode [ 385.616412][T17635] veth0_macvtap: entered promiscuous mode [ 385.637605][T17635] veth1_macvtap: entered promiscuous mode [ 385.706642][T17635] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 386.024635][T18053] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3302'. [ 386.047140][T18053] openvswitch: netlink: Key type 31 is not supported [ 387.534246][T17635] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 387.571895][T18065] bridge_slave_0: left allmulticast mode [ 387.577701][T18065] bridge_slave_0: left promiscuous mode [ 387.584278][T18065] bridge0: port 1(bridge_slave_0) entered disabled state [ 387.605290][T18065] bridge_slave_1: left allmulticast mode [ 387.611502][T18065] bridge_slave_1: left promiscuous mode [ 387.617476][T18065] bridge0: port 2(bridge_slave_1) entered disabled state [ 387.632796][T18065] bond0: (slave bond_slave_0): Releasing backup interface [ 387.653794][T18065] bond0: (slave bond_slave_1): Releasing backup interface [ 387.697866][T18065] team0: Port device team_slave_0 removed [ 387.719131][T18065] team0: Port device team_slave_1 removed [ 387.725702][T18065] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 387.733613][T18065] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 387.742443][T18065] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 387.750056][T18065] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 387.760347][T18065] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 387.895300][T12414] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.915961][T12414] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.944292][T12414] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.975580][T18082] netdevsim netdevsim3: Direct firmware load for ..€ failed with error -2 [ 388.009970][T18082] netdevsim netdevsim3: Falling back to sysfs fallback for: ..€ [ 388.012956][T12414] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.028379][T18088] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3313'. [ 388.065149][T18089] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input5 [ 388.204468][ T1141] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 388.216724][ T1141] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 388.320737][T18102] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 388.333676][T12409] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 388.350814][T12409] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 388.527109][T18114] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3321'. [ 388.565890][T18112] tipc: Started in network mode [ 388.571455][T18112] tipc: Node identity 8e28c9db8e8b, cluster identity 4711 [ 388.583925][T18112] tipc: Enabled bearer , priority 0 [ 388.623737][T18112] syzkaller0: entered promiscuous mode [ 388.629473][T18112] syzkaller0: entered allmulticast mode [ 388.642790][T18119] netlink: 'syz.0.3323': attribute type 10 has an invalid length. [ 388.647070][T18112] tipc: Resetting bearer [ 388.665561][T18111] tipc: Resetting bearer [ 388.681400][T18111] tipc: Disabling bearer [ 388.698886][T18121] netlink: 'syz.4.3322': attribute type 29 has an invalid length. [ 388.708050][T18121] netlink: 'syz.4.3322': attribute type 29 has an invalid length. [ 388.725777][T18121] netlink: 'syz.4.3322': attribute type 4 has an invalid length. [ 389.043980][T18140] netdevsim netdevsim1: Firmware load for '..' refused, path contains '..' component [ 389.204990][T18144] netlink: 'syz.2.3329': attribute type 7 has an invalid length. [ 389.222382][T18149] tipc: Enabling of bearer rejected, failed to enable media [ 389.235593][T18144] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3329'. [ 389.315499][T18156] netlink: 51 bytes leftover after parsing attributes in process `syz.1.3332'. [ 389.958405][T18181] netlink: 'syz.1.3338': attribute type 1 has an invalid length. [ 390.025050][T18182] netlink: 'syz.0.3339': attribute type 6 has an invalid length. [ 390.071251][T18181] bond1: entered promiscuous mode [ 390.076948][T18181] 8021q: adding VLAN 0 to HW filter on device bond1 [ 390.126758][T18181] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3338'. [ 390.148868][T18186] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 390.149350][T18181] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3338'. [ 390.229869][T18192] Can't find ip_set type bitmapVip [ 390.344833][T18202] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 390.539683][T18200] ipvlan0: mtu less than device minimum [ 391.097783][T18228] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3348'. [ 391.167013][T14206] IPVS: starting estimator thread 0... [ 391.279516][T18235] IPVS: using max 30 ests per chain, 72000 per kthread [ 391.288670][T18240] netlink: 'syz.0.3353': attribute type 33 has an invalid length. [ 391.322907][T18240] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3353'. [ 391.584956][T18254] tipc: Enabled bearer , priority 0 [ 391.598919][T18254] syzkaller0: entered promiscuous mode [ 391.608965][T18253] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3359'. [ 391.620751][T18254] syzkaller0: entered allmulticast mode [ 391.632576][T18258] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3356'. [ 392.319650][T18245] tipc: Resetting bearer [ 392.418037][T18245] tipc: Disabling bearer [ 392.615011][T18309] syzkaller0: entered promiscuous mode [ 392.622800][T18309] syzkaller0: entered allmulticast mode [ 392.665822][T18314] sch_tbf: peakrate 7 is lower than or equals to rate 2147483647 ! [ 393.443456][T18332] __nla_validate_parse: 2 callbacks suppressed [ 393.443476][T18332] netlink: 576 bytes leftover after parsing attributes in process `syz.4.3384'. [ 393.581008][T18323] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3382'. [ 393.812285][T18345] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3386'. [ 394.085694][T18359] vlan2: entered allmulticast mode [ 394.102820][T18364] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3392'. [ 394.342739][T18377] sctp: [Deprecated]: syz.2.3395 (pid 18377) Use of int in max_burst socket option. [ 394.342739][T18377] Use struct sctp_assoc_value instead [ 396.417104][T12414] syzkaller0: tun_net_xmit 76 [ 396.425377][T12414] syzkaller0: tun_net_xmit 48 [ 396.443693][T14200] syzkaller0: tun_net_xmit 76 [ 396.582921][T18403] netlink: 'syz.4.3405': attribute type 142 has an invalid length. [ 396.602748][T18404] netlink: 'syz.1.3404': attribute type 83 has an invalid length. [ 396.643139][T18407] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3406'. [ 396.709410][T18409] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3408'. [ 396.720678][T18409] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3408'. [ 396.767969][T18412] netlink: 'syz.4.3410': attribute type 1 has an invalid length. [ 396.776225][T18412] netlink: 'syz.4.3410': attribute type 1 has an invalid length. acpid: input device has been disconnected, fd 10 [ 397.135390][T18424] netlink: 'syz.1.3412': attribute type 1 has an invalid length. [ 397.144307][T18424] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3412'. [ 397.772206][T18435] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3413'. [ 398.705961][T18432] dvmrp1: entered allmulticast mode [ 398.911718][T18445] syzkaller0: entered promiscuous mode [ 398.927613][T18445] syzkaller0: entered allmulticast mode [ 398.972288][T18446] vxcan1 speed is unknown, defaulting to 1000 [ 399.446166][T18475] x_tables: unsorted underflow at hook 2 [ 399.553733][T18477] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3426'. [ 401.090072][T18479] veth1_macvtap: left promiscuous mode [ 401.099677][T18479] macsec0: entered promiscuous mode [ 401.364175][T18483] syzkaller0: entered promiscuous mode [ 401.378802][T18483] syzkaller0: entered allmulticast mode [ 401.434838][T18483] netlink: 'syz.3.3428': attribute type 3 has an invalid length. [ 401.476134][T18495] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3433'. [ 403.548345][T18520] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3438'. [ 403.745682][T18536] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3442'. [ 404.023218][T18545] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3444'. [ 404.358064][T18559] netlink: 'syz.0.3447': attribute type 4 has an invalid length. [ 404.407653][T18559] netlink: 17 bytes leftover after parsing attributes in process `syz.0.3447'. [ 404.693414][T18572] netlink: 96 bytes leftover after parsing attributes in process `syz.3.3450'. [ 404.740235][T18572] 8021q: VLANs not supported on gre0 [ 404.946376][T18586] x_tables: duplicate underflow at hook 1 [ 404.978568][T18584] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3455'. [ 405.096688][T18594] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3459'. [ 405.300896][T18611] sctp: [Deprecated]: syz.2.3461 (pid 18611) Use of int in maxseg socket option. [ 405.300896][T18611] Use struct sctp_assoc_value instead [ 405.403127][T18622] syzkaller0: entered promiscuous mode [ 405.408940][T18622] syzkaller0: entered allmulticast mode [ 405.487272][T18625] 0: reclassify loop, rule prio 0, protocol 800 [ 405.494585][T18625] netlink: 88 bytes leftover after parsing attributes in process `syz.3.3465'. [ 405.503645][T18625] netem: invalid attributes len -24 [ 406.344117][T18641] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 406.357955][T18641] netlink: 84 bytes leftover after parsing attributes in process `syz.0.3470'. [ 406.381380][T18644] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3472'. [ 406.470807][T18639] syzkaller0: entered promiscuous mode [ 406.476356][T18639] syzkaller0: entered allmulticast mode [ 407.322017][T18689] netlink: 'syz.1.3480': attribute type 10 has an invalid length. [ 407.391124][T18690] netlink: 'syz.1.3480': attribute type 10 has an invalid length. [ 408.694795][T18689] bond0: (slave geneve1): Enslaving as an active interface with an up link [ 409.219610][ T5148] Bluetooth: hci5: command 0x0405 tx timeout [ 409.355636][T18734] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3494'. [ 409.422698][T18739] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3497'. [ 409.432829][T18735] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 409.684277][T18750] can: request_module (can-proto-0) failed. [ 409.756726][T18749] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3498'. [ 409.821326][T18763] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3501'. [ 409.982828][T18766] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3503'. [ 410.072466][T18776] netlink: 'syz.0.3505': attribute type 1 has an invalid length. [ 410.134907][T18776] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3505'. [ 410.148045][T18776] bond1 (unregistering): Released all slaves [ 410.425124][T18794] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3510'. [ 410.461286][T18795] tipc: Started in network mode [ 410.466379][T18795] tipc: Node identity e0000002, cluster identity 4711 [ 410.473565][T18795] tipc: Enabling of bearer rejected, failed to enable media [ 410.668174][T18802] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not filter [ 410.680854][T18802] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3513'. [ 411.486347][T18824] netlink: 'syz.0.3519': attribute type 1 has an invalid length. [ 411.499217][T18824] netlink: 'syz.0.3519': attribute type 7 has an invalid length. [ 411.507428][T18824] netlink: 'syz.0.3519': attribute type 8 has an invalid length. [ 411.518356][T18824] netlink: 208 bytes leftover after parsing attributes in process `syz.0.3519'. [ 411.535280][T18824] NCSI netlink: No device for ifindex 65584 [ 411.880796][T18849] siw: device registration error -23 [ 412.007189][T18854] netlink: 'syz.1.3524': attribute type 1 has an invalid length. [ 412.221999][T18869] netlink: 'syz.0.3530': attribute type 10 has an invalid length. [ 412.267891][T18869] team0: Port device dummy0 added [ 412.347600][T18876] netlink: del zone limit has 4 unknown bytes [ 412.486008][T18876] netlink: 272 bytes leftover after parsing attributes in process `syz.1.3532'. [ 412.711326][T18891] tipc: Started in network mode [ 412.722289][T18893] netlink: 'syz.1.3538': attribute type 10 has an invalid length. [ 412.737747][T18891] tipc: Node identity aaaaaaaaaa3, cluster identity 4711 [ 412.739565][T18893] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3538'. [ 412.768115][T18891] tipc: Enabled bearer , priority 2 [ 413.002061][T18905] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3540'. [ 413.072709][T18905] syzkaller0: entered promiscuous mode [ 413.078256][T18905] syzkaller0: entered allmulticast mode [ 413.192975][T18916] netlink: 'syz.1.3545': attribute type 24 has an invalid length. [ 413.206163][T18905] netlink: 'syz.4.3540': attribute type 1 has an invalid length. [ 413.282908][T18905] 8021q: adding VLAN 0 to HW filter on device bond4 [ 413.291884][T18919] delete_channel: no stack [ 413.880424][ T24] tipc: Node number set to 10136234 [ 414.233511][ T30] audit: type=1800 audit(1762738833.489:2): pid=18946 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.3552" name="memory.events" dev="tmpfs" ino=506 res=0 errno=0 [ 414.471650][T18974] mac80211_hwsim hwsim27 wlan1: entered allmulticast mode [ 414.799822][T18991] netlink: 'syz.3.3567': attribute type 12 has an invalid length. [ 414.902233][T19007] openvswitch: netlink: IP tunnel dst address not specified [ 414.913304][T19008] __nla_validate_parse: 8 callbacks suppressed [ 414.913323][T19008] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3571'. [ 414.958938][T19000] bond2: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 415.001815][T19000] bond2 (unregistering): Released all slaves [ 415.052173][T19013] team0: Device ipvlan1 failed to register rx_handler [ 415.085698][T12415] nci: nci_rx_work: unknown MT 0x1 [ 415.214733][T19033] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3572'. [ 415.235400][T19035] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 415.737503][T19008] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3571'. [ 415.915729][T19043] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3580'. [ 416.005513][T19047] validate_nla: 1 callbacks suppressed [ 416.005532][T19047] netlink: 'syz.4.3581': attribute type 10 has an invalid length. [ 416.046833][T19047] bridge0: port 1(bridge_slave_0) entered disabled state [ 416.095283][T19047] bridge0: port 1(bridge_slave_0) entered blocking state [ 416.102632][T19047] bridge0: port 1(bridge_slave_0) entered forwarding state [ 416.127949][T19047] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 416.147007][T19053] bridge0: port 1(bridge_slave_0) entered disabled state [ 416.337531][T19065] syzkaller1: entered promiscuous mode [ 416.344359][T19065] syzkaller1: entered allmulticast mode [ 416.356673][T19065] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3587'. [ 416.477387][T19072] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3589'. [ 416.486966][T19072] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3589'. [ 416.680531][T19090] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3596'. [ 416.821016][T19096] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3598'. [ 416.832633][T19096] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3598'. [ 418.456722][T19177] syzkaller1: entered promiscuous mode [ 418.466380][T19177] syzkaller1: entered allmulticast mode [ 418.762820][T19190] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 418.945724][T19204] ipt_REJECT: ECHOREPLY no longer supported. [ 419.071851][T19206] netlink: 'syz.4.3630': attribute type 1 has an invalid length. [ 419.128451][T19206] 8021q: adding VLAN 0 to HW filter on device bond5 [ 419.327658][T19219] bond0: (slave rose0): Error: Device can not be enslaved while up [ 419.391486][T19219] veth9: entered promiscuous mode [ 419.423751][T19225] netlink: 'syz.2.3636': attribute type 6 has an invalid length. [ 419.506753][T19228] sctp: [Deprecated]: syz.0.3637 (pid 19228) Use of int in max_burst socket option deprecated. [ 419.506753][T19228] Use struct sctp_assoc_value instead [ 420.073665][T19260] __nla_validate_parse: 10 callbacks suppressed [ 420.073688][T19260] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3646'. [ 420.142452][T19269] "syz.4.3646" (19269) uses obsolete ecb(arc4) skcipher [ 420.599970][T19280] netlink: 'syz.0.3650': attribute type 1 has an invalid length. [ 420.611888][T19280] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3650'. [ 421.219430][T19316] netlink: 'syz.3.3664': attribute type 7 has an invalid length. [ 421.234262][T19317] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input6 [ 421.234956][T19316] netlink: 140 bytes leftover after parsing attributes in process `syz.3.3664'. [ 421.412955][T19316] syzkaller0: entered promiscuous mode [ 421.425713][T19316] syzkaller0: entered allmulticast mode [ 421.503683][T19335] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3666'. [ 421.729583][T19339] netlink: 'syz.4.3667': attribute type 83 has an invalid length. [ 423.360191][T19346] netlink: 220 bytes leftover after parsing attributes in process `syz.1.3669'. [ 423.443354][T19352] IPVS: set_ctl: invalid protocol: 2 100.1.1.1:20001 [ 423.527368][T19339] tipc: Disabling bearer [ 423.534932][T19355] SET target dimension over the limit! [ 423.769672][T19365] ip6t_srh: unknown srh match flags 5F28 [ 423.807861][T19370] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3676'. [ 423.829715][T19370] netlink: 'syz.4.3676': attribute type 7 has an invalid length. [ 423.837500][T19370] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3676'. [ 424.162297][T19394] netlink: 'syz.2.3683': attribute type 10 has an invalid length. [ 424.196570][T19381] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3678'. [ 424.205956][T19394] bridge0: port 3(team0) entered blocking state [ 424.217282][T19394] bridge0: port 3(team0) entered disabled state [ 424.229193][T19394] team0: entered allmulticast mode [ 424.237663][T19397] netlink: 212304 bytes leftover after parsing attributes in process `syz.2.3683'. [ 424.249510][T19394] team_slave_0: entered allmulticast mode [ 424.255307][T19394] team_slave_1: entered allmulticast mode [ 424.278854][T19397] openvswitch: netlink: Message has 6 unknown bytes. [ 424.308695][T19394] team0: entered promiscuous mode [ 424.329456][T19394] team_slave_0: entered promiscuous mode [ 424.363704][T19394] team_slave_1: entered promiscuous mode [ 424.378723][T19394] bridge0: port 3(team0) entered blocking state [ 424.385388][T19394] bridge0: port 3(team0) entered forwarding state [ 424.387556][T19407] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3687'. [ 424.594346][T19418] openvswitch: netlink: IP tunnel dst address not specified [ 424.880902][T19435] netlink: 'syz.0.3696': attribute type 21 has an invalid length. [ 424.931339][T19435] netlink: 'syz.0.3696': attribute type 4 has an invalid length. [ 424.960531][T19435] netlink: 'syz.0.3696': attribute type 5 has an invalid length. [ 425.257004][T19436] syzkaller0: entered promiscuous mode [ 425.272494][T19436] syzkaller0: entered allmulticast mode [ 425.656759][T19482] netlink: 'syz.1.3709': attribute type 32 has an invalid length. [ 425.671225][T19482] __nla_validate_parse: 4 callbacks suppressed [ 425.671245][T19482] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3709'. [ 425.755604][T19485] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3708'. [ 425.765228][T19485] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3708'. [ 425.775574][T19485] netlink: 50 bytes leftover after parsing attributes in process `syz.0.3708'. [ 427.330579][T19482] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 427.484207][T19491] netlink: 'syz.1.3710': attribute type 1 has an invalid length. [ 427.528053][T19491] netlink: 'syz.1.3710': attribute type 2 has an invalid length. [ 427.580405][T19495] bond1: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 427.623115][T19495] bond1 (unregistering): Released all slaves [ 427.655410][T19504] syzkaller0: entered promiscuous mode [ 427.664554][T19504] syzkaller0: entered allmulticast mode [ 427.681700][T19488] tipc: Enabled bearer , priority 0 [ 427.689173][T19503] netdevsim netdevsim0: Firmware load for './file0/../file0' refused, path contains '..' component [ 427.709176][T19498] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 427.765272][T19488] tipc: Resetting bearer [ 427.805303][T19488] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3712'. [ 427.858372][T19513] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 427.885222][T19513] tls_set_device_offload: netdev not found [ 427.891269][T19498] TCP: TCP_TX_DELAY enabled [ 427.906906][T19487] tipc: Resetting bearer [ 427.956307][T19487] tipc: Disabling bearer [ 427.961146][T19517] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 427.964846][T19516] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3719'. [ 427.987606][T19517] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3720'. [ 428.018317][T19517] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3720'. [ 428.044284][T19519] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3721'. [ 428.247882][T19533] netlink: 'syz.2.3724': attribute type 5 has an invalid length. [ 428.301542][T19536] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3727'. [ 428.924015][T19578] netlink: 'syz.4.3740': attribute type 6 has an invalid length. [ 428.940220][T19578] netlink: 'syz.4.3740': attribute type 6 has an invalid length. [ 428.961247][T19575] 0: reclassify loop, rule prio 0, protocol 800 [ 429.067967][T19584] syz_tun: entered allmulticast mode [ 429.086205][T19583] pimreg: entered allmulticast mode [ 429.208222][T19595] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_tx_wq": -EINTR [ 429.218337][T19584] syz_tun: left allmulticast mode [ 429.269212][T19601] x_tables: duplicate underflow at hook 2 [ 429.599723][T19567] delete_channel: no stack [ 430.894648][T19706] siw: device registration error -23 [ 431.294194][T19721] mac80211_hwsim hwsim27 ÿ: renamed from wlan1 [ 431.426204][T19734] syzkaller0: entered promiscuous mode [ 431.446199][T19734] syzkaller0: entered allmulticast mode [ 431.466968][T19733] __nla_validate_parse: 13 callbacks suppressed [ 431.466990][T19733] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3782'. [ 431.517053][T19739] netlink: 232 bytes leftover after parsing attributes in process `syz.4.3785'. [ 431.527499][T19738] netlink: 232 bytes leftover after parsing attributes in process `syz.4.3785'. [ 431.583286][T19738] netlink: 300 bytes leftover after parsing attributes in process `syz.4.3785'. [ 431.636984][T19740] netlink: 300 bytes leftover after parsing attributes in process `syz.4.3785'. [ 431.907069][T19757] syzkaller0: entered promiscuous mode [ 431.912786][T19757] syzkaller0: entered allmulticast mode [ 431.923887][T19757] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 431.969166][T19763] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3793'. [ 431.999530][T19763] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.3793'. [ 432.019540][T19763] ksmbd: Unknown IPC event: 1, ignore. [ 432.153688][T19775] xt_l2tp: invalid flags combination: 8 [ 432.164020][T19775] netlink: 'syz.3.3798': attribute type 142 has an invalid length. [ 432.178655][T19769] bond7 (unregistering): Released all slaves [ 432.267797][T19766] vxcan1 speed is unknown, defaulting to 1000 [ 432.568112][T19794] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3802'. [ 432.848206][T19800] vxcan1 speed is unknown, defaulting to 1000 [ 433.230789][ T5148] Bluetooth: hci5: link tx timeout [ 433.237438][ T5148] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 433.247200][ T5148] Bluetooth: hci5: link tx timeout [ 433.252663][ T5148] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 433.533893][T19846] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3814'. [ 433.972350][T19861] ipt_rpfilter: unknown options [ 434.180940][ T5148] Bluetooth: hci5: command 0x0405 tx timeout [ 434.193485][T19876] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3823'. [ 434.380784][T19873] syzkaller0: entered promiscuous mode [ 434.388761][T19873] syzkaller0: entered allmulticast mode [ 434.957319][T19904] x_tables: duplicate underflow at hook 2 [ 435.070515][T19911] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 435.518195][T19922] tipc: Enabled bearer , priority 0 [ 435.669174][T19922] tipc: Disabling bearer [ 435.781170][ T24] page_pool_release_retry() stalled pool shutdown: id 75, 2 inflight 60 sec [ 435.848770][T19933] veth1_to_bond: entered allmulticast mode [ 436.165566][T19945] vlan2: entered allmulticast mode [ 436.260460][ T5148] Bluetooth: hci5: command 0x0405 tx timeout [ 436.463511][T19959] º: renamed from macsec0 (while UP) [ 436.526923][T19964] syzkaller1: entered promiscuous mode [ 436.533221][T19964] syzkaller1: entered allmulticast mode [ 436.659140][T19969] netlink: 'syz.3.3849': attribute type 39 has an invalid length. [ 436.684774][T19973] netlink: 'syz.4.3851': attribute type 2 has an invalid length. [ 436.847121][T19978] vxcan1 speed is unknown, defaulting to 1000 [ 438.160083][T19999] netlink: 'syz.2.3860': attribute type 4 has an invalid length. [ 438.210633][T20007] __nla_validate_parse: 6 callbacks suppressed [ 438.210653][T20007] netlink: 208 bytes leftover after parsing attributes in process `syz.3.3861'. [ 438.703825][T20029] netlink: 'syz.2.3866': attribute type 13 has an invalid length. [ 438.729120][T20029] netlink: 'syz.2.3866': attribute type 17 has an invalid length. [ 438.902729][T20029] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 438.921400][T20028] syzkaller1: entered promiscuous mode [ 438.927399][T20028] syzkaller1: entered allmulticast mode [ 438.972325][T20040] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3871'. [ 439.045082][T20042] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3872'. [ 439.061339][T20042] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3872'. [ 439.071333][T20042] netlink: 'syz.0.3872': attribute type 83 has an invalid length. [ 439.162766][T20044] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 439.278619][T20048] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3874'. [ 439.287913][T20048] netlink: 'syz.3.3874': attribute type 11 has an invalid length. [ 439.309878][T12416] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 439.321412][T12416] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 439.330561][T20048] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3874'. [ 439.341135][T12416] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 439.346564][T20048] netlink: 'syz.3.3874': attribute type 11 has an invalid length. [ 439.350829][T20050] netlink: 'syz.0.3875': attribute type 4 has an invalid length. [ 439.394248][T12416] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 439.395680][T20050] netlink: 'syz.0.3875': attribute type 4 has an invalid length. [ 439.446554][T20054] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3876'. [ 439.457533][T20053] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3876'. [ 439.615869][T20064] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3878'. [ 439.669837][T20062] 8021q: adding VLAN 0 to HW filter on device bond7 [ 439.696786][T20065] syzkaller0: entered promiscuous mode [ 439.706402][T20065] syzkaller0: entered allmulticast mode [ 439.715746][T20062] tipc: Enabled bearer , priority 0 [ 439.773430][T20062] tipc: Resetting bearer [ 439.825818][T20062] tipc: Disabling bearer [ 439.946159][T20079] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3883'. [ 440.058665][T20085] x_tables: duplicate underflow at hook 2 [ 440.085215][T20085] xt_cgroup: invalid path, errno=-2 [ 440.268257][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.630721][T20125] xt_HMARK: proto mask must be zero with L3 mode [ 440.746597][T20126] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 441.006581][T20136] lo: entered promiscuous mode [ 441.017689][T20136] tunl0: entered promiscuous mode [ 441.030052][T20136] gre0: entered promiscuous mode [ 441.049961][T20136] gretap0: entered promiscuous mode [ 441.103168][T20136] erspan0: entered promiscuous mode [ 441.122562][T20136] ip_vti0: entered promiscuous mode [ 441.305131][T20155] sch_tbf: burst 8 is lower than device ip6tnl0 mtu (1452) ! [ 441.415575][T20159] tipc: Enabled bearer , priority 0 [ 441.424229][T20162] syzkaller0: entered promiscuous mode [ 441.430099][T20162] syzkaller0: entered allmulticast mode [ 441.601737][T20162] tipc: Resetting bearer [ 441.686394][T20162] tipc: Disabling bearer [ 442.140590][T20192] veth0: entered promiscuous mode [ 442.287411][T20185] veth0: left promiscuous mode [ 442.504389][ T5829] Bluetooth: hci5: command 0x0405 tx timeout [ 443.043740][T20234] bridge0: port 3(team0) entered disabled state [ 443.129456][T20234] team0 (unregistering): left allmulticast mode [ 443.152695][T20234] team_slave_0: left allmulticast mode [ 443.158241][T20234] team_slave_1: left allmulticast mode [ 443.160607][T20241] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 443.181558][T20234] team0 (unregistering): left promiscuous mode [ 443.199430][T20234] team_slave_0: left promiscuous mode [ 443.205231][T20234] team_slave_1: left promiscuous mode [ 443.215877][T20234] bridge0: port 3(team0) entered disabled state [ 443.259561][T20234] team0 (unregistering): Port device team_slave_0 removed [ 443.275438][T20234] team0 (unregistering): Port device team_slave_1 removed [ 443.525311][T20247] __nla_validate_parse: 8 callbacks suppressed [ 443.525332][T20247] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3930'. [ 443.569531][T20251] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3930'. [ 443.587465][T20246] xt_CT: No such helper "pptp" [ 443.847190][T20260] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3935'. [ 443.883302][T20263] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3936'. [ 443.930450][T20266] nbd: must specify at least one socket [ 444.199483][T20272] bond3: option resend_igmp: invalid value (32767) [ 444.206254][T20272] bond3: option resend_igmp: allowed values 0 - 255 [ 444.225421][T20272] bond3 (unregistering): Released all slaves [ 444.347412][T20272] validate_nla: 1 callbacks suppressed [ 444.347433][T20272] netlink: 'syz.1.3939': attribute type 9 has an invalid length. [ 444.386522][T20280] netlink: 11562 bytes leftover after parsing attributes in process `syz.1.3939'. [ 444.485251][T20289] netlink: 'syz.0.3946': attribute type 29 has an invalid length. [ 444.555737][T20289] netlink: 'syz.0.3946': attribute type 29 has an invalid length. [ 444.580347][T20289] netlink: 500 bytes leftover after parsing attributes in process `syz.0.3946'. [ 444.594126][T20293] lo: left promiscuous mode [ 444.598912][T20293] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 444.919994][T20316] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3953'. [ 445.006536][T20316] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3953'. [ 445.032387][ T49] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 445.055424][ T49] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 445.060405][ T5148] Bluetooth: hci5: command 0x0405 tx timeout [ 445.120391][T20323] netlink: 'syz.4.3956': attribute type 1 has an invalid length. [ 445.208060][ T49] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 445.244390][T20333] netlink: 'syz.1.3958': attribute type 1 has an invalid length. [ 445.268552][ T49] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 445.344931][T20342] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3959'. [ 445.375518][T20346] veth0: entered promiscuous mode [ 445.478932][T20349] netlink: 'syz.2.3962': attribute type 1 has an invalid length. [ 445.481352][T20345] veth0: left promiscuous mode [ 445.543300][T20354] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3962'. [ 445.592423][T20349] 8021q: adding VLAN 0 to HW filter on device bond1 [ 445.647284][T20349] veth3: entered promiscuous mode [ 445.656533][T20362] netlink: 'syz.4.3965': attribute type 32 has an invalid length. [ 445.678202][T20349] bond1: (slave veth3): Enslaving as an active interface with a down link [ 445.711279][T20362] bond8: option coupled_control: invalid value (52) [ 445.721438][T20362] bond8 (unregistering): Released all slaves [ 445.755043][T20369] netem: change failed [ 446.013470][T20383] x_tables: duplicate underflow at hook 2 [ 446.287959][T20405] netlink: 'syz.0.3978': attribute type 4 has an invalid length. [ 446.394813][T20410] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 446.424057][T20410] tipc: Enabled bearer , priority 10 [ 446.435071][T20410] netlink: 'syz.4.3981': attribute type 10 has an invalid length. [ 446.451424][T20415] xt_hashlimit: size too large, truncated to 1048576 [ 446.453333][T20410] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 446.515870][T20410] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 446.624418][T20429] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 2, id = 0 [ 446.667026][T20426] netlink: 'syz.0.3985': attribute type 20 has an invalid length. [ 446.705849][T12413] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 446.727232][T12413] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 446.754410][T12413] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 446.872425][T12413] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 447.139443][ T5148] Bluetooth: hci5: command 0x0405 tx timeout [ 447.577212][T20480] nbd: couldn't find device at index 61440 [ 447.656079][T20480] bond2 (unregistering): Released all slaves [ 448.273512][T20508] bond2 (unregistering): Released all slaves [ 448.595945][T20527] lo speed is unknown, defaulting to 1000 [ 448.613171][T20527] lo speed is unknown, defaulting to 1000 [ 448.630618][T20527] lo speed is unknown, defaulting to 1000 [ 448.882163][T20538] __nla_validate_parse: 21 callbacks suppressed [ 448.882181][T20538] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4012'. [ 449.098203][T20544] netlink: 'syz.4.4015': attribute type 11 has an invalid length. [ 449.113149][T20538] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 449.120965][T20538] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 449.157666][T20538] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 449.179854][T20538] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 449.240284][T20548] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4016'. [ 449.254956][T20538] batadv0 (unregistering): left promiscuous mode [ 449.262173][T20548] nbd: must specify at least one socket [ 449.403331][T20527] infiniband sz1: set active [ 449.408100][T20527] infiniband sz1: added lo [ 449.413261][T14202] lo speed is unknown, defaulting to 1000 [ 449.498325][T20527] RDS/IB: sz1: added [ 449.503525][T20527] smc: adding ib device sz1 with port count 1 [ 449.510100][T20527] smc: ib device sz1 port 1 has no pnetid [ 449.516345][T14202] lo speed is unknown, defaulting to 1000 [ 449.523600][T20527] lo speed is unknown, defaulting to 1000 [ 449.726936][T20563] netlink: 100 bytes leftover after parsing attributes in process `syz.1.4021'. [ 449.879599][T20570] netlink: 52 bytes leftover after parsing attributes in process `syz.0.4023'. [ 449.892963][T20570] bridge0: port 2(bridge_slave_1) entered disabled state [ 449.902848][T20570] bridge0: port 1(bridge_slave_0) entered disabled state [ 449.947474][T20573] xt_cgroup: invalid path, errno=-2 [ 450.085480][T20581] team0: Device wireguard0 is of different type [ 450.189581][T20527] lo speed is unknown, defaulting to 1000 [ 450.222896][T20579] vxcan1 speed is unknown, defaulting to 1000 [ 450.427893][T20597] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 450.476830][T20597] gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 450.509958][T20597] gretap2: entered promiscuous mode [ 450.515317][T20597] gretap2: entered allmulticast mode [ 450.523506][T20598] validate_nla: 2 callbacks suppressed [ 450.523524][T20598] netlink: 'syz.4.4030': attribute type 4 has an invalid length. [ 450.767229][T20585] vxcan1 speed is unknown, defaulting to 1000 [ 450.788170][T20605] netlink: 'syz.4.4032': attribute type 10 has an invalid length. [ 450.850702][T20527] lo speed is unknown, defaulting to 1000 [ 450.913690][T20607] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.4033'. [ 450.946144][T20609] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4034'. [ 451.030326][T20591] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 451.039480][T20591] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 451.243817][T20591] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 451.253714][T20618] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4036'. [ 451.263157][T20591] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 451.280956][T20591] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 451.303008][T20591] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 451.520486][T20591] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 451.539153][T20622] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 451.549329][T20591] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 451.647530][T20626] nbd: device at index 3 is going down acpid: input device has been disconnected, fd 3 [ 451.792476][T20287] ------------[ cut here ]------------ [ 451.798411][T20287] refcount_t: underflow; use-after-free. [ 451.804466][T20287] WARNING: CPU: 1 PID: 20287 at lib/refcount.c:28 refcount_warn_saturate+0x11a/0x1d0 [ 451.814244][T20287] Modules linked in: [ 451.818424][T20287] CPU: 1 UID: 0 PID: 20287 Comm: kbnepd bnep0 Not tainted syzkaller #0 PREEMPT(full) [ 451.828278][T20287] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 451.838669][T20287] RIP: 0010:refcount_warn_saturate+0x11a/0x1d0 [ 451.845125][T20287] Code: 40 58 be 8b e8 c7 a5 f9 fc 90 0f 0b 90 90 eb d7 e8 bb 8b 36 fd c6 05 9b 7f dd 0a 01 90 48 c7 c7 a0 58 be 8b e8 a7 a5 f9 fc 90 <0f> 0b 90 90 eb b7 e8 9b 8b 36 fd c6 05 78 7f dd 0a 01 90 48 c7 c7 [ 451.865635][T20287] RSP: 0018:ffffc900100cf6e0 EFLAGS: 00010246 [ 451.871739][T20287] RAX: 8210b9b7e1c9a500 RBX: 0000000000000003 RCX: ffff888023858000 [ 451.879898][T20287] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002 [ 451.887990][T20287] RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000004 [ 451.896422][T20287] R10: dffffc0000000000 R11: fffffbfff1bba680 R12: dffffc0000000000 [ 451.904698][T20287] R13: ffff88805acb9c60 R14: ffff88805acb9c78 R15: ffffffff85c657d0 [ 451.912700][T20287] FS: 0000000000000000(0000) GS:ffff88812623b000(0000) knlGS:0000000000000000 [ 451.921842][T20287] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 451.928539][T20287] CR2: 00007f2c19dca4e8 CR3: 000000007811e000 CR4: 00000000003526f0 [ 451.937074][T20287] Call Trace: [ 451.940584][T20287] [ 451.943525][T20287] klist_dec_and_del+0x3c7/0x3d0 [ 451.948478][T20287] ? __pfx_klist_children_put+0x10/0x10 [ 451.954316][T20287] klist_del+0xa6/0x110 [ 451.958576][T20287] device_del+0x280/0x8e0 [ 451.963053][T20287] ? _raw_spin_unlock_irq+0x2e/0x50 [ 451.968260][T20287] ? pm_runtime_set_memalloc_noio+0x1f4/0x260 [ 451.974387][T20287] ? __pfx_device_del+0x10/0x10 [ 451.979486][T20287] ? netdev_unregister_kobject+0x344/0x450 [ 451.985328][T20287] unregister_netdevice_many_notify+0x1df2/0x2390 [ 451.991954][T20287] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 451.998753][T20287] ? rtnl_net_dev_lock+0x257/0x2f0 [ 452.003963][T20287] unregister_netdevice_queue+0x33c/0x380 [ 452.010014][T20287] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 452.016284][T20287] ? rtnl_net_dev_lock+0x36/0x2f0 [ 452.021530][T20287] ? rtnl_net_dev_lock+0x2de/0x2f0 [ 452.026659][T20287] unregister_netdev+0x1f/0x60 [ 452.031483][T20287] bnep_session+0x294d/0x2b40 [ 452.036375][T20287] ? rcu_is_watching+0x15/0xb0 [ 452.041671][T20287] ? trace_sched_exit_tp+0x36/0x110 [ 452.047075][T20287] ? __lock_acquire+0xab9/0xd20 [ 452.052188][T20287] ? __pfx_bnep_session+0x10/0x10 [ 452.057233][T20287] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 452.063196][T20287] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 452.069781][T20287] ? __pfx_woken_wake_function+0x10/0x10 [ 452.075500][T20287] ? __kthread_parkme+0x7b/0x200 [ 452.080516][T20287] ? __kthread_parkme+0x1a1/0x200 [ 452.085572][T20287] kthread+0x711/0x8a0 [ 452.089728][T20287] ? __pfx_bnep_session+0x10/0x10 [ 452.094789][T20287] ? __pfx_kthread+0x10/0x10 [ 452.099692][T20287] ? _raw_spin_unlock_irq+0x23/0x50 [ 452.104897][T20287] ? lockdep_hardirqs_on+0x9c/0x150 [ 452.110142][T20287] ? __pfx_kthread+0x10/0x10 [ 452.114764][T20287] ret_from_fork+0x4bc/0x870 [ 452.119407][T20287] ? __pfx_ret_from_fork+0x10/0x10 [ 452.124524][T20287] ? __switch_to_asm+0x39/0x70 [ 452.129471][T20287] ? __switch_to_asm+0x33/0x70 [ 452.134258][T20287] ? __pfx_kthread+0x10/0x10 [ 452.139010][T20287] ret_from_fork_asm+0x1a/0x30 [ 452.143970][T20287] [ 452.147692][T20287] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 452.155531][T20287] CPU: 1 UID: 0 PID: 20287 Comm: kbnepd bnep0 Not tainted syzkaller #0 PREEMPT(full) [ 452.165090][T20287] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 452.175759][T20287] Call Trace: [ 452.179372][T20287] [ 452.182404][T20287] dump_stack_lvl+0x99/0x250 [ 452.187410][T20287] ? __asan_memcpy+0x40/0x70 [ 452.192125][T20287] ? __pfx_dump_stack_lvl+0x10/0x10 [ 452.197530][T20287] ? __pfx__printk+0x10/0x10 [ 452.202240][T20287] vpanic+0x237/0x6d0 [ 452.206609][T20287] ? __pfx_vpanic+0x10/0x10 [ 452.211143][T20287] panic+0xb9/0xc0 [ 452.215325][T20287] ? __pfx_panic+0x10/0x10 [ 452.219946][T20287] __warn+0x31b/0x4b0 [ 452.223962][T20287] ? refcount_warn_saturate+0x11a/0x1d0 [ 452.229794][T20287] ? refcount_warn_saturate+0x11a/0x1d0 [ 452.235357][T20287] report_bug+0x2be/0x4f0 [ 452.239945][T20287] ? refcount_warn_saturate+0x11a/0x1d0 [ 452.245553][T20287] ? refcount_warn_saturate+0x11a/0x1d0 [ 452.251119][T20287] ? refcount_warn_saturate+0x11c/0x1d0 [ 452.256763][T20287] handle_bug+0x84/0x160 [ 452.261018][T20287] exc_invalid_op+0x1a/0x50 [ 452.265639][T20287] asm_exc_invalid_op+0x1a/0x20 [ 452.270489][T20287] RIP: 0010:refcount_warn_saturate+0x11a/0x1d0 [ 452.276753][T20287] Code: 40 58 be 8b e8 c7 a5 f9 fc 90 0f 0b 90 90 eb d7 e8 bb 8b 36 fd c6 05 9b 7f dd 0a 01 90 48 c7 c7 a0 58 be 8b e8 a7 a5 f9 fc 90 <0f> 0b 90 90 eb b7 e8 9b 8b 36 fd c6 05 78 7f dd 0a 01 90 48 c7 c7 [ 452.296753][T20287] RSP: 0018:ffffc900100cf6e0 EFLAGS: 00010246 [ 452.302834][T20287] RAX: 8210b9b7e1c9a500 RBX: 0000000000000003 RCX: ffff888023858000 [ 452.310985][T20287] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002 [ 452.319075][T20287] RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000004 [ 452.327153][T20287] R10: dffffc0000000000 R11: fffffbfff1bba680 R12: dffffc0000000000 [ 452.335124][T20287] R13: ffff88805acb9c60 R14: ffff88805acb9c78 R15: ffffffff85c657d0 [ 452.343221][T20287] ? __pfx_klist_children_put+0x10/0x10 [ 452.348880][T20287] klist_dec_and_del+0x3c7/0x3d0 [ 452.353998][T20287] ? __pfx_klist_children_put+0x10/0x10 [ 452.359785][T20287] klist_del+0xa6/0x110 [ 452.363978][T20287] device_del+0x280/0x8e0 [ 452.368325][T20287] ? _raw_spin_unlock_irq+0x2e/0x50 [ 452.373617][T20287] ? pm_runtime_set_memalloc_noio+0x1f4/0x260 [ 452.379778][T20287] ? __pfx_device_del+0x10/0x10 [ 452.384633][T20287] ? netdev_unregister_kobject+0x344/0x450 [ 452.390450][T20287] unregister_netdevice_many_notify+0x1df2/0x2390 [ 452.396883][T20287] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 452.403767][T20287] ? rtnl_net_dev_lock+0x257/0x2f0 [ 452.408920][T20287] unregister_netdevice_queue+0x33c/0x380 [ 452.414665][T20287] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 452.420931][T20287] ? rtnl_net_dev_lock+0x36/0x2f0 [ 452.425989][T20287] ? rtnl_net_dev_lock+0x2de/0x2f0 [ 452.431216][T20287] unregister_netdev+0x1f/0x60 [ 452.436004][T20287] bnep_session+0x294d/0x2b40 [ 452.440805][T20287] ? rcu_is_watching+0x15/0xb0 [ 452.445663][T20287] ? trace_sched_exit_tp+0x36/0x110 [ 452.450985][T20287] ? __lock_acquire+0xab9/0xd20 [ 452.455849][T20287] ? __pfx_bnep_session+0x10/0x10 [ 452.460889][T20287] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 452.466870][T20287] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 452.473315][T20287] ? __pfx_woken_wake_function+0x10/0x10 [ 452.479098][T20287] ? __kthread_parkme+0x7b/0x200 [ 452.484292][T20287] ? __kthread_parkme+0x1a1/0x200 [ 452.489337][T20287] kthread+0x711/0x8a0 [ 452.493427][T20287] ? __pfx_bnep_session+0x10/0x10 [ 452.498466][T20287] ? __pfx_kthread+0x10/0x10 [ 452.503059][T20287] ? _raw_spin_unlock_irq+0x23/0x50 [ 452.508341][T20287] ? lockdep_hardirqs_on+0x9c/0x150 [ 452.513542][T20287] ? __pfx_kthread+0x10/0x10 [ 452.518307][T20287] ret_from_fork+0x4bc/0x870 [ 452.522920][T20287] ? __pfx_ret_from_fork+0x10/0x10 [ 452.528206][T20287] ? __switch_to_asm+0x39/0x70 [ 452.532993][T20287] ? __switch_to_asm+0x33/0x70 [ 452.538012][T20287] ? __pfx_kthread+0x10/0x10 [ 452.542605][T20287] ret_from_fork_asm+0x1a/0x30 [ 452.547386][T20287] [ 453.700516][T20287] Shutting down cpus with NMI [ 453.705764][T20287] Kernel Offset: disabled [ 453.710110][T20287] Rebooting in 86400 seconds..