last executing test programs: 10.911334106s ago: executing program 1 (id=2829): socket(0x11, 0x4, 0x9) gettid() r0 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x42, &(0x7f00000000c0)=0x81a, 0x4) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000c00)={0x28, 0x40, 0x107, 0x70bd2b, 0x25dfdbfe, {0x3, 0x7c}, [@nested={0x4, 0x1c2}, @nested={0xc, 0x1, 0x0, 0x1, [@nested={0x8, 0x10, 0x0, 0x1, [@nested={0x4, 0x141}]}]}, @typed={0x4, 0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4c090}, 0xc000) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f0000000280)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000040)='cubic', 0x3) ioctl$sock_inet6_tcp_SIOCOUTQ(r1, 0x5411, 0x0) 10.63490096s ago: executing program 1 (id=2831): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000007900)={&(0x7f00000004c0)=@newtaction={0xac, 0x30, 0x216822a75a8bdd29, 0x70bd28, 0xffffffff, {}, [{0x98, 0x1, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2}}}}, @m_connmark={0x50, 0x14, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x8000003, 0xd, 0x5, 0x0, 0x3}, 0xf}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1}}}}]}]}, 0xac}, 0x1, 0x0, 0x0, 0x20040010}, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x70, 0x0, &(0x7f0000000080)=0x17) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4000) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000165d5a5e778d8258a000000000a54000000060a090400000000000000000200fffe0900020073797a32000000000900010073797a30000000002800048024000180090001006d65746100000000140002800800014000000001080002400000000214"], 0x7c}, 0x1, 0x0, 0x0, 0x24044800}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000980)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8924, &(0x7f00000002c0)={'macsec0\x00', @random="0100061f8145"}) 10.393534503s ago: executing program 1 (id=2835): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="18000000", @ANYRES16=r1, @ANYBLOB="0100000000000000565e030000000400018055480f85bf04302909f1d9b63d65d477a5208ee04c0886af3ae54c8ffa25c9a8cb381e8c86f98493f955d119d8e381c29db71873b068dd57b31fa405e0e0e46a6861a0b2fddbbda481a5e18078eabbd37eb69f224462c714d563579954ca1c32f80bef1230a028ed1e24326cade56ab660bbd5ec4572fc1b367dd512a3389a489fbc98cce0ab0cda"], 0x18}}, 0x40) socket$inet6_udp(0xa, 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x3, 0xc, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000000000000000000000000000850000002e000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000080)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r2, 0x0, 0xe, 0x0, &(0x7f00000000c0)="e0b9545dd30a3731677b2d0bfa91", 0x0, 0x27cb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_init_net_socket$rose(0xb, 0x5, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socket$nl_generic(0x10, 0x3, 0x10) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) socket$packet(0x11, 0x2, 0x300) r5 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$sock_int(r5, 0x1, 0x2e, &(0x7f0000000040)=0x80, 0x4) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="12000000090000000800000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r7, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f0000000100)=r6}, 0x20) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x3, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYRESDEC=r8], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r10}, 0x10) ppoll(&(0x7f0000000500)=[{r9}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r11}, 0x10) ppoll(&(0x7f0000000500)=[{r4}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f0000000000)={0x0, 0x2, 0xffff, 0x4, 0x0, 0xfffffffffffffffc}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x9, 0x8, 0x3af81ffd, 0x7fffffff}, 0x0, 0x0) r12 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002280)={r12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x57af, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) 6.930585247s ago: executing program 1 (id=2844): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000003640), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_GET(r0, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c00adbed39c3e2f1f7f885d040000", @ANYRES16=r1, @ANYBLOB="010027bd7000fddbdf251300000018000180140002006272696467655f736c6176655f310000"], 0x2c}, 0x1, 0x0, 0x0, 0x91}, 0x40004) 6.77081395s ago: executing program 1 (id=2846): r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=ANY=[@ANYBLOB="40000000100005ff00000008000000000000004a", @ANYRES32=0x0, @ANYBLOB="7f15000000000000140012800b0001006261746164760000040002800a000100bbbbbbbbbbbb0000ed86bd350e908c9d22aca03ec85aef4f968c59ac8b81f9bfccded007388054bf2f394cb861364383d6e519b871f715f6c835b6378d76f1bfd47822b3a119c22d35b5d94ff87c27e1398605000000000000452c6e901911831d9581d6b4ba7f547e027eba455238d4"], 0x40}}, 0x20000840) r2 = socket(0x10, 0x3, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000009c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, 0x0, 0xff87) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc0000001900010000000000fcdbdf2500000000000000000000000000000000fe8000000002000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000004000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000001000000000000004400050000000000000000000000000000000000000000022b0000000a000000fe8000000000000000000000000000aa0000000004"], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000000), r6) sendmsg$NLBL_CIPSOV4_C_ADD(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)={0x38, r7, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x14, 0x4, 0x0, 0x1, [{0x5}, {0x5, 0x3, 0x7}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x1}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x20008086}, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r8, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r8, &(0x7f0000000480)={0x2, 0x4e21, @multicast2}, 0x10) sendmmsg(r8, &(0x7f0000007fc0), 0x800001d, 0x1c) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@local, 0x0, 0x0, 0x1, 0x1}, 0x20) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="400000001000030400000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c", @ANYBLOB, @ANYRES64=r2], 0x40}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="050000000800000000e0fc463cd1fb569607b50a0000000c000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_PROMISC(0xffffffffffffffff, 0x6b, 0x2, &(0x7f0000000140)=0x4, 0x4) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) unshare(0x6a040000) socket$inet6_mptcp(0xa, 0x1, 0x106) 5.08377145s ago: executing program 1 (id=2857): bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0), 0x8) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f0000000300)={'hsr0\x00', 0x3}) r2 = socket(0x11, 0x3, 0x8) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000140)={'sit0\x00', &(0x7f0000000100)={'tunl0\x00', 0x0, 0x40, 0x8000, 0x3, 0x0, {{0x5, 0x4, 0x0, 0x5, 0x14, 0x64, 0x3, 0xe6, 0x29, 0x0, @empty, @empty}}}}) r3 = socket$unix(0x1, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000010000000000000000a00851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000116608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000020b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8}, 0x94) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtfilter={0x44, 0x2c, 0xd29, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0xf000, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0x14, 0x2, [@TCA_ROUTE4_FROM={0x8, 0x3, 0xaa}, @TCA_ROUTE4_TO={0x8, 0x2, 0x3}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x24000080}, 0x20000800) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f00000006c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x438, 0x2e0, 0x0, 0x2e0, 0x2e0, 0x130, 0x3a0, 0x3a0, 0x3a0, 0x3a0, 0x3a0, 0x6, &(0x7f0000000140), {[{{@ip={@loopback, @multicast1, 0xff000000, 0x0, 'veth1_to_batadv\x00', 'erspan0\x00', {}, {}, 0x89, 0x0, 0x2}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x1, 0xb5, 0x1}}}, {{@ip={@remote, @private=0xa010100, 0xff, 0x0, 'lo\x00', 'veth1\x00', {0xff}, {0xff}, 0x4, 0x2, 0xc}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x2, 0xb3}}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x4}}]}, @unspec=@CHECKSUM={0x28}}, {{@ip={@broadcast, @local, 0xff, 0xff000000, 'wg0\x00', 'rose0\x00', {0xff}, {0xff}, 0x5e, 0x0, 0x37}, 0x0, 0xb0, 0xf0, 0x0, {}, [@common=@set={{0x40}, {{0xffffffffffffffff, [0x3, 0x2, 0x1, 0x1bcb39803ddb2495, 0x5, 0x6], 0x4, 0x2}}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x383c, 0x401, @ipv4=@private=0xa010102, 0x4e21}}}, {{@ip={@rand_addr=0x64010100, @empty, 0xff000000, 0x7f800000, 'geneve0\x00', 'ip6tnl0\x00', {0xff}, {0xff}, 0x5e, 0x1, 0xa}, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x2}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x1}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x498) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=ANY=[@ANYBLOB="0800010000000070dce9d3e348c2a93a64fc55affdf4450e670f53b04263dec5ed5e57a147ec0e0b5ddb"], 0x14}}, 0x4000000) 4.843668835s ago: executing program 0 (id=2863): mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2000002, 0x42073, 0xffffffffffffffff, 0xaba02000) socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0xfffffffffffffdd0, 0x0, 0x41000}, 0x94) socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x200000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ppoll(&(0x7f0000000500)=[{r1}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000480)='kfree\x00', r2, 0x0, 0x1843}, 0x18) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000100)='net_prio.prioidx\x00', 0x0, 0x0) preadv(r4, &(0x7f0000000140)=[{&(0x7f0000000280)=""/241, 0xf1}], 0x1, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000001300)=@mangle={'mangle\x00', 0x10, 0x6, 0x698, 0x0, 0x410, 0x0, 0x2f8, 0x2f8, 0x640, 0x640, 0x640, 0x640, 0x640, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0x2f8, 0x0, {0x7a00000000000000}}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x200, 0x228, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth1_to_batadv\x00', {0x8, 0x5, 0x3c, 0x97, 0x6, 0x401, 0x4, 0x120e, 0x18, 0x40}, {0x5}}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0xfff7, 0x4}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @ipv6=@mcast1}}}, {{@ipv6={@private0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'veth1\x00', 'ip6gretap0\x00', {}, {}, 0x0, 0x2}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@local, @ipv4=@multicast1}}}, {{@ipv6={@mcast1, @mcast2, [], [], 'wg1\x00', 'vxcan1\x00', {0xff}, {}, 0x2c}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@mcast2, @ipv6=@local}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6f8) r6 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r6, &(0x7f0000000080)={0x5, 0x1, 0x3, 0x3, 0xfd}, 0x8) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x20000000ed071, 0xffffffffffffffff, 0xfffff000) 4.652717562s ago: executing program 0 (id=2866): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)=@bridge_getvlan={0x20, 0x72, 0x7e3bfe4fa73db39f, 0x70bd28, 0x0, {}, [@BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x7ffffffe}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000040}, 0x20041040) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$inet_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f0000000180)=0x1, 0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x22d3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_device, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r5, 0x0, 0xffffffffffffff7b, 0x0, &(0x7f0000000380)="f6f4e9a1d78ad62ceef1884386dd78bb3fb7dbfc", 0x0, 0xa1b, 0x0, 0x2, 0x0, &(0x7f0000000700)="010a", 0x0}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x213) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@ipv6_getroute={0x24, 0x1a, 0x1, 0x70bd2d, 0x0, {0xa, 0x0, 0x80}, [@RTA_MARK={0x8, 0x10, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x0) connect$can_bcm(r1, &(0x7f00000005c0), 0x10) socket(0x29, 0xa, 0x9) recvmmsg(r1, &(0x7f00000099c0), 0x3fffffffffffdfc, 0x10002, 0x0) sendmsg$can_bcm(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0xd, 0x20000000ec071, 0xffffffffffffffff, 0x0) 3.417405466s ago: executing program 0 (id=2878): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000400000000000000000000008500000041000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="dbdf367a688e65fcbad63a9cc91b", 0x0, 0x6400, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000000)={r1, 0x2, 0x5, 0xfffffffffffffff8}) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=@framed={{0x18, 0x7}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x100000}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0}, 0x94) 3.17971202s ago: executing program 0 (id=2880): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000003340)=[{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="81fc968c8e602f12c08090cca64b50fd3da579fea7cfb7a60842e5ed5f28eb92ce85ff67ae4586173191ea11764930ce6cffa1941eb83e19fd7edaacf94dc7424ea3f5b2c3090b2512c5731decbe5706505f71967d78c85e5dfe539b94b505fd017feaa8cb7ff33abfe523165e9245f5", 0x70}, {&(0x7f0000000280)="d1eb57ef3c3b938aec92d6b0f96439092ce50229ef3c76f4a29925611af18ab9f6fb64dbda37de73d2f86599da41f74348d8abd1415cb7c0cc686346f39fad1650a45bb0e2351e84f0e5bd3539e67a87ee7661516e9ba9d5dd3c02a643420de7940c73cf1db26f55947a508b25f78dee121adf8805143e7fae13e8b6c5f129f3774d7bcbd71fb4089652786bc4cc963f17020109b33f367a30a97bf4e04098844794157020f23b6d7724f9a57b3ba1af970a8a85c167d9798d8d0611f57c87e74739a8513a81e749b70b2e9138d04c30cb22b0b4769ae79a74", 0xd9}, {&(0x7f0000000580)="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", 0x178}], 0x3, 0x0, 0x0, 0x4040010}], 0x1, 0x0) recvmmsg$unix(r1, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000001e40)=""/4096, 0x1000}], 0x1}}], 0x2, 0x100, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x35, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0xa0}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3.071766327s ago: executing program 0 (id=2881): r0 = accept$alg(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000000)) connect(0xffffffffffffffff, &(0x7f0000000040)=@rxrpc=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e23, 0x9, @remote, 0x4d}}, 0x80) r1 = socket(0x15, 0x80806, 0x7) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x38, 0x2, 0x6, 0x101, 0x0, 0x0, {0x3, 0x0, 0x7}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x40004}, 0x24008845) r2 = socket$phonet(0x23, 0x2, 0x1) r3 = accept4(r2, &(0x7f00000001c0)=@ethernet={0x0, @broadcast}, &(0x7f0000000240)=0x80, 0x80000) read$alg(r1, &(0x7f0000000280)=""/151, 0x97) sendmsg$IPSET_CMD_SWAP(r3, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x38, 0x6, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x40400c5}, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x10, &(0x7f0000000480)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1}, {}, {}, [@exit], {{}, {}, {0x85, 0x0, 0x0, 0x1}}}, &(0x7f0000000500)='syzkaller\x00', 0x6, 0x0, 0x0, 0x41100, 0x7, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x7, 0x2}, 0x8, 0x10, &(0x7f0000000580)={0x2, 0x8, 0x64e, 0x4}, 0x10, 0x0, 0x0, 0x2, 0x0, &(0x7f00000005c0)=[{0x0, 0x4, 0x7, 0xf}, {0x4, 0x5, 0xe, 0x4}], 0x10, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000440)='netlink_extack\x00', r4, 0x0, 0x6}, 0x18) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000700), r5) shutdown(r3, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x4) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000740), r5) ioctl$SIOCAX25OPTRT(r1, 0x89e7, &(0x7f0000000780)={@bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x2, 0x20}) setsockopt$RDS_GET_MR_FOR_DEST(r1, 0x114, 0x7, &(0x7f0000000840)={@x25={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x0}}, {&(0x7f00000007c0)=""/35, 0x23}, &(0x7f0000000800), 0x40}, 0xa0) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000900)) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, &(0x7f00000009c0)={'syztnl0\x00', &(0x7f0000000940)={'syztnl1\x00', 0x0, 0x8000, 0x10, 0x9, 0x3, {{0xb, 0x4, 0x0, 0x8, 0x2c, 0x65, 0x0, 0xe, 0x29, 0x0, @private=0xa010102, @empty, {[@generic={0x88, 0x3, "ce"}, @ssrr={0x89, 0x13, 0x9a, [@dev={0xac, 0x14, 0x14, 0x10}, @loopback, @multicast1, @broadcast]}]}}}}}) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000a00)={{{@in=@multicast1, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in=@local}}, &(0x7f0000000b00)=0xe8) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000b40)={{{@in6=@mcast1, @in6=@remote, 0xd, 0x9, 0x4e22, 0x5, 0xa, 0xa0, 0x0, 0x3c, r6, r7}, {0x8, 0xb3, 0x1, 0x3, 0x8000000000000001, 0xe0, 0x6, 0x7}, {0x9, 0x8, 0x9, 0x2}, 0x1000, 0x6e6bbd, 0x2, 0x1}, {{@in=@broadcast, 0x4d5}, 0xa, @in6=@local, 0x3503, 0x1, 0x3, 0xb6, 0x10000, 0xaba2, 0x4}}, 0xe8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000c40)) sendmsg$nl_generic(r1, &(0x7f0000000f80)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000f40)={&(0x7f0000000cc0)={0x26c, 0x35, 0x824, 0x70bd28, 0x25dfdbfe, {0x13}, [@typed={0xc, 0xda, 0x0, 0x0, @u64=0x6}, @typed={0x8, 0x8c, 0x0, 0x0, @u32=0x7f}, @nested={0x231, 0xab, 0x0, 0x1, [@typed={0xa2, 0x0, 0x0, 0x0, @binary="14ae680216d0048884d47b33e3e455d9cd977cbc2e5ab89c55fda1b342e7b4c46e62744831c3905a17ce2c27bdcf6b56e4e9fa08351ef72527844c327bd27ce966da73c93674feedee3637f02a6ab02f70ca7f74895fdee620b33081f4012e29d1ab9912a5971ad9a51df5a9277a42aa1cc4997e480860f1dee924fe3d06f6dd38c32a6de863dfb201f0e966ae73d5c67804b676d2d69b615d34820252b2"}, @generic="a23aaca5874776d55e52873aef6e57304e6819feb644b3f1f2c9b2d30f7a21dc347bb6d410bdaa3bc96744d36ec0d4d37163a1ad372eba534093dfb71665cc8c7b679d0813b733036031ed7eb4d021f3ef1678959e1e89442c33aaf0be58f7bf256734d42080208caa1c85393f0591bba4742be63969a49f2b9a7692eb4552021ac056b14cdc2ac5d1361f0e4437e3e3477a8dbc6079e51b25e80bdc1a06d866c29463cfa28c0e15eaa75014a83fa86893685bfb6b09b8bfbdba1c1a37bf1af975930a38792582e96e21c1f3ad89469ecb8da24a8580498c05db551348ae1bbb397cbdc2c9", @nested={0x4, 0xb4}, @typed={0x8, 0xea, 0x0, 0x0, @u32=0x10001}, @generic="e975cdc0", @typed={0x14, 0x69, 0x0, 0x0, @ipv6=@mcast1}, @nested={0x4, 0xb4}, @generic="3768d5a94b24fc9e", @generic="660f52aa25ffb3df934eb9730156ed457f13cf566736166098b4d9836d90f4956e66a071b4d088c383adeaeff70723ec23f1617e4b9093214c0984c67a5f39b0e2e206cf224f7e32bf7430490a37c4dbd30a51b79ecffcb95f93a257e6521f02", @typed={0x14, 0x36, 0x0, 0x0, @ipv6=@mcast2}]}, @typed={0x4, 0x68}, @typed={0xc, 0xc3, 0x0, 0x0, @u64=0x6f}]}, 0x26c}, 0x1, 0x0, 0x0, 0x4004000}, 0x8004) sendmsg$nl_route_sched(r3, &(0x7f0000001140)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001100)={&(0x7f0000001000)=@delqdisc={0xfc, 0x25, 0x1, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xfff3, 0xf}, {0x3}, {0xfff1}}, [@TCA_STAB={0xd8, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x9, 0xa, 0x10, 0xfffffff7, 0x1, 0xc21, 0x1, 0x7}}, {0x12, 0x2, [0x100, 0xb29, 0xffff, 0x7, 0x0, 0x8, 0x8]}}, {{0x1c, 0x1, {0x61, 0x7f, 0xf6, 0x81, 0x0, 0x7ff, 0x400, 0x1}}, {0x6, 0x2, [0x8]}}, {{0x1c, 0x1, {0x5, 0xff, 0xff, 0x6, 0x1, 0x1, 0x4, 0x2}}, {0x8, 0x2, [0xff, 0x8]}}, {{0x1c, 0x1, {0x6, 0x3, 0x5, 0x7, 0x2, 0xd, 0x800, 0x3}}, {0xa, 0x2, [0x84d1, 0x4, 0x8001]}}, {{0x1c, 0x1, {0x8, 0x3, 0xc, 0x7fcd, 0x1, 0x0, 0x4, 0x9}}, {0x16, 0x2, [0xff31, 0x5, 0x7, 0x200, 0xb, 0x7, 0xff, 0x0, 0x6]}}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) getpeername(r0, &(0x7f0000001180)=@ethernet={0x0, @broadcast}, &(0x7f0000001200)=0x80) socket$inet_sctp(0x2, 0x1, 0x84) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r3, 0x84, 0x21, &(0x7f0000001240), &(0x7f0000001280)=0x4) 2.86340335s ago: executing program 0 (id=2884): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="38000000031401002dbd700200000025090002007379fb0000000000080041007278650014003300626f6e645f736c6176655f30"], 0x38}, 0x1, 0x0, 0x0, 0x2040100}, 0x0) 2.781436111s ago: executing program 4 (id=2885): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000000001004000014001a8010002d800c000180080016000600000008001b"], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002000)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r6, 0x0, 0xd}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{}, 0x0, 0x0}, 0x20) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r5, 0x8983, &(0x7f0000000480)={0x2, 'veth0_macvtap\x00', {0xb}, 0x1}) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000000)={@mcast2={0xff, 0x5}, 0x200, 0x0, 0xff, 0x3}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000100)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xfa, 0x2, 0x1, 0x6, 0x1, 0x811b}, 0x20) socket$kcm(0x22, 0x3, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000040c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="14000000100001001e000000000000010500000a3c0000001d0a090000000000000000000a0000070900020073797a31000000000900010073797a31"], 0x64}, 0x1, 0x0, 0x0, 0x24000850}, 0x40) write(r2, &(0x7f0000000140)="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"/297, 0x3accf8d5) vmsplice(r1, &(0x7f0000000440)=[{&(0x7f0000000040)="770b0300a7f60fb0d8507343bcbcfc6a38bde25bf5901409ed3da847fad0be5ef4ca193afbe24529", 0x28}], 0x1, 0x10000000000000f) close(r1) 2.302921663s ago: executing program 3 (id=2887): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000000), &(0x7f0000000080)=0x4) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000001c0)={0x60, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_NETMASK={0x5, 0x14, 0x7}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0xb1}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) 2.225701241s ago: executing program 3 (id=2888): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x4, 0xa}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8848}, 0x80) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0x4, 0xffff}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x5}]}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8848}, 0x80) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000800)=ANY=[@ANYBLOB="3800000001020300000000000000000002000001240002801400018008000100ac14142608000200ac1414bb0c000280040001"], 0x38}, 0x1, 0x0, 0x0, 0x80000}, 0x200490c4) 2.159656608s ago: executing program 4 (id=2889): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, 0x0, 0x0, 0x4}, 0x94) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x50) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$packet(r2, 0x0, 0x0, 0x890, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x4e20, 0xeb, @remote, 0x4}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000a00)="17e13a93ba6d179063acdecd1286c78038e71e038b9c9f71ca6aa2dbb7", 0x1d}, {&(0x7f0000000ec0)="04f0cc3dadc9e0b9cd3535f96e5a6b57165716ddefad2ca9a570d9fdbb1528bbf40a96de49ed9f41f74097fa004fb6aa7d0275884442b7f7e273329df37d77d80676001ec67618e156deca034cd5ff9715cb4d2c50ecd5e03c4a53689f69a6488ebbfb7b93cf87b629cc00794f2610968a55ceb2d2988c238d76c6d46b31ede2b4d9d161090ac68b4435f6a9909a1f2f93f80ddfa84e064e090de6344395d58116faae11841fd0af151462e80bddc460e4d8b9d97ac5e4e2b5b79e51432579658a38ae5691fd177e762cbfbb59e6e48e695fabd225d66cea8361ed2ddd548416ea9db8737d1ed86cc5040148a8d189761c815010eb2f578526a9c7a10f4cf67a900f0789", 0x104}], 0x2}, 0x400d0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x304}, "db57cda808852139", "252432e72844858a068b92a5a810f4dc", "11802ff5", "08e48ff0bf597edc"}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xe, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000c40), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000b00)={0xe8, r6, 0x1, 0x0, 0x3, {0x6, 0x0, 0x900}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @loopback}, @NLBL_UNLABEL_A_SECCTX={0xf, 0x7, 'unconfined\x00'}, @NLBL_UNLABEL_A_SECCTX={0x24, 0x7, 'system_u:object_r:sshd_key_t:s0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth0_macvtap\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @remote}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x11}}, @NLBL_UNLABEL_A_SECCTX={0x27, 0x7, 'system_u:object_r:initrc_exec_t:s0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x2b, 0x7, 'system_u:object_r:crond_unit_file_t:s0\x00'}]}, 0xe8}, 0x2, 0x34005, 0x0, 0x30000874}, 0x880) sendmsg$NLBL_UNLABEL_C_STATICADD(r5, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000300)={0x64, r6, 0x720, 0x70bd28, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast1}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'ip_vti0\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast1}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @broadcast}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @remote}]}, 0x64}, 0x1, 0x0, 0x0, 0x4}, 0x20048001) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)={0x1b, 0x0, 0x0, 0x4, 0x0, r1, 0x8e13, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1, 0x5}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x6, 0x1f, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x90000000, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [@btf_id={0x18, 0x0, 0x3, 0x0, 0x3}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x40}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000540)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x12, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000800)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000000840)={0x5, 0x2, 0x6, 0xf6c}, 0x10, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000880)=[{0x2, 0x3, 0x6, 0x7}, {0x4, 0x2, 0xe, 0x5}, {0x2, 0x4, 0x2, 0x8}, {0x4, 0x2, 0x6, 0x1}], 0x10, 0x7fffffff}, 0x94) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01000000000a410000000100000038000180060001000200000008000500000000000c000700000000000000000008000900000000000800080000000000080006"], 0x4c}}, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r3, 0x0, 0x484, &(0x7f00000000c0)=""/24, &(0x7f0000000100)=0x18) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0x1, 0x70bd2a, 0x4, {0x0, 0x0, 0x0, 0x0, 0x2180}, [@IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}, @IFLA_MASTER={0x8}, @IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0xfffffffb, 0x2}}]}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x4048080}, 0x0) 1.763348977s ago: executing program 4 (id=2890): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000002a00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r2, r1, 0x25, 0x0, @val=@iter={0x0}}, 0x20) syz_emit_ethernet(0xfdef, &(0x7f0000000100)=ANY=[], 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r3, 0x6, 0x21, &(0x7f00000010c0)="9699dd11cbeaab22d2dcff0d52af9c50", 0x10) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000000010000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000200"/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xd, 0x17, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000066090100000003e71600000006000000180100002020702500000000002020207b9af8ff00000000ad9100000000000037010000f8ffffffb702000008000000b70300000400000056000000060000003c30000000000000b5030000000000008500000076000000b70000000000000095"], &(0x7f0000000040)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.762224992s ago: executing program 3 (id=2891): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001000000000000000000e00000020000000000000000000000000000000000000000000000000000000100000008000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000a900000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000800000000000000080400002000000000000080000000000000000000000000000000044000500ac1414aa000000000000000000000000000000003c00000000000000ffffffff00000000000000000000000002000000040300"/180], 0xfc}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x437, 0x0, 0xffffffff, {0x0, 0x0, 0x0, 0x0, 0x5120b}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER={0x5, 0x19, 0x5}, @IFLA_BR_MCAST_QUERY_USE_IFADDR={0x5, 0x18, 0x1}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x48800}, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67b}]}, 0x10) r4 = socket$inet_udp(0x2, 0x2, 0x0) socket$packet(0x11, 0x2, 0x300) bind$inet(r4, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) sendmmsg$inet(r4, &(0x7f0000000100)=[{{&(0x7f00000004c0)={0x2, 0x4e24, @multicast1}, 0x10, 0x0}}], 0x1, 0x2000c044) sendto$inet(r4, &(0x7f0000000c80)="e8", 0x6200, 0x12000000, 0x0, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[@ANYBLOB="ec000000210001000000000000000000fc020000000000000000000000000001fe8000000000000000000000e4c0cb3600000000000000000a0000a02e0000004bcc305b2c79864e732aa3f23b40c9c85481d620d729095b4bf62b9c53ed3363a9c0f8f8012795e89f0806a0012c7dc10d1ac71a9ec77269187c53886508c0ed00dc999674e89f843f3ea37c558dada3628a238a0d2de8c744f55c1d7a418adb594ae6", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000009c001100ac1414aa000000000000000000000000fe8000000000000000000000000000bbfc020000000000000000000000000001200100000000000000000000000000003c0400000000000008000a00ac1414bb00000000000000000000000020010000000000000000000000000000ac141439000000000000000000000000fc0200000000000000000000000000003c040000fdffffff08000200"], 0xec}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 1.583578583s ago: executing program 4 (id=2893): r0 = socket(0x1e, 0x6, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x800000, 0x0, 0x1ff, 0x1, 0x1}, 0x1c) r1 = socket(0x15, 0x4, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000001a40)={0x1f, 0xffff, 0x3}, 0x6) write(r2, &(0x7f0000000000)="2e000300010000", 0x7) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x5, 0x1, 0x81, 0x1ff, 0x801, 0x1}, 0x1c) r3 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="300000001c000104000000000000000002000000", @ANYRES32=r5, @ANYBLOB="000014000a000100000000000000000008000f0004"], 0x30}}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0xa, 0x2) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x121080, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'wg1\x00', @link_local}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = openat$cgroup_ro(r8, &(0x7f00000005c0)='cpu.stat\x00', 0x275a, 0x0) preadv(r9, &(0x7f0000000500)=[{&(0x7f00000000c0)=""/166, 0xa6}], 0x1, 0x793c866c, 0x6) preadv(r9, &(0x7f0000000040)=[{&(0x7f0000000680)=""/180, 0xb4}], 0x1, 0x3, 0x7) write$tun(r6, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd01000000000014120000600000000308"], 0xfdef) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_service_time\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x50, r4, 0x0) pwritev(r10, &(0x7f0000000280), 0x0, 0x0, 0x0) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) bind$tipc(r1, 0x0, 0x0) recvmmsg$unix(r0, &(0x7f0000004400)=[{{0x0, 0x0, &(0x7f0000001480)=[{&(0x7f0000000300)=""/41, 0x29}], 0x1}}], 0x1, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000000c0)="5c00000014006b05c84e21000ab16d6e230675f800000000040002005817d30461bc24eeb556a705251e6182149a36c23d3b48dfd8cdbf9367b098fa51f60a64c9f408000000e786a6d0bdd70000b6c0504bb9189d9193e9bd1c1b78", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 1.519108132s ago: executing program 3 (id=2894): mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r0}, 0x10) nanosleep(&(0x7f0000000080)={0x0, 0x3938700}, 0xfffffffffffffffc) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000040)=@req={0x5, 0x1, 0x7, 0x20000000}, 0x10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1, 0x31, 0xffffffffffffffff, 0x8871b000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$team(&(0x7f00000001c0), r1) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000200)={'team0\x00', 0x0}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000002c0)={r1, 0x58, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, &(0x7f0000000400)=0x0, &(0x7f0000000440)=0x4) getsockopt$inet6_mreq(r1, 0x29, 0x1c, &(0x7f0000000480)={@rand_addr, 0x0}, &(0x7f00000004c0)=0x14) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000100)={'vxcan0\x00', 0x0}) bind$can_j1939(r9, &(0x7f00000000c0)={0x1d, r10, 0x0, {0x2, 0xf0, 0x6}, 0xfc}, 0x18) setsockopt$sock_int(r9, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$can_j1939(r9, &(0x7f00000002c0)={&(0x7f0000000180)={0x1d, r10, 0x0, {0x1, 0x1, 0x4}, 0xff}, 0x18, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x4000805}, 0x24004000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000580)={'ip6gre0\x00', &(0x7f0000000500)={'syztnl1\x00', 0x0, 0x29, 0x1, 0x7, 0xab, 0x1, @remote, @mcast1, 0x8, 0x40, 0xfffffff7, 0xfcc}}) sendmsg$TEAM_CMD_OPTIONS_GET(r2, &(0x7f00000007c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000780)={&(0x7f00000005c0)={0x1a8, r3, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [{{0x8, 0x1, r4}, {0x18c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r6}}}, {0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0x7, 0x0, 0x1, 0x3}, {0x1, 0xf8, 0x8, 0x9}, {0x8000, 0x5, 0x20, 0x6}, {0xfffb, 0xc, 0x4f, 0xc}]}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r7}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x59}}, {0x8, 0x6, r10}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r11}}}]}}]}, 0x1a8}, 0x1, 0x0, 0x0, 0x10}, 0x404c040) 1.199798139s ago: executing program 4 (id=2897): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x4, 0x4, 0x400, 0xffffffff, 0x0, 0x1e0, 0x0, 0xfeffffff, 0xffffffff, 0x330, 0x330, 0x330, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x1, 0x35, {0x3}}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00', 0x1, 0x41, {0x6}}}}, {{@ipv6={@private0, @loopback, [0xff, 0x0, 0xff000000, 0xffffffff], [0x0, 0xff, 0xff000000, 0xffffff00], 'team0\x00', 'batadv_slave_0\x00', {0xff}, {}, 0xff, 0xe7, 0x4, 0x44}, 0x0, 0xf0, 0x150, 0x0, {}, [@common=@dst={{0x48}, {0x4, 0x9, 0x1, [0x3, 0x8575, 0x9, 0xfff, 0x8, 0x101, 0x1, 0x101, 0x8, 0x5, 0x800, 0xb9e, 0x6, 0x8, 0x7, 0x4], 0xf}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@private=0xa010100, [0xffffff00, 0x0, 0xffffffff, 0xffffff00], 0x4e24, 0x4e21, 0x4e21, 0x4e23, 0x8a, 0xffff, 0x5, 0x2, 0x3fd}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x460) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x16, 0x18, &(0x7f0000000b00)=@raw=[@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4008}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x8000004, 0x0, 0x0, 0x0, 0x3}, @tail_call, @printk={@x}], &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000580)={'netdevsim0\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000000000000851000", @ANYRES32=r1, @ANYBLOB="00000000000000006600000000000000180000000000000000000000000000009500000000000000360a000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b50a0000000000008500000006000000"], &(0x7f00000005c0)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222}, 0x94) bind$inet6(r0, &(0x7f0000000540)={0xa, 0x4e20, 0x8, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x6}, 0x1c) r3 = socket(0x1e, 0x805, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r4, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r4, 0x0) recvmmsg(r0, &(0x7f0000003140)=[{{&(0x7f0000000640), 0x80, &(0x7f0000000500)=[{&(0x7f00000006c0)=""/201, 0xc9}, {&(0x7f0000000880)=""/223, 0xdf}, {&(0x7f0000000980)=""/177, 0xb1}], 0x3}, 0x2c5}, {{&(0x7f00000007c0)=@in={0x2, 0x0, @multicast1}, 0x80, &(0x7f0000000f00)}, 0x6}, {{&(0x7f0000000f80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, &(0x7f0000002580)=[{&(0x7f0000001000)=""/80, 0x50}, {&(0x7f0000001080)=""/4096, 0x1000}, {&(0x7f0000002080)=""/67, 0x43}, {&(0x7f0000000a40)=""/8, 0x8}, {&(0x7f0000000bc0)=""/214, 0xd6}, {&(0x7f0000002240)=""/230, 0xe6}, {&(0x7f0000002340)=""/72, 0x48}, {&(0x7f00000023c0)=""/70, 0x46}, {&(0x7f0000002440)=""/19, 0x13}, {&(0x7f0000002480)=""/217, 0xd9}], 0xa, &(0x7f0000002640)=""/23, 0x17}, 0x80}, {{&(0x7f0000002680)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000002a80)=[{&(0x7f0000002700)}, {&(0x7f0000002740)=""/56, 0x38}, {&(0x7f0000002780)=""/87, 0x57}, {&(0x7f0000002800)=""/99, 0x63}, {&(0x7f0000002880)=""/154, 0x9a}, {&(0x7f0000002940)=""/88, 0x58}, {&(0x7f00000029c0)=""/130, 0x82}], 0x7, &(0x7f0000002b00)=""/134, 0x86}, 0xfffffffd}, {{&(0x7f0000002bc0)=@nl, 0x80, &(0x7f0000003080)=[{&(0x7f0000002c40)=""/132, 0x84}, {&(0x7f0000002d00)=""/239, 0xef}, {&(0x7f0000002e00)=""/132, 0x84}, {&(0x7f0000002ec0)=""/34, 0x22}, {&(0x7f0000002f00)=""/152, 0x98}, {&(0x7f0000002fc0)=""/98, 0x62}, {&(0x7f0000003040)}], 0x7, &(0x7f0000003100)=""/53, 0x35}, 0x1000}], 0x5, 0x100, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) connect$tipc(r3, 0x0, 0x0) socket(0x2a, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r6, 0x84, 0x7d, &(0x7f0000000340)={0x8, 0x77, 0x6, 0x10, 0x39c1, 0x4, 0x4}, &(0x7f0000000840)=0x20) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'netdevsim0\x00'}) sendto$packet(0xffffffffffffffff, &(0x7f0000000240)="f2435f0100088000000000850800", 0xe, 0x0, &(0x7f0000000200)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @local}, 0x14) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$l2tp(0x2, 0x2, 0x73) r7 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r7, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x200, 0xfffffffd}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000140)={0x42, 0xf5, 0x1}, 0x10) 1.091502848s ago: executing program 2 (id=2898): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000280), 0x4) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)={0x1b, 0x0, 0x0, 0x400, 0x0, 0x1, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x5, 0x2}, 0x50) r2 = socket$inet_smc(0x2b, 0x1, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r1, &(0x7f0000000100)="4cecc3c929f80859a63b6be37f370a2a9c81a6393b4dd22f97e7b8cf41354c4b1655eb72d1fa4c02a304cb74e166befc8f606a4000dc263ca78b8dbb906d3ae245a2488bc45194b47dcae6deb220f4e23541793a6f6d99", &(0x7f0000000180)=@tcp=r2, 0x4}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xb, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000010000000000000000000000711887000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200001}, 0x94) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) syz_emit_ethernet(0x4a, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd608a37f200142c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa3b000003"], 0x0) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010008020000001800006600000008000300", @ANYRES32=r5, @ANYBLOB="08002600940900000800b70099"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)={0x90, r6, 0x1, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_CSA_C_OFFSETS_TX={0x6, 0xcd, [0x0]}, @NL80211_ATTR_FRAME={0x69, 0x33, @beacon={{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x9}, @device_b, @device_b, @random="38ae9d16e351", {0xf, 0x5}}, 0xffffffffffffffff, @default, 0x1140, @val={0x0, 0x6, @default_ibss_ssid}, @void, @void, @void, @val={0x6, 0x2, 0x11fc}, @val={0x5, 0x3, {0xe, 0x97, 0x5}}, @void, @val={0x2a, 0x1, {0x0, 0x0, 0x1}}, @void, @val={0x2d, 0x1a, {0x400, 0x2, 0x5, 0x0, {0x2, 0xb7b, 0x0, 0x347, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x100, 0x1}}, @void, @val={0x71, 0x7, {0x69, 0x0, 0x1, 0xffffffffffffffff, 0x1, 0x5, 0x20}}, @val={0x76, 0x6, {0x3, 0x0, 0x2f, 0x6}}}}]}, 0x90}, 0x1, 0x0, 0x0, 0xc0}, 0x0) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r4, &(0x7f0000000480)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x34, r7, 0x8, 0x70bd2a, 0x25dfdbfd, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x1}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xb}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x80}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x34}}, 0x40004) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'tunl0\x00'}) getsockname$inet(r2, &(0x7f00000004c0)={0x2, 0x0, @private}, &(0x7f0000000500)=0x10) socket$alg(0x26, 0x5, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r9, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x8000) recvmsg$unix(r8, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r11, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r13, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r12, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) unshare(0x20000400) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r14, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) 985.417874ms ago: executing program 3 (id=2899): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x34, 0x3, 0xa, 0x301, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}, @NFTA_CHAIN_POLICY={0x8}, @NFTA_CHAIN_HOOK={0x4}]}], {0x14}}, 0x7c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a300000000040000000030a09020000000000000000020000000900010073797a30000000000900030073797a3200000000140004800800014000000000080002400000000014000000110001"], 0x88}}, 0x0) r3 = socket(0x2, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x23}}, @in={0x2, 0x4e23, @remote}], 0x20) socket$inet6_tcp(0xa, 0x1, 0x0) (async) syz_emit_ethernet(0x6a, &(0x7f0000000080)={@broadcast, @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x3, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty, @multicast1}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x88a8, 0x0, 0x0, [0x3, 0x0]}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x8}}}}}}}}, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r4, 0x6, 0x3, &(0x7f0000000000)=0x5, 0x4) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r3, 0x84, 0x6d, &(0x7f0000000380), &(0x7f00000001c0)=0x8) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="1400000010000100000000008d000000000000000a6c3e5eff39f0394cdc9f4563f8a3000000060a0b040000000000000000020000004000048018000180080001006f7366000c000280080001400000000424000180090001006d6574610000000014000280080002400000001308000340000000170900010073797a30000000000900020073797a320000000014000000110001"], 0x94}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000140)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) (async) readv(r0, &(0x7f0000000040)=[{&(0x7f00000000c0)=""/214, 0xd6}], 0x1) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240), 0x10000000000000d1}, 0x20040080) 903.986277ms ago: executing program 2 (id=2900): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000900)={0x5c, 0x2, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x4}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x0}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x604c800}, 0x20000000) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'geneve1\x00', 0x0}) (rerun: 32) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@RTM_NEWMDB={0x38, 0x54, 0x1e5, 0x70bd29, 0xfffffffe, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {r2, 0x1, 0x0, 0x5, {@in6_addr=@private0}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x51dcb31a43476434) 859.340656ms ago: executing program 4 (id=2901): r0 = socket$inet6_sctp(0xa, 0x4, 0x84) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f00000001c0)=0x3, 0x4) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@getchain={0x24, 0x11, 0x1, 0x0, 0x1ffffff, {0x0, 0x0, 0x0, r2, {0x7, 0x9}, {0xd, 0xc}, {0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20048054) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) unshare(0x64000600) r6 = gettid() r7 = socket(0x10, 0x803, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c00000010000304f9ffbffffedbdf2500007400", @ANYRES32=r5, @ANYBLOB="049c01000750050008001300", @ANYRES32=r6], 0x3c}, 0x1, 0x0, 0x0, 0x4802}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@ipmr_delroute={0x4c, 0x19, 0x1, 0x0, 0x0, {0x80, 0x20, 0x0, 0xcd, 0x0, 0x11, 0x0, 0x5}, [@RTA_ENCAP={0x1c, 0x16, 0x0, 0x1, @LWT_BPF_IN={0x18, 0x1, 0x0, 0x1, @LWT_BPF_PROG_NAME={0x13, 0x2, 'batadv_slave_0\x00'}}}, @RTA_SRC={0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, @RTA_MULTIPATH={0xc, 0x9, {0x0, 0x0, 0x0, r2}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8880}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x1e, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x4000}, [@ldst={0x1, 0x2, 0x6b324fb906924663, 0x2, 0x1, 0x43, 0x8}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2, 0x24}, 0x94) 805.157664ms ago: executing program 2 (id=2902): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(md5)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f00000028c0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="ff", 0x1}], 0x1}}], 0x1, 0x4c015) r1 = accept(0xffffffffffffffff, 0x0, 0x0) sendmsg$inet_sctp(r1, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x804c040}, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r4, 0x0, 0x1, 0x0) ioctl$sock_inet_udp_SIOCINQ(r4, 0x5760, 0x0) write(r2, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="e4000000", @ANYRES16=r8, @ANYBLOB="07002abd5248ffdbdf2507ff000008000300", @ANYRES32=r9, @ANYRES64=r0, @ANYRES64=0x0], 0xe4}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[], 0xe4}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000006700000008000300", @ANYRES32=r10], 0x28}}, 0x0) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x5, &(0x7f00000025c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0x97}, @generic={0x4, 0x5, 0x7, 0x9, 0x101}]}, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x37, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x401}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r11, 0x0, 0xe, 0x0, &(0x7f0000000040)="f4b84de4115d64244a0e839e9900", 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$nl_route(0x10, 0x3, 0x0) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0xf, &(0x7f0000000100)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x8, 0xff1, &(0x7f0000002e80)=""/4081, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) openat$cgroup_ro(r12, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r13 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000100)={'dummy0\x00', 0x0}) sendmsg$nl_route_sched(r13, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=@newqdisc={0x24, 0x29, 0xa19702d202eff97b, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r14, {0x0, 0xfff9}, {0xe, 0x9}, {0xfff1, 0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x4004080) 347.956079ms ago: executing program 2 (id=2903): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'stdrng\x00'}, 0x58) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r1, &(0x7f0000000040)='notify_on_release\x00', 0x2, 0x0) (async) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256)\x00'}, 0x58) (async) r3 = accept$alg(r2, 0x0, 0x0) recvmmsg(r3, &(0x7f0000006100), 0x49f, 0x0, 0x0) (async) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x9323, 0xfffffffffffffffe, 0x0, 0x6}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff, 0x2}, 0x0, 0x0) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r5 = accept$alg(r0, 0x0, 0x0) recvmmsg(r5, &(0x7f0000000a00)=[{{0x0, 0x0, 0x0}, 0xffffff0b}, {{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000028c0)=""/4096, 0x1000}], 0x1}, 0xf}], 0x2, 0x2101, 0x0) 206.761699ms ago: executing program 2 (id=2904): syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) r0 = socket(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f0000000100)="c10e000018001f06b9409b0dffff110d0207be040205060506100a044300040018000000fac8388827a685a168d9a44604094565360c648dcaaf6c26c291214549932fde4a460c89b6ec0cff3959547f509058ba86c902fc3a10004a320c0400160012000a00000000000000000000080756ede4ccbe5880", 0xec1, 0x0, 0x0, 0x9e5e111c47e3504f) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000000340)=0x2, 0x4) sendmmsg$inet(r1, &(0x7f0000000940)=[{{&(0x7f0000000000)={0x2, 0x4e24, @private=0xa010100}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000040)='\x00', 0x1}], 0x1}}, {{&(0x7f00000000c0)={0x2, 0x4e24, @private=0xa010100}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000280)="a5", 0x1}], 0x1}}], 0x2, 0x40) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x0, 0xe, 0x0, &(0x7f0000000200)="1d5fe8317ca952a2ba4bfee0f003", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x6}, 0x50) 64.677092ms ago: executing program 2 (id=2905): r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000400), r0) getsockname$packet(r0, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) (async) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) (async) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@dev, 0x0, 0x1, 0x0, 0x8}, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r3, 0x400452c8, &(0x7f0000000100)) (async) socket$can_raw(0x1d, 0x3, 0x1) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, [@call={0x85, 0x0, 0x0, 0xa0}]}, &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r4, 0x2000012, 0xe, 0x0, &(0x7f0000000280)="63ec33c9e9b98600000000000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) (async) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, 0x0, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000040)='highspeed', 0x9) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x110, 0x2f, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0xfe, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac08}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x16}}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817", @typed={0x4, 0xe9}]}]}, 0x110}], 0x1, 0x0, 0x0, 0x1}, 0x0) (async) sendto$inet(r2, &(0x7f0000000580)="17", 0x1d4c, 0x10048095, 0x0, 0x0) (async) sendmsg$NFNL_MSG_CTHELPER_DEL(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f0000000280)={0x54, 0x2, 0x9, 0x101, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x3}}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0xa}}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x8e}}]}, 0x54}}, 0x4014) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r1, 0x0, 0x20040}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x18, 0x2, 0x0, 0x1, @val={0x14, 0x1, {{0x0, 0x0, 0x0, r1, 0x261, 0x68320}}}}}}]}, 0x48}, 0x1, 0x2000, 0x0, 0x40}, 0x4048880) 0s ago: executing program 3 (id=2906): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x1, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x1181}, [@IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}, @IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_LINK_STATE={0xc, 0x5, {0xfffffffb}}]}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BATADV_ALGO_NAME={0x10, 0x1, 'BATMAN_V'}]}}}]}, 0xfd12}}, 0x0) kernel console output (not intermixed with test programs): 75'. [ 192.759170][ T9498] netlink: 60 bytes leftover after parsing attributes in process `syz.2.877'. [ 192.826219][ T9510] batman_adv: batadv0: Adding interface: dummy0 [ 192.853731][ T9510] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 192.892640][ T9510] batman_adv: batadv0: Interface activated: dummy0 [ 193.143833][ T9524] netlink: 60 bytes leftover after parsing attributes in process `syz.4.883'. [ 193.235583][ T9530] netlink: 12 bytes leftover after parsing attributes in process `syz.3.884'. [ 193.423904][ T9538] netlink: 8 bytes leftover after parsing attributes in process `syz.3.887'. [ 193.432751][ T9538] netlink: 16 bytes leftover after parsing attributes in process `syz.3.887'. [ 193.443543][ T9538] netlink: 16 bytes leftover after parsing attributes in process `syz.3.887'. [ 193.702358][ T9545] netlink: 'syz.0.889': attribute type 1 has an invalid length. [ 193.735901][ T9545] netlink: 'syz.0.889': attribute type 3 has an invalid length. [ 193.794044][ T9545] netlink: 224 bytes leftover after parsing attributes in process `syz.0.889'. [ 193.819229][ T9551] netlink: 12 bytes leftover after parsing attributes in process `syz.3.891'. [ 193.852193][ T9551] netlink: 12 bytes leftover after parsing attributes in process `syz.3.891'. [ 194.149960][ T9563] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 194.205629][ T9563] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 194.364661][ T9564] No such timeout policy "syz0" [ 194.780854][ T9580] bond0: entered promiscuous mode [ 194.797376][ T9580] bond_slave_0: entered promiscuous mode [ 194.803303][ T9580] bond_slave_1: entered promiscuous mode [ 194.816751][ T9580] batadv0: entered promiscuous mode [ 194.822897][ T9580] debugfs: 'hsr0' already exists in 'hsr' [ 194.845212][ T9580] Cannot create hsr debugfs directory [ 194.852473][ T9580] hsr0: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 194.862965][ T9580] hsr0: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 194.875384][ T9580] 8021q: adding VLAN 0 to HW filter on device hsr0 [ 194.886019][ T9588] netlink: 'syz.2.899': attribute type 10 has an invalid length. [ 194.924380][ T9588] team0: Port device dummy0 added [ 195.099837][ T9595] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048) [ 195.182167][ T9597] netlink: 'syz.4.902': attribute type 5 has an invalid length. [ 195.929221][ T9621] bond4: option arp_validate: invalid value (18446744073491447809) [ 195.939458][ T9621] bond4 (unregistering): Released all slaves [ 195.959188][ T9628] netlink: 'syz.0.907': attribute type 13 has an invalid length. [ 196.418289][ T9646] netlink: 'syz.3.912': attribute type 13 has an invalid length. [ 196.431719][ T9646] netlink: 'syz.3.912': attribute type 12 has an invalid length. [ 196.603132][ T9660] netem: change failed [ 196.610413][ T9659] netlink: 'syz.0.915': attribute type 39 has an invalid length. [ 197.212370][ T9688] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 197.523837][ T9699] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 197.986878][ T9724] __nla_validate_parse: 10 callbacks suppressed [ 197.986902][ T9724] netlink: 8 bytes leftover after parsing attributes in process `syz.0.933'. [ 198.057427][ T9730] netlink: 16 bytes leftover after parsing attributes in process `syz.0.933'. [ 198.778977][ T9759] netlink: 'syz.1.941': attribute type 1 has an invalid length. [ 198.809794][ T9759] netlink: 'syz.1.941': attribute type 3 has an invalid length. [ 198.838967][ T9759] netlink: 224 bytes leftover after parsing attributes in process `syz.1.941'. [ 199.235613][ T9770] netlink: 'syz.3.946': attribute type 32 has an invalid length. [ 199.254942][ T9770] netlink: 20 bytes leftover after parsing attributes in process `syz.3.946'. [ 199.286379][ T9770] bond0: option coupled_control: mode dependency failed, not supported in mode balance-rr(0) [ 199.348617][ T9778] netlink: 44 bytes leftover after parsing attributes in process `syz.1.948'. [ 199.360349][ T9770] tipc: Enabled bearer , priority 0 [ 199.369041][ T9770] syzkaller0: entered promiscuous mode [ 199.374720][ T9770] syzkaller0: entered allmulticast mode [ 199.396272][ T9770] tipc: Resetting bearer [ 199.414238][ T9769] tipc: Resetting bearer [ 199.439343][ T9778] netlink: 4 bytes leftover after parsing attributes in process `syz.1.948'. [ 199.450971][ T9769] tipc: Disabling bearer [ 199.457689][ T9749] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 199.466306][ T9749] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 199.493249][ T9778] gtp0: entered promiscuous mode [ 199.498465][ T9778] gtp0: entered allmulticast mode [ 199.507327][ T9778] netlink: 44 bytes leftover after parsing attributes in process `syz.1.948'. [ 199.519047][ T9749] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 199.551506][ T9749] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 199.586001][ T9749] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 199.591975][ T9749] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 199.665549][ T9785] netlink: 12 bytes leftover after parsing attributes in process `syz.1.951'. [ 199.680159][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 199.690248][ T9786] netlink: 'syz.3.950': attribute type 1 has an invalid length. [ 199.714557][ T9785] netlink: 12 bytes leftover after parsing attributes in process `syz.1.951'. [ 199.968330][ T9749] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 199.985432][ T9794] netlink: 'syz.1.953': attribute type 1 has an invalid length. [ 199.996303][ T9749] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 200.036921][ T9797] netlink: 8 bytes leftover after parsing attributes in process `syz.1.953'. [ 200.077458][ T9794] 8021q: adding VLAN 0 to HW filter on device bond2 [ 200.118930][ T9802] vlan2: entered allmulticast mode [ 200.134983][ T9802] veth1: entered allmulticast mode [ 200.152348][ T9802] bond2: (slave vlan2): making interface the new active one [ 200.162739][ T9802] bond2: (slave vlan2): Enslaving as an active interface with an up link [ 201.993905][ T5837] Bluetooth: hci4: command 0x0406 tx timeout [ 202.794719][ T9812] pim6reg1: entered promiscuous mode [ 202.800091][ T9812] pim6reg1: entered allmulticast mode [ 203.532317][ T9828] netlink: 'syz.3.964': attribute type 10 has an invalid length. [ 203.658917][ T9837] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 203.715536][ T9840] __nla_validate_parse: 3 callbacks suppressed [ 203.715556][ T9840] netlink: 8 bytes leftover after parsing attributes in process `syz.3.969'. [ 203.740802][ T9840] netlink: 8 bytes leftover after parsing attributes in process `syz.3.969'. [ 203.802541][ T9844] netlink: 12 bytes leftover after parsing attributes in process `syz.0.970'. [ 203.832883][ T9843] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 203.905737][ T9847] netlink: 4 bytes leftover after parsing attributes in process `syz.3.971'. [ 203.934702][ T9846] 8021q: adding VLAN 0 to HW filter on device bond0 [ 203.944832][ T9846] 8021q: adding VLAN 0 to HW filter on device team0 [ 203.952874][ T9838] netlink: 128 bytes leftover after parsing attributes in process `syz.4.968'. [ 204.000288][ T9846] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 204.067932][ T9838] netlink: 'syz.4.968': attribute type 7 has an invalid length. [ 204.079050][ T9862] netlink: 52 bytes leftover after parsing attributes in process `syz.0.975'. [ 204.084494][ T9838] netlink: 'syz.4.968': attribute type 8 has an invalid length. [ 204.092795][ T9862] netlink: 44 bytes leftover after parsing attributes in process `syz.0.975'. [ 204.118654][ T9846] netlink: 40 bytes leftover after parsing attributes in process `syz.3.971'. [ 204.535051][ T9864] batman_adv: batadv0: Interface deactivated: dummy0 [ 204.823365][ T9864] hsr0: left promiscuous mode [ 204.943182][ T9864] ip6gre1: left allmulticast mode [ 205.061065][ T9864] gtp0: left promiscuous mode [ 205.066100][ T9864] gtp0: left allmulticast mode [ 205.090588][ T9864] vlan2: left allmulticast mode [ 205.103805][ T9864] veth1: left allmulticast mode [ 205.113868][ T9870] tipc: Enabling of bearer rejected, failed to enable media [ 205.166168][ T65] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.182494][ T65] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.214991][ T65] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.252786][ T65] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.307450][ T65] bond0: (slave bond_slave_0): link status definitely down, disabling slave [ 205.341991][ T65] bond0: (slave bond_slave_1): link status definitely down, disabling slave [ 205.360951][ T65] bond0: now running without any active interface! [ 205.384132][ T9890] netlink: 4 bytes leftover after parsing attributes in process `syz.2.982'. [ 205.414085][ T9886] netlink: 24 bytes leftover after parsing attributes in process `syz.0.980'. [ 205.447611][ T9890] ip6gre1: entered promiscuous mode [ 205.452888][ T9890] ip6gre1: entered allmulticast mode [ 205.497606][ T9897] netlink: 'syz.1.983': attribute type 1 has an invalid length. [ 205.745712][ T9909] syzkaller0: entered promiscuous mode [ 205.771657][ T9909] syzkaller0: entered allmulticast mode [ 205.839626][ T9914] syzkaller0: entered promiscuous mode [ 205.845351][ T9914] syzkaller0: entered allmulticast mode [ 206.558894][ T9949] netlink: 'syz.0.999': attribute type 14 has an invalid length. [ 206.567077][ T9949] netlink: 'syz.0.999': attribute type 11 has an invalid length. [ 206.729939][ T9953] netlink: 'syz.1.1000': attribute type 20 has an invalid length. [ 206.935264][ T9953] netlink: 'syz.1.1000': attribute type 20 has an invalid length. [ 206.945315][ T65] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 206.954026][ T65] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 206.965926][ T65] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 206.984487][ T65] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 207.038429][ T9960] tipc: Enabled bearer , priority 0 [ 207.046333][ T9960] syzkaller0: entered promiscuous mode [ 207.051941][ T9960] syzkaller0: entered allmulticast mode [ 207.134393][ T9960] tipc: Resetting bearer [ 207.185519][ T9959] tipc: Resetting bearer [ 207.208853][ T9959] tipc: Disabling bearer [ 207.347109][ T9975] netlink: 'syz.1.1006': attribute type 3 has an invalid length. [ 207.393417][ T9979] xt_nfacct: accounting object `syz0' does not exist [ 207.698217][ T9996] ip6gretap1: entered allmulticast mode [ 207.868727][ T9996] geneve2: entered promiscuous mode [ 207.906985][ T65] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 207.915913][ T65] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.930442][ T65] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 207.959408][ T65] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.973702][ T65] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 207.992318][ T65] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.012729][ T65] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 208.032783][ T65] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.722206][T10030] IPVS: set_ctl: invalid protocol: 46 172.30.0.2:20002 [ 208.772577][T10030] ip6gre2: entered promiscuous mode [ 208.784787][T10030] ip6gre2: entered allmulticast mode [ 208.976427][T10039] IPVS: set_ctl: invalid protocol: 44 224.0.0.2:20001 [ 209.015831][T10043] __nla_validate_parse: 15 callbacks suppressed [ 209.015852][T10043] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1026'. [ 209.074944][T10043] xfrm1: entered promiscuous mode [ 209.084054][T10043] xfrm1: entered allmulticast mode [ 209.112982][T10043] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1026'. [ 209.319016][T10055] batadv_slave_0: entered promiscuous mode [ 209.325263][T10055] netlink: 'syz.0.1029': attribute type 3 has an invalid length. [ 209.405205][T10058] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 209.425180][T10058] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 209.728391][T10081] 8021q: adding VLAN 0 to HW filter on device bond2 [ 209.739176][T10081] bridge0: port 3(bond2) entered blocking state [ 209.751622][T10081] bridge0: port 3(bond2) entered disabled state [ 209.759344][T10081] bond2: entered allmulticast mode [ 209.769788][T10081] bond2: entered promiscuous mode [ 209.775819][T10081] bridge0: port 3(bond2) entered blocking state [ 209.782442][T10081] bridge0: port 3(bond2) entered forwarding state [ 209.814437][T10093] tipc: Enabled bearer , priority 0 [ 209.824398][T10080] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1037'. [ 209.835640][T10080] syzkaller0: entered allmulticast mode [ 209.845842][T10076] tipc: Disabling bearer [ 209.860313][ T7211] bridge0: port 3(bond2) entered disabled state [ 210.028075][T10100] netlink: 6 bytes leftover after parsing attributes in process `syz.4.1042'. [ 210.037412][T10100] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 210.138820][T10108] netlink: 'syz.2.1045': attribute type 2 has an invalid length. [ 210.213500][T10115] netlink: 'syz.0.1048': attribute type 21 has an invalid length. [ 210.224299][T10115] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1048'. [ 210.246579][T10118] netlink: 'syz.3.1047': attribute type 10 has an invalid length. [ 210.254883][T10118] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1047'. [ 210.264544][T10115] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1048'. [ 210.285744][T10118] team0: Failed to send options change via netlink (err -105) [ 210.314168][T10118] team0: Port device geneve0 added [ 210.320071][ T7217] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.338336][ T7217] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.347877][ T7217] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.383892][ T7217] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.507164][T10128] netlink: 'syz.0.1053': attribute type 11 has an invalid length. [ 210.800981][T10149] bridge0: port 3(erspan0) entered blocking state [ 210.803064][T10152] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1060'. [ 210.817775][T10149] bridge0: port 3(erspan0) entered disabled state [ 210.828143][T10149] erspan0: entered allmulticast mode [ 210.843057][T10149] erspan0: left allmulticast mode [ 211.218641][T10160] netlink: 'syz.3.1063': attribute type 11 has an invalid length. [ 211.256278][T10163] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1064'. [ 211.324691][T10163] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1064'. [ 211.643895][T10179] IPVS: set_ctl: invalid protocol: 135 10.1.1.0:20003 [ 211.986090][T10216] "syz.2.1076" (10216) uses obsolete ecb(arc4) skcipher [ 212.424139][T10251] syzkaller0: entered promiscuous mode [ 212.429809][T10251] syzkaller0: entered allmulticast mode [ 212.435639][T10252] Bluetooth: MGMT ver 1.23 [ 212.457151][T10251] tipc: Enabled bearer , priority 0 [ 212.759571][T10248] tipc: Resetting bearer [ 212.801085][T10248] tipc: Disabling bearer [ 212.883555][T10267] validate_nla: 2 callbacks suppressed [ 212.909415][T10267] netlink: 'syz.0.1093': attribute type 9 has an invalid length. [ 212.923684][T10267] netlink: 'syz.0.1093': attribute type 11 has an invalid length. [ 212.946448][T10267] netlink: 'syz.0.1093': attribute type 12 has an invalid length. [ 213.304410][T10285] netlink: 'syz.2.1097': attribute type 42 has an invalid length. [ 213.325102][T10289] syzkaller0: entered promiscuous mode [ 213.343736][T10289] syzkaller0: entered allmulticast mode [ 213.943302][T10317] netlink: 'syz.1.1103': attribute type 10 has an invalid length. [ 214.578790][T10277] __nla_validate_parse: 11 callbacks suppressed [ 214.578808][T10277] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1096'. [ 214.831661][T10344] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 214.860677][T10350] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1111'. [ 214.904583][T10350] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1111'. [ 215.254459][T10374] netlink: 'syz.1.1115': attribute type 27 has an invalid length. [ 215.596420][T10393] tipc: Enabling of bearer rejected, media not registered [ 215.641758][T10400] netlink: 'syz.4.1125': attribute type 1 has an invalid length. [ 215.668727][T10400] netlink: 'syz.4.1125': attribute type 1 has an invalid length. [ 215.805420][T10405] bond3: Removing last ns target with arp_interval on [ 215.879194][T10408] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1129'. [ 216.124661][T10425] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1135'. [ 216.381346][T10432] netlink: 'syz.2.1136': attribute type 15 has an invalid length. [ 216.392727][T10432] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1136'. [ 216.432042][ T7211] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 2816 - 0 [ 216.441754][T10432] netlink: 'syz.2.1136': attribute type 15 has an invalid length. [ 216.450096][T10432] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1136'. [ 216.477988][ T7211] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 2816 - 0 [ 216.490407][ T7211] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 2816 - 0 [ 216.510072][ T7211] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 2816 - 0 [ 216.604446][ T8271] af_packet: tpacket_rcv: packet too big, clamped from 76 to 4294967272. macoff=96 [ 216.819089][T10457] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 216.846520][T10457] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 216.871068][T10459] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1142'. [ 217.037839][T10454] delete_channel: no stack [ 217.070899][T10468] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1145'. [ 217.888791][T10503] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1153'. [ 218.432571][ T3656] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.445715][ T3656] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.466104][ T3656] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.550339][ T3656] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.463669][T10550] A link change request failed with some changes committed already. Interface veth0_to_bond may have been left with an inconsistent configuration, please check. [ 220.077472][T10582] wg1 speed is unknown, defaulting to 1000 [ 220.216974][T10582] wg1 speed is unknown, defaulting to 1000 [ 220.308068][T10582] wg1 speed is unknown, defaulting to 1000 [ 220.331034][T10582] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 220.409216][T10582] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 220.529915][T10582] wg1 speed is unknown, defaulting to 1000 [ 220.548417][T10582] wg1 speed is unknown, defaulting to 1000 [ 220.560217][T10582] wg1 speed is unknown, defaulting to 1000 [ 220.571824][T10582] wg1 speed is unknown, defaulting to 1000 [ 220.581521][T10582] wg1 speed is unknown, defaulting to 1000 [ 220.589817][T10582] wg1 speed is unknown, defaulting to 1000 [ 220.663926][T10607] __nla_validate_parse: 7 callbacks suppressed [ 220.663946][T10607] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1176'. [ 220.730405][T10607] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1176'. [ 220.949034][T10623] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1180'. [ 221.056933][T10631] x_tables: duplicate underflow at hook 1 [ 221.077332][T10631] Bluetooth: hci4: Opcode 0x0401 failed: -22 [ 221.154668][T10635] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1184'. [ 221.237659][T10642] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1187'. [ 221.371979][T10647] validate_nla: 2 callbacks suppressed [ 221.371999][T10647] netlink: 'syz.4.1189': attribute type 1 has an invalid length. [ 221.434368][T10645] netlink: 'syz.1.1188': attribute type 1 has an invalid length. [ 221.442439][T10645] netlink: 9188 bytes leftover after parsing attributes in process `syz.1.1188'. [ 221.452003][T10650] netlink: 'syz.1.1188': attribute type 1 has an invalid length. [ 221.471190][T10647] gretap1: entered allmulticast mode [ 221.513858][T10650] netlink: 9188 bytes leftover after parsing attributes in process `syz.1.1188'. [ 221.720823][T10658] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1191'. [ 221.731594][T10658] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1191'. [ 221.763824][T10638] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1185'. [ 223.219593][T10691] team0: Port device dummy0 removed [ 223.232222][T10692] syzkaller1: entered promiscuous mode [ 223.238506][T10692] syzkaller1: entered allmulticast mode [ 223.252948][T10699] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 223.507613][T10705] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 223.536968][T10702] xt_policy: output policy not valid in PREROUTING and INPUT [ 223.825423][T10721] pim6reg: entered allmulticast mode [ 223.832192][T10721] pim6reg: left allmulticast mode [ 223.880742][T10718] nbd: socks must be embedded in a SOCK_ITEM attr [ 223.911161][T10724] openvswitch: netlink: Port -1 exceeds max allowable 65535 [ 224.395317][T10751] ip6gre2: entered promiscuous mode [ 224.415020][T10751] ip6gre2: entered allmulticast mode [ 224.872929][T10777] netlink: 'syz.4.1226': attribute type 10 has an invalid length. [ 224.904540][T10777] batman_adv: batadv0: Adding interface: virt_wifi0 [ 224.924171][T10777] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 224.970912][T10777] batman_adv: batadv0: Not using interface virt_wifi0 (retrying later): interface not active [ 225.203519][T10783] wg1 speed is unknown, defaulting to 1000 [ 225.609157][T10812] pimreg3: entered allmulticast mode [ 225.871239][T10818] __nla_validate_parse: 14 callbacks suppressed [ 225.871259][T10818] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1237'. [ 225.985652][T10821] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1238'. [ 226.023991][T10820] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1238'. [ 226.326499][T10836] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1242'. [ 226.443948][T10841] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 226.896197][T10873] can: request_module (can-proto-0) failed. [ 227.032660][T10887] netlink: 'syz.4.1252': attribute type 4 has an invalid length. [ 227.096558][T10887] netlink: 'syz.4.1252': attribute type 4 has an invalid length. [ 227.284005][T10895] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1255'. [ 227.388155][T10895] veth7: entered allmulticast mode [ 228.224037][T10926] wg1 speed is unknown, defaulting to 1000 [ 228.252894][T10928] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1263'. [ 228.286657][T10928] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1263'. [ 228.806857][T10946] netlink: 'syz.0.1267': attribute type 11 has an invalid length. [ 229.086313][T10952] netlink: 'syz.1.1270': attribute type 1 has an invalid length. [ 229.311595][T10952] 8021q: adding VLAN 0 to HW filter on device bond3 [ 229.389299][T10955] bond3: (slave gretap2): making interface the new active one [ 229.430022][T10955] bond3: (slave gretap2): Enslaving as an active interface with an up link [ 229.458940][T10962] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1270'. [ 229.489620][T10954] wg1 speed is unknown, defaulting to 1000 [ 229.592739][T10952] wg1 speed is unknown, defaulting to 1000 [ 229.684381][T10948] lec:lec_atm_close: lec0: Shut down! [ 229.859875][T10981] syzkaller1: entered promiscuous mode [ 229.889541][T10981] syzkaller1: entered allmulticast mode [ 230.034501][T10983] wg1 speed is unknown, defaulting to 1000 [ 230.374888][T10992] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1276'. [ 231.479303][T11025] tipc: Enabling of bearer rejected, failed to enable media [ 231.580579][T11034] netlink: 'syz.0.1286': attribute type 6 has an invalid length. [ 231.634744][T11039] netlink: 356 bytes leftover after parsing attributes in process `syz.4.1288'. [ 231.736982][T11031] wg1 speed is unknown, defaulting to 1000 [ 231.755466][T11048] IPVS: set_ctl: invalid protocol: 50 10.1.1.1:20001 [ 231.776627][T11051] IPVS: set_ctl: invalid protocol: 50 10.1.1.1:20001 [ 232.144498][T11070] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1298'. [ 232.199492][T11072] netlink: 'syz.2.1299': attribute type 11 has an invalid length. [ 232.277447][T11075] geneve1: entered promiscuous mode [ 232.290977][T11075] geneve1: entered allmulticast mode [ 232.329627][ T7202] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.339498][ T7202] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.380022][ T7202] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.438414][T11077] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1300'. [ 232.696158][T11099] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_rx_wq": -EINTR [ 232.699847][T11102] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_rx_wq": -EINTR [ 232.789029][T11108] netlink: 'syz.1.1308': attribute type 10 has an invalid length. [ 232.867751][T11108] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 233.175005][T11130] openvswitch: netlink: IPv4 tun info is not correct [ 233.205500][T11130] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1314'. [ 233.226810][T11130] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1314'. [ 233.712327][T11150] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1320'. [ 233.723959][T11150] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1320'. [ 233.756276][T11152] xt_recent: Unsupported userspace flags (000000a3) [ 234.046129][T11166] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 234.072493][T11159] wg1 speed is unknown, defaulting to 1000 [ 234.382518][T11182] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1331'. [ 234.608766][T11190] tipc: Enabled bearer , priority 0 [ 234.626434][T11190] syzkaller0: entered promiscuous mode [ 234.636159][T11190] syzkaller0: entered allmulticast mode [ 234.673228][T11190] tipc: Resetting bearer [ 234.687044][T11189] tipc: Resetting bearer [ 234.723465][T11189] tipc: Disabling bearer [ 234.746962][T11195] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1335'. [ 235.174522][T11188] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1326'. [ 235.547075][T11218] netlink: 'syz.4.1339': attribute type 13 has an invalid length. [ 235.574458][T11218] netlink: 'syz.4.1339': attribute type 27 has an invalid length. [ 235.657022][T11219] wg1 speed is unknown, defaulting to 1000 [ 236.006820][T11233] bond4: peer notification delay (9) is not a multiple of miimon (100), value rounded to 0 ms [ 236.221902][T11245] geneve0: entered promiscuous mode [ 236.250567][ T7211] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.263807][ T7211] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.272659][ T7211] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.282000][ T7211] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.370056][T11245] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 236.383730][T11245] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.510280][T11245] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 236.532684][T11245] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.653955][T11245] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 236.667719][T11245] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.690405][T11261] wg1 speed is unknown, defaulting to 1000 [ 236.847403][T11245] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 236.865376][T11245] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.165425][ T7200] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 2816 - 0 [ 237.174655][ T7200] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.208206][ T7200] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 2816 - 0 [ 237.238310][ T7200] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.287663][T11283] __nla_validate_parse: 5 callbacks suppressed [ 237.287682][T11283] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1360'. [ 237.430211][T11288] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1362'. [ 240.591728][T11277] veth7: entered promiscuous mode [ 240.664462][T11286] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1361'. [ 240.674111][T11298] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1365'. [ 240.695228][T11298] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1365'. [ 240.772320][T11286] xfrm1: entered promiscuous mode [ 240.784287][T11286] xfrm1: entered allmulticast mode [ 240.792325][ T65] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 2816 - 0 [ 240.802863][T11286] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1361'. [ 240.813472][ T65] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.822719][ T65] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 2816 - 0 [ 240.831428][ T65] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.972573][T11313] netlink: 176 bytes leftover after parsing attributes in process `syz.3.1370'. [ 241.008366][T11314] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1369'. [ 241.021262][T11314] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1369'. [ 241.095225][T11314] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 241.115158][T11321] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1373'. [ 241.459079][T11346] netlink: 'syz.1.1380': attribute type 3 has an invalid length. [ 241.473162][T11346] netlink: 'syz.1.1380': attribute type 1 has an invalid length. [ 241.496258][T11346] NCSI netlink: No device for ifindex 813332851 [ 241.600275][T11354] netlink: 'syz.2.1382': attribute type 6 has an invalid length. [ 241.625791][T11354] netlink: 'syz.2.1382': attribute type 5 has an invalid length. [ 241.672266][T11354] netlink: 'syz.2.1382': attribute type 4 has an invalid length. [ 241.722721][T11364] netlink: 'syz.2.1382': attribute type 4 has an invalid length. [ 241.867741][T11371] bond4: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 241.880834][T11371] bond4 (unregistering): Released all slaves [ 242.569644][T11404] wg1 speed is unknown, defaulting to 1000 [ 242.575987][T11404] wg1 speed is unknown, defaulting to 1000 [ 242.583082][T11404] wg1 speed is unknown, defaulting to 1000 [ 242.622800][T11404] infiniband syz: RDMA CMA: cma_listen_on_dev, error -98 [ 242.669483][T11405] xt_TCPMSS: Only works on TCP SYN packets [ 242.703245][T11404] wg1 speed is unknown, defaulting to 1000 [ 242.711431][T11404] wg1 speed is unknown, defaulting to 1000 [ 242.719574][T11404] wg1 speed is unknown, defaulting to 1000 [ 242.727755][T11404] wg1 speed is unknown, defaulting to 1000 [ 242.735947][T11404] wg1 speed is unknown, defaulting to 1000 [ 243.156879][T11420] netlink: 'syz.3.1398': attribute type 1 has an invalid length. [ 243.166117][T11420] __nla_validate_parse: 17 callbacks suppressed [ 243.166139][T11420] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1398'. [ 243.238292][T11423] tipc: Enabling not permitted [ 243.246210][T11423] tipc: Enabling of bearer rejected, failed to enable media [ 243.657886][T11450] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1409'. [ 243.779909][T11457] x_tables: unsorted underflow at hook 1 [ 243.928450][T11462] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1413'. [ 244.109933][T11470] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_bond, syncid = 0, id = 0 [ 244.199410][T11472] debugfs: 'netdev@ffff88805a59c618' already exists in 'ref_tracker' [ 244.283183][T11479] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1416'. [ 244.769718][T11511] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1422'. [ 244.804802][T11511] netlink: 228 bytes leftover after parsing attributes in process `syz.4.1422'. [ 244.876880][T11515] netlink: 'syz.0.1426': attribute type 23 has an invalid length. [ 244.993999][T11516] netlink: 'syz.0.1426': attribute type 23 has an invalid length. [ 245.069822][T11524] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1428'. [ 245.095056][T11524] vlan0: entered promiscuous mode [ 245.118373][T11526] batadv_slave_0: entered promiscuous mode [ 245.207157][T11532] batadv_slave_0: left promiscuous mode [ 245.474783][T11556] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1435'. [ 245.509783][T11556] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1435'. [ 245.550947][T11562] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1439'. [ 245.561378][T11558] xt_CONNSECMARK: invalid mode: 0 [ 245.597034][T11560] delete_channel: no stack [ 246.126340][T11582] netlink: 'syz.3.1444': attribute type 11 has an invalid length. [ 246.155091][T11582] netlink: 'syz.3.1444': attribute type 11 has an invalid length. [ 246.285037][T11569] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 246.810518][T11617] syzkaller0: entered promiscuous mode [ 246.830712][T11617] syzkaller0: entered allmulticast mode [ 248.363342][T11625] wg1 speed is unknown, defaulting to 1000 [ 248.371188][T11625] wg1 speed is unknown, defaulting to 1000 [ 248.438127][T11639] __nla_validate_parse: 7 callbacks suppressed [ 248.438148][T11639] netlink: 388 bytes leftover after parsing attributes in process `syz.0.1460'. [ 248.736480][T11650] IPVS: Error connecting to the multicast addr [ 248.759507][T11650] netlink: 'syz.3.1464': attribute type 4 has an invalid length. [ 248.780371][T11650] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.1464'. [ 248.920193][T11655] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.949793][T11661] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1466'. [ 249.105498][T11668] syzkaller0: entered promiscuous mode [ 249.114827][T11668] syzkaller0: entered allmulticast mode [ 249.127620][T11660] tipc: Enabled bearer , priority 0 [ 249.269616][T11655] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.355439][T11674] ipt_REJECT: TCP_RESET invalid for non-tcp [ 249.365293][T11663] tipc: Resetting bearer [ 249.374248][T11673] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1470'. [ 249.408043][T11656] tipc: Resetting bearer [ 249.431347][T11656] tipc: Disabling bearer [ 249.450419][T11677] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1469'. [ 249.485174][T11655] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.736844][ T7217] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.790642][ T7217] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.810202][T11689] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1474'. [ 249.834678][ T3656] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.845482][T11689] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1474'. [ 249.875411][ T7217] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.156720][T11713] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1481'. [ 250.167592][T11713] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1481'. [ 250.229435][T11716] netlink: 'syz.4.1483': attribute type 10 has an invalid length. [ 250.426298][T11728] bond0: (slave bridge0): Releasing backup interface [ 250.438274][T11732] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1486'. [ 250.477621][T11728] bond0: (slave team0): Releasing backup interface [ 250.510649][T11728] bridge_slave_0: left allmulticast mode [ 250.516553][T11728] bridge_slave_0: left promiscuous mode [ 250.522537][T11728] bridge0: port 1(bridge_slave_0) entered disabled state [ 250.536858][T11728] bridge_slave_1: left allmulticast mode [ 250.544723][T11728] bridge_slave_1: left promiscuous mode [ 250.557005][T11728] bridge0: port 2(bridge_slave_1) entered disabled state [ 250.566064][T11728] bond2: left promiscuous mode [ 250.582748][T11728] bond0: (slave bond_slave_0): Releasing backup interface [ 250.590559][T11738] netlink: 'syz.1.1488': attribute type 39 has an invalid length. [ 250.599199][T11728] bond0: (slave bond_slave_1): Releasing backup interface [ 250.611499][T11728] team0: Failed to send options change via netlink (err -105) [ 250.620554][T11728] team0: Failed to send port change of device team_slave_0 via netlink (err -105) [ 250.630755][T11728] team0: Port device team_slave_0 removed [ 250.638993][T11728] team0: Failed to send options change via netlink (err -105) [ 250.647024][T11728] team0: Failed to send port change of device team_slave_1 via netlink (err -105) [ 250.657235][T11728] team0: Port device team_slave_1 removed [ 250.663799][T11728] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 250.672034][T11728] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 250.680393][T11728] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 251.032170][T11748] netlink: 'syz.0.1490': attribute type 13 has an invalid length. [ 251.046057][T11748] netlink: 'syz.0.1490': attribute type 17 has an invalid length. [ 251.101897][T11748] 8021q: adding VLAN 0 to HW filter on device bond0 [ 251.118537][T11748] 8021q: adding VLAN 0 to HW filter on device team0 [ 251.132280][T11748] 0ªX¹¦À: left allmulticast mode [ 251.138030][T11748] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 251.263496][T11748] PF_CAN: dropped non conform CAN XL skbuff: dev type 280, len 40 [ 251.368410][T11759] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode [ 251.383899][T11748] wg1 speed is unknown, defaulting to 1000 [ 251.395799][T11748] wg1 speed is unknown, defaulting to 1000 [ 251.414149][T11751] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 251.972300][T11769] wg1 speed is unknown, defaulting to 1000 [ 251.980402][T11769] wg1 speed is unknown, defaulting to 1000 [ 252.257219][T11780] wg1 speed is unknown, defaulting to 1000 [ 252.265087][T11780] wg1 speed is unknown, defaulting to 1000 [ 253.016655][T11832] netlink: 'syz.1.1515': attribute type 15 has an invalid length. [ 253.295510][T11844] IPVS: set_ctl: invalid protocol: 137 172.20.20.170:20000 [ 253.360236][T11849] netlink: 'syz.4.1521': attribute type 29 has an invalid length. [ 253.400500][T11849] netlink: 'syz.4.1521': attribute type 29 has an invalid length. [ 253.642774][T11856] dvmrp0: entered allmulticast mode [ 253.889856][T11869] wg1 speed is unknown, defaulting to 1000 [ 253.907860][T11869] wg1 speed is unknown, defaulting to 1000 [ 254.139860][T11894] __nla_validate_parse: 13 callbacks suppressed [ 254.139880][T11894] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1533'. [ 254.266767][T11896] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1531'. [ 254.429747][T11903] wg1 speed is unknown, defaulting to 1000 [ 254.489264][T11903] wg1 speed is unknown, defaulting to 1000 [ 254.505354][T11907] veth0: entered promiscuous mode [ 254.638278][T11915] netlink: 'syz.4.1534': attribute type 16 has an invalid length. [ 254.655852][T11915] netlink: 'syz.4.1534': attribute type 17 has an invalid length. [ 254.709944][T11910] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1536'. [ 254.860283][T11915] 8021q: adding VLAN 0 to HW filter on device bond0 [ 254.870897][T11915] 8021q: adding VLAN 0 to HW filter on device team0 [ 254.886050][T11915] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 254.904437][T11924] syzkaller0: entered promiscuous mode [ 254.910157][T11924] syzkaller0: entered allmulticast mode [ 255.268216][T11907] veth0: left promiscuous mode [ 255.295252][ T65] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 2816 - 0 [ 255.322860][ T65] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.392879][T11963] netlink: 'syz.2.1548': attribute type 21 has an invalid length. [ 255.407156][T11962] netlink: 'syz.0.1546': attribute type 4 has an invalid length. [ 255.419691][ T65] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 2816 - 0 [ 255.429915][T11962] netlink: 14345 bytes leftover after parsing attributes in process `syz.0.1546'. [ 255.456286][ T65] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.475081][ T65] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 2816 - 0 [ 255.483496][ T65] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.529954][ T65] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 2816 - 0 [ 255.544084][ T65] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.802811][T11987] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1553'. [ 255.835470][T11987] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1553'. [ 255.865542][T11990] openvswitch: netlink: Flow key attr not present in new flow. [ 255.927830][T11987] tipc: Enabled bearer , priority 0 [ 255.964694][T11987] syzkaller0: entered promiscuous mode [ 255.985472][T11987] syzkaller0: entered allmulticast mode [ 256.030151][T11986] tipc: Resetting bearer [ 256.046107][T11986] tipc: Disabling bearer [ 256.239785][T12015] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1561'. [ 256.305301][T12016] tipc: Enabled bearer , priority 0 [ 256.322608][T12015] syzkaller0: entered promiscuous mode [ 256.332389][T12015] syzkaller0: entered allmulticast mode [ 256.349829][T12016] syzkaller0: entered promiscuous mode [ 256.363966][T12016] syzkaller0: entered allmulticast mode [ 257.136665][T12030] tipc: Resetting bearer [ 257.182401][T12013] tipc: Resetting bearer [ 257.210269][T12013] tipc: Disabling bearer [ 257.396088][T12039] geneve2: entered promiscuous mode [ 257.402874][T12042] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1570'. [ 257.406012][T12039] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1569'. [ 257.414873][T12037] netlink: 100 bytes leftover after parsing attributes in process `syz.1.1568'. [ 258.882662][T12110] wg1 speed is unknown, defaulting to 1000 [ 258.911548][T12110] wg1 speed is unknown, defaulting to 1000 [ 259.449406][T12125] openvswitch: netlink: nsh attr 1647 is out of range max 3 [ 259.769839][T12136] __nla_validate_parse: 3 callbacks suppressed [ 259.769861][T12136] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1593'. [ 259.792378][T12139] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1594'. [ 259.975735][T12153] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1598'. [ 260.048561][T12153] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 260.059025][T12153] bond5: (slave batadv1): Enslaving as an active interface with an up link [ 260.071309][T12154] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1598'. [ 260.097010][T12160] macvlan1: entered promiscuous mode [ 260.116243][T12160] ipvlan0: entered promiscuous mode [ 260.144977][T12160] ipvlan0: left promiscuous mode [ 260.150550][T12160] macvlan1: left promiscuous mode [ 260.169807][T12161] syzkaller1: entered promiscuous mode [ 260.177362][T12161] syzkaller1: entered allmulticast mode [ 260.210827][T12165] tipc: Enabled bearer , priority 0 [ 260.256079][T12165] syzkaller0: entered promiscuous mode [ 260.271700][T12165] syzkaller0: entered allmulticast mode [ 260.349729][T12165] tipc: Resetting bearer [ 260.384106][T12164] tipc: Resetting bearer [ 260.408574][T12164] tipc: Disabling bearer [ 260.607627][T12188] netlink: 212348 bytes leftover after parsing attributes in process `syz.3.1605'. [ 260.668194][T12194] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1607'. [ 260.743383][T12198] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1607'. [ 260.960346][T12201] syzkaller0: entered promiscuous mode [ 260.975539][T12201] syzkaller0: entered allmulticast mode [ 261.009590][T12210] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1610'. [ 261.022134][T12209] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1610'. [ 261.117881][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 261.213361][T12218] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 261.231290][T12204] wg1 speed is unknown, defaulting to 1000 [ 261.259178][T12227] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1612'. [ 261.274965][T12204] wg1 speed is unknown, defaulting to 1000 [ 261.289380][T12227] netlink: 'syz.1.1612': attribute type 6 has an invalid length. [ 261.961922][T12265] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 262.298821][T12291] netlink: 'syz.0.1623': attribute type 1 has an invalid length. [ 262.397440][T12292] wg1 speed is unknown, defaulting to 1000 [ 262.416549][T12292] wg1 speed is unknown, defaulting to 1000 [ 262.467792][T12297] IPVS: lblc: FWM 3 0x00000003 - no destination available [ 262.681797][T12307] syzkaller0: entered promiscuous mode [ 262.701794][T12307] syzkaller0: entered allmulticast mode [ 262.795361][T12307] syzkaller0: left promiscuous mode [ 262.800636][T12307] syzkaller0: left allmulticast mode [ 263.187492][ T5837] block nbd3: Receive control failed (result -1) [ 263.335834][T12332] pim6reg: entered allmulticast mode [ 263.530382][T12327] pim6reg: left allmulticast mode [ 263.764638][T12342] netlink: zone id is out of range [ 263.806005][T12342] tipc: Enabled bearer , priority 0 [ 263.818705][T12342] syzkaller0: entered promiscuous mode [ 263.835095][T12342] syzkaller0: entered allmulticast mode [ 263.898218][T12342] tipc: Resetting bearer [ 263.926970][T12348] wg1 speed is unknown, defaulting to 1000 [ 263.940176][T12341] tipc: Resetting bearer [ 264.004538][T12341] tipc: Disabling bearer [ 264.045077][T12348] wg1 speed is unknown, defaulting to 1000 [ 264.205697][T12366] netlink: 'syz.1.1645': attribute type 18 has an invalid length. [ 264.469409][T12372] team0 (unregistering): Port device team_slave_0 removed [ 264.489839][T12372] team0 (unregistering): Port device team_slave_1 removed [ 264.517658][T12372] team0 (unregistering): Port device geneve0 removed [ 264.838791][T12396] netlink: 'syz.4.1653': attribute type 1 has an invalid length. [ 264.851584][T12396] __nla_validate_parse: 10 callbacks suppressed [ 264.851605][T12396] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1653'. [ 265.078005][T12406] 8021q: adding VLAN 0 to HW filter on device bond0 [ 265.086947][T12406] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 265.107733][T12410] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1657'. [ 265.124843][T12410] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1657'. [ 265.134746][T12412] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1657'. [ 265.154830][T12412] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1657'. [ 265.176132][T12414] sctp: [Deprecated]: syz.3.1658 (pid 12414) Use of int in max_burst socket option deprecated. [ 265.176132][T12414] Use struct sctp_assoc_value instead [ 265.195826][T12410] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1657'. [ 265.198120][T12412] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1657'. [ 265.204958][ T65] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 265.205048][ T65] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 265.231353][T12412] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1657'. [ 265.250565][ T65] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 265.259084][T12410] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1657'. [ 265.280944][ T65] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 265.378148][T12419] 8021q: adding VLAN 0 to HW filter on device bond0 [ 265.386575][T12427] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1659'. [ 265.400718][T12419] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 265.583429][T12430] wg1 speed is unknown, defaulting to 1000 [ 265.605263][T12430] wg1 speed is unknown, defaulting to 1000 [ 266.181640][T12463] netlink: 'syz.3.1670': attribute type 5 has an invalid length. [ 266.487180][T12478] ip6gretap2: entered promiscuous mode [ 266.493294][T12478] bond0: (slave ip6gretap2): Enslaving as an active interface with an up link [ 267.126724][T12496] xt_TCPMSS: Only works on TCP SYN packets [ 267.228809][T12496] wg1 speed is unknown, defaulting to 1000 [ 267.237704][T12496] wg1 speed is unknown, defaulting to 1000 [ 267.743126][T12540] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 268.039936][T12567] netlink: 'syz.2.1697': attribute type 1 has an invalid length. [ 268.784848][T12617] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 268.836220][T12612] wg1 speed is unknown, defaulting to 1000 [ 268.845639][T12612] wg1 speed is unknown, defaulting to 1000 [ 268.871537][T12622] : renamed from bond0 [ 268.883358][T12624] netlink: 'syz.2.1715': attribute type 1 has an invalid length. [ 269.036040][T12624] 8021q: adding VLAN 0 to HW filter on device bond5 [ 269.190385][T12630] bond5 (unregistering): Released all slaves [ 269.429457][T12650] .70·: renamed from hsr0 [ 269.438267][T12650] .70·: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 269.449162][T12650] .70·: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 269.460291][T12650] .70·: entered allmulticast mode [ 269.467564][T12650] hsr_slave_0: entered allmulticast mode [ 269.474838][T12650] hsr_slave_1: entered allmulticast mode [ 269.482435][T12650] A link change request failed with some changes committed already. Interface .70· may have been left with an inconsistent configuration, please check. [ 269.570712][T12653] syzkaller0: entered promiscuous mode [ 269.632638][T12653] syzkaller0: entered allmulticast mode [ 269.715605][T12657] bridge7: entered promiscuous mode [ 269.896363][T12675] __nla_validate_parse: 16 callbacks suppressed [ 269.896383][T12675] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1724'. [ 269.923120][T12657] netlink: 'syz.0.1723': attribute type 1 has an invalid length. [ 270.009763][T12675] gtp0: entered promiscuous mode [ 270.015562][T12675] gtp0: entered allmulticast mode [ 270.101395][T12680] netlink: 'syz.3.1726': attribute type 2 has an invalid length. [ 270.149339][T12677] bond6: option all_slaves_active: invalid value (13) [ 270.161685][T12677] bond6 (unregistering): Released all slaves [ 270.205295][T12680] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1726'. [ 270.369762][T12690] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.1728'. [ 270.717168][T12707] syzkaller0: entered promiscuous mode [ 270.722795][T12707] syzkaller0: entered allmulticast mode [ 270.807201][T12713] tipc: Enabled bearer , priority 0 [ 270.815462][T12714] netlink: 'syz.4.1735': attribute type 3 has an invalid length. [ 270.866215][T12717] netlink: 348 bytes leftover after parsing attributes in process `syz.1.1736'. [ 270.878212][T12706] tipc: Resetting bearer [ 270.921481][T12720] ieee802154 phy1 wpan1: encryption failed: -22 [ 270.932177][T12706] tipc: Disabling bearer [ 270.966911][T12719] wg1 speed is unknown, defaulting to 1000 [ 270.975437][T12719] wg1 speed is unknown, defaulting to 1000 [ 271.091629][T12725] netlink: 436 bytes leftover after parsing attributes in process `syz.4.1738'. [ 271.106017][T12730] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1739'. [ 271.165972][T12730] : (slave bridge0): Releasing backup interface [ 271.451915][T12741] wg1 speed is unknown, defaulting to 1000 [ 271.466851][T12741] wg1 speed is unknown, defaulting to 1000 [ 271.844593][T12771] netlink: 112 bytes leftover after parsing attributes in process `syz.0.1748'. [ 271.955114][T12779] pim6reg1: entered promiscuous mode [ 271.985023][T12779] pim6reg1: entered allmulticast mode [ 272.353903][T12798] netlink: 10 bytes leftover after parsing attributes in process `syz.2.1756'. [ 272.388749][T12800] netlink: 10 bytes leftover after parsing attributes in process `syz.2.1756'. [ 272.571621][T12791] 8021q: adding VLAN 0 to HW filter on device bond5 [ 272.581009][T12810] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.1758'. [ 272.692982][T12815] tipc: Enabled bearer , priority 0 [ 272.717935][T12815] syzkaller0: entered promiscuous mode [ 272.723472][T12815] syzkaller0: entered allmulticast mode [ 272.831777][T12817] tipc: Resetting bearer [ 272.883520][T12814] tipc: Resetting bearer [ 272.947148][T12814] tipc: Disabling bearer [ 272.981196][T12830] netlink: 'syz.4.1763': attribute type 11 has an invalid length. [ 273.067604][T12830] netlink: 'syz.4.1763': attribute type 11 has an invalid length. [ 273.178271][T12838] batman_adv: batadv0: Removing interface: dummy0 [ 273.212113][T12838] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 273.245898][T12842] netlink: 'syz.2.1768': attribute type 15 has an invalid length. [ 273.294582][T12822] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 273.516611][T12850] syzkaller0: entered promiscuous mode [ 273.530655][T12850] syzkaller0: entered allmulticast mode [ 273.540961][T12850] syzkaller0: mtu greater than device maximum [ 273.824273][T12867] nbd: socks must be embedded in a SOCK_ITEM attr [ 273.879362][T12872] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 275.469342][T12960] nbd5: detected capacity change from 0 to 127 [ 275.481612][T12965] __nla_validate_parse: 11 callbacks suppressed [ 275.481632][T12965] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1804'. [ 275.514389][T12960] netlink: 'syz.1.1804': attribute type 10 has an invalid length. [ 275.540443][T12965] block nbd0: reconnected socket [ 275.572337][T12965] nbd: socks must be embedded in a SOCK_ITEM attr [ 275.606266][ T5837] block nbd5: Receive control failed (result -32) [ 275.616790][ T5848] block nbd0: Receive control failed (result -32) [ 275.702665][T12976] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1809'. [ 275.851849][T12987] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 275.956367][T12987] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1812'. [ 275.982554][T12987] netlink: 120 bytes leftover after parsing attributes in process `syz.4.1812'. [ 276.014045][T12999] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1814'. [ 276.067497][T13000] wg1 speed is unknown, defaulting to 1000 [ 276.076259][T13000] wg1 speed is unknown, defaulting to 1000 [ 276.344246][T13012] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1816'. [ 277.106571][T13040] bond0: Device is already in use. [ 277.395110][T13043] wg1 speed is unknown, defaulting to 1000 [ 277.440179][T13043] wg1 speed is unknown, defaulting to 1000 [ 277.602604][T13051] netlink: 'syz.2.1825': attribute type 4 has an invalid length. [ 277.661425][T13053] netlink: 'syz.2.1825': attribute type 4 has an invalid length. [ 277.669680][T13054] netlink: 'syz.3.1826': attribute type 1 has an invalid length. [ 277.695455][T13051] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1825'. [ 277.781866][T13054] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 277.785068][T13050] wg1 speed is unknown, defaulting to 1000 [ 277.848189][T13050] wg1 speed is unknown, defaulting to 1000 [ 278.033858][T13065] IPVS: set_ctl: invalid protocol: 0 100.1.1.2:20003 [ 278.165347][T13071] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1828'. [ 278.203822][T13069] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1829'. [ 278.229726][T13069] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1829'. [ 278.309090][T13076] netlink: 'syz.0.1831': attribute type 1 has an invalid length. [ 278.436787][T13084] bridge0: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 278.466348][T13092] netlink: 'syz.2.1835': attribute type 61 has an invalid length. [ 278.474782][T13092] netlink: 'syz.2.1835': attribute type 62 has an invalid length. [ 278.497392][T13092] netlink: 'syz.2.1835': attribute type 61 has an invalid length. [ 278.513325][T13092] netlink: 'syz.2.1835': attribute type 62 has an invalid length. [ 278.558865][T13084] batadv_slave_0: entered promiscuous mode [ 279.000752][T13121] openvswitch: netlink: ct_state flags 010000e0 unsupported [ 279.076224][T13125] sch_tbf: burst 512 is lower than device syzkaller0 mtu (1500) ! [ 279.317144][T13131] xt_TPROXY: Can be used only with -p tcp or -p udp [ 279.667731][T13147] netlink: 'syz.3.1853': attribute type 5 has an invalid length. [ 279.696648][T13149] sctp: [Deprecated]: syz.1.1854 (pid 13149) Use of int in max_burst socket option. [ 279.696648][T13149] Use struct sctp_assoc_value instead [ 279.774766][T13155] ieee802154 phy1 wpan1: encryption failed: -22 [ 279.941412][T13168] netlink: 'syz.4.1861': attribute type 1 has an invalid length. [ 280.126128][T13171] syzkaller0: entered promiscuous mode [ 280.144567][T13171] syzkaller0: entered allmulticast mode [ 280.248339][T13178] wg1 speed is unknown, defaulting to 1000 [ 280.259186][T13178] wg1 speed is unknown, defaulting to 1000 [ 280.436232][T13189] netlink: 'syz.1.1866': attribute type 1 has an invalid length. [ 280.595557][T13186] delete_channel: no stack [ 280.747801][T13201] __nla_validate_parse: 10 callbacks suppressed [ 280.747817][T13201] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1869'. [ 280.980510][T13218] xt_hashlimit: max too large, truncated to 1048576 [ 281.001657][T13218] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 281.101105][ T30] audit: type=1800 audit(1767319577.584:4): pid=13221 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1875" name="memory.events" dev="tmpfs" ino=1986 res=0 errno=0 [ 281.104458][T13221] netlink: 'syz.3.1875': attribute type 2 has an invalid length. [ 281.202855][T13227] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1878'. [ 281.847878][T13258] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1889'. [ 282.436667][T13281] xt_CT: No such helper "syz0" [ 282.516083][T13294] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1895'. [ 282.635145][T13294] bridge_slave_1: left allmulticast mode [ 282.714357][T13294] bridge_slave_1: left promiscuous mode [ 282.774317][T13294] bridge0: port 2(bridge_slave_1) entered disabled state [ 282.966740][T13294] bridge_slave_0: left allmulticast mode [ 282.983809][T13294] bridge_slave_0: left promiscuous mode [ 282.994075][T13294] bridge0: port 1(bridge_slave_0) entered disabled state [ 283.397860][T13347] netlink: 'syz.4.1905': attribute type 1 has an invalid length. [ 283.451074][T13347] 8021q: adding VLAN 0 to HW filter on device bond6 [ 283.546070][T13347] 8021q: adding VLAN 0 to HW filter on device bond6 [ 283.553310][T13347] bond6: (slave vxcan7): The slave device specified does not support setting the MAC address [ 283.594542][T13354] netlink: 'syz.1.1906': attribute type 1 has an invalid length. [ 283.602374][T13354] netlink: 280 bytes leftover after parsing attributes in process `syz.1.1906'. [ 283.617413][T13347] bond6: (slave vxcan7): Error -95 calling set_mac_address [ 283.653817][T13353] netlink: 'syz.1.1906': attribute type 1 has an invalid length. [ 283.669320][T13353] netlink: 280 bytes leftover after parsing attributes in process `syz.1.1906'. [ 283.680135][T13355] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1907'. [ 283.699664][T13366] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1909'. [ 283.855417][T13350] veth9: entered promiscuous mode [ 283.890714][T13350] bond6: (slave veth9): Enslaving as an active interface with a down link [ 283.979694][T13355] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1907'. [ 284.096905][T13355] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1907'. [ 284.155006][T13388] netlink: 'syz.3.1913': attribute type 1 has an invalid length. [ 284.309286][T13391] bond6: (slave veth11): Enslaving as an active interface with a down link [ 284.453422][T13394] bond6: (slave veth13): Enslaving as an active interface with a down link [ 284.480430][T13383] wg1 speed is unknown, defaulting to 1000 [ 284.507858][T13388] 8021q: adding VLAN 0 to HW filter on device bond6 [ 284.527040][T13383] wg1 speed is unknown, defaulting to 1000 [ 284.705152][T13403] tipc: Enabled bearer , priority 0 [ 284.730045][T13402] tipc: Disabling bearer [ 284.796716][T13414] syzkaller0: entered promiscuous mode [ 284.813774][T13414] syzkaller0: entered allmulticast mode [ 285.114856][T13420] netlink: 'syz.4.1919': attribute type 6 has an invalid length. [ 285.167484][T13423] netlink: 'syz.4.1919': attribute type 1 has an invalid length. [ 285.335395][T13438] ip6erspan1: entered allmulticast mode [ 285.457925][T13448] x_tables: duplicate underflow at hook 1 [ 285.546378][T13455] IPv6: Can't replace route, no match found [ 285.556697][T13458] netlink: 'syz.4.1928': attribute type 1 has an invalid length. [ 285.601774][T13458] 8021q: adding VLAN 0 to HW filter on device bond7 [ 285.632827][T13458] bond7: (slave geneve3): making interface the new active one [ 285.643091][T13458] bond7: (slave geneve3): Enslaving as an active interface with an up link [ 285.714935][T13464] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 285.972157][T13479] __nla_validate_parse: 8 callbacks suppressed [ 285.972179][T13479] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1934'. [ 286.031866][T13483] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1936'. [ 286.147160][T13491] gretap1: entered allmulticast mode [ 286.211653][T13480] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1935'. [ 286.438574][T13512] bridge0: entered promiscuous mode [ 286.449960][T13512] bridge0: port 3(macvtap1) entered blocking state [ 286.466418][T13512] bridge0: port 3(macvtap1) entered disabled state [ 286.484670][T13512] macvtap1: entered allmulticast mode [ 286.490167][T13512] bridge0: entered allmulticast mode [ 286.519369][T13512] macvtap1: left allmulticast mode [ 286.526498][T13512] bridge0: left allmulticast mode [ 286.572955][T13512] bridge0: left promiscuous mode [ 286.596034][T13524] siw: device registration error -23 [ 286.660350][T13522] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1947'. [ 286.826631][T13538] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1950'. [ 286.832916][T13537] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1950'. [ 286.838208][T13538] netlink: 'syz.4.1950': attribute type 10 has an invalid length. [ 286.908575][T13538] bond0: (slave team0): Releasing backup interface [ 286.930941][T13538] team0: left promiscuous mode [ 286.938954][T13538] team_slave_0: left promiscuous mode [ 286.945355][T13538] team_slave_1: left promiscuous mode [ 286.954223][T13538] team0: Cannot enslave team device to itself [ 286.991289][T13543] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1951'. [ 287.047577][T13547] netlink: 'syz.2.1952': attribute type 83 has an invalid length. [ 288.178793][T13619] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 288.251010][T13621] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1975'. [ 288.517457][T13623] wg1 speed is unknown, defaulting to 1000 [ 288.527910][T13633] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1979'. [ 288.542334][T13623] wg1 speed is unknown, defaulting to 1000 [ 288.550966][T13633] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1979'. [ 288.864219][T13649] syzkaller0: entered promiscuous mode [ 288.869938][T13649] syzkaller0: entered allmulticast mode [ 289.696904][T13681] netlink: 'syz.3.1992': attribute type 8 has an invalid length. [ 290.629070][T13733] syz_tun: entered allmulticast mode [ 290.895788][T13749] x_tables: unsorted underflow at hook 2 [ 290.911620][T13749] netlink: 'syz.4.2007': attribute type 1 has an invalid length. [ 291.016582][ T7204] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 291.044168][T13731] syz_tun: left allmulticast mode [ 291.051494][ T7204] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 291.091202][ T7204] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 291.124422][ T7204] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 291.243221][T13764] batadv2: entered promiscuous mode [ 291.357517][T13765] batadv2: entered promiscuous mode [ 291.445417][T13785] batadv1: entered promiscuous mode [ 291.451935][T13785] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 291.717630][T13800] netlink: 'syz.4.2018': attribute type 10 has an invalid length. [ 291.841518][T13807] siw: device registration error -23 [ 291.867436][T13809] netlink: 'syz.4.2018': attribute type 3 has an invalid length. [ 292.116595][T13822] __nla_validate_parse: 4 callbacks suppressed [ 292.116616][T13822] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2023'. [ 292.159951][T13822] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2023'. [ 292.171351][T13822] macvlan0: entered allmulticast mode [ 292.185787][T13825] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2023'. [ 292.203140][T13822] veth1_vlan: entered allmulticast mode [ 292.250792][T13830] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 292.289438][T13824] wg1 speed is unknown, defaulting to 1000 [ 292.308351][T13824] wg1 speed is unknown, defaulting to 1000 [ 292.317071][T13830] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2026'. [ 292.520430][T13843] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2027'. [ 292.727334][T13848] syzkaller0: entered promiscuous mode [ 292.746581][T13848] syzkaller0: entered allmulticast mode [ 292.864481][T13848] tipc: Enabled bearer , priority 0 [ 292.901070][T13847] tipc: Resetting bearer [ 292.966289][T13847] tipc: Disabling bearer [ 293.058248][T13858] batadv1: entered promiscuous mode [ 293.158812][T13867] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 293.396900][T13885] syzkaller1: entered promiscuous mode [ 293.481852][T13885] syzkaller1: entered allmulticast mode [ 293.750364][T13894] netlink: 96 bytes leftover after parsing attributes in process `syz.4.2040'. [ 293.799141][T13892] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2040'. [ 293.903078][T13902] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2043'. [ 293.916850][T13901] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.2043'. [ 293.965407][T13903] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 294.226572][T13916] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2047'. [ 294.447476][T13926] wg1 speed is unknown, defaulting to 1000 [ 294.461150][T13926] wg1 speed is unknown, defaulting to 1000 [ 295.299985][T13966] netlink: 'syz.4.2056': attribute type 4 has an invalid length. [ 295.474732][T13977] openvswitch: netlink: Missing valid actions attribute. [ 295.492815][T13977] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 295.516133][T13979] netlink: 'syz.0.2060': attribute type 11 has an invalid length. [ 295.543440][T13979] netlink: 'syz.0.2060': attribute type 4 has an invalid length. [ 295.676981][T13987] wg1 speed is unknown, defaulting to 1000 [ 295.695483][T13987] wg1 speed is unknown, defaulting to 1000 [ 296.045184][T14004] wg1 speed is unknown, defaulting to 1000 [ 296.263982][T14004] wg1 speed is unknown, defaulting to 1000 [ 296.301870][T14018] "syz.2.2070" (14018) uses obsolete ecb(arc4) skcipher [ 296.317876][T14013] syzkaller0: entered promiscuous mode [ 296.343606][T14013] syzkaller0: entered allmulticast mode [ 296.488852][T14013] IPVS: Unknown mcast interface: vlan1 [ 297.184671][T14046] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 297.207926][T14046] vcan0: tx drop: invalid sa for name 0x8000000000000000 [ 297.376030][T14050] syzkaller0: entered promiscuous mode [ 297.381574][T14050] syzkaller0: entered allmulticast mode [ 297.601917][T14061] __nla_validate_parse: 8 callbacks suppressed [ 297.601938][T14061] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2084'. [ 297.605287][T14057] tipc: Enabled bearer , priority 0 [ 297.626338][T14057] syzkaller0: entered promiscuous mode [ 297.631882][T14057] syzkaller0: entered allmulticast mode [ 297.640428][T14057] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 297.737975][T14057] tipc: Resetting bearer [ 297.771163][T14056] tipc: Resetting bearer [ 297.798915][T14073] netlink: 'syz.2.2087': attribute type 9 has an invalid length. [ 297.832277][T14056] tipc: Disabling bearer [ 298.121035][T14084] netlink: 'syz.4.2089': attribute type 11 has an invalid length. [ 298.140937][T14084] netlink: 199828 bytes leftover after parsing attributes in process `syz.4.2089'. [ 298.268584][T14084] ipvlan0: entered promiscuous mode [ 298.396682][T14100] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2093'. [ 298.450052][T14106] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2093'. [ 298.594632][T14111] netlink: 'syz.2.2095': attribute type 8 has an invalid length. [ 298.604378][T14111] netlink: 80 bytes leftover after parsing attributes in process `syz.2.2095'. [ 299.017997][T14100] ipvlan1: entered promiscuous mode [ 299.036736][T14100] ipvlan1: left promiscuous mode [ 299.059357][T14106] ipvlan1: entered promiscuous mode [ 299.066486][T14106] ipvlan1: left promiscuous mode [ 299.108015][T14114] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 64993 [ 299.409698][T14128] wg1 speed is unknown, defaulting to 1000 [ 299.439303][T14128] wg1 speed is unknown, defaulting to 1000 [ 299.947355][T14157] bridge: RTM_NEWNEIGH with unconfigured vlan 2 on bridge0 [ 300.249987][T14188] netlink: 3 bytes leftover after parsing attributes in process `syz.0.2113'. [ 300.268842][T14180] wg1 speed is unknown, defaulting to 1000 [ 300.326181][T14180] wg1 speed is unknown, defaulting to 1000 [ 300.338671][T14191] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 300.353669][T14191] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 300.370312][T14194] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2115'. [ 300.383970][T14179] wg1 speed is unknown, defaulting to 1000 [ 300.391611][T14179] wg1 speed is unknown, defaulting to 1000 [ 300.443736][T14193] x_tables: ip_tables: recent.0 match: invalid size 216 (kernel) != (user) 4096 [ 300.538070][T14194] 8021q: adding VLAN 0 to HW filter on device bond0 [ 300.848826][T14212] netlink: 'syz.1.2121': attribute type 4 has an invalid length. [ 301.508191][T14235] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2130'. [ 302.192775][T14275] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2141'. [ 302.260510][T14282] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2144'. [ 302.294569][T14281] sit0: entered promiscuous mode [ 302.631698][T14299] netlink: 'syz.4.2148': attribute type 1 has an invalid length. [ 302.737285][T14299] 8021q: adding VLAN 0 to HW filter on device bond8 [ 302.755201][T14314] wg1 speed is unknown, defaulting to 1000 [ 302.778770][T14295] bond8: (slave gretap2): making interface the new active one [ 302.790854][T14295] bond8: (slave gretap2): Enslaving as an active interface with an up link [ 302.800807][T14319] tipc: Enabled bearer , priority 10 [ 302.808952][T14314] wg1 speed is unknown, defaulting to 1000 [ 302.995934][T14330] sctp: [Deprecated]: syz.1.2154 (pid 14330) Use of int in max_burst socket option. [ 302.995934][T14330] Use struct sctp_assoc_value instead [ 303.607438][T14340] wg1 speed is unknown, defaulting to 1000 [ 303.669152][T14340] wg1 speed is unknown, defaulting to 1000 [ 303.732369][T14353] tipc: Enabled bearer , priority 0 [ 303.813376][T14354] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 303.869713][T14361] __nla_validate_parse: 2 callbacks suppressed [ 303.869734][T14361] netlink: 212360 bytes leftover after parsing attributes in process `syz.1.2161'. [ 303.917024][T14359] bond0: (slave ip6gretap1): Enslaving as an active interface with an up link [ 303.938536][T14354] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 304.055812][T14354] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 304.131303][T14374] netlink: 'syz.4.2165': attribute type 1 has an invalid length. [ 304.162152][T14354] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 304.236600][T14380] netlink: 212360 bytes leftover after parsing attributes in process `syz.4.2165'. [ 304.291804][T14374] bond9: entered promiscuous mode [ 304.297151][T14374] bond9: entered allmulticast mode [ 304.327960][T14384] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2166'. [ 304.371456][T14375] bond9: (slave ip6gretap3): making interface the new active one [ 304.379578][T14375] ip6gretap3: entered promiscuous mode [ 304.385652][T14375] ip6gretap3: entered allmulticast mode [ 304.393039][T14375] bond9: (slave ip6gretap3): Enslaving as an active interface with an up link [ 304.534012][T14388] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2168'. [ 304.543159][T14388] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2168'. [ 304.732183][ T7211] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 304.755197][ T7211] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 304.775726][ T24] tipc: Node number set to 2280052031 [ 304.782482][ T7211] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 304.804591][ T7211] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 304.905193][T14397] tipc: Enabled bearer , priority 0 [ 304.925872][T14397] syzkaller0: entered promiscuous mode [ 304.931421][T14397] syzkaller0: entered allmulticast mode [ 305.079597][T14397] tipc: Resetting bearer [ 305.102989][T14398] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2171'. [ 305.144170][T14395] tipc: Resetting bearer [ 305.218331][T14395] tipc: Disabling bearer [ 305.244876][T14420] netlink: 'syz.4.2176': attribute type 1 has an invalid length. [ 305.261003][T14420] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2176'. [ 305.317057][T14428] 8021q: adding VLAN 0 to HW filter on device bond4 [ 305.596174][T14449] tipc: MTU too low for tipc bearer [ 305.602883][T14442] wg1 speed is unknown, defaulting to 1000 [ 305.616619][T14442] wg1 speed is unknown, defaulting to 1000 [ 305.679410][T14439] wg1 speed is unknown, defaulting to 1000 [ 305.700084][T14439] wg1 speed is unknown, defaulting to 1000 [ 306.118841][T14461] syz.2.2187 (14461) used greatest stack depth: 17688 bytes left [ 306.195161][T14470] syzkaller0: entered promiscuous mode [ 306.204681][T14470] syzkaller0: entered allmulticast mode [ 306.273949][T14480] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2193'. [ 306.296784][T14480] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2193'. [ 306.306767][T14480] netlink: 'syz.2.2193': attribute type 13 has an invalid length. [ 306.818927][T14514] wg1 speed is unknown, defaulting to 1000 [ 306.845334][T14514] wg1 speed is unknown, defaulting to 1000 [ 306.854178][T14516] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2204'. [ 306.912004][T14523] xt_hashlimit: size too large, truncated to 1048576 [ 307.947920][ T8259] wg1 speed is unknown, defaulting to 1000 [ 307.982148][T14572] tipc: Enabled bearer , priority 0 [ 308.020694][T14566] tipc: Disabling bearer [ 308.450896][ T30] audit: type=1800 audit(1767319604.934:5): pid=14595 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2223" name="memory.events" dev="tmpfs" ino=2168 res=0 errno=0 [ 309.769532][T14656] __nla_validate_parse: 4 callbacks suppressed [ 309.769555][T14656] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2238'. [ 309.838663][T14656] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2238'. [ 309.917142][T14656] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2238'. [ 309.961585][T14656] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2238'. [ 310.339898][T14677] netlink: 'syz.4.2243': attribute type 3 has an invalid length. [ 310.354744][T14677] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2243'. [ 310.385383][T14684] netlink: 'syz.3.2245': attribute type 5 has an invalid length. [ 310.603868][T14690] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2247'. [ 310.766326][T14702] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2249'. [ 311.094261][T14706] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2253'. [ 311.155189][T14715] netlink: 'syz.4.2255': attribute type 1 has an invalid length. [ 311.163533][T14714] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2256'. [ 311.303860][T14715] 8021q: adding VLAN 0 to HW filter on device bond10 [ 311.312057][T14719] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2256'. [ 311.403403][T14722] bond10: (slave veth11): Enslaving as an active interface with a down link [ 311.926491][T14745] ip6gre4: entered promiscuous mode [ 311.947655][T14745] ip6gre4: entered allmulticast mode [ 312.267050][T14751] syzkaller0: entered promiscuous mode [ 312.279437][T14751] syzkaller0: entered allmulticast mode [ 312.734666][T14757] team0 (unregistering): Port device team_slave_0 removed [ 312.758025][T14757] team0 (unregistering): Port device team_slave_1 removed [ 312.865235][T14780] xt_CT: You must specify a L4 protocol and not use inversions on it [ 315.041619][T14778] wg1 speed is unknown, defaulting to 1000 [ 315.050873][T14778] wg1 speed is unknown, defaulting to 1000 [ 315.396923][T14821] xt_bpf: check failed: parse error [ 315.527627][T14831] __nla_validate_parse: 6 callbacks suppressed [ 315.527647][T14831] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2285'. [ 316.066804][T14854] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2291'. [ 316.106019][T14856] tipc: Enabling of bearer rejected, failed to enable media [ 316.333314][T14865] wg1 speed is unknown, defaulting to 1000 [ 316.342789][T14865] wg1 speed is unknown, defaulting to 1000 [ 316.451154][T14881] veth1_virt_wifi: entered allmulticast mode [ 316.805283][T14836] wg1 speed is unknown, defaulting to 1000 [ 316.934995][T14892] syzkaller0: entered promiscuous mode [ 316.940629][T14892] syzkaller0: entered allmulticast mode [ 316.956892][T14836] wg1 speed is unknown, defaulting to 1000 [ 317.005044][T14902] bond5: Unable to set down delay as MII monitoring is disabled [ 317.062295][T14902] bond5 (unregistering): Released all slaves [ 317.242082][T14920] netlink: 'syz.4.2304': attribute type 3 has an invalid length. [ 317.257088][T14920] netlink: 'syz.4.2304': attribute type 1 has an invalid length. [ 317.266240][T14920] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2304'. [ 319.375853][T14969] netlink: 'syz.0.2317': attribute type 10 has an invalid length. [ 319.518259][T14984] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 319.530075][T14978] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2320'. [ 319.604526][T14987] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2322'. [ 319.754852][T14998] trusted_key: syz.1.2326 sent an empty control message without MSG_MORE. [ 319.765009][T14992] wg1 speed is unknown, defaulting to 1000 [ 319.772611][T14992] wg1 speed is unknown, defaulting to 1000 [ 319.780853][T14995] wg1 speed is unknown, defaulting to 1000 [ 319.800120][T14995] wg1 speed is unknown, defaulting to 1000 [ 320.006311][T15002] wg1 speed is unknown, defaulting to 1000 [ 320.131327][T15002] wg1 speed is unknown, defaulting to 1000 [ 320.306640][T15024] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2331'. [ 321.198779][T15054] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 321.256966][T15059] batman_adv: batadv0: Adding interface: dummy0 [ 321.271123][T15059] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 321.384739][T15059] batman_adv: batadv0: Interface activated: dummy0 [ 321.470425][T15059] netlink: 'syz.3.2342': attribute type 3 has an invalid length. [ 321.497251][T15059] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2342'. [ 321.700605][T15066] syzkaller0: entered promiscuous mode [ 321.733858][T15066] syzkaller0: entered allmulticast mode [ 321.855410][T15071] netlink: 'syz.0.2345': attribute type 2 has an invalid length. [ 321.867044][T15071] netlink: 'syz.0.2345': attribute type 8 has an invalid length. [ 321.880252][T15071] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2345'. [ 321.937302][T15077] gre0: entered promiscuous mode [ 321.993152][T15071] geneve2: entered promiscuous mode [ 322.003452][T15071] geneve2: entered allmulticast mode [ 322.088284][T15082] netlink: 'syz.1.2350': attribute type 33 has an invalid length. [ 322.096865][T15082] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2350'. [ 322.106274][T15082] `: renamed from team0 [ 322.117790][T15082] netlink: zone id is out of range [ 322.123267][T15082] netlink: get zone limit has 4 unknown bytes [ 322.184851][T15091] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2350'. [ 322.215319][T15090] wg1 speed is unknown, defaulting to 1000 [ 322.223404][T15090] wg1 speed is unknown, defaulting to 1000 [ 322.299965][T15092] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2351'. [ 322.387654][ T30] audit: type=1800 audit(1767319618.874:6): pid=15094 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.2352" name="memory.events" dev="tmpfs" ino=2374 res=0 errno=0 [ 322.557797][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 322.812954][T15113] mac80211_hwsim hwsim9 wlan0: entered promiscuous mode [ 322.824913][T15113] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 322.849278][T15114] netlink: 'syz.0.2357': attribute type 2 has an invalid length. [ 322.872155][T15114] : entered promiscuous mode [ 322.925039][T15114] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2357'. [ 322.975530][T15120] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2360'. [ 323.122471][T15120] macsec0 (unregistering): left allmulticast mode [ 323.139902][T15120] macsec0 (unregistering): left promiscuous mode [ 323.160685][T15120] bridge0: port 3(macsec0) entered disabled state [ 323.431494][T15126] wg1 speed is unknown, defaulting to 1000 [ 323.473175][T15130] wg1 speed is unknown, defaulting to 1000 [ 323.506387][T15130] wg1 speed is unknown, defaulting to 1000 [ 323.544667][T15126] wg1 speed is unknown, defaulting to 1000 [ 323.760561][T15148] wg1 speed is unknown, defaulting to 1000 [ 323.817543][T15148] wg1 speed is unknown, defaulting to 1000 [ 324.041375][T15165] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2369'. [ 324.278510][T15179] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2372'. [ 324.298153][T15177] vlan0: left promiscuous mode [ 324.309122][T15176] syzkaller0: entered promiscuous mode [ 324.327413][T15176] syzkaller0: entered allmulticast mode [ 324.365569][T15183] netlink: 'syz.0.2374': attribute type 1 has an invalid length. [ 324.387407][T15179] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2372'. [ 324.712755][T15188] wg1 speed is unknown, defaulting to 1000 [ 324.730450][T15188] wg1 speed is unknown, defaulting to 1000 [ 326.530853][T15286] pim6reg: entered allmulticast mode [ 326.588149][T15291] netlink: 'syz.1.2399': attribute type 13 has an invalid length. [ 326.596156][T15286] pim6reg: left allmulticast mode [ 326.613321][T15290] sctp: [Deprecated]: syz.3.2401 (pid 15290) Use of int in max_burst socket option. [ 326.613321][T15290] Use struct sctp_assoc_value instead [ 326.754512][T15296] __nla_validate_parse: 5 callbacks suppressed [ 326.754534][T15296] netlink: 108 bytes leftover after parsing attributes in process `syz.2.2402'. [ 326.910038][T15306] netlink: 'syz.0.2404': attribute type 4 has an invalid length. [ 326.923370][T15306] netlink: 'syz.0.2404': attribute type 1 has an invalid length. [ 326.933512][T15306] netlink: 228 bytes leftover after parsing attributes in process `syz.0.2404'. [ 327.227776][ T7200] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.246082][ T7200] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.268462][ T7200] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.311798][ T7200] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.332574][T15320] netlink: 'syz.3.2407': attribute type 12 has an invalid length. [ 327.500041][T15333] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 328.456298][T15374] netlink: 116 bytes leftover after parsing attributes in process `syz.2.2421'. [ 328.459110][T15372] wg1 speed is unknown, defaulting to 1000 [ 328.473334][T15372] wg1 speed is unknown, defaulting to 1000 [ 328.649195][T15378] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2423'. [ 328.684566][T15378] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2423'. [ 328.820383][T15393] netlink: 584 bytes leftover after parsing attributes in process `syz.1.2422'. [ 328.847118][T15397] netlink: 'syz.3.2425': attribute type 33 has an invalid length. [ 328.856148][T15397] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2425'. [ 328.879080][T15397] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2425'. [ 328.891193][T15397] batman_adv: batadv0: Interface deactivated: dummy0 [ 328.941087][T15397] batman_adv: batadv0: Removing interface: dummy0 [ 329.076939][T15402] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 329.769374][T15419] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2430'. [ 330.012223][T15426] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2430'. [ 330.117023][T15442] tipc: Enabled bearer , priority 0 [ 330.170098][T15443] syzkaller0: entered promiscuous mode [ 330.176219][T15443] syzkaller0: entered allmulticast mode [ 330.236576][T15442] tipc: Resetting bearer [ 330.275766][T15441] tipc: Resetting bearer [ 330.337164][T15441] tipc: Disabling bearer [ 330.800355][T15470] netlink: 'syz.4.2443': attribute type 10 has an invalid length. [ 330.814152][T15470] bond0: (slave wlan1): Opening slave failed [ 330.849691][T15470] wg1 speed is unknown, defaulting to 1000 [ 330.857624][T15470] wg1 speed is unknown, defaulting to 1000 [ 331.116594][T15487] wg1 speed is unknown, defaulting to 1000 [ 331.186867][T15487] wg1 speed is unknown, defaulting to 1000 [ 331.369787][T15503] tipc: Enabled bearer , priority 0 [ 331.479172][T15496] syzkaller0: entered promiscuous mode [ 331.490197][T15496] syzkaller0: entered allmulticast mode [ 331.493681][T15486] wg1 speed is unknown, defaulting to 1000 [ 331.532769][T15499] tipc: Resetting bearer [ 331.630367][T15486] wg1 speed is unknown, defaulting to 1000 [ 331.673222][T15494] tipc: Resetting bearer [ 331.706163][T15494] tipc: Disabling bearer [ 331.791426][T15515] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 332.360193][T15536] __nla_validate_parse: 8 callbacks suppressed [ 332.360214][T15536] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2460'. [ 332.403936][T15536] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 332.678665][T15543] x_tables: duplicate underflow at hook 3 [ 332.917199][T15556] Bluetooth: MGMT ver 1.23 [ 332.944371][T15557] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2463'. [ 333.159946][T15567] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2468'. [ 333.174222][T15567] tipc: Enabling of bearer rejected, failed to enable media [ 333.510255][T15598] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2476'. [ 333.536595][T15598] netlink: 88 bytes leftover after parsing attributes in process `syz.4.2476'. [ 333.605565][T15607] wg1: entered promiscuous mode [ 333.611101][T15607] wg1: entered allmulticast mode [ 333.711921][T15606] netlink: 216 bytes leftover after parsing attributes in process `syz.2.2479'. [ 333.734808][T15606] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2479'. [ 333.746663][T15606] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2479'. [ 333.790578][T15606] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.2479'. [ 333.830439][T15617] netlink: 'syz.4.2482': attribute type 1 has an invalid length. [ 333.839173][T15617] netlink: 264 bytes leftover after parsing attributes in process `syz.4.2482'. [ 333.849124][T15617] netlink: 'syz.4.2482': attribute type 1 has an invalid length. [ 333.896091][T15619] netlink: 'syz.1.2483': attribute type 1 has an invalid length. [ 333.916017][T15619] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 333.926793][T15620] xt_CT: No such helper "snmp" [ 334.197211][T15634] 8021q: adding VLAN 0 to HW filter on device team0 [ 334.217840][T15634] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 334.462728][T15642] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 334.843378][T15660] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 335.150497][T15667] tipc: Enabled bearer , priority 0 [ 335.177867][T15667] syzkaller0: entered promiscuous mode [ 335.183432][T15667] syzkaller0: entered allmulticast mode [ 335.376422][T15674] tipc: Resetting bearer [ 335.446706][T15666] tipc: Resetting bearer [ 335.537876][T15666] tipc: Disabling bearer [ 335.778324][T15688] netlink: 'syz.3.2499': attribute type 15 has an invalid length. [ 335.801843][T15688] netlink: 'syz.3.2499': attribute type 15 has an invalid length. [ 335.822555][T15690] syz.2.2501 uses old SIOCAX25GETINFO [ 335.830289][T15678] tipc: Enabled bearer , priority 0 [ 335.873858][T15688] netlink: 'syz.3.2499': attribute type 15 has an invalid length. [ 335.874436][T15693] netlink: 'syz.0.2500': attribute type 1 has an invalid length. [ 335.889708][T15688] netlink: 'syz.3.2499': attribute type 15 has an invalid length. [ 335.898194][T15679] syzkaller0: entered promiscuous mode [ 335.905184][T15679] syzkaller0: entered allmulticast mode [ 335.913501][T15688] netlink: 'syz.3.2499': attribute type 15 has an invalid length. [ 335.922901][T15688] netlink: 'syz.3.2499': attribute type 15 has an invalid length. [ 335.945331][T15677] tipc: Resetting bearer [ 335.984809][T15677] tipc: Disabling bearer [ 335.995331][T15688] netlink: 'syz.3.2499': attribute type 15 has an invalid length. [ 336.023991][T15688] netlink: 'syz.3.2499': attribute type 15 has an invalid length. [ 336.091091][T15695] wg1 speed is unknown, defaulting to 1000 [ 336.118594][T15695] wg1 speed is unknown, defaulting to 1000 [ 336.610843][T15730] openvswitch: netlink: Flow actions attr not present in new flow. [ 337.056299][T15755] tipc: Enabled bearer , priority 0 [ 337.064813][T15755] syzkaller0: entered promiscuous mode [ 337.070442][T15755] syzkaller0: entered allmulticast mode [ 337.117989][T15754] tipc: Resetting bearer [ 337.180474][T15754] tipc: Disabling bearer [ 337.239107][T15762] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 337.277070][T15764] tipc: Enabled bearer , priority 0 [ 337.376396][T15770] wg1 speed is unknown, defaulting to 1000 [ 337.386347][T15770] wg1 speed is unknown, defaulting to 1000 [ 337.489925][T15764] tipc: Resetting bearer [ 337.514350][T15770] __nla_validate_parse: 12 callbacks suppressed [ 337.514373][T15770] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2525'. [ 337.530361][T15763] tipc: Disabling bearer [ 337.867073][T15794] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2532'. [ 337.902246][T15791] wg1 speed is unknown, defaulting to 1000 [ 337.959584][T15791] wg1 speed is unknown, defaulting to 1000 [ 338.842862][T15807] tipc: Enabled bearer , priority 0 [ 338.869687][T15807] syzkaller0: entered promiscuous mode [ 338.924041][T15807] syzkaller0: entered allmulticast mode [ 338.980967][T15807] tipc: Resetting bearer [ 338.997203][T15806] tipc: Resetting bearer [ 339.063650][T15806] tipc: Disabling bearer [ 339.361832][T15827] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2543'. [ 339.377560][T15827] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2543'. [ 339.524394][T15839] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2546'. [ 339.555453][T15839] netlink: 100 bytes leftover after parsing attributes in process `syz.0.2546'. [ 340.051282][T15851] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2549'. [ 340.207419][T15854] bond7: ARP target 9.0.0.0 is already present [ 340.300832][T15858] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2551'. [ 340.310320][T15857] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2551'. [ 340.341990][T15854] bond7: option arp_ip_target: invalid value (9) [ 340.384233][T15854] bond7 (unregistering): Released all slaves [ 340.715028][T15872] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2555'. [ 340.770518][T15877] Cannot find del_set index 49151 as target [ 342.580998][T15912] bond7: (slave ip6gretap2): Enslaving as an active interface with an up link [ 342.637395][T15914] bond7 (unregistering): (slave ip6gretap2): Releasing backup interface [ 342.707840][T15914] bond7 (unregistering): Released all slaves [ 342.750505][T15916] 8021q: VLANs not supported on wg1 [ 342.909783][T15923] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 342.999615][T15923] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 343.121950][T15931] __nla_validate_parse: 1 callbacks suppressed [ 343.121973][T15931] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2572'. [ 343.139763][T15923] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 343.144547][T15931] IPv6: NLM_F_CREATE should be specified when creating new route [ 343.224115][T15923] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 343.314641][T15943] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_bond, syncid = 0, id = 0 [ 343.378948][T15945] A link change request failed with some changes committed already. Interface ip6gretap1 may have been left with an inconsistent configuration, please check. [ 343.430294][ T7202] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 343.452724][ T7202] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 343.481937][ T7202] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 343.533303][ T7202] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 343.703238][T15959] ieee802154 phy1 wpan1: encryption failed: -22 [ 343.779629][T15959] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2581'. [ 343.854175][T15965] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 344.531329][T15979] validate_nla: 57 callbacks suppressed [ 344.531348][T15979] netlink: 'syz.1.2586': attribute type 1 has an invalid length. [ 344.644732][T15981] netlink: 416 bytes leftover after parsing attributes in process `syz.3.2585'. [ 344.678315][T15980] wg1 speed is unknown, defaulting to 1000 [ 344.735608][T15980] wg1 speed is unknown, defaulting to 1000 [ 344.753186][T15987] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2587'. [ 344.762785][T15975] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2585'. [ 344.778861][T15987] --map-set only usable from mangle table [ 344.812519][T15987] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2587'. [ 344.875346][T15989] gretap0: entered allmulticast mode [ 345.208630][T16011] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2592'. [ 345.221266][T16011] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2592'. [ 345.643227][T16026] batadv_slave_0: left promiscuous mode [ 345.661564][T16026] .70·: left allmulticast mode [ 345.673714][T16026] hsr_slave_0: left allmulticast mode [ 345.691561][T16026] hsr_slave_1: left allmulticast mode [ 345.721767][T16026] xfrm1: left promiscuous mode [ 345.734949][T16026] xfrm1: left allmulticast mode [ 345.745358][T16026] ip6gre2: left promiscuous mode [ 345.750522][T16026] ip6gre2: left allmulticast mode [ 345.775908][T16026] veth7: left allmulticast mode [ 345.784216][T16026] bridge7: left promiscuous mode [ 345.801555][T16026] ip6gre4: left promiscuous mode [ 345.806832][T16026] ip6gre4: left allmulticast mode [ 345.819033][T16030] netlink: 96 bytes leftover after parsing attributes in process `syz.4.2598'. [ 346.482379][T16059] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2605'. [ 347.877453][T16100] wg1 speed is unknown, defaulting to 1000 [ 347.889218][T16104] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 347.910537][T16100] wg1 speed is unknown, defaulting to 1000 [ 348.095533][T16108] wg1 speed is unknown, defaulting to 1000 [ 348.103250][T16108] wg1 speed is unknown, defaulting to 1000 [ 348.251186][T16116] SET target dimension over the limit! [ 348.701386][T16143] syzkaller1: entered promiscuous mode [ 348.707400][T16143] syzkaller1: entered allmulticast mode [ 348.750633][T16145] __nla_validate_parse: 3 callbacks suppressed [ 348.750653][T16145] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2627'. [ 348.833959][T16145] 8021q: adding VLAN 0 to HW filter on device bond5 [ 348.876147][T16148] 8021q: adding VLAN 0 to HW filter on device bond5 [ 348.890086][T16148] bond5: (slave sit1): The slave device specified does not support setting the MAC address [ 348.901829][T16148] bond5: (slave sit1): Error -95 calling set_mac_address [ 348.963324][T16150] netlink: 'syz.0.2629': attribute type 3 has an invalid length. [ 348.983116][T16147] tipc: Enabled bearer , priority 0 [ 348.991066][T16151] syzkaller0: entered promiscuous mode [ 349.001098][T16151] syzkaller0: entered allmulticast mode [ 349.160826][T16165] IPv6: Can't replace route, no match found [ 349.258022][T16169] batadv1: entered promiscuous mode [ 349.258862][T16171] netlink: 7 bytes leftover after parsing attributes in process `syz.3.2632'. [ 349.425431][T16175] wg1 speed is unknown, defaulting to 1000 [ 349.432932][T16175] wg1 speed is unknown, defaulting to 1000 [ 349.445709][T16177] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 349.453856][T16177] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 349.461756][T16177] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 349.469701][T16177] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 349.477636][T16177] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 349.485588][T16177] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 349.493562][T16177] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 349.501468][T16177] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 349.509411][T16177] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 349.517335][T16177] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 349.544567][T16140] tipc: Resetting bearer [ 349.574735][T16140] tipc: Disabling bearer [ 349.687230][T16183] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2636'. [ 349.863270][T16192] tipc: Enabling of bearer rejected, failed to enable media [ 350.123162][T16206] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2643'. [ 350.132888][T16206] chnl_net:caif_netlink_parms(): no params data found [ 350.378841][T16187] delete_channel: no stack [ 350.505309][T16219] netlink: 'syz.0.2647': attribute type 10 has an invalid length. [ 350.536939][T16219] netlink: 'syz.0.2647': attribute type 10 has an invalid length. [ 350.809823][T16238] tipc: Enabled bearer , priority 0 [ 350.817828][T16238] syzkaller0: entered promiscuous mode [ 350.823350][T16238] syzkaller0: entered allmulticast mode [ 350.859991][T16238] tipc: Resetting bearer [ 350.900966][T16238] tipc: Disabling bearer [ 351.209954][T16247] x_tables: duplicate underflow at hook 1 [ 351.329440][T16232] tipc: Enabled bearer , priority 0 [ 351.400251][T16245] syzkaller0: entered promiscuous mode [ 351.413950][T16245] syzkaller0: entered allmulticast mode [ 351.533854][T16218] tipc: Resetting bearer [ 351.593056][T16218] tipc: Disabling bearer [ 351.764675][T16266] netlink: 220 bytes leftover after parsing attributes in process `syz.3.2659'. [ 352.055267][T16285] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2668'. [ 352.071104][T16285] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2668'. [ 352.103873][T16287] wg1 speed is unknown, defaulting to 1000 [ 352.113392][T16287] wg1 speed is unknown, defaulting to 1000 [ 352.210106][T16291] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2670'. [ 352.490629][T16308] syzkaller0: entered promiscuous mode [ 352.497070][T16308] syzkaller0: entered allmulticast mode [ 352.511709][T16310] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2676'. [ 352.594384][T16310] netlink: 'syz.1.2676': attribute type 1 has an invalid length. [ 352.602443][T16310] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2676'. [ 352.750692][T16313] wg1 speed is unknown, defaulting to 1000 [ 352.838732][T16310] bond6 (unregistering): Released all slaves [ 352.866253][T16313] wg1 speed is unknown, defaulting to 1000 [ 353.108923][T16330] IPVS: length: 153 != 24 [ 353.186062][T16333] macvlan1: entered promiscuous mode [ 353.196006][T16333] ipvlan0: entered promiscuous mode [ 353.206092][T16333] ipvlan0: left promiscuous mode [ 353.216286][T16333] macvlan1: left promiscuous mode [ 354.267308][T16394] wg1 speed is unknown, defaulting to 1000 [ 354.297887][T16394] wg1 speed is unknown, defaulting to 1000 [ 354.329580][T16400] __nla_validate_parse: 2 callbacks suppressed [ 354.329600][T16400] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.2697'. [ 354.448200][T16408] netlink: 'syz.0.2699': attribute type 10 has an invalid length. [ 354.468323][T16408] bond0: (slave wlan1): Opening slave failed [ 354.501857][T16415] netlink: 996 bytes leftover after parsing attributes in process `syz.2.2698'. [ 354.797659][T16435] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2707'. [ 354.957409][T16443] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2709'. [ 355.007160][T16444] netlink: 'syz.3.2708': attribute type 13 has an invalid length. [ 355.016476][T16444] netlink: 'syz.3.2708': attribute type 17 has an invalid length. [ 355.027477][T16445] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2710'. [ 355.162826][T16444] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2708'. [ 355.172914][T16444] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2708'. [ 355.287056][T16444] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2708'. [ 355.323749][T16444] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2708'. [ 355.592188][T16480] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2716'. [ 355.726326][T16487] netlink: 'syz.4.2719': attribute type 13 has an invalid length. [ 355.869819][T16495] netlink: 'syz.2.2721': attribute type 3 has an invalid length. [ 356.066686][T16499] pim6reg1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 356.099304][T16499] pim6reg1: entered promiscuous mode [ 356.106871][T16499] pim6reg1: entered allmulticast mode [ 356.267068][T16522] syzkaller0: entered promiscuous mode [ 356.272615][T16522] syzkaller0: entered allmulticast mode [ 356.388808][T16522] net_ratelimit: 45 callbacks suppressed [ 356.388828][T16522] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 356.627671][T16543] openvswitch: netlink: IP tunnel dst address not specified [ 356.950190][T16559] wg1 speed is unknown, defaulting to 1000 [ 356.960765][T16559] wg1 speed is unknown, defaulting to 1000 [ 357.111150][T16580] netlink: 'syz.3.2735': attribute type 39 has an invalid length. [ 357.213457][T16585] wg1 speed is unknown, defaulting to 1000 [ 357.362296][T16585] wg1 speed is unknown, defaulting to 1000 [ 357.617986][T16601] syzkaller0: entered promiscuous mode [ 357.630281][T16601] syzkaller0: entered allmulticast mode [ 357.653122][T16605] tipc: Enabled bearer , priority 0 [ 357.828753][T16605] tipc: Resetting bearer [ 357.856221][T16599] tipc: Resetting bearer [ 357.907780][T16599] tipc: Disabling bearer [ 358.599644][T16642] wg1 speed is unknown, defaulting to 1000 [ 358.609672][T16642] wg1 speed is unknown, defaulting to 1000 [ 360.767646][T16697] netlink: 'syz.3.2765': attribute type 1 has an invalid length. [ 360.785626][T16697] xt_recent: Unsupported userspace flags (000000a3) [ 360.989249][T16709] macsec0: entered allmulticast mode [ 360.995292][T16709] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 361.002534][T16709] IPv6: NLM_F_CREATE should be set when creating new route [ 361.010032][T16709] IPv6: NLM_F_CREATE should be set when creating new route [ 361.216289][T16720] wg1 speed is unknown, defaulting to 1000 [ 361.224027][T16720] wg1 speed is unknown, defaulting to 1000 [ 361.504227][T16734] netlink: 'syz.2.2777': attribute type 1 has an invalid length. [ 361.652523][T16734] 8021q: adding VLAN 0 to HW filter on device bond7 [ 361.674251][T16741] __nla_validate_parse: 21 callbacks suppressed [ 361.674271][T16741] netlink: 80 bytes leftover after parsing attributes in process `syz.3.2779'. [ 361.711074][T16747] sctp: [Deprecated]: syz.4.2772 (pid 16747) Use of int in maxseg socket option. [ 361.711074][T16747] Use struct sctp_assoc_value instead [ 361.814727][T16738] 8021q: adding VLAN 0 to HW filter on device bond7 [ 361.832172][T16738] bond7: (slave vxcan3): The slave device specified does not support setting the MAC address [ 361.862526][T16738] bond7: (slave vxcan3): Error -95 calling set_mac_address [ 362.192386][T16763] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 362.217892][T16766] xt_NFQUEUE: number of queues (65532) out of range (got 118598) [ 362.229010][T16763] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 362.244760][T16763] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 362.252086][T16767] openvswitch: netlink: Tunnel attr 3 has unexpected len 0 expected 1 [ 362.267227][T16766] xt_NFQUEUE: number of queues (65532) out of range (got 118598) [ 362.278552][T16763] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 362.296527][T16763] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 362.302531][T16767] netlink: 'syz.0.2785': attribute type 1 has an invalid length. [ 362.311478][T16768] netlink: 'syz.0.2785': attribute type 1 has an invalid length. [ 362.321615][T16763] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 362.328479][T16763] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 362.343998][T16763] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 362.360720][T16763] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 362.372060][T16768] bond5: entered promiscuous mode [ 362.377781][T16763] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 362.384576][T16763] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 362.384693][T16768] 8021q: adding VLAN 0 to HW filter on device bond5 [ 362.391050][T16763] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 362.391120][T16763] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 362.412401][T16763] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 362.418980][T16763] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 362.425822][T16763] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 362.432325][T16763] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 362.511525][T16772] 8021q: adding VLAN 0 to HW filter on device bond5 [ 362.524307][T16772] bond5: (slave gre1): The slave device specified does not support setting the MAC address [ 362.534655][T16772] bond5: (slave gre1): Setting fail_over_mac to active for active-backup mode [ 362.558449][T16772] bond5: (slave gre1): making interface the new active one [ 362.573646][T16772] gre1: entered promiscuous mode [ 362.580308][T16772] bond5: (slave gre1): Enslaving as an active interface with an up link [ 362.701840][T16781] batadv1: entered promiscuous mode [ 362.795337][T16790] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2790'. [ 362.820281][T16790] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2790'. [ 363.080269][T16798] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2791'. [ 363.233233][T16809] netlink: 'syz.3.2792': attribute type 4 has an invalid length. [ 363.345725][T16811] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2794'. [ 363.430684][T16820] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2796'. [ 363.571714][T16826] xt_CONNSECMARK: invalid mode: 0 [ 364.044070][T16848] netlink: 'syz.3.2802': attribute type 2 has an invalid length. [ 364.139451][T16857] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2805'. [ 364.186696][T16855] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2804'. [ 364.196211][T16860] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2806'. [ 364.196249][T16860] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2806'. [ 364.478587][T16875] wg1 speed is unknown, defaulting to 1000 [ 364.486768][T16875] wg1 speed is unknown, defaulting to 1000 [ 364.776302][T16893] ip6gre1: entered promiscuous mode [ 365.005604][T16896] wg1 speed is unknown, defaulting to 1000 [ 365.027386][T16896] wg1 speed is unknown, defaulting to 1000 [ 365.170517][T16911] wg1 speed is unknown, defaulting to 1000 [ 365.178400][T16911] wg1 speed is unknown, defaulting to 1000 [ 365.502287][T16934] syzkaller0: entered promiscuous mode [ 365.523245][T16934] syzkaller0: entered allmulticast mode [ 365.927341][T16949] openvswitch: netlink: Key type 198 is out of range max 32 [ 365.935474][T16952] raw_sendmsg: syz.3.2828 forgot to set AF_INET. Fix it! [ 366.085425][T16967] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 366.384139][T16972] IPv6: Can't replace route, no match found [ 366.678217][T16997] syzkaller0: entered promiscuous mode [ 366.685528][T16997] syzkaller0: entered allmulticast mode [ 366.704361][T16997] __nla_validate_parse: 7 callbacks suppressed [ 366.704376][T16997] netlink: 62 bytes leftover after parsing attributes in process `syz.3.2836'. [ 369.774875][T17014] wg1 speed is unknown, defaulting to 1000 [ 369.782494][T17014] wg1 speed is unknown, defaulting to 1000 [ 369.862194][T17030] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2841'. [ 369.892407][T17031] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2841'. [ 370.036086][T17025] wg1 speed is unknown, defaulting to 1000 [ 370.049136][T17025] wg1 speed is unknown, defaulting to 1000 [ 370.066334][T17043] batadv2: entered promiscuous mode [ 370.138514][T17045] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2846'. [ 370.423287][T17045] wg1 speed is unknown, defaulting to 1000 [ 370.542674][T17045] wg1 speed is unknown, defaulting to 1000 [ 370.843383][T17057] bond6: option packets_per_slave: mode dependency failed, not supported in mode balance-tlb(5) [ 370.920488][T17057] bond6 (unregistering): Released all slaves [ 371.291258][T17086] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2854'. [ 371.360048][T17087] lo speed is unknown, defaulting to 1000 [ 371.366532][T17087] lo speed is unknown, defaulting to 1000 [ 371.373333][T17087] lo speed is unknown, defaulting to 1000 [ 371.436219][T17087] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 371.467005][T17091] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2855'. [ 371.476198][T17091] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 371.506885][T17091] batman_adv: batadv0: Removing interface: virt_wifi0 [ 371.557284][T17091] batadv0 (unregistering): left promiscuous mode [ 371.576220][T17087] lo speed is unknown, defaulting to 1000 [ 371.586520][T17087] lo speed is unknown, defaulting to 1000 [ 371.597574][T17087] lo speed is unknown, defaulting to 1000 [ 371.625572][T17087] lo speed is unknown, defaulting to 1000 [ 371.647439][T17087] lo speed is unknown, defaulting to 1000 [ 371.865305][T17106] team_slave_1: Caught tx_queue_len zero misconfig [ 372.089591][T17123] netlink: 'syz.3.2862': attribute type 8 has an invalid length. [ 372.119796][T17123] sch_fq: defrate 0 ignored. [ 372.130326][T17126] netlink: 'syz.2.2865': attribute type 3 has an invalid length. [ 372.166503][T17126] netlink: 320 bytes leftover after parsing attributes in process `syz.2.2865'. [ 372.207816][T17130] netlink: 'syz.2.2865': attribute type 3 has an invalid length. [ 372.667352][ T5837] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 372.682944][ T5837] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 372.691957][ T5837] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 372.702594][ T5837] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 372.750925][ T5837] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 372.770979][ T5848] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 372.778756][ T5848] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 372.787102][ T5848] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 372.800578][ T5848] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 372.809175][ T5848] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 372.942333][T17159] netlink: 'syz.4.2873': attribute type 1 has an invalid length. [ 373.005287][T17147] wg1 speed is unknown, defaulting to 1000 [ 373.038408][T17147] wg1 speed is unknown, defaulting to 1000 [ 373.058782][T17147] lo speed is unknown, defaulting to 1000 [ 373.448244][T17147] chnl_net:caif_netlink_parms(): no params data found [ 373.462353][T17175] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2876'. [ 373.524456][ T5848] block nbd6: Receive control failed (result -1) [ 373.808182][T17147] bridge0: port 1(bridge_slave_0) entered blocking state [ 373.822462][T17147] bridge0: port 1(bridge_slave_0) entered disabled state [ 373.834384][T17147] bridge_slave_0: entered allmulticast mode [ 373.843269][T17147] bridge_slave_0: entered promiscuous mode [ 373.907246][T17147] bridge0: port 2(bridge_slave_1) entered blocking state [ 373.921822][T17147] bridge0: port 2(bridge_slave_1) entered disabled state [ 373.933953][T17147] bridge_slave_1: entered allmulticast mode [ 373.945406][T17147] bridge_slave_1: entered promiscuous mode [ 374.022555][T17147] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 374.231710][T17201] macsec0: entered allmulticast mode [ 374.244137][T17201] mac80211_hwsim hwsim10 wlan1: entered allmulticast mode [ 374.257131][T17201] mac80211_hwsim hwsim10 wlan1: left allmulticast mode [ 374.286891][T17199] infiniband syû: set down [ 374.294337][T17206] netlink: 'syz.4.2885': attribute type 1 has an invalid length. [ 374.294373][T17199] infiniband syû: added bond_slave_0 [ 374.336025][T17206] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 374.367971][T17147] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 374.380717][T17199] RDS/IB: syû: added [ 374.394954][T17199] smc: adding ib device syû with port count 1 [ 374.406362][T17199] smc: ib device syû port 1 has no pnetid [ 374.479029][T17206] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2885'. [ 374.508452][T17147] team0: Port device team_slave_0 added [ 374.544423][T17147] team0: Port device team_slave_1 added [ 374.681200][T17213] tipc: Enabled bearer , priority 0 [ 374.692803][T17147] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 374.714237][T17147] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 374.754670][T17220] netlink: 'syz.3.2888': attribute type 1 has an invalid length. [ 374.768316][T17147] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 374.792463][T17218] IPVS: Scheduler module ip_vs_ not found [ 374.798989][T17147] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 374.813753][T17147] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 374.873857][ T5848] Bluetooth: hci5: command tx timeout [ 374.881025][T17147] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 374.893095][T17213] syzkaller0: entered promiscuous mode [ 374.899701][T17213] syzkaller0: entered allmulticast mode [ 374.916342][T17218] bridge_slave_0: entered promiscuous mode [ 374.922676][T17218] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 375.007108][T17214] tipc: Resetting bearer [ 375.028769][T17211] tipc: Resetting bearer [ 375.071921][T17211] tipc: Disabling bearer [ 375.111592][T17226] bridge3: entered allmulticast mode [ 375.130122][T17228] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2891'. [ 375.285309][T17147] hsr_slave_0: entered promiscuous mode [ 375.301238][T17147] hsr_slave_1: entered promiscuous mode [ 375.311857][T17147] debugfs: 'hsr0' already exists in 'hsr' [ 375.334371][T17147] Cannot create hsr debugfs directory [ 375.394190][T17236] netlink: 'syz.4.2893': attribute type 2 has an invalid length. [ 375.426510][ T30] audit: type=1107 audit(1767319671.904:7): pid=17238 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 375.569832][T17243] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2896'. [ 376.062229][T17265] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2901'. [ 376.232861][T17268] wg1 speed is unknown, defaulting to 1000 [ 376.263132][T17265] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2901'. [ 376.290708][T17268] wg1 speed is unknown, defaulting to 1000 [ 376.312711][T17268] lo speed is unknown, defaulting to 1000 [ 376.356053][T17147] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 376.385159][T17147] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 376.408688][T17147] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 376.429421][T17147] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 376.622257][T17147] 8021q: adding VLAN 0 to HW filter on device bond0 [ 376.642950][T17285] netlink: 'syz.2.2904': attribute type 4 has an invalid length. [ 376.652410][T17285] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.2904'. [ 376.676116][T17147] 8021q: adding VLAN 0 to HW filter on device team0 [ 376.700110][ T7223] bridge0: port 1(bridge_slave_0) entered blocking state [ 376.707411][ T7223] bridge0: port 1(bridge_slave_0) entered forwarding state [ 376.776319][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 376.783561][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 376.842246][T17289] vxcan2: entered allmulticast mode [ 376.876407][ T8267] Oops: general protection fault, probably for non-canonical address 0xdffffc000000004c: 0000 [#1] SMP KASAN PTI [ 376.888545][ T8267] KASAN: null-ptr-deref in range [0x0000000000000260-0x0000000000000267] [ 376.897040][ T8267] CPU: 1 UID: 0 PID: 8267 Comm: kworker/1:9 Not tainted syzkaller #0 PREEMPT(full) [ 376.906458][ T8267] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 376.916563][ T8267] Workqueue: events l2cap_info_timeout [ 376.922115][ T8267] RIP: 0010:kasan_byte_accessible+0x12/0x30 [ 376.928060][ T8267] Code: 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 40 d6 48 c1 ef 03 48 b8 00 00 00 00 00 fc ff df <0f> b6 04 07 3c 08 0f 92 c0 e9 90 6d 35 09 cc 66 66 66 66 66 66 2e [ 376.947704][ T8267] RSP: 0018:ffffc9001adc77a0 EFLAGS: 00010202 [ 376.953818][ T8267] RAX: dffffc0000000000 RBX: ffffffff892f35f8 RCX: 0000000080000001 [ 376.961830][ T8267] RDX: 0000000000000000 RSI: ffffffff892f35f8 RDI: 000000000000004c [ 376.969845][ T8267] RBP: ffffffff8a61dac6 R08: 0000000000000001 R09: 0000000000000000 [ 376.977853][ T8267] R10: dffffc0000000000 R11: ffffffff8a61da80 R12: 0000000000000000 [ 376.986065][ T8267] R13: 0000000000000260 R14: 0000000000000260 R15: 0000000000000001 [ 376.994083][ T8267] FS: 0000000000000000(0000) GS:ffff888125f1f000(0000) knlGS:0000000000000000 [ 377.003138][ T8267] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 377.009767][ T8267] CR2: 00007facc064ef98 CR3: 0000000026ba2000 CR4: 00000000003526f0 [ 377.017792][ T8267] Call Trace: [ 377.021123][ T8267] [ 377.024082][ T8267] __kasan_check_byte+0x12/0x40 [ 377.028972][ T8267] lock_acquire+0x84/0x340 [ 377.033421][ T8267] ? work_grab_pending+0x3d6/0x8e0 [ 377.038578][ T8267] lock_sock_nested+0x48/0x100 [ 377.043389][ T8267] ? l2cap_sock_ready_cb+0x46/0x170 [ 377.048640][ T8267] l2cap_sock_ready_cb+0x46/0x170 [ 377.053707][ T8267] l2cap_conn_start+0x700/0xcd0 [ 377.058621][ T8267] ? __pfx_l2cap_conn_start+0x10/0x10 [ 377.064136][ T8267] ? do_raw_spin_lock+0x121/0x290 [ 377.069213][ T8267] ? lock_acquire+0x107/0x340 [ 377.073923][ T8267] ? __pfx___mutex_lock+0x10/0x10 [ 377.078992][ T8267] ? process_scheduled_works+0x9ef/0x1770 [ 377.084762][ T8267] l2cap_info_timeout+0x68/0xa0 [ 377.089669][ T8267] ? process_scheduled_works+0x9ef/0x1770 [ 377.095432][ T8267] process_scheduled_works+0xad1/0x1770 [ 377.101039][ T8267] ? __pfx_process_scheduled_works+0x10/0x10 [ 377.107060][ T8267] ? do_raw_spin_lock+0x121/0x290 [ 377.112145][ T8267] worker_thread+0x8a0/0xda0 [ 377.116783][ T8267] ? __kthread_parkme+0x7b/0x200 [ 377.121773][ T8267] kthread+0x711/0x8a0 [ 377.125895][ T8267] ? __pfx_worker_thread+0x10/0x10 [ 377.131054][ T8267] ? __pfx_kthread+0x10/0x10 [ 377.135692][ T8267] ? _raw_spin_unlock_irq+0x23/0x50 [ 377.140964][ T8267] ? __pfx_kthread+0x10/0x10 [ 377.145620][ T8267] ret_from_fork+0x510/0xa50 [ 377.150252][ T8267] ? __pfx_ret_from_fork+0x10/0x10 [ 377.155423][ T8267] ? __switch_to+0xc9e/0x1480 [ 377.160149][ T8267] ? __pfx_kthread+0x10/0x10 [ 377.164791][ T8267] ret_from_fork_asm+0x1a/0x30 [ 377.169627][ T8267] [ 377.172686][ T8267] Modules linked in: [ 377.177934][ T8267] ---[ end trace 0000000000000000 ]--- [ 377.186765][ T5848] Bluetooth: hci5: command tx timeout [ 377.197950][ T8267] RIP: 0010:kasan_byte_accessible+0x12/0x30 [ 377.204193][ T8267] Code: 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 40 d6 48 c1 ef 03 48 b8 00 00 00 00 00 fc ff df <0f> b6 04 07 3c 08 0f 92 c0 e9 90 6d 35 09 cc 66 66 66 66 66 66 2e [ 377.224087][ T8267] RSP: 0018:ffffc9001adc77a0 EFLAGS: 00010202 [ 377.230324][ T8267] RAX: dffffc0000000000 RBX: ffffffff892f35f8 RCX: 0000000080000001 [ 377.239005][ T8267] RDX: 0000000000000000 RSI: ffffffff892f35f8 RDI: 000000000000004c [ 377.247198][ T8267] RBP: ffffffff8a61dac6 R08: 0000000000000001 R09: 0000000000000000 [ 377.255569][ T8267] R10: dffffc0000000000 R11: ffffffff8a61da80 R12: 0000000000000000 [ 377.264073][ T8267] R13: 0000000000000260 R14: 0000000000000260 R15: 0000000000000001 [ 377.272206][ T8267] FS: 0000000000000000(0000) GS:ffff888125f1f000(0000) knlGS:0000000000000000 [ 377.281480][ T8267] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 377.288283][ T8267] CR2: 00007facc064ef98 CR3: 0000000026ba2000 CR4: 00000000003526f0 [ 377.296870][ T8267] Kernel panic - not syncing: Fatal exception [ 377.303586][ T8267] Kernel Offset: disabled [ 377.307922][ T8267] Rebooting in 86400 seconds..