last executing test programs: 1m4.738458123s ago: executing program 1 (id=1888): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73f72cc9f0ba1f848350000005e120602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x4000850) recvmsg$unix(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000000c0)=@abs, 0x6e, &(0x7f0000000500)=[{&(0x7f0000000140)=""/207, 0xcf}, {&(0x7f0000000000)=""/19, 0x13}, {&(0x7f0000000240)=""/142, 0x8e}, {&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000000300)=""/65, 0x41}, {&(0x7f0000000380)=""/178, 0xb2}, {&(0x7f0000000440)=""/174, 0xae}], 0x7, &(0x7f0000000580)}, 0x100) 1m3.740102058s ago: executing program 1 (id=1890): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002580), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000025c0)={'wlan0\x00', 0x0}) (async) r3 = socket(0xa, 0x3, 0x3a) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000000c0)={'veth1\x00', &(0x7f0000000240)=@ethtool_link_settings={0x2, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x20, 0xfd, [0x0, 0xfffffffc, 0x0, 0xc, 0x3, 0x8, 0x0, 0x2]}}) (async) sendmsg$NL80211_CMD_NEW_MPATH(r0, &(0x7f0000002700)={0x0, 0x0, &(0x7f00000026c0)={&(0x7f0000002600)={0x28, r1, 0x9, 0x70bd29, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x28}}, 0x0) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000818}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r4, 0x10, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @void}}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x48081}, 0x20000000) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000011c0)=ANY=[@ANYBLOB="3c0000001800dd8d0000000000000000020000000000000500000000060015000700000018001680bd"], 0x3c}}, 0x0) 1m3.492534897s ago: executing program 1 (id=1897): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0a00001c00bd074ed700"/28], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x70) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000ac0)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000006112000000000000950000000000000051fa7824c74186dc02ec0696c37b64e3b24da3180100000005345c0f63cdc2e82818254950ee03568b8809a1f04c7c4750eabfafcb9531b31e6a86827d1010c5a909ab98e00e19644a88e95ba26d1c9eecddb2d11c541418ceeb29b9b6829c6e433822bdb3cc85244aab66c1aae9314d7381fcfeb970bea672010000000000000043144648a07a975bd89dc398712376610faa54f12495b4659be8673086f6f3543205d4bc4ce05b8b961103673dff7f158052e62bfbdcddde6985f3f1ac5d9a94cc53207899762a07282a1914452d11858e795a3ca30a101af5574f9035f2b5f703e5be7e4acf8b78c2834ae5805fffee38a9a0033d520bcf6b08ede50899d4b9bdf85c71c5ed44039aab46419496362e54cfad05b4004ac71a003d7b85d07191bed4e5a8908263722d4146f7ed569985439baa355cf3d8731f5e7a237bc06d035a8d601f21746d880819f38b34a495040000000071c2f0cce8c93cc17e9afa314fcb2ba15d646c5b9f87d988c9fbd2b9d9b4e2d71753b1549fa734f0b2e5fcf9549804cddad721971637f9c9730a9cc384eed30345979db9c93e1c52f42cad0a4d4f9436d3f39b0ed09c395dc6e970366087a8e4daeeb1b017006f25caf0cbcefd13d68839893e39c588eb032905f91cafa4996dbf0cc8228d02a3092c0830b8f587a5624515298b2d4eb2bde6f9a2eb83d53f710c490ecd085d2811a7555c53030000007f00000000bfa6478eb96b079c277e2910b7ccdc3d672ed34aa65278c549e2abb549ad954884289130bc71cee2b7de62bf48129ae1af052a2d46a6165eb0954dac7265f1f425735acf6377793946b3229e861d8ea49806b3b533345d36ecef9df700000000f337b1ceb2d8a65dcdcd895d7ba37098d2593fdaaef445af5bee02019c000000aaae37f044bcadeb0f6846582b7653665aa336db9f0384d3c7ddf79c2e0000000000000000000000000000000000000000000000e154aa0d3e41986a668ee1e5ef93a8ceac75f44aae95e26742f895f287111f8ee86f7e3ffb63cfb0e345cf7fc63dd2b0d30977899c6f03640040af4db71f7452bfc79a05118d8bb42b63b195771e42f9942ec626bd4b5461b74324012164e8"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x70) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB="02"], 0x10) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, &(0x7f00000000c0)={0x18, 0x0, {0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x28}, 'veth0_to_team\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r3, 0x80047437, &(0x7f0000000100)) ioctl$PPPOEIOCSFWD(r3, 0x4008b100, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000f00)=ANY=[@ANYRES32=r4, @ANYRES32=r0, @ANYBLOB="02"], 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$nl_generic(0x11, 0x3, 0x10) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000080), 0x10) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r7 = accept4(r6, 0x0, 0x0, 0x80800) recvmsg$can_raw(r7, 0x0, 0x2) sendmsg$key(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x20008080) recvmsg$unix(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000180)=""/14, 0xe}], 0x1}, 0x40000202) r8 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r8, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) bpf$MAP_UPDATE_BATCH(0x12, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x3d0, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x300, 0xffffffff, 0xffffffff, 0x300, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x0, 0x0, 0x1}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x32}}, [], [], 'wg1\x00', 'gre0\x00', {0xff}}, 0x0, 0x200, 0x230, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x430) sendmsg(r8, &(0x7f00000000c0)={0x0, 0x953a, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0x584}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) sendmsg(r5, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dbg={0x25, 0x6, 0x35}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x11000000}, 0x0) 1m2.725538599s ago: executing program 1 (id=1908): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001200)=ANY=[], 0x0, 0x5}, 0x90) r0 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r0, 0x84, 0x84, &(0x7f0000000000), 0x90) sendmsg$inet(r0, &(0x7f0000000e40)={&(0x7f0000000280)={0x2, 0x4e23, @remote}, 0x10, &(0x7f0000000600)=[{&(0x7f0000000400)="d4", 0x1}], 0x1}, 0x40) socket$inet6(0xa, 0x5, 0x0) socket(0x2a, 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'streebog256-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000412ff8)="3665a1ab415b7ac7", 0x8) r6 = accept(r5, 0x0, 0x0) sendmmsg$alg(r6, &(0x7f0000000740)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10008044}], 0x1, 0x40081) recvmsg(r6, &(0x7f000000b680)={0x0, 0x0, &(0x7f000000b600)=[{&(0x7f000000b4c0)=""/5, 0x5}], 0x1}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x1c, &(0x7f0000000280)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@map_idx_val={0x18, 0x7, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7f}, @generic={0x80, 0xd, 0x7, 0x8, 0x72f}, @map_fd={0x18, 0x4, 0x1, 0x0, 0x1}, @alu={0x1, 0x1, 0xb, 0x3, 0x9, 0x0, 0x4}, @map_fd={0x18, 0x4, 0x1, 0x0, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @map_idx={0x18, 0x8, 0x5, 0x0, 0xe}, @jmp={0x5, 0x0, 0x1, 0x9, 0x0, 0xfffffffffffffffc}, @func={0x85, 0x0, 0x1, 0x0, 0x2}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000000c0)='GPL\x00', 0x8, 0x75, &(0x7f00000001c0)=""/117, 0x41000, 0x1, '\x00', r4, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x1, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000003c0)=[0x1, 0x1, r1, 0x1, 0xffffffffffffffff, r3, 0xffffffffffffffff], &(0x7f0000000400)=[{0x5, 0x4, 0xf, 0xb}, {0x3, 0x2, 0x10, 0x6}], 0x10, 0x49f}, 0x94) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x16, &(0x7f0000000540)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x3}, {}, {}, [@cb_func={0x18, 0x8, 0x4, 0x0, 0xfffffffffffffffb}, @map_fd={0x18, 0x3}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @func, @jmp={0x5, 0x0, 0x4, 0x6, 0x9, 0x50, 0xffffffffffffffff}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000600)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x6, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000680)=[0x1, 0xffffffffffffffff, 0x1], &(0x7f00000006c0)=[{0x4, 0x4, 0xd}, {0x4, 0x4, 0xb, 0x5}], 0x10, 0xcd35}, 0x94) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0xffff, 0xa}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x14, 0x2, [@TCA_BPF_FD={0x8, 0x6, r2}, @TCA_BPF_FD={0x8, 0x6, r7}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8848}, 0x80) 1m2.388552989s ago: executing program 1 (id=1912): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r0, 0x0, 0x8000f28, 0x0) bind$netlink(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_emit_ethernet(0x52, &(0x7f0000001400)=ANY=[@ANYBLOB="aaaaaaaaaaaa000000000078eadd6000a8bc001c06fffe8000000000000000000000000000aafe8000000000000000000000000000aa00004001", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="70020000907800002205d6e070000000"], 0x0) sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, 0x0, 0x0) vmsplice(r2, &(0x7f0000000940)=[{&(0x7f0000000400)="1333", 0x2}], 0x1, 0x0) 49.97371774s ago: executing program 1 (id=1912): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r0, 0x0, 0x8000f28, 0x0) bind$netlink(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_emit_ethernet(0x52, &(0x7f0000001400)=ANY=[@ANYBLOB="aaaaaaaaaaaa000000000078eadd6000a8bc001c06fffe8000000000000000000000000000aafe8000000000000000000000000000aa00004001", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="70020000907800002205d6e070000000"], 0x0) sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, 0x0, 0x0) vmsplice(r2, &(0x7f0000000940)=[{&(0x7f0000000400)="1333", 0x2}], 0x1, 0x0) 6.617368057s ago: executing program 3 (id=2565): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000004000000030a01080000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d65746100000000140002800800014000000012080002400000002114000000110001"], 0xd8}}, 0x0) 6.442332828s ago: executing program 3 (id=2567): writev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100080c10000000000000000000", 0x58}], 0x1) (async, rerun: 32) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) (async, rerun: 32) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000000080)={0x4}, 0x2) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0xa43, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c001e"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async, rerun: 32) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) (rerun: 32) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x840) (async) r1 = socket$netlink(0x10, 0x3, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), r1) (async, rerun: 32) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) (rerun: 32) 6.313908569s ago: executing program 3 (id=2571): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$SO_BINDTODEVICE_wg(r1, 0x1, 0x19, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0xa0, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x78, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x40, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x30, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_DATA={0xc, 0x7, 0x0, 0x1, [@NFTA_DATA_VALUE={0x8, 0x1, "1f000000"}]}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x114}}, 0x0) syz_emit_ethernet(0x7e, &(0x7f0000000300)={@random="bf1037eb4bd0", @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3d}, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "061000", 0x48, 0x11, 0x0, @remote, @local, {[], {0x4e20, 0xe22, 0x48, 0x0, @wg=@cookie={0x3, 0x2, "23926e0bf267636d01dbe5712c1c941e1cdafbbb43f09c70", "e13808ca72380641e5fff9620995b6f78670dfaf9a2038083179cf6b7931c9b4"}}}}}}}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x7fff, 0x7}, 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r3, 0x0, &(0x7f0000001700)=""/53}, 0x20) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000240)={'batadv_slave_1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000280)={'ip6tnl0\x00', &(0x7f0000000380)={'syztnl2\x00', r4, 0x29, 0x2, 0x80, 0x2, 0x57, @empty, @remote, 0x8000, 0x40, 0x7a9, 0x5}}) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a80)=ANY=[@ANYBLOB="140000001000010000000000000000007800000a40000000060a00000000000000000000020000001400048010000180090001006d617371000000000900010073797a3000000000"], 0x68}}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4400000010004b0400000000000000007a000000", @ANYRES32=r7, @ANYBLOB="00f2000000000000240012800b0001006272696467650000140002800800080088a8"], 0x44}}, 0x0) r8 = socket(0x2, 0x80805, 0x0) sendmmsg(r8, &(0x7f0000000c80)=[{{&(0x7f0000000000)=@l2tp={0x2, 0x0, @remote}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000080)="1c", 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[{0x10, 0x3a, 0x1}], 0x10}}], 0x2, 0x0) 6.076428711s ago: executing program 3 (id=2574): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r1}, 0x18) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r2}, 0x8) close(r3) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000e40)=ANY=[@ANYRES32=r0, @ANYRES32=r4, @ANYBLOB="0200000002"], 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x70) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000680)=ANY=[@ANYRES32=r6, @ANYRES32=r5, @ANYBLOB="0200000006"], 0x10) r7 = socket$netlink(0x10, 0x3, 0x14) sendmsg$netlink(r7, &(0x7f0000003f40)={0x0, 0x0, &(0x7f0000003e80)=[{&(0x7f00000005c0)=ANY=[@ANYBLOB="100000000010"], 0x10}], 0x1}, 0x0) 5.907642424s ago: executing program 3 (id=2578): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r1, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000001b00)=@newtaction={0x18, 0x76, 0x1, 0x0, 0x0, {0x0, 0x0, 0x300}, [{0x4}]}, 0x18}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=@newlink={0x34, 0x10, 0x801, 0x40, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x8}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r1}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20048050}, 0x40014) 5.769505217s ago: executing program 3 (id=2581): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r1 = socket(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000000)={r1}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000640)={&(0x7f0000000300)=ANY=[@ANYBLOB="9feb010018000000000000001c0000000000020000000000001f0200000d00000000000000000000000000000000020000000000"], &(0x7f0000000540)=""/228, 0x36, 0xe4, 0x1}, 0x20) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000640)={&(0x7f0000000300)=ANY=[@ANYBLOB="9feb010018000000000000001c0000000000020000000000001f0200000d00000000000000000000000000000000020000000000"], &(0x7f0000000540)=""/228, 0x36, 0xe4, 0x1}, 0x20) r3 = socket(0x40000000015, 0x5, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_queued\x00', 0x26e1, 0x0) syz_init_net_socket$llc(0x1a, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) socket$kcm(0x10, 0x2, 0x0) (async) r5 = socket$kcm(0x10, 0x2, 0x0) r6 = socket$pppl2tp(0x18, 0x1, 0x1) getsockopt(r6, 0x1, 0x27, 0x0, &(0x7f0000000080)) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000340)={{{@in=@empty, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@private2}}, &(0x7f0000000200)=0xe8) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000240)) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000240)={'batadv0\x00', 0x0}) ioctl$NS_GET_OWNER_UID(r4, 0xb704, &(0x7f0000000280)=0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000440)={&(0x7f0000004240)=@newsa={0x2d4, 0x10, 0x200, 0x70bd25, 0x25dfdbfd, {{@in=@multicast1, @in=@multicast2, 0x4e22, 0x4, 0x4e22, 0x675f, 0x2, 0x80, 0x20, 0x6, 0x0, r7}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4d2, 0xff}, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, {0x3, 0x4, 0x9, 0x0, 0x4, 0x100000000, 0x0, 0x7}, {0x24c, 0x1000, 0x7ff, 0xfffffffffffffff0}, {0x6, 0x3, 0x81}, 0x70bd2c, 0x3502, 0xa, 0x2, 0x1, 0x1}, [@tmpl={0x104, 0x5, [{{@in=@broadcast, 0x4d4, 0xff}, 0x2, @in=@broadcast, 0x3500, 0x1, 0x1, 0x8f, 0x7, 0x1ff, 0x4}, {{@in=@multicast2, 0x4d5, 0x33}, 0xa, @in6=@empty, 0x3500, 0x2, 0x2, 0x3, 0x6, 0x1, 0x2579}, {{@in=@multicast2, 0x4d6, 0xb6}, 0x2, @in=@rand_addr=0x64010100, 0x3503, 0x1, 0x1, 0x0, 0xffffffff, 0x10000, 0x6}, {{@in=@loopback, 0x4d3, 0xe}, 0xa, @in=@rand_addr=0x64010100, 0x3505, 0x4, 0x2, 0xfe, 0x10000, 0x4, 0x6}]}, @policy_type={0xa, 0x10, {0x1}}, @etimer_thresh={0x8, 0xc, 0x1}, @XFRMA_IF_ID={0x8, 0x1f, 0x1}, @policy_type={0xa}, @policy={0xac, 0x7, {{@in=@multicast2, @in6=@loopback, 0x4e20, 0xa83, 0x4e24, 0x0, 0xa, 0x80, 0x20, 0x0, r8, r9}, {0x0, 0x100000000, 0x2, 0x8000000000, 0x842, 0x0, 0x5, 0x6}, {0xa8, 0x4, 0xffffffffffffffd3, 0xe6}, 0x5008aa39, 0x6e6bb6, 0x0, 0x1, 0x2}}, @offload={0xc, 0x1c, {0x0, 0x2}}]}, 0x2d4}, 0x1, 0x0, 0x0, 0x84}, 0x40000) write$cgroup_subtree(r5, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000760091"], 0xfe33) setsockopt$sock_int(r3, 0x1, 0x3c, &(0x7f0000000000)=0x7, 0x4) recvmmsg(r3, &(0x7f0000003a80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=""/223, 0xdf}, 0x8}], 0x1, 0x20010060, 0x0) (async) recvmmsg(r3, &(0x7f0000003a80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=""/223, 0xdf}, 0x8}], 0x1, 0x20010060, 0x0) r10 = socket$inet6(0xa, 0x2, 0x3a) sendmmsg$inet6(r10, &(0x7f0000000800)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000140)="8000102e7577d401", 0x8}], 0x1, &(0x7f0000000840)=[@dontfrag={{0x14, 0x29, 0x36}}], 0x18}}], 0x1, 0x0) (async) sendmmsg$inet6(r10, &(0x7f0000000800)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000140)="8000102e7577d401", 0x8}], 0x1, &(0x7f0000000840)=[@dontfrag={{0x14, 0x29, 0x36}}], 0x18}}], 0x1, 0x0) connect$pppl2tp(r3, &(0x7f0000004200)=@pppol2tpv3in6={0x18, 0x1, {0x0, r5, 0x1, 0x1, 0x3, 0x1, {0xa, 0x4e21, 0x7, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7}}}, 0x3a) r11 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r11, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0xf, 0x0, 0x0, 0x0, 0x0, 0xf}}) (async) ioctl$sock_SIOCETHTOOL(r11, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0xf, 0x0, 0x0, 0x0, 0x0, 0xf}}) getsockopt$sock_int(r1, 0x1, 0x7, &(0x7f0000000040), &(0x7f0000000180)=0x4) accept4(r0, 0x0, 0x0, 0x0) (async) accept4(r0, 0x0, 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) r12 = socket$inet6_mptcp(0xa, 0x1, 0x106) recvmmsg(r12, &(0x7f0000003fc0)=[{{&(0x7f00000000c0)=@l2tp={0x2, 0x0, @multicast1}, 0x80, &(0x7f0000000700)}, 0x3}, {{&(0x7f0000000880)=@tipc=@id, 0x80, &(0x7f0000000a00)=[{&(0x7f0000000500)=""/54, 0x36}, {&(0x7f0000000900)=""/70, 0x46}, {&(0x7f0000000980)=""/102, 0x66}], 0x3, &(0x7f0000000a40)=""/161, 0xa1}, 0x101}, {{&(0x7f0000000b00)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, 0x80, &(0x7f0000000bc0)=[{&(0x7f0000000b80)=""/57, 0x39}], 0x1, &(0x7f0000000c00)=""/142, 0x8e}, 0xffff2763}, {{&(0x7f0000000cc0)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @ipv4}}, 0x80, &(0x7f0000000d80)=[{&(0x7f0000000d40)=""/18, 0x12}], 0x1, &(0x7f0000000dc0)=""/134, 0x86}, 0x4}, {{&(0x7f0000000e80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f0000002300)=[{&(0x7f0000000f00)=""/34, 0x22}, {&(0x7f0000000f40)=""/4092, 0xffc}, {&(0x7f0000001f40)=""/161, 0xa1}, {&(0x7f0000002000)=""/131, 0x83}, {&(0x7f00000020c0)=""/118, 0x76}, {&(0x7f0000002140)=""/92, 0x5c}, {&(0x7f00000021c0)=""/16, 0x10}, {&(0x7f0000002200)=""/211, 0xd3}], 0x8, &(0x7f0000002380)=""/229, 0xe5}, 0xa484}, {{&(0x7f0000002480)=@caif=@dbg, 0x80, &(0x7f00000025c0), 0x0, &(0x7f0000002600)=""/155, 0x9b}, 0x8}, {{0x0, 0x0, &(0x7f0000003ac0)=[{&(0x7f00000026c0)=""/100, 0x64}, {&(0x7f0000002500)=""/66, 0x42}, {&(0x7f0000002780)=""/200, 0xc8}, {&(0x7f0000002880)=""/104, 0x68}, {&(0x7f0000002900)=""/58, 0x3a}, {&(0x7f0000002940)=""/224, 0xe0}, {&(0x7f0000002a40)=""/4096, 0x1000}], 0x7, &(0x7f0000003b40)=""/155, 0x9b}, 0xb}, {{&(0x7f0000003c00)=@can, 0x80, &(0x7f0000003f40)=[{&(0x7f0000003a40)=""/28, 0x1c}, {&(0x7f0000003c80)=""/246, 0xf6}, {&(0x7f0000003d80)=""/225, 0xe1}, {&(0x7f0000003e80)=""/163, 0xa3}], 0x4, &(0x7f0000003f80)=""/55, 0x37}}], 0x8, 0x10000, &(0x7f00000041c0)={0x77359400}) (async) recvmmsg(r12, &(0x7f0000003fc0)=[{{&(0x7f00000000c0)=@l2tp={0x2, 0x0, @multicast1}, 0x80, &(0x7f0000000700)}, 0x3}, {{&(0x7f0000000880)=@tipc=@id, 0x80, &(0x7f0000000a00)=[{&(0x7f0000000500)=""/54, 0x36}, {&(0x7f0000000900)=""/70, 0x46}, {&(0x7f0000000980)=""/102, 0x66}], 0x3, &(0x7f0000000a40)=""/161, 0xa1}, 0x101}, {{&(0x7f0000000b00)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, 0x80, &(0x7f0000000bc0)=[{&(0x7f0000000b80)=""/57, 0x39}], 0x1, &(0x7f0000000c00)=""/142, 0x8e}, 0xffff2763}, {{&(0x7f0000000cc0)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @ipv4}}, 0x80, &(0x7f0000000d80)=[{&(0x7f0000000d40)=""/18, 0x12}], 0x1, &(0x7f0000000dc0)=""/134, 0x86}, 0x4}, {{&(0x7f0000000e80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f0000002300)=[{&(0x7f0000000f00)=""/34, 0x22}, {&(0x7f0000000f40)=""/4092, 0xffc}, {&(0x7f0000001f40)=""/161, 0xa1}, {&(0x7f0000002000)=""/131, 0x83}, {&(0x7f00000020c0)=""/118, 0x76}, {&(0x7f0000002140)=""/92, 0x5c}, {&(0x7f00000021c0)=""/16, 0x10}, {&(0x7f0000002200)=""/211, 0xd3}], 0x8, &(0x7f0000002380)=""/229, 0xe5}, 0xa484}, {{&(0x7f0000002480)=@caif=@dbg, 0x80, &(0x7f00000025c0), 0x0, &(0x7f0000002600)=""/155, 0x9b}, 0x8}, {{0x0, 0x0, &(0x7f0000003ac0)=[{&(0x7f00000026c0)=""/100, 0x64}, {&(0x7f0000002500)=""/66, 0x42}, {&(0x7f0000002780)=""/200, 0xc8}, {&(0x7f0000002880)=""/104, 0x68}, {&(0x7f0000002900)=""/58, 0x3a}, {&(0x7f0000002940)=""/224, 0xe0}, {&(0x7f0000002a40)=""/4096, 0x1000}], 0x7, &(0x7f0000003b40)=""/155, 0x9b}, 0xb}, {{&(0x7f0000003c00)=@can, 0x80, &(0x7f0000003f40)=[{&(0x7f0000003a40)=""/28, 0x1c}, {&(0x7f0000003c80)=""/246, 0xf6}, {&(0x7f0000003d80)=""/225, 0xe1}, {&(0x7f0000003e80)=""/163, 0xa3}], 0x4, &(0x7f0000003f80)=""/55, 0x37}}], 0x8, 0x10000, &(0x7f00000041c0)={0x77359400}) 3.938442878s ago: executing program 2 (id=2599): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000080)={@initdev, 0x0}, &(0x7f00000000c0)=0x14) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000100)={'ip6tnl0\x00', 0x0, 0x0, 0x26, 0x53, 0xfffffffb, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2, 0x8, 0x1, 0x9, 0xf}}) sendmsg$GTP_CMD_DELPDP(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, r1, 0x100, 0x70bd26, 0x25dfdbfd, {}, [@GTPA_TID={0xc, 0x3, 0x2}, @GTPA_LINK={0x8, 0x1, r2}, @GTPA_LINK={0x8, 0x1, r3}, @GTPA_FLOW={0x6, 0x6, 0x3}]}, 0x38}, 0x1, 0x0, 0x0, 0x8080}, 0x40c0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_ECHOREQ(r4, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r1, 0x100, 0x70bd25, 0x25dfdbfb, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x3e}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40040}, 0x4040) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000003c0), r5) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'wpan4\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_DEV(r5, &(0x7f0000000500)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x48, r6, 0x4, 0x70bd27, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r7}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r8 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000540)={0x0, 0xff00, 0x10, 0xc42, 0x4}, &(0x7f0000000580)=0x18) getsockopt$inet_sctp_SCTP_CONTEXT(r8, 0x84, 0x11, &(0x7f00000005c0)={r9}, &(0x7f0000000600)=0x8) r10 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000680)=@generic={&(0x7f0000000640)='./file0\x00', 0x0, 0x8}, 0x18) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x34, 0x0, 0x20, 0x70bd28, 0x25dfdbff, {{}, {}, {0x18, 0x17, {0x2, 0xb, @udp='udp:syz0\x00'}}}}, 0x34}, 0x1, 0x0, 0x0, 0x807}, 0x4800) r11 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) setsockopt$bt_BT_POWER(r11, 0x112, 0x9, &(0x7f00000007c0)=0x6, 0x1) r12 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$can_j1939(r12, &(0x7f00000008c0)={&(0x7f0000000800)={0x1d, r3, 0x1, {0x2, 0xf0, 0x1}, 0xfd}, 0x18, &(0x7f0000000880)={&(0x7f0000000840)="3e98305e9eb0fdbae14eba", 0xb}, 0x1, 0x0, 0x0, 0x40051}, 0x40) sendmsg$NLBL_UNLABEL_C_ACCEPT(r5, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x28, 0x0, 0x4, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast1}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x48800) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a40), r0) ioctl$sock_SIOCGIFINDEX_80211(r12, 0x8933, &(0x7f0000000a80)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_STOP_AP(r0, &(0x7f0000000b40)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x1c, r13, 0x0, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r14}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x20000004) r15 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000bc0), r4) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r4, &(0x7f0000000c80)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x1c, r15, 0x2, 0x70bd2d, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x5}, 0x0) r16 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_START_REQ(r16, &(0x7f0000000d80)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000d00)={0x14, r6, 0x100, 0x70bd27, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4000840}, 0x4000010) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r10, 0x89f3, &(0x7f0000000e40)={'ip6gre0\x00', &(0x7f0000000dc0)={'ip6gre0\x00', r3, 0x29, 0x8, 0x5, 0xe7, 0x20, @mcast1, @empty, 0x7, 0x700, 0x6, 0x80}}) ioctl$sock_ax25_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000f40)={@bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x6, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) 3.729894535s ago: executing program 2 (id=2601): r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f00000001c0)={0x28, 0x0, 0x0, @host}, 0x10) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) poll(&(0x7f0000000100)=[{r1}], 0x1, 0x2e90) close(r2) r3 = socket$vsock_stream(0x28, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=ANY=[@ANYBLOB="3800000055003d0902000000fcdbdf2507000000", @ANYRESDEC=r3, @ANYRESHEX=r2, @ANYRES32=r5, @ANYBLOB="00030000ff"], 0x38}, 0x1, 0x0, 0x0, 0x8800}, 0x0) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r5, 0x3, {0x2, 0x1, 0x2}, 0xfe}, 0x18) bind$vsock_stream(r3, &(0x7f00000000c0)={0x28, 0x0, 0x0, @local}, 0x10) r6 = socket(0x28, 0x5, 0x0) r7 = socket$netlink(0x10, 0x3, 0xb) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r7, 0x10e, 0x1, 0x0, 0x0) close(r7) bind$vsock_stream(r6, &(0x7f00000001c0)={0x28, 0x0, 0x0, @host}, 0x10) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) write$tun(r8, &(0x7f0000000040)={@val={0x0, 0x8914}, @void, @arp=@ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x4, @local, @private=0xa010102, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3b}, @broadcast}}, 0x20) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r9, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r9, &(0x7f00000002c0)="9e", 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback, 0xe}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r9, 0x84, 0x72, &(0x7f0000000300)={0x0, 0x200002, 0x30}, 0xc) sendmsg$inet6(r9, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000380)='d', 0x1}], 0x1}, 0x8000) writev(r9, &(0x7f0000000100)=[{&(0x7f0000000240)=',', 0x34000}], 0x1) r10 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r10, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000140)=@ethtool_coalesce={0xe, 0xfe, 0x80000000, 0x5, 0x2, 0xabc, 0x3ff, 0x7, 0x1, 0x1, 0x1, 0x0, 0xfffffff9, 0x80000001, 0x8, 0x8, 0xa9, 0x6, 0x1, 0x3, 0x6, 0x5, 0x1000800}}) r11 = socket$inet6(0xa, 0x1, 0x9) sendto$inet6(r11, &(0x7f0000000080)="be6dfe0ac866ea055daf220246326b2f44d71431e870b43218290d3aaf545174834f30a3f630d5c83b13f419d3a5be11ecdc64586a", 0x35, 0x40840, &(0x7f00000000c0)={0xa, 0x4e22, 0x7, @mcast2, 0x3}, 0x1c) socket$nl_route(0x10, 0x3, 0x0) 2.982243049s ago: executing program 4 (id=2607): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x17, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x791aa4b4d0044859, 0x10, &(0x7f00000000c0)={0x8000000}, 0xfffffffffffffd00}, 0x48) ioctl$sock_bt_hci(r0, 0x800448d4, &(0x7f0000000000)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x84, 0x2c, 0xd27, 0x30b529, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0x0, 0x4}, {}, {0xfff2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x2, 0x2, 0xffffffffffffffff, 0xa, 0x8}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x10}, 0x0) 2.879325021s ago: executing program 4 (id=2609): socket$can_j1939(0x1d, 0x2, 0x7) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE_TAIL_CALL(0x6, &(0x7f0000000d00)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1}, 0x48) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)=@gettfilter={0x24, 0x2e, 0x301, 0x0, 0xffffff81, {0x0, 0x0, 0x0, r3, {0xfff2, 0xe}, {}, {0xfff3}}}, 0x24}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400000010fece1f310d72cd3d00010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a3000000000140000001100010000000000"], 0x48}}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="100000002d000b02d25a806f8c6394f9101a04", 0x13}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81f782db44b9040a1d08030e000000e8fea4a1180015000600142603600e1208000f1000810401a80016000a0001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0, 0x0, 0x0, 0x5c8}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[], 0xfe33) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_TYPE={0x5}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xb}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x84}, 0x1, 0x0, 0x0, 0x84c1}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x88, 0x0, 0x1, 0x2470a9e97a39afb2, 0x0, 0x0, {0x2, 0x0, 0x7}, [@CTA_TUPLE_ORIG={0x2c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0xf, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0xfffffffe}, @CTA_SEQ_ADJ_ORIG={0x1c, 0xf, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8}, @CTA_SEQADJ_OFFSET_AFTER={0xfffffcb7}, @CTA_SEQADJ_OFFSET_BEFORE={0x8}]}]}, 0x88}}, 0x0) 2.814479328s ago: executing program 2 (id=2610): r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000000c0), 0x4) bpf$TOKEN_CREATE(0x24, &(0x7f0000000180)={0x0, r0}, 0x8) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000280)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0xfffffffd, '\x00', 0x0, 0x0, 0x0, 0x8}, 0x50) r2 = socket(0x1, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x89f7, &(0x7f00000010c0)={'bond0\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0xb, &(0x7f0000000040)=@framed={{0x18, 0x8}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @exit]}, &(0x7f0000000000)='GPL\x00'}, 0x94) 2.712310006s ago: executing program 2 (id=2612): r0 = accept$nfc_llcp(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)=0x60) r1 = accept4$nfc_llcp(r0, &(0x7f00000000c0), &(0x7f0000000140)=0x60, 0x81800) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000180)={0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f00000001c0)=0x20) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000200)={r3, @in={{0x2, 0x4e22, @private=0xa010102}}, [0x100, 0x8, 0x9, 0x8, 0x6e, 0x2, 0x8, 0x3, 0x6, 0x2, 0x7fffffff, 0x7955, 0x0, 0x2, 0x5]}, &(0x7f0000000300)=0x100) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000380)={r4, @in6={{0xa, 0x4e24, 0x9, @mcast2, 0xe}}, 0x4, 0xffff}, &(0x7f0000000440)=0x90) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r5, 0x84, 0x18, &(0x7f0000000480)={r7, 0xf109}, &(0x7f00000004c0)=0x8) getsockopt$netrom_NETROM_IDLE(r6, 0x103, 0x7, &(0x7f0000000500)=0x6, &(0x7f0000000540)=0x4) r8 = accept$netrom(r5, &(0x7f0000000580)={{0x3, @default}, [@default, @null, @null, @bcast, @netrom, @null, @default]}, &(0x7f0000000600)=0x48) connect$netrom(r8, &(0x7f0000000640)={{0x3, @null, 0x2}, [@bcast, @null, @null, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r6, 0x84, 0x76, &(0x7f00000006c0)={r2, 0x7ff}, 0x8) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r5, 0x84, 0x20, &(0x7f0000000700), &(0x7f0000000740)=0x4) getsockopt$WPAN_SECURITY(0xffffffffffffffff, 0x0, 0x1, 0xfffffffffffffffe, &(0x7f0000000780)) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r6, 0x8982, &(0x7f00000007c0)={0x6, 'ip_vti0\x00', {0x9}, 0xfffe}) syz_genetlink_get_family_id$SEG6(&(0x7f0000000800), r6) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r8, 0x8982, &(0x7f0000000840)={0x0, 'rose0\x00', {0x4}, 0xa}) r9 = accept4$ax25(r6, &(0x7f0000000880)={{0x3, @null}, [@rose, @null, @netrom, @default, @remote, @rose, @default]}, &(0x7f0000000900)=0x48, 0x40000) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000b40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000980)={0x16c, 0x0, 0x1, 0x101, 0x0, 0x0, {0x7, 0x0, 0x4}, [@CTA_LABELS={0x8, 0x16, 0x1, 0x0, [0x0]}, @CTA_ID={0x8}, @CTA_TUPLE_MASTER={0x64, 0xe, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @remote}}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x29}}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @private=0xa010100}}}}]}, @CTA_STATUS={0x8}, @CTA_NAT_SRC={0x34, 0x6, 0x0, 0x1, [@CTA_NAT_V4_MAXIP={0x8, 0x2, @loopback}, @CTA_NAT_V4_MINIP={0x8, 0x1, @remote}, @CTA_NAT_V6_MINIP={0x14, 0x4, @local}, @CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}]}]}, @CTA_LABELS={0x8, 0x16, 0x1, 0x0, [0x6]}, @CTA_TUPLE_REPLY={0x44, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @local}}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @empty}}}]}, @CTA_LABELS={0x28, 0x16, 0x1, 0x0, [0x7ff, 0x7fffffff, 0x6, 0x9, 0x1ff, 0xf78, 0x1, 0x80000001, 0x8]}, @CTA_NAT_DST={0x34, 0xd, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @rand_addr=' \x01\x00'}, @CTA_NAT_V6_MINIP={0x14, 0x4, @local}, @CTA_NAT_V4_MINIP={0x8, 0x1, @local}]}]}, 0x16c}, 0x1, 0x0, 0x0, 0x40010}, 0x4000) r10 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000bc0), r5) sendmsg$SEG6_CMD_GET_TUNSRC(r6, &(0x7f0000000cc0)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c00)={0x80, r10, 0x20, 0x70bd2a, 0x25dfdbfb, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x894}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x2}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x10001}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x4f}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3}, @SEG6_ATTR_DST={0x14, 0x1, @private0}, @SEG6_ATTR_DST={0x14, 0x1, @private2}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x78954797}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, '\x00', 0x3b}}]}, 0x80}, 0x1, 0x0, 0x0, 0x24040000}, 0x4000001) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000d40), r1) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000d80)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r5, &(0x7f0000000f00)={&(0x7f0000000d00), 0xc, &(0x7f0000000ec0)={&(0x7f0000000dc0)={0x100, r11, 0x104, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r12}, @val={0xc, 0x99, {0x0, 0x28}}}}, [@NL80211_ATTR_REKEY_DATA={0x78, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x6}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="dd21866c284a1267f0b7bb8a3724e2ec"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "40e511474d3aeac3"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="069843bcaa967a2ea690451833bf62281230ab869bea8b97"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="0c42c54a697d3163a999842bfacf8700a29a76704dc234ac"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="5e14e802828a6bce6da04c9149c9876a"}]}, @NL80211_ATTR_REKEY_DATA={0x60, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="c1c0711c0d2615dec268a7fada6cbcc68cd745a4469402c2b4c4f32d2e036320"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="42094dea9063130faab896cf992989aed943d91a483c33f3d9ddef1ff473cdac"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "bb75334b46368132"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x81}]}]}, 0x100}, 0x1, 0x0, 0x0, 0x8080}, 0x480d1) sendmsg$tipc(r6, &(0x7f0000002340)={&(0x7f0000000f40)=@id={0x1e, 0x3, 0x2, {0x4e22, 0x4}}, 0x10, &(0x7f00000012c0)=[{&(0x7f0000000f80)="3f77d0b585bf9a2e9bcaef188c33f4647c26438df775f9445c8a52c15eefe2628a5f0d9de5bd10a26e9b02fe7f9eacb5fca6ccf8a2025160f9a06c621eb41e61249848cfcf68d5de7d2cf7d12dfb98b35068ecdfe0bd6068d527ef58ae4f5a2de1748f1dc03f5e8b96ff8c9998f4341ed87133eacebd827363b45705d3596eed1b5595668018910bde831971334af4a50e12dcb9647a92e6fc6d322b6ed9", 0x9e}, {&(0x7f0000001040)="d51f37013094149c3686467294639c83fb10272fe8158dce399bda769e8ea5297fd570d608d755b6863efb963d6de21bb515f45ed2868e412c1ba9569222cec0327bed465a7b9fb2f81bc0db452f8415173d7cde9cb63c2f895bd75350e77026b9b3ac86b60e267ad86b32114448a53f16ab61bb8c3c320e89d6d5ab8f1a1a2a9d3eb56b19fc656da79db9b116aa6c99ae42f9e3aca4ee56c90542e390e6f9f0e76aaa16363ba9dd34e373fb6271c8f79ec6ee5f1580089edf540a02d881349ddb00e04ecdafbbd28467fc9a739ac4aa12d739b645", 0xd5}, {&(0x7f0000001140)="1e002f330e6481e10d1d7cf88242125cce02b61abc5bf17787230207cdaadad466eebeaba523dd3b9542216d9ce6c8a8bddf4e3995ef77d33e7d1a126ded5ba1747b2a8d0797265047ef3e55334c354b0abacc74bc6b33e833cd", 0x5a}, {&(0x7f00000011c0)="1ce6006e1c0d94c0c71bbb5f8e2f3d9b057a681e1b3a9dc95fce9634ec3ac64eaf3615e54361f75c7895572a870beb222cfd6d906e8b33fa3620", 0x3a}, {&(0x7f0000001200)="01017547368a891c19e7e40987a4bd42352bd126a181632ba12f588743ef8fb1c2957f05d64b12cdec5d22b2567e11a1b0d80b49c50ba590b8bb8bf13ca2e1c17d1ae29845e4875cdb279700b03fc8544caefa441bd28df7e13df63cfe5be069f75647120c462545c5eb7cd62424b8b0bcf6c6e7daf45d1c7fcee0c46128ae06bf7e49e23bb3c931206a381d8089c056f36adcab2706cc381bb944597346287423dfcd04bbef98158d9e93c2", 0xac}], 0x5, &(0x7f0000001340)="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", 0x1000, 0x4c804}, 0x20000004) r13 = socket$nl_crypto(0x10, 0x3, 0x15) writev(r13, &(0x7f0000002500)=[{&(0x7f0000002380)="26e925170385d7307a4014d7f358669492466a8d67640f9249ec2c30a8e4be02cb94b5a70ece08de9975b8504b8bbd8d8f792852f3e5cda86be667988776c76a782105a63303d18bcf5e378279ce1680849f66de55fe64433f63b48a31c4c13367c35780490fb67541223ef8d3663b992887758eda68aa289a43249f39f27dc23f6e6b203025509e297bac209cdef2aebeba50a2abb8ea110f47c9da0f1b5fd89f271d4c73df560a0accd39a43c4b50cc7d2a3fe876ec2a29a1f8d9e7dae61b9856347cde40a906f7a2a0a43f830679fe70a9eaae50edb6195b1327cda64b1fc475a9ff2f377ca2f47456630713e0a61d00be27a0be078", 0xf7}, {&(0x7f0000002480)="b5593774b30ec09b324a5531ce059ab22ce97cee311cc544e745e394e1ff6a711d90de5bd20b92f61325e233f060d7213b1e4cdbaa2806adced2086ed871c665074c7c0f44", 0x45}], 0x2) syz_genetlink_get_family_id$nl80211(&(0x7f0000002540), r6) r14 = accept(r9, &(0x7f0000002580)=@tipc=@name, &(0x7f0000002600)=0x80) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r14, 0x84, 0x12, &(0x7f0000002640), &(0x7f0000002680)=0x4) ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x89a1, &(0x7f00000026c0)='veth1_to_batadv\x00') 2.613939193s ago: executing program 0 (id=2613): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000040)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRESHEX=r0, @ANYBLOB="01002dbd7000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB='*\x003'], 0x48}, 0x1, 0x0, 0x0, 0xc0}, 0x0) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYRESDEC=r1], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) socket$packet(0x11, 0x1, 0x300) 2.610392773s ago: executing program 2 (id=2614): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0xc1842, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa802, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0x40, 0x24, 0xd0f, 0x70bd26, 0x0, {0x60, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_QUANTUM={0x8, 0x6, 0x7e2438dd}]}}]}, 0x40}}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x939e02dc105d5baa, 0x2}, {0xb}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) recvmmsg(r7, &(0x7f0000005140)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000640)=""/216, 0xd8}, {&(0x7f00000052c0)=""/232, 0xe8}, {&(0x7f0000003080)=""/4093, 0xffd}, {&(0x7f0000000540)=""/212, 0xd4}, {&(0x7f0000000300)=""/10, 0xa}, {&(0x7f0000000380)=""/179, 0xb3}], 0x6}, 0x8}], 0x1, 0x0, 0x0) 2.609833544s ago: executing program 4 (id=2615): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000002140)={0x26, 'aead\x00', 0x0, 0x0, 'authencesn(michael_mic-generic,xchacha20-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x7, &(0x7f00000000c0)="fdffffff", 0x4) r1 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_SECURITY_KEY(r1, 0x110, 0x1, &(0x7f0000000040)='\x00', 0x1) syz_emit_ethernet(0x4e, &(0x7f0000000780)={@local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00 \x00', 0x18, 0x3a, 0xff, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @local, {[], @mld={0x187, 0x0, 0x0, 0x0, 0x0, @local}}}}}}, 0x0) 2.450078524s ago: executing program 4 (id=2616): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x1}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000020c0)=[@in6={0xa, 0x0, 0x0, @remote, 0x34}]}, &(0x7f0000002100)=0x10) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000020c0)=[@in6={0xa, 0x0, 0x0, @remote, 0x34}]}, &(0x7f0000002100)=0x10) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000080), &(0x7f00000000c0)=0x4) (async) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r2 = socket$kcm(0x2, 0xa, 0x2) recvmsg$unix(r0, &(0x7f0000000540)={&(0x7f0000000300), 0x6e, &(0x7f0000000480)=[{&(0x7f0000000240)=""/155, 0x9b}, {&(0x7f0000000100)=""/23, 0x17}, {&(0x7f0000000640)=""/154, 0x9a}, {&(0x7f00000003c0)=""/69, 0x45}, {&(0x7f0000000140)=""/60, 0x3c}, {&(0x7f0000000440)=""/64, 0x40}], 0x6, &(0x7f0000000500)}, 0x10002) r3 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, 0x0, &(0x7f00000001c0)) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x28}}) (async) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x28}}) write$tun(0xffffffffffffffff, &(0x7f0000000780)={@val={0x0, 0xf7}, @val={0x3eb74eb48a855629, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv6=@tcp={0x3, 0x6, "701a3e", 0x64, 0x6, 0x1, @mcast2, @private0={0xfc, 0x0, '\x00', 0x1}, {[@dstopts={0x32, 0x8, '\x00', [@calipso={0x7, 0x28, {0x3, 0x8, 0xc8, 0x2, [0xffffffffffffff81, 0x4, 0x7, 0x5]}}, @hao={0xc9, 0x10, @remote}, @jumbo={0xc2, 0x4, 0x9}, @ra={0x5, 0x2, 0x7c86}]}], {{0x4e21, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x1, 0x200, 0x0, 0xf}}}}}}, 0x9a) (async) write$tun(0xffffffffffffffff, &(0x7f0000000780)={@val={0x0, 0xf7}, @val={0x3eb74eb48a855629, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv6=@tcp={0x3, 0x6, "701a3e", 0x64, 0x6, 0x1, @mcast2, @private0={0xfc, 0x0, '\x00', 0x1}, {[@dstopts={0x32, 0x8, '\x00', [@calipso={0x7, 0x28, {0x3, 0x8, 0xc8, 0x2, [0xffffffffffffff81, 0x4, 0x7, 0x5]}}, @hao={0xc9, 0x10, @remote}, @jumbo={0xc2, 0x4, 0x9}, @ra={0x5, 0x2, 0x7c86}]}], {{0x4e21, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x1, 0x200, 0x0, 0xf}}}}}}, 0x9a) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001ac0)={&(0x7f0000001d40)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x2, [@struct={0xa, 0x0, 0x0, 0x4, 0x0, 0xa, [{0xd, 0x1}, {0x6, 0x0, 0x40}, {0xb, 0x1, 0x7fffffff}, {0x3, 0x2, 0x2}, {0xe, 0x4, 0x1}]}, @struct={0x0, 0x2, 0x0, 0x4, 0x0, 0x0, [{0x2, 0x1}, {0x8, 0x0, 0x3}]}]}}, 0x0, 0x4a}, 0x28) r4 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000180), r6) sendmsg$NFC_CMD_GET_TARGET(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r7, 0x1}, 0x14}}, 0x24004044) syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r6) (async) syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r6) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r6) (async) r8 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r6) sendmsg$NBD_CMD_RECONFIGURE(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="f6e9666740c8f314db60bfdc45", @ANYRES16=r8, @ANYBLOB="010028bd7000fedbdf2503000000"], 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x4) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000580), r5) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$kcm(r2, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000001940)=[{&(0x7f00000005c0)="bd9f7f1e818098d87bb1c05d1c9adf8c353819b83386f9c77c4b25d35b62911b92eadd83d10147df065596bc22decd1b5cdf89338ffc503eb3f231cb8cdff5bcc57e629a6ab00b545d31d7f0cc3199e15b7783ad0f53b47c1ba74476c77f08", 0x5f}, {&(0x7f0000000840)="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", 0x1000}, {&(0x7f0000001840)="1a547601f1e1bd40b41330aa1aae7297f684dd05382252f9d962e8b6b59035340fcc3cdf192c66a35f15fdba38dedb2ec39d25096eca6b2d72fbd2f21e0a002fffacc221d6795a38a6b29b05e6863b6a48307c542d023a3dd6473833919ecd582f4c40c6b0002cbecd4dd43bf59d31297cd1f02aa5cde16370e8b1e9fa706b5905001ed7a6f9335052b3db7dd5c7f1717867eba6bb4b5d11cad00e20c046c812a6c7a7d06cd8212aa6399979cc4214ddeb1bb6c32c713328f916dcbc65dcc6ca4df34ffa53bd37bcff1e44", 0xcb}], 0x3, &(0x7f0000001980)=[{0xa8, 0x10c, 0x244d, "4896e4ebd9fa8d1631add8f4f9e88660ad44d0aa77be540d70785c03a3ffa3bc5ee341cd44ec5e269ecb50295646dd8f76609963f9f2d34696820712e63eef9f76efb1f63dbbdc8366cf6c832a4ebbd7b9b3eb58ccfacc15351f213824d388098121729d7fa0b7f76ffed7b7f3df234742269a027e8a557258abfbd61c97d1a6fbddf672a2e5365bff73d51875ef441f2b66260e499ff366"}], 0xa8}, 0x40002) recvmsg$unix(r0, &(0x7f0000000500)={&(0x7f0000000700), 0x6e, &(0x7f0000001b80), 0x0, &(0x7f0000001c00)=[@rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x120}, 0x0) bind$bt_hci(r9, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) bind$bt_hci(r9, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000080)={0x49, 0x800000, 0x8, 0x7, 0x8000}) write$bt_hci(r9, &(0x7f0000000080)=ANY=[], 0x6) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r4, 0x800442d2, &(0x7f00000000c0)={0x0, 0x0}) (async) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r4, 0x800442d2, &(0x7f00000000c0)={0x0, 0x0}) 2.232478192s ago: executing program 0 (id=2617): socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r1, @ANYBLOB="06001500070000000c00168008000100", @ANYRES64=r0], 0x38}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x86}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000000)=@framed={{0x62, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0x2d}}, &(0x7f0000000480)='GPL\x00'}, 0x90) 2.13439027s ago: executing program 4 (id=2618): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x2, 0xfffffffe, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x3, 0xffe0}, {0x0, 0x7}, {0x14, 0xd}}}, 0x24}, 0x1, 0x0, 0x0, 0x44}, 0x40004) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x2, 0xfffffffe, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x3, 0xffe0}, {0x0, 0x7}, {0x14, 0xd}}}, 0x24}, 0x1, 0x0, 0x0, 0x44}, 0x40004) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000900000000000008000003000000040004001c000180180010"], 0x34}}, 0x4000000) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="14000000100001000000000000000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a320000000068000000060a010400000000000000000100000008000b4000000000400004803c0001800b000100736f636b657400002c0002800800030000000092080002400000000b0800014000000000080002400000000b08000300d2509f10e45740bc73797a3000000000140000001100010000000000000000000000000a"], 0xdc}}, 0x0) 1.962370989s ago: executing program 0 (id=2619): r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{0x1}, &(0x7f0000000180), &(0x7f00000001c0)}, 0x20) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0xf, &(0x7f0000000240)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x425, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) 1.888587784s ago: executing program 0 (id=2620): syz_emit_ethernet(0xa2, &(0x7f00000007c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd603000bb006c2b00fc02000000000000000000000000ac6fd8c6613076ac000000000000000000aa0000020800000000000000000064907802000000000000000000000082f63de64f6ce2ee11028289aefdb3449391a823213e6336516748a7949bb108402fa83b1d661c18462075368a1860929ddeb8f71aa23d391b8fa99e9816af2d040876a663a86d97f46b9665b018492b9909f6f480c093a3"], 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpu.stat\x00', 0x275a, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000400)={@multicast, @link_local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, 'h{-', 0x18, 0x0, 0x1, @rand_addr=' \x01\x00', @dev={0xfe, 0x80, '\x00', 0x1c}, {[@routing={0x0, 0x2, 0x0, 0x0, 0x0, [@ipv4={'\x00', '\xff\xff', @multicast2}]}]}}}}}, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r0, 0x0) ppoll(0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCDELRT(r1, 0x890c, &(0x7f0000000dc0)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x0, @bcast, @netrom={'nr', 0x0}, 0x0, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @bcast, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[], &(0x7f0000000000)='syzkaller\x00'}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='ext4_writepages_result\x00', r2}, 0x10) r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r3}, 0x8) close(r2) close(r4) sendto$llc(r4, &(0x7f0000000040)="b7fc3628b809f21687fe38240ad5c3659bc478d19e9b2c713dc60422853fb0869192f98e902048522376bd7c4a16c1de697a297b05a8daf7004464fad2ca4d5d95ab4b831fad32120537df963a88903943a63ab5c23fde2fe2dd4343d8fe425863019af33145aeeb73e57d29892a4e3694c72c1cdd4c8658862532a7cfece47a5117f20c5023d232471062e29c6c3995c16035", 0x93, 0x1, &(0x7f0000000100)={0x1a, 0x300, 0x5, 0x0, 0x6, 0x25, @remote}, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0) accept4$inet6(r5, 0x0, 0x0, 0x800) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x3a0, 0x1c0, 0x111, 0x4b4, 0x0, 0xd4feffff, 0x2d0, 0x20a, 0x278, 0x2d0, 0x278, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @empty, [], [], 'ipvlan0\x00', 'team_slave_0\x00', {}, {}, 0x6}, 0x0, 0x198, 0x1c0, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "6d93eb04697dfa39de04767f46614613a407abbf4ed2e83a63b484dbb3bf6b2a850e79009e2905d2f98ba19f91f3c9faee6d3686e9bee067f4e77d9ad66238750c4100d7ee97ec7646259d90edece6e9787a97bc956c01754c34c5c9518c46178ed5f9194454980e579c80eca35a58dc47d1d5e4ff6e216c724e88c702448587", 0x28}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@ipv6={@loopback, @dev, [], [], 'veth1_to_hsr\x00', 'pim6reg1\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x400) write$cgroup_devices(r4, &(0x7f0000000880)=ANY=[@ANYBLOB="61202a3a2a20726d00fa04219522c7632c0c444162d291b81089e97660d046547a085047eaab225035685b2242c36c9240bf38b53bd92c1050f49fa3b54b5986eaedcf9049442d453fc8ee63cfd23c40629d32f47ae5a782afc3f161edcbff03fe334debd399548635a96f76125ef741217eca9f2de4936780d9bcea5187e3f687c6b9fc491facfda457f2abdcb69f3a700c8c7dca974726aede4bd612efd36bcaf9751215453f2343392529f031bc7741f34f2868a042f4750c5de49d13692d63c0cbf91d2c23f119d8b556dafacb0b697a59d1f187e826af20f446afbfa776d10ea225e613d1822f8ace6d4f9211d542d757592c9f90907a092610a785fcd48a7ef9195baae276c83dcdbae9cfdc51fc7344b7b93fbc6bd611f6ee20f6d786115431fe9486bd471f28dbe7bc"], 0x9) syz_emit_ethernet(0xa2, &(0x7f00000007c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd603000bb006c2b00fc02000000000000000000000000ac6fd8c6613076ac000000000000000000aa0000020800000000000000000064907802000000000000000000000082f63de64f6ce2ee11028289aefdb3449391a823213e6336516748a7949bb108402fa83b1d661c18462075368a1860929ddeb8f71aa23d391b8fa99e9816af2d040876a663a86d97f46b9665b018492b9909f6f480c093a3"], 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpu.stat\x00', 0x275a, 0x0) (async) syz_emit_ethernet(0x4e, &(0x7f0000000400)={@multicast, @link_local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, 'h{-', 0x18, 0x0, 0x1, @rand_addr=' \x01\x00', @dev={0xfe, 0x80, '\x00', 0x1c}, {[@routing={0x0, 0x2, 0x0, 0x0, 0x0, [@ipv4={'\x00', '\xff\xff', @multicast2}]}]}}}}}, 0x0) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r0, 0x0) (async) ppoll(0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0) (async) syz_init_net_socket$rose(0xb, 0x5, 0x0) (async) ioctl$sock_rose_SIOCDELRT(r1, 0x890c, &(0x7f0000000dc0)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x0, @bcast, @netrom={'nr', 0x0}, 0x0, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @bcast, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[], &(0x7f0000000000)='syzkaller\x00'}, 0x94) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='ext4_writepages_result\x00', r2}, 0x10) (async) bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r3}, 0x8) (async) close(r2) (async) close(r4) (async) sendto$llc(r4, &(0x7f0000000040)="b7fc3628b809f21687fe38240ad5c3659bc478d19e9b2c713dc60422853fb0869192f98e902048522376bd7c4a16c1de697a297b05a8daf7004464fad2ca4d5d95ab4b831fad32120537df963a88903943a63ab5c23fde2fe2dd4343d8fe425863019af33145aeeb73e57d29892a4e3694c72c1cdd4c8658862532a7cfece47a5117f20c5023d232471062e29c6c3995c16035", 0x93, 0x1, &(0x7f0000000100)={0x1a, 0x300, 0x5, 0x0, 0x6, 0x25, @remote}, 0x10) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0) (async) accept4$inet6(r5, 0x0, 0x0, 0x800) (async) socket$inet6_udplite(0xa, 0x2, 0x88) (async) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x3a0, 0x1c0, 0x111, 0x4b4, 0x0, 0xd4feffff, 0x2d0, 0x20a, 0x278, 0x2d0, 0x278, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @empty, [], [], 'ipvlan0\x00', 'team_slave_0\x00', {}, {}, 0x6}, 0x0, 0x198, 0x1c0, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "6d93eb04697dfa39de04767f46614613a407abbf4ed2e83a63b484dbb3bf6b2a850e79009e2905d2f98ba19f91f3c9faee6d3686e9bee067f4e77d9ad66238750c4100d7ee97ec7646259d90edece6e9787a97bc956c01754c34c5c9518c46178ed5f9194454980e579c80eca35a58dc47d1d5e4ff6e216c724e88c702448587", 0x28}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@ipv6={@loopback, @dev, [], [], 'veth1_to_hsr\x00', 'pim6reg1\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x400) (async) write$cgroup_devices(r4, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x9) (async) 1.879483629s ago: executing program 4 (id=2621): r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="400000000a0601010000000d0000000000000000050001"], 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SYS_GET(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x1406, 0x300, 0x70bd27, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x40488c4}, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x38, 0x1403, 0x1, 0x70bd26, 0x25dfdc02, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth1_vlan\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x801}, 0x800) 1.698428361s ago: executing program 0 (id=2622): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x1}) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=@updpolicy={0x23c, 0x19, 0x1, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @empty}, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0xff}}, [@tmpl={0x184, 0x5, [{{@in6=@mcast1, 0x4d2, 0x33}, 0xa, @in6=@empty, 0x3501, 0x1, 0x0, 0x3b, 0x83, 0x5, 0x7}, {{@in6=@local, 0x4d6, 0x3c}, 0xa, @in6=@private1, 0x3502, 0x2, 0x0, 0x7, 0x7f, 0x0, 0x4}, {{@in=@multicast1, 0x4d5, 0x6c}, 0x2, @in6=@empty, 0x3507, 0x4, 0x3, 0x3, 0x4, 0x2, 0x3}, {{@in6=@private0, 0x4d3, 0x3c}, 0x2, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x0, 0x0, 0x2, 0xfffffffa, 0x401, 0x81}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4d3, 0x6c}, 0x2, @in=@private=0xa010100, 0x3502, 0x5, 0x0, 0xd1, 0xe, 0x47b, 0x3}, {{@in=@broadcast, 0x4d5, 0x33}, 0x2, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x34ff, 0x3, 0x0, 0x6, 0x5, 0x4, 0x7f}]}]}, 0x23c}}, 0x4000) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f00000005c0)={@val={0x0, 0xf7}, @val={0x3eb74eb48a855629, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv6=@tcp={0x3, 0x6, "701a3e", 0x14, 0x6, 0x1, @mcast2, @empty, {[], {{0x4e21, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x1, 0x200, 0x0, 0xf}}}}}}, 0x4a) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000007000000080001006e00000008000300", @ANYRES32=r6, @ANYBLOB="0c0099000000000000000000050053000100000014000400776c616e310000000000000000000000140006"], 0x60}}, 0x0) 97.73367ms ago: executing program 2 (id=2623): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'macsec0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000a00)=ANY=[@ANYBLOB="54000000100003052bbd7000249d020000000000", @ANYRES32=0x0, @ANYBLOB="1544010001800000240012800b0001006d616373656300001400028005000c0001000000080005000400000008000500", @ANYRES32=r1], 0x54}}, 0x800) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2000002, 0x42073, 0xffffffffffffffff, 0xaba00000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r3, &(0x7f0000000600)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8200000}, 0xc, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="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"], 0x134}, 0x1, 0x0, 0x0, 0x81}, 0x800) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), r0) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000640)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000200)={&(0x7f0000000380)={0x27c, r4, 0x8, 0x70bd29, 0x25dfdbfc, {}, [@TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3a4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}]}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x200}]}, @TIPC_NLA_MEDIA={0x20, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4ee0}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_MEDIA={0x8c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x40}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x20}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffff8}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000001}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_MEDIA={0x14, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_NODE={0x16c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x40, 0x4, {'gcm(aes)\x00', 0x18, "bf02f9adea672362036fe7ec01000b0d504bc75147fc4475"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_REKEYING={0x8}, @TIPC_NLA_NODE_ID={0x8b, 0x3, "add7b979ce2b35b2d1041c2b0c7ef7d9ebefb1cc74b3bbc4dd6abdfd23809b00f451e955c48c79b5ee52b53bfcb485c7614a5f84e0580d6abfd9ae02c799ab555c34175032c104bc6a492a9f3e22a2a154e68b587c9bc1c03fd777276cc4456bf85a5ef94637b3a77a3108f560382f0e5cad4a79c0fba09ee5e1a85c5fbc12a4a0ae8da2071f2c"}, @TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "dac774aae1365edfaefe807c86c1d30a70c5c65fff3da5140ce42bc20b1b5b69fa92cb14"}}, @TIPC_NLA_NODE_KEY={0x40, 0x4, {'gcm(aes)\x00', 0x18, "f911f68dd7a822cf173088f4dd17edf9a2810ef6ac3197ba"}}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x27c}, 0x1, 0x0, 0x0, 0x48014}, 0x4004) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="38000000030101030000000000"], 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x0) socket(0x9, 0x7e67755fc11ea131, 0x0) mmap(&(0x7f0000846000/0x3000)=nil, 0x3000, 0xba0c29e690d41d4b, 0x20000000ec071, 0xffffffffffffffff, 0xabe97000) 0s ago: executing program 0 (id=2624): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000380)='rxrpc_call\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000002c0)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='rxrpc_call\x00', r1}, 0x10) r2 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0xfffc, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=[{0x18, 0x110, 0x1, "dc"}], 0x18}, 0xfc00) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) r6 = accept4(r3, &(0x7f0000000000)=@vsock, &(0x7f0000000080)=0x80, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000002fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f0000000040)=r9, 0x4) sendmsg$unix(r8, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_DELSET={0x68, 0xb, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_EXPRESSIONS={0x48, 0x12, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0xb}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0xd}]}}}, {0x24, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x4}, @NFTA_REJECT_TYPE={0x8}]}}}]}]}], {0x14}}, 0x90}, 0x1, 0x0, 0x0, 0xc8d1}, 0x0) sendmsg$NL80211_CMD_NEW_STATION(r3, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)={0x38, r4, 0xb97534d5fe9704cf, 0x0, 0xfffffffc, {{0x12}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x6, 0xbd, [0xaaa]}, @NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0x6, 0xbe, '\\\v'}]}, 0x38}}, 0x0) kernel console output (not intermixed with test programs): tribute type 2 has an invalid length. [ 125.395233][ T7060] delete_channel: no stack [ 125.576559][ T7066] __nla_validate_parse: 10 callbacks suppressed [ 125.576582][ T7066] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.339'. [ 125.925747][ T7085] netlink: 12 bytes leftover after parsing attributes in process `syz.2.345'. [ 125.943172][ T7082] netlink: 'syz.3.344': attribute type 9 has an invalid length. [ 126.215267][ T7102] netlink: 868 bytes leftover after parsing attributes in process `syz.4.351'. [ 126.550273][ T7118] (unnamed net_device) (uninitialized): peer notification delay (1164) is not a multiple of miimon (100), value rounded to 1100 ms [ 126.613748][ T7118] bond2: entered promiscuous mode [ 126.619161][ T7118] bond2: entered allmulticast mode [ 126.625130][ T7118] 8021q: adding VLAN 0 to HW filter on device bond2 [ 126.693245][ T7124] netlink: 'syz.1.357': attribute type 11 has an invalid length. [ 126.853387][ T7128] netlink: 12 bytes leftover after parsing attributes in process `syz.2.359'. [ 126.872963][ T7128] netlink: 12 bytes leftover after parsing attributes in process `syz.2.359'. [ 127.171793][ T7140] xt_CT: You must specify a L4 protocol and not use inversions on it [ 127.242289][ T7148] netlink: 92 bytes leftover after parsing attributes in process `syz.3.364'. [ 127.385904][ T7152] netlink: 256 bytes leftover after parsing attributes in process `syz.0.366'. [ 127.449462][ T7151] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 127.618294][ T7157] syz.3.369 (7157) used greatest stack depth: 19272 bytes left [ 127.697193][ T7165] netlink: 868 bytes leftover after parsing attributes in process `syz.1.372'. [ 127.708411][ T7166] (unnamed net_device) (uninitialized): option lp_interval: invalid value (0) [ 127.718330][ T7166] (unnamed net_device) (uninitialized): option lp_interval: allowed values 1 - 2147483647 [ 128.301226][ T7199] syzkaller0: entered promiscuous mode [ 128.338944][ T7199] syzkaller0: entered allmulticast mode [ 128.822232][ T7215] af_packet: tpacket_rcv: packet too big, clamped from 122 to 4294967286. macoff=82 [ 129.038450][ T7226] team_slave_0: entered promiscuous mode [ 129.044444][ T7226] team_slave_1: entered promiscuous mode [ 129.074841][ T7227] netlink: 8 bytes leftover after parsing attributes in process `syz.4.390'. [ 129.075949][ T7226] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 129.142766][ T7226] team0: Device macvtap1 is already an upper device of the team interface [ 129.515922][ T7226] team_slave_0: left promiscuous mode [ 129.522420][ T7226] team_slave_1: left promiscuous mode [ 129.533987][ T7301] netlink: 'syz.2.394': attribute type 1 has an invalid length. [ 129.802771][ T7308] netlink: 144 bytes leftover after parsing attributes in process `syz.1.396'. [ 130.134393][ T7326] tipc: Invalid UDP bearer configuration [ 130.134462][ T7326] tipc: Enabling of bearer rejected, failed to enable media [ 130.213139][ T7326] xfrm1: entered allmulticast mode [ 130.666382][ T5908] IPVS: starting estimator thread 0... [ 130.677272][ T7357] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 130.727467][ T7363] IPVS: set_ctl: invalid protocol: 11612 172.20.20.11:21 [ 130.749731][ T7362] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 130.773966][ T7367] xt_ecn: cannot match TCP bits for non-tcp packets [ 130.825027][ T7359] IPVS: using max 22 ests per chain, 52800 per kthread [ 130.995136][ T7372] netlink: 'syz.4.414': attribute type 1 has an invalid length. [ 131.235304][ T7390] __nla_validate_parse: 3 callbacks suppressed [ 131.235325][ T7390] netlink: 308 bytes leftover after parsing attributes in process `syz.2.419'. [ 131.421787][ T7403] netlink: 'syz.2.423': attribute type 8 has an invalid length. [ 131.440466][ T7397] : renamed from hsr0 (while UP) [ 131.456051][ T7402] netlink: 'syz.2.423': attribute type 8 has an invalid length. [ 131.496836][ T7397] netlink: 'syz.4.422': attribute type 33 has an invalid length. [ 131.505636][ T7397] netlink: 152 bytes leftover after parsing attributes in process `syz.4.422'. [ 131.547903][ T7404] netlink: 4 bytes leftover after parsing attributes in process `syz.4.422'. [ 131.626459][ T7409] netlink: 8 bytes leftover after parsing attributes in process `syz.1.425'. [ 131.774318][ T7424] netlink: 'syz.2.429': attribute type 1 has an invalid length. [ 131.800662][ T7425] netlink: 'syz.3.428': attribute type 2 has an invalid length. [ 131.844741][ T7425] netlink: 84 bytes leftover after parsing attributes in process `syz.3.428'. [ 131.875401][ T7424] 8021q: adding VLAN 0 to HW filter on device bond3 [ 131.884231][ T7425] netlink: 4 bytes leftover after parsing attributes in process `syz.3.428'. [ 131.993341][ T7434] netlink: 8 bytes leftover after parsing attributes in process `syz.3.433'. [ 131.997698][ T7424] macvtap1: entered promiscuous mode [ 132.012820][ T7424] bond3: entered promiscuous mode [ 132.016054][ T7432] netlink: 'syz.4.431': attribute type 9 has an invalid length. [ 132.018872][ T7424] macvtap1: entered allmulticast mode [ 132.031437][ T7424] bond3: entered allmulticast mode [ 132.037578][ T7424] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 132.048494][ T7432] netlink: 211988 bytes leftover after parsing attributes in process `syz.4.431'. [ 132.132397][ T7440] bond3: (slave gretap1): making interface the new active one [ 132.143763][ T7440] gretap1: entered promiscuous mode [ 132.152128][ T7440] gretap1: entered allmulticast mode [ 132.161181][ T7432] xt_CT: No such helper "netbios-ns" [ 132.162990][ T7440] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 132.178752][ T7437] netlink: 'syz.0.432': attribute type 7 has an invalid length. [ 132.187119][ T7432] netlink: 68 bytes leftover after parsing attributes in process `syz.4.431'. [ 132.395619][ T7451] netlink: 'syz.1.436': attribute type 4 has an invalid length. [ 132.469909][ T7452] bond0: (slave batadv0): Releasing backup interface [ 132.559274][ T7469] netlink: 348 bytes leftover after parsing attributes in process `syz.3.437'. [ 132.574467][ T7452] bond3: (slave gretap1): Releasing active interface [ 132.581966][ T7452] gretap1: left allmulticast mode [ 132.589216][ T7452] gretap1: left promiscuous mode [ 132.612786][ T5908] vxcan1 speed is unknown, defaulting to 1000 [ 132.700773][ T7459] team0: Device hsr_slave_0 failed to register rx_handler [ 132.882138][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.889146][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.996714][ T7481] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 133.445478][ T7508] tipc: Started in network mode [ 133.460710][ T7508] tipc: Node identity e0000002, cluster identity 4711 [ 133.485277][ T7508] tipc: Enabling of bearer rejected, failed to enable media [ 133.577731][ T7513] team0: Port device geneve0 added [ 133.795534][ T7515] x_tables: duplicate underflow at hook 2 [ 134.990845][ T7585] validate_nla: 8 callbacks suppressed [ 134.990864][ T7585] netlink: 'syz.4.475': attribute type 1 has an invalid length. [ 135.295834][ T7599] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 135.535708][ T7613] netlink: 'syz.0.483': attribute type 1 has an invalid length. [ 136.347541][ T7650] netlink: 'syz.1.496': attribute type 1 has an invalid length. [ 136.422072][ T7650] netlink: 'syz.1.496': attribute type 2 has an invalid length. [ 136.458880][ T7650] netlink: 'syz.1.496': attribute type 1 has an invalid length. [ 136.499742][ T7650] netlink: 'syz.1.496': attribute type 2 has an invalid length. [ 136.512160][ T7661] __nla_validate_parse: 17 callbacks suppressed [ 136.512180][ T7661] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.498'. [ 136.524937][ T7650] netlink: 'syz.1.496': attribute type 1 has an invalid length. [ 136.542996][ T7661] netlink: zone id is out of range [ 136.558455][ T7650] netlink: 'syz.1.496': attribute type 2 has an invalid length. [ 136.567498][ T7661] netlink: get zone limit has 8 unknown bytes [ 136.628638][ T7650] netlink: 'syz.1.496': attribute type 1 has an invalid length. [ 136.650604][ T7650] netlink: 'syz.1.496': attribute type 2 has an invalid length. [ 136.875675][ T7661] netlink: 148 bytes leftover after parsing attributes in process `syz.3.498'. [ 137.443193][ T7707] netlink: 36 bytes leftover after parsing attributes in process `syz.3.509'. [ 137.478256][ T7705] netlink: 36 bytes leftover after parsing attributes in process `syz.3.509'. [ 137.814717][ T7725] netlink: 8 bytes leftover after parsing attributes in process `syz.2.512'. [ 137.906321][ T7725] netlink: 8 bytes leftover after parsing attributes in process `syz.2.512'. [ 138.362264][ T7740] syzkaller0: entered promiscuous mode [ 138.376120][ T7740] syzkaller0: entered allmulticast mode [ 138.433154][ T7740] netlink: 8 bytes leftover after parsing attributes in process `syz.4.517'. [ 138.442594][ T7740] netlink: 12 bytes leftover after parsing attributes in process `syz.4.517'. [ 138.698646][ T7750] 8021q: adding VLAN 0 to HW filter on device bond2 [ 138.751545][ T7759] bond2: entered promiscuous mode [ 138.846418][ T7764] netlink: 12 bytes leftover after parsing attributes in process `syz.2.522'. [ 139.020487][ T7779] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 139.082800][ T7779] team0: No ports can be present during mode change [ 139.091731][ T7779] veth0: entered promiscuous mode [ 139.121968][ T7778] veth0: left promiscuous mode [ 139.566104][ T7798] bridge_slave_0: left allmulticast mode [ 139.601152][ T7798] bridge_slave_0: left promiscuous mode [ 139.604318][ T7806] netlink: 4 bytes leftover after parsing attributes in process `syz.4.534'. [ 139.616531][ T7798] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.646804][ T7798] bridge_slave_1: left allmulticast mode [ 139.657086][ T7798] bridge_slave_1: left promiscuous mode [ 139.663434][ T7798] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.682867][ T7798] bond0: (slave bond_slave_0): Releasing backup interface [ 139.712293][ T7798] bond0: (slave bond_slave_1): Releasing backup interface [ 139.752674][ T7798] team0: Port device team_slave_0 removed [ 139.768813][ T7798] team0: Port device team_slave_1 removed [ 139.776092][ T7798] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 139.784221][ T7798] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 139.800167][ T7798] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 139.810586][ T7798] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 140.322311][ T7837] validate_nla: 125 callbacks suppressed [ 140.322333][ T7837] netlink: 'syz.1.539': attribute type 2 has an invalid length. [ 140.469748][ T7844] x_tables: duplicate entry at hook 1 [ 141.364910][ T7872] netlink: 'syz.4.552': attribute type 11 has an invalid length. [ 141.387674][ T7872] netlink: 'syz.4.552': attribute type 1 has an invalid length. [ 141.818516][ T7901] netlink: 'syz.0.563': attribute type 1 has an invalid length. [ 141.846627][ T7901] netlink: 'syz.0.563': attribute type 4 has an invalid length. [ 141.854528][ T7901] __nla_validate_parse: 10 callbacks suppressed [ 141.863801][ T7901] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.563'. [ 142.576708][ T7935] netlink: 8 bytes leftover after parsing attributes in process `syz.3.574'. [ 142.643439][ T7935] netlink: 'syz.3.574': attribute type 1 has an invalid length. [ 142.694101][ T7935] netlink: 'syz.3.574': attribute type 2 has an invalid length. [ 142.992350][ T7958] netlink: 'syz.3.578': attribute type 1 has an invalid length. [ 143.121666][ T7958] 8021q: adding VLAN 0 to HW filter on device bond2 [ 143.129732][ T7965] netlink: 20 bytes leftover after parsing attributes in process `syz.1.583'. [ 143.182529][ T7963] 8021q: adding VLAN 0 to HW filter on device bond2 [ 143.198670][ T7965] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 143.212110][ T7963] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 143.229115][ T7963] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 143.302169][ T7962] syz_tun: entered promiscuous mode [ 143.322293][ T7962] batadv_slave_0: entered promiscuous mode [ 143.334254][ T7977] netlink: 71 bytes leftover after parsing attributes in process `syz.0.584'. [ 143.342119][ T7962] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 143.369147][ T7962] Cannot create hsr debugfs directory [ 143.377014][ T7962] hsr0: entered allmulticast mode [ 143.382195][ T7962] syz_tun: entered allmulticast mode [ 143.394358][ T7962] batadv_slave_0: entered allmulticast mode [ 143.411163][ T7958] gretap0: entered promiscuous mode [ 143.445753][ T7958] bond2: (slave gretap0): making interface the new active one [ 143.465853][ T7958] bond2: (slave gretap0): Enslaving as an active interface with an up link [ 143.481303][ T7980] netlink: 68 bytes leftover after parsing attributes in process `syz.1.586'. [ 143.527260][ T7980] netlink: 12 bytes leftover after parsing attributes in process `syz.1.586'. [ 143.540403][ T7973] macvlan2: entered promiscuous mode [ 143.545891][ T7973] macvlan2: entered allmulticast mode [ 143.555693][ T7973] bond2: entered promiscuous mode [ 143.561490][ T7973] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 143.581115][ T7980] netlink: 20 bytes leftover after parsing attributes in process `syz.1.586'. [ 143.615074][ T7973] bond2: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap0 [ 143.649164][ T7973] bond2: left promiscuous mode [ 144.123818][ T7988] C: renamed from lo (while UP) [ 144.157582][ T7997] netlink: 8 bytes leftover after parsing attributes in process `syz.0.592'. [ 144.171961][ T7997] netlink: 4 bytes leftover after parsing attributes in process `syz.0.592'. [ 144.299163][ T7997] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 144.308346][ T7997] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 144.317344][ T7997] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 144.326164][ T7997] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 144.335188][ T8009] netlink: 'syz.3.593': attribute type 2 has an invalid length. [ 144.342875][ T8009] netlink: 'syz.3.593': attribute type 8 has an invalid length. [ 144.373228][ T8009] netlink: 132 bytes leftover after parsing attributes in process `syz.3.593'. [ 145.131458][ T8043] 0ªX¹¦D: left allmulticast mode [ 145.236656][ T8043] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 145.475817][ T8054] openvswitch: netlink: Actions may not be safe on all matching packets [ 145.818477][ T8072] validate_nla: 9 callbacks suppressed [ 145.818497][ T8072] netlink: 'syz.3.608': attribute type 75 has an invalid length. [ 145.952198][ T8076] netlink: 'syz.0.609': attribute type 8 has an invalid length. [ 146.195656][ T8087] x_tables: duplicate underflow at hook 3 [ 146.516598][ T8105] netlink: 'syz.3.618': attribute type 10 has an invalid length. [ 146.525832][ T8096] xt_TCPMSS: Only works on TCP SYN packets [ 146.561210][ T8096] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 146.607733][ T8105] 8021q: adding VLAN 0 to HW filter on device bond0 [ 146.617181][ T8107] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 146.642244][ T8105] team0: Port device bond0 added [ 147.046561][ T8124] __nla_validate_parse: 3 callbacks suppressed [ 147.046582][ T8124] netlink: 348 bytes leftover after parsing attributes in process `syz.4.624'. [ 147.127326][ T8131] netlink: 772 bytes leftover after parsing attributes in process `syz.2.625'. [ 147.137491][ T8128] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 147.153571][ T8132] netlink: 12 bytes leftover after parsing attributes in process `syz.3.627'. [ 147.243143][ T8134] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0) [ 147.450308][ T8144] netlink: 20 bytes leftover after parsing attributes in process `syz.3.630'. [ 147.657260][ T8156] netlink: 'syz.0.634': attribute type 1 has an invalid length. [ 147.672919][ T8156] netlink: 'syz.0.634': attribute type 1 has an invalid length. [ 147.952552][ T8169] xt_TPROXY: Can be used only with -p tcp or -p udp [ 148.464362][ T8193] ip6t_srh: unknown srh invflags 4449 [ 148.468697][ T8191] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 148.469971][ T7297] IPVS: starting estimator thread 0... [ 148.594875][ T8194] IPVS: using max 25 ests per chain, 60000 per kthread [ 149.076987][ T8220] netlink: 772 bytes leftover after parsing attributes in process `syz.2.651'. [ 149.490258][ T8240] sctp: [Deprecated]: syz.1.657 (pid 8240) Use of struct sctp_assoc_value in delayed_ack socket option. [ 149.490258][ T8240] Use struct sctp_sack_info instead [ 149.575259][ T8241] veth0_to_batadv: mtu less than device minimum [ 149.772759][ T8252] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 149.893827][ T8252] tipc: Started in network mode [ 149.923915][ T8252] tipc: Node identity 5, cluster identity 4711 [ 149.943372][ T8252] tipc: Node number set to 5 [ 150.068783][ T8265] netlink: 'syz.1.665': attribute type 10 has an invalid length. [ 150.169009][ T8265] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 150.216924][ T8276] tipc: Enabled bearer , priority 0 [ 150.755042][ T8296] netlink: 'syz.2.673': attribute type 10 has an invalid length. [ 150.784267][ T8298] netlink: 4 bytes leftover after parsing attributes in process `syz.4.674'. [ 150.955317][ T8310] netlink: 4 bytes leftover after parsing attributes in process `syz.1.676'. [ 151.336868][ T7297] tipc: Node number set to 3758096386 [ 151.956229][ T8361] netlink: 8 bytes leftover after parsing attributes in process `syz.2.688'. [ 152.033758][ T8358] netlink: 4 bytes leftover after parsing attributes in process `syz.2.688'. [ 152.166336][ T8369] netlink: 'syz.3.691': attribute type 1 has an invalid length. [ 152.312765][ T8379] netlink: 4 bytes leftover after parsing attributes in process `syz.3.691'. [ 152.496922][ T8389] netlink: 4 bytes leftover after parsing attributes in process `syz.1.695'. [ 152.524192][ T8369] 8021q: adding VLAN 0 to HW filter on device bond3 [ 152.543333][ T8378] bond3: (slave ip6gretap1): making interface the new active one [ 152.557260][ T8378] bond3: (slave ip6gretap1): Enslaving as an active interface with an up link [ 152.724894][ T8393] netlink: 'syz.0.696': attribute type 1 has an invalid length. [ 152.797713][ T8393] 8021q: adding VLAN 0 to HW filter on device bond3 [ 153.279640][ T8426] netlink: 28 bytes leftover after parsing attributes in process `syz.3.704'. [ 153.285230][ T8425] netlink: 28 bytes leftover after parsing attributes in process `syz.4.705'. [ 153.302846][ T8426] netlink: 28 bytes leftover after parsing attributes in process `syz.3.704'. [ 153.454217][ T8432] netlink: 4092 bytes leftover after parsing attributes in process `syz.2.706'. [ 153.697799][ T8435] netlink: 20 bytes leftover after parsing attributes in process `syz.1.707'. [ 153.834412][ T8446] Unsupported ieee802154 address type: 0 [ 153.861851][ T5922] IPVS: starting estimator thread 0... [ 153.966607][ T8451] IPVS: using max 22 ests per chain, 52800 per kthread [ 154.022734][ T8458] netlink: 12 bytes leftover after parsing attributes in process `syz.0.716'. [ 154.072390][ T8458] xfrm2: entered promiscuous mode [ 154.078309][ T8457] netlink: 4 bytes leftover after parsing attributes in process `syz.4.717'. [ 154.084198][ T8458] xfrm2: entered allmulticast mode [ 154.115119][ T8461] netlink: 12 bytes leftover after parsing attributes in process `syz.0.716'. [ 154.297293][ T8469] bridge1: entered promiscuous mode [ 154.316157][ T8469] bridge1: entered allmulticast mode [ 154.443399][ T8477] tipc: Started in network mode [ 154.466921][ T8477] tipc: Node identity aaaaaaaaaa3, cluster identity 4711 [ 154.493271][ T8477] tipc: Enabled bearer , priority 10 [ 154.694203][ T8484] tipc: New replicast peer: 0.0.0.0 [ 154.712907][ T8484] tipc: Enabled bearer , priority 10 [ 154.722638][ T8484] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00aa [ 154.805079][ T8489] pimreg: entered allmulticast mode [ 155.643872][ T8523] netlink: 'syz.3.739': attribute type 21 has an invalid length. [ 155.775938][ T5908] tipc: Node number set to 10136234 [ 156.104889][ T8548] openvswitch: netlink: Actions may not be safe on all matching packets [ 156.194138][ T8554] netlink: 'syz.3.746': attribute type 9 has an invalid length. [ 156.755391][ T8583] netlink: 'syz.2.757': attribute type 49 has an invalid length. [ 156.903807][ T8588] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 157.472666][ T8618] netlink: 'syz.3.771': attribute type 11 has an invalid length. [ 157.688604][ T8632] __nla_validate_parse: 8 callbacks suppressed [ 157.688624][ T8632] netlink: 8 bytes leftover after parsing attributes in process `syz.3.775'. [ 157.716823][ T8633] netlink: 'syz.4.776': attribute type 1 has an invalid length. [ 157.727294][ T8633] netlink: 'syz.4.776': attribute type 2 has an invalid length. [ 157.738348][ T8632] netlink: 24 bytes leftover after parsing attributes in process `syz.3.775'. [ 157.739752][ T8633] netlink: 8 bytes leftover after parsing attributes in process `syz.4.776'. [ 157.750860][ T8632] netlink: 8 bytes leftover after parsing attributes in process `syz.3.775'. [ 157.798010][ T8632] netlink: 24 bytes leftover after parsing attributes in process `syz.3.775'. [ 158.278973][ T8658] netlink: 'syz.4.787': attribute type 1 has an invalid length. [ 158.329708][ T8658] netlink: 224 bytes leftover after parsing attributes in process `syz.4.787'. [ 158.358478][ T8658] nbd: illegal input index 1048576 [ 158.438564][ T8667] vxcan1 speed is unknown, defaulting to 1000 [ 158.851905][ T8683] netlink: 'syz.2.791': attribute type 8 has an invalid length. [ 159.157366][ T8693] netlink: 'syz.4.796': attribute type 1 has an invalid length. [ 159.192158][ T8693] netlink: 'syz.4.796': attribute type 2 has an invalid length. [ 159.447428][ T8709] netlink: 'syz.2.800': attribute type 1 has an invalid length. [ 159.472160][ T8709] netlink: 12 bytes leftover after parsing attributes in process `syz.2.800'. [ 159.502808][ T8704] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 159.691655][ T8715] netlink: 12 bytes leftover after parsing attributes in process `syz.4.803'. [ 160.289930][ T8738] bridge0: port 2(bridge_slave_1) entered disabled state [ 160.298060][ T8738] bridge0: port 1(bridge_slave_0) entered disabled state [ 160.324974][ T51] Bluetooth: hci4: command tx timeout [ 161.221234][ T8746] netlink: 4 bytes leftover after parsing attributes in process `syz.0.812'. [ 161.303623][ T8746] netlink: 'syz.0.812': attribute type 1 has an invalid length. [ 161.367722][ T8757] netlink: 8 bytes leftover after parsing attributes in process `syz.2.814'. [ 161.404686][ T8757] netlink: 'syz.2.814': attribute type 30 has an invalid length. [ 162.872274][ T8828] macvlan0: entered promiscuous mode [ 162.890401][ T8828] macvlan0: entered allmulticast mode [ 163.110741][ T8837] __nla_validate_parse: 9 callbacks suppressed [ 163.110857][ T8837] netlink: 12 bytes leftover after parsing attributes in process `syz.1.837'. [ 163.169830][ T8840] trusted_key: syz.3.839 sent an empty control message without MSG_MORE. [ 163.191999][ T8841] validate_nla: 2 callbacks suppressed [ 163.192019][ T8841] netlink: 'syz.2.838': attribute type 10 has an invalid length. [ 163.220074][ T8841] netlink: 40 bytes leftover after parsing attributes in process `syz.2.838'. [ 163.229295][ T8845] openvswitch: netlink: Actions may not be safe on all matching packets [ 163.265585][ T8841] team0: Port device geneve0 added [ 163.319928][ T8851] netlink: 256 bytes leftover after parsing attributes in process `syz.4.840'. [ 163.334212][ T8851] netlink: 'syz.4.840': attribute type 9 has an invalid length. [ 163.609543][ T8860] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 163.921752][ T8876] netlink: 'syz.2.850': attribute type 12 has an invalid length. [ 163.949248][ T8880] netlink: 'syz.4.853': attribute type 10 has an invalid length. [ 163.993425][ T8880] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 164.008543][ T8880] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 164.068271][ T8882] vlan3: entered promiscuous mode [ 164.077486][ T8882] bridge0: entered promiscuous mode [ 164.108716][ T8888] ip6t_srh: unknown srh invflags 4449 [ 164.118468][ T8887] netlink: 24 bytes leftover after parsing attributes in process `syz.3.855'. [ 164.135059][ T8888] netlink: 28 bytes leftover after parsing attributes in process `syz.1.854'. [ 164.158892][ T8888] netlink: 'syz.1.854': attribute type 7 has an invalid length. [ 164.172331][ T8891] nbd: must specify a device to reconfigure [ 164.184000][ T8888] netlink: 'syz.1.854': attribute type 8 has an invalid length. [ 164.205566][ T8888] netlink: 4 bytes leftover after parsing attributes in process `syz.1.854'. [ 164.222104][ T8891] netlink: 'syz.3.855': attribute type 9 has an invalid length. [ 164.242096][ T8891] netlink: 212260 bytes leftover after parsing attributes in process `syz.3.855'. [ 164.283610][ T8894] netlink: 'syz.3.855': attribute type 27 has an invalid length. [ 164.414881][ T8897] netlink: 28 bytes leftover after parsing attributes in process `syz.2.856'. [ 164.423842][ T8897] netlink: 'syz.2.856': attribute type 7 has an invalid length. [ 164.456576][ T8897] netlink: 'syz.2.856': attribute type 8 has an invalid length. [ 164.482397][ T8897] netlink: 4 bytes leftover after parsing attributes in process `syz.2.856'. [ 164.511880][ T8901] netlink: 32 bytes leftover after parsing attributes in process `syz.0.858'. [ 164.866438][ T8912] netem: incorrect gi model size [ 164.871636][ T8912] netem: change failed [ 164.895052][ T8912] netem: incorrect gi model size [ 164.900057][ T8912] netem: change failed [ 164.904424][ T8911] openvswitch: netlink: Missing key (keys=40, expected=80) [ 164.932944][ T8912] netem: incorrect gi model size [ 164.964891][ T8911] openvswitch: netlink: Missing key (keys=40, expected=80) [ 164.972540][ T8911] openvswitch: netlink: Missing key (keys=40, expected=80) [ 164.974677][ T8912] netem: change failed [ 165.022883][ T8912] netem: incorrect gi model size [ 165.028716][ T8912] netem: change failed [ 165.042647][ T8912] netem: incorrect gi model size [ 165.065358][ T8912] netem: change failed [ 165.083325][ T8912] netem: incorrect gi model size [ 165.091049][ T8911] openvswitch: netlink: Missing key (keys=40, expected=80) [ 165.098942][ T8912] netem: change failed [ 165.130165][ T8912] netem: incorrect gi model size [ 165.135044][ T8911] openvswitch: netlink: Missing key (keys=40, expected=80) [ 165.145189][ T8912] netem: change failed [ 165.176194][ T8912] netem: incorrect gi model size [ 165.181206][ T8912] netem: change failed [ 165.207757][ T8911] openvswitch: netlink: Missing key (keys=40, expected=80) [ 165.227324][ T8912] netem: incorrect gi model size [ 165.232329][ T8912] netem: change failed [ 165.250647][ T8911] openvswitch: netlink: Missing key (keys=40, expected=80) [ 165.265125][ T8912] netem: incorrect gi model size [ 165.284717][ T8912] netem: change failed [ 165.303544][ T8911] openvswitch: netlink: Missing key (keys=40, expected=80) [ 165.315323][ T8912] netem: incorrect gi model size [ 165.320318][ T8912] netem: change failed [ 165.337552][ T8912] netem: incorrect gi model size [ 165.342628][ T8912] netem: change failed [ 165.351966][ T8912] netem: incorrect gi model size [ 165.373726][ T8911] openvswitch: netlink: Missing key (keys=40, expected=80) [ 165.375005][ T8912] netem: change failed [ 165.407786][ T8912] netem: incorrect gi model size [ 165.415667][ T8912] netem: change failed [ 165.441978][ T8912] netem: incorrect gi model size [ 165.447210][ T8912] netem: change failed [ 165.458265][ T8912] netem: incorrect gi model size [ 165.466954][ T8912] netem: change failed [ 165.732150][ T8933] netdevsim netdevsim0 ÿÿÿÿÿÿ: renamed from netdevsim0 (while UP) [ 166.590058][ T8968] 8021q: adding VLAN 0 to HW filter on device bond5 [ 166.603969][ T8968] bond0: (slave bond5): Enslaving as an active interface with an up link [ 166.809260][ T8996] bridge_slave_1: left allmulticast mode [ 166.816077][ T8996] bridge_slave_1: left promiscuous mode [ 166.822072][ T8996] bridge0: port 2(bridge_slave_1) entered disabled state [ 166.866490][ T8996] bridge_slave_0: left allmulticast mode [ 166.872218][ T8996] bridge_slave_0: left promiscuous mode [ 166.921114][ T8996] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.042009][ T9003] hsr0: entered promiscuous mode [ 167.564364][ T9042] IPv6: NLM_F_CREATE should be specified when creating new route [ 167.800861][ T9059] lo: entered allmulticast mode [ 167.815050][ T9059] tunl0: entered allmulticast mode [ 167.823282][ T9059] gre0: entered allmulticast mode [ 167.857842][ T9059] gretap0: entered allmulticast mode [ 167.875143][ T9059] erspan0: entered allmulticast mode [ 167.893710][ T9059] ip_vti0: entered allmulticast mode [ 167.910560][ T9059] ip6_vti0: entered allmulticast mode [ 167.940137][ T9059] sit0: entered allmulticast mode [ 167.979313][ T9059] ip6tnl0: entered allmulticast mode [ 167.999673][ T9059] ip6gre0: entered allmulticast mode [ 168.034027][ T9059] syz_tun: entered allmulticast mode [ 168.070939][ T9059] ip6gretap0: entered allmulticast mode [ 168.126292][ T9059] bridge0: entered allmulticast mode [ 168.161603][ T9059] vcan0: entered allmulticast mode [ 168.169441][ T9074] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 168.186374][ T9059] bond0: entered allmulticast mode [ 168.200675][ T9059] bond5: entered allmulticast mode [ 168.218516][ T9059] team0: entered allmulticast mode [ 168.239026][ T9059] dummy0: entered allmulticast mode [ 168.261748][ T9059] nlmon0: entered allmulticast mode [ 168.278031][ T9059] caif0: entered allmulticast mode [ 168.285249][ T9059] batadv0: entered allmulticast mode [ 168.302823][ T9059] vxcan0: entered allmulticast mode [ 168.312465][ T9059] vxcan1: entered allmulticast mode [ 168.320922][ T9059] veth0: entered allmulticast mode [ 168.331181][ T9059] veth1: entered allmulticast mode [ 168.348320][ T9059] wg0: entered allmulticast mode [ 168.360746][ T9059] wg1: entered allmulticast mode [ 168.373163][ T9059] wg2: entered allmulticast mode [ 168.388865][ T9059] veth0_to_bridge: entered allmulticast mode [ 168.400278][ T9059] bridge_slave_0: entered allmulticast mode [ 168.412184][ T9059] veth1_to_bridge: entered allmulticast mode [ 168.425714][ T9059] bridge_slave_1: entered allmulticast mode [ 168.433656][ T9059] veth0_to_bond: entered allmulticast mode [ 168.443403][ T9059] bond_slave_0: entered allmulticast mode [ 168.451157][ T9059] veth1_to_bond: entered allmulticast mode [ 168.460135][ T9059] bond_slave_1: entered allmulticast mode [ 168.468326][ T9059] veth0_to_team: entered allmulticast mode [ 168.480964][ T9059] team_slave_0: entered allmulticast mode [ 168.484865][ T9078] __nla_validate_parse: 9 callbacks suppressed [ 168.484883][ T9078] netlink: 8 bytes leftover after parsing attributes in process `syz.2.912'. [ 168.503909][ T9059] veth1_to_team: entered allmulticast mode [ 168.512921][ T9059] team_slave_1: entered allmulticast mode [ 168.520779][ T9059] veth0_to_batadv: entered allmulticast mode [ 168.529554][ T9059] batadv_slave_0: entered allmulticast mode [ 168.540566][ T9059] veth1_to_batadv: entered allmulticast mode [ 168.549557][ T9059] batadv_slave_1: entered allmulticast mode [ 168.560647][ T9059] xfrm0: entered allmulticast mode [ 168.569802][ T9059] veth0_to_hsr: entered allmulticast mode [ 168.579849][ T9059] hsr_slave_0: entered allmulticast mode [ 168.589762][ T9059] veth1_to_hsr: entered allmulticast mode [ 168.599844][ T9059] hsr_slave_1: entered allmulticast mode [ 168.610007][ T9059] hsr0: entered allmulticast mode [ 168.619304][ T9059] veth1_virt_wifi: entered allmulticast mode [ 168.628770][ T9059] veth0_virt_wifi: entered allmulticast mode [ 168.639213][ T9059] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 168.648063][ T9059] veth1_vlan: entered allmulticast mode [ 168.657190][ T9059] veth0_vlan: entered allmulticast mode [ 168.673800][ T9059] vlan0: entered allmulticast mode [ 168.679988][ T9059] vlan1: entered allmulticast mode [ 168.686326][ T9059] macvlan0: entered allmulticast mode [ 168.696439][ T9059] macvlan1: entered allmulticast mode [ 168.704204][ T9059] ipvlan0: entered allmulticast mode [ 168.709977][ T9059] ipvlan1: entered allmulticast mode [ 168.716367][ T9059] geneve0: entered allmulticast mode [ 168.724153][ T9059] netdevsim netdevsim0 ÿÿÿÿÿÿ: unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.733248][ T9059] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.742521][ T9059] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.751590][ T9059] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.761097][ T9059] geneve1: entered allmulticast mode [ 168.770845][ T9059] netdevsim netdevsim0 ÿÿÿÿÿÿ: entered allmulticast mode [ 168.788845][ T9059] netdevsim netdevsim0 netdevsim1: entered allmulticast mode [ 168.799050][ T9059] netdevsim netdevsim0 netdevsim2: entered allmulticast mode [ 168.817591][ T9059] netdevsim netdevsim0 netdevsim3: entered allmulticast mode [ 168.848753][ T9059] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 168.872867][ T9059] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode [ 168.891804][ T9059] mac80211_hwsim hwsim2 nicvf0: entered allmulticast mode [ 168.901629][ T9059] bond1: entered allmulticast mode [ 168.907465][ T9059] macvlan2: entered allmulticast mode [ 168.913146][ T9059] syztnl0: entered allmulticast mode [ 168.919236][ T9059] vlan2: entered allmulticast mode [ 168.925897][ T9059] bridge1: entered allmulticast mode [ 168.938532][ T9059] bond2: left promiscuous mode [ 168.944154][ T9059] bond2: entered allmulticast mode [ 168.956412][ T9059] netdevsim netdevsim0 ÿÿÿÿÿÿ: unset [0, 0] type 1 family 0 port 8472 - 0 [ 168.965388][ T9059] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 168.974286][ T9059] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 168.976062][ T9084] netlink: 64 bytes leftover after parsing attributes in process `syz.3.914'. [ 168.983352][ T9059] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 169.003093][ T9059] vxlan0: entered allmulticast mode [ 169.010206][ T9059] syztnl1: entered allmulticast mode [ 169.017259][ T9059] mac80211_hwsim hwsim2 syzkaller0: entered allmulticast mode [ 169.026674][ T9059] bond3: entered allmulticast mode [ 169.028051][ T9083] netlink: 12 bytes leftover after parsing attributes in process `syz.3.914'. [ 169.032854][ T9059] xfrm2: left promiscuous mode [ 169.049490][ T9059] vlan3: left promiscuous mode [ 169.054336][ T9059] bridge0: left promiscuous mode [ 169.059776][ T9059] vlan3: entered allmulticast mode [ 169.066576][ T9059] bridge2: entered allmulticast mode [ 169.073696][ T9059] bond4: entered allmulticast mode [ 169.538640][ T9105] syzkaller1: entered promiscuous mode [ 169.554959][ T9105] syzkaller1: entered allmulticast mode [ 170.093418][ T9145] net_ratelimit: 24 callbacks suppressed [ 170.093439][ T9145] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 170.253950][ T9152] validate_nla: 6 callbacks suppressed [ 170.253971][ T9152] netlink: 'syz.1.936': attribute type 1 has an invalid length. [ 170.363268][ T9155] bond3: (slave gretap1): making interface the new active one [ 170.372112][ T9155] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 170.837587][ T9176] IPVS: Error joining to the multicast group [ 170.846128][ T9187] netlink: 'syz.0.946': attribute type 10 has an invalid length. [ 170.853929][ T9187] netlink: 40 bytes leftover after parsing attributes in process `syz.0.946'. [ 170.897824][ T9187] dummy0: entered promiscuous mode [ 170.904350][ T9187] dummy0: left allmulticast mode [ 170.928081][ T9187] bridge0: port 1(dummy0) entered blocking state [ 170.945848][ T9187] bridge0: port 1(dummy0) entered disabled state [ 170.952549][ T9187] dummy0: entered allmulticast mode [ 171.115753][ T9195] sch_tbf: peakrate 7 is lower than or equals to rate 2147483647 ! [ 171.231681][ T9202] Unsupported ieee802154 address type: 0 [ 171.304374][ T9206] netlink: 16 bytes leftover after parsing attributes in process `syz.0.954'. [ 171.352988][ T9205] netlink: 16 bytes leftover after parsing attributes in process `syz.0.954'. [ 171.390360][ T9205] tipc: Invalid UDP bearer configuration [ 171.390429][ T9205] tipc: Enabling of bearer rejected, failed to enable media [ 171.435378][ T9215] netlink: 12 bytes leftover after parsing attributes in process `syz.2.956'. [ 171.465564][ T9206] tipc: Invalid UDP bearer configuration [ 171.465631][ T9206] tipc: Enabling of bearer rejected, failed to enable media [ 171.803430][ T9241] netlink: 'syz.4.965': attribute type 15 has an invalid length. [ 171.816016][ T9241] netlink: 24 bytes leftover after parsing attributes in process `syz.4.965'. [ 172.816113][ T9292] bond0: entered promiscuous mode [ 172.831781][ T9292] bond_slave_0: entered promiscuous mode [ 172.875169][ T9292] bond_slave_1: entered promiscuous mode [ 172.881226][ T9292] dummy0: entered promiscuous mode [ 172.908132][ T9292] batadv_slave_0: entered promiscuous mode [ 172.933259][ T9292] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 172.954800][ T9305] netlink: 16 bytes leftover after parsing attributes in process `syz.0.986'. [ 172.971270][ T9292] Cannot create hsr debugfs directory [ 172.977272][ T9305] netlink: 32 bytes leftover after parsing attributes in process `syz.0.986'. [ 172.986854][ T9292] hsr1: entered promiscuous mode [ 173.009670][ T9305] gretap1: entered promiscuous mode [ 173.015860][ T9305] gretap1: entered allmulticast mode [ 173.062773][ T9310] netdevsim netdevsim0 ÿÿÿÿÿÿ: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.084653][ T9310] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.111478][ T9310] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.144475][ T9310] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.164705][ T9310] geneve2: entered promiscuous mode [ 173.297410][ T9310] netdevsim netdevsim0 ÿÿÿÿÿÿ: unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.314836][ T9310] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.330134][ T9310] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.341862][ T9310] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.860732][ T9352] __nla_validate_parse: 9 callbacks suppressed [ 173.860754][ T9352] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1001'. [ 173.956733][ T9346] ipt_rpfilter: unknown options [ 174.135248][ T9366] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1004'. [ 174.702811][ T9398] IPVS: set_ctl: invalid protocol: 58 224.0.0.2:20000 [ 176.171181][ T9413] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 176.380046][ T9428] netlink: 'syz.3.1025': attribute type 1 has an invalid length. [ 176.402028][ T9428] netlink: 172 bytes leftover after parsing attributes in process `syz.3.1025'. [ 176.431913][ T9428] netlink: 'syz.3.1025': attribute type 1 has an invalid length. [ 176.442688][ T9428] netlink: 172 bytes leftover after parsing attributes in process `syz.3.1025'. [ 176.459872][ T9431] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1026'. [ 176.472738][ T9431] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1026'. [ 176.509911][ T9431] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1026'. [ 176.540896][ T9431] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1026'. [ 176.608166][ T9444] netlink: 'syz.3.1029': attribute type 10 has an invalid length. [ 176.621938][ T9444] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 176.634475][ T9444] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 176.857788][ T9466] netlink: 'syz.3.1034': attribute type 12 has an invalid length. [ 176.883865][ T9466] netlink: 'syz.3.1034': attribute type 29 has an invalid length. [ 176.945716][ T9466] netlink: 148 bytes leftover after parsing attributes in process `syz.3.1034'. [ 176.998650][ T9466] netlink: 51 bytes leftover after parsing attributes in process `syz.3.1034'. [ 177.256092][ T9485] netlink: 'syz.1.1041': attribute type 13 has an invalid length. [ 177.281312][ T9486] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 177.864452][ T9518] tunl0: entered promiscuous mode [ 177.892346][ T9518] gre0: entered promiscuous mode [ 177.963935][ T9518] gretap0: entered promiscuous mode [ 178.140058][ T9518] erspan0: entered promiscuous mode [ 178.187123][ T9518] ip_vti0: entered promiscuous mode [ 178.226983][ T9538] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 179.043378][ T9574] __nla_validate_parse: 3 callbacks suppressed [ 179.043400][ T9574] netlink: 5 bytes leftover after parsing attributes in process `syz.3.1068'. [ 179.083845][ T9574] 1ªX¹¦D: renamed from 30ªX¹¦D (while UP) [ 179.129776][ T9577] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input7 [ 179.149855][ T9579] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1070'. [ 179.234904][ T9577] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1068'. [ 179.252773][ T9577] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1068'. [ 179.323293][ T9574] 1ªX¹¦D: entered allmulticast mode [ 179.329319][ T9574] A link change request failed with some changes committed already. Interface 31ªX¹¦D may have been left with an inconsistent configuration, please check. [ 179.346377][ T9585] netlink: 'syz.0.1071': attribute type 27 has an invalid length. [ 179.480120][ T9588] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1072'. [ 179.831250][ T9603] netlink: 'syz.0.1078': attribute type 2 has an invalid length. [ 179.881686][ T9607] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1079'. [ 179.943455][ T12] smc: removing ib device syz2 [ 179.958634][ T7298] vxcan1 speed is unknown, defaulting to 1000 [ 179.967456][ T7298] syz2: Port: 1 Link DOWN [ 180.078915][ T9617] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1083'. [ 180.125180][ T9617] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1083'. [ 180.134212][ T9617] netlink: 'syz.4.1083': attribute type 5 has an invalid length. [ 180.370583][ T9628] tipc: Enabled bearer , priority 0 [ 180.684169][ T9640] netlink: 'syz.0.1091': attribute type 23 has an invalid length. [ 180.837024][ T9639] tipc: Enabling of bearer rejected, media not registered [ 181.110913][ T9643] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1092'. [ 181.131087][ T9646] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1094'. [ 181.492805][ T9659] geneve2: entered promiscuous mode [ 181.522776][ T9659] geneve2: entered allmulticast mode [ 181.672331][ T9664] bond0: entered promiscuous mode [ 181.698084][ T9664] batadv0: entered promiscuous mode [ 181.732637][ T9664] bond0: left promiscuous mode [ 181.747325][ T9664] batadv0: left promiscuous mode [ 182.085286][ T9676] netlink: 'syz.1.1102': attribute type 13 has an invalid length. [ 182.093201][ T9676] lo: entered allmulticast mode [ 182.106079][ T9676] tunl0: entered allmulticast mode [ 182.111719][ T9676] gre0: entered allmulticast mode [ 182.130954][ T9676] gretap0: entered allmulticast mode [ 182.151904][ T9676] gretap0: refused to change device tx_queue_len [ 182.169631][ T9676] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 182.213581][ T9683] xt_hashlimit: max too large, truncated to 1048576 [ 183.237416][ T9743] netlink: 'syz.1.1120': attribute type 5 has an invalid length. [ 183.334499][ T9745] netlink: 'syz.0.1124': attribute type 11 has an invalid length. [ 183.535516][ T9756] syzkaller1: entered promiscuous mode [ 183.541174][ T9756] syzkaller1: entered allmulticast mode [ 183.595949][ T9759] team0: Cannot enslave team device to itself [ 183.986516][ T9778] dvmrp0: entered allmulticast mode [ 184.005696][ T9786] x_tables: duplicate underflow at hook 3 [ 184.171479][ T9793] __nla_validate_parse: 10 callbacks suppressed [ 184.171500][ T9793] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1135'. [ 184.228171][ T9797] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1137'. [ 184.279931][ T9797] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1137'. [ 184.296231][ T9803] netlink: 'syz.1.1140': attribute type 2 has an invalid length. [ 184.316916][ T9802] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1138'. [ 184.350539][ T9802] openvswitch: netlink: Invalid MD length 0 for MD type 0 [ 184.385601][ T9802] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 184.582248][ T9816] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1144'. [ 184.622483][ T9816] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1144'. [ 184.764357][ T9830] netlink: 'syz.4.1148': attribute type 1 has an invalid length. [ 184.793342][ T9833] x_tables: duplicate underflow at hook 1 [ 184.811361][ T9830] xt_CT: You must specify a L4 protocol and not use inversions on it [ 184.979145][ T9841] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1153'. [ 185.051442][ T9846] tipc: Enabling not permitted [ 185.061220][ T9846] tipc: Enabling of bearer rejected, failed to enable media [ 185.094688][ T9847] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1156'. [ 186.239842][ T9907] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1176'. [ 186.330370][ T9909] syzkaller0: entered promiscuous mode [ 186.341456][ T9909] syzkaller0: entered allmulticast mode [ 186.867702][ T9930] sctp: [Deprecated]: syz.4.1183 (pid 9930) Use of struct sctp_assoc_value in delayed_ack socket option. [ 186.867702][ T9930] Use struct sctp_sack_info instead [ 186.913209][ T9930] sctp: [Deprecated]: syz.4.1183 (pid 9930) Use of struct sctp_assoc_value in delayed_ack socket option. [ 186.913209][ T9930] Use struct sctp_sack_info instead [ 187.191946][ T9950] openvswitch: netlink: Actions may not be safe on all matching packets [ 188.519642][ T9947] (unnamed net_device) (uninitialized): Unable to set up delay as MII monitoring is disabled [ 188.537675][ T9952] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 188.694968][ T9963] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1192'. [ 188.814277][ T9973] netlink: 'syz.0.1197': attribute type 14 has an invalid length. [ 188.827453][ T9973] netlink: 'syz.0.1197': attribute type 13 has an invalid length. [ 189.080684][ T9989] bridge3: entered promiscuous mode [ 189.091836][ T9989] bridge3: entered allmulticast mode [ 189.260702][T10002] openvswitch: netlink: Actions may not be safe on all matching packets [ 190.234509][T10051] openvswitch: netlink: Actions may not be safe on all matching packets [ 190.316713][T10056] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 190.712835][T10079] netlink: 'syz.0.1232': attribute type 39 has an invalid length. [ 190.752072][T10083] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 190.768212][T10083] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 190.911522][T10087] __nla_validate_parse: 3 callbacks suppressed [ 190.911537][T10087] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1235'. [ 191.046905][T10094] netlink: 'syz.1.1236': attribute type 1 has an invalid length. [ 191.160308][T10094] bond4: (slave gretap2): making interface the new active one [ 191.180870][T10094] bond4: (slave gretap2): Enslaving as an active interface with an up link [ 191.306884][T10102] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1240'. [ 191.366072][T10107] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1241'. [ 191.381291][T10107] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1241'. [ 191.422006][T10109] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1242'. [ 191.492673][T10112] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1243'. [ 191.528936][T10112] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1243'. [ 191.534329][T10114] netlink: 216 bytes leftover after parsing attributes in process `syz.0.1244'. [ 191.553022][T10114] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1244'. [ 191.577192][T10114] openvswitch: netlink: Unknown key attributes 2 [ 191.942304][T10137] tipc: Enabling of bearer rejected, already enabled [ 191.976899][T10137] netlink: 'syz.4.1251': attribute type 4 has an invalid length. [ 192.019164][T10137] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1251'. [ 192.104998][T10137] tipc: Resetting bearer [ 192.479958][T10168] netlink: 'syz.0.1261': attribute type 20 has an invalid length. [ 192.828277][T10185] netlink: 'syz.3.1267': attribute type 72 has an invalid length. [ 192.864430][T10185] netlink: 'syz.3.1267': attribute type 8 has an invalid length. [ 193.343382][T10212] SET target dimension over the limit! [ 193.811151][T10231] tipc: Enabling of bearer rejected, failed to enable media [ 194.323094][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.334845][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.645554][T10281] netlink: 'syz.4.1295': attribute type 1 has an invalid length. [ 194.758844][T10283] bond2: (slave bridge4): making interface the new active one [ 194.784303][T10283] bond2: (slave bridge4): Enslaving as an active interface with an up link [ 194.905017][T10287] pim6reg: entered allmulticast mode [ 194.934040][T10289] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 195.130834][T10308] unsupported nlmsg_type 40 [ 195.267424][T10317] netlink: 'syz.0.1306': attribute type 1 has an invalid length. [ 195.291490][T10317] netlink: 'syz.0.1306': attribute type 1 has an invalid length. [ 195.312348][T10317] netlink: 'syz.0.1306': attribute type 2 has an invalid length. [ 195.429945][T10330] netlink: 'syz.4.1309': attribute type 1 has an invalid length. [ 195.555917][T10330] 8021q: adding VLAN 0 to HW filter on device bond3 [ 195.633057][T10330] macvlan2: entered promiscuous mode [ 195.658572][T10330] macvlan2: entered allmulticast mode [ 195.707629][T10330] bond3: entered promiscuous mode [ 195.713510][T10330] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 195.794452][T10330] bond3: left promiscuous mode [ 195.860776][T10358] netlink: 'syz.2.1314': attribute type 1 has an invalid length. [ 195.920387][T10334] 8021q: adding VLAN 0 to HW filter on device bond3 [ 195.943842][T10334] bond3: (slave vxcan1): The slave device specified does not support setting the MAC address [ 195.972577][T10334] bond3: (slave vxcan1): Error -95 calling set_mac_address [ 195.976884][T10361] can: request_module (can-proto-0) failed. [ 196.042277][T10341] gretap2: entered promiscuous mode [ 196.080764][T10341] bond3: (slave gretap2): making interface the new active one [ 196.094215][T10341] bond3: (slave gretap2): Enslaving as an active interface with an up link [ 196.113807][T10357] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 196.324301][T10376] netlink: 'syz.2.1318': attribute type 4 has an invalid length. [ 196.327466][T10379] block nbd4: not configured, cannot reconfigure [ 196.621687][T10400] netlink: 'syz.4.1328': attribute type 5 has an invalid length. [ 196.727953][T10404] __nla_validate_parse: 16 callbacks suppressed [ 196.727975][T10404] netlink: 112 bytes leftover after parsing attributes in process `syz.1.1330'. [ 197.446877][T10431] netlink: 18 bytes leftover after parsing attributes in process `syz.0.1338'. [ 197.465062][T10434] netlink: 'syz.3.1339': attribute type 39 has an invalid length. [ 197.816739][T10448] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1343'. [ 197.965087][T10452] ieee802154 phy0 wpan0: encryption failed: -22 [ 198.135979][T10458] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1345'. [ 198.180681][T10458] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1345'. [ 198.530603][T10471] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1352'. [ 198.580489][T10477] netlink: 'syz.3.1354': attribute type 29 has an invalid length. [ 198.608794][T10471] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1352'. [ 198.778577][T10488] !: renamed from dummy0 (while UP) [ 198.805109][T10489] x_tables: duplicate underflow at hook 2 [ 198.985773][T10505] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1356'. [ 199.643521][T10537] pimreg: entered allmulticast mode [ 199.671276][T10537] pimreg: left allmulticast mode [ 199.678911][T10540] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1373'. [ 200.264332][T10567] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1381'. [ 200.625554][T10594] validate_nla: 1 callbacks suppressed [ 200.625577][T10594] netlink: 'syz.3.1389': attribute type 1 has an invalid length. [ 200.901082][T10610] syzkaller1: entered promiscuous mode [ 200.917034][T10610] syzkaller1: entered allmulticast mode [ 201.035799][T10622] xfrm0: entered promiscuous mode [ 201.216067][T10624] can: request_module (can-proto-0) failed. [ 201.385611][ T7296] IPVS: starting estimator thread 0... [ 201.488864][T10630] IPVS: using max 25 ests per chain, 60000 per kthread [ 202.011387][T10668] __nla_validate_parse: 2 callbacks suppressed [ 202.011410][T10668] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1411'. [ 202.040824][T10669] netlink: 'syz.3.1410': attribute type 1 has an invalid length. [ 202.048899][T10669] netlink: 'syz.3.1410': attribute type 1 has an invalid length. [ 202.076034][T10668] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1411'. [ 202.132677][T10673] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1413'. [ 202.185193][T10673] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1413'. [ 202.287326][T10679] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1415'. [ 202.416550][T10683] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 202.653036][T10697] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1421'. [ 202.979453][T10706] team0: Port device bond0 removed [ 203.024224][T10706] bridge_slave_0: left allmulticast mode [ 203.030310][T10706] bridge_slave_0: left promiscuous mode [ 203.042042][T10706] bridge0: port 1(bridge_slave_0) entered disabled state [ 203.071774][T10706] bridge_slave_1: left allmulticast mode [ 203.078579][T10706] bridge_slave_1: left promiscuous mode [ 203.084616][T10706] bridge0: port 2(bridge_slave_1) entered disabled state [ 203.109021][T10706] bond0: (slave bond_slave_0): Releasing backup interface [ 203.133018][T10706] bond0: (slave bond_slave_1): Releasing backup interface [ 203.160168][T10706] team0: Port device team_slave_0 removed [ 203.177373][T10706] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 203.731898][T10747] macvlan0: left allmulticast mode [ 203.747486][T10747] netlink: 'syz.0.1433': attribute type 2 has an invalid length. [ 204.015831][T10767] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1443'. [ 204.045309][T10767] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1443'. [ 204.664236][T10800] netlink: 'syz.3.1450': attribute type 1 has an invalid length. [ 205.077483][T10814] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1454'. [ 206.697104][T10790] vlan4: entered allmulticast mode [ 206.832189][T10831] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1457'. [ 207.356981][T10866] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1463'. [ 207.406709][T10867] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1469'. [ 207.910206][T10896] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 208.243596][T10913] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1480'. [ 208.268832][T10916] netlink: 'syz.1.1481': attribute type 13 has an invalid length. [ 208.533146][T10931] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1485'. [ 208.543087][T10931] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1485'. [ 208.560741][T10931] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1485'. [ 208.573542][T10932] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1484'. [ 208.602672][T10932] tipc: Enabling of bearer rejected, failed to enable media [ 209.220833][T10960] syz_tun: entered allmulticast mode [ 209.331465][T10956] syz_tun: left allmulticast mode [ 209.959878][T10992] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.130914][T10992] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.336829][T10992] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.527207][T10992] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.952071][T10992] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.009116][T10992] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.063378][T11021] dvmrp0: entered allmulticast mode [ 211.070672][T11022] dvmrp0: left allmulticast mode [ 211.123062][T10992] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.153260][T10992] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.668509][T11045] netlink: 830 bytes leftover after parsing attributes in process `syz.4.1520'. [ 211.700074][T11043] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1519'. [ 211.709507][T11043] tipc: Started in network mode [ 211.714406][T11043] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 211.731281][T11043] tipc: Enabling of bearer rejected, failed to enable media [ 211.756190][ T5152] Bluetooth: hci2: command 0x0406 tx timeout [ 211.764695][ T5834] Bluetooth: hci1: command 0x0406 tx timeout [ 211.767480][ T5836] Bluetooth: hci3: command 0x0406 tx timeout [ 211.944388][T11059] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1524'. [ 212.010138][T11059] tipc: Started in network mode [ 212.015338][T11059] tipc: Node identity 1, cluster identity 4711 [ 212.043078][T11059] tipc: Node number set to 1 [ 212.198404][T11079] netlink: 'syz.2.1533': attribute type 24 has an invalid length. [ 212.379939][T11097] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 212.388702][T11097] netlink: 148 bytes leftover after parsing attributes in process `syz.4.1530'. [ 212.683661][T11109] netlink: 'syz.0.1539': attribute type 10 has an invalid length. [ 212.691880][T11109] team0: left allmulticast mode [ 212.699074][T11109] batman_adv: batadv0: Adding interface: team0 [ 212.705854][T11109] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 212.739242][T11109] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 212.822583][T11115] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1540'. [ 212.824234][T11111] vlan2: entered promiscuous mode [ 212.842635][T11111] vlan2: entered allmulticast mode [ 212.849185][T11111] hsr_slave_1: entered allmulticast mode [ 213.159801][T11132] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.1547'. [ 213.260707][T11134] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1547'. [ 213.273448][T11132] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1547'. [ 213.501521][T11151] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1553'. [ 213.509624][T11152] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1552'. [ 213.814357][T11148] bridge6: entered promiscuous mode [ 213.826912][T11148] bridge6: entered allmulticast mode [ 214.005048][T11165] syzkaller1: entered promiscuous mode [ 214.028276][T11165] syzkaller1: entered allmulticast mode [ 214.059326][T11168] netlink: 'syz.2.1559': attribute type 1 has an invalid length. [ 214.119420][T11175] netlink: 'syz.0.1562': attribute type 1 has an invalid length. [ 214.148225][T11175] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1562'. [ 214.156344][T11168] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 214.166571][T11168] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 214.175988][T11168] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 214.185211][T11168] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 214.202885][T11168] bond4: (slave geneve2): making interface the new active one [ 214.249253][T11180] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1559'. [ 214.287171][T11168] bond4: (slave geneve2): Enslaving as an active interface with an up link [ 214.424852][T11179] bond4: (slave ip6gretap2): Enslaving as an active interface with an up link [ 214.476231][T11180] 8021q: adding VLAN 0 to HW filter on device bond4 [ 214.814634][T11165] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 214.877057][T11204] netlink: 'syz.4.1570': attribute type 1 has an invalid length. [ 215.185146][T11219] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1574'. [ 215.370876][T11225] netlink: 'syz.3.1577': attribute type 1 has an invalid length. [ 215.501230][T11232] netlink: 'syz.0.1580': attribute type 4 has an invalid length. [ 215.613791][T11233] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.763542][T11233] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.893512][T11233] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.981248][T11233] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.038125][ T5841] block nbd0: Receive control failed (result -32) [ 216.131020][T11233] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.160847][T11233] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.185357][T11233] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.215169][T11233] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.337709][T11277] openvswitch: netlink: Flow key attr not present in new flow. [ 216.429980][T11283] openvswitch: netlink: nsh attribute has 13 unknown bytes. [ 216.465838][T11283] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 216.613650][T11289] wg1: entered promiscuous mode [ 216.669794][T11295] pim6reg1: entered promiscuous mode [ 216.686860][T11295] pim6reg1: entered allmulticast mode [ 216.705390][T11293] syzkaller1: entered promiscuous mode [ 216.721203][T11293] syzkaller1: entered allmulticast mode [ 217.435477][T11314] netlink: 'syz.0.1602': attribute type 18 has an invalid length. [ 217.527299][T11320] netlink: 'syz.1.1605': attribute type 21 has an invalid length. [ 217.557452][T11320] __nla_validate_parse: 139 callbacks suppressed [ 217.557474][T11320] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1605'. [ 217.599781][T11324] netlink: 100 bytes leftover after parsing attributes in process `syz.0.1606'. [ 217.650572][T11326] netlink: 'syz.2.1607': attribute type 4 has an invalid length. [ 217.673876][T11328] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1608'. [ 218.333127][T11365] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1619'. [ 218.443964][T11371] netlink: 'syz.3.1621': attribute type 10 has an invalid length. [ 218.456234][T11372] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1620'. [ 218.473324][T11371] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 218.490746][T11372] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1620'. [ 218.675946][T11383] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1622'. [ 218.704137][T11380] ieee802154 phy0 wpan0: encryption failed: -22 [ 218.732551][T11380] ieee802154 phy0 wpan0: encryption failed: -22 [ 218.817732][T11380] ieee802154 phy0 wpan0: encryption failed: -22 [ 218.848413][T11380] ieee802154 phy0 wpan0: encryption failed: -22 [ 218.861968][T11380] ieee802154 phy0 wpan0: encryption failed: -22 [ 218.872085][T11380] ieee802154 phy0 wpan0: encryption failed: -22 [ 218.878763][T11380] ieee802154 phy0 wpan0: encryption failed: -22 [ 218.888979][T11380] ieee802154 phy0 wpan0: encryption failed: -22 [ 218.896721][T11380] ieee802154 phy0 wpan0: encryption failed: -22 [ 218.914380][T11380] ieee802154 phy0 wpan0: encryption failed: -22 [ 218.926351][T11380] ieee802154 phy0 wpan0: encryption failed: -22 [ 218.935016][T11380] ieee802154 phy0 wpan0: encryption failed: -22 [ 218.946744][T11380] ieee802154 phy0 wpan0: encryption failed: -22 [ 218.980649][T11380] ieee802154 phy0 wpan0: encryption failed: -22 [ 219.012248][T11380] ieee802154 phy0 wpan0: encryption failed: -22 [ 219.033174][T11380] ieee802154 phy0 wpan0: encryption failed: -22 [ 219.041919][T11380] ieee802154 phy0 wpan0: encryption failed: -22 [ 219.065427][T11380] ieee802154 phy0 wpan0: encryption failed: -22 [ 219.088922][T11380] ieee802154 phy0 wpan0: encryption failed: -22 [ 219.093144][T11402] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1632'. [ 219.111000][T11400] x_tables: duplicate underflow at hook 1 [ 219.115426][T11380] ieee802154 phy0 wpan0: encryption failed: -22 [ 219.123971][T11403] x_tables: duplicate underflow at hook 1 [ 219.133242][T11380] ieee802154 phy0 wpan0: encryption failed: -22 [ 219.154896][T11380] ieee802154 phy0 wpan0: encryption failed: -22 [ 219.161368][T11380] ieee802154 phy0 wpan0: encryption failed: -22 [ 219.186103][T11380] ieee802154 phy0 wpan0: encryption failed: -22 [ 219.206817][T11380] ieee802154 phy0 wpan0: encryption failed: -22 [ 219.213228][T11380] ieee802154 phy0 wpan0: encryption failed: -22 [ 219.275079][T11380] ieee802154 phy0 wpan0: encryption failed: -22 [ 219.282045][T11380] ieee802154 phy0 wpan0: encryption failed: -22 [ 219.315586][T11380] ieee802154 phy0 wpan0: encryption failed: -22 [ 219.330429][T11380] ieee802154 phy0 wpan0: encryption failed: -22 [ 219.347912][T11410] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1634'. [ 219.357313][T11380] ieee802154 phy0 wpan0: encryption failed: -22 [ 219.377544][T11380] ieee802154 phy0 wpan0: encryption failed: -22 [ 219.398587][T11380] ieee802154 phy0 wpan0: encryption failed: -22 [ 219.429497][T11380] ieee802154 phy0 wpan0: encryption failed: -22 [ 219.456461][T11380] ieee802154 phy0 wpan0: encryption failed: -22 [ 219.888147][T11443] netlink: 'syz.3.1648': attribute type 1 has an invalid length. [ 219.896650][T11443] netlink: 'syz.3.1648': attribute type 2 has an invalid length. [ 219.907189][T11441] netlink: 'syz.3.1648': attribute type 1 has an invalid length. [ 219.930735][T11443] netdevsim netdevsim3 ÿÿÿÿÿÿ: renamed from netdevsim0 (while UP) [ 219.939179][T11441] netlink: 'syz.3.1648': attribute type 2 has an invalid length. [ 220.044139][T11446] netlink: 'syz.1.1649': attribute type 1 has an invalid length. [ 220.055523][T11446] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1649'. [ 220.067393][T11447] netlink: 'syz.1.1649': attribute type 1 has an invalid length. [ 220.098186][T11447] pim6reg1: entered promiscuous mode [ 220.107916][T11447] pim6reg1: entered allmulticast mode [ 220.205439][T11454] ipvlan1: left allmulticast mode [ 220.214088][T11454] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 220.280657][T11456] netlink: 'syz.3.1653': attribute type 30 has an invalid length. [ 220.555994][T11473] ICMPv6: NA: 00:00:00:00:00:00 advertised our address fe80::aa on syz_tun! [ 221.063382][T11507] tipc: Bearer : already 2 bearers with priority 0 [ 221.088672][T11507] tipc: Enabling of bearer rejected, cannot adjust to lower [ 221.236193][T11518] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 221.438153][T11532] netlink: 'syz.0.1677': attribute type 11 has an invalid length. [ 221.643230][ T30] audit: type=1107 audit(1751370403.659:2): pid=11540 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='‡üŠxûÈî­|íÔÂd˜¸w¿rk“—‚lŸ>ŠKV¶“ÖnyX¯`ß$kîl—•ã+hªÅ„QŒRl-‚Úã"Á-Ì^bx*l;œ€-],&CÒ©{„7¿a·Ük’Kïìzæ»…“*Œ’t¢‚îKœ ƒ[76Jcݘ‡Ã(Å(1³D÷þBF£mû [ 221.643230][ T30] Œv' [ 221.810080][T11552] netlink: 'syz.1.1684': attribute type 2 has an invalid length. [ 221.942171][T11555] sctp: [Deprecated]: syz.2.1685 (pid 11555) Use of int in max_burst socket option. [ 221.942171][T11555] Use struct sctp_assoc_value instead [ 222.135699][T11573] netlink: 'syz.3.1691': attribute type 11 has an invalid length. [ 222.431959][T11587] sctp: [Deprecated]: syz.0.1695 (pid 11587) Use of struct sctp_assoc_value in delayed_ack socket option. [ 222.431959][T11587] Use struct sctp_sack_info instead [ 222.633327][T11575] bond0 (unregistering): Released all slaves [ 222.897208][T11603] __nla_validate_parse: 21 callbacks suppressed [ 222.897229][T11603] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1700'. [ 222.938790][T11603] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1700'. [ 223.011003][T11616] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1701'. [ 223.035973][T11611] bridge0: port 2(gretap0) entered blocking state [ 223.049513][T11611] bridge0: port 2(gretap0) entered disabled state [ 223.058558][T11611] gretap0: entered promiscuous mode [ 223.081946][T11605] tipc: Enabled bearer , priority 0 [ 223.102481][T11605] mac80211_hwsim hwsim2 syzkaller0: entered promiscuous mode [ 223.137122][T11605] tipc: Resetting bearer [ 223.144208][ T6452] tipc: Resetting bearer [ 223.239670][T11624] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.1707'. [ 223.329415][ T30] audit: type=1800 audit(1751370405.339:3): pid=11629 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1706" name="memory.events" dev="tmpfs" ino=1760 res=0 errno=0 [ 223.389618][T11633] netlink: 'syz.0.1709': attribute type 10 has an invalid length. [ 223.412758][T11631] openvswitch: netlink: Multiple metadata blocks provided [ 223.434783][T11633] batadv0: left allmulticast mode [ 223.465308][T11633] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 223.474408][T11633] batadv0: entered allmulticast mode [ 223.494154][T11633] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 223.564815][T11639] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1711'. [ 223.710328][T11645] netlink: 'syz.1.1713': attribute type 10 has an invalid length. [ 223.718347][T11645] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1713'. [ 223.740303][T11645] bond0: (slave 0!): Releasing backup interface [ 223.758633][T11645] A link change request failed with some changes committed already. Interface 0! may have been left with an inconsistent configuration, please check. [ 224.127574][T11670] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1721'. [ 224.346065][T11680] netlink: 248 bytes leftover after parsing attributes in process `syz.3.1726'. [ 224.355286][T11684] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1728'. [ 224.372415][T11681] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1725'. [ 224.658542][T11688] syzkaller1: entered promiscuous mode [ 224.664213][T11688] syzkaller1: entered allmulticast mode [ 224.787000][T11706] veth0: entered promiscuous mode [ 224.803504][T11704] veth0: left promiscuous mode [ 224.995175][T11712] veth0: entered promiscuous mode [ 225.004254][T11711] veth0: left promiscuous mode [ 225.006054][T11722] validate_nla: 4 callbacks suppressed [ 225.006070][T11722] netlink: 'syz.1.1739': attribute type 1 has an invalid length. [ 225.172028][T11729] netlink: 'syz.4.1741': attribute type 1 has an invalid length. [ 225.448022][T11736] bond4: (slave gretap3): making interface the new active one [ 225.459000][T11736] bond4: (slave gretap3): Enslaving as an active interface with an up link [ 225.470385][T11738] 8021q: adding VLAN 0 to HW filter on device bond4 [ 225.859933][T11755] can: request_module (can-proto-5) failed. [ 225.917898][T11769] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 226.072603][T11779] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !寿$ûÌÌULÙvy¸ÚØ¢…D£øUDŒw˜}z [ 226.413236][T11796] netlink: 'syz.0.1760': attribute type 20 has an invalid length. [ 226.745204][T11813] netlink: 'syz.2.1766': attribute type 1 has an invalid length. [ 226.792315][T11813] bond0: (slave bridge4): making interface the new active one [ 226.800971][T11813] bond0: (slave bridge4): Enslaving as an active interface with an up link [ 226.944036][T11817] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 226.959351][T11822] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 227.434026][T11851] team0: mtu less than device minimum [ 227.453544][T11851] team0: mtu less than device minimum [ 227.470623][T11851] team0: mtu less than device minimum [ 227.509919][T11851] team0: mtu less than device minimum [ 227.530556][T11851] team0: mtu less than device minimum [ 227.566198][T11851] team0: mtu less than device minimum [ 227.589371][T11851] team0: mtu less than device minimum [ 227.602387][T11851] team0: mtu less than device minimum [ 227.609830][T11851] team0: mtu less than device minimum [ 227.673468][T11865] netlink: 'syz.3.1781': attribute type 2 has an invalid length. [ 227.681986][T11865] nbd: must specify a device to reconfigure [ 227.745728][T11865] tipc: New replicast peer: 255.255.255.255 [ 227.766929][T11865] tipc: Enabled bearer , priority 10 [ 227.848473][T11872] IPv6: sit1: Disabled Multicast RS [ 227.871429][T11872] sit1: entered allmulticast mode [ 228.596384][T11906] __nla_validate_parse: 17 callbacks suppressed [ 228.596405][T11906] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1795'. [ 228.620181][T11906] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1795'. [ 228.987439][T11933] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1803'. [ 229.583295][T11965] bond6: entered promiscuous mode [ 229.589003][T11965] bond6: entered allmulticast mode [ 229.606258][T11965] 8021q: adding VLAN 0 to HW filter on device bond6 [ 229.717613][T11970] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1813'. [ 229.809961][T11980] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 229.833238][T11984] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1817'. [ 229.855336][T11980] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1815'. [ 229.934752][T11988] x_tables: duplicate underflow at hook 1 [ 230.122782][T12001] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1821'. [ 231.298837][T12062] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1839'. [ 231.308093][T12061] x_tables: ip6_tables: REDIRECT target: used from hooks INPUT, but only usable from PREROUTING/OUTPUT [ 231.479397][T12072] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1842'. [ 231.899746][T12093] pimreg: entered allmulticast mode [ 231.908038][T12093] pimreg: left allmulticast mode [ 232.034148][T12097] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1848'. [ 232.100099][T12097] hsr_slave_1 (unregistering): left promiscuous mode [ 232.301920][T12105] sctp: [Deprecated]: syz.2.1852 (pid 12105) Use of int in max_burst socket option deprecated. [ 232.301920][T12105] Use struct sctp_assoc_value instead [ 232.660487][T12120] netlink: 'syz.0.1855': attribute type 10 has an invalid length. [ 232.701470][T12120] netdevsim netdevsim0 ÿÿÿÿÿÿ: left allmulticast mode [ 232.730501][T12120] netdevsim netdevsim0 ÿÿÿÿÿÿ: entered allmulticast mode [ 232.733243][T12125] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 232.743313][T12120] bond0: (slave ÿÿÿÿÿÿ): Enslaving as an active interface with an up link [ 233.769777][T12156] __nla_validate_parse: 4 callbacks suppressed [ 233.769798][T12156] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.1865'. [ 234.925810][T12162] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1867'. [ 235.065313][T12173] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1872'. [ 235.075328][T12174] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1869'. [ 235.108252][T12170] netlink: 'syz.1.1870': attribute type 13 has an invalid length. [ 235.260908][T12181] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1873'. [ 235.517655][T12170] net_ratelimit: 30 callbacks suppressed [ 235.517667][T12170] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 235.569423][T12190] !: renamed from dummy0 [ 235.719460][T12198] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1880'. [ 235.734999][T12198] wg1: Master is either lo or non-ether device [ 235.807486][T12206] netlink: 'syz.0.1883': attribute type 10 has an invalid length. [ 235.871192][T12206] tipc: Resetting bearer [ 237.558776][T12226] netlink: 'syz.1.1888': attribute type 10 has an invalid length. [ 238.393186][T12206] tipc: Disabling bearer [ 238.419747][T12226] veth1_vlan: entered allmulticast mode [ 238.442456][T12226] team0: Device veth1_vlan failed to register rx_handler [ 238.751695][T12240] netlink: 'syz.2.1893': attribute type 1 has an invalid length. [ 238.922174][T12252] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1896'. [ 238.971886][T12252] openvswitch: netlink: Actions may not be safe on all matching packets [ 239.038924][T12256] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1899'. [ 239.066715][T12256] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1899'. [ 239.104999][T12259] team0: Device vti0 is of different type [ 239.479700][T12284] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 239.586320][T12289] bridge_slave_1: default FDB implementation only supports local addresses [ 239.852175][T12300] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1909'. [ 240.416015][T12315] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1917'. [ 240.602119][T12324] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1921'. [ 240.654629][T12327] netlink: 14528 bytes leftover after parsing attributes in process `syz.2.1920'. [ 240.719512][T12321] netlink: 100 bytes leftover after parsing attributes in process `syz.2.1920'. [ 240.995494][ T5849] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 241.014867][ T5849] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 241.025799][ T5849] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 241.038305][ T5849] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 241.053472][ T5849] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 241.085039][T12347] netlink: 'syz.0.1927': attribute type 10 has an invalid length. [ 241.428348][T12366] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1931'. [ 241.528665][T12366] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap4 [ 241.694089][T12343] chnl_net:caif_netlink_parms(): no params data found [ 241.884004][T12390] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1937'. [ 241.907830][T12390] (unnamed net_device) (uninitialized): (slave ip6_vti0): Device is not bonding slave [ 241.925678][T12390] (unnamed net_device) (uninitialized): option active_slave: invalid value (ip6_vti0) [ 241.953304][T12393] netlink: 'syz.4.1936': attribute type 10 has an invalid length. [ 242.035809][T12398] netlink: 'syz.4.1936': attribute type 10 has an invalid length. [ 242.131616][T12393] veth0_vlan: left promiscuous mode [ 242.145898][T12393] veth0_vlan: entered promiscuous mode [ 242.161583][T12393] team0: Device veth0_vlan failed to register rx_handler [ 242.300797][T12406] can: request_module (can-proto-3) failed. [ 242.319010][T12343] bridge0: port 1(bridge_slave_0) entered blocking state [ 242.338195][T12343] bridge0: port 1(bridge_slave_0) entered disabled state [ 242.347870][T12343] bridge_slave_0: entered allmulticast mode [ 242.378213][T12343] bridge_slave_0: entered promiscuous mode [ 242.418322][T12343] bridge0: port 2(bridge_slave_1) entered blocking state [ 242.442879][T12343] bridge0: port 2(bridge_slave_1) entered disabled state [ 242.465179][T12343] bridge_slave_1: entered allmulticast mode [ 242.473474][T12343] bridge_slave_1: entered promiscuous mode [ 242.671588][T12343] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 242.721409][T12343] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 242.887708][T12343] team0: Port device team_slave_0 added [ 242.906717][T12343] team0: Port device team_slave_1 added [ 243.056389][T12343] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 243.063429][T12343] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 243.116133][ T5841] Bluetooth: hci0: command tx timeout [ 243.124348][T12343] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 243.204168][T12343] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 243.245042][T12343] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 243.338559][T12343] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 243.578006][T12343] hsr_slave_0: entered promiscuous mode [ 243.589402][T12343] hsr_slave_1: entered promiscuous mode [ 243.611430][T12343] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 243.630654][T12343] Cannot create hsr debugfs directory [ 244.113516][T12491] __nla_validate_parse: 1 callbacks suppressed [ 244.113538][T12491] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1962'. [ 244.316302][T12343] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.404877][T12511] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1966'. [ 244.406734][T12504] batadv_slave_1: entered promiscuous mode [ 244.417830][T12510] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1966'. [ 244.465721][T12343] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.624337][T12343] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.677001][T12503] batadv_slave_1: left promiscuous mode [ 244.690374][T12523] netlink: 'syz.2.1972': attribute type 10 has an invalid length. [ 244.785821][T12529] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1971'. [ 244.838470][T12343] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.888537][T12531] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1971'. [ 244.917439][T12531] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1971'. [ 244.937962][T12531] netlink: 92 bytes leftover after parsing attributes in process `syz.3.1971'. [ 245.051957][T12538] macsec0: entered promiscuous mode [ 245.066176][T12538] batadv_slave_1: entered promiscuous mode [ 245.072263][T12538] macsec0: entered allmulticast mode [ 245.198195][ T5841] Bluetooth: hci0: command tx timeout [ 245.210312][T12543] tipc: Enabling of bearer rejected, already enabled [ 245.233267][T12549] netlink: 'syz.3.1977': attribute type 1 has an invalid length. [ 245.265218][T12549] netlink: 'syz.3.1977': attribute type 1 has an invalid length. [ 245.295339][T12549] netlink: 'syz.3.1977': attribute type 1 has an invalid length. [ 245.303316][T12549] netlink: 'syz.3.1977': attribute type 1 has an invalid length. [ 245.311861][T12545] netlink: 248 bytes leftover after parsing attributes in process `syz.4.1976'. [ 245.339612][T12343] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 245.371528][T12549] netlink: 'syz.3.1977': attribute type 1 has an invalid length. [ 245.380563][T12549] netlink: 'syz.3.1977': attribute type 1 has an invalid length. [ 245.399583][T12551] netlink: 252 bytes leftover after parsing attributes in process `syz.0.1978'. [ 245.408831][T12343] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 245.426134][T12549] netlink: 'syz.3.1977': attribute type 1 has an invalid length. [ 245.434038][T12549] netlink: 'syz.3.1977': attribute type 1 has an invalid length. [ 245.455626][T12549] netlink: 'syz.3.1977': attribute type 1 has an invalid length. [ 245.460116][T12343] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 245.583749][T12343] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 245.702056][T12559] netlink: 'syz.0.1980': attribute type 11 has an invalid length. [ 245.717816][T12559] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1980'. [ 245.773084][T12554] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 245.794712][T12554] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 246.179890][T12576] tipc: Enabling of bearer rejected, failed to enable media [ 246.560237][T12591] xt_l2tp: v2 sid > 0xffff: 262144 [ 247.279256][ T5841] Bluetooth: hci0: command tx timeout [ 248.383915][T12578] syzkaller0: entered promiscuous mode [ 248.389629][T12578] syzkaller0: entered allmulticast mode [ 248.858603][T12603] 8021q: adding VLAN 0 to HW filter on device bond7 [ 249.016188][T12612] macvlan2: entered promiscuous mode [ 249.036595][T12612] macvlan2: entered allmulticast mode [ 249.066035][T12612] bond7: entered promiscuous mode [ 249.071894][T12612] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 249.093902][T12612] bond7: left promiscuous mode [ 249.355119][ T5841] Bluetooth: hci0: command tx timeout [ 249.365411][T12626] __nla_validate_parse: 2 callbacks suppressed [ 249.365431][T12626] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1995'. [ 249.392011][T12343] 8021q: adding VLAN 0 to HW filter on device bond0 [ 249.433312][T12343] 8021q: adding VLAN 0 to HW filter on device team0 [ 249.442128][T12630] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1993'. [ 249.442334][T12626] netlink: 6040 bytes leftover after parsing attributes in process `syz.2.1995'. [ 249.503546][ T6451] bridge0: port 1(bridge_slave_0) entered blocking state [ 249.510810][ T6451] bridge0: port 1(bridge_slave_0) entered forwarding state [ 249.562682][ T6451] bridge0: port 2(bridge_slave_1) entered blocking state [ 249.569997][ T6451] bridge0: port 2(bridge_slave_1) entered forwarding state [ 249.792831][T12633] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1996'. [ 249.811145][T12635] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1996'. [ 249.928123][T12640] bond0: (slave bond5): Error -95 calling ndo_bpf [ 250.018871][T12640] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1997'. [ 250.414955][T12659] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2000'. [ 250.440824][T12640] bond0 (unregistering): (slave bond5): Releasing backup interface [ 250.462329][T12640] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 250.481040][T12640] batadv0: left allmulticast mode [ 250.481569][T12661] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.2000'. [ 250.496646][T12640] bond0 (unregistering): (slave ÿÿÿÿÿÿ): Releasing backup interface [ 250.506291][T12640] netdevsim netdevsim0 ÿÿÿÿÿÿ: left allmulticast mode [ 250.523072][T12640] bond0 (unregistering): Released all slaves [ 250.609657][T12343] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 250.797967][T12343] veth0_vlan: entered promiscuous mode [ 250.840138][T12343] veth1_vlan: entered promiscuous mode [ 250.888538][T12672] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2002'. [ 251.021162][T12343] veth0_macvtap: entered promiscuous mode [ 251.051644][T12343] veth1_macvtap: entered promiscuous mode [ 251.090719][T12676] validate_nla: 25 callbacks suppressed [ 251.090741][T12676] netlink: 'syz.3.2004': attribute type 2 has an invalid length. [ 251.108278][T12343] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 251.134207][T12343] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 251.165868][T12343] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.181039][T12343] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.193119][T12343] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.219318][T12343] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.434765][ T5841] Bluetooth: hci0: command tx timeout [ 251.436828][ T1111] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 251.493186][ T1111] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 251.511322][T12693] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2010'. [ 251.654255][ T1100] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 251.679605][ T1100] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 252.390146][ T60] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.533443][ T60] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.692780][T12745] netlink: 'syz.0.2025': attribute type 21 has an invalid length. [ 252.800932][ T60] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.893939][ T60] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.153450][T12765] netlink: 'syz.3.2030': attribute type 178 has an invalid length. [ 253.230077][T12764] tipc: Enabling of bearer rejected, failed to enable media [ 253.397770][T12763] netlink: 'syz.2.2032': attribute type 9 has an invalid length. [ 253.550532][ T5849] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 253.565626][ T5849] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 253.573845][ T5849] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 253.585511][ T5849] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 253.596617][ T5849] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 253.767449][ T60] bridge_slave_1: left allmulticast mode [ 253.773614][ T60] bridge_slave_1: left promiscuous mode [ 253.781094][ T60] bridge0: port 2(bridge_slave_1) entered disabled state [ 253.798283][ T60] bridge_slave_0: left allmulticast mode [ 253.804279][ T60] bridge_slave_0: left promiscuous mode [ 253.810514][ T60] bridge0: port 1(bridge_slave_0) entered disabled state [ 253.832426][T12791] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 254.231805][ T60] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 254.243367][ T60] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 254.256689][ T60] bond0 (unregistering): Released all slaves [ 254.446004][T12795] __nla_validate_parse: 4 callbacks suppressed [ 254.446025][T12795] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2040'. [ 254.495033][T12795] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2040'. [ 254.577122][T12801] IPVS: set_ctl: invalid protocol: 136 100.1.1.1:20003 [ 254.647938][T12806] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2042'. [ 254.732920][T12803] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2043'. [ 255.474378][ T60] hsr_slave_0: left promiscuous mode [ 255.487253][ T60] hsr_slave_1: left promiscuous mode [ 255.496376][ T60] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 255.510806][ T60] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 255.531831][ T60] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 255.548630][ T60] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 255.628095][ T60] veth1_macvtap: left promiscuous mode [ 255.634238][ T60] veth0_macvtap: left promiscuous mode [ 255.649763][ T60] veth1_vlan: left promiscuous mode [ 255.655813][ T60] veth0_vlan: left promiscuous mode [ 255.674733][ T5841] Bluetooth: hci0: command tx timeout [ 255.762418][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.774432][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.259942][ T60] team0 (unregistering): Port device team_slave_1 removed [ 256.301711][ T60] team0 (unregistering): Port device team_slave_0 removed [ 257.070781][T12779] chnl_net:caif_netlink_parms(): no params data found [ 257.587523][T12779] bridge0: port 1(bridge_slave_0) entered blocking state [ 257.610689][T12779] bridge0: port 1(bridge_slave_0) entered disabled state [ 257.626543][T12779] bridge_slave_0: entered allmulticast mode [ 257.645019][T12779] bridge_slave_0: entered promiscuous mode [ 257.663275][T12779] bridge0: port 2(bridge_slave_1) entered blocking state [ 257.670821][T12779] bridge0: port 2(bridge_slave_1) entered disabled state [ 257.689303][T12779] bridge_slave_1: entered allmulticast mode [ 257.712733][T12779] bridge_slave_1: entered promiscuous mode [ 257.851306][T12779] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 257.909411][T12779] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 257.971470][T12896] openvswitch: netlink: Actions may not be safe on all matching packets [ 258.107759][T12779] team0: Port device team_slave_0 added [ 258.126967][T12902] netlink: 'syz.3.2062': attribute type 2 has an invalid length. [ 258.168832][T12779] team0: Port device team_slave_1 added [ 258.251339][T12908] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2063'. [ 258.329189][T12880] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 258.410792][T12779] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 258.454077][T12779] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 258.460732][T12919] netlink: 'syz.0.2066': attribute type 30 has an invalid length. [ 258.520331][T12779] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 258.538663][T12779] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 258.546022][T12779] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 258.622814][T12779] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 258.689217][T12919] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0) [ 258.731312][T12919] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255 [ 258.962117][T12779] hsr_slave_0: entered promiscuous mode [ 258.998331][T12779] hsr_slave_1: entered promiscuous mode [ 259.011233][T12779] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 259.044206][T12779] Cannot create hsr debugfs directory [ 259.113433][T12946] tipc: Enabled bearer , priority 0 [ 259.136030][T12957] openvswitch: netlink: Actions may not be safe on all matching packets [ 259.224234][T12946] syzkaller0: entered promiscuous mode [ 259.252186][T12946] syzkaller0: entered allmulticast mode [ 259.286899][T12968] netlink: 'syz.3.2076': attribute type 10 has an invalid length. [ 259.390475][T12946] tipc: Resetting bearer [ 259.512871][T12944] tipc: Resetting bearer [ 259.536225][T12974] IPVS: ovf: UDP 224.0.0.2:20004 - no destination available [ 259.584436][T12944] tipc: Disabling bearer [ 260.068780][T12999] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 260.643353][T13022] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 260.725779][T13024] netlink: 'syz.3.2092': attribute type 1 has an invalid length. [ 260.872083][T12779] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 260.922260][T12779] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 260.961602][T12779] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 260.984462][T12779] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 261.029315][T13041] netlink: 'syz.3.2095': attribute type 21 has an invalid length. [ 261.040818][T13041] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 261.218147][T12779] 8021q: adding VLAN 0 to HW filter on device bond0 [ 261.250340][T12779] 8021q: adding VLAN 0 to HW filter on device team0 [ 261.290774][ T6451] bridge0: port 1(bridge_slave_0) entered blocking state [ 261.298036][ T6451] bridge0: port 1(bridge_slave_0) entered forwarding state [ 261.338738][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 261.345983][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 261.373864][T13059] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2101'. [ 261.423170][T13063] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2100'. [ 261.479131][T13063] netlink: 'syz.0.2100': attribute type 1 has an invalid length. [ 261.491571][T13063] netlink: 'syz.0.2100': attribute type 2 has an invalid length. [ 261.589894][T12779] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 261.610368][T12779] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 262.372861][T12779] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 262.624105][T12779] veth0_vlan: entered promiscuous mode [ 262.657813][T12779] veth1_vlan: entered promiscuous mode [ 262.851479][T13122] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2118'. [ 262.869523][T12779] veth0_macvtap: entered promiscuous mode [ 262.894809][T13124] tipc: Bearer : already 2 bearers with priority 10 [ 262.902073][T13124] tipc: Bearer : trying with adjusted priority [ 262.958605][T13124] tipc: Enabling of bearer rejected, failed to enable media [ 263.005313][T12779] veth1_macvtap: entered promiscuous mode [ 263.109500][T12779] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 263.166866][T12779] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 263.242001][T12779] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.258952][T12779] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.268286][T12779] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.279979][T12779] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.300966][T13138] (unnamed net_device) (uninitialized): peer notification delay (1164) is not a multiple of miimon (100), value rounded to 1100 ms [ 263.388649][T13138] bond6: entered promiscuous mode [ 263.393906][T13138] bond6: entered allmulticast mode [ 263.399950][T13138] 8021q: adding VLAN 0 to HW filter on device bond6 [ 263.619622][T13158] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2129'. [ 263.723997][T13165] netlink: 'syz.4.2129': attribute type 10 has an invalid length. [ 264.174785][T13165] tipc: Resetting bearer [ 264.186929][T13165] tipc: Resetting bearer [ 264.193929][T13165] 8021q: adding VLAN 0 to HW filter on device team0 [ 264.211127][T13165] bond0: (slave team0): Enslaving as an active interface with an up link [ 264.370878][ T6452] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 264.386026][ T6452] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 264.442375][T13180] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2136'. [ 264.514999][ T1111] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 264.558591][ T1111] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 264.830015][T13199] netlink: 176 bytes leftover after parsing attributes in process `syz.0.2142'. [ 264.931231][T13207] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 265.263632][T13218] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2146'. [ 265.481279][T13230] tipc: Enabling of bearer rejected, failed to enable media [ 265.505740][T13231] tipc: Enabling of bearer rejected, failed to enable media [ 265.746546][T13250] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2154'. [ 266.034805][T13262] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.2159'. [ 266.105823][T13260] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.2159'. [ 266.539118][T13285] bridge_slave_1: default FDB implementation only supports local addresses [ 266.684049][T13292] __nla_validate_parse: 4 callbacks suppressed [ 266.684068][T13292] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2167'. [ 266.778195][T13296] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2169'. [ 266.794126][T13295] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2169'. [ 266.883159][T13300] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2171'. [ 267.336275][T13323] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2177'. [ 267.346344][T13323] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2177'. [ 267.535365][T13334] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 267.711901][T13341] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2183'. [ 267.733809][T13341] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2183'. [ 268.036810][T13358] tipc: Enabled bearer , priority 0 [ 268.083795][T13356] tipc: Disabling bearer [ 268.217985][T13368] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2187'. [ 268.298446][T13373] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2189'. [ 268.638837][T13387] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 269.679273][T13453] ipvlan2: entered promiscuous mode [ 269.687617][T13453] bridge0: port 1(ipvlan2) entered blocking state [ 269.690444][T13455] netlink: 'syz.3.2215': attribute type 21 has an invalid length. [ 269.694352][T13453] bridge0: port 1(ipvlan2) entered disabled state [ 269.712638][T13453] ipvlan2: entered allmulticast mode [ 269.718338][T13453] bridge0: entered allmulticast mode [ 269.729773][T13453] ipvlan2: left allmulticast mode [ 269.735317][T13453] bridge0: left allmulticast mode [ 269.743168][T13457] netlink: 'syz.3.2215': attribute type 21 has an invalid length. [ 269.769413][T13455] netlink: 'syz.3.2215': attribute type 4 has an invalid length. [ 269.777468][T13455] netlink: 'syz.3.2215': attribute type 5 has an invalid length. [ 269.785859][T13457] netlink: 'syz.3.2215': attribute type 4 has an invalid length. [ 269.793987][T13457] netlink: 'syz.3.2215': attribute type 5 has an invalid length. [ 269.880137][T13455] syzkaller0: refused to change device tx_queue_len [ 271.545961][T13546] !€ÿ: renamed from bond_slave_0 [ 271.969867][T13564] openvswitch: netlink: nsh attribute has 2 unknown bytes. [ 272.000583][T13563] __nla_validate_parse: 15 callbacks suppressed [ 272.000605][T13563] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2245'. [ 272.018716][T13563] netlink: 176 bytes leftover after parsing attributes in process `syz.2.2245'. [ 272.029675][T13563] netlink: 'syz.2.2245': attribute type 5 has an invalid length. [ 272.117565][T13570] raw_sendmsg: syz.0.2247 forgot to set AF_INET. Fix it! [ 272.217160][T13564] team0: Port device team_slave_1 removed [ 272.231201][T13564] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 272.250737][T13564] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 272.270585][T13579] netlink: 'syz.2.2245': attribute type 10 has an invalid length. [ 272.312258][T13564] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 272.320896][T13564] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 272.383677][T13564] bond2: (slave gretap0): Releasing active interface [ 272.411554][T13564] bond3: (slave ip6gretap1): Releasing active interface [ 272.451434][T13584] gretap0: left promiscuous mode [ 272.480928][T13584] bridge0: port 2(gretap0) entered disabled state [ 272.538167][T13584] batman_adv: batadv0: Removing interface: team0 [ 272.565192][T13584] !: left allmulticast mode [ 272.570293][T13584] bridge0: port 1(0!) entered disabled state [ 272.596840][T13590] netlink: 252 bytes leftover after parsing attributes in process `syz.4.2249'. [ 272.606458][T13589] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2250'. [ 272.625050][T13592] netlink: 'syz.0.2248': attribute type 10 has an invalid length. [ 272.692680][T13592] mac80211_hwsim hwsim3 wlan1: left allmulticast mode [ 272.757512][T13596] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2252'. [ 272.810036][T13598] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 272.827062][T13598] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 272.855157][T13598] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 273.391143][T13615] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2257'. [ 273.419773][T13615] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2257'. [ 273.428652][T13617] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2258'. [ 273.598811][T13622] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2260'. [ 273.656188][T13624] x_tables: duplicate underflow at hook 3 [ 273.738357][T13628] openvswitch: netlink: Multiple metadata blocks provided [ 273.907490][T13637] Unknown options in mask 1f4 [ 273.963746][T13635] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2264'. [ 273.984615][T13635] netlink: 'syz.4.2264': attribute type 12 has an invalid length. [ 274.082764][T13642] 1ªX¹¦D: left allmulticast mode [ 274.137671][T13646] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input8 [ 274.137724][T13642] 8021q: adding VLAN 0 to HW filter on device bond0 [ 274.169258][T13642] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 274.496778][T13665] pimreg: entered allmulticast mode [ 274.509986][T13665] xt_l2tp: v2 doesn't support IP mode [ 274.983231][T13689] validate_nla: 1 callbacks suppressed [ 274.983252][T13689] netlink: 'syz.0.2277': attribute type 13 has an invalid length. [ 275.028218][T13691] bond8: entered allmulticast mode [ 275.253200][T13702] infiniband srz1: RDMA CMA: cma_listen_on_dev, error -98 [ 275.305806][T13711] netlink: 'syz.0.2282': attribute type 24 has an invalid length. [ 275.343706][T13711] netlink: 'syz.0.2282': attribute type 1 has an invalid length. [ 275.864457][T13728] xt_CT: No such helper "snmp" [ 276.152101][T13748] batadv0: mtu less than device minimum [ 276.190138][T13747] netlink: 'syz.4.2292': attribute type 1 has an invalid length. [ 276.546176][T13763] xt_nat: multiple ranges no longer supported [ 276.991557][T13783] pimreg: entered allmulticast mode [ 277.022642][T13783] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 277.037751][T13783] __nla_validate_parse: 14 callbacks suppressed [ 277.037774][T13783] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2306'. [ 277.113345][T13790] sctp: [Deprecated]: syz.4.2309 (pid 13790) Use of int in maxseg socket option. [ 277.113345][T13790] Use struct sctp_assoc_value instead [ 277.242082][T13799] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2311'. [ 277.382838][T13806] netlink: 'syz.2.2314': attribute type 1 has an invalid length. [ 277.395594][T13807] netlink: 'syz.3.2313': attribute type 1 has an invalid length. [ 277.405789][T13807] netlink: 'syz.3.2313': attribute type 1 has an invalid length. [ 277.413561][T13807] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2313'. [ 277.426194][T13806] netlink: 'syz.2.2314': attribute type 2 has an invalid length. [ 277.493614][T13812] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2313'. [ 277.559795][T13817] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2317'. [ 277.615382][T13819] x_tables: duplicate underflow at hook 1 [ 277.766604][T13831] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2320'. [ 277.799323][T13831] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2320'. [ 277.803104][T13833] netdevsim netdevsim0 ÿÿÿÿÿÿ: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.831431][T13833] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.851411][T13833] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.874888][T13833] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.897348][T13833] geneve2: entered promiscuous mode [ 277.925217][T13833] geneve2: entered allmulticast mode [ 277.953318][T13833] netdevsim netdevsim0 ÿÿÿÿÿÿ: unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.974737][T13833] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.991528][T13833] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.004037][T13833] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.028317][T13845] netlink: 'syz.4.2324': attribute type 1 has an invalid length. [ 278.037188][T13845] netlink: 'syz.4.2324': attribute type 2 has an invalid length. [ 278.341018][T13861] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 278.369585][T13859] unknown channel width for channel at 909000KHz? [ 278.376366][T13859] unknown channel width for channel at 909000KHz? [ 278.387951][T13859] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2330'. [ 278.425293][T13859] openvswitch: netlink: IP tunnel dst address not specified [ 278.620535][T13874] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2334'. [ 278.904381][T13884] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2336'. [ 279.002087][T13894] xt_ecn: cannot match TCP bits for non-tcp packets [ 279.139470][T13899] lo: entered promiscuous mode [ 279.144282][T13899] lo: entered allmulticast mode [ 279.159543][T13899] tunl0: entered promiscuous mode [ 279.174713][T13899] tunl0: entered allmulticast mode [ 279.187555][T13899] gre0: entered promiscuous mode [ 279.192710][T13899] gre0: entered allmulticast mode [ 279.221032][T13899] 1ªX¹¦D: entered allmulticast mode [ 279.231327][T13899] 1ªX¹¦D: refused to change device tx_queue_len [ 279.238563][T13899] A link change request failed with some changes committed already. Interface 31ªX¹¦D may have been left with an inconsistent configuration, please check. [ 279.736652][T13926] tap0: tun_chr_ioctl cmd 1074025678 [ 279.754409][T13926] tap0: group set to 0 [ 280.035351][T13938] tipc: Resetting bearer [ 280.040967][T13938] tipc: Resetting bearer [ 280.056760][T13938] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 280.541842][T13976] validate_nla: 1 callbacks suppressed [ 280.541862][T13976] netlink: 'syz.3.2363': attribute type 2 has an invalid length. [ 280.724398][T13980] can: request_module (can-proto-0) failed. [ 282.220282][T14050] __nla_validate_parse: 6 callbacks suppressed [ 282.220305][T14050] netlink: 144 bytes leftover after parsing attributes in process `syz.0.2382'. [ 282.232881][T14042] netlink: 300 bytes leftover after parsing attributes in process `syz.4.2384'. [ 282.249166][T14050] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 282.337340][T14053] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 282.483916][T14059] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2389'. [ 282.521219][T14059] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2389'. [ 282.562254][T14063] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2391'. [ 282.566027][T14065] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2392'. [ 283.486087][T14099] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2399'. [ 283.712721][T14105] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2401'. [ 283.737367][T14105] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2401'. [ 283.764909][T14105] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2401'. [ 284.268728][T14133] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 284.323909][T14138] team1: entered promiscuous mode [ 284.335758][T14138] team1: entered allmulticast mode [ 284.613317][T14154] xt_l2tp: invalid flags combination: c [ 284.772628][T14160] Timeout policy `syz0' can only be used by L3 protocol number 1536 [ 285.198239][T14186] IPv6: sit1: Disabled Multicast RS [ 285.731257][T14199] tipc: Enabled bearer , priority 0 [ 285.797835][T14199] syzkaller0: entered promiscuous mode [ 285.803382][T14199] syzkaller0: entered allmulticast mode [ 285.813621][T14199] tipc: Resetting bearer [ 285.968451][T14214] tc_dump_action: action bad kind [ 287.057079][T14223] veth5: entered promiscuous mode [ 287.062283][T14223] veth5: entered allmulticast mode [ 287.088489][T14198] tipc: Resetting bearer [ 287.268841][T14241] __nla_validate_parse: 48 callbacks suppressed [ 287.268864][T14241] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2444'. [ 287.611926][T14249] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2447'. [ 288.827589][T14198] tipc: Disabling bearer [ 289.027355][T14262] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 289.107392][T14260] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 289.249860][T14272] netlink: 'syz.2.2454': attribute type 4 has an invalid length. [ 289.275089][T14272] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2454'. [ 289.333042][T14279] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2457'. [ 289.561675][T14289] netlink: 'syz.0.2459': attribute type 21 has an invalid length. [ 289.604983][T14289] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2459'. [ 289.634337][T14292] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2460'. [ 289.655473][T14292] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2460'. [ 289.756477][T14299] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 289.777621][T14298] Timeout policy `syz0' can only be used by L3 protocol number 1536 [ 289.828603][T14292] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 289.946957][T14309] netlink: 4552 bytes leftover after parsing attributes in process `syz.2.2466'. [ 289.968613][T14309] netlink: 4552 bytes leftover after parsing attributes in process `syz.2.2466'. [ 290.148237][T14323] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2471'. [ 290.172558][ T7298] hid-generic 0005:16BF:5505.0001: unknown main item tag 0x5 [ 290.182123][ T7298] hid-generic 0005:16BF:5505.0001: unknown main item tag 0x2 [ 290.190595][ T7298] hid-generic 0005:16BF:5505.0001: item fetching failed at offset 2/4 [ 290.199959][ T7298] hid-generic 0005:16BF:5505.0001: probe with driver hid-generic failed with error -22 [ 290.339304][T14329] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 290.340673][T14331] netlink: 'syz.3.2474': attribute type 1 has an invalid length. [ 290.366220][T14331] nbd: couldn't find device at index 1048576 [ 290.381641][T14331] openvswitch: netlink: VXLAN extension message has 1 unknown bytes. [ 290.537789][T14343] netlink: 'syz.0.2477': attribute type 29 has an invalid length. [ 290.568870][T14345] netlink: 'syz.0.2477': attribute type 29 has an invalid length. [ 290.585062][T14345] netlink: 'syz.0.2477': attribute type 29 has an invalid length. [ 290.595790][T14345] netlink: 'syz.0.2477': attribute type 29 has an invalid length. [ 290.623349][T14345] netlink: 'syz.0.2477': attribute type 29 has an invalid length. [ 290.644156][T14345] netlink: 'syz.0.2477': attribute type 29 has an invalid length. [ 290.702400][T14345] netlink: 'syz.0.2477': attribute type 29 has an invalid length. [ 291.180744][T14382] geneve3: entered promiscuous mode [ 291.204822][T14382] geneve3: entered allmulticast mode [ 291.265470][T14386] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 291.416650][T14388] A link change request failed with some changes committed already. Interface gre3 may have been left with an inconsistent configuration, please check. [ 292.281307][T14435] __nla_validate_parse: 83 callbacks suppressed [ 292.281327][T14435] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2504'. [ 292.480888][T14442] xfrm1: entered allmulticast mode [ 292.552730][T14446] openvswitch: netlink: Unknown key attributes 2 [ 292.571685][T14446] IPVS: length: 217 != 24 [ 293.127561][T14466] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2514'. [ 293.164605][T14466] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2514'. [ 293.292670][T14451] openvswitch: netlink: Message has 199 unknown bytes. [ 293.304111][T14451] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 293.386565][T14479] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2518'. [ 293.414914][T14479] netlink: 15 bytes leftover after parsing attributes in process `syz.0.2518'. [ 293.713603][T14493] x_tables: unsorted underflow at hook 2 [ 293.903377][T14505] netlink: 4552 bytes leftover after parsing attributes in process `syz.2.2528'. [ 293.956097][T14505] netlink: 4552 bytes leftover after parsing attributes in process `syz.2.2528'. [ 294.180590][T14525] macvlan0: entered promiscuous mode [ 294.204985][T14525] macvlan0: entered allmulticast mode [ 294.438401][T14541] validate_nla: 33 callbacks suppressed [ 294.438421][T14541] netlink: 'syz.4.2539': attribute type 6 has an invalid length. [ 294.690155][T14555] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2543'. [ 294.827418][T14563] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2545'. [ 295.494229][T14598] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2558'. [ 295.903652][T14623] macvlan0: left promiscuous mode [ 295.909317][T14623] macvlan0: left allmulticast mode [ 296.107748][T14638] netlink: 'syz.3.2571': attribute type 8 has an invalid length. [ 296.116520][T14638] bridge0: entered allmulticast mode [ 297.357157][T14698] netlink: 'syz.4.2591': attribute type 11 has an invalid length. [ 297.369513][T14698] __nla_validate_parse: 3 callbacks suppressed [ 297.369532][T14698] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2591'. [ 297.524967][ T51] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 297.533609][ T51] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 297.542003][ T51] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 297.550537][ T51] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 297.558466][ T51] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 297.579716][T14703] netlink: 'syz.2.2592': attribute type 1 has an invalid length. [ 298.070594][T14721] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2596'. [ 298.099986][T14721] nbd: nbd0 already in use [ 298.172047][T14700] chnl_net:caif_netlink_parms(): no params data found [ 298.257907][T14729] x_tables: ip_tables: ah match: only valid for protocol 51 [ 298.380623][T14700] bridge0: port 1(bridge_slave_0) entered blocking state [ 298.393483][T14700] bridge0: port 1(bridge_slave_0) entered disabled state [ 298.402380][T14700] bridge_slave_0: entered allmulticast mode [ 298.412999][T14700] bridge_slave_0: entered promiscuous mode [ 298.422414][T14700] bridge0: port 2(bridge_slave_1) entered blocking state [ 298.430083][T14700] bridge0: port 2(bridge_slave_1) entered disabled state [ 298.437656][T14700] bridge_slave_1: entered allmulticast mode [ 298.445911][T14700] bridge_slave_1: entered promiscuous mode [ 298.512459][T14738] vlan4: entered promiscuous mode [ 298.518684][T14738] gretap0: entered promiscuous mode [ 298.539827][T14700] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 298.557309][T14700] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 298.640279][T14700] team0: Port device team_slave_0 added [ 298.656609][T14700] team0: Port device team_slave_1 added [ 298.731599][T14700] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 298.744787][T14700] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 298.773922][T14700] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 298.788408][T14700] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 298.838038][T14700] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 298.884346][T14700] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 298.990616][T14754] netlink: 1196 bytes leftover after parsing attributes in process `syz.4.2604'. [ 299.011089][T14700] hsr_slave_0: entered promiscuous mode [ 299.019785][T14755] netlink: 1196 bytes leftover after parsing attributes in process `syz.4.2604'. [ 299.023149][T14700] hsr_slave_1: entered promiscuous mode [ 299.040599][T14700] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 299.048873][T14700] Cannot create hsr debugfs directory [ 299.270785][T14761] netlink: 'syz.0.2606': attribute type 7 has an invalid length. [ 299.319601][T14761] : entered promiscuous mode [ 299.487618][T14700] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.513198][T14767] netlink: 'syz.4.2609': attribute type 4 has an invalid length. [ 299.541309][T14767] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.2609'. [ 299.592908][T14772] ieee802154 phy0 wpan0: encryption failed: -22 [ 299.599606][ T5849] Bluetooth: hci4: command tx timeout [ 299.651828][T14700] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.836716][T14782] syzkaller0: entered promiscuous mode [ 299.842259][T14782] syzkaller0: entered allmulticast mode [ 299.937249][T14700] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.241141][T14803] openvswitch: netlink: IPv6 tunnel dst address is zero [ 300.462592][T14810] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2621'. [ 300.754418][T14820] netlink: 'syz.0.2622': attribute type 11 has an invalid length. [ 301.679365][ T5841] Bluetooth: hci4: command tx timeout [ 302.099039][T14700] netdevsim netdevsim3 ÿÿÿÿÿÿ (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.258718][T14823] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2623'. [ 302.327006][T14823] macsec0: entered promiscuous mode [ 302.332358][T14823] BUG: sleeping function called from invalid context at kernel/locking/mutex.c:579 [ 302.341758][T14823] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 14823, name: syz.2.2623 [ 302.350912][T14823] preempt_count: 201, expected: 0 [ 302.355999][T14823] RCU nest depth: 0, expected: 0 [ 302.360952][T14823] 3 locks held by syz.2.2623/14823: [ 302.366200][T14823] #0: ffffffff8fa148b8 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 302.375826][T14823] #1: ffffffff8f50ff48 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70 [ 302.385001][T14823] #2: ffff88803327a368 (&macsec_netdev_addr_lock_key/1){+...}-{3:3}, at: dev_uc_add+0x67/0x120 [ 302.395660][T14823] Preemption disabled at: [ 302.395675][T14823] [] dev_uc_add+0x56/0x120 [ 302.406119][T14823] CPU: 0 UID: 0 PID: 14823 Comm: syz.2.2623 Not tainted 6.16.0-rc3-syzkaller-00131-g72fb83735c71 #0 PREEMPT(full) [ 302.406148][T14823] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 302.406161][T14823] Call Trace: [ 302.406170][T14823] [ 302.406178][T14823] dump_stack_lvl+0x189/0x250 [ 302.406219][T14823] ? __pfx_dump_stack_lvl+0x10/0x10 [ 302.406251][T14823] ? __pfx__printk+0x10/0x10 [ 302.406279][T14823] ? print_lock_name+0xde/0x100 [ 302.406300][T14823] ? dev_uc_add+0x56/0x120 [ 302.406331][T14823] __might_resched+0x495/0x610 [ 302.406361][T14823] ? stack_depot_save_flags+0x40/0x900 [ 302.406390][T14823] ? dev_uc_add+0x56/0x120 [ 302.406414][T14823] ? __pfx___might_resched+0x10/0x10 [ 302.406446][T14823] ? kasan_save_track+0x4f/0x80 [ 302.406493][T14823] __mutex_lock+0x106/0xe80 [ 302.406538][T14823] ? dev_set_promiscuity+0x10e/0x260 [ 302.406565][T14823] ? __pfx___mutex_lock+0x10/0x10 [ 302.406593][T14823] ? netdev_info+0x10a/0x160 [ 302.406625][T14823] ? __pfx_netdev_info+0x10/0x10 [ 302.406678][T14823] dev_set_promiscuity+0x10e/0x260 [ 302.406713][T14823] ? __pfx_macsec_dev_change_rx_flags+0x10/0x10 [ 302.406744][T14823] __dev_set_promiscuity+0x531/0x740 [ 302.406773][T14823] ? __hw_addr_add_ex+0x3c5/0x770 [ 302.406801][T14823] __dev_set_rx_mode+0x17c/0x260 [ 302.406829][T14823] dev_uc_add+0xc8/0x120 [ 302.406857][T14823] macsec_dev_open+0xd9/0x530 [ 302.406887][T14823] ? ib_device_get_by_netdev+0x46b/0x4d0 [ 302.406915][T14823] ? __pfx_macsec_dev_open+0x10/0x10 [ 302.406945][T14823] ? ib_device_get_by_netdev+0x84/0x4d0 [ 302.406968][T14823] ? hsr_netdev_notify+0x29e/0xcf0 [ 302.406991][T14823] ? __pfx_ib_device_get_by_netdev+0x10/0x10 [ 302.407021][T14823] ? udp_tunnel_nic_netdevice_event+0x1b6/0x1500 [ 302.407052][T14823] ? ip6_route_dev_notify+0x9a/0x5b0 [ 302.407078][T14823] ? notifier_call_chain+0x3bf/0x3e0 [ 302.407121][T14823] __dev_open+0x46d/0x880 [ 302.407148][T14823] ? __pfx___dev_open+0x10/0x10 [ 302.407181][T14823] __dev_change_flags+0x1ea/0x6d0 [ 302.407207][T14823] ? validate_linkmsg+0x765/0x950 [ 302.407237][T14823] ? __pfx___dev_change_flags+0x10/0x10 [ 302.407275][T14823] rtnl_newlink_create+0x555/0xb00 [ 302.407315][T14823] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 302.407336][T14823] ? rtnl_newlink+0x8db/0x1c70 [ 302.407361][T14823] ? __pfx___mutex_lock+0x10/0x10 [ 302.407403][T14823] ? ns_capable+0x8a/0xf0 [ 302.407438][T14823] rtnl_newlink+0x16d6/0x1c70 [ 302.407461][T14823] ? netlink_sendmsg+0x805/0xb30 [ 302.407499][T14823] ? __pfx_rtnl_newlink+0x10/0x10 [ 302.407548][T14823] ? kasan_quarantine_put+0xdd/0x220 [ 302.407577][T14823] ? lockdep_hardirqs_on+0x9c/0x150 [ 302.407614][T14823] ? nlmon_xmit+0xb0/0x100 [ 302.407640][T14823] ? kmem_cache_free+0x18f/0x400 [ 302.407670][T14823] ? __local_bh_enable_ip+0x12d/0x1c0 [ 302.407699][T14823] ? lockdep_hardirqs_on+0x9c/0x150 [ 302.407737][T14823] ? __local_bh_enable_ip+0x12d/0x1c0 [ 302.407766][T14823] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 302.407801][T14823] ? __dev_queue_xmit+0x27e/0x3a70 [ 302.407844][T14823] ? __lock_acquire+0xab9/0xd20 [ 302.407904][T14823] ? __pfx_rtnl_newlink+0x10/0x10 [ 302.407924][T14823] rtnetlink_rcv_msg+0x7cf/0xb70 [ 302.407949][T14823] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 302.407968][T14823] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 302.407985][T14823] ? ref_tracker_free+0x63a/0x7d0 [ 302.408009][T14823] ? __copy_skb_header+0xa7/0x550 [ 302.408037][T14823] ? __pfx_ref_tracker_free+0x10/0x10 [ 302.408077][T14823] netlink_rcv_skb+0x208/0x470 [ 302.408102][T14823] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 302.408124][T14823] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 302.408165][T14823] ? netlink_deliver_tap+0x2e/0x1b0 [ 302.408187][T14823] ? netlink_deliver_tap+0x2e/0x1b0 [ 302.408217][T14823] netlink_unicast+0x75b/0x8d0 [ 302.408251][T14823] netlink_sendmsg+0x805/0xb30 [ 302.408286][T14823] ? __pfx_netlink_sendmsg+0x10/0x10 [ 302.408314][T14823] ? aa_sock_msg_perm+0x94/0x160 [ 302.408342][T14823] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 302.408368][T14823] ? __pfx_netlink_sendmsg+0x10/0x10 [ 302.408392][T14823] __sock_sendmsg+0x21c/0x270 [ 302.408427][T14823] ____sys_sendmsg+0x505/0x830 [ 302.408460][T14823] ? __pfx_____sys_sendmsg+0x10/0x10 [ 302.408496][T14823] ? import_iovec+0x74/0xa0 [ 302.408521][T14823] ___sys_sendmsg+0x21f/0x2a0 [ 302.408549][T14823] ? __pfx____sys_sendmsg+0x10/0x10 [ 302.408620][T14823] ? __fget_files+0x2a/0x420 [ 302.408641][T14823] ? __fget_files+0x3a0/0x420 [ 302.408677][T14823] __x64_sys_sendmsg+0x19b/0x260 [ 302.408712][T14823] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 302.408751][T14823] ? rcu_is_watching+0x15/0xb0 [ 302.408790][T14823] ? do_syscall_64+0xbe/0x3b0 [ 302.408814][T14823] do_syscall_64+0xfa/0x3b0 [ 302.408830][T14823] ? lockdep_hardirqs_on+0x9c/0x150 [ 302.408858][T14823] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 302.408879][T14823] ? clear_bhb_loop+0x60/0xb0 [ 302.408904][T14823] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 302.408923][T14823] RIP: 0033:0x7f818178e929 [ 302.408943][T14823] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 302.408959][T14823] RSP: 002b:00007f817f5f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 302.408981][T14823] RAX: ffffffffffffffda RBX: 00007f81819b5fa0 RCX: 00007f818178e929 [ 302.408997][T14823] RDX: 0000000000000800 RSI: 0000200000000280 RDI: 0000000000000004 [ 302.409010][T14823] RBP: 00007f8181810b39 R08: 0000000000000000 R09: 0000000000000000 [ 302.409023][T14823] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 302.409035][T14823] R13: 0000000000000000 R14: 00007f81819b5fa0 R15: 00007fffafbec7f8 [ 302.409071][T14823] [ 302.409080][T14823] [ 302.960216][T14823] ============================= [ 302.965071][T14823] [ BUG: Invalid wait context ] [ 302.969923][T14823] 6.16.0-rc3-syzkaller-00131-g72fb83735c71 #0 Tainted: G W [ 302.978593][T14823] ----------------------------- [ 302.983435][T14823] syz.2.2623/14823 is trying to lock: [ 302.988807][T14823] ffff88805d620d30 (&dev_instance_lock_key#20){+.+.}-{4:4}, at: dev_set_promiscuity+0x10e/0x260 [ 302.999271][T14823] other info that might help us debug this: [ 303.005158][T14823] context-{5:5} [ 303.008614][T14823] 3 locks held by syz.2.2623/14823: [ 303.013810][T14823] #0: ffffffff8fa148b8 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 303.023317][T14823] #1: ffffffff8f50ff48 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70 [ 303.032383][T14823] #2: ffff88803327a368 (&macsec_netdev_addr_lock_key/1){+...}-{3:3}, at: dev_uc_add+0x67/0x120 [ 303.042848][T14823] stack backtrace: [ 303.046572][T14823] CPU: 0 UID: 0 PID: 14823 Comm: syz.2.2623 Tainted: G W 6.16.0-rc3-syzkaller-00131-g72fb83735c71 #0 PREEMPT(full) [ 303.046597][T14823] Tainted: [W]=WARN [ 303.046602][T14823] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 303.046612][T14823] Call Trace: [ 303.046618][T14823] [ 303.046624][T14823] dump_stack_lvl+0x189/0x250 [ 303.046665][T14823] ? __pfx_dump_stack_lvl+0x10/0x10 [ 303.046698][T14823] ? __pfx__printk+0x10/0x10 [ 303.046716][T14823] ? print_lock_name+0xde/0x100 [ 303.046732][T14823] __lock_acquire+0xbcb/0xd20 [ 303.046756][T14823] ? dev_set_promiscuity+0x10e/0x260 [ 303.046773][T14823] lock_acquire+0x120/0x360 [ 303.046793][T14823] ? dev_set_promiscuity+0x10e/0x260 [ 303.046815][T14823] __mutex_lock+0x182/0xe80 [ 303.046839][T14823] ? dev_set_promiscuity+0x10e/0x260 [ 303.046860][T14823] ? dev_set_promiscuity+0x10e/0x260 [ 303.046878][T14823] ? __pfx___mutex_lock+0x10/0x10 [ 303.046900][T14823] ? netdev_info+0x10a/0x160 [ 303.046920][T14823] ? __pfx_netdev_info+0x10/0x10 [ 303.046943][T14823] dev_set_promiscuity+0x10e/0x260 [ 303.046962][T14823] ? __pfx_macsec_dev_change_rx_flags+0x10/0x10 [ 303.046987][T14823] __dev_set_promiscuity+0x531/0x740 [ 303.047006][T14823] ? __hw_addr_add_ex+0x3c5/0x770 [ 303.047025][T14823] __dev_set_rx_mode+0x17c/0x260 [ 303.047044][T14823] dev_uc_add+0xc8/0x120 [ 303.047063][T14823] macsec_dev_open+0xd9/0x530 [ 303.047086][T14823] ? ib_device_get_by_netdev+0x46b/0x4d0 [ 303.047107][T14823] ? __pfx_macsec_dev_open+0x10/0x10 [ 303.047129][T14823] ? ib_device_get_by_netdev+0x84/0x4d0 [ 303.047149][T14823] ? hsr_netdev_notify+0x29e/0xcf0 [ 303.047166][T14823] ? __pfx_ib_device_get_by_netdev+0x10/0x10 [ 303.047188][T14823] ? udp_tunnel_nic_netdevice_event+0x1b6/0x1500 [ 303.047208][T14823] ? ip6_route_dev_notify+0x9a/0x5b0 [ 303.047225][T14823] ? notifier_call_chain+0x3bf/0x3e0 [ 303.047253][T14823] __dev_open+0x46d/0x880 [ 303.047269][T14823] ? __pfx___dev_open+0x10/0x10 [ 303.047286][T14823] __dev_change_flags+0x1ea/0x6d0 [ 303.047304][T14823] ? validate_linkmsg+0x765/0x950 [ 303.047326][T14823] ? __pfx___dev_change_flags+0x10/0x10 [ 303.047347][T14823] rtnl_newlink_create+0x555/0xb00 [ 303.047370][T14823] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 303.047387][T14823] ? rtnl_newlink+0x8db/0x1c70 [ 303.047402][T14823] ? __pfx___mutex_lock+0x10/0x10 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 303.047429][T14823] ? ns_capable+0x8a/0xf0 [ 303.047453][T14823] rtnl_newlink+0x16d6/0x1c70 [ 303.047469][T14823] ? netlink_sendmsg+0x805/0xb30 [ 303.047491][T14823] ? __pfx_rtnl_newlink+0x10/0x10 [ 303.047513][T14823] ? kasan_quarantine_put+0xdd/0x220 [ 303.047545][T14823] ? lockdep_hardirqs_on+0x9c/0x150 [ 303.047569][T14823] ? nlmon_xmit+0xb0/0x100 [ 303.047590][T14823] ? kmem_cache_free+0x18f/0x400 [ 303.047608][T14823] ? __local_bh_enable_ip+0x12d/0x1c0 [ 303.047631][T14823] ? lockdep_hardirqs_on+0x9c/0x150 [ 303.047653][T14823] ? __local_bh_enable_ip+0x12d/0x1c0 [ 303.047682][T14823] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 303.047707][T14823] ? __dev_queue_xmit+0x27e/0x3a70 [ 303.047732][T14823] ? __lock_acquire+0xab9/0xd20 [ 303.047762][T14823] ? __pfx_rtnl_newlink+0x10/0x10 [ 303.047777][T14823] rtnetlink_rcv_msg+0x7cf/0xb70 [ 303.047793][T14823] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 303.047807][T14823] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 303.047820][T14823] ? ref_tracker_free+0x63a/0x7d0 [ 303.047840][T14823] ? __copy_skb_header+0xa7/0x550 [ 303.047860][T14823] ? __pfx_ref_tracker_free+0x10/0x10 [ 303.047884][T14823] netlink_rcv_skb+0x208/0x470 [ 303.047901][T14823] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 303.047916][T14823] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 303.047938][T14823] ? netlink_deliver_tap+0x2e/0x1b0 [ 303.047954][T14823] ? netlink_deliver_tap+0x2e/0x1b0 [ 303.047973][T14823] netlink_unicast+0x75b/0x8d0 [ 303.047992][T14823] netlink_sendmsg+0x805/0xb30 [ 303.048013][T14823] ? __pfx_netlink_sendmsg+0x10/0x10 [ 303.048031][T14823] ? aa_sock_msg_perm+0x94/0x160 [ 303.048051][T14823] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 303.048071][T14823] ? __pfx_netlink_sendmsg+0x10/0x10 [ 303.048088][T14823] __sock_sendmsg+0x21c/0x270 [ 303.048112][T14823] ____sys_sendmsg+0x505/0x830 [ 303.048132][T14823] ? __pfx_____sys_sendmsg+0x10/0x10 [ 303.048154][T14823] ? import_iovec+0x74/0xa0 [ 303.048170][T14823] ___sys_sendmsg+0x21f/0x2a0 [ 303.048189][T14823] ? __pfx____sys_sendmsg+0x10/0x10 [ 303.048220][T14823] ? __fget_files+0x2a/0x420 [ 303.048236][T14823] ? __fget_files+0x3a0/0x420 [ 303.048256][T14823] __x64_sys_sendmsg+0x19b/0x260 [ 303.048276][T14823] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 303.048298][T14823] ? rcu_is_watching+0x15/0xb0 [ 303.048324][T14823] ? do_syscall_64+0xbe/0x3b0 [ 303.048338][T14823] do_syscall_64+0xfa/0x3b0 [ 303.048350][T14823] ? lockdep_hardirqs_on+0x9c/0x150 [ 303.048372][T14823] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 303.048387][T14823] ? clear_bhb_loop+0x60/0xb0 [ 303.048404][T14823] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 303.048419][T14823] RIP: 0033:0x7f818178e929 [ 303.048433][T14823] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 303.048448][T14823] RSP: 002b:00007f817f5f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 303.048465][T14823] RAX: ffffffffffffffda RBX: 00007f81819b5fa0 RCX: 00007f818178e929 [ 303.048477][T14823] RDX: 0000000000000800 RSI: 0000200000000280 RDI: 0000000000000004 [ 303.048488][T14823] RBP: 00007f8181810b39 R08: 0000000000000000 R09: 0000000000000000 [ 303.048497][T14823] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 303.048507][T14823] R13: 0000000000000000 R14: 00007f81819b5fa0 R15: 00007fffafbec7f8 [ 303.048524][T14823] [ 303.101059][T14810] infiniband syz2: set down [ 303.269889][T14826] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2623'. [ 303.316451][T14810] infiniband syz2: added veth1_vlan [ 303.641039][T14810] syz2: rxe_create_cq: returned err = -12 [ 303.650145][T14810] infiniband syz2: Couldn't create ib_mad CQ [ 303.661968][T14810] infiniband syz2: Couldn't open port 1 [ 303.701650][T14810] RDS/IB: syz2: added [ 303.706465][T14810] smc: adding ib device syz2 with port count 1 [ 303.712662][T14810] smc: ib device syz2 port 1 has pnetid [ 303.741110][ T6449] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.754698][ T5841] Bluetooth: hci4: command tx timeout [ 303.820311][ T6449] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.882096][ T6449] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.972284][ T6449] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.083389][ T6449] bridge_slave_1: left allmulticast mode [ 304.089472][ T6449] bridge_slave_1: left promiscuous mode [ 304.095579][ T6449] bridge0: port 2(bridge_slave_1) entered disabled state [ 304.104306][ T6449] bridge_slave_0: left allmulticast mode [ 304.110325][ T6449] bridge_slave_0: left promiscuous mode [ 304.116224][ T6449] bridge0: port 1(bridge_slave_0) entered disabled state [ 304.231874][ T6449] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 304.242650][ T6449] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 304.255606][ T6449] bond0 (unregistering): Released all slaves [ 304.640047][ T6449] hsr_slave_0: left promiscuous mode [ 304.653186][ T6449] hsr_slave_1: left promiscuous mode [ 304.659517][ T6449] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 304.674820][ T6449] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 304.704858][ T6449] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 304.713896][ T6449] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 304.725793][ T6449] veth1_macvtap: left promiscuous mode [ 304.731352][ T6449] veth0_macvtap: left promiscuous mode [ 304.737116][ T6449] veth1_vlan: left promiscuous mode [ 304.742412][ T6449] veth0_vlan: left promiscuous mode [ 304.870989][ T6449] team0 (unregistering): Port device team_slave_1 removed [ 304.893561][ T6449] team0 (unregistering): Port device team_slave_0 removed [ 304.958712][T14810] syz_tun (unregistering): left promiscuous mode [ 305.260365][ T6449] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.317624][ T6449] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.366718][ T6449] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.437199][ T6449] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.682998][ T6449] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.693380][ T6449] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 305.728632][ T6449] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.739458][ T6449] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 305.789050][ T6449] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.799428][ T6449] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 305.834461][ T6449] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.845248][ T6449] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 305.997628][ T6449] bridge_slave_1: left allmulticast mode [ 306.003295][ T6449] bridge_slave_1: left promiscuous mode [ 306.009187][ T6449] bridge0: port 2(bridge_slave_1) entered disabled state [ 306.017531][ T6449] bridge_slave_0: left allmulticast mode [ 306.023194][ T6449] bridge_slave_0: left promiscuous mode [ 306.030300][ T6449] bridge0: port 1(bridge_slave_0) entered disabled state [ 306.042308][ T6449] tipc: Resetting bearer [ 306.143489][ T6449] bond3 (unregistering): (slave gretap2): Releasing active interface [ 306.155624][ T6449] bond4 (unregistering): (slave gretap3): Releasing backup interface [ 306.199789][ T6449] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 306.252371][ T6449] tipc: Disabling bearer [ 306.427502][ T6449] bond2 (unregistering): (slave bridge4): Releasing active interface [ 306.836335][ T6449] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 306.845985][ T6449] bond0 (unregistering): (slave team0): Releasing backup interface [ 306.854219][ T6449] tipc: Resetting bearer [ 306.861211][ T6449] tipc: Resetting bearer [ 306.866795][ T6449] bond0 (unregistering): Released all slaves [ 306.876675][ T6449] bond1 (unregistering): Released all slaves [ 306.885591][ T6449] bond2 (unregistering): Released all slaves [ 306.976672][ T6449] bond3 (unregistering): Released all slaves [ 306.988482][ T6449] bond4 (unregistering): Released all slaves [ 306.997590][ T6449] bond5 (unregistering): Released all slaves [ 307.091280][ T6449] bond6 (unregistering): Released all slaves [ 307.100226][ T6449] bond7 (unregistering): Released all slaves [ 307.170646][ T6449] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 307.180571][ T6449] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 307.190971][ T6449] bond0 (unregistering): Released all slaves [ 307.222700][ T6449] bond4 (unregistering): (slave ip6gretap2): Releasing active interface [ 307.309393][ T6449] dvmrp0 (unregistering): left allmulticast mode [ 307.317722][ T6449] bond4 (unregistering): (slave geneve2): Releasing active interface [ 307.338224][ T6449] team0: Port device geneve0 removed [ 307.537387][ T6449] bond0 (unregistering): (slave bridge4): Releasing active interface [ 307.627684][ T6449] bond1 (unregistering): Released all slaves [ 307.717978][ T6449] bond2 (unregistering): Released all slaves [ 307.809388][ T6449] bond3 (unregistering): left allmulticast mode [ 307.816065][ T6449] bond3 (unregistering): left promiscuous mode [ 307.832567][ T6449] bond3 (unregistering): Released all slaves [ 307.844074][ T6449] bond4 (unregistering): Released all slaves [ 307.853228][ T6449] bond0 (unregistering): Released all slaves [ 307.865210][ T5908] infiniband srz1: ib_query_port failed (-19) [ 309.264427][ T6449] tipc: Disabling bearer [ 309.270310][ T6449] tipc: Left network mode [ 309.282787][ T6449] tipc: Disabling bearer [ 309.288621][ T6449] tipc: Disabling bearer [ 309.294016][ T6449] tipc: Left network mode [ 309.580259][ T6449] batadv_slave_0: left promiscuous mode [ 309.588985][ T6449] hsr_slave_0: left promiscuous mode [ 309.607329][ T6449] hsr_slave_0: left promiscuous mode [ 309.613510][ T6449] hsr_slave_1: left promiscuous mode [ 309.621052][ T6449] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 309.629162][ T6449] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 309.642707][ T6449] hsr_slave_0: left promiscuous mode [ 309.651685][ T6449] veth1_macvtap: left promiscuous mode [ 309.657595][ T6449] veth0_macvtap: left promiscuous mode [ 309.663147][ T6449] veth1_vlan: left promiscuous mode [ 309.669464][ T6449] veth1_vlan: left promiscuous mode [ 309.674929][ T6449] veth0_vlan: left promiscuous mode [ 309.878206][ T6451] smc: removing ib device syz2 [ 310.208924][ T6449] team0 (unregistering): Port device team_slave_1 removed [ 310.232590][ T6449] team0 (unregistering): Port device team_slave_0 removed [ 310.347646][ T6449] pimreg (unregistering): left allmulticast mode [ 310.562050][ T7296] infiniband syz1: ib_query_port failed (-19) [ 311.205561][ T6449] IPVS: stop unused estimator thread 0...