last executing test programs: 6.311589915s ago: executing program 0 (id=3091): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x12, 0x8, 0x8, 0x8}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000085000000a000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2100, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)="2e00000010008108040f80ecdb4cb92e0a480e000f000000e8bd6efb250314000e000100240248ff050005001200", 0x2e}], 0x1}, 0x40880) 6.120612035s ago: executing program 0 (id=3093): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000019c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_DELSET={0x60, 0xb, 0xa, 0x301, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x12}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @range={{0xa}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_RANGE_SREG={0x8, 0x1, 0x1, 0x0, 0xb}, @NFTA_RANGE_SREG={0x8, 0x1, 0x1, 0x0, 0x9}]}}}, @NFTA_SET_ID={0x8}, @NFTA_SET_DESC={0x18, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x4}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0xffffffff}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x28b}]}]}, @NFT_MSG_NEWSETELEM={0x14, 0xc, 0xa, 0x5, 0x0, 0x0, {0x3, 0x0, 0x2}}, @NFT_MSG_DELOBJ={0x58, 0x14, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x8}, [@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x5}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xf4}, 0x1, 0x0, 0x0, 0x40}, 0x40) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) (async) sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000ec0)={0x14, 0x0, 0xe701ac47a3d23ecd}, 0x14}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYRES16=r3, @ANYBLOB='l\x00\x00\x00', @ANYBLOB="01002fbd7000fbdbdf254400000008000300", @ANYRES32=r2, @ANYRES32=r3], 0x6c}, 0x1, 0x0, 0x0, 0x1}, 0x4) 5.704462602s ago: executing program 0 (id=3099): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000003840)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10) r1 = accept$alg(r0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000280)=0x2, 0x4) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r2, 0x6, 0x15, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000340)={@in={{0x2, 0x4e23, @loopback}}, 0x0, 0x0, 0x1, 0x0, "ddab55deb230210ac3678ec72283125069de4f0e614b674fcd2eef3448b8ea8d98b6f2ab8c53951123399263128e33771d5aecc4f7bdd782c325338ad37dbdf3e0e233933ad0c7900ed750d2f9e25bc5"}, 0xd8) r3 = socket$inet(0xa, 0x801, 0x84) connect$inet(r3, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r3, 0x8) r4 = accept4(r3, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000180)={0x0, 0x3}, 0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x5}, &(0x7f0000000100)=0x8) sendmmsg$alg(r1, &(0x7f0000000280)=[{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000600)="b2dfd3", 0x3}], 0x1, 0x0, 0x0, 0x4000000}], 0x1, 0x0) recvmmsg(r1, &(0x7f00000070c0)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000100)=""/106, 0x6a}], 0x1}}], 0x1, 0x2001, 0x0) 5.539261504s ago: executing program 0 (id=3102): r0 = socket(0x400000000010, 0x800, 0x200) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000000)=@ethtool_eeprom={0xb, 0x0, 0xffff0000}}) 5.371413337s ago: executing program 0 (id=3104): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r1, &(0x7f0000000280), &(0x7f0000000000), 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r1, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x11000) r4 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r4, &(0x7f0000000540)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x173b2a7e, @mcast2, 0x19}, 0x1c, 0x0, 0x0, &(0x7f00000020c0)=ANY=[@ANYBLOB="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"], 0x590}}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)="4da3be4a15", 0x5}], 0x1}}], 0x2, 0x28048005) sendmmsg$inet6(r4, &(0x7f00000018c0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000000c0)="63efd66ad1b839bd", 0x8}], 0x1}}], 0x1, 0x9) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 5.209626475s ago: executing program 0 (id=3107): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x34, r1, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x7}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x24004864}, 0x4c000) 4.302253646s ago: executing program 3 (id=3119): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) socket$key(0xf, 0x3, 0x2) sendmsg$nl_route_sched(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r3 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r3, &(0x7f0000000440)={0x28, 0x0, 0x2710, @host}, 0x10) r4 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r4, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r2, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=@newqdisc={0x8ec, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x8b8, 0x2, [@TCA_TBF_RATE64={0xc, 0x4, 0x4e1e2563543d84f9}, @TCA_TBF_PBURST={0x8, 0x7, 0x1fc0}, @TCA_TBF_PARMS={0x28, 0x1, {{0x40, 0x0, 0x0, 0xffff, 0x101}, {0x0, 0x0, 0x0, 0x8, 0xa, 0x3}, 0xffffffff, 0x81}}, @TCA_TBF_PRATE64={0xc, 0x5, 0xb3b74bdedfd15113}, @TCA_TBF_PBURST={0x8, 0x7, 0xa84}, @TCA_TBF_PRATE64={0xc, 0x5, 0xb9872e659d2adac5}, @TCA_TBF_PARMS={0x28, 0x1, {{0xa8, 0x1, 0x2, 0xffff, 0x3, 0xb}, {0x4, 0x0, 0x6, 0x2, 0x200, 0xb}, 0x748814f3, 0x5ba, 0x662}}, @TCA_TBF_RTAB={0x404, 0x2, [0x7, 0x7c3, 0x5, 0x101, 0x4, 0x8000, 0x4, 0xb795, 0x6, 0x10001, 0x13, 0xffffc9e0, 0x265, 0xfffffffd, 0x7, 0x80000001, 0xc, 0x10, 0x4, 0x3, 0xa6db, 0x5, 0x7ff, 0x7ff, 0x6, 0x9, 0x80, 0x4, 0x1, 0x4, 0xfff, 0x7f, 0x5, 0x0, 0xd8b, 0x23, 0x0, 0x9, 0x4, 0x10000, 0x101, 0x80000001, 0x35fc, 0xd, 0x2, 0x6, 0xffff214c, 0x9, 0x3, 0x8, 0x7, 0xffff, 0x7, 0xa8800000, 0xfffffffa, 0xfffff800, 0x3, 0xff, 0x7, 0x2bd, 0x7fffffff, 0x6, 0x9, 0x2, 0x400, 0xe044, 0x27, 0x4, 0x1, 0x3, 0x9, 0x0, 0x0, 0x8000, 0x80000000, 0x1ff, 0x6, 0x8, 0x10, 0x5, 0x5, 0x7, 0x2, 0x8, 0x2, 0x1ff, 0xff, 0x0, 0x9, 0xffffffff, 0x10001, 0x6, 0x2, 0x2, 0x7, 0x612, 0xac, 0xfffffffb, 0x6, 0xffffc263, 0x9, 0x35f3, 0x8, 0x7, 0x8001, 0x202, 0x8, 0x7fff, 0xfffffff7, 0xef8, 0x0, 0x380, 0x8000, 0x7, 0xf, 0x80000000, 0x7, 0x1, 0x1, 0x6, 0x8, 0x80000000, 0x1, 0x8, 0xb, 0x0, 0x8, 0x48f, 0xa, 0x3, 0x6, 0x4fc8, 0x0, 0x5, 0x0, 0xedb, 0x7fffffff, 0x1, 0x456, 0x40, 0xe460, 0xfffff535, 0x18, 0x9, 0x47f, 0xf19, 0x7, 0x6, 0x80, 0x74, 0x4, 0x884, 0x4, 0x1, 0xeed, 0x4, 0xb, 0x8, 0x9, 0xffff, 0x7, 0xfffffffe, 0xa, 0x7, 0x4, 0x8, 0x3f30, 0x4, 0x0, 0x2367, 0x2, 0x4, 0xda75, 0x10d, 0xedc, 0x1000, 0x9, 0x6, 0x100, 0x9d, 0x4, 0xa, 0x3, 0x80000000, 0x1, 0xc, 0xe000, 0x80000000, 0x7, 0x251382be, 0x0, 0x6, 0x0, 0xfe87, 0x40000000, 0x9, 0xb, 0x4, 0x5a0e, 0x1, 0x1, 0xffff0000, 0x3, 0x3ff, 0xffc00000, 0x8000, 0x9, 0x7ff, 0x10001, 0x3, 0xfff, 0xa, 0xd, 0x3, 0x9, 0xfc8, 0xfc, 0x7, 0x4, 0x7f, 0x1ff, 0x3, 0x80000000, 0x2, 0xae, 0x200, 0x3, 0x6d, 0x81, 0xec18, 0x2, 0x7, 0x4, 0x579fc62, 0x9, 0x9, 0x0, 0xfffffffb, 0x6, 0x7, 0xff, 0x1, 0x1ff, 0x5, 0x9, 0x400, 0xffffffff, 0x3, 0x65, 0xf, 0xd, 0xd93b, 0x800, 0x8001, 0x9, 0xcf]}, @TCA_TBF_RTAB={0x404, 0x2, [0x2, 0x200, 0x7fff, 0x5, 0x8001, 0x2, 0x8, 0xc3, 0xff, 0xffff, 0xff, 0x746f3157, 0xfff, 0x8, 0xa, 0x8, 0x7fffffff, 0x8, 0x1ff, 0x7fff, 0x6, 0x80000001, 0x8, 0x6, 0x1, 0x620, 0x4, 0x7, 0x4, 0xfff, 0x7, 0x2, 0x4, 0x3, 0x8, 0x4, 0xffffa76d, 0x6fbb, 0x5, 0x3, 0x5, 0x3, 0x800, 0x4a8, 0x5, 0x9, 0xe95, 0x80000001, 0xb7, 0x2, 0x4, 0x6d4, 0x40, 0x9, 0x4, 0x1ff, 0x101, 0x3, 0x9, 0x2, 0x7, 0x0, 0x8, 0x2, 0x3, 0x10, 0x3, 0x4, 0x8, 0x3, 0x5, 0x5, 0x9, 0x1, 0x1, 0x7, 0x9, 0x4, 0x5, 0x7f, 0x7, 0x3, 0x2, 0x5, 0xfcf, 0x9, 0x280000, 0x10, 0xb68, 0x5, 0x3, 0x8, 0x1ff, 0x7, 0xc5b, 0x5, 0x4, 0x44f9, 0xdafe, 0x8001, 0x1, 0x59412c9, 0x4, 0x10001, 0x800, 0x700000, 0xa146, 0x4, 0x2b6, 0x4, 0x9, 0x8, 0x0, 0x84a, 0xac, 0x42e5, 0x9, 0x4, 0xfffffffc, 0x4, 0x80, 0x6, 0x9, 0x6, 0x1, 0xf5b, 0xf, 0x10000, 0x0, 0x2, 0x2, 0x9, 0x4, 0xaf, 0xffff, 0xdf, 0x0, 0xd5c7, 0x0, 0x3, 0x5, 0x6, 0xffff, 0x38, 0x2, 0x0, 0x6, 0x80000001, 0x9, 0x10000, 0x0, 0x335, 0x6, 0x4, 0x6, 0x200, 0x5, 0x5, 0x2, 0x7, 0x3, 0x400, 0x3, 0x0, 0x5, 0x1, 0x3, 0x7f77d1b2, 0x5, 0x84, 0x1, 0x8, 0xf, 0xffffffff, 0x80000001, 0xd, 0x90c8, 0x3e4e, 0x40, 0x1, 0xfff, 0x0, 0x0, 0x1, 0x5, 0x5, 0x3ff, 0x1, 0xffff7fff, 0xffffffff, 0x7, 0x7e, 0x1, 0x40, 0x5, 0x8, 0x7, 0x9, 0x4, 0x409, 0x9a, 0x891, 0x2, 0x4, 0x8, 0x7, 0x753c, 0x6, 0x8000, 0x7, 0xb, 0x0, 0x0, 0x1, 0xffffffff, 0x8, 0x1, 0x4, 0x8, 0x5, 0x4, 0x9, 0x3, 0xe7, 0x2, 0x1, 0xfffffff7, 0x2560a7be, 0x2, 0xa, 0x7fffffff, 0x80, 0x5, 0x4, 0x65a2, 0x5, 0xf6, 0x5, 0x378e, 0x7, 0x9, 0xf9, 0x0, 0xfffffff8, 0x963, 0x0, 0x6, 0x1, 0x9, 0x1, 0x3, 0x2, 0x0, 0x9, 0x8, 0x4]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x47, 0x2, 0xc8, 0x8d, 0xd4cb, 0x9b51}, {0x2, 0x0, 0xfff0, 0x6, 0x3, 0x9}, 0x3, 0x5, 0x1a65}}]}}, @TCA_RATE={0x6, 0x5, {0x3, 0x9}}]}, 0x8ec}}, 0x4000080) 2.623015419s ago: executing program 3 (id=3124): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000fc0), r2) sendmsg$NFC_CMD_SE_IO(r3, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000001080)={0x24, r4, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@NFC_ATTR_SE_INDEX={0x8, 0x15, 0x2}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x44040}, 0x2400cc84) syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), r3) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_CONFIG(r5, &(0x7f0000000480)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000700)={0x124, r6, 0x20, 0x70bd2d, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x28, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x11, 0x20}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'nq\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x6c}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wlc\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xe}, @IPVS_CMD_ATTR_DAEMON={0x74, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_bond\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bond_slave_1\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x40}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0xb}}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private1={0xfc, 0x1, '\x00', 0x1}}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xf}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7fffffff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x23}]}, 0x124}, 0x1, 0x0, 0x0, 0x20040010}, 0x40000) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r9, 0x107, 0x8, &(0x7f0000000000)=0x81, 0x4) r10 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) connect$bt_l2cap(r10, &(0x7f0000000000)={0x1f, 0x1, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) r11 = socket$netlink(0x10, 0x3, 0x4) write(r11, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) r12 = syz_genetlink_get_family_id$devlink(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_POOL_SET(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={0x54, r12, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0x6, 0x11, 0x7fff}, {0x8, 0x13, 0x3ff}, {0x5}}]}, 0x54}, 0x1, 0x0, 0x0, 0x40800}, 0x804) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYRESHEX=r7], 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x84) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000680)=ANY=[@ANYBLOB="8c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000005000128009000100766c616e0000000040000280060001000000000004000480280003800c00030040000000060000000c0001000004000000000000d8fd010006000000090000000600050088a8000008000a00", @ANYRES32=r7, @ANYBLOB="08000500", @ANYRES32=r7], 0x8c}, 0x1, 0xba01, 0x0, 0x4004001}, 0x0) 2.141132396s ago: executing program 2 (id=3132): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x16, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="7a0a00ff0000002871104e000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x90) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r1, 0x701, 0x0, 0x0, {0x41}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x16, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="7a0a00ff0000002871104e000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x90) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r1, 0x701, 0x0, 0x0, {0x41}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x0) (async) 1.93726148s ago: executing program 2 (id=3135): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x10, 0x3, 0x0) connect$netlink(r1, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000001500)=@newtaction={0x18, 0x31, 0x829, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0x40, 0x24, 0xd0f, 0x70bd26, 0x0, {0x60, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_QUANTUM={0x8, 0x6, 0x7e2438dd}]}}]}, 0x40}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000003d000701000000c42900"/26], 0x28}}, 0xc000) 1.623448559s ago: executing program 2 (id=3137): r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef", 0x11) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmsg$IPCTNL_MSG_EXP_GET(r1, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x28, 0x1, 0x2, 0x801, 0x0, 0x0, {0xa, 0x0, 0xa}, [@CTA_EXPECT_FN={0x13, 0xb, 'callforwarding\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x24008000) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) 1.622823104s ago: executing program 3 (id=3138): r0 = socket(0x2a, 0x2, 0xfffffffe) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@gettfilter={0x74, 0x2e, 0x200, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, r1, {0x10, 0xb}, {0x1, 0xb}, {0xd, 0xd}}, [{0x8, 0xb, 0x5}, {0x8, 0xb, 0x6}, {0x8, 0xb, 0xfffff800}, {0x8, 0xb, 0x1}, {0x8, 0xb, 0x3ff}, {0x8, 0xb, 0x8001}, {0x8, 0xb, 0x3}, {0x8, 0xb, 0xb}, {0x8, 0xb, 0x80001ff}, {0x8, 0xb, 0x581}]}, 0x74}}, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.42744212s ago: executing program 2 (id=3141): r0 = socket(0x11, 0x3, 0x0) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0x2d1, 0xfffffffffffffd85, &(0x7f00000000c0)="b9ff03030018698cb89e40f086dd6000000e00002b00630677", 0x0, 0x100, 0x2000000, 0x0, 0x0, &(0x7f0000000440)}, 0x28) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00', 0x0}) bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) (async) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8481f0000005e140604000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) 1.425475387s ago: executing program 3 (id=3143): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wg2\x00', 0x0}) (async, rerun: 32) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000140)={'syztnl2\x00', &(0x7f00000000c0)={'ip6tnl0\x00', 0x0, 0x29, 0x8e, 0x7, 0x2, 0x0, @private2, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x7800, 0x80, 0xc}}) (async, rerun: 32) getpeername$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0}, &(0x7f00000001c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'team0\x00', 0x0}) (async, rerun: 32) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000240)={@empty, @broadcast, 0x0}, &(0x7f0000000280)=0xc) (async, rerun: 32) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000340)={'ip6gre0\x00', &(0x7f00000002c0)={'syztnl2\x00', 0x0, 0x4, 0x2, 0x5, 0x64, 0x1, @rand_addr=' \x01\x00', @mcast1, 0x7800, 0x40, 0x8, 0x4}}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'batadv_slave_1\x00', 0x0}) (async) getpeername$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000400)=0x14) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000004c0)={'ip6gre0\x00', &(0x7f0000000440)={'syztnl2\x00', 0x0, 0x2f, 0x7, 0x3, 0x3, 0x4c, @private1={0xfc, 0x1, '\x00', 0x1}, @remote, 0x80, 0x40, 0x4, 0xffff}}) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000500)={'team0\x00', 0x0}) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000005c0)={'tunl0\x00', &(0x7f0000000540)={'ip_vti0\x00', 0x0, 0x7800, 0x10, 0x2, 0x5, {{0x13, 0x4, 0x1, 0x8, 0x4c, 0x65, 0x0, 0x6, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0xf}, @private=0xa010102, {[@rr={0x7, 0x7, 0x83, [@broadcast]}, @noop, @cipso={0x86, 0x29, 0x3, [{0x5, 0x11, "492700e88d5594478dda212696a8c0"}, {0x1, 0x12, "6a3ba2846daac3f739af7d34ddf76f66"}]}, @ra={0x94, 0x4}]}}}}}) (async) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000600)=0x0, &(0x7f0000000640)=0x4) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000700)={'syztnl2\x00', &(0x7f0000000680)={'syztnl1\x00', 0x0, 0x29, 0x5, 0x3, 0x4, 0x20, @private2={0xfc, 0x2, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x36}, 0x7, 0x1, 0xaf5, 0x47cf}}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000740)={'batadv_slave_1\x00', 0x0}) sendmsg$ETHTOOL_MSG_WOL_GET(r0, &(0x7f0000000900)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000780)={0x128, r1, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}]}]}, 0x128}, 0x1, 0x0, 0x0, 0x8000}, 0x81) (async) r16 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000980), r0) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000bc0)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000b80)={&(0x7f00000009c0)={0x1b8, r16, 0x8, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x66f}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}]}, @TIPC_NLA_BEARER={0x80, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x6, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x6}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0xd5, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x8}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x10, @empty, 0x2}}, {0x14, 0x2, @in={0x2, 0x4e22, @broadcast}}}}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x40}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x10001}]}, @TIPC_NLA_LINK={0x80, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xff}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}]}, @TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xf1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4b}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7f}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}]}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x54}, 0x4000040) (async, rerun: 32) sendmsg$ETHTOOL_MSG_FEATURES_GET(r0, &(0x7f0000000dc0)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000c40)={0x12c, r1, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6cecace44c0b73d4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x12c}, 0x1, 0x0, 0x0, 0x4000800}, 0x800) (rerun: 32) sendmsg$AUDIT_USER_TTY(0xffffffffffffffff, &(0x7f0000000f80)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000f40)={&(0x7f0000000e40)={0xe8, 0x464, 0x300, 0x70bd2b, 0x25dfdbfc, "6f2aedcb70cf33b9e174e220648ae6aa743f0037634dff5f9e727bad1c6a1d01f3d0ba01e0851e8b8e9560327361e478072be347b71579e54d457db5deb6b48f41974c523d3203794ccd014121403ed210ca119cf21cb7e2d42ab4274444d897a9b2d18709ffe82e4b1f6073e813528fb6f83fada0fe6c94a836102af34da3cb4bc67788534d36f7dcf7ae17a6586a6578da58efb52139f15f93fb9dc696a70c8b0fc2ac24f09042a680ffd125ff211a6746b16864cdea4219351d476905a8f1acf79e555839d4384d5f308aa5d85544b09f15331323a1", ["", "", "", ""]}, 0xe8}, 0x1, 0x0, 0x0, 0x20008040}, 0x2400c04c) (async, rerun: 32) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000001000)={0x0, @nl=@kern={0x10, 0x0, 0x0, 0x1}, @phonet={0x23, 0x2, 0x6b, 0x4}, @phonet={0x23, 0x52, 0x4, 0x7}, 0x2, 0x0, 0x0, 0x0, 0xc4, &(0x7f0000000fc0)='netpci0\x00', 0x7fffffffffffffff, 0x3f90b6d8, 0xde0}) (rerun: 32) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000001140)={'syztnl0\x00', &(0x7f00000010c0)={'ip6tnl0\x00', r11, 0x29, 0x9, 0x81, 0xfffffff8, 0x45, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @loopback, 0x7800, 0x40, 0x5, 0x9}}) sendmsg$ETHTOOL_MSG_DEBUG_GET(r0, &(0x7f0000001300)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000012c0)={&(0x7f0000001180)={0x140, r1, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r17}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x140}, 0x1, 0x0, 0x0, 0x20040041}, 0x4040040) (async) bind$packet(0xffffffffffffffff, &(0x7f0000001340)={0x11, 0x7fe9689893d247ed, r4, 0x1, 0xff, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x14) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000001400)={'ip6gre0\x00', &(0x7f0000001380)={'syztnl2\x00', r9, 0x29, 0x6, 0x6, 0xfffff12a, 0x49, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, @empty, 0x20, 0x8, 0x1000, 0x2}}) r18 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001480), r0) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000001640)={&(0x7f0000001440)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001600)={&(0x7f00000014c0)={0x12c, r18, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xc}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7a98}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}]}, @TIPC_NLA_NODE={0x74, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x800}, @TIPC_NLA_NODE_ID={0x52, 0x3, "93a5d13feed3c6fbc78a2f3a94d86ca237af192f58d0d7448f22f396938a9dddd7923a3e1ba73f702521ae00282cc7ab1eb4f53527a213483e5cfe34e16ee83fa4f34e01d9e5d7e20654d94730fc"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x5}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}]}, @TIPC_NLA_BEARER={0x34, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x12c}}, 0x8010) (async) r19 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_IPV6_IPSEC_POLICY(r19, 0x29, 0x22, &(0x7f0000001680)={{{@in=@broadcast, @in6=@loopback}}, {{@in=@multicast1}, 0x0, @in6=@private2}}, &(0x7f0000001780)=0xe8) 1.301962677s ago: executing program 1 (id=3144): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'bond0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="400d0000000000002800128008000100687372001c00028008000200", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=r2], 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x20008000) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000078000000030a01030000000000000000050000000900010073797a300000000008000540000000001c0008800c00024000000000000000000c00014000000000000000000900030073797a3200000000280004800800024000000000140003007465616d5f736c6176655f3000000000080001400000000114000000020a090100000000000000000000000014000000110001"], 0xd4}}, 0x4000010) 1.296271722s ago: executing program 3 (id=3145): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000080)=@req={0x43fc, 0x5, 0x0, 0x805}, 0x10) (async) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, 0x0, &(0x7f0000000280)) (async) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) recvmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000002780)=[{&(0x7f0000000480)=""/217, 0xd9}], 0x1}, 0x10101) (async) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) (async) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) (async) recvmmsg(r3, &(0x7f0000006e40)=[{{0x0, 0x0, &(0x7f0000005300)=[{&(0x7f0000000700)=""/86, 0x56}], 0x1}, 0x7}], 0x1, 0x2, 0x0) 1.172922391s ago: executing program 2 (id=3147): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x41010080}, 0xc, &(0x7f00000001c0)={&(0x7f0000000c00)=ANY=[@ANYBLOB="000000017e53fea584d43add50139509417a7eea1eed99c2ff575f0a68f4f08e226c259665f8c48d500bdcc12298d033c25f1737c3922943aad024c5b2722921c488af38dc16a94822afcd920359fda224d4f9c4c9493601308e485c98fae9444779e3d4010174ce5ee49fb094a990254ac2aa0ad8741e1794d9e7580da9922df936ce37db43a961c3ed077aa122c3220c2bc481704758344b5eccfe127d11d9a798e55b925760de90fd7fb4f8cb334f715a68f323eb980ff1cc12104d68c85fd6168a6079b56b1911f3db135666d58a7c0ee42be54bf1e974d7a8a45116bb7fadd72f297cfd11100c50efb916e887dd015bf27bd013f417dd38abb7d6c95a267e3173ac7625704ac4a27ee0c105304012b6396a644e9a04000000000000003abd01aa76ec9fce0a193bbba5aa1e786d96b26b872f7530e68ed37e865865a9ba7b2d156946f7245dc575a1c545bf8300c7e3b1769986198ca25b5b11f0722b5b6973b6644021c1ea5e66fb008a719a5838bb04fc787df709d0e24e66d25817f28d39a991a715132ce5fd927dcc0a4a4a63411dbe284ce1dba13d9979232c751fb51092b47ecbb156908c6288ee9bc9771b84a55f4b6d29cdb37758e36b130483ab9ef40f5dc163f533d4d618013cedbfd282360d15c673c3f3c6348f3df08273a881e220dae00ec81a357c71", @ANYRES16=r0, @ANYBLOB="00042cbd7000ffdbdf258700000008000300", @ANYRESDEC=r1, @ANYBLOB="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"/473], 0x158}, 0x1, 0x0, 0x0, 0x20004804}, 0x40840) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFBR(r2, 0x8940, &(0x7f0000000600)=@get={0x1, 0x0}) (async) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2, 0x0, 0x1}}, 0x2e) (async) r3 = socket$l2tp(0x2, 0x2, 0x73) (async) r4 = socket$pppl2tp(0x18, 0x1, 0x1) (async, rerun: 32) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) (rerun: 32) getsockopt$inet_sctp6_SCTP_EVENTS(r5, 0x84, 0xb, &(0x7f0000000040), &(0x7f0000000000)=0x8) ioctl$SIOCSIFMTU(r4, 0x89fb, &(0x7f0000000040)={'bond0\x00'}) (async, rerun: 64) bind$inet(r3, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) (rerun: 64) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) (rerun: 32) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x5c, 0x2, 0x6, 0x201, 0x0, 0x0, {0xc}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x60000}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x5c}}, 0x4020) (async, rerun: 64) r9 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) (rerun: 64) write$cgroup_int(r9, &(0x7f0000001480)=0x80000000003, 0x12) (async) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f000000c2c0)={0x0, 0xfffffffffffffe01, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_TARGET_NAME={0x10, 0x1, 'CONNSECMARK\x00'}, @NFTA_TARGET_INFO={0x5, 0x3, "ef"}, @NFTA_TARGET_REV={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_COMPAT={0x14, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x6006}]}]}], {0x14}}, 0xa0}}, 0x0) sendmsg$nl_route(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="300000001c0001000000000004086aa42d"], 0x30}}, 0x0) (async) sendmsg$L2TP_CMD_TUNNEL_CREATE(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYRES64=r0, @ANYRES16=r6, @ANYRESDEC=r5, @ANYRES32], 0x3c}}, 0x8010) 1.059601307s ago: executing program 1 (id=3149): mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) (async) r0 = socket$inet6(0xa, 0x80002, 0x0) (async) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_int(r1, 0x1, 0x6, 0x0, 0x0) (async) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @empty, 0xffffffff}, 0x1c) (async) r2 = accept4$inet6(r1, &(0x7f0000000180)={0xa, 0x0, 0x0, @dev}, &(0x7f00000001c0)=0x1c, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa) sendmsg$nl_route_sched(r3, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newtaction={0x68, 0x30, 0xb, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{}, 0x1, r5}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) (async, rerun: 64) r6 = getuid() (async, rerun: 64) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x4, 0x4, &(0x7f0000000280)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x8c}, [@call={0x85, 0x0, 0x0, 0x6b}]}, &(0x7f0000000000)='syzkaller\x00'}, 0x90) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000240)={{{@in6=@remote, @in6=@dev={0xfe, 0x80, '\x00', 0xb}, 0x4e20, 0xe, 0x4e20, 0x2, 0xa, 0xa0, 0x80, 0x32, r5, r6}, {0x46b4, 0xed, 0xcd6, 0x33a1, 0x8000000000000001, 0x5, 0x8}, {0x7, 0x9, 0x80000000}, 0x8, 0x6e6bb9, 0x0, 0x0, 0x1, 0x1}, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4d6, 0x2b}, 0x2, @in=@dev={0xac, 0x14, 0x14, 0x3f}, 0x3501, 0x0, 0x2, 0x6b, 0x4, 0x0, 0x2}}, 0xe8) (async, rerun: 64) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (rerun: 64) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) r8 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) (async) write$tun(r7, &(0x7f0000000080)={@val={0x8, 0x800}, @val={0x7, 0x3, 0x0, 0x9, 0x14}, @ipv4=@udp={{0x5, 0x4, 0x3, 0x1b, 0xb0, 0x66, 0x0, 0x40, 0x11, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x1c}}, {0x4e20, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x4, "31150048d5e06bdc339f0b82e56e05e9a3f461bd8f05c60ff304e7fee8a3221b", "b54970b8807c69e8aba2815e90ed451c3c1a9dff75f0f264e44cbb999c8f292e5aa143fd63ea1886e0cd425df0d8e5e7", "2bed86cd87cd326b66a3ca343e29e347dc61214ad793ad9f48b4d287", {"b15c14be998215153aaf76bbf0aead9a", "5cd7bcd4dc8e1acb0a78f4793cfd119c"}}}}}, 0xbe) (async, rerun: 64) r9 = socket$packet(0x11, 0x3, 0x300) (async, rerun: 64) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x2004c000}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r10, 0x8946, &(0x7f00000000c0)={'veth0_to_batadv\x00', &(0x7f0000000000)=@ethtool_gstrings={0x3d, 0x4}}) setsockopt$packet_tx_ring(r9, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) (async, rerun: 32) setsockopt$packet_int(r9, 0x107, 0x13, &(0x7f0000000000), 0x4) (rerun: 32) 1.035981402s ago: executing program 2 (id=3150): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000180)={0x3, 'veth0_to_bridge\x00', {0x3}, 0x6b}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000000c0)='neigh_create\x00', r1}, 0x18) r2 = socket(0x8000000010, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_LOOPBACK(r3, 0x65, 0x3, &(0x7f0000000200), 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000140)={'vcan0\x00', 0x0}) sendmsg$can_raw(r3, &(0x7f0000000340)={&(0x7f0000000180)={0x1d, r4}, 0x10, &(0x7f0000000300)={&(0x7f00000001c0)=@can={{0x4, 0x0, 0x0, 0x1}, 0x4, 0x0, 0x0, 0x0, "43b9dfb720598c2f"}, 0x10}, 0x1, 0x0, 0x0, 0x48001}, 0x4000085) write(r2, &(0x7f00000002c0)="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", 0xfc) r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) poll(&(0x7f0000000040)=[{r5}], 0x1, 0x5) sendto$llc(r5, 0x0, 0x0, 0x0, &(0x7f0000000380), 0x10) connect$llc(r5, &(0x7f0000000000)={0x1a, 0x7, 0x7, 0xf7, 0x10, 0x6, @random="2017f2c71cc2"}, 0x10) 991.551092ms ago: executing program 4 (id=3151): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x11, 0x25, 0x5a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0xfffffffe}, 0x40) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x4, &(0x7f0000000000)=@framed={{}, [@generic={0x81, 0xb}]}, &(0x7f0000000040)='syzkaller\x00'}, 0x90) 845.588891ms ago: executing program 4 (id=3152): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000600)={0x0, 0x0, 0x46, 0x0, 0x1}, 0x28) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000080)="5c00000011006bcc9e3be34c6e17aa310769876c1d0000007ea60864160af36514001ac004000202080002000600010076e6f06cea2618c3ecb525c89c32f292b156a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r5, @ANYBLOB="08002600851600030a001800"], 0x4c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)={0x30, r2, 0x5, 0x4000, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_SCAN_FREQUENCIES={0x14, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x8}, {0x8, 0x0, 0xffffffff}]}]}, 0x30}}, 0x0) 681.497695ms ago: executing program 4 (id=3153): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newtaction={0x104, 0x30, 0x1, 0x70bd29, 0x0, {}, [{0xf0, 0x1, [@m_csum={0xec, 0x12, 0x0, 0x0, {{0x9}, {0x74, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x81, 0x3, 0xffffffffffffffff, 0x0, 0x10000}, 0x5b}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x10001, 0x4, 0x3, 0x6}, 0x75}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xd, 0x5, 0x6, 0xcf8, 0x8}, 0x34}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x9, 0x0, 0x3, 0x0, 0x8}, 0x7d}}]}, {0x4f, 0x6, "3ea13e50e1870920f0849ceea17f1f1a786d6b7584ad8f78d9c95b2261af01782f979b832ee968f02e6a1dbe7224f595c47aaddfb093db93b5e04fe17862f8af500c1b5dcc50b5fc96db17"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0x104}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$rxrpc(0x21, 0x2, 0xa) r3 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r3, &(0x7f0000000440)=[{{&(0x7f0000000280)={0x2, 0x4e22, @private=0xa010101}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000200)="9c", 0x1}], 0x1}}, {{&(0x7f0000000080)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10, &(0x7f0000000180)=[{&(0x7f00000000c0)="99", 0x1}], 0x1}}], 0x2, 0x48000) close(0x3) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r2, 0x110, 0x4, &(0x7f0000000380)=0x1, 0x4) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYRES64=r1, @ANYRESOCT=r1, @ANYRESHEX=r1], 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$inet(0x2b, 0x801, 0x0) connect$inet(r6, 0x0, 0x0) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000340), r5) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010129bd7000fddbdf25310000000a0001007770616e34000000050035000b000000050035007600000005003a0009000000"], 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) r11 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r11, 0x8913, &(0x7f0000000000)) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000100001ff00000000000000000000000a2c000000050a01020000000000000000020000000900030073797a32000000000900010073797a300000000014000000020a031747d21400000000000000000014000000110001"], 0x68}, 0x1, 0x0, 0x0, 0x4006000}, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYRESOCT=r8, @ANYRES16, @ANYRES32=r10, @ANYRESDEC=r7, @ANYBLOB="48ebfa4b9d306b666bb03425cb346044a5e7eb9bc0fc891a9530285fb1eec5d00d045b0fb0353b6121c8ccea3473301399bf6a04c8a6174e440a6a5aa1796088166fb6768cf5fbe362eda2546858cdf2da5065785ff72ed4f1caf3a322264315107a7dadf40dfd41581bb2dd6e66420e08f3c72527e7d99bdf1d19fca61840e07ad9b11cd9f029b6ceb5c6e0484f0fdf453f3d1365a98a97e8518fdc1f7c2715748783e91b41ed44a160ef45fe0bfc9d1cd55e513ef743364f201a1c5c9308e8c9dd67026314f33b382d48b1"], 0xe8}, 0x1, 0x0, 0x0, 0x40030}, 0x24008004) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000100001ff00000000000000000000000a2c00020000000900030073797a32000000000900010073797a30000000000b"], 0x68}}, 0x0) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r13, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000100001000b000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f08000340000000045c0000000c0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xe8}}, 0x8040) ioctl$sock_netrom_SIOCADDRT(r4, 0x890b, 0x0) ioctl$sock_netrom_SIOCADDRT(r4, 0x890b, &(0x7f0000000000)={0x1, @null, @bpq0, 0xfff, 'syz0\x00', @null, 0xffffffff, 0x4, [@null, @null, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @default]}) 459.409231ms ago: executing program 4 (id=3154): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000580)={0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1200000024000000040000000200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000003000000000000000000000000002c98"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000780)={{r2, 0xffffffffffffffff}, &(0x7f0000000700), &(0x7f0000000740)=r1}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r3, &(0x7f00000007c0), 0x0}, 0x20) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt(r4, 0x400000000000003a, 0x1, 0x0, &(0x7f0000000000)) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="57e671c4a83cf515e0000000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000200012800b000100697036746e6c00001000028004001300050009000400000008000400ff0f0000"], 0x48}}, 0x0) 458.973495ms ago: executing program 1 (id=3155): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000500)=@ipv4_newroute={0x2c, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x14, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x6}, [@RTA_NH_ID={0x8, 0x1e, 0xa8600}, @RTA_GATEWAY={0x8, 0x5, @rand_addr=0x64010100}]}, 0x2c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) recvmsg$can_bcm(r0, &(0x7f0000000580)={&(0x7f0000000080)=@isdn, 0x80, &(0x7f00000004c0)=[{&(0x7f00000001c0)=""/210, 0xd2}, {&(0x7f0000000100)=""/125, 0x7d}, {&(0x7f00000002c0)=""/172, 0xac}, {&(0x7f0000000380)=""/6, 0x6}, {&(0x7f00000003c0)=""/229, 0xe5}], 0x5}, 0x40010020) sendmsg$nl_route(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=@newlink={0x210, 0x10, 0x200, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ppp={{0x8}, {0xc, 0x2, 0x0, 0x1, {0x8, 0x1, r0}}}}, @IFLA_VF_PORTS={0x1b0, 0x18, 0x0, 0x1, [{0x54, 0x1, 0x0, 0x1, [@IFLA_PORT_HOST_UUID={0x14, 0x5, "3a670bf00c50e9e8b1acea08283ff9e8"}, @IFLA_PORT_VF={0x8, 0x1, 0x2}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x8}, @IFLA_PORT_VF={0x8, 0x1, 0x4}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x7}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x1}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "caf471916797000ea91bbd663d6e6275"}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8, 0x1, 0x68d}, @IFLA_PORT_PROFILE={0xa, 0x2, 'rose0\x00'}]}, {0x6c, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0x8, 0x2, 'ppp\x00'}, @IFLA_PORT_PROFILE={0x8, 0x2, 'ppp\x00'}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "b6524aa46ec5fa4af00ffd2b105e3c60"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "021326ef06d2fda49147b7c459f33280"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "85b551e174be7faa1e8b602702fb1786"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "b8c763f2e2ae74e139c1a25937aec127"}, @IFLA_PORT_PROFILE={0x5, 0x2, '\x00'}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "9042ec0c91432b4554017e828a66b4e3"}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xb, 0x2, '[&{\xca.%\x00'}, @IFLA_PORT_REQUEST={0x5, 0x6, 0xfd}]}, {0x60, 0x1, 0x0, 0x1, [@IFLA_PORT_HOST_UUID={0x14, 0x5, "9c7681ef088c09bc757a349750ae18e8"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "a0df2882cae53184e110ab2a8195e999"}, @IFLA_PORT_REQUEST={0x5, 0x6, 0xc}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "1f8fe3f5f5058388716478c120794ad7"}, @IFLA_PORT_REQUEST={0x5, 0x6, 0xf}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x5}, @IFLA_PORT_REQUEST={0x5}]}, {0x2c, 0x1, 0x0, 0x1, [@IFLA_PORT_HOST_UUID={0x14, 0x5, "fc84b1af690fef40c40219f14899447d"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "50a2fae32b56acd2312510985a103798"}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_HOST_UUID={0x14, 0x5, "5a07e8e99b30295f02a9a04795a89a04"}]}]}, @IFLA_TXQLEN={0x8, 0xd, 0x6}, @IFLA_PHYS_PORT_ID={0x17, 0x22, "af60da98eb9c4ccd3383aa2aa76a0b0a7d2f48"}, @IFLA_LINKMODE={0x5, 0x11, 0x9}]}, 0x210}, 0x1, 0x0, 0x0, 0x10}, 0x4008004) ioctl$sock_ifreq(r0, 0x8990, &(0x7f0000000180)={'bond0\x00', @ifru_names='rose0\x00'}) 414.979243ms ago: executing program 4 (id=3156): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000005e8ff000000000023000000611108000000000085000004cc0000009500000000000000"], &(0x7f0000000100)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x6f, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xf}, 0x94) r0 = socket(0x11, 0x3, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(r0, 0x107, 0x14, 0x0, 0x20000000) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000080)={'ip6gre0\x00', &(0x7f0000000000)={'ip6gre0\x00', 0x0, 0x29, 0x1, 0x10, 0x5, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, @private1, 0x700, 0x8, 0x1, 0x7}}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000140)={@private2, @loopback, @local, 0x5ca, 0x9, 0x3, 0x0, 0x0, 0x240010, r1}) 346.404563ms ago: executing program 3 (id=3157): unshare(0x22020600) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x7fff, 0x7}, 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000080)={r0, 0x0, 0x0, 0x4}, 0x20) unshare(0x42000000) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000003c0)="89000000120081ae08060cdc030000007f1be3f74001000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00014009080c00000000009bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x9b}], 0x1}, 0x0) 287.026336ms ago: executing program 4 (id=3158): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f00000016c0)={0x10, 0x0, 0x25dfdbfb, 0x40000044}, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWSET={0x58, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x11c}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x90}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x80}, 0x1, 0x0, 0x0, 0x4000850}, 0x0) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x4, &(0x7f00000001c0)=@raw=[@map_idx={0x18, 0x0, 0x5, 0x0, 0xe}, @map_val={0x18, 0x2, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x12}], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0xa, 0x3}, 0x8, 0x10, &(0x7f0000000100)={0x5, 0x9, 0x1dd, 0x4}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000300)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1], 0x0, 0x10, 0xd25}, 0x94) r4 = socket$packet(0x11, 0x2, 0x300) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="7000000010000100"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000500012800e0001006970366772657461700000003c000280140007002001000000000000000000000000000014000600fe80000000000000000000000000001508000100", @ANYRES32=r6, @ANYBLOB='\b\x00\r\x00'], 0x70}}, 0x0) sendto$packet(r4, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x11, 0x88a8, r6, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}}, 0x14) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'hsr0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r7, {0x4}, {0x0, 0x9}, {0xfff3}}}, 0x24}}, 0x0) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x1}, 0x50) r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000680)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xb8, 0xb8, 0x3, [@volatile={0x5}, @union={0xb, 0x7, 0x0, 0x5, 0x1, 0x1, [{0xc, 0x0, 0xb6c2}, {0xa, 0x1, 0x4}, {0xd, 0x4, 0x6}, {0x2, 0x4, 0xff}, {0x10, 0x5, 0x6}, {0xc, 0x0, 0x9}, {0xe, 0x3, 0x1}]}, @var={0x2, 0x0, 0x0, 0xe, 0x5, 0x2}, @volatile={0xa, 0x0, 0x0, 0x9, 0x5}, @volatile={0x2, 0x0, 0x0, 0x9, 0x5}, @volatile={0x4, 0x0, 0x0, 0x9, 0x4}, @volatile={0x4, 0x0, 0x0, 0x9, 0x4}, @float={0x4, 0x0, 0x0, 0x10, 0x8}]}, {0x0, [0x61]}}, &(0x7f0000000780)=""/99, 0xd3, 0x63, 0x0, 0x6}, 0x28) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000b00)={r3, 0xe0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000840)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x9, &(0x7f0000000880)=[0x0], &(0x7f00000008c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x4a, &(0x7f0000000900)=[{}], 0x8, 0x10, &(0x7f0000000940), &(0x7f0000000980), 0x8, 0x8a, 0x8, 0x8, &(0x7f00000009c0)}}, 0x10) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg$unix(r12, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000f40)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x78}, 0x0) r14 = socket(0x2000000000000021, 0x2, 0x10000000000002) sendmsg$NFC_CMD_DEV_UP(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000e00)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r13, @ANYRESOCT=r14], 0x1c}}, 0x8004) r15 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000980)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x1c, &(0x7f00000002c0)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xfffff7dd}, {{0x18, 0x1, 0x1, 0x0, r15}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x1}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0x110}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x7}}}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0xa, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000}, 0x94) r16 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r16, 0x0) r17 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="02000000d8200400000008000000010000008000", @ANYRES32, @ANYBLOB='c\n\x00'/20, @ANYRES32=r6, @ANYRES32, @ANYBLOB="00000000040000000200"/28], 0x50) r18 = bpf$MAP_CREATE(0x0, &(0x7f0000000bc0)=@bloom_filter={0x1e, 0x2, 0xfff, 0x1000, 0x1, 0x1, 0x186, '\x00', r7, 0xffffffffffffffff, 0x0, 0x3, 0x3, 0xd}, 0x50) r19 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000c40)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4, 0x5}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000d40)={0x1c, 0x11, &(0x7f00000004c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xb}, {{0x18, 0x1, 0x1, 0x0, r8}}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x1e8180, 0x0, 0x0, 0x0, 0x4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000140)='syzkaller\x00', 0x401, 0xcc, &(0x7f0000000580)=""/204, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x10, r9, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000800)={0x3, 0xf, 0x6, 0x5}, 0x10, r10, r3, 0x2, &(0x7f0000000cc0)=[r13, 0xffffffffffffffff, r16, r17, r18, r19], &(0x7f0000000d00)=[{0x3, 0x3, 0x6, 0x7}, {0x1, 0x2, 0xc, 0xc}], 0x10, 0x3}, 0x94) 282.170154ms ago: executing program 1 (id=3159): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000080)='svc_unregister\x00', r0, 0x0, 0xfaf}, 0x18) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bind$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x4e22, @multicast2}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11000000040000000400000022bf000000000000", @ANYRES32, @ANYBLOB="0000000000000000000200"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r2, &(0x7f0000000140), &(0x7f0000000080)=@udp}, 0x20) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000080)='svc_unregister\x00', r3, 0x0, 0xfaf}, 0x18) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x100200, 0x0) ioctl$TUNGETFEATURES(r4, 0x800454cf, &(0x7f0000000080)) ioctl$FITHAW(r4, 0xc0045878) r5 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001a80)="d8000000180081064e81f782db4cb904021d080006007c09e8fe55a10a0015000500142603600e1208000f0000000401a80016002000014006000000035c0461c1d60008000000000000fb8000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f0f49e119c849ea6e5a0fc55e4cde205a214d6102d6dcbf33fb5ce3bb9ad809d5e1cace81ed0bffece0b42a1a83d5f59e3d", 0xd8}], 0x1}, 0x0) r7 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$SEG6_CMD_GET_TUNSRC(r5, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="000029bd70dbdf25040000000500050048add0bf417c"], 0x1c}, 0x1, 0x0, 0x0, 0x5}, 0x80) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x9) setsockopt$inet6_tcp_int(r8, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r8, &(0x7f0000000300)={0xa, 0x3, 0x8, @loopback, 0xfffffffc}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r8, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r8, 0x6, 0x14, &(0x7f00000001c0)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, &(0x7f0000000000)=@gcm_256={{0x303}, "41328ac34a4ad2ba", "e8582491a0c4050000000000f6542a9b6800000000000000003967d2daa45b4e", "61241765", "89b06aff130000fd"}, 0x38) sendmsg$DEVLINK_CMD_TRAP_SET(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)=ANY=[], 0x14}}, 0x8000) sendmsg$inet(r8, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000019600)=[@ip_tos_int={{0x14, 0x11a, 0x1, 0x7fffffff}}], 0x18}, 0x0) sendmsg$netlink(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="1400000025000100000000000000040006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) 104.702465ms ago: executing program 1 (id=3160): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000240)=0x10) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x7d, &(0x7f00000009c0)=@assoc_value={r1, 0x3}, 0x8) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000180), 0x8) ioctl$SIOCGIFMTU(r5, 0x8921, &(0x7f0000000300)={'vlan1\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES64=r4, @ANYBLOB="00dcbca0c42200"/18, @ANYRES32=r3, @ANYBLOB="080005000b00"], 0x24}}, 0x0) r6 = socket$rxrpc(0x21, 0x2, 0x2) sendto$rxrpc(r6, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r6, 0x110, 0x3) r7 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000340)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r9, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x10, "00000900000000000000000000001010"}}}]}, 0x48}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r10, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00', 0x0}) syz_80211_join_ibss(&(0x7f0000000280)='wlan0\x00', &(0x7f0000000340)=@random='\r', 0x1, 0x0) bind$xdp(r7, &(0x7f0000000100)={0x2c, 0xe, r11, 0x36, r7}, 0x10) 0s ago: executing program 1 (id=3161): syz_init_net_socket$ax25(0x3, 0x3, 0xce) kernel console output (not intermixed with test programs): d/0x1c0 [ 133.099664][ T8670] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 133.099691][ T8670] ? __asan_memset+0x22/0x50 [ 133.099716][ T8670] hash_sendmsg+0x4f4/0x11d0 [ 133.099759][ T8670] ? __pfx_hash_sendmsg+0x10/0x10 [ 133.099782][ T8670] __sock_sendmsg+0x219/0x270 [ 133.099811][ T8670] ____sys_sendmsg+0x52d/0x830 [ 133.099836][ T8670] ? __pfx_____sys_sendmsg+0x10/0x10 [ 133.099865][ T8670] ? import_iovec+0x74/0xa0 [ 133.099889][ T8670] ___sys_sendmsg+0x21f/0x2a0 [ 133.099912][ T8670] ? __pfx____sys_sendmsg+0x10/0x10 [ 133.099967][ T8670] ? __fget_files+0x2a/0x420 [ 133.099981][ T8670] ? __fget_files+0x3a0/0x420 [ 133.100004][ T8670] __sys_sendmmsg+0x227/0x430 [ 133.100030][ T8670] ? __pfx___sys_sendmmsg+0x10/0x10 [ 133.100048][ T8670] ? do_futex+0x395/0x420 [ 133.100076][ T8670] ? fd_install+0x97/0x540 [ 133.100117][ T8670] ? rcu_is_watching+0x15/0xb0 [ 133.100140][ T8670] __x64_sys_sendmmsg+0xa0/0xc0 [ 133.100162][ T8670] do_syscall_64+0xfa/0x3b0 [ 133.100179][ T8670] ? lockdep_hardirqs_on+0x9c/0x150 [ 133.100195][ T8670] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.100211][ T8670] ? clear_bhb_loop+0x60/0xb0 [ 133.100231][ T8670] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.100247][ T8670] RIP: 0033:0x7f9aa838eec9 [ 133.100267][ T8670] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 133.100281][ T8670] RSP: 002b:00007f9aa915c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 133.100299][ T8670] RAX: ffffffffffffffda RBX: 00007f9aa85e5fa0 RCX: 00007f9aa838eec9 [ 133.100318][ T8670] RDX: 0000000000000001 RSI: 0000200000000640 RDI: 0000000000000006 [ 133.100328][ T8670] RBP: 00007f9aa8411f91 R08: 0000000000000000 R09: 0000000000000000 [ 133.100338][ T8670] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 133.100348][ T8670] R13: 00007f9aa85e6038 R14: 00007f9aa85e5fa0 R15: 00007ffecd58dcb8 [ 133.100374][ T8670] [ 133.220441][ T8679] netlink: 'syz.2.760': attribute type 4 has an invalid length. [ 133.484257][ T8686] netlink: 'syz.4.761': attribute type 3 has an invalid length. [ 134.565381][ T8741] netlink: 'syz.0.778': attribute type 5 has an invalid length. [ 134.630162][ T8742] netlink: 'syz.0.778': attribute type 2 has an invalid length. [ 135.376415][ T8748] __nla_validate_parse: 5 callbacks suppressed [ 135.376433][ T8748] netlink: 56 bytes leftover after parsing attributes in process `syz.0.780'. [ 135.414121][ T8748] netlink: 56 bytes leftover after parsing attributes in process `syz.0.780'. [ 135.494473][ T8757] veth0: entered promiscuous mode [ 135.510956][ T8754] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 135.541708][ T8757] netlink: 4 bytes leftover after parsing attributes in process `syz.2.784'. [ 135.881577][ T8783] netlink: 4 bytes leftover after parsing attributes in process `syz.2.789'. [ 136.010290][ T8790] netlink: 4 bytes leftover after parsing attributes in process `syz.1.792'. [ 136.024088][ T8790] netlink: 8 bytes leftover after parsing attributes in process `syz.1.792'. [ 136.162289][ T8799] netlink: 8 bytes leftover after parsing attributes in process `syz.1.795'. [ 136.177048][ T8801] netlink: 8 bytes leftover after parsing attributes in process `syz.1.795'. [ 136.184161][ T8802] netlink: 'syz.2.793': attribute type 1 has an invalid length. [ 136.232467][ T8802] 8021q: adding VLAN 0 to HW filter on device bond4 [ 136.276592][ T8750] syz.4.781 (8750) used greatest stack depth: 17864 bytes left [ 136.377982][ T8812] openvswitch: netlink: Tunnel attr 7 has unexpected len 8 expected 0 [ 136.502079][ T8824] netlink: 4 bytes leftover after parsing attributes in process `syz.0.802'. [ 136.518198][ T8819] º: renamed from veth1_vlan (while UP) [ 136.567797][ T8824] (unnamed net_device) (uninitialized): Invalid ad_actor_system MAC address. [ 136.595970][ T8824] (unnamed net_device) (uninitialized): option ad_actor_system: invalid value (1) [ 136.596070][ T8826] netlink: 4 bytes leftover after parsing attributes in process `syz.3.804'. [ 136.789058][ T8836] netlink: 'syz.2.807': attribute type 21 has an invalid length. [ 136.901114][ T8849] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 137.104020][ T8859] netlink: 'syz.1.817': attribute type 7 has an invalid length. [ 137.144020][ T8859] netlink: 'syz.1.817': attribute type 8 has an invalid length. [ 137.197220][ T8867] xt_HMARK: spi-set and port-set can't be combined [ 137.582966][ T8891] netlink: 'syz.3.828': attribute type 32 has an invalid length. [ 137.905123][ T8907] netlink: 'syz.4.833': attribute type 1 has an invalid length. [ 137.934249][ T8907] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 137.943719][ T8909] gretap0: entered promiscuous mode [ 138.026791][ T8913] delete_channel: no stack [ 138.041328][ T8916] 0ªî{X¹¦: renamed from gretap0 [ 138.065283][ T8916] 0ªî{X¹¦: left promiscuous mode [ 138.066142][ T8917] netlink: 'syz.3.834': attribute type 39 has an invalid length. [ 138.078651][ T8916] 0ªî{X¹¦: entered allmulticast mode [ 138.093159][ T8916] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 138.874673][ T8956] netlink: 'syz.0.846': attribute type 10 has an invalid length. [ 138.968734][ T8956] bridge0: port 2(bridge_slave_1) entered disabled state [ 138.989927][ T8956] bridge_slave_1: left allmulticast mode [ 138.995814][ T8956] bridge_slave_1: left promiscuous mode [ 139.001762][ T8956] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.067046][ T8956] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 139.374440][ T8980] netlink: 'syz.3.855': attribute type 1 has an invalid length. [ 139.494704][ T8992] xt_socket: unknown flags 0x50 [ 139.642612][ T8998] vlan3: entered promiscuous mode [ 139.665705][ T8998] bridge0: entered promiscuous mode [ 139.737533][ T9004] netlink: 'syz.4.863': attribute type 1 has an invalid length. [ 140.923992][ T9080] sctp: [Deprecated]: syz.1.889 (pid 9080) Use of struct sctp_assoc_value in delayed_ack socket option. [ 140.923992][ T9080] Use struct sctp_sack_info instead [ 140.990812][ T9067] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 141.039339][ T9067] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 141.117515][ T9090] can: request_module (can-proto-5) failed. [ 141.253637][ T9067] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 141.285248][ T9067] mac80211_hwsim hwsim8 wlan1: left allmulticast mode [ 141.313860][ T9067] bridge1: left promiscuous mode [ 141.321475][ T9067] bridge1: left allmulticast mode [ 141.330788][ T9067] geneve2: left promiscuous mode [ 141.338779][ T9067] geneve2: left allmulticast mode [ 141.350744][ T9067] veth5: left allmulticast mode [ 141.415975][ T8526] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 141.467086][ T8526] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.493121][ T8526] netdevsim netdevsim2 netdevsim0: unset [1, 1] type 2 family 0 port 19999 - 0 [ 141.509442][ T8526] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 141.535391][ T8526] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.563464][ T8526] netdevsim netdevsim2 netdevsim1: unset [1, 1] type 2 family 0 port 19999 - 0 [ 141.594896][ T9103] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap0 [ 141.618670][ T9103] gretap0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 141.636143][ T9103] gretap0: entered promiscuous mode [ 141.642352][ T9103] gretap0: entered allmulticast mode [ 141.653545][ T8526] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 141.662801][ T8526] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.679569][ T8526] netdevsim netdevsim2 netdevsim2: unset [1, 1] type 2 family 0 port 19999 - 0 [ 141.693486][ T8526] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 141.703558][ T8526] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.717483][ T8526] netdevsim netdevsim2 netdevsim3: unset [1, 1] type 2 family 0 port 19999 - 0 [ 141.738018][ T9109] dvmrp1: entered allmulticast mode [ 141.941579][ T9128] netlink: 'syz.0.900': attribute type 1 has an invalid length. [ 141.951366][ T9128] netlink: 'syz.0.900': attribute type 11 has an invalid length. [ 141.963005][ T9128] __nla_validate_parse: 20 callbacks suppressed [ 141.963021][ T9128] netlink: 224 bytes leftover after parsing attributes in process `syz.0.900'. [ 141.968247][ T9131] netlink: 52 bytes leftover after parsing attributes in process `syz.2.901'. [ 142.104634][ T9138] syzkaller1: entered promiscuous mode [ 142.113412][ T9138] syzkaller1: entered allmulticast mode [ 142.165005][ T9140] netlink: 44 bytes leftover after parsing attributes in process `syz.2.903'. [ 142.449730][ T9159] netlink: 8 bytes leftover after parsing attributes in process `syz.4.909'. [ 142.931495][ T9188] net veth1_virt_wifi .: renamed from virt_wifi0 [ 143.257584][ T9205] netlink: 'syz.4.926': attribute type 8 has an invalid length. [ 143.455381][ T9216] netlink: 4 bytes leftover after parsing attributes in process `syz.4.930'. [ 143.500514][ T9223] netlink: 20 bytes leftover after parsing attributes in process `syz.1.933'. [ 143.559031][ T9223] sctp: [Deprecated]: syz.1.933 (pid 9223) Use of struct sctp_assoc_value in delayed_ack socket option. [ 143.559031][ T9223] Use struct sctp_sack_info instead [ 143.681135][ T9228] netlink: 'syz.4.936': attribute type 10 has an invalid length. [ 143.722714][ T9228] syz_tun: left allmulticast mode [ 143.758529][ T9228] syz_tun: entered allmulticast mode [ 143.767011][ T9228] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 143.807606][ T9234] pim6reg: entered allmulticast mode [ 143.892316][ T9235] 8021q: adding VLAN 0 to HW filter on device bond6 [ 143.910436][ T9228] syz_tun: entered promiscuous mode [ 143.916707][ T9228] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 143.926751][ T9228] bond6: (slave macvlan2): Enslaving as a backup interface with an up link [ 144.020469][ T9247] netlink: 'syz.1.939': attribute type 1 has an invalid length. [ 144.034713][ T9249] veth1_to_bond: entered allmulticast mode [ 144.071825][ T9252] netlink: 4 bytes leftover after parsing attributes in process `syz.1.939'. [ 144.450820][ T9283] netlink: 'syz.2.948': attribute type 14 has an invalid length. [ 144.470326][ T9273] vxcan1 speed is unknown, defaulting to 1000 [ 144.489064][ T9273] vxcan1 speed is unknown, defaulting to 1000 [ 144.500459][ T9273] vxcan1 speed is unknown, defaulting to 1000 [ 144.765762][ T9273] infiniband syz2: set active [ 144.770783][ T9273] infiniband syz2: added vxcan1 [ 144.786070][ T10] vxcan1 speed is unknown, defaulting to 1000 [ 144.831117][ T9273] RDS/IB: syz2: added [ 144.836217][ T9273] smc: adding ib device syz2 with port count 1 [ 144.842701][ T9273] smc: ib device syz2 port 1 has pnetid [ 144.850782][ T10] vxcan1 speed is unknown, defaulting to 1000 [ 144.861518][ T9273] vxcan1 speed is unknown, defaulting to 1000 [ 145.075481][ T9273] vxcan1 speed is unknown, defaulting to 1000 [ 145.294176][ T9314] veth0_to_team: entered promiscuous mode [ 145.327310][ T9273] vxcan1 speed is unknown, defaulting to 1000 [ 145.432308][ T9316] netlink: 'syz.4.958': attribute type 1 has an invalid length. [ 145.599883][ T9273] vxcan1 speed is unknown, defaulting to 1000 [ 145.904013][ T9333] netlink: 104 bytes leftover after parsing attributes in process `syz.3.964'. [ 146.007658][ T9273] vxcan1 speed is unknown, defaulting to 1000 [ 146.029626][ T9337] ieee802154 phy0 wpan0: encryption failed: -22 [ 146.610270][ T9352] netlink: 'syz.3.972': attribute type 1 has an invalid length. [ 146.651670][ T9356] netlink: 28 bytes leftover after parsing attributes in process `syz.3.972'. [ 146.667861][ T9359] netlink: 8 bytes leftover after parsing attributes in process `syz.0.973'. [ 146.713502][ T9352] 8021q: adding VLAN 0 to HW filter on device bond6 [ 146.728314][ T9352] bond5: (slave bond6): making interface the new active one [ 146.740315][ T9352] bond5: (slave bond6): Enslaving as an active interface with an up link [ 146.769372][ T9353] bond5: (slave gretap4): Enslaving as a backup interface with an up link [ 146.788176][ T9356] 8021q: adding VLAN 0 to HW filter on device bond5 [ 147.169370][ T9390] netlink: 'syz.0.980': attribute type 1 has an invalid length. [ 147.315466][ T9398] bond3: (slave gretap1): making interface the new active one [ 147.349731][ T9381] "syz.0.980" (9381) uses obsolete ecb(arc4) skcipher [ 147.359690][ T9398] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 147.403737][ T9403] bridge_slave_0: entered promiscuous mode [ 147.508930][ T9410] netlink: 12 bytes leftover after parsing attributes in process `syz.0.986'. [ 147.627762][ T5864] block nbd0: Receive control failed (result -32) [ 147.690925][ T9418] netdevsim netdevsim2 ÿÿÿÿÿÿ: renamed from netdevsim0 [ 147.731446][ T9425] netlink: 28 bytes leftover after parsing attributes in process `syz.0.990'. [ 147.741787][ T9425] netlink: 12 bytes leftover after parsing attributes in process `syz.0.990'. [ 147.751606][ T9425] openvswitch: netlink: Flow actions attr not present in new flow. [ 147.915902][ T9432] netlink: 12 bytes leftover after parsing attributes in process `syz.0.992'. [ 148.358810][ T9454] netlink: 'syz.4.998': attribute type 1 has an invalid length. [ 148.367806][ T9454] netlink: 4 bytes leftover after parsing attributes in process `syz.4.998'. [ 148.381202][ T9452] netlink: 52 bytes leftover after parsing attributes in process `syz.4.998'. [ 148.381776][ T9442] netlink: 16 bytes leftover after parsing attributes in process `syz.3.996'. [ 148.425478][ T9457] openvswitch: netlink: Message has 4 unknown bytes. [ 148.454874][ T9457] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 148.551122][ T9459] netlink: 'syz.2.999': attribute type 1 has an invalid length. [ 148.701925][ T9471] IPVS: set_ctl: invalid protocol: 137 100.1.1.1:20002 [ 148.720002][ T9476] netlink: 'syz.0.1005': attribute type 10 has an invalid length. [ 148.776700][ T9476] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 148.873797][ T9483] netlink: 'syz.1.1007': attribute type 1 has an invalid length. [ 148.909033][ T9483] netlink: 'syz.1.1007': attribute type 2 has an invalid length. [ 148.993675][ T9493] mac80211_hwsim hwsim5 ÿ: renamed from wlan1 [ 148.997754][ T9492] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1011'. [ 149.057634][ T9498] netlink: 'syz.3.1008': attribute type 4 has an invalid length. [ 149.071321][ T9498] netlink: 17 bytes leftover after parsing attributes in process `syz.3.1008'. [ 149.204038][ T9492] tipc: Enabled bearer , priority 0 [ 149.211621][ T9500] syzkaller0: entered promiscuous mode [ 149.217217][ T9500] syzkaller0: entered allmulticast mode [ 149.234032][ T9507] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1014'. [ 149.298328][ T9504] tipc: Resetting bearer [ 149.353161][ T9504] tipc: Disabling bearer [ 149.601711][ T9528] 8021q: adding VLAN 0 to HW filter on device bond0 [ 149.762775][ T9536] 1ªî{X¹¦: renamed from 30ªî{X¹¦ (while UP) [ 149.807845][ T9536] A link change request failed with some changes committed already. Interface 31ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 149.881307][ T8529] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 149.912941][ T8529] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 149.927462][ T8529] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 149.978102][ T8529] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 150.476613][ T9606] team0 (unregistering): Port device team_slave_0 removed [ 150.516470][ T9606] team0 (unregistering): Port device team_slave_1 removed [ 151.783476][ T9736] netlink: 'syz.0.1055': attribute type 4 has an invalid length. [ 151.786757][ T9740] tipc: Enabled bearer , priority 0 [ 151.831271][ T9736] netlink: 'syz.0.1055': attribute type 4 has an invalid length. [ 151.837035][ T9740] syzkaller0: entered promiscuous mode [ 151.846159][ T9740] syzkaller0: entered allmulticast mode [ 151.923175][ T9743] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 151.951761][ T9738] tipc: Resetting bearer [ 152.063696][ T9738] tipc: Disabling bearer [ 152.399786][ T9763] vcan0: tx drop: invalid sa for name 0x0000000000000003 [ 152.546472][ T9763] team0: Port device team_slave_1 removed [ 152.625622][ T9778] __nla_validate_parse: 13 callbacks suppressed [ 152.625642][ T9778] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1067'. [ 152.657289][ T9778] openvswitch: netlink: Flow key attr not present in new flow. [ 152.669117][ T9778] netlink: 'syz.4.1067': attribute type 1 has an invalid length. [ 152.745749][ T9778] netlink: 'syz.4.1067': attribute type 2 has an invalid length. [ 152.753825][ T9770] netlink: 'syz.4.1067': attribute type 1 has an invalid length. [ 152.782379][ T9770] netlink: 'syz.4.1067': attribute type 2 has an invalid length. [ 152.893691][ T9790] gtp0: entered promiscuous mode [ 152.914089][ T9790] gtp0: entered allmulticast mode [ 153.516260][ T9831] netlink: 'syz.2.1082': attribute type 1 has an invalid length. [ 153.571820][ T9832] bond5 (unregistering): Released all slaves [ 153.693263][ T9836] netlink: 'syz.4.1084': attribute type 1 has an invalid length. [ 153.707188][ T9838] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1083'. [ 153.793022][ T9836] macvlan3: entered promiscuous mode [ 153.812813][ T9846] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1085'. [ 153.821152][ T9836] macvlan3: entered allmulticast mode [ 153.859782][ T9836] bond7: entered promiscuous mode [ 153.866008][ T9836] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 153.890094][ T9836] bond7: left promiscuous mode [ 154.113920][ T9867] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1090'. [ 154.148943][ T9867] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1090'. [ 154.404611][ T9883] netlink: 'syz.1.1096': attribute type 178 has an invalid length. [ 154.522076][ T9885] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1097'. [ 154.555299][ T9889] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1097'. [ 154.574576][ T9890] : renamed from bridge_slave_0 [ 154.738925][ T9899] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1100'. [ 154.761676][ T9899] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1100'. [ 154.801281][ T9901] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1101'. [ 154.815093][ T9905] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 154.846202][ T9908] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 155.094789][ T9922] gre1: entered promiscuous mode [ 155.100052][ T9922] gre1: entered allmulticast mode [ 155.207390][ T9926] netlink: 'syz.4.1108': attribute type 83 has an invalid length. [ 155.318888][ T9930] bond0: entered allmulticast mode [ 155.324140][ T9930] bond_slave_0: entered allmulticast mode [ 155.366219][ T9930] bond_slave_1: entered allmulticast mode [ 155.381628][ T9930] bridge_slave_1: entered allmulticast mode [ 155.389519][ T9930] syz_tun: entered allmulticast mode [ 155.478548][ T9936] netlink: 'syz.1.1112': attribute type 1 has an invalid length. [ 155.747164][ T9960] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 155.790577][ T9960] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 155.812248][ T9966] netlink: 'syz.1.1122': attribute type 10 has an invalid length. [ 155.826614][ T9960] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 155.834035][ T9960] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 155.923001][ T9966] team0: Device veth0_vlan failed to register rx_handler [ 155.960365][ T9971] team0: Device veth0_vlan failed to register rx_handler [ 156.429953][ T9999] syzkaller0: entered promiscuous mode [ 156.447920][ T9999] syzkaller0: entered allmulticast mode [ 156.608384][T10016] syz.3.1136 uses old SIOCAX25GETINFO [ 156.983129][T10038] batman_adv: batadv0: Adding interface: team0 [ 156.991793][T10038] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 157.022169][T10038] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 157.544725][T10071] IPVS: persistence engine module ip_vs_pe_# not found [ 157.700122][T10086] __nla_validate_parse: 19 callbacks suppressed [ 157.700141][T10086] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1160'. [ 157.723718][T10088] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1160'. [ 158.044155][T10117] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 158.070406][T10117] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 158.167163][T10123] unknown channel width for channel at 909000KHz? [ 158.209492][T10117] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1168'. [ 158.556300][T10150] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1180'. [ 158.797652][T10158] validate_nla: 6 callbacks suppressed [ 158.797673][T10158] netlink: 'syz.2.1185': attribute type 29 has an invalid length. [ 158.823838][T10160] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 158.857264][T10158] netlink: 'syz.2.1185': attribute type 29 has an invalid length. [ 158.872313][T10158] netlink: 500 bytes leftover after parsing attributes in process `syz.2.1185'. [ 159.332632][T10195] netlink: 'syz.3.1192': attribute type 1 has an invalid length. [ 159.345898][T10193] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1193'. [ 159.347173][T10195] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1192'. [ 159.392125][T10193] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1193'. [ 160.288967][T10205] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1197'. [ 160.379891][T10203] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1196'. [ 160.889771][T10248] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 161.473669][T10289] syzkaller0: entered promiscuous mode [ 161.491224][T10289] syzkaller0: entered allmulticast mode [ 161.702496][T10300] netlink: 'syz.3.1224': attribute type 32 has an invalid length. [ 161.736184][T10300] (unnamed net_device) (uninitialized): Setting coupled_control to off (0) [ 162.073388][T10323] netlink: 'syz.2.1231': attribute type 1 has an invalid length. [ 162.077919][T10322] nbd: nbd0 already in use [ 162.248592][T10327] bond5: (slave bridge2): making interface the new active one [ 162.257447][T10327] bond5: (slave bridge2): Enslaving as an active interface with an up link [ 162.289802][T10334] netem: unknown loss type 0 [ 162.294766][T10334] netem: change failed [ 162.362258][T10331] tipc: Enabled bearer , priority 0 [ 162.377442][T10331] syzkaller0: entered promiscuous mode [ 162.390205][T10331] syzkaller0: entered allmulticast mode [ 162.490822][T10331] tipc: Resetting bearer [ 162.546405][T10329] tipc: Resetting bearer [ 162.605499][T10329] tipc: Disabling bearer [ 162.678252][ T8526] tipc: Subscription rejected, illegal request [ 164.759327][T10380] __nla_validate_parse: 11 callbacks suppressed [ 164.759346][T10380] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1250'. [ 164.784265][T10380] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1250'. [ 164.836663][T10384] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1252'. [ 164.859332][T10384] netlink: 21 bytes leftover after parsing attributes in process `syz.2.1252'. [ 164.880963][T10384] netlink: 21 bytes leftover after parsing attributes in process `syz.2.1252'. [ 164.924494][T10393] tipc: Enabled bearer , priority 0 [ 164.935504][T10389] mac80211_hwsim hwsim9 syzkaller0: entered promiscuous mode [ 164.965995][T10389] mac80211_hwsim hwsim9 syzkaller0: entered allmulticast mode [ 165.357711][T10416] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1260'. [ 165.385862][T10416] openvswitch: netlink: nsh attr 8196 is out of range max 3 [ 165.413382][T10416] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 165.416430][T10418] netlink: 1284 bytes leftover after parsing attributes in process `syz.3.1260'. [ 165.468927][T10419] netlink: 'syz.0.1259': attribute type 2 has an invalid length. [ 165.489781][T10428] tipc: Enabled bearer , priority 0 [ 165.623815][T10438] tipc: Resetting bearer [ 165.661368][T10421] tipc: Disabling bearer [ 165.785726][T10443] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1268'. [ 165.813309][T10443] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 165.942676][T10455] IPVS: set_ctl: invalid protocol: 51 172.20.20.187:20002 [ 165.967401][T10452] syzkaller1: entered promiscuous mode [ 165.976922][T10452] syzkaller1: entered allmulticast mode [ 166.403338][T10478] netlink: 'syz.3.1279': attribute type 10 has an invalid length. [ 166.456782][T10478] team0: Port device dummy0 added [ 166.488018][T10481] netlink: 'syz.3.1279': attribute type 10 has an invalid length. [ 166.546656][T10481] team0: Port device dummy0 removed [ 166.560125][T10481] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 166.580962][T10484] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 166.691522][T10492] sch_fq: defrate 0 ignored. [ 166.823118][T10498] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.1287'. [ 166.922658][T10504] netlink: 212364 bytes leftover after parsing attributes in process `syz.1.1288'. [ 166.965796][T10504] openvswitch: netlink: Message has 5 unknown bytes. [ 166.988909][T10510] tipc: Invalid UDP bearer configuration [ 166.988968][T10510] tipc: Enabling of bearer rejected, failed to enable media [ 167.342768][ C1] vcan0: j1939_tp_rxtimer: 0xffff888058262400: rx timeout, send abort [ 167.352909][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888058262400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 167.661738][T10549] tipc: Enabling of bearer rejected, already enabled [ 167.693797][T10549] tipc: Resetting bearer [ 167.784756][T10556] sch_tbf: burst 88 is lower than device veth5 mtu (1514) ! [ 168.595143][T10614] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 168.770826][T10625] netlink: 'syz.3.1326': attribute type 4 has an invalid length. [ 168.870093][T10625] netlink: 'syz.3.1326': attribute type 4 has an invalid length. [ 169.067880][T10646] sctp: [Deprecated]: syz.0.1333 (pid 10646) Use of int in max_burst socket option deprecated. [ 169.067880][T10646] Use struct sctp_assoc_value instead [ 169.173426][T10658] netlink: 'syz.1.1336': attribute type 6 has an invalid length. [ 169.432180][T10675] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 169.453018][T10677] netlink: 'syz.1.1342': attribute type 1 has an invalid length. [ 169.464717][T10679] netlink: 'syz.4.1343': attribute type 3 has an invalid length. [ 169.514185][T10677] 8021q: adding VLAN 0 to HW filter on device bond2 [ 169.662800][T10677] veth7: entered promiscuous mode [ 169.739219][T10694] bridge: RTM_NEWNEIGH with invalid ether address [ 169.775325][T10696] __nla_validate_parse: 69 callbacks suppressed [ 169.775344][T10696] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1347'. [ 170.325427][T10743] openvswitch: netlink: EtherType 50a is less than min 600 [ 170.418817][T10746] gretap1: entered promiscuous mode [ 170.543837][T10755] vxcan1 speed is unknown, defaulting to 1000 [ 170.559066][T10762] vlan3: entered allmulticast mode [ 170.584318][T10762] bond0: entered allmulticast mode [ 170.597397][T10762] bond_slave_0: entered allmulticast mode [ 170.613872][T10762] bond_slave_1: entered allmulticast mode [ 170.683081][T10767] veth0: entered promiscuous mode [ 170.833394][T10761] veth0: left promiscuous mode [ 171.088451][T10783] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.1372'. [ 171.106705][T10783] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1372'. [ 171.147261][T10779] tipc: New replicast peer: 255.255.255.255 [ 171.154820][T10779] tipc: Enabled bearer , priority 10 [ 171.180729][T10783] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1372'. [ 171.493561][T10810] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1382'. [ 171.563420][T10815] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1384'. [ 171.597355][T10815] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1384'. [ 171.703476][T10818] netlink: 'syz.0.1386': attribute type 1 has an invalid length. [ 172.122052][T10848] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1394'. [ 172.134229][T10848] chnl_net:caif_netlink_parms(): no params data found [ 172.158701][T10852] netlink: 'syz.4.1396': attribute type 1 has an invalid length. [ 172.187082][T10854] bond0: entered allmulticast mode [ 172.201642][T10854] bond_slave_0: entered allmulticast mode [ 172.209842][T10854] bond_slave_1: entered allmulticast mode [ 172.223877][T10854] dummy0: entered allmulticast mode [ 172.265997][ T5940] tipc: Node number set to 673161842 [ 172.368826][T10867] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1399'. [ 172.466139][T10872] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1403'. [ 172.486038][T10872] netlink: 'syz.4.1403': attribute type 1 has an invalid length. [ 172.499145][T10872] netlink: 'syz.4.1403': attribute type 2 has an invalid length. [ 172.527645][T10872] netlink: 'syz.4.1403': attribute type 1 has an invalid length. [ 172.536174][T10872] netlink: 'syz.4.1403': attribute type 2 has an invalid length. [ 172.822959][T10894] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 172.832265][ T7068] IPVS: starting estimator thread 0... [ 172.938759][T10896] IPVS: using max 36 ests per chain, 86400 per kthread [ 173.103142][T10910] gtp0: entered promiscuous mode [ 173.123267][T10910] gtp0: entered allmulticast mode [ 173.156491][T10910] IPVS: set_ctl: invalid protocol: 60 10.1.1.1:20003 [ 173.867126][T10964] netlink: 'syz.3.1430': attribute type 3 has an invalid length. [ 173.982313][T10970] : renamed from bridge_slave_0 (while UP) [ 174.005243][T10970] tipc: Enabled bearer , priority 0 [ 174.029125][T10970] tipc: Resetting bearer [ 174.050344][T10969] tipc: Disabling bearer [ 174.409175][T10996] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 174.544791][T11010] netlink: 'syz.4.1447': attribute type 1 has an invalid length. [ 174.758304][T11010] bond8: entered promiscuous mode [ 174.774676][T11010] 8021q: adding VLAN 0 to HW filter on device bond8 [ 174.799705][T11028] netlink: 'syz.2.1451': attribute type 4 has an invalid length. [ 174.943899][T11043] __nla_validate_parse: 10 callbacks suppressed [ 174.943919][T11043] netlink: 165 bytes leftover after parsing attributes in process `syz.3.1454'. [ 174.973890][T11043] netlink: 'syz.3.1454': attribute type 2 has an invalid length. [ 175.082606][T11046] 8021q: adding VLAN 0 to HW filter on device bond3 [ 175.332405][T11071] xfrm1: entered allmulticast mode [ 175.351547][T11071] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1462'. [ 175.407108][T11071] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1462'. [ 175.429941][T11076] batman_adv: batadv0: Adding interface: macsec2 [ 175.437122][T11076] batman_adv: batadv0: The MTU of interface macsec2 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 175.464440][T11078] netlink: 92 bytes leftover after parsing attributes in process `syz.3.1462'. [ 175.472150][T11079] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.1464'. [ 175.474520][T11076] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 175.496743][T11076] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.501461][T11079] netlink: zone id is out of range [ 175.507346][T11076] batman_adv: batadv0: Interface activated: macsec2 [ 175.512002][T11079] netlink: zone id is out of range [ 175.519879][T11071] netlink: 184 bytes leftover after parsing attributes in process `syz.3.1462'. [ 175.529686][T11079] netlink: zone id is out of range [ 175.542587][T11079] netlink: zone id is out of range [ 175.548500][T11079] netlink: zone id is out of range [ 175.553802][T11079] netlink: get zone limit has 8 unknown bytes [ 175.884385][T11104] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1470'. [ 176.068971][T11113] siw: device registration error -23 [ 177.593068][T11140] tipc: Enabled bearer , priority 0 [ 177.612780][T11140] syzkaller0: entered promiscuous mode [ 177.619984][T11140] syzkaller0: entered allmulticast mode [ 177.636701][T11148] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1485'. [ 177.690395][T11153] tipc: Resetting bearer [ 177.745960][T11139] tipc: Resetting bearer [ 177.790141][T11139] tipc: Disabling bearer [ 177.821824][T11159] validate_nla: 1 callbacks suppressed [ 177.821844][T11159] netlink: 'syz.1.1487': attribute type 4 has an invalid length. [ 177.825690][T11161] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1490'. [ 177.941829][T11161] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1490'. [ 177.972866][T11171] macvlan0: left allmulticast mode [ 178.020029][T11161] netlink: 'syz.2.1490': attribute type 7 has an invalid length. [ 178.219051][T11183] vxcan1 speed is unknown, defaulting to 1000 [ 178.633093][T11202] tipc: Enabling of bearer rejected, failed to enable media [ 179.475656][T11234] netlink: 'syz.1.1507': attribute type 10 has an invalid length. [ 179.518013][T11234] bridge_slave_1: entered allmulticast mode [ 179.565007][T11234] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 180.108324][T11261] __nla_validate_parse: 7 callbacks suppressed [ 180.108345][T11261] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1512'. [ 180.154281][T11274] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1516'. [ 180.793040][T11320] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1532'. [ 180.836496][T11323] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1532'. [ 180.857739][T11326] openvswitch: netlink: IPv4 tun info is not correct [ 181.086165][T11339] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1538'. [ 181.195319][T11345] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1541'. [ 181.212787][T11345] netlink: 'syz.0.1541': attribute type 83 has an invalid length. [ 181.250470][T11350] netlink: 7 bytes leftover after parsing attributes in process `syz.1.1544'. [ 181.348487][T11352] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1542'. [ 181.395668][T11352] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1542'. [ 181.523403][T11360] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1546'. [ 181.562427][T11359] openvswitch: netlink: IP tunnel dst address not specified [ 181.591186][T11360] openvswitch: netlink: IP tunnel dst address not specified [ 181.618201][ T6012] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.777013][T11373] syzkaller0: entered promiscuous mode [ 181.782552][T11373] syzkaller0: entered allmulticast mode [ 181.804569][T11376] netlink: 'syz.4.1550': attribute type 10 has an invalid length. [ 181.849360][T11376] dummy0: entered promiscuous mode [ 181.854529][T11376] dummy0: left allmulticast mode [ 181.860210][T11376] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 183.788949][T11432] netlink: 'syz.1.1569': attribute type 2 has an invalid length. [ 183.821385][T11439] tipc: Enabled bearer , priority 0 [ 183.846784][T11436] syzkaller0: entered promiscuous mode [ 183.870894][T11436] syzkaller0: entered allmulticast mode [ 183.959131][T11436] tipc: Resetting bearer [ 184.028864][T11453] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 184.047634][T11436] tipc: Disabling bearer [ 184.238787][T11469] netlink: 'syz.3.1580': attribute type 1 has an invalid length. [ 184.549934][T11494] netlink: 'syz.4.1584': attribute type 11 has an invalid length. [ 184.617647][T11499] netlink: 'syz.1.1588': attribute type 29 has an invalid length. [ 184.709008][T11505] tunl0: entered promiscuous mode [ 184.730604][T11505] netlink: 'syz.0.1590': attribute type 3 has an invalid length. [ 184.912534][T11527] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 185.026553][T11536] netlink: 'syz.0.1598': attribute type 5 has an invalid length. [ 185.243355][T11559] __nla_validate_parse: 7 callbacks suppressed [ 185.243374][T11559] netlink: 125 bytes leftover after parsing attributes in process `syz.1.1603'. [ 185.365828][T11569] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1605'. [ 185.463265][T11574] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 185.472895][T11576] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1608'. [ 185.650879][ T30] audit: type=1107 audit(1758973213.815:3): pid=11587 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='ï-P/ÚLyzË»õŒÀâLžÚU»m€ËÄŽÔSîbtQz+øa,lÔ$èªæîêÿ–bûŸ*Y¾Ç#|“×ÈÐâÆÞè.„‚×WÛyŒñÁAM7qP»'Ë' [ 185.772330][T11590] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1614'. [ 185.884764][T11599] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1617'. [ 185.907514][T11599] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1617'. [ 186.098089][T11612] lo: entered allmulticast mode [ 186.103927][T11612] tunl0: entered allmulticast mode [ 186.116559][T11612] gre0: entered allmulticast mode [ 186.137655][T11612] gretap0: entered allmulticast mode [ 186.179104][T11612] erspan0: entered allmulticast mode [ 186.190804][T11612] ip_vti0: entered allmulticast mode [ 186.201827][T11612] ip6_vti0: entered allmulticast mode [ 186.224726][T11612] sit0: entered allmulticast mode [ 186.241170][T11612] ip6tnl0: entered allmulticast mode [ 186.259590][T11612] ip6gre0: entered allmulticast mode [ 186.273041][T11612] ip6gretap0: entered allmulticast mode [ 186.279465][T11627] netlink: 'syz.2.1627': attribute type 2 has an invalid length. [ 186.284124][T11612] vcan0: entered allmulticast mode [ 186.309464][T11612] team0: entered allmulticast mode [ 186.314730][T11612] team_slave_0: entered allmulticast mode [ 186.322047][T11612] geneve0: entered allmulticast mode [ 186.335252][T11612] nlmon0: entered allmulticast mode [ 186.345213][T11612] caif0: entered allmulticast mode [ 186.351472][T11612] batadv0: entered allmulticast mode [ 186.363250][T11612] vxcan0: entered allmulticast mode [ 186.370831][T11612] vxcan1: entered allmulticast mode [ 186.379668][T11612] veth0: entered allmulticast mode [ 186.390440][T11612] veth1: entered allmulticast mode [ 186.402910][T11612] wg0: entered allmulticast mode [ 186.411878][T11612] wg1: entered allmulticast mode [ 186.421020][T11612] wg2: entered allmulticast mode [ 186.430212][T11612] veth0_to_bridge: entered allmulticast mode [ 186.442007][T11612] bridge_slave_0: entered allmulticast mode [ 186.451418][T11612] veth1_to_bridge: entered allmulticast mode [ 186.463783][T11612] bridge_slave_1: entered allmulticast mode [ 186.473714][T11612] veth0_to_bond: entered allmulticast mode [ 186.486535][T11612] veth1_to_bond: entered allmulticast mode [ 186.502470][T11612] veth0_to_team: entered allmulticast mode [ 186.519304][T11612] veth0_to_batadv: entered allmulticast mode [ 186.529604][T11612] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 186.538758][T11612] batadv_slave_0: entered allmulticast mode [ 186.549533][T11612] veth1_to_batadv: entered allmulticast mode [ 186.558813][T11612] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 186.567350][T11612] batadv_slave_1: entered allmulticast mode [ 186.577158][T11612] xfrm0: entered allmulticast mode [ 186.585914][T11612] veth0_to_hsr: entered allmulticast mode [ 186.594299][T11612] hsr_slave_0: entered allmulticast mode [ 186.604297][T11612] veth1_to_hsr: entered allmulticast mode [ 186.613491][T11612] hsr_slave_1: entered allmulticast mode [ 186.621509][T11612] hsr0: entered allmulticast mode [ 186.630772][T11612] veth1_virt_wifi: entered allmulticast mode [ 186.642099][T11612] veth0_virt_wifi: entered allmulticast mode [ 186.651547][T11612] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 186.659724][T11612] veth1_vlan: entered allmulticast mode [ 186.668487][T11612] vlan0: entered allmulticast mode [ 186.673646][T11612] veth0_vlan: entered allmulticast mode [ 186.680226][T11612] vlan1: entered allmulticast mode [ 186.687827][T11612] macvlan0: entered allmulticast mode [ 186.696574][T11612] macvlan1: entered allmulticast mode [ 186.704977][T11612] ipvlan0: entered allmulticast mode [ 186.711774][T11612] ipvlan1: entered allmulticast mode [ 186.721678][T11612] veth1_macvtap: entered allmulticast mode [ 186.731821][T11612] veth0_macvtap: entered allmulticast mode [ 186.743799][T11612] macsec0: entered allmulticast mode [ 186.772093][T11612] geneve1: entered allmulticast mode [ 186.781905][T11612] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 186.793954][T11612] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 186.813861][T11612] netdevsim netdevsim3 netdevsim1: entered allmulticast mode [ 186.829435][T11612] netdevsim netdevsim3 netdevsim2: entered allmulticast mode [ 186.841712][T11612] netdevsim netdevsim3 netdevsim3: entered allmulticast mode [ 186.858529][T11612] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode [ 186.866292][T11612] mac80211_hwsim hwsim5 ÿ: entered allmulticast mode [ 186.879256][T11612] bond1: entered allmulticast mode [ 186.884572][T11612] geneve2: entered allmulticast mode [ 186.892490][T11640] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1632'. [ 186.906055][T11612] bond2: entered allmulticast mode [ 186.906475][T11640] openvswitch: netlink: Flow key attr not present in new flow. [ 186.912154][T11612] gretap1: entered allmulticast mode [ 186.928532][T11612] gretap1: left promiscuous mode [ 186.934535][T11612] ip6erspan0: entered allmulticast mode [ 186.940807][T11612] veth2: entered allmulticast mode [ 186.949617][T11612] veth3: entered allmulticast mode [ 186.955493][T11612] gretap2: left promiscuous mode [ 186.968152][T11612] bond0.0: entered allmulticast mode [ 186.973789][T11612] veth4: entered allmulticast mode [ 186.979573][T11612] ip6tnl1: entered allmulticast mode [ 186.985089][T11612] bridge0: entered allmulticast mode [ 186.990842][T11612] gretap3: entered allmulticast mode [ 187.000012][T11612] bond3: entered allmulticast mode [ 187.005239][T11612] bond4: entered allmulticast mode [ 187.011735][T11612] ipvlan2: entered allmulticast mode [ 187.017433][T11612] ip6tnl2: entered allmulticast mode [ 187.025363][T11612] bond5: entered allmulticast mode [ 187.030635][T11612] bond6: entered allmulticast mode [ 187.040786][T11612] gretap4: entered allmulticast mode [ 187.047357][T11612] macsec1: entered allmulticast mode [ 187.054376][T11612] mac80211_hwsim hwsim16 wlan1: entered allmulticast mode [ 187.062337][T11612] gre1: entered allmulticast mode [ 187.071434][T11612] bridge1: entered allmulticast mode [ 187.080593][T11612] bond7: entered allmulticast mode [ 187.086995][T11612] mac80211_hwsim hwsim17 wlan2: entered allmulticast mode [ 187.094480][T11612] bond8: entered allmulticast mode [ 187.100690][T11612] bridge2: entered allmulticast mode [ 187.113765][T11612] bond9: entered allmulticast mode [ 187.120442][T11612] bridge3: entered allmulticast mode [ 187.136440][ T1040] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.160705][T11642] netlink: 6 bytes leftover after parsing attributes in process `syz.0.1633'. [ 187.185960][T11642] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 187.192012][T11646] netlink: 'syz.4.1634': attribute type 10 has an invalid length. [ 187.234087][ T1040] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.258341][T11646] veth0_vlan: left promiscuous mode [ 187.262469][T11649] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1634'. [ 187.264742][T11646] veth0_vlan: entered promiscuous mode [ 187.407612][ T30] audit: type=1804 audit(1758973215.565:4): pid=11649 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.1634" name="/newroot/325/cgroup.controllers" dev="tmpfs" ino=1676 res=1 errno=0 [ 187.417494][T11646] team0: Device veth0_vlan failed to register rx_handler [ 187.480356][T11665] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1639'. [ 187.498896][ T30] audit: type=1800 audit(1758973215.565:5): pid=11649 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1634" name="cgroup.controllers" dev="tmpfs" ino=1676 res=0 errno=0 [ 187.506472][ T1040] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.525719][ T5864] Bluetooth: hci0: command tx timeout [ 187.553611][T11670] netlink: 'syz.0.1638': attribute type 5 has an invalid length. [ 187.578716][ T1040] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.588466][T11664] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 187.615435][T11670] geneve2: entered promiscuous mode [ 187.625418][T11670] geneve2: entered allmulticast mode [ 187.640418][ T1040] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 187.652334][ T1040] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 187.671378][ T1040] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 187.703360][ T1040] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 187.790348][T11677] vxcan1 speed is unknown, defaulting to 1000 [ 187.910132][T11691] sctp: [Deprecated]: syz.3.1646 (pid 11691) Use of struct sctp_assoc_value in delayed_ack socket option. [ 187.910132][T11691] Use struct sctp_sack_info instead [ 188.509890][T11720] (unnamed net_device) (uninitialized): up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 188.567230][T11730] netlink: 'syz.1.1659': attribute type 58 has an invalid length. [ 189.158629][T11764] netlink: 'syz.4.1670': attribute type 1 has an invalid length. [ 189.217743][T11766] netlink: 'syz.1.1671': attribute type 23 has an invalid length. [ 189.231201][T11760] vxcan1 speed is unknown, defaulting to 1000 [ 189.567022][T11780] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 189.721325][T11791] unsupported nlmsg_type 40 [ 189.963147][T11804] netlink: 'syz.0.1684': attribute type 10 has an invalid length. [ 190.316499][T11824] __nla_validate_parse: 47 callbacks suppressed [ 190.316527][T11824] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1693'. [ 190.350533][T11826] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1694'. [ 190.629804][T11835] netlink: 'syz.2.1696': attribute type 10 has an invalid length. [ 190.673721][T11840] netlink: 'syz.1.1698': attribute type 1 has an invalid length. [ 190.686163][T11835] bond0: (slave bridge_slave_1): Enslaving as an active interface with a down link [ 190.709434][T11840] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.1698'. [ 190.774647][T11845] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1700'. [ 190.849039][T11851] netlink: 'syz.1.1702': attribute type 4 has an invalid length. [ 190.932381][T11851] veth1_macvtap: left promiscuous mode [ 191.699577][T11866] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1706'. [ 191.707381][T11867] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1707'. [ 191.723490][T11866] netlink: 'syz.0.1706': attribute type 1 has an invalid length. [ 191.765482][T11866] netlink: 'syz.0.1706': attribute type 11 has an invalid length. [ 191.789781][T11866] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1706'. [ 191.829100][T11870] pim6reg1: entered promiscuous mode [ 191.842545][T11870] pim6reg1: entered allmulticast mode [ 191.872148][T11866] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1706'. [ 191.882041][T11866] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1706'. [ 191.896735][T11866] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1706'. [ 191.983806][T11878] netlink: 'syz.2.1711': attribute type 7 has an invalid length. [ 192.084910][T11878] syzkaller0: entered promiscuous mode [ 192.093472][T11878] syzkaller0: entered allmulticast mode [ 192.100520][T11884] netlink: 'syz.3.1714': attribute type 1 has an invalid length. [ 193.579367][T11903] 8021q: adding VLAN 0 to HW filter on device bond11 [ 193.603957][T11910] bond11: (slave ip6gretap1): Enslaving as an active interface with an up link [ 193.656928][T11924] xt_l2tp: unknown flags: 10 [ 193.873802][T11937] bond9: (slave vxcan1): The slave device specified does not support setting the MAC address [ 193.887087][T11937] bond9: (slave vxcan1): Error -95 calling set_mac_address [ 193.928296][T11934] macvlan3: entered promiscuous mode [ 193.938937][T11934] macvlan3: entered allmulticast mode [ 193.961223][T11934] bond9: (slave macvlan3): Error -98 calling set_mac_address [ 194.235239][T11973] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 194.243584][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.529542][T11988] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 194.696653][T11997] validate_nla: 3 callbacks suppressed [ 194.696670][T11997] netlink: 'syz.4.1747': attribute type 8 has an invalid length. [ 195.305876][T12049] netlink: 'syz.1.1764': attribute type 3 has an invalid length. [ 195.354007][T12049] __nla_validate_parse: 8 callbacks suppressed [ 195.354029][T12049] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1764'. [ 195.380236][T12055] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1766'. [ 195.400154][T12051] netlink: 'syz.3.1765': attribute type 21 has an invalid length. [ 195.416734][T12049] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1764'. [ 195.424066][T12051] IPv6: NLM_F_CREATE should be specified when creating new route [ 195.710388][T12076] (unnamed net_device) (uninitialized): down delay (33554432) is not a multiple of miimon (640), value rounded to 33553920 ms [ 195.804114][T12079] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1770'. [ 195.829244][T12085] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1772'. [ 195.855707][T12079] netlink: 43 bytes leftover after parsing attributes in process `syz.1.1770'. [ 195.894867][T12079] netlink: 'syz.1.1770': attribute type 5 has an invalid length. [ 195.904362][T12079] netlink: 43 bytes leftover after parsing attributes in process `syz.1.1770'. [ 196.035207][T12089] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1774'. [ 196.103322][T12090] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1774'. [ 196.145273][T12089] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1774'. [ 196.469643][T12112] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 196.519250][T12112] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.547392][T12112] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 196.621935][T12126] netlink: 'syz.2.1783': attribute type 17 has an invalid length. [ 196.639455][T12115] dvmrp0: entered allmulticast mode [ 196.663465][T12126] gretap0: entered promiscuous mode [ 196.675983][T12126] gretap0: left promiscuous mode [ 196.811550][T12112] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 196.834330][T12112] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.845387][T12112] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 196.971297][T12112] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 196.989495][T12112] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.014578][T12112] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 197.123660][T12112] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 197.140077][T12112] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.173526][T12112] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 197.335521][ T6012] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 197.343950][ T6012] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 197.363441][ T6012] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 197.650377][ T6012] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 197.668734][ T6012] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 197.684924][ T6012] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 197.694953][ T6012] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 197.704516][ T6012] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 197.713967][ T6012] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 197.782433][ T9696] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 197.801266][ T9696] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 197.825194][ T9696] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 198.151392][T12211] netlink: zone id is out of range [ 198.164117][T12211] netlink: zone id is out of range [ 198.174819][T12211] netlink: get zone limit has 8 unknown bytes [ 198.220016][T12217] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 198.262381][T12218] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 198.625490][T12244] netlink: 'syz.3.1819': attribute type 1 has an invalid length. [ 198.679757][T12244] 8021q: adding VLAN 0 to HW filter on device bond13 [ 198.814031][ T8527] netdevsim netdevsim2 ÿÿÿÿÿÿ: set [0, 0] type 1 family 0 port 8472 - 0 [ 198.838857][ T8527] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 198.853943][T12259] netlink: 'syz.3.1823': attribute type 1 has an invalid length. [ 198.874226][ T8527] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 198.887538][ T8527] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 199.570184][T12306] veth0_to_bond: entered allmulticast mode [ 200.357354][T12353] __nla_validate_parse: 22 callbacks suppressed [ 200.357374][T12353] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1855'. [ 200.447009][T12357] tipc: Enabling of bearer rejected, failed to enable media [ 200.461917][T12358] netlink: 'syz.4.1858': attribute type 10 has an invalid length. [ 200.535463][T12361] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1860'. [ 200.806359][T12377] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1863'. [ 200.893435][T12380] netlink: 'syz.0.1864': attribute type 1 has an invalid length. [ 200.916036][T12380] netlink: 228 bytes leftover after parsing attributes in process `syz.0.1864'. [ 200.925225][T12380] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1864'. [ 200.938466][T12380] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1864'. [ 201.021211][T12385] openvswitch: netlink: Key 9 has unexpected len 0 expected 4 [ 201.182330][T12398] tipc: Enabled bearer , priority 0 [ 201.190107][T12398] syzkaller0: entered promiscuous mode [ 201.241357][T12398] syzkaller0: entered allmulticast mode [ 201.269883][T12398] tipc: Resetting bearer [ 201.293822][T12405] 8021q: VLANs not supported on xfrm0 [ 201.310964][T12404] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1872'. [ 201.321462][T12397] tipc: Resetting bearer [ 201.372251][T12397] tipc: Disabling bearer [ 201.447702][T12414] syzkaller1: entered promiscuous mode [ 201.453397][T12414] syzkaller1: entered allmulticast mode [ 201.496852][T12415] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 201.625498][T12427] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 201.632826][T12427] IPv6: NLM_F_CREATE should be set when creating new route [ 201.640129][T12427] IPv6: NLM_F_CREATE should be set when creating new route [ 201.647468][T12427] IPv6: NLM_F_CREATE should be set when creating new route [ 201.700535][T12427] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 201.784952][T12435] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1884'. [ 201.805639][T12437] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1885'. [ 201.827336][T12437] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1885'. [ 201.859402][T12441] dvmrp1: left allmulticast mode [ 201.949910][T12443] dvmrp0: entered allmulticast mode [ 202.345903][T12472] netlink: 'syz.1.1896': attribute type 1 has an invalid length. [ 202.358378][T12472] netlink: 'syz.1.1896': attribute type 1 has an invalid length. [ 202.596504][T12487] netlink: 'syz.2.1901': attribute type 14 has an invalid length. [ 202.801802][T12505] netlink: 'syz.2.1905': attribute type 2 has an invalid length. [ 203.120027][T12522] netlink: 'syz.4.1911': attribute type 1 has an invalid length. [ 203.149964][T12522] netlink: 'syz.4.1911': attribute type 10 has an invalid length. [ 203.167596][T12522] netlink: 'syz.4.1911': attribute type 4 has an invalid length. [ 203.778084][T12563] nbd1: detected capacity change from 0 to 127 [ 203.936751][ T5864] block nbd1: Receive control failed (result -32) [ 204.143330][T12584] netlink: 'syz.4.1929': attribute type 15 has an invalid length. [ 204.388886][T12590] 8021q: adding VLAN 0 to HW filter on device bond14 [ 205.038712][T12631] 8021q: VLANs not supported on gre0 [ 205.057494][T12631] tipc: Enabling of bearer rejected, failed to enable media [ 205.515145][T12654] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 205.707765][T12666] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 205.795327][T12675] __nla_validate_parse: 13 callbacks suppressed [ 205.795345][T12675] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1956'. [ 206.023583][T12687] validate_nla: 1 callbacks suppressed [ 206.023603][T12687] netlink: 'syz.2.1962': attribute type 1 has an invalid length. [ 206.105263][T12699] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 206.116945][T12702] IPVS: length: 193 != 8 [ 206.284823][T12714] netlink: 'syz.4.1967': attribute type 4 has an invalid length. [ 206.304749][T12715] netlink: 'syz.0.1968': attribute type 32 has an invalid length. [ 206.318648][T12715] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1968'. [ 206.346098][T12715] (unnamed net_device) (uninitialized): option coupled_control: invalid value (52) [ 206.462702][T12723] netlink: 'syz.4.1972': attribute type 4 has an invalid length. [ 206.506911][T12723] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 206.609070][T12734] 8021q: VLANs not supported on xfrm0 [ 207.170312][T12782] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1990'. [ 207.182955][T12780] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 207.419551][T12802] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 207.435345][T12802] bridge0: port 3(dummy0) entered disabled state [ 207.442460][T12802] bridge0: port 1() entered disabled state [ 207.476163][T12804] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1998'. [ 207.552902][T12809] netlink: 'syz.0.2000': attribute type 2 has an invalid length. [ 207.568648][T12809] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2000'. [ 207.591717][T12811] netlink: 100 bytes leftover after parsing attributes in process `syz.1.2001'. [ 207.591725][T12809] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2000'. [ 207.604280][T12811] netlink: 96 bytes leftover after parsing attributes in process `syz.1.2001'. [ 207.628867][T12811] vlan4: entered allmulticast mode [ 207.634218][T12811] erspan0: entered allmulticast mode [ 207.799715][T12823] syzkaller1: entered promiscuous mode [ 207.815713][T12823] syzkaller1: entered allmulticast mode [ 207.923160][T12835] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2008'. [ 208.359050][T12862] syzkaller0: entered promiscuous mode [ 208.379700][T12862] syzkaller0: entered allmulticast mode [ 208.399038][T12862] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 208.617021][T12882] netlink: 'syz.3.2024': attribute type 11 has an invalid length. [ 208.658332][T12877] 8021q: adding VLAN 0 to HW filter on device bond6 [ 208.730701][T12881] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 208.925397][T12903] nftables ruleset with unbound chain [ 209.198473][T12925] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2038'. [ 209.377777][T12928] veth0_macvtap: left promiscuous mode [ 209.551663][T12936] batman_adv: batadv0: Adding interface: dummy0 [ 209.575714][T12936] batman_adv: batadv0: Interface activated: dummy0 [ 209.600775][T12936] batadv0: mtu less than device minimum [ 209.608151][T12936] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 209.620150][T12936] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 209.631816][T12936] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 209.643499][T12936] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 209.655139][T12936] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 210.084486][T12964] bridge: RTM_NEWNEIGH with invalid ether address [ 210.389672][T12989] netlink: 'syz.2.2058': attribute type 3 has an invalid length. [ 210.809391][T13012] netlink: 'syz.3.2062': attribute type 2 has an invalid length. [ 210.824598][T13012] netlink: 'syz.3.2062': attribute type 2 has an invalid length. [ 211.014036][T13027] vxcan1 speed is unknown, defaulting to 1000 [ 211.020969][T13029] netlink: 'syz.0.2068': attribute type 12 has an invalid length. [ 211.029094][T13029] __nla_validate_parse: 8 callbacks suppressed [ 211.029111][T13029] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2068'. [ 211.110849][T13035] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2070'. [ 211.175937][T13041] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2071'. [ 211.193522][T13029] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2068'. [ 211.269929][T13048] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2073'. [ 211.279808][T13048] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2073'. [ 211.325352][T13052] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2074'. [ 211.356486][T13055] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2075'. [ 211.503243][T13030] vxcan1 speed is unknown, defaulting to 1000 [ 211.944866][T13078] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2083'. [ 212.202923][T13091] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2086'. [ 212.225719][T13088] net_ratelimit: 15 callbacks suppressed [ 212.225738][T13088] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048) [ 212.474891][T13097] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 212.686311][T13105] vxcan1 speed is unknown, defaulting to 1000 [ 212.720401][T13119] sctp: [Deprecated]: syz.0.2095 (pid 13119) Use of struct sctp_assoc_value in delayed_ack socket option. [ 212.720401][T13119] Use struct sctp_sack_info instead [ 212.973382][T13130] netlink: 'syz.1.2097': attribute type 2 has an invalid length. [ 214.758415][T13174] netlink: 'syz.2.2107': attribute type 4 has an invalid length. [ 215.062142][T13207] bond10: (slave vxcan1): The slave device specified does not support setting the MAC address [ 215.074645][T13207] bond10: (slave vxcan1): Error -95 calling set_mac_address [ 215.237336][T13217] netlink: 'syz.0.2123': attribute type 5 has an invalid length. [ 215.351329][T13231] bridge: RTM_NEWNEIGH with invalid state 0x8 [ 215.367277][T13229] tipc: Can't bind to reserved service type 0 [ 215.602112][T13261] syzkaller0: tun_chr_ioctl cmd 1074025673 [ 215.641910][T13261] syzkaller0: tun_chr_ioctl cmd 1074025673 [ 215.675331][T13261] syzkaller0: tun_chr_ioctl cmd 1074025673 [ 215.724038][T13261] syzkaller0: tun_chr_ioctl cmd 1074025673 [ 215.927540][T13279] netlink: 'syz.3.2140': attribute type 2 has an invalid length. [ 215.953266][T13279] netlink: 'syz.3.2140': attribute type 2 has an invalid length. [ 216.093702][T13297] __nla_validate_parse: 16 callbacks suppressed [ 216.093721][T13297] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2145'. [ 216.394356][T13312] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2150'. [ 216.537409][T13318] netlink: 14544 bytes leftover after parsing attributes in process `syz.1.2152'. [ 216.551473][ T5926] IPVS: starting estimator thread 0... [ 216.655716][T13322] IPVS: using max 26 ests per chain, 62400 per kthread [ 216.734870][T13329] veth5: entered allmulticast mode [ 216.802226][T13337] netlink: 'syz.1.2156': attribute type 1 has an invalid length. [ 216.833830][T13332] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2154'. [ 217.018373][T13351] netlink: 100 bytes leftover after parsing attributes in process `syz.1.2160'. [ 217.045908][T13355] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2160'. [ 217.144919][T13351] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2160'. [ 217.170841][T13363] ip6gre0: Master is either lo or non-ether device [ 217.268247][T13375] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 217.491099][T13383] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2169'. [ 217.503455][T13383] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2169'. [ 217.518952][T13383] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2169'. [ 217.782369][T13413] bond0: (slave syz_tun): Releasing backup interface [ 217.796363][T13413] syz_tun: left allmulticast mode [ 217.801561][T13413] syz_tun: left promiscuous mode [ 217.829647][T13413] batman_adv: batadv0: Interface deactivated: dummy0 [ 217.850378][T13413] batman_adv: batadv0: Removing interface: dummy0 [ 217.861308][T13413] bond0: (slave bond_slave_0): Releasing backup interface [ 217.881708][T13413] bond0: (slave bond_slave_1): Releasing backup interface [ 217.901389][T13413] team_slave_0: left allmulticast mode [ 217.912592][T13413] team0: Port device team_slave_0 removed [ 217.930918][T13413] team0: Port device team_slave_1 removed [ 217.937372][T13413] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 217.945352][T13413] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 217.955222][T13413] bond0: (slave wlan1): Releasing backup interface [ 217.963652][T13413] mac80211_hwsim hwsim11 wlan1: left allmulticast mode [ 217.971279][T13413] batman_adv: batadv0: Interface deactivated: macsec1 [ 217.978337][T13413] batman_adv: batadv0: Removing interface: macsec1 [ 217.989166][T13413] bond5: (slave gretap0): Releasing active interface [ 218.002607][T13413] bond6: (slave macvlan2): Removing an active aggregator [ 218.011080][T13413] bond6: (slave macvlan2): Releasing backup interface [ 218.021873][T13414] team0: Mode changed to "broadcast" [ 218.030469][T13420] team0: Unable to change to the same mode the team is in [ 218.594314][T13475] tipc: Enabling of bearer rejected, already enabled [ 218.630193][T13475] tipc: Resetting bearer [ 218.695314][T13478] netlink: 'syz.2.2190': attribute type 1 has an invalid length. [ 218.824945][T13493] netlink: 'syz.2.2198': attribute type 1 has an invalid length. [ 218.834564][T13494] netlink: 'syz.2.2198': attribute type 1 has an invalid length. [ 218.892168][T13493] 8021q: adding VLAN 0 to HW filter on device bond6 [ 219.050427][T13513] bridge0: port 1(batadv1) entered blocking state [ 219.060594][T13513] bridge0: port 1(batadv1) entered disabled state [ 219.070334][T13513] batadv1: entered allmulticast mode [ 219.148298][T13513] batadv1: entered promiscuous mode [ 219.195511][T13515] bridge0: port 2(batadv2) entered blocking state [ 219.203335][T13515] bridge0: port 2(batadv2) entered disabled state [ 219.210710][T13515] batadv2: entered allmulticast mode [ 219.218919][T13515] batadv2: entered promiscuous mode [ 219.550495][ T13] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 219.560240][ T13] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 219.686907][ T6012] batman_adv: batadv2: No IGMP Querier present - multicast optimizations disabled [ 219.696582][ T6012] batman_adv: batadv2: No MLD Querier present - multicast optimizations disabled [ 220.089223][T13576] sctp: [Deprecated]: syz.4.2222 (pid 13576) Use of int in max_burst socket option deprecated. [ 220.089223][T13576] Use struct sctp_assoc_value instead [ 220.461592][T13598] netlink: 'syz.0.2227': attribute type 4 has an invalid length. [ 220.714073][T13630] netlink: 'syz.4.2234': attribute type 2 has an invalid length. [ 220.722939][T13630] netlink: 'syz.4.2234': attribute type 2 has an invalid length. [ 220.742749][T13630] netlink: 'syz.4.2234': attribute type 2 has an invalid length. [ 220.914242][T13642] netlink: 'syz.1.2239': attribute type 1 has an invalid length. [ 221.126494][T13651] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 221.143782][T13647] __nla_validate_parse: 11 callbacks suppressed [ 221.143801][T13647] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2241'. [ 221.209341][T13654] netlink: 'syz.2.2244': attribute type 1 has an invalid length. [ 221.265106][T13654] netlink: 16150 bytes leftover after parsing attributes in process `syz.2.2244'. [ 221.327866][T13660] netlink: 284 bytes leftover after parsing attributes in process `syz.0.2247'. [ 221.353838][T13662] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2248'. [ 221.450054][T13677] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2250'. [ 221.610338][T13687] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2254'. [ 221.615291][T13683] syzkaller1: entered promiscuous mode [ 221.627221][T13683] syzkaller1: entered allmulticast mode [ 221.663265][T13683] dvmrp1: entered allmulticast mode [ 221.693375][T13690] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.2255'. [ 221.880431][T13701] tipc: Enabled bearer , priority 0 [ 221.898524][T13701] syzkaller0: entered promiscuous mode [ 221.904043][T13701] syzkaller0: entered allmulticast mode [ 221.927179][T13704] netlink: zone id is out of range [ 221.932554][T13704] netlink: zone id is out of range [ 221.952348][T13704] netlink: zone id is out of range [ 221.957779][T13704] netlink: zone id is out of range [ 221.959759][T13701] tipc: Resetting bearer [ 221.984462][T13700] tipc: Resetting bearer [ 222.025076][T13700] tipc: Disabling bearer [ 222.057023][T13714] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2263'. [ 222.161791][T13717] (unnamed net_device) (uninitialized): ARP target 1.0.0.0 is already present [ 222.171683][T13717] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (1) [ 222.182820][T13716] (unnamed net_device) (uninitialized): ARP target 1.0.0.0 is already present [ 222.192561][T13716] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (1) [ 222.246072][T13721] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2265'. [ 222.283166][T13721] 8021q: adding VLAN 0 to HW filter on device bond7 [ 222.369224][T13729] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2267'. [ 222.500892][T13734] ieee802154 phy0 wpan0: encryption failed: -22 [ 223.448719][T13807] ipvlan3: entered promiscuous mode [ 223.902702][T13835] netlink: 'syz.1.2296': attribute type 10 has an invalid length. [ 224.042913][T13843] netlink: 'syz.4.2298': attribute type 23 has an invalid length. [ 224.371367][T13852] ip6tnl0: entered promiscuous mode [ 224.604175][T13871] netlink: 'syz.2.2304': attribute type 1 has an invalid length. [ 225.792541][T13946] netlink: 'syz.4.2319': attribute type 64 has an invalid length. [ 226.219241][T13973] netlink: 'syz.2.2327': attribute type 5 has an invalid length. [ 226.223567][T13972] vxcan1 speed is unknown, defaulting to 1000 [ 226.264365][T13975] netlink: 'syz.0.2329': attribute type 23 has an invalid length. [ 226.345813][T13980] __nla_validate_parse: 11 callbacks suppressed [ 226.345835][T13980] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2331'. [ 226.395055][T13980] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2331'. [ 226.450362][T13980] gretap2: entered promiscuous mode [ 226.465309][T13980] gretap2: entered allmulticast mode [ 226.608204][T13987] pim6reg1: entered promiscuous mode [ 226.614073][T13987] pim6reg1: entered allmulticast mode [ 226.950289][T14003] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2334'. [ 227.187866][T14013] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2340'. [ 227.480587][T14029] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2345'. [ 227.500715][T14029] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2345'. [ 227.514972][T14029] netlink: 10 bytes leftover after parsing attributes in process `syz.1.2345'. [ 227.751815][T14040] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2349'. [ 228.046937][T14061] netlink: 'syz.2.2356': attribute type 2 has an invalid length. [ 228.054960][T14061] netlink: 188 bytes leftover after parsing attributes in process `syz.2.2356'. [ 228.200399][T14069] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2359'. [ 228.241056][T14075] x_tables: ip6_tables: quota.0 match: invalid size 24 (kernel) != (user) 144 [ 228.550453][T14091] netlink: 'syz.4.2366': attribute type 4 has an invalid length. [ 228.593653][T14100] netlink: 'syz.2.2369': attribute type 39 has an invalid length. [ 229.047598][T14125] netlink: 'syz.0.2377': attribute type 1 has an invalid length. [ 229.094913][T14128] sch_fq: defrate 0 ignored. [ 229.102361][T14129] vxcan1 speed is unknown, defaulting to 1000 [ 229.103965][T14128] netlink: 'syz.1.2378': attribute type 1 has an invalid length. [ 229.181795][T14128] netlink: 'syz.1.2378': attribute type 1 has an invalid length. [ 229.482820][T14142] tipc: Enabling of bearer rejected, already enabled [ 229.915824][T14165] netlink: 'syz.3.2389': attribute type 4 has an invalid length. [ 229.962658][T14165] netlink: 'syz.3.2389': attribute type 4 has an invalid length. [ 230.144424][T14178] netlink: 'syz.1.2392': attribute type 12 has an invalid length. [ 230.481448][T14192] IPVS: persistence engine module ip_vs_pe_À not found [ 230.569715][T14201] netlink: 'syz.0.2401': attribute type 4 has an invalid length. [ 230.630490][T14206] netlink: 'syz.0.2401': attribute type 4 has an invalid length. [ 231.124186][T14236] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 231.154572][T14237] netlink: 'syz.4.2410': attribute type 1 has an invalid length. [ 231.313728][T14245] bond11: (slave bridge6): making interface the new active one [ 231.325107][T14245] bond11: (slave bridge6): Enslaving as an active interface with an up link [ 231.346492][T14244] bridge2: entered promiscuous mode [ 231.351846][T14244] bridge2: entered allmulticast mode [ 231.420398][T14261] __nla_validate_parse: 15 callbacks suppressed [ 231.420417][T14261] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2417'. [ 231.549632][T14266] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2420'. [ 231.550104][T14269] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2423'. [ 231.586344][T14269] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2423'. [ 231.641288][T14266] team0: Device wireguard0 is of different type [ 231.722271][T14278] batman_adv: batadv0: Removing interface: team0 [ 231.748999][T14278] bond0: (slave bridge_slave_1): Releasing backup interface [ 231.780514][T14278] bond0: (slave bond_slave_0): Releasing backup interface [ 231.802987][T14278] bond0: (slave bond_slave_1): Releasing backup interface [ 231.821774][T14278] team0: Port device team_slave_0 removed [ 231.842760][T14278] team0: Port device team_slave_1 removed [ 231.854072][T14278] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 231.863895][T14278] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 231.878554][T14278] bond2: (slave veth3): Releasing active interface [ 231.893534][T14278] bond5: (slave bridge2): Releasing active interface [ 231.918686][T14278] batman_adv: batadv0: Interface deactivated: macsec2 [ 231.929689][T14278] batman_adv: batadv0: Removing interface: macsec2 [ 232.492245][T14325] netlink: 112 bytes leftover after parsing attributes in process `syz.3.2436'. [ 232.513662][T14330] netlink: 'syz.0.2439': attribute type 9 has an invalid length. [ 232.564128][T14331] tipc: Enabling of bearer rejected, failed to enable media [ 232.673983][T14340] C: renamed from team_slave_0 [ 232.680298][T14339] Unsupported ieee802154 address type: 0 [ 232.691987][T14340] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 232.916772][T14343] bond12 (unregistering): Released all slaves [ 233.025197][T14352] ip6tnl4: entered promiscuous mode [ 233.031399][T14352] ip6tnl4: entered allmulticast mode [ 233.224045][T14368] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2444'. [ 233.447159][T14384] 8021q: adding VLAN 0 to HW filter on device bond7 [ 233.472434][T14387] vlan2: entered allmulticast mode [ 233.565256][T14394] syzkaller0: entered promiscuous mode [ 233.571683][T14394] syzkaller0: entered allmulticast mode [ 233.594451][T14394] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2455'. [ 233.614039][T14394] nbd: illegal input index 1048576 [ 233.672545][T14396] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2454'. [ 234.003530][T14419] Bluetooth: hci0: Opcode 0x0c20 failed: -22 [ 234.014705][T14419] Bluetooth: hci0: Opcode 0x0c20 failed: -22 [ 234.072948][T14424] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 234.077520][T14426] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2465'. [ 234.132208][T14426] netlink: 35 bytes leftover after parsing attributes in process `syz.2.2465'. [ 234.141694][T14426] validate_nla: 7 callbacks suppressed [ 234.141710][T14426] netlink: 'syz.2.2465': attribute type 5 has an invalid length. [ 234.156073][T14426] netlink: 'syz.2.2465': attribute type 6 has an invalid length. [ 234.279419][T14431] bond8: entered promiscuous mode [ 234.288899][T14431] bond8: entered allmulticast mode [ 234.294620][T14431] 8021q: adding VLAN 0 to HW filter on device bond8 [ 234.394307][T14448] openvswitch: netlink: Flow key attr not present in new flow. [ 234.728383][T14473] netlink: 'syz.2.2479': attribute type 8 has an invalid length. [ 235.174899][T14502] tipc: Enabling of bearer rejected, already enabled [ 235.187515][T14502] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 236.251808][T14569] IPVS: set_ctl: invalid protocol: 115 172.20.20.170:20003 [ 237.687577][T14641] sctp: [Deprecated]: syz.4.2528 (pid 14641) Use of struct sctp_assoc_value in delayed_ack socket option. [ 237.687577][T14641] Use struct sctp_sack_info instead [ 239.372221][T14659] __nla_validate_parse: 13 callbacks suppressed [ 239.372242][T14659] netlink: 164 bytes leftover after parsing attributes in process `syz.1.2530'. [ 239.446430][T14659] netlink: 164 bytes leftover after parsing attributes in process `syz.1.2530'. [ 239.455518][T14659] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2530'. [ 239.553849][T14667] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2533'. [ 239.827684][T14686] nft_compat: unsupported protocol 0 [ 240.086918][T14696] netlink: 'syz.0.2542': attribute type 1 has an invalid length. [ 240.162652][T14696] 8021q: adding VLAN 0 to HW filter on device bond7 [ 240.234972][T14707] 8021q: adding VLAN 0 to HW filter on device bond7 [ 240.250709][T14707] bond7: (slave vxcan3): The slave device specified does not support setting the MAC address [ 240.262950][T14707] bond7: (slave vxcan3): Error -95 calling set_mac_address [ 240.271085][T14696] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2542'. [ 240.389489][T14714] bridge4: entered promiscuous mode [ 240.394877][T14714] bridge4: entered allmulticast mode [ 240.405316][T14696] 8021q: adding VLAN 0 to HW filter on device bond7 [ 240.450502][T14716] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2548'. [ 240.609982][T13073] tipc: Subscription rejected, illegal request [ 240.651057][T14728] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2550'. [ 240.768326][T14732] netlink: 'syz.4.2551': attribute type 8 has an invalid length. [ 240.793766][T14735] netlink: 'syz.0.2552': attribute type 5 has an invalid length. [ 240.973161][T14748] netem: change failed [ 241.154463][T14758] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2561'. [ 241.165506][T14758] netlink: 'syz.4.2561': attribute type 1 has an invalid length. [ 241.314633][T14766] bond11: option mode: unable to set because the bond device has slaves [ 241.324612][T14766] netlink: 'syz.3.2564': attribute type 21 has an invalid length. [ 241.334857][T14766] netlink: 'syz.3.2564': attribute type 1 has an invalid length. [ 241.345202][T14763] vxcan1 speed is unknown, defaulting to 1000 [ 241.498258][T14771] veth1_to_bond: entered allmulticast mode [ 241.528271][T14773] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2566'. [ 241.547720][T14776] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2567'. [ 241.608273][T14773] bond0: (slave bond_slave_1): Releasing backup interface [ 241.632526][T14773] bond_slave_1 (unregistering): left allmulticast mode [ 241.688360][T14773] veth1_to_bond (unregistering): left allmulticast mode [ 241.877619][T14780] tipc: Enabling of bearer rejected, already enabled [ 242.431306][T14808] syzkaller1: entered promiscuous mode [ 242.459078][T14808] syzkaller1: entered allmulticast mode [ 242.892633][T14834] netlink: 'syz.0.2583': attribute type 1 has an invalid length. [ 243.043184][T14848] netlink: 'syz.3.2588': attribute type 7 has an invalid length. [ 243.091129][T14851] netlink: 'syz.3.2588': attribute type 7 has an invalid length. [ 243.421157][T14871] batadv0: entered allmulticast mode [ 243.642377][T14884] tipc: Enabling of bearer rejected, already enabled [ 244.051306][T14912] veth0_to_bond: left allmulticast mode [ 244.139959][T14912] gre1: left promiscuous mode [ 244.155519][T14912] gre1: left allmulticast mode [ 244.207113][T14912] ipvlan3: left promiscuous mode [ 244.214719][T14912] gretap2: left promiscuous mode [ 244.220540][T14912] gretap2: left allmulticast mode [ 244.225328][T14923] netlink: 'syz.1.2610': attribute type 1 has an invalid length. [ 244.238557][ T36] netdevsim netdevsim2 ÿÿÿÿÿÿ: unset [0, 0] type 1 family 0 port 8472 - 0 [ 244.296777][ T36] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 244.377615][T14923] 8021q: adding VLAN 0 to HW filter on device bond9 [ 244.385490][ T36] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 244.434545][ T36] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 244.740340][T14955] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 244.859799][T14955] __nla_validate_parse: 9 callbacks suppressed [ 244.859818][T14955] netlink: 146840 bytes leftover after parsing attributes in process `syz.2.2619'. [ 245.146545][T14979] netlink: 'syz.1.2627': attribute type 10 has an invalid length. [ 245.149537][T14984] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2629'. [ 245.188843][T14987] IPVS: set_ctl: invalid protocol: 94 0.0.0.0:20003 [ 245.196826][T14987] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2630'. [ 245.208814][T14979] team0: Device veth0_vlan failed to register rx_handler [ 245.344590][T14992] netlink: 'syz.0.2631': attribute type 29 has an invalid length. [ 245.362616][T14992] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2631'. [ 245.457269][T15002] netlink: 'syz.2.2636': attribute type 1 has an invalid length. [ 245.465429][T15002] netlink: 232 bytes leftover after parsing attributes in process `syz.2.2636'. [ 245.476481][T15002] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2636'. [ 245.492253][T15008] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2635'. [ 245.504572][T15009] netlink: 256 bytes leftover after parsing attributes in process `syz.3.2637'. [ 245.738213][T15022] netlink: 92 bytes leftover after parsing attributes in process `syz.2.2642'. [ 245.761964][T15024] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2643'. [ 246.049294][T15043] netlink: 'syz.4.2649': attribute type 21 has an invalid length. [ 246.139565][T15047] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 246.242164][T15054] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 246.842684][T15059] xt_l2tp: invalid flags combination: 0 [ 247.279555][T15088] netlink: 'syz.4.2667': attribute type 2 has an invalid length. [ 247.654267][T15113] netlink: 'syz.4.2674': attribute type 1 has an invalid length. [ 248.309033][T15152] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 248.695423][T15185] block nbd2: not configured, cannot reconfigure [ 248.925239][T15197] openvswitch: netlink: IP tunnel TTL not specified. [ 248.938801][T15199] bridge_slave_0: left promiscuous mode [ 249.117850][T15208] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 249.129239][T15208] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 249.148415][T15208] netdevsim netdevsim0 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 249.244796][T15208] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 249.270172][T15218] nbd: illegal input index -8454144 [ 249.276552][T15208] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 249.300840][T15208] netdevsim netdevsim0 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 249.420552][T15223] dvmrp1: left allmulticast mode [ 249.538683][T15208] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 249.595644][T15208] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 249.627729][T15208] netdevsim netdevsim0 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 249.749586][T15243] netlink: zone id is out of range [ 249.759156][T15208] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 249.773973][T15208] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 249.779834][T15243] netlink: zone id is out of range [ 249.789993][T15208] netdevsim netdevsim0 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 249.827257][T15243] netlink: zone id is out of range [ 249.835469][T15248] netlink: 'syz.3.2711': attribute type 2 has an invalid length. [ 249.855379][T15243] netlink: zone id is out of range [ 249.876403][T15243] netlink: zone id is out of range [ 249.895694][T15243] netlink: zone id is out of range [ 249.900838][T15243] netlink: zone id is out of range [ 249.911659][ T36] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 249.931225][T15243] netlink: zone id is out of range [ 249.953756][T15243] netlink: zone id is out of range [ 249.958657][ T36] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 249.963905][T15243] netlink: zone id is out of range [ 249.975135][T15256] __nla_validate_parse: 15 callbacks suppressed [ 249.975151][T15256] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2713'. [ 249.977640][ T36] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 250.056062][T13075] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 250.085837][T13075] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 250.093966][T13075] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 250.115382][T15263] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2716'. [ 250.147598][ T36] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 250.162933][ T36] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 250.171755][ T36] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 250.251440][ T6012] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 250.269321][ T6012] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 250.278101][ T6012] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 250.291635][T15277] netlink: 'syz.2.2721': attribute type 2 has an invalid length. [ 250.360852][T15281] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.2722'. [ 250.528453][T15291] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2725'. [ 250.566979][T15296] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2727'. [ 250.592262][T15300] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2728'. [ 250.626334][T15296] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2727'. [ 250.753463][T15310] netlink: 'syz.3.2730': attribute type 4 has an invalid length. [ 250.847034][T15317] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2734'. [ 250.855993][T15314] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2733'. [ 250.865395][T15310] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2730'. [ 250.987768][T15316] netlink: 'syz.3.2730': attribute type 10 has an invalid length. [ 251.041261][T15316] veth1_macvtap: left allmulticast mode [ 251.067123][T15316] veth1_macvtap: left promiscuous mode [ 251.081856][T15331] netlink: 'syz.4.2738': attribute type 27 has an invalid length. [ 251.090684][T15316] team0: Device veth1_macvtap failed to register rx_handler [ 251.593485][T15363] batadv_slave_0: entered allmulticast mode [ 251.647078][T15362] batadv_slave_0: left allmulticast mode [ 252.598966][T15428] IPv6: sit2: Disabled Multicast RS [ 252.615819][T15428] sit2: entered allmulticast mode [ 253.425475][T15480] netlink: 'syz.0.2785': attribute type 8 has an invalid length. [ 253.487329][T15483] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 253.755436][T15497] team_slave_0: entered promiscuous mode [ 253.761473][T15497] team_slave_1: entered promiscuous mode [ 253.771402][T15497] 8021q: adding VLAN 0 to HW filter on device macvtap0 [ 253.781804][T15497] team0: Device macvtap0 is already an upper device of the team interface [ 253.831442][T15497] team_slave_0: left promiscuous mode [ 253.837006][T15497] team_slave_1: left promiscuous mode [ 254.216838][T15524] syzkaller1: entered promiscuous mode [ 254.238545][T15524] syzkaller1: entered allmulticast mode [ 255.152063][T15587] vxcan1 speed is unknown, defaulting to 1000 [ 255.683537][T15602] netlink: 'syz.2.2817': attribute type 1 has an invalid length. [ 255.697279][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.720432][T15602] __nla_validate_parse: 53 callbacks suppressed [ 255.720452][T15602] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2817'. [ 255.745696][T15602] netlink: 'syz.2.2817': attribute type 1 has an invalid length. [ 255.887823][T15613] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2821'. [ 255.928711][T15613] netlink: 236 bytes leftover after parsing attributes in process `syz.2.2821'. [ 256.253893][T15627] netlink: 152064 bytes leftover after parsing attributes in process `syz.3.2827'. [ 256.307062][T15630] sctp: [Deprecated]: syz.3.2827 (pid 15630) Use of int in max_burst socket option. [ 256.307062][T15630] Use struct sctp_assoc_value instead [ 256.373323][T15627] net_ratelimit: 35 callbacks suppressed [ 256.373343][T15627] netlink: zone id is out of range [ 256.397543][T15627] netlink: zone id is out of range [ 256.402898][T15627] netlink: zone id is out of range [ 256.469982][T15627] netlink: zone id is out of range [ 256.475140][T15627] netlink: zone id is out of range [ 256.512718][T15627] netlink: zone id is out of range [ 256.538784][T15627] netlink: zone id is out of range [ 256.543931][T15627] netlink: zone id is out of range [ 256.587755][T15627] netlink: zone id is out of range [ 256.595928][T15627] netlink: zone id is out of range [ 257.108919][T15665] netlink: 'syz.4.2837': attribute type 1 has an invalid length. [ 257.161131][T15665] workqueue: Failed to create a rescuer kthread for wq "bond12": -EINTR [ 257.170097][T15667] vxcan1 speed is unknown, defaulting to 1000 [ 257.256101][T15677] ieee802154 phy0 wpan0: encryption failed: -22 [ 257.327285][T15683] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 257.343154][T15683] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2843'. [ 257.352652][T15683] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2843'. [ 257.559702][T15693] tipc: Enabling of bearer rejected, already enabled [ 257.575995][T15690] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2846'. [ 257.713156][T15690] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2846'. [ 257.720392][T15691] bridge0: port 3(ipvlan3) entered blocking state [ 257.741636][T15691] bridge0: port 3(ipvlan3) entered disabled state [ 257.753049][T15691] ipvlan3: entered allmulticast mode [ 257.767762][T15691] ipvlan3: left allmulticast mode [ 257.817823][T15690] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2846'. [ 257.981682][T15690] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2846'. [ 258.014873][T15715] (unnamed net_device) (uninitialized): Unable to set up delay as MII monitoring is disabled [ 258.332252][T15723] tipc: Enabling of bearer rejected, already enabled [ 258.953205][T15776] netlink: 'syz.4.2870': attribute type 58 has an invalid length. [ 259.723349][T15805] veth0: entered promiscuous mode [ 259.773759][T15806] veth0 (unregistering): left promiscuous mode [ 259.783680][T15809] netlink: 'syz.3.2883': attribute type 6 has an invalid length. [ 259.792238][T15809] netlink: 'syz.3.2883': attribute type 5 has an invalid length. [ 259.804653][T15809] netlink: 'syz.3.2883': attribute type 1 has an invalid length. [ 259.833479][ T5185] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 259.843555][ T5185] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 259.863941][ T5185] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 259.878936][ T5185] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 259.887375][ T5185] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 259.913041][ T5864] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 259.924115][ T5864] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 259.936280][ T5864] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 259.944061][T15809] 8021q: adding VLAN 0 to HW filter on device bond15 [ 259.953342][ T5864] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 259.961435][ T5864] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 260.016429][T15813] bond15: (slave geneve3): making interface the new active one [ 260.034695][T15813] bond15: (slave geneve3): Enslaving as an active interface with an up link [ 260.054067][ T49] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.063566][ T49] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.151789][ T49] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.180396][ T49] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.215453][T15817] vxcan1 speed is unknown, defaulting to 1000 [ 260.369100][T15828] (unnamed net_device) (uninitialized): Unable to set down delay as MII monitoring is disabled [ 260.405498][T15839] !€ÿ: renamed from bond_slave_0 [ 260.409191][T15840] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 260.417863][T15840] IPv6: NLM_F_CREATE should be set when creating new route [ 260.664650][T15852] netlink: 'syz.1.2892': attribute type 10 has an invalid length. [ 261.147938][T15874] __nla_validate_parse: 15 callbacks suppressed [ 261.147956][T15874] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2898'. [ 261.459794][ T8525] dvmrp0 (unregistering): left allmulticast mode [ 261.869585][ T8525] bond0 (unregistering): Released all slaves [ 261.884878][ T8525] bond1 (unregistering): Released all slaves [ 261.979945][ T8525] bond2 (unregistering): Released all slaves [ 261.994565][ T8525] bond3 (unregistering): Released all slaves [ 262.000974][ T5864] Bluetooth: hci3: command tx timeout [ 262.093934][ T8525] bond4 (unregistering): Released all slaves [ 262.107752][ T8525] bond5 (unregistering): Released all slaves [ 262.198050][ T8525] bond6 (unregistering): Released all slaves [ 262.286899][ T8525] bond7 (unregistering): Released all slaves [ 262.324629][T15888] tipc: Enabled bearer , priority 0 [ 262.443041][T15888] tipc: Disabling bearer [ 262.500317][T15895] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2903'. [ 262.525861][ T8525] tipc: Disabling bearer [ 262.531526][ T8525] tipc: Left network mode [ 262.617272][ T8525] IPVS: stopping master sync thread 8638 ... [ 262.648716][ T8525] IPVS: stopping backup sync thread 7970 ... [ 262.818219][T15817] chnl_net:caif_netlink_parms(): no params data found [ 262.826482][T15915] netlink: 'syz.3.2907': attribute type 1 has an invalid length. [ 262.871214][T15915] 8021q: adding VLAN 0 to HW filter on device bond16 [ 263.270541][T15949] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2915'. [ 263.660056][T15817] bridge0: port 1(bridge_slave_0) entered blocking state [ 263.691452][T15817] bridge0: port 1(bridge_slave_0) entered disabled state [ 263.716611][T15817] bridge_slave_0: entered allmulticast mode [ 263.739775][T15817] bridge_slave_0: entered promiscuous mode [ 263.770939][T15952] vxcan1 speed is unknown, defaulting to 1000 [ 263.774363][T15817] bridge0: port 2(bridge_slave_1) entered blocking state [ 263.795411][T15817] bridge0: port 2(bridge_slave_1) entered disabled state [ 263.804163][T15971] netlink: 'syz.3.2918': attribute type 4 has an invalid length. [ 263.811864][T15817] bridge_slave_1: entered allmulticast mode [ 263.830155][T15817] bridge_slave_1: entered promiscuous mode [ 263.857755][T15973] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2918'. [ 263.881319][T15973] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2918'. [ 263.909977][T15973] netlink: 'syz.3.2918': attribute type 4 has an invalid length. [ 264.081330][ T5864] Bluetooth: hci3: command tx timeout [ 264.157090][T15817] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 264.285718][T15817] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 264.469375][ T8525] hsr_slave_0: left promiscuous mode [ 264.479215][ T8525] hsr_slave_1: left promiscuous mode [ 264.613072][ T8525] pim6reg (unregistering): left allmulticast mode [ 265.242832][T15817] team0: Port device team_slave_0 added [ 265.273906][T15817] team0: Port device team_slave_1 added [ 265.398328][T16003] sctp: [Deprecated]: syz.0.2928 (pid 16003) Use of struct sctp_assoc_value in delayed_ack socket option. [ 265.398328][T16003] Use struct sctp_sack_info instead [ 265.500313][T15817] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 265.522342][T15817] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 265.547093][T16013] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2927'. [ 265.605446][T15817] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 265.662822][T15817] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 265.676042][T15817] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 265.759130][T15817] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 266.142744][T15817] hsr_slave_0: entered promiscuous mode [ 266.158829][ T5864] Bluetooth: hci3: command tx timeout [ 266.183563][T15817] hsr_slave_1: entered promiscuous mode [ 266.202049][T15817] debugfs: 'hsr0' already exists in 'hsr' [ 266.218269][T15817] Cannot create hsr debugfs directory [ 266.263262][ T1017] nci: nci_rx_work: unknown MT 0x1 [ 266.391708][ T8525] IPVS: stop unused estimator thread 0... [ 266.670861][T16040] vxcan1 speed is unknown, defaulting to 1000 [ 266.813611][T16059] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2936'. [ 267.355227][T16066] bond12: entered promiscuous mode [ 267.393009][T16066] bond12: entered allmulticast mode [ 267.404355][T16066] 8021q: adding VLAN 0 to HW filter on device bond12 [ 267.521441][T16081] tap0: tun_chr_ioctl cmd 1074025678 [ 267.531577][T16081] tap0: group set to 0 [ 267.553695][T16070] tap0: tun_chr_ioctl cmd 35108 [ 267.563435][T16070] netlink: 'syz.1.2941': attribute type 13 has an invalid length. [ 268.121144][T15817] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 268.142396][T16109] netlink: 'syz.3.2952': attribute type 1 has an invalid length. [ 268.149326][T16107] syzkaller0: entered promiscuous mode [ 268.156553][T16107] syzkaller0: entered allmulticast mode [ 268.165508][T15817] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 268.189534][T15817] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 268.200701][T15817] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 268.248867][ T5864] Bluetooth: hci3: command tx timeout [ 268.263633][T16120] netlink: 'syz.3.2954': attribute type 2 has an invalid length. [ 268.277515][T16120] netlink: 'syz.3.2954': attribute type 2 has an invalid length. [ 268.370114][T16127] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2951'. [ 268.407883][T16127] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2951'. [ 268.426636][T16131] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2957'. [ 268.442259][T16131] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2957'. [ 268.472462][T15817] 8021q: adding VLAN 0 to HW filter on device bond0 [ 268.510498][T15817] 8021q: adding VLAN 0 to HW filter on device team0 [ 268.538694][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 268.545910][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 268.565943][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 268.573108][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 268.758088][T16144] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2960'. [ 268.984752][T15817] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 269.095082][T16170] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2964'. [ 269.101091][T15817] veth0_vlan: entered promiscuous mode [ 269.152632][T16170] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2964'. [ 269.154765][T15817] veth1_vlan: entered promiscuous mode [ 269.205392][T16175] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2966'. [ 269.238367][T15817] veth0_macvtap: entered promiscuous mode [ 269.262960][T15817] veth1_macvtap: entered promiscuous mode [ 269.292769][T16178] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2967'. [ 269.343649][T15817] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 269.380225][T15817] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 269.412710][ T1170] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.455492][ T8527] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.474740][ T8527] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.495406][T16186] netlink: 'syz.0.2971': attribute type 18 has an invalid length. [ 269.497840][ T68] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.527646][T16186] netlink: 'syz.0.2971': attribute type 18 has an invalid length. [ 269.685787][ T8526] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 269.724666][ T8526] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 269.883357][T16198] tipc: Enabled bearer , priority 0 [ 269.945288][T16198] syzkaller0: entered promiscuous mode [ 269.968274][T16198] syzkaller0: entered allmulticast mode [ 270.019245][ T68] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 270.040201][ T68] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 270.060925][T16198] tipc: Resetting bearer [ 270.086877][T16197] tipc: Resetting bearer [ 270.121769][T16197] tipc: Disabling bearer [ 270.366880][T16226] netlink: 'syz.2.2872': attribute type 3 has an invalid length. [ 271.438539][ T5185] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 271.448790][ T5185] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 271.457510][ T5185] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 271.471959][ T5185] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 271.483676][ T5185] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 271.552448][T13073] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.649864][T13073] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.702578][T16263] vxcan1 speed is unknown, defaulting to 1000 [ 271.783048][T13073] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.821847][T16284] netlink: 'syz.4.2994': attribute type 5 has an invalid length. [ 271.936435][T16286] ieee802154 phy0 wpan0: encryption failed: -22 [ 272.605480][T13073] dvmrp0 (unregistering): left allmulticast mode [ 272.912576][T13073] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 272.922556][T13073] bond_slave_0: left allmulticast mode [ 272.930399][T13073] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 272.942127][T13073] bridge_slave_1: left allmulticast mode [ 272.949761][T13073] bond0 (unregistering): Released all slaves [ 273.046860][T13073] bond1 (unregistering): (slave veth5): Releasing active interface [ 273.056458][T13073] bond1 (unregistering): Released all slaves [ 273.151634][T13073] bond2 (unregistering): Released all slaves [ 273.244298][T13073] bond3 (unregistering): Released all slaves [ 273.257686][T13073] bond4 (unregistering): Released all slaves [ 273.271308][T13073] bond5 (unregistering): Released all slaves [ 273.377787][T13073] bond6 (unregistering): Released all slaves [ 273.469896][T13073] bond7 (unregistering): Released all slaves [ 273.530834][ T5864] Bluetooth: hci2: command tx timeout [ 273.566511][T13073] bond8 (unregistering): Released all slaves [ 273.651250][T13073] bond9 (unregistering): Released all slaves [ 273.664698][T13073] bond10 (unregistering): Released all slaves [ 273.832977][T16308] tipc: Enabling of bearer rejected, failed to enable media [ 273.924851][T13073] tipc: Disabling bearer [ 273.965806][T13073] tipc: Disabling bearer [ 273.984012][T13073] tipc: Left network mode [ 274.004837][T16323] netlink: 'syz.0.3003': attribute type 29 has an invalid length. [ 274.015282][T16323] netlink: 'syz.0.3003': attribute type 29 has an invalid length. [ 274.394684][T16354] __nla_validate_parse: 10 callbacks suppressed [ 274.394712][T16354] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3012'. [ 274.619905][T16368] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3010'. [ 274.640365][T16368] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3010'. [ 274.670929][T16263] chnl_net:caif_netlink_parms(): no params data found [ 275.266827][T16398] netlink: 628 bytes leftover after parsing attributes in process `syz.0.3019'. [ 275.287735][T16263] bridge0: port 1(bridge_slave_0) entered blocking state [ 275.301940][T16263] bridge0: port 1(bridge_slave_0) entered disabled state [ 275.313526][T16263] bridge_slave_0: entered allmulticast mode [ 275.324890][T16263] bridge_slave_0: entered promiscuous mode [ 275.351595][T13073] hsr_slave_0: left promiscuous mode [ 275.361704][T13073] hsr_slave_1: left promiscuous mode [ 275.374201][T13073] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 275.382397][T13073] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 275.393552][T13073] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 275.405335][T13073] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 275.432892][T13073] vlan0: left allmulticast mode [ 275.439881][T13073] vlan0: left promiscuous mode [ 275.445259][T13073] veth1_vlan: left promiscuous mode [ 275.568216][T13073] pim6reg (unregistering): left allmulticast mode [ 275.596305][ T5864] Bluetooth: hci2: command tx timeout [ 276.020393][T13073] team0 (unregistering): Port device team_slave_1 removed [ 276.060535][T13073] team0 (unregistering): Port device team_slave_0 removed [ 276.356037][T16263] bridge0: port 2(bridge_slave_1) entered blocking state [ 276.390847][T16263] bridge0: port 2(bridge_slave_1) entered disabled state [ 276.399932][T16263] bridge_slave_1: entered allmulticast mode [ 276.421710][T16263] bridge_slave_1: entered promiscuous mode [ 276.631202][T16263] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 276.670369][T16421] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3027'. [ 276.676473][T16263] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 276.847186][T16263] team0: Port device team_slave_0 added [ 276.871900][T16263] team0: Port device team_slave_1 added [ 276.982941][T16438] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3032'. [ 277.060598][T16445] netlink: 76 bytes leftover after parsing attributes in process `syz.4.3035'. [ 277.088193][T16445] netlink: 76 bytes leftover after parsing attributes in process `syz.4.3035'. [ 277.101791][T16263] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 277.111059][T16263] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 277.172137][T16263] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 277.191745][T16454] netlink: 104 bytes leftover after parsing attributes in process `syz.3.3037'. [ 277.200939][T16453] IPVS: set_ctl: invalid protocol: 117 172.20.20.170:20000 [ 277.211436][T16263] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 277.227262][T16458] netlink: 'syz.4.3038': attribute type 1 has an invalid length. [ 277.245272][T16263] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 277.274843][T16456] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3033'. [ 277.294270][T16263] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 277.315635][T16453] bridge0: port 1(bridge_slave_0) entered forwarding state [ 277.321791][T13073] IPVS: stop unused estimator thread 0... [ 277.530653][T16468] ieee802154 phy0 wpan0: encryption failed: -22 [ 277.569131][T16263] hsr_slave_0: entered promiscuous mode [ 277.612241][T16263] hsr_slave_1: entered promiscuous mode [ 277.631725][T16263] debugfs: 'hsr0' already exists in 'hsr' [ 277.644308][T16263] Cannot create hsr debugfs directory [ 277.679270][ T5864] Bluetooth: hci2: command tx timeout [ 277.719103][T16486] netlink: 'syz.4.3045': attribute type 1 has an invalid length. [ 277.794745][T16486] 8021q: adding VLAN 0 to HW filter on device bond13 [ 278.276390][T16526] net_ratelimit: 220 callbacks suppressed [ 278.276408][T16526] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 278.592912][T16539] netlink: 'syz.4.3061': attribute type 1 has an invalid length. [ 278.600902][T16539] netlink: 'syz.4.3061': attribute type 1 has an invalid length. [ 278.632784][T16539] netlink: 'syz.4.3061': attribute type 2 has an invalid length. [ 278.667439][T16539] netlink: 'syz.4.3061': attribute type 2 has an invalid length. [ 278.675216][T16539] netlink: 'syz.4.3061': attribute type 2 has an invalid length. [ 278.725877][T16539] netlink: 'syz.4.3061': attribute type 2 has an invalid length. [ 279.039254][T16263] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 279.077528][T16263] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 279.098273][T16263] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 279.139012][T16263] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 279.193296][T16566] netlink: 'syz.2.3069': attribute type 1 has an invalid length. [ 279.263590][T16574] vlan2: entered allmulticast mode [ 279.493572][T16263] 8021q: adding VLAN 0 to HW filter on device bond0 [ 279.570446][T16263] 8021q: adding VLAN 0 to HW filter on device team0 [ 279.594980][ T8527] bridge0: port 1(bridge_slave_0) entered blocking state [ 279.602228][ T8527] bridge0: port 1(bridge_slave_0) entered forwarding state [ 279.650794][ T8525] bridge0: port 2(bridge_slave_1) entered blocking state [ 279.658125][ T8525] bridge0: port 2(bridge_slave_1) entered forwarding state [ 279.759218][ T5864] Bluetooth: hci2: command tx timeout [ 279.825921][T16608] __nla_validate_parse: 10 callbacks suppressed [ 279.825941][T16608] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3083'. [ 279.904470][T16608] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3083'. [ 279.913990][T16612] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3084'. [ 279.961493][T16608] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3083'. [ 280.144536][T16620] netlink: 'syz.3.3087': attribute type 2 has an invalid length. [ 280.181571][T16620] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3087'. [ 280.199453][T16627] netlink: 'syz.3.3087': attribute type 2 has an invalid length. [ 280.228085][T16627] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3087'. [ 280.288377][T16631] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3089'. [ 280.449995][T16263] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 280.487327][T16639] bond0: entered promiscuous mode [ 280.492475][T16639] bond_slave_0: entered promiscuous mode [ 280.499300][T16639] bond_slave_1: entered promiscuous mode [ 280.505274][T16639] bridge_slave_1: entered promiscuous mode [ 280.512058][T16639] syz_tun: entered promiscuous mode [ 280.517729][T16639] bond0: left allmulticast mode [ 280.522808][T16639] bond_slave_0: left allmulticast mode [ 280.528445][T16639] bond_slave_1: left allmulticast mode [ 280.534186][T16639] bridge_slave_1: left allmulticast mode [ 280.540122][T16639] syz_tun: left allmulticast mode [ 280.666700][T16263] veth0_vlan: entered promiscuous mode [ 280.696057][T16263] veth1_vlan: entered promiscuous mode [ 280.782468][T16263] veth0_macvtap: entered promiscuous mode [ 280.826848][T16263] veth1_macvtap: entered promiscuous mode [ 280.888845][T16263] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 280.941558][T16263] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 281.003027][ T68] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.040382][ T68] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.075969][ T68] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.130569][ T68] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.149669][T16665] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3100'. [ 281.353799][ T68] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 281.388848][ T68] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 281.511332][ T8525] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 281.535950][ T8525] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 281.587894][T16681] netlink: 184 bytes leftover after parsing attributes in process `syz.4.3106'. [ 281.636061][T16681] xt_socket: unknown flags 0xd0 [ 282.357682][T16715] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3118'. [ 282.431879][T16711] syzkaller0: entered promiscuous mode [ 282.438574][T16711] syzkaller0: entered allmulticast mode [ 282.456573][T16714] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 282.464935][T16714] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 282.492348][T16714] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 282.516121][T16714] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 282.586340][ T5185] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 282.598050][ T5185] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 282.606767][ T5185] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 282.616870][ T5185] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 282.625496][ T5185] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 284.082765][ T5862] bond0: (slave syz_tun): Releasing backup interface [ 284.097887][ T5862] syz_tun (unregistering): left promiscuous mode [ 284.199275][T16722] vxcan1 speed is unknown, defaulting to 1000 [ 284.263879][T16740] bridge0: port 3(vlan4) entered blocking state [ 284.288173][T16740] bridge0: port 3(vlan4) entered disabled state [ 284.294689][T16740] vlan4: entered allmulticast mode [ 284.334745][T16740] vlan4: left allmulticast mode [ 284.561754][T16755] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 284.592127][T16757] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 284.610174][T16755] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 284.618940][T16755] gretap1: entered promiscuous mode [ 284.624168][T16755] gretap1: entered allmulticast mode [ 284.666367][T16757] xt_socket: unknown flags 0xe4 [ 284.726318][ T5185] Bluetooth: hci0: command tx timeout [ 284.870298][T16772] __nla_validate_parse: 7 callbacks suppressed [ 284.870318][T16772] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3134'. [ 284.886831][T16763] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3133'. [ 285.036474][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 285.259013][T16722] chnl_net:caif_netlink_parms(): no params data found [ 285.299064][T16794] netlink: 'syz.2.3141': attribute type 10 has an invalid length. [ 285.313681][T16795] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 285.350787][T16794] bridge0: port 2(bridge_slave_1) entered disabled state [ 285.388391][T16794] bridge_slave_1: left allmulticast mode [ 285.417023][T16794] bridge_slave_1: left promiscuous mode [ 285.435520][T16794] bridge0: port 2(bridge_slave_1) entered disabled state [ 285.465435][T16809] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3144'. [ 285.486909][T16794] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 285.516870][T16809] bond0: entered promiscuous mode [ 285.522156][T16809] bond_slave_0: entered promiscuous mode [ 285.528239][T16809] bond_slave_1: entered promiscuous mode [ 285.540487][T16809] bond0: left promiscuous mode [ 285.545421][T16809] bond_slave_0: left promiscuous mode [ 285.551371][T16809] bond_slave_1: left promiscuous mode [ 285.736828][T16722] bridge0: port 1(bridge_slave_0) entered blocking state [ 285.744161][T16722] bridge0: port 1(bridge_slave_0) entered disabled state [ 285.756286][T16722] bridge_slave_0: entered allmulticast mode [ 285.764113][T16722] bridge_slave_0: entered promiscuous mode [ 285.775147][T16722] bridge0: port 2(bridge_slave_1) entered blocking state [ 285.783151][T16722] bridge0: port 2(bridge_slave_1) entered disabled state [ 285.790469][T16722] bridge_slave_1: entered allmulticast mode [ 285.798421][T16722] bridge_slave_1: entered promiscuous mode [ 285.895409][T16832] syzkaller1: entered promiscuous mode [ 285.909433][T16832] syzkaller1: entered allmulticast mode [ 285.926047][T16839] netlink: 'syz.2.3150': attribute type 12 has an invalid length. [ 285.942519][T16722] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 285.964763][T16722] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 285.983764][T16841] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3152'. [ 286.016661][T16722] team0: Port device team_slave_0 added [ 286.026634][T16722] team0: Port device team_slave_1 added [ 286.078031][T16722] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 286.086494][T16722] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 286.113010][T16722] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 286.127049][T16722] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 286.134141][T16722] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 286.161248][T16722] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 286.299445][T16722] hsr_slave_0: entered promiscuous mode [ 286.307534][T16722] hsr_slave_1: entered promiscuous mode [ 286.314022][T16722] debugfs: 'hsr0' already exists in 'hsr' [ 286.320393][T16722] Cannot create hsr debugfs directory [ 286.342549][T16848] bond0: (slave rose0): Enslaving as an active interface with an up link [ 286.496449][T16856] netlink: 'syz.1.3159': attribute type 21 has an invalid length. [ 286.517839][T16854] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 286.532936][T16856] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3159'. [ 286.536496][T16854] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3158'. [ 286.562800][T16852] vxcan1 speed is unknown, defaulting to 1000 [ 286.577954][T16854] hsr_slave_0: left promiscuous mode [ 286.584342][T16854] hsr_slave_1: left promiscuous mode [ 286.717907][ T5940] Oops: general protection fault, probably for non-canonical address 0xdffffc000000004b: 0000 [#1] SMP KASAN PTI [ 286.729839][ T5940] KASAN: null-ptr-deref in range [0x0000000000000258-0x000000000000025f] [ 286.738288][ T5940] CPU: 0 UID: 0 PID: 5940 Comm: kworker/0:7 Not tainted syzkaller #0 PREEMPT(full) [ 286.747665][ T5940] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 286.757733][ T5940] Workqueue: events l2cap_info_timeout [ 286.763219][ T5940] RIP: 0010:kasan_byte_accessible+0x12/0x30 [ 286.769131][ T5940] Code: 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 66 0f 1f 00 48 c1 ef 03 48 b8 00 00 00 00 00 fc ff df <0f> b6 04 07 3c 08 0f 92 c0 c3 cc cc cc cc cc 66 66 66 66 66 66 2e [ 286.788741][ T5940] RSP: 0018:ffffc900044cf7a8 EFLAGS: 00010206 [ 286.794804][ T5940] RAX: dffffc0000000000 RBX: ffffffff895abdb8 RCX: fb2e52d87111e900 [ 286.802762][ T5940] RDX: 0000000000000000 RSI: ffffffff895abdb8 RDI: 000000000000004b [ 286.810722][ T5940] RBP: ffffffff8a842a45 R08: 0000000000000001 R09: 0000000000000000 [ 286.818683][ T5940] R10: dffffc0000000000 R11: ffffffff8a842a00 R12: 0000000000000000 [ 286.826649][ T5940] R13: 0000000000000258 R14: 0000000000000258 R15: 0000000000000001 [ 286.834605][ T5940] FS: 0000000000000000(0000) GS:ffff888125c12000(0000) knlGS:0000000000000000 [ 286.843520][ T5940] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 286.850086][ T5940] CR2: 00007ffc8aa8df80 CR3: 000000007bab0000 CR4: 00000000003526f0 [ 286.858045][ T5940] Call Trace: [ 286.861307][ T5940] [ 286.864222][ T5940] __kasan_check_byte+0x12/0x40 [ 286.869072][ T5940] lock_acquire+0x8d/0x360 [ 286.873480][ T5940] ? lockdep_hardirqs_on+0x9c/0x150 [ 286.878663][ T5940] ? __cancel_work+0x254/0x2e0 [ 286.883419][ T5940] lock_sock_nested+0x48/0x100 [ 286.888169][ T5940] ? l2cap_sock_ready_cb+0x45/0x140 [ 286.893357][ T5940] l2cap_sock_ready_cb+0x45/0x140 [ 286.898373][ T5940] l2cap_conn_start+0x76d/0xe50 [ 286.903211][ T5940] ? __pfx_l2cap_conn_start+0x10/0x10 [ 286.908569][ T5940] ? __lock_acquire+0xab9/0xd20 [ 286.913422][ T5940] ? __pfx___mutex_lock+0x10/0x10 [ 286.918435][ T5940] ? process_scheduled_works+0x9ef/0x17b0 [ 286.924144][ T5940] l2cap_info_timeout+0x68/0xa0 [ 286.928979][ T5940] ? process_scheduled_works+0x9ef/0x17b0 [ 286.934696][ T5940] process_scheduled_works+0xae1/0x17b0 [ 286.940236][ T5940] ? __pfx_process_scheduled_works+0x10/0x10 [ 286.946210][ T5940] worker_thread+0x8a0/0xda0 [ 286.950797][ T5940] kthread+0x70e/0x8a0 [ 286.954855][ T5940] ? __pfx_worker_thread+0x10/0x10 [ 286.959953][ T5940] ? __pfx_kthread+0x10/0x10 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 286.964533][ T5940] ? _raw_spin_unlock_irq+0x23/0x50 [ 286.969715][ T5940] ? lockdep_hardirqs_on+0x9c/0x150 [ 286.975074][ T5940] ? __pfx_kthread+0x10/0x10 [ 286.979658][ T5940] ret_from_fork+0x439/0x7d0 [ 286.984247][ T5940] ? __pfx_ret_from_fork+0x10/0x10 [ 286.989350][ T5940] ? __switch_to_asm+0x39/0x70 [ 286.994103][ T5940] ? __switch_to_asm+0x33/0x70 [ 286.999029][ T5940] ? __pfx_kthread+0x10/0x10 [ 287.003609][ T5940] ret_from_fork_asm+0x1a/0x30 [ 287.008369][ T5940] [ 287.011374][ T5940] Modules linked in: [ 287.015597][ T5940] ---[ end trace 0000000000000000 ]--- [ 287.021245][ T5185] Bluetooth: hci0: command tx timeout [ 287.044267][T16865] pim6reg1: entered promiscuous mode [ 287.050988][T16865] pim6reg1: entered allmulticast mode [ 287.126969][T16722] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 287.143088][T16722] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 287.153253][T16722] netdevsim netdevsim0 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 287.170936][ T5940] RIP: 0010:kasan_byte_accessible+0x12/0x30 [ 287.180758][ T5940] Code: 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 66 0f 1f 00 48 c1 ef 03 48 b8 00 00 00 00 00 fc ff df <0f> b6 04 07 3c 08 0f 92 c0 c3 cc cc cc cc cc 66 66 66 66 66 66 2e [ 287.285604][ T5940] RSP: 0018:ffffc900044cf7a8 EFLAGS: 00010206 [ 287.292260][ T5940] RAX: dffffc0000000000 RBX: ffffffff895abdb8 RCX: fb2e52d87111e900 [ 287.301844][T16722] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 287.315640][ T5940] RDX: 0000000000000000 RSI: ffffffff895abdb8 RDI: 000000000000004b [ 287.323639][ T5940] RBP: ffffffff8a842a45 R08: 0000000000000001 R09: 0000000000000000 [ 287.328414][T16722] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 287.366093][ T5940] R10: dffffc0000000000 R11: ffffffff8a842a00 R12: 0000000000000000 [ 287.368908][T16722] netdevsim netdevsim0 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 287.374361][ T5940] R13: 0000000000000258 R14: 0000000000000258 R15: 0000000000000001 [ 287.476270][ T5940] FS: 0000000000000000(0000) GS:ffff888125c12000(0000) knlGS:0000000000000000 [ 287.485273][ T5940] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 287.503148][ T5940] CR2: 00007ffeaebe1ff8 CR3: 0000000078840000 CR4: 00000000003526f0 [ 287.511217][ T5940] Kernel panic - not syncing: Fatal exception [ 287.517536][ T5940] Kernel Offset: disabled [ 287.521847][ T5940] Rebooting in 86400 seconds..