last executing test programs: 6.456338324s ago: executing program 0 (id=2080): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x3, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1}}, &(0x7f00000002c0)='GPL\x00', 0x5, 0x7, &(0x7f0000000580)=""/7, 0x40f00, 0x24, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000000}, 0x94) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={0x1, 0xffffffffffffffff}, 0x4) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000300)={0x0, 0x2, 0x4}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'vxcan1\x00', 0x0}) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000280), 0x4) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r5}, &(0x7f0000000840), &(0x7f0000000880)=r6}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000440)={{0x1, 0xffffffffffffffff}, &(0x7f0000000380), &(0x7f0000000400)='%pB \x00'}, 0x20) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r0, 0xffffffffffffffff}, &(0x7f0000000500), &(0x7f0000000540)}, 0x20) r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000600)={0x1b, 0x0, 0x0, 0xc, 0x0, 0x1, 0x7c31b835, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x2, 0x1}, 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000840)=@bpf_tracing={0x1a, 0x6, &(0x7f0000000100)=@raw=[@map_val={0x18, 0x2, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x62}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}], &(0x7f0000000180)='syzkaller\x00', 0x1ff, 0x77, &(0x7f00000001c0)=""/119, 0x1f00, 0x25, '\x00', r3, 0x1c, r4, 0x8, &(0x7f0000000300)={0x7, 0x2}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0xb, 0x1, 0x6}, 0x10, 0x1137d, r0, 0x9, &(0x7f0000000680)=[r5, r7, r8, r9, r10], &(0x7f0000000780)=[{0x5, 0x1, 0xe, 0xc}, {0x4, 0x3, 0x6, 0x2}, {0x1, 0x2, 0xf, 0x7}, {0x3, 0x3, 0x4, 0xa}, {0x3, 0x2, 0x1, 0x7}, {0x3, 0x2, 0xc, 0xa}, {0x5, 0x1, 0xf, 0x9}, {0x2, 0x3, 0x6, 0x8}, {0x5, 0x2, 0xa, 0xc}], 0x10, 0xff}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x4, &(0x7f0000000140)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x90) 6.320321747s ago: executing program 0 (id=2084): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) socket(0x2, 0x80805, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000ac0)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x80}, 0x94) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f00000002c0), 0x10) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000280)=0xc9, 0x4) readv(r3, &(0x7f0000001780)=[{0x0}, {&(0x7f00000003c0)=""/25, 0x19}], 0x2) sendmsg$can_bcm(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="05000000030800"/16, @ANYRES64=0x0, @ANYRES64=r3], 0x80}}, 0x0) write$cgroup_int(r2, &(0x7f0000000040)=0x9b6, 0x12) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd608a37f200082c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa2b000005"], 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000005, 0x12, r2, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000140)=@o_path={0x0, r2, 0x4000, r2}, 0x18) r4 = socket$nl_generic(0x11, 0x3, 0x10) sendmsg(r4, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x2c, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x3e}], 0x2, 0x0, 0x0, 0x11000000}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x4e21, @private=0xa010101}]}, &(0x7f0000000100)=0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$TIPC_NL_LINK_RESET_STATS(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)={0x14, 0x0, 0x1, 0x70bd2a, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0xc000}, 0x20044810) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x70, &(0x7f0000000480)={r5, @in6={{0xa, 0x4e24, 0xdc00000, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}}, [0xb2, 0x7, 0xb706, 0x600000000000, 0x7, 0x9, 0x10, 0xbda, 0x4, 0x2000000000000, 0x3, 0x2, 0x100000001, 0x80000001, 0x1]}, &(0x7f0000000200)=0x100) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000140)) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r6, &(0x7f0000000080)={0x10, 0x0, 0x0, 0xfffffffffffffffd}, 0xc) r7 = socket$inet6(0xa, 0x3, 0x26) connect$inet6(r7, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) 6.088131494s ago: executing program 0 (id=2090): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x503, 0xfffffff9, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21111, 0x62004}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_GROUP_ADDR={0xa, 0x14, @local}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x48890}, 0x8000) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=@base={0x9, 0x17, 0xa, 0x40, 0x42, 0x1, 0x5}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)="b3965904", &(0x7f0000000140), 0x1, r1}, 0x38) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$llc_int(r2, 0x10c, 0x0, &(0x7f0000000100), &(0x7f0000000140)=0x4) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001600)={r1, &(0x7f00000017c0), &(0x7f0000001480)=""/93}, 0x20) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000280)={'syztnl1\x00', &(0x7f0000000240)={'gre0\x00', 0x0, 0x20, 0x1, 0x0, 0x5, {{0x6, 0x4, 0x2, 0x9, 0x18, 0x65, 0x0, 0x8, 0x2f, 0x0, @multicast2, @local, {[@noop]}}}}}) socket$inet_smc(0x2b, 0x1, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1}, 0x50) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x2, 0x5}, 0x50) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000400)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x7, '\x00', r3, 0xffffffffffffffff, 0x0, 0x4, 0x1}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x1e, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0xb7d}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@cb_func={0x18, 0x8, 0x4, 0x0, 0xffffffffffffffff}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xffff5952}}, @func={0x85, 0x0, 0x1, 0x0, 0x5}, @exit, @jmp={0x5, 0x0, 0x4, 0x8, 0x17, 0x18}, @generic={0x6, 0x4, 0x0, 0x4, 0x1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='syzkaller\x00', 0x80, 0x5f, &(0x7f0000000040)=""/95, 0x41000, 0x40, '\x00', r3, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000002c0)={0x5, 0xa, 0xffffffff, 0x6}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000480)=[r4, 0x1, 0x1, r5, 0xffffffffffffffff, r6], &(0x7f00000004c0)=[{0x1, 0x4, 0xf, 0x5}, {0x2, 0x2, 0xd, 0x4}, {0x5, 0x1, 0xd, 0x9}], 0x10, 0x355}, 0x94) 5.832608385s ago: executing program 0 (id=2095): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000002680)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000040)="18", 0x1}], 0x1, 0x0, 0x1c}}, {{&(0x7f0000000140)={0xa, 0x4e20, 0x0, @private0, 0x80000001}, 0x1c, &(0x7f0000000800)=[{&(0x7f0000000180)="ed", 0x1}], 0x1}}], 0x2, 0x0) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x82, &(0x7f0000000340), &(0x7f0000000480)=0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(0xffffffffffffffff, &(0x7f0000001c00)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000700)=""/93, 0x5d}, {&(0x7f00000004c0)=""/138, 0x8a}, {&(0x7f0000000a00)=""/4096, 0x1000}, {&(0x7f0000000800)=""/218, 0xda}, {&(0x7f0000001a80)=""/93, 0x5d}], 0x5}, 0xc}, {{0x0, 0x0, 0x0}, 0x24c9ddb}, {{0x0, 0x0, 0x0}, 0xf04}, {{0x0, 0x0, 0x0}, 0x1}, {{&(0x7f0000000580)=@ieee802154, 0x80, &(0x7f0000000100)=[{&(0x7f0000000900)=""/224, 0xe0}, {&(0x7f0000001b00)=""/253, 0xfd}], 0x2, &(0x7f0000000640)=""/143, 0x8f}, 0x3}], 0x5, 0x40000020, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x17) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) socket$inet6(0xa, 0x2, 0x0) bind$rose(0xffffffffffffffff, &(0x7f0000000000)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, 0x1, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @bcast]}, 0x40) r3 = socket(0x8, 0x3, 0x0) ioctl$IMGETCOUNT(r3, 0x40106183, &(0x7f0000000000)) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_ECHOREQ(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYRES16, @ANYBLOB="9ee7f85098c9a2f672b900a0512d006dda8b29df35556853dca945862ac89861edf76d2049d041e2c3bf89110d8fd11b7e4e6818de46f349c7d4eac6e6b00f7d19e53513c56cbb10440932fe2da0735031bcbbf4a05bf6a064b1e4c7a0a3b1ab0f83389de19c884f2005dafb7dfdc0be8e9fe0ae470990c04a875c8bd14d33b8996393bedf114d403f9aeba9fdc99fd64bf2a5060917f1ab9fcb0fe018a58ac1cfbc985a054eb457808f88931ed28882a1fcd872cf10e23da0eef9b07e67136d4c45f9505238a024979ac9b2f3b027630c6693ae536bed4a196f98"], 0x14}, 0x1, 0x0, 0x0, 0x20008010}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0xe, 0x4, &(0x7f00000000c0)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0xfffffffc, 0xfffffffffffffe82, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) connect$pppl2tp(r2, &(0x7f0000000440)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x1, @remote}, 0xa}}, 0x26) sendmmsg$inet(r2, &(0x7f0000005f80)=[{{0x0, 0x0, &(0x7f0000005dc0)}}], 0x1a000, 0x8040) r5 = socket$netlink(0x10, 0x3, 0x1) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write(r6, &(0x7f0000000000)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099cecb94b46fe0000000a00020025", 0xffffff0c) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) splice(r7, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffff8000, 0x0) 5.443647407s ago: executing program 1 (id=2101): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000012c0)={0x2c, 0x3e, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x8, 0x2, 0x0, 0x1, [@nested={0x4, 0x12}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) socket$inet_smc(0x2b, 0x1, 0x0) 5.252423987s ago: executing program 1 (id=2103): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b52710aeee835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5bc6d3fd0500000022eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe326c2ed0a432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) (async) r1 = socket(0x2a, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89b0, &(0x7f0000000180)={'ip6tnl0\x00', &(0x7f00000001c0)=@ethtool_cmd={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x100000]}}) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r2, r0, 0x26}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000000c0)={@map=r2, 0x5, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 5.203125427s ago: executing program 1 (id=2106): pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000300)=0x1, 0x4) connect$inet(r1, &(0x7f00000006c0)={0x2, 0x0, @empty}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000900)=0xffffffffffffffff, 0x4) sendmsg$DEVLINK_CMD_PORT_SET(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x8000) sendmmsg$inet(r1, &(0x7f0000001ec0)=[{{0x0, 0x0, &(0x7f0000001000)=[{&(0x7f0000000780)="92", 0xffa6}], 0x1}}, {{0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000008c0)='f', 0x1}], 0x1}}], 0x2, 0x4008440) 5.043423431s ago: executing program 1 (id=2110): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000008c0)={0x2c, r2, 0x20, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x0) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r1) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000003c0)={'gretap0\x00', &(0x7f0000000480)={'syztnl2\x00', 0x0, 0x10, 0x10, 0x4, 0x2, {{0x37, 0x4, 0x1, 0x12, 0xdc, 0x65, 0x0, 0xc, 0x29, 0x0, @remote, @multicast2, {[@timestamp_prespec={0x44, 0x44, 0xc1, 0x3, 0x7, [{@dev={0xac, 0x14, 0x14, 0x2d}}, {@private=0xa010100}, {@private=0xa010101, 0x7}, {@dev={0xac, 0x14, 0x14, 0x1e}, 0x400}, {@local, 0x7}, {@private=0xa010102, 0x4}, {@loopback, 0x2}, {@local, 0x10001}]}, @timestamp_addr={0x44, 0x2c, 0xed, 0x1, 0x7, [{@remote, 0x2}, {@loopback, 0x4}, {@rand_addr=0x64010101, 0xffc00000}, {@loopback, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x8}]}, @timestamp_prespec={0x44, 0x4c, 0x6f, 0x3, 0xa, [{@loopback, 0xffffffff}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x5a0}, {@multicast1, 0x401}, {@rand_addr=0x64010102, 0x7fff}, {@private=0xa010100, 0x5457}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xff}, {@rand_addr=0x64010102, 0x45}, {@empty, 0x100}, {@rand_addr=0x64010100, 0x3}]}, @timestamp_addr={0x44, 0xc, 0x46, 0x1, 0x3, [{@broadcast, 0x7f}]}]}}}}}) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WOWLAN(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x30}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32=r7, @ANYBLOB="00000000000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0xfffffffd, 0xc5, 0xe23, 0x1, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x80000, {0x0, 0x0, 0x0, r10, {}, {0xffe6, 0xb}, {0xfff2, 0x3}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_FLOWS={0x8, 0x5, 0x7}, @TCA_FQ_CODEL_INTERVAL={0x8, 0x3, 0x2}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008080) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000400)={'syztnl1\x00', &(0x7f0000000580)={'ip_vti0\x00', 0x0, 0x700, 0x8000, 0xc8, 0xfffffff8, {{0x10, 0x4, 0x1, 0x20, 0x40, 0x68, 0x0, 0x80, 0x2f, 0x0, @multicast1, @local, {[@timestamp_addr={0x44, 0x2c, 0x32, 0x1, 0x6, [{@local, 0x160}, {@empty, 0x7ff}, {@multicast1, 0x7}, {@rand_addr=0x64010101, 0x6}, {@private=0xa010100, 0x3}]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000680)={'ip6tnl0\x00', &(0x7f0000000600)={'syztnl1\x00', 0x0, 0x2f, 0xff, 0xf1, 0x3, 0x8, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8000, 0x8, 0x9, 0x10000}}) setsockopt$MRT_INIT(r6, 0x0, 0xc8, &(0x7f0000000180), 0x4) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xe, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x19, 0x16}, [@call={0x5c}]}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, 0xffffffffffffffff, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed8, 0x0, 0xffffffffffffffff, 0xfe8e}, 0x3f) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r1, &(0x7f0000000880)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000400}, 0xc, &(0x7f0000000840)={&(0x7f00000006c0)={0xd4, r3, 0x8, 0x70bd28, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x7}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xc}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r7}]}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x0, 0x3, 0x8}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x14, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x6}, @MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x4}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x5c, 0x7, r10}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r11}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r12}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x8000}, 0x4840) r13 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x18, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000008f00000000000000da41000018110000", @ANYRES32=r13, @ANYBLOB="0000000000000000b7020000a0d54f9eb7030000fcff00008500000086000000bf09000000000000550901008004000095000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100420000000007010000f8ffffffb702000008000000b70300000800000085000000060000003500f4ff00000000bf91000000000000b702000003000000850000fdae000000b7000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x7, 0xffe, &(0x7f0000000cc0)=""/4094, 0x41100, 0x44, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="600000004206010100000000000000000000000005000400000000000900020073797a30000000000500078008002a4000000000080012400000ffff12000300686173683a6e65742c706f7274000000a907fc30382905bee28c919f40881dd66a5b5f7013cf8ac39626bc02e87743359060c5ee0a79aa6d43d9b1587a6091c6c5562a3f6bcddabfb20402305c5f90736359470ccd0b09c6f3f6ea709c8cbe4389de81169efe5dc83b6ab063638c5700ef8071d01e442d3596abce2a2fb8ecfac8de88607b508b30b6e6c3bbda7721e83c5654977b78f9b211fb149da2685cdea18b249bfd0b6b85a2317d6b5e8590d471a1e1ab9236b7b6cab6906f197fa71c4bc7503ebdc58838f1411fceabce2f1eea35e2"], 0x60}}, 0x0) 4.860117737s ago: executing program 0 (id=2111): r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'ip6tnl0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000000000)={0x1d, r2}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="160000000000000004000000"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000000000"], 0x0}, 0x94) r3 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000002940)=@newqdisc={0x68, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r5, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x3c, 0x2, [@TCA_TBF_PBURST={0x8, 0x7, 0x1f84}, @TCA_TBF_BURST={0x8, 0x6, 0x5}, @TCA_TBF_PARMS={0x28, 0x1, {{0xfb, 0x0, 0x4aa3, 0x80, 0x5, 0x1}, {0x2, 0x2, 0x3ff, 0x3ff, 0x6f09, 0xa8c}, 0x0, 0x0, 0x149f}}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x4004001}, 0x44080) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000700)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500f0e66f1500000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e00300002800800010010000000100005800a000400aaaaaaaaaabb000008000300030000000a000400aaaaaaaab1aa000008000500", @ANYRES32=r7], 0x68}, 0x1, 0x0, 0x0, 0x4010}, 0x0) 2.776906965s ago: executing program 1 (id=2114): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x4, [@var={0x2, 0x0, 0x0, 0x11, 0x4}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x2c}, 0x20) r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)="898b968f9adae50e1196d2b3b92fa885aa5725da95", 0x15}, 0x1, 0x0, 0x0, 0x24004084}, 0x20004884) 2.72449206s ago: executing program 0 (id=2115): r0 = socket$kcm(0x10, 0x2, 0x10) socketpair(0x29, 0x5, 0x6, &(0x7f0000000040)) (async) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="180000003c000bab956cb26f8c7d94f90324fc602f000000", 0x18}], 0x1}, 0x40) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = gettid() bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x11, 0x4, &(0x7f0000000080)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xad}]}, &(0x7f0000000000)='GPL\x00', 0x8}, 0x94) (async) ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f0000000500)=r2) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) (async) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r3, 0x1, 0x10, &(0x7f00000002c0)=0x8001, 0x4) (async) splice(r3, 0x0, r4, 0x0, 0x39000, 0x0) (async) openat$cgroup(r4, &(0x7f00000000c0)='syz1\x00', 0x200002, 0x0) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000900)) 2.452430066s ago: executing program 1 (id=2119): write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000300), 0x2, 0x0) write$cgroup_type(r1, &(0x7f0000000280), 0x2c) r2 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000340), 0x12) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r5, 0x0, 0x1, 0x5) write$cgroup_pid(r2, &(0x7f0000000080), 0x12) r6 = openat$cgroup_ro(r3, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r6, &(0x7f0000000200)=0x1, 0x12) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000001000000000000000000000071163a000000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r7, &(0x7f0000000380)={0x2, 0x0, @loopback}, 0x10) r9 = socket(0x10, 0x3, 0x0) r10 = socket$pppl2tp(0x18, 0x1, 0x1) socket$pppl2tp(0x18, 0x1, 0x1) ioctl$PPPIOCGMRU(r10, 0x80047453, 0x0) sendmsg$nl_route(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[], 0x2c}}, 0x0) setsockopt$sock_int(r10, 0x1, 0x26, &(0x7f0000000000)=0x4, 0x4) connect$inet(r8, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) ioctl$EXT4_IOC_MOVE_EXT(r8, 0xc028660f, &(0x7f00000003c0)={0x0, r7, 0x20000000000000, 0x0, 0x1ff, 0xfffffffffffffff8}) sendmmsg$inet(r8, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x400000000000284, 0xf00) setsockopt$sock_int(r8, 0x1, 0xb, &(0x7f00000001c0)=0x4, 0x4) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r11, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) 1.510180424s ago: executing program 4 (id=2133): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000500), r1) r3 = socket$nl_rdma(0x10, 0x3, 0x14) (async) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f00000000c0), 0x10) (async) sendmsg$can_bcm(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) (async) sendmsg$can_bcm(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)={0x5, 0x69d7, 0x0, {}, {0x0, 0x2710}, {}, 0x1, @canfd={{0x0, 0x1, 0x0, 0x1}, 0x0, 0x1, 0x0, 0x0, "b543a73a7f773c5ec86a37d0f04438dbc950ba7500d09e09ee281e54cddb1937a59587dee1982a4c1fa25953c8c6fa6795ca8c330b5af164cc0dbc31a2551dd9"}}, 0x80}, 0x1, 0x0, 0x0, 0x8840}, 0x0) (async) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0xc004) (async) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x2000c050) (async) socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)}, 0x400c000) (async, rerun: 64) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8) (async) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f00000000c0)={0x0, 0x8, 0x1, [0x4]}, &(0x7f0000000140)=0xa) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r5, 0x84, 0x6d, &(0x7f0000000300)={r6, 0xa2, "6a5cfffebde3ce81be59e65c757bcff2d0719e81576c2f4c06b83f55db93c7f765d63606b6875996dfe7d71c3cf5754fa8eeba5319a636b6afa6ef85b01b66da429adc9f24af43d367bb5097baae77663d55d114a4413b12bc861460001d608ca1c7cf73716d9c025e79aef113e8c88622365e07e2ee7bf530a75682e77515cddf706754b3ad691eb5851a6a1e1c243abbb052c86c158bbd857662015d2741d51614"}, &(0x7f00000001c0)=0xaa) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) r8 = socket$inet_udplite(0x2, 0x2, 0x88) r9 = socket$xdp(0x2c, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x12, r9, 0x6484f000) setsockopt$inet_group_source_req(r8, 0x0, 0x2e, &(0x7f0000000240)={0x3, {{0x2, 0x4e23, @multicast1}}, {{0x2, 0x4e20, @local}}}, 0x108) (async) bind$inet6(r7, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r7, 0x3) (async) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) (async) syz_emit_ethernet(0x36, &(0x7f00000002c0)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x65, 0x0, 0xf, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0xffff}}}}}}, 0x0) syz_emit_ethernet(0x124, &(0x7f0000000900)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x116, 0xda18, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x80, 0x8, 0x0, 0x1000, {[@timestamp={0x8, 0xa, 0x7ffffffe, 0x20000006}]}}, {"cd6fe39ccb5ecdefcb47bc17cacfa5cf3eee816a747585c1501d208a9996b7a25fc6ff081eb0ffb0f38cb0e52d9db3f65f7dbad21411ab1621070da0d40aea2f5e796b0610d8feca0380088f45022fa7dd6b954d3b93c796163ddafae1669f5de10f384e5028a88c6f229aa3b51910b322b2e03ceafe08998c8305f8fd9b2fc29a009a1a14caaeb11b9cd4b7493c605f3890373f081c2fc3043ec6cf72010b8317fcd9d7d6a2464183fdd25c1b585b131ca5074d0b7a2e598881f1b4b624c4c0623c00b741334879b13b6b0d472144caeb0877948ae3f42efc15b2b6bd7c1a88890b"}}}}}}, 0x0) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000580)=0x0) sendmsg$NFC_CMD_SE_IO(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000005c0)={0x28, r2, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r10}, @NFC_ATTR_SE_APDU={0x4}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 1.434642382s ago: executing program 4 (id=2134): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc00000019000100000000000000000020010000000000000000000000000000ac1414aa00000000000000000200210000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000a900000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000000000000080400000000000000000080000000000000000000000000000000044000500fc000000000000000000000000000001000000003c0000"], 0xfc}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=ANY=[@ANYBLOB="ec00000021000100fcffffff000000000a010101000000000000000000000000fc02000000000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00001000000000009c00110000000000000000000000ffffac1414aaff0100000000000000000000000007010a010102000000000000000000000000fe8000000000000000000000000000433c000000000000000200020000000000000000000000ffffe0000001ff010000000000000000000000000001ff02000000000000007abe0c6708be44291954ff87d3cc000000000000017f00000100"], 0xec}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 1.360491267s ago: executing program 3 (id=2135): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{}, 0x0, &(0x7f00000003c0)}, 0x20) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000001000500050007000000000008000900030000001400200012000000000000000000e1ffe000000108000a0000000000060002000100e4ff14001f"], 0x5c}, 0x1, 0x6c}, 0x0) 1.358665088s ago: executing program 4 (id=2136): unshare(0x68040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfffff000) r0 = socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$TIPC_NL_BEARER_DISABLE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x8010}, 0x20000084) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000000)={0x54, 0x2, 0x6, 0x5, 0x7, 0x0, {0x0, 0x0, 0x3}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x0}]}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x20044454) connect$can_bcm(r0, &(0x7f00000005c0), 0x10) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f0000000140), 0x2}, 0x2}], 0x1, 0x10002, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0) ioctl$SIOCGSTAMPNS(r0, 0x8907, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000240)="5c00000014006b03c84e21008bf32c19021800f80200000044000200ac14140e05251e6182949a36c23d3b48dfd8cdbf9367b498fa51f60a64c9f4d4938037e786a6d0bdd77f6f60c1504bb9189d9193e9bd1c1b7800000000000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000210001000005000000000000002dbb8ddd8af26346100f43411200000000f1fdce3dbd776c050c00080000000000"], 0x1c}}, 0x44044) socket$nl_netfilter(0x10, 0x3, 0xc) 1.32629843s ago: executing program 3 (id=2137): r0 = socket$nl_audit(0x10, 0x3, 0x9) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY_LEVEL(r1, 0x0, 0x2, &(0x7f0000000040)=0xffffffffffffffff, 0x4) socket$kcm(0x2, 0x3, 0x84) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073"], 0x7c}}, 0x4c850) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) shutdown(r3, 0x0) recvmmsg(r3, &(0x7f00000004c0), 0xf02, 0xf0, 0x0) r4 = socket$l2tp(0x2, 0x2, 0x73) connect$inet(r4, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a80000000060a010400000000000000000a0000010900010073797a310000000054000480500001800b00010074617267657400004000028008000240000000012c0003007339f2f10455afb9fdd672bad09dfb78c7699c74e891a0c70000000000000000000000000000000008000100544545000900020073797a320000000014000000110001"], 0xa8}, 0x1, 0x0, 0x0, 0x800}, 0x24000840) close(0x3) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000140)) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x189a42, 0x0) ioctl$PPPIOCNEWUNIT(r6, 0xc004743e, &(0x7f0000000040)=0xfffffffd) close(0xffffffffffffffff) close(0x3) write(0xffffffffffffffff, &(0x7f0000000240), 0x0) sendmsg$AUDIT_SET_FEATURE(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, 0x3fa, 0x4, 0x70bd2b, 0x25dfdbff, {0x1, 0x1, 0x1}, ["", "", "", "", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x40010}, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="620ac4ff0000000071102300000000009500005b00000000"], &(0x7f0000000480)='GPL\x00'}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b405000000000000611034000000000063012100000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x85}, 0x52) 1.029812414s ago: executing program 3 (id=2138): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r1, 0x1) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000700)={0x0, 0x81, 0x10}, &(0x7f0000000040)=0xc) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) r3 = socket$packet(0x11, 0x3, 0x300) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x48) setsockopt$packet_int(r3, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) recvmmsg(r3, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1d, 0xa, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000003000000000000000000000085100000feffffff185a000008000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000000000000850000008600000095000000000000003eb3ea73d2baf85116411b992fc4589bbadb864f359774e31d3707059e0f39cea868f6890caab9d999434de37758f41aa249c41a8363fe3abbac5a38a6f6213f0de40cb2f07654a9926ec285ce8ea30fb9049510b3eb94fa1675fc0a81168c3f867434e250beb3ce76a7034a6256023412090314a41b15a7c60747a48d6728b3e981dbcdcf4e5a0e231ec01631182f3366804dd8dcdbcc4b31e5c3820cb7c9526d29138ae0b69a2255eb"], &(0x7f0000000680)='GPL\x00', 0x9, 0x11, &(0x7f00000007c0)=""/17, 0x40f00, 0x53, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000940)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000a40)={0x5, 0x9, 0x5, 0x4}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000d80)=[r4, r4, 0xffffffffffffffff], &(0x7f0000000dc0)=[{0x5, 0x5, 0x9, 0x1}, {0x3, 0x2, 0x7, 0x2}, {0x5, 0x4, 0x4, 0x7}, {0x3, 0x4, 0x0, 0x4}], 0x10, 0x5}, 0x94) r7 = socket$netlink(0x10, 0x3, 0xc) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$NFT_MSG_GETCHAIN(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x14, 0x4, 0xa, 0xbaa3bc3a656066c7, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x4800}, 0x44050) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r7) bpf$PROG_BIND_MAP(0x1c, &(0x7f0000000140)={r6, 0xffffffffffffffff, 0x24}, 0xc) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000000)="0800d90700000000000000bd5656", 0xe) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) unshare(0x62040200) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2400000094783c060e9ed57acfbacb884e54c584921305ed5f128674ce993e5bd186376206e25706166ca252fb6d2db1782c02f1015929d6641ead03006cf55ba0a5829d942b839d2e", @ANYRES16=r10, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r11, @ANYBLOB="0800050002000000"], 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x3c, r10, 0x5, 0x70bd2a, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @random="aa8a5848a42e"}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x3c}}, 0x0) 864.380314ms ago: executing program 2 (id=2141): socket(0x28, 0x2, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000300)=@ethtool_rxnfc={0x2f, 0x2, 0x6, {0xe, @hdata="43c3bbdee8ac6aa4a06af066d13c1ebc9bd6bb19efd50947a9dfe93a025cff56eacd7bae33e6a4acc53b4b6661ef9e8891b64da9", {0x0, @remote, 0xe, 0x4, [0x7, 0x6]}, @ah_ip4_spec={@remote, @initdev={0xac, 0x1e, 0x40, 0x0}, 0x0, 0x5}, {0x0, @broadcast, 0x8, 0x5, [0xf, 0x9]}, 0x81, 0x3}}}) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) r1 = socket(0x1e, 0x4, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000240)={'syztnl0\x00', &(0x7f0000000400)={'syztnl1\x00', 0x0, 0x10, 0x8, 0xfb, 0x8001, {{0x5, 0x4, 0x3, 0x5, 0x14, 0x65, 0x0, 0x2, 0x29, 0x0, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}) (async, rerun: 32) getsockname$packet(r1, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) (rerun: 32) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000480)={'ip6_vti0\x00', &(0x7f0000000400)={'syztnl0\x00', r2, 0x29, 0x9, 0x8, 0x800, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x2e}, 0x10, 0x0, 0xe7, 0x2}}) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) (async) socket$rds(0x15, 0x5, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) (async) ppoll(&(0x7f0000000500)=[{r4}], 0x1, 0x0, 0x0, 0x0) (async) pselect6(0x40, &(0x7f0000000440)={0x0, 0x0, 0x3, 0xfffffffffffffff9, 0x9, 0x0, 0x8000000000, 0x800000000}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x4, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000480)='cgroup.controllers\x00', 0x275a, 0x0) r7 = socket$inet_udplite(0x2, 0x2, 0x88) (async) r8 = socket$inet(0xa, 0x801, 0x84) connect$inet(r8, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r8, 0x8) (async) r9 = accept4(r8, 0x0, 0x0, 0x80000) setsockopt(r9, 0x84, 0x7f, &(0x7f00000001c0)="020000000980ffff", 0x8) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r7, 0x89f3, &(0x7f0000000040)={'syztnl2\x00', &(0x7f0000000540)={'sit0\x00', 0x0, 0x40, 0x7800, 0x7, 0x7, {{0x19, 0x4, 0x1, 0x1, 0x64, 0x64, 0x0, 0x1, 0x4, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x15}, {[@lsrr={0x83, 0x23, 0x6b, [@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @remote, @multicast1, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @multicast2]}, @ssrr={0x89, 0xb, 0x9, [@multicast1, @local]}, @ssrr={0x89, 0x13, 0x3e, [@multicast2, @empty, @dev={0xac, 0x14, 0x14, 0x42}, @loopback]}, @rr={0x7, 0xb, 0x78, [@multicast1, @local]}, @ra={0x94, 0x4}]}}}}}) (async) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f00000003c0)={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x306, @multicast}, 0x14, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 'team0\x00'}) (async) unshare(0x62040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) (async) socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r6, 0x28, 0x1, &(0x7f0000000180)=0x5, 0x8) 631.54525ms ago: executing program 2 (id=2142): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[@ANYBLOB="1800000024000103000000000000000001008c000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000006a000d0e25bd"], 0x20}}, 0x0) (async) sendmsg$nl_route(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000006a000d0e25bd"], 0x20}}, 0x0) recvmmsg(r0, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/4068, 0xfe4}, {&(0x7f00000012c0)=""/181, 0xb5}], 0x2}, 0x5}], 0x1, 0x12000, 0x0) 435.98226ms ago: executing program 4 (id=2143): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00'}) syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r2, &(0x7f0000000b40)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0xfffffff9, @dev={0xfe, 0x80, '\x00', 0x36}, 0x9}, 0x1c, &(0x7f00000004c0)=[{&(0x7f00000005c0)="05", 0x1}], 0x1}}, {{&(0x7f0000000500)={0xa, 0x4e22, 0x100, @remote, 0x40}, 0x1c, &(0x7f0000000b00)=[{&(0x7f00000006c0)="02", 0x1}], 0x1}}, {{&(0x7f0000000580)={0xa, 0x4e24, 0x200, @dev={0xfe, 0x80, '\x00', 0x29}, 0x3}, 0x1c, &(0x7f0000000940)=[{&(0x7f0000000680)="e8d5b23341ca2005478d63675bfb46a8a8408192aecbe47fa8e33d5d858c35f3", 0x20}, {&(0x7f0000000c00)="de06d7c0f63c8dcf89efd1ecec11bc5e44b55ed2ef610a4b8e0dc68d8656264f7ceab08fa652088b32e084028fea254a162e5305554212296838ae98d5decb63197b2cf60134a1b9cb080b4e851cf7faefc889dec38fec7874038c79f9f19af85fd7aea4b7ffd3fd929264013aa452020d84b2e03fb4fd5912fecf4116cf42dd65a1333afbcffd305105474f1216174cc7e9a3346f1b28", 0x97}, {&(0x7f00000007c0)="ba8ca6c0964f7c73e4bc27b0d660fa7abfb79523b174e410f27b", 0x1a}, {&(0x7f0000000dc0)="de2a616c70b6c0dcb80516b26aba51bce3025a7df1053327a75b45cdb19d77cc84b00a0dde561852a5f9974f5741037cb844873c52d3435e0d0c48f79c220e14e3e042123ef376b5e8d7dbf3806074c614b40b709805830780ce801264a66c273c7a13bbc4f712818992f8511046021cbf3607d0ace2a052cc4244dc59667a137aa944cead541cb09b1359320522a9d6e38783012b5bf9f91977d8e4356a578e4690a9834d7913da936f0302a0a157347f7e746b209f8582d3558c41a82e020623", 0xc1}, {&(0x7f0000000900)="330373b6204d692464b27dafc0befa100925116ec43e4eb1e765384b5ef0f9bb4c09a152c8eb", 0x26}], 0x5, &(0x7f0000000ec0)=ANY=[@ANYBLOB="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"], 0xf0}}], 0x3, 0x24000045) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYRESHEX=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x7, 0x8000, 0x1, 0x0, 0x1}, 0x50) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r5, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c) connect$inet6(r5, &(0x7f0000000300)={0xa, 0x4e21, 0x5, @local, 0x2}, 0x1c) r6 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r6, &(0x7f0000000500)={0xa, 0x4e20, 0x400, @mcast2, 0x4}, 0x1c) syz_emit_ethernet(0xc6, &(0x7f0000000cc0)={@random="796e3ca426ea", @multicast, @void, {@ipv6={0x86dd, @udp={0xa, 0x6, '\x00', 0x90, 0x11, 0x0, @local, @mcast2, {[@routing={0x21, 0x0, 0x2, 0x81}, @hopopts={0x0, 0x1, '\x00', [@padn={0x1, 0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}, @routing={0x3a, 0x4, 0x2, 0x1, 0x0, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast2]}], {0x4e23, 0x4e20, 0x48, 0x0, @wg=@cookie={0x3, 0xfffffffd, "dc521c259b538a2bf2a113dc2eeec0a072edf20b6d59027f", "d646c098cfc27eb8549d66e7b219c2c3b85e4508546e551af9e59631718ba089"}}}}}}}, 0x0) socket$kcm(0x2, 0xa, 0x2) writev(r4, 0x0, 0x0) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="9feb29c4ae4e4f0a91f5cd8c2e7630aa01001800000000000000fba09678238f7ee50c000000"], 0x0, 0x26, 0x0, 0x1}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r7, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x12, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18001533bb245aec96ea00000000b4a510110000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r3, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)={0x34, 0x3e, 0x1, 0x80000, 0x0, {0x1}, [@typed={0x4}, @nested={0x10, 0x1, 0x0, 0x1, [@nested={0xc, 0x10, 0x0, 0x1, [@nested={0x4, 0xb}, @typed={0x4, 0xe3, 0x0, 0x0, @binary}]}]}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x34}, 0x1, 0x0, 0x0, 0x4811}, 0x4008094) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r8}, 0x10) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="7000000002060500000000000000000000000000120003006269746d61703a69702c6d6163000000050004000000000009000200f3797a3000000000240007800c0002800800014000008e020c0001800800014000000000080008400000001005000500020000000500010006"], 0x70}}, 0x20040804) sendmsg$IPSET_CMD_DESTROY(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x3, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) 369.39834ms ago: executing program 2 (id=2144): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)}, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) pselect6(0xfd2c, &(0x7f00000001c0)={0x0, 0x300, 0x0, 0x0, 0xbb, 0xeec}, 0x0, &(0x7f00000010c0)={0x0, 0x0, 0x3, 0x0, 0x0, 0x5}, &(0x7f0000000340), 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000080)={0x58, 0x800000, 0x8, 0x7, 0x8dd}) write$bt_hci(r5, &(0x7f0000000080)=ANY=[], 0x6) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r6, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000006c0)={0x7c, r7, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_PEERS={0x4c, 0x8, 0x0, 0x1, [{0x48, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_ALLOWEDIPS={0x20, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0xff}}]}]}]}]}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e21}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4084}, 0x20000010) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000900)=ANY=[@ANYBLOB="480000006800010003001000fdffff7f00000000000000000c00020001000000150000001c000c8006050100d43f0000080003000500000008000200010000000600030001"], 0x48}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) 288.730956ms ago: executing program 4 (id=2145): ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)=ANY=[@ANYBLOB='..']) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x80, 0x0) r3 = openat$cgroup_ro(r1, &(0x7f0000000080)='rdma.current\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0x32600) r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x2, 0x1, 0x0, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_spirange={0x2, 0x10, 0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}]}, 0x50}}, 0x0) sendmmsg$inet(r4, &(0x7f00000072c0)=[{{&(0x7f0000000300)={0x2, 0x4e22, @empty}, 0x7, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000006b80)}}, {{&(0x7f0000006cc0)={0x2, 0x4e21, @remote}, 0x10, &(0x7f0000007200)}}], 0x5, 0x24008000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)=ANY=[@ANYBLOB='..']) (async) pipe(&(0x7f00000001c0)) (async) pipe(&(0x7f0000000200)) (async) splice(r0, 0x0, r2, 0x0, 0x80, 0x0) (async) openat$cgroup_ro(r1, &(0x7f0000000080)='rdma.current\x00', 0x275a, 0x0) (async) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0x32600) (async) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (async) socket$key(0xf, 0x3, 0x2) (async) sendmsg$key(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x2, 0x1, 0x0, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_spirange={0x2, 0x10, 0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}]}, 0x50}}, 0x0) (async) sendmmsg$inet(r4, &(0x7f00000072c0)=[{{&(0x7f0000000300)={0x2, 0x4e22, @empty}, 0x7, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000006b80)}}, {{&(0x7f0000006cc0)={0x2, 0x4e21, @remote}, 0x10, &(0x7f0000007200)}}], 0x5, 0x24008000) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) (async) 184.350465ms ago: executing program 2 (id=2146): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) openat$cgroup_ro(r2, &(0x7f0000000080)='blkio.throttle.io_serviced\x00', 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)={0x40, 0xa, 0x6, 0x3, 0x0, 0x0, {0xa, 0x0, 0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0xb4}, @IPSET_ATTR_ADT={0x10, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x2}}]}]}, 0x40}}, 0x9f15a82143cf0dd0) sendfile(r1, r1, &(0x7f0000000040)=0x8000000000000000, 0x9) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x54, 0x10, 0x401, 0x4002, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x20009, 0x1}, [@IFLA_LINKINFO={0x1, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_IFLAGS={0x0, 0x2, 0x7}]}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x5}, @IFLA_NET_NS_FD={0x0, 0x1c, r1}, @IFLA_EXT_MASK={0x0, 0x1d, 0x2}]}, 0x54}, 0x1, 0x0, 0x0, 0x24000141}, 0x0) 178.854829ms ago: executing program 3 (id=2147): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc00000019000100000000000000000020010000000000000000000000000000ac1414aa00000000000000000200210000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000a900000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000000000000080400000000000000000080000000000000000000000000000000044000500fc000000000000000000000000000001000000003c0000"], 0xfc}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=ANY=[@ANYBLOB="ec00000021000100fcffffff000000000a010101000000000000000000000000fc02000000000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00001000000000009c00110000000000000000000000ffffac1414aaff010000000000000000000000000a010a010102000000000000000000000000fe8000000000000000000000000000433c000000000000000200020000000000000000000000ffffe0000001ff010000000000000000000000000001ff02000000000000007abe0c6708be44291954ff87d3cc000000000000017f00000100"], 0xec}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 136.73425ms ago: executing program 3 (id=2148): syz_emit_ethernet(0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaa0000aa0180c200000008ff"], 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="300000002000010027bd7000000000000a0080800000f4031600000014000200fc02"], 0x30}}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@ipv4_getrule={0x1c, 0x22, 0x100, 0x70bd2a, 0x25dfdbfe, {0x2, 0x0, 0x80, 0xf2, 0x6, 0x0, 0x0, 0x5, 0x2}, ["", "", "", ""]}, 0x1c}}, 0x0) 107.503812ms ago: executing program 4 (id=2149): socket$packet(0x11, 0x3, 0x300) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) tee(r1, r4, 0x100000af5, 0x0) close(r3) close(r2) getsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0x4, 0x0, &(0x7f00000000c0)) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000040), 0x4) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x58, 0x10, 0x401, 0x4000, 0x0, {0x0, 0x0, 0xffff, 0x0, 0x49108}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_INGRESS_QOS={0x4}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x13, 0x19}}]}}}, @IFLA_IFNAME={0x14, 0x3, 'vlan0\x00'}]}, 0x58}}, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x0, 0xfffffffe, 0x4}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) sendmsg$nl_route_sched(r7, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001300)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r9, {0xf000, 0xffff}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_CLASSID={0x8}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x200c8080) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)={0x94, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2, 0x0, 0xffff}, [@CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x3}, @CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010101}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x2, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_MASTER={0x30, 0xe, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}]}]}, 0x94}}, 0x0) 40.408579ms ago: executing program 2 (id=2150): bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0xe, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000001000000000000000000000071126d000000000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5b471ae2}, 0x94) r0 = accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @local}, &(0x7f0000000040)=0x10, 0x80000) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000080)={0x6, @rand_addr=0x64010100, 0x4e21, 0x2, 'sh\x00', 0x11, 0x5, 0x75}, 0x2c) 13.305845ms ago: executing program 3 (id=2151): r0 = socket$igmp6(0xa, 0x3, 0x2) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = socket$inet6_icmp(0xa, 0x2, 0x3a) r3 = socket$netlink(0x10, 0x3, 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000680), r4) sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000100)=ANY=[@ANYBLOB="44f83a757ac81e243c000000", @ANYRES16=r5, @ANYBLOB="170900000000e4ffffff0100000006000200010000000500070000000000080009000200000008000a000400000006001a004e20000006001b004e200000"], 0x44}}, 0x4000) r6 = socket$pptp(0x18, 0x1, 0x2) connect$pptp(r6, &(0x7f0000000280)={0x18, 0x2, {0x2, @local}}, 0x1e) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a84000000060a010400000000000000000200000058000480540001800b00010065787468647200004400028005000200830000000800034000000000080004400000003208000640000000020800014000000008080005400000000108000540d052aec108000640000000020900010073797a30000000000900020073797a32"], 0x6034}}, 0x0) r8 = bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000040), 0x10) poll(&(0x7f00000000c0)=[{r0, 0x22}, {r1, 0x6389}, {r2, 0x408}, {r3, 0xe414}, {r4, 0x24}, {r6, 0x5240}, {r7}, {r8, 0xa200}], 0x8, 0x81) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r9, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_sfeatures={0x3b, 0x2, [{0xfe}, {0xfbfffffa}]}}) 0s ago: executing program 2 (id=2152): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x18, 0x10, 0x3}, @TCA_FQ_FLOW_MAX_RATE={0x2, 0x2}, @TCA_FQ_QUANTUM={0x2, 0x2}]}}]}, 0x48}}, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000040)={@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x20, 0x0, [{@dev}, {@broadcast}]}}) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010400000500000000000500fffe0900010073797a30000000002c000000030a01020000000000000000050000000900010073797a30000000000900030073797a300000000054000000060a010400000000000000000500000008000b40000000000900010073797a30000000002c0004802800018008000100647570001c000280080002"], 0xc8}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00'}) (async) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x18, 0x10, 0x3}, @TCA_FQ_FLOW_MAX_RATE={0x2, 0x2}, @TCA_FQ_QUANTUM={0x2, 0x2}]}}]}, 0x48}}, 0x0) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000040)={@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x20, 0x0, [{@dev}, {@broadcast}]}}) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010400000500000000000500fffe0900010073797a30000000002c000000030a01020000000000000000050000000900010073797a30000000000900030073797a300000000054000000060a010400000000000000000500000008000b40000000000900010073797a30000000002c0004802800018008000100647570001c000280080002"], 0xc8}}, 0x0) (async) kernel console output (not intermixed with test programs): e is required. [ 101.500255][ T6221] netlink: 'syz.3.63': attribute type 39 has an invalid length. [ 101.731528][ T6246] netlink: 'syz.0.68': attribute type 8 has an invalid length. [ 102.204117][ T6269] mac80211_hwsim hwsim8 wlan0: left allmulticast mode [ 102.256601][ T6269] macvtap1: left allmulticast mode [ 102.424373][ T3536] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x7 [ 103.059108][ T6305] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 103.327801][ T6312] trusted_key: syz.0.80 sent an empty control message without MSG_MORE. [ 103.365267][ T6319] netlink: 8 bytes leftover after parsing attributes in process `syz.1.83'. [ 103.404282][ T6318] netlink: 8 bytes leftover after parsing attributes in process `syz.1.83'. [ 103.446292][ T6319] veth1: entered promiscuous mode [ 103.574424][ T6319] netlink: 'syz.1.83': attribute type 1 has an invalid length. [ 103.606536][ T6319] netlink: 36 bytes leftover after parsing attributes in process `syz.1.83'. [ 103.623926][ T6319] A link change request failed with some changes committed already. Interface veth1 may have been left with an inconsistent configuration, please check. [ 103.684882][ T6319] netlink: 8 bytes leftover after parsing attributes in process `syz.1.83'. [ 103.829260][ T6318] netlink: 'syz.1.83': attribute type 1 has an invalid length. [ 103.837216][ T6318] netlink: 36 bytes leftover after parsing attributes in process `syz.1.83'. [ 103.857066][ T6318] A link change request failed with some changes committed already. Interface veth1 may have been left with an inconsistent configuration, please check. [ 103.877982][ T6318] netlink: 8 bytes leftover after parsing attributes in process `syz.1.83'. [ 104.019862][ T6325] veth3: entered promiscuous mode [ 104.054583][ T6319] netlink: 'syz.1.83': attribute type 1 has an invalid length. [ 104.062226][ T6319] netlink: 36 bytes leftover after parsing attributes in process `syz.1.83'. [ 104.086142][ T6319] A link change request failed with some changes committed already. Interface veth1 may have been left with an inconsistent configuration, please check. [ 104.142425][ T6319] netlink: 8 bytes leftover after parsing attributes in process `syz.1.83'. [ 104.143037][ T6318] netlink: 'syz.1.83': attribute type 1 has an invalid length. [ 104.177826][ T6318] netlink: 36 bytes leftover after parsing attributes in process `syz.1.83'. [ 104.226611][ T6318] A link change request failed with some changes committed already. Interface veth1 may have been left with an inconsistent configuration, please check. [ 104.273299][ T6319] netlink: 'syz.1.83': attribute type 1 has an invalid length. [ 104.312181][ T6319] netlink: 36 bytes leftover after parsing attributes in process `syz.1.83'. [ 104.324248][ T6337] netlink: 'syz.4.87': attribute type 2 has an invalid length. [ 104.354097][ T6319] A link change request failed with some changes committed already. Interface veth1 may have been left with an inconsistent configuration, please check. [ 104.420008][ T6337] k›*·]‘: entered promiscuous mode [ 104.556555][ T6346] netlink: 201916 bytes leftover after parsing attributes in process `syz.0.88'. [ 104.599250][ T6340] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.631902][ T5972] IPVS: starting estimator thread 0... [ 104.635785][ T6340] 8021q: adding VLAN 0 to HW filter on device team0 [ 104.657395][ T6348] netlink: 8 bytes leftover after parsing attributes in process `syz.4.87'. [ 104.673718][ T6340] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 104.715161][ T6343] veth0_to_team: entered promiscuous mode [ 104.721140][ T6343] veth0_to_team: entered allmulticast mode [ 104.755465][ T6347] IPVS: using max 25 ests per chain, 60000 per kthread [ 105.208865][ T6361] netlink: 'syz.4.92': attribute type 15 has an invalid length. [ 105.445317][ T6372] Driver unsupported XDP return value 0 on prog (id 29) dev N/A, expect packet loss! [ 105.561195][ T6372] netlink: 'syz.0.95': attribute type 11 has an invalid length. [ 105.976567][ T6379] 8021q: adding VLAN 0 to HW filter on device bond1 [ 106.296572][ T6383] bond1: (slave wlan0): Enslaving as an active interface with a down link [ 106.864837][ T6418] 0ªX¹¦À: renamed from caif0 [ 106.922333][ T6418] 0ªX¹¦À: entered allmulticast mode [ 106.931524][ T6418] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 108.074883][ T6457] tipc: Started in network mode [ 108.090690][ T6457] tipc: Node identity 1639ffa8ea7e, cluster identity 4711 [ 108.101263][ T6457] tipc: Enabled bearer , priority 0 [ 108.163224][ T6457] D: renamed from syzkaller0 [ 108.200211][ T6457] tipc: Disabling bearer [ 108.504773][ T6464] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 108.540466][ T6464] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 108.560605][ T6464] bond0: (slave ipvlan2): Error -95 calling set_mac_address [ 108.646649][ T6463] __nla_validate_parse: 6 callbacks suppressed [ 108.646669][ T6463] netlink: 830 bytes leftover after parsing attributes in process `syz.2.111'. [ 108.669044][ T6480] syz.1.115 uses old SIOCAX25GETINFO [ 108.709300][ T6478] validate_nla: 3 callbacks suppressed [ 108.709321][ T6478] netlink: 'syz.3.113': attribute type 1 has an invalid length. [ 108.784889][ T6476] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 108.813383][ T6478] netlink: 224 bytes leftover after parsing attributes in process `syz.3.113'. [ 108.915852][ T6484] syzkaller0: entered promiscuous mode [ 108.921502][ T6484] syzkaller0: entered allmulticast mode [ 108.981155][ T6488] netlink: 8 bytes leftover after parsing attributes in process `syz.2.117'. [ 109.028296][ T6491] bridge0: entered allmulticast mode [ 109.157890][ T6495] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 109.240876][ T6496] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 109.448630][ T6503] netlink: 'syz.3.121': attribute type 62 has an invalid length. [ 109.499654][ T6507] netlink: 16 bytes leftover after parsing attributes in process `syz.3.121'. [ 109.532201][ T6506] dummy0: entered promiscuous mode [ 109.551234][ T6506] macsec1: entered promiscuous mode [ 109.633136][ T6506] dummy0: left promiscuous mode [ 109.714284][ T6507] bond1: entered promiscuous mode [ 109.719378][ T6507] bond1: entered allmulticast mode [ 109.726387][ T6507] 8021q: adding VLAN 0 to HW filter on device bond1 [ 110.060290][ T6528] 8021q: adding VLAN 0 to HW filter on device bond1 [ 110.069594][ T6528] team0: Port device bond1 added [ 110.320346][ T5933] IPVS: starting estimator thread 0... [ 110.456844][ T6545] IPVS: using max 26 ests per chain, 62400 per kthread [ 110.685380][ T6554] netlink: 'syz.4.132': attribute type 1 has an invalid length. [ 110.705094][ T6554] netlink: 224 bytes leftover after parsing attributes in process `syz.4.132'. [ 111.157995][ T6570] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 111.657210][ T6587] netlink: 4 bytes leftover after parsing attributes in process `syz.1.142'. [ 111.707355][ T6589] ªªªªª»: renamed from veth1_vlan (while UP) [ 111.720158][ T30] audit: type=1800 audit(1757310422.673:2): pid=6585 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.139" name="blkio.bfq.time_recursive" dev="tmpfs" ino=185 res=0 errno=0 [ 113.669749][ T6650] openvswitch: netlink: Missing key (keys=40, expected=80) [ 114.391558][ T6673] netlink: 8 bytes leftover after parsing attributes in process `syz.4.166'. [ 114.431094][ T6673] netlink: 20 bytes leftover after parsing attributes in process `syz.4.166'. [ 114.634375][ T6690] netlink: 4 bytes leftover after parsing attributes in process `syz.3.169'. [ 114.777788][ T6692] IPVS: Scheduler module ip_vs_sip not found [ 115.756355][ T6673] geneve2: entered promiscuous mode [ 115.761636][ T6673] geneve2: entered allmulticast mode [ 115.794022][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.809005][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.859402][ T49] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.907669][ T49] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.270560][ T6711] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 116.299075][ T6710] netlink: 'syz.3.177': attribute type 1 has an invalid length. [ 116.343722][ T6719] netlink: 'syz.2.180': attribute type 1 has an invalid length. [ 116.370011][ T6710] 8021q: adding VLAN 0 to HW filter on device bond2 [ 116.395528][ T6719] netlink: 224 bytes leftover after parsing attributes in process `syz.2.180'. [ 116.587272][ T6725] netlink: 8 bytes leftover after parsing attributes in process `syz.0.182'. [ 116.663240][ T6727] netlink: 12 bytes leftover after parsing attributes in process `syz.3.183'. [ 116.727806][ T6729] netlink: 36 bytes leftover after parsing attributes in process `syz.2.184'. [ 116.777062][ T6733] Bluetooth: MGMT ver 1.23 [ 117.259023][ T6766] Bluetooth: MGMT ver 1.23 [ 117.782245][ T6783] netlink: 'syz.4.200': attribute type 21 has an invalid length. [ 117.801834][ T6781] veth3: entered promiscuous mode [ 117.839192][ T6783] netlink: 132 bytes leftover after parsing attributes in process `syz.4.200'. [ 118.345238][ T6801] netlink: 96 bytes leftover after parsing attributes in process `syz.1.201'. [ 118.384154][ T6774] netlink: 'syz.0.196': attribute type 13 has an invalid length. [ 118.404065][ T6774] netlink: 'syz.0.196': attribute type 17 has an invalid length. [ 118.638651][ T6812] netlink: 28 bytes leftover after parsing attributes in process `syz.1.206'. [ 119.009497][ T6819] netlink: 'syz.3.207': attribute type 20 has an invalid length. [ 119.092659][ T6819] netlink: 'syz.3.207': attribute type 20 has an invalid length. [ 119.253669][ T3536] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 119.277979][ T3536] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 119.328829][ T43] hid-generic 0005:16BF:5505.0003: unknown main item tag 0x0 [ 119.355737][ T43] hid-generic 0005:16BF:5505.0003: unknown main item tag 0x0 [ 119.427065][ T43] hid-generic 0005:16BF:5505.0003: hidraw0: BLUETOOTH HID vc3.b8 Device [syz0] on aa:aa:aa:aa:aa:aa [ 119.443472][ T3536] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 119.445527][ T6830] __nla_validate_parse: 4 callbacks suppressed [ 119.445541][ T6830] netlink: 40 bytes leftover after parsing attributes in process `syz.0.209'. [ 119.455146][ T3536] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 119.558126][ T6839] netlink: 44 bytes leftover after parsing attributes in process `syz.1.211'. [ 119.594137][ T6836] tipc: Enabling of bearer rejected, failed to enable media [ 119.651807][ T6837] fido_id[6837]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci4/hci4:200/report_descriptor': No such file or directory [ 119.907541][ T6845] bridge_slave_0: left allmulticast mode [ 119.918144][ T6845] bridge_slave_0: left promiscuous mode [ 119.949395][ T6845] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.016863][ T6845] bridge_slave_1: left allmulticast mode [ 120.080980][ T6845] bridge_slave_1: left promiscuous mode [ 120.124215][ T6845] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.164272][ T6845] bond0: (slave bond_slave_0): Releasing backup interface [ 120.181574][ T6862] IPv6: addrconf: prefix option has invalid lifetime [ 120.207676][ T6845] bond0: (slave bond_slave_1): Releasing backup interface [ 120.237873][ T6845] team0: Port device team_slave_0 removed [ 120.261601][ T6845] team0: Port device team_slave_1 removed [ 120.284526][ T6845] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 120.303359][ T6845] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 120.327608][ T6845] team0: Port device bond1 removed [ 120.498767][ T6875] netlink: 8 bytes leftover after parsing attributes in process `syz.4.219'. [ 120.523312][ T6870] netlink: 8 bytes leftover after parsing attributes in process `syz.3.218'. [ 120.568657][ T6875] netlink: 4 bytes leftover after parsing attributes in process `syz.4.219'. [ 120.640178][ T6875] netlink: 'syz.4.219': attribute type 15 has an invalid length. [ 121.201490][ T6901] tipc: Started in network mode [ 121.234929][ T6901] tipc: Node identity f2ef1181643b, cluster identity 4711 [ 121.252035][ T6912] netlink: 'syz.3.225': attribute type 1 has an invalid length. [ 121.274336][ T6901] tipc: Enabled bearer , priority 0 [ 121.305330][ T6916] netlink: 8 bytes leftover after parsing attributes in process `syz.3.225'. [ 121.325422][ T6917] netlink: 'syz.2.224': attribute type 12 has an invalid length. [ 121.549080][ T6917] tipc: Resetting bearer [ 121.963050][ T6899] tipc: Disabling bearer [ 122.023943][ T6934] netlink: 'syz.3.230': attribute type 12 has an invalid length. [ 122.284994][ T6949] netlink: 'syz.4.234': attribute type 1 has an invalid length. [ 122.292943][ T6949] netlink: 224 bytes leftover after parsing attributes in process `syz.4.234'. [ 122.387227][ T6950] netlink: 8 bytes leftover after parsing attributes in process `syz.0.232'. [ 122.440843][ T6950] veth1: entered promiscuous mode [ 122.482557][ T6950] veth1: left promiscuous mode [ 122.561484][ T6956] netlink: 8 bytes leftover after parsing attributes in process `syz.1.235'. [ 122.574035][ T6956] netlink: 24 bytes leftover after parsing attributes in process `syz.1.235'. [ 122.584139][ T6956] netlink: 'syz.1.235': attribute type 5 has an invalid length. [ 123.065986][ T6981] openvswitch: netlink: Flow actions attr not present in new flow. [ 123.275264][ T43] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 123.804841][ T43] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 123.999195][ T7009] netlink: 'syz.4.250': attribute type 16 has an invalid length. [ 124.008168][ T7009] netlink: 'syz.4.250': attribute type 17 has an invalid length. [ 124.123537][ T7006] IPv6: NLM_F_REPLACE set, but no existing node found! [ 124.571892][ T1165] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 124.738473][ T7017] tipc: Started in network mode [ 124.767731][ T7017] tipc: Node identity 1ef4d5ee97f9, cluster identity 4711 [ 124.780919][ T7017] tipc: Enabled bearer , priority 0 [ 124.789499][ T7021] syzkaller0: entered promiscuous mode [ 124.807315][ T7021] syzkaller0: entered allmulticast mode [ 124.826215][ T7032] __nla_validate_parse: 7 callbacks suppressed [ 124.826234][ T7032] netlink: 20 bytes leftover after parsing attributes in process `syz.4.254'. [ 124.844386][ T60] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.853245][ T7034] raw_sendmsg: syz.1.255 forgot to set AF_INET. Fix it! [ 124.856551][ T60] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.881721][ T7015] tipc: Resetting bearer [ 124.888953][ T60] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.911679][ T60] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.951457][ T7013] tipc: Resetting bearer [ 124.982856][ T7013] tipc: Disabling bearer [ 125.343438][ T7049] netlink: 'syz.2.259': attribute type 21 has an invalid length. [ 125.353020][ T7053] netlink: 16 bytes leftover after parsing attributes in process `syz.1.261'. [ 125.366997][ T7049] netlink: 'syz.2.259': attribute type 6 has an invalid length. [ 125.379745][ T7049] netlink: 64 bytes leftover after parsing attributes in process `syz.2.259'. [ 125.425310][ T7053] IPv6: sit2: Disabled Multicast RS [ 125.443093][ T7053] sit2: entered allmulticast mode [ 125.542061][ T7060] netlink: 4 bytes leftover after parsing attributes in process `syz.2.263'. [ 125.603533][ T7060] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.650150][ T7060] bridge_slave_1 (unregistering): left allmulticast mode [ 125.659091][ T7060] bridge_slave_1 (unregistering): left promiscuous mode [ 125.670480][ T7060] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.711136][ T60] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 125.721754][ T60] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 125.875286][ T5933] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 126.104532][ T7074] netlink: 24 bytes leftover after parsing attributes in process `syz.4.267'. [ 126.449842][ T7089] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 126.831749][ T7107] netlink: 'syz.3.276': attribute type 1 has an invalid length. [ 126.866067][ T7107] netlink: 'syz.3.276': attribute type 2 has an invalid length. [ 126.882006][ T7112] netlink: 'syz.3.276': attribute type 1 has an invalid length. [ 126.902846][ T7112] netlink: 'syz.3.276': attribute type 2 has an invalid length. [ 126.926929][ T7118] netlink: 12 bytes leftover after parsing attributes in process `syz.4.278'. [ 126.968572][ T7118] netlink: 4 bytes leftover after parsing attributes in process `syz.4.278'. [ 127.011722][ T7107] netlink: 24 bytes leftover after parsing attributes in process `syz.3.276'. [ 127.032658][ T7121] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 127.639515][ T7148] netlink: 12 bytes leftover after parsing attributes in process `syz.0.287'. [ 127.809892][ T7156] netlink: 4 bytes leftover after parsing attributes in process `syz.3.288'. [ 127.998843][ T7158] 8021q: adding VLAN 0 to HW filter on device bond2 [ 128.243554][ T7174] netlink: 'syz.4.295': attribute type 1 has an invalid length. [ 128.263894][ T7174] NCSI netlink: No device for ifindex 813332851 [ 128.509368][ T7186] netlink: 'syz.4.297': attribute type 5 has an invalid length. [ 128.658824][ T7183] 8021q: adding VLAN 0 to HW filter on device bond3 [ 128.832276][ T7193] veth2: entered promiscuous mode [ 128.874711][ T7193] veth2: entered allmulticast mode [ 129.005521][ T7193] veth4: entered promiscuous mode [ 129.012200][ T7193] veth4: entered allmulticast mode [ 129.051069][ T7193] veth6: entered promiscuous mode [ 129.058529][ T7193] veth6: entered allmulticast mode [ 129.099386][ T7193] veth8: entered promiscuous mode [ 129.104723][ T7193] veth8: entered allmulticast mode [ 129.231804][ T7193] veth10: entered promiscuous mode [ 129.242008][ T7212] Bluetooth: MGMT ver 1.23 [ 129.247183][ T7193] veth10: entered allmulticast mode [ 129.378057][ T7193] veth12: entered promiscuous mode [ 129.393717][ T7193] veth12: entered allmulticast mode [ 129.454316][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 129.466816][ T7193] veth14: entered promiscuous mode [ 129.472130][ T7193] veth14: entered allmulticast mode [ 129.540580][ T7193] veth16: entered promiscuous mode [ 129.566336][ T7193] veth16: entered allmulticast mode [ 129.621631][ T7193] veth18: entered promiscuous mode [ 129.627938][ T7193] veth18: entered allmulticast mode [ 129.883208][ T7229] 8021q: VLANs not supported on vcan0 [ 129.971080][ T7229] dvmrp1: tun_chr_ioctl cmd 1074025677 [ 129.988829][ T7229] dvmrp1: linktype set to 768 [ 130.271469][ T7251] __nla_validate_parse: 6 callbacks suppressed [ 130.271489][ T7251] netlink: 8 bytes leftover after parsing attributes in process `syz.1.314'. [ 130.321517][ T7251] netlink: 8 bytes leftover after parsing attributes in process `syz.1.314'. [ 130.367890][ T7244] netlink: 32 bytes leftover after parsing attributes in process `syz.1.314'. [ 130.807878][ T7281] tipc: Started in network mode [ 130.824159][ T7281] tipc: Node identity ac1414aa, cluster identity 4711 [ 130.832881][ T7281] tipc: Enabled bearer , priority 10 [ 130.901137][ T7287] netem: incorrect ge model size [ 130.920448][ T7287] netem: change failed [ 130.991637][ T7284] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 131.945743][ T43] tipc: Node number set to 2886997162 [ 132.901968][ T7331] netlink: 8 bytes leftover after parsing attributes in process `syz.2.335'. [ 132.919222][ T7335] netlink: 20 bytes leftover after parsing attributes in process `syz.4.337'. [ 132.954181][ T7331] netlink: 4 bytes leftover after parsing attributes in process `syz.2.335'. [ 132.980966][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.996296][ T7341] netlink: 104 bytes leftover after parsing attributes in process `syz.1.336'. [ 133.157136][ T7347] netlink: 32 bytes leftover after parsing attributes in process `syz.2.339'. [ 133.175944][ T3480] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 133.220510][ T3480] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 133.244128][ T7344] netlink: 'syz.3.338': attribute type 1 has an invalid length. [ 133.256260][ T7344] netlink: 132 bytes leftover after parsing attributes in process `syz.3.338'. [ 133.422923][ T3480] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 133.474030][ T3480] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 133.622507][ T6089] udevd[6089]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 133.741392][ T6089] udevd[6089]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 134.110352][ T7387] netlink: 8 bytes leftover after parsing attributes in process `syz.2.350'. [ 134.445318][ T7405] bridge1: entered allmulticast mode [ 134.690526][ T7411] netlink: 'syz.4.355': attribute type 10 has an invalid length. [ 134.729497][ T7411] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 134.916186][ T7415] pim6reg: entered allmulticast mode [ 134.930386][ T7415] pim6reg: left allmulticast mode [ 134.980231][ T7425] netlink: 'syz.2.356': attribute type 10 has an invalid length. [ 135.096407][ T7425] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 135.592615][ T7456] netlink: 8 bytes leftover after parsing attributes in process `syz.2.365'. [ 135.602531][ T7456] netlink: 16 bytes leftover after parsing attributes in process `syz.2.365'. [ 135.611636][ T7456] netlink: 40 bytes leftover after parsing attributes in process `syz.2.365'. [ 135.623286][ T7456] netlink: 540 bytes leftover after parsing attributes in process `syz.2.365'. [ 135.636078][ T7456] netlink: 'syz.2.365': attribute type 10 has an invalid length. [ 135.650202][ T7456] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 135.712905][ T7450] netlink: 24 bytes leftover after parsing attributes in process `syz.2.365'. [ 136.015203][ T5236] udevd[5236]: worker [6089] terminated by signal 33 (Unknown signal 33) [ 136.041666][ T5236] udevd[5236]: worker [6089] failed while handling '/devices/virtual/block/loop3' [ 136.573356][ T7491] netlink: 648 bytes leftover after parsing attributes in process `syz.4.377'. [ 136.993644][ T7517] netlink: 4 bytes leftover after parsing attributes in process `syz.3.382'. [ 137.454046][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 137.517921][ T7532] netlink: 40 bytes leftover after parsing attributes in process `syz.2.386'. [ 137.970836][ T7542] netlink: 4 bytes leftover after parsing attributes in process `syz.1.388'. [ 138.041374][ T7545] netlink: 16 bytes leftover after parsing attributes in process `syz.1.388'. [ 138.057351][ T7545] openvswitch: netlink: EtherType 0 is less than min 600 [ 138.117717][ T7542] bridge2: entered allmulticast mode [ 138.375469][ T7559] veth0: entered promiscuous mode [ 138.583471][ T7564] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 138.798690][ T7555] veth0: left promiscuous mode [ 141.721985][ T7579] __nla_validate_parse: 6 callbacks suppressed [ 141.722003][ T7579] netlink: 4 bytes leftover after parsing attributes in process `syz.2.398'. [ 141.753011][ T7581] netlink: 8 bytes leftover after parsing attributes in process `syz.1.397'. [ 141.779933][ T7582] netlink: 48 bytes leftover after parsing attributes in process `syz.4.396'. [ 141.791135][ T7582] netlink: 8 bytes leftover after parsing attributes in process `syz.4.396'. [ 141.841026][ T7587] netlink: 4 bytes leftover after parsing attributes in process `syz.0.395'. [ 141.859598][ T7585] netlink: 8 bytes leftover after parsing attributes in process `syz.1.397'. [ 141.917511][ T7581] netlink: 60 bytes leftover after parsing attributes in process `syz.1.397'. [ 141.926836][ T7595] netlink: 60 bytes leftover after parsing attributes in process `syz.1.397'. [ 141.978092][ T7595] netlink: 16 bytes leftover after parsing attributes in process `syz.1.397'. [ 142.010087][ T7581] netlink: 16 bytes leftover after parsing attributes in process `syz.1.397'. [ 142.407870][ T7608] !: renamed from dummy0 [ 142.445945][ T7612] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 142.472511][ T7612] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 142.523637][ T7616] netlink: 'syz.1.408': attribute type 12 has an invalid length. [ 142.751956][ T7626] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 142.753478][ T1165] bond0: (slave bond_slave_0): interface is now down [ 142.787823][ T1165] bond0: (slave bond_slave_1): interface is now down [ 142.795046][ T1165] bond0: (slave netdevsim0): interface is now down [ 142.807502][ T1165] bond0: now running without any active interface! [ 143.030748][ T7632] Bluetooth: MGMT ver 1.23 [ 143.433237][ T7646] sctp: [Deprecated]: syz.1.416 (pid 7646) Use of struct sctp_assoc_value in delayed_ack socket option. [ 143.433237][ T7646] Use struct sctp_sack_info instead [ 143.515665][ T7646] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 143.795348][ T7657] sch_fq: defrate 0 ignored. [ 145.233718][ T7727] netlink: 'syz.3.434': attribute type 12 has an invalid length. [ 145.242921][ T7727] netlink: 'syz.3.434': attribute type 12 has an invalid length. [ 145.251422][ T7727] netlink: 'syz.3.434': attribute type 12 has an invalid length. [ 145.261497][ T7727] netlink: 'syz.3.434': attribute type 12 has an invalid length. [ 145.269851][ T7727] netlink: 'syz.3.434': attribute type 12 has an invalid length. [ 145.279559][ T7727] netlink: 'syz.3.434': attribute type 12 has an invalid length. [ 145.287964][ T7727] netlink: 'syz.3.434': attribute type 12 has an invalid length. [ 145.296597][ T7727] netlink: 'syz.3.434': attribute type 12 has an invalid length. [ 145.304901][ T7727] netlink: 'syz.3.434': attribute type 12 has an invalid length. [ 145.448676][ T7731] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 145.630343][ T7731] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 145.844334][ T7745] gtp0: entered promiscuous mode [ 145.863569][ T7745] gtp0: entered allmulticast mode [ 145.891708][ T7748] netdevsim0: mtu less than device minimum [ 146.901804][ T7803] __nla_validate_parse: 25 callbacks suppressed [ 146.901824][ T7803] netlink: 12 bytes leftover after parsing attributes in process `syz.1.452'. [ 146.961848][ T7813] netlink: 8 bytes leftover after parsing attributes in process `syz.0.453'. [ 147.012066][ T7813] netlink: 12 bytes leftover after parsing attributes in process `syz.0.453'. [ 147.033586][ T7813] netlink: 8 bytes leftover after parsing attributes in process `syz.0.453'. [ 147.585824][ T7830] netlink: 8 bytes leftover after parsing attributes in process `syz.0.457'. [ 147.597679][ T7834] netlink: 8 bytes leftover after parsing attributes in process `syz.0.457'. [ 147.950985][ T7850] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 147.953557][ T7847] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 148.217498][ T7862] netlink: 8 bytes leftover after parsing attributes in process `syz.1.465'. [ 148.608952][ T7875] tipc: Enabled bearer , priority 0 [ 148.671865][ T7876] syzkaller0: entered promiscuous mode [ 148.684027][ T7876] syzkaller0: entered allmulticast mode [ 148.712573][ T7883] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 149.097151][ T7883] tipc: Resetting bearer [ 149.155572][ T7883] tipc: Disabling bearer [ 149.877607][ T7921] netlink: 56 bytes leftover after parsing attributes in process `syz.1.478'. [ 149.964920][ T7921] netlink: 16 bytes leftover after parsing attributes in process `syz.1.478'. [ 150.954262][ T7948] netlink: 'syz.3.488': attribute type 2 has an invalid length. [ 151.068505][ T7948] netlink: 64 bytes leftover after parsing attributes in process `syz.3.488'. [ 151.088894][ T7948] workqueue: name exceeds WQ_NAME_LEN. Truncating to: žÀ^–>º>ùMv^µâ侦¸ÑKc'A¥»– [ 151.691839][ T7977] netlink: 'syz.1.495': attribute type 1 has an invalid length. [ 152.173968][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 152.230389][ T7998] block nbd0: not configured, cannot reconfigure [ 153.031624][ T8026] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 153.080129][ T8026] batadv_slave_0: entered promiscuous mode [ 153.141702][ T8026] __nla_validate_parse: 2 callbacks suppressed [ 153.141725][ T8026] netlink: 8 bytes leftover after parsing attributes in process `syz.2.503'. [ 154.064558][ T8046] netlink: 16 bytes leftover after parsing attributes in process `syz.0.511'. [ 154.163677][ T8052] netlink: 36 bytes leftover after parsing attributes in process `syz.2.510'. [ 154.205203][ T8054] netlink: 36 bytes leftover after parsing attributes in process `syz.2.510'. [ 154.682988][ T8071] netlink: 8 bytes leftover after parsing attributes in process `syz.0.514'. [ 154.758331][ T8066] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 154.815308][ T8066] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 155.506035][ T8109] openvswitch: netlink: IP tunnel dst address not specified [ 155.554391][ T8112] openvswitch: netlink: IP tunnel dst address not specified [ 155.809582][ T8127] netlink: 36 bytes leftover after parsing attributes in process `syz.1.529'. [ 155.979969][ T8135] veth1_macvtap: left promiscuous mode [ 155.985837][ T8135] macsec0: entered promiscuous mode [ 155.991081][ T8135] macsec0: entered allmulticast mode [ 156.039049][ T8135] veth1_macvtap: entered promiscuous mode [ 156.046007][ T8135] veth1_macvtap: entered allmulticast mode [ 156.052647][ T8135] macsec0: left promiscuous mode [ 156.069350][ T8135] macsec0: left allmulticast mode [ 156.085851][ T8135] veth1_macvtap: left allmulticast mode [ 156.302213][ T8156] syzkaller0: entered promiscuous mode [ 156.338560][ T8156] syzkaller0: entered allmulticast mode [ 156.584948][ T8160] netlink: 8 bytes leftover after parsing attributes in process `syz.3.537'. [ 156.677955][ T8166] netlink: 'syz.1.539': attribute type 1 has an invalid length. [ 156.721086][ T8166] netlink: 144 bytes leftover after parsing attributes in process `syz.1.539'. [ 156.826689][ T8166] netlink: 36 bytes leftover after parsing attributes in process `syz.1.539'. [ 157.149626][ T8178] netlink: 12 bytes leftover after parsing attributes in process `syz.1.542'. [ 157.378617][ T8188] ieee802154 phy1 wpan1: encryption failed: -22 [ 157.933330][ T8201] team0 (unregistering): Port device team_slave_0 removed [ 157.949748][ T8201] team0 (unregistering): Port device team_slave_1 removed [ 158.161173][ T8232] __nla_validate_parse: 6 callbacks suppressed [ 158.161191][ T8232] netlink: 12 bytes leftover after parsing attributes in process `syz.0.558'. [ 158.338836][ T8243] syz_tun: entered allmulticast mode [ 158.421902][ T8245] dvmrp8: entered allmulticast mode [ 158.454279][ T8245] syz_tun: left allmulticast mode [ 158.459745][ T8245] dvmrp8: left allmulticast mode [ 158.572751][ T8245] netlink: 'syz.0.560': attribute type 23 has an invalid length. [ 158.667198][ T8261] netlink: 'syz.2.562': attribute type 1 has an invalid length. [ 158.687373][ T8261] netlink: 'syz.2.562': attribute type 3 has an invalid length. [ 158.704254][ T8261] netlink: 224 bytes leftover after parsing attributes in process `syz.2.562'. [ 158.743346][ T8249] netlink: 'syz.2.562': attribute type 1 has an invalid length. [ 158.814757][ T8249] 8021q: adding VLAN 0 to HW filter on device bond1 [ 158.877497][ T8249] veth21: entered promiscuous mode [ 158.918499][ T8249] bond1: (slave veth21): Enslaving as an active interface with a down link [ 158.968799][ T8269] netlink: 8 bytes leftover after parsing attributes in process `syz.1.566'. [ 158.986638][ T8269] openvswitch: netlink: Unknown nsh attribute 0 [ 158.993062][ T8269] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 159.251217][ T8279] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.570'. [ 159.355937][ T8287] veth5: entered promiscuous mode [ 159.369055][ T8278] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.570'. [ 159.466051][ T8298] openvswitch: netlink: Multiple metadata blocks provided [ 159.740057][ T8309] netlink: 8 bytes leftover after parsing attributes in process `syz.1.575'. [ 159.783036][ T8306] netlink: 8 bytes leftover after parsing attributes in process `syz.1.575'. [ 159.787288][ T8309] netlink: 12 bytes leftover after parsing attributes in process `syz.1.575'. [ 159.799401][ T8306] netlink: 12 bytes leftover after parsing attributes in process `syz.1.575'. [ 159.815783][ T8309] netlink: 'syz.1.575': attribute type 7 has an invalid length. [ 159.823988][ T8306] netlink: 'syz.1.575': attribute type 7 has an invalid length. [ 159.861328][ T8313] netlink: 96 bytes leftover after parsing attributes in process `syz.0.576'. [ 160.019186][ T8319] netlink: 'syz.1.577': attribute type 7 has an invalid length. [ 160.139676][ T8321] tipc: Enabled bearer , priority 0 [ 160.170357][ T8321] syzkaller0: entered promiscuous mode [ 160.202249][ T8321] syzkaller0: entered allmulticast mode [ 160.254714][ T8321] tipc: Resetting bearer [ 160.272867][ T8320] tipc: Resetting bearer [ 160.305655][ T8320] tipc: Disabling bearer [ 160.324463][ T8329] netlink: 'syz.3.580': attribute type 2 has an invalid length. [ 161.418133][ T8388] pim6reg: entered allmulticast mode [ 161.425824][ T8382] pim6reg: left allmulticast mode [ 161.601146][ T8334] geneve0: entered promiscuous mode [ 161.930369][ T8408] Unsupported ieee802154 address type: 0 [ 162.315621][ T8410] netlink: 'syz.0.601': attribute type 10 has an invalid length. [ 162.467169][ T8410] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 162.584956][ T8437] netlink: 'syz.2.604': attribute type 1 has an invalid length. [ 162.649139][ T8430] 8021q: adding VLAN 0 to HW filter on device bond2 [ 162.749016][ T8434] bond_slave_0: entered promiscuous mode [ 162.754963][ T8434] bond_slave_1: entered promiscuous mode [ 162.760773][ T8434] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 162.780614][ T8434] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 162.792775][ T8434] bond2: (slave macvlan0): Enslaving as a backup interface with a down link [ 162.820103][ T8435] bridge_slave_0: left allmulticast mode [ 162.826064][ T8435] bridge_slave_0: left promiscuous mode [ 162.831790][ T8435] bridge0: port 1(bridge_slave_0) entered disabled state [ 162.849760][ T8435] bond0: (slave bond_slave_0): Releasing backup interface [ 162.857939][ T8435] bond_slave_0: left promiscuous mode [ 162.870773][ T8435] bond0: (slave bond_slave_1): Releasing backup interface [ 162.879755][ T8435] bond_slave_1: left promiscuous mode [ 162.889529][ T8435] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 162.912074][ T8435] bond0: (slave netdevsim0): Releasing backup interface [ 162.926417][ T8435] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 162.962076][ T8435] bond1: (slave veth21): Releasing active interface [ 162.977809][ T8435] bond2: (slave macvlan0): Releasing backup interface [ 164.093504][ T8470] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 164.108014][ T8470] tipc: Enabled bearer , priority 10 [ 164.117305][ T8471] tipc: Enabling of bearer rejected, already enabled [ 164.235534][ T8477] netlink: 'syz.1.619': attribute type 14 has an invalid length. [ 164.486743][ T8490] __nla_validate_parse: 2 callbacks suppressed [ 164.486762][ T8490] netlink: 8 bytes leftover after parsing attributes in process `syz.0.622'. [ 165.300409][ T8521] netlink: 'syz.0.629': attribute type 1 has an invalid length. [ 165.344450][ T8521] netlink: 228 bytes leftover after parsing attributes in process `syz.0.629'. [ 165.402440][ T8523] geneve2: entered promiscuous mode [ 165.414032][ T8523] geneve2: entered allmulticast mode [ 165.498809][ T8536] netlink: 4 bytes leftover after parsing attributes in process `syz.0.632'. [ 165.920987][ T8546] netlink: 12 bytes leftover after parsing attributes in process `syz.4.623'. [ 166.351988][ T8553] netlink: 8 bytes leftover after parsing attributes in process `syz.4.633'. [ 166.368521][ T8554] netlink: 8 bytes leftover after parsing attributes in process `syz.4.633'. [ 166.861886][ T8568] tipc: Started in network mode [ 166.869180][ T8568] tipc: Node identity 56617a83e012, cluster identity 4711 [ 166.883106][ T8568] tipc: Enabled bearer , priority 0 [ 166.891252][ T8569] syzkaller0: entered promiscuous mode [ 166.907345][ T8569] syzkaller0: entered allmulticast mode [ 167.595240][ T8570] tipc: Resetting bearer [ 167.635057][ T8570] tipc: Disabling bearer [ 168.285055][ T8624] netlink: 'syz.4.649': attribute type 1 has an invalid length. [ 168.332011][ T8624] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 168.399118][ T8615] netlink: 332 bytes leftover after parsing attributes in process `syz.2.647'. [ 168.429392][ T8615] netlink: 104 bytes leftover after parsing attributes in process `syz.2.647'. [ 168.439617][ T8615] netlink: 32 bytes leftover after parsing attributes in process `syz.2.647'. [ 168.462803][ T8634] IPv6: Can't replace route, no match found [ 168.534645][ T8635] netlink: 4 bytes leftover after parsing attributes in process `syz.4.652'. [ 168.938600][ T8657] netlink: 'syz.0.658': attribute type 1 has an invalid length. [ 169.130807][ T8664] netlink: 'syz.3.660': attribute type 3 has an invalid length. [ 169.310035][ T8670] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.600676][ T8670] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.780969][ T8670] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.992178][ T8670] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.109505][ T8681] syz_tun: entered promiscuous mode [ 170.122579][ T8681] vlan2: entered promiscuous mode [ 170.697576][ T8709] netlink: 'syz.4.667': attribute type 7 has an invalid length. [ 170.769591][ T49] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.878259][ T3536] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.939500][ T3536] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.980169][ T3536] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.136055][ T8718] tipc: Enabling of bearer rejected, failed to enable media [ 171.527308][ T8732] can: request_module (can-proto-5) failed. [ 171.557505][ T8740] __nla_validate_parse: 3 callbacks suppressed [ 171.557526][ T8740] netlink: 4 bytes leftover after parsing attributes in process `syz.0.674'. [ 172.068743][ T8769] netlink: 'syz.4.682': attribute type 3 has an invalid length. [ 172.350565][ T8782] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 172.483631][ T8791] netlink: 'syz.1.689': attribute type 1 has an invalid length. [ 172.524205][ T8791] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 172.756152][ T8798] vlan1: entered allmulticast mode [ 172.771688][ T8798] veth0_vlan: entered allmulticast mode [ 172.779168][ T8798] A link change request failed with some changes committed already. Interface vlan1 may have been left with an inconsistent configuration, please check. [ 172.889119][ T8810] netlink: 28 bytes leftover after parsing attributes in process `syz.2.693'. [ 172.900055][ T8811] nbd: must specify a size in bytes for the device [ 172.908084][ T8810] netlink: 32 bytes leftover after parsing attributes in process `syz.2.693'. [ 172.919594][ T8810] netlink: 28 bytes leftover after parsing attributes in process `syz.2.693'. [ 172.931994][ T8810] netlink: 32 bytes leftover after parsing attributes in process `syz.2.693'. [ 173.346110][ T8817] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 173.629181][ T8831] tipc: Enabling of bearer rejected, failed to enable media [ 173.989454][ T8838] netlink: 4 bytes leftover after parsing attributes in process `syz.0.699'. [ 174.077073][ T8838] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 174.163390][ T8838] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 174.523539][ T8851] netlink: 4 bytes leftover after parsing attributes in process `syz.0.702'. [ 174.741615][ T6054] hid-generic 0005:16BF:5505.0004: unknown main item tag 0x2 [ 174.762768][ T6054] hid-generic 0005:16BF:5505.0004: item fetching failed at offset 3/81 [ 174.782152][ T6054] hid-generic 0005:16BF:5505.0004: probe with driver hid-generic failed with error -22 [ 175.823252][ T8885] syzkaller1: entered promiscuous mode [ 175.838617][ T8885] syzkaller1: entered allmulticast mode [ 175.952959][ T8895] netlink: 8 bytes leftover after parsing attributes in process `syz.1.710'. [ 176.087678][ T8901] syzkaller0: entered promiscuous mode [ 176.105189][ T8901] syzkaller0: entered allmulticast mode [ 176.167073][ T8901] netlink: 68 bytes leftover after parsing attributes in process `syz.2.711'. [ 176.210302][ T8901] netlink: 'syz.2.711': attribute type 3 has an invalid length. [ 176.566394][ T8910] netlink: 48 bytes leftover after parsing attributes in process `syz.0.713'. [ 176.623121][ T8927] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 177.039772][ T8939] netlink: 'syz.3.719': attribute type 1 has an invalid length. [ 177.176878][ T8947] netlink: 'syz.1.722': attribute type 1 has an invalid length. [ 177.236550][ T8943] gretap1: entered allmulticast mode [ 177.264427][ T8943] bond3: (slave gretap1): making interface the new active one [ 177.273746][ T8943] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 177.282926][ T8946] tipc: Enabled bearer , priority 0 [ 177.493227][ T8952] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 177.540360][ T8952] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 177.591270][ T8950] team_slave_1: entered promiscuous mode [ 177.604239][ T8950] team_slave_1: entered allmulticast mode [ 177.662498][ T8955] gretap1: entered promiscuous mode [ 177.699576][ T8957] macvlan2: entered promiscuous mode [ 177.741107][ T8957] macvlan2: entered allmulticast mode [ 177.774122][ T8957] bond2: entered promiscuous mode [ 177.796690][ T8957] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 177.805069][ T8972] nbd: must specify at least one socket [ 177.821176][ T8957] bond2: left promiscuous mode [ 177.896384][ T8964] tipc: Resetting bearer [ 177.909041][ T8938] tipc: Disabling bearer [ 177.982747][ T8976] syzkaller0: entered promiscuous mode [ 178.024191][ T8976] syzkaller0: entered allmulticast mode [ 178.357224][ T8992] netlink: 4 bytes leftover after parsing attributes in process `syz.1.731'. [ 179.245779][ T9035] netlink: 232 bytes leftover after parsing attributes in process `syz.4.741'. [ 179.439087][ T9053] netlink: 144 bytes leftover after parsing attributes in process `syz.1.745'. [ 179.484407][ T9054] netlink: 'syz.1.745': attribute type 1 has an invalid length. [ 179.508364][ T9053] netlink: 'syz.1.745': attribute type 1 has an invalid length. [ 179.684259][ T9067] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 179.696836][ T9072] netlink: 4 bytes leftover after parsing attributes in process `syz.0.747'. [ 179.747140][ T9053] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 179.855344][ T9066] veth0_virt_wifi: renamed from veth0_macvtap [ 179.930246][ T9065] netlink: 4 bytes leftover after parsing attributes in process `syz.0.747'. [ 180.146752][ T9096] netlink: 'syz.3.754': attribute type 1 has an invalid length. [ 180.191080][ T9096] netlink: 'syz.3.754': attribute type 1 has an invalid length. [ 180.192117][ T9100] netlink: 12 bytes leftover after parsing attributes in process `syz.2.753'. [ 180.218273][ T9096] NCSI netlink: No device for ifindex 0 [ 180.264561][ T9100] netlink: 'syz.2.753': attribute type 2 has an invalid length. [ 180.265842][ T9096] netlink: 'syz.3.754': attribute type 1 has an invalid length. [ 180.318496][ T9107] netlink: 'syz.3.754': attribute type 1 has an invalid length. [ 180.334030][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 180.363549][ T9107] NCSI netlink: No device for ifindex 0 [ 180.598636][ T9118] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 181.165112][ T9146] netlink: 36 bytes leftover after parsing attributes in process `syz.2.764'. [ 181.235643][ T9149] netlink: 4 bytes leftover after parsing attributes in process `syz.2.764'. [ 181.355058][ T9148] netlink: 788 bytes leftover after parsing attributes in process `syz.4.765'. [ 182.183338][ T9205] __nla_validate_parse: 1 callbacks suppressed [ 182.183358][ T9205] netlink: 12 bytes leftover after parsing attributes in process `syz.1.771'. [ 182.482137][ T9226] netlink: 208 bytes leftover after parsing attributes in process `syz.4.776'. [ 182.664855][ T9239] veth1_to_bond: entered allmulticast mode [ 182.926133][ T9247] netlink: 12 bytes leftover after parsing attributes in process `syz.3.781'. [ 183.077450][ T9259] macsec0: entered promiscuous mode [ 183.085049][ T9259] macsec0: entered allmulticast mode [ 183.097206][ T9259] veth1_macvtap: entered allmulticast mode [ 183.103353][ T9259] macsec0: left promiscuous mode [ 183.113125][ T9259] macsec0: left allmulticast mode [ 183.129838][ T9259] veth1_macvtap: left allmulticast mode [ 183.336463][ T9275] netlink: 'syz.3.786': attribute type 1 has an invalid length. [ 183.441423][ T9275] 8021q: adding VLAN 0 to HW filter on device bond4 [ 183.526236][ T9280] 8021q: adding VLAN 0 to HW filter on device bond4 [ 183.568445][ T9280] bond4: (slave vxcan1): The slave device specified does not support setting the MAC address [ 183.623045][ T9280] bond4: (slave vxcan1): Error -95 calling set_mac_address [ 183.656105][ T9287] nbd: must specify at least one socket [ 183.662919][ T9287] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 183.942663][ T9275] veth7: entered promiscuous mode [ 184.003324][ T9275] bond4: (slave veth7): Enslaving as an active interface with a down link [ 184.231038][ T9307] netlink: 20 bytes leftover after parsing attributes in process `syz.4.795'. [ 184.736043][ T9321] netlink: 'syz.1.799': attribute type 11 has an invalid length. [ 185.157594][ T959] IPVS: starting estimator thread 0... [ 185.219504][ T9341] _ÐZ`Ô€@S: entered promiscuous mode [ 185.263957][ T9340] IPVS: using max 26 ests per chain, 62400 per kthread [ 185.656431][ T9347] netlink: 48 bytes leftover after parsing attributes in process `syz.0.807'. [ 185.872105][ T9354] lo speed is unknown, defaulting to 1000 [ 185.880256][ T9357] tipc: Enabling of bearer rejected, failed to enable media [ 185.905387][ T9354] lo speed is unknown, defaulting to 1000 [ 185.927976][ T9360] netlink: 68 bytes leftover after parsing attributes in process `syz.1.808'. [ 185.943339][ T9354] lo speed is unknown, defaulting to 1000 [ 185.966070][ T9364] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 185.999761][ T9354] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 186.075375][ T9366] batadv0: entered promiscuous mode [ 186.080630][ T9366] batadv0: entered allmulticast mode [ 186.090250][ T9367] netlink: 8 bytes leftover after parsing attributes in process `syz.1.813'. [ 186.092541][ T9354] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 186.120822][ T9367] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 186.152114][ T9367] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 186.157466][ T9375] sctp: [Deprecated]: syz.0.811 (pid 9375) Use of int in max_burst socket option deprecated. [ 186.157466][ T9375] Use struct sctp_assoc_value instead [ 186.255966][ T9354] lo speed is unknown, defaulting to 1000 [ 186.264858][ T9373] macvlan3: entered allmulticast mode [ 186.270278][ T9373] veth1_vlan: entered allmulticast mode [ 186.299601][ T9373] veth1_vlan: left allmulticast mode [ 186.375084][ T9354] lo speed is unknown, defaulting to 1000 [ 186.383107][ T9354] lo speed is unknown, defaulting to 1000 [ 186.417679][ T9354] lo speed is unknown, defaulting to 1000 [ 186.452947][ T9377] lo speed is unknown, defaulting to 1000 [ 186.483753][ T9385] netlink: 'syz.1.818': attribute type 1 has an invalid length. [ 186.493398][ T9354] lo speed is unknown, defaulting to 1000 [ 186.589850][ T9385] netlink: 48 bytes leftover after parsing attributes in process `syz.1.818'. [ 186.876173][ T9408] netlink: 4 bytes leftover after parsing attributes in process `syz.3.825'. [ 187.226498][ T9424] netlink: 12 bytes leftover after parsing attributes in process `syz.3.828'. [ 187.257476][ T9424] netlink: 16 bytes leftover after parsing attributes in process `syz.3.828'. [ 187.472733][ T9439] netlink: 'syz.1.832': attribute type 10 has an invalid length. [ 187.497093][ T9439] team0: Device ipvlan1 failed to register rx_handler [ 187.948466][ T9457] netlink: 28 bytes leftover after parsing attributes in process `syz.3.837'. [ 188.245415][ T9465] netlink: 8 bytes leftover after parsing attributes in process `syz.2.840'. [ 188.262745][ T9466] netlink: 432 bytes leftover after parsing attributes in process `syz.3.841'. [ 188.271960][ T9465] netlink: 4 bytes leftover after parsing attributes in process `syz.2.840'. [ 188.348085][ T9465] netlink: 8 bytes leftover after parsing attributes in process `syz.2.840'. [ 188.379810][ T9465] netlink: 4 bytes leftover after parsing attributes in process `syz.2.840'. [ 188.520302][ T9481] syzkaller0: entered promiscuous mode [ 188.527956][ T9481] syzkaller0: entered allmulticast mode [ 188.541759][ T9474] lo speed is unknown, defaulting to 1000 [ 188.613988][ T9485] netlink: 48 bytes leftover after parsing attributes in process `syz.2.846'. [ 189.227812][ T9522] netlink: 48 bytes leftover after parsing attributes in process `syz.2.853'. [ 189.383617][ T43] IPVS: starting estimator thread 0... [ 189.405577][ T9519] vcan0: Master is either lo or non-ether device [ 189.493897][ T9530] IPVS: using max 23 ests per chain, 55200 per kthread [ 189.629260][ T9542] netlink: 'syz.3.857': attribute type 2 has an invalid length. [ 189.648317][ T9542] netlink: 'syz.3.857': attribute type 1 has an invalid length. [ 190.639617][ T9589] tipc: Enabled bearer , priority 0 [ 190.721571][ T9589] syzkaller0: entered promiscuous mode [ 190.739765][ T9589] syzkaller0: entered allmulticast mode [ 190.823497][ T9589] tipc: Resetting bearer [ 190.871596][ T9587] tipc: Resetting bearer [ 190.938262][ T9587] tipc: Disabling bearer [ 191.289133][ T9627] netlink: 'syz.2.877': attribute type 1 has an invalid length. [ 191.340736][ T9632] TCP: tcp_parse_options: Illegal window scaling value 254 > 14 received [ 191.359210][ T9627] 8021q: adding VLAN 0 to HW filter on device bond6 [ 191.662453][ T9650] netlink: 'syz.0.883': attribute type 13 has an invalid length. [ 192.954773][ T9692] netlink: 'syz.3.895': attribute type 3 has an invalid length. [ 192.960965][ T9690] tipc: Enabled bearer , priority 0 [ 193.052093][ T9690] syzkaller0: entered promiscuous mode [ 193.102941][ T9690] syzkaller0: entered allmulticast mode [ 193.186150][ T9707] __nla_validate_parse: 22 callbacks suppressed [ 193.186172][ T9707] netlink: 8 bytes leftover after parsing attributes in process `syz.1.901'. [ 193.196690][ T9690] tipc: Resetting bearer [ 193.203262][ T9709] netlink: 'syz.2.900': attribute type 10 has an invalid length. [ 193.230768][ T9708] netlink: 8 bytes leftover after parsing attributes in process `syz.1.901'. [ 193.265354][ T9708] netlink: 12 bytes leftover after parsing attributes in process `syz.1.901'. [ 193.293529][ T9713] netlink: 'syz.2.900': attribute type 10 has an invalid length. [ 193.310798][ T9707] netlink: 12 bytes leftover after parsing attributes in process `syz.1.901'. [ 193.383581][ T9708] netlink: 'syz.1.901': attribute type 18 has an invalid length. [ 193.414128][ T9689] tipc: Resetting bearer [ 193.433108][ T9707] netlink: 'syz.1.901': attribute type 18 has an invalid length. [ 193.725627][ T9689] tipc: Disabling bearer [ 193.847503][ T9721] tipc: Enabled bearer , priority 0 [ 193.856261][ T9721] syzkaller0: entered promiscuous mode [ 193.861851][ T9721] syzkaller0: entered allmulticast mode [ 193.927695][ T9722] tipc: Resetting bearer [ 193.971388][ T9720] tipc: Resetting bearer [ 194.022143][ T9720] tipc: Disabling bearer [ 194.082475][ T9732] netlink: 12 bytes leftover after parsing attributes in process `syz.0.905'. [ 194.192777][ T9735] netlink: 'syz.1.906': attribute type 13 has an invalid length. [ 194.420573][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.477823][ T9743] netlink: 24 bytes leftover after parsing attributes in process `syz.4.909'. [ 194.596956][ T9737] lo speed is unknown, defaulting to 1000 [ 195.003348][ T9759] netlink: 96 bytes leftover after parsing attributes in process `syz.2.913'. [ 195.030013][ T9770] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.158561][ T9770] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.181497][ T9781] validate_nla: 2 callbacks suppressed [ 195.181517][ T9781] netlink: 'syz.0.918': attribute type 10 has an invalid length. [ 195.198763][ T9775] lo speed is unknown, defaulting to 1000 [ 195.235020][ T9787] netlink: 'syz.0.918': attribute type 10 has an invalid length. [ 195.242793][ T9787] netlink: 40 bytes leftover after parsing attributes in process `syz.0.918'. [ 195.256889][ T9781] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 195.266253][ T9781] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 195.275629][ T9774] lo speed is unknown, defaulting to 1000 [ 195.299368][ T9781] netlink: 8 bytes leftover after parsing attributes in process `syz.0.918'. [ 195.311886][ T9781] netlink: 24 bytes leftover after parsing attributes in process `syz.0.918'. [ 195.331898][ T9787] batadv0: entered promiscuous mode [ 195.342756][ T9787] batadv0: entered allmulticast mode [ 195.358315][ T9787] bond0: (slave batadv0): Releasing backup interface [ 195.380709][ T9787] bridge0: port 3(batadv0) entered blocking state [ 195.389782][ T9787] bridge0: port 3(batadv0) entered disabled state [ 195.417557][ T9770] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.512557][ T9770] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.710841][ T49] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.752182][ T9178] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.779767][ T49] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 195.789694][ T49] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 196.149848][ T9815] sctp: [Deprecated]: syz.0.925 (pid 9815) Use of struct sctp_assoc_value in delayed_ack socket option. [ 196.149848][ T9815] Use struct sctp_sack_info instead [ 196.214503][ T9814] sctp: [Deprecated]: syz.0.925 (pid 9814) Use of struct sctp_assoc_value in delayed_ack socket option. [ 196.214503][ T9814] Use struct sctp_sack_info instead [ 196.244465][ T3536] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.253671][ T3536] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.689913][ T9847] netlink: 'syz.3.933': attribute type 1 has an invalid length. [ 198.257037][ T9923] tap0: tun_chr_ioctl cmd 35111 [ 198.535029][ T9928] __nla_validate_parse: 3 callbacks suppressed [ 198.535049][ T9928] netlink: 8 bytes leftover after parsing attributes in process `syz.0.954'. [ 198.586608][ T9928] netlink: 4 bytes leftover after parsing attributes in process `syz.0.954'. [ 198.595977][ T9938] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not our slave [ 198.596001][ T9938] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1) [ 198.627646][ T9928] netlink: 'syz.0.954': attribute type 1 has an invalid length. [ 198.674117][ T9928] netlink: 10 bytes leftover after parsing attributes in process `syz.0.954'. [ 198.728762][ T9943] netlink: 24 bytes leftover after parsing attributes in process `syz.3.957'. [ 198.745435][ T9928] nbd: socks must be embedded in a SOCK_ITEM attr [ 198.754372][ T9928] block nbd0: shutting down sockets [ 198.908543][ T9948] sch_tbf: burst 88 is lower than device veth9 mtu (1514) ! [ 199.040848][ T9958] netlink: 52 bytes leftover after parsing attributes in process `syz.2.961'. [ 199.556631][ T9982] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: invalid value (71) [ 199.577425][ T9979] lo speed is unknown, defaulting to 1000 [ 199.586596][ T9982] Bluetooth: MGMT ver 1.23 [ 199.594282][ T9982] netlink: 16 bytes leftover after parsing attributes in process `syz.2.966'. [ 199.614444][ T9982] netlink: 16 bytes leftover after parsing attributes in process `syz.2.966'. [ 199.768260][ T9992] netlink: 40 bytes leftover after parsing attributes in process `syz.0.968'. [ 200.458077][T10006] netlink: 44 bytes leftover after parsing attributes in process `syz.1.971'. [ 200.458839][T10007] netlink: 8 bytes leftover after parsing attributes in process `syz.3.970'. [ 200.718304][T10019] geneve0: entered promiscuous mode [ 201.046683][T10028] tipc: Enabled bearer , priority 0 [ 201.095541][T10023] tipc: Disabling bearer [ 201.614202][ T5881] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 201.622078][ T5881] Bluetooth: hci2: command 0x0401 tx timeout [ 201.964684][T10076] netlink: 'syz.4.993': attribute type 1 has an invalid length. [ 201.985039][T10076] netlink: 'syz.4.993': attribute type 3 has an invalid length. [ 202.008070][T10079] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 202.059561][T10080] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 202.105241][T10076] NCSI netlink: No device for ifindex 246 [ 202.267134][T10088] netlink: 'syz.3.995': attribute type 11 has an invalid length. [ 203.452111][T10116] macvlan2: entered allmulticast mode [ 203.471785][T10116] veth1_vlan: entered allmulticast mode [ 203.550026][T10116] veth1_vlan: left allmulticast mode [ 203.612937][T10110] lo speed is unknown, defaulting to 1000 [ 203.752165][T10119] lo speed is unknown, defaulting to 1000 [ 203.928009][T10151] __nla_validate_parse: 10 callbacks suppressed [ 203.928030][T10151] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1007'. [ 203.958904][T10153] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1008'. [ 203.970099][T10153] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1008'. [ 203.995609][T10153] netlink: 58 bytes leftover after parsing attributes in process `syz.4.1008'. [ 204.301409][T10172] syzkaller1: entered promiscuous mode [ 204.307122][T10172] syzkaller1: entered allmulticast mode [ 204.479295][T10180] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1014'. [ 204.904154][T10205] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1022'. [ 205.066529][T10208] lo speed is unknown, defaulting to 1000 [ 205.780817][T10240] tipc: Enabled bearer , priority 0 [ 205.836568][T10243] syzkaller0: entered promiscuous mode [ 205.852602][T10243] syzkaller0: entered allmulticast mode [ 205.939123][T10240] tipc: Resetting bearer [ 206.074254][T10250] sctp: [Deprecated]: syz.2.1035 (pid 10250) Use of int in max_burst socket option. [ 206.074254][T10250] Use struct sctp_assoc_value instead [ 206.106806][T10240] tipc: Resetting bearer [ 206.150898][T10251] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1035'. [ 206.161894][T10240] tipc: Disabling bearer [ 206.240801][T10251] syz_tun: entered promiscuous mode [ 206.270932][T10251] syz_tun: left promiscuous mode [ 206.352347][T10256] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1037'. [ 206.581721][T10256] nbd: socks must be embedded in a SOCK_ITEM attr [ 207.102534][T10273] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1041'. [ 207.104772][T10274] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 207.886003][T10295] lo speed is unknown, defaulting to 1000 [ 208.397113][T10315] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1052'. [ 208.563478][T10323] netlink: 'syz.3.1055': attribute type 3 has an invalid length. [ 208.575281][T10323] netlink: 'syz.3.1055': attribute type 1 has an invalid length. [ 208.820013][T10328] macvtap2: entered promiscuous mode [ 208.854540][T10328] macvtap2: entered allmulticast mode [ 208.860337][T10328] syz_tun: entered allmulticast mode [ 208.903546][T10328] syz_tun: entered promiscuous mode [ 208.920173][T10328] team0: Device macvtap2 failed to register rx_handler [ 208.927956][T10328] syz_tun: left allmulticast mode [ 208.933003][T10328] syz_tun: left promiscuous mode [ 208.992270][T10341] __nla_validate_parse: 1 callbacks suppressed [ 208.992293][T10341] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1061'. [ 209.021441][T10341] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1061'. [ 209.031333][T10341] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1061'. [ 209.249688][T10359] lo speed is unknown, defaulting to 1000 [ 209.268323][T10363] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1067'. [ 209.281960][T10363] openvswitch: netlink: Flow key attr not present in new flow. [ 209.496740][T10368] vlan3: entered promiscuous mode [ 209.541820][T10368] bridge0: entered promiscuous mode [ 209.581199][T10368] bridge0: port 3(vlan3) entered blocking state [ 209.607824][T10368] bridge0: port 3(vlan3) entered disabled state [ 209.634765][T10368] vlan3: entered allmulticast mode [ 209.650437][T10368] bridge0: entered allmulticast mode [ 209.764254][T10368] vlan3: left allmulticast mode [ 209.864170][T10368] bridge0: left allmulticast mode [ 209.938884][T10386] sctp: [Deprecated]: syz.0.1071 (pid 10386) Use of int in max_burst socket option. [ 209.938884][T10386] Use struct sctp_assoc_value instead [ 210.560898][T10395] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1075'. [ 210.793157][T10401] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1077'. [ 210.807557][T10401] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1077'. [ 210.818603][T10401] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1077'. [ 210.950690][T10405] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1078'. [ 210.962526][T10408] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.1079'. [ 211.856333][ T5186] Bluetooth: hci3: command 0x0406 tx timeout [ 211.856898][ T5876] Bluetooth: hci1: command 0x0406 tx timeout [ 211.862449][ T5186] Bluetooth: hci0: command 0x0406 tx timeout [ 211.868526][ T5879] Bluetooth: hci2: command 0x0401 tx timeout [ 211.976866][T10431] netlink: 'syz.3.1084': attribute type 19 has an invalid length. [ 212.075603][T10436] sch_tbf: burst 0 is lower than device veth0_to_team mtu (1514) ! [ 212.220966][T10444] syzkaller0: entered promiscuous mode [ 212.228681][T10444] syzkaller0: entered allmulticast mode [ 212.239751][T10449] siw: device registration error -23 [ 212.772918][T10468] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 212.780294][T10468] IPv6: NLM_F_CREATE should be set when creating new route [ 212.787693][T10468] IPv6: NLM_F_CREATE should be set when creating new route [ 212.929480][T10473] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 213.333367][T10490] netlink: 'syz.4.1102': attribute type 21 has an invalid length. [ 213.341614][T10490] netlink: 'syz.4.1102': attribute type 4 has an invalid length. [ 213.744413][T10501] 8021q: adding VLAN 0 to HW filter on device bond6 [ 213.758903][T10501] bond5: (slave bond6): Enslaving as an active interface with an up link [ 213.800456][T10498] bond5 (unregistering): (slave bond6): Releasing backup interface [ 213.816552][T10498] bond5 (unregistering): Released all slaves [ 214.710676][T10549] __nla_validate_parse: 46 callbacks suppressed [ 214.710693][T10549] netlink: 576 bytes leftover after parsing attributes in process `syz.2.1120'. [ 214.730884][T10550] netlink: 576 bytes leftover after parsing attributes in process `syz.2.1120'. [ 214.750492][T10549] syzkaller1: entered allmulticast mode [ 214.809305][T10552] tipc: Enabled bearer , priority 0 [ 214.820543][T10552] syzkaller0: entered promiscuous mode [ 214.827377][T10552] syzkaller0: entered allmulticast mode [ 214.842493][T10552] tipc: Resetting bearer [ 214.958802][T10556] tipc: Resetting bearer [ 215.074739][T10556] tipc: Disabling bearer [ 215.148425][T10565] vlan2: entered promiscuous mode [ 215.261634][T10574] nbd: must specify a device to reconfigure [ 215.545651][T10596] netlink: 'syz.2.1133': attribute type 3 has an invalid length. [ 215.609255][T10603] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1135'. [ 215.729970][T10608] netlink: 'syz.3.1134': attribute type 1 has an invalid length. [ 215.760839][T10608] netlink: 180 bytes leftover after parsing attributes in process `syz.3.1134'. [ 215.941082][T10605] erspan0: entered promiscuous mode [ 215.979021][T10605] vlan3: entered promiscuous mode [ 216.456016][T10613] tun0: tun_chr_ioctl cmd 1074025673 [ 216.694312][T10634] netlink: 124 bytes leftover after parsing attributes in process `syz.4.1143'. [ 216.716405][T10629] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1144'. [ 216.865038][T10639] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1146'. [ 217.139700][T10651] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 217.146609][T10651] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 217.207715][T10653] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1151'. [ 217.210886][T10655] netlink: 'syz.1.1152': attribute type 1 has an invalid length. [ 217.229535][T10655] netlink: 'syz.1.1152': attribute type 1 has an invalid length. [ 217.474144][T10669] netlink: 'syz.1.1152': attribute type 1 has an invalid length. [ 217.574425][T10669] 8021q: adding VLAN 0 to HW filter on device bond5 [ 217.690628][T10669] bond1: (slave wlan0): Releasing active interface [ 217.769347][T10669] bond5: (slave wlan0): Enslaving as an active interface with a down link [ 218.582597][T10720] netlink: 'syz.2.1164': attribute type 12 has an invalid length. [ 218.599006][T10722] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1166'. [ 218.611696][T10722] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1166'. [ 218.892302][T10734] netlink: 'syz.4.1169': attribute type 13 has an invalid length. [ 219.089751][T10740] bond2: option mode: unable to set because the bond device is up [ 219.137793][T10740] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 219.156329][T10740] bond2: (slave macvlan3): Enslaving as a backup interface with a down link [ 219.608347][T10764] netlink: 'syz.1.1177': attribute type 1 has an invalid length. [ 220.355627][T10789] __nla_validate_parse: 7 callbacks suppressed [ 220.355648][T10789] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1185'. [ 220.838857][T10789] bond2: (slave macvlan3): Releasing backup interface [ 220.862707][T10789] bond0 (unregistering): Released all slaves [ 220.943588][T10817] netlink: 284 bytes leftover after parsing attributes in process `syz.1.1189'. [ 221.714792][T10840] netlink: 240 bytes leftover after parsing attributes in process `syz.0.1196'. [ 222.283329][T10873] wg1: entered promiscuous mode [ 222.288580][T10873] wg1: entered allmulticast mode [ 222.601848][T10886] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1211'. [ 222.633022][T10889] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1212'. [ 222.642324][T10889] netlink: 'syz.1.1212': attribute type 30 has an invalid length. [ 222.651424][T10889] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1212'. [ 222.674078][T10889] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1212'. [ 222.695316][T10889] netlink: 'syz.1.1212': attribute type 30 has an invalid length. [ 222.708545][T10889] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1212'. [ 222.858038][T10899] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1214'. [ 223.116587][T10909] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1218'. [ 223.273001][T10912] bridge0: port 3(batadv0) entered disabled state [ 223.299770][T10912] bridge_slave_1: left allmulticast mode [ 223.306768][T10912] bridge_slave_1: left promiscuous mode [ 223.325730][T10912] bridge0: port 2(bridge_slave_1) entered disabled state [ 223.398737][T10912] bridge_slave_0: left allmulticast mode [ 223.416763][T10912] bridge_slave_0: left promiscuous mode [ 223.436041][T10912] bridge0: port 1(bridge_slave_0) entered disabled state [ 223.450503][T10924] netlink: 'syz.4.1224': attribute type 10 has an invalid length. [ 223.631888][T10912] bridge0 (unregistering): left allmulticast mode [ 223.759579][T10924] !: entered promiscuous mode [ 223.776378][T10924] bridge0: port 1(0!) entered blocking state [ 223.783308][T10924] bridge0: port 1(0!) entered disabled state [ 223.789997][T10924] !: entered allmulticast mode [ 223.825145][T10933] netlink: 'syz.3.1225': attribute type 10 has an invalid length. [ 223.916160][T10933] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 224.739960][T10975] netlink: 'syz.0.1236': attribute type 19 has an invalid length. [ 224.775325][T10976] netlink: 'syz.3.1238': attribute type 3 has an invalid length. [ 224.801373][T10976] netlink: 'syz.3.1238': attribute type 9 has an invalid length. [ 224.853399][T10975] tipc: Bearer : already 2 bearers with priority 10 [ 224.871143][T10975] tipc: Bearer : trying with adjusted priority [ 224.911014][T10975] tipc: Enabling of bearer rejected, failed to enable media [ 225.314662][T10981] netlink: 'syz.3.1240': attribute type 10 has an invalid length. [ 225.323159][T10981] bridge0: port 2(bridge_slave_1) entered disabled state [ 225.331963][T10981] bridge0: port 1(bridge_slave_0) entered disabled state [ 225.397901][T10984] __nla_validate_parse: 5 callbacks suppressed [ 225.397919][T10984] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1240'. [ 225.470240][T10981] bridge0: port 2(bridge_slave_1) entered blocking state [ 225.477514][T10981] bridge0: port 2(bridge_slave_1) entered forwarding state [ 225.485511][T10981] bridge0: port 1(bridge_slave_0) entered blocking state [ 225.492719][T10981] bridge0: port 1(bridge_slave_0) entered forwarding state [ 225.550717][T10981] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 225.600235][T10984] bridge_slave_1: left allmulticast mode [ 225.627693][T10984] bridge_slave_1: left promiscuous mode [ 225.654198][T10984] bridge0: port 2(bridge_slave_1) entered disabled state [ 225.693676][T10984] bridge_slave_0: left allmulticast mode [ 225.714771][T10984] bridge_slave_0: left promiscuous mode [ 225.720833][T10984] bridge0: port 1(bridge_slave_0) entered disabled state [ 225.837428][T10984] bond0: (slave bridge0): Releasing backup interface [ 225.897213][T10994] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1243'. [ 226.672984][T11020] vlan2: entered promiscuous mode [ 226.696958][T11020] macvtap0: entered promiscuous mode [ 226.795896][T11017] vlan2: entered promiscuous mode [ 226.900966][T11032] vlan3: entered allmulticast mode [ 226.910751][T11032] bridge_slave_0: entered allmulticast mode [ 227.187874][T11045] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1254'. [ 227.246780][T11045] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1254'. [ 227.302648][T11045] netlink: 'syz.4.1254': attribute type 7 has an invalid length. [ 227.315224][T11041] wg1 speed is unknown, defaulting to 1000 [ 227.321162][T11041] wg1 speed is unknown, defaulting to 1000 [ 227.426001][T11041] wg1 speed is unknown, defaulting to 1000 [ 227.481745][T11062] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1257'. [ 227.657565][T11041] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 227.806861][T11041] wg1 speed is unknown, defaulting to 1000 [ 227.849189][T11041] wg1 speed is unknown, defaulting to 1000 [ 227.881428][T11041] wg1 speed is unknown, defaulting to 1000 [ 227.933397][T11041] wg1 speed is unknown, defaulting to 1000 [ 228.002858][T11041] wg1 speed is unknown, defaulting to 1000 [ 228.641271][T11080] wg1 speed is unknown, defaulting to 1000 [ 229.792081][T11133] wg1 speed is unknown, defaulting to 1000 [ 229.905105][T11145] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1274'. [ 229.981607][T11147] veth0: entered promiscuous mode [ 230.139572][T11159] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1277'. [ 230.165089][T11144] netlink: 'syz.0.1275': attribute type 4 has an invalid length. [ 230.218438][T11147] netlink: 160 bytes leftover after parsing attributes in process `syz.0.1275'. [ 230.230040][T11147] nbd: must specify a device to reconfigure [ 230.347949][T11166] IPVS: set_ctl: invalid protocol: 135 172.20.20.170:20002 [ 230.357446][T11147] veth0: left promiscuous mode [ 230.651752][T11170] mac80211_hwsim hwsim3 ªªªªª;: renamed from wlan0 [ 231.013325][T11171] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1281'. [ 231.043203][T11171] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1281'. [ 231.044023][ T9178] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 231.129118][ T9178] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 231.164837][ T9184] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 231.178224][T11172] wg1 speed is unknown, defaulting to 1000 [ 231.178230][ T9184] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 231.811650][T11199] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1289'. [ 231.941927][T11203] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 231.950776][T11199] wg1 speed is unknown, defaulting to 1000 [ 233.182036][T11253] 8021q: adding VLAN 0 to HW filter on device bond8 [ 233.281345][T11262] netlink: 'syz.1.1303': attribute type 1 has an invalid length. [ 233.340188][T11265] ieee802154 phy1 wpan1: encryption failed: -22 [ 233.350800][T11265] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1304'. [ 233.376242][ T51] Bluetooth: hci4: command 0x0405 tx timeout [ 233.738081][T11281] 8021q: adding VLAN 0 to HW filter on device bond6 [ 233.777832][T11284] team0: entered promiscuous mode [ 233.794643][T11284] team_slave_0: entered promiscuous mode [ 233.800755][T11284] team_slave_1: entered promiscuous mode [ 233.859047][T11296] bond_slave_0: entered promiscuous mode [ 233.864895][T11296] bond_slave_1: entered promiscuous mode [ 233.877161][T11296] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 233.889437][T11296] bond6: (slave macvlan2): Enslaving as a backup interface with an up link [ 233.919206][T11281] bridge_slave_0: left allmulticast mode [ 233.931080][T11281] bridge_slave_0: left promiscuous mode [ 233.940575][T11281] bridge0: port 1(bridge_slave_0) entered disabled state [ 233.960106][T11281] bridge_slave_1: left allmulticast mode [ 233.966391][T11281] bridge_slave_1: left promiscuous mode [ 233.972621][T11281] bridge0: port 2(bridge_slave_1) entered disabled state [ 233.989071][T11281] bond0: (slave bond_slave_0): Releasing backup interface [ 233.996980][T11281] bond_slave_0: left promiscuous mode [ 234.013488][T11281] bond0: (slave bond_slave_1): Releasing backup interface [ 234.039089][T11281] bond_slave_1: left promiscuous mode [ 234.077921][T11281] team0: Port device team_slave_0 removed [ 234.092126][T11281] team0: Port device team_slave_1 removed [ 234.117677][T11281] bond5: (slave wlan0): Releasing active interface [ 234.127610][T11281] bond6: (slave macvlan2): Removing an active aggregator [ 234.137983][T11281] bond6: (slave macvlan2): Releasing backup interface [ 234.359716][T11324] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1316'. [ 234.397530][T11329] netlink: 'syz.0.1319': attribute type 4 has an invalid length. [ 234.410512][T11329] netlink: 'syz.0.1319': attribute type 4 has an invalid length. [ 234.472252][T11335] openvswitch: netlink: IP tunnel dst address not specified [ 234.518271][T11339] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 234.532775][T11338] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 235.135646][T11386] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1335'. [ 235.212289][T11390] syzkaller1: entered promiscuous mode [ 235.227746][T11390] syzkaller1: entered allmulticast mode [ 235.374069][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 235.598481][T11413] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1341'. [ 235.699876][T11421] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1343'. [ 236.030772][T11428] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 236.780644][T11457] wg1 speed is unknown, defaulting to 1000 [ 236.782353][T11461] sctp: [Deprecated]: syz.2.1356 (pid 11461) Use of int in max_burst socket option deprecated. [ 236.782353][T11461] Use struct sctp_assoc_value instead [ 237.838582][T11510] (unnamed net_device) (uninitialized): option updelay: invalid value (18446744072065443590) [ 237.881413][T11510] (unnamed net_device) (uninitialized): option updelay: allowed values 0 - 2147483647 [ 237.996581][T11513] delete_channel: no stack [ 238.119896][T11525] netlink: 'syz.1.1366': attribute type 2 has an invalid length. [ 238.141644][T11525] : entered promiscuous mode [ 238.185326][T11525] bridge_slave_1: default FDB implementation only supports local addresses [ 238.882765][T11542] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1372'. [ 238.892755][T11542] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1372'. [ 238.943902][T11542] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1372'. [ 238.982803][T11542] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1372'. [ 238.993158][T11542] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1372'. [ 239.006074][T11542] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1372'. [ 239.016557][T11542] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1372'. [ 239.028282][T11542] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1372'. [ 239.043104][T11542] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1372'. [ 239.055919][T11542] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1372'. [ 239.068243][T11540] wg1 speed is unknown, defaulting to 1000 [ 239.628029][T11577] wg1 speed is unknown, defaulting to 1000 [ 240.582639][T11591] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 240.607732][T11591] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 240.633196][T11591] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 240.647213][T11591] bond0 (unregistering): Released all slaves [ 241.061257][T11621] TCP: TCP_TX_DELAY enabled [ 241.070670][T11621] syz_tun: entered allmulticast mode [ 241.138419][T11624] netlink: 'syz.2.1395': attribute type 3 has an invalid length. [ 241.386767][T11644] 8021q: adding VLAN 0 to HW filter on device bond7 [ 241.505992][T11650] wg1 speed is unknown, defaulting to 1000 [ 241.829213][T11619] syz_tun: left allmulticast mode [ 242.185635][T11690] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode [ 242.222680][T11690] mac80211_hwsim hwsim6 syzkaller0: entered allmulticast mode [ 242.276760][T11689] tipc: Enabled bearer , priority 0 [ 242.389137][T11698] syzkaller0: entered promiscuous mode [ 242.403225][T11698] syzkaller0: entered allmulticast mode [ 242.413398][T11701] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 242.440629][T11697] wg1 speed is unknown, defaulting to 1000 [ 242.706671][T11713] netlink: 'syz.0.1416': attribute type 1 has an invalid length. [ 242.885602][T11719] netlink: 'syz.4.1417': attribute type 1 has an invalid length. [ 243.286880][ T43] tipc: Node number set to 2530480513 [ 243.535886][T11743] IPVS: set_ctl: invalid protocol: 59 100.1.1.0:20001 [ 243.551160][T11740] netlink: 'syz.3.1426': attribute type 4 has an invalid length. [ 244.140450][T11773] netlink: 'syz.0.1434': attribute type 38 has an invalid length. [ 244.325315][T11774] wg1 speed is unknown, defaulting to 1000 [ 244.399819][T11778] syzkaller1: entered promiscuous mode [ 244.407885][T11778] syzkaller1: entered allmulticast mode [ 244.426219][T11777] delete_channel: no stack [ 244.865076][T11795] __nla_validate_parse: 50 callbacks suppressed [ 244.865097][T11795] netlink: 172 bytes leftover after parsing attributes in process `syz.3.1442'. [ 245.103041][T11806] vlan2: entered allmulticast mode [ 245.117884][T11806] bridge_slave_0: entered allmulticast mode [ 245.208021][T11816] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1447'. [ 245.250371][T11816] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1447'. [ 245.875745][T11852] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1457'. [ 245.914923][T11856] bond8: entered promiscuous mode [ 245.920311][T11856] 8021q: adding VLAN 0 to HW filter on device bond8 [ 246.014582][T11864] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.1461'. [ 246.024221][T11857] nbd0: detected capacity change from 0 to 127 [ 246.037677][ T51] block nbd0: Receive control failed (result -32) [ 246.178506][T11871] netlink: 'syz.3.1464': attribute type 8 has an invalid length. [ 246.182137][T11852] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 246.205404][T11875] netlink: 'syz.1.1462': attribute type 1 has an invalid length. [ 246.208527][T11852] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.217405][T11871] netlink: 'syz.3.1464': attribute type 32 has an invalid length. [ 246.350574][T11852] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 246.362284][T11852] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.405146][T11875] 8021q: adding VLAN 0 to HW filter on device bond9 [ 246.448931][T11852] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 246.461764][T11852] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.540286][T11852] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 246.550882][T11852] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.625949][T11882] netlink: 'syz.1.1465': attribute type 1 has an invalid length. [ 246.700136][T11882] 8021q: adding VLAN 0 to HW filter on device bond10 [ 246.709613][T11885] netlink: 360 bytes leftover after parsing attributes in process `syz.4.1466'. [ 246.729915][T11886] vlan2: entered promiscuous mode [ 246.735856][T11886] bond10: entered promiscuous mode [ 246.741192][T11886] vlan2: entered allmulticast mode [ 246.746521][T11886] bond10: entered allmulticast mode [ 246.814840][T11882] bond10: (slave gretap2): making interface the new active one [ 246.822554][T11882] gretap2: entered promiscuous mode [ 246.828388][T11882] gretap2: entered allmulticast mode [ 246.836227][T11882] bond10: (slave gretap2): Enslaving as an active interface with an up link [ 246.845579][ T9188] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 246.858393][T11882] syz.1.1465 (11882) used greatest stack depth: 17496 bytes left [ 246.870193][ T9188] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.884192][ T9188] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 246.892617][ T9188] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.992003][ T9180] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 247.020872][ T9180] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.106135][ T9180] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 247.128732][ T9180] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.458014][T11925] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1474'. [ 247.478033][T11922] netlink: 788 bytes leftover after parsing attributes in process `syz.2.1478'. [ 247.845905][T11939] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1482'. [ 247.945658][T11944] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1483'. [ 248.277588][T11954] macsec1: entered promiscuous mode [ 248.298394][T11954] syz_tun: entered promiscuous mode [ 248.309023][T11954] macsec1: entered allmulticast mode [ 248.315406][T11954] syz_tun: entered allmulticast mode [ 248.327475][T11954] syz_tun: left allmulticast mode [ 248.332804][T11954] syz_tun: left promiscuous mode [ 248.913193][T11980] batadv1: entered promiscuous mode [ 248.920203][T11980] batadv1: entered allmulticast mode [ 249.312571][T11999] veth22: entered promiscuous mode [ 249.335417][T11999] veth22: entered allmulticast mode [ 249.580849][T12015] tipc: Resetting bearer [ 249.997267][T12033] __nla_validate_parse: 7 callbacks suppressed [ 249.997289][T12033] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1507'. [ 250.250808][T12037] wg1 speed is unknown, defaulting to 1000 [ 250.408317][T12051] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1512'. [ 250.422743][T12051] netlink: 92 bytes leftover after parsing attributes in process `syz.0.1512'. [ 250.846069][T12069] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1518'. [ 250.864318][T12073] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1519'. [ 251.143463][T12076] wg1 speed is unknown, defaulting to 1000 [ 251.596280][T12091] netlink: 'syz.0.1526': attribute type 2 has an invalid length. [ 251.661029][T12091] netlink: 'syz.0.1526': attribute type 2 has an invalid length. [ 251.744938][T12101] tun0: tun_chr_ioctl cmd 1074025673 [ 251.754458][T12099] tun0: tun_chr_ioctl cmd 1074025672 [ 251.771046][T12099] tun0: ignored: set checksum disabled [ 251.777211][T12099] tun0: tun_chr_ioctl cmd 2147767521 [ 251.888428][T12106] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 251.922227][T12107] tipc: Enabled bearer , priority 0 [ 251.935264][T12107] syzkaller0: entered promiscuous mode [ 251.955923][T12107] syzkaller0: entered allmulticast mode [ 252.049388][T12107] tipc: Resetting bearer [ 252.053352][T12117] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1534'. [ 252.104157][T12104] tipc: Resetting bearer [ 252.142443][T12104] tipc: Disabling bearer [ 252.191010][T12122] syzkaller0: entered promiscuous mode [ 252.204496][T12122] syzkaller0: entered allmulticast mode [ 252.404757][T12137] IPVS: Unknown mcast interface: macvlan1 [ 252.767434][T12151] wg1 speed is unknown, defaulting to 1000 [ 252.845210][T12154] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 252.951983][T12152] wg1 speed is unknown, defaulting to 1000 [ 252.969548][T12154] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 253.024346][T12161] netlink: 'syz.0.1546': attribute type 10 has an invalid length. [ 253.059909][T12157] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 253.111040][T12163] tipc: Bearer : already 2 bearers with priority 10 [ 253.120603][T12163] tipc: Bearer : trying with adjusted priority [ 253.139573][T12163] tipc: Enabling of bearer rejected, failed to enable media [ 253.400297][T12164] wg1 speed is unknown, defaulting to 1000 [ 254.200337][T12187] netlink: 'syz.0.1551': attribute type 1 has an invalid length. [ 254.240062][T12187] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 254.307715][T12187] netlink: 108 bytes leftover after parsing attributes in process `syz.0.1551'. [ 254.335148][T12187] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 254.352396][T12187] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1551'. [ 254.459704][T12197] wg1 speed is unknown, defaulting to 1000 [ 254.513663][T12205] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1556'. [ 254.639423][T12203] wg1 speed is unknown, defaulting to 1000 [ 255.132280][T12230] netlink: 'syz.0.1560': attribute type 1 has an invalid length. [ 255.308836][T12231] wg1 speed is unknown, defaulting to 1000 [ 255.478347][T12240] netlink: 'syz.1.1562': attribute type 6 has an invalid length. [ 255.486412][T12240] IPv6: NLM_F_CREATE should be specified when creating new route [ 255.904313][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.396126][T12278] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1571'. [ 256.653392][T12289] netlink: 124 bytes leftover after parsing attributes in process `syz.3.1574'. [ 256.912852][T12298] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1577'. [ 256.995857][T12296] wg1 speed is unknown, defaulting to 1000 [ 257.473397][T12320] netlink: 'syz.4.1581': attribute type 1 has an invalid length. [ 257.510316][T12320] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1581'. [ 257.617207][T12325] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1584'. [ 257.652828][T12329] netlink: 'syz.0.1586': attribute type 13 has an invalid length. [ 257.676037][T12325] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1584'. [ 257.714223][T12329] netlink: 'syz.0.1586': attribute type 17 has an invalid length. [ 257.851862][T12329] gretap0: refused to change device tx_queue_len [ 257.864419][T12329] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 257.871934][T12339] netlink: 'syz.3.1587': attribute type 1 has an invalid length. [ 257.895037][T12339] netlink: 'syz.3.1587': attribute type 2 has an invalid length. [ 258.043204][T12344] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1588'. [ 258.061428][T12344] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 258.110537][T12343] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 258.136715][T12343] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1589'. [ 258.150923][T12343] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1589'. [ 258.191424][T12349] netlink: 'syz.3.1591': attribute type 3 has an invalid length. [ 258.201918][T12349] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1591'. [ 258.485864][T12365] wg1 speed is unknown, defaulting to 1000 [ 258.947182][T12380] wg1 speed is unknown, defaulting to 1000 [ 259.138393][ T51] block nbd1: Receive control failed (result -107) [ 259.184279][T12388] nbd1: detected capacity change from 0 to 32 [ 259.211418][T12388] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 259.639467][T12397] netlink: 'syz.4.1604': attribute type 9 has an invalid length. [ 259.896105][T12405] syzkaller0: entered allmulticast mode [ 260.164711][T12411] netlink: 'syz.2.1609': attribute type 13 has an invalid length. [ 260.187892][T12411] netlink: 'syz.2.1609': attribute type 17 has an invalid length. [ 260.366963][T12411] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 260.392151][T12416] bond_slave_0: entered promiscuous mode [ 260.397946][T12416] bond_slave_1: entered promiscuous mode [ 260.405641][T12416] macvlan4: entered allmulticast mode [ 260.427576][T12416] bond0: entered allmulticast mode [ 260.439652][T12416] bond_slave_0: entered allmulticast mode [ 260.453575][T12416] bond_slave_1: entered allmulticast mode [ 260.466764][T12416] mac80211_hwsim hwsim4 wlan1: entered allmulticast mode [ 260.484616][T12416] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 260.504007][T12416] bond0: left allmulticast mode [ 260.517099][T12416] bond_slave_0: left allmulticast mode [ 260.524883][T12416] bond_slave_1: left allmulticast mode [ 260.530573][T12416] mac80211_hwsim hwsim4 wlan1: left allmulticast mode [ 260.538392][T12416] bond_slave_0: left promiscuous mode [ 260.543895][T12416] bond_slave_1: left promiscuous mode [ 260.593103][T12399] syzkaller0: left allmulticast mode [ 260.958428][T12427] wg1 speed is unknown, defaulting to 1000 [ 261.132117][T12421] netlink: 'syz.0.1612': attribute type 29 has an invalid length. [ 261.581567][T12450] __nla_validate_parse: 7 callbacks suppressed [ 261.581587][T12450] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1618'. [ 261.669179][T12457] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1620'. [ 261.971577][T12467] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1624'. [ 261.999345][T12469] tipc: Failed to remove unknown binding: 66,1,1/0:1851162489/1851162491 [ 262.070033][T12469] tipc: Failed to remove unknown binding: 66,1,1/0:1851162489/1851162491 [ 262.094072][T12469] tipc: Failed to remove unknown binding: 66,1,1/0:1851162489/1851162491 [ 262.146096][T12469] netlink: 788 bytes leftover after parsing attributes in process `syz.4.1625'. [ 262.235017][T12482] macvlan4: entered promiscuous mode [ 262.251601][T12482] vlan0: entered promiscuous mode [ 262.326385][T12482] macvlan5: entered promiscuous mode [ 262.438844][T12482] macvlan6: entered promiscuous mode [ 262.493635][T12482] macvlan7: entered promiscuous mode [ 262.516835][T12482] macvlan8: entered promiscuous mode [ 262.538586][T12482] macvlan9: entered promiscuous mode [ 262.561011][T12482] macvlan10: entered promiscuous mode [ 262.577652][T12490] wg1 speed is unknown, defaulting to 1000 [ 262.596330][T12482] macvlan11: entered promiscuous mode [ 262.620027][T12482] macvlan12: entered promiscuous mode [ 262.642295][T12482] macvlan13: entered promiscuous mode [ 262.662768][T12497] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1631'. [ 262.674902][T12482] macvlan14: entered promiscuous mode [ 262.696436][T12482] macvlan15: entered promiscuous mode [ 262.720865][T12482] macvlan16: entered promiscuous mode [ 262.742616][T12482] macvlan17: entered promiscuous mode [ 262.764427][T12482] macvlan18: entered promiscuous mode [ 262.802132][T12482] macvlan19: entered promiscuous mode [ 262.824890][T12482] macvlan20: entered promiscuous mode [ 262.862881][T12482] macvlan21: entered promiscuous mode [ 262.895567][T12482] macvlan22: entered promiscuous mode [ 262.927610][T12482] macvlan23: entered promiscuous mode [ 262.961353][T12482] macvlan24: entered promiscuous mode [ 263.006021][T12482] macvlan25: entered promiscuous mode [ 263.064957][T12482] macvlan26: entered promiscuous mode [ 263.303256][T12503] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1634'. [ 263.718159][T12514] wg1 speed is unknown, defaulting to 1000 [ 263.897538][T12530] lo: entered allmulticast mode [ 264.384444][T12543] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1644'. [ 264.410218][T12543] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1644'. [ 264.508229][T12543] netlink: 'syz.0.1644': attribute type 10 has an invalid length. [ 264.529695][T12551] IPv6: NLM_F_CREATE should be specified when creating new route [ 264.546036][T12550] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1647'. [ 264.558936][T12552] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1644'. [ 264.845121][T12560] netlink: 'syz.4.1649': attribute type 4 has an invalid length. [ 264.986574][T12562] netlink: 'syz.0.1650': attribute type 1 has an invalid length. [ 265.112063][T12576] netlink: 'syz.4.1652': attribute type 1 has an invalid length. [ 266.046373][T12572] veth1: left promiscuous mode [ 266.609630][T12572] veth3: left promiscuous mode [ 266.643079][T12572] gretap1: left promiscuous mode [ 266.682169][T12572] bond8: left promiscuous mode [ 266.706446][T12572] vlan2: left promiscuous mode [ 266.711385][T12572] bond10: left promiscuous mode [ 266.719661][T12572] gretap2: left promiscuous mode [ 266.738607][T12573] workqueue: Failed to create a rescuer kthread for wq "bond11": -EINTR [ 266.761006][T12591] C: renamed from team_slave_0 [ 266.790996][T12591] netlink: 'syz.4.1658': attribute type 3 has an invalid length. [ 266.804470][T12591] __nla_validate_parse: 3 callbacks suppressed [ 266.804490][T12591] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1658'. [ 266.823653][T12591] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 266.858144][ T9184] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.877046][ T9184] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.896737][ T9184] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.912186][ T9184] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.049151][T12624] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 267.087484][T12620] 8021q: adding VLAN 0 to HW filter on device bond5 [ 267.148524][T12630] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 267.162665][T12630] bond5: (slave macvlan2): Enslaving as a backup interface with an up link [ 267.182993][T12632] tipc: Enabled bearer , priority 14 [ 267.191900][T12620] !: left allmulticast mode [ 267.204809][ T9180] bond5: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 267.264445][T12620] bridge0: port 1(0!) entered disabled state [ 267.315664][T12620] bond0: (slave wlan1): Releasing backup interface [ 267.357082][ T152] bond5: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 267.375664][T12620] bond5: (slave macvlan2): Removing an active aggregator [ 267.388731][T12620] bond5: (slave macvlan2): Releasing active interface [ 267.672055][T12652] wg1 speed is unknown, defaulting to 1000 [ 267.910914][T12668] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1676'. [ 267.929235][T12659] syzkaller1: entered promiscuous mode [ 267.941757][T12659] syzkaller1: entered allmulticast mode [ 268.074939][T12679] netlink: 'syz.0.1679': attribute type 2 has an invalid length. [ 268.519849][T12700] wg1 speed is unknown, defaulting to 1000 [ 269.043895][T12710] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.1685'. [ 269.053463][T12709] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1684'. [ 269.114774][T12717] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1686'. [ 269.299412][T12721] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1688'. [ 269.320144][T12721] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1688'. [ 269.472175][T12733] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1691'. [ 269.529401][T12736] netlink: 'syz.0.1692': attribute type 10 has an invalid length. [ 269.916178][T12753] netlink: 'syz.0.1694': attribute type 29 has an invalid length. [ 269.962068][T12753] netlink: 596 bytes leftover after parsing attributes in process `syz.0.1694'. [ 270.176821][T12762] 8021q: adding VLAN 0 to HW filter on device bond7 [ 270.273395][T12764] 8021q: adding VLAN 0 to HW filter on device bond8 [ 270.302554][T12767] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 270.321104][T12767] syzkaller0: entered promiscuous mode [ 270.329957][T12767] syzkaller0: entered allmulticast mode [ 270.371947][T12767] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 270.831822][T12809] netlink: 'syz.0.1712': attribute type 11 has an invalid length. [ 270.832860][T12807] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1711'. [ 270.868965][T12812] netlink: 'syz.2.1713': attribute type 3 has an invalid length. [ 270.886494][T12812] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 272.236869][T12887] __nla_validate_parse: 10 callbacks suppressed [ 272.236892][T12887] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1731'. [ 272.569952][T12906] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1737'. [ 272.581735][T12906] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1737'. [ 272.609123][T12907] netlink: 'syz.3.1735': attribute type 10 has an invalid length. [ 272.625909][T12908] netlink: 'syz.1.1739': attribute type 10 has an invalid length. [ 272.640972][T12906] netlink: 'syz.0.1737': attribute type 25 has an invalid length. [ 272.665705][T12907] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 272.689104][T12911] netlink: 'syz.2.1740': attribute type 4 has an invalid length. [ 272.697169][T12907] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 272.718022][T12908] 8021q: adding VLAN 0 to HW filter on device team0 [ 272.730917][T12912] netlink: 'syz.4.1741': attribute type 1 has an invalid length. [ 272.766302][T12908] bond0: (slave team0): Enslaving as an active interface with an up link [ 272.810103][T12908] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1739'. [ 272.871450][T12920] IPVS: Scheduler module ip_vs_sip not found [ 272.948564][T12926] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1744'. [ 273.026070][T12929] netlink: del zone limit has 8 unknown bytes [ 273.318703][T12951] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1752'. [ 273.472808][T12959] netlink: 308 bytes leftover after parsing attributes in process `syz.4.1755'. [ 273.518117][T12962] tipc: Enabling of bearer rejected, already enabled [ 273.526930][T12959] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1755'. [ 273.552424][T12962] netem: change failed [ 273.866680][T12981] netlink: 'syz.4.1759': attribute type 13 has an invalid length. [ 274.043026][T12994] wg1 speed is unknown, defaulting to 1000 [ 274.187716][T12999] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1763'. [ 274.297244][T13005] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1764'. [ 274.482873][T13013] 8021q: adding VLAN 0 to HW filter on device bond10 [ 274.500519][T13013] bond9: (slave bond10): making interface the new active one [ 274.511804][T13013] bond9: (slave bond10): Enslaving as an active interface with an up link [ 274.776519][T13026] validate_nla: 1 callbacks suppressed [ 274.776539][T13026] netlink: 'syz.4.1770': attribute type 2 has an invalid length. [ 275.133951][ T51] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 275.306411][T13050] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 276.090248][T13081] A link change request failed with some changes committed already. Interface macvlan0 may have been left with an inconsistent configuration, please check. [ 276.381857][T13097] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 276.501784][T13097] netlink: 'syz.0.1789': attribute type 131 has an invalid length. [ 277.487560][T13151] syzkaller1: entered promiscuous mode [ 277.488438][T13149] __nla_validate_parse: 3 callbacks suppressed [ 277.488454][T13149] netlink: 212312 bytes leftover after parsing attributes in process `syz.4.1799'. [ 277.501503][T13151] syzkaller1: entered allmulticast mode [ 278.381438][T13172] 8021q: VLANs not supported on caif0 [ 278.745264][T13185] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1809'. [ 278.764580][T13185] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1809'. [ 278.967002][T13188] tipc: Enabled bearer , priority 0 [ 278.989397][T13188] syzkaller0: entered promiscuous mode [ 279.015656][T13188] syzkaller0: entered allmulticast mode [ 279.070468][T13188] tipc: Resetting bearer [ 279.098361][T13187] tipc: Resetting bearer [ 279.129847][T13187] tipc: Disabling bearer [ 279.531165][T13204] lo speed is unknown, defaulting to 1000 [ 279.559858][T13204] lo speed is unknown, defaulting to 1000 [ 279.638228][T13204] lo speed is unknown, defaulting to 1000 [ 279.707729][T13204] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 279.759854][T13204] lo speed is unknown, defaulting to 1000 [ 279.772294][T13204] lo speed is unknown, defaulting to 1000 [ 279.782791][T13204] lo speed is unknown, defaulting to 1000 [ 279.791182][T13204] lo speed is unknown, defaulting to 1000 [ 279.799871][T13204] lo speed is unknown, defaulting to 1000 [ 279.812319][T13205] netlink: 'syz.3.1815': attribute type 4 has an invalid length. [ 280.325390][T13225] vlan3: entered promiscuous mode [ 280.330560][T13225] bond0: entered promiscuous mode [ 280.340410][T13225] team0: entered promiscuous mode [ 280.348023][T13225] vlan3: entered allmulticast mode [ 280.353612][T13225] bond0: entered allmulticast mode [ 280.359073][T13225] team0: entered allmulticast mode [ 280.444721][T13232] openvswitch: netlink: Message has 8 unknown bytes. [ 280.834907][T13263] netlink: 'syz.0.1829': attribute type 10 has an invalid length. [ 280.903196][T13263] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1829'. [ 281.300116][T13281] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1835'. [ 281.433941][T13285] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1837'. [ 281.441034][T13287] netlink: 'syz.1.1838': attribute type 1 has an invalid length. [ 281.518816][T13287] 8021q: adding VLAN 0 to HW filter on device bond11 [ 281.582963][T13289] bond11: (slave ip6gretap2): making interface the new active one [ 281.598539][T13289] bond11: (slave ip6gretap2): Enslaving as an active interface with an up link [ 281.645910][T13287] veth7: entered promiscuous mode [ 281.659627][T13287] bond11: (slave veth7): Enslaving as an active interface with a down link [ 281.683132][T13289] erspan0: entered allmulticast mode [ 281.698154][T13291] netlink: 277 bytes leftover after parsing attributes in process `syz.0.1839'. [ 282.431407][T13294] team_slave_0: left promiscuous mode [ 282.487518][T13294] team0: Port device team_slave_0 removed [ 282.501526][T13294] team_slave_1: left promiscuous mode [ 282.517544][T13294] team0: Port device team_slave_1 removed [ 282.525909][T13294] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 282.533396][T13294] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 282.565895][ T5957] wg1 speed is unknown, defaulting to 1000 [ 282.822235][T13311] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 282.866583][T13311] netlink: 212320 bytes leftover after parsing attributes in process `syz.0.1846'. [ 282.951315][T13319] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1847'. [ 283.079246][T13331] netlink: 'syz.3.1847': attribute type 10 has an invalid length. [ 283.101705][T13332] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1849'. [ 283.126573][T13332] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1849'. [ 283.287115][T13331] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 283.455981][T13350] netlink: 788 bytes leftover after parsing attributes in process `syz.1.1852'. [ 283.797148][T13360] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1856'. [ 284.517154][T13391] wg1 speed is unknown, defaulting to 1000 [ 284.556893][T13397] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1867'. [ 284.571812][T13391] lo speed is unknown, defaulting to 1000 [ 285.468357][T13387] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1864'. [ 285.965314][T13438] netlink: 10 bytes leftover after parsing attributes in process `syz.3.1878'. [ 285.974477][T13438] openvswitch: netlink: Flow actions attr not present in new flow. [ 285.990366][T13438] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1878'. [ 286.082884][T13444] IPVS: set_ctl: invalid protocol: 137 255.255.255.255:20001 [ 286.090873][ T3094] IPVS: starting estimator thread 0... [ 286.234071][T13446] IPVS: using max 23 ests per chain, 55200 per kthread [ 287.070380][T13470] 8021q: adding VLAN 0 to HW filter on device bond11 [ 287.169424][T13472] bond11: (slave erspan1): Enslaving as an active interface with an up link [ 288.002445][T13508] vti0: entered promiscuous mode [ 288.039024][T13511] netlink: 'syz.3.1897': attribute type 9 has an invalid length. [ 288.160953][T13509] __nla_validate_parse: 6 callbacks suppressed [ 288.160976][T13509] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1898'. [ 288.286410][T13516] tap0: tun_chr_ioctl cmd 1074812118 [ 288.305681][T13516] tap0: tun_chr_ioctl cmd 1074812118 [ 288.327655][T13516] tap0: tun_chr_ioctl cmd 1074812118 [ 288.349424][T13516] tap0: tun_chr_ioctl cmd 1074812118 [ 288.357034][T13516] tap0: tun_chr_ioctl cmd 1074812118 [ 288.362640][T13516] tap0: tun_chr_ioctl cmd 1074812118 [ 288.370610][T13516] tap0: tun_chr_ioctl cmd 1074812118 [ 288.378071][T13516] tap0: tun_chr_ioctl cmd 1074812118 [ 288.383625][T13516] tap0: tun_chr_ioctl cmd 1074812118 [ 288.392716][T13516] tap0: tun_chr_ioctl cmd 1074812118 [ 288.401190][T13516] tap0: tun_chr_ioctl cmd 1074812118 [ 288.425081][T13516] tap0: tun_chr_ioctl cmd 1074812118 [ 288.449841][T13516] tap0: tun_chr_ioctl cmd 1074812118 [ 288.470451][T13516] tap0: tun_chr_ioctl cmd 1074812118 [ 288.490277][T13516] tap0: tun_chr_ioctl cmd 1074812118 [ 288.512473][T13516] tap0: tun_chr_ioctl cmd 1074812118 [ 288.521913][T13516] tap0: tun_chr_ioctl cmd 1074812118 [ 288.528459][T13516] tap0: tun_chr_ioctl cmd 1074812118 [ 288.537482][T13516] tap0: tun_chr_ioctl cmd 1074812118 [ 288.543000][T13516] tap0: tun_chr_ioctl cmd 1074812118 [ 288.560623][T13516] tap0: tun_chr_ioctl cmd 1074812118 [ 288.570287][T13516] tap0: tun_chr_ioctl cmd 1074812118 [ 288.586468][T13516] tap0: tun_chr_ioctl cmd 1074812118 [ 288.595090][T13524] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1902'. [ 288.604695][T13516] tap0: tun_chr_ioctl cmd 1074812118 [ 288.610128][T13516] tap0: tun_chr_ioctl cmd 1074812118 [ 288.625933][T13528] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1901'. [ 288.635334][T13516] tap0: tun_chr_ioctl cmd 1074812118 [ 288.640795][T13516] tap0: tun_chr_ioctl cmd 1074812118 [ 288.674562][T13528] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1901'. [ 288.737365][T13516] tap0: tun_chr_ioctl cmd 1074812118 [ 288.755229][T13516] tap0: tun_chr_ioctl cmd 1074812118 [ 288.792386][T13516] tap0: tun_chr_ioctl cmd 1074812118 [ 288.833955][T13516] tap0: tun_chr_ioctl cmd 1074812118 [ 288.844232][T13516] tap0: tun_chr_ioctl cmd 1074812118 [ 288.861984][T13516] tap0: tun_chr_ioctl cmd 1074812118 [ 288.880107][T13516] tap0: tun_chr_ioctl cmd 1074812118 [ 288.894078][T13516] tap0: tun_chr_ioctl cmd 1074812118 [ 288.906100][T13516] tap0: tun_chr_ioctl cmd 1074812118 [ 288.943329][T13535] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 288.995023][T13535] sch_tbf: burst 127 is lower than device syzkaller0 mtu (313) ! [ 289.183319][T13541] syzkaller1: entered promiscuous mode [ 289.191371][T13541] syzkaller1: entered allmulticast mode [ 289.197615][T13544] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1909'. [ 289.244178][T13540] wg1 speed is unknown, defaulting to 1000 [ 289.354394][T13540] lo speed is unknown, defaulting to 1000 [ 289.400537][T13551] netlink: 'syz.3.1910': attribute type 1 has an invalid length. [ 289.615996][T13551] vlan3: entered allmulticast mode [ 289.644337][T13551] bond12: entered allmulticast mode [ 290.155749][T13579] netlink: 268 bytes leftover after parsing attributes in process `syz.3.1916'. [ 290.165369][T13579] netlink: 227 bytes leftover after parsing attributes in process `syz.3.1916'. [ 290.411369][T13585] tipc: Enabled bearer , priority 0 [ 290.432742][T13586] netlink: 256 bytes leftover after parsing attributes in process `syz.3.1919'. [ 290.446322][T13585] netlink: 256 bytes leftover after parsing attributes in process `syz.3.1919'. [ 290.531438][T13585] tipc: Resetting bearer [ 290.598919][T13583] tipc: Disabling bearer [ 290.799796][T13593] netlink: 'syz.4.1921': attribute type 8 has an invalid length. [ 290.820248][T13593] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1921'. [ 290.867551][T13593] bond0: entered promiscuous mode [ 290.875456][T13593] bond0: left promiscuous mode [ 292.556816][T13671] netlink: 'syz.0.1944': attribute type 1 has an invalid length. [ 293.205715][T13345] Set syz1 is full, maxelem 65536 reached [ 293.354340][T13700] netdevsim netdevsim0: Direct firmware load for /. failed with error -2 [ 293.384096][T13700] netdevsim netdevsim0: Falling back to sysfs fallback for: /. [ 293.488110][T13706] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_bond, syncid = 0, id = 0 [ 293.570820][T13711] netlink: 'syz.1.1957': attribute type 6 has an invalid length. [ 293.721479][T13722] nbd: must specify an index to disconnect [ 294.065155][T13734] __nla_validate_parse: 6 callbacks suppressed [ 294.065176][T13734] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1964'. [ 294.195992][T13742] vlan3: entered promiscuous mode [ 294.201158][T13742] bond0: entered promiscuous mode [ 294.211156][T13742] bond_slave_0: entered promiscuous mode [ 294.256193][T13742] bond_slave_1: entered promiscuous mode [ 294.275788][T13742] mac80211_hwsim hwsim4 wlan1: entered promiscuous mode [ 294.315862][T13742] batadv0: entered promiscuous mode [ 294.322407][T13742] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 294.907592][T13770] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1972'. [ 295.302974][T13778] wg1 speed is unknown, defaulting to 1000 [ 295.328286][T13778] lo speed is unknown, defaulting to 1000 [ 295.437553][T13786] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 295.474033][ T30] audit: type=1107 audit(1757310606.423:3): pid=13789 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 295.566952][T13798] netlink: 'syz.2.1979': attribute type 1 has an invalid length. [ 295.584393][T13798] netlink: 232 bytes leftover after parsing attributes in process `syz.2.1979'. [ 296.391173][T13821] syzkaller0: entered promiscuous mode [ 296.416251][T13821] syzkaller0: entered allmulticast mode [ 296.510907][T13837] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1990'. [ 296.573115][T13838] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1990'. [ 296.620082][T13837] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1990'. [ 296.963338][T13850] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1993'. [ 296.979376][T13850] unsupported nlmsg_type 40 [ 298.325035][T13850] syz_tun: entered allmulticast mode [ 298.330977][T13851] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1990'. [ 298.439311][T13857] netlink: 'syz.0.1995': attribute type 1 has an invalid length. [ 298.442306][T13858] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1994'. [ 298.485569][T13857] 8021q: adding VLAN 0 to HW filter on device bond0 [ 298.525876][T13858] netlink: 'syz.2.1994': attribute type 1 has an invalid length. [ 298.600963][T13858] 8021q: adding VLAN 0 to HW filter on device bond7 [ 298.630861][T13873] netlink: 'syz.0.2000': attribute type 6 has an invalid length. [ 298.632806][T13868] bond7: (slave wlan0): Opening slave failed [ 298.690353][T13858] vlan0: entered allmulticast mode [ 298.696506][T13858] veth1: entered allmulticast mode [ 298.712413][T13858] bond7: (slave vlan0): making interface the new active one [ 298.728408][T13858] bond7: (slave vlan0): Enslaving as an active interface with an up link [ 298.750867][T13881] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2001'. [ 298.769322][T13881] veth1_macvtap: left promiscuous mode [ 298.872001][T13887] netlink: 'syz.0.2000': attribute type 12 has an invalid length. [ 299.091441][T13885] delete_channel: no stack [ 299.398252][ T30] audit: type=1800 audit(1757310610.353:4): pid=13911 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2011" name="blkio.bfq.time_recursive" dev="tmpfs" ino=2205 res=0 errno=0 [ 299.568003][T13907] __nla_validate_parse: 4 callbacks suppressed [ 299.568025][T13907] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2007'. [ 299.668004][T13926] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2016'. [ 300.001551][T13944] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2016'. [ 300.559491][T13958] wg1 speed is unknown, defaulting to 1000 [ 300.571463][T13958] lo speed is unknown, defaulting to 1000 [ 300.603066][T13956] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2022'. [ 300.704838][T13964] wg1 speed is unknown, defaulting to 1000 [ 300.740433][T13964] lo speed is unknown, defaulting to 1000 [ 300.747705][T13975] bond0: (slave team0): Releasing backup interface [ 300.756267][T13975] team0: left promiscuous mode [ 300.761268][T13975] team0: left allmulticast mode [ 300.786045][T13975] bond10: (slave gretap2): Releasing active interface [ 300.795326][T13975] gretap2: left allmulticast mode [ 300.827595][T13975] bond11: (slave ip6gretap2): Releasing active interface [ 300.851285][T13975] bond11: (slave ip6gretap2): the permanent HWaddr of slave - 62:15:12:55:ee:f1 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 300.923064][T13975] bond11: (slave veth7): Releasing active interface [ 301.109201][T13981] team0: Mode changed to "broadcast" [ 301.118571][T13985] vlan0: entered promiscuous mode [ 301.120090][T13990] netlink: 'syz.0.2030': attribute type 1 has an invalid length. [ 301.138069][T13990] netlink: 'syz.0.2030': attribute type 4 has an invalid length. [ 301.159271][T13987] tipc: Enabled bearer , priority 0 [ 301.370930][T14002] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2034'. [ 301.382843][T13992] tipc: Enabled bearer , priority 0 [ 301.395196][T13999] mac80211_hwsim hwsim8 syzkaller0: entered promiscuous mode [ 301.402071][T13998] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2033'. [ 301.405787][T13995] netlink: 428 bytes leftover after parsing attributes in process `syz.0.2032'. [ 301.424660][T13999] mac80211_hwsim hwsim8 syzkaller0: entered allmulticast mode [ 301.452916][T13995] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2032'. [ 301.559135][T13992] syzkaller0: mtu less than device minimum [ 301.637080][T14013] netlink: 92 bytes leftover after parsing attributes in process `syz.0.2037'. [ 301.792218][T14025] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2038'. [ 301.847622][T14019] netlink: 'syz.1.2039': attribute type 5 has an invalid length. [ 302.003658][T14034] siw: device registration error -23 [ 302.138968][T14034] netlink: 'syz.1.2043': attribute type 4 has an invalid length. [ 302.274057][T12607] tipc: Node number set to 4232576936 [ 302.293183][T14040] 8021q: adding VLAN 0 to HW filter on device team0 [ 302.304628][T14040] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 302.320938][T14038] wg1 speed is unknown, defaulting to 1000 [ 302.398303][T14038] lo speed is unknown, defaulting to 1000 [ 302.398665][T14052] tipc: Enabled bearer , priority 0 [ 302.439601][T14050] syzkaller0: entered promiscuous mode [ 302.446189][T14050] syzkaller0: entered allmulticast mode [ 302.504495][ T959] tipc: Node number set to 3061021315 [ 302.532200][T14050] tipc: Resetting bearer [ 302.828789][T14050] tipc: Resetting bearer [ 302.953527][T14050] tipc: Disabling bearer [ 302.981532][T14067] bond0: entered promiscuous mode [ 302.987057][T14067] bond0: entered allmulticast mode [ 303.001634][T14067] 8021q: adding VLAN 0 to HW filter on device bond0 [ 303.228540][T14090] netlink: 'syz.1.2060': attribute type 1 has an invalid length. [ 303.255902][T14095] netlink: 'syz.2.2061': attribute type 1 has an invalid length. [ 303.269777][T14095] netlink: 'syz.2.2061': attribute type 3 has an invalid length. [ 303.287629][T14095] tipc: Enabled bearer , priority 10 [ 303.298429][T14101] netlink: 'syz.4.2065': attribute type 12 has an invalid length. [ 303.515566][ T4568] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 303.858950][T14121] netlink: 'syz.1.2068': attribute type 1 has an invalid length. [ 304.103327][T14115] tipc: Enabling of bearer rejected, already enabled [ 304.977364][T14186] netlink: 'syz.1.2087': attribute type 4 has an invalid length. [ 305.003623][T14186] netlink: 'syz.1.2087': attribute type 4 has an invalid length. [ 305.249846][T14197] __nla_validate_parse: 11 callbacks suppressed [ 305.249868][T14197] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2091'. [ 305.457030][T14211] tipc: Resetting bearer [ 305.545248][T14220] wg1 speed is unknown, defaulting to 1000 [ 305.553199][T14220] lo speed is unknown, defaulting to 1000 [ 305.679350][T14229] netlink: 'syz.2.2099': attribute type 5 has an invalid length. [ 305.725624][T14226] netlink: 'syz.3.2098': attribute type 1 has an invalid length. [ 305.808196][T14233] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 306.276149][T14250] vlan0 (unregistering): left promiscuous mode [ 306.359219][T14267] af_packet: tpacket_rcv: packet too big, clamped from 3956 to 3952. macoff=96 [ 306.739583][ T5881] Bluetooth: hci4: command 0x0405 tx timeout [ 308.233230][T14263] netlink: 64951 bytes leftover after parsing attributes in process `syz.4.2109'. [ 308.254624][T14270] sch_tbf: burst 5 is lower than device lo mtu (11337746) ! [ 308.521615][T14289] tipc: Enabled bearer , priority 0 [ 308.538216][T14286] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2113'. [ 308.549151][T14293] ieee802154 phy1 wpan1: encryption failed: -22 [ 308.555115][T14292] syzkaller0: entered promiscuous mode [ 308.568173][T14292] syzkaller0: entered allmulticast mode [ 308.638711][T14289] tipc: Resetting bearer [ 308.675715][T14288] tipc: Resetting bearer [ 308.742370][T14288] tipc: Disabling bearer [ 308.816212][ T5881] Bluetooth: hci4: command 0x0405 tx timeout [ 308.938248][T14310] wg1 speed is unknown, defaulting to 1000 [ 308.950888][T14310] lo speed is unknown, defaulting to 1000 [ 309.018638][T14319] RDS: rds_bind could not find a transport for 2001::2, load rds_tcp or rds_rdma? [ 309.410832][T14339] wg1 speed is unknown, defaulting to 1000 [ 309.421670][T14339] lo speed is unknown, defaulting to 1000 [ 309.854795][T14366] wg1 speed is unknown, defaulting to 1000 [ 309.863399][T14366] lo speed is unknown, defaulting to 1000 [ 310.224896][T14377] netlink: 'syz.3.2138': attribute type 13 has an invalid length. [ 310.233175][T14377] netlink: 'syz.3.2138': attribute type 17 has an invalid length. [ 310.246704][T14369] netlink: 'syz.4.2136': attribute type 2 has an invalid length. [ 310.372303][T14377] 0ªX¹¦À: left allmulticast mode [ 310.394157][T14377] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 310.410674][ T983] lo speed is unknown, defaulting to 1000 [ 310.625060][T14390] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2142'. [ 310.661035][T14380] wg1 speed is unknown, defaulting to 1000 [ 310.670128][T14380] lo speed is unknown, defaulting to 1000 [ 310.677156][T14391] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2142'. [ 310.763253][T14393] openvswitch: netlink: Tunnel attr 227 out of range max 16 [ 310.863070][T14396] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2144'. [ 311.211276][T14415] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2152'. [ 311.212609][T14416] [ 311.222598][T14416] ============================================ [ 311.228757][T14416] WARNING: possible recursive locking detected [ 311.234905][T14416] syzkaller #0 Not tainted [ 311.239312][T14416] -------------------------------------------- [ 311.245456][T14416] syz.3.2151/14416 is trying to acquire lock: [ 311.251515][T14416] ffff88804992cd30 (&dev_instance_lock_key#20){+.+.}-{4:4}, at: __netdev_update_features+0xcb1/0x1be0 [ 311.262505][T14416] [ 311.262505][T14416] but task is already holding lock: [ 311.269873][T14416] ffff88804992cd30 (&dev_instance_lock_key#20){+.+.}-{4:4}, at: dev_ethtool+0x716/0x19b0 [ 311.279711][T14416] and the lock comparison function returns 0: [ 311.285758][T14416] [ 311.285758][T14416] other info that might help us debug this: [ 311.293800][T14416] Possible unsafe locking scenario: [ 311.293800][T14416] [ 311.301243][T14416] CPU0 [ 311.304530][T14416] ---- [ 311.307814][T14416] lock(&dev_instance_lock_key#20); [ 311.313117][T14416] lock(&dev_instance_lock_key#20); [ 311.318413][T14416] [ 311.318413][T14416] *** DEADLOCK *** [ 311.318413][T14416] [ 311.326577][T14416] May be due to missing lock nesting notation [ 311.326577][T14416] [ 311.334884][T14416] 2 locks held by syz.3.2151/14416: [ 311.340070][T14416] #0: ffffffff8f5392c8 (rtnl_mutex){+.+.}-{4:4}, at: dev_ethtool+0x1d0/0x19b0 [ 311.349041][T14416] #1: ffff88804992cd30 (&dev_instance_lock_key#20){+.+.}-{4:4}, at: dev_ethtool+0x716/0x19b0 [ 311.359304][T14416] [ 311.359304][T14416] stack backtrace: [ 311.365186][T14416] CPU: 1 UID: 0 PID: 14416 Comm: syz.3.2151 Not tainted syzkaller #0 PREEMPT(full) [ 311.365204][T14416] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 311.365211][T14416] Call Trace: [ 311.365217][T14416] [ 311.365222][T14416] dump_stack_lvl+0x189/0x250 [ 311.365247][T14416] ? __pfx_dump_stack_lvl+0x10/0x10 [ 311.365260][T14416] ? __pfx__printk+0x10/0x10 [ 311.365276][T14416] ? print_lock_name+0xde/0x100 [ 311.365291][T14416] print_deadlock_bug+0x28b/0x2a0 [ 311.365304][T14416] validate_chain+0x1a3f/0x2140 [ 311.365317][T14416] ? __lock_acquire+0xab9/0xd20 [ 311.365337][T14416] __lock_acquire+0xab9/0xd20 [ 311.365354][T14416] ? __netdev_update_features+0xcb1/0x1be0 [ 311.365368][T14416] lock_acquire+0x120/0x360 [ 311.365383][T14416] ? __netdev_update_features+0xcb1/0x1be0 [ 311.365399][T14416] __mutex_lock+0x187/0x1350 [ 311.365410][T14416] ? __netdev_update_features+0xcb1/0x1be0 [ 311.365424][T14416] ? stack_trace_save+0x9c/0xe0 [ 311.365436][T14416] ? __pfx_stack_trace_save+0x10/0x10 [ 311.365449][T14416] ? stack_depot_save_flags+0x40/0x860 [ 311.365463][T14416] ? __netdev_update_features+0xcb1/0x1be0 [ 311.365477][T14416] ? __pfx___mutex_lock+0x10/0x10 [ 311.365489][T14416] ? bond_fix_features+0x191/0x1d0 [ 311.365504][T14416] __netdev_update_features+0xcb1/0x1be0 [ 311.365521][T14416] ? __pfx___netdev_update_features+0x10/0x10 [ 311.365534][T14416] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 311.365550][T14416] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 311.365569][T14416] ? __wake_up_common_lock+0x190/0x1f0 [ 311.365583][T14416] ? consume_skb+0xce/0xf0 [ 311.365594][T14416] ? netlink_broadcast_filtered+0xf55/0x1000 [ 311.365613][T14416] netdev_change_features+0x72/0xd0 [ 311.365626][T14416] ? __pfx_netdev_change_features+0x10/0x10 [ 311.365639][T14416] ? cfg80211_netdev_notifier_call+0x1ee/0x1450 [ 311.365653][T14416] ? netif_set_tso_max_size+0x10e/0x1d0 [ 311.365667][T14416] bond_compute_features+0x615/0x680 [ 311.365683][T14416] ? __pfx_bond_compute_features+0x10/0x10 [ 311.365699][T14416] bond_netdev_event+0x72e/0xe80 [ 311.365712][T14416] ? __pfx_bond_netdev_event+0x10/0x10 [ 311.365728][T14416] ? inetdev_event+0x464/0x15b0 [ 311.365752][T14416] ? igmp_netdev_event+0x7c/0x770 [ 311.365778][T14416] notifier_call_chain+0x1b3/0x3e0 [ 311.365802][T14416] netdev_features_change+0x85/0xc0 [ 311.365825][T14416] ? __pfx_netdev_features_change+0x10/0x10 [ 311.365841][T14416] ? security_capable+0x7e/0x2e0 [ 311.365858][T14416] dev_ethtool+0x1536/0x19b0 [ 311.365874][T14416] ? __pfx_dev_ethtool+0x10/0x10 [ 311.365890][T14416] ? dev_load+0x21/0x1f0 [ 311.365900][T14416] dev_ioctl+0x392/0x1150 [ 311.365910][T14416] sock_do_ioctl+0x22c/0x300 [ 311.365926][T14416] ? __pfx_sock_do_ioctl+0x10/0x10 [ 311.365939][T14416] ? __lock_acquire+0xab9/0xd20 [ 311.365958][T14416] sock_ioctl+0x576/0x790 [ 311.365972][T14416] ? __pfx_sock_ioctl+0x10/0x10 [ 311.365985][T14416] ? __fget_files+0x2a/0x420 [ 311.365995][T14416] ? __fget_files+0x3a0/0x420 [ 311.366003][T14416] ? __fget_files+0x2a/0x420 [ 311.366013][T14416] ? bpf_lsm_file_ioctl+0x9/0x20 [ 311.366026][T14416] ? __pfx_sock_ioctl+0x10/0x10 [ 311.366039][T14416] __se_sys_ioctl+0xfc/0x170 [ 311.366053][T14416] do_syscall_64+0xfa/0x3b0 [ 311.366065][T14416] ? lockdep_hardirqs_on+0x9c/0x150 [ 311.366076][T14416] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 311.366087][T14416] ? clear_bhb_loop+0x60/0xb0 [ 311.366098][T14416] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 311.366109][T14416] RIP: 0033:0x7fc1a918ebe9 [ 311.366122][T14416] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 311.366132][T14416] RSP: 002b:00007fc1aa001038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 311.366145][T14416] RAX: ffffffffffffffda RBX: 00007fc1a93c5fa0 RCX: 00007fc1a918ebe9 [ 311.366153][T14416] RDX: 0000200000000080 RSI: 0000000000008946 RDI: 000000000000000b [ 311.366160][T14416] RBP: 00007fc1a9211e19 R08: 0000000000000000 R09: 0000000000000000 [ 311.366167][T14416] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 311.366174][T14416] R13: 00007fc1a93c6038 R14: 00007fc1a93c5fa0 R15: 00007fff1bf26718 [ 311.366186][T14416] [ 317.305754][ T1301] ieee802154 phy1 wpan1: encryption failed: -22