last executing test programs: 34.07531456s ago: executing program 0 (id=3070): r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xb, &(0x7f0000000240)=0x5da2333f, 0x4) bpf$MAP_GET_NEXT_KEY(0x3, &(0x7f00000001c0)={r5, &(0x7f0000000240), 0x0}, 0x20) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0xf8, r3, 0x5, 0x70bd2b, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x3d, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac=@broadcast}, 0x7, @random=0x7, 0x1, @void, @void, @void, @val={0x4, 0x6, {0xf0, 0x2, 0x7fff, 0xa706}}, @void, @void, @val={0x25, 0x3, {0x1, 0x8c, 0x8}}, @void, @void, @void, @val={0x72, 0x6}, @void, @void}}, @NL80211_ATTR_BEACON_TAIL={0x6, 0xf, [@random={0x1}]}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @acl_policy=[@NL80211_ATTR_MAC_ADDRS={0x34, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}]}, @NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_MAC_ADDRS={0x10, 0xa6, 0x0, 0x1, [{0xa}]}], @NL80211_ATTR_SSID={0x22, 0x34, @random="8bed3009ac44299924d72005804e917d9971a6d167be8575ecae2b8fb136"}]}, 0xf8}, 0x1, 0x0, 0x0, 0x20004090}, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x10, 0x1409, 0x1, 0x2}, 0x10}}, 0x0) 33.935883501s ago: executing program 0 (id=3071): r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f00000002c0)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) socket$xdp(0x2c, 0x3, 0x0) (async) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x20000, 0x4) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000007c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1800}, 0x20) r4 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000500)={0x1f, 0x0, @fixed}, &(0x7f0000000540)=0xe, 0x80000) getsockopt$bt_BT_FLUSHABLE(r4, 0x112, 0x8, &(0x7f0000000600)=0x66, &(0x7f0000000640)=0x4) (async) getsockopt$bt_BT_FLUSHABLE(r4, 0x112, 0x8, &(0x7f0000000600)=0x66, &(0x7f0000000640)=0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) (async) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000440), 0xffffffffffffffff) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x4d, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0xfffffffe, @local, 0xcd7b}, 0x30) setsockopt$inet6_tcp_TCP_CONGESTION(r8, 0x6, 0xd, &(0x7f0000000140)='bic\x00', 0x4) shutdown(r8, 0x1) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01002bbd7000fedbdf25460000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008e00000000000c008f0001040000000000000c0090000000000000000000c1578e84f4c0835497e0705c5fc247073cb420177cb525de06116c6523dbd04e89985fb94980de27869c4372fb3843326acd9f959bbddaf8c6a84bc18fdd90861fc785393f6b1dc553268500002400000000001ce8049f988bb016915ff3f51f1f25395a1127ead07222ed95753f2c1b6d11e99a73f2e5"], 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x804) setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) (async) setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000680)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000300)=0x1, 0x4) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) getsockopt$nfc_llcp(r10, 0x10f, 0x0, 0x0, 0x3b514ca05b9f5cc7) bind$xdp(r3, &(0x7f0000000100)={0x2c, 0x2, r9, 0x0, r10}, 0xfffffffffffffd70) (async) bind$xdp(r3, &(0x7f0000000100)={0x2c, 0x2, r9, 0x0, r10}, 0xfffffffffffffd70) bind$xdp(r0, &(0x7f0000000240)={0x2c, 0x1, r2, 0x0, r3}, 0x60) ioctl$F2FS_IOC_MOVE_RANGE(r5, 0xc020f509, &(0x7f0000000180)={r0, 0xfffffffffffff9c2, 0x10000, 0xb6}) (async) ioctl$F2FS_IOC_MOVE_RANGE(r5, 0xc020f509, &(0x7f0000000180)={r0, 0xfffffffffffff9c2, 0x10000, 0xb6}) r12 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r12, 0x0, 0x2, &(0x7f0000000040)=0x9, 0x4) sendmmsg$inet(r12, &(0x7f00000005c0)=[{{&(0x7f00000000c0)={0x2, 0x4e23, @remote}, 0x10, 0x0}}], 0x1, 0x0) (async) sendmmsg$inet(r12, &(0x7f00000005c0)=[{{&(0x7f00000000c0)={0x2, 0x4e23, @remote}, 0x10, 0x0}}], 0x1, 0x0) recvmsg$can_raw(r11, &(0x7f00000004c0)={&(0x7f00000001c0)=@can, 0x80, &(0x7f0000000380)=[{&(0x7f0000000340)=""/8, 0x8}], 0x1, &(0x7f0000000900)=""/216, 0xd8}, 0x40010000) (async) recvmsg$can_raw(r11, &(0x7f00000004c0)={&(0x7f00000001c0)=@can, 0x80, &(0x7f0000000380)=[{&(0x7f0000000340)=""/8, 0x8}], 0x1, &(0x7f0000000900)=""/216, 0xd8}, 0x40010000) 33.680865642s ago: executing program 0 (id=3074): bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0), 0x8) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newsa={0xf0, 0x10, 0x713, 0x0, 0x0, {{@in=@broadcast, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x0, 0x32}, @in6=@mcast2, {}, {}, {}, 0x0, 0x0, 0x2}}, 0xf0}}, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r1, 0x10f, 0x80, &(0x7f0000000380)=0x5, 0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@bloom_filter={0x1e, 0x0, 0xc9f2, 0x800, 0x10, 0x1}, 0x50) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bond0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0xba01}, 0x4000040) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x20, 0x1411, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) r7 = socket(0xa, 0x3, 0x4) ioctl$sock_SIOCBRDELBR(r7, 0x89a2, &(0x7f0000000000)='bridge0\x00') accept$ax25(r7, &(0x7f0000000180)={{0x3, @bcast}, [@default, @remote, @rose, @default, @default, @remote, @default, @bcast]}, &(0x7f00000003c0)=0x48) sendmsg$NL80211_CMD_TRIGGER_SCAN(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010024bd7000e8dbdf252100000008000300", @ANYRES32=r6, @ANYBLOB="08009e"], 0x24}, 0x1, 0x0, 0x0, 0x4014001}, 0x0) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000280)={r2, 0x0, &(0x7f0000000200)=""/76}, 0x20) 33.295179778s ago: executing program 0 (id=3078): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002f00000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) getsockopt$CAN_RAW_RECV_OWN_MSGS(0xffffffffffffffff, 0x65, 0x4, &(0x7f0000000040), &(0x7f0000000100)=0x4) bind$alg(r1, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-aesni\x00'}, 0x58) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r2, 0x0, 0xcc, &(0x7f0000000140)={@multicast2, @multicast1, 0x0, "aaa517d60f2811d48c8a2cc60c4380bc23b510d442ff13482864280a9c0f4eb5"}, 0x3c) setsockopt$MRT_DEL_MFC_PROXY(r2, 0x0, 0xd3, &(0x7f00000000c0)={@multicast2, @multicast1, 0x0, "c6c0e6ec8755b5dc4e305886d95f086707764f8d0e5a0358ea21274f844a69e9", 0x0, 0x200}, 0x3c) setsockopt$ALG_SET_AEAD_AUTHSIZE(r1, 0x117, 0x5, 0x0, 0xf) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=@newlink={0x34, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}]}, 0x34}}, 0x0) 9.229613072s ago: executing program 0 (id=3082): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0xf9b, 0x4) listen(r0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x14, r3, 0x1, 0x0, 0x0, {0x2, 0x2, 0x2}}, 0x14}, 0x1, 0x40030000000000}, 0x0) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'veth0_to_bond\x00', 0x0}) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000140)=ANY=[@ANYRESDEC=r4, @ANYRES16=r4, @ANYBLOB="010026bd6000000000002d9300000c00018008000100", @ANYRES64=r5], 0x20}, 0x1, 0x0, 0x0, 0xd4}, 0x24008000) 9.225153961s ago: executing program 0 (id=3086): r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10) bind$tipc(r1, 0x0, 0x0) sendmsg$tipc(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4010}, 0x8820) close(0x4) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x2, 0x0, 0x0) syz_emit_ethernet(0x7e, &(0x7f0000000040)={@multicast, @random="07a24f79ee3f", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, ' \x00', 0x48, 0x2f, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2, {[], {0x0, 0x883e, 0x48, 0x0, @wg=@cookie={0x3, 0x2, "bb2a330747a00f558e4db2c317a5854ba125676e33991d1f", "0fe440077e4a3909d39303fde94e2c89c1239631e6f20dc81ff88e2c25a4aaa5"}}}}}}}, 0x0) 6.695383083s ago: executing program 4 (id=3116): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000001240)=ANY=[@ANYBLOB="9feb010018000000000000003400000034000000060000000400000000000007000000000000000000000001050000001000000000000000010000850200000000000000020000000000000000000000da0024107b35d0e9a17c2a3472acbd497d22d9eecb9c71c75b5c74441d6cfd33332c6ba1cb230ea061765707d2768c12e0dad9de2957832f41a65d71fc8969922f6f174be7148ae200ff554c800dd134195ce692a5db2763e4686c035a1a96daee68647212bb50b12c90ff18a9edfd233095ddeac1627d7a50d5bceab9101d004db88566275b233540"], &(0x7f0000000340)=""/142, 0x52, 0x2df8cb643540299b, 0x1}, 0x20) r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000018c0)={'team0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000022780)=@newlink={0x40, 0x10, 0x49920d862a92153b, 0xc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90c1, 0x5c81}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD1={0x8}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x40}}, 0x48010) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r3, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x8) r5 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000080)=r4, 0x4) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000500)={r5, r3, 0x4, r3}, 0x10) r6 = socket$netlink(0x10, 0x3, 0x14) bind$netlink(r6, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbff, 0x20000}, 0xc) 6.307344837s ago: executing program 4 (id=3122): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_mreqsrc(r0, 0x0, 0x25, &(0x7f0000000000)={@local, @local, @remote}, 0xc) setsockopt$inet_int(r0, 0x0, 0x8, &(0x7f0000000080)=0x803, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000040)=ANY=[@ANYBLOB="54020000170001000000000000000000200100000000000000000000000000010000000000000000ac141400000000000000000000000000fc020000000000000003000000000000e000000200001000000000000000000000000000000000080a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="1242ffff040000000000000000000037660b6aff00"/32, @ANYRES32, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000e0270300000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000650d000000000000e1000000000000000007000000ff0f0000000000000000000008000b000000000008001600000000000c001500000000005d0000000401050000000000000000000000ffff00000000000000003300000002000000e00000020000000000000000000000000000000000000000000000000000000000000000ff"], 0x254}}, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000500)={'syz_tun\x00', &(0x7f0000000180)=@ethtool_link_settings={0x4d, 0x400, 0xf, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, [0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1]}}) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0xe403}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x1}, @IFLA_BOND_PACKETS_PER_SLAVE={0x8, 0x14, 0x81}]}}}]}, 0x44}}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x34, r4, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0xfc}]}, 0x34}}, 0x0) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x34, r6, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0x1}]}, 0x34}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaafad1e048716e08004500001c0000000002119008000000000000000000004e2000089078"], 0x0) recvmmsg(r0, &(0x7f0000001980)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2, 0x0) socket$kcm(0x29, 0x5, 0x0) 3.843050258s ago: executing program 4 (id=3134): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bond0\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'veth1_vlan\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="b4000000000000006111cc000000000006000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0xf, 0x3e0, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76}, 0x48) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=@newlink={0x44, 0x10, 0xffffffffffffffff, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x22700, 0xc2a54}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_CARRIER_CHANGES={0x8, 0x23, 0x80000001}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x40040) 3.73818165s ago: executing program 2 (id=3136): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) r1 = socket$igmp6(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r1, 0x29, 0xcb, 0x0, 0x76e6) r2 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000140)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10, 0x80000) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000040)={@fallback=r2, r0, 0x2f, 0x10}, 0x20) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x8) r4 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000002c0)=r3, 0x4) bpf$LINK_DETACH(0x22, &(0x7f0000000340)=r4, 0x4) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000000)={r4, r0, 0x4, r0}, 0x10) 3.468574022s ago: executing program 2 (id=3138): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40500000000000071106b00000000000600000000b30b6eabbe20ce48000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc9, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0xfffffffc, 0x2}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4) r1 = socket$l2tp6(0xa, 0x2, 0x73) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000340)={0x30, r4, 0x8d61ddcfedb48df, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x4}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x30}}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000100)=0x8) r5 = socket$inet6(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000540)={'batadv_slave_0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000580)={'syztnl2\x00', &(0x7f00000006c0)={'ip_vti0\x00', 0x0, 0x80, 0x7800, 0x6320, 0x7, {{0x37, 0x4, 0x0, 0x19, 0xdc, 0x66, 0x0, 0x2a, 0x29, 0x0, @rand_addr=0x64010102, @multicast2, {[@timestamp={0x44, 0xc, 0x72, 0x0, 0x4, [0x7, 0x400]}, @rr={0x7, 0xf, 0xfa, [@remote, @multicast2, @multicast2]}, @cipso={0x86, 0x10, 0x0, [{0x0, 0xa, "ff31966b70634e96"}]}, @timestamp_prespec={0x44, 0x2c, 0xd0, 0x3, 0xc, [{@private=0xa010101, 0x8}, {@remote, 0x10001}, {@loopback, 0x6}, {@remote, 0xffffffff}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3}]}, @rr={0x7, 0x17, 0xec, [@private=0xa010102, @multicast1, @private=0xa010100, @multicast2, @multicast2]}, @timestamp={0x44, 0x2c, 0x79, 0x0, 0x1, [0x1, 0x9, 0x9, 0x4, 0x401, 0x2, 0x2, 0x400, 0x1ff, 0x8]}, @ssrr={0x89, 0x27, 0xb4, [@broadcast, @remote, @empty, @multicast1, @loopback, @multicast2, @remote, @remote, @remote]}, @end, @ra={0x94, 0x4}, @end]}}}}}) getsockname$packet(0xffffffffffffffff, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000600)=0x14) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000007c0)={'vxcan0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000880)={'ip6gre0\x00', &(0x7f0000000800)={'ip6tnl0\x00', 0x0, 0x2f, 0x2, 0x6, 0x0, 0x20, @dev={0xfe, 0x80, '\x00', 0x14}, @private1, 0x8, 0x7, 0x2, 0x2}}) r11 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendto$packet(r11, 0x0, 0x0, 0x814, &(0x7f0000000000)={0x11, 0xc, r12, 0x1, 0x0, 0x6, @random="10aabdaf2255"}, 0x14) sendmsg$ETHTOOL_MSG_FEATURES_GET(r3, &(0x7f0000000b00)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0xc000020}, 0xc, &(0x7f0000000ac0)={&(0x7f00000008c0)={0x1f4, r4, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x7c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}]}]}, 0x1f4}, 0x1, 0x0, 0x0, 0xc015}, 0x10) r13 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r13, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r13, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) r15 = socket$netlink(0x10, 0x3, 0x9) sendmsg$nl_route(r15, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c00000010003704005f0f000000000000000000", @ANYRES32=r14, @ANYBLOB="21120700000000001c0012800b00010069703667726500000c00028008000100", @ANYRES32=r5], 0x3c}, 0x1, 0x0, 0x0, 0x10040}, 0x0) sendmmsg$inet(r1, &(0x7f00000017c0)=[{{&(0x7f0000000200)={0x2, 0x4e1c, @dev={0xac, 0x14, 0x14, 0x26}}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r14, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1}}}], 0x20}}], 0x1, 0x800) r16 = socket$l2tp6(0xa, 0x2, 0x73) close(r16) r17 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r17, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000003f80)={&(0x7f0000000140)="989cdc29fb84a0e2aa93c580738767c298aef1f1f33b9fd5c2c2356dd29f8e7db5ae81b4d70d5c3bd2ccec2d7df8bc799caafa81178cdb34f0985369563fc91b8c101a30ba243dc909da4daad882e07f0c61343f68c41899f79661064d85610036fbf3fa1158c5896f5187395d9f6e3a09096f2a0000", 0x76}}, 0x40) ioctl$AUTOFS_IOC_READY(r0, 0x400442c9, 0x200000f3) 3.467949988s ago: executing program 4 (id=3139): r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg$inet(r0, &(0x7f0000000680)=[{{&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000040)="93", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)="e5eceeef", 0x4}], 0x1}}], 0x2, 0x4040040) r1 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r1, &(0x7f0000000140), 0x4924b68, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r1) 3.093571692s ago: executing program 4 (id=3143): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x3}, 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000280)={r0, &(0x7f0000000080)="f7388c31792e91efd50d862c6c6dd56a5f20d972427e666dc307189f245655cbce06b22968753fff395d5975e5fcf4e5d15ab867193c8f1220a415db8cdf30b43844129b7524dc11efef9701ddde38bb4df0cb651f953511b74dde7cc8e438427190c246a505a6eaf976624097b1e8d27cf7f5b7316a43468dffab90aeab8689e626fe46794e60ef0729f40301524f8ff087867822a588ff44dc0c025b69ac4d46385dceddbe6aa22d4a673a8190c5c8cca3e73c8dbf3051538c7d957ace90953574cf629e491385499d74903d2e119afdb53d", &(0x7f0000000180)=""/233}, 0x20) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'batadv_slave_1\x00', 0x0}) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000300), 0x8) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000340)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', r1, r2, 0x0, 0x3, 0x1}, 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000600)=@bpf_lsm={0x1d, 0x1d, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x4}, [@generic={0x74, 0x0, 0x2, 0x0, 0x6}, @btf_id={0x18, 0x4, 0x3, 0x0, 0x2}, @map_idx_val={0x18, 0x7, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6}, @map_fd={0x18, 0x1, 0x1, 0x0, r2}, @tail_call={{0x18, 0x2, 0x1, 0x0, r2}}, @btf_id={0x18, 0xa, 0x3, 0x0, 0x3}, @ldst={0x2, 0x1, 0x0, 0x6, 0xa, 0x18, 0x4}, @ldst={0x1, 0x1, 0x3, 0x8, 0x4, 0x1}, @printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}, @map_fd={0x18, 0x8, 0x1, 0x0, r3}]}, &(0x7f00000004c0)='syzkaller\x00', 0x9, 0x0, 0x0, 0x40f00, 0x10, '\x00', r1, 0x1b, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000500)={0x5, 0x2, 0x3, 0x1}, 0x10, 0xffffffffffffffff, 0x0, 0x6, &(0x7f0000000540)=[r2], &(0x7f0000000580)=[{0x5, 0x1, 0xb, 0x2}, {0x5, 0x3, 0x9, 0xb}, {0x3, 0x2, 0xb, 0x4}, {0x2, 0x4, 0x3, 0x5}, {0x5, 0x1, 0x2, 0x7}, {0x1, 0x4, 0x4, 0x7}], 0x10, 0x1000}, 0x94) write$cgroup_subtree(r2, &(0x7f00000006c0)={[{0x2b, 'cpuacct'}, {0x38, 'memory'}, {0x2b, 'cpu'}, {0x2d, 'memory'}]}, 0x1e) ioctl(r0, 0x5, &(0x7f0000000700)="f3b1d275ccdc19166e3186eaa9c55dd2c74f6321f99887043a69ec1136050cf94412ed5bbd9655588dd737dccb876726ccc4c1079cf5635aa9e79bbb8308b21f28aba0655c06d08ee8bfe1345c3502f9e2b2f14dd48284a2b8a516bee47465dfb1b90c2fc898854e44ba") ioctl$F2FS_IOC_DEFRAGMENT(r2, 0xc010f508, &(0x7f0000000780)={0x2, 0x1}) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, &(0x7f00000007c0)={0x32, 0x1a, '\x00', [@generic={0xef, 0x4, "26801147"}, @jumbo={0xc2, 0x4, 0x8}, @jumbo={0xc2, 0x4, 0x6}, @hao={0xc9, 0x10, @private0={0xfc, 0x0, '\x00', 0x1}}, @jumbo={0xc2, 0x4, 0xb}, @hao={0xc9, 0x10, @empty}, @generic={0x7, 0x8d, "3d4547913a610eb8b80ebe496c294ec0a3e66ff0a99440d2a9bc6e0f0e571670a696de3e09de67c32d6ffa3e80a08c6d40d693625949ffda1cf0f4a4aa51a61a1ee84e5d6854c0485906d82dff84265c57e03ea9e0b5540a7415f9bc4ad6fd11a84a06208e35d0df4c3c5efa7ca5d0d4c148be0cfbc912f79452fe49083738e51ad4b29d3b91c462b025665fd0"}, @padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}, 0xe0) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r2, 0x89f6, &(0x7f0000000980)={'sit0\x00', &(0x7f00000008c0)={@dev={0xac, 0x14, 0x14, 0x13}, 0x1, 0x0, 0xa0, 0x0, [{@initdev}, {@loopback}, {@initdev}, {@dev}, {@dev}, {@private}, {@multicast1}, {@empty}, {@dev}, {@broadcast}]}}) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000a00), r2) sendmsg$ETHTOOL_MSG_TSINFO_GET(r2, &(0x7f0000000b00)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x48, r4, 0x8, 0x70bd2b, 0x25dfdbfe, {}, [@HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x880}, 0x4000) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000c40)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000b80)={0x54, 0x1, 0x2, 0x3, 0x0, 0x0, {0x2, 0x0, 0x4}, [@CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x4}, @CTA_EXPECT_TUPLE={0x38, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x840}, 0x7e00d1196b6045dc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000d40)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x34, 0x9, 0x6, 0x301, 0x0, 0x0, {0x1, 0x0, 0x3}, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x800}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x3}, @IPSET_ATTR_ADT={0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x4040810) bind$bt_l2cap(r2, &(0x7f0000000d80)={0x1f, 0x8, @any, 0x56e0, 0x1}, 0xe) r5 = accept$nfc_llcp(r2, &(0x7f0000000dc0), &(0x7f0000000e40)=0x60) getsockopt$inet_tcp_buf(r2, 0x6, 0x1f, &(0x7f0000000e80)=""/181, &(0x7f0000000f40)=0xb5) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r2, 0x84, 0x16, &(0x7f0000000f80)={0x8, [0xfffe, 0x8, 0x8, 0xf15, 0x0, 0x1, 0x3, 0x81]}, 0x14) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000001000), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r6, &(0x7f0000001140)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001100)={&(0x7f0000001040)={0xa4, r7, 0x2, 0x70bd29, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'hsr0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bond_slave_0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @remote}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast1}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0xa010101}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4000}, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000001180)={'veth1_to_bond\x00', 0x0}) connect$packet(r2, &(0x7f00000011c0)={0x11, 0x6, r8, 0x1, 0xff, 0x6, @remote}, 0x14) sendmsg$ETHTOOL_MSG_PAUSE_SET(r2, &(0x7f00000012c0)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001280)={&(0x7f0000001240)={0x1c, r4, 0x20, 0x70bd29, 0x25dfdbfd, {}, [@ETHTOOL_A_PAUSE_TX={0x5, 0x4, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r9 = accept$packet(0xffffffffffffffff, &(0x7f0000001300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000001340)=0x14) setsockopt$packet_int(r9, 0x107, 0x7, &(0x7f0000001380)=0x5, 0x4) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r5, 0x6612) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000001480)={r0, &(0x7f00000013c0)="2e23f812656920672bf31ba0cf71676464a796a451cf124da757ee0dab593185fdca89ffc465b6ca45a6acab219c7198cfc26fab9addbae958cc1adffac0c8ef3f", &(0x7f0000001440)=@tcp6=r2}, 0x20) setsockopt$EBT_SO_SET_COUNTERS(r2, 0x0, 0x81, &(0x7f0000001540)={'filter\x00', 0x0, 0x0, 0x0, [0x4, 0x5, 0x7, 0x8, 0x0, 0xfffffffffffffff7], 0x1, &(0x7f00000014c0)=[{}, {}, {}, {}, {}], 0x0, [{}]}, 0x88) 2.743281911s ago: executing program 4 (id=3144): r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xc, &(0x7f0000000040)=@assoc_value, &(0x7f0000000000)=0x8) setsockopt$inet_mreq(r0, 0x0, 0x20, &(0x7f00000000c0)={@private=0xa010100, @multicast2}, 0x8) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001a80), r1) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/uts\x00') r3 = socket$inet6(0xa, 0x805, 0x0) r4 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000080)={r5, 0x0, 0x0}, 0x0) getsockopt$bt_hci(r3, 0x84, 0x85, &(0x7f0000000080)=""/4060, &(0x7f00000010c0)=0xfdc) unshare(0x6a040000) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='sched_process_wait\x00', r6}, 0x10) r8 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r7}, 0x8) r9 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="85000000070000006a0a00ff000000000c000000000000009500000000000000181000f6", @ANYRES32, @ANYBLOB="000000000000000005000000000000009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)={@ifindex, r9, 0x11, 0x0, 0x0, @void, @value=r8}, 0x20) socket(0x10, 0x80002, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f0000001b00)={0x34, r2, 0x1, 0x1000000, 0x0, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x1c, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}]}]}, 0x34}}, 0x20004000) 2.713040265s ago: executing program 3 (id=3146): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f00000002c0)="9e", 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback, 0xe}, 0x1c) sendmsg$inet6(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)='h', 0x1}], 0x1}, 0x48804) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, 0x0, 0x0) shutdown(r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x0) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$bt_hci(r3, 0x84, 0x84, &(0x7f0000002140)=""/4092, &(0x7f0000001080)=0xffc) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) splice(r4, 0x0, r1, 0x0, 0x8000f25, 0x0) getsockopt$inet_sctp_SCTP_EVENTS(r4, 0x84, 0xb, &(0x7f0000000000), &(0x7f0000000040)=0xe) bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000100)=@base={0x1c, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x48) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000340)=',', 0x34000}], 0x1) 2.497825478s ago: executing program 2 (id=3147): r0 = socket$kcm(0x10, 0x2, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000340)={r0, 0x7, 0x5ba, 0x65}) bind$rds(r1, &(0x7f0000000380)={0x2, 0x4e21, @local}, 0x10) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000840)="2e00000010008188040f6fec59acbc0435a181003f00000000060000000000000e000d000d6ed60012801900121f", 0x2e}], 0x1}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x50, 0x10, 0x40d, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5019}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_MODE={0x8}]}}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'macvlan0\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000180)={0x7, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYRESHEX=r3], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc9, &(0x7f0000000080)=""/201, 0x0, 0x50, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x4}, 0x8, 0x10, &(0x7f0000000000), 0x10, r3}, 0x94) r4 = accept4$tipc(0xffffffffffffffff, &(0x7f0000000280)=@id, &(0x7f00000002c0)=0x10, 0x800) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r4, 0x8982, &(0x7f0000000300)={0x3, 'dummy0\x00', {0x200}, 0x6}) 2.240493752s ago: executing program 2 (id=3149): socket$inet6_mptcp(0xa, 0x1, 0x106) socket$packet(0x11, 0x2, 0x300) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20004015}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0xd, 0x20000000000000bb, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb714000008"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x3, 0x0, 0x0, 0x0, 0x2000004, 0x0, 0x0, 0x1f00, 0x39, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x2, 0x200008, 0x5, 0x20000}, 0x10}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a600000000000000500000014000500200100000000000000000300000000001c00090008000000", @ANYRES32=r0], 0x4c}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000300)="b19ccccf84f531d9ec2135f5f8db462781a770926a3c7a869270ab6fa0375a98e409ecd6a1031c519b33105bfde3228cc9a3836e0384db54dcf1a51348d57cbfa42d53169415c980580a21130da3dd0fcd85dd4181dcbc17ec4ab9b48cd8163ff2bb8fb569fd34b0812cfaf7bd78e7b84b77f7b3df4e4e6048aabbc11937edc3d2c204c0b0a5e42024e98f714ba7f3016a4e58a404130e7c27372bdfe041dbf8c8df87c1c117029a8ba0db677ca96418b57f95f2137616e1ce0ad39dc12aee2eb67ad78cd14f5bfd6fe417bb5d21aedf5921d59befdf5dab85bb5eca81e391b402777c", 0xe3) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000002c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x2c, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, r5}, [@IFLA_ADDRESS={0xa, 0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}]}, 0x2c}}, 0x0) 1.818131453s ago: executing program 2 (id=3150): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x1c, 0x20, 0x9, 0x2, 0x25dfdbff, {0x2}, [@typed={0x8, 0x8, 0x0, 0x0, @fd=r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, 0x0, 0x800, 0x55007}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_IGMP_VERSION={0x5, 0x2b, 0x2}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) (async) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) (async) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x1c, 0x20, 0x9, 0x2, 0x25dfdbff, {0x2}, [@typed={0x8, 0x8, 0x0, 0x0, @fd=r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, 0x0, 0x800, 0x55007}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_IGMP_VERSION={0x5, 0x2b, 0x2}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async) 1.715203005s ago: executing program 3 (id=3151): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x24, 0x14, 0x65c28d33709e660d, 0x0, 0x0, {0x11, 0x36}, [@INET_DIAG_REQ_BYTECODE={0xd, 0x1, "91fabc0b03e55e3719"}]}, 0x24}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x300, 0x0, 0x150}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x8, 0x2}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0x1c, &(0x7f0000000240)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0xa}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@jmp={0x5, 0x0, 0x7, 0x3, 0x9, 0xc, 0x4}, @generic={0x74, 0x4, 0x9, 0x10, 0xc00000}, @map_idx={0x18, 0x5, 0x5, 0x0, 0x8}, @map_idx={0x18, 0x1, 0x5, 0x0, 0x8}, @call={0x85, 0x0, 0x0, 0xb0}, @alu={0x4, 0x1, 0xa, 0x4, 0xa, 0x30, 0x10}, @btf_id={0x18, 0x8, 0x3, 0x0, 0x2}, @map_idx={0x18, 0x5, 0x5, 0x0, 0xb}, @exit], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='syzkaller\x00', 0xd1, 0x0, 0x0, 0x40f00, 0x9, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0xa, 0x3}, 0x8, 0x10, &(0x7f00000003c0)={0x1, 0xd, 0xabb1, 0x3}, 0x10, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000400)=[0x1, 0xffffffffffffffff, 0x1, 0x1, 0x1, 0x1, 0x1, 0xffffffffffffffff], &(0x7f0000000440)=[{0x1, 0x4, 0x3, 0x4}, {0x2, 0x4, 0xa, 0xa}, {0x2, 0x2, 0x6, 0xb}, {0x5, 0x5, 0x9}, {0x1, 0x4, 0x9, 0x1}, {0x2, 0x3, 0x1, 0x5}, {0x5, 0x2, 0x4, 0x8}, {0x0, 0x4, 0x3, 0x4}], 0x10, 0x1ff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x18, 0x4, &(0x7f0000000200)=ANY=[@ANYRESOCT=r0], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2}, 0x94) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$PPPIOCSMRU1(r3, 0x40047452, &(0x7f0000000180)=0x510) ioctl$BTRFS_IOC_GET_FEATURES(r0, 0x80189439, &(0x7f00000001c0)) 1.423263365s ago: executing program 2 (id=3152): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) mmap(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x1000004, 0x10010, r0, 0xa3b81000) r1 = socket(0x10, 0x3, 0x0) sendmsg$NFNL_MSG_CTHELPER_GET(r0, &(0x7f00000015c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001580)={&(0x7f0000001540)={0x1c, 0x1, 0x9, 0x5, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x1d}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x80) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000000)={0x8}, 0x10) write(r1, &(0x7f0000000500)="240000001e005f02141f00fffffffff801000000080000000000000008000902009ea5b1", 0x24) close(0x4) syz_extract_tcp_res$synack(&(0x7f0000001600)={0x41424344, 0x41424344}, 0x1, 0x0) syz_emit_ethernet(0x77, &(0x7f0000001640)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @dev, @void, {@ipv4={0x800, @tcp={{0x7, 0x4, 0x3, 0xc, 0x69, 0x66, 0x0, 0x94, 0x6, 0x0, @remote, @broadcast, {[@rr={0x7, 0x7, 0x9d, [@initdev={0xac, 0x1e, 0x1, 0x0}]}]}}, {{0x4e24, 0x4e24, 0x41424344, r2, 0x0, 0x0, 0x5, 0x1, 0xb9, 0x0, 0x40}, {"3a7e1858afdb38aa4352e81421ae9296d5970d413a2c9161fb0a0cc65882276f6f07a8f74af21c274b8c113dace5013f154bb35d74d9e667b9"}}}}}}, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) r3 = socket(0x8, 0x3, 0x0) accept$phonet_pipe(r3, 0x0, 0x0) ioctl$sock_inet_SIOCGARP(r1, 0x8954, &(0x7f0000000080)={{0x2, 0x4e23, @rand_addr=0x64010101}, {0x1, @remote}, 0x28, {0x2, 0x4e23, @private=0xa010102}, 'hsr0\x00'}) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000200)="4647b4f310d036b398bd576db787e7b4202ee128ae26c942fc41e537802686e83e6a0af1563bf3b021ec13c349eb6c1ed386de2085218c1cc9fb2decdb2a5f89154999df0aeebf9b9c41add84afb988eeb8fee205f4c", 0x56}, {&(0x7f0000000280)="af4c42680bee64c57b0c7748a3924e8e5599e0238057", 0x16}, {&(0x7f0000000140)="d6f12351876d5702fb64018cc67dcb307616eafb60", 0x15}], 0x3) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000002a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r5, 0xe0, &(0x7f0000001980)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140)={r6}, 0x4) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x2, 0x10, &(0x7f0000000040)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffff5}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x8300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000180)={@ifindex, r4, 0x2f, 0x2c, 0x0, @void, @void, @void, @value=r6}, 0x20) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x8) r9 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000240)=r8, 0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={r9, 0x0, 0x0}, 0x10) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x7, 0x10012, r10, 0x0) 1.347064044s ago: executing program 3 (id=3154): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x13, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="4e2a0000000000007110a100000000009500000000000000"], &(0x7f0000000480)='syzkaller\x00'}, 0x80) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000012c0)=ANY=[@ANYBLOB="5800000002060101000000000000000000000000050005000a000000050004000000000005000100070000000c00078008001300000000000900020073797a320000000011000300686173683a6970"], 0x58}}, 0x50) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r4 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$sock_int(r4, 0x1, 0x20, &(0x7f0000002900)=0xfffffffc, 0x4) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000001c0)={@map=r3, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000080)={r2}) splice(r1, 0x0, r5, 0x0, 0x10500, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000040)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x13, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="4e2a0000000000007110a100000000009500000000000000"], &(0x7f0000000480)='syzkaller\x00'}, 0x80) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$inet_udplite(0x2, 0x2, 0x88) (async) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000012c0)=ANY=[@ANYBLOB="5800000002060101000000000000000000000000050005000a000000050004000000000005000100070000000c00078008001300000000000900020073797a320000000011000300686173683a6970"], 0x58}}, 0x50) (async) pipe(&(0x7f0000000040)) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (async) socket$rxrpc(0x21, 0x2, 0x2) (async) setsockopt$sock_int(r4, 0x1, 0x20, &(0x7f0000002900)=0xfffffffc, 0x4) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000001c0)={@map=r3, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) (async) socket$packet(0x11, 0x3, 0x300) (async) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000080)={r2}) (async) splice(r1, 0x0, r5, 0x0, 0x10500, 0x0) (async) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000040)) (async) 1.063054293s ago: executing program 3 (id=3155): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000300)="d8", 0x1}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0x0) socket$alg(0x26, 0x5, 0x0) (async) r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000180)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x54}, {0x6}]}, 0x10) syz_emit_ethernet(0x4e, &(0x7f00000000c0)={@local, @local, @val={@void}, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0004ba", 0x14, 0x6, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) (async) syz_emit_ethernet(0x4e, &(0x7f00000000c0)={@local, @local, @val={@void}, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0004ba", 0x14, 0x6, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) bind$alg(r0, &(0x7f0000000340)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast6-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000003a40)=@newtaction={0x1008, 0x30, 0x300, 0x70bd2d, 0x25dfdbfc, {}, [{0xff4, 0x1, [@m_ipt={0xff0, 0x16, 0x0, 0x0, {{0x8}, {0xf30, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8}, @TCA_IPT_TARG={0xf21, 0x6, {0x4, 'mangle\x00', 0x7, 0x400, "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"}}]}, {0x99, 0x6, "5a2d0e869135a294681ef6728f70a65a4ea0d645f71a0d1a9a99c024664f4e73dede9d72b43ee6f5534424a60fccbf0cff8dc2529390cafe31ae5e8e55770458f47742a28dc9de14a5353494a516788dde5f40b2d2c8250994240fd3480d4fa9b3074e615a9102ede5ec3696a39921db8b2af38d59d8dd9bc64c7ed82b6ea0101d87fa1a8a6b4ff8b4b9d8499e145429c162d8abca"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0x1008}}, 0x4000000) recvmmsg$unix(r2, &(0x7f00000029c0)=[{{0x0, 0x0, &(0x7f00000001c0)}}], 0x1, 0x10000, 0x0) (async) recvmmsg$unix(r2, &(0x7f00000029c0)=[{{0x0, 0x0, &(0x7f00000001c0)}}], 0x1, 0x10000, 0x0) close(0x4) r3 = socket(0x3b, 0xdaf7c5a5f5219d8, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f00000000000000000a000000000000000800010001000000040004"], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f00000000000000000a000000000000000800010001000000040004"], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) 1.019934621s ago: executing program 1 (id=3156): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sm3\x00'}, 0x58) unshare(0x4000400) r1 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x7, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) 874.836628ms ago: executing program 3 (id=3157): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x8003, 0x7}, 0x50) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r1, 0x0, 0x0}, 0x20) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@ldst={0x2, 0x2, 0x3, 0x1, 0x0, 0x8}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) r5 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x4e, &(0x7f00000003c0)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd308", 0x18, 0x6, 0x0, @local, @local, {[], {{0x3, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x2, 0x0, 0x0, {[@mss={0x2, 0x4}]}}}}}}}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x34, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x6}, @RTA_ENCAP={0x10, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0xc, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_GENEVE={0x8, 0x1, 0x0, 0x1, @LWTUNNEL_IP_OPT_GENEVE_DATA={0x4, 0x4}}}}]}, 0x34}}, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x44, 0x3e, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x20, 0x2, 0x0, 0x1, [@nested={0x1c, 0x17, 0x0, 0x1, [@typed={0x4, 0xad, 0x0, 0x0, @binary}, @typed={0x14, 0xfb, 0x0, 0x0, @ipv6=@loopback}]}]}]}, 0x44}, 0x1, 0x0, 0x0, 0xc000}, 0xc000) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) r9 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r9, &(0x7f0000000440), 0x10) connect$vsock_stream(r9, &(0x7f0000000000), 0x10) listen(r9, 0x0) r10 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r10, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) accept4$unix(r9, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)=ANY=[@ANYBLOB, @ANYRES32=0x0], 0x78}}, 0x0) r11 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000080)={'bridge0\x00'}) socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$nl_route(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x40000001) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000280)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000004000ffffffff0200000008000300", @ANYRES32=r4, @ANYBLOB="080002002e"], 0x24}, 0x1, 0x6c00, 0x0, 0x4d080}, 0x0) 743.363949ms ago: executing program 1 (id=3158): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000240)={'gre0\x00', &(0x7f00000001c0)={'erspan0\x00', 0x0, 0x8000, 0x7, 0x2, 0x0, {{0x6, 0x4, 0x3, 0x4, 0x18, 0x68, 0x0, 0x3, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010102, {[@noop]}}}}}) sendmsg$nl_route_sched(r0, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)=@gettfilter={0x4c, 0x2e, 0x0, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0x0, 0x8}, {0xe, 0x5}, {0xfff2, 0x4}}, [{0x8, 0xb, 0x5}, {0x8, 0xb, 0x1}, {0x8, 0xb, 0x4}, {0x8, 0xb, 0x401}, {0x8, 0xb, 0x3e}]}, 0x4c}, 0x1, 0x0, 0x0, 0x11}, 0x4000050) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)=@gettfilter={0x4c, 0x2e, 0x0, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0x0, 0x8}, {0xe, 0x5}, {0xfff2, 0x4}}, [{0x8, 0xb, 0x5}, {0x8, 0xb, 0x1}, {0x8, 0xb, 0x4}, {0x8, 0xb, 0x401}, {0x8, 0xb, 0x3e}]}, 0x4c}, 0x1, 0x0, 0x0, 0x11}, 0x4000050) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newlink={0x44, 0x10, 0x44b, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_AGEING_TIME={0x8, 0x8, 0x81}]}}}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0xc573}]}, 0x44}}, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newlink={0x44, 0x10, 0x44b, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_AGEING_TIME={0x8, 0x8, 0x81}]}}}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0xc573}]}, 0x44}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000300)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x5, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x2}, [@map_idx={0x18, 0x0, 0x5, 0x0, 0x3}]}, &(0x7f0000000140)='GPL\x00', 0x8, 0x0, 0x0, 0x40f00, 0x41, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=[r6, 0xffffffffffffffff, r6, r6], 0x0, 0x10, 0xc}, 0x94) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x5, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x2}, [@map_idx={0x18, 0x0, 0x5, 0x0, 0x3}]}, &(0x7f0000000140)='GPL\x00', 0x8, 0x0, 0x0, 0x40f00, 0x41, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=[r6, 0xffffffffffffffff, r6, r6], 0x0, 0x10, 0xc}, 0x94) sendmsg$nl_route(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@ipv4_newroute={0x2c, 0x1a, 0x1, 0x0, 0x25dfdbfc, {}, [@RTA_DPORT={0x6, 0x1d, 0x4e24}, @RTA_SPORT={0x6, 0x1c, 0x4e21}]}, 0x2c}}, 0x0) socket(0x2b, 0xa, 0x5) sendmsg$nl_generic(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000003e000701fcfffff7fddbdff6037c0000040036800c000180060006008035"], 0x24}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000000b00010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000a80)=ANY=[@ANYBLOB="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"], 0x304}, 0x1, 0x0, 0x0, 0x40000}, 0x20008000) (async) sendmsg$NFT_BATCH(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000a80)=ANY=[@ANYBLOB="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"], 0x304}, 0x1, 0x0, 0x0, 0x40000}, 0x20008000) 411.436937ms ago: executing program 1 (id=3159): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_GET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x3c, r1, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x5}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000001}, 0x4) r2 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, 0xfffffffffffffffd) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) r4 = socket$inet6(0xa, 0x80002, 0x88) r5 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x54, r3, 0x100, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x55a, 0x32}}}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_BSS_BASIC_RATES={0x24, 0x24, [{0x18, 0x1}, {0x30, 0x1}, {0x5, 0x1}, {0x4}, {0x6c}, {0xb, 0x1}, {0x1b, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x9, 0x1}, {0x48, 0x1}, {0x5}, {0x6, 0x1}, {0x36, 0x1}, {0x12, 0x1}, {0x30, 0x1}, {0x5d}, {0x24, 0x1}, {0x18, 0x1}, {0x24, 0x1}, {0x48}, {0xb, 0x1}, {0x9, 0x1}, {0x5, 0x1}, {0x36}, {0x6, 0x1}, {0x4, 0x1}, {0x30, 0x1}, {0x30, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x30, 0x1}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x10}, 0x4000) 280.280794ms ago: executing program 1 (id=3160): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x20, 0x10, 0x49920d862a92153b}, 0x20}}, 0x0) 91.56849ms ago: executing program 1 (id=3161): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000040)=ANY=[@ANYBLOB="05000000000000006b113e00000000008510000002000000850000000500000095003300000000009500250500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x94) 90.913362ms ago: executing program 3 (id=3162): syz_genetlink_get_family_id$tipc2(&(0x7f0000000d00), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) unshare(0xc020400) r1 = epoll_create1(0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa0}, 0x1, 0x0, 0x0, 0x24000850}, 0x40) close(r2) epoll_wait(r1, &(0x7f0000000080)=[{}], 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@bloom_filter={0x1e, 0x0, 0x6a, 0x40000007}, 0x48) sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYRESOCT=r0, @ANYRES16=r1, @ANYBLOB="030700000000000000000800007f68000480631c130038c46472a0872295333a040007801300010062726f6164636173742d6c696e6b0000190007800800030000000000080002000000000008000300000000000800020000"], 0x7c}, 0x1, 0x0, 0x0, 0x44}, 0x0) 0s ago: executing program 1 (id=3163): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x30, 0x3e, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0xc, 0x2, 0x0, 0x1, [@nested={0x6, 0x19, 0x0, 0x1, [@generic='%6']}]}]}, 0x30}, 0x1, 0x0, 0x0, 0xc000}, 0xc000) r1 = socket(0x10, 0x803, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0) kernel console output (not intermixed with test programs): 9533] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1003'. [ 321.643888][ T9535] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1004'. [ 321.670548][ T9526] tipc: Resetting bearer [ 321.686625][ T9525] tipc: Resetting bearer [ 321.725109][ T9539] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1004'. [ 321.756217][ T9539] openvswitch: netlink: nsh attribute has 1 unknown bytes. [ 321.769427][ T9525] tipc: Disabling bearer [ 321.769554][ T9539] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 322.406337][ T9563] gtp0: entered promiscuous mode [ 322.414817][ T9563] gtp0: entered allmulticast mode [ 322.611079][ T9578] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on [ 322.714944][ T9584] netlink: 'syz.0.1021': attribute type 6 has an invalid length. [ 322.916195][ T9592] netlink: 'syz.0.1024': attribute type 1 has an invalid length. [ 322.947715][ T9592] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1024'. [ 323.266013][ T9607] netlink: 'syz.0.1028': attribute type 4 has an invalid length. [ 323.470466][ T9622] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1032'. [ 323.603506][ T9635] nbd: must specify a size in bytes for the device [ 324.081379][ T9648] netlink: 'syz.0.1038': attribute type 21 has an invalid length. [ 324.122331][ T9654] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1038'. [ 324.154179][ T9648] netlink: 'syz.0.1038': attribute type 6 has an invalid length. [ 324.229861][ T9648] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1038'. [ 324.410576][ T9666] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1045'. [ 324.459666][ T9666] tc_dump_action: action bad kind [ 324.505710][ T9668] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1046'. [ 324.528124][ T9669] netlink: 'syz.1.1045': attribute type 1 has an invalid length. [ 324.537439][ T9669] netlink: 'syz.1.1045': attribute type 1 has an invalid length. [ 324.572763][ T9668] netlink: 'syz.4.1046': attribute type 1 has an invalid length. [ 324.585935][ T9668] netlink: 'syz.4.1046': attribute type 1 has an invalid length. [ 324.629899][ T9668] netlink: 216 bytes leftover after parsing attributes in process `syz.4.1046'. [ 325.005207][ T9697] openvswitch: netlink: Key type 85 is out of range max 32 [ 325.008442][ T9692] netlink: 'syz.0.1052': attribute type 1 has an invalid length. [ 325.098397][ T9689] netlink: 'syz.0.1052': attribute type 1 has an invalid length. [ 326.249699][ T9746] netlink: 'syz.2.1073': attribute type 10 has an invalid length. [ 326.484209][ T9746] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode [ 326.524833][ T9746] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 326.536501][ T9754] (unnamed net_device) (uninitialized): ARP target 1.0.0.0 is already present [ 326.546195][ T9754] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (1) [ 327.169776][ T9803] netlink: 'syz.1.1087': attribute type 1 has an invalid length. [ 327.213250][ T9803] netlink: 'syz.1.1087': attribute type 2 has an invalid length. [ 327.248427][ T9803] netlink: 'syz.1.1087': attribute type 2 has an invalid length. [ 327.316265][ T9810] rdma_rxe: rxe_newlink: failed to add lo [ 327.357139][ T9810] rdma_rxe: rxe_newlink: failed to add lo [ 327.373493][ T9813] team0: Device wireguard1 is of different type [ 327.384678][ T9810] rdma_rxe: rxe_newlink: failed to add lo [ 327.391001][ T9810] rdma_rxe: rxe_newlink: failed to add lo [ 327.404513][ T9810] rdma_rxe: rxe_newlink: failed to add lo [ 327.438078][ T9810] rdma_rxe: rxe_newlink: failed to add lo [ 327.445148][ T9810] rdma_rxe: rxe_newlink: failed to add lo [ 327.451816][ T9810] rdma_rxe: rxe_newlink: failed to add lo [ 327.458094][ T9810] rdma_rxe: rxe_newlink: failed to add lo [ 327.465096][ T9810] rdma_rxe: rxe_newlink: failed to add lo [ 327.597243][ T9816] 8021q: adding VLAN 0 to HW filter on device bond2 [ 327.720283][ T9819] vlan2: entered allmulticast mode [ 327.725554][ T9819] veth1: entered allmulticast mode [ 327.736003][ T9819] bond2: (slave vlan2): making interface the new active one [ 327.745612][ T9819] bond2: (slave vlan2): Enslaving as an active interface with an up link [ 327.780915][ T9831] tipc: Enabled bearer , priority 0 [ 327.797360][ T9831] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode [ 327.808375][ T9831] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode [ 327.843114][ T9831] tipc: Resetting bearer [ 328.237301][ T78] tipc: Resetting bearer [ 328.251781][ T9846] tipc: Enabling of bearer rejected, failed to enable media [ 328.302056][ T9846] __nla_validate_parse: 8 callbacks suppressed [ 328.302078][ T9846] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1097'. [ 328.789027][ T9863] netlink: 10456 bytes leftover after parsing attributes in process `syz.4.1101'. [ 328.812835][ T5961] tipc: Node number set to 489010531 [ 328.817763][ T9871] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 328.833975][ T9863] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 328.859172][ T9871] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 328.889383][ T9871] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 329.039330][ T9878] tipc: Enabled bearer , priority 31 [ 329.071668][ T9878] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1105'. [ 329.088960][ T9878] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1105'. [ 329.101351][ T9879] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 329.204812][ T9883] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1107'. [ 329.436466][ T9887] bridge0: port 1(bridge_slave_0) entered disabled state [ 329.492544][ T9899] tipc: Enabling of bearer rejected, already enabled [ 329.518562][ T9897] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1111'. [ 329.675524][ T9906] openvswitch: netlink: Key type 228 is out of range max 32 [ 329.823392][ T9912] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1116'. [ 330.004623][ T9921] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1118'. [ 330.007591][ T9913] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 330.078814][ T9926] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1119'. [ 330.177654][ T9926] team1: entered promiscuous mode [ 330.197830][ T9926] team1: entered allmulticast mode [ 330.267648][ T9932] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1120'. [ 330.294986][ T5961] syz_tun: tun_net_xmit 110 [ 330.309788][ T9932] validate_nla: 7 callbacks suppressed [ 330.309808][ T9932] netlink: 'syz.4.1120': attribute type 1 has an invalid length. [ 330.326885][ T9913] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 330.368485][ T5960] syz_tun: tun_net_xmit 110 [ 330.407966][ T24] lo speed is unknown, defaulting to 1000 [ 330.512308][ T9937] netlink: 'syz.1.1123': attribute type 5 has an invalid length. [ 331.269336][ T9967] dvmrp0: entered allmulticast mode [ 332.107004][ T9996] netlink: 'syz.1.1142': attribute type 10 has an invalid length. [ 332.132993][ T9999] netlink: 'syz.2.1143': attribute type 39 has an invalid length. [ 332.609574][T10019] openvswitch: netlink: Missing key (keys=40, expected=80) [ 333.243453][T10050] veth0_to_team: entered promiscuous mode [ 333.255611][T10050] veth0_to_team: entered allmulticast mode [ 333.472436][T10057] __nla_validate_parse: 4 callbacks suppressed [ 333.472455][T10057] netlink: 277 bytes leftover after parsing attributes in process `syz.0.1160'. [ 333.861214][T10065] netlink: 120 bytes leftover after parsing attributes in process `syz.2.1164'. [ 333.877752][T10065] openvswitch: netlink: Flow key attr not present in new flow. [ 333.900854][T10065] openvswitch: netlink: Duplicate or invalid key (type 0). [ 333.913417][T10065] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 333.925166][T10065] netlink: 'syz.2.1164': attribute type 4 has an invalid length. [ 334.146673][T10084] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1169'. [ 334.426120][T10094] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1174'. [ 334.476847][T10095] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1172'. [ 334.536975][T10104] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1177'. [ 334.590256][T10107] netlink: 'syz.2.1177': attribute type 1 has an invalid length. [ 334.630392][T10109] netlink: 232 bytes leftover after parsing attributes in process `syz.1.1179'. [ 334.735084][T10104] gretap1: entered promiscuous mode [ 334.806790][T10107] tipc: Enabling of bearer rejected, failed to enable media [ 335.329982][T10137] pimreg: entered allmulticast mode [ 335.353361][T10138] pimreg: left allmulticast mode [ 335.675625][T10152] : entered promiscuous mode [ 335.864899][T10167] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1196'. [ 335.892591][T10163] af_packet: tpacket_rcv: packet too big, clamped from 39 to 4294967272. macoff=96 [ 335.907788][ T3553] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 335.943253][ T3553] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 335.971446][ T3553] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 335.985070][ T3553] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 336.262410][T10174] syzkaller0: entered promiscuous mode [ 336.277641][T10174] syzkaller0: entered allmulticast mode [ 336.839516][T10197] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1203'. [ 337.803008][T10216] netlink: 'syz.1.1207': attribute type 16 has an invalid length. [ 337.816801][T10216] netlink: 'syz.1.1207': attribute type 17 has an invalid length. [ 338.433624][T10202] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1204'. [ 338.585257][T10222] __nla_validate_parse: 1 callbacks suppressed [ 338.585277][T10222] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1209'. [ 338.601989][T10216] sit0: left promiscuous mode [ 338.719694][T10216] 8021q: adding VLAN 0 to HW filter on device bond0 [ 338.731291][T10216] 8021q: adding VLAN 0 to HW filter on device team0 [ 338.739594][T10216] batman_adv: batadv0: Interface activated: team0 [ 338.750928][T10216] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 339.004055][T10239] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1213'. [ 339.118954][T10248] netlink: 'syz.1.1216': attribute type 21 has an invalid length. [ 339.127644][T10248] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1216'. [ 339.434653][T10256] netlink: 'syz.4.1221': attribute type 32 has an invalid length. [ 339.458034][T10256] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1221'. [ 339.614071][ T49] nci: nci_rf_intf_activated_ntf_packet: unsupported rf_interface 0xea [ 339.696459][T10268] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1220'. [ 339.805455][T10256] (unnamed net_device) (uninitialized): Setting coupled_control to off (0) [ 339.975379][T10272] netlink: 284 bytes leftover after parsing attributes in process `syz.0.1224'. [ 340.033472][T10283] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1225'. [ 340.393994][T10295] macvtap1: entered promiscuous mode [ 340.416028][T10295] vlan0: entered promiscuous mode [ 340.433327][T10295] macvtap1: entered allmulticast mode [ 340.444901][T10295] vlan0: entered allmulticast mode [ 340.468638][T10295] veth0_vlan: entered allmulticast mode [ 340.833644][T10307] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1231'. [ 341.310315][T10332] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1240'. [ 341.319498][T10332] netlink: 272 bytes leftover after parsing attributes in process `syz.4.1240'. [ 341.711953][ T55] block nbd1: Possible stuck request ffff8880253be000: control (read@0,1024B). Runtime 30 seconds [ 341.724410][ T55] block nbd1: Possible stuck request ffff8880253be1c0: control (read@1024,1024B). Runtime 30 seconds [ 341.735841][ T55] block nbd1: Possible stuck request ffff8880253be380: control (read@2048,1024B). Runtime 30 seconds [ 341.747276][ T55] block nbd1: Possible stuck request ffff8880253be540: control (read@3072,1024B). Runtime 30 seconds [ 344.272589][T10403] ip6gre1: entered allmulticast mode [ 344.310330][T10408] netlink: 'syz.1.1257': attribute type 1 has an invalid length. [ 344.312839][T10406] netlink: 'syz.4.1256': attribute type 3 has an invalid length. [ 344.337370][T10406] __nla_validate_parse: 1 callbacks suppressed [ 344.337389][T10406] netlink: 766 bytes leftover after parsing attributes in process `syz.4.1256'. [ 344.394583][T10408] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1257'. [ 344.415326][T10408] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1257'. [ 344.810816][T10428] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 344.866809][T10449] openvswitch: netlink: Duplicate or invalid key (type 0). [ 344.910546][T10449] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 344.969919][T10451] netlink: 184 bytes leftover after parsing attributes in process `syz.2.1266'. [ 345.070945][T10461] netlink: 'syz.2.1266': attribute type 3 has an invalid length. [ 345.539305][T10479] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1274'. [ 345.890464][T10496] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1277'. [ 346.263340][T10511] netlink: 'syz.4.1280': attribute type 10 has an invalid length. [ 346.743017][T10532] netlink: 'syz.4.1286': attribute type 1 has an invalid length. [ 346.851568][T10533] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1286'. [ 346.993649][T10537] netlink: 88 bytes leftover after parsing attributes in process `syz.1.1288'. [ 346.994721][T10532] 8021q: adding VLAN 0 to HW filter on device bond5 [ 347.093382][T10532] bond5: (slave gretap3): making interface the new active one [ 347.113515][T10532] bond5: (slave gretap3): Enslaving as an active interface with an up link [ 347.113758][T10544] netlink: 'syz.3.1287': attribute type 10 has an invalid length. [ 347.225544][T10544] syz_tun: entered promiscuous mode [ 347.287088][T10544] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 347.481467][T10554] netlink: 108 bytes leftover after parsing attributes in process `syz.0.1291'. [ 347.595976][T10560] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1294'. [ 347.837069][T10573] macvlan0: entered allmulticast mode [ 348.671188][T10605] netlink: 'syz.1.1303': attribute type 1 has an invalid length. [ 348.855139][T10604] block nbd4: not configured, cannot reconfigure [ 349.468052][T10631] __nla_validate_parse: 5 callbacks suppressed [ 349.468073][T10631] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1311'. [ 350.341563][T10656] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1318'. [ 350.421265][T10656] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 350.697994][T10656] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 350.775138][T10688] netlink: zone id is out of range [ 350.793722][T10688] netlink: del zone limit has 4 unknown bytes [ 350.814129][T10688] netlink: 'syz.3.1326': attribute type 10 has an invalid length. [ 350.859375][T10687] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1327'. [ 350.893749][T10688] bridge0: port 1(bridge_slave_0) entered blocking state [ 350.901157][T10688] bridge0: port 1(bridge_slave_0) entered forwarding state [ 350.960620][T10688] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 351.358431][T10715] netlink: 'syz.0.1335': attribute type 10 has an invalid length. [ 351.381202][T10717] netlink: 'syz.3.1332': attribute type 2 has an invalid length. [ 351.412483][T10709] macvtap1: entered promiscuous mode [ 351.420796][T10709] vlan0: entered promiscuous mode [ 351.424779][ T13] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 351.426299][T10709] macvtap1: entered allmulticast mode [ 351.442996][T10709] vlan0: entered allmulticast mode [ 351.448277][T10709] veth0_vlan: entered allmulticast mode [ 351.499679][T10715] team0: Device veth0_vlan failed to register rx_handler [ 351.703268][T10731] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1337'. [ 351.763222][T10734] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1338'. [ 352.214482][T10748] !€ÿ: renamed from bond_slave_0 (while UP) [ 352.452845][T10750] veth5: entered promiscuous mode [ 352.601779][T10759] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1344'. [ 352.633901][T10764] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 352.641254][T10764] IPv6: NLM_F_CREATE should be set when creating new route [ 352.648674][T10764] IPv6: NLM_F_CREATE should be set when creating new route [ 352.655934][T10764] IPv6: NLM_F_CREATE should be set when creating new route [ 352.671352][T10764] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 353.033766][T10786] netlink: 'syz.2.1352': attribute type 11 has an invalid length. [ 353.127388][T10794] netlink: 'syz.3.1354': attribute type 4 has an invalid length. [ 353.805046][T10824] tipc: Enabling of bearer rejected, already enabled [ 353.856423][T10824] netlink: 27 bytes leftover after parsing attributes in process `syz.4.1361'. [ 353.910621][T10824] tipc: Resetting bearer [ 354.322052][T10847] netlink: 'syz.0.1370': attribute type 29 has an invalid length. [ 354.391460][T10854] netlink: 'syz.0.1370': attribute type 29 has an invalid length. [ 354.573063][T10861] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1375'. [ 354.761156][T10869] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1378'. [ 355.268075][T10889] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1385'. [ 355.477229][T10914] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1390'. [ 356.084054][T10941] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1395'. [ 356.396783][T10960] delete_channel: no stack [ 356.521075][T10949] IPv6: sit1: Disabled Multicast RS [ 356.536505][T10949] sit1: entered allmulticast mode [ 357.041473][T10987] netlink: 80 bytes leftover after parsing attributes in process `syz.4.1406'. [ 357.393365][T10998] netlink: 'syz.0.1412': attribute type 23 has an invalid length. [ 357.468705][T11002] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1413'. [ 357.506487][T11007] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1415'. [ 357.522753][T11005] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1413'. [ 357.526292][T11007] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1415'. [ 358.005725][T11024] veth0_to_team: entered promiscuous mode [ 358.018299][T11024] veth0_to_team: entered allmulticast mode [ 358.509372][T11053] netlink: 'syz.0.1428': attribute type 1 has an invalid length. [ 358.620793][T11055] netlink: 'syz.4.1429': attribute type 1 has an invalid length. [ 358.637018][T11055] netlink: 'syz.4.1429': attribute type 2 has an invalid length. [ 359.366958][T11088] tipc: Enabling of bearer rejected, already enabled [ 359.582960][T11099] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 359.667521][T11102] __nla_validate_parse: 8 callbacks suppressed [ 359.667541][T11102] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1438'. [ 359.717528][T11100] netdevsim netdevsim2 ÿÿÿÿÿÿ: renamed from netdevsim0 (while UP) [ 360.383849][T11127] netlink: 5 bytes leftover after parsing attributes in process `syz.3.1450'. [ 360.399783][T11128] vxcan1: entered allmulticast mode [ 360.451525][T11130] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1450'. [ 360.488279][T11130] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1450'. [ 360.505288][T11127] 0ªî{X¹¦: renamed from gretap0 (while UP) [ 360.527469][T11127] 0ªî{X¹¦: entered allmulticast mode [ 360.534749][T11127] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 360.555344][T11133] mac80211_hwsim hwsim10 ÿ: renamed from wlan1 (while UP) [ 360.683833][T11141] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1453'. [ 360.758754][T11145] netlink: 'syz.1.1455': attribute type 1 has an invalid length. [ 360.766855][T11145] netlink: 236 bytes leftover after parsing attributes in process `syz.1.1455'. [ 360.784266][T11146] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1453'. [ 360.833646][T11145] netlink: 4904 bytes leftover after parsing attributes in process `syz.1.1455'. [ 361.265969][T11164] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1459'. [ 361.376789][T11168] tipc: Enabling of bearer rejected, already enabled [ 361.435001][T11171] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1463'. [ 362.035896][T11202] netlink: 'syz.3.1471': attribute type 12 has an invalid length. [ 362.073517][T11202] netlink: 'syz.3.1471': attribute type 29 has an invalid length. [ 362.108756][T11202] netlink: 'syz.3.1471': attribute type 1 has an invalid length. [ 362.167899][T11205] bridge3: the hash_elasticity option has been deprecated and is always 16 [ 362.434880][T11221] tipc: Failed to remove unknown binding: 66,1,1/0:3778117212/3778117214 [ 362.463027][T11221] tipc: Failed to remove unknown binding: 66,1,1/0:3778117212/3778117214 [ 362.490061][T11221] tipc: Failed to remove unknown binding: 66,1,1/0:3778117212/3778117214 [ 363.055892][T11247] bridge0: port 3(dummy0) entered disabled state [ 363.079759][T11247] dummy0 (unregistering): left allmulticast mode [ 363.086415][T11247] bridge0: port 3(dummy0) entered disabled state [ 363.335323][T11264] ip_tunnel: non-ECT from 2.0.0.0 with TOS=0x3 [ 364.510793][T11315] netlink: 'syz.4.1506': attribute type 11 has an invalid length. [ 364.925616][T11328] mac80211_hwsim hwsim7 syzkaller0: left promiscuous mode [ 364.975005][T11328] mac80211_hwsim hwsim7 syzkaller0: left allmulticast mode [ 364.996886][T11328] tipc: Resetting bearer [ 365.009967][T11348] netlink: 'syz.1.1513': attribute type 178 has an invalid length. [ 365.033948][T11348] sch_fq: defrate 0 ignored. [ 365.155160][T11332] syzkaller0: entered promiscuous mode [ 365.165027][T11332] syzkaller0: entered allmulticast mode [ 367.056765][T11366] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 367.064824][T11366] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 367.109607][T11366] batman_adv: batadv0: Interface deactivated: team0 [ 367.126556][T11366] batman_adv: batadv0: Removing interface: team0 [ 367.458494][T11386] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 367.800787][T11401] __nla_validate_parse: 9 callbacks suppressed [ 367.800808][T11401] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1527'. [ 368.172757][T11408] tipc: Enabling of bearer rejected, media not registered [ 368.243565][T11411] openvswitch: netlink: Actions may not be safe on all matching packets [ 368.301962][T11411] openvswitch: netlink: Actions may not be safe on all matching packets [ 368.795845][T11441] sctp: [Deprecated]: syz.0.1542 (pid 11441) Use of struct sctp_assoc_value in delayed_ack socket option. [ 368.795845][T11441] Use struct sctp_sack_info instead [ 369.070829][T11450] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1545'. [ 369.092225][T11450] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1545'. [ 369.259871][T11450] 8021q: adding VLAN 0 to HW filter on device bond1 [ 369.537212][T11465] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1549'. [ 370.019159][T11482] geneve3: entered promiscuous mode [ 370.035229][T11482] geneve3: entered allmulticast mode [ 370.088559][T11484] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1555'. [ 370.196262][T11493] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1558'. [ 370.471137][T11506] tipc: Enabled bearer , priority 0 [ 370.485326][T11506] syzkaller0: entered promiscuous mode [ 370.523245][T11506] syzkaller0: entered allmulticast mode [ 370.667562][T11516] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 370.694921][T11517] 8021q: VLANs not supported on bond0 [ 370.802865][T11519] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1565'. [ 370.843286][T11524] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1566'. [ 371.004491][T11531] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1565'. [ 371.073481][T11529] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1565'. [ 371.251400][T11503] tipc: Resetting bearer [ 371.338860][T11503] tipc: Disabling bearer [ 371.503205][T11548] dvmrp1: entered allmulticast mode [ 371.844748][ T55] block nbd1: Possible stuck request ffff8880253be000: control (read@0,1024B). Runtime 60 seconds [ 371.855655][ T55] block nbd1: Possible stuck request ffff8880253be1c0: control (read@1024,1024B). Runtime 60 seconds [ 371.867204][ T55] block nbd1: Possible stuck request ffff8880253be380: control (read@2048,1024B). Runtime 60 seconds [ 371.879255][ T55] block nbd1: Possible stuck request ffff8880253be540: control (read@3072,1024B). Runtime 60 seconds [ 372.126350][T11573] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 372.594424][T11602] netlink: 'syz.1.1586': attribute type 2 has an invalid length. [ 372.869589][T11611] netlink: 'syz.2.1589': attribute type 1 has an invalid length. [ 373.374098][T11636] __nla_validate_parse: 7 callbacks suppressed [ 373.374119][T11636] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1594'. [ 373.580214][T11638] bond4: (slave geneve3): Enslaving as an active interface with an up link [ 373.615553][T11648] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1597'. [ 373.623589][T11650] netlink: 'syz.3.1599': attribute type 5 has an invalid length. [ 373.637596][ T7882] netdevsim netdevsim2 ÿÿÿÿÿÿ: set [1, 1] type 2 family 0 port 20000 - 0 [ 373.647976][ T7882] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 373.657492][ T7882] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 373.698072][ T7882] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 373.961351][T11667] tipc: Enabling of bearer rejected, failed to enable media [ 373.973829][T11667] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1604'. [ 374.092994][T11670] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1605'. [ 374.258435][T11679] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 374.368014][T11685] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1609'. [ 374.463902][T11684] syzkaller0: entered promiscuous mode [ 374.469795][T11684] syzkaller0: entered allmulticast mode [ 375.255934][T11717] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.1615'. [ 376.976531][T11746] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 377.310102][T11746] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 377.437994][T11721] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 377.543441][T11766] tipc: Enabling of bearer rejected, already enabled [ 377.555254][T11768] tipc: Enabling of bearer rejected, already enabled [ 377.564475][T11766] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode [ 377.572111][T11766] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode [ 377.580616][T11766] tipc: Resetting bearer [ 377.629439][T11746] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 377.736729][T11775] netlink: 'syz.2.1629': attribute type 1 has an invalid length. [ 377.780828][T11775] netlink: 220 bytes leftover after parsing attributes in process `syz.2.1629'. [ 378.008524][T11783] tipc: Enabling of bearer rejected, already enabled [ 378.149991][T11794] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1636'. [ 378.283966][T11797] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1638'. [ 378.421313][T11812] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 378.791392][T11825] pim6reg1: entered promiscuous mode [ 378.796850][T11825] pim6reg1: entered allmulticast mode [ 378.834957][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.844420][ T1305] clip:clip_start_xmit: skb_dst(skb) == NULL [ 378.893031][T11828] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1644'. [ 378.902943][T11829] tipc: Enabled bearer , priority 0 [ 378.949517][T11833] tipc: Enabling of bearer rejected, already enabled [ 379.105600][T11829] syzkaller0: entered promiscuous mode [ 379.112689][T11829] syzkaller0: entered allmulticast mode [ 379.119978][T11829] tipc: Resetting bearer [ 379.139642][T11833] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1647'. [ 379.186700][T11826] tipc: Resetting bearer [ 379.898398][ T5960] tipc: Node number set to 1301066989 [ 381.151270][T11826] tipc: Disabling bearer [ 381.279227][T11871] bridge0: entered allmulticast mode [ 381.395630][T11880] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1659'. [ 381.522906][T11882] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1659'. [ 381.720970][T11888] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1662'. [ 381.771109][T11888] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1662'. [ 381.877383][T11904] netlink: 'syz.1.1666': attribute type 13 has an invalid length. [ 381.921848][T11904] lo: entered promiscuous mode [ 381.959012][T11904] lo: entered allmulticast mode [ 382.023480][T11904] tunl0: entered promiscuous mode [ 382.069440][T11904] tunl0: entered allmulticast mode [ 382.093733][T11914] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1668'. [ 382.093886][T11904] gre0: entered promiscuous mode [ 382.122783][T11904] gre0: entered allmulticast mode [ 382.161988][T11904] gretap0: entered promiscuous mode [ 382.175377][T11904] gretap0: entered allmulticast mode [ 382.197214][T11904] gretap0: refused to change device tx_queue_len [ 382.214946][T11904] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 382.251396][T11911] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1669'. [ 382.811570][T11933] syzkaller0: entered promiscuous mode [ 382.817315][T11933] syzkaller0: entered allmulticast mode [ 382.861686][T11952] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1674'. [ 383.068012][T11962] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1682'. [ 384.780102][T11976] veth0: entered promiscuous mode [ 384.813880][T11976] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1686'. [ 384.995798][T11992] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1689'. [ 385.294737][T12007] netlink: 'syz.0.1694': attribute type 4 has an invalid length. [ 385.379748][T12010] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1695'. [ 385.399131][T12012] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 385.412591][T12010] netlink: 'syz.4.1695': attribute type 23 has an invalid length. [ 385.477914][T12016] ieee802154 phy0 wpan0: encryption failed: -22 [ 385.492931][T12016] ieee802154 phy0 wpan0: encryption failed: -22 [ 385.732565][T12027] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1701'. [ 385.754767][T12027] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1701'. [ 385.766267][T12027] netlink: 'syz.2.1701': attribute type 3 has an invalid length. [ 385.917968][T12040] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1705'. [ 385.984482][T12043] team0: Device gtp1 is of different type [ 386.294276][T12058] netlink: 9 bytes leftover after parsing attributes in process `syz.1.1710'. [ 386.304858][T12058] gretap0: left allmulticast mode [ 386.910251][T12045] Bluetooth: hci0: Opcode 0x0c20 failed: -4 [ 386.979398][T12093] openvswitch: netlink: EtherType 257 is less than min 600 [ 387.010772][T12093] openvswitch: netlink: EtherType 257 is less than min 600 [ 387.157817][T12103] tipc: Enabling of bearer rejected, failed to enable media [ 387.381247][T12112] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 387.413571][T12115] sctp: [Deprecated]: syz.1.1723 (pid 12115) Use of int in max_burst socket option deprecated. [ 387.413571][T12115] Use struct sctp_assoc_value instead [ 387.472374][T12120] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1725'. [ 387.491768][T12118] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1724'. [ 387.501593][T12121] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1724'. [ 388.108865][ T51] Bluetooth: hci0: command 0x0406 tx timeout [ 388.393145][T12165] netlink: 'syz.4.1738': attribute type 2 has an invalid length. [ 388.986721][T12186] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 389.055026][T12190] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 389.112113][T12193] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 389.536923][T12215] tipc: Enabling of bearer rejected, failed to enable media [ 390.000703][T12239] __nla_validate_parse: 6 callbacks suppressed [ 390.000723][T12239] netlink: 252 bytes leftover after parsing attributes in process `syz.1.1761'. [ 390.053385][T12240] netlink: 252 bytes leftover after parsing attributes in process `syz.1.1761'. [ 390.101407][T12239] netlink: 'syz.1.1761': attribute type 6 has an invalid length. [ 390.144112][T12240] netlink: 'syz.1.1761': attribute type 6 has an invalid length. [ 390.175580][T12247] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1762'. [ 390.581786][T12262] blkio.reset_stats is deprecated [ 390.639389][T12260] (unnamed net_device) (uninitialized): Unable to set down delay as MII monitoring is disabled [ 390.683636][T12263] (unnamed net_device) (uninitialized): Unable to set down delay as MII monitoring is disabled [ 390.687650][T12266] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1766'. [ 390.739244][T12267] netlink: 'syz.2.1768': attribute type 4 has an invalid length. [ 390.741945][T12268] netlink: 'syz.0.1766': attribute type 10 has an invalid length. [ 390.755965][T12260] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1765'. [ 390.759836][T12267] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1768'. [ 390.784183][T12268] syz_tun: entered promiscuous mode [ 390.815695][T12268] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 390.950221][T12276] sctp: [Deprecated]: syz.1.1770 (pid 12276) Use of int in max_burst socket option deprecated. [ 390.950221][T12276] Use struct sctp_assoc_value instead [ 391.105701][T12283] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1773'. [ 391.149193][T12283] xfrm1: entered promiscuous mode [ 391.154407][T12283] xfrm1: entered allmulticast mode [ 391.163175][T12283] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1773'. [ 391.409834][T12293] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1775'. [ 391.757463][T12309] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1780'. [ 391.936078][T12316] openvswitch: netlink: Multiple metadata blocks provided [ 393.195082][T12360] ipvlan0: entered promiscuous mode [ 393.228006][T12360] ipvlan0: entered allmulticast mode [ 393.248331][T12360] veth0_vlan: entered allmulticast mode [ 393.584027][T12374] netlink: 'syz.3.1796': attribute type 1 has an invalid length. [ 393.756442][T12378] netlink: 'syz.0.1800': attribute type 4 has an invalid length. [ 393.788303][T12381] netlink: 'syz.0.1800': attribute type 4 has an invalid length. [ 393.853125][T12383] netlink: 'syz.3.1801': attribute type 6 has an invalid length. [ 393.912308][T12383] sit0: entered promiscuous mode [ 393.992231][T12383] netlink: 'syz.3.1801': attribute type 1 has an invalid length. [ 394.546414][T12418] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 395.241340][T12442] netlink: 'syz.3.1820': attribute type 6 has an invalid length. [ 395.343666][T12444] can: request_module (can-proto-4) failed. [ 395.596409][T12455] __nla_validate_parse: 9 callbacks suppressed [ 395.596430][T12455] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1823'. [ 395.644078][T12455] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1823'. [ 395.664610][T12455] netlink: 'syz.2.1823': attribute type 12 has an invalid length. [ 395.686184][T12458] netlink: 'syz.3.1824': attribute type 1 has an invalid length. [ 395.696850][T12458] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1824'. [ 396.330761][T12489] wg1: entered promiscuous mode [ 396.342211][T12489] wg1: entered allmulticast mode [ 396.774109][T12513] validate_nla: 2 callbacks suppressed [ 396.774129][T12513] netlink: 'syz.2.1836': attribute type 5 has an invalid length. [ 396.801053][ T7882] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 397.484813][T12549] IPVS: set_ctl: invalid protocol: 51 127.0.0.1:20002 [ 397.512265][T12547] bond0: entered promiscuous mode [ 397.538525][T12547] bond_slave_0: entered promiscuous mode [ 397.558664][T12547] bond_slave_1: entered promiscuous mode [ 397.565214][T12547] mac80211_hwsim hwsim11 wlan1: entered promiscuous mode [ 397.577292][T12547] batadv0: entered promiscuous mode [ 397.585690][T12547] hsr1: entered allmulticast mode [ 397.604482][T12547] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 397.616542][T12547] bond0: left promiscuous mode [ 397.621893][T12547] bond_slave_0: left promiscuous mode [ 397.627662][T12547] bond_slave_1: left promiscuous mode [ 397.634139][T12547] mac80211_hwsim hwsim11 wlan1: left promiscuous mode [ 397.645745][T12547] batadv0: left promiscuous mode [ 397.697418][T12555] netlink: 576 bytes leftover after parsing attributes in process `syz.0.1846'. [ 397.887654][T12560] netlink: 'syz.1.1850': attribute type 32 has an invalid length. [ 397.897875][T12560] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1850'. [ 397.928918][T12560] (unnamed net_device) (uninitialized): option coupled_control: invalid value (52) [ 397.977350][T12565] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 398.438732][T12584] netlink: 'syz.4.1855': attribute type 16 has an invalid length. [ 398.484210][T12584] netlink: 'syz.4.1855': attribute type 17 has an invalid length. [ 398.500242][T12582] tipc: Resetting bearer [ 398.500988][T12586] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1856'. [ 398.506298][T12582] tipc: Resetting bearer [ 398.675438][T12584] gretap0: left promiscuous mode [ 398.773125][T12584] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 398.793193][T12601] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1856'. [ 398.810159][T12599] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1858'. [ 398.931930][T12599] vlan3: entered allmulticast mode [ 398.991708][T12599] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode [ 399.162552][T12612] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap0 [ 399.295365][T12612] gretap0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 399.355558][T12612] gretap0: entered promiscuous mode [ 399.368937][T12612] gretap0: entered allmulticast mode [ 399.415551][T12623] pim6reg: left allmulticast mode [ 399.421199][T12623] bridge0: left allmulticast mode [ 399.734425][T12642] netlink: 'syz.0.1868': attribute type 39 has an invalid length. [ 399.746294][ T30] audit: type=1804 audit(1754934973.641:2): pid=12642 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.1868" name="/newroot/379/cgroup.controllers" dev="tmpfs" ino=1949 res=1 errno=0 [ 399.863061][ T30] audit: type=1800 audit(1754934973.641:3): pid=12642 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1868" name="cgroup.controllers" dev="tmpfs" ino=1949 res=0 errno=0 [ 400.153334][T12656] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 400.311096][T12665] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1873'. [ 400.321421][T12663] netlink: 'syz.3.1874': attribute type 14 has an invalid length. [ 400.358934][T12664] netlink: 'syz.3.1874': attribute type 14 has an invalid length. [ 400.410394][T12663] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1874'. [ 401.430438][T12715] __nla_validate_parse: 1 callbacks suppressed [ 401.430461][T12715] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.1892'. [ 401.550811][T12715] openvswitch: netlink: Message has 24 unknown bytes. [ 401.573170][T12715] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 401.785577][T12735] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.1897'. [ 401.816365][T12737] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1898'. [ 401.868639][ T55] block nbd1: Possible stuck request ffff8880253be000: control (read@0,1024B). Runtime 90 seconds [ 401.880879][ T55] block nbd1: Possible stuck request ffff8880253be1c0: control (read@1024,1024B). Runtime 90 seconds [ 401.900596][ T55] block nbd1: Possible stuck request ffff8880253be380: control (read@2048,1024B). Runtime 90 seconds [ 401.911810][ T55] block nbd1: Possible stuck request ffff8880253be540: control (read@3072,1024B). Runtime 90 seconds [ 402.322764][T12760] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1902'. [ 402.615667][T12772] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1905'. [ 402.691011][T12780] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1906'. [ 402.867311][T12785] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1908'. [ 402.881249][T12786] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1908'. [ 402.929023][T12786] netlink: 666 bytes leftover after parsing attributes in process `syz.4.1908'. [ 402.957733][T12785] netlink: 666 bytes leftover after parsing attributes in process `syz.4.1908'. [ 403.114362][T12798] IPVS: set_ctl: invalid protocol: 11612 224.0.0.2:21 [ 403.998060][T12849] sctp: [Deprecated]: syz.2.1923 (pid 12849) Use of struct sctp_assoc_value in delayed_ack socket option. [ 403.998060][T12849] Use struct sctp_sack_info instead [ 404.586438][T12877] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode [ 405.085234][T12914] tipc: Enabled bearer , priority 10 [ 405.283116][T12921] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 405.417452][T12926] netlink: 'syz.4.1947': attribute type 2 has an invalid length. [ 405.954975][T12948] tipc: New replicast peer: 255.255.255.255 [ 405.980670][T12948] tipc: Enabled bearer , priority 10 [ 406.955514][T12988] openvswitch: netlink: Flow key attribute not present in set flow. [ 406.995134][T12987] __nla_validate_parse: 16 callbacks suppressed [ 406.995155][T12987] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1968'. [ 407.002938][T12993] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1970'. [ 407.043901][T12991] netlink: 'syz.2.1969': attribute type 2 has an invalid length. [ 407.141255][T12997] bridge_slave_0: invalid flags given to default FDB implementation [ 407.155587][T13001] netlink: 'syz.4.1972': attribute type 11 has an invalid length. [ 407.171532][T13001] netlink: 228 bytes leftover after parsing attributes in process `syz.4.1972'. [ 407.184065][T13001] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1972'. [ 407.409787][T13012] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1975'. [ 407.499521][T13018] netlink: 'syz.1.1977': attribute type 58 has an invalid length. [ 407.507494][T13018] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1977'. [ 407.810333][T13017] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 407.852959][T13031] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1980'. [ 408.129991][T13049] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 408.218524][T13051] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1985'. [ 408.606560][T13069] netlink: 'syz.4.1991': attribute type 75 has an invalid length. [ 408.703429][T13065] lo speed is unknown, defaulting to 1000 [ 409.263077][T13091] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1999'. [ 409.280714][T13092] IPVS: lc: FWM 4 0x00000004 - no destination available [ 409.796062][T13121] netlink: 'syz.2.2005': attribute type 1 has an invalid length. [ 409.819153][T13121] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2005'. [ 410.479130][T13141] syzkaller0: entered promiscuous mode [ 410.484983][T13141] syzkaller0: entered allmulticast mode [ 410.524056][T13141] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 410.651173][T13149] openvswitch: netlink: nsh attr 0 has unexpected len 1 expected 0 [ 411.193583][T13160] netlink: 'syz.2.2017': attribute type 10 has an invalid length. [ 411.216621][T13160] bridge0: port 2(bridge_slave_1) entered disabled state [ 411.224567][T13160] bridge0: port 1(bridge_slave_0) entered disabled state [ 411.256746][T13160] bridge0: port 2(bridge_slave_1) entered blocking state [ 411.264062][T13160] bridge0: port 2(bridge_slave_1) entered forwarding state [ 411.271715][T13160] bridge0: port 1(bridge_slave_0) entered blocking state [ 411.278896][T13160] bridge0: port 1(bridge_slave_0) entered forwarding state [ 411.291071][T13160] bridge0: entered allmulticast mode [ 411.297080][T13160] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 411.914498][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807af41000: rx timeout, send abort [ 411.923196][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88807af41000: 0x2fe01: (3) A timeout occurred and this is the connection abort to close the session. [ 412.202976][T13205] __nla_validate_parse: 5 callbacks suppressed [ 412.202998][T13205] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2030'. [ 412.302788][T13207] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 412.382298][T13211] netlink: 'syz.2.2033': attribute type 1 has an invalid length. [ 412.407958][T13214] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2035'. [ 412.460447][T13220] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2035'. [ 412.536753][T13225] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 412.762962][T13236] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2040'. [ 412.798793][T13239] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2040'. [ 412.825127][T13240] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2042'. [ 412.925548][T13239] netlink: 'syz.1.2040': attribute type 1 has an invalid length. [ 412.959039][T13239] netlink: 'syz.1.2040': attribute type 2 has an invalid length. [ 412.987468][T13243] tipc: Enabled bearer , priority 0 [ 413.168087][T13243] syzkaller0: entered promiscuous mode [ 413.193816][T13243] syzkaller0: entered allmulticast mode [ 413.202399][T13243] tipc: Resetting bearer [ 413.209466][T13252] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 413.272311][T13238] tipc: Resetting bearer [ 413.557446][T13271] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2047'. [ 413.566958][T13271] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2047'. [ 413.586683][T13271] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2047'. [ 413.682928][T13276] netlink: 'syz.2.2050': attribute type 33 has an invalid length. [ 413.998286][ T5940] tipc: Node number set to 236657684 [ 414.293709][T13282] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2051'. [ 415.124849][T13238] tipc: Disabling bearer [ 415.144877][T13276] (unnamed net_device) (uninitialized): option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 415.479736][T13290] lo speed is unknown, defaulting to 1000 [ 416.520779][T13334] netlink: 'syz.1.2063': attribute type 1 has an invalid length. [ 416.557111][T13334] netlink: 'syz.1.2063': attribute type 1 has an invalid length. [ 416.840105][T13311] veth1_to_bond: entered allmulticast mode [ 417.229157][T13311] hsr_slave_1 (unregistering): left promiscuous mode [ 417.275123][T13306] veth1_to_bond: left allmulticast mode [ 417.282513][T13307] lo speed is unknown, defaulting to 1000 [ 417.417787][T13358] __nla_validate_parse: 6 callbacks suppressed [ 417.417809][T13358] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2067'. [ 417.439943][T13358] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2067'. [ 417.498233][T13358] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2067'. [ 417.537295][T13358] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2067'. [ 419.943523][T13408] lo speed is unknown, defaulting to 1000 [ 420.093077][T13414] xt_limit: Overflow, try lower: 604147548/4200216962 [ 420.141763][T13414] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2085'. [ 421.118856][T13429] netlink: 'syz.1.2088': attribute type 3 has an invalid length. [ 421.379453][T13434] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2089'. [ 421.408461][T13434] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2089'. [ 423.645924][T13466] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2098'. [ 423.676264][T13466] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2098'. [ 424.450968][T13359] Set syz1 is full, maxelem 65536 reached [ 424.587271][T13485] netlink: 'syz.3.2105': attribute type 4 has an invalid length. [ 424.645574][T13491] netlink: 'syz.3.2105': attribute type 4 has an invalid length. [ 424.890929][T13501] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2108'. [ 424.993268][T13501] netlink: 84 bytes leftover after parsing attributes in process `syz.2.2108'. [ 425.383715][T13521] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2114'. [ 425.468615][T13521] netlink: 'syz.1.2114': attribute type 7 has an invalid length. [ 425.476408][T13521] netlink: 'syz.1.2114': attribute type 8 has an invalid length. [ 425.529929][T13521] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2114'. [ 425.574891][T13534] rdma_op ffff88804bbf21f0 conn xmit_rdma 0000000000000000 [ 425.596934][T13525] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2116'. [ 425.868068][T13525] 8021q: adding VLAN 0 to HW filter on device bond8 [ 425.881465][T13544] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2121'. [ 425.882243][T13545] netlink: 'syz.2.2122': attribute type 1 has an invalid length. [ 425.918070][T13546] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2121'. [ 425.980932][T13535] 8021q: adding VLAN 0 to HW filter on device bond8 [ 425.989884][T13535] bond8: (slave vxcan3): The slave device specified does not support setting the MAC address [ 426.003244][T13535] bond8: (slave vxcan3): Error -95 calling set_mac_address [ 426.371366][T13569] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2129'. [ 426.423687][T13571] netlink: 'syz.2.2127': attribute type 1 has an invalid length. [ 426.603750][T13589] IPVS: set_ctl: invalid protocol: 11612 172.20.20.187:21 [ 426.834797][T13598] geneve2: entered promiscuous mode [ 426.845783][T13598] geneve2: entered allmulticast mode [ 426.890390][ T1157] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 426.916163][ T1157] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 426.946566][ T1157] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0 [ 427.782185][T13646] tipc: Enabling of bearer rejected, failed to enable media [ 427.883962][T13652] netlink: 'syz.2.2154': attribute type 4 has an invalid length. [ 428.344087][T13673] openvswitch: netlink: Actions may not be safe on all matching packets [ 428.537527][T13684] lo speed is unknown, defaulting to 1000 [ 428.565964][T13690] netlink: 'syz.3.2161': attribute type 1 has an invalid length. [ 428.596624][T13684] lo speed is unknown, defaulting to 1000 [ 428.786404][T13691] vlan4: entered allmulticast mode [ 428.805173][T13691] bridge3: entered allmulticast mode [ 428.865317][T13684] lo speed is unknown, defaulting to 1000 [ 428.874185][T13691] __nla_validate_parse: 7 callbacks suppressed [ 428.874206][T13691] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2163'. [ 428.886433][T13684] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 429.002796][T13684] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 429.177737][T13710] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2168'. [ 429.210085][T13684] lo speed is unknown, defaulting to 1000 [ 429.227007][T13716] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2169'. [ 429.236304][T13714] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2170'. [ 429.339643][T13684] lo speed is unknown, defaulting to 1000 [ 429.361923][T13717] sctp: Trying to GSO but underlying device doesn't support it. [ 429.369109][T13684] lo speed is unknown, defaulting to 1000 [ 429.425373][T13684] lo speed is unknown, defaulting to 1000 [ 429.441577][T13718] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2170'. [ 429.456883][T13684] lo speed is unknown, defaulting to 1000 [ 429.476606][T13714] rxe_newlink: 55 callbacks suppressed [ 429.476626][T13714] rdma_rxe: rxe_newlink: failed to add vxcan1 [ 429.857976][T13738] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2178'. [ 429.875267][T13735] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2177'. [ 429.903264][T13735] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2177'. [ 430.284989][T13753] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2180'. [ 430.292367][T13759] netlink: 'syz.4.2181': attribute type 9 has an invalid length. [ 430.340041][T13759] netlink: 212260 bytes leftover after parsing attributes in process `syz.4.2181'. [ 430.477198][T13753] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 430.784523][T13770] netlink: 'syz.3.2184': attribute type 10 has an invalid length. [ 430.858870][T13770] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 430.933557][T13770] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 431.145749][ T30] audit: type=1804 audit(1754935005.051:4): pid=13783 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.2185" name="/newroot/445/cgroup.controllers" dev="tmpfs" ino=2287 res=1 errno=0 [ 431.215774][ T30] audit: type=1800 audit(1754935005.051:5): pid=13783 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2185" name="cgroup.controllers" dev="tmpfs" ino=2287 res=0 errno=0 [ 431.949812][ T55] block nbd1: Possible stuck request ffff8880253be000: control (read@0,1024B). Runtime 120 seconds [ 431.962362][ T55] block nbd1: Possible stuck request ffff8880253be1c0: control (read@1024,1024B). Runtime 120 seconds [ 431.975398][ T55] block nbd1: Possible stuck request ffff8880253be380: control (read@2048,1024B). Runtime 120 seconds [ 431.986984][ T55] block nbd1: Possible stuck request ffff8880253be540: control (read@3072,1024B). Runtime 120 seconds [ 432.182432][T13829] 0ªî{X¹¦: renamed from gretap0 (while UP) [ 432.196184][T13829] 0ªî{X¹¦: entered allmulticast mode [ 432.226504][T13829] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 432.371372][T13837] tipc: Enabling of bearer rejected, failed to enable media [ 432.585780][ T43] IPVS: starting estimator thread 0... [ 432.691324][T13852] IPVS: using max 26 ests per chain, 62400 per kthread [ 432.878617][T13837] team0 (unregistering): Port device team_slave_0 removed [ 432.890391][T13837] team0 (unregistering): Port device team_slave_1 removed [ 433.086837][T13858] bond10 (unregistering): Released all slaves [ 433.158025][T13873] openvswitch: netlink: Actions may not be safe on all matching packets [ 433.169925][T13873] netlink: 'syz.1.2211': attribute type 21 has an invalid length. [ 433.317725][T13882] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 433.325158][T13882] IPv6: NLM_F_CREATE should be set when creating new route [ 433.332579][T13882] IPv6: NLM_F_CREATE should be set when creating new route [ 433.340054][T13882] IPv6: NLM_F_CREATE should be set when creating new route [ 433.501444][T13881] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 433.575338][T13897] netlink: 'syz.1.2217': attribute type 39 has an invalid length. [ 433.952239][T13918] __nla_validate_parse: 11 callbacks suppressed [ 433.952259][T13918] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2221'. [ 433.985586][T13921] netlink: 'syz.0.2223': attribute type 1 has an invalid length. [ 434.010853][T13928] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 434.177898][T13916] gretap1: entered promiscuous mode [ 434.194542][T13940] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 434.216156][T13940] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2228'. [ 434.225834][T13940] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2228'. [ 434.236305][T13941] netlink: 'syz.1.2226': attribute type 1 has an invalid length. [ 434.249701][T13941] netlink: 'syz.1.2226': attribute type 11 has an invalid length. [ 434.258025][T13941] netlink: 220 bytes leftover after parsing attributes in process `syz.1.2226'. [ 434.477854][T13952] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2231'. [ 434.506735][T13952] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2231'. [ 434.567839][T13956] bond0: (slave bridge_slave_1): Releasing backup interface [ 434.692448][T13956] bond0: (slave bond_slave_0): Releasing backup interface [ 434.730954][T13956] bond0: (slave bond_slave_1): Releasing backup interface [ 435.017565][T13977] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 435.044177][T13983] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 435.604790][T14014] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2249'. [ 435.636379][T14022] netlink: 'syz.1.2250': attribute type 1 has an invalid length. [ 435.873737][T14027] bond4: (slave gretap1): making interface the new active one [ 435.883629][T14027] bond4: (slave gretap1): Enslaving as an active interface with an up link [ 436.273074][T14050] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2256'. [ 436.322522][T14050] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2256'. [ 436.379304][T14050] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2256'. [ 436.493865][T14062] netlink: 'syz.0.2257': attribute type 13 has an invalid length. [ 436.537291][T14062] netlink: 'syz.0.2257': attribute type 17 has an invalid length. [ 436.539971][T14064] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 436.594178][T14062] lo: left promiscuous mode [ 436.661203][T14062] tunl0: left promiscuous mode [ 436.670608][T14062] gre0: left promiscuous mode [ 436.830565][T14062] 0ªî{X¹¦: left promiscuous mode [ 436.861688][T14062] erspan0: left promiscuous mode [ 436.873780][T14062] ip_vti0: left promiscuous mode [ 436.887781][T14062] syz_tun: left promiscuous mode [ 436.943961][T14062] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 437.171668][T14054] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 438.000998][T14125] openvswitch: netlink: IPv6 tunnel dst address is zero [ 438.647758][T14149] netlink: 'syz.0.2279': attribute type 5 has an invalid length. [ 438.838489][T14163] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 439.115178][T14173] __nla_validate_parse: 4 callbacks suppressed [ 439.115202][T14173] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2285'. [ 439.144078][T14173] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2285'. [ 439.417130][T14185] netlink: 1284 bytes leftover after parsing attributes in process `syz.3.2289'. [ 439.432862][T14186] pim6reg1: entered promiscuous mode [ 439.450020][T14186] pim6reg1: entered allmulticast mode [ 439.594785][T14190] !: renamed from dummy0 (while UP) [ 440.014478][T14223] netlink: 'syz.3.2296': attribute type 8 has an invalid length. [ 440.288845][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.298886][ T1305] clip:clip_start_xmit: skb_dst(skb) == NULL [ 440.679767][T14256] netlink: 152064 bytes leftover after parsing attributes in process `syz.1.2303'. [ 440.767945][T14256] netlink: zone id is out of range [ 440.838670][T14256] netlink: zone id is out of range [ 440.860719][T14256] netlink: zone id is out of range [ 440.925150][T14256] netlink: zone id is out of range [ 440.960338][T14256] netlink: zone id is out of range [ 440.965602][T14256] netlink: zone id is out of range [ 440.998439][T14273] ieee802154 phy0 wpan0: encryption failed: -22 [ 441.038470][T14256] netlink: zone id is out of range [ 441.054464][T14278] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2305'. [ 441.069760][T14277] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.2305'. [ 441.395847][T14299] : left promiscuous mode [ 441.810238][T14308] bond5: entered promiscuous mode [ 441.815607][T14308] bond5: entered allmulticast mode [ 441.821465][T14308] 8021q: adding VLAN 0 to HW filter on device bond5 [ 442.095117][T14308] bond5 (unregistering): Released all slaves [ 442.397085][T14334] netlink: 'syz.2.2313': attribute type 1 has an invalid length. [ 442.425728][T14334] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 442.661717][T14349] netlink: 4504 bytes leftover after parsing attributes in process `syz.2.2320'. [ 442.681290][T14347] vlan1: entered promiscuous mode [ 442.708338][T14349] netlink: 6564 bytes leftover after parsing attributes in process `syz.2.2320'. [ 442.961795][T14361] tipc: MTU too low for tipc bearer [ 443.015295][T14364] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2323'. [ 443.049465][T14364] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode [ 443.072060][T14369] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2323'. [ 443.372258][T14383] netlink: 'syz.0.2327': attribute type 4 has an invalid length. [ 443.401258][T14384] netlink: 'syz.0.2327': attribute type 4 has an invalid length. [ 443.425383][ T30] audit: type=1800 audit(1754935017.331:6): pid=14346 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.2319" name="memory.events" dev="tmpfs" ino=2386 res=0 errno=0 [ 444.897722][T14442] __nla_validate_parse: 2 callbacks suppressed [ 444.897745][T14442] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2344'. [ 445.152466][T14447] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2345'. [ 445.403271][T14467] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2348'. [ 445.717791][T14478] veth9: entered allmulticast mode [ 445.764811][T14487] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2353'. [ 445.813377][T14488] netlink: 'syz.0.2355': attribute type 2 has an invalid length. [ 445.851385][T14488] netlink: 'syz.0.2355': attribute type 8 has an invalid length. [ 445.902654][T14488] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2355'. [ 446.020396][T14498] net_ratelimit: 245 callbacks suppressed [ 446.020415][T14498] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 446.159322][T14503] (unnamed net_device) (uninitialized): option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 446.180802][T14504] netlink: 'syz.0.2360': attribute type 1 has an invalid length. [ 446.291292][T14504] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2360'. [ 446.306181][T14509] bond2: (slave gretap1): making interface the new active one [ 446.350330][T14509] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 446.360966][T14506] netlink: 'syz.4.2361': attribute type 29 has an invalid length. [ 446.380135][T14511] netlink: 'syz.4.2361': attribute type 29 has an invalid length. [ 446.402825][T14504] 8021q: adding VLAN 0 to HW filter on device bond2 [ 446.591889][T14524] netlink: 'syz.4.2363': attribute type 11 has an invalid length. [ 446.625574][T14525] netlink: 296 bytes leftover after parsing attributes in process `syz.0.2364'. [ 446.701743][T14525] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2364'. [ 447.505095][T14536] tipc: Enabled bearer , priority 0 [ 447.517034][T14540] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2368'. [ 447.552695][T14541] syzkaller0: entered promiscuous mode [ 447.572168][T14541] syzkaller0: entered allmulticast mode [ 447.593843][T14540] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2368'. [ 447.708887][T14541] tipc: Resetting bearer [ 447.763391][T14541] tipc: Disabling bearer [ 447.775116][T14579] (unnamed net_device) (uninitialized): option mode: invalid value (133) [ 449.192458][T14630] bridge5: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 449.300441][T14638] bridge5: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 450.658760][T14719] __nla_validate_parse: 1 callbacks suppressed [ 450.658781][T14719] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2404'. [ 451.573646][ T5960] IPVS: starting estimator thread 0... [ 451.704074][T14751] IPVS: using max 28 ests per chain, 67200 per kthread [ 451.714872][T14757] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2412'. [ 451.753930][T14757] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2412'. [ 451.896337][T14764] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2415'. [ 451.946213][T14767] netlink: 88 bytes leftover after parsing attributes in process `syz.3.2414'. [ 452.289981][T14773] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2416'. [ 453.405623][T14791] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2419'. [ 453.999894][T14816] tipc: Enabled bearer , priority 0 [ 454.001828][T14818] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2429'. [ 454.134735][T14816] netlink: 'syz.3.2428': attribute type 10 has an invalid length. [ 454.165332][T14816] bridge0: port 2(team0) entered blocking state [ 454.193701][T14816] bridge0: port 2(team0) entered disabled state [ 454.236585][T14816] team0: entered allmulticast mode [ 454.278236][T14816] team_slave_0: entered allmulticast mode [ 454.284210][T14816] team_slave_1: entered allmulticast mode [ 454.342664][T14816] team0: entered promiscuous mode [ 454.358771][T14816] team_slave_0: entered promiscuous mode [ 454.364741][T14816] team_slave_1: entered promiscuous mode [ 454.384631][T14816] bridge0: port 2(team0) entered blocking state [ 454.391202][T14816] bridge0: port 2(team0) entered forwarding state [ 454.410135][T14837] tipc: Resetting bearer [ 454.454019][T14850] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2438'. [ 454.476291][T14813] tipc: Disabling bearer [ 454.711393][T14865] sctp: [Deprecated]: syz.3.2443 (pid 14865) Use of struct sctp_assoc_value in delayed_ack socket option. [ 454.711393][T14865] Use struct sctp_sack_info instead [ 454.858575][T14870] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2444'. [ 454.896999][T14870] netlink: 'syz.2.2444': attribute type 1 has an invalid length. [ 455.055941][T14880] netlink: 'syz.2.2449': attribute type 64 has an invalid length. [ 455.074106][T14883] netlink: 'syz.2.2449': attribute type 64 has an invalid length. [ 456.637604][T14954] __nla_validate_parse: 2 callbacks suppressed [ 456.637625][T14954] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2472'. [ 456.806863][T14962] netlink: 'syz.2.2475': attribute type 11 has an invalid length. [ 456.943304][T14975] netlink: 'syz.2.2476': attribute type 39 has an invalid length. [ 457.068917][T14978] ieee802154 phy0 wpan0: encryption failed: -22 [ 457.075361][T14978] ieee802154 phy0 wpan0: encryption failed: -22 [ 457.099999][T14982] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 457.237618][T14985] netlink: 'syz.0.2481': attribute type 1 has an invalid length. [ 457.254970][T14985] netlink: 'syz.0.2481': attribute type 4 has an invalid length. [ 457.287048][T14985] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.2481'. [ 457.537520][T15003] netlink: 'syz.0.2487': attribute type 2 has an invalid length. [ 457.561369][T15003] netlink: 188 bytes leftover after parsing attributes in process `syz.0.2487'. [ 457.575218][T14994] vxcan1: entered allmulticast mode [ 458.057416][T15024] netlink: 146840 bytes leftover after parsing attributes in process `syz.0.2492'. [ 458.139562][T15026] netlink: 'syz.3.2491': attribute type 2 has an invalid length. [ 458.611215][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 458.649141][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 458.664333][T15048] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 458.729729][T15044] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 459.403366][T15079] validate_nla: 1 callbacks suppressed [ 459.403388][T15079] netlink: 'syz.2.2502': attribute type 4 has an invalid length. [ 459.439585][T15084] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge_slave_0, syncid = 0, id = 0 [ 460.355343][T15120] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.2510'. [ 460.599176][T15130] netlink: 'syz.4.2513': attribute type 3 has an invalid length. [ 460.643739][T15131] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.2514'. [ 460.896933][T15149] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2518'. [ 460.974663][T15145] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2518'. [ 461.044487][T15145] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2518'. [ 461.282230][T15163] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2523'. [ 461.433302][T15175] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 462.038671][ T55] block nbd1: Possible stuck request ffff8880253be000: control (read@0,1024B). Runtime 150 seconds [ 462.049615][ T55] block nbd1: Possible stuck request ffff8880253be1c0: control (read@1024,1024B). Runtime 150 seconds [ 462.060814][ T55] block nbd1: Possible stuck request ffff8880253be380: control (read@2048,1024B). Runtime 150 seconds [ 462.072177][ T55] block nbd1: Possible stuck request ffff8880253be540: control (read@3072,1024B). Runtime 150 seconds [ 462.424772][T15205] netlink: 'syz.0.2536': attribute type 83 has an invalid length. [ 462.537460][T15211] __nla_validate_parse: 3 callbacks suppressed [ 462.537480][T15211] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2538'. [ 462.562424][T15211] netlink: 12789 bytes leftover after parsing attributes in process `syz.4.2538'. [ 462.572212][T15211] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2538'. [ 462.839672][T15219] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2539'. [ 462.870540][T15219] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2539'. [ 462.892303][T15219] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2539'. [ 463.073032][T15230] netlink: 'syz.1.2544': attribute type 2 has an invalid length. [ 463.098282][T15230] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2544'. [ 463.107725][T15230] nbd: must specify a device to reconfigure [ 463.167348][T15239] netlink: 'syz.3.2546': attribute type 6 has an invalid length. [ 463.212648][T15239] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2546'. [ 463.677714][T15258] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2551'. [ 463.710801][T15265] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2554'. [ 463.932241][T15283] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 464.036513][T15276] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 465.373191][T15346] bond0: entered promiscuous mode [ 465.418406][T15346] bond_slave_0: entered promiscuous mode [ 465.425299][T15346] bond_slave_1: entered promiscuous mode [ 465.461390][T15346] mac80211_hwsim hwsim11 wlan1: entered promiscuous mode [ 465.480216][T15346] bridge0: entered promiscuous mode [ 465.507981][T15354] macsec0: entered promiscuous mode [ 466.309120][T15400] pim6reg1: entered promiscuous mode [ 466.327692][T15400] pim6reg1: entered allmulticast mode [ 466.396948][T15409] netlink: 'syz.2.2586': attribute type 4 has an invalid length. [ 466.429707][T15409] netlink: 'syz.2.2586': attribute type 4 has an invalid length. [ 466.458312][ T6008] lo speed is unknown, defaulting to 1000 [ 466.464443][ T6008] syz2: Port: 1 Link DOWN [ 466.477518][ T5940] lo speed is unknown, defaulting to 1000 [ 466.488332][ T5940] syz2: Port: 1 Link ACTIVE [ 466.509756][T15408] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 466.593319][T15399] lo speed is unknown, defaulting to 1000 [ 466.705284][T15422] Set syz1 is full, maxelem 65536 reached [ 467.254070][T15446] geneve3: entered promiscuous mode [ 467.299072][T15446] geneve3: entered allmulticast mode [ 467.358663][T15450] netlink: 'syz.2.2602': attribute type 24 has an invalid length. [ 467.937909][T15478] __nla_validate_parse: 9 callbacks suppressed [ 467.937931][T15478] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2610'. [ 468.201715][T15495] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2614'. [ 468.289034][T15501] (unnamed net_device) (uninitialized): option arp_all_targets: invalid value (18446744073709551613) [ 468.344450][T15399] lo speed is unknown, defaulting to 1000 [ 468.375847][T15477] siw: device registration error -23 [ 468.532605][T15504] pim6reg: entered allmulticast mode [ 468.539170][T15513] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2619'. [ 468.570854][T15511] pim6reg: left allmulticast mode [ 468.761920][T15520] Bluetooth: MGMT ver 1.23 [ 469.111975][T15527] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 469.256662][T15533] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2625'. [ 469.504413][T15545] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2628'. [ 469.816655][T15561] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2629'. [ 470.134517][T15560] lo speed is unknown, defaulting to 1000 [ 470.141119][T15577] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2631'. [ 470.261625][T15568] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 470.315103][T15570] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.2633'. [ 470.552106][T15586] netlink: 112 bytes leftover after parsing attributes in process `syz.1.2634'. [ 470.584331][T15588] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 470.765331][T15592] netlink: 'syz.4.2637': attribute type 1 has an invalid length. [ 470.873979][T15595] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2638'. [ 470.890288][T15597] bond10: (slave vxcan3): The slave device specified does not support setting the MAC address [ 470.922679][T15597] bond10: (slave vxcan3): Error -95 calling set_mac_address [ 471.130740][T15592] gretap4: entered promiscuous mode [ 471.144992][T15592] bond10: (slave gretap4): making interface the new active one [ 471.156897][T15592] bond10: (slave gretap4): Enslaving as an active interface with an up link [ 471.555504][T15624] ipip0: entered promiscuous mode [ 471.564590][T15624] ipip0: entered allmulticast mode [ 471.626771][T15627] geneve2: entered promiscuous mode [ 471.644359][T15627] geneve2: entered allmulticast mode [ 471.677420][T15560] lo speed is unknown, defaulting to 1000 [ 471.678268][ T3553] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 471.719451][ T3553] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 471.779621][ T3553] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 471.982907][T15624] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 472.036719][T15642] sctp: [Deprecated]: syz.1.2651 (pid 15642) Use of struct sctp_assoc_value in delayed_ack socket option. [ 472.036719][T15642] Use struct sctp_sack_info instead [ 472.074209][T15624] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 472.270764][T15644] 8021q: VLANs not supported on ip6_vti0 [ 473.010183][T15676] __nla_validate_parse: 7 callbacks suppressed [ 473.010205][T15676] netlink: 100 bytes leftover after parsing attributes in process `syz.3.2658'. [ 473.123007][T15683] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2660'. [ 473.661536][T15699] netlink: 'syz.3.2665': attribute type 7 has an invalid length. [ 473.709552][ T51] Bluetooth: hci4: command 0x0406 tx timeout [ 473.745096][T15699] : entered promiscuous mode [ 473.772103][T15701] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2666'. [ 473.865372][T15624] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 473.877736][T15624] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 473.893350][T15624] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 473.925871][T15711] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2669'. [ 473.996097][T15624] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 474.012937][T15624] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 474.025502][T15624] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 474.070225][T15721] netlink: 'syz.2.2672': attribute type 1 has an invalid length. [ 474.078626][T15721] netlink: 15 bytes leftover after parsing attributes in process `syz.2.2672'. [ 474.130492][T15624] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 474.146198][T15624] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 474.157366][T15624] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 474.223126][T15725] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2674'. [ 474.322763][T15065] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 474.341327][T15065] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 19999 - 0 [ 474.360547][T15065] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 474.400759][T15065] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 474.416390][T15065] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 19999 - 0 [ 474.426013][T15065] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 474.453319][T15065] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 474.463330][T15065] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 19999 - 0 [ 474.472238][T15065] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 474.483979][T15735] nbd: must specify a device to reconfigure [ 474.515009][ T1040] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 474.527957][ T1040] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 19999 - 0 [ 474.555773][ T1040] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 474.591655][T15738] netlink: 9 bytes leftover after parsing attributes in process `syz.4.2677'. [ 474.655417][T15738] gretap0: entered promiscuous mode [ 474.674378][T15741] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2678'. [ 474.684166][T15741] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2678'. [ 474.703707][T15741] netlink: 31 bytes leftover after parsing attributes in process `syz.1.2678'. [ 474.716326][T15741] netlink: 'syz.1.2678': attribute type 2 has an invalid length. [ 475.021884][T15754] netlink: 'syz.2.2684': attribute type 1 has an invalid length. [ 475.352827][T15776] lo speed is unknown, defaulting to 1000 [ 475.473338][T15782] netlink: 'syz.3.2691': attribute type 1 has an invalid length. [ 475.652124][T15789] macvlan4: entered promiscuous mode [ 475.665749][T15789] macvlan4: entered allmulticast mode [ 475.676498][T15789] bond5: entered promiscuous mode [ 475.691562][T15789] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 475.724049][T15789] bond5: left promiscuous mode [ 475.948778][T15799] netlink: 'syz.1.2695': attribute type 2 has an invalid length. [ 476.500519][T15824] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 476.651006][T15776] lo speed is unknown, defaulting to 1000 [ 477.565802][T15871] nbd: couldn't find a device at index -373156329 [ 477.648334][T15874] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 477.664752][T15874] netlink: 'syz.3.2718': attribute type 1 has an invalid length. [ 478.079216][T15892] __nla_validate_parse: 10 callbacks suppressed [ 478.079237][T15892] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2725'. [ 478.114302][T15894] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2726'. [ 478.648001][T15914] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2734'. [ 479.201626][T15941] netlink: 788 bytes leftover after parsing attributes in process `syz.0.2738'. [ 479.346330][T15946] netlink: 88 bytes leftover after parsing attributes in process `syz.2.2741'. [ 479.399815][T15946] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2741'. [ 479.448627][T15946] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2741'. [ 479.502232][T15954] netlink: 51 bytes leftover after parsing attributes in process `syz.2.2741'. [ 479.542851][T15956] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2744'. [ 479.577336][T15951] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2740'. [ 480.311147][T15975] dummy0: left allmulticast mode [ 480.316237][T15975] dummy0: left promiscuous mode [ 480.321641][T15975] bridge0: port 3(dummy0) entered disabled state [ 480.335260][T15975] bridge_slave_1: left allmulticast mode [ 480.341533][T15975] bridge_slave_1: left promiscuous mode [ 480.347306][T15975] bridge0: port 2(bridge_slave_1) entered disabled state [ 480.361590][T15975] bridge_slave_0: left allmulticast mode [ 480.367563][T15975] bridge0: port 1(bridge_slave_0) entered disabled state [ 481.023211][T16001] bridge0: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 481.543920][T16025] netem: incorrect ge model size [ 481.564520][T16025] netem: change failed [ 481.793601][T16041] netlink: 'syz.4.2768': attribute type 10 has an invalid length. [ 481.813957][T16045] netdevsim netdevsim0 ÿÿÿÿÿÿ: renamed from netdevsim0 (while UP) [ 481.869685][T16045] veth7: entered allmulticast mode [ 481.923280][T16047] netlink: 'syz.2.2771': attribute type 4 has an invalid length. [ 482.207333][T16061] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 482.470396][T16073] netlink: 'syz.2.2779': attribute type 1 has an invalid length. [ 482.500978][T16076] netlink: 'syz.3.2781': attribute type 1 has an invalid length. [ 482.525062][T16077] gtp0: entered promiscuous mode [ 482.531244][T16077] gtp0: entered allmulticast mode [ 482.755825][T16086] syzkaller0: entered promiscuous mode [ 482.761563][T16086] syzkaller0: entered allmulticast mode [ 482.830797][T16086] tipc: Enabled bearer , priority 0 [ 482.881588][T16085] tipc: Resetting bearer [ 482.972158][T16085] tipc: Disabling bearer [ 483.014793][T16103] IPv6: sit1: Disabled Multicast RS [ 483.029877][T16103] sit1: entered allmulticast mode [ 483.319148][T16118] __nla_validate_parse: 14 callbacks suppressed [ 483.319169][T16118] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2795'. [ 483.524008][T16132] netlink: 'syz.2.2798': attribute type 9 has an invalid length. [ 483.537855][T16132] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2798'. [ 483.547270][T16132] netlink: 'syz.2.2798': attribute type 9 has an invalid length. [ 483.567302][T16132] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2798'. [ 483.692015][T16139] bridge5: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 483.755338][T16145] netlink: 'syz.2.2801': attribute type 10 has an invalid length. [ 483.775396][T16145] team0: Device veth1_macvtap failed to register rx_handler [ 483.816032][T16145] netlink: 'syz.2.2801': attribute type 2 has an invalid length. [ 483.834260][T16149] veth0: entered promiscuous mode [ 483.843210][T16149] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2802'. [ 483.971837][T16149] bond2: (slave vlan2): Releasing active interface [ 484.127717][T16161] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2806'. [ 484.384664][T16172] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2811'. [ 484.675192][T16186] netlink: 'syz.3.2815': attribute type 4 has an invalid length. [ 484.847228][T16195] tipc: Enabling of bearer rejected, failed to enable media [ 484.882289][T16200] mac80211_hwsim hwsim7 syzkaller0: Caught tx_queue_len zero misconfig [ 484.920439][T16197] dvmrp1: entered allmulticast mode [ 484.943860][T16200] netlink: 163948 bytes leftover after parsing attributes in process `syz.4.2820'. [ 485.266045][T16216] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2825'. [ 485.413977][T16226] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 485.772838][T16248] netlink: 'syz.0.2836': attribute type 1 has an invalid length. [ 485.787177][T16242] tipc: Enabled bearer , priority 0 [ 485.813902][T16251] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2837'. [ 485.907516][T16242] syzkaller0: entered promiscuous mode [ 485.939099][T16242] syzkaller0: entered allmulticast mode [ 485.988674][T16254] tipc: Resetting bearer [ 486.219419][T16241] tipc: Resetting bearer [ 486.244111][T16261] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2840'. [ 486.628888][ T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 486.639179][ T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 486.649185][ T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 486.674715][ T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 486.685282][ T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 486.810140][ T5940] tipc: Node number set to 623103808 [ 488.236319][T16241] tipc: Disabling bearer [ 488.391560][T16275] __nla_validate_parse: 2 callbacks suppressed [ 488.391585][T16275] netlink: 1328 bytes leftover after parsing attributes in process `syz.0.2842'. [ 488.495031][T16262] lo speed is unknown, defaulting to 1000 [ 488.555436][T16284] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2845'. [ 488.750952][ T5185] Bluetooth: hci3: command tx timeout [ 488.832284][T16299] netlink: 'syz.2.2850': attribute type 19 has an invalid length. [ 488.878365][T16302] syzkaller1: entered promiscuous mode [ 488.883906][T16302] syzkaller1: entered allmulticast mode [ 489.002694][T16306] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2853'. [ 490.835945][ T5185] Bluetooth: hci3: command tx timeout [ 491.453465][ T5235] udevd[5235]: worker [6963] /devices/virtual/block/nbd1 timeout; kill it [ 491.505397][ T5235] udevd[5235]: seq 13436 '/devices/virtual/block/nbd1' killed [ 492.075386][T16319] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2856'. [ 492.110075][ T55] block nbd1: Possible stuck request ffff8880253be000: control (read@0,1024B). Runtime 180 seconds [ 492.121014][ T55] block nbd1: Possible stuck request ffff8880253be1c0: control (read@1024,1024B). Runtime 180 seconds [ 492.132902][ T55] block nbd1: Possible stuck request ffff8880253be380: control (read@2048,1024B). Runtime 180 seconds [ 492.144276][ T55] block nbd1: Possible stuck request ffff8880253be540: control (read@3072,1024B). Runtime 180 seconds [ 492.265506][T16262] lo speed is unknown, defaulting to 1000 [ 492.353670][T16331] veth0_to_bond: entered allmulticast mode [ 492.486705][T16337] netlink: zone id is out of range [ 492.522243][T16337] netlink: zone id is out of range [ 492.551954][T16337] netlink: zone id is out of range [ 492.557281][T16337] netlink: zone id is out of range [ 492.599317][T16337] netlink: zone id is out of range [ 492.604791][T16337] netlink: zone id is out of range [ 492.610847][ T1040] bond3: (slave veth0_to_bond): link status definitely down, disabling slave [ 492.611163][T16337] netlink: zone id is out of range [ 492.627888][T16337] netlink: zone id is out of range [ 492.636967][T16337] netlink: zone id is out of range [ 492.654596][ T1040] bond3: now running without any active interface! [ 492.658143][T16337] netlink: zone id is out of range [ 492.918394][ T5185] Bluetooth: hci3: command tx timeout [ 492.977546][T16364] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2872'. [ 493.010985][T16367] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.2873'. [ 493.124096][T16262] chnl_net:caif_netlink_parms(): no params data found [ 493.156020][T16375] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2871'. [ 493.286049][T16378] vlan1: entered allmulticast mode [ 493.291602][T16378] bridge0: entered allmulticast mode [ 493.325053][T16378] bridge2: port 1(vlan1) entered blocking state [ 493.338398][T16378] bridge2: port 1(vlan1) entered disabled state [ 493.365481][T16378] vlan1: entered promiscuous mode [ 493.388007][T16378] bridge0: entered promiscuous mode [ 493.716569][T16262] bridge0: port 1(bridge_slave_0) entered blocking state [ 493.734890][T16262] bridge0: port 1(bridge_slave_0) entered disabled state [ 493.756866][T16262] bridge_slave_0: entered allmulticast mode [ 493.777725][T16262] bridge_slave_0: entered promiscuous mode [ 493.791541][T16262] bridge0: port 2(bridge_slave_1) entered blocking state [ 493.817913][T16262] bridge0: port 2(bridge_slave_1) entered disabled state [ 493.860214][T16415] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2884'. [ 493.864979][T16262] bridge_slave_1: entered allmulticast mode [ 493.899445][T16262] bridge_slave_1: entered promiscuous mode [ 493.994738][T16422] netlink: 216 bytes leftover after parsing attributes in process `syz.4.2887'. [ 494.056847][T16422] bond0: entered promiscuous mode [ 494.084033][T16422] bond_slave_0: entered promiscuous mode [ 494.098051][T16422] bond_slave_1: entered promiscuous mode [ 494.125054][T16262] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 494.169903][T16262] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 494.345011][T16262] team0: Port device team_slave_0 added [ 494.370301][T16262] team0: Port device team_slave_1 added [ 494.559966][T16262] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 494.566980][T16262] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 494.647723][T16262] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 494.667267][T16262] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 494.685320][T16262] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 494.726942][T16262] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 494.837916][T16463] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2897'. [ 494.932552][T16262] hsr_slave_0: entered promiscuous mode [ 494.957242][T16262] hsr_slave_1: entered promiscuous mode [ 494.980099][T16262] debugfs: 'hsr0' already exists in 'hsr' [ 494.988229][ T5185] Bluetooth: hci3: command tx timeout [ 494.998838][T16262] Cannot create hsr debugfs directory [ 495.311572][T16479] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2900'. [ 495.460635][T16486] netlink: 'syz.4.2899': attribute type 26 has an invalid length. [ 495.955086][T16262] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 495.982604][T16262] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 496.027554][T16509] netlink: 'syz.0.2907': attribute type 1 has an invalid length. [ 496.063698][T16509] netlink: 180 bytes leftover after parsing attributes in process `syz.0.2907'. [ 496.106149][T16262] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 496.109531][T16524] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2911'. [ 496.117717][T16262] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 496.149919][T16524] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2911'. [ 496.163827][T16524] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2911'. [ 496.175962][T16524] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2911'. [ 496.234833][T16528] ieee802154 phy0 wpan0: encryption failed: -22 [ 496.296533][T16530] netlink: 'syz.0.2912': attribute type 32 has an invalid length. [ 496.321504][T16262] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 496.326712][T16530] netlink: 776 bytes leftover after parsing attributes in process `syz.0.2912'. [ 496.352710][T16262] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 496.401836][T16530] ieee802154 phy0 wpan0: encryption failed: -22 [ 496.513320][T16262] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 496.566300][T16262] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 497.117566][T16262] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 497.149264][T16262] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 497.161459][T16570] netlink: 'syz.4.2924': attribute type 6 has an invalid length. [ 497.174746][T16565] netlink: 'syz.2.2922': attribute type 10 has an invalid length. [ 497.214526][T16262] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 497.222424][T16573] netlink: 'syz.0.2925': attribute type 2 has an invalid length. [ 497.244327][T16262] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 497.583972][T16262] 8021q: adding VLAN 0 to HW filter on device bond0 [ 497.653215][T16262] 8021q: adding VLAN 0 to HW filter on device team0 [ 497.696375][ T1157] bridge0: port 1(bridge_slave_0) entered blocking state [ 497.703678][ T1157] bridge0: port 1(bridge_slave_0) entered forwarding state [ 497.756931][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 497.764183][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 497.842582][T16604] Bluetooth: hci1: Opcode 0x0401 failed: -4 [ 498.200417][T16612] tipc: Enabled bearer , priority 0 [ 498.241314][T16619] tipc: Disabling bearer [ 498.296814][T16612] tipc: Enabling of bearer rejected, failed to enable media [ 498.848507][T16262] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 499.141754][T16262] veth0_vlan: entered promiscuous mode [ 499.219412][T16262] veth1_vlan: entered promiscuous mode [ 499.460379][T16262] veth0_macvtap: entered promiscuous mode [ 499.534372][T16262] veth1_macvtap: entered promiscuous mode [ 499.627632][T16262] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 499.721553][T16262] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 499.815763][ T1040] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 499.838604][ T1040] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 499.868466][ T5185] Bluetooth: hci1: command 0x0406 tx timeout [ 499.902120][ T1040] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 499.923552][ T1040] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 499.974786][T16688] __nla_validate_parse: 3 callbacks suppressed [ 499.974808][T16688] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2951'. [ 500.264183][T16701] netlink: 'syz.0.2954': attribute type 1 has an invalid length. [ 500.302150][T16701] netlink: 'syz.0.2954': attribute type 11 has an invalid length. [ 500.336303][T16701] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2954'. [ 500.344444][T16705] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input6 [ 500.376294][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 500.393721][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 500.508832][ T1040] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 500.516871][ T1040] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 500.657537][T16713] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2958'. [ 500.677010][T16714] netlink: 204 bytes leftover after parsing attributes in process `syz.0.2957'. [ 500.776913][T16713] tipc: Enabling of bearer rejected, failed to enable media [ 501.358625][T16739] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2963'. [ 501.716424][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.725819][ T1305] clip:clip_start_xmit: skb_dst(skb) == NULL [ 502.144275][T16759] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2970'. [ 502.250590][T16763] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 502.362201][ T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 502.373473][ T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 502.384212][ T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 502.404897][ T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 502.413675][ T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 502.656617][T16784] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2979'. [ 502.670314][ T1040] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 502.694942][ T1040] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 502.725537][ T1040] netdevsim netdevsim4 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 502.823228][T16769] lo speed is unknown, defaulting to 1000 [ 502.885081][ T1040] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 502.935714][ T1040] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 502.958620][ T1040] netdevsim netdevsim4 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 503.117843][ T1040] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 503.166925][ T1040] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 503.206966][ T1040] netdevsim netdevsim4 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 503.252248][T16809] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2985'. [ 503.262684][T16809] netlink: 'syz.3.2985': attribute type 1 has an invalid length. [ 503.271634][T16809] netlink: 'syz.3.2985': attribute type 1 has an invalid length. [ 503.285565][T16810] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.2986'. [ 503.303786][T16809] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2985'. [ 503.401673][ T1040] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 503.444800][ T1040] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 503.492174][ T1040] netdevsim netdevsim4 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 503.867541][T16840] netlink: 'syz.2.2994': attribute type 1 has an invalid length. [ 503.889089][T16840] netlink: 'syz.2.2994': attribute type 2 has an invalid length. [ 504.007663][ T1040] vlan1: left promiscuous mode [ 504.025597][ T1040] bridge0: left promiscuous mode [ 504.046538][ T1040] bridge2: port 1(vlan1) entered disabled state [ 504.510587][ T5185] Bluetooth: hci1: command tx timeout [ 504.915646][ T1040] bond3 (unregistering): (slave gretap1): Releasing active interface [ 505.027085][ T1040] bond5 (unregistering): (slave gretap3): Releasing active interface [ 505.113637][ T1040] bond10 (unregistering): (slave gretap4): Releasing active interface [ 505.205838][ T1040] dvmrp0 (unregistering): left allmulticast mode [ 505.552030][ T1040] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 505.564467][ T1040] bond_slave_0: left promiscuous mode [ 505.574168][ T1040] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 505.584195][ T1040] bond_slave_1: left promiscuous mode [ 505.592359][ T1040] bond0 (unregistering): Released all slaves [ 505.611367][ T1040] bond1 (unregistering): Released all slaves [ 505.743439][ T1040] bond2 (unregistering): (slave wireguard0): Releasing backup interface [ 505.752118][ T1040] wireguard0: left promiscuous mode [ 505.760487][ T1040] bond2 (unregistering): Released all slaves [ 505.775435][ T1040] bond3 (unregistering): Released all slaves [ 505.797336][ T1040] bond4 (unregistering): Released all slaves [ 505.924725][ T1040] bond5 (unregistering): Released all slaves [ 505.938873][ T1040] bond6 (unregistering): Released all slaves [ 505.953761][ T1040] bond7 (unregistering): Released all slaves [ 506.090264][ T1040] bond8 (unregistering): Released all slaves [ 506.106274][ T1040] bond9 (unregistering): Released all slaves [ 506.123813][ T1040] bond10 (unregistering): Released all slaves [ 506.305641][T16769] lo speed is unknown, defaulting to 1000 [ 506.396478][ T1040] tipc: Disabling bearer [ 506.528495][ T1040] tipc: Disabling bearer [ 506.554115][ T1040] tipc: Disabling bearer [ 506.566048][T16891] __nla_validate_parse: 3 callbacks suppressed [ 506.566068][T16891] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3004'. [ 506.582278][ T1040] tipc: Left network mode [ 506.592977][ T5185] Bluetooth: hci1: command tx timeout [ 506.709074][T16892] netlink: 3648 bytes leftover after parsing attributes in process `syz.1.3005'. [ 506.731417][T16892] netlink: 3648 bytes leftover after parsing attributes in process `syz.1.3005'. [ 507.269351][T16920] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3010'. [ 507.324523][T16920] hsr_slave_0: left promiscuous mode [ 507.353063][T16920] hsr_slave_1: left promiscuous mode [ 507.707488][T16940] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3015'. [ 507.785813][T16946] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3015'. [ 508.007394][T16956] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 508.066715][T16957] IPVS: set_ctl: invalid protocol: 17468 58.0.0.0:0 [ 508.127563][T16956] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 508.168775][T16769] chnl_net:caif_netlink_parms(): no params data found [ 508.638628][T16975] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3020'. [ 508.669274][ T5185] Bluetooth: hci1: command tx timeout [ 508.972325][T16988] syzkaller1: entered promiscuous mode [ 508.977861][T16988] syzkaller1: entered allmulticast mode [ 509.102766][ T1040] hsr_slave_0: left promiscuous mode [ 509.119290][ T1040] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 509.140319][T16996] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3025'. [ 509.148990][ T1040] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 509.175114][ T1040] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 509.192681][ T1040] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 509.251430][ T1040] vlan0: left allmulticast mode [ 509.256579][ T1040] veth0_vlan: left allmulticast mode [ 509.262447][ T1040] vlan0: left promiscuous mode [ 509.267909][ T1040] veth1_macvtap: left promiscuous mode [ 509.280326][ T1040] veth1_vlan: left promiscuous mode [ 509.285991][ T1040] veth0_vlan: left promiscuous mode [ 509.467751][ T1040] pim6reg (unregistering): left allmulticast mode [ 509.901376][ T78] smc: removing ib device syz! [ 510.566402][T16769] bridge0: port 1(bridge_slave_0) entered blocking state [ 510.585065][T16769] bridge0: port 1(bridge_slave_0) entered disabled state [ 510.608463][T16769] bridge_slave_0: entered allmulticast mode [ 510.634411][T17027] net_ratelimit: 6 callbacks suppressed [ 510.634433][T17027] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 510.651652][T16769] bridge_slave_0: entered promiscuous mode [ 510.744631][T17024] (unnamed net_device) (uninitialized): Unable to set up delay as MII monitoring is disabled [ 510.748683][ T5185] Bluetooth: hci1: command tx timeout [ 510.790397][T16769] bridge0: port 2(bridge_slave_1) entered blocking state [ 510.815941][T16769] bridge0: port 2(bridge_slave_1) entered disabled state [ 510.845948][T16769] bridge_slave_1: entered allmulticast mode [ 510.863365][T16769] bridge_slave_1: entered promiscuous mode [ 510.929199][T17030] openvswitch: netlink: Unexpected mask (mask=c0, allowed=10048) [ 511.226297][T16769] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 511.347833][T16769] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 511.733285][T17040] sctp: [Deprecated]: syz.0.3033 (pid 17040) Use of struct sctp_assoc_value in delayed_ack socket option. [ 511.733285][T17040] Use struct sctp_sack_info instead [ 511.857893][T17064] netlink: 260 bytes leftover after parsing attributes in process `syz.3.3037'. [ 511.965078][T17067] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3037'. [ 512.027709][T17068] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 512.075611][T16769] team0: Port device team_slave_0 added [ 512.187240][T16769] team0: Port device team_slave_1 added [ 512.417944][T17078] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 512.807258][T17087] netlink: 'syz.1.3040': attribute type 39 has an invalid length. [ 512.942128][T16769] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 512.980651][T16769] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 513.033953][T16769] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 513.172248][T16769] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 513.204978][T16769] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 513.293442][T16769] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 513.861026][T16769] hsr_slave_0: entered promiscuous mode [ 513.899649][T16769] hsr_slave_1: entered promiscuous mode [ 514.216663][ T1040] IPVS: stop unused estimator thread 0... [ 514.477955][T17147] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3053'. [ 514.780094][T17159] netlink: 71 bytes leftover after parsing attributes in process `syz.1.3055'. [ 515.020936][T17174] netlink: 9 bytes leftover after parsing attributes in process `syz.2.3058'. [ 515.096313][T17169] netlink: 'syz.3.3057': attribute type 3 has an invalid length. [ 515.126254][T17176] netlink: 5 bytes leftover after parsing attributes in process `syz.2.3058'. [ 515.137763][T17169] netlink: 'syz.3.3057': attribute type 3 has an invalid length. [ 515.170162][T17176] 1ªî{X¹¦: renamed from 30ªî{X¹¦ (while UP) [ 515.214582][T17176] A link change request failed with some changes committed already. Interface 31ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 515.503580][T17174] 1ªî{X¹¦: entered promiscuous mode [ 515.518712][T17174] 1ªî{X¹¦: left allmulticast mode [ 515.556744][T17191] netlink: 108 bytes leftover after parsing attributes in process `syz.0.3062'. [ 516.004581][T17207] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3064'. [ 516.335092][T17219] netlink: 184 bytes leftover after parsing attributes in process `syz.3.3068'. [ 516.355342][T17224] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3069'. [ 516.413855][T16769] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 516.466984][T16769] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 516.505265][T16769] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 516.546931][T16769] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 516.806681][T17244] bridge0: port 1(macsec0) entered blocking state [ 516.826359][T17244] bridge0: port 1(macsec0) entered disabled state [ 516.836697][T17244] macsec0: entered allmulticast mode [ 516.850962][T17244] veth1_macvtap: entered allmulticast mode [ 516.872044][T17244] macsec0: entered promiscuous mode [ 516.945279][T17252] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3076'. [ 516.949153][T17247] netlink: 348 bytes leftover after parsing attributes in process `syz.3.3075'. [ 517.026186][T16769] 8021q: adding VLAN 0 to HW filter on device bond0 [ 517.172708][T16769] 8021q: adding VLAN 0 to HW filter on device team0 [ 517.262695][ T1157] bridge0: port 1(bridge_slave_0) entered blocking state [ 517.270069][ T1157] bridge0: port 1(bridge_slave_0) entered forwarding state [ 517.455913][T17264] 8021q: adding VLAN 0 to HW filter on device bond4 [ 517.469068][ T1157] bridge0: port 2(bridge_slave_1) entered blocking state [ 517.476296][ T1157] bridge0: port 2(bridge_slave_1) entered forwarding state [ 517.643492][T17276] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3081'. [ 518.011148][T17294] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0001 with DS=0x2 [ 518.034490][T17297] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3087'. [ 518.505960][T16769] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 518.993452][T16769] veth0_vlan: entered promiscuous mode [ 519.016891][T16769] veth1_vlan: entered promiscuous mode [ 519.086509][T16769] veth0_macvtap: entered promiscuous mode [ 519.107793][T16769] veth1_macvtap: entered promiscuous mode [ 519.135458][T16769] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 519.156662][T16769] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 519.190279][ T1040] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 519.204873][ T1040] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 519.214764][ T1040] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 519.259464][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 519.371436][ T78] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 519.403589][ T78] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 519.463612][ T7882] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 519.473809][ T7882] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 522.192511][ T55] block nbd1: Possible stuck request ffff8880253be000: control (read@0,1024B). Runtime 210 seconds [ 522.203902][ T55] block nbd1: Possible stuck request ffff8880253be1c0: control (read@1024,1024B). Runtime 210 seconds [ 522.215264][ T55] block nbd1: Possible stuck request ffff8880253be380: control (read@2048,1024B). Runtime 210 seconds [ 522.226333][ T55] block nbd1: Possible stuck request ffff8880253be540: control (read@3072,1024B). Runtime 210 seconds [ 541.332219][T17399] sctp: [Deprecated]: syz.1.3089 (pid 17399) Use of int in max_burst socket option. [ 541.332219][T17399] Use struct sctp_assoc_value instead [ 541.430772][T17399] netlink: 'syz.1.3089': attribute type 12 has an invalid length. [ 541.450101][T17399] sit0: entered allmulticast mode [ 541.484069][T17399] sit0: left allmulticast mode [ 541.819458][T17411] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3095'. [ 541.832590][T17416] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3096'. [ 542.109091][T17424] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3100'. [ 542.148949][T17424] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 542.177374][T17430] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 542.199911][T17430] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 542.209565][T17430] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 542.232382][ T5862] bond0: (slave syz_tun): Releasing backup interface [ 542.238633][T17430] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 542.248731][T17430] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 542.695043][ T7882] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 542.745618][ T7882] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 542.817995][T17427] lo speed is unknown, defaulting to 1000 [ 542.944866][ T7882] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 542.976145][ T7882] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 542.996550][T17456] netlink: 'syz.3.3108': attribute type 10 has an invalid length. [ 543.024247][T17456] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3108'. [ 543.058175][T17454] sctp: [Deprecated]: syz.2.3109 (pid 17454) Use of int in maxseg socket option. [ 543.058175][T17454] Use struct sctp_assoc_value instead [ 543.064193][T17456] batadv0: entered promiscuous mode [ 543.101328][T17456] batadv0: entered allmulticast mode [ 543.124185][T17456] bond0: (slave batadv0): Releasing backup interface [ 543.159189][T17456] bridge0: port 3(batadv0) entered blocking state [ 543.176097][T17456] bridge0: port 3(batadv0) entered disabled state [ 543.277204][ T7882] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 543.332500][ T7882] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 543.333409][ T1040] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 543.353042][ T1040] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 543.454977][T17465] openvswitch: netlink: Flow key attr not present in new flow. [ 543.486848][T17467] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3113'. [ 543.535727][T17465] netlink: 'syz.1.3112': attribute type 12 has an invalid length. [ 543.537719][T17427] lo speed is unknown, defaulting to 1000 [ 543.565160][T17470] netlink: 'syz.3.3114': attribute type 1 has an invalid length. [ 543.576193][T17470] netlink: 'syz.3.3114': attribute type 2 has an invalid length. [ 543.587997][T17470] netlink: 1172 bytes leftover after parsing attributes in process `syz.3.3114'. [ 543.591271][T17465] netlink: 'syz.1.3112': attribute type 29 has an invalid length. [ 543.631943][T17465] netlink: 148 bytes leftover after parsing attributes in process `syz.1.3112'. [ 543.641812][T17465] netlink: 'syz.1.3112': attribute type 2 has an invalid length. [ 543.651724][T17465] netlink: 'syz.1.3112': attribute type 3 has an invalid length. [ 543.660289][T17465] netlink: 3 bytes leftover after parsing attributes in process `syz.1.3112'. [ 543.757905][T17474] bridge0: port 1(bridge_slave_0) entered disabled state [ 543.767667][T17474] bridge0: port 2(bridge_slave_1) entered disabled state [ 543.844350][T17479] team0: Device gtp0 is of different type [ 544.230982][T17497] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3122'. [ 544.348693][ T5185] Bluetooth: hci0: command tx timeout [ 544.395482][T17497] (unnamed net_device) (uninitialized): option packets_per_slave: mode dependency failed, not supported in mode active-backup(1) [ 544.476764][ T7882] macsec0: left allmulticast mode [ 544.485932][ T7882] veth1_macvtap: left allmulticast mode [ 544.499685][ T7882] macsec0: left promiscuous mode [ 544.516813][ T7882] bridge0: port 1(macsec0) entered disabled state [ 544.744818][T17521] netlink: 'syz.2.3128': attribute type 5 has an invalid length. [ 544.915529][T17525] nbd: must specify a size in bytes for the device [ 544.983014][T17527] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3130'. [ 545.224861][ T7882] tipc: Disabling bearer [ 545.411614][ T7882] bond2 (unregistering): (slave gretap1): Releasing active interface [ 545.513822][ T7882] dvmrp1 (unregistering): left allmulticast mode [ 546.010497][ T7882] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 546.022108][ T7882] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 546.034173][ T7882] bond0 (unregistering): Released all slaves [ 546.162985][ T7882] bond1 (unregistering): Released all slaves [ 546.294499][ T7882] bond2 (unregistering): Released all slaves [ 546.310367][ T7882] bond3 (unregistering): Released all slaves [ 546.434051][ T7882] bond4 (unregistering): Released all slaves [ 546.440536][ T5185] Bluetooth: hci0: command tx timeout [ 546.509897][T17538] tc_dump_action: action bad kind [ 546.751195][ T7882] tipc: Left network mode [ 546.807329][T17548] macvlan2: entered allmulticast mode [ 546.850464][T17427] chnl_net:caif_netlink_parms(): no params data found [ 546.877271][T17558] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 546.884845][T17558] IPv6: NLM_F_CREATE should be set when creating new route [ 546.892250][T17558] IPv6: NLM_F_CREATE should be set when creating new route [ 547.209870][T17565] ieee802154 phy0 wpan0: encryption failed: -90 [ 547.526626][T17589] sctp: [Deprecated]: syz.3.3142 (pid 17589) Use of struct sctp_assoc_value in delayed_ack socket option. [ 547.526626][T17589] Use struct sctp_sack_info instead [ 547.683840][T17593] __nla_validate_parse: 1 callbacks suppressed [ 547.683861][T17593] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3145'. [ 547.770786][T17427] bridge0: port 1(bridge_slave_0) entered blocking state [ 547.782713][T17427] bridge0: port 1(bridge_slave_0) entered disabled state [ 547.815191][T17427] bridge_slave_0: entered allmulticast mode [ 547.827355][T17427] bridge_slave_0: entered promiscuous mode [ 547.894774][T17593] dummy0: entered promiscuous mode [ 547.912031][T17593] batadv_slave_1: entered promiscuous mode [ 547.923209][T17602] netlink: 'syz.2.3147': attribute type 13 has an invalid length. [ 547.946377][T17427] bridge0: port 2(bridge_slave_1) entered blocking state [ 547.954582][T17427] bridge0: port 2(bridge_slave_1) entered disabled state [ 547.962445][T17427] bridge_slave_1: entered allmulticast mode [ 547.970878][T17427] bridge_slave_1: entered promiscuous mode [ 547.980069][T17602] veth0_macvtap: left promiscuous mode [ 547.985726][T17602] macvtap0: entered allmulticast mode [ 547.999017][T17602] macvtap0: refused to change device tx_queue_len [ 548.007182][T17599] lo speed is unknown, defaulting to 1000 [ 548.259304][T17427] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 548.289720][T17606] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 548.316165][T17427] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 548.402141][T17599] lo speed is unknown, defaulting to 1000 [ 548.471624][T17427] team0: Port device team_slave_0 added [ 548.511649][ T5185] Bluetooth: hci0: command tx timeout [ 548.523337][T17427] team0: Port device team_slave_1 added [ 548.813653][T17621] lo: entered promiscuous mode [ 548.847033][T17621] netlink: 'syz.3.3151': attribute type 2 has an invalid length. [ 548.875231][T17621] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 549.172003][T17427] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 549.191977][T17427] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 549.245430][T17427] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 549.284816][T17427] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 549.303522][T17427] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 549.373994][T17427] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 549.500665][T17634] lo speed is unknown, defaulting to 1000 [ 549.655631][T17653] netlink: 'syz.1.3158': attribute type 8 has an invalid length. [ 549.693258][T17652] netlink: 'syz.1.3158': attribute type 8 has an invalid length. [ 549.819935][T17657] openvswitch: netlink: Missing valid actions attribute. [ 549.827322][T17657] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 550.088826][T17427] hsr_slave_0: entered promiscuous mode [ 550.113847][T17427] hsr_slave_1: entered promiscuous mode [ 550.160042][T17427] debugfs: 'hsr0' already exists in 'hsr' [ 550.165995][T17427] Cannot create hsr debugfs directory [ 550.352090][ T7882] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 550.372257][ T7882] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 550.409366][ T7882] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 550.420816][ T7882] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 550.433870][T17668] netlink: 2 bytes leftover after parsing attributes in process `syz.1.3163'. [ 550.444122][T17668] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 550.481864][ T7882] vlan0: left allmulticast mode [ 550.486904][ T7882] vlan0: left promiscuous mode [ 550.493331][ T7882] veth1_macvtap: left promiscuous mode [ 550.499758][ T7882] veth0_macvtap: left promiscuous mode [ 550.505802][ T7882] veth1_vlan: left promiscuous mode [ 550.588597][ T5185] Bluetooth: hci0: command tx timeout [ 551.029956][ C0] ------------[ cut here ]------------ [ 551.035885][ C0] kernel BUG at arch/x86/mm/physaddr.c:28! [ 551.041798][ C0] Oops: invalid opcode: 0000 [#1] SMP KASAN PTI [ 551.048075][ C0] CPU: 0 UID: 0 PID: 15 Comm: ksoftirqd/0 Not tainted 6.16.0-syzkaller-12084-g33caa208dba6 #0 PREEMPT(full) [ 551.059654][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 551.069740][ C0] RIP: 0010:__phys_addr+0x16b/0x180 [ 551.074981][ C0] Code: 8e ae 00 e9 45 ff ff ff e8 e2 24 4b 00 48 c7 c7 50 cf fa 8d 48 89 de 4c 89 f2 e8 90 0e 8a 03 e9 4d ff ff ff e8 c6 24 4b 00 90 <0f> 0b e8 be 24 4b 00 90 0f 0b e8 b6 24 4b 00 90 0f 0b 0f 1f 00 90 [ 551.094637][ C0] RSP: 0018:ffffc90000147878 EFLAGS: 00010246 [ 551.100765][ C0] RAX: ffffffff817486ea RBX: 00007780ffff0000 RCX: ffff88801ce9bc00 [ 551.109244][ C0] RDX: 0000000000000100 RSI: 000000017fff0000 RDI: 00007780ffff0000 [ 551.117248][ C0] RBP: ffffc90000147b50 R08: 0000000000000000 R09: ffffffff81a7f847 [ 551.125264][ C0] R10: dffffc0000000000 R11: ffffffff8a014060 R12: ffffffff8a014060 [ 551.133269][ C0] R13: ffffffff81a7f847 R14: 000000017fff0000 R15: dffffc0000000000 [ 551.141453][ C0] FS: 0000000000000000(0000) GS:ffff888125c21000(0000) knlGS:0000000000000000 [ 551.150501][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 551.157201][ C0] CR2: 00002000000012c0 CR3: 0000000064404000 CR4: 00000000003526f0 [ 551.165295][ C0] Call Trace: [ 551.169035][ C0] [ 551.172112][ C0] ? in_dev_free_rcu+0x49/0x60 [ 551.177007][ C0] kfree+0x77/0x440 [ 551.180872][ C0] ? __pfx_in_dev_free_rcu+0x10/0x10 [ 551.186189][ C0] ? rcu_core+0xc37/0x1770 [ 551.190645][ C0] in_dev_free_rcu+0x49/0x60 [ 551.195266][ C0] rcu_core+0xca8/0x1770 [ 551.199549][ C0] ? __lock_acquire+0xab9/0xd20 [ 551.204440][ C0] ? __pfx_rcu_core+0x10/0x10 [ 551.209160][ C0] ? rcu_qs+0xc4/0x170 [ 551.213248][ C0] ? __pfx_rcu_qs+0x10/0x10 [ 551.217776][ C0] ? sched_clock_cpu+0x74/0x430 [ 551.222668][ C0] ? rcu_softirq_qs+0xf2/0x350 [ 551.227457][ C0] ? __pfx_rcu_softirq_qs+0x10/0x10 [ 551.232685][ C0] handle_softirqs+0x283/0x870 [ 551.237476][ C0] ? run_ksoftirqd+0x9b/0x100 [ 551.242189][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 551.247592][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 551.252683][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 551.257818][ C0] run_ksoftirqd+0x9b/0x100 [ 551.262362][ C0] ? __pfx_run_ksoftirqd+0x10/0x10 [ 551.267552][ C0] smpboot_thread_fn+0x53f/0xa60 [ 551.272545][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 551.277611][ C0] kthread+0x70e/0x8a0 [ 551.281758][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 551.287252][ C0] ? __pfx_kthread+0x10/0x10 [ 551.291899][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 551.297146][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 551.302362][ C0] ? __pfx_kthread+0x10/0x10 [ 551.306959][ C0] ret_from_fork+0x3fc/0x770 [ 551.311556][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 551.316754][ C0] ? __switch_to_asm+0x39/0x70 [ 551.321525][ C0] ? __switch_to_asm+0x33/0x70 [ 551.326290][ C0] ? __pfx_kthread+0x10/0x10 [ 551.330971][ C0] ret_from_fork_asm+0x1a/0x30 [ 551.335764][ C0] [ 551.338787][ C0] Modules linked in: [ 551.342763][ C0] ---[ end trace 0000000000000000 ]--- [ 551.348260][ C0] RIP: 0010:__phys_addr+0x16b/0x180 [ 551.353492][ C0] Code: 8e ae 00 e9 45 ff ff ff e8 e2 24 4b 00 48 c7 c7 50 cf fa 8d 48 89 de 4c 89 f2 e8 90 0e 8a 03 e9 4d ff ff ff e8 c6 24 4b 00 90 <0f> 0b e8 be 24 4b 00 90 0f 0b e8 b6 24 4b 00 90 0f 0b 0f 1f 00 90 [ 551.373261][ C0] RSP: 0018:ffffc90000147878 EFLAGS: 00010246 [ 551.379465][ C0] RAX: ffffffff817486ea RBX: 00007780ffff0000 RCX: ffff88801ce9bc00 [ 551.387649][ C0] RDX: 0000000000000100 RSI: 000000017fff0000 RDI: 00007780ffff0000 [ 551.395712][ C0] RBP: ffffc90000147b50 R08: 0000000000000000 R09: ffffffff81a7f847 [ 551.403739][ C0] R10: dffffc0000000000 R11: ffffffff8a014060 R12: ffffffff8a014060 [ 551.411782][ C0] R13: ffffffff81a7f847 R14: 000000017fff0000 R15: dffffc0000000000 [ 551.419949][ C0] FS: 0000000000000000(0000) GS:ffff888125c21000(0000) knlGS:0000000000000000 [ 551.428958][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 551.435742][ C0] CR2: 00002000000012c0 CR3: 0000000064404000 CR4: 00000000003526f0 [ 551.443995][ C0] Kernel panic - not syncing: Fatal exception in interrupt [ 551.451538][ C0] Kernel Offset: disabled [ 551.455880][ C0] Rebooting in 86400 seconds..