last executing test programs: 6.126206344s ago: executing program 4 (id=5184): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000006c0)=@filter={'filter\x00', 0xe, 0x0, 0x90, [0x0, 0x200000000340, 0x200000000370, 0x2000000003a0], 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000001100000000000000000000000000000000000000000000000000000001ffffffff00000000"]}, 0x108) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$sock_int(r1, 0x1, 0x2a, &(0x7f0000000500)=0x800, 0x4) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x39000, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@getroute={0x14, 0x1a, 0x100, 0x70bd27, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x14}}, 0x4000000) setsockopt$IP_VS_SO_SET_DEL(r0, 0x0, 0x484, &(0x7f0000000000)={0x2, @loopback, 0x4e24, 0x3, 'sed\x00', 0x1, 0x7, 0x78}, 0x2c) 4.483599486s ago: executing program 3 (id=5205): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) connect$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x8, 0x0, 0x1, 0x9, 0x6, @local}, 0x14) (async) connect$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x8, 0x0, 0x1, 0x9, 0x6, @local}, 0x14) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r1}, 0x8) socket(0x10, 0x3, 0x0) (async) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) (async) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x400, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x3548, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x4}}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001b80)=@newtfilter={0x6c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x3c, 0x2, [@TCA_BASIC_EMATCHES={0x38, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{}, {0x0, 0x0, 0x1}}}, @TCF_EM_META={0x18, 0x2, 0x0, 0x0, {{0x0, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc, 0x1, {{}, {0x2f}}}]}}]}]}]}}]}, 0x6c}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000200)={'ip6gre0\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x2f, 0x1, 0xb, 0xfffffe00, 0x42, @remote, @local, 0x700, 0x700, 0xb}}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="ffff000000000000001f48716205f96c5bc68e0a26565900000000010000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00f1ff00bfa1000000b1519e7f4e8404b9ffffffbfa400000000000007040000f847", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r6, @fallback=0x3d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="ffff000000000000001f48716205f96c5bc68e0a26565900000000010000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00f1ff00bfa1000000b1519e7f4e8404b9ffffffbfa400000000000007040000f847", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r6, @fallback=0x3d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) socket$nl_route(0x10, 0x3, 0x0) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000080)=@ipv4_newroute={0x1c, 0x1a, 0x1, 0x70bd2c, 0x25dfdbfb, {0xa, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8}}, 0x1c}}, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000300)={r7}, 0xc) 4.305225055s ago: executing program 3 (id=5208): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$6lowpan_enable(r1, &(0x7f0000000080)='1', 0x1) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x40, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x25}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}]}], {0x14, 0x10}}, 0x88}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) write$6lowpan_enable(r1, &(0x7f0000000080)='1', 0x1) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x40, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x25}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}]}], {0x14, 0x10}}, 0x88}}, 0x0) (async) 4.220144725s ago: executing program 3 (id=5210): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x7fff}}]}, 0x38}}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x102, 0x0) close(r4) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$packet_drop_memb(r1, 0x107, 0x2, &(0x7f00000000c0)={r3, 0x1, 0x6, @remote}, 0x10) r7 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r7, &(0x7f0000000140)="ba", 0x1, 0x0, &(0x7f00000001c0)={0x11, 0x8100, r6, 0x1, 0xd8, 0x6, @random="98c8ca7122df"}, 0x14) r8 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) write$cgroup_subtree(r8, &(0x7f0000000040)={[{0x2b, 'cpu'}]}, 0x5) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[], 0x0, 0x26}, 0x28) r9 = socket$inet_mptcp(0x2, 0x1, 0x106) r10 = socket$kcm(0x21, 0x2, 0x2) sendmsg$inet(r10, &(0x7f0000002780)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1400000000000000100100200200000001000000001b000014000000000000001001000002"], 0x30}, 0x0) r11 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="3400000013000100000000000000000007000000", @ANYRES32=r12, @ANYBLOB="000000000000000014001a80100005800c000680"], 0x34}}, 0x4004082) connect$inet(r9, &(0x7f0000000100)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r9, 0x6, 0xd, &(0x7f00000003c0)='cubic', 0xb) setsockopt$sock_int(r9, 0x1, 0xc, &(0x7f0000000200), 0x4) ioctl$sock_FIOGETOWN(r11, 0x8903, &(0x7f0000000000)) 4.07229978s ago: executing program 0 (id=5213): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = socket$inet(0x2, 0x2, 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x20, 0x10, 0x10, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad}}, 0x20}}, 0x40040) r3 = accept(r0, &(0x7f0000000180)=@generic, &(0x7f0000000080)=0x80) sendmsg$L2TP_CMD_SESSION_GET(r3, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="2ccbefc1ffa275f6a8fd73a78cab3ad87b35d50bfd0a64de86ebc84a3def45737695bf1da2a56533d42e1bbcbbf1be44ab66ba406822f3caee30ed4b33c370b1f25bc98c3b3a00bb7d0afc2ebd9308072a5710411cfd3eeaa3c85d6b9a4b27a4e5", @ANYRES16=0x0, @ANYBLOB="200026bd7000fbdbdf250800000008001800e000000105001200030000000500140009000000"], 0x2c}, 0x1, 0x0, 0x0, 0x20004810}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080010000000e8fe55a1180015000600142603600e120500210007000401a8001600a400014020000300036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffec", 0xbd}], 0x1}, 0x0) r6 = socket(0x10, 0x803, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000300)={'team_slave_1\x00', 0x0}) r9 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_SIOCETHTOOL(r9, 0x8946, &(0x7f0000000480)={'veth1_to_bond\x00', &(0x7f0000000400)=@ethtool_coalesce={0xe, 0x8, 0x0, 0x9, 0x3, 0x7, 0x6, 0x18000000, 0x2, 0x9, 0x8, 0x4, 0x6e0, 0x4, 0x7, 0x5, 0x8000, 0x8, 0x743, 0x23, 0x4, 0x5, 0x10000}}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000001100)={&(0x7f0000000640)=@newtfilter={0x48, 0x2c, 0xd2b, 0x70bd29, 0x35dfdbfb, {0x0, 0x0, 0x0, r8, {0xffe0}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_matchall={{0xd}, {0x14, 0x2, [@TCA_MATCHALL_FLAGS={0x8, 0x3, 0x1}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0xe, 0xffe0}}]}}]}, 0x48}}, 0x24040084) socket$nl_netfilter(0x10, 0x3, 0xc) r10 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000027c0)=ANY=[@ANYBLOB="040000000400000004000000050001"], 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r11, 0x58, &(0x7f0000000680)={0x0, 0x0}}, 0x10) r13 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000003c0)={r12, 0x0, 0x10}, 0xc) close(r13) recvmmsg(r10, &(0x7f000000a1c0)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x8020, 0x0) sendmsg$802154_dgram(r10, &(0x7f000000b8c0)={&(0x7f000000b800)={0x24, @long={0x3, 0xffff, {0xaaaaaaaaaaaa0102}}}, 0x14, &(0x7f000000b880)={0x0}, 0x1, 0x0, 0x0, 0x20000011}, 0x0) r14 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r14, 0x29, 0x40, &(0x7f0000000f40)=@raw={'raw\x00', 0x8, 0x3, 0x478, 0x1c0, 0xffffffff, 0xffffffff, 0x1c0, 0xffffffff, 0x3a8, 0xffffffff, 0xffffffff, 0x3a8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@remote, @loopback, [0xff, 0x0, 0xff, 0xff], [0xffffffff, 0xff, 0xff], 'team_slave_0\x00', 'netdevsim0\x00', {}, {0xff}, 0x29, 0x3, 0x0, 0x60}, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x9, 0x2, 0x24, 0x0, 'syz0\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x1c8, 0x1e8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x1, 'syz0\x00', 0xfe}}, @common=@mh={{0x28}, {"b11c", 0x1}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) sendmsg$netlink(r6, 0x0, 0x4000841) getsockopt$inet6_mptcp_buf(r4, 0x11c, 0x4, &(0x7f0000002fc0)=""/4096, &(0x7f0000000040)=0x1000) setsockopt$inet_int(r1, 0x0, 0x13, 0x0, 0x0) 3.324262669s ago: executing program 1 (id=5222): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffe}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000180)='syzkaller\x00', 0x8, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) (async) r1 = accept4$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14, 0x800) (async) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x29, 0x4, 0x0, 0x0, 0x20, @loopback, @mcast1, 0x8, 0x700, 0xff, 0x8}}) setsockopt$packet_drop_memb(r1, 0x107, 0x2, &(0x7f0000000140)={r3, 0x1, 0x2, @broadcast}, 0x10) 3.311797499s ago: executing program 1 (id=5224): r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg$inet_sctp(r0, &(0x7f0000003900)=[{&(0x7f0000000000)=@in={0x2, 0x4e23, @local}, 0x10, &(0x7f0000000600)=[{&(0x7f00000001c0)='!', 0x1}], 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000008400c600614791d60000d19902000000"], 0x18, 0x4}], 0x1, 0x40010) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) (rerun: 32) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000800050067000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x3, 0x8, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000005c6f5823d2fe20630cc6457153a7a20035dffe04364d6594b5bbd050fcb38c59f9dd8d2adb504300a9920ab6a298273c905652e090fa9013a4b584d84ec147edf9124fd06e07d308f37aa55d9aaeed0cc19d18120bff6f3f2a64c19ff0ae466ee935306cb4587d01b03b677b9d3ea57706f0fbf942c243dbcc8d9f9894e82f20f02f2743b7f54c578fc90449590c97829c43f113c9a7498ee3752afa3e79dd3893eb59eceae492574b95d701e6938c37a600"/207, @ANYRES32=r2, @ANYBLOB="0000000000000000b7020000030000f4850000008600ddab5755ed0095"], &(0x7f0000000200)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r3, 0x27, 0x28, 0x0, &(0x7f00000002c0)="52e1119c000000002bf0543786dd", 0x0, 0x4007, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xe4776000) unshare(0x26020480) socket$pppoe(0x18, 0x1, 0x0) (async) setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, &(0x7f0000000000)=0x200012, 0x4) (async) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x5f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000240)='rxrpc_connect_call\x00', r4}, 0x18) (async, rerun: 32) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2000007, 0x42032, 0xffffffffffffffff, 0x100000000) (rerun: 32) r5 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) (async, rerun: 32) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) (async, rerun: 32) r7 = socket(0xa, 0x5, 0x0) getsockopt$inet_int(r7, 0x0, 0x16, 0x0, &(0x7f0000000140)) (async) setsockopt$CAN_RAW_FD_FRAMES(r7, 0x65, 0x5, &(0x7f0000000040)=0x1, 0x4) connect$bt_l2cap(r6, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) ioctl$sock_bt_hidp_HIDPCONNADD(r5, 0x400448c8, &(0x7f0000000280)={r6, 0xffffffffffffffff, 0x7ff, 0x0, 0x0, 0x9, 0x9a, 0x16bf, 0x5505, 0xc3b8, 0x1, 0x0, 'syz1\x00'}) ioctl$sock_bt_hidp_HIDPCONNDEL(r5, 0x400448c9, &(0x7f0000000000)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}) (async) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0xb, 0x0, &(0x7f0000000100)) sendmmsg$inet6(r1, &(0x7f0000000340)=[{{&(0x7f0000000240)={0xa, 0x4e21, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c, &(0x7f00000003c0)}}], 0x1, 0x931766f6119eed40) (async, rerun: 32) shutdown(r1, 0x1) (async, rerun: 32) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r1, 0x84, 0x78, &(0x7f00000003c0), 0x4) (async) unshare(0x2c060000) (async) unshare(0x2c020400) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.net/syz1\x00', 0x1ff) (async) socket$nl_route(0x10, 0x3, 0x0) 3.280970051s ago: executing program 2 (id=5225): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000080)={r0, 0x800, 0x9000000000, 0x8001}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000200)={'erspan0\x00', &(0x7f00000000c0)={'gretap0\x00', 0x0, 0x40, 0x10, 0x1, 0xb58, {{0x6, 0x4, 0x1, 0xf, 0x18, 0x66, 0x0, 0x3, 0x29, 0x0, @rand_addr=0x64010100, @broadcast, {[@ra={0x94, 0x4}]}}}}}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@bloom_filter={0x1e, 0x7, 0x1, 0x2, 0xe040, r1, 0x598, '\x00', r2, 0xffffffffffffffff, 0x4, 0x0, 0x4, 0xe}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r3, &(0x7f00000000c0), &(0x7f0000000000)=""/10, 0x2}, 0x20) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x38, 0x48, 0xe4945d2eb074039d, 0x0, 0x0, {}, [@IFAL_LABEL={0x8}, @IFAL_ADDRESS={0x14, 0x1, @mcast2={0xff, 0x5}}]}, 0x38}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000c80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19}, 0x42) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)={0x60, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private}}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x60}}, 0x0) r6 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r6, &(0x7f00000032c0)=[{&(0x7f0000000440)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x0) sendmmsg$inet_sctp(r6, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)='a', 0x1}], 0x1, &(0x7f0000000000)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0xc}}], 0x30}], 0x1, 0x0) bpf$MAP_GET_NEXT_KEY(0x3, &(0x7f00000001c0)={r3, &(0x7f0000000240), 0x0}, 0x20) 3.164144696s ago: executing program 2 (id=5226): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYRES32], 0x48) r1 = socket$key(0xf, 0x3, 0x2) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000030000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r3}, 0x18) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f0000000080)={0x28, 0x0, 0x2711}, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vxcan1\x00'}) r5 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r5, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0x0, 0xac14140c}}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000140)='C', 0x1}, {0x0}], 0x2, 0x0, 0x0, 0x900}, 0x60) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000feffffff000000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000100800085000000030000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x8, 0x1b, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYRES32], 0x48) (async) socket$key(0xf, 0x3, 0x2) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000030000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r3}, 0x18) (async) socket$vsock_stream(0x28, 0x1, 0x0) (async) connect$vsock_stream(r4, &(0x7f0000000080)={0x28, 0x0, 0x2711}, 0x10) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vxcan1\x00'}) (async) socket$kcm(0xa, 0x3, 0x3a) (async) sendmsg$kcm(r5, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0x0, 0xac14140c}}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000140)='C', 0x1}, {0x0}], 0x2, 0x0, 0x0, 0x900}, 0x60) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000feffffff000000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000100800085000000030000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x8, 0x1b, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) (async) 3.163674643s ago: executing program 3 (id=5227): r0 = socket(0x2a, 0x2, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r1, 0x89f1, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000300)=@ethtool_rxnfc={0x2f, 0x2, 0x6, {0xe, @usr_ip6_spec={@empty, @dev={0xfe, 0x80, '\x00', 0x24}, 0xfffffff8, 0x3d, 0xe}, {0x0, @remote, 0xe, 0x4, [0x7, 0x6]}, @ah_ip4_spec={@remote, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x5}, {0x0, @broadcast, 0x8, 0x5, [0xf, 0x9]}, 0xff, 0x3}}}) socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) socket$rds(0x15, 0x5, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r3, &(0x7f0000000200), 0x806000) writev(r3, 0x0, 0x0) writev(r3, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) ppoll(&(0x7f0000000500)=[{r2}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) r7 = socket$inet(0xa, 0x801, 0x84) connect$inet(r7, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r7, 0x8) r8 = accept4(r7, 0x0, 0x0, 0x80000) recvmmsg(r8, &(0x7f0000003dc0)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000040)=""/94, 0x5e}], 0x1}, 0x5076}], 0x1, 0x20, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f0000000040)={'syztnl2\x00', &(0x7f0000000200)={'sit0\x00', 0x0, 0x40, 0x7800, 0x7, 0x7, {{0x1b, 0x4, 0x1, 0x1, 0x6c, 0x64, 0x0, 0x1, 0x4, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, {[@lsrr={0x83, 0x23, 0x6b, [@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @remote, @multicast1, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @multicast2]}, @ssrr={0x89, 0xb, 0x9, [@multicast1, @local]}, @timestamp={0x44, 0xc, 0x8e, 0x0, 0x2, [0x9, 0x6]}, @rr={0x7, 0xb, 0x78, [@multicast1, @local]}, @timestamp={0x44, 0x10, 0x79, 0x0, 0x4, [0x0, 0x0, 0xfff]}]}}}}}) unshare(0x62040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r9 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f0000000a00)=@raw={'raw\x00', 0x3c1, 0x1a6cc7, 0x390, 0x1d0, 0x5802, 0x294, 0x0, 0x294, 0x310, 0x378, 0x378, 0x310, 0x378, 0x3, 0x0, {[{{@ipv6={@mcast2, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, [0xffffff00, 0xff, 0xff000000, 0xff000000], [0xff, 0xff, 0xff, 0xff000000], 'veth0_to_hsr\x00', 'vlan0\x00', {0xff}, {0xff}, 0x0, 0x0, 0x2, 0x80}, 0x0, 0xa8, 0x1d0, 0x52020000}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0xe5f6, 'system_u:object_r:etc_aliases_t:s0\x00'}}}, {{@ipv6={@loopback, @remote, [], [0x0, 0x0, 0x0, 0xffffffff], 'ip6erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x81}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x3, 0x1, 0x0, 'netbios-ns\x00', {0x5}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3f0) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000000)=ANY=[@ANYBLOB='fi'], &(0x7f0000000100)=0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r5, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, 0x0, 0x0) 3.128213614s ago: executing program 0 (id=5228): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r1 = socket$rds(0x15, 0x5, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') (async) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f00000003c0)={0xb, 0x4, {0x6d07, @struct={0x7ff, 0x6}, 0x0, 0x4213, 0x9, 0x80000000, 0xfffffffffffffffe, 0x1, 0x10, @usage=0x5, 0x7, 0x8, [0xc99, 0x7fff, 0x1, 0x100000001, 0xffffffffffffffff, 0x8000000000000000]}, {0x100000001, @struct={0xef, 0x4000000}, 0x0, 0x80000000, 0x2, 0x8, 0x8, 0x15d8, 0x4, @struct={0x547c, 0xfff}, 0x4, 0x4, [0x0, 0x5, 0x3, 0x7, 0xa02, 0x8]}, {0x1, @usage=0xd1, 0x0, 0xe1df, 0x4, 0x1, 0x5, 0xf, 0x28, @usage=0x6, 0x3, 0x80000000, [0x6, 0x2, 0x3, 0x9, 0x0, 0xdc]}, {0x80, 0x6, 0x8}}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88adfda5, 0x8004}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TTL_INHERIT={0x5, 0xc, 0x1}, @IFLA_GENEVE_TOS={0x5, 0x4, 0xe}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async) ioctl$BTRFS_IOC_SCRUB(r1, 0xc400941b, &(0x7f00000007c0)={r2, 0x8001, 0x1, 0x1}) (async, rerun: 64) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) (rerun: 64) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) (async) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)=ANY=[@ANYBLOB="b40000001900010000000000000000001d0109004d0011806f9886ff8308eb1d7c03414adb7fa1c790a421ea2a089f6ab00ada4e5605b2e7"], 0xb4}, 0x1, 0x0, 0x0, 0x8000}, 0x0) (async) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xb, &(0x7f0000000100)=ANY=[@ANYBLOB="180800ec0c00000000000000000000001801000020"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="0000000000000000400012800c0001"], 0x68}}, 0x0) (async) r7 = socket$igmp6(0xa, 0x3, 0x2) (async, rerun: 64) r8 = socket$kcm(0x2, 0xa, 0x2) (rerun: 64) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r7, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) (async) r9 = socket(0x2, 0x80805, 0x0) getsockopt$bt_hci(r9, 0x84, 0x7f, 0x0, &(0x7f0000000000)) (async, rerun: 32) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) (rerun: 32) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r10, 0x0) (async) write$tun(r5, &(0x7f00000001c0)=ANY=[@ANYRESOCT=r10, @ANYRES32, @ANYRES64=0x0, @ANYRES64=r6, @ANYRESHEX=r3, @ANYRES8=r9], 0x72) (async) r11 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r11, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x700, 0x0, 0x0, 0x8, 0x4, 0x1}, 0x20) (async) r12 = socket(0x28, 0x800, 0x40004) ioctl$sock_SIOCGIFINDEX(r12, 0x400261f2, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000000)='ext4_fc_track_inode\x00', 0xffffffffffffffff, 0x0, 0x1}, 0x18) getsockopt$inet_IP_IPSEC_POLICY(r12, 0x0, 0x10, 0x0, &(0x7f0000000380)) 3.078543776s ago: executing program 2 (id=5229): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmmsg$inet(r0, &(0x7f0000001880)=[{{&(0x7f0000000d00)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000f40)=[{&(0x7f0000000e80)="66a42e", 0x3}, {0x0}], 0x2}}, {{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000001380)='$`^', 0x3}], 0x1}}], 0x2, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000180)=0x20800001, 0x4) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r3, &(0x7f0000000140)={0xa, 0x4e22, 0xfffffffd, @empty}, 0x1c) listen(r3, 0x0) shutdown(r3, 0x0) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r4, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e22}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040059}, 0x1) 2.991996468s ago: executing program 1 (id=5230): r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000040)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010", @ANYRES8=r0], 0x10b8}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="2c0000000001010200000000000000000300000001000180140001800800014064010100080002000a010100"], 0x2c}}, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4000) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x0, @none, 0x0, 0x1}, 0xe) setsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0xf, &(0x7f0000000080), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r3, 0x29, 0xb, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r3, &(0x7f00000006c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) socket$inet_mptcp(0x2, 0x1, 0x106) recvmmsg(r3, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newsa={0x184, 0x10, 0x713, 0x0, 0x0, {{@in=@broadcast, @in6=@remote}, {@in=@empty, 0x0, 0x32}, @in=@dev, {0x0, 0xfffffffffffffffe, 0x7}, {}, {}, 0x0, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'chacha20\x00'}}}, @algo_auth_trunc={0x4c, 0x14, {{'hmac(md5)\x00'}, 0x0, 0x40}}]}, 0x184}}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x2, 0x300) close(0x3) 2.991771833s ago: executing program 4 (id=5231): r0 = socket(0x10, 0x3, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="400000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES64=r0], 0x40}}, 0x0) preadv(r1, &(0x7f0000000b80)=[{&(0x7f0000000100)=""/166, 0xa6}], 0x1, 0x1200000, 0x23) 2.932882873s ago: executing program 0 (id=5232): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000580)={'hsr0\x00', 0x2}) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r3, {0xfff2, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) socket(0x1e, 0x3, 0x718f40d4) socket$unix(0x1, 0x1, 0x0) (async) r4 = socket(0x15, 0x5, 0x0) getsockopt(r4, 0x200000000114, 0x2714, 0x0, &(0x7f0000000000)) (async) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r5, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8002000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="000227bd7000fbdbdf250100000008000100000000000c00080080000000000000000c00040015090000000000000c0003000100000000000000"], 0x40}, 0x1, 0x0, 0x0, 0x4000095}, 0x80) (async) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x10, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000005000000000000008000000018000000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000070000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'veth1_vlan\x00'}) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) (async) socket$can_j1939(0x1d, 0x2, 0x7) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'vxcan1\x00'}) (async) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000f3ff0000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r9}, 0x18) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r10) (async) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) (async) r11 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000005c0)='./cgroup/syz0\x00', 0x200002, 0x0) openat$cgroup_devices(r11, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) (async) socket$inet6_udp(0xa, 0x2, 0x0) 2.906046096s ago: executing program 2 (id=5233): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="00000000801c0000df25000c0022800400008004000080c2dd374a5194400565e54e5eae75060fb54f9809000000bc216fa7440fe81f4a29a94c62b11c299603000000ad0778b5aa4fa29efb062ebadf8056d9ea876ffcfc2fb5123ee0fa8d27f9e1ad190519aeee1b7c7c6a311287d4eda8022239665973f85c7479d57da48e24cd4f6c24fc9813eba4ba13354bb912ea92a60b2ae59cf310cb30bbdb888c7dd75be558876046b8d42a67aed9a6bc1059536e260991ec79b1aa2dbdd6c1fffffecb0b225b178ab56b2b29ee3c6754ce7ae8316e045c78d5c1a760789381500306f03cc528e4a482b295883df58e76507ccd3b7832f0e57a"], 0x28}, 0x1, 0x0, 0x0, 0x20008000}, 0x20040004) r2 = socket$unix(0x1, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x10, &(0x7f0000000240)=0x8000, 0x4) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/pid_for_children\x00') r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={0x0}, 0x1, 0xba01, 0x0, 0x4004001}, 0x4000000) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02}) readv(r5, &(0x7f00000001c0)=[{&(0x7f0000001400)=""/227, 0xe3}], 0x1) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local}) unshare(0x6a040000) socket$packet(0x11, 0x3, 0x300) socket$kcm(0x2, 0x3, 0x2) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYRES16, @ANYRESDEC=r2, @ANYRESHEX=r0], 0x3c}, 0x1, 0x2, 0x0, 0x20008804}, 0x8000) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$int_in(r2, 0x5421, &(0x7f0000000340)=0xfff) connect$unix(r2, &(0x7f0000000080)=@abs={0x1, 0x0, 0x4e24}, 0x6e) 2.696032008s ago: executing program 4 (id=5234): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000004c0)=0x0) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000500)=r1) r2 = accept4(0xffffffffffffffff, &(0x7f0000000180)=@can, &(0x7f0000000040)=0x80, 0x800) r3 = accept4$inet6(r2, 0x0, &(0x7f0000000200), 0x800) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x13, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a4000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000006b00000095"], &(0x7f0000000880)='syzkaller\x00', 0x6, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) setsockopt(r3, 0x4b1, 0x8, &(0x7f0000000240)="edb38a004466a2c2d63e6335ec630fd9f41493762b68db4c4bac14f9a25dbbb5f26b9c8d316b6e4aebe6a9988ce05daab1f03d48c63e3243eccf7b767f983ac14515ba39b2a1e58f7021c6131330088d27830394d6ff472f759bd5bcd5bd6f600cf7eddf14240f19798c5fcff4a7743cd16cc176b71b7c84ed62d30293e96b9954188848a15e2c350c8288160f890e84e0a7e4b2f92b0d69602cdf771ecdb72aee169e73ae7111ba9fe675ba577105f3fe570ad83529d148cd2bf6927d8886640687fe3293d3dbd6d081f1c529f8937331", 0xd1) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_RADAR_DETECT(r2, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x60, 0x0, 0x7184b024ce793c48, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0xc, 0xc}}}}, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10000}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x8000}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xe}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xbb}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2a6}]}, 0x60}, 0x1, 0x0, 0x0, 0x2004c844}, 0x40040) 2.690574027s ago: executing program 1 (id=5235): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x6, [@var={0x4, 0x0, 0x0, 0xe, 0x4}, @func_proto, @typedef={0x0, 0x0, 0x0, 0x10, 0x4}, @volatile={0x0, 0x0, 0x0, 0x9, 0x3}]}, {0x0, [0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x52, 0x0, 0x0, 0x21000000}, 0x20) 2.629444049s ago: executing program 0 (id=5236): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r0, 0x0, 0xd76}, 0x18) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCINQ(r2, 0x541b, &(0x7f0000000000)) (async) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)={0x1c, 0x21, 0x9, 0x2, 0x25dfdbff, {0x2}, [@typed={0x8, 0x8, 0x0, 0x0, @fd=r1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) 2.483926001s ago: executing program 4 (id=5237): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000340)=@filter={'filter\x00', 0x42, 0x4, 0x2c8, 0xffffffff, 0x198, 0x198, 0x0, 0xffffffff, 0xffffffff, 0x230, 0x230, 0x230, 0xffffffff, 0x4, 0x0, {[{{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffff00, 0x0, 'syz_tun\x00', 'syzkaller1\x00', {}, {}, 0x6, 0x1, 0x4c}, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}, {{@ip={@multicast2, @remote, 0x0, 0x0, 'veth1_macvtap\x00', 'tunl0\x00'}, 0x0, 0xa0, 0x100, 0x0, {0x60010000}, [@common=@ah={{0x30}, {[0x1]}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @empty, 0x0, 0x9, [0x16, 0x0, 0x0, 0x0, 0x1c, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x100]}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x3, 0x3d}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x328) socket$inet6_udplite(0xa, 0x2, 0x88) (async, rerun: 32) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x14, 0x4, 0x4, 0x22}, 0x48) (async, rerun: 32) r1 = socket(0x2, 0x80805, 0x0) (async, rerun: 32) socket$netlink(0x10, 0x3, 0x10) (async, rerun: 32) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) (async, rerun: 64) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async, rerun: 64) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r2, 0x112, 0xa, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r4, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r6, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) (async) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0xff, r6}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) (async) r7 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f00000001c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x50}, @printk={@d, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xb0}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000100)={0xfffc, 0x2, 0x5, 0x5, r8}, 0x10) (async) r10 = socket(0x2a, 0x2, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r10, 0x6, 0xd, &(0x7f0000000000)='hybla', 0x5) getsockname$packet(r10, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {0x23, 0x1}, {0xffff, 0xffff}, {0xe, 0xd}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newtfilter={0x44, 0x2c, 0xd2f, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {0x0, 0xfff1}, {}, {0x7}}, [@filter_kind_options=@f_route={{0xa}, {0x14, 0x2, [@TCA_ROUTE4_FROM={0x8, 0x3, 0xe2}, @TCA_ROUTE4_TO={0x8, 0x2, 0x1}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0xc044}, 0x40) (async) r12 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_mtu(r12, 0x29, 0x17, 0x0, 0x0) 2.483270205s ago: executing program 0 (id=5238): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = socket$inet(0xa, 0x801, 0x84) listen(r4, 0x8) socket$inet(0xa, 0x801, 0x84) ioctl$PPPIOCSMAXCID(r1, 0x40047451, &(0x7f0000000540)=0x2) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a5050000000077d8f3b423cdac8d80000000000000002be16ad10a48b243ccc42606d25dfd73a015e0ca7fc2506a0f7535f7866907dc0200000000000000ae669e17fd6587d452d6453559c3421eed73d56615fe6c54c3b3ffe1b4ce25d7c983c044c03bf3a48dfe47ec9dd6c091c30b93bfae76d9ebacd3ed3e26e7a23129d6606fd28a69989d552af6bda9df2c3af36effff9af2551ce896165127cb3f011a7d06602e2fc40848228567ffb400000000003ed38ae89d24e1cebfba2f87925bfacba83109751fe6c05405d027edd68149ee99eef6a6992308a4fc0b7c70bc677d6dd4aed4af7500d7900a820b6347184e9a217b5614cd50cbe43a1ed2526814bc0000e9e086ce48e90defb6670c3df2624f56da648d28ad0a97aec7291c25447c106a99893e10db21901eb397b2f5fd71400fa7a050fbbef9e326ea27e513e96068fd1e8a43e89f9c85c822a961546ed5363c17ff1432d08806bc376e3e49ee52b59d13182e1f24ed200ada10eb1affb87ba55b2d72078e9f40b4ae7d01000000d11cd22c35d32940000088dde499000000fdffffff00000000000f000000ef0000000000000000000000000c52f4ebd2c893bb97a068bd10734a83584898eccb26f7b789cfc4cd995fa3e11a5c74c85404e2df3ad37b729ac83b0dcb4f48f3c3356b9997fc455a17690b6f7f9ccbe4b1701941b18aba6b16455a66c3b84b138efc20a546d3d5227e23b03f2a834391ade2ff3e93ee296c4082ee73e7c353312c9d75711ce1623e9c54bdff59d2a69dcb7d84c235b23a4480c2461b405cfd1a38992f295ad3adc94cd07c850d1ce6d0b2fea02c24e9280333152fb794e4ddea02017a6c139b50101caecaf2abc0847a1ff2f7fc3c2b99a96fc4275ad107274e2934a87a4ddcdb112754ca5bdec0ead14b6c0f19a43a2f05c7f0be31491eb8c9ff68236c8600040000000000000000000066e034c81c3cab64e4fc8dc55ce0ada18dcbf31c6e82893add3bee3e10fc873d1d922b0877cbcd95b839d3059d5140a1f742f6e75741e39e5cb6a193e06a1043375b0f61b5d4e17c81baa31b924d84f224baf1221c15fa12313ffbfa7c2730309f66705b71e6205e7cbf3643561eabb9a63fcd604d5cc27e1317ad94cf438d71873e540be16b6ca205081173bd03c4754fc4674812daab482fd390a1c903b5d28a1eb247b5837d7603b92495d5c569f6433c3fca5206cb0000003fdbbd3892c52c2e7612e05de32322e980a3d69931e2c9312dd517c96f2ee90362476ed853c4c9b7d4ebf13cbaa795860e92a3d7d004f2c491db38eb769f094d5d48b262cc35c40682138cf13a49aa9f27abec00"], &(0x7f0000000680)='syzkaller\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) ppoll(&(0x7f0000000500)=[{r5}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x400, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) accept(r3, &(0x7f00000000c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x0) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}, 0x1c) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x2001001000000000}}, 0x1c) shutdown(r3, 0x2) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b80)={0x2, 0x5c, &(0x7f00000002c0)=ANY=[@ANYBLOB="a9000000000800000100004000000000310dee6710b7c30030246f4b87595042b4a02d5bb1db718b3eb14c03c22cb435f0e179cb5ad476155f63ac7da8227fe43adc65377c811dbdd197dbd62f9afaa172ade411e9c0ade4225cc3ab21869bdc"], &(0x7f0000000040)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, 0x2a}, 0x94) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="54000000020601040010000000000000050000000500010007000000050005000a0012000500040000000000110069702c6d61726b0000000011000300686173683a6e65742c6e6574020000005dbea6b45cda795639c4b25597804b8387dd62cde2d123d89531f43674cbe57deab1e5db673df74e40a692ea76fd1d85ea838c5be73249b8ba43675542a1713a1bf768bcd4f0d49c46cbc31116334a6eeccdd0714be269caa74a3b4ba377e7a96fae93fd5fa9dfebd50f3c"], 0x54}, 0x1, 0x0, 0x0, 0x20046044}, 0x0) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)=ANY=[@ANYBLOB="180100002e"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0xedc623580215bdcd, 0x12, r1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000010c30000000003000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000116608000000000000180000000000000000000000000010009500000000000000360a020000000001180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xa, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x78) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=ANY=[@ANYBLOB="2400000040008b102a4b0701000000005006000006000000040000000c000180080020009899045e"], 0x24}, 0x1, 0x0, 0x0, 0x48800}, 0x0) 2.350445357s ago: executing program 1 (id=5239): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x17, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000800000218110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018010000696c6c0000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000060000008500000006000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xfca804a0, 0xe, 0x0, &(0x7f00000002c0)="b80000050000000080919356c39e", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) ioctl$int_in(r2, 0x5421, &(0x7f0000000100)=0x9) connect$inet(r2, &(0x7f0000000280)={0x2, 0x0, @dev}, 0x10) close(r2) 2.314825997s ago: executing program 4 (id=5240): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x4c}}, 0x20000040) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r1 = epoll_create1(0x0) syz_init_net_socket$llc(0x1a, 0x801, 0x0) close(0x4) r2 = socket(0x1, 0x80802, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000100)={0xa000000d}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f00000000c0)={0x10000001}) epoll_pwait(r3, &(0x7f0000000080)=[{}], 0x1, 0x80000000, 0x0, 0x0) close(r3) shutdown(r2, 0x0) close(r1) 2.168109007s ago: executing program 1 (id=5241): bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001d40)=@base={0x12, 0x1, 0x4, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r2}, &(0x7f0000000040), &(0x7f0000000140)=r1}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r2}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)=r1}, 0x20) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000000100)=0x3, 0x4) connect$rxrpc(r0, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x8, @multicast2}}, 0x24) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000018c0)=ANY=[@ANYBLOB="3c110000100013040006000000dbdf25fe800004000000120000000000000000ac1414bb000000000000000006"], 0x113c}}, 0x4000080) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/syz0\x00', 0x1ff) sendmmsg(r0, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}], 0x1, 0x0) recvmmsg(r0, &(0x7f0000000d00), 0xf000, 0x10002, 0x0) shutdown(0xffffffffffffffff, 0x1) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r3, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r3, 0x5) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f0000000000)=0x2) ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f00000000c0)={0xfe55, 0xfffffffffffffffc}) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r5, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) accept(r3, 0x0, 0x0) 2.165842395s ago: executing program 3 (id=5242): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)={0x1c, r4, 0x713, 0x70bd2b, 0x25dfdbff, {{}, {@void, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x1e9a}]}, 0x1c}, 0x1, 0x0, 0x0, 0x884}, 0x40020) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r5) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f00000004c0)={'syzkaller0\x00', @link_local}) write$tun(r1, &(0x7f0000000000)=ANY=[], 0xc2) write$cgroup_devices(r2, &(0x7f0000000280)=ANY=[], 0xffdd) sendmsg$NFT_BATCH(r6, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20040000}, 0x0) 2.079560978s ago: executing program 4 (id=5243): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) r3 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000100)={@ipv4={'\x00', '\xff\xff', @multicast2}, 0x56, r2}) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r9 = accept4(r8, 0x0, 0x0, 0x0) sendmmsg$alg(r9, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b3", 0x40}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvfrom$x25(r9, &(0x7f0000000540)=""/118, 0x76, 0x40002061, 0x0, 0x0) r10 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r10, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0xffffffffffffff2e, &(0x7f0000000300)={&(0x7f0000000680)=@newqdisc={0x54, 0x24, 0xe0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x5}, {0xffff, 0xffff}, {0x2}}, [@TCA_INGRESS_BLOCK={0x0, 0xd, 0xd5}]}, 0x54}}, 0x0) sendto$packet(r6, &(0x7f0000000580)="44c394f305916c4516999da20800", 0x36, 0x0, &(0x7f0000000440)={0x11, 0x0, r11, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}, 0x14) r12 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$NFT_BATCH(r10, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000240)={&(0x7f0000000800)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_DELRULE={0x48, 0x8, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWSET={0x12dc, 0x9, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0xa}, [@NFTA_SET_EXPRESSIONS={0xd8, 0x12, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_LAST_MSECS={0xc, 0x2, 0x1, 0x0, 0x8}]}}}, {0x2c, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_QUEUE_NUM={0x6, 0x1, 0x1, 0x0, 0xece5}, @NFTA_QUEUE_SREG_QNUM={0x8}, @NFTA_QUEUE_FLAGS={0x6, 0x3, 0x1, 0x0, 0x2}]}}}, {0x24, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TARGET_NAME={0xe, 0x1, 'IDLETIMER\x00'}]}}}, {0x1c, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x8, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x4}]}}}, {0x1c, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_HASH_SEED={0x8, 0x5, 0x1, 0x0, 0x7}]}}}, {0x2c, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x2}, @NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0xa0}]}}}]}, @NFTA_SET_EXPR={0x28, 0x11, 0x0, 0x1, @flow_offload={{0x11}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}}}, @NFTA_SET_POLICY={0x8}, @NFTA_SET_EXPRESSIONS={0x11b4, 0x12, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @match={{0xa}, @void}}, {0x10, 0x1, 0x0, 0x1, @socket={{0xb}, @void}}, {0x10, 0x1, 0x0, 0x1, @lookup={{0xb}, @void}}, {0x10, 0x1, 0x0, 0x1, @payload={{0xc}, @void}}, {0x1c, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0xb1}]}}}, {0x1108, 0x1, 0x0, 0x1, @range={{0xa}, @val={0x10f8, 0x2, 0x0, 0x1, [@NFTA_RANGE_SREG={0x8, 0x1, 0x1, 0x0, 0xb}, @NFTA_RANGE_FROM_DATA={0x10ec, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x2b, 0x1, "72ac4548ce815ab33df7f63ffb8b45a62ffd3d9502b9a0dc44ae198cb38bfd217453fa4a726805"}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VERDICT={0x5c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}]}]}}}, {0x4c, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_CSUM_OFFSET={0x8}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x24}, @NFTA_PAYLOAD_CSUM_TYPE={0x8, 0x6, 0x1, 0x0, 0x2}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_PAYLOAD_CSUM_OFFSET={0x8, 0x7, 0x1, 0x0, 0xcbf}, @NFTA_PAYLOAD_CSUM_FLAGS={0x8}, @NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0xc}]}}}]}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xb}}}, 0x134c}, 0x1, 0x0, 0x0, 0x4000005}, 0x4000) ioctl$sock_inet6_SIOCSIFADDR(r12, 0x8916, &(0x7f0000000180)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x2d, r4}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newlink={0x50, 0x10, 0x503, 0x0, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2b206}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @gre={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_FWMARK={0x8, 0x14, 0x200}, @IFLA_GRE_LINK={0x8, 0x1, r4}, @IFLA_GRE_TTL={0x5, 0x8, 0x7f}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) 1.898348375s ago: executing program 2 (id=5244): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000000}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a7000000080000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000070000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) socket$nl_route(0x10, 0x3, 0x0) socket$alg(0x26, 0x5, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) bind$inet6(0xffffffffffffffff, 0x0, 0x0) write$cgroup_int(r2, &(0x7f0000000400)=0x8, 0x12) getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x14, 0x0, &(0x7f0000000440)) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x1}, 0x28) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x100000c, 0x2010, r2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$sock_SIOCETHTOOL(r4, 0x8946, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0xffff0000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000480)="b19ccccf84f531d9ec214627c11430c1", 0x20) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 1.72022827s ago: executing program 2 (id=5245): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0xa, 0x1, 0x0) getsockopt(r1, 0x1, 0x2f, &(0x7f0000001940)=""/8, &(0x7f0000000040)=0x8) (async) r2 = socket$netlink(0x10, 0x3, 0x14) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000040)={'bond0\x00', &(0x7f0000000300)=@ethtool_rxfh={0x1}}) (async) writev(r2, &(0x7f0000000240)=[{&(0x7f0000000180)="7be23ff941c6f28644d72bdebd3340ff200e48898a78f7a60c019788117d870e42c7131a796955afeb5677facd76c9945886dd6f199927cbee9523660931a9e58202f67bbadb78ccbf808ff2fe2db3b1a822428e37feeab6", 0x58}, {&(0x7f0000000000)="887d4c8cda3c17e59fe89d8683f4120369fda124bd426ba9371822bb48dea4b07129", 0x22}, {&(0x7f0000000340)="f3b6108827867c0f97123d47ddbb5e98345bf49a9f86cb36dfd2e33237f89ea4174f6f5e45d9e4fe6e39b6b287e9c1a284e8f305fae660f97e32400e37311614b45b4299a127bf2bdb056bb907eb108693004e7412b31e15723b3940bece818f156fa492fc43c6b3154317fceef3253534e01a56be6f84339ab40fe37240e30c20", 0x81}], 0x3) bind$alg(r2, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128l\x00'}, 0x58) (async) r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010027bd7000000000000100000008000100030000002c000480050003000100000005000300010000000500030080000000050003040000000005000300060000000800020003"], 0x50}}, 0x20000000) 1.412109113s ago: executing program 0 (id=5246): socket$inet_udp(0x2, 0x2, 0x0) (async) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f00000026c0)={r0, 0x10000, 0x3ff, 0x7}) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000002700)="1c1c3facd54bb52ab1deca488569db2dfea320d6988410d23a502d3ebbd8a1ab4a2a2bd4d83e0cd7ec1ab76a7459e320d0aef0642846f2c1", 0x38) (async) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000002700)="1c1c3facd54bb52ab1deca488569db2dfea320d6988410d23a502d3ebbd8a1ab4a2a2bd4d83e0cd7ec1ab76a7459e320d0aef0642846f2c1", 0x38) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000180)={0x2, '\x00', 0x5}, 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000000000000100000520000000000000000500"/50], &(0x7f0000000280)=""/4082, 0x32, 0xff2, 0xa, 0x2}, 0x28) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r4, 0x29, 0xb, 0x0, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) (async) socket$inet_sctp(0x2, 0x5, 0x84) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000206010800000000000000000000000014000780080011400000000005001500340db7490500010006000000050005000a00000005000400000000000900020073797a300000000016000300686173683a6e65742c706f72742c6e6574"], 0x64}}, 0x0) (async) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000206010800000000000000000000000014000780080011400000000005001500340db7490500010006000000050005000a00000005000400000000000900020073797a300000000016000300686173683a6e65742c706f72742c6e6574"], 0x64}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'wlan0\x00'}) ioctl(r6, 0x8b22, &(0x7f0000000040)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800010009000000000000000a00000000000000080001000200000004000b"], 0x24}}, 0x0) (async) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800010009000000000000000a00000000000000080001000200000004000b"], 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001600)=@newqdisc={0x44, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_SPLIT_GSO={0x8}, @TCA_CAKE_MEMORY={0x8, 0xa, 0x4}]}}]}, 0x44}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@delnexthop={0x28, 0x69, 0x503, 0x0, 0x0, {}, [{0x8, 0x1, 0x2}, {0x8, 0x1, 0x1}]}, 0x28}}, 0x0) socket$kcm(0x29, 0x0, 0x0) (async) r7 = socket$kcm(0x29, 0x0, 0x0) socket$kcm(0x29, 0x7, 0x0) sendmsg$kcm(r7, &(0x7f0000002680)={&(0x7f0000000040)=@l2={0x1f, 0x1, @none, 0x4}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000180)="b664bde39b9c733afe19f84e005e1cdb02552b369c82e092f46dc774301434972fc30b8453fd126fb2cc5d36f133dc6aeee75b3cfb6804d2a2f5e22265841e4d9c079269377680b03ca883470b48f8ef1fcf0550b0792ffbe544ed0b56129789f8187af3a5828098f6a81652c21d12102cbe1c29f489889c70a000520338295ff744af0613", 0x85}, {&(0x7f0000000100)="82ddeff9276704a48968f7d49d00c61d5aa9d1d74a704ddcd099d440a1b8b54b46441090f09d8dc9c056077b14fea06a8f34", 0x32}, {&(0x7f0000001280)="9eb6646dfbfc489fd608a66ee314fe8c3141812b863f75f2f2d351298c983f59b0324852ff77f800ec9025efb0b7c977f8e8e1905cf01b1a27879370856a59d7658f179f81cdd65f54f21fa3c657d36ec1deef", 0x53}, {&(0x7f0000001300)="a09f972bf9c6dfc0fd75def7ce9fd9f5d0b9e9d0c13579735affc637455f0556fb5130d818436bb56cfea2615a8308a12fdb209410566b9450b2c1e6b7c1bc1d63909cf06af74477a1b3ff6aeab10d75f0119c", 0x53}], 0x4, &(0x7f0000002740)=ANY=[@ANYBLOB="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"], 0x12e8}, 0x4000) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="2c0000001a0001002abd7000fbdbdf250a808000000000000000000008001c00", @ANYRES32=0x0, @ANYBLOB="0800190032"], 0x7a}}, 0x20000050) 0s ago: executing program 3 (id=5247): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010028bd7000fbdbdf2505000000200001800d0001007564703a73797a320000007e320e0818000c0002800a"], 0x34}, 0x1, 0x0, 0x0, 0x48c05}, 0x4040140) sendto$unix(r0, &(0x7f0000000240)='\x00', 0x1, 0x4040081, 0x0, 0x0) recvfrom$unix(r0, 0x0, 0x0, 0x40000052, 0x0, 0x0) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), r1) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x90000004}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)={0x104, r3, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@WGDEVICE_A_PEERS={0xb0, 0x8, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e24, @rand_addr=0x64010102}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x4}]}, {0x4c, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0xde69, @private2={0xfc, 0x2, '\x00', 0x1}, 0x2}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0x7f, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7ff}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x6}]}, {0x38, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "8ddca3c4166a280779335036735080673774480f75e740efa23e1b49932bd8af"}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_FLAGS={0x8}]}]}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_PRIVATE_KEY={0x24}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}]}, 0x104}, 0x1, 0x0, 0x0, 0x4000000}, 0x4048010) close(0x4) kernel console output (not intermixed with test programs): n invalid length. [ 436.276262][T18562] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3246'. [ 436.303076][T18562] netlink: 'syz.0.3246': attribute type 6 has an invalid length. [ 436.327578][T18560] delete_channel: no stack [ 436.344080][T18560] RDS: rds_bind could not find a transport for fc01::1, load rds_tcp or rds_rdma? [ 436.433586][ T3005] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 436.452694][ T3005] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 436.554413][ T760] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 436.594480][ T760] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 437.323508][T18604] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3255'. [ 437.371985][T18608] netlink: 4456 bytes leftover after parsing attributes in process `syz.4.3257'. [ 437.393534][T18608] netlink: 4456 bytes leftover after parsing attributes in process `syz.4.3257'. [ 437.693775][T18627] netlink: 128 bytes leftover after parsing attributes in process `syz.4.3263'. [ 437.785345][ T5828] Bluetooth: hci3: command tx timeout [ 437.910042][T18643] netlink: 'syz.1.3269': attribute type 1 has an invalid length. [ 437.958929][T18646] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3270'. [ 438.023320][T18649] pimreg3: entered allmulticast mode [ 438.056332][T18645] lo speed is unknown, defaulting to 1000 [ 438.213906][ T5982] IPVS: starting estimator thread 0... [ 438.314327][T18653] IPVS: using max 33 ests per chain, 79200 per kthread [ 438.388911][T18640] lo speed is unknown, defaulting to 1000 [ 438.491266][T18662] netlink: 'syz.3.3274': attribute type 1 has an invalid length. [ 438.500718][T18662] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3274'. [ 439.829386][T18691] syzkaller1: entered promiscuous mode [ 439.835319][T18691] syzkaller1: entered allmulticast mode [ 439.950064][T18694] lo speed is unknown, defaulting to 1000 [ 439.987833][T18695] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3284'. [ 440.023415][T18689] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3282'. [ 440.377277][T18708] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3289'. [ 441.121198][T18753] : renamed from wg2 (while UP) [ 441.141246][T18750] netlink: 'syz.1.3299': attribute type 30 has an invalid length. [ 441.184207][T18748] bridge0: entered promiscuous mode [ 441.189530][T18748] macsec1: entered promiscuous mode [ 441.198806][T18748] bridge0: port 3(macsec1) entered blocking state [ 441.244509][T18748] bridge0: port 3(macsec1) entered disabled state [ 441.276811][T18748] macsec1: entered allmulticast mode [ 441.282390][T18748] bridge0: entered allmulticast mode [ 441.292695][T18748] macsec1: left allmulticast mode [ 441.301419][T18748] bridge0: left allmulticast mode [ 441.330536][T18748] bridge0: left promiscuous mode [ 441.377341][T18750] __nla_validate_parse: 2 callbacks suppressed [ 441.377361][T18750] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3299'. [ 441.419966][ T73] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 441.456008][ T73] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 441.465525][T18750] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3299'. [ 441.486242][ T73] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 441.500928][ T73] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 441.556639][T18773] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3308'. [ 441.603178][T18778] nbd: must specify a device to reconfigure [ 441.659349][T18770] gretap1: entered promiscuous mode [ 441.665113][T18770] gretap1: entered allmulticast mode [ 441.722522][T18787] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3312'. [ 441.735927][T18779] netlink: 348 bytes leftover after parsing attributes in process `syz.4.3309'. [ 441.820151][T18787] bridge_slave_1: left allmulticast mode [ 441.823083][T18788] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3311'. [ 441.858521][T18787] bridge_slave_1: left promiscuous mode [ 441.874017][T18787] bridge0: port 2(bridge_slave_1) entered disabled state [ 441.909635][T18787] bridge_slave_0: left allmulticast mode [ 441.916738][T18787] bridge_slave_0: left promiscuous mode [ 441.928081][T18787] bridge0: port 1(bridge_slave_0) entered disabled state [ 442.156875][T18789] syzkaller1: entered promiscuous mode [ 442.163953][T18789] syzkaller1: entered allmulticast mode [ 442.381860][T18798] lo speed is unknown, defaulting to 1000 [ 442.604389][T18823] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3320'. [ 442.764498][T18831] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3322'. [ 442.834739][T18830] team0: Device gtp0 is of different type [ 442.899082][T18801] lo speed is unknown, defaulting to 1000 [ 442.905217][T18835] netlink: 96 bytes leftover after parsing attributes in process `syz.4.3324'. [ 443.056229][T18841] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3327'. [ 443.308479][T18847] vlan2: entered promiscuous mode [ 443.313569][T18847] syz_tun: entered promiscuous mode [ 443.422844][T18862] netlink: 'syz.4.3332': attribute type 1 has an invalid length. [ 443.436449][T18862] Bluetooth: MGMT ver 1.23 [ 443.504919][T18865] netlink: 'syz.4.3333': attribute type 12 has an invalid length. [ 443.513504][T18864] netlink: 'syz.4.3333': attribute type 12 has an invalid length. [ 443.669359][T18872] netlink: 'syz.4.3336': attribute type 1 has an invalid length. [ 443.765497][T18872] tipc: Started in network mode [ 443.770399][T18872] tipc: Node identity , cluster identity 4711 [ 443.826676][T18875] netlink: 'syz.4.3336': attribute type 1 has an invalid length. [ 443.835112][T18872] tipc: Failed to set node id, please configure manually [ 443.835168][T18872] tipc: Enabling of bearer rejected, failed to enable media [ 444.151275][T18875] vlan2: entered allmulticast mode [ 444.156675][T18875] team0: entered allmulticast mode [ 444.162051][T18875] team_slave_0: entered allmulticast mode [ 444.168242][T18875] team_slave_1: entered allmulticast mode [ 444.332893][ T30] audit: type=1107 audit(1762870917.195:13): pid=18890 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='%^DQ [ 444.332893][ T30] 4N G' [ 445.378594][T18927] pim6reg99999999: entered allmulticast mode [ 445.625081][T18942] sctp: [Deprecated]: syz.2.3357 (pid 18942) Use of int in maxseg socket option. [ 445.625081][T18942] Use struct sctp_assoc_value instead [ 445.706677][T18944] Cannot find set identified by id 1 to match [ 445.724873][T18950] netlink: 'syz.1.3361': attribute type 1 has an invalid length. [ 445.732650][T18950] netlink: 'syz.1.3361': attribute type 3 has an invalid length. [ 445.740818][T18950] netlink: 'syz.1.3361': attribute type 2 has an invalid length. [ 445.750711][T18950] netlink: 'syz.1.3361': attribute type 3 has an invalid length. [ 445.812579][T18953] 8021q: adding VLAN 0 to HW filter on device bond2 [ 445.860854][T18953] bond2: (slave erspan0): Enslaving as an active interface with an up link [ 445.906809][T18955] bond0: entered promiscuous mode [ 445.911897][T18955] bond_slave_0: entered promiscuous mode [ 445.941606][T18955] bond_slave_1: entered promiscuous mode [ 445.957359][T18955] dummy0: entered promiscuous mode [ 445.965674][T18955] hsr1: entered promiscuous mode [ 445.970775][T18955] hsr1: entered allmulticast mode [ 445.976542][T18955] bond0: entered allmulticast mode [ 445.983409][T18955] bond_slave_0: entered allmulticast mode [ 445.989966][T18955] bond_slave_1: entered allmulticast mode [ 445.996893][T18955] dummy0: entered allmulticast mode [ 446.070726][T18964] pim6reg: entered allmulticast mode [ 446.100958][T18977] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 446.276980][T18990] netlink: 'syz.0.3373': attribute type 29 has an invalid length. [ 446.399420][T18997] vxcan0: entered allmulticast mode [ 446.615357][T19014] tipc: Enabled bearer , priority 0 [ 446.788583][T19030] __nla_validate_parse: 60 callbacks suppressed [ 446.788628][T19030] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3385'. [ 446.902567][T19014] syzkaller0: entered promiscuous mode [ 446.912322][T19014] syzkaller0: entered allmulticast mode [ 446.918848][T19014] tipc: Resetting bearer [ 446.921915][T19042] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3385'. [ 446.935773][T19012] tipc: Resetting bearer [ 447.122263][T19047] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3385'. [ 447.634418][T15368] tipc: Node number set to 470238825 [ 448.673953][T19012] tipc: Disabling bearer [ 448.740386][T19039] lo speed is unknown, defaulting to 1000 [ 449.099597][T19080] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3394'. [ 449.115411][T19084] netlink: 76 bytes leftover after parsing attributes in process `syz.0.3391'. [ 449.125689][T19084] netlink: 76 bytes leftover after parsing attributes in process `syz.0.3391'. [ 449.245547][T19083] lo speed is unknown, defaulting to 1000 [ 449.645957][T19088] validate_nla: 2 callbacks suppressed [ 449.645977][T19088] netlink: 'syz.1.3396': attribute type 13 has an invalid length. [ 449.660985][T19088] netlink: 'syz.1.3396': attribute type 17 has an invalid length. [ 449.968381][T19088] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 450.143962][T19109] netlink: 'syz.0.3402': attribute type 11 has an invalid length. [ 450.200506][T19111] ip6tnl0: Caught tx_queue_len zero misconfig [ 450.206327][T19112] netlink: 2 bytes leftover after parsing attributes in process `syz.0.3403'. [ 450.224405][T19112] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 450.763877][T19130] syzkaller0: entered promiscuous mode [ 450.769592][T19130] syzkaller0: entered allmulticast mode [ 450.890648][T19130] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 450.902432][T19130] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 450.934836][T19130] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 451.246986][T19154] netlink: 312 bytes leftover after parsing attributes in process `syz.3.3412'. [ 451.322320][T19156] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 451.411106][T19164] bond1: option fail_over_mac: invalid value (127) [ 451.426655][T19169] Cannot find set identified by id 0 to match [ 451.436670][T19164] bond1 (unregistering): Released all slaves [ 451.727185][T19193] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3424'. [ 451.755945][T19189] ip6_vti0: entered promiscuous mode [ 451.766127][T19189] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3418'. [ 451.820641][T19191] netlink: 'syz.1.3422': attribute type 4 has an invalid length. [ 451.851266][T19200] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 451.951664][T19198] netlink: 'syz.1.3422': attribute type 4 has an invalid length. [ 451.959982][T19191] netlink: 'syz.1.3422': attribute type 4 has an invalid length. [ 451.998256][T19186] lo speed is unknown, defaulting to 1000 [ 452.115925][T19206] pimreg1: tun_chr_ioctl cmd 1074025677 [ 452.145701][T19206] pimreg1: linktype set to 804 [ 452.458875][T19223] netlink: 'syz.4.3428': attribute type 2 has an invalid length. [ 452.474360][T19223] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3428'. [ 452.536131][T19225] FAULT_INJECTION: forcing a failure. [ 452.536131][T19225] name failslab, interval 1, probability 0, space 0, times 0 [ 452.584073][T19215] lo speed is unknown, defaulting to 1000 [ 452.602732][T19225] CPU: 1 UID: 0 PID: 19225 Comm: syz.0.3429 Not tainted syzkaller #0 PREEMPT(full) [ 452.602758][T19225] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 452.602775][T19225] Call Trace: [ 452.602782][T19225] [ 452.602791][T19225] dump_stack_lvl+0x189/0x250 [ 452.602830][T19225] ? __pfx____ratelimit+0x10/0x10 [ 452.602855][T19225] ? __pfx_dump_stack_lvl+0x10/0x10 [ 452.602876][T19225] ? __pfx__printk+0x10/0x10 [ 452.602900][T19225] ? __pfx___might_resched+0x10/0x10 [ 452.602923][T19225] should_fail_ex+0x414/0x560 [ 452.602953][T19225] should_failslab+0xa8/0x100 [ 452.602972][T19225] kmem_cache_alloc_noprof+0x74/0x6e0 [ 452.602995][T19225] ? security_file_alloc+0x34/0x330 [ 452.603020][T19225] security_file_alloc+0x34/0x330 [ 452.603043][T19225] init_file+0x93/0x2f0 [ 452.603064][T19225] alloc_empty_file+0x6e/0x1d0 [ 452.603083][T19225] alloc_file_pseudo+0x13d/0x210 [ 452.603104][T19225] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 452.603137][T19225] anon_inode_getfd+0xca/0x1b0 [ 452.603160][T19225] btf_new_fd+0x9aa/0xc90 [ 452.603177][T19225] ? apparmor_capable+0x137/0x1b0 [ 452.603203][T19225] ? __pfx_btf_new_fd+0x10/0x10 [ 452.603221][T19225] ? bpf_token_put+0x143/0x160 [ 452.603241][T19225] ? bpf_btf_load+0x126/0x190 [ 452.603261][T19225] __sys_bpf+0x3ed/0x860 [ 452.603280][T19225] ? __pfx___sys_bpf+0x10/0x10 [ 452.603312][T19225] ? ksys_write+0x22a/0x250 [ 452.603338][T19225] ? __pfx_ksys_write+0x10/0x10 [ 452.603366][T19225] __x64_sys_bpf+0x7c/0x90 [ 452.603391][T19225] do_syscall_64+0xfa/0xfa0 [ 452.603413][T19225] ? lockdep_hardirqs_on+0x9c/0x150 [ 452.603437][T19225] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 452.603454][T19225] ? clear_bhb_loop+0x60/0xb0 [ 452.603475][T19225] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 452.603497][T19225] RIP: 0033:0x7f42aed8f6c9 [ 452.603513][T19225] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 452.603528][T19225] RSP: 002b:00007f42afc60038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 452.603548][T19225] RAX: ffffffffffffffda RBX: 00007f42aefe5fa0 RCX: 00007f42aed8f6c9 [ 452.603561][T19225] RDX: 0000000000000020 RSI: 0000200000000140 RDI: 0000000000000012 [ 452.603572][T19225] RBP: 00007f42afc60090 R08: 0000000000000000 R09: 0000000000000000 [ 452.603582][T19225] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 452.603593][T19225] R13: 00007f42aefe6038 R14: 00007f42aefe5fa0 R15: 00007ffdde402468 [ 452.603624][T19225] [ 453.338707][T19242] lo speed is unknown, defaulting to 1000 [ 453.362042][T19245] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3434'. [ 453.709154][T19248] lo speed is unknown, defaulting to 1000 [ 454.018915][T19271] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 455.222526][T19291] No such timeout policy "syz1" [ 455.508471][T19308] tipc: Failed to obtain node identity [ 455.514359][T19308] tipc: Enabling of bearer rejected, failed to enable media [ 455.667334][T19313] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3450'. [ 456.012305][T19329] netlink: 'syz.4.3459': attribute type 23 has an invalid length. [ 456.044731][T19329] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3459'. [ 456.057806][T19331] openvswitch: netlink: Missing valid actions attribute. [ 456.066428][T19329] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3459'. [ 456.075882][T19331] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 456.307929][T19338] xt_hashlimit: size too large, truncated to 1048576 [ 456.347543][T19340] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3463'. [ 456.465527][T19347] netlink: 'syz.2.3463': attribute type 1 has an invalid length. [ 456.493510][T19347] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3463'. [ 456.907215][T19359] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3466'. [ 456.978997][T19363] netlink: 88 bytes leftover after parsing attributes in process `syz.1.3467'. [ 457.010399][T19365] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3469'. [ 457.222973][T19376] bridge0: entered promiscuous mode [ 457.233979][T19376] macsec1: entered allmulticast mode [ 457.239575][T19376] bridge0: entered allmulticast mode [ 457.257976][T19376] bridge0: port 3(macsec1) entered blocking state [ 457.284250][T19376] bridge0: port 3(macsec1) entered disabled state [ 457.297109][T19376] bridge0: left allmulticast mode [ 457.305966][T19376] bridge0: left promiscuous mode [ 457.424782][T19385] lo speed is unknown, defaulting to 1000 [ 457.524043][T19393] __nla_validate_parse: 3 callbacks suppressed [ 457.524062][T19393] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3477'. [ 457.960794][T19411] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3484'. [ 458.049709][T19413] netdevsim netdevsim1: Direct firmware load for failed with error -2 [ 458.087755][T19413] netdevsim netdevsim1: Falling back to sysfs fallback for: [ 458.111215][T19420] lo speed is unknown, defaulting to 1000 [ 458.237313][T19428] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3488'. [ 458.325525][T19430] netlink: 'syz.1.3488': attribute type 5 has an invalid length. [ 458.356292][T19430] netlink: 'syz.1.3488': attribute type 5 has an invalid length. [ 458.450989][T19432] dvmrp0: entered allmulticast mode [ 458.691301][T19428] lo speed is unknown, defaulting to 1000 [ 458.710356][T19435] netlink: 'syz.4.3490': attribute type 30 has an invalid length. [ 458.797291][T19435] bond1: option arp_missed_max: invalid value (0) [ 458.803936][T19435] bond1: option arp_missed_max: allowed values 1 - 255 [ 458.815406][T19435] bond1 (unregistering): Released all slaves [ 459.107457][T19439] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3492'. [ 460.024094][T19458] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3497'. [ 460.037989][T19458] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3497'. [ 460.257754][T19464] pim6reg1: entered promiscuous mode [ 460.263128][T19464] pim6reg1: entered allmulticast mode [ 460.552366][T19471] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input10 [ 460.635982][T19482] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3502'. [ 460.680633][T19485] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3503'. [ 460.735945][T19485] bridge0: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 460.825617][T19497] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3506'. [ 460.868329][T19496] netlink: 80 bytes leftover after parsing attributes in process `syz.4.3506'. [ 461.230177][T19521] lo speed is unknown, defaulting to 1000 [ 461.559051][T19541] lo speed is unknown, defaulting to 1000 [ 462.659347][T19585] tipc: Started in network mode [ 462.671787][T19585] tipc: Node identity ce0bc6b72028, cluster identity 4711 [ 462.683154][T19585] tipc: Enabled bearer , priority 0 [ 462.705741][T19585] syzkaller0: entered promiscuous mode [ 462.728573][T19585] syzkaller0: entered allmulticast mode [ 462.778227][T19585] tipc: Resetting bearer [ 462.798488][T19584] tipc: Resetting bearer [ 462.835619][T19584] tipc: Disabling bearer [ 463.061868][T19595] __nla_validate_parse: 5 callbacks suppressed [ 463.061885][T19595] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3532'. [ 463.123410][T19602] netlink: 348 bytes leftover after parsing attributes in process `syz.4.3535'. [ 463.237793][T19606] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3537'. [ 463.250046][T19606] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3537'. [ 463.297851][T19606] syzkaller1: entered promiscuous mode [ 463.303910][T19606] syzkaller1: entered allmulticast mode [ 463.326743][T19606] netlink: 88 bytes leftover after parsing attributes in process `syz.1.3537'. [ 463.730830][T19617] netlink: 'syz.1.3539': attribute type 12 has an invalid length. [ 464.220822][T19633] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3546'. [ 464.317828][T19640] IPVS: stopping backup sync thread 17035 ... [ 464.347498][T19617] tipc: Started in network mode [ 464.352415][T19617] tipc: Node identity 0ac6453b8c3f, cluster identity 4711 [ 464.371174][T19617] tipc: Enabled bearer , priority 0 [ 464.418020][T19646] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3550'. [ 464.646644][T19615] tipc: Disabling bearer [ 464.855403][T19673] netlink: 'syz.0.3553': attribute type 15 has an invalid length. [ 465.326981][T19694] sctp: [Deprecated]: syz.2.3559 (pid 19694) Use of int in max_burst socket option. [ 465.326981][T19694] Use struct sctp_assoc_value instead [ 465.347819][T19692] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3558'. [ 465.620679][T19707] netlink: 'syz.3.3562': attribute type 23 has an invalid length. [ 465.657497][T19709] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3564'. [ 465.895060][T19724] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3570'. [ 465.993669][T19720] netlink: 'syz.3.3566': attribute type 16 has an invalid length. [ 466.001642][T19720] netlink: 'syz.3.3566': attribute type 17 has an invalid length. [ 466.504935][T19720] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 466.537754][T19720] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 467.106725][ T2953] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 467.143884][ T2953] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 467.188490][ T2953] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 467.210148][T19757] lo speed is unknown, defaulting to 1000 [ 467.216212][ T2953] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 467.302312][T19767] tipc: Enabled bearer , priority 10 [ 467.318586][T19767] x_tables: duplicate underflow at hook 1 [ 467.635245][T19763] lo speed is unknown, defaulting to 1000 [ 467.972995][T19770] lo speed is unknown, defaulting to 1000 [ 468.108484][T19794] __nla_validate_parse: 5 callbacks suppressed [ 468.108503][T19794] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3585'. [ 468.280507][T19780] lo speed is unknown, defaulting to 1000 [ 468.419779][T19801] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3587'. [ 468.479356][T19801] bond1: (slave vxcan1): The slave device specified does not support setting the MAC address [ 468.491054][T19801] bond1: (slave vxcan1): Error -95 calling set_mac_address [ 468.514519][T19784] lo speed is unknown, defaulting to 1000 [ 469.090339][T19818] netlink: 'syz.0.3589': attribute type 12 has an invalid length. [ 469.355021][T19822] netlink: 'syz.0.3589': attribute type 4 has an invalid length. [ 469.555809][T19834] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.3595'. [ 469.587576][T19824] netlink: 'syz.1.3592': attribute type 4 has an invalid length. [ 469.634594][T19824] netlink: 'syz.1.3592': attribute type 4 has an invalid length. [ 469.753496][T19828] lo speed is unknown, defaulting to 1000 [ 469.850055][T19839] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.3597'. [ 470.309235][T19856] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3600'. [ 470.784806][T19861] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3602'. [ 470.807383][T19865] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3603'. [ 470.835404][T19865] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3603'. [ 470.863872][T19865] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 471.239918][T19873] gtp0: entered promiscuous mode [ 471.247084][T19873] gtp0: entered allmulticast mode [ 471.276660][T19875] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 471.297624][T19875] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3606'. [ 471.698314][T19894] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3610'. [ 471.735870][T19899] netlink: 'syz.4.3611': attribute type 10 has an invalid length. [ 471.840858][T19902] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 471.883434][T19902] netlink: 'syz.2.3612': attribute type 10 has an invalid length. [ 471.926458][T19902] 8021q: adding VLAN 0 to HW filter on device bond0 [ 471.958979][T19902] bond0: (slave wlan1): Opening slave failed [ 472.641511][T19942] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 472.661780][T19942] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 472.682115][T19942] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 472.698992][T19942] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 472.911693][T19945] 8021q: adding VLAN 0 to HW filter on device bond2 [ 472.979853][T19955] lo speed is unknown, defaulting to 1000 [ 473.204085][T19968] __nla_validate_parse: 4 callbacks suppressed [ 473.204103][T19968] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3626'. [ 473.335567][T19953] lo speed is unknown, defaulting to 1000 [ 473.602893][T19960] lo speed is unknown, defaulting to 1000 [ 474.113470][T19972] lo speed is unknown, defaulting to 1000 [ 474.179210][T19982] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3628'. [ 474.483999][T19978] lo speed is unknown, defaulting to 1000 [ 474.963683][T20003] xt_l2tp: v2 doesn't support IP mode [ 475.236481][ T30] audit: type=1804 audit(1762870948.105:14): pid=20005 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.3633" name="memory.events" dev="tmpfs" ino=991 res=1 errno=0 [ 475.271090][ T30] audit: type=1800 audit(1762870948.135:15): pid=20005 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.3633" name="memory.events" dev="tmpfs" ino=991 res=0 errno=0 [ 475.463527][T20010] tun0: tun_chr_ioctl cmd 1074025675 [ 475.472175][T20010] tun0: persist disabled [ 475.599545][T20009] tun0: tun_chr_ioctl cmd 1074025675 [ 475.605539][T20009] tun0: persist enabled [ 476.028071][T20016] lo speed is unknown, defaulting to 1000 [ 476.076019][T20023] ipt_REJECT: TCP_RESET invalid for non-tcp [ 476.426804][T20040] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 476.444633][T20040] syzkaller1: Refused to change device type [ 476.471846][T20040] batman_adv: batadv0: Adding interface: ip6gretap1 [ 476.505199][T20040] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 476.564634][T20040] batman_adv: batadv0: Not using interface ip6gretap1 (retrying later): interface not active [ 476.639318][T20026] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3638'. [ 476.656155][T20021] netlink: 104 bytes leftover after parsing attributes in process `syz.3.3636'. [ 476.684718][T20048] netlink: 584 bytes leftover after parsing attributes in process `syz.1.3643'. [ 476.974747][T20023] lo speed is unknown, defaulting to 1000 [ 477.340945][T20057] lo: Caught tx_queue_len zero misconfig [ 477.342221][T20059] netlink: 344 bytes leftover after parsing attributes in process `syz.2.3647'. [ 477.382922][T20059] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3647'. [ 477.414122][T20053] lo speed is unknown, defaulting to 1000 [ 478.934730][T20112] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3663'. [ 479.050383][T20113] lo speed is unknown, defaulting to 1000 [ 479.093331][T20119] ip6t_srh: unknown srh match flags C404 [ 479.382557][T20131] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3668'. [ 479.414511][T20131] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3668'. [ 479.414756][T20130] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR [ 479.773630][T20111] lo speed is unknown, defaulting to 1000 [ 480.038746][T20152] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3673'. [ 480.258706][T20155] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3674'. [ 480.304451][T20155] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3674'. [ 480.325854][T20156] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3674'. [ 480.399089][T20158] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3675'. [ 480.511701][T20162] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3676'. [ 480.547674][T20162] No such timeout policy "syz1" [ 480.554047][T20158] 8021q: adding VLAN 0 to HW filter on device bond2 [ 480.632424][T20160] bond2: (slave macsec1): Error -34 calling dev_set_mtu [ 480.684721][T20142] lo speed is unknown, defaulting to 1000 [ 481.287477][T20180] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3681'. [ 481.434043][T20171] lo speed is unknown, defaulting to 1000 [ 481.625932][ T51] Bluetooth: hci3: command 0x0405 tx timeout [ 482.704593][T20217] netlink: 'syz.0.3692': attribute type 1 has an invalid length. [ 482.712452][T20217] netlink: 'syz.0.3692': attribute type 1 has an invalid length. [ 482.721326][T20217] netlink: 'syz.0.3692': attribute type 1 has an invalid length. [ 482.808533][ T73] bond4 (unregistering): (slave ip6gretap2): Removing an active aggregator [ 482.824738][ T73] bond4 (unregistering): (slave ip6gretap2): Releasing backup interface [ 483.005168][ T73] bond6 (unregistering): (slave gretap1): Releasing active interface [ 483.060021][ T73] dvmrp0 (unregistering): left allmulticast mode [ 483.266880][ T73] bond1 (unregistering): (slave bridge3): Releasing active interface [ 483.486741][ T73] bond7 (unregistering): (slave bridge7): Releasing active interface [ 483.583264][ T73] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 483.594649][ T73] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 483.606679][ T73] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 483.621724][ T73] bond0 (unregistering): Released all slaves [ 483.635837][ T73] bond1 (unregistering): Released all slaves [ 483.750497][ T73] bond2 (unregistering): Released all slaves [ 483.865348][ T73] bond3 (unregistering): Released all slaves [ 483.979425][ T73] bond4 (unregistering): Released all slaves [ 484.090919][ T73] bond5 (unregistering): Released all slaves [ 484.103259][ T73] bond6 (unregistering): Released all slaves [ 484.116982][ T73] bond7 (unregistering): Released all slaves [ 484.304461][ T73] : left promiscuous mode [ 484.415468][ T73] : left promiscuous mode [ 484.593503][T20241] lo speed is unknown, defaulting to 1000 [ 484.807654][ T73] tipc: Left network mode [ 485.018833][T20251] lo speed is unknown, defaulting to 1000 [ 485.079868][ T73] IPVS: stopping backup sync thread 15883 ... [ 485.783407][T20283] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 485.903366][T20283] ipvlan2: entered promiscuous mode [ 485.919180][T20283] bridge0: port 1(ipvlan2) entered blocking state [ 485.930219][T20283] bridge0: port 1(ipvlan2) entered disabled state [ 485.941709][T20283] ipvlan2: entered allmulticast mode [ 485.947373][T20283] bridge0: entered allmulticast mode [ 485.956805][T20283] ipvlan2: left allmulticast mode [ 485.961879][T20283] bridge0: left allmulticast mode [ 486.319441][T20288] lo speed is unknown, defaulting to 1000 [ 487.193579][T20325] __nla_validate_parse: 3 callbacks suppressed [ 487.193599][T20325] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3718'. [ 487.209471][T20325] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3718'. [ 487.246849][ T73] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 487.261488][ T73] batman_adv: batadv0: Removing interface: vlan5 [ 487.639846][ T73] team0 (unregistering): Port device team_slave_1 removed [ 487.682627][ T73] team0 (unregistering): Port device C removed [ 488.090734][ T2975] smc: removing ib device syz2 [ 488.101609][T20321] tipc: Resetting bearer [ 488.194717][ T9649] lo speed is unknown, defaulting to 1000 [ 488.203887][ T9649] syz2: Port: 1 Link DOWN [ 488.207371][T20333] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3720'. [ 488.457103][T20343] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3723'. [ 488.843361][T20364] veth0: entered promiscuous mode [ 488.850448][T20364] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3727'. [ 488.957026][T20364] veth0 (unregistering): left promiscuous mode [ 489.073923][T20372] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3730'. [ 489.124254][T20372] tipc: Invalid UDP bearer configuration [ 489.124314][T20372] tipc: Enabling of bearer rejected, failed to enable media [ 490.255127][T20420] bridge_slave_0: left allmulticast mode [ 490.260868][T20420] bridge_slave_0: left promiscuous mode [ 490.304880][T20420] bridge0: port 1(bridge_slave_0) entered disabled state [ 490.332223][T20420] bridge_slave_1: left allmulticast mode [ 490.339573][T20420] bridge_slave_1: left promiscuous mode [ 490.345830][T20420] bridge0: port 2(bridge_slave_1) entered disabled state [ 490.372936][T20420] bond0: (slave bond_slave_0): Releasing backup interface [ 490.418444][T20424] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3740'. [ 490.438515][T20420] bond0: (slave bond_slave_1): Releasing backup interface [ 490.482984][T20420] team_slave_0: left allmulticast mode [ 490.502509][T20420] team0: Failed to send options change via netlink (err -105) [ 490.513598][T20420] team0: Failed to send port change of device team_slave_0 via netlink (err -105) [ 490.525972][T20420] team0: Port device team_slave_0 removed [ 490.533362][T20420] team_slave_1: left allmulticast mode [ 490.560866][T20420] team0: Failed to send options change via netlink (err -105) [ 490.576845][T20420] team0: Failed to send port change of device team_slave_1 via netlink (err -105) [ 490.588197][T20420] team0: Port device team_slave_1 removed [ 490.598218][T20420] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 490.828931][T20432] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3746'. [ 491.052711][ T73] IPVS: stop unused estimator thread 0... [ 491.371998][T20453] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3752'. [ 491.627117][T20457] netlink: 'syz.1.3754': attribute type 4 has an invalid length. [ 491.636708][T20460] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.3754'. [ 491.775779][T20455] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 491.963560][T20468] tunl0: Caught tx_queue_len zero misconfig [ 491.970027][T20468] sch_tbf: burst 0 is lower than device tunl0 mtu (1480) ! [ 492.175804][T20455] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 492.362653][T20455] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 492.375433][T20495] netlink: 'syz.1.3761': attribute type 33 has an invalid length. [ 492.384652][T20495] __nla_validate_parse: 4 callbacks suppressed [ 492.384669][T20495] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3761'. [ 492.435820][T20495] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3761'. [ 492.485973][T20495] dummy0 (unregistering): left promiscuous mode [ 492.557005][T20504] xt_CT: You must specify a L4 protocol and not use inversions on it [ 492.573422][T20504] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3763'. [ 492.665819][T20455] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 492.953447][T20506] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input11 [ 493.020413][ T36] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 493.097951][ T760] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 493.229138][ T760] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 493.335571][ T760] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 493.881676][T20548] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3776'. [ 494.050399][T20563] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3780'. [ 494.137603][T20567] netlink: 9 bytes leftover after parsing attributes in process `syz.0.3781'. [ 494.306662][T20574] netlink: 'syz.4.3783': attribute type 4 has an invalid length. [ 494.385509][T20576] vxcan0: entered allmulticast mode [ 494.453146][T20582] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3786'. [ 495.053354][T20595] batadv_slave_0: entered promiscuous mode [ 495.063844][T20595] tipc: Enabled bearer , priority 0 [ 495.074386][T20595] syzkaller0: entered promiscuous mode [ 495.079973][T20595] syzkaller0: entered allmulticast mode [ 495.177328][T20600] tipc: Resetting bearer [ 495.201889][T20602] syzkaller0: Caught tx_queue_len zero misconfig [ 495.225416][T20594] batadv_slave_0: left promiscuous mode [ 495.266489][T20594] tipc: Resetting bearer [ 495.294588][T20594] tipc: Disabling bearer [ 495.363965][T20607] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3794'. [ 495.430698][T20608] xt_CT: No such helper "syz0" [ 495.436767][T20607] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3794'. [ 495.532724][ T2975] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 495.583153][ T2975] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 495.703769][ T2975] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 495.728593][ T2975] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 495.763868][T20628] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3800'. [ 495.880700][T20632] netlink: 'syz.3.3802': attribute type 1 has an invalid length. [ 495.931846][T20636] netlink: 'syz.0.3801': attribute type 1 has an invalid length. [ 495.942286][T20640] netlink: 'syz.0.3801': attribute type 1 has an invalid length. [ 496.003620][T20639] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 496.016497][T20639] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 496.054026][T20632] bond3: (slave bridge0): Enslaving as an active interface with a down link [ 496.082652][T20632] veth1_to_bond: entered allmulticast mode [ 496.090356][T20632] veth1_to_bond: entered promiscuous mode [ 496.110136][T20631] veth1_to_bond: left promiscuous mode [ 496.116538][T20631] veth1_to_bond: left allmulticast mode [ 496.285507][T20655] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input12 [ 496.336093][T20660] tipc: Enabling of bearer rejected, failed to enable media [ 496.406859][T20660] 8021q: adding VLAN 0 to HW filter on device bond3 [ 496.457281][T20670] netlink: 'syz.2.3811': attribute type 9 has an invalid length. [ 496.680640][T20660] bond3 (unregistering): Released all slaves [ 497.287872][T20701] netlink: 'syz.3.3819': attribute type 1 has an invalid length. [ 497.332762][T20701] tipc: Enabled bearer , priority 0 [ 497.358164][T20701] syzkaller0: entered promiscuous mode [ 497.366788][T20701] syzkaller0: entered allmulticast mode [ 497.408965][T20713] netlink: 'syz.4.3820': attribute type 3 has an invalid length. [ 497.418399][T20713] __nla_validate_parse: 10 callbacks suppressed [ 497.418418][T20713] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3820'. [ 497.447909][T20710] dummy0: default FDB implementation only supports local addresses [ 497.459412][T20714] tipc: Resetting bearer [ 497.575287][T20698] tipc: Resetting bearer [ 497.639781][T20698] tipc: Disabling bearer [ 497.787908][T20727] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3824'. [ 498.380576][T20750] syz_tun: entered allmulticast mode [ 498.457526][T20749] syz_tun: left allmulticast mode [ 498.616558][T20753] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 498.807379][T20753] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 498.920392][T20753] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 499.023176][T20753] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 499.063003][T20789] tipc: Started in network mode [ 499.080134][T20789] tipc: Node identity 82647c2dd2df, cluster identity 4711 [ 499.089727][T20789] tipc: Enabled bearer , priority 0 [ 499.198197][T20799] netlink: 21 bytes leftover after parsing attributes in process `syz.1.3840'. [ 499.218995][T20789] tipc: Resetting bearer [ 499.388803][ T73] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 499.425719][ T2953] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 499.459793][ T13] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 499.491502][ T73] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 499.667001][T20804] svc: failed to register nfsdv3 RPC service (errno 111). [ 499.699915][T20804] svc: failed to register nfsaclv3 RPC service (errno 111). [ 500.204347][ T918] tipc: Node number set to 1354464301 [ 500.219654][T20847] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3855'. [ 500.229488][T20847] openvswitch: netlink: Flow key attr not present in new flow. [ 500.354762][T20849] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3854'. [ 500.372580][T20853] Cannot find del_set index 2 as target [ 500.440823][T20853] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3856'. [ 500.530919][T20822] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3846'. [ 500.555329][T20822] netlink: 'syz.4.3846': attribute type 17 has an invalid length. [ 500.581140][T20822] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 500.667875][T20871] netlink: 'syz.0.3861': attribute type 2 has an invalid length. [ 500.677880][T20871] netlink: 'syz.0.3861': attribute type 8 has an invalid length. [ 500.680453][T20869] netlink: 'syz.2.3860': attribute type 1 has an invalid length. [ 500.700008][T20871] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3861'. [ 500.709388][T20869] netlink: 'syz.2.3860': attribute type 2 has an invalid length. [ 500.743767][T20869] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 500.893229][T20881] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3862'. [ 500.907643][T20882] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3864'. [ 500.989834][T20879] tipc: Enabling of bearer rejected, already enabled [ 501.522771][ T13] nci: nci_ntf_packet: unknown ntf opcode 0x21 [ 501.853662][T20930] netlink: 'syz.4.3876': attribute type 16 has an invalid length. [ 501.862440][T20930] netlink: 'syz.4.3876': attribute type 17 has an invalid length. [ 501.905339][T20931] IPv6: NLM_F_REPLACE set, but no existing node found! [ 502.405386][T20949] can: request_module (can-proto-0) failed. [ 502.422687][T20955] IPVS: Scheduler module ip_vs_sip not found [ 502.482015][T20955] IPVS: fo: FWM 3 0x00000003 - no destination available [ 503.338265][T20942] bridge2: entered promiscuous mode [ 503.346004][T20955] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 503.430200][T20961] tipc: Enabling of bearer rejected, failed to enable media [ 503.449624][ T2975] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 503.469193][ T2975] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 503.490746][T20979] netlink: 'syz.4.3885': attribute type 1 has an invalid length. [ 503.499093][T20973] __nla_validate_parse: 11 callbacks suppressed [ 503.499112][T20973] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3886'. [ 503.560270][ T2975] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 503.594564][ T13] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 503.693880][T20988] netlink: 'syz.3.3890': attribute type 1 has an invalid length. [ 503.702594][T20990] netlink: 'syz.4.3891': attribute type 21 has an invalid length. [ 503.754312][T20994] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3890'. [ 503.789797][T20988] bond4: entered promiscuous mode [ 503.803665][T20988] 8021q: adding VLAN 0 to HW filter on device bond4 [ 503.813883][T20994] bond4: entered allmulticast mode [ 503.830608][T20995] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 503.914778][T21005] veth1_to_hsr: entered promiscuous mode [ 503.920784][T21005] macvtap1: entered promiscuous mode [ 503.926875][T21005] macvtap1: entered allmulticast mode [ 503.932436][T21005] veth1_to_hsr: entered allmulticast mode [ 503.957826][T20994] bond4: (slave bridge1): making interface the new active one [ 503.966582][T20994] bridge1: entered promiscuous mode [ 503.971970][T20994] bridge1: entered allmulticast mode [ 503.979982][T20994] bond4: (slave bridge1): Enslaving as an active interface with an up link [ 503.998520][T20995] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 504.047076][T21011] netlink: 'syz.1.3897': attribute type 1 has an invalid length. [ 504.064539][T21011] netlink: 'syz.1.3897': attribute type 2 has an invalid length. [ 504.085086][T20995] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 504.086361][T21011] netlink: 'syz.1.3897': attribute type 1 has an invalid length. [ 504.116654][T21011] netlink: 'syz.1.3897': attribute type 1 has an invalid length. [ 504.125815][T21011] netlink: 'syz.1.3897': attribute type 2 has an invalid length. [ 504.133847][T21011] netlink: 'syz.1.3897': attribute type 1 has an invalid length. [ 504.141900][T21011] netlink: 'syz.1.3897': attribute type 1 has an invalid length. [ 504.197055][T20995] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 504.496258][ T3005] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 504.527094][T21043] tipc: Enabled bearer , priority 0 [ 504.543511][T21043] syzkaller0: entered promiscuous mode [ 504.553613][T21043] syzkaller0: entered allmulticast mode [ 504.780801][T21035] tipc: Resetting bearer [ 504.797722][ T48] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 504.820181][ T48] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 504.865173][T21033] tipc: Resetting bearer [ 504.930617][T21033] tipc: Disabling bearer [ 504.941161][T21049] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3906'. [ 504.992636][ T13] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 505.172820][T21074] bond1 (unregistering): Released all slaves [ 505.209170][T21072] vlan0: entered promiscuous mode [ 505.214653][T21072] gretap0: entered promiscuous mode [ 505.270824][T21079] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3909'. [ 505.280265][T21079] bridge: RTM_NEWNEIGH with invalid ether address [ 505.902374][T21115] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3919'. [ 505.911759][T21114] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3919'. [ 505.925110][T21119] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 505.938892][T21119] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 505.953452][T21131] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3923'. [ 506.047649][T21114] bond1: (slave bridge2): Enslaving as an active interface with a down link [ 506.091144][T21115] bond1: (slave bridge3): Enslaving as an active interface with a down link [ 506.108798][T21130] xfrm1: entered allmulticast mode [ 506.206553][T21141] xt_CT: No such helper "snmp_trap" [ 506.297511][T21145] tipc: Enabling of bearer rejected, failed to enable media [ 506.377374][T21145] netlink: 2 bytes leftover after parsing attributes in process `syz.4.3926'. [ 506.428147][T21159] netlink: 88 bytes leftover after parsing attributes in process `syz.1.3930'. [ 506.505702][ T9644] IPVS: starting estimator thread 0... [ 506.557352][T21164] IPVS: Scheduler module ip_vs_sip not found [ 506.594321][T21165] IPVS: using max 32 ests per chain, 76800 per kthread [ 506.610390][T21162] netlink: 84 bytes leftover after parsing attributes in process `syz.4.3931'. [ 506.617279][T21164] IPVS: ip_vs_edit_dest(): server weight less than zero [ 506.929065][ T5828] Bluetooth: hci3: link tx timeout [ 506.935997][ T5828] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 507.244699][T21202] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 507.244750][T21200] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 507.876575][T21221] bond0: Caught tx_queue_len zero misconfig [ 508.309411][T21243] tipc: Enabling of bearer rejected, already enabled [ 508.664512][T21189] Bluetooth: hci1: command 0x0406 tx timeout [ 508.745373][T21281] __nla_validate_parse: 4 callbacks suppressed [ 508.745392][T21281] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3957'. [ 508.842754][T21290] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3965'. [ 509.000469][ T5828] Bluetooth: hci3: command 0x0405 tx timeout [ 509.079981][T21312] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3969'. [ 509.185466][T21316] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3970'. [ 509.264377][T21318] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3971'. [ 509.404874][T21320] IPVS: fo: FWM 3 0x00000003 - no destination available [ 509.437559][T21322] validate_nla: 4 callbacks suppressed [ 509.437579][T21322] netlink: 'syz.2.3972': attribute type 12 has an invalid length. [ 509.643255][T21331] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3975'. [ 509.666770][T21332] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3976'. [ 509.738894][T21335] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 510.053830][T21341] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 510.175517][T21341] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 510.298556][T21341] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 510.380050][T21341] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 510.446812][T21358] tap0: tun_chr_ioctl cmd 1074025678 [ 510.475894][T21358] tap0: group set to 0 [ 510.609509][ T73] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 510.652319][ T73] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 510.697879][ T73] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 510.728460][ T73] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 510.823623][T21385] IPVS: Error connecting to the multicast addr [ 510.844592][T21388] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3993'. [ 511.278673][T21412] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4001'. [ 511.345910][T21414] netlink: 'syz.3.4000': attribute type 8 has an invalid length. [ 511.790872][T21434] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4005'. [ 511.831557][T21435] wg1 speed is unknown, defaulting to 1000 [ 511.844322][T21435] wg1 speed is unknown, defaulting to 1000 [ 511.850994][T21435] wg1 speed is unknown, defaulting to 1000 [ 511.897592][T21435] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 511.958891][T21435] wg1 speed is unknown, defaulting to 1000 [ 511.968293][T21435] wg1 speed is unknown, defaulting to 1000 [ 511.977477][T21435] wg1 speed is unknown, defaulting to 1000 [ 511.985915][T21435] wg1 speed is unknown, defaulting to 1000 [ 511.993872][T21435] wg1 speed is unknown, defaulting to 1000 [ 512.006103][T21435] wg1 speed is unknown, defaulting to 1000 [ 512.014733][T21435] wg1 speed is unknown, defaulting to 1000 [ 512.022571][T21435] wg1 speed is unknown, defaulting to 1000 [ 512.031128][T21435] wg1 speed is unknown, defaulting to 1000 [ 512.502663][T21462] wg1 speed is unknown, defaulting to 1000 [ 513.430095][T21507] batadv_slave_1: entered promiscuous mode [ 513.489314][T21498] batadv_slave_1: left promiscuous mode [ 513.782069][T21524] netlink: 'syz.2.4023': attribute type 1 has an invalid length. [ 513.867877][T21530] bond3: (slave vcan1): The slave device specified does not support setting the MAC address [ 513.920787][T21530] bond3: (slave vcan1): Setting fail_over_mac to active for active-backup mode [ 513.969437][T21530] bond3: (slave vcan1): making interface the new active one [ 513.979384][T21530] bond3: (slave vcan1): Enslaving as an active interface with an up link [ 514.020720][T21524] bond3: (slave vcan2): The slave device specified does not support setting the MAC address [ 514.057847][T21524] bond3: (slave vcan2): Enslaving as a backup interface with an up link [ 514.088640][T21533] 8021q: adding VLAN 0 to HW filter on device bond3 [ 514.129099][T21524] __nla_validate_parse: 6 callbacks suppressed [ 514.129119][T21524] netlink: 88 bytes leftover after parsing attributes in process `syz.2.4023'. [ 514.379932][T21550] bridge0: port 1(syz_tun) entered blocking state [ 514.433868][T21550] bridge0: port 1(syz_tun) entered disabled state [ 514.459817][T21553] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4029'. [ 514.460897][T21550] syz_tun: entered allmulticast mode [ 514.492230][T21550] syz_tun: entered promiscuous mode [ 514.601696][T21555] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 514.615224][T21555] syzkaller1: linktype set to 0 [ 514.776049][T21564] dvmrp0: entered allmulticast mode [ 514.846664][T21573] bond0: entered promiscuous mode [ 514.863422][T21573] bond_slave_0: entered promiscuous mode [ 514.889607][T21573] bond_slave_1: entered promiscuous mode [ 514.909247][T21573] batadv0: entered promiscuous mode [ 514.922952][T21573] debugfs: 'hsr1' already exists in 'hsr' [ 514.938111][T21573] Cannot create hsr debugfs directory [ 514.947361][T21573] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 514.963341][T21573] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 514.975844][T21573] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 514.983851][T21573] bond0: left promiscuous mode [ 514.990327][T21573] bond_slave_0: left promiscuous mode [ 514.996223][T21573] bond_slave_1: left promiscuous mode [ 515.002946][T21573] batadv0: left promiscuous mode [ 515.030260][T21588] IPVS: sync thread started: state = BACKUP, mcast_ifn = tunl0, syncid = 3, id = 0 [ 515.049732][T21583] wg1 speed is unknown, defaulting to 1000 [ 515.467688][T21592] wg1 speed is unknown, defaulting to 1000 [ 515.599886][T21602] wg1 speed is unknown, defaulting to 1000 [ 515.693201][T21614] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4044'. [ 515.780572][T21607] syzkaller1: entered promiscuous mode [ 515.791744][T21607] syzkaller1: entered allmulticast mode [ 515.848012][T21602] wg1 speed is unknown, defaulting to 1000 [ 515.991479][T21620] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4043'. [ 516.014456][T21628] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4047'. [ 516.194041][T21635] netlink: 76 bytes leftover after parsing attributes in process `syz.4.4049'. [ 516.211870][T21636] tipc: Started in network mode [ 516.217654][T21636] tipc: Node identity 82a10f888b88, cluster identity 4711 [ 516.226992][T21636] tipc: Enabled bearer , priority 0 [ 516.264029][T21633] syzkaller0: entered promiscuous mode [ 516.270708][T21633] syzkaller0: entered allmulticast mode [ 516.342038][T21635] 0: reclassify loop, rule prio 0, protocol 800 [ 516.446112][T21640] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 516.459896][T21643] netlink: 'syz.0.4051': attribute type 10 has an invalid length. [ 516.469147][T21643] veth0_virt_wifi: entered allmulticast mode [ 516.490463][T21643] team0: Port device veth0_virt_wifi added [ 516.619527][T21648] netlink: 'syz.2.4052': attribute type 1 has an invalid length. [ 516.797415][T21671] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4057'. [ 516.840734][T21648] 8021q: adding VLAN 0 to HW filter on device bond4 [ 516.885943][T21666] bond2: (slave erspan0): Releasing backup interface [ 516.909481][T21666] syz_tun: left allmulticast mode [ 516.917856][T21666] syz_tun: left promiscuous mode [ 516.924114][T21666] bridge0: port 1(syz_tun) entered disabled state [ 516.964841][T21677] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4060'. [ 516.965042][T21666] bond0: (slave bond_slave_0): Releasing backup interface [ 516.989078][T21666] bond0: (slave bond_slave_1): Releasing backup interface [ 517.010460][T21666] team_slave_0: left promiscuous mode [ 517.021973][T21682] xt_policy: neither incoming nor outgoing policy selected [ 517.037444][T21682] netlink: 'syz.1.4059': attribute type 3 has an invalid length. [ 517.046686][T21666] team0: Port device team_slave_0 removed [ 517.055252][T21666] team_slave_1: left promiscuous mode [ 517.072570][T21666] team0: Port device team_slave_1 removed [ 517.085132][T21666] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 517.108793][T21666] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 517.150727][T21666] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 517.345262][ T9649] tipc: Node number set to 153685896 [ 517.534585][T21678] wg1 speed is unknown, defaulting to 1000 [ 517.725443][T21712] 8021q: adding VLAN 0 to HW filter on device bond3 [ 517.843844][T21716] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4070'. [ 517.876894][T21723] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4070'. [ 518.222185][T21742] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 518.719411][T21772] Unsupported ieee802154 address type: 0 [ 518.906364][ T5828] Bluetooth: hci2: command 0x0406 tx timeout [ 519.072800][T21797] IPVS: Error connecting to the multicast addr [ 519.200210][T21798] __nla_validate_parse: 6 callbacks suppressed [ 519.200245][T21798] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4085'. [ 519.488607][T21820] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4094'. [ 519.509791][T21824] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4094'. [ 519.690379][T21834] netlink: 'syz.0.4099': attribute type 1 has an invalid length. [ 519.703634][T21832] syzkaller0: entered promiscuous mode [ 519.710646][T21834] netlink: 228 bytes leftover after parsing attributes in process `syz.0.4099'. [ 519.716058][T21832] syzkaller0: entered allmulticast mode [ 519.781500][T21839] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 519.834433][T21839] netlink: 'syz.3.4100': attribute type 1 has an invalid length. [ 519.873782][T21839] 8021q: adding VLAN 0 to HW filter on device bond6 [ 519.899284][T21839] vlan2: entered promiscuous mode [ 519.904655][T21839] bond6: entered promiscuous mode [ 519.937314][T21839] vlan2: entered allmulticast mode [ 519.942487][T21839] bond6: entered allmulticast mode [ 520.126257][T21858] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4105'. [ 520.307877][T21868] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4104'. [ 520.427469][T21868] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4104'. [ 520.515219][T21872] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4107'. [ 520.582569][T21877] netlink: 5 bytes leftover after parsing attributes in process `syz.4.4108'. [ 520.607059][T21878] netlink: 5 bytes leftover after parsing attributes in process `syz.4.4108'. [ 520.631260][T21877] openvswitch: netlink: IP tunnel attribute has 1026 unknown bytes. [ 520.650830][T21878] openvswitch: netlink: IP tunnel attribute has 1026 unknown bytes. [ 520.707265][T21878] tap0: tun_chr_ioctl cmd 1074025673 [ 520.733538][T21877] tap0: tun_chr_ioctl cmd 35111 [ 521.918665][T21900] netlink: 'syz.1.4110': attribute type 7 has an invalid length. [ 521.960318][T21904] netlink: 'syz.3.4115': attribute type 4 has an invalid length. [ 522.200221][T21911] syz_tun: entered allmulticast mode [ 522.238615][T21911] syz_tun: left allmulticast mode [ 522.291027][T21919] netlink: 'syz.3.4121': attribute type 15 has an invalid length. [ 522.739721][T21948] netlink: 'syz.3.4128': attribute type 1 has an invalid length. [ 522.827724][T21948] 8021q: adding VLAN 0 to HW filter on device bond7 [ 522.977024][T21963] pim6reg: entered allmulticast mode [ 523.091893][T21968] Bluetooth: MGMT ver 1.23 [ 523.115129][T21960] pim6reg: left allmulticast mode [ 523.530041][T21989] netlink: 'syz.4.4139': attribute type 1 has an invalid length. [ 523.579533][T21996] x_tables: duplicate underflow at hook 2 [ 523.881986][T21989] bond2: entered promiscuous mode [ 523.888002][T21989] 8021q: adding VLAN 0 to HW filter on device bond2 [ 523.927244][T21993] 8021q: adding VLAN 0 to HW filter on device bond2 [ 523.936393][T21993] bond2: (slave gre2): The slave device specified does not support setting the MAC address [ 523.947128][T21993] bond2: (slave gre2): Setting fail_over_mac to active for active-backup mode [ 523.963148][T21993] bond2: (slave gre2): making interface the new active one [ 523.972907][T21993] gre2: entered promiscuous mode [ 523.979826][T21993] bond2: (slave gre2): Enslaving as an active interface with an up link [ 525.149871][ T5828] Bluetooth: hci2: command 0x0406 tx timeout [ 525.150540][ T51] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 526.067422][T22039] __nla_validate_parse: 7 callbacks suppressed [ 526.067439][T22039] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4152'. [ 526.069745][T22041] wg1 speed is unknown, defaulting to 1000 [ 526.177321][T22046] netlink: 72 bytes leftover after parsing attributes in process `syz.0.4157'. [ 526.241954][T22046] syzkaller1: entered promiscuous mode [ 526.247659][T22046] syzkaller1: entered allmulticast mode [ 526.546393][T22041] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4153'. [ 526.581999][T22065] tipc: Resetting bearer [ 526.881360][T22080] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4164'. [ 527.166008][T22090] netlink: 'syz.1.4168': attribute type 10 has an invalid length. [ 527.382244][T22103] wg1 speed is unknown, defaulting to 1000 [ 527.597701][T22116] bond4 (unregistering): Released all slaves [ 527.652952][T22118] 8021q: adding VLAN 0 to HW filter on device bond0 [ 527.723931][T22118] bond0: (slave rose0): Enslaving as an active interface with an up link [ 527.745437][T22133] netlink: 'syz.4.4178': attribute type 2 has an invalid length. [ 528.208305][T22147] x_tables: duplicate underflow at hook 1 [ 528.563456][T22166] wg1 speed is unknown, defaulting to 1000 [ 528.651138][T22182] netlink: 156 bytes leftover after parsing attributes in process `syz.0.4191'. [ 528.686537][T22180] wg1 speed is unknown, defaulting to 1000 [ 528.966160][T22204] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4196'. [ 528.976517][T22204] netlink: 'syz.2.4196': attribute type 5 has an invalid length. [ 528.984845][T22204] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4196'. [ 528.996346][T22204] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4196'. [ 529.365179][T22181] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 529.461847][T22222] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4200'. [ 529.513601][T22226] wg1 speed is unknown, defaulting to 1000 [ 529.530072][T22222] netlink: 68 bytes leftover after parsing attributes in process `syz.1.4200'. [ 529.563408][T22222] bridge0: port 2(bridge_slave_1) entered disabled state [ 529.571203][T22222] bridge0: port 1(bridge_slave_0) entered disabled state [ 529.760664][T22236] x_tables: unsorted underflow at hook 3 [ 530.872372][T22288] wg1 speed is unknown, defaulting to 1000 [ 530.878032][T22297] netlink: 'syz.2.4219': attribute type 19 has an invalid length. [ 530.897720][T22297] netlink: 'syz.2.4219': attribute type 20 has an invalid length. [ 531.260239][T22316] __nla_validate_parse: 5 callbacks suppressed [ 531.260257][T22316] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4221'. [ 531.350358][T22327] tipc: Enabled bearer , priority 0 [ 531.360090][T22327] syzkaller0: entered promiscuous mode [ 531.367800][T22327] syzkaller0: entered allmulticast mode [ 531.431808][T22327] tipc: Resetting bearer [ 531.459742][T22327] tipc: Disabling bearer [ 531.481699][T22332] wg1 speed is unknown, defaulting to 1000 [ 531.644832][T22339] bond3: option arp_all_targets: invalid value (3) [ 531.657107][T22339] bond3 (unregistering): Released all slaves [ 532.023005][T22362] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4234'. [ 532.348926][T22377] netlink: 'syz.0.4237': attribute type 10 has an invalid length. [ 532.357611][T22377] netlink: 2 bytes leftover after parsing attributes in process `syz.0.4237'. [ 533.794906][T22354] 8021q: VLANs not supported on ip6gre0 [ 533.805958][T22377] bond0: entered promiscuous mode [ 533.811054][T22377] bond_slave_0: entered promiscuous mode [ 533.819355][T22377] bond_slave_1: entered promiscuous mode [ 533.827439][T22377] bridge0: port 3(bond0) entered blocking state [ 533.834202][T22377] bridge0: port 3(bond0) entered disabled state [ 533.840733][T22377] bond0: entered allmulticast mode [ 533.849012][T22377] bond_slave_0: entered allmulticast mode [ 533.859338][T22377] bond_slave_1: entered allmulticast mode [ 533.889336][T22377] bridge0: port 3(bond0) entered blocking state [ 533.895812][T22377] bridge0: port 3(bond0) entered forwarding state [ 534.465717][T22417] netlink: 'syz.2.4247': attribute type 11 has an invalid length. [ 534.480797][T22405] wg1 speed is unknown, defaulting to 1000 [ 534.538769][T22422] syzkaller0: entered promiscuous mode [ 534.551346][T22416] netlink: zone id is out of range [ 534.553143][T22422] syzkaller0: entered allmulticast mode [ 534.556661][T22416] netlink: zone id is out of range [ 535.034374][T22440] IPVS: set_ctl: invalid protocol: 135 10.1.1.2:8188 [ 535.045929][T22442] IPVS: set_ctl: invalid protocol: 135 10.1.1.2:8188 [ 535.143690][T22444] sctp: [Deprecated]: syz.3.4254 (pid 22444) Use of int in max_burst socket option. [ 535.143690][T22444] Use struct sctp_assoc_value instead [ 535.209002][T22446] netlink: 'syz.1.4255': attribute type 10 has an invalid length. [ 535.210170][T22444] netlink: 'syz.3.4254': attribute type 1 has an invalid length. [ 535.226352][T22446] netlink: 2 bytes leftover after parsing attributes in process `syz.1.4255'. [ 535.236912][T22444] netlink: 'syz.3.4254': attribute type 3 has an invalid length. [ 535.238690][T22446] batadv_slave_1: entered promiscuous mode [ 535.254885][T22446] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 535.263239][T22446] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 535.269981][T22444] netlink: 172 bytes leftover after parsing attributes in process `syz.3.4254'. [ 535.284452][T22446] bridge0: port 3(batadv_slave_1) entered blocking state [ 535.295544][T22444] NCSI netlink: No device for ifindex 813332851 [ 535.319557][T22446] bridge0: port 3(batadv_slave_1) entered disabled state [ 535.355055][T22446] batadv_slave_1: entered allmulticast mode [ 535.618375][T22460] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4256'. [ 535.693385][T22464] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4258'. [ 536.020185][T22474] netlink: 'syz.3.4261': attribute type 1 has an invalid length. [ 536.090872][T22477] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4261'. [ 536.148262][T22479] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4262'. [ 536.440096][T22495] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4263'. [ 536.556409][T22501] pimreg: entered allmulticast mode [ 536.712932][T22509] netlink: 'syz.0.4271': attribute type 1 has an invalid length. [ 536.720973][T22509] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4271'. [ 536.752484][T22511] netlink: 'syz.4.4272': attribute type 2 has an invalid length. [ 536.920940][T22524] IPv6: addrconf: prefix option has invalid lifetime [ 536.934092][T22525] IPv6: addrconf: prefix option has invalid lifetime [ 537.215254][T22536] netlink: 'syz.0.4277': attribute type 11 has an invalid length. [ 537.225766][T22539] netlink: 'syz.3.4279': attribute type 9 has an invalid length. [ 537.253937][T22534] x_tables: duplicate underflow at hook 2 [ 537.264313][T22536] netlink: 190972 bytes leftover after parsing attributes in process `syz.0.4277'. [ 537.332448][T22536] netlink: 'syz.0.4277': attribute type 11 has an invalid length. [ 537.357043][T22536] netlink: 190972 bytes leftover after parsing attributes in process `syz.0.4277'. [ 537.572243][T22557] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4284'. [ 537.999804][T22592] syzkaller0: left promiscuous mode [ 538.006950][T22592] syzkaller0: left allmulticast mode [ 538.063251][T22594] erspan0: entered promiscuous mode [ 538.072545][T22594] erspan0: entered allmulticast mode [ 538.119083][T22600] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4295'. [ 538.253161][T22610] netlink: 64 bytes leftover after parsing attributes in process `syz.0.4298'. [ 538.531976][T22628] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 538.705804][ T3005] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 538.909045][T22652] syzkaller0: entered promiscuous mode [ 538.914775][T22652] syzkaller0: entered allmulticast mode [ 539.430739][T22665] wg1 speed is unknown, defaulting to 1000 [ 539.677051][T22678] netlink: 56 bytes leftover after parsing attributes in process `syz.2.4315'. [ 539.997871][T22702] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 540.228189][T22707] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4322'. [ 540.356796][T22712] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4320'. [ 540.443124][T22711] syzkaller0: entered promiscuous mode [ 540.448784][T22711] syzkaller0: entered allmulticast mode [ 540.587520][T22717] netlink: 'syz.1.4325': attribute type 1 has an invalid length. [ 540.957482][T22730] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 541.082775][T22737] wg1 speed is unknown, defaulting to 1000 [ 541.582841][T22737] __nla_validate_parse: 1 callbacks suppressed [ 541.582860][T22737] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4330'. [ 541.633846][T22744] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4330'. [ 541.698902][T22772] wg1 speed is unknown, defaulting to 1000 [ 541.965960][T22781] batman_adv: batadv0: Adding interface: dummy0 [ 541.973685][T22781] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 542.033214][T22781] batman_adv: batadv0: Interface activated: dummy0 [ 542.050210][T22790] netlink: 64 bytes leftover after parsing attributes in process `syz.4.4340'. [ 542.169210][T22782] batadv0: mtu less than device minimum [ 542.196021][T22782] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 542.207918][T22782] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 542.219972][T22782] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 542.231865][T22782] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 542.243779][T22782] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 542.255668][T22782] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 542.267439][T22782] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 542.267476][T22792] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4339'. [ 542.279251][T22782] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 542.562060][T22802] netlink: 'syz.1.4341': attribute type 54 has an invalid length. [ 542.626807][T22806] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4342'. [ 542.640776][T22806] netlink: 64 bytes leftover after parsing attributes in process `syz.4.4342'. [ 542.683839][T22806] tipc: Invalid UDP bearer configuration [ 542.683948][T22806] tipc: Enabling of bearer rejected, failed to enable media [ 542.847971][T22805] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4342'. [ 542.861951][T22805] netlink: 64 bytes leftover after parsing attributes in process `syz.4.4342'. [ 542.874612][T22805] tipc: Invalid UDP bearer configuration [ 542.874672][T22805] tipc: Enabling of bearer rejected, failed to enable media [ 543.102581][T22830] dvmrp0: left allmulticast mode [ 543.108107][T22831] sctp: [Deprecated]: syz.0.4349 (pid 22831) Use of struct sctp_assoc_value in delayed_ack socket option. [ 543.108107][T22831] Use struct sctp_sack_info instead [ 543.325290][T22841] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4351'. [ 543.346542][T22843] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4352'. [ 543.371066][T22841] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 543.686280][T22858] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input13 [ 543.911865][T22875] syzkaller0: entered promiscuous mode [ 543.919514][T22875] syzkaller0: entered allmulticast mode [ 543.929265][T22875] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 544.506972][ T5828] Bluetooth: hci5: command 0x0406 tx timeout [ 544.660106][T22891] wg1 speed is unknown, defaulting to 1000 [ 544.827020][T22909] netlink: 'syz.3.4366': attribute type 1 has an invalid length. [ 545.013919][T22914] bond8: (slave geneve2): making interface the new active one [ 545.045595][T22914] bond8: (slave geneve2): Enslaving as an active interface with an up link [ 545.195954][T21493] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 545.204550][T21493] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 545.212842][T21493] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 545.261049][T21493] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 545.646791][T22948] faux_driver regulatory: loading /lib/firmware/regulatory.db.p7s failed with error -4 [ 545.674534][T22948] faux_driver regulatory: Direct firmware load for regulatory.db.p7s failed with error -4 [ 545.694260][T22948] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db.p7s [ 546.220625][T22974] wg1 speed is unknown, defaulting to 1000 [ 546.597319][T22992] __nla_validate_parse: 11 callbacks suppressed [ 546.597340][T22992] netlink: 820 bytes leftover after parsing attributes in process `syz.2.4388'. [ 546.613218][T22992] netlink: 820 bytes leftover after parsing attributes in process `syz.2.4388'. [ 546.646488][T22992] netlink: 56 bytes leftover after parsing attributes in process `syz.2.4388'. [ 547.277851][T23023] wg1 speed is unknown, defaulting to 1000 [ 547.855976][T23044] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4400'. [ 547.958834][T23045] macvlan3: entered promiscuous mode [ 547.983067][T23052] macvlan4: entered promiscuous mode [ 548.190033][T23069] netlink: 'syz.4.4406': attribute type 13 has an invalid length. [ 548.214442][T23069] netlink: 'syz.4.4406': attribute type 17 has an invalid length. [ 548.224708][T23061] syzkaller0: entered promiscuous mode [ 548.230376][T23061] syzkaller0: entered allmulticast mode [ 548.363967][T23069] 8021q: adding VLAN 0 to HW filter on device team0 [ 548.377227][T23086] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 548.386386][T23069] net_ratelimit: 11 callbacks suppressed [ 548.386397][T23069] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 550.085697][T23074] wg1 speed is unknown, defaulting to 1000 [ 550.149474][T23072] wg1 speed is unknown, defaulting to 1000 [ 550.537994][T23112] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4419'. [ 550.632650][T23116] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4420'. [ 550.673010][T23122] wg1 speed is unknown, defaulting to 1000 [ 550.676896][T23127] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 550.723476][T23127] pimreg: left allmulticast mode [ 550.770846][T23128] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4424'. [ 551.171290][T23136] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4426'. [ 551.212443][T23136] : entered promiscuous mode [ 551.222729][T23136] netlink: 'syz.2.4426': attribute type 1 has an invalid length. [ 551.248622][T23139] netlink: 'syz.4.4427': attribute type 4 has an invalid length. [ 551.257254][T23136] bond5: entered promiscuous mode [ 551.262930][T23136] 8021q: adding VLAN 0 to HW filter on device bond5 [ 551.297878][T23136] 8021q: adding VLAN 0 to HW filter on device bond5 [ 551.310648][T23136] bond5: (slave gre2): The slave device specified does not support setting the MAC address [ 551.322405][T23136] bond5: (slave gre2): Setting fail_over_mac to active for active-backup mode [ 551.346178][T23144] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4426'. [ 551.357316][T23136] bond5: (slave gre2): Opening slave failed [ 551.391273][T23142] netlink: 14 bytes leftover after parsing attributes in process `syz.1.4428'. [ 551.661793][T23155] wg1 speed is unknown, defaulting to 1000 [ 551.696642][T23161] __nla_validate_parse: 1 callbacks suppressed [ 551.696659][T23161] netlink: 124 bytes leftover after parsing attributes in process `syz.0.4432'. [ 551.716551][T23165] C: renamed from team_slave_0 [ 551.724910][T23165] netlink: 'syz.2.4434': attribute type 4 has an invalid length. [ 551.732680][T23165] netlink: 'syz.2.4434': attribute type 1 has an invalid length. [ 551.741353][T23165] netlink: 'syz.2.4434': attribute type 2 has an invalid length. [ 551.752881][T23165] netlink: 92 bytes leftover after parsing attributes in process `syz.2.4434'. [ 551.762561][T23165] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 551.793469][T23162] bridge: RTM_NEWNEIGH with invalid state 0x10 [ 551.909003][T23177] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4436'. [ 551.917603][T23160] wg1 speed is unknown, defaulting to 1000 [ 551.922157][T23177] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4436'. [ 551.961392][T23179] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4437'. [ 551.975956][T23179] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4437'. [ 552.220142][T23186] wg1 speed is unknown, defaulting to 1000 [ 552.365968][T23199] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 552.379891][T23199] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 552.404027][T23196] wg1 speed is unknown, defaulting to 1000 [ 552.432189][T23203] netlink: 64 bytes leftover after parsing attributes in process `syz.0.4439'. [ 552.456140][ T9649] IPVS: starting estimator thread 0... [ 552.564262][T23206] IPVS: using max 35 ests per chain, 84000 per kthread [ 552.644047][T23215] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 552.668026][T23215] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 552.722273][T23216] veth0: entered promiscuous mode [ 552.749126][T23216] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4449'. [ 552.767931][T23213] wg1 speed is unknown, defaulting to 1000 [ 552.884990][T23215] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 552.896690][T23215] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 552.963968][T23215] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 552.975492][T23215] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 553.063617][T23220] wg1 speed is unknown, defaulting to 1000 [ 553.081115][T23215] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 553.105149][T23215] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 553.236009][T23216] wg1 speed is unknown, defaulting to 1000 [ 553.455918][ T760] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 553.469472][ T760] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 553.556748][ T2953] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 553.567694][ T2953] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 553.601460][T23240] netlink: 88 bytes leftover after parsing attributes in process `syz.0.4456'. [ 553.668323][ T2953] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 553.697070][ T2953] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 553.743977][ T2953] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 553.764235][ T2953] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 554.437812][T23290] netlink: 'syz.1.4464': attribute type 10 has an invalid length. [ 554.565864][T23259] bridge0: port 3(bond0) entered disabled state [ 554.572492][T23259] bridge0: port 2(bridge_slave_1) entered disabled state [ 554.580226][T23259] bridge0: port 1(bridge_slave_0) entered disabled state [ 554.668059][T23259] team0: Failed to send port change of device team_slave_0 via netlink (err -105) [ 554.685439][T23259] team0: Failed to send port change of device team_slave_1 via netlink (err -105) [ 554.704517][T23259] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 554.719999][T23259] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 554.760509][T23259] team0: Failed to send port change of device veth0_virt_wifi via netlink (err -105) [ 554.811937][T23259] tipc: Resetting bearer [ 554.830328][T23270] mac80211_hwsim hwsim38 wlan1: entered allmulticast mode [ 554.870577][T23280] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 554.968514][T23290] mac80211_hwsim hwsim38 wlan1: left allmulticast mode [ 554.976839][ T5982] wg1 speed is unknown, defaulting to 1000 [ 554.982894][ T5982] syz0: Port: 1 Link DOWN [ 554.994529][T21493] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 555.014085][T21493] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 555.039974][T21493] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 555.052450][T23310] v: renamed from vlan0 [ 555.111347][T21493] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 555.150556][T23317] netlink: 'syz.3.4473': attribute type 1 has an invalid length. [ 555.163851][T23312] wg1 speed is unknown, defaulting to 1000 [ 555.210040][T23308] netlink: 68 bytes leftover after parsing attributes in process `syz.0.4471'. [ 555.262728][T23317] bond9: (slave veth11): Enslaving as an active interface with a down link [ 555.437938][T23323] bond9 (unregistering): (slave veth11): Releasing active interface [ 555.454475][T23323] bond9 (unregistering): Released all slaves [ 555.572305][T23343] ip6erspan0: entered allmulticast mode [ 555.632891][T23326] wg1 speed is unknown, defaulting to 1000 [ 555.887052][T23363] wg1: entered promiscuous mode [ 555.891965][T23363] wg1: entered allmulticast mode [ 556.282638][T23394] netlink: 'syz.2.4495': attribute type 1 has an invalid length. [ 556.309019][T23388] wg1 speed is unknown, defaulting to 1000 [ 556.590980][T23412] nftables ruleset with unbound chain [ 556.618972][T23404] vlan2: entered promiscuous mode [ 556.625852][T23404] veth1_to_batadv: entered promiscuous mode [ 557.266698][T23440] x_tables: duplicate underflow at hook 1 [ 557.448880][T23452] netlink: 'syz.2.4513': attribute type 1 has an invalid length. [ 557.468950][T23456] __nla_validate_parse: 9 callbacks suppressed [ 557.468967][T23456] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4515'. [ 557.549064][T23452] bond6: (slave bridge5): making interface the new active one [ 557.567409][T23452] bond6: (slave bridge5): Enslaving as an active interface with an up link [ 557.607124][T23459] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 557.811173][T23471] tap0: tun_chr_ioctl cmd 1074025676 [ 557.816846][T23471] tap0: owner set to 0 [ 558.243571][T23486] wg1 speed is unknown, defaulting to 1000 [ 558.379255][T23493] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4524'. [ 558.664861][ T5828] Bluetooth: hci3: command 0x0405 tx timeout [ 558.944985][T23524] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4532'. [ 559.042620][T23527] bond0: left allmulticast mode [ 559.069991][T23527] bond_slave_0: left allmulticast mode [ 559.075604][T23527] bond_slave_1: left allmulticast mode [ 559.086119][T23527] bridge0: port 3(bond0) entered disabled state [ 559.117445][T23527] bridge_slave_0: left promiscuous mode [ 559.134842][T23527] bridge0: port 1(bridge_slave_0) entered disabled state [ 559.163587][T23527] bridge_slave_1: left allmulticast mode [ 559.170230][T23527] bridge_slave_1: left promiscuous mode [ 559.176635][T23527] bridge0: port 2(bridge_slave_1) entered disabled state [ 559.294805][T23527] bond0: (slave bond_slave_0): Releasing backup interface [ 559.325549][T23527] bond_slave_0: left promiscuous mode [ 559.337078][T23527] bond0: (slave bond_slave_1): Releasing backup interface [ 559.346718][T23527] bond_slave_1: left promiscuous mode [ 559.360187][T23527] team0: Port device team_slave_0 removed [ 559.369059][T23527] team0: Port device team_slave_1 removed [ 559.375406][T23527] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 559.383194][T23527] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 559.392996][T23527] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 559.451243][T23529] wg1 speed is unknown, defaulting to 1000 [ 559.639767][T23568] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4543'. [ 559.762524][T23568] workqueue: name exceeds WQ_NAME_LEN. Truncating to: '}S7\mgҒ?NZez [ 559.763030][T23570] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4542'. [ 559.773461][T23572] bridge0: port 1(veth1_virt_wifi) entered blocking state [ 559.805591][T23572] bridge0: port 1(veth1_virt_wifi) entered disabled state [ 559.813640][T23572] veth1_virt_wifi: entered allmulticast mode [ 559.821838][T23572] veth1_virt_wifi: left allmulticast mode [ 559.995133][T23581] tipc: Enabling of bearer rejected, already enabled [ 560.247664][T23592] netlink: 'syz.0.4551': attribute type 1 has an invalid length. [ 560.256021][T23592] netlink: 'syz.0.4551': attribute type 2 has an invalid length. [ 560.268035][T23592] netlink: 'syz.0.4551': attribute type 10 has an invalid length. [ 560.319386][T23596] netlink: 'syz.0.4551': attribute type 10 has an invalid length. [ 560.343357][T23592] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 560.361367][T23598] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4553'. [ 560.375977][T23596] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4551'. [ 560.390912][T23592] batadv0: entered promiscuous mode [ 560.403626][T23592] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 560.414626][T23596] batadv0: entered allmulticast mode [ 560.449655][T23596] bond0: (slave batadv0): Releasing backup interface [ 560.465364][T23596] bridge0: port 1(batadv0) entered blocking state [ 560.472092][T23596] bridge0: port 1(batadv0) entered disabled state [ 560.531585][T23613] netlink: 508 bytes leftover after parsing attributes in process `syz.4.4556'. [ 560.532590][T23606] netlink: 96 bytes leftover after parsing attributes in process `syz.3.4554'. [ 560.745905][ T5828] Bluetooth: hci3: command 0x0405 tx timeout [ 560.796598][T23627] wg1 speed is unknown, defaulting to 1000 [ 560.802508][T23629] netlink: 'syz.3.4560': attribute type 1 has an invalid length. [ 560.866862][T23629] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4560'. [ 560.955840][ T2975] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 560.965659][ T2975] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 560.976216][T23635] 8021q: adding VLAN 0 to HW filter on device bond0 [ 561.014648][T23633] wg1 speed is unknown, defaulting to 1000 [ 561.698526][T23668] bridge2: entered promiscuous mode [ 561.731819][T23668] bridge3: entered promiscuous mode [ 561.751978][T23668] bridge4: entered promiscuous mode [ 561.771834][T23668] bridge5: entered promiscuous mode [ 561.797336][T23668] bridge6: entered promiscuous mode [ 561.820660][T23668] bridge7: entered promiscuous mode [ 561.854047][T23668] bridge8: entered promiscuous mode [ 561.907009][T23668] bridge9: entered promiscuous mode [ 561.979820][T23668] bridge10: entered promiscuous mode [ 562.044529][T23668] bridge11: entered promiscuous mode [ 562.087307][T23668] bridge12: entered promiscuous mode [ 562.103419][T23668] bridge13: entered promiscuous mode [ 562.133143][T23668] bridge14: entered promiscuous mode [ 562.167234][T23668] bridge15: entered promiscuous mode [ 562.223576][T23668] bridge16: entered promiscuous mode [ 562.241948][T23668] bridge17: entered promiscuous mode [ 562.261118][T23668] bridge18: entered promiscuous mode [ 562.285843][T23668] bridge19: entered promiscuous mode [ 562.304008][T23668] bridge20: entered promiscuous mode [ 562.345911][T23703] wireguard: wg1: Could not create IPv6 socket [ 562.362020][T23668] bridge21: entered promiscuous mode [ 562.418013][T23704] sctp: [Deprecated]: syz.4.4579 (pid 23704) Use of int in max_burst socket option deprecated. [ 562.418013][T23704] Use struct sctp_assoc_value instead [ 562.440382][T23668] bridge22: entered promiscuous mode [ 562.489560][T23668] bridge23: entered promiscuous mode [ 562.521778][T23668] bridge24: entered promiscuous mode [ 562.629596][T23715] __nla_validate_parse: 5 callbacks suppressed [ 562.629615][T23715] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4581'. [ 562.758243][T23724] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input14 [ 562.894866][T23731] netlink: 'syz.1.4585': attribute type 32 has an invalid length. [ 562.936356][T23731] netlink: 'syz.1.4585': attribute type 1 has an invalid length. [ 563.072535][T23738] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4586'. [ 563.078101][T23732] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4582'. [ 563.141966][T23731] bond5: option coupled_control: mode dependency failed, not supported in mode balance-rr(0) [ 563.157867][T23731] bond5 (unregistering): Released all slaves [ 563.213262][T23739] wg1 speed is unknown, defaulting to 1000 [ 563.767536][T23758] ip6gretap0: entered promiscuous mode [ 563.783659][T23758] vlan2: entered promiscuous mode [ 563.859176][T23765] vlan1: entered allmulticast mode [ 563.868432][T23765] veth0_vlan: entered allmulticast mode [ 564.046041][T23780] dummy0: mtu less than device minimum [ 564.054835][T23779] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4600'. [ 564.405010][T23803] bridge0: port 1(batadv0) entered disabled state [ 564.469398][T23803] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 564.502458][T23806] geneve2: entered promiscuous mode [ 564.508140][T23806] geneve2: entered allmulticast mode [ 564.529326][T23799] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 564.546742][T23799] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4605'. [ 564.564764][T23799] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4605'. [ 564.602699][T23812] wg1 speed is unknown, defaulting to 1000 [ 564.634061][T23819] netlink: 'syz.2.4610': attribute type 15 has an invalid length. [ 564.975548][T23833] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4614'. [ 565.002920][T23835] wg1 speed is unknown, defaulting to 1000 [ 565.061085][T23840] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4616'. [ 565.260728][T23848] netlink: 67 bytes leftover after parsing attributes in process `syz.1.4618'. [ 565.432691][T23858] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4621'. [ 565.505047][T23858] wg1 speed is unknown, defaulting to 1000 [ 565.646412][T23866] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 565.690256][T23866] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 565.761959][T23866] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 565.786073][T23866] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 565.866362][T23866] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 565.876567][T23866] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 565.972779][T23866] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 565.985180][T23866] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 566.049430][T23891] netlink: 'syz.2.4631': attribute type 32 has an invalid length. [ 566.079654][T23891] bond7: option coupled_control: invalid value (72) [ 566.088494][T23891] bond7 (unregistering): Released all slaves [ 566.171017][T23502] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 566.191039][T23502] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 566.259636][T23894] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 566.295304][T23896] netlink: 'syz.2.4632': attribute type 23 has an invalid length. [ 566.303788][T21496] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 566.405738][T21496] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 566.557579][T23502] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 566.579759][T23502] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 566.594534][T23502] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 566.605013][T23502] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 566.748000][T23905] netlink: 'syz.3.4634': attribute type 1 has an invalid length. [ 566.818661][T23908] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 567.538121][T23948] netlink: 'syz.3.4646': attribute type 1 has an invalid length. [ 567.627519][T23953] bond9: (slave geneve3): making interface the new active one [ 567.637471][T23953] bond9: (slave geneve3): Enslaving as an active interface with an up link [ 567.692027][ T2975] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 20004 - 0 [ 567.701483][ T2975] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 20004 - 0 [ 567.722383][ T2975] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 20004 - 0 [ 567.738856][ T2975] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 20004 - 0 [ 567.742440][T23958] __nla_validate_parse: 6 callbacks suppressed [ 567.742457][T23958] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4649'. [ 567.803416][T23960] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4650'. [ 567.813643][T23960] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4650'. [ 567.827636][T23960] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4650'. [ 567.866809][T23960] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4650'. [ 567.885241][T23960] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4650'. [ 567.895769][T23960] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4650'. [ 567.906778][T23958] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4649'. [ 567.976858][T23965] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 568.051788][T23971] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4653'. [ 568.495447][T23991] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4661'. [ 569.662952][T24070] IPVS: Error connecting to the multicast addr [ 569.781153][T24086] netlink: zone id is out of range [ 569.787100][T24086] netlink: zone id is out of range [ 569.792244][T24086] netlink: zone id is out of range [ 569.824335][T24086] netlink: zone id is out of range [ 569.842780][T24086] netlink: zone id is out of range [ 569.859273][T24086] netlink: get zone limit has 4 unknown bytes [ 570.326909][T24110] netlink: 'syz.2.4716': attribute type 39 has an invalid length. [ 571.679706][T24156] netlink: 'syz.3.4735': attribute type 1 has an invalid length. [ 571.869676][T24164] virt_wifi0 speed is unknown, defaulting to 1000 [ 571.877385][T24167] openvswitch: netlink: nsh attribute has 12284 unknown bytes. [ 571.890141][T24167] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 571.904466][T24164] virt_wifi0 speed is unknown, defaulting to 1000 [ 571.921985][T24164] virt_wifi0 speed is unknown, defaulting to 1000 [ 571.961961][T24164] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 572.002504][T24164] virt_wifi0 speed is unknown, defaulting to 1000 [ 572.016200][T24164] virt_wifi0 speed is unknown, defaulting to 1000 [ 572.025032][T24164] virt_wifi0 speed is unknown, defaulting to 1000 [ 572.033518][T24164] virt_wifi0 speed is unknown, defaulting to 1000 [ 572.046151][T24164] virt_wifi0 speed is unknown, defaulting to 1000 [ 572.076210][T24164] virt_wifi0 speed is unknown, defaulting to 1000 [ 572.086285][T24164] virt_wifi0 speed is unknown, defaulting to 1000 [ 572.862646][T24218] wg1 speed is unknown, defaulting to 1000 [ 572.871671][T24218] virt_wifi0 speed is unknown, defaulting to 1000 [ 573.877531][T24244] netlink: 'syz.2.4758': attribute type 12 has an invalid length. [ 574.017890][T24250] __nla_validate_parse: 12 callbacks suppressed [ 574.017903][T24250] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4763'. [ 574.050568][T24250] tipc: Enabling of bearer rejected, failed to enable media [ 574.060711][T24250] openvswitch: netlink: nsh attr 0 has unexpected len 8208 expected 0 [ 574.068045][T24251] netlink: 'syz.1.4762': attribute type 1 has an invalid length. [ 574.069302][T24250] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 574.077199][T24251] netlink: 'syz.1.4762': attribute type 3 has an invalid length. [ 574.095626][T24251] netlink: 172 bytes leftover after parsing attributes in process `syz.1.4762'. [ 574.105487][T24251] NCSI netlink: No device for ifindex 813332851 [ 574.812242][T24269] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4767'. [ 574.931411][T24275] netlink: 'syz.0.4768': attribute type 13 has an invalid length. [ 574.954543][T24275] netlink: 'syz.0.4768': attribute type 17 has an invalid length. [ 575.193408][T24283] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 575.240956][T24276] wg1 speed is unknown, defaulting to 1000 [ 575.266966][T24276] virt_wifi0 speed is unknown, defaulting to 1000 [ 575.507287][T24294] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4772'. [ 575.599093][T24299] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check. [ 575.677886][T24303] netlink: 'syz.0.4778': attribute type 11 has an invalid length. [ 575.699581][T24303] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4778'. [ 575.739605][T24305] netlink: 72 bytes leftover after parsing attributes in process `syz.2.4779'. [ 575.754465][T24303] x_tables: ip6_tables: tcp match: only valid for protocol 6 [ 575.780588][T24305] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4779'. [ 575.794545][T24305] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4779'. [ 575.866744][T24314] tipc: Failed to remove unknown binding: 66,1,1/1354464301:648305770/648305772 [ 575.888075][T24314] tipc: Failed to remove unknown binding: 66,1,1/1354464301:648305770/648305772 [ 575.900407][T24316] wg1 speed is unknown, defaulting to 1000 [ 575.901040][T24314] tipc: Failed to remove unknown binding: 66,1,1/1354464301:648305770/648305772 [ 575.908515][T24316] virt_wifi0 speed is unknown, defaulting to 1000 [ 576.039792][T24323] wg1 speed is unknown, defaulting to 1000 [ 576.060222][T24323] virt_wifi0 speed is unknown, defaulting to 1000 [ 576.096063][T24326] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4785'. [ 576.320200][T24340] sctp: [Deprecated]: syz.4.4789 (pid 24340) Use of int in max_burst socket option deprecated. [ 576.320200][T24340] Use struct sctp_assoc_value instead [ 576.409053][T24342] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4787'. [ 576.450086][T24348] veth0: entered promiscuous mode [ 576.477300][T24348] veth0 (unregistering): left promiscuous mode [ 576.712530][T24358] IPVS: Scheduler module ip_vs_sip not found [ 576.722549][T24348] wg1 speed is unknown, defaulting to 1000 [ 576.738203][T24358] IPVS: fo: FWM 3 0x00000003 - no destination available [ 576.755203][T24348] virt_wifi0 speed is unknown, defaulting to 1000 [ 576.876115][T24367] tipc: Enabled bearer , priority 0 [ 576.930763][T24373] syzkaller0: entered promiscuous mode [ 576.937402][T24373] syzkaller0: entered allmulticast mode [ 577.043196][T24367] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 577.169550][T24367] tipc: Resetting bearer [ 577.358107][T24365] tipc: Resetting bearer [ 577.429034][T24365] tipc: Disabling bearer [ 577.465811][T24386] wg1 speed is unknown, defaulting to 1000 [ 577.493577][T24386] virt_wifi0 speed is unknown, defaulting to 1000 [ 577.644078][T24396] netlink: 'syz.3.4801': attribute type 7 has an invalid length. [ 577.658059][T24396] netlink: 'syz.3.4801': attribute type 8 has an invalid length. [ 577.666324][T24396] netlink: 'syz.3.4801': attribute type 15 has an invalid length. [ 577.894809][T24409] netlink: 'syz.3.4802': attribute type 19 has an invalid length. [ 577.980703][T24409] netlink: 'syz.3.4802': attribute type 19 has an invalid length. [ 578.220074][T24426] wg1 speed is unknown, defaulting to 1000 [ 578.241395][T24426] virt_wifi0 speed is unknown, defaulting to 1000 [ 578.276068][T24420] syzkaller1: entered promiscuous mode [ 578.287505][T24428] netlink: 'syz.3.4810': attribute type 1 has an invalid length. [ 578.304499][T24420] syzkaller1: entered allmulticast mode [ 578.631573][T24446] netlink: 'syz.0.4814': attribute type 29 has an invalid length. [ 578.979477][T24466] 8021q: adding VLAN 0 to HW filter on device bond10 [ 579.149938][T24479] ipt_REJECT: TCP_RESET invalid for non-tcp [ 579.203737][T24483] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 579.440284][T24497] netlink: 'syz.1.4832': attribute type 34 has an invalid length. [ 579.525591][T24492] netlink: 'syz.3.4830': attribute type 15 has an invalid length. [ 579.671270][T24511] __nla_validate_parse: 9 callbacks suppressed [ 579.671287][T24511] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4833'. [ 579.707656][T24514] pim6reg1: entered promiscuous mode [ 579.713239][T24514] pim6reg1: entered allmulticast mode [ 579.942124][T24521] netlink: 'syz.3.4838': attribute type 23 has an invalid length. [ 580.036987][T24522] wg1 speed is unknown, defaulting to 1000 [ 580.059531][T24522] virt_wifi0 speed is unknown, defaulting to 1000 [ 580.125420][T24532] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4842'. [ 580.451412][T24551] wg1: entered promiscuous mode [ 580.466434][T24551] wg1: entered allmulticast mode [ 580.957130][T24586] bridge: RTM_NEWNEIGH with invalid ether address [ 580.965969][T24586] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4854'. [ 580.976644][T24589] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4854'. [ 581.089605][T24594] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4857'. [ 581.107380][T24594] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4857'. [ 581.122170][T24594] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4857'. [ 581.232973][T24600] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4859'. [ 581.242829][T24600] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4859'. [ 581.660052][T24621] netlink: 56 bytes leftover after parsing attributes in process `syz.4.4866'. [ 582.293230][ T5982] IPVS: starting estimator thread 0... [ 582.384327][T24657] IPVS: using max 33 ests per chain, 79200 per kthread [ 582.756758][T24671] wg1 speed is unknown, defaulting to 1000 [ 582.765492][T24671] virt_wifi0 speed is unknown, defaulting to 1000 [ 583.116084][T24693] validate_nla: 3 callbacks suppressed [ 583.116104][T24693] netlink: 'syz.0.4885': attribute type 4 has an invalid length. [ 583.227183][T24689] wg1 speed is unknown, defaulting to 1000 [ 583.238543][T24689] virt_wifi0 speed is unknown, defaulting to 1000 [ 583.682152][T24708] wg1 speed is unknown, defaulting to 1000 [ 583.692281][T24708] virt_wifi0 speed is unknown, defaulting to 1000 [ 583.713581][T24712] netlink: 'syz.0.4891': attribute type 16 has an invalid length. [ 584.411699][T24745] wg1 speed is unknown, defaulting to 1000 [ 584.443043][T24745] virt_wifi0 speed is unknown, defaulting to 1000 [ 584.551477][T24758] bridge_slave_1: entered promiscuous mode [ 584.609060][T24763] bridge6: entered allmulticast mode [ 585.003397][T24784] tipc: Enabled bearer , priority 0 [ 585.043175][T24783] tipc: Enabling of bearer rejected, already enabled [ 585.074324][T24787] tipc: Enabled bearer , priority 0 [ 585.087539][T24783] syzkaller0: entered promiscuous mode [ 585.093052][T24783] syzkaller0: entered allmulticast mode [ 585.148870][ T5828] Bluetooth: hci2: command 0x0406 tx timeout [ 585.156862][ T51] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 585.426062][T24788] syzkaller0: entered promiscuous mode [ 585.432215][T24788] syzkaller0: entered allmulticast mode [ 585.531418][T24786] tipc: Resetting bearer [ 585.579325][T24786] tipc: Disabling bearer [ 585.731340][T24795] tipc: Resetting bearer [ 585.828737][T24795] tipc: Disabling bearer [ 585.879570][T24841] __nla_validate_parse: 10 callbacks suppressed [ 585.879588][T24841] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4920'. [ 586.105874][T24841] bond3: (slave bridge0): Releasing active interface [ 586.266334][T24866] netlink: 7 bytes leftover after parsing attributes in process `syz.2.4925'. [ 586.295302][T24865] tipc: Enabled bearer , priority 0 [ 586.303563][T24865] syzkaller0: entered promiscuous mode [ 586.312908][T24865] syzkaller0: entered allmulticast mode [ 586.319389][T24868] netlink: 144 bytes leftover after parsing attributes in process `syz.3.4927'. [ 586.328902][T24864] tipc: Resetting bearer [ 586.350259][T24864] tipc: Disabling bearer [ 586.376207][T24868] wg1 speed is unknown, defaulting to 1000 [ 586.385116][T24868] virt_wifi0 speed is unknown, defaulting to 1000 [ 586.533696][T24870] wg1 speed is unknown, defaulting to 1000 [ 586.561079][T24870] virt_wifi0 speed is unknown, defaulting to 1000 [ 586.930239][T24899] netlink: 'syz.1.4935': attribute type 10 has an invalid length. [ 586.939350][T24899] netlink: 'syz.1.4935': attribute type 10 has an invalid length. [ 587.011920][T24901] wg1 speed is unknown, defaulting to 1000 [ 587.020073][T24901] virt_wifi0 speed is unknown, defaulting to 1000 [ 587.184195][T24912] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4938'. [ 587.193119][T24912] netlink: 'syz.2.4938': attribute type 21 has an invalid length. [ 587.407401][T24924] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4941'. [ 587.541640][T24927] tipc: Enabling of bearer < dp:syz0> rejected, media not registered [ 587.638469][T24932] pim6reg: entered allmulticast mode [ 587.721954][T24934] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4944'. [ 587.757501][T24932] netlink: 'syz.0.4943': attribute type 29 has an invalid length. [ 587.789945][T24940] netlink: 71 bytes leftover after parsing attributes in process `syz.4.4945'. [ 587.835901][T24932] syzkaller1: entered promiscuous mode [ 587.841799][T24932] syzkaller1: entered allmulticast mode [ 587.986972][T24942] wg1 speed is unknown, defaulting to 1000 [ 588.007511][T24942] virt_wifi0 speed is unknown, defaulting to 1000 [ 588.061779][T24949] netlink: 'syz.4.4948': attribute type 10 has an invalid length. [ 588.093153][T24949] netlink: 'syz.4.4948': attribute type 10 has an invalid length. [ 588.129361][T24949] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 588.372004][T24959] wg1 speed is unknown, defaulting to 1000 [ 588.387667][T24961] IPVS: set_ctl: invalid protocol: 0 255.255.255.255:20002 [ 588.398739][T24959] virt_wifi0 speed is unknown, defaulting to 1000 [ 588.411831][T24963] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4952'. [ 588.880809][T24979] bond7: entered promiscuous mode [ 588.910422][T24979] 8021q: adding VLAN 0 to HW filter on device bond7 [ 588.921985][T24978] netdevsim netdevsim0: Direct firmware load for failed with error -2 [ 588.955861][T24978] netdevsim netdevsim0: Falling back to sysfs fallback for: [ 589.086038][T24992] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4959'. [ 589.178500][T24993] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4957'. [ 590.267767][T25034] wg1 speed is unknown, defaulting to 1000 [ 590.278296][T25034] virt_wifi0 speed is unknown, defaulting to 1000 [ 590.628150][T25059] A link change request failed with some changes committed already. Interface gre3 may have been left with an inconsistent configuration, please check. [ 590.665640][T25067] netlink: 'syz.3.4980': attribute type 1 has an invalid length. [ 590.774988][T25068] hsr_slave_0: left promiscuous mode [ 590.781258][T25068] hsr_slave_1: left promiscuous mode [ 590.866460][T25072] wg1 speed is unknown, defaulting to 1000 [ 590.892927][T25072] virt_wifi0 speed is unknown, defaulting to 1000 [ 591.161743][T25096] Bluetooth: MGMT ver 1.23 [ 591.412429][T25108] veth0: entered promiscuous mode [ 591.418967][T25098] wg1 speed is unknown, defaulting to 1000 [ 591.445854][T25098] virt_wifi0 speed is unknown, defaulting to 1000 [ 591.530769][T25122] __nla_validate_parse: 9 callbacks suppressed [ 591.530788][T25122] netlink: 152 bytes leftover after parsing attributes in process `syz.4.4996'. [ 591.547457][T25123] netlink: 3 bytes leftover after parsing attributes in process `syz.2.4995'. [ 591.577076][T25123] netlink: 3 bytes leftover after parsing attributes in process `syz.2.4995'. [ 591.599765][T25123] netlink: 3 bytes leftover after parsing attributes in process `syz.2.4995'. [ 591.625864][T25123] netlink: 3 bytes leftover after parsing attributes in process `syz.2.4995'. [ 591.644796][T25123] netlink: 3 bytes leftover after parsing attributes in process `syz.2.4995'. [ 591.660512][T25123] netlink: 3 bytes leftover after parsing attributes in process `syz.2.4995'. [ 591.695505][T25123] netlink: 3 bytes leftover after parsing attributes in process `syz.2.4995'. [ 591.725807][T25108] veth0: left promiscuous mode [ 591.732001][T25123] netlink: 3 bytes leftover after parsing attributes in process `syz.2.4995'. [ 591.764644][T25123] netlink: 3 bytes leftover after parsing attributes in process `syz.2.4995'. [ 592.145876][T25151] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 592.563941][T25181] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 592.607801][T25178] bond8: option tlb_dynamic_lb: mode dependency failed, not supported in mode active-backup(1) [ 592.621612][T25178] bond8 (unregistering): Released all slaves [ 592.677031][T25185] wg1 speed is unknown, defaulting to 1000 [ 592.685637][T25185] virt_wifi0 speed is unknown, defaulting to 1000 [ 593.342490][T25225] wg1 speed is unknown, defaulting to 1000 [ 593.351264][T25225] virt_wifi0 speed is unknown, defaulting to 1000 [ 593.762111][T25238] pimreg1: tun_chr_ioctl cmd 1074025677 [ 593.768569][T25238] pimreg1: linktype set to 804 [ 594.255457][T25274] wg1 speed is unknown, defaulting to 1000 [ 594.263185][T25274] virt_wifi0 speed is unknown, defaulting to 1000 [ 594.406279][T25284] netlink: 'syz.3.5038': attribute type 39 has an invalid length. [ 594.739584][T25303] 3: renamed from macvlan1 (while UP) [ 595.169891][T25328] blkio.reset_stats is deprecated [ 595.228870][T25338] openvswitch: netlink: Actions may not be safe on all matching packets [ 595.251291][T25339] openvswitch: netlink: Actions may not be safe on all matching packets [ 595.406667][T25327] wg1 speed is unknown, defaulting to 1000 [ 595.441250][T25327] virt_wifi0 speed is unknown, defaulting to 1000 [ 595.779588][T25368] netlink: 'syz.1.5061': attribute type 4 has an invalid length. [ 595.942338][T25378] netlink: 'syz.0.5066': attribute type 1 has an invalid length. [ 595.952998][T25378] netlink: 'syz.0.5066': attribute type 3 has an invalid length. [ 596.344815][ T51] Bluetooth: hci3: command 0x0405 tx timeout [ 596.376770][T25421] openvswitch: netlink: IP tunnel dst address not specified [ 596.549322][T25422] gretap1: entered promiscuous mode [ 596.658300][T25430] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 596.807284][T25438] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 597.041770][T25450] wg1 speed is unknown, defaulting to 1000 [ 597.049605][T25450] virt_wifi0 speed is unknown, defaulting to 1000 [ 597.140275][T25460] netlink: 'syz.0.5081': attribute type 1 has an invalid length. [ 597.239441][T25466] __nla_validate_parse: 80 callbacks suppressed [ 597.239460][T25466] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5083'. [ 597.510621][T25477] wg1 speed is unknown, defaulting to 1000 [ 597.521766][T25477] virt_wifi0 speed is unknown, defaulting to 1000 [ 597.811358][T25489] tipc: Enabling of bearer rejected, already enabled [ 597.842794][T25491] tipc: Enabling of bearer rejected, already enabled [ 597.858801][T25489] syzkaller0: entered promiscuous mode [ 597.876925][T25489] syzkaller0: entered allmulticast mode [ 597.896260][T25489] tipc: Resetting bearer [ 598.080855][T25502] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5091'. [ 598.317334][T25504] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5093'. [ 598.735936][T25526] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5095'. [ 598.846718][T25531] netlink: 104 bytes leftover after parsing attributes in process `syz.2.5097'. [ 599.088328][T25548] xt_TCPMSS: Only works on TCP SYN packets [ 599.094632][T25547] xt_TCPMSS: Only works on TCP SYN packets [ 599.589436][T25579] netlink: 'syz.1.5108': attribute type 21 has an invalid length. [ 599.604530][T25579] netlink: 'syz.1.5108': attribute type 22 has an invalid length. [ 599.633328][T25579] netlink: 'syz.1.5108': attribute type 23 has an invalid length. [ 599.683475][T25579] netlink: 'syz.1.5108': attribute type 25 has an invalid length. [ 599.693868][T25579] netlink: 96 bytes leftover after parsing attributes in process `syz.1.5108'. [ 599.935309][T25593] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5114'. [ 600.038906][T25600] C: renamed from team_slave_0 [ 600.061847][T25600] netlink: 'syz.0.5116': attribute type 3 has an invalid length. [ 600.072101][T25600] netlink: 152 bytes leftover after parsing attributes in process `syz.0.5116'. [ 600.081729][T25600] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 600.100252][T25609] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5113'. [ 600.232426][T25617] netlink: 'syz.0.5121': attribute type 10 has an invalid length. [ 600.235464][T25618] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5120'. [ 600.251940][T25612] openvswitch: netlink: Key type 31 is not supported [ 600.431665][T25624] syzkaller0: entered promiscuous mode [ 600.441851][T25624] syzkaller0: entered allmulticast mode [ 600.807499][T25643] netlink: 'syz.4.5129': attribute type 21 has an invalid length. [ 600.817653][T25643] netlink: 'syz.4.5129': attribute type 21 has an invalid length. [ 600.852165][T25648] netlink: 'syz.1.5130': attribute type 30 has an invalid length. [ 600.915690][T25655] netlink: 'syz.1.5130': attribute type 30 has an invalid length. [ 600.948363][T25648] bond5: option arp_missed_max: invalid value (0) [ 600.955314][T25648] bond5: option arp_missed_max: allowed values 1 - 255 [ 600.964927][T25648] bond5 (unregistering): Released all slaves [ 601.054981][T25639] wg1 speed is unknown, defaulting to 1000 [ 601.056173][T25655] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 601.087377][T25638] wg1 speed is unknown, defaulting to 1000 [ 601.121805][T25639] virt_wifi0 speed is unknown, defaulting to 1000 [ 601.143294][T25638] virt_wifi0 speed is unknown, defaulting to 1000 [ 601.629405][T25698] netlink: 'syz.1.5140': attribute type 6 has an invalid length. [ 601.997435][T25721] netlink: 'syz.0.5147': attribute type 30 has an invalid length. [ 602.038475][ T36] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 602.055270][ T36] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 602.106167][ T36] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 602.132464][ T36] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 602.332298][T25744] ip6_vti0: left promiscuous mode [ 602.353301][T25744] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 602.531440][T25754] __nla_validate_parse: 9 callbacks suppressed [ 602.531458][T25754] netlink: 104 bytes leftover after parsing attributes in process `syz.4.5156'. [ 603.145554][T25762] wg1 speed is unknown, defaulting to 1000 [ 603.153096][T25762] virt_wifi0 speed is unknown, defaulting to 1000 [ 603.274595][T25776] netdevsim netdevsim1: Direct firmware load for failed with error -2 [ 603.305723][T25776] netdevsim netdevsim1: Falling back to sysfs fallback for: [ 603.405386][T25781] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5160'. [ 603.478747][T25787] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5163'. [ 604.320941][T25807] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5167'. [ 605.362042][T25803] pimreg: entered allmulticast mode [ 605.404025][T25804] pimreg: left allmulticast mode [ 605.476429][T25813] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5170'. [ 605.547551][T25790] wg1 speed is unknown, defaulting to 1000 [ 605.575414][T25790] virt_wifi0 speed is unknown, defaulting to 1000 [ 605.583703][T25816] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5170'. [ 605.887175][T25819] syzkaller0: left promiscuous mode [ 605.892438][T25819] syzkaller0: left allmulticast mode [ 605.925025][T25819] tipc: Resetting bearer [ 606.019746][T25834] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5174'. [ 606.321757][T25851] xt_TCPMSS: Only works on TCP SYN packets [ 606.422593][T25853] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5177'. [ 606.594293][T25867] IPVS: set_ctl: invalid protocol: 2 127.0.0.1:20004 [ 606.793459][T25871] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5185'. [ 606.830472][T25871] bond5: Invalid ad_actor_system MAC address. [ 606.836874][T25871] bond5: option ad_actor_system: invalid value (7) [ 606.847503][T25871] bond5 (unregistering): Released all slaves [ 607.352655][T25917] ip6gre1: entered promiscuous mode [ 607.359284][T25917] ip6gre1: entered allmulticast mode [ 607.598601][T25928] ipvlan2: entered allmulticast mode [ 607.604065][T25928] veth0_vlan: entered allmulticast mode [ 607.877432][T25945] IPVS: Unknown mcast interface: pim6reg0 [ 608.178668][T25953] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5205'. [ 608.188892][T25954] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5205'. [ 608.205129][T25953] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5205'. [ 608.503896][T25969] syzkaller0: entered promiscuous mode [ 608.513841][T25969] syzkaller0: entered allmulticast mode [ 608.702802][T25981] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 608.797127][T25987] syzkaller1: entered promiscuous mode [ 608.802848][T25987] syzkaller1: entered allmulticast mode [ 608.813284][T25987] syzkaller1: left promiscuous mode [ 608.818950][T25987] syzkaller1: left allmulticast mode [ 608.950163][T25994] tipc: Enabling of bearer rejected, already enabled [ 609.004096][T25996] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 609.231158][T26011] netlink: 'syz.2.5221': attribute type 15 has an invalid length. [ 609.675299][T26045] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5230'. [ 609.782495][T26049] wg1 speed is unknown, defaulting to 1000 [ 609.820593][T26049] virt_wifi0 speed is unknown, defaulting to 1000 [ 610.103685][T26068] wg1 speed is unknown, defaulting to 1000 [ 610.146046][T26068] virt_wifi0 speed is unknown, defaulting to 1000 [ 610.512917][T26087] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5238'. [ 610.607905][T26098] netlink: 'syz.4.5243': attribute type 1 has an invalid length. [ 610.669081][T26098] bond3: entered promiscuous mode [ 610.676550][T26098] 8021q: adding VLAN 0 to HW filter on device bond3 [ 610.772473][ T30] audit: type=1800 audit(1762871083.635:16): pid=26104 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.5244" name="memory.events" dev="tmpfs" ino=2435 res=0 errno=0 [ 612.524654][T26093] wg1 speed is unknown, defaulting to 1000 [ 612.530985][T26098] netlink: 48 bytes leftover after parsing attributes in process `syz.4.5243'. [ 612.549856][T26101] 8021q: adding VLAN 0 to HW filter on device bond3 [ 612.557312][T26101] bond3: (slave gre4): The slave device specified does not support setting the MAC address [ 612.567732][T26101] bond3: (slave gre4): Setting fail_over_mac to active for active-backup mode [ 612.582649][T26101] bond3: (slave gre4): making interface the new active one [ 612.591043][T25402] skbuff: skb_under_panic: text:ffffffff89d949c7 len:-1826819484 put:-1826819580 head:ffff888020b94000 data:ffff887f8d9c4e3c tail:0xa0 end:0x6c0 dev:bond3 [ 612.607968][T26101] gre4: entered promiscuous mode [ 612.616544][T26101] bond3: (slave gre4): Enslaving as an active interface with an up link [ 612.626099][T25402] ------------[ cut here ]------------ [ 612.631580][T25402] kernel BUG at net/core/skbuff.c:212! [ 612.664645][T25402] Oops: invalid opcode: 0000 [#1] SMP KASAN PTI [ 612.670944][T25402] CPU: 1 UID: 0 PID: 25402 Comm: kworker/1:29 Not tainted syzkaller #0 PREEMPT(full) [ 612.680491][T25402] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 612.690535][T25402] Workqueue: mld mld_ifc_work [ 612.695214][T25402] RIP: 0010:skb_panic+0x157/0x160 [ 612.700226][T25402] Code: c7 e0 bb 6c 8c 48 8b 74 24 08 48 8b 54 24 10 8b 0c 24 44 8b 44 24 04 4d 89 e9 50 55 41 57 41 56 e8 de 96 f5 ff 48 83 c4 20 90 <0f> 0b cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 612.719819][T25402] RSP: 0018:ffffc900041bf3d8 EFLAGS: 00010286 [ 612.725875][T25402] RAX: 0000000000000098 RBX: dffffc0000000000 RCX: dd4b912ae7726a00 [ 612.733836][T25402] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 612.741791][T25402] RBP: 00000000000006c0 R08: 0000000000000003 R09: 0000000000000004 [ 612.749748][T25402] R10: dffffc0000000000 R11: fffffbfff1bba680 R12: ffff888026ff2150 [ 612.757702][T25402] R13: ffff888020b94000 R14: ffff887f8d9c4e3c R15: 00000000000000a0 [ 612.765663][T25402] FS: 0000000000000000(0000) GS:ffff88812623b000(0000) knlGS:0000000000000000 [ 612.774571][T25402] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 612.781134][T25402] CR2: 00000000bb1414ac CR3: 0000000044714000 CR4: 00000000003526f0 [ 612.789089][T25402] Call Trace: [ 612.792351][T25402] [ 612.795266][T25402] ? ipgre_header+0x67/0x290 [ 612.799846][T25402] ? ipgre_header+0x67/0x290 [ 612.804421][T25402] skb_push+0xc3/0xe0 [ 612.808389][T25402] ipgre_header+0x67/0x290 [ 612.812791][T25402] ? __pfx_ipgre_header+0x10/0x10 [ 612.817800][T25402] neigh_connected_output+0x286/0x460 [ 612.823165][T25402] ip6_finish_output2+0xfb3/0x1480 [ 612.828262][T25402] ? __pfx_ip6_finish_output2+0x10/0x10 [ 612.833793][T25402] ? ip6_mtu+0x7d/0x490 [ 612.837935][T25402] ? ip6_mtu+0x38c/0x490 [ 612.842164][T25402] ? ip6_finish_output+0x2ef/0x4e0 [ 612.847262][T25402] ? ip6_output+0x126/0x550 [ 612.851806][T25402] ip6_output+0x340/0x550 [ 612.856211][T25402] NF_HOOK+0x9e/0x380 [ 612.860175][T25402] ? NF_HOOK+0x101/0x380 [ 612.864396][T25402] ? __pfx_NF_HOOK+0x10/0x10 [ 612.868967][T25402] ? __pfx_dst_output+0x10/0x10 [ 612.873804][T25402] ? icmp6_dst_alloc+0x3a5/0x420 [ 612.878780][T25402] ? icmp6_dst_alloc+0x3a5/0x420 [ 612.883709][T25402] mld_sendpack+0x8d4/0xe60 [ 612.888211][T25402] ? mld_sendpack+0x1e7/0xe60 [ 612.892872][T25402] ? __pfx_mld_sendpack+0x10/0x10 [ 612.897890][T25402] mld_ifc_work+0x83e/0xd60 [ 612.902388][T25402] ? process_scheduled_works+0x9ef/0x17b0 [ 612.908140][T25402] process_scheduled_works+0xae1/0x17b0 [ 612.913683][T25402] ? __pfx_process_scheduled_works+0x10/0x10 [ 612.919652][T25402] worker_thread+0x8a0/0xda0 [ 612.924234][T25402] ? __kthread_parkme+0x7b/0x200 [ 612.929169][T25402] kthread+0x711/0x8a0 [ 612.933259][T25402] ? __pfx_worker_thread+0x10/0x10 [ 612.938359][T25402] ? __pfx_kthread+0x10/0x10 [ 612.942936][T25402] ? _raw_spin_unlock_irq+0x23/0x50 [ 612.948130][T25402] ? lockdep_hardirqs_on+0x9c/0x150 [ 612.953319][T25402] ? __pfx_kthread+0x10/0x10 [ 612.957910][T25402] ret_from_fork+0x4bc/0x870 [ 612.962484][T25402] ? __pfx_ret_from_fork+0x10/0x10 [ 612.967577][T25402] ? __switch_to_asm+0x39/0x70 [ 612.972352][T25402] ? __switch_to_asm+0x33/0x70 [ 612.977094][T25402] ? __pfx_kthread+0x10/0x10 [ 612.981668][T25402] ret_from_fork_asm+0x1a/0x30 [ 612.986415][T25402] [ 612.989427][T25402] Modules linked in: [ 612.994688][T25402] ---[ end trace 0000000000000000 ]--- [ 613.010004][T25402] RIP: 0010:skb_panic+0x157/0x160 [ 613.015343][T25402] Code: c7 e0 bb 6c 8c 48 8b 74 24 08 48 8b 54 24 10 8b 0c 24 44 8b 44 24 04 4d 89 e9 50 55 41 57 41 56 e8 de 96 f5 ff 48 83 c4 20 90 <0f> 0b cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 613.034998][T25402] RSP: 0018:ffffc900041bf3d8 EFLAGS: 00010286 [ 613.041055][T25402] RAX: 0000000000000098 RBX: dffffc0000000000 RCX: dd4b912ae7726a00 [ 613.049485][T25402] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 613.057519][T25402] RBP: 00000000000006c0 R08: 0000000000000003 R09: 0000000000000004 [ 613.065529][T25402] R10: dffffc0000000000 R11: fffffbfff1bba680 R12: ffff888026ff2150 [ 613.073519][T25402] R13: ffff888020b94000 R14: ffff887f8d9c4e3c R15: 00000000000000a0 [ 613.081632][T25402] FS: 0000000000000000(0000) GS:ffff88812623b000(0000) knlGS:0000000000000000 [ 613.090673][T25402] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 613.097371][T25402] CR2: 00007fb6303d4f98 CR3: 0000000034846000 CR4: 00000000003526f0 [ 613.105858][T25402] Kernel panic - not syncing: Fatal exception [ 613.112196][T25402] Kernel Offset: disabled [ 613.116504][T25402] Rebooting in 86400 seconds..