last executing test programs: 2.707827098s ago: executing program 2 (id=2147): r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000008c0)=@security={'security\x00', 0x44, 0x4, 0x408, 0xffffffff, 0x108, 0x268, 0x268, 0xffffffff, 0xffffffff, 0x338, 0x338, 0x338, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @dev, [], [], 'nr0\x00', 'nr0\x00'}, 0x203, 0xa8, 0x108, 0x8502}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@broadcast, [], 0x0, 0x0, 0x0, 0x0, 0xfffffb8b, 0x9, 0x0, 0x1}}}, {{@uncond, 0x0, 0x118, 0x160, 0x0, {0x0, 0x11}, [@common=@ipv6header={{0x28}}, @common=@hbh={{0x48}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}, {{@ipv6={@private2, @remote, [], [], 'hsr0\x00', 'dvmrp0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x468) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) syz_emit_ethernet(0x2e, &(0x7f0000000240)={@local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x65, 0x0, 0x0, 0x21, 0x0, @private, @broadcast}, @echo_reply={0x0, 0x0, 0x0, 0x65, 0xce66, "64d1b4e4"}}}}}, 0x0) 2.536815119s ago: executing program 2 (id=2150): sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x101842, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000040)=0xfffffffa) ioctl$PPPIOCSACTIVE(r1, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0}) write$ppp(r1, &(0x7f0000000100)="45c3a53271b1", 0x6) readv(r1, &(0x7f0000001680)=[{&(0x7f0000000600)=""/4096, 0x1000}, {0x0}], 0x2) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000040000000030a01020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000050900010073797a310000000030000000050a01020000000000000000010020000c001d4000000000000000010900010073797a310000000004000480140000001100010000000000000000000000000a"], 0xb8}}, 0x0) 2.467791934s ago: executing program 0 (id=2151): socket$nl_route(0x10, 0x3, 0x0) (async) socketpair(0xa, 0x800, 0x1ff, &(0x7f0000001280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) (async, rerun: 64) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) (rerun: 64) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, 0x0, &(0x7f0000001080)) (async, rerun: 32) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (rerun: 32) pread64(r4, &(0x7f00000000c0)=""/29, 0xffffffffffffffa0, 0x4004) (async, rerun: 64) r5 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) (async) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000940)=ANY=[@ANYBLOB="240000001a000100000000000000000002"], 0x24}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) (async) r6 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async, rerun: 64) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0xb, &(0x7f0000000280)=@framed={{0x18, 0x3}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r6}, @generic={0x66, 0x0, 0x0, 0x0, 0x800000}, @initr0, @exit, @alu={0x7, 0x0, 0x0, 0x3, 0x0, 0x0, 0x10}]}, &(0x7f0000000000)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc, @void, @value}, 0x94) (rerun: 64) 2.093739964s ago: executing program 2 (id=2154): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x800448d2, &(0x7f0000000040)) (async) ioctl$sock_bt_hci(r0, 0x800448d2, &(0x7f0000000040)) r1 = socket$alg(0x26, 0x5, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000199c0)=ANY=[@ANYBLOB="1400000026000b00000000200000000086fea71d000025b853564fb2748730ba874a4cd5369c512a006f6f552b4ccd06d21397d8ef2d4713aae900000000aa0012555414290a00000000000000d5bf9ae437263eb4751042a4e8568a438038474b381cf0332116bd75e4cd2b6f459e92b356448d731f69e230d78308000000fc7df5707c96b57b9bc9aafcabad37529d6996d9ce34bdd7dd0bbd7080d088e8dd518ee11f2b45ce03df00"/181], 0x14}}, 0x40010) (async) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000199c0)=ANY=[@ANYBLOB="1400000026000b00000000200000000086fea71d000025b853564fb2748730ba874a4cd5369c512a006f6f552b4ccd06d21397d8ef2d4713aae900000000aa0012555414290a00000000000000d5bf9ae437263eb4751042a4e8568a438038474b381cf0332116bd75e4cd2b6f459e92b356448d731f69e230d78308000000fc7df5707c96b57b9bc9aafcabad37529d6996d9ce34bdd7dd0bbd7080d088e8dd518ee11f2b45ce03df00"/181], 0x14}}, 0x40010) socket(0x40000000015, 0x805, 0x0) (async) r3 = socket(0x40000000015, 0x805, 0x0) getsockopt(r3, 0x114, 0x271b, &(0x7f0000000440)=""/102400, &(0x7f00000000c0)=0x41) bind$alg(r1, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-avx\x00'}, 0x58) (async) bind$alg(r1, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-avx\x00'}, 0x58) r4 = accept4(r1, 0x0, 0x0, 0x0) recvmmsg$unix(r4, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'syz_tun\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'syz_tun\x00'}) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000019a80)=@delchain={0x38, 0x65, 0x8, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x4, 0x4}, {0xffe0}}, [@filter_kind_options=@f_u32={{0x8}, {0x4}}, @TCA_RATE={0x6}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x6004840) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'wlan0\x00'}) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000000140)=[@in={0x2, 0x4e21, @empty}, @in={0x2, 0x4e21, @multicast2}, @in6={0xa, 0x4e23, 0x1fc0000, @private2={0xfc, 0x2, '\x00', 0x1}, 0x1000}, @in={0x2, 0x4e24, @local}], 0x4c) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x1f, &(0x7f0000000040)={0x0, @in6={{0xa, 0x4e21, 0x80, @remote, 0x7fff}}, 0xa, 0x288}, 0x90) (async) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x1f, &(0x7f0000000040)={0x0, @in6={{0xa, 0x4e21, 0x80, @remote, 0x7fff}}, 0xa, 0x288}, 0x90) socket(0x10, 0x803, 0x0) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000300)="0b8a1539ce78970d9020b4363e1e23e2897f4a176ecf5d986fdb371543e4d31ac37614104dedd2cdfedc40d657dc674ac423cea404247b9787", 0x39) socket$inet6_sctp(0xa, 0x1, 0x84) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x4037cf4a358b1576, 0x810, 0xffffffffffffffff, 0xffffc000) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) 2.093209907s ago: executing program 0 (id=2155): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0xa, 0x2, 0x398, @remote}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='veno\x00', 0x5) (async) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='veno\x00', 0x5) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x109942, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=@setneightbl={0x14, 0x43, 0x1, 0x70bd29, 0x25dfdbfc, {0x2}}, 0x14}}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002840)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r3, 0x18000000000002a0, 0x204, 0xfffff000, &(0x7f0000000040)="5aee41dea43e63a3f7fb7f11c72b", 0x0, 0xf000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r4 = socket(0x10, 0x803, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x38, r6, 0x20, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_DISABLE_HT={0x4}, @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x38}}, 0x0) syz_80211_inject_frame(0x0, 0x0, 0x0) (async) syz_80211_inject_frame(0x0, 0x0, 0x0) syz_80211_inject_frame(0x0, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', 0x0}) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x2c, 0x9, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}}) (async) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x2c, 0x9, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}}) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000040)={'veth0_to_team\x00', 0x800}) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000100)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xac, &(0x7f000000cf3d)=""/172, 0x41100, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2000, @void, @value}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000100)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xac, &(0x7f000000cf3d)=""/172, 0x41100, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2000, @void, @value}, 0x94) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r8, 0x84, 0x6b, &(0x7f00000000c0)=[@in={0x2, 0x4e20, @local}], 0x10) (async) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r8, 0x84, 0x6b, &(0x7f00000000c0)=[@in={0x2, 0x4e20, @local}], 0x10) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r8, 0x84, 0xc, &(0x7f0000000000), 0x4) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0x1, 0x10}, {0xd}, {0xe, 0x10}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x400c800}, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0x1, 0x10}, {0xd}, {0xe, 0x10}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x400c800}, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000580)) ioctl$PPPIOCSACTIVE(r1, 0x40107446, &(0x7f0000000080)) socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="00ad8430d600fbdfdf250200c40f26e041000008003f889f659d8aa6199400f8b71157efa3b5858d88592d05d0b15cc9a439c76b1de1eabf6d26658d1e60813859c7e2be5e600f6ad8263df52d778053493a9c85a07b6309d92ce165d01df2712b92adfe3c8d7af0ed90412ac96e411ececb5d0799b95e11428027c13cdc25d34c165f87669610d7c04291b7bdc9df106492d828518d36879d6aea982b4a5c3bf7a1c07c7a129b5d917143ac6b433f0e4f97d05da8ddbf369fd5860a439a2163b600"/204], 0x1c}, 0x1, 0x0, 0x0, 0x24048445}, 0x41) (async) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="00ad8430d600fbdfdf250200c40f26e041000008003f889f659d8aa6199400f8b71157efa3b5858d88592d05d0b15cc9a439c76b1de1eabf6d26658d1e60813859c7e2be5e600f6ad8263df52d778053493a9c85a07b6309d92ce165d01df2712b92adfe3c8d7af0ed90412ac96e411ececb5d0799b95e11428027c13cdc25d34c165f87669610d7c04291b7bdc9df106492d828518d36879d6aea982b4a5c3bf7a1c07c7a129b5d917143ac6b433f0e4f97d05da8ddbf369fd5860a439a2163b600"/204], 0x1c}, 0x1, 0x0, 0x0, 0x24048445}, 0x41) 1.894551165s ago: executing program 3 (id=2157): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x810}, 0xe6d6cbfa4159df1b) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000004dc0)={0x6, 0x5, &(0x7f0000004a80)=@raw=[@tail_call], &(0x7f0000004b80)='syzkaller\x00', 0x0, 0xed, &(0x7f0000004bc0)=""/237, 0x40f00, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd, @void, @value}, 0x90) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_opts(r1, 0x0, 0x9, &(0x7f0000000100)="4b30e09be19328a967a4759acd3abababb0aeec19b3441580bfafffa6be9ea86a834ff7dd0eea93daa2c2cb06b3d6073845cc663db7bf831ee52", 0x3a) 1.794768674s ago: executing program 2 (id=2158): unshare(0x62040200) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) (async) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r1) (async) sendmmsg$alg(r1, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe1a}], 0x1, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x4924924924924b9, 0x0) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x20000253) bind$vsock_stream(r1, &(0x7f0000001240)={0x28, 0x0, 0x0, @my=0x1}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) (async, rerun: 64) close(0x3) (async, rerun: 64) r2 = socket$igmp(0x2, 0x3, 0x2) getsockopt$ARPT_SO_GET_ENTRIES(r2, 0x0, 0x61, &(0x7f0000000000)=ANY=[@ANYBLOB='filter'], &(0x7f0000000100)=0x28) (async) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) (async) r4 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_timeval(r4, 0x1, 0x43, &(0x7f0000000040)={0x0, 0x2710}, 0x10) (async) sendmsg$inet(r4, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x4003, @local}, 0x10, 0x0}, 0x30004001) (async) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f00000001c0)={'bond_slave_1\x00', &(0x7f0000000380)=@ethtool_link_settings={0x4c, 0x4, 0x6, 0x40, 0x81, 0x81, 0x5, 0x9, 0xfd, 0xfc, [0x1, 0x2, 0x4, 0x8, 0x3, 0x8, 0xfff, 0xe066], [0x7, 0x200, 0x6a]}}) (async) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0x0, 0xfbfff034}, {0x80000006}]}, 0x10) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) (async) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x82041, 0x0) close(r7) (async, rerun: 64) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) (rerun: 64) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) (async) write$cgroup_subtree(r6, &(0x7f0000000380)=ANY=[@ANYBLOB="8fedcb5d07081196f37538e486dd6372ce22667f2c"], 0x280) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r3}, 0x4) (async) socket$kcm(0x10, 0x2, 0x0) 1.691491639s ago: executing program 3 (id=2159): r0 = socket(0x2000000015, 0x80005, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @mcast1}, 0x1c) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x13, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="6eaa0000000000007110a3000000000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000fc0000630134000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_emit_ethernet(0x5a, &(0x7f0000000000)=ANY=[@ANYRES64=0x0, @ANYRES8, @ANYRES8=r1], 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) 1.690141097s ago: executing program 1 (id=2160): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x9, &(0x7f0000000000)=0x1000, 0x4) unshare(0x28040680) r1 = socket$unix(0x1, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb41a}, [@call={0x85, 0x0, 0x0, 0xbc}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bind$unix(r1, 0x0, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x9, 0x0, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x3, 0xe, &(0x7f0000000200)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x4}, 0x8, 0x10, &(0x7f0000001440), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = socket$alg(0x26, 0x5, 0x0) r3 = accept(r2, 0x0, &(0x7f0000000040)) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001340), r3) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000001400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000013c0)={&(0x7f0000001380)={0x1c, r5, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8800}, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f00000012c0)=@broute={'broute\x00', 0x20, 0x4, 0x648, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000001880], 0x0, &(0x7f0000000140), &(0x7f0000001880)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{0x11, 0x20, 0x884c, 'netpci0\x00', 'vlan1\x00', 'macvlan0\x00', 'bond_slave_0\x00', @multicast, [0xff, 0x0, 0x0, 0xff, 0xff, 0xff], @broadcast, [0xff, 0xff, 0x0, 0x0, 0xff], 0x6e, 0x1ce, 0x246, [], [@common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x2}}}, @common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x5, 'system_u:object_r:udev_tbl_t:s0\x00'}}}], @common=@NFLOG={'NFLOG\x00', 0x50, {{0x2, 0x440, 0x100, 0x0, 0x0, "be5c1f951bc8c99dac95bba61a18042c16f53f78a6b11ae4a08b0a1b7310e131847ae9edc5c898a8d723f38113086638cd9eb2b7ad2eb853d3b0d5c985ddfae7"}}}}, {0x3, 0x8, 0x886c, 'veth0_virt_wifi\x00', 'vlan0\x00', 'xfrm0\x00', 'vcan0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, [0x0, 0x0, 0xff, 0xff, 0xff, 0xff], @remote, [0xff, 0xff, 0xff, 0xff, 0xff], 0x6e, 0x6e, 0xbe, [], [], @common=@LED={'LED\x00', 0x28, {{'syz1\x00', 0x0, 0x3ff, {0x9}}}}}]}, {0x0, '\x00', 0x2, 0xffffffffffffffff, 0x2, [{0x5, 0x10, 0x1, 'team_slave_0\x00', 'team_slave_0\x00', 'batadv0\x00', 'veth0_to_bridge\x00', @local, [0x0, 0x0, 0xff, 0xff, 0xff], @empty, [0xff, 0xff, 0x0, 0x0, 0xff, 0xff], 0x6e, 0x136, 0x166, [], [@common=@NFLOG={'NFLOG\x00', 0x50, {{0x5a48, 0x7, 0x9, 0x1, 0x0, "e2a169c2ef77c3d27097569132410ac62ed0bd269e44c80bd47fd9d3554778aac490f0e238d9016bbb1184099a93d997285e0e3fb1ec5068d64e2c52e7c45214"}}}, @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x0, 'syz0\x00', {0x6}}}}], @common=@AUDIT={'AUDIT\x00', 0x8, {{0x1}}}}, {0x3, 0x8, 0x88e5, 'veth1_virt_wifi\x00', 'bridge_slave_0\x00', 'wg0\x00', 'team_slave_1\x00', @broadcast, [0x80, 0xff, 0xff, 0xff, 0x0, 0xff], @dev={'\xaa\xaa\xaa\xaa\xaa', 0x30}, [0xff, 0x0, 0xff, 0xff, 0xff, 0xff], 0xe6, 0x11e, 0x14e, [@statistic={{'statistic\x00', 0x0, 0x18}, {{0x0, 0x1, 0x8000, 0x8, 0x10, {0x5}}}}, @cluster={{'cluster\x00', 0x0, 0x10}, {{0x9b96, 0x948, 0x7, 0x1}}}], [@common=@mark={'mark\x00', 0x10, {{0xffffffd0, 0xfffffffffffffffc}}}], @common=@NFQUEUE0={'NFQUEUE\x00', 0x8, {{0x3}}}}]}]}, 0x6c0) bind$alg(r2, &(0x7f0000000080)={0x26, 'rng\x00', 0x0, 0x0, 'jitterentropy_rng\x00'}, 0x58) r6 = accept(r2, 0x0, 0x0) r7 = socket(0x2b, 0x80801, 0x1) connect$inet6(r7, &(0x7f0000000040)={0xa, 0xfffc, 0x8, @empty}, 0x1c) setsockopt(r7, 0x6, 0x3, 0x0, 0xcc) syz_genetlink_get_family_id$gtp(&(0x7f0000001480), r6) r8 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000001500)=@o_path={&(0x7f00000014c0)='./file0\x00', 0x0, 0x4004, r6}, 0x18) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000001600)={r8, &(0x7f0000001540)="a78d1bc7723b1a0fa5781ca8e6f23d3b4f04bf2b5097d9678bb50f45af50b4ec7d2ecc453d3a0e7bf1e551b86f1172ab30de4686ed1ee760dddb00a048f4375220a0b1d674", &(0x7f00000015c0)=@tcp=r7, 0x4}, 0x20) recvmsg(r6, &(0x7f000000b680)={0x0, 0x0, &(0x7f000000b600)=[{&(0x7f000000b4c0)=""/5, 0x5}], 0x1}, 0x0) 1.686215604s ago: executing program 4 (id=2161): bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bb000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000003100000095"], &(0x7f0000000480)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41000, 0x42, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0, 0x0, 0xcc86, @void, @value}, 0x94) 1.520041592s ago: executing program 0 (id=2162): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYRESHEX=r0], 0x28}}, 0x0) 1.519312501s ago: executing program 3 (id=2163): r0 = socket$kcm(0x10, 0x0, 0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x20) connect$l2tp6(r1, &(0x7f0000001100)={0xa, 0x0, 0x1, @ipv4={'\x00', '\xff\xff', @empty}, 0x9, 0x4}, 0x20) getsockopt$sock_buf(r1, 0x1, 0x1c, 0x0, &(0x7f0000000140)=0xfc) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002280)=ANY=[@ANYRESDEC=r0], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffc, @void, @value}, 0x94) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r3, &(0x7f0000000240)='\x00', 0xfffffffffffffce0, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x1000, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000200)=0x412, 0x4) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000000)={0xffffffffffffffff, 0x0, &(0x7f00000022c0)=""/4104, 0xc26bfe8e8f6baca8}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000540)='syzkaller\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x40f00, 0x34, '\x00', 0x0, @fallback=0x3c, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000080)='sys_exit\x00', r4, 0x0, 0x10000000000}, 0x18) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={0xffffffffffffffff, 0x58, &(0x7f0000000600)}, 0x10) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000002c0)=r2, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x4c, &(0x7f0000000000), 0x4) ioctl$BTRFS_IOC_TREE_SEARCH(r5, 0xd0009411, &(0x7f0000001280)={{0x0, 0x2, 0x80000000, 0x2, 0xfffffffffffffffa, 0xfffffffffffffffa, 0x3, 0x1, 0x48000, 0x38f, 0x4, 0xa, 0x100, 0xe615, 0x8}}) r8 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r8, 0x29, 0x48, 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP(r2, 0xd0009412, &(0x7f0000003780)={r7, 0xc1}) sendmsg$unix(r5, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYRES64=r3], 0x18, 0x4004010}, 0x4010) recvmsg$unix(r6, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00)}, 0x2000) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="2c0000000b06034365ea3c00000000000500100604000700000000937cfbf5000100070000000900020073797a3100000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x29, 0x2, 0x0) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r10, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010024bd7000fcdbdf2501000000180001801400020073797a5f74756e00000000ffffff7f00000000000600000005000300000000002d931820346bbc7ec01bcf64a625eb2c3468e15948e3cc2436cc19eefd95009bc4f81d62749dfe886b826d8ec9978af0724c9c6118ceeb4923c5b81f2aba8ebc41e93c6e8e1cf1787520ab6bd96358e44415a8b406e10607fc01a5263c463c4fb99232860e66ffe38e693c0781635c3741ab866f5bd6"], 0x3c}, 0x1, 0x0, 0x0, 0x20009005}, 0x4000080) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000003c0)="d800000018007b18e00212ba0d8105040a0a1100fe0f040b067c55a1bc0009001e0006990300000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b01602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e9cb5", 0xd2}, {&(0x7f00000005c0)="f80ec2e2badd", 0x6}], 0x2, 0x0, 0x0, 0x2663}, 0x40804) 1.386152986s ago: executing program 1 (id=2164): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x15, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xd0}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {0x7, 0x0, 0xb, 0x6}, {0x85, 0x0, 0x0, 0x5}, {0x4}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x6, 0xa, 0x9, 0xfff0, 0xf1}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x4}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x6, 0x1, 0xb, 0xa, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x9, 0x20}, {}, {}, {0x18, 0x6, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0xf, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r2}, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) r6 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r6, 0x0, 0x487, &(0x7f0000002100), &(0x7f0000000000)=0x30) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000680)={0x5c, r5, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_SEC_DEVKEY={0x40, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0002}}, @NL802154_DEVKEY_ATTR_ID={0x28, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x1c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6}]}, @NL802154_KEY_ID_ATTR_MODE={0x8}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x6}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x5396ebcfacd913b0}, 0x20004010) 1.37124417s ago: executing program 0 (id=2165): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40482, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xc, 0x4, &(0x7f0000000240)=@framed={{}, [@ldst={0x1, 0x2, 0x4, 0x0, 0x1, 0xaa}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000000, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xe, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000880)='GPL\x00', 0x5, 0x49b, &(0x7f000000cf3d)=""/178, 0x41100, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x3}, 0xfffffffffffffdfd, 0x10, 0x0, 0x17, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xe, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000880)='GPL\x00', 0x5, 0x49b, &(0x7f000000cf3d)=""/178, 0x41100, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x3}, 0xfffffffffffffdfd, 0x10, 0x0, 0x17, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)) pwritev(r0, &(0x7f0000000040)=[{&(0x7f0000000180)="80fd06000040", 0x27}], 0x2, 0x0, 0x4) 1.323818731s ago: executing program 4 (id=2166): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendto(r1, &(0x7f0000000740)="1200", 0x2, 0x0, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000100), r3) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f0000000040)=r4) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01002bbd7020000000008300000008000300", @ANYRES32=0x0, @ANYBLOB="28000e80240000802000038004000200040002004400020004000180000002000400020057116cec04000180c3841fe317939d92310f0f73a49cd58a1667c17a0b99b86f8533d8602ac47d97d6008a4b79ce9689e6184ea6c5cadece000582f8a0da2550579fe480"], 0x44}, 0x1, 0x0, 0x0, 0x24048084}, 0x884) r7 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r7, 0x1, 0x4b, &(0x7f0000000040)=0xfd87, 0x4) r8 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r8, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r9, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_SELECT={0x5}]}}}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x4000) 1.057430239s ago: executing program 0 (id=2167): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000001a000000000000000000850000001700000095"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$unix(0x1, 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) syz_emit_ethernet(0x46, &(0x7f0000000ac0)={@broadcast, @multicast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, '\x00', 0x10, 0x0, 0x0, @local, @local, {[@dstopts={0x73, 0x1, '\x00', [@ra, @ra]}]}}}}}, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) socket$nl_route(0x10, 0x3, 0x0) pipe(0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x80800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="034886dd010000000000140000006000000001002f00fe88a43de1a400000000000000007d01ff020000000000000000000000000001000088be"], 0xfdef) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x3, 0x8000000003c) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) 971.907425ms ago: executing program 4 (id=2168): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="400000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100736974000c00028008000300ffffffff08000300", @ANYRES32=0x0, @ANYBLOB="d1ccbe6b733303a2c2a0f5492967005d85c985d5ae178211ea29fd3f4f47daece1481649cbe34d7733a9a90c09d0827516e7225bbc7330940aac427d5428461ff00e43d0c6884691fb4804f946244e37f1bd8f7f05eb780164ba16712239d59a172ab5ba9a499765173daef3fc5175d0375dd00afbef8a1bc30fc625cb33d61fb77f4486baeac3be9c441d9078ac1482118f2970d6430b06398a3d4c94d8b5cc9f7f3d1bad73fc1df37c952f5c1e6912a96da7b704d56c279720c54e0a7af8a9ddd942fecd89eab34fe33457467fbdc1"], 0x40}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_REMOVE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="7f892cbd00"/14], 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x24000090) r2 = socket$inet_sctp(0x2, 0x5, 0x84) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x85, &(0x7f00000001c0)={r5, @in={{0x2, 0x0, @empty}}, 0x27c0}, 0x90) getsockopt$inet_sctp_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000040)={r5, 0x101, 0xae3, 0xec8}, &(0x7f00000000c0)=0x10) 912.998583ms ago: executing program 1 (id=2169): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0xe671}, [@call={0x85, 0x0, 0x0, 0x28}, @printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x800000}, {0x85, 0x0, 0x0, 0x7b}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket(0x11, 0xa, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000040)=0x8, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="0000000000000000200051229dc9", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 767.724297ms ago: executing program 4 (id=2170): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f0000000a40)=ANY=[@ANYBLOB="1801000000050000000000000000ea0485000000d000000095"], &(0x7f0000000a00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x16, 0x0, 0x4, 0xffff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r3, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x4e20, @local}, 0x10, 0x0, 0x0, &(0x7f0000000340)=[@cswp={0x58, 0x114, 0x7, {{0x400, 0x21}, &(0x7f0000000280)=0x4, 0x0, 0x7, 0x6e, 0x8000000000000001, 0x3, 0x20, 0x2}}], 0x58}, 0x0) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) r4 = openat$cgroup_ro(r2, &(0x7f0000002bc0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x13, r4, 0x0) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000001680)={0x0, 0x7, 0x1, [0x2]}, &(0x7f00000016c0)=0xa) sendmmsg$inet_sctp(r4, &(0x7f0000001800)=[{&(0x7f00000000c0)=@in6={0xa, 0x4e22, 0x391, @private2={0xfc, 0x2, '\x00', 0x1}, 0x80000000}, 0x1c, &(0x7f0000000180)=[{&(0x7f0000000200)="181d3eaa0d19bfbf1fe235f5f05951a0b0525620ec78344a295bfb961662bd0c2360a8e5f9cef6506ffe386e832fa5f45cae9b748d837f1b142bf09a465b30a3028e27ea20172a9b8a5dc3d8975d4c0a93f0bdd078617db0", 0x58}, {&(0x7f0000000480)="771b97ba8f6335b37e4b123deec2740d4dd885f382fdef52b2d79c2ac590f99fa324c97ce5644863813a8bd1aedb829ebdc2b12ea872740297b4c97d1a8118bd09171d415db42fe9edc03598c497cf4b1b8a65a03541172e6047f2fc1cd32f03d33f0149ab6e2a3fb91057e27df0975fb0789ca247a77fa71db47b14b4a226e3e0a35e5e808fa232a6901bf48e36a88217fefcba71a9752bfc63a3723e2f866c71b53767b4a6b7e2876e21e6d3ad6e9e299f69417892099352d0d864c561702bace48ff39fd7de3447dd748a56182c8b5e0ea6e0c690179d36f2472f", 0xdc}, {&(0x7f0000000100)}], 0x3, &(0x7f0000000640)=[@init={0x18, 0x84, 0x0, {0xff5c, 0xf4ca, 0xde4d, 0x2}}, @dstaddrv4={0x18, 0x84, 0x7, @remote}, @prinfo={0x18, 0x84, 0x5, {0x30, 0xfff}}, @dstaddrv4={0x18, 0x84, 0x7, @loopback}, @authinfo={0x18, 0x84, 0x6, {0x4}}], 0x78, 0x80c}, {&(0x7f0000000280)=@in={0x2, 0x4e24, @rand_addr=0x64010101}, 0x10, &(0x7f0000000880)=[{&(0x7f0000000700)="c6c310ae94db4cf3d958244199db85a2e10b434066619da3b75fd79b8bd24b0b011f8936ce1b53a40af9ad9ff9e673eb45abcdfe37c3e29227ef115a29477926c9bb6859a72447d76f6f062fbb759d55483f4a5ba162c8b764942bc7ac49c06d05667c96a0dfb665339928afe7014de0c55baeb87780d3061e77c2572955841cdec39719dc8b0af322f8da5993c2f03c781a9e", 0x93}, {&(0x7f00000002c0)="9b0820e5432e09da7f775eff3e712afc0c1f", 0x12}, {&(0x7f0000000580)="d7c925c3104c5cb034c52fcbdc4b68e3f113cb3e095d0781585697ae45a0e48bcfd4d4b450f2c19dab1f8bb2f5c77863070bf35240cb80b27fb1e2c98bf8ad7d30ae7fdb6c22d5b8f5eeebfd2d895de4dd7f66075b07964d6432babd543785c60f3e17c3882b960f2c", 0x69}, {&(0x7f00000007c0)="8134f08685898bd8a276100f177f67aa4911e19e91ace2b5c9fb987e39ae6abe9a4c8aa0cb5475fb278e6b8fada195216221c921b7ea453b075c723e8058a4deb880e49b02935ee7db84cfacbc10d8c97d5d1b77b335cd2f931b7304a5360a212ef83d2c7b80bf66134236865b9c077473ddfdac09359edfdb340b", 0x7b}, {&(0x7f0000000340)="836cd0843996114bdaf270c8b4d8cb8eb51cde92373f35cf8b66b0a9cb44239179cee83b263ec2", 0x27}, {&(0x7f0000000840)="286f95d5f899491e9daa46e49d01a227828562b91cc7045e777cf7e9", 0x1c}], 0x6, &(0x7f0000000900)=[@dstaddrv6={0x20, 0x84, 0x8, @private1={0xfc, 0x1, '\x00', 0x1}}, @prinfo={0x18, 0x84, 0x5, {0x0, 0x8}}], 0x38, 0x22000014}, {&(0x7f0000000940)=@in={0x2, 0x4e22, @empty}, 0x10, &(0x7f0000001040)=[{&(0x7f0000000a80)="15da00e8d14d58e8f66c2c880e8986a046101889dd15ebabc304928924ddad04c65fb4529d296325fc0f62c056929b692908e333c4b8083382a77c92543d5595fa79b6e9872b2999187840434803e2add802cb6d20d25ca597b811a52634de1801c8e7c70f121eae7b80dc35b7028581d930b2a4aad3c189af2c27a6dd2662f3aaabbe0f34be1f7f9a9b62ef57d551aec4a9979d64f71a6e5adb3f8a695186e9303baf130f792d576d8072beffeb7e8ff86c172561e50247df018164d626c38c90e2841d4d4c786c503d146d9e0df286bf0545", 0xd3}, {&(0x7f0000000b80)="a8d1f8816f56517ce8c62dadbef2df40fe0a986f3271919b5a34824fd40c603f2f144c4cb6550d63d60a66b833b1a813a2fbdec699a595a0e22fdc72e2824128e4062e9750b758e35d3af139d1b634fda19da18b7df59030d1ff4492df66d14f0c2db0f4bddff1051276d54cdd9b28b3a306610c056170d3a35df1010f044db9e5e7ee4ffd0652861aa6350398da9958cbd727cba9", 0x95}, {&(0x7f0000000c40)="c0b6bb77d9f7de8f79c9f88d627bc664e53a4ad5c931de593d7f24fbb6c872319b5d1a38164dbcd65341e2bc6584a6421a8cb6211bd51ebd9bf927dac0da8cfdb06dc4b40a5ccf2051f6d4cb9cea7134b9ae2213e01ccb97ef2476d73eaedf57e529a0d2180a79ea53ecdf2e3ac076d4acd161f4119512a31814a17cbb06679d57da37f56197bd6ef51ae82aa771a76026c1e52c1a182ff1b8fdfd8773f5184d13f333d54e08aa415cc099880d7d4297", 0xb0}, {&(0x7f0000000d00)="62d59b9e092c437daa8f39dd2ed493de455d23a2a38df0eacfed0f75453bc2d41281f499d97bbe2c9c2b5790385b7e4dd6c02b0e59b41e3722b0917761a7b937f2eae151a5a2dc531ad80c90d92761b64d8d76ef84048fdcb955ce75d8b486156fc9772042b475d85a4eb80e61ce0e422d088de9e78cbf27a08d0b05c8c796d6d1229d79e6706cb922ffad8789eff38f818e3ba77a6232b13880e60f6a16b236ac7c196eedcf", 0xa6}, {&(0x7f0000000dc0)="8c219e509d7e1cd4424a90d55fe14dc8986aee88421d9296c782707bf891758c2c1273f0e1062458ee868815e7097110eac5639b5be8a65d26ef1f2dfc517cfd323997ff7fec491bdbdaa3d5b8f39b5522aeacfdadf6ab8b351d010ef67e503047db24c4ed01e0b6c6f501409d373d63a0ad25601c417eaad07abd11a81fe134c9eec80ae3f239ba6743c1368088683fb05592e4d0c845315a90832c19742c0936acd073a3d231efed13199b8803c1739122a51a5aaee5fe46d8f819f5d59bc62c70656a96393fbe20d7a45a20c931408deeeecb2c02fedfa925b998e6d66f575ecd5ebbb7295234a22f25f6285c28", 0xef}, {&(0x7f0000000980)}, {&(0x7f0000000ec0)="db16d512330d181d13ed57af6f3e2dcca101057a76edc26c86a90f8eda386e6c7f37077ff5208c91f3495c7da180f4697d0ea02cf7a234f4ab59bb9650088de9dfd1925fea2cc14fd3edc7eb507dd80a86ce5a7797858933aa9b", 0x5a}, {&(0x7f0000000f40)="f14e0bdd746341e501b41335367a2a7b03dcb05fc381f25ef8aba6", 0x1b}, {&(0x7f0000000f80)="0c750869242b3908ac0b9aea6f7442ea9c0295edca77199e257a1b4cd78bf5ab25107cbe7a5f86635cab82c82715fa3b207994c3b92c5b04e673849e4cad99032f42532945844b563640f486c49d5d5e8f22a9923a2886e0752e7136f07e70ec33e627136bb915067737ea8a26849489936ea99b4e4cc4a4e3bb20d3752b945ad7", 0x81}], 0x9, &(0x7f0000001100)=[@dstaddrv6={0x20, 0x84, 0x8, @private0}, @authinfo={0x18, 0x84, 0x6, {0x100}}], 0x38, 0x44}, {&(0x7f0000001140)=@in={0x2, 0x4e21, @multicast1}, 0x10, &(0x7f0000001500)=[{&(0x7f0000001240)="764612ddcf3f1e89f139278c5c446f2b168f4cf10ec2c8255ce9505b002a3b95f7a3777d6c5eb85fe826f215dece9e5d0e5ae18552f3444b98fccff07ce99b0c174967e97d1e5932437a2d9b1e09e5a19b14e29a7d2a8b3277f643048493125ced827b35b57a25afb3dfa872ae52", 0x6e}, {&(0x7f00000012c0)="f65ea8e03d418596bb9fb6883c39194638c83fe43f0afc1b3ac755b34fd3d656d9a6a8c00bea8d37938b01e5e124ce7558bcacd9bcf405980869f5ecdae71df2f7a78765e723a60a7e1d11477a6c92c4f6462fb68dfcbf0be561a11681bd64c48be26702a876eab6a066e68705e147167b4f0b004f5a7359ff55768c31725a2e362e26f7cea4", 0x86}, {&(0x7f0000001380)="9f643732ef912a33e408d8ec45b2a0fb25762832d498191dab125fdcb526f2156461950950091585048edcabc45e1326616af925a556e1ce2e6c29926e351e628678783a7a21263570dbc0726cd90e51282bf4625c1faa63f601ecac60ad5b88fe79f15449d92760b240f80d4c35c5b21ecae5f9c18493de01eb21e8614dc31e98be7825894551ac7bf33173aceb20e408635a6bf75aecbc635d9abcb2d994e738ff1144478c1008a008d81956191969e51dac99c80f667d02f138820ae3609a175586c6b43f587dfd981ffdb71a7110b11fb9caf2f328ddb44bec03eca364583d6537cd", 0xe4}, {&(0x7f0000001480)="0a6a5323589ab099a1b035d747611defd5fd5d90c7ba963b4de6b5e8bc61fd7b0d8c876f666bb51f1e249adaaa6b54e3108df5641704c29634727a3beac26ace2764be3941056cae070a0a58b05e7b8633bf6799d22bb92dbc581c45cecaa9da6d560ef5ba8848f70e36768208b09ad1f89432a67036b89e", 0x78}], 0x4, 0x0, 0x0, 0x883}, {&(0x7f0000001580)=@in6={0xa, 0x4e20, 0x1, @mcast1, 0x3}, 0x1c, &(0x7f0000001640)=[{&(0x7f00000015c0)="6d49da484974b534768d1783979f3232cde676be44e8efd5844df6770ea354a5e17bf3eef553c1825709f6e6e3a1f2a21e33644bce105d6d6ab0bef6b692e1b2b86c5e32bdc2090cc6a7e08d3b36b726ddd561834dd610c63a5bf3e3", 0x5c}], 0x1, &(0x7f0000001700)=[@authinfo={0x18, 0x84, 0x6, {0x7}}, @dstaddrv6={0x20, 0x84, 0x8, @private2}, @sndinfo={0x20, 0x84, 0x2, {0x6, 0x8202, 0x6, 0x90000}}, @sndrcv={0x30, 0x84, 0x1, {0x8001, 0x4, 0x1000c, 0x2, 0x2, 0x8, 0x6, 0x80000001, r5}}, @dstaddrv6={0x20, 0x84, 0x8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @authinfo={0x18}, @dstaddrv6={0x20, 0x84, 0x8, @ipv4={'\x00', '\xff\xff', @multicast2}}], 0xe0, 0x80}], 0x5, 0x8044) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x4, 0x4, 0x9, 0x0, r1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_BATCH(0x1b, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x2, r6}, 0x38) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="ee000000", @ANYRES16=0x0, @ANYBLOB="0100fdffffff000000000100000008000100", @ANYRES32=r7, @ANYBLOB="400002803c0001"], 0x5c}, 0x1, 0xf000, 0x0, 0x8c1}, 0x20040) sendmsg$netlink(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="180100002d000100000000000000002108"], 0x118}], 0x1, 0x0, 0x0, 0x40}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002b40)={r4, 0x0, 0x1000, 0x93, &(0x7f0000001940)="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", &(0x7f0000002940)=""/147, 0x100, 0x0, 0x0, 0xe8, &(0x7f0000002a00), &(0x7f0000002a40)="bebd99ab426923226009c52c070a8c0ec04969c692444328a9e652715695c706f007dda53714aa68a701caa0827d73543f6905625773dec49fa79653c7617c43dedad0a8e1617884c3a0d2a3806ce6f8f6adc091d4521d2be802cc5bf748350ca39c716f9873ddcbba013490bdc6f3369c8f910b5e11eb0be76a5a8577aca02e1e4e2f65675e9c9a3dcba040b57103d1f66e70404b313d970e3422c43b98030cbf05afb91d1b5a38fa8b4c605f62e4940ebd917b6b150841b473031f0e769480f19af0d0210ea2cd4df82bd78425c288fcd41d9521765cd1b336e8f90c95b584418d5ef3c1c10ac4", 0x4, 0x0, 0x9}, 0x50) 751.97272ms ago: executing program 1 (id=2171): r0 = socket(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="9feb0100180000000000000038000000380000000c0000000a0000000000001104000000ffffffff000000000000000200000000000000000000000b02000000020000000000000e0300000000000000000061000000000000002e"], 0x0, 0x5c, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x20) connect$netlink(r0, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) sendmsg$nl_route(r0, &(0x7f0000000380)={&(0x7f00000001c0), 0xc, &(0x7f0000000340)={&(0x7f0000000200)=ANY=[@ANYBLOB="3412000012000100000000000000000007ca8140000085e726858227831236629d7782a79a42f094ffefdfa46c6f3042390cc1ed0fcdc6cb6901cf7f7a911b95f4084e5b35a1072cfb8e35b854f46122daaee3267992f0bf58c79b0e7fd1cfe0753b5c87d6c65a362163236080e04423807d1a813e6dd2654eeffae9bbcd2ada0f55dbc0c90a3cc6a450819a22a2b48f2322384a087b", @ANYRES32=0x0, @ANYBLOB="00000000000000001400350077673000"/28], 0x34}}, 0x0) pipe(&(0x7f0000019480)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) sendto$netrom(r1, &(0x7f0000000080)="3e1b73a31ce73daad956b9f300e2a83ce9229b7913febecf71d9fbea24bc6ac272524d094b8fd58c074f7805aaba043bc40464df4abe172ce41709792608230e1fbe27c68f5ba18c9b4a8d84060fe5be865f2d72dc8ee9740e4d61416ddd14d95f453f012042916e3d7e16c358b34d54844e94ba78c431fe436728f6a3ad216b9128f1ef", 0x84, 0x90, &(0x7f0000000140)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x5}, [@bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @bcast, @null, @bcast, @null]}, 0x48) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req={0x4, 0x4, 0x0, 0x46}, 0x10) 718.479898ms ago: executing program 0 (id=2172): r0 = socket$qrtr(0x2a, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x2a, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100001001f000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020025647a31000000000900010073797a3000000000080005400000001c"], 0xe0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000800)=@newtfilter={0x54, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xfff3}, {}, {0x2, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x20, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0xffffffffffffffcc, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x19}]}]}]}}]}, 0x54}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x74, 0x24, 0x400, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0x8, 0xffff}}, [@TCA_STAB={0x48, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x6, 0xf, 0x0, 0x1ff, 0x2, 0x6, 0x8}}, {0x4}}, {{0x1c, 0x1, {0x0, 0x8, 0x1ff, 0x80000000, 0x0, 0x5836, 0x7, 0x2}}, {0x8, 0x2, [0xd93, 0xe2]}}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x2}]}, 0x74}}, 0x40) r8 = socket$packet(0x11, 0x3, 0x300) r9 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000180)=0x0) r11 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r11, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r11, &(0x7f0000000240)="f2435f0100088000000000850800", 0xe, 0x0, &(0x7f0000000200)={0x11, 0x0, r12, 0x1, 0x0, 0x6, @link_local}, 0x14) r13 = socket$nl_route(0x10, 0x3, 0x0) r14 = socket$kcm(0x2, 0x1000000000000002, 0x0) r15 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) setsockopt$sock_attach_bpf(r14, 0x88, 0x67, &(0x7f00000002c0)=r15, 0x4) sendmsg$inet(r14, &(0x7f0000000380)={&(0x7f0000000500)={0x2, 0x4e1d, @multicast1}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000600)="6ef8fde7c10a", 0xffe3}], 0x1, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x2a}, @multicast1}}}], 0x20}, 0x0) sendmsg$nl_route(r13, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c00000013000100000000000000000000000002", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r12, @ANYBLOB="1400350064756d6d7930"], 0x3c}}, 0x4040004) r16 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r16, 0x8922, &(0x7f0000000080)={'dummy0\x00'}) sendmsg$AUDIT_SET(r9, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x3c, 0x3e9, 0x2, 0x70bd2b, 0x25dfdbff, {0x2, 0x1, 0x0, r10, 0x343, 0x7, 0x1ff, 0xffffff00, 0x0, 0x3, 0x401}, ["", "", ""]}, 0x3c}, 0x1, 0x0, 0x0, 0x10000010}, 0x20000000) setsockopt$packet_rx_ring(r8, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x9, 0x0, 0xffffffff}, 0x1c) 681.932947ms ago: executing program 4 (id=2173): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x38, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0xfffffff6, @private0, 0x9}, @in6={0xa, 0x4e23, 0x5, @local, 0x1}]}, &(0x7f0000000080)=0x10) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f0000000040)={0xffffffffffffffff, 0x1, 0x8c, 0xa, @vifc_lcl_addr=@local, @rand_addr=0x64010101}, 0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000000c0)={r1, @in={{0x2, 0x0, @empty}}, 0x80000000, 0x1f4, 0x0, 0x0, 0xce024d}, 0x9c) socket$inet6_sctp(0xa, 0x5, 0x84) (async) shutdown(r0, 0x0) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x38, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0xfffffff6, @private0, 0x9}, @in6={0xa, 0x4e23, 0x5, @local, 0x1}]}, &(0x7f0000000080)=0x10) (async) socket$igmp(0x2, 0x3, 0x2) (async) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f0000000040)={0xffffffffffffffff, 0x1, 0x8c, 0xa, @vifc_lcl_addr=@local, @rand_addr=0x64010101}, 0x10) (async) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000000c0)={r1, @in={{0x2, 0x0, @empty}}, 0x80000000, 0x1f4, 0x0, 0x0, 0xce024d}, 0x9c) (async) 539.834155ms ago: executing program 1 (id=2174): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x9, &(0x7f0000000000)=0x1000, 0x4) unshare(0x28040680) r1 = socket$unix(0x1, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb41a}, [@call={0x85, 0x0, 0x0, 0xbc}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bind$unix(r1, 0x0, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x9, 0x0, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x3, 0xe, &(0x7f0000000200)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x4}, 0x8, 0x10, &(0x7f0000001440), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = socket$alg(0x26, 0x5, 0x0) r3 = accept(r2, 0x0, &(0x7f0000000040)) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001340), r3) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000001400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000013c0)={&(0x7f0000001380)={0x1c, r5, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8800}, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f00000012c0)=@broute={'broute\x00', 0x20, 0x4, 0x648, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000001880], 0x0, &(0x7f0000000140), &(0x7f0000001880)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{0x11, 0x20, 0x884c, 'netpci0\x00', 'vlan1\x00', 'macvlan0\x00', 'bond_slave_0\x00', @multicast, [0xff, 0x0, 0x0, 0xff, 0xff, 0xff], @broadcast, [0xff, 0xff, 0x0, 0x0, 0xff], 0x6e, 0x1ce, 0x246, [], [@common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x2}}}, @common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x5, 'system_u:object_r:udev_tbl_t:s0\x00'}}}], @common=@NFLOG={'NFLOG\x00', 0x50, {{0x2, 0x440, 0x100, 0x0, 0x0, "be5c1f951bc8c99dac95bba61a18042c16f53f78a6b11ae4a08b0a1b7310e131847ae9edc5c898a8d723f38113086638cd9eb2b7ad2eb853d3b0d5c985ddfae7"}}}}, {0x3, 0x8, 0x886c, 'veth0_virt_wifi\x00', 'vlan0\x00', 'xfrm0\x00', 'vcan0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, [0x0, 0x0, 0xff, 0xff, 0xff, 0xff], @remote, [0xff, 0xff, 0xff, 0xff, 0xff], 0x6e, 0x6e, 0xbe, [], [], @common=@LED={'LED\x00', 0x28, {{'syz1\x00', 0x0, 0x3ff, {0x9}}}}}]}, {0x0, '\x00', 0x2, 0xffffffffffffffff, 0x2, [{0x5, 0x10, 0x1, 'team_slave_0\x00', 'team_slave_0\x00', 'batadv0\x00', 'veth0_to_bridge\x00', @local, [0x0, 0x0, 0xff, 0xff, 0xff], @empty, [0xff, 0xff, 0x0, 0x0, 0xff, 0xff], 0x6e, 0x136, 0x166, [], [@common=@NFLOG={'NFLOG\x00', 0x50, {{0x5a48, 0x7, 0x9, 0x1, 0x0, "e2a169c2ef77c3d27097569132410ac62ed0bd269e44c80bd47fd9d3554778aac490f0e238d9016bbb1184099a93d997285e0e3fb1ec5068d64e2c52e7c45214"}}}, @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x0, 'syz0\x00', {0x6}}}}], @common=@AUDIT={'AUDIT\x00', 0x8, {{0x1}}}}, {0x3, 0x8, 0x88e5, 'veth1_virt_wifi\x00', 'bridge_slave_0\x00', 'wg0\x00', 'team_slave_1\x00', @broadcast, [0x80, 0xff, 0xff, 0xff, 0x0, 0xff], @dev={'\xaa\xaa\xaa\xaa\xaa', 0x30}, [0xff, 0x0, 0xff, 0xff, 0xff, 0xff], 0xe6, 0x11e, 0x14e, [@statistic={{'statistic\x00', 0x0, 0x18}, {{0x0, 0x1, 0x8000, 0x8, 0x10, {0x5}}}}, @cluster={{'cluster\x00', 0x0, 0x10}, {{0x9b96, 0x948, 0x7, 0x1}}}], [@common=@mark={'mark\x00', 0x10, {{0xffffffd0, 0xfffffffffffffffc}}}], @common=@NFQUEUE0={'NFQUEUE\x00', 0x8, {{0x3}}}}]}]}, 0x6c0) bind$alg(r2, &(0x7f0000000080)={0x26, 'rng\x00', 0x0, 0x0, 'jitterentropy_rng\x00'}, 0x58) r6 = accept(r2, 0x0, 0x0) r7 = socket(0x2b, 0x80801, 0x1) connect$inet6(r7, &(0x7f0000000040)={0xa, 0xfffc, 0x8, @empty}, 0x1c) setsockopt(r7, 0x6, 0x3, 0x0, 0xcc) syz_genetlink_get_family_id$gtp(&(0x7f0000001480), r6) r8 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000001500)=@o_path={&(0x7f00000014c0)='./file0\x00', 0x0, 0x4004, r6}, 0x18) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000001600)={r8, &(0x7f0000001540)="a78d1bc7723b1a0fa5781ca8e6f23d3b4f04bf2b5097d9678bb50f45af50b4ec7d2ecc453d3a0e7bf1e551b86f1172ab30de4686ed1ee760dddb00a048f4375220a0b1d674", &(0x7f00000015c0)=@tcp=r7, 0x4}, 0x20) recvmsg(r6, &(0x7f000000b680)={0x0, 0x0, &(0x7f000000b600)=[{&(0x7f000000b4c0)=""/5, 0x5}], 0x1}, 0x0) 539.462736ms ago: executing program 3 (id=2175): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000c00000000000000000000008500000087000000850000000500000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f0810", 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r2) sendmsg$TIPC_CMD_GET_NODES(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={0x1c, r3, 0x1, 0x0, 0x0, {{}, {0x0, 0x6}}}, 0x1c}}, 0x0) 421.103091ms ago: executing program 3 (id=2176): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1400000010000100000000000000ab2a00ab000a20000000000a01040000000000000000010000000900010073797a3100000000e4000000030a010262530000000000000000010000000900030073797a320000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a3100000000080007006e6174000b00070066696c74657200000900030073797a3100000000700008800c00024000000000000000060c"], 0x184}}, 0x4) 402.975349ms ago: executing program 2 (id=2177): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="00000000000000000000edfffffffffffffff6ff6b69619ac669146fbac5a057ebfa1fe7092c9777d70decbbe4ee4d5e", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000080)={r0, 0x1, 0x5, 0x1ff}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x200000000000020f, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0xf}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000200)='GPL\x00', 0x40000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x26, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xfcf5) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r3 = syz_init_net_socket$ax25(0x3, 0x5, 0x7) ioctl$SIOCAX25GETINFO(r3, 0x89ed, &(0x7f0000000000)) 294.175634ms ago: executing program 4 (id=2178): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r2 = socket$packet(0x11, 0x3, 0x300) bind$packet(r2, &(0x7f0000000140)={0x11, 0x3, r1, 0x1, 0x9, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x14) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x2, 0x0, 0x81, 0x1ff, 0x7fffffff, 0x1}, 0x1c) recvmmsg$unix(r3, &(0x7f0000006cc0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000003100)=""/4096, 0x1000}], 0x1}}], 0x1, 0x400122a0, 0x0) sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x9200000000000000) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000cc0), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REQ_SET_REG(r5, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000000780)=ANY=[@ANYBLOB="1ce42000", @ANYRES16=r4, @ANYBLOB="010000000000fcdbdf251b00000008009a0001000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20044840}, 0x200000d0) sendmsg$NL80211_CMD_GET_REG(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, r4, 0x8, 0x70bd28, 0x25dfdbff, {}, [@NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'b\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x9e6e2b5062d19791}, 0x40041) write$nbd(r3, 0x0, 0x0) 250.309536ms ago: executing program 1 (id=2179): r0 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r0, &(0x7f0000000100)={&(0x7f00000004c0)={0x2, 0x0, @multicast1}, 0xffffffffffffffa6, 0x0, 0x0, &(0x7f0000003a00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @loopback, @multicast1}}}], 0x20}, 0xe3d1ff46f7f2f501) sendmsg$inet(r0, &(0x7f0000000500)={&(0x7f0000000080)={0x2, 0x0, @local}, 0x10, 0x0}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000a80)='kfree\x00', r1}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a8c000000060a090400000000000000000200000060000480300001800e000100696d6d6564696174650000001c000280100002800c000280080001800000000008000140000000002c0001800b0001006e756d67656e00001c0002800800014000000004080002400000009408000340000000000900010073797a30000000000900020073797a32"], 0xb4}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a300000000040000000030a01080000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240000000191400"], 0xd8}}, 0x80) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r5, &(0x7f0000000200)=0xfffffffffffffffc, 0x12) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x680, 0x0) (async) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x680, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) (async) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) socket$vsock_stream(0x28, 0x1, 0x0) readv(r6, &(0x7f0000000700)=[{&(0x7f0000000340)=""/237, 0xed}, {0x0}], 0x2) (async) readv(r6, &(0x7f0000000700)=[{&(0x7f0000000340)=""/237, 0xed}, {0x0}], 0x2) r7 = socket$kcm(0x2, 0xa, 0x2) r8 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r8, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'}) (async) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r8, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'}) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$cgroup_int(r4, &(0x7f0000000240)=0x8, 0x12) mmap(&(0x7f00006a9000/0x2000)=nil, 0x2000, 0x1000005, 0x12, r4, 0xcd44a000) (async) mmap(&(0x7f00006a9000/0x2000)=nil, 0x2000, 0x1000005, 0x12, r4, 0xcd44a000) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000100)={'macvlan1\x00', &(0x7f0000000080)=@ethtool_dump={0x3f, 0x7fffffff, 0x7, 0x1b, "7341fa09407cf4a039d2475b6f58b640898c8037fd5381de788700"}}) r9 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r10, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r10, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="20000000140009050000000000000000021800e8", @ANYRES32=r11, @ANYBLOB="08000200ac1414"], 0x20}}, 0x0) openat$cgroup_ro(r4, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) 72.873157ms ago: executing program 2 (id=2180): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xc, 0xe, &(0x7f0000000b00)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000080), 0x60, 0x10, &(0x7f0000000340), 0xfffffffffffffdef, 0x0, 0xffffffffffffffff, 0xfffffffffffffe96, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x42) (async) syz_emit_ethernet(0x82, &(0x7f0000000a40)={@local, @multicast, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "ee527a", 0x4c, 0x3c, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, {[@hopopts={0x73}], {{}, {}, {}, {0x8, 0x88be, 0x1}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}}}}}}}}, 0x0) (async) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000e80)=@security={'security\x00', 0xe, 0x4, 0x3f8, 0xffffffff, 0x100, 0x100, 0x100, 0xffffffff, 0xffffffff, 0x360, 0x360, 0x360, 0xffffffff, 0x4, &(0x7f0000000140), {[{{@ip={@loopback, @multicast2, 0x0, 0xff, 'veth1_macvtap\x00', 'wg1\x00', {}, {0xff}, 0x84, 0x3, 0x40}, 0x0, 0xa0, 0x100, 0x0, {}, [@common=@ah={{0x30}, {[0x4, 0x1]}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @random="44ea031d4c42", 0x555b, 0xa, [0x15, 0x36, 0x23, 0x29, 0x3c, 0xc, 0x2, 0x2c, 0x16, 0xf, 0xe, 0x12, 0x3b, 0x17, 0x7, 0x30], 0x2, 0x62e2, 0x1}}}, {{@ip={@empty, @loopback, 0xffffffff, 0xffffffff, 'ip6_vti0\x00', 'veth1_to_batadv\x00', {0xff}, {}, 0x84, 0x0, 0x8}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cpu={{0x28}, {0x5b}}, @common=@ah={{0x30}, {[0x8, 0x7]}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x4, 0x5, 0x1, 0x0, 0x1, 0x7], 0x2, 0x2}, {0x0, [0x2, 0x0, 0x0, 0x6, 0x2, 0x3], 0x2, 0x2}}}}, {{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, 0xff, 0xff000000, 'geneve0\x00', 'bond_slave_0\x00', {}, {}, 0x2f, 0x1, 0x8}, 0x0, 0xd8, 0x138, 0x0, {}, [@common=@unspec=@connbytes={{0x38}, {[{0xf}, {0x8000000000000001}], 0x2, 0x2}}, @common=@ah={{0x30}, {[0x9, 0xcdd]}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x2, [0x1, 0x7, 0x2, 0x5, 0x4, 0x1], 0x0, 0x3}, {0x1, [0x7, 0x2, 0x7, 0x0, 0x9], 0x6, 0x1}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x458) r2 = socket$igmp6(0xa, 0x3, 0x2) sendmmsg$inet6(r2, &(0x7f00000066c0)=[{{&(0x7f00000019c0)={0xa, 0x0, 0x0, @local}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=[@hoplimit={{0x14, 0x29, 0x34, 0x81}}], 0x18}}], 0x1, 0x16fe) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f00000000c0)) 0s ago: executing program 3 (id=2181): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r1) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000140)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r1, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)={0x2c, r2, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_SEC_DEVKEY={0x10, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0302}}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000041}, 0x40800) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="31032fbd7000fddbdf250800000008000300", @ANYRESHEX], 0x2c}, 0x1, 0x0, 0x0, 0x8814}, 0x20000084) kernel console output (not intermixed with test programs): .255.255 [ 126.868450][ T7134] tipc: Enabled bearer , priority 10 [ 127.130034][ T7142] atomic_op ffff888025317998 conn xmit_atomic 0000000000000000 [ 127.167324][ T7142] netlink: 260 bytes leftover after parsing attributes in process `syz.0.341'. [ 127.289170][ T7144] netlink: 96 bytes leftover after parsing attributes in process `syz.4.342'. [ 127.310848][ T7144] netlink: 32 bytes leftover after parsing attributes in process `syz.4.342'. [ 127.332399][ T7147] netlink: 16 bytes leftover after parsing attributes in process `syz.2.343'. [ 127.382738][ T7146] netlink: 12 bytes leftover after parsing attributes in process `syz.2.343'. [ 127.405854][ T7146] 8021q: VLANs not supported on vxcan1 [ 127.610565][ T7159] netlink: 'syz.4.346': attribute type 21 has an invalid length. [ 127.642755][ T7159] netlink: 132 bytes leftover after parsing attributes in process `syz.4.346'. [ 127.704629][ T7162] netlink: 8 bytes leftover after parsing attributes in process `syz.4.346'. [ 128.079992][ T7174] syzkaller1: entered promiscuous mode [ 128.106839][ T7174] syzkaller1: entered allmulticast mode [ 128.644023][ T7202] vlan2: entered allmulticast mode [ 128.677948][ T7202] hsr0: entered allmulticast mode [ 128.712411][ T7202] hsr_slave_0: entered allmulticast mode [ 128.744937][ T7202] hsr_slave_1: entered allmulticast mode [ 128.900986][ T7202] vlan2: entered allmulticast mode [ 129.646710][ T7233] tipc: Started in network mode [ 129.651928][ T7233] tipc: Node identity 7, cluster identity 4711 [ 129.661052][ T7233] tipc: Node number set to 7 [ 129.737117][ T7243] netlink: 'syz.1.367': attribute type 29 has an invalid length. [ 129.745945][ T7243] netlink: 'syz.1.367': attribute type 29 has an invalid length. [ 129.753950][ T7243] netlink: 'syz.1.367': attribute type 29 has an invalid length. [ 129.861737][ T7243] netlink: 'syz.1.367': attribute type 29 has an invalid length. [ 129.947226][ T7243] netlink: 'syz.1.367': attribute type 29 has an invalid length. [ 129.973770][ T7243] netlink: 'syz.1.367': attribute type 29 has an invalid length. [ 130.016634][ T7243] netlink: 'syz.1.367': attribute type 29 has an invalid length. [ 130.425224][ T7274] x_tables: ip_tables: bpf.1 match: invalid size 528 (kernel) != (user) 536 [ 131.474250][ T7320] bridge2: entered promiscuous mode [ 131.490263][ T7320] bridge2: entered allmulticast mode [ 131.522917][ T7320] team0: Device bridge2 is up. Set it down before adding it as a team port [ 131.976136][ T7337] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.147406][ T7343] __nla_validate_parse: 8 callbacks suppressed [ 132.147427][ T7343] netlink: 212 bytes leftover after parsing attributes in process `syz.3.393'. [ 134.039618][ T7340] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 134.049510][ T7340] batadv_slave_0: entered promiscuous mode [ 134.055455][ T7340] batadv_slave_0: entered allmulticast mode [ 134.067918][ T7337] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.183710][ T7337] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.219393][ T7354] openvswitch: netlink: Actions may not be safe on all matching packets [ 134.283350][ T7355] pimreg: entered allmulticast mode [ 134.303391][ T7355] pimreg: left allmulticast mode [ 134.316239][ T7358] netlink: 12 bytes leftover after parsing attributes in process `syz.0.400'. [ 134.327081][ T7358] validate_nla: 19 callbacks suppressed [ 134.327102][ T7358] netlink: 'syz.0.400': attribute type 1 has an invalid length. [ 134.357988][ T7358] netlink: 36 bytes leftover after parsing attributes in process `syz.0.400'. [ 134.418102][ T7337] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.560852][ T7337] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.622437][ T7337] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.662706][ T7371] netlink: 'syz.2.403': attribute type 39 has an invalid length. [ 134.689140][ T7337] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.801233][ T7337] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.843202][ T7373] bridge_slave_0: left allmulticast mode [ 134.853934][ T7373] bridge_slave_0: left promiscuous mode [ 134.872928][ T7373] bridge0: port 1(bridge_slave_0) entered disabled state [ 134.884250][ T7374] netlink: 'syz.2.403': attribute type 10 has an invalid length. [ 134.925298][ T7373] bond0: (slave bond_slave_0): Releasing backup interface [ 134.997828][ T7373] bond0: (slave bond_slave_1): Releasing backup interface [ 135.037288][ T7383] xt_ipcomp: unknown flags F7 [ 135.064017][ T7373] team0: Port device team_slave_0 removed [ 135.104439][ T7373] team0: Port device team_slave_1 removed [ 135.144020][ T7373] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 135.160504][ T7373] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 135.182650][ T7373] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 135.190949][ T7373] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 135.232427][ T7374] mac80211_hwsim hwsim10 wlan1: left promiscuous mode [ 135.291416][ T7374] 8021q: adding VLAN 0 to HW filter on device bond0 [ 135.351949][ T7374] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 135.549860][ T7387] pimreg576: entered allmulticast mode [ 135.965438][ T7418] netlink: 'syz.0.413': attribute type 21 has an invalid length. [ 136.040517][ T7418] netlink: 128 bytes leftover after parsing attributes in process `syz.0.413'. [ 136.065010][ T7418] netlink: 'syz.0.413': attribute type 5 has an invalid length. [ 136.095815][ T7418] netlink: 'syz.0.413': attribute type 6 has an invalid length. [ 136.137091][ T7418] netlink: 3 bytes leftover after parsing attributes in process `syz.0.413'. [ 136.708234][ T7461] netlink: 'syz.4.424': attribute type 1 has an invalid length. [ 136.721750][ T7461] netlink: 24 bytes leftover after parsing attributes in process `syz.4.424'. [ 136.843672][ T7461] netlink: 8 bytes leftover after parsing attributes in process `syz.4.424'. [ 137.059508][ T7471] netlink: 4 bytes leftover after parsing attributes in process `syz.2.426'. [ 137.108766][ T7471] netlink: 8 bytes leftover after parsing attributes in process `syz.2.426'. [ 137.195798][ T7471] netlink: 4 bytes leftover after parsing attributes in process `syz.2.426'. [ 137.217382][ T7471] netlink: 'syz.2.426': attribute type 1 has an invalid length. [ 137.249434][ T7471] netlink: 10 bytes leftover after parsing attributes in process `syz.2.426'. [ 137.335297][ T5845] block nbd0: Receive control failed (result -107) [ 137.415384][ T7490] netlink: 'syz.0.429': attribute type 15 has an invalid length. [ 137.491554][ T7487] netlink: 'syz.0.429': attribute type 1 has an invalid length. [ 137.537278][ T7487] netlink: 224 bytes leftover after parsing attributes in process `syz.0.429'. [ 137.620849][ T7487] NCSI netlink: No device for ifindex 246 [ 138.771615][ T7557] sctp: [Deprecated]: syz.2.445 (pid 7557) Use of struct sctp_assoc_value in delayed_ack socket option. [ 138.771615][ T7557] Use struct sctp_sack_info instead [ 139.138163][ T7578] netlink: 'syz.4.450': attribute type 11 has an invalid length. [ 139.168177][ T7578] netlink: 224 bytes leftover after parsing attributes in process `syz.4.450'. [ 139.210931][ T7579] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.251649][ T7585] netlink: 28 bytes leftover after parsing attributes in process `syz.3.452'. [ 139.323846][ T7579] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.521824][ T7579] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.556908][ T7595] netlink: 60 bytes leftover after parsing attributes in process `syz.3.454'. [ 139.600760][ T7579] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.801449][ T7579] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.840330][ T7579] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.872961][ T7579] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.925269][ T7579] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.220727][ T7624] netlink: 12 bytes leftover after parsing attributes in process `syz.1.461'. [ 140.673553][ T7641] netlink: 4 bytes leftover after parsing attributes in process `syz.1.465'. [ 140.840855][ T7640] xt_CT: No such helper "pptp" [ 140.966652][ T7641] bond0: (slave bond_slave_0): Releasing backup interface [ 141.259703][ T7659] 8021q: adding VLAN 0 to HW filter on device bond0 [ 141.770583][ T7696] netlink: 12 bytes leftover after parsing attributes in process `syz.3.473'. [ 141.918238][ T7702] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 142.042115][ T7709] netlink: 4 bytes leftover after parsing attributes in process `syz.0.477'. [ 142.150698][ T7709] bridge_slave_1: left allmulticast mode [ 142.160844][ T7709] bridge_slave_1: left promiscuous mode [ 142.180682][ T7709] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.218645][ T7709] bridge_slave_0: left allmulticast mode [ 142.224602][ T7709] bridge_slave_0: left promiscuous mode [ 142.239669][ T7709] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.292889][ T7719] validate_nla: 1 callbacks suppressed [ 142.292911][ T7719] netlink: 'syz.3.480': attribute type 2 has an invalid length. [ 143.279599][ T7752] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 143.817668][ T7776] tipc: Can't bind to reserved service type 0 [ 145.058309][ T7811] netlink: 'syz.0.498': attribute type 1 has an invalid length. [ 145.254779][ T7776] netlink: 28 bytes leftover after parsing attributes in process `syz.4.490'. [ 145.451912][ T7776] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 145.475750][ T7834] netlink: 'syz.1.503': attribute type 1 has an invalid length. [ 145.509128][ T7837] netlink: 4 bytes leftover after parsing attributes in process `syz.2.502'. [ 145.851165][ T7845] netlink: 'syz.1.505': attribute type 3 has an invalid length. [ 145.880022][ T7845] netlink: 8 bytes leftover after parsing attributes in process `syz.1.505'. [ 146.406722][ T7855] netlink: set zone limit has 4 unknown bytes [ 146.903673][ T7885] bond0: (slave bond_slave_0): Releasing backup interface [ 146.919656][ T7885] bond0: (slave bond_slave_1): Releasing backup interface [ 146.952875][ T7885] team0: Port device team_slave_0 removed [ 146.958829][ T7892] netlink: 28 bytes leftover after parsing attributes in process `syz.0.517'. [ 147.000356][ T7885] team0: Port device team_slave_1 removed [ 147.022957][ T7885] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 147.053728][ T7885] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 147.214666][ T7907] netlink: 156 bytes leftover after parsing attributes in process `syz.1.518'. [ 147.374938][ T7907] netlink: 48 bytes leftover after parsing attributes in process `syz.1.518'. [ 149.032707][ T7982] 8021q: VLANs not supported on ip_vti0 [ 149.169166][ T7989] vlan2: entered allmulticast mode [ 149.205150][ T7989] macvlan0: entered allmulticast mode [ 149.585978][ T7999] netlink: 40 bytes leftover after parsing attributes in process `syz.2.541'. [ 149.932523][ T8006] netlink: 44 bytes leftover after parsing attributes in process `syz.2.544'. [ 149.985678][ T8006] netlink: 43 bytes leftover after parsing attributes in process `syz.2.544'. [ 150.011300][ T8006] netlink: 'syz.2.544': attribute type 6 has an invalid length. [ 150.024422][ T8006] netlink: 'syz.2.544': attribute type 5 has an invalid length. [ 150.051047][ T8006] netlink: 43 bytes leftover after parsing attributes in process `syz.2.544'. [ 150.614188][ T8039] netlink: 'syz.0.551': attribute type 1 has an invalid length. [ 150.891986][ T8056] syz_tun: entered allmulticast mode [ 150.899502][ T8054] netlink: 'syz.1.552': attribute type 2 has an invalid length. [ 150.908038][ T8054] netlink: 224 bytes leftover after parsing attributes in process `syz.1.552'. [ 150.918949][ T8056] netlink: 'syz.1.552': attribute type 2 has an invalid length. [ 150.928592][ T8056] netlink: 224 bytes leftover after parsing attributes in process `syz.1.552'. [ 150.992180][ T8056] syz_tun: left allmulticast mode [ 151.183834][ T8063] A link change request failed with some changes committed already. Interface veth1_macvtap may have been left with an inconsistent configuration, please check. [ 151.662240][ T8088] x_tables: duplicate underflow at hook 3 [ 151.675147][ T8082] x_tables: duplicate underflow at hook 3 [ 151.717061][ T8087] netlink: 24 bytes leftover after parsing attributes in process `syz.4.561'. [ 151.761903][ T8086] netlink: 24 bytes leftover after parsing attributes in process `syz.4.561'. [ 151.848080][ T8100] netlink: 8 bytes leftover after parsing attributes in process `syz.1.562'. [ 152.260632][ T8126] netlink: 4 bytes leftover after parsing attributes in process `syz.4.570'. [ 152.571262][ T8138] netlink: 'syz.2.572': attribute type 7 has an invalid length. [ 152.585680][ T8138] netlink: 8 bytes leftover after parsing attributes in process `syz.2.572'. [ 153.297120][ T8167] netlink: 24 bytes leftover after parsing attributes in process `syz.3.577'. [ 153.338426][ T8167] netlink: 'syz.3.577': attribute type 1 has an invalid length. [ 153.350035][ T8167] netlink: 20 bytes leftover after parsing attributes in process `syz.3.577'. [ 153.361126][ T8169] netlink: 12 bytes leftover after parsing attributes in process `syz.1.578'. [ 153.381992][ T6442] IPVS: starting estimator thread 0... [ 153.505919][ T8174] IPVS: using max 22 ests per chain, 52800 per kthread [ 153.560988][ T8169] veth5: entered promiscuous mode [ 153.588156][ T8169] bridge2: port 1(veth5) entered blocking state [ 153.607670][ T8169] bridge2: port 1(veth5) entered disabled state [ 153.633071][ T8169] veth5: entered allmulticast mode [ 154.419916][ T8221] dccp_invalid_packet: P.CsCov 4 exceeds packet length 28 [ 155.018978][ T8237] tc_dump_action: action bad kind [ 155.275425][ T8249] netlink: 'syz.1.600': attribute type 1 has an invalid length. [ 155.293128][ T8249] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 155.391519][ T8249] bridge_slave_0: left allmulticast mode [ 155.398926][ T8249] bridge_slave_0: left promiscuous mode [ 155.404836][ T8249] bridge0: port 1(bridge_slave_0) entered disabled state [ 155.448381][ T8249] bridge_slave_1: left allmulticast mode [ 155.486013][ T8249] bridge_slave_1: left promiscuous mode [ 155.526123][ T8249] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.555964][ T8249] bond0: (slave bond_slave_1): Releasing backup interface [ 155.612515][ T8249] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 155.658797][ T8249] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 155.697645][ T8249] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 155.740248][ T8249] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 155.774690][ T8249] ip6gretap1: left allmulticast mode [ 155.801205][ T8249] ip6gretap1: left promiscuous mode [ 155.832497][ T8249] bridge1: port 1(ip6gretap1) entered disabled state [ 155.875415][ T8249] veth5: left allmulticast mode [ 155.893051][ T8249] bridge2: port 1(veth5) entered disabled state [ 155.919914][ T8263] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.114166][ T8244] __nla_validate_parse: 3 callbacks suppressed [ 156.114189][ T8244] netlink: 12 bytes leftover after parsing attributes in process `syz.4.596'. [ 156.181847][ T8244] 8021q: adding VLAN 0 to HW filter on device bond1 [ 156.242978][ T8271] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 156.478991][ T8271] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 156.984599][ T8294] xt_CT: No such helper "pptp" [ 157.694265][ T8331] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 157.703398][ T8331] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 157.712527][ T8331] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 157.721342][ T8331] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 157.780805][ T8331] team0: Port device vxlan0 added [ 158.320931][ T8347] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 158.333811][ T8353] netem: incorrect gi model size [ 158.354888][ T8353] netem: change failed [ 158.376863][ T8355] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 158.896398][ T8377] netlink: 47 bytes leftover after parsing attributes in process `syz.2.627'. [ 159.218498][ T8387] pimreg: entered allmulticast mode [ 159.856553][ T8412] atomic_op ffff88805e1c6998 conn xmit_atomic 0000000000000000 [ 159.886960][ T8412] netlink: 260 bytes leftover after parsing attributes in process `syz.0.637'. [ 159.909211][ T8413] nbd: must specify a size in bytes for the device [ 160.128969][ T8424] ip6gre1: entered allmulticast mode [ 160.152071][ T8426] openvswitch: netlink: Actions may not be safe on all matching packets [ 160.283032][ T8429] netlink: 40 bytes leftover after parsing attributes in process `syz.0.643'. [ 160.755249][ T8449] netlink: 36 bytes leftover after parsing attributes in process `syz.0.646'. [ 160.764873][ T8449] netlink: 16 bytes leftover after parsing attributes in process `syz.0.646'. [ 160.775294][ T8449] netlink: 36 bytes leftover after parsing attributes in process `syz.0.646'. [ 160.830719][ T8449] netlink: 36 bytes leftover after parsing attributes in process `syz.0.646'. [ 160.947515][ T8459] atomic_op ffff888030ea5198 conn xmit_atomic 0000000000000000 [ 160.994263][ T8459] netlink: 260 bytes leftover after parsing attributes in process `syz.3.649'. [ 161.316620][ T8475] netlink: 8 bytes leftover after parsing attributes in process `syz.1.654'. [ 161.612930][ T8483] netlink: 288 bytes leftover after parsing attributes in process `syz.1.658'. [ 161.914312][ T8493] TCP: tcp_parse_options: Illegal window scaling value 254 > 14 received [ 162.000376][ T8498] netlink: 20 bytes leftover after parsing attributes in process `syz.3.661'. [ 162.019115][ T8497] atomic_op ffff88803349c198 conn xmit_atomic 0000000000000000 [ 162.048071][ T8499] netlink: 8 bytes leftover after parsing attributes in process `syz.0.664'. [ 162.060363][ T8497] netlink: 4 bytes leftover after parsing attributes in process `syz.4.663'. [ 162.116344][ T8499] netlink: 'syz.0.664': attribute type 1 has an invalid length. [ 162.165433][ T8499] netlink: 'syz.0.664': attribute type 2 has an invalid length. [ 162.195392][ T8503] netlink: 412 bytes leftover after parsing attributes in process `syz.2.665'. [ 162.205112][ T8503] netlink: 104 bytes leftover after parsing attributes in process `syz.2.665'. [ 162.230589][ T8507] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0xf [ 162.257991][ T8507] netlink: 4 bytes leftover after parsing attributes in process `syz.4.666'. [ 162.301839][ T8512] netlink: 12 bytes leftover after parsing attributes in process `syz.1.668'. [ 162.564544][ T8527] netlink: 28 bytes leftover after parsing attributes in process `syz.0.670'. [ 162.591511][ T8527] dummy0: entered promiscuous mode [ 162.626946][ T8527] team0: entered promiscuous mode [ 162.665401][ T8527] hsr1: Slave A (dummy0) is not up; please bring it up to get a fully working HSR network [ 162.735752][ T8527] hsr1: Slave B (team0) is not up; please bring it up to get a fully working HSR network [ 163.034354][ T8546] atomic_op ffff88802956b198 conn xmit_atomic 0000000000000000 [ 163.400847][ T8545] infiniband syz0: set active [ 163.417443][ T8545] infiniband syz0: added bond0 [ 163.572585][ T8545] RDS/IB: syz0: added [ 163.597670][ T8545] smc: adding ib device syz0 with port count 1 [ 163.624500][ T8545] smc: ib device syz0 port 1 has pnetid [ 163.808859][ T8576] sctp: [Deprecated]: syz.4.685 (pid 8576) Use of struct sctp_assoc_value in delayed_ack socket option. [ 163.808859][ T8576] Use struct sctp_sack_info instead [ 163.907164][ T8576] dummy0: entered promiscuous mode [ 163.925142][ T8576] vlan2: entered promiscuous mode [ 164.314933][ T8599] atomic_op ffff88807e55a198 conn xmit_atomic 0000000000000000 [ 164.461496][ T8605] netlink: 'syz.1.690': attribute type 1 has an invalid length. [ 164.487793][ T8605] tipc: New replicast peer: 255.255.255.255 [ 164.495412][ T8605] tipc: Enabled bearer , priority 10 [ 164.771863][ T8609] bond3: entered promiscuous mode [ 164.778017][ T8617] netlink: 'syz.0.693': attribute type 8 has an invalid length. [ 164.783506][ T8609] bond3: entered allmulticast mode [ 164.792623][ T8609] 8021q: adding VLAN 0 to HW filter on device bond3 [ 165.060718][ T8609] bond3 (unregistering): Released all slaves [ 165.927048][ T8656] macvlan1: entered allmulticast mode [ 165.948750][ T8656] veth1_vlan: entered allmulticast mode [ 165.957528][ T8656] bridge0: port 1(macvlan1) entered blocking state [ 165.967638][ T8656] bridge0: port 1(macvlan1) entered disabled state [ 165.984876][ T8656] macvlan1: entered promiscuous mode [ 166.013440][ T8656] bridge0: port 1(macvlan1) entered blocking state [ 166.020244][ T8656] bridge0: port 1(macvlan1) entered forwarding state [ 166.033795][ T8658] batadv1: entered promiscuous mode [ 166.039491][ T8658] batadv1: entered allmulticast mode [ 166.692411][ T8681] openvswitch: netlink: IPv4 tunnel dst address is zero [ 167.002182][ T8692] atomic_op ffff88807ebe7998 conn xmit_atomic 0000000000000000 [ 167.043745][ T8693] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 167.054990][ T8689] __nla_validate_parse: 15 callbacks suppressed [ 167.055007][ T8689] netlink: 45 bytes leftover after parsing attributes in process `syz.2.715'. [ 167.497959][ T8710] wireguard0: entered promiscuous mode [ 167.508414][ T8710] wireguard0: entered allmulticast mode [ 168.042384][ T8732] netlink: 48 bytes leftover after parsing attributes in process `syz.2.724'. [ 168.051671][ T8732] netlink: 56 bytes leftover after parsing attributes in process `syz.2.724'. [ 169.810234][ T8777] atomic_op ffff88805b7c2998 conn xmit_atomic 0000000000000000 [ 170.683270][ T8800] netlink: 'syz.3.747': attribute type 1 has an invalid length. [ 170.692027][ T8800] netlink: 8 bytes leftover after parsing attributes in process `syz.3.747'. [ 170.741892][ T8800] netlink: 'syz.3.747': attribute type 1 has an invalid length. [ 170.784686][ T8800] netlink: 8 bytes leftover after parsing attributes in process `syz.3.747'. [ 170.794668][ T8808] netlink: 20 bytes leftover after parsing attributes in process `syz.0.746'. [ 170.846448][ T8810] atomic_op ffff8880317a5998 conn xmit_atomic 0000000000000000 [ 171.065103][ T8813] netlink: 4 bytes leftover after parsing attributes in process `syz.4.750'. [ 171.396279][ T8826] xt_nfacct: accounting object `syz1' does not exists [ 171.853777][ T8846] netlink: 96 bytes leftover after parsing attributes in process `syz.3.758'. [ 172.083382][ T8848] atomic_op ffff88803323e198 conn xmit_atomic 0000000000000000 [ 172.189434][ T8854] IPv6: Can't replace route, no match found [ 172.196655][ T8850] af_packet: tpacket_rcv: packet too big, clamped from 1 to 4294967272. macoff=96 [ 172.885786][ T8850] lo speed is unknown, defaulting to 1000 [ 172.936867][ T8850] lo speed is unknown, defaulting to 1000 [ 173.016797][ T8850] lo speed is unknown, defaulting to 1000 [ 173.044243][ T8850] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 173.099774][ T8850] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 173.182559][ T8850] lo speed is unknown, defaulting to 1000 [ 173.203132][ T8826] netlink: 28 bytes leftover after parsing attributes in process `syz.4.753'. [ 173.226235][ T8850] lo speed is unknown, defaulting to 1000 [ 173.278173][ T8826] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 173.323540][ T8850] lo speed is unknown, defaulting to 1000 [ 173.339459][ T8850] lo speed is unknown, defaulting to 1000 [ 173.341020][ T8873] syzkaller0: entered allmulticast mode [ 173.351244][ T8850] lo speed is unknown, defaulting to 1000 [ 173.352132][ T8873] syzkaller0: entered promiscuous mode [ 173.363511][ T8850] lo speed is unknown, defaulting to 1000 [ 173.399651][ T8873] syzkaller0 (unregistering): left promiscuous mode [ 173.415180][ T8873] syzkaller0 (unregistering): left allmulticast mode [ 173.883468][ T8890] netlink: 8 bytes leftover after parsing attributes in process `syz.1.770'. [ 174.031080][ T8896] atomic_op ffff88803349c198 conn xmit_atomic 0000000000000000 [ 174.182300][ T8901] netlink: 'syz.2.774': attribute type 10 has an invalid length. [ 174.211894][ T8901] team0: Device veth1_macvtap failed to register rx_handler [ 174.349586][ T8897] lo speed is unknown, defaulting to 1000 [ 174.580923][ T8905] netlink: 72 bytes leftover after parsing attributes in process `syz.3.775'. [ 174.860814][ T8910] openvswitch: netlink: Actions may not be safe on all matching packets [ 175.214686][ T8929] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.298060][ T8929] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.513164][ T8929] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.617701][ T8929] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.722784][ T8948] atomic_op ffff88805fe22998 conn xmit_atomic 0000000000000000 [ 175.763588][ T8946] netlink: 4 bytes leftover after parsing attributes in process `syz.3.786'. [ 175.872632][ T8946] netlink: 12 bytes leftover after parsing attributes in process `syz.3.786'. [ 175.924663][ T8929] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.968480][ T8929] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.978360][ T8950] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 176.004629][ T8929] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.063554][ T8929] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.278669][ T8963] netlink: 4 bytes leftover after parsing attributes in process `syz.0.792'. [ 176.344185][ T8967] xt_limit: Overflow, try lower: 262144/524288 [ 176.755362][ T8970] ip6gre1: left allmulticast mode [ 177.038713][ T8990] netlink: 16 bytes leftover after parsing attributes in process `syz.4.798'. [ 177.110550][ T8993] IPVS: sync thread started: state = BACKUP, mcast_ifn = batadv0, syncid = 0, id = 0 [ 177.170978][ T8992] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 177.266043][ T8997] netlink: 16 bytes leftover after parsing attributes in process `syz.1.799'. [ 177.543163][ T9006] syzkaller1: entered promiscuous mode [ 177.558188][ T9006] syzkaller1: entered allmulticast mode [ 178.015346][ T30] audit: type=1804 audit(1742569914.788:2): pid=9028 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.805" name="/newroot/162/memory.events" dev="tmpfs" ino=853 res=1 errno=0 [ 178.048132][ T8990] lo speed is unknown, defaulting to 1000 [ 178.048541][ T30] audit: type=1800 audit(1742569914.818:3): pid=9028 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.805" name="memory.events" dev="tmpfs" ino=853 res=0 errno=0 [ 178.840225][ T8994] lo speed is unknown, defaulting to 1000 [ 179.088870][ T9069] netlink: 8 bytes leftover after parsing attributes in process `syz.1.813'. [ 179.100179][ T9069] netlink: 32 bytes leftover after parsing attributes in process `syz.1.813'. [ 179.136142][ T9068] atomic_op ffff8880277b6998 conn xmit_atomic 0000000000000000 [ 179.291318][ T9069] gretap1: entered promiscuous mode [ 179.404645][ T9075] netlink: 4 bytes leftover after parsing attributes in process `syz.3.816'. [ 179.474270][ T9080] netlink: 16 bytes leftover after parsing attributes in process `syz.3.816'. [ 179.564822][ T9083] netlink: 24 bytes leftover after parsing attributes in process `syz.1.817'. [ 179.587599][ T9083] netlink: 212 bytes leftover after parsing attributes in process `syz.1.817'. [ 179.628923][ T9083] netlink: 212 bytes leftover after parsing attributes in process `syz.1.817'. [ 179.847195][ T9092] netlink: 8 bytes leftover after parsing attributes in process `syz.2.818'. [ 179.909078][ T9092] netlink: 12 bytes leftover after parsing attributes in process `syz.2.818'. [ 179.956659][ T9092] netlink: 'syz.2.818': attribute type 20 has an invalid length. [ 180.018973][ T9098] netlink: 8 bytes leftover after parsing attributes in process `syz.1.820'. [ 180.607488][ T9122] RDS: rds_bind could not find a transport for 2001::2, load rds_tcp or rds_rdma? [ 180.664866][ T9126] atomic_op ffff8880255ee998 conn xmit_atomic 0000000000000000 [ 180.817128][ T9133] bridge4: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 181.053745][ T9142] bond0: entered promiscuous mode [ 181.984536][ T9189] atomic_op ffff888029903198 conn xmit_atomic 0000000000000000 [ 182.580099][ T9214] : entered promiscuous mode [ 182.666881][ T9214] netlink: 'syz.1.847': attribute type 3 has an invalid length. [ 182.800375][ T9218] nbd: socks must be embedded in a SOCK_ITEM attr [ 182.851848][ T6497] block nbd64: NBD_DISCONNECT [ 183.523301][ T9259] netlink: 'syz.1.854': attribute type 7 has an invalid length. [ 183.553149][ T9259] netlink: 'syz.1.854': attribute type 8 has an invalid length. [ 183.562191][ T9262] netlink: 'syz.3.857': attribute type 11 has an invalid length. [ 184.115355][ T9282] 8021q: adding VLAN 0 to HW filter on device bond1 [ 184.137599][ T9282] bond0: (slave bond1): Enslaving as an active interface with an up link [ 184.462930][ T9311] __nla_validate_parse: 9 callbacks suppressed [ 184.462952][ T9311] netlink: 16 bytes leftover after parsing attributes in process `syz.1.868'. [ 184.799095][ T9295] IPVS: Error connecting to the multicast addr [ 184.831296][ T9304] netlink: 28 bytes leftover after parsing attributes in process `syz.2.866'. [ 184.841501][ T9304] netlink: 28 bytes leftover after parsing attributes in process `syz.2.866'. [ 184.851156][ T9304] netlink: 'syz.2.866': attribute type 4 has an invalid length. [ 185.061313][ T9300] 8021q: adding VLAN 0 to HW filter on device bond2 [ 185.280958][ T9330] netlink: 16 bytes leftover after parsing attributes in process `syz.0.872'. [ 185.363663][ T9330] syzkaller1: entered allmulticast mode [ 185.381854][ T9330] veth0_to_bridge: entered promiscuous mode [ 185.411030][ T9338] netlink: 'syz.4.874': attribute type 5 has an invalid length. [ 185.420132][ T9328] veth0_to_bridge: left promiscuous mode [ 185.443510][ T9338] : entered promiscuous mode [ 185.674741][ T9319] lo speed is unknown, defaulting to 1000 [ 185.882760][ T9358] netlink: 8 bytes leftover after parsing attributes in process `syz.4.878'. [ 186.323523][ T9371] netlink: 'syz.1.883': attribute type 1 has an invalid length. [ 186.377314][ T9371] netlink: 16 bytes leftover after parsing attributes in process `syz.1.883'. [ 186.431561][ T9374] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !åÀØ¢…D£øUDŒw˜}zR3âëp(@Oš>Æ [ 187.342404][ T9368] lo speed is unknown, defaulting to 1000 [ 187.387323][ T9401] netlink: 4 bytes leftover after parsing attributes in process `syz.4.890'. [ 187.894375][ T9427] netlink: 'syz.2.894': attribute type 10 has an invalid length. [ 187.951903][ T9427] bond0: (slave wlan1): Releasing backup interface [ 188.047048][ T9427] team0: Port device wlan1 added [ 188.236823][ T9438] raw_sendmsg: syz.3.896 forgot to set AF_INET. Fix it! [ 188.472295][ T9445] netlink: 4 bytes leftover after parsing attributes in process `syz.1.897'. [ 188.766451][ T9450] netlink: 'syz.3.899': attribute type 4 has an invalid length. [ 188.826155][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 188.835128][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 188.905951][ T9455] netlink: 72 bytes leftover after parsing attributes in process `syz.1.900'. [ 189.027610][ T9455] veth0_macvtap: left promiscuous mode [ 189.125157][ T9465] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 189.136819][ T9465] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 189.161436][ T9465] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 189.213169][ T9465] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 189.265582][ T9465] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 189.279657][ T9472] netlink: 24 bytes leftover after parsing attributes in process `syz.3.905'. [ 189.414558][ T9444] tipc: Enabling of bearer rejected, already enabled [ 189.523493][ T9482] netlink: 32 bytes leftover after parsing attributes in process `syz.1.906'. [ 189.790975][ T9491] netlink: 16 bytes leftover after parsing attributes in process `syz.1.908'. [ 189.865729][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 189.875025][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 190.119723][ T9509] netlink: 36 bytes leftover after parsing attributes in process `syz.1.912'. [ 190.315452][ T9519] netlink: 8 bytes leftover after parsing attributes in process `syz.4.914'. [ 190.352381][ T9522] netlink: 4 bytes leftover after parsing attributes in process `syz.1.915'. [ 190.597659][ T9536] macvlan1: left promiscuous mode [ 190.603420][ T9536] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 190.623072][ T9536] bridge0: port 1(macvlan1) entered disabled state [ 190.772505][ T9542] netlink: 'syz.4.920': attribute type 1 has an invalid length. [ 190.781056][ T9542] netlink: 'syz.4.920': attribute type 1 has an invalid length. [ 190.791377][ T9542] IPv6: NLM_F_CREATE should be specified when creating new route [ 190.801945][ T9542] netlink: 8 bytes leftover after parsing attributes in process `syz.4.920'. [ 190.905730][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 191.037788][ T9552] netlink: 'syz.1.922': attribute type 1 has an invalid length. [ 191.130677][ T9552] 8021q: adding VLAN 0 to HW filter on device bond2 [ 191.142180][ T9557] atomic_op ffff88805b624198 conn xmit_atomic 0000000000000000 [ 191.164279][ T9560] gretap2: entered promiscuous mode [ 191.185166][ T9560] bond2: (slave gretap2): making interface the new active one [ 191.203845][ T9560] bond2: (slave gretap2): Enslaving as an active interface with an up link [ 191.273005][ T9563] netlink: 84 bytes leftover after parsing attributes in process `syz.4.927'. [ 191.291696][ T9563] netem: invalid attributes len -16 [ 191.312873][ T9563] netem: change failed [ 191.402337][ T9552] bond2: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 191.539707][ T9573] netlink: 'syz.4.929': attribute type 1 has an invalid length. [ 191.620514][ T9573] 8021q: adding VLAN 0 to HW filter on device bond4 [ 191.688123][ T9576] ip6gre1: entered promiscuous mode [ 191.811376][ T9577] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 191.911019][ T9573] bond4: (slave dummy0): making interface the new active one [ 191.938454][ T9573] bond4: (slave dummy0): Enslaving as an active interface with an up link [ 192.199272][ T9597] netlink: 'syz.3.936': attribute type 11 has an invalid length. [ 192.265060][ T9559] lo speed is unknown, defaulting to 1000 [ 192.828395][ T9619] netlink: 188 bytes leftover after parsing attributes in process `syz.1.943'. [ 192.940842][ T9619] netlink: 'syz.1.943': attribute type 1 has an invalid length. [ 193.656552][ T9644] netlink: 84 bytes leftover after parsing attributes in process `syz.2.948'. [ 193.695310][ T9644] netlink: 36 bytes leftover after parsing attributes in process `syz.2.948'. [ 193.878860][ T9653] 8021q: adding VLAN 0 to HW filter on device bond3 [ 193.966931][ T9653] bond_slave_0: entered promiscuous mode [ 193.972984][ T9653] bond_slave_1: entered promiscuous mode [ 194.003747][ T9653] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 194.025738][ C0] net_ratelimit: 37 callbacks suppressed [ 194.025759][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 194.040990][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 194.054886][ T3490] __ib_cache_gid_add: unable to add gid fe80:0000:0000:0000:7428:1fff:fee5:3988 error=-28 [ 194.076940][ T9653] bond3: (slave macvlan0): Enslaving as an active interface with an up link [ 194.381892][ T9678] GUP no longer grows the stack in syz.4.955 (9678): 200000006000-20000000a000 (200000005000) [ 194.436671][ T9678] CPU: 1 UID: 0 PID: 9678 Comm: syz.4.955 Not tainted 6.14.0-rc7-syzkaller-01407-g6f13bec53a48 #0 [ 194.436705][ T9678] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 194.436723][ T9678] Call Trace: [ 194.436731][ T9678] [ 194.436741][ T9678] dump_stack_lvl+0x241/0x360 [ 194.436785][ T9678] ? __pfx_dump_stack_lvl+0x10/0x10 [ 194.436809][ T9678] ? __pfx__printk+0x10/0x10 [ 194.436828][ T9678] ? find_vma+0xf9/0x170 [ 194.436863][ T9678] __get_user_pages+0x3b07/0x4140 [ 194.436896][ T9678] ? mark_lock+0x9a/0x360 [ 194.436946][ T9678] ? __pfx___get_user_pages+0x10/0x10 [ 194.436973][ T9678] ? __gup_longterm_locked+0xd2f/0x17f0 [ 194.436999][ T9678] ? __pfx_down_read_killable+0x10/0x10 [ 194.437025][ T9678] ? __pfx_lock_acquire+0x10/0x10 [ 194.437059][ T9678] ? try_get_folio+0xf1/0x6f0 [ 194.437083][ T9678] ? __pfx_lock_release+0x10/0x10 [ 194.437124][ T9678] __gup_longterm_locked+0xe64/0x17f0 [ 194.437161][ T9678] ? mark_lock+0x9a/0x360 [ 194.437186][ T9678] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 194.437219][ T9678] ? __pfx___gup_longterm_locked+0x10/0x10 [ 194.437243][ T9678] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 194.437281][ T9678] ? gup_fast_fallback+0x207e/0x29c0 [ 194.437307][ T9678] gup_fast_fallback+0x2266/0x29c0 [ 194.437364][ T9678] ? __pfx_gup_fast_fallback+0x10/0x10 [ 194.437386][ T9678] ? __lock_acquire+0x1397/0x2100 [ 194.437455][ T9678] ? is_valid_gup_args+0x124/0x200 [ 194.437480][ T9678] get_user_pages_fast+0xcc/0x160 [ 194.437505][ T9678] ? __pfx_get_user_pages_fast+0x10/0x10 [ 194.437529][ T9678] ? rcu_is_watching+0x15/0xb0 [ 194.437554][ T9678] ? trace_contention_end+0x3c/0x120 [ 194.437584][ T9678] __iov_iter_get_pages_alloc+0x39c/0xa90 [ 194.437619][ T9678] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 194.437650][ T9678] ? __se_sys_vmsplice+0x4b7/0x14a0 [ 194.437685][ T9678] iov_iter_get_pages2+0xcf/0x130 [ 194.437718][ T9678] ? __pfx_iov_iter_get_pages2+0x10/0x10 [ 194.437760][ T9678] __se_sys_vmsplice+0x739/0x14a0 [ 194.437787][ T9678] ? plist_del+0x3f1/0x410 [ 194.437837][ T9678] ? __pfx___se_sys_vmsplice+0x10/0x10 [ 194.437869][ T9678] ? __pfx_futex_wake+0x10/0x10 [ 194.437958][ T9678] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 194.437999][ T9678] ? do_syscall_64+0x100/0x230 [ 194.438035][ T9678] ? do_syscall_64+0xb6/0x230 [ 194.438069][ T9678] do_syscall_64+0xf3/0x230 [ 194.438100][ T9678] ? clear_bhb_loop+0x35/0x90 [ 194.438134][ T9678] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 194.438171][ T9678] RIP: 0033:0x7fa649f8d169 [ 194.438195][ T9678] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 194.438211][ T9678] RSP: 002b:00007fa64adae038 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 194.438241][ T9678] RAX: ffffffffffffffda RBX: 00007fa64a1a5fa0 RCX: 00007fa649f8d169 [ 194.438257][ T9678] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 000000000000000e [ 194.438270][ T9678] RBP: 00007fa64a00e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 194.438283][ T9678] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 194.438295][ T9678] R13: 0000000000000000 R14: 00007fa64a1a5fa0 R15: 00007ffc9bb41668 [ 194.438328][ T9678] [ 194.451170][ T9686] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 194.464809][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 194.786449][ T9686] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 194.802314][ T9679] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 194.810996][ T9686] __nla_validate_parse: 9 callbacks suppressed [ 194.811021][ T9686] netlink: 36 bytes leftover after parsing attributes in process `syz.2.958'. [ 194.836738][ T9683] netlink: 80 bytes leftover after parsing attributes in process `syz.1.959'. [ 194.855678][ T9684] netlink: 80 bytes leftover after parsing attributes in process `syz.1.959'. [ 194.868100][ T9691] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 194.877378][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 194.895992][ T9691] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 194.914699][ T9686] netlink: 16 bytes leftover after parsing attributes in process `syz.2.958'. [ 194.937328][ T9691] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 194.984830][ T9697] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input7 [ 194.987632][ T9686] netlink: 36 bytes leftover after parsing attributes in process `syz.2.958'. [ 195.047950][ T9686] netlink: 36 bytes leftover after parsing attributes in process `syz.2.958'. [ 195.194219][ T9703] netlink: 12 bytes leftover after parsing attributes in process `syz.3.962'. [ 195.448374][ T9713] vcan0: tx drop: invalid da for name 0x0000000000000002 [ 195.516878][ T9696] lo speed is unknown, defaulting to 1000 [ 195.990581][ T9741] netlink: 1672 bytes leftover after parsing attributes in process `syz.2.973'. [ 196.067895][ T9741] netlink: 1672 bytes leftover after parsing attributes in process `syz.2.973'. [ 196.097297][ T9743] xt_l2tp: v2 sid > 0xffff: 262144 [ 196.109048][ T9749] netlink: 1672 bytes leftover after parsing attributes in process `syz.2.973'. [ 196.181199][ T9743] gretap3: entered promiscuous mode [ 196.593187][ T9767] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input8 [ 196.662190][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 196.687699][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 196.889454][ T9745] lo speed is unknown, defaulting to 1000 [ 197.655239][ T9751] lo speed is unknown, defaulting to 1000 [ 197.907481][ T9793] IPVS: Error connecting to the multicast addr [ 198.038636][ T9797] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.225871][ T9797] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.384550][ T9797] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.521476][ T9797] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.679993][ T9797] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.721874][ T9816] 8021q: adding VLAN 0 to HW filter on device bond2 [ 198.778084][ T9797] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.813108][ T9797] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.938109][ T9797] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.225762][ C0] net_ratelimit: 32 callbacks suppressed [ 199.225784][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 199.240972][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 199.267872][ T9843] netlink: zone id is out of range [ 199.273133][ T9843] netlink: zone id is out of range [ 199.301812][ T9843] netlink: zone id is out of range [ 199.319199][ T9843] netlink: zone id is out of range [ 199.334067][ T9843] netlink: zone id is out of range [ 199.353065][ T9843] netlink: zone id is out of range [ 199.370482][ T9843] netlink: zone id is out of range [ 199.401570][ T9843] netlink: zone id is out of range [ 199.794185][ T9868] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:0000 [ 199.814343][ T9868] tipc: Enabled bearer , priority 10 [ 199.823058][ T9867] tipc: Enabling of bearer rejected, already enabled [ 199.925184][ T9874] __nla_validate_parse: 9 callbacks suppressed [ 199.925208][ T9874] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1010'. [ 200.130513][ T9879] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1013'. [ 201.373656][ T9917] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1025'. [ 201.755322][ T6438] IPVS: starting estimator thread 0... [ 201.764939][ T9934] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1029'. [ 201.767894][ T9933] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1030'. [ 201.805294][ T9934] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 201.807251][ T9933] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1030'. [ 201.833260][ T9937] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1029'. [ 201.875916][ T9936] IPVS: using max 21 ests per chain, 50400 per kthread [ 202.107143][ T9947] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1033'. [ 202.455371][ T9959] netlink: 260 bytes leftover after parsing attributes in process `syz.4.1038'. [ 202.476565][ T9960] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1037'. [ 203.021534][ T9960] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.030827][ T9960] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.040031][ T9960] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.049054][ T9960] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.133956][ T6438] lo speed is unknown, defaulting to 1000 [ 203.191514][ T9986] bridge0: port 1(macvlan1) entered disabled state [ 203.254575][ T9986] team0: Port device wlan1 removed [ 204.108340][ T9992] lo speed is unknown, defaulting to 1000 [ 204.115005][T10017] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 204.122379][T10017] IPv6: NLM_F_CREATE should be set when creating new route [ 204.425679][ C0] net_ratelimit: 2107 callbacks suppressed [ 204.425700][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 204.441817][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 204.788608][T10046] netlink: 'syz.1.1060': attribute type 10 has an invalid length. [ 204.872314][T10047] vlan0: entered promiscuous mode [ 205.000587][T10053] __nla_validate_parse: 6 callbacks suppressed [ 205.000610][T10053] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1063'. [ 205.344958][T10077] syzkaller1: entered promiscuous mode [ 205.392827][T10077] syzkaller1: entered allmulticast mode [ 205.465661][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 205.474426][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 206.031904][T10100] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1070'. [ 206.427145][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 206.435977][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 206.505706][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 206.514682][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 206.555104][T10114] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1077'. [ 206.606066][T10128] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1077'. [ 206.908353][T10113] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 207.023297][T10147] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1083'. [ 207.067586][ T5842] Bluetooth: hci1: command 0x0406 tx timeout [ 207.073782][ T5853] Bluetooth: hci3: command 0x0406 tx timeout [ 207.079994][ T5853] Bluetooth: hci2: command 0x0406 tx timeout [ 207.545792][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 207.554439][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 207.948320][T10199] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1092'. [ 207.958913][T10199] 8021q: VLANs not supported on sit0 [ 207.987929][T10197] netlink: 'syz.4.1091': attribute type 6 has an invalid length. [ 208.040214][T10192] netlink: 6 bytes leftover after parsing attributes in process `syz.3.1090'. [ 208.582753][T10217] lo speed is unknown, defaulting to 1000 [ 209.275899][T10246] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1101'. [ 209.514385][T10254] syzkaller1: entered promiscuous mode [ 209.522907][T10254] syzkaller1: entered allmulticast mode [ 209.625689][ C0] net_ratelimit: 2 callbacks suppressed [ 209.625710][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 209.640310][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 210.106385][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 210.308737][T10286] gre1: entered allmulticast mode [ 210.504463][T10290] netlink: 176 bytes leftover after parsing attributes in process `syz.1.1114'. [ 210.514313][T10292] netlink: 'syz.4.1115': attribute type 1 has an invalid length. [ 210.565363][T10292] netlink: 784 bytes leftover after parsing attributes in process `syz.4.1115'. [ 210.665677][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 210.674472][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 210.833217][ T30] audit: type=1800 audit(1742569947.588:4): pid=10300 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1116" name="memory.events" dev="tmpfs" ino=1182 res=0 errno=0 [ 210.899187][ T30] audit: type=1804 audit(1742569947.588:5): pid=10300 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.1116" name="/newroot/228/memory.events" dev="tmpfs" ino=1182 res=1 errno=0 [ 211.045676][T10311] sctp: [Deprecated]: syz.2.1121 (pid 10311) Use of struct sctp_assoc_value in delayed_ack socket option. [ 211.045676][T10311] Use struct sctp_sack_info instead [ 211.361978][T10326] netlink: 'syz.2.1121': attribute type 21 has an invalid length. [ 211.705605][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 211.714597][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 211.972786][T10335] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1125'. [ 211.983019][T10334] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1126'. [ 211.985581][T10335] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1125'. [ 212.039146][T10334] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1126'. [ 212.048739][ T6418] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 212.057807][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 212.085639][ T1156] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 212.174985][T10338] netlink: 'syz.4.1128': attribute type 4 has an invalid length. [ 212.210736][T10338] netlink: 'syz.4.1128': attribute type 4 has an invalid length. [ 212.277410][T10324] lo speed is unknown, defaulting to 1000 [ 212.488664][T10344] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1130'. [ 212.524066][T10344] ipvlan2: entered promiscuous mode [ 212.534558][T10344] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 212.552882][T10344] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 212.815787][T10311] lo speed is unknown, defaulting to 1000 [ 213.089619][T10367] netlink: 'syz.0.1136': attribute type 39 has an invalid length. [ 213.675440][T10384] team0: Mode changed to "loadbalance" [ 213.883159][T10390] sysfs: cannot create duplicate filename '/class/ieee80211/!åÀØ¢…D£øUDŒw˜}zR3âëp(@Oš>Æõ–PÛç¡RaG' [ 213.902039][T10390] CPU: 0 UID: 0 PID: 10390 Comm: syz.0.1145 Not tainted 6.14.0-rc7-syzkaller-01407-g6f13bec53a48 #0 [ 213.902069][T10390] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 213.902082][T10390] Call Trace: [ 213.902090][T10390] [ 213.902099][T10390] dump_stack_lvl+0x241/0x360 [ 213.902131][T10390] ? __pfx_dump_stack_lvl+0x10/0x10 [ 213.902154][T10390] ? __pfx__printk+0x10/0x10 [ 213.902181][T10390] ? __kmalloc_cache_noprof+0x243/0x390 [ 213.902213][T10390] ? sysfs_warn_dup+0x51/0xa0 [ 213.902246][T10390] sysfs_warn_dup+0x8e/0xa0 [ 213.902274][T10390] sysfs_do_create_link_sd+0xbe/0x110 [ 213.902305][T10390] device_add_class_symlinks+0x1c5/0x250 [ 213.902332][T10390] device_add+0x553/0xbf0 [ 213.902360][T10390] wiphy_register+0x1922/0x2650 [ 213.902421][T10390] ? __pfx_wiphy_register+0x10/0x10 [ 213.902450][T10390] ? minstrel_ht_alloc+0x84b/0x940 [ 213.902494][T10390] ? ieee80211_init_rate_ctrl_alg+0x5a2/0x620 [ 213.902535][T10390] ieee80211_register_hw+0x35d9/0x42e0 [ 213.902575][T10390] ? ieee80211_register_hw+0x15e1/0x42e0 [ 213.902608][T10390] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 213.902644][T10390] ? __asan_memset+0x23/0x50 [ 213.902666][T10390] ? __hrtimer_init+0x170/0x250 [ 213.902695][T10390] mac80211_hwsim_new_radio+0x2a89/0x49f0 [ 213.902762][T10390] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 213.902792][T10390] ? trace_kmalloc+0x1f/0xd0 [ 213.902818][T10390] ? __kmalloc_node_track_caller_noprof+0x2a8/0x4c0 [ 213.902850][T10390] ? kstrndup+0xbb/0x150 [ 213.902895][T10390] hwsim_new_radio_nl+0xece/0x2290 [ 213.902941][T10390] ? __pfx___nla_validate_parse+0x10/0x10 [ 213.902971][T10390] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 213.903037][T10390] ? genl_family_rcv_msg_attrs_parse+0x1d1/0x290 [ 213.903075][T10390] genl_rcv_msg+0xb1f/0xec0 [ 213.903112][T10390] ? __pfx_genl_rcv_msg+0x10/0x10 [ 213.903173][T10390] ? __pfx_lock_acquire+0x10/0x10 [ 213.903205][T10390] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 213.903238][T10390] ? __pfx___might_resched+0x10/0x10 [ 213.903279][T10390] netlink_rcv_skb+0x206/0x480 [ 213.903315][T10390] ? __pfx_genl_rcv_msg+0x10/0x10 [ 213.903343][T10390] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 213.903421][T10390] genl_rcv+0x28/0x40 [ 213.903445][T10390] netlink_unicast+0x7f6/0x990 [ 213.903487][T10390] ? __pfx_netlink_unicast+0x10/0x10 [ 213.903515][T10390] ? __virt_addr_valid+0x45f/0x530 [ 213.903537][T10390] ? __phys_addr_symbol+0x2f/0x70 [ 213.903557][T10390] ? __check_object_size+0x47a/0x730 [ 213.903593][T10390] netlink_sendmsg+0x8de/0xcb0 [ 213.903629][T10390] ? __pfx_netlink_sendmsg+0x10/0x10 [ 213.903656][T10390] ? aa_sock_msg_perm+0x91/0x160 [ 213.903697][T10390] ? __pfx_netlink_sendmsg+0x10/0x10 [ 213.903732][T10390] __sock_sendmsg+0x221/0x270 [ 213.903771][T10390] ____sys_sendmsg+0x53a/0x860 [ 213.903809][T10390] ? __pfx_____sys_sendmsg+0x10/0x10 [ 213.903833][T10390] ? __fget_files+0x2a/0x410 [ 213.903870][T10390] ? __fget_files+0x2a/0x410 [ 213.903913][T10390] __sys_sendmsg+0x269/0x350 [ 213.903939][T10390] ? __pfx_futex_wake+0x10/0x10 [ 213.903977][T10390] ? __pfx___sys_sendmsg+0x10/0x10 [ 213.904056][T10390] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 213.904092][T10390] ? do_syscall_64+0x100/0x230 [ 213.904128][T10390] ? do_syscall_64+0xb6/0x230 [ 213.904163][T10390] do_syscall_64+0xf3/0x230 [ 213.904195][T10390] ? clear_bhb_loop+0x35/0x90 [ 213.904230][T10390] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 213.904259][T10390] RIP: 0033:0x7fc5fcb8d169 [ 213.904279][T10390] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 213.904295][T10390] RSP: 002b:00007fc5fdaac038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 213.904319][T10390] RAX: ffffffffffffffda RBX: 00007fc5fcda5fa0 RCX: 00007fc5fcb8d169 [ 213.904334][T10390] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004 [ 213.904348][T10390] RBP: 00007fc5fcc0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 213.904360][T10390] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 213.904379][T10390] R13: 0000000000000000 R14: 00007fc5fcda5fa0 R15: 00007ffc7d9f85d8 [ 213.904413][T10390] [ 214.556118][T10399] netlink: 'syz.1.1146': attribute type 4 has an invalid length. [ 214.618784][T10406] vcan0: tx drop: invalid da for name 0x0000000000000003 [ 214.825654][ C0] net_ratelimit: 5 callbacks suppressed [ 214.825703][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 214.840267][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 214.940878][T10421] netlink: 'syz.0.1155': attribute type 10 has an invalid length. [ 215.038014][T10421] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 215.189498][T10429] pimreg: entered allmulticast mode [ 215.238857][T10430] 8021q: VLANs not supported on pimreg [ 215.289182][T10433] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1159'. [ 215.349021][T10433] vlan3: entered allmulticast mode [ 215.354318][T10433] hsr0: entered allmulticast mode [ 215.386013][T10433] hsr_slave_0: entered allmulticast mode [ 215.396122][T10433] hsr_slave_1: entered allmulticast mode [ 215.433118][T10436] netlink: 'syz.1.1159': attribute type 12 has an invalid length. [ 215.468825][T10436] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1159'. [ 215.707434][T10448] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1164'. [ 215.865729][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 215.874392][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 215.903393][T10457] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1166'. [ 216.145434][T10464] netlink: 232 bytes leftover after parsing attributes in process `syz.3.1168'. [ 216.175809][T10468] netlink: 'syz.0.1170': attribute type 1 has an invalid length. [ 216.251278][T10471] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1170'. [ 216.298337][T10473] netlink: 1284 bytes leftover after parsing attributes in process `syz.4.1171'. [ 216.369758][T10468] 8021q: adding VLAN 0 to HW filter on device bond3 [ 216.418145][T10475] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1172'. [ 216.515924][T10446] lo speed is unknown, defaulting to 1000 [ 216.570008][T10477] 8021q: VLANs not supported on nlmon0 [ 216.671876][T10485] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1175'. [ 216.829838][T10490] netlink: 'syz.3.1176': attribute type 1 has an invalid length. [ 216.903376][T10490] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 216.905683][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 216.921945][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 217.088792][T10446] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1163'. [ 217.106032][T10446] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1163'. [ 217.151440][T10503] ip6tnl1: entered promiscuous mode [ 217.157344][T10503] ip6tnl1: entered allmulticast mode [ 217.169627][T10503] team0: Device ip6tnl1 is up. Set it down before adding it as a team port [ 217.209644][T10449] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1163'. [ 217.258192][T10507] bridge_slave_0: left allmulticast mode [ 217.269871][T10507] bridge_slave_0: left promiscuous mode [ 217.278572][T10507] bridge0: port 1(bridge_slave_0) entered disabled state [ 217.395872][T10507] bridge_slave_1: left promiscuous mode [ 217.401732][T10507] bridge0: port 2(bridge_slave_1) entered disabled state [ 217.517710][T10507] bond0: (slave bond_slave_0): Releasing backup interface [ 217.540434][T10507] bond_slave_0: left promiscuous mode [ 217.577395][T10507] bond0: (slave bond_slave_1): Releasing backup interface [ 217.606689][T10507] bond_slave_1: left promiscuous mode [ 217.685402][T10507] team0: Port device team_slave_0 removed [ 217.719228][T10507] team0: Port device team_slave_1 removed [ 217.743883][T10507] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 217.786550][ T1156] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 217.787637][T10507] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 217.795559][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 217.832845][T10507] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 217.884901][T10507] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 217.894361][T10507] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 217.903515][T10507] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 217.912293][T10507] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 217.935184][T10507] team0: Port device vxlan0 removed [ 217.942686][T10507] bond0: (slave bond1): Releasing backup interface [ 217.945669][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 217.981817][T10507] bond3: (slave macvlan0): Releasing backup interface [ 218.061348][T10515] team0: Port device vlan0 added [ 218.828685][T10571] tap0: tun_chr_ioctl cmd 2147767507 [ 219.923194][T10577] lo speed is unknown, defaulting to 1000 [ 220.005434][T10596] net_ratelimit: 4 callbacks suppressed [ 220.007885][T10591] IPVS: Scheduler module ip_vs_sip not found [ 220.011498][T10596] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 220.027950][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 220.039273][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 220.049971][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 220.065813][T10588] IPVS: length: 24 != 16106127384 [ 220.736862][T10612] __nla_validate_parse: 6 callbacks suppressed [ 220.736893][T10612] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1209'. [ 221.073246][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 221.082039][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 221.156283][T10616] bond0: (slave wlan1): Releasing backup interface [ 221.192696][T10607] lo speed is unknown, defaulting to 1000 [ 221.382129][T10627] netlink: 'syz.4.1212': attribute type 27 has an invalid length. [ 221.388478][T10634] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1213'. [ 221.532079][T10637] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input9 [ 221.617036][T10642] netlink: 'syz.1.1215': attribute type 11 has an invalid length. [ 221.687510][T10636] 8021q: adding VLAN 0 to HW filter on device bond0 [ 221.743949][T10636] 8021q: adding VLAN 0 to HW filter on device team0 [ 221.791951][T10636] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 221.880324][T10640] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (511) [ 221.893778][T10640] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255 [ 221.906200][T10630] lo speed is unknown, defaulting to 1000 [ 222.105676][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 222.114805][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 222.275723][ T5933] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 223.410576][T10699] netlink: 'syz.1.1225': attribute type 5 has an invalid length. [ 223.468669][T10699] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1225'. [ 223.649377][T10686] Bluetooth: hci1: Opcode 0x0401 failed: -4 [ 224.279723][T10719] 8021q: adding VLAN 0 to HW filter on device bond5 [ 224.386087][T10719] bond0: (slave bond5): Enslaving as an active interface with an up link [ 224.634592][T10710] lo speed is unknown, defaulting to 1000 [ 224.985938][ T5846] Bluetooth: hci1: command 0x0406 tx timeout [ 225.225602][ C0] net_ratelimit: 17 callbacks suppressed [ 225.225624][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 225.240800][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 225.260362][T10710] tc_dump_action: action bad kind [ 225.443103][T10751] sctp: [Deprecated]: syz.3.1240 (pid 10751) Use of struct sctp_assoc_value in delayed_ack socket option. [ 225.443103][T10751] Use struct sctp_sack_info instead [ 225.714271][T10744] syzkaller0: entered promiscuous mode [ 225.770859][T10744] syzkaller0: entered allmulticast mode [ 226.265627][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 226.274815][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 226.315910][T10775] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 226.839164][T10783] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 227.306798][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 227.315943][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 228.345708][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 228.354486][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 228.738287][T10741] lo speed is unknown, defaulting to 1000 [ 229.126976][T10796] netlink: 'syz.4.1247': attribute type 4 has an invalid length. [ 229.307786][ T2995] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 229.481246][T10821] sctp: [Deprecated]: syz.4.1253 (pid 10821) Use of struct sctp_assoc_value in delayed_ack socket option. [ 229.481246][T10821] Use struct sctp_sack_info instead [ 230.432647][ C0] net_ratelimit: 3 callbacks suppressed [ 230.432665][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 230.447310][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 230.591233][ T6438] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 230.600215][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 231.472873][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 231.481648][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 231.954600][T10831] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1257'. [ 232.070597][T10841] netlink: 240 bytes leftover after parsing attributes in process `syz.2.1258'. [ 232.148634][ T6418] IPVS: starting estimator thread 0... [ 232.278848][T10849] IPVS: using max 18 ests per chain, 43200 per kthread [ 232.505763][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 232.514651][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 232.661468][T10869] dccp_invalid_packet: P.Data Offset(0) too small [ 232.886786][T10875] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1270'. [ 232.926510][T10877] atomic_op ffff88807d8d3998 conn xmit_atomic 0000000000000000 [ 232.980928][T10877] netlink: 188 bytes leftover after parsing attributes in process `syz.1.1269'. [ 232.990841][T10877] netlink: 'syz.1.1269': attribute type 1 has an invalid length. [ 233.079394][T10869] bridge_slave_1: left allmulticast mode [ 233.122941][T10869] batadv_slave_0: left promiscuous mode [ 233.140135][T10869] batadv_slave_0: left allmulticast mode [ 233.251650][T10869] vlan0: left promiscuous mode [ 233.302856][T10869] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.312754][T10869] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.322898][T10869] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.332455][T10869] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.359138][T10869] ip6gre1: left promiscuous mode [ 233.537335][T10885] 8021q: adding VLAN 0 to HW filter on device bond0 [ 233.545592][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 233.547932][T10885] 8021q: adding VLAN 0 to HW filter on device team0 [ 233.677773][T10893] syzkaller0: entered promiscuous mode [ 233.691929][T10893] syzkaller0: entered allmulticast mode [ 233.749732][T10896] 8021q: VLANs not supported on ip_vti0 [ 233.853452][T10913] netlink: 'syz.4.1277': attribute type 15 has an invalid length. [ 234.747709][ T5845] Bluetooth: hci4: command 0x0405 tx timeout [ 235.625677][ C0] net_ratelimit: 6 callbacks suppressed [ 235.625700][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 235.640809][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 236.589849][T10913] netlink: 'syz.4.1277': attribute type 13 has an invalid length. [ 236.665668][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 236.675126][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 236.992469][T10953] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1286'. [ 237.028348][T10953] team1 (uninitialized): Failed to send options change via netlink (err -105) [ 237.062422][ T5888] IPVS: starting estimator thread 0... [ 237.156810][T10953] 8021q: adding VLAN 0 to HW filter on device team1 [ 237.185992][T10959] IPVS: using max 21 ests per chain, 50400 per kthread [ 237.490189][T10966] bridge2: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 237.705605][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 237.715742][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 237.887302][T10983] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1295'. [ 238.745629][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 238.755129][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 238.925571][ T5846] Bluetooth: hci4: command 0x0405 tx timeout [ 239.175412][T11038] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1310'. [ 239.243798][T11041] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1312'. [ 239.614534][T11059] netlink: 'syz.3.1318': attribute type 10 has an invalid length. [ 239.785655][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 239.794506][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 240.268188][T11095] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1328'. [ 240.436304][T11102] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1329'. [ 240.487139][T11098] 8021q: adding VLAN 0 to HW filter on device bond3 [ 240.499775][T11098] bridge0: port 1(bond3) entered blocking state [ 240.522135][T11098] bridge0: port 1(bond3) entered disabled state [ 240.534740][T11098] bond3: entered allmulticast mode [ 240.551370][T11098] bond3: entered promiscuous mode [ 240.559601][T11104] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1330'. [ 240.669579][T11107] netlink: 136 bytes leftover after parsing attributes in process `syz.2.1332'. [ 240.679249][T11107] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 240.766558][T11098] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 240.775813][T11098] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 240.784189][T11098] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 240.792776][T11098] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 241.163762][T11130] (unnamed net_device) (uninitialized): option lacp_rate: invalid value (36) [ 241.276391][T11130] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1336'. [ 241.566920][T11147] netlink: 'syz.2.1339': attribute type 1 has an invalid length. [ 241.683200][T11153] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1339'. [ 241.903389][T11116] lo speed is unknown, defaulting to 1000 [ 241.916178][T11151] batadv1: entered allmulticast mode [ 242.276764][T11152] lo speed is unknown, defaulting to 1000 [ 242.410350][T11174] __nla_validate_parse: 1 callbacks suppressed [ 242.410374][T11174] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1344'. [ 242.473610][T11174] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1344'. [ 242.506957][T11174] netlink: 'syz.2.1344': attribute type 14 has an invalid length. [ 242.518421][T11174] netlink: 'syz.2.1344': attribute type 13 has an invalid length. [ 242.536806][T11173] tipc: Enabling of bearer rejected, already enabled [ 242.737888][T11182] netlink: 188 bytes leftover after parsing attributes in process `syz.1.1347'. [ 242.750744][T11182] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1347'. [ 242.760659][T11182] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1347'. [ 242.770802][T11182] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1347'. [ 242.835094][T11187] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1347'. [ 242.844743][T11187] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1347'. [ 242.895376][T11182] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1347'. [ 243.721917][T11206] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1355'. [ 244.801303][T11247] netlink: 'syz.0.1365': attribute type 21 has an invalid length. [ 245.480721][T11288] netlink: 'syz.3.1377': attribute type 5 has an invalid length. [ 246.299074][T11330] bond0: left promiscuous mode [ 246.310695][T11330] veth3: left promiscuous mode [ 246.320584][T11330] veth5: left promiscuous mode [ 246.328833][T11330] gretap1: left promiscuous mode [ 246.360812][T11330] gretap2: left promiscuous mode [ 246.386167][T11330] gretap3: left promiscuous mode [ 246.435390][T11330] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 246.445923][T11330] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 246.454347][T11330] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 246.463366][T11330] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 246.498234][T11332] netlink: 'syz.2.1387': attribute type 3 has an invalid length. [ 246.532060][T11309] lo speed is unknown, defaulting to 1000 [ 247.215677][T11333] lo speed is unknown, defaulting to 1000 [ 247.423177][T11377] __nla_validate_parse: 8 callbacks suppressed [ 247.423200][T11377] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1395'. [ 247.460911][T11377] netlink: 'syz.1.1395': attribute type 7 has an invalid length. [ 247.493962][T11377] netlink: 'syz.1.1395': attribute type 8 has an invalid length. [ 247.503531][T11377] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1395'. [ 247.952335][T11390] netlink: 'syz.3.1400': attribute type 10 has an invalid length. [ 247.982256][T11390] team0: Device macvtap0 failed to register rx_handler [ 248.018593][T11392] sch_tbf: burst 0 is lower than device ip6tnl0 mtu (1452) ! [ 248.252359][T11409] netlink: 'syz.3.1402': attribute type 2 has an invalid length. [ 248.533803][T11423] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1408'. [ 248.699553][T11435] bond0: option all_slaves_active: invalid value (5) [ 249.752788][T11479] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1423'. [ 249.802261][T11479] bond3: left allmulticast mode [ 249.815704][T11479] bond3: left promiscuous mode [ 249.823512][T11479] bridge0: port 1(bond3) entered disabled state [ 249.981970][T11498] xt_TPROXY: Can be used only with -p tcp or -p udp [ 250.192423][T11503] ipt_REJECT: TCP_RESET invalid for non-tcp [ 250.208560][T11508] netlink: 'syz.0.1433': attribute type 3 has an invalid length. [ 250.639144][T11539] sctp: [Deprecated]: syz.0.1436 (pid 11539) Use of int in max_burst socket option. [ 250.639144][T11539] Use struct sctp_assoc_value instead [ 250.693764][T11539] netlink: 'syz.0.1436': attribute type 10 has an invalid length. [ 250.734643][T11539] veth0_vlan: left promiscuous mode [ 250.773474][T11539] veth0_vlan: entered promiscuous mode [ 250.785331][T11539] team0: Device veth0_vlan failed to register rx_handler [ 250.887466][T11547] netlink: 'syz.2.1441': attribute type 11 has an invalid length. [ 251.030386][T11550] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 251.058232][T11550] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1443'. [ 251.748797][T11571] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1449'. [ 251.782838][T11572] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1449'. [ 252.214637][T11589] netlink: 'syz.1.1453': attribute type 10 has an invalid length. [ 252.290406][T11594] netlink: 1004 bytes leftover after parsing attributes in process `syz.0.1455'. [ 252.890339][T11624] SET target dimension over the limit! [ 252.934394][T11627] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1464'. [ 253.051702][T11633] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1468'. [ 253.070096][T11634] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1469'. [ 253.079321][T11635] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1468'. [ 253.113601][T11633] netlink: 136 bytes leftover after parsing attributes in process `syz.3.1468'. [ 253.163522][T11633] netlink: 136 bytes leftover after parsing attributes in process `syz.3.1468'. [ 253.208982][T11618] lo speed is unknown, defaulting to 1000 [ 253.430619][T11642] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1471'. [ 253.482766][T11645] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1471'. [ 253.504868][T11645] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1471'. [ 253.793656][T11626] lo speed is unknown, defaulting to 1000 [ 254.963128][T11678] netlink: 'syz.3.1480': attribute type 1 has an invalid length. [ 255.025558][T11678] netlink: 228 bytes leftover after parsing attributes in process `syz.3.1480'. [ 255.140320][T11684] netlink: 'syz.0.1482': attribute type 11 has an invalid length. [ 255.282254][T11687] C: renamed from team_slave_0 [ 255.323348][T11682] sctp: [Deprecated]: syz.2.1481 (pid 11682) Use of int in max_burst socket option. [ 255.323348][T11682] Use struct sctp_assoc_value instead [ 255.587986][T11695] openvswitch: netlink: Missing valid actions attribute. [ 255.610546][T11695] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 255.938803][T11681] lo speed is unknown, defaulting to 1000 [ 255.957482][T11708] vlan2: entered allmulticast mode [ 255.962757][T11708] batadv0: entered allmulticast mode [ 255.989319][T11710] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 256.012969][T11710] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 256.027633][T11710] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 256.037000][T11710] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 256.046160][T11710] geneve2: entered promiscuous mode [ 256.051734][T11710] geneve2: entered allmulticast mode [ 256.296289][T11718] sock: sock_set_timeout: `syz.3.1492' (pid 11718) tries to set negative timeout [ 256.736242][T11732] IPVS: length: 78 != 8 [ 256.949885][T11712] lo speed is unknown, defaulting to 1000 [ 257.203178][T11749] netlink: 'syz.2.1497': attribute type 2 has an invalid length. [ 257.533260][T11756] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 257.547053][ T5846] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 257.961592][T11770] netlink: 'syz.0.1504': attribute type 10 has an invalid length. [ 257.990966][T11772] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 258.013098][T11770] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 258.028694][T11772] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 258.471135][T11789] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 258.492769][T11790] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.560208][T11801] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 258.594086][T11789] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 258.627512][T11790] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.655879][T11791] __nla_validate_parse: 12 callbacks suppressed [ 258.655901][T11791] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1509'. [ 258.688894][T11789] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 258.714700][T11800] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1509'. [ 258.734992][T11790] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.810906][T11789] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 258.837775][T11783] lo speed is unknown, defaulting to 1000 [ 258.853329][T11790] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.907183][T11807] netlink: 'syz.1.1514': attribute type 4 has an invalid length. [ 258.991659][T11789] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 259.023636][T11789] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 259.070087][T11790] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.094230][T11789] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 259.143331][T11790] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.158874][T11789] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 259.214968][T11790] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.282714][T11790] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.910386][T11854] IPVS: set_ctl: invalid protocol: 41 224.0.0.2:20004 [ 260.281926][T11868] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1530'. [ 260.367430][T11876] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1533'. [ 260.405926][T11875] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1532'. [ 260.446868][T11875] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1532'. [ 260.642780][T11888] netlink: 560 bytes leftover after parsing attributes in process `syz.2.1536'. [ 260.693576][T11888] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1536'. [ 260.864289][T11900] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1540'. [ 260.942230][T11906] netlink: 'syz.0.1542': attribute type 49 has an invalid length. [ 261.167447][T11919] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1547'. [ 262.759323][T11984] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 263.066610][T11988] bridge0: port 1(hsr0) entered blocking state [ 263.073565][T11988] bridge0: port 1(hsr0) entered disabled state [ 263.080682][T11988] hsr0: entered allmulticast mode [ 263.086443][T11988] hsr_slave_0: entered allmulticast mode [ 263.092440][T11988] hsr_slave_1: entered allmulticast mode [ 263.101991][T11988] hsr0: entered promiscuous mode [ 263.468844][T12011] 8021q: VLANs not supported on ip6gre0 [ 263.762721][T12021] __nla_validate_parse: 14 callbacks suppressed [ 263.762747][T12021] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1578'. [ 263.910120][T12034] netlink: 'syz.0.1579': attribute type 10 has an invalid length. [ 264.423078][T12034] team0: Device dummy0 failed to register rx_handler [ 264.501275][T12011] lo speed is unknown, defaulting to 1000 [ 264.926427][T12056] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1586'. [ 264.963825][T12056] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1586'. [ 265.331593][T12076] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1592'. [ 265.351356][T12070] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap4 [ 265.369463][T12070] gretap4: default qdisc (pfifo_fast) fail, fallback to noqueue [ 265.378106][T12070] gretap4: entered promiscuous mode [ 265.383959][T12070] gretap4: entered allmulticast mode [ 265.428159][T12073] netlink: 38843 bytes leftover after parsing attributes in process `syz.0.1591'. [ 265.705407][T12085] openvswitch: netlink: Actions may not be safe on all matching packets [ 266.065755][T12100] netlink: 'syz.0.1600': attribute type 1 has an invalid length. [ 266.108059][T12100] netlink: 'syz.0.1600': attribute type 1 has an invalid length. [ 266.195918][T12107] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1601'. [ 266.300678][T12113] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1603'. [ 266.725836][T12133] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1609'. [ 267.625980][T12159] lo speed is unknown, defaulting to 1000 [ 267.632107][T12169] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 267.652512][T12169] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 267.676207][T12169] gretap1: entered promiscuous mode [ 267.681668][T12169] gretap1: entered allmulticast mode [ 267.951838][T12154] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 268.236018][T12187] 8021q: adding VLAN 0 to HW filter on device bond2 [ 268.254373][T12191] netlink: 'syz.1.1625': attribute type 1 has an invalid length. [ 268.264695][T12187] bond0: (slave bond2): Enslaving as an active interface with an up link [ 268.287502][T12192] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1627'. [ 268.339120][T12197] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1627'. [ 268.402213][T12196] bond4: (slave gretap5): making interface the new active one [ 268.426996][T12196] bond4: (slave gretap5): Enslaving as an active interface with an up link [ 269.119256][T12218] xt_TCPMSS: Only works on TCP SYN packets [ 269.151930][T12224] netlink: 'syz.2.1635': attribute type 1 has an invalid length. [ 269.160689][T12218] netlink: 'syz.3.1634': attribute type 1 has an invalid length. [ 269.238927][T12224] 8021q: adding VLAN 0 to HW filter on device bond3 [ 269.325178][T12224] 8021q: adding VLAN 0 to HW filter on device bond3 [ 269.334149][T12224] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 269.346931][T12224] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 269.404567][T12218] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 269.424495][T12243] __nla_validate_parse: 1 callbacks suppressed [ 269.424519][T12243] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1638'. [ 269.480280][T12242] ip6erspan0: entered promiscuous mode [ 269.488179][T12243] netlink: 124 bytes leftover after parsing attributes in process `syz.0.1638'. [ 269.498672][T12243] netlink: 'syz.0.1638': attribute type 3 has an invalid length. [ 269.535036][T12243] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1638'. [ 269.568618][T12243] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1638'. [ 269.747356][T12253] batadv_slave_1: entered promiscuous mode [ 270.027520][T12276] netlink: 'syz.3.1648': attribute type 3 has an invalid length. [ 270.038023][T12276] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1648'. [ 270.119706][T12252] batadv_slave_1: left promiscuous mode [ 270.217837][T12284] netlink: 'syz.2.1651': attribute type 30 has an invalid length. [ 270.271908][T12284] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 270.281399][T12284] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 270.290342][T12284] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 270.299157][T12284] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 270.343499][T12284] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 270.352558][T12284] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 270.362119][T12284] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 270.371188][T12284] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 270.578280][T12301] x_tables: duplicate underflow at hook 3 [ 270.584269][T12301] x_tables: duplicate underflow at hook 3 [ 270.843940][ T30] audit: type=1107 audit(1742570007.618:6): pid=12316 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 270.869853][T12321] IPv6: NLM_F_CREATE should be specified when creating new route [ 271.083614][T12297] lo speed is unknown, defaulting to 1000 [ 271.187793][T12330] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1663'. [ 271.210703][T12330] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1663'. [ 271.232147][T12330] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1663'. [ 271.238042][T12331] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1662'. [ 271.267116][T12330] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1663'. [ 271.576388][T12331] veth1_vlan (unregistering): left allmulticast mode [ 271.770263][T12299] lo speed is unknown, defaulting to 1000 [ 272.171395][T12358] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 272.558762][T12367] A link change request failed with some changes committed already. Interface ip6_vti0 may have been left with an inconsistent configuration, please check. [ 272.658318][T12369] netlink: 'syz.0.1670': attribute type 2 has an invalid length. [ 273.366309][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 273.389348][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 273.518539][T12401] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 273.664274][T12401] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 273.750131][T12401] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 273.887341][T12401] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 273.954653][T12414] tipc: Bearer : already 2 bearers with priority 10 [ 273.963753][T12414] tipc: Bearer : trying with adjusted priority [ 273.974385][T12414] tipc: Enabled bearer , priority 9 [ 273.981455][T12413] tipc: Enabling of bearer rejected, already enabled [ 274.068661][T12401] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 274.096777][T12418] netlink: 'syz.2.1684': attribute type 7 has an invalid length. [ 274.148825][T12401] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 274.191581][T12401] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 274.251489][T12418] tipc: Enabling not permitted [ 274.259092][T12418] tipc: Enabling of bearer rejected, failed to enable media [ 274.297258][T12401] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 274.759415][T12422] lo speed is unknown, defaulting to 1000 [ 274.887546][T12443] atomic_op ffff8880255ea198 conn xmit_atomic 0000000000000000 [ 274.903067][T12443] __nla_validate_parse: 15 callbacks suppressed [ 274.903089][T12443] netlink: 188 bytes leftover after parsing attributes in process `syz.3.1692'. [ 274.920271][T12443] netlink: 'syz.3.1692': attribute type 1 has an invalid length. [ 275.064385][T12448] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 275.160848][T12452] syzkaller1: entered promiscuous mode [ 275.175700][T12452] syzkaller1: entered allmulticast mode [ 275.292696][T12457] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1696'. [ 275.321044][T12457] nbd: illegal input index 65508 [ 275.415264][T12466] netlink: 88 bytes leftover after parsing attributes in process `syz.1.1698'. [ 275.531179][T12452] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.540396][T12452] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.549456][T12452] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.558519][T12452] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.582750][T12452] gre1: left allmulticast mode [ 275.597987][T12452] vlan2: left allmulticast mode [ 275.602949][T12452] batadv0: left allmulticast mode [ 275.617088][T12452] ip6erspan0: left promiscuous mode [ 275.623593][T12452] syzkaller1: left promiscuous mode [ 275.629192][T12452] syzkaller1: left allmulticast mode [ 276.064443][T12482] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1701'. [ 276.300773][T12481] lo speed is unknown, defaulting to 1000 [ 276.624543][T12494] netlink: 212 bytes leftover after parsing attributes in process `syz.4.1704'. [ 276.993059][T12502] netlink: del zone limit has 4 unknown bytes [ 277.013932][T12502] IPVS: set_ctl: invalid protocol: 41 172.20.20.187:20002 [ 277.035138][T12502] x_tables: duplicate underflow at hook 1 [ 277.497024][T12519] netlink: 'syz.2.1709': attribute type 4 has an invalid length. [ 277.709384][T12524] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 277.756750][T12524] netlink: 'syz.1.1712': attribute type 39 has an invalid length. [ 277.992594][T12528] ipt_rpfilter: unknown options [ 278.070575][T12531] netlink: 'syz.2.1713': attribute type 1 has an invalid length. [ 278.326077][T12537] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1715'. [ 278.351397][T12546] netlink: 'syz.0.1718': attribute type 21 has an invalid length. [ 278.476534][T12546] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1718'. [ 278.486154][T12546] netlink: 'syz.0.1718': attribute type 1 has an invalid length. [ 278.494075][T12546] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1718'. [ 278.628033][T12551] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1720'. [ 278.660799][T12554] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1722'. [ 279.344333][T12589] netlink: 'syz.2.1729': attribute type 9 has an invalid length. [ 279.375619][T12589] netlink: 'syz.2.1729': attribute type 7 has an invalid length. [ 279.394404][T12591] tipc: Resetting bearer [ 279.402365][T12589] netlink: 'syz.2.1729': attribute type 8 has an invalid length. [ 279.418241][T12590] ip6gre0: entered promiscuous mode [ 279.432194][T12597] netlink: 'syz.2.1729': attribute type 13 has an invalid length. [ 279.629144][T12604] tipc: Started in network mode [ 279.641176][T12604] tipc: Node identity c6a02f3753ab, cluster identity 4711 [ 279.667754][T12604] tipc: Enabled bearer , priority 0 [ 279.762417][T12593] tipc: Resetting bearer [ 280.765751][ T5888] tipc: Node number set to 2500538167 [ 282.317011][T12593] tipc: Disabling bearer [ 282.332545][T12620] bond0: option mode: unable to set because the bond device has slaves [ 282.622102][T12639] netlink: 'syz.1.1742': attribute type 1 has an invalid length. [ 282.690125][T12639] bond5: entered promiscuous mode [ 282.724932][T12639] 8021q: adding VLAN 0 to HW filter on device bond5 [ 282.782079][T12647] netlink: 'syz.2.1745': attribute type 1 has an invalid length. [ 282.806067][T12645] bond5: (slave veth9): making interface the new active one [ 282.818526][T12645] veth9: entered promiscuous mode [ 282.826157][T12645] bond5: (slave veth9): Enslaving as an active interface with an up link [ 282.857020][T12647] 8021q: adding VLAN 0 to HW filter on device bond4 [ 283.165948][T12644] lo speed is unknown, defaulting to 1000 [ 283.550399][T12683] __nla_validate_parse: 3 callbacks suppressed [ 283.550421][T12683] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1752'. [ 283.574691][T12683] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1752'. [ 283.676584][T12683] netlink: 332 bytes leftover after parsing attributes in process `syz.2.1752'. [ 283.796804][T12698] bond0: entered promiscuous mode [ 283.809306][T12698] bond0: entered allmulticast mode [ 283.825212][T12698] 8021q: adding VLAN 0 to HW filter on device bond0 [ 284.010427][T12704] delete_channel: no stack [ 284.060184][T12704] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1758'. [ 284.079426][T12704] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1758'. [ 284.314140][T12727] Timeout policy `syz0' can only be used by L3 protocol number 2561 [ 284.336394][T12722] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1763'. [ 284.472346][T12727] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 284.758715][T12752] xt_hashlimit: size too large, truncated to 1048576 [ 284.792794][T12753] netlink: 'syz.0.1771': attribute type 7 has an invalid length. [ 284.811716][T12754] xt_hashlimit: size too large, truncated to 1048576 [ 284.844050][T12753] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1771'. [ 284.854293][T12753] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1771'. [ 284.874005][T12757] : renamed from bond0 [ 285.134057][T12766] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1775'. [ 285.268477][T12771] netlink: 268 bytes leftover after parsing attributes in process `syz.4.1777'. [ 285.278326][T12771] unsupported nla_type 65024 [ 285.388983][T12775] netlink: 'syz.4.1779': attribute type 1 has an invalid length. [ 285.404920][T12775] netlink: 'syz.4.1779': attribute type 1 has an invalid length. [ 285.839863][T12801] netlink: 'syz.2.1785': attribute type 10 has an invalid length. [ 285.973001][T12804] sctp: [Deprecated]: syz.0.1786 (pid 12804) Use of struct sctp_assoc_value in delayed_ack socket option. [ 285.973001][T12804] Use struct sctp_sack_info instead [ 285.991710][T12808] sctp: [Deprecated]: syz.0.1786 (pid 12808) Use of struct sctp_assoc_value in delayed_ack socket option. [ 285.991710][T12808] Use struct sctp_sack_info instead [ 286.083409][T12813] batadv1: entered promiscuous mode [ 286.115282][T12813] batadv1: entered allmulticast mode [ 286.507819][T12835] xt_CT: No such helper "netbios-ns" [ 286.772358][T12831] lo speed is unknown, defaulting to 1000 [ 287.141282][T12867] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 287.163688][T12863] geneve3: entered promiscuous mode [ 287.175978][T12863] geneve3: entered allmulticast mode [ 287.215860][T12869] IPVS: Unknown mcast interface: vxcan1 [ 287.221615][T12868] IPVS: Unknown mcast interface: vxcan1 [ 287.269678][T12872] batadv_slave_0: entered promiscuous mode [ 287.300102][T12872] batadv_slave_0: left promiscuous mode [ 287.528743][T12884] atomic_op ffff88805fac6998 conn xmit_atomic 0000000000000000 [ 287.558599][T12884] netlink: 'syz.2.1809': attribute type 1 has an invalid length. [ 287.579453][T12871] lo speed is unknown, defaulting to 1000 [ 288.056688][T12899] xt_bpf: check failed: parse error [ 288.124726][T12907] bond0: (slave wlan1): Releasing backup interface [ 288.729376][T12927] atomic_op ffff888021f2e198 conn xmit_atomic 0000000000000000 [ 288.743823][T12927] __nla_validate_parse: 13 callbacks suppressed [ 288.743845][T12927] netlink: 188 bytes leftover after parsing attributes in process `syz.3.1822'. [ 288.833546][T12927] netlink: 'syz.3.1822': attribute type 1 has an invalid length. [ 289.050514][T12932] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1824'. [ 289.934613][T12974] netlink: 'syz.0.1838': attribute type 9 has an invalid length. [ 289.969587][T12974] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1838'. [ 290.050550][T12974] macvlan4: entered promiscuous mode [ 290.056488][T12974] macvlan4: entered allmulticast mode [ 290.062111][T12974] hsr0: entered allmulticast mode [ 290.069783][T12974] hsr_slave_0: entered allmulticast mode [ 290.095778][T12974] hsr_slave_1: entered allmulticast mode [ 290.112397][T12969] bpq0: entered allmulticast mode [ 290.337066][T12986] netlink: 'syz.1.1842': attribute type 2 has an invalid length. [ 290.385946][T12986] netlink: 'syz.1.1842': attribute type 9 has an invalid length. [ 290.394189][T12986] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1842'. [ 290.522053][T12990] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1840'. [ 290.599504][T12993] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1841'. [ 290.970978][T12983] lo speed is unknown, defaulting to 1000 [ 291.036284][T13005] netlink: 312 bytes leftover after parsing attributes in process `syz.1.1845'. [ 291.062909][T13008] netlink: 312 bytes leftover after parsing attributes in process `syz.1.1845'. [ 291.081452][T13007] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1844'. [ 291.136031][T13007] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1844'. [ 291.460862][T13025] rdma_rxe: rxe_newlink: failed to add lo [ 291.629122][T13031] netlink: 'syz.4.1851': attribute type 7 has an invalid length. [ 291.958194][T13039] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 292.217610][T13035] lo speed is unknown, defaulting to 1000 [ 292.265234][T13053] atomic_op ffff88805fe20198 conn xmit_atomic 0000000000000000 [ 292.321672][T13053] netlink: 'syz.2.1860': attribute type 1 has an invalid length. [ 293.253389][T13111] atomic_op ffff88805e1c6198 conn xmit_atomic 0000000000000000 [ 293.286902][T13111] netlink: 'syz.2.1875': attribute type 1 has an invalid length. [ 293.322606][T13117] netlink: 'syz.4.1877': attribute type 3 has an invalid length. [ 293.637507][T13129] hsr0: left allmulticast mode [ 293.655717][T13129] hsr_slave_0: left allmulticast mode [ 293.661230][T13129] hsr_slave_1: left allmulticast mode [ 293.711698][T13129] hsr0: left promiscuous mode [ 293.732165][T13129] bridge0: port 1(hsr0) entered disabled state [ 293.792142][T13129] bond0: (slave bond2): Releasing backup interface [ 294.027805][T13146] __nla_validate_parse: 13 callbacks suppressed [ 294.027828][T13146] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1882'. [ 294.107524][T13151] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 294.164035][T13152] lo speed is unknown, defaulting to 1000 [ 294.225347][T13152] lo speed is unknown, defaulting to 1000 [ 294.257077][T13155] netlink: 'syz.3.1886': attribute type 1 has an invalid length. [ 294.257548][T13152] lo speed is unknown, defaulting to 1000 [ 294.284648][T13155] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1886'. [ 294.371526][T13152] infiniband s›z0: RDMA CMA: cma_listen_on_dev, error -98 [ 294.456358][T13155] bridge0: port 1(ip6gretap1) entered blocking state [ 294.464867][T13155] bridge0: port 1(ip6gretap1) entered disabled state [ 294.505847][T13155] ip6gretap1: entered allmulticast mode [ 294.512760][T13155] ip6gretap1: entered promiscuous mode [ 294.534396][T13152] lo speed is unknown, defaulting to 1000 [ 294.593406][T13162] veth3: entered promiscuous mode [ 294.609327][T13162] bridge0: port 2(veth3) entered blocking state [ 294.632221][T13162] bridge0: port 2(veth3) entered disabled state [ 294.639206][T13162] veth3: entered allmulticast mode [ 294.647898][T13152] lo speed is unknown, defaulting to 1000 [ 294.656723][T13152] lo speed is unknown, defaulting to 1000 [ 294.663910][T13152] lo speed is unknown, defaulting to 1000 [ 294.671578][T13152] lo speed is unknown, defaulting to 1000 [ 294.825667][ T5846] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 294.841940][T13175] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1892'. [ 294.889540][T13175] dummy0: Device is already in use. [ 295.264528][T13193] vlan2: entered promiscuous mode [ 295.282024][T13195] Bluetooth: MGMT ver 1.23 [ 295.294191][T13193] vlan0: entered promiscuous mode [ 295.299815][T13193] vlan2: entered allmulticast mode [ 295.318199][T13193] vlan0: entered allmulticast mode [ 295.323616][T13193] veth0_vlan: entered allmulticast mode [ 295.353192][T13200] netlink: 'syz.0.1900': attribute type 4 has an invalid length. [ 295.395705][T13200] netlink: 3581 bytes leftover after parsing attributes in process `syz.0.1900'. [ 295.630369][T13206] netlink: 'syz.4.1903': attribute type 10 has an invalid length. [ 295.658154][T13211] netlink: 'syz.2.1904': attribute type 2 has an invalid length. [ 295.667565][T13206] team0: Port device wlan1 added [ 295.676722][T13211] netlink: 'syz.2.1904': attribute type 1 has an invalid length. [ 295.706994][T13211] bond5: entered promiscuous mode [ 295.712955][T13211] 8021q: adding VLAN 0 to HW filter on device bond5 [ 295.792818][T13216] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1906'. [ 295.804544][T13216] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1906'. [ 295.818035][T13217] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1906'. [ 295.827703][T13218] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1906'. [ 295.981016][T13227] netlink: 'syz.2.1908': attribute type 62 has an invalid length. [ 296.343028][T13236] team0: Port device vlan0 removed [ 296.350521][T13236] ip6gretap1: left allmulticast mode [ 296.356459][T13236] ip6gretap1: left promiscuous mode [ 296.362220][T13236] bridge0: port 1(ip6gretap1) entered disabled state [ 296.376455][T13236] veth3: left allmulticast mode [ 296.381693][T13236] bridge0: port 2(veth3) entered disabled state [ 296.394896][T13242] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1911'. [ 296.404389][T13242] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1911'. [ 296.712755][T13251] team0: Mode changed to "loadbalance" [ 297.031520][T13239] lo speed is unknown, defaulting to 1000 [ 297.070153][T13239] lo speed is unknown, defaulting to 1000 [ 297.447919][T13248] lo speed is unknown, defaulting to 1000 [ 297.487920][T13248] lo speed is unknown, defaulting to 1000 [ 298.673111][T13284] netlink: 'syz.2.1923': attribute type 1 has an invalid length. [ 298.726153][T13284] netlink: 'syz.2.1923': attribute type 2 has an invalid length. [ 298.761477][T13284] macsec1: entered promiscuous mode [ 298.782918][T13284] mac80211_hwsim hwsim7 wlan0: entered promiscuous mode [ 298.796391][T13284] macsec1: entered allmulticast mode [ 298.805521][T13284] mac80211_hwsim hwsim7 wlan0: entered allmulticast mode [ 298.872093][T13294] netlink: 'syz.0.1926': attribute type 1 has an invalid length. [ 298.986128][T13294] bond5: entered allmulticast mode [ 298.991774][T13294] 8021q: adding VLAN 0 to HW filter on device bond5 [ 299.074511][T13298] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 299.113124][T13298] bond5: (slave batadv1): making interface the new active one [ 299.140203][T13298] batadv1: entered allmulticast mode [ 299.151156][T13305] __nla_validate_parse: 2 callbacks suppressed [ 299.151177][T13305] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1931'. [ 299.152792][T13298] bond5: (slave batadv1): Enslaving as an active interface with an up link [ 299.443925][T13321] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.1933'. [ 299.585048][ T30] audit: type=1800 audit(1742570036.358:7): pid=13328 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1936" name="blkio.bfq.time_recursive" dev="tmpfs" ino=1958 res=0 errno=0 [ 299.687501][T13298] syz.0.1926 (13298) used greatest stack depth: 17792 bytes left [ 299.842804][T13334] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1939'. [ 299.937945][T13338] netlink: 'syz.1.1938': attribute type 11 has an invalid length. [ 299.966625][T13338] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1938'. [ 299.967597][T13339] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1939'. [ 300.094406][T13336] lo speed is unknown, defaulting to 1000 [ 300.102724][T13336] lo speed is unknown, defaulting to 1000 [ 300.226802][T13348] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1940'. [ 300.518214][T13337] lo speed is unknown, defaulting to 1000 [ 300.536713][T13337] lo speed is unknown, defaulting to 1000 [ 300.545015][T13339] rdma_rxe: rxe_newlink: failed to add lo [ 300.845748][T13352] netlink: 'syz.2.1942': attribute type 1 has an invalid length. [ 300.908918][T13352] bond6: entered promiscuous mode [ 300.914367][T13352] 8021q: adding VLAN 0 to HW filter on device bond6 [ 301.115908][T13357] macsec0: entered promiscuous mode [ 301.343426][T13361] macsec0 (unregistering): left promiscuous mode [ 301.647059][T13375] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 302.133285][T13391] team0 (unregistering): Port device wlan1 removed [ 302.186051][T13368] lo speed is unknown, defaulting to 1000 [ 302.268843][T13394] netlink: 1260 bytes leftover after parsing attributes in process `syz.0.1952'. [ 302.306005][T13394] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 302.355876][T13368] lo speed is unknown, defaulting to 1000 [ 302.986161][T13413] IPVS: Unknown mcast interface: veth0_vlan [ 303.228416][T13423] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1960'. [ 303.730400][T13432] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 20001 - 0 [ 303.763520][T13432] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 20001 - 0 [ 303.798982][T13432] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 20001 - 0 [ 303.835758][T13432] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 20001 - 0 [ 304.104166][T13442] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1966'. [ 304.166319][T13442] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1966'. [ 304.411111][T13455] netlink: 'syz.1.1964': attribute type 10 has an invalid length. [ 304.445957][T13446] mac80211_hwsim hwsim7 wlan0: left allmulticast mode [ 304.452996][T13446] mac80211_hwsim hwsim7 wlan0: left promiscuous mode [ 304.891678][T13473] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1972'. [ 305.227288][T13447] lo speed is unknown, defaulting to 1000 [ 305.267182][T13447] lo speed is unknown, defaulting to 1000 [ 306.220627][T13507] IPv6: sit1: Disabled Multicast RS [ 306.245705][T13469] lo speed is unknown, defaulting to 1000 [ 306.377238][T13469] lo speed is unknown, defaulting to 1000 [ 306.806224][T13474] lo speed is unknown, defaulting to 1000 [ 306.886031][T13512] netlink: 'syz.3.1981': attribute type 10 has an invalid length. [ 306.916767][T13474] lo speed is unknown, defaulting to 1000 [ 306.923446][T13512] veth0_vlan: left promiscuous mode [ 306.939183][T13512] veth0_vlan: entered promiscuous mode [ 306.947959][T13512] team0: Device veth0_vlan failed to register rx_handler [ 307.054947][T13520] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1983'. [ 307.224486][T13524] netlink: 100 bytes leftover after parsing attributes in process `syz.0.1985'. [ 307.292170][T13526] netlink: 'syz.2.1986': attribute type 10 has an invalid length. [ 307.337730][T13526] 8021q: adding VLAN 0 to HW filter on device team0 [ 307.356666][T13526] bond0: (slave team0): Enslaving as an active interface with an up link [ 307.398206][T13505] lo speed is unknown, defaulting to 1000 [ 307.453935][T13505] lo speed is unknown, defaulting to 1000 [ 307.479557][T13532] atomic_op ffff88805eed7998 conn xmit_atomic 0000000000000000 [ 307.546035][T13534] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1988'. [ 307.576024][T13532] netlink: 188 bytes leftover after parsing attributes in process `syz.3.1989'. [ 307.585324][T13532] netlink: 'syz.3.1989': attribute type 1 has an invalid length. [ 307.599208][T13534] SET target dimension over the limit! [ 307.805993][T13537] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1990'. [ 307.823583][T13537] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1990'. [ 307.893513][T13537] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.918969][T13540] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input10 [ 307.946524][T13537] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.964831][T13537] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.982487][T13537] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.011885][T13537] geneve2: entered promiscuous mode [ 308.034903][T13537] geneve2: entered allmulticast mode [ 308.323769][T13554] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1994'. [ 308.336001][T13553] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1995'. [ 308.673597][T13568] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 308.728250][T13560] syzkaller0: entered promiscuous mode [ 308.748339][T13560] syzkaller0: entered allmulticast mode [ 309.306963][T13587] IPVS: set_ctl: invalid protocol: 58 224.0.0.2:20004 [ 312.149868][T13575] ip6tnl2: entered promiscuous mode [ 312.461796][T13625] sock: sock_set_timeout: `syz.2.2010' (pid 13625) tries to set negative timeout [ 312.627536][T13635] __nla_validate_parse: 1 callbacks suppressed [ 312.627635][T13635] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2012'. [ 312.674376][T13634] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2012'. [ 313.152014][T13648] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 313.318784][T13653] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2018'. [ 313.646250][T13648] lo speed is unknown, defaulting to 1000 [ 313.655262][T13648] lo speed is unknown, defaulting to 1000 [ 313.693860][T13666] netlink: 'syz.4.2020': attribute type 13 has an invalid length. [ 313.762360][ T30] audit: type=1800 audit(1742570050.538:8): pid=13670 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2022" name=6C656E3D310A0920747970655F69643D32206F66667365743D352073697A653D3130204E6F74206120564152206B696E64206D656D6265720A dev="tmpfs" ino=2039 res=0 errno=0 [ 314.277243][T13690] netlink: 'syz.1.2027': attribute type 39 has an invalid length. [ 314.428915][T13684] lo speed is unknown, defaulting to 1000 [ 314.447076][T13684] lo speed is unknown, defaulting to 1000 [ 314.638939][T13698] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2029'. [ 314.668428][T13694] lo speed is unknown, defaulting to 1000 [ 314.761185][T13694] lo speed is unknown, defaulting to 1000 [ 315.328824][T13712] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2032'. [ 316.286327][T13715] lo speed is unknown, defaulting to 1000 [ 316.451823][T13715] lo speed is unknown, defaulting to 1000 [ 316.757201][T13716] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2033'. [ 316.773777][T13752] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2043'. [ 316.803941][T13752] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2043'. [ 316.829253][T13749] ipip0: entered promiscuous mode [ 316.834436][T13752] netlink: 'syz.1.2043': attribute type 14 has an invalid length. [ 316.925676][T13752] netlink: 'syz.1.2043': attribute type 11 has an invalid length. [ 316.998717][T13758] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2045'. [ 317.008337][T13758] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2045'. [ 317.300109][T13768] bond0: option mode: unable to set because the bond device is up [ 317.573839][T13774] bond4: (slave dummy0): Releasing active interface [ 317.606728][T13774] batman_adv: batadv0: Adding interface: dummy0 [ 317.635652][T13774] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 317.697553][T13774] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 317.836895][T13783] netlink: 'syz.0.2054': attribute type 1 has an invalid length. [ 317.847991][T13783] __nla_validate_parse: 1 callbacks suppressed [ 317.848012][T13783] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2054'. [ 318.412954][T13809] vcan1: entered allmulticast mode [ 318.459610][T13777] lo speed is unknown, defaulting to 1000 [ 318.492717][T13777] lo speed is unknown, defaulting to 1000 [ 318.753183][T13827] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2064'. [ 318.981340][T13841] macvlan2: entered promiscuous mode [ 319.048550][T13841] bridge0: entered promiscuous mode [ 319.103890][T13841] macvlan3: entered promiscuous mode [ 319.154248][T13844] netlink: 'syz.1.2070': attribute type 1 has an invalid length. [ 319.228537][T13849] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2070'. [ 319.252990][T13844] bond7: entered promiscuous mode [ 319.260195][T13844] 8021q: adding VLAN 0 to HW filter on device bond7 [ 319.268124][T13829] lo speed is unknown, defaulting to 1000 [ 319.285313][T13829] lo speed is unknown, defaulting to 1000 [ 319.498213][T13777] lo speed is unknown, defaulting to 1000 [ 319.585087][T13777] lo speed is unknown, defaulting to 1000 [ 319.677000][T13862] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2075'. [ 319.933773][T13868] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2077'. [ 321.297049][T13929] xt_TCPMSS: Only works on TCP SYN packets [ 321.437651][T13935] netlink: 'syz.0.2099': attribute type 4 has an invalid length. [ 321.682503][T13941] atomic_op ffff88807c375198 conn xmit_atomic 0000000000000000 [ 321.701826][T13941] netlink: 188 bytes leftover after parsing attributes in process `syz.0.2102'. [ 321.711440][T13941] netlink: 'syz.0.2102': attribute type 1 has an invalid length. [ 321.876926][T13953] bridge3: the hash_elasticity option has been deprecated and is always 16 [ 321.969649][T13962] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2107'. [ 322.504107][T13977] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2110'. [ 322.596682][T13967] lo speed is unknown, defaulting to 1000 [ 322.700519][T13967] lo speed is unknown, defaulting to 1000 [ 323.011385][T13991] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2115'. [ 323.073550][T13992] vlan2: entered allmulticast mode [ 323.350879][T14003] atomic_op ffff88805f956198 conn xmit_atomic 0000000000000000 [ 323.366386][T14003] netlink: 188 bytes leftover after parsing attributes in process `syz.2.2116'. [ 323.375856][T14003] netlink: 'syz.2.2116': attribute type 1 has an invalid length. [ 323.564216][T14010] openvswitch: netlink: Message has 1275 unknown bytes. [ 323.584263][T14008] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 323.605900][T14010] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 323.625753][T14013] netlink: 212 bytes leftover after parsing attributes in process `syz.4.2119'. [ 323.686879][T14008] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 323.712896][T13967] lo speed is unknown, defaulting to 1000 [ 323.750604][T14008] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 323.780259][T13967] lo speed is unknown, defaulting to 1000 [ 323.817495][T14008] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 323.987750][T14008] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 20001 - 0 [ 324.012532][T14008] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 20001 - 0 [ 324.064542][T14008] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 20001 - 0 [ 324.225040][T14008] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 20001 - 0 [ 324.563262][T14027] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2125'. [ 324.868022][T14041] atomic_op ffff88801268c198 conn xmit_atomic 0000000000000000 [ 324.898947][T14041] netlink: 188 bytes leftover after parsing attributes in process `syz.2.2130'. [ 324.915675][T14041] netlink: 'syz.2.2130': attribute type 1 has an invalid length. [ 325.092665][T14032] lo speed is unknown, defaulting to 1000 [ 325.167166][T14032] lo speed is unknown, defaulting to 1000 [ 325.345492][T14050] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2132'. [ 325.795875][T14064] macsec1: entered promiscuous mode [ 325.801279][T14064] ip6gretap0: entered promiscuous mode [ 325.836693][T14064] macsec1: entered allmulticast mode [ 325.842771][T14064] ip6gretap0: entered allmulticast mode [ 325.864197][T14033] lo speed is unknown, defaulting to 1000 [ 325.999512][T14077] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2138'. [ 326.027528][T14079] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2139'. [ 326.068116][T14033] lo speed is unknown, defaulting to 1000 [ 326.186132][T14084] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2140'. [ 326.195097][T14084] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2140'. [ 326.415046][T14089] atomic_op ffff888030ea2998 conn xmit_atomic 0000000000000000 [ 326.446500][T14089] netlink: 'syz.1.2142': attribute type 1 has an invalid length. [ 326.784613][T14105] xt_HMARK: proto mask must be zero with L3 mode [ 327.545122][T14137] atomic_op ffff888022f84198 conn xmit_atomic 0000000000000000 [ 327.579814][T14138] netlink: 'syz.0.2155': attribute type 16 has an invalid length. [ 327.596712][T14138] netlink: 'syz.0.2155': attribute type 17 has an invalid length. [ 327.617529][T14137] netlink: 'syz.1.2156': attribute type 1 has an invalid length. [ 327.687392][T14138] 8021q: adding VLAN 0 to HW filter on device bond0 [ 327.710925][T14138] 8021q: adding VLAN 0 to HW filter on device team0 [ 327.746174][T14138] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 327.779408][ T6438] lo speed is unknown, defaulting to 1000 [ 327.838202][T14138] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 328.100888][T14156] __nla_validate_parse: 3 callbacks suppressed [ 328.100910][T14156] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2163'. [ 328.134574][T14156] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2163'. [ 328.204573][T14163] netlink: 'syz.4.2166': attribute type 1 has an invalid length. [ 328.252260][T14163] bond9 (unregistering): Released all slaves [ 328.320685][T14143] lo speed is unknown, defaulting to 1000 [ 328.330293][T14143] lo speed is unknown, defaulting to 1000 [ 328.689830][T14177] atomic_op ffff88807e05d998 conn xmit_atomic 0000000000000000 [ 328.709806][T14177] netlink: 188 bytes leftover after parsing attributes in process `syz.4.2170'. [ 328.720195][T14177] netlink: 'syz.4.2170': attribute type 1 has an invalid length. [ 328.828594][T14182] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2172'. [ 329.072707][T14192] batman_adv: batadv0: Adding interface: dummy0 [ 329.100682][T14192] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1560. [ 329.136429][T14192] batman_adv: batadv0: Interface activated: dummy0 [ 329.200656][T14196] netlink: 208 bytes leftover after parsing attributes in process `syz.3.2176'. [ 329.219052][T14182] batadv0: mtu less than device minimum [ 329.227124][T14182] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 329.240123][T14182] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 329.252803][T14182] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 329.265818][T14182] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 329.278270][T14182] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 329.290800][T14182] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 329.303234][T14182] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 329.315887][T14182] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 329.328508][T14182] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 329.489590][T14208] x_tables: duplicate underflow at hook 2 [ 330.024111][ T5850] ------------[ cut here ]------------ [ 330.030536][ T5850] refcount_t: underflow; use-after-free. [ 330.037105][ T5850] WARNING: CPU: 1 PID: 5850 at lib/refcount.c:28 refcount_warn_saturate+0x15a/0x1d0 [ 330.046770][ T5850] Modules linked in: [ 330.050728][ T5850] CPU: 1 UID: 0 PID: 5850 Comm: syz-executor Not tainted 6.14.0-rc7-syzkaller-01407-g6f13bec53a48 #0 [ 330.061877][ T5850] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 330.072066][ T5850] RIP: 0010:refcount_warn_saturate+0x15a/0x1d0 [ 330.078391][ T5850] Code: c0 b4 80 8c e8 47 e9 8b fc 90 0f 0b 90 90 eb 99 e8 6b 2e cc fc c6 05 97 7a 31 0b 01 90 48 c7 c7 20 b5 80 8c e8 27 e9 8b fc 90 <0f> 0b 90 90 e9 76 ff ff ff e8 48 2e cc fc c6 05 71 7a 31 0b 01 90 [ 330.098350][ T5850] RSP: 0018:ffffc90003fd77d8 EFLAGS: 00010246 [ 330.104504][ T5850] RAX: 5a249d2bd3e52100 RBX: ffff88807d0c2478 RCX: ffff888062a78000 [ 330.112814][ T5850] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 330.121010][ T5850] RBP: 0000000000000003 R08: ffffffff8181ae52 R09: fffffbfff1d3a69c [ 330.129132][ T5850] R10: dffffc0000000000 R11: fffffbfff1d3a69c R12: ffff88807d0c2460 [ 330.137392][ T5850] R13: ffffffff86390da0 R14: 1ffff1100fa1848c R15: ffff88807d0c2460 [ 330.145558][ T5850] FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 330.154623][ T5850] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 330.161401][ T5850] CR2: 000055597a8ca708 CR3: 000000000e938000 CR4: 00000000003526f0 [ 330.170051][ T5850] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 330.178171][ T5850] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 330.186530][ T5850] Call Trace: [ 330.189931][ T5850] [ 330.192901][ T5850] ? __warn+0x165/0x4d0 [ 330.197275][ T5850] ? refcount_warn_saturate+0x15a/0x1d0 [ 330.202890][ T5850] ? report_bug+0x2b3/0x500 [ 330.207572][ T5850] ? refcount_warn_saturate+0x15a/0x1d0 [ 330.213220][ T5850] ? handle_bug+0x60/0x90 [ 330.217694][ T5850] ? exc_invalid_op+0x1a/0x50 [ 330.222461][ T5850] ? asm_exc_invalid_op+0x1a/0x20 [ 330.227603][ T5850] ? __pfx_klist_children_put+0x10/0x10 [ 330.233313][ T5850] ? __warn_printk+0x292/0x360 [ 330.238462][ T5850] ? refcount_warn_saturate+0x15a/0x1d0 [ 330.244176][ T5850] ? refcount_warn_saturate+0x159/0x1d0 [ 330.250023][ T5850] klist_dec_and_del+0x3ec/0x3f0 [ 330.255596][ T5850] ? __pfx_klist_children_put+0x10/0x10 [ 330.261747][ T5850] ? __pfx_klist_children_put+0x10/0x10 [ 330.267802][ T5850] ? __pfx_klist_children_put+0x10/0x10 [ 330.273432][ T5850] klist_remove+0x25e/0x480 [ 330.278324][ T5850] ? __pfx_klist_remove+0x10/0x10 [ 330.283445][ T5850] ? __pfx_kobject_move+0x10/0x10 [ 330.288996][ T5850] ? get_device_parent+0x25d/0x410 [ 330.294176][ T5850] device_move+0x1b4/0x710 [ 330.298998][ T5850] ? hci_conn_unlink+0x5a2/0x630 [ 330.304243][ T5850] hci_conn_del_sysfs+0xb5/0x170 [ 330.309543][ T5850] hci_conn_del+0x8c4/0xc40 [ 330.314341][ T5850] hci_conn_hash_flush+0x18e/0x240 [ 330.320067][ T5850] hci_dev_close_sync+0xa8b/0x1260 [ 330.325285][ T5850] ? __pfx_hci_dev_close_sync+0x10/0x10 [ 330.331212][ T5850] ? rcu_is_watching+0x15/0xb0 [ 330.336119][ T5850] hci_unregister_dev+0x20b/0x510 [ 330.341201][ T5850] vhci_release+0x80/0xd0 [ 330.345794][ T5850] ? __pfx_vhci_release+0x10/0x10 [ 330.350869][ T5850] __fput+0x3e9/0x9f0 [ 330.354928][ T5850] task_work_run+0x24f/0x310 [ 330.359659][ T5850] ? __pfx_task_work_run+0x10/0x10 [ 330.364851][ T5850] ? do_exit+0xa25/0x2940 [ 330.369529][ T5850] ? do_exit+0xa25/0x2940 [ 330.373960][ T5850] do_exit+0xa2a/0x2940 [ 330.378263][ T5850] ? __pfx_do_exit+0x10/0x10 [ 330.382952][ T5850] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 330.389171][ T5850] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 330.395621][ T5850] ? _raw_spin_unlock_irq+0x23/0x50 [ 330.400955][ T5850] ? lockdep_hardirqs_on+0x99/0x150 [ 330.406351][ T5850] do_group_exit+0x207/0x2c0 [ 330.411018][ T5850] __x64_sys_exit_group+0x3f/0x40 [ 330.416276][ T5850] x64_sys_call+0x26a8/0x26b0 [ 330.421027][ T5850] do_syscall_64+0xf3/0x230 [ 330.425969][ T5850] ? clear_bhb_loop+0x35/0x90 [ 330.430709][ T5850] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 330.436784][ T5850] RIP: 0033:0x7f0a4678d169 [ 330.441261][ T5850] Code: Unable to access opcode bytes at 0x7f0a4678d13f. [ 330.448442][ T5850] RSP: 002b:00007fff8dbd2d18 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 330.457010][ T5850] RAX: ffffffffffffffda RBX: 00007f0a4680fa8f RCX: 00007f0a4678d169 [ 330.465517][ T5850] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000043 [ 330.473578][ T5850] RBP: 00007f0a4680faa1 R08: 00007fff8dbd0ab7 R09: 00000000000927c0 [ 330.481851][ T5850] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 330.489943][ T5850] R13: 00000000000927c0 R14: 0000000000050750 R15: 00007fff8dbd2ec0 [ 330.498167][ T5850] [ 330.501336][ T5850] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 330.508678][ T5850] CPU: 1 UID: 0 PID: 5850 Comm: syz-executor Not tainted 6.14.0-rc7-syzkaller-01407-g6f13bec53a48 #0 [ 330.519753][ T5850] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 330.530044][ T5850] Call Trace: [ 330.533451][ T5850] [ 330.536470][ T5850] dump_stack_lvl+0x241/0x360 [ 330.541207][ T5850] ? __pfx_dump_stack_lvl+0x10/0x10 [ 330.546472][ T5850] ? __pfx__printk+0x10/0x10 [ 330.551118][ T5850] ? vscnprintf+0x5d/0x90 [ 330.555499][ T5850] panic+0x349/0x880 [ 330.559448][ T5850] ? __warn+0x174/0x4d0 [ 330.563640][ T5850] ? __pfx_panic+0x10/0x10 [ 330.568122][ T5850] __warn+0x344/0x4d0 [ 330.572174][ T5850] ? refcount_warn_saturate+0x15a/0x1d0 [ 330.577846][ T5850] report_bug+0x2b3/0x500 [ 330.582284][ T5850] ? refcount_warn_saturate+0x15a/0x1d0 [ 330.587865][ T5850] handle_bug+0x60/0x90 [ 330.592034][ T5850] exc_invalid_op+0x1a/0x50 [ 330.596574][ T5850] asm_exc_invalid_op+0x1a/0x20 [ 330.601451][ T5850] RIP: 0010:refcount_warn_saturate+0x15a/0x1d0 [ 330.607624][ T5850] Code: c0 b4 80 8c e8 47 e9 8b fc 90 0f 0b 90 90 eb 99 e8 6b 2e cc fc c6 05 97 7a 31 0b 01 90 48 c7 c7 20 b5 80 8c e8 27 e9 8b fc 90 <0f> 0b 90 90 e9 76 ff ff ff e8 48 2e cc fc c6 05 71 7a 31 0b 01 90 [ 330.627432][ T5850] RSP: 0018:ffffc90003fd77d8 EFLAGS: 00010246 [ 330.633695][ T5850] RAX: 5a249d2bd3e52100 RBX: ffff88807d0c2478 RCX: ffff888062a78000 [ 330.641682][ T5850] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 330.649663][ T5850] RBP: 0000000000000003 R08: ffffffff8181ae52 R09: fffffbfff1d3a69c [ 330.657657][ T5850] R10: dffffc0000000000 R11: fffffbfff1d3a69c R12: ffff88807d0c2460 [ 330.665666][ T5850] R13: ffffffff86390da0 R14: 1ffff1100fa1848c R15: ffff88807d0c2460 [ 330.673674][ T5850] ? __pfx_klist_children_put+0x10/0x10 [ 330.679254][ T5850] ? __warn_printk+0x292/0x360 [ 330.684214][ T5850] ? refcount_warn_saturate+0x159/0x1d0 [ 330.689778][ T5850] klist_dec_and_del+0x3ec/0x3f0 [ 330.694820][ T5850] ? __pfx_klist_children_put+0x10/0x10 [ 330.700411][ T5850] ? __pfx_klist_children_put+0x10/0x10 [ 330.706179][ T5850] ? __pfx_klist_children_put+0x10/0x10 [ 330.711763][ T5850] klist_remove+0x25e/0x480 [ 330.716347][ T5850] ? __pfx_klist_remove+0x10/0x10 [ 330.721486][ T5850] ? __pfx_kobject_move+0x10/0x10 [ 330.726623][ T5850] ? get_device_parent+0x25d/0x410 [ 330.731790][ T5850] device_move+0x1b4/0x710 [ 330.736263][ T5850] ? hci_conn_unlink+0x5a2/0x630 [ 330.741315][ T5850] hci_conn_del_sysfs+0xb5/0x170 [ 330.746284][ T5850] hci_conn_del+0x8c4/0xc40 [ 330.750830][ T5850] hci_conn_hash_flush+0x18e/0x240 [ 330.755965][ T5850] hci_dev_close_sync+0xa8b/0x1260 [ 330.761104][ T5850] ? __pfx_hci_dev_close_sync+0x10/0x10 [ 330.766667][ T5850] ? rcu_is_watching+0x15/0xb0 [ 330.771447][ T5850] hci_unregister_dev+0x20b/0x510 [ 330.776497][ T5850] vhci_release+0x80/0xd0 [ 330.780949][ T5850] ? __pfx_vhci_release+0x10/0x10 [ 330.786071][ T5850] __fput+0x3e9/0x9f0 [ 330.790195][ T5850] task_work_run+0x24f/0x310 [ 330.794802][ T5850] ? __pfx_task_work_run+0x10/0x10 [ 330.799935][ T5850] ? do_exit+0xa25/0x2940 [ 330.804442][ T5850] ? do_exit+0xa25/0x2940 [ 330.808792][ T5850] do_exit+0xa2a/0x2940 [ 330.812975][ T5850] ? __pfx_do_exit+0x10/0x10 [ 330.817672][ T5850] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 330.823676][ T5850] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 330.830035][ T5850] ? _raw_spin_unlock_irq+0x23/0x50 [ 330.835345][ T5850] ? lockdep_hardirqs_on+0x99/0x150 [ 330.840595][ T5850] do_group_exit+0x207/0x2c0 [ 330.845231][ T5850] __x64_sys_exit_group+0x3f/0x40 [ 330.850290][ T5850] x64_sys_call+0x26a8/0x26b0 [ 330.854988][ T5850] do_syscall_64+0xf3/0x230 [ 330.859818][ T5850] ? clear_bhb_loop+0x35/0x90 [ 330.864619][ T5850] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 330.870629][ T5850] RIP: 0033:0x7f0a4678d169 [ 330.875148][ T5850] Code: Unable to access opcode bytes at 0x7f0a4678d13f. [ 330.882204][ T5850] RSP: 002b:00007fff8dbd2d18 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 330.890657][ T5850] RAX: ffffffffffffffda RBX: 00007f0a4680fa8f RCX: 00007f0a4678d169 [ 330.898854][ T5850] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000043 [ 330.906967][ T5850] RBP: 00007f0a4680faa1 R08: 00007fff8dbd0ab7 R09: 00000000000927c0 [ 330.914956][ T5850] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 330.922972][ T5850] R13: 00000000000927c0 R14: 0000000000050750 R15: 00007fff8dbd2ec0 [ 330.930976][ T5850] [ 330.934315][ T5850] Kernel Offset: disabled [ 330.938959][ T5850] Rebooting in 86400 seconds..