last executing test programs: 1.676455898s ago: executing program 2 (id=5505): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) socket$nl_xfrm(0x10, 0x3, 0x6) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0xa, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000003880)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c9f4cef7f9606056fe5c34664c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbcebddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cfd7c3a1d37a6ab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ed8dba2f23b01a9aeb980aff9fa3a64709270c701db801f44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af4c0eb97fca585ec6bf58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75055df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83766b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef3b7cda42013d53046da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b556381768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea2a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f76062adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b441233151122b41a8d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225c380fac12f8205d182f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd1f539bd43007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711d7219ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a26c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29754f928c59306ce105ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42ddd5f393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc05bea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efdb36b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800000000000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351ba332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d96ee1b84bb64b14aebc6b5194c55dd6890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b07838a3ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a139d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fcc49a729f11ab377f7132c543d29646a9378eea0761b7ed9d2172e33ed87c6513c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8dc0d472672286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8455029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a82a6ef09d0ed9829dec16ab67a4f59a504e09f55ab82bbd405087a17a229a149c53ee9145500db213cb36489a10957739e481a756e65bde579bbbfb404213f661eeaaffacbcfbfd60b1a715c366da2b37ac7e9e3033f8ec04db1c2412e02ccd0617d9fb646c4897750d068c936c3558a94b05d7c65c0d458c0d70d0aa864bc1e324d3f69b1b4061627da875a4b5c2668ab0990623fe6f3b54cd1c79da4baf256f88750c18486330589473e267fa44e220cf40db662b570c2a2fbba9a34a3dd7bbd8368fe506daa62b45797d4b397905a69e58eb436c08cc78963197adb1b16ad83a1a9b420e74c6bcdf1ed0b306141a83bf1268e954ad069257fbfaa1a7ea582badc1a7f2a5b0965f3535872d85c0bc3a233a3ea85df6a8ed76f0f803d54b7bef77d8ea71621f8a78dd17c3b58c5c7476ed6191acbb949e77f7cac81c543f7751e5e1000"/4545], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)) socket$inet6(0xa, 0x80803, 0x87) syz_emit_ethernet(0x5e, &(0x7f00000004c0)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd603000bb00282b00fe800000000000000000000000000000fe8000000000000000000000000000aa87"], 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_DISASSOCIATE(r3, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x441}, 0xc, &(0x7f0000000200)={&(0x7f0000000700)={0x14c, r4, 0x200, 0x70bd26, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x4}, @NL80211_ATTR_IE={0x10c, 0x2a, [@ibss={0x6, 0x2}, @fast_bss_trans={0x37, 0x102, {0x6, 0x6, "f7a12f4e4d999e5923c5efdd7ac2f46f", "b8cde3dab39fdf8081468374e5a9309ad09e34b4b60bcea1cb3f8f7745255125", "088ed078b9a5f37112758c9c350f21840d5b38a930388fefb2d390f1ef75bf32", [{0x3, 0x1d, "681f753481b16d5c341d7f12a8813e49e1303a13ef65505d9d30d422a5"}, {0x4, 0x24, "5bd1546c810e72366981972d7fd3942676e6cdc3533d7fbfbf6e402dd0196e2c9fad882e"}, {0x1, 0x19, "a91eef7e4436211d846fa15a2201e32eef2859b2a96d3bc100"}, {0x1, 0x19, "82c74b5769471593a900d09ce3da42e8f1e07499db12db776e"}, {0x1, 0xe, "d0328bd47fd8f15a8aaac92eed83"}, {0x3, 0x23, "fdfb5f878c15079260f147be791a39b5e3c4a023d56323f3c3648205ac6e212bf08203"}]}}]}, @NL80211_ATTR_MAC={0xa, 0x6, @random="cd5923007a47"}, @NL80211_ATTR_MAC={0xa, 0x6, @random="adebd9ea997a"}, @NL80211_ATTR_MAC={0xa}]}, 0x14c}}, 0x800) r5 = socket(0x10, 0x3, 0xc) write(r5, &(0x7f0000000040)="effd00001000ff00fd4344c007110000f3050a00dbfd010000000001ffdf00", 0xfe00) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000480)={{{@in=@broadcast, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4e20, 0xd, 0x4e23, 0x2, 0x2, 0x20, 0x0, 0x21}, {0x6, 0x6, 0x6, 0x80000000, 0xfffffffffffffffc, 0x1c000000, 0xfdcc, 0x5}, {0x16, 0x1ff, 0x0, 0x278}, 0x65, 0x6e6bc0, 0x0, 0x0, 0x1}, {{@in=@remote, 0x4d5, 0x3c}, 0x2, @in=@remote, 0x34ff, 0x2, 0x3, 0x40, 0x2, 0x9, 0x4}}, 0xe8) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x4, @private2, 0x3ff}, 0x1c) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000001600), 0xffffffffffffffff) socket(0x1e, 0x1, 0x0) sendmsg$TIPC_CMD_SHOW_PORTS(r7, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001640)={0x1c, r8, 0x1}, 0x1c}}, 0x0) sendmsg$SMC_PNETID_ADD(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000006c0)={0x34, r1, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'bond0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x34}}, 0x800) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)="2e00000011008b88040f80ee59acbc04130800480f0000005e2900421803001825800000000000000280000c0012", 0x2e}], 0x1}, 0x0) 1.325390038s ago: executing program 1 (id=5513): r0 = socket(0x10, 0x80002, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[], 0x64}, 0x1, 0x0, 0x0, 0x4004001}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001000080025bd7000fcdbff2500000000", @ANYRES32=0x0, @ANYBLOB="1000000082040400240012800b0001006272696467650000140002800800020001000000080003001d0020"], 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x3, 0x3, &(0x7f0000000140)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x5}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x17}]}}}]}]}], {0x14}}, 0xd8}}, 0x4000040) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) setsockopt$ax25_int(r0, 0x101, 0x9, &(0x7f0000000180)=0x800, 0x4) 1.323582837s ago: executing program 2 (id=5514): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) (async) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e0000001ac1414aa0000000002000000ac1414aa"], 0x18) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000002fc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@ipv4_newroute={0x24, 0x1a, 0x3, 0x0, 0x0, {}, [@RTA_IP_PROTO={0x5, 0x1b, 0x3a}]}, 0x24}}, 0x0) (async) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) (async) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) 1.197095825s ago: executing program 1 (id=5517): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, 0x0) 1.196656739s ago: executing program 2 (id=5518): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)={0x44, r2, 0x1, 0x0, 0x1, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0x18, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x5, 0x5, '^'}, @ETHTOOL_A_BITSET_VALUE={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8}]}, @ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000054}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000140)=ANY=[@ANYBLOB="300000001300090700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000080013"], 0x30}}, 0x0) sendto$packet(r0, &(0x7f0000000000)="9e7dbed3c66043cc07a8179daf66d957af023987f759214c43c4b9bdb2d7bc5f30d233c9a0f5d974186dc604de25f706be791fa9f8928aacee53e91b7ebb9d6e1f2b47446bfac24ff625b6d8e12202701dc11e500fb76edddeaf355286e904ab195981da577111226d33f35fd9d6b085bbdd63f3", 0x74, 0x44000, &(0x7f0000000080)={0x11, 0x15, 0x0, 0x1, 0x5, 0x6, @broadcast}, 0x14) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r3) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x421, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x5, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_BC_QUEUE_LEN={0x8}]}}}]}, 0x3c}}, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r4, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {}, {0x8, 0x11, 0xfffffff8}}, ["", ""]}, 0x24}}, 0x40801) 1.064956543s ago: executing program 1 (id=5521): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0x15}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) (async) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="fd6ece3a46eefd2a2dbd7000fcdbdf2504db24b8189400000400018006f60600800a000008000900", @ANYRES32=0x0, @ANYBLOB], 0x2c}, 0x1, 0x0, 0x0, 0x20040000}, 0x44000) 1.063047812s ago: executing program 2 (id=5523): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1, 0x200000}, 0x1c) sendto$inet6(r2, &(0x7f00000001c0)='O', 0x1, 0x80, &(0x7f0000000280)={0xa, 0x0, 0x0, @private2}, 0x1c) shutdown(r2, 0x1) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000300)={0x0, 0x1}, 0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7c, &(0x7f00000000c0), &(0x7f0000000180)=0x8) r3 = epoll_create1(0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r4, &(0x7f0000000040)={0x2000000f}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f00000002c0)={'wg0\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="28040000", @ANYRES16=r1, @ANYBLOB="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", @ANYRES32=r5], 0x428}, 0x1, 0x0, 0x0, 0x4000}, 0x200000d4) r7 = socket$nl_generic(0x10, 0x3, 0x10) unshare(0x20000400) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r8, 0x6, 0x21, &(0x7f0000000380)="4000000000220006908a00000400", 0x10) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r8, 0x6, 0x21, &(0x7f0000000140)="5f96565e14027386aa93a303c44b5b3b", 0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYRES64=r5, @ANYRESHEX=r7, @ANYRES64=r6], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 952.617497ms ago: executing program 1 (id=5526): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a37000000000a03000000000000000000070000000900010073797a300000000044000000090a090400000004000000000000000000000040000000000900020073797a31000000000900010073797a300000000008000502000000310800034000000001140000001100015203ad1245d27888166b349e2db08e9cedf940f0371a3989c409b70c035636be58db1dcf1139761e271f5f17ed4b18d37fa8ffff4282ad2e4cca577418862a23bad4167e8c9c62b65956f48b657020ba3d06f153289e0318baf2afb9fdf4711b46919c91c6ff93a43c32761e59048444e21e67a3c57f332a43b1374d81545b7dc13e55c58b8d800ca04e5ba5a1f699a64ba34f863a0e00080000640fd933ca3e2a69723f3af676089e509b2870bc6bf88994b88e2de1a9c84b8c5a6773102ab7bfdd99af4ff930b5cc68bcbf"], 0x8c}, 0x1, 0x0, 0x0, 0x4008084}, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r2 = accept4(r1, 0x0, 0x0, 0x0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0), r2) setsockopt$WPAN_WANTLQI(r2, 0x0, 0x3, &(0x7f0000000480)=0x1, 0x4) sendmsg$TIPC_NL_NODE_GET(r2, &(0x7f0000000440)={&(0x7f0000000340), 0xc, &(0x7f0000000400)={&(0x7f0000000600)={0x194, r3, 0x8, 0x70bd29, 0x25dfdbff, {}, [@TIPC_NLA_NODE={0x78, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x47, 0x4, {'gcm(aes)\x00', 0x1f, "8bda99f1366ce19d8b0ae6c1498089434e851444c009f75a7ce32681019431"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x80000}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x6}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xbe2}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x2}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xf86}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7ff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4a8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1000}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}]}, @TIPC_NLA_NODE={0x50, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_NODE_KEY={0x3d, 0x4, {'gcm(aes)\x00', 0x15, "d70686cb1ca98359c4dbcb77cb7593e5455641a0fc"}}]}, @TIPC_NLA_MEDIA={0x14, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_BEARER={0x50, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}]}, @TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'eth', 0x3a, 'team_slave_0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}, @TIPC_NLA_BEARER_NAME={0x16, 0x1, @l2={'ib', 0x3a, 'bridge_slave_1\x00'}}]}]}, 0x194}, 0x1, 0x0, 0x0, 0x40a0}, 0xc080) sendmsg$alg(r2, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) connect$x25(r4, 0x0, 0x0) recvmmsg(r2, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000500)=""/229, 0xe5}], 0x1}, 0x3}], 0x2, 0x62, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000004c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa08c82553c55496d746ddf41fa2b853564d08004700000000000000000690780a07040200020000000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c00000790780000"], 0x0) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)={0xac, 0x1, 0x1, 0x201, 0x0, 0x0, {0x1}, [@CTA_TUPLE_REPLY={0x44, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010101}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}]}, @CTA_SEQ_ADJ_REPLY={0x1c, 0x10, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x4}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x7}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x8}]}, @CTA_STATUS={0x8}, @CTA_LABELS_MASK={0x14, 0x17, [0x5, 0xc81a, 0x600000, 0x9]}, @CTA_ID={0x8, 0xc, 0x1, 0x0, 0x3}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x4}, @CTA_SEQ_ADJ_REPLY={0xc, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x2}]}]}, 0xac}, 0x1, 0x0, 0x0, 0x6000000}, 0x15) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x8c}, 0x1, 0x0, 0x0, 0x4008084}, 0x0) (async) socket$alg(0x26, 0x5, 0x0) (async) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) (async) accept4(r1, 0x0, 0x0, 0x0) (async) syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0), r2) (async) setsockopt$WPAN_WANTLQI(r2, 0x0, 0x3, &(0x7f0000000480)=0x1, 0x4) (async) sendmsg$TIPC_NL_NODE_GET(r2, &(0x7f0000000440)={&(0x7f0000000340), 0xc, &(0x7f0000000400)={&(0x7f0000000600)={0x194, r3, 0x8, 0x70bd29, 0x25dfdbff, {}, [@TIPC_NLA_NODE={0x78, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x47, 0x4, {'gcm(aes)\x00', 0x1f, "8bda99f1366ce19d8b0ae6c1498089434e851444c009f75a7ce32681019431"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x80000}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x6}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xbe2}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x2}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xf86}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7ff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4a8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1000}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}]}, @TIPC_NLA_NODE={0x50, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_NODE_KEY={0x3d, 0x4, {'gcm(aes)\x00', 0x15, "d70686cb1ca98359c4dbcb77cb7593e5455641a0fc"}}]}, @TIPC_NLA_MEDIA={0x14, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_BEARER={0x50, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}]}, @TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'eth', 0x3a, 'team_slave_0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}, @TIPC_NLA_BEARER_NAME={0x16, 0x1, @l2={'ib', 0x3a, 'bridge_slave_1\x00'}}]}]}, 0x194}, 0x1, 0x0, 0x0, 0x40a0}, 0xc080) (async) sendmsg$alg(r2, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) (async) syz_init_net_socket$x25(0x9, 0x5, 0x0) (async) connect$x25(r4, 0x0, 0x0) (async) recvmmsg(r2, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000500)=""/229, 0xe5}], 0x1}, 0x3}], 0x2, 0x62, 0x0) (async) syz_emit_ethernet(0x3e, &(0x7f00000004c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa08c82553c55496d746ddf41fa2b853564d08004700000000000000000690780a07040200020000000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c00000790780000"], 0x0) (async) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)={0xac, 0x1, 0x1, 0x201, 0x0, 0x0, {0x1}, [@CTA_TUPLE_REPLY={0x44, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010101}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}]}, @CTA_SEQ_ADJ_REPLY={0x1c, 0x10, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x4}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x7}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x8}]}, @CTA_STATUS={0x8}, @CTA_LABELS_MASK={0x14, 0x17, [0x5, 0xc81a, 0x600000, 0x9]}, @CTA_ID={0x8, 0xc, 0x1, 0x0, 0x3}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x4}, @CTA_SEQ_ADJ_REPLY={0xc, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x2}]}]}, 0xac}, 0x1, 0x0, 0x0, 0x6000000}, 0x15) (async) 917.121627ms ago: executing program 2 (id=5528): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r0, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x1}, 0x8) r1 = socket$kcm(0x10, 0x2, 0x0) ioctl$F2FS_IOC_RESIZE_FS(r1, 0x4008f510, &(0x7f0000000080)=0x3) r2 = socket$kcm(0x29, 0x5, 0x0) sendmsg$kcm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f8483d0000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x20000020) 821.004409ms ago: executing program 2 (id=5530): r0 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r0, &(0x7f0000000040), 0xc) connect$qrtr(r0, &(0x7f0000000000)={0x2a, 0x0, 0x7ffe}, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$packet(0x11, 0xa, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'veth1_to_hsr\x00', 0x0}) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) sendto$packet(r1, &(0x7f00000000c0)="3f031c000302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r3, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) bind$inet6(r3, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x66, &(0x7f0000000300)={@link_local, @random="2059249b3790", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "108114", 0x30, 0x11, 0x0, @empty, @mcast2, {[], {0x0, 0xe22, 0x30, 0x0, @opaque="65ef83f7775bcf0ddbfa95cc714fe4297b681bd9ed5d1e6f7716fdc67a6967d9817f39d296d8f845"}}}}}}, 0x0) r4 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r4, &(0x7f0000000040)={0x2a, 0x1, 0x4006}, 0xc) writev(r4, &(0x7f0000000340)=[{&(0x7f0000000080)='~', 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3000001, 0x31, 0xffffffffffffffff, 0x0) read(r0, &(0x7f0000000100)=""/19, 0x13) 427.860276ms ago: executing program 0 (id=5531): r0 = socket(0x1e, 0x805, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x80, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2}, [@IFLA_LINKINFO={0x60, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x54, 0x2, 0x0, 0x1, [@IFLA_GTP_LOCAL={0x8, 0x7, @private=0xa010102}, @IFLA_GTP_FD0={0x8, 0x1, @udp6=r0}, @IFLA_GTP_PDP_HASHSIZE={0x8, 0x3, 0x2}, @IFLA_GTP_LOCAL6={0x14, 0x8, @local}, @IFLA_GTP_CREATE_SOCKETS={0x5, 0x5, 0x1}, @IFLA_GTP_LOCAL6={0x14, 0x8, @empty}, @IFLA_GTP_FD1={0x8, 0x2, @udp6=r0}]}}}]}, 0x80}}, 0x0) 426.74936ms ago: executing program 1 (id=5533): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r1, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}]}, 0x3c}}, 0x800) r2 = socket$kcm(0x2, 0x200000000000001, 0x106) (async) r3 = socket(0x2a, 0x2, 0x0) r4 = epoll_create1(0x80000) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_DEL_MFC(r5, 0x0, 0xcd, &(0x7f0000000000)={@dev={0xac, 0x14, 0x14, 0x43}, @dev={0xac, 0x14, 0x14, 0x44}, 0x4, "957b0a386101819797d7c1bd75f5fe54f049ddca5f0c5c9bc539d170cf2e21f5", 0xfd0, 0x3504, 0x4, 0x9}, 0x3c) (async) r6 = socket(0x10, 0x803, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r7, 0x0, 0x40084) (async) sendmsg$NL80211_CMD_JOIN_IBSS(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x3c, r8, 0x1, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @random="5b1f70368091"}, @NL80211_ATTR_HANDLE_DFS={0x4}, @NL80211_ATTR_BSS_BASIC_RATES={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x8080) (async) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r12 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) (async) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) r14 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r14, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x8c, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r13, {0xb, 0xfff2}, {}, {0x7}}, [@filter_kind_options=@f_basic={{0xa}, {0x54, 0x2, [@TCA_BASIC_ACT={0x50, 0x3, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x4, 0xffff, 0x3f, 0x2, 0x6}, 0x2}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x78, 0xfa}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x10}, 0x4) (async) r15 = socket(0x1, 0x80802, 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000140)={0x8}) (async) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, 0xffffffffffffffff, &(0x7f0000000100)={0x1a000201d}) (async) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r15, &(0x7f0000000000)={0x0, 0x2000000}) (async) r16 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r16, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x90, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private}, {0x8, 0x2, @multicast2}}}]}, @CTA_TIMEOUT={0x8}, @CTA_MARK={0x8}, @CTA_MARK_MASK={0x8}, @CTA_SYNPROXY={0x1c, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ITS={0x8}, @CTA_SYNPROXY_ISN={0x8}, @CTA_SYNPROXY_TSOFF={0x8}]}]}, 0x90}}, 0x0) (async) sendmsg$kcm(r2, &(0x7f0000001900)={0x0, 0xffffffea, 0x0}, 0x20040005) (async) sendmsg$inet(r2, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001) 417.357641ms ago: executing program 0 (id=5535): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bind$rose(r0, &(0x7f0000000000)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0xfffffffc, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x2a}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) 416.887715ms ago: executing program 1 (id=5536): socket$netlink(0x10, 0x3, 0x0) (async) r0 = socket$netlink(0x10, 0x3, 0x0) close(0x3) socket$can_j1939(0x1d, 0x2, 0x7) (async) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f00000000c0)={0x1d, r2}, 0x18) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000cc15f9b00000008d5d00000001"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x13) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000100), r4) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000100), r4) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f00000000c0)) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYRES32=r0, @ANYRESOCT, @ANYBLOB="08003200000400000800390009000000"], 0x2c}, 0x1, 0x0, 0x0, 0x24011}, 0x6004084) (async) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYRES32=r0, @ANYRESOCT, @ANYBLOB="08003200000400000800390009000000"], 0x2c}, 0x1, 0x0, 0x0, 0x24011}, 0x6004084) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001500010300000000000000000c0091a10000"], 0x14}, 0x1, 0x0, 0x0, 0xc000}, 0x4000000) r5 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r5, &(0x7f00000002c0)={0x28, 0x0, 0x0, @local}, 0x10) listen(r5, 0x0) (async) listen(r5, 0x0) r6 = socket(0x28, 0x4, 0x0) connect$vsock_stream(r6, &(0x7f0000000080), 0x10) (async) connect$vsock_stream(r6, &(0x7f0000000080), 0x10) sendmmsg$alg(r6, &(0x7f0000004ec0)=[{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000500)='\b', 0x1}], 0x1, 0x0, 0x0, 0x4000004}], 0x1, 0x20) setsockopt$sock_linger(r6, 0x1, 0x3c, &(0x7f0000000180)={0x1, 0x5}, 0x8) (async) setsockopt$sock_linger(r6, 0x1, 0x3c, &(0x7f0000000180)={0x1, 0x5}, 0x8) sendmmsg(r6, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)}}], 0x1, 0x24008094) accept4$unix(r5, 0x0, 0x0, 0x0) (async) r7 = accept4$unix(r5, 0x0, 0x0, 0x0) recvfrom$unix(r7, &(0x7f0000000140)=""/263, 0x107, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', r2, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) socket$nl_route(0x10, 0x3, 0x0) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0xfe7e, &(0x7f00000003c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="280000000000ccd2000000000000000000"], 0x28}, 0x1, 0x0, 0x0, 0xc885}, 0x280080f1) recvmsg(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/58, 0x3a}], 0x1}, 0x0) bind$can_j1939(r1, &(0x7f0000002680)={0x1d, r2, 0x2, {0x2, 0x0, 0x2}, 0xfd}, 0x18) connect$can_j1939(0xffffffffffffffff, &(0x7f0000000140)={0x1d, r2, 0x0, {0x0, 0xf0}}, 0x18) sendmmsg$inet(r1, &(0x7f0000003b80)=[{{0x0, 0x0, &(0x7f0000002940)=[{&(0x7f0000002640)="ef0ba606342672dabc", 0x9}], 0x1}}], 0x1, 0x20000010) (async) sendmmsg$inet(r1, &(0x7f0000003b80)=[{{0x0, 0x0, &(0x7f0000002940)=[{&(0x7f0000002640)="ef0ba606342672dabc", 0x9}], 0x1}}], 0x1, 0x20000010) 415.732816ms ago: executing program 0 (id=5537): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)={0x20, 0x2d, 0x1, 0x70bd26, 0x25dfdbfc, {0x4}, [@typed={0xc, 0xc, 0x0, 0x0, @u64=0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x4000804) 399.081668ms ago: executing program 0 (id=5540): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000017010000f8ffffffb702000008000000b703000000000020850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x20001400) syz_emit_ethernet(0x1e, &(0x7f0000000300)={@multicast, @empty, @void, {@can={0xc, {{0x0, 0x1, 0x1, 0x1}, 0x4, 0x3, 0x0, 0x0, "44fa209c8cca7e27"}}}}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFINDEX(r1, 0x400454da, 0x0) r2 = getgid() r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=@ipv6_newrule={0x2c, 0x20, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_DPORT_RANGE={0x8, 0x18, {0x4e23, 0x4e20}}, @FIB_RULE_POLICY=@FRA_SPORT_RANGE={0x8, 0x17, {0x4e20, 0x4e22}}]}, 0x2c}}, 0x0) ioctl$TUNSETGROUP(r3, 0x400454ce, r2) ioctl$TUNSETOFFLOAD(r0, 0x4004743c, 0x20000000) 397.775178ms ago: executing program 3 (id=5541): socket$packet(0x11, 0x2, 0x300) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) r0 = socket(0x1, 0x803, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x1c, 0x15, 0x301, 0x0, 0x0, {0xc}, [@typed={0x8, 0x1, 0x0, 0x0, @fd=r0}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r2, 0x84, 0x12, 0x0, 0x0) (async) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r2, 0x84, 0x12, 0x0, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADD(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x8000) (async) sendmsg$NLBL_UNLABEL_C_STATICADD(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x8000) 366.139003ms ago: executing program 0 (id=5543): r0 = accept4$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000100)=0x14, 0x80000) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000240)={0x4, 0x8000}, 0x4) r1 = socket$phonet(0x23, 0x2, 0x1) ioctl$SIOCPNDELRESOURCE(r1, 0x89ef, &(0x7f0000000000)) socket$igmp(0x2, 0x3, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCSPASS(r3, 0x40107447, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x60, 0x8}]}) ioctl$PPPIOCSDEBUG(r3, 0x40047440, &(0x7f0000000080)=0x9) write$ppp(r3, &(0x7f0000000540)='|Z', 0x2) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="1802000000070000000000000000000000850000008700000095000000000000"], &(0x7f0000000080)='GPL\x00'}, 0x90) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000480)=@bpf_tracing={0x1a, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000997754ada4f5f674320000510e000000a442ae65e00c4881735b442809dabb7362ecfc0aa782177232b5050000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x3, 0x40, &(0x7f0000000200)=""/64, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x24b40, r5}, 0x90) r6 = socket(0x22, 0x80000, 0x1) syz_emit_ethernet(0x7f, &(0x7f0000000600)=ANY=[@ANYBLOB="bbbbbbbb50a07399d04dced067bbbb00000000000086dd6000000000492f00fc000000000000000000000000000000ff0200000000000000000000000000010000883e004990781a60e2350a4f36e745d2d82fc69104a3d0238ec36469ccd09cf0fb460ae35b627d28c7a16736b31a9ddef1784507db1c6ccd93d3cb68d8e2c3de05000000046f96f3def8efe100c7c815b426afcd8125cf06933f8dfc15512c24c958ef119362b1322fd9b9af8aedf5d7d4662125e77976059d1367463d183ff6f778ff739c47b9b0ad635d39aaafba2d53f97ef6fe0fe91723dc58a739504e50915d87dbaf130334"], 0x0) r7 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0x0, 0x1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x7fffffff, 0x5, 0x3}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r8, {0x0, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x806}]}}]}, 0x3c}}, 0x800) r9 = socket(0x400000000010, 0x3, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000002d40)=@deltfilter={0x1ed4, 0x2d, 0x2, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r11, {0xc, 0xf}, {0x7, 0x7}, {0xa, 0xfff3}}, [@filter_kind_options=@f_matchall={{0xd}, {0x16d8, 0x2, [@TCA_MATCHALL_ACT={0xd0, 0x2, [@m_bpf={0xcc, 0x5, 0x0, 0x0, {{0x8}, {0x18, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x4}]}, {0x8d, 0x6, "78b5f4ef07c61dd9119f3dc13d9c15d7eb1d13b9f4a9e8707daee8a5c6e5ae74bb3e719ebcf8b5b9ea8e47c6518a0e6d19779cf0c26f5928522210019c439613363b37510d63995b7a7746406e9c21699b7151d8c11b8b9d49c97fad5ac4633b6cad12fe62c75ab7309167b5bb7320f2a8890eff6347ccd58c8680bdb9e00ad25c44c587675abeff5a"}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0xa, 0xffff}}, @TCA_MATCHALL_ACT={0x284, 0x2, [@m_ctinfo={0x16c, 0xa, 0x0, 0x0, {{0xb}, {0x8c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ZONE={0x6, 0x4, 0x5f2}, @TCA_CTINFO_ACT={0x18, 0x3, {0xc82, 0x4, 0x4, 0x500000, 0x7f}}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x8}, @TCA_CTINFO_ACT={0x18, 0x3, {0x3000, 0x6, 0x0, 0xf, 0x100}}, @TCA_CTINFO_ACT={0x18, 0x3, {0x6, 0xb0e, 0x1, 0xf9, 0x4}}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x7}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x40}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x3}, @TCA_CTINFO_ACT={0x18, 0x3, {0x4, 0xffff, 0x10000000, 0x5, 0x3}}]}, {0xb7, 0x6, "46492c13c68384bcf5cdfc2cb2d871f7b789978bd67d69444cf1f5d5c5fd13ed59268c6c173d6c309f9c374a644ac4c515537f360edf5067833ceb3ef3dd1b88cd57c17c9ec2b5b81b25ef8cc1902512633bf851d6603df5684b54b8bde5a8afe43cc7694205f4b48f6329018aa98d020fbc4eeef792d8fe9bfdc012d5a638e836d567f7dad4f7ba51e67aac1fbf2b2b68dd8de9a7db4b7532aa84540f68307753289496cd46f1e478d0b087d081f9971f3284"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0xa7c9a33660a60ba6}}}}, @m_sample={0x60, 0xb, 0x0, 0x0, {{0xb}, {0x34, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x4, 0x2e, 0x7, 0xe82, 0xfffffffa}}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x2}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x7e9b}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2}}}}, @m_mirred={0xb4, 0xa, 0x0, 0x0, {{0xb}, {0x4}, {0x85, 0x6, "d4aa0e7338285473e9b513ba8bfdfc55600a614300960d8c379e630d071b64c45190adf843be9bae97ccb9c7858c047cd33e3af4b88aed43b15319f037d66d93f15921c26c4866b0a0afa59b2aa2e20b69ed238911ef5144bcd722c790a3cc98a787ae57c3f70d62777c14b3bbfa9ca1a0e2c44935fb8ea303d310300e86026ebb"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}, @TCA_MATCHALL_ACT={0x1368, 0x2, [@m_bpf={0x90, 0x1f, 0x0, 0x0, {{0x8}, {0x4}, {0x67, 0x6, "26b47b03444f7eb4269f967f2a4237a324467dcd712b16744d1e464477c07ee380341583258c2f7570885d33c0d78f9f69e8430a57bb62984a51878bf98c0012477981a97b68859fbf5a1146ea1b072f98762d5d31afbd6a1ddacd73c97fd3704b15ae"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}, @m_skbmod={0xa4, 0x1d, 0x0, 0x0, {{0xb}, {0x4}, {0x76, 0x6, "6f93eead329ff160010bc6195968a16895689983fefbdf4438de74ee88b2b5ee881a8fe3096127f78090bcb70b59fb3519406db7eb65c5ab3d3b71f852d41dbbd4fe248b7461beaf70df33639bea5ca18eb1369cba5426532aea49fcbf7b9384504ec38ff9e91f3f68d563237fea3f5af03f"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_sample={0x60, 0x1e, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0xe}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x1}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0xc04d, 0x7fff, 0x6, 0x6, 0x9}}]}, {0xc, 0x6, "176511bd95bdc575"}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}, @m_nat={0x5c, 0x5, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x9, 0x5, 0x2, 0x408d210, 0x7ff}, @local, @multicast1, 0xffffffff}}]}, {0xc, 0x6, "f994c8b69dcf3e9e"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_simple={0xf8, 0x13, 0x0, 0x0, {{0xb}, {0x34, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x8, 0x7ff, 0x1, 0x4, 0x8}}, @TCA_DEF_PARMS={0x18, 0x2, {0x8, 0x7, 0x7, 0x7fff, 0xb0}}]}, {0x99, 0x6, "16893e673909f0903b9351405883c32986c8d9e22805c51d87f2fa1623a6e0b962b5f81a5edf926611264b154351b7fa1d29fe498af1280f682623017761a06a69ffc12a961cab2156232c1b9b133a674fd19666b4a0630ce0d4d60525b6a62f2fc7e3373c8a02afd1594a3033bfadd24bf7bd94250b482382f08bd268594fcc32a01aabeff69d03ce73ca78bbf1a74f1a97a5bad5"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_mpls={0x107c, 0x1a, 0x0, 0x0, {{0x9}, {0x50, 0x2, 0x0, 0x1, [@TCA_MPLS_TC={0x5}, @TCA_MPLS_PROTO={0x6, 0x4, 0x88e7}, @TCA_MPLS_BOS={0x5}, @TCA_MPLS_PROTO={0x6, 0x4, 0x88dc}, @TCA_MPLS_LABEL={0x8, 0x5, 0xe148f}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0xffffffff, 0x8001, 0x5, 0x7, 0x5}, 0x2}}, @TCA_MPLS_LABEL={0x8, 0x5, 0xd7b05}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x8}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x5}]}}, @TCA_CHAIN={0x8, 0xb, 0x8}, @TCA_RATE={0x6, 0x5, {0xd, 0xd}}, @filter_kind_options=@f_basic={{0xa}, {0x7ac, 0x2, [@TCA_BASIC_ACT={0x280, 0x3, [@m_tunnel_key={0xa0, 0x10, 0x0, 0x0, {{0xf}, {0x4c, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_NO_CSUM={0x5, 0xa, 0x1}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @loopback}, @TCA_TUNNEL_KEY_NO_CSUM={0x5}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x43}}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @rand_addr=0x64010102}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @mcast2}]}, {0x28, 0x6, "ab2d3b11d4e772ab9d03e53a85f580a4624e6b75d538dc1986c050ca4294f40388d168e8"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_nat={0x124, 0x11, 0x0, 0x0, {{0x8}, {0x54, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0xb, 0x3, 0x8, 0x7fff, 0x6}, @multicast1, @broadcast, 0xffffffff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xff, 0x4, 0xffffffffffffffff, 0x80000001, 0x8}, @private=0xa010100, @local, 0xff}}]}, {0xaa, 0x6, "74ca9f235071b3240f257813c786e9b756d1ceb61d84cb3dbf1858516e6d48b50d6d63ee67ec19a2e1d8dfcda61e454458932559e273b1302437b66812cb9c966679648bc11a0c764be44ecdb27ace77013f1692ad7fdbe01b2bf638f25330603b2dcad88cadef23b5baf07d8197614afe3de39998cebacb847d2d923180c7f7af6b44d76ca26913a1bfbcac12dddc16ef98fd38fcff2d5ba022334844591dc35ff1fd83c4f2"}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}, @m_tunnel_key={0xb8, 0x2, 0x0, 0x0, {{0xf}, {0x50, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x1096}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @mcast1}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e21}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}}]}, {0x39, 0x6, "4291889c22c207bb28760791ac92586d999f93428c1fd4db01975c8633642b7f4d30b85c600276190637351ecee4160f4e07f91400"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}, @TCA_BASIC_POLICE={0x414, 0x4, [@TCA_POLICE_RATE={0x404, 0x2, [0x8, 0x2, 0x9, 0x1ff, 0x40, 0x5, 0x2, 0x275c, 0x9, 0x1, 0x5a5c, 0x7, 0xe, 0x4, 0x80000001, 0x6, 0x0, 0x0, 0x7, 0x4, 0x7fffffff, 0x5a8e, 0xd5f, 0xfffffffb, 0xfffffff8, 0x23d5, 0x5, 0xe7fb, 0x9, 0xff, 0x4, 0x5e50, 0x3, 0x7f, 0x2, 0x8, 0x10001, 0x5b4, 0xfffffff1, 0xfff, 0x31f, 0x2, 0x4, 0x10001, 0x6, 0x7fff, 0x6, 0x1ff, 0x6, 0x2, 0x400, 0x1, 0xfffffffc, 0x2, 0x4, 0x9, 0x7, 0xc8, 0x5, 0x7, 0x2, 0x99, 0x2, 0x8, 0x201, 0x0, 0x0, 0x2, 0x3, 0x4, 0x40, 0x130, 0x1, 0x8, 0x1c, 0xfc9, 0x54a, 0x3, 0x80, 0x7a, 0x7ff, 0x6, 0x3, 0x1, 0x6, 0xf8, 0x2, 0x7, 0x400, 0x1, 0x0, 0x2, 0x4, 0x8, 0x7, 0x4, 0x10, 0x40, 0x7f, 0x0, 0x10, 0x9, 0x6, 0x8, 0x4f, 0x5, 0x6, 0x8, 0xb, 0x2, 0x7, 0x5, 0x8, 0x6, 0x0, 0x0, 0x1, 0xd7, 0x3, 0x24742eb5, 0x12, 0x22f, 0x6, 0x0, 0x9, 0x3, 0xe, 0x1ff, 0x8001, 0x1, 0x96d, 0x200, 0x6, 0x7, 0x9, 0x9, 0x5, 0x0, 0x8, 0x401, 0x5, 0x6, 0xfffffd00, 0x9, 0x2, 0x2, 0x7, 0xdf1, 0x651, 0x5, 0x2, 0x1da2, 0x6, 0x7fffffff, 0x3, 0x101, 0x3, 0xffff, 0x2, 0x9, 0x5, 0x7fff, 0xe, 0x3, 0x9, 0xfac, 0xffffffff, 0x5, 0x3606, 0x5, 0x76, 0x7, 0x3, 0x13b218da, 0xb, 0x9, 0x6, 0x6, 0x800, 0x80000000, 0x1, 0xb, 0x16, 0xf, 0x0, 0x200, 0x5, 0x8, 0x0, 0x8, 0x4, 0xe4, 0x7ff, 0x5, 0x18da, 0x2, 0xf38, 0x2, 0x7ff, 0x0, 0x3f, 0x7, 0x3, 0x6, 0x2, 0x4, 0x8, 0x3, 0x5, 0x7fff, 0x8, 0x8, 0x3356b0e8, 0x6, 0x7, 0x9, 0x10001, 0x0, 0x9, 0x0, 0x10, 0x1, 0x7, 0x200, 0x3ff, 0x7, 0x9, 0x6, 0x6, 0x8, 0x800100, 0x6, 0x10000, 0x400, 0x7f, 0x7fffffff, 0xfffffffc, 0x0, 0x9, 0x3, 0x3, 0x0, 0xf, 0x0, 0x1cf2, 0xe4, 0x4, 0x8001, 0x2, 0x3, 0x5, 0x3, 0x3, 0x6, 0x7ff, 0x6]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x8}]}, @TCA_BASIC_EMATCHES={0x114, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xf760}}, @TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x5676, 0x1, 0x8}, {0x8000, 0x5, 0x72, 0x2, 0x7, 0x0, 0x2}}}, @TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0x3}, {0x4, 0x5, 0x3e693b777f6e0388}}}]}, @TCA_EMATCH_TREE_LIST={0xdc, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0xd8, 0x2, 0x0, 0x0, {{0x9, 0x9, 0xf001}, [@TCA_EM_IPT_MATCH_DATA={0xae, 0x5, "2794b5b136055facf7929b144eda838b81db7b52c5a9a854d29cc1afac68df2f6429791e19962d6760b4c745d0d4ba9f1d2af82c987f55832e1703cadceef211bb591931bb6de689060150168e2f50eae5f8db3d10c7b26ba82aca60a33c6a399422041042be97b17e6496969b17201bbff66b68e25788074dc99a3db65bdfd9ddc2d652e653e8989cd1855cdebbc3aabb7d8a42b29ef1f3d3f9e98a990187fd7714f2eb0cb759a18fa4"}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x81}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0xf}]}}]}]}]}}]}, 0x1ed4}, 0x1, 0x0, 0x0, 0x4001}, 0x4001084) r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r12, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x2}) poll(&(0x7f0000000400)=[{r12, 0x40}], 0x1, 0x3) bind$unix(r7, &(0x7f0000000580)=@abs={0x1, 0x0, 0x4e24}, 0xe) sendmmsg$unix(r2, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000140)=@abs={0x1, 0x0, 0x4e21}, 0x6e, 0x0}}], 0x2, 0x0) 354.872389ms ago: executing program 4 (id=5544): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0xfffffffffffffed1, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYRESOCT=r0, @ANYRES32=0x0, @ANYRESHEX=r0], 0x7c}, 0x1, 0x0, 0x0, 0x440c4}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="840000001000f5a400000000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000000000000006400128009000100626f6e640000000054000280050001000500000005000d000200000008000200", @ANYRESHEX], 0x84}}, 0x0) socket(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'sit0\x00'}) socket$inet_udp(0x2, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$l2tp6(0xa, 0x2, 0x73) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x801, 0x84) socket$igmp(0x2, 0x3, 0x2) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0xb) socket$inet6_udplite(0xa, 0x2, 0x88) socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000140)) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000cf57462bbedfac6ff9060a0b040000000000000000020000001400040000000080090001006d617371000000000900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a8021843ef9cc9028dba557d08970"], 0x68}}, 0x0) r4 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r4, &(0x7f0000001000)={&(0x7f0000000100)={0x2, 0x0, @multicast2}, 0x10, &(0x7f0000000140)=[{&(0x7f0000001040)="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", 0x5c9}, {&(0x7f0000000600)="3001fb90647586f4601659c5ad2644b99bfd65452e947b394c96c29278d097c5f170d7729d2ce2a2f4bb5bb37e7396e7bac14056f25d17145e73bc2461b20ea3fce771f1b32d1585e8a456763cfafcf7187e45a6e261af6232014cbf8a0f898bf6d14136874b6a1fd7caf8ec9966b0419be0420dc6e247d1a44f038ae29eb4bc67d6a04e80dfb7715ebafaa20fcbc57ade23cba05da1fbe4bba675b742472eebaabf356adc99866930e146125a272cef5baf5dfad4a28a01208d9908183ab2085a781e531f1bed4ac9c245ec19be383047656a7d857d364e6f69eccea5aca3964f00000000", 0xe5}, {&(0x7f0000000cc0)="79dfe4263f037de282e588f3c773eca5f0c383e7425d1573aa90a44223bfeced3ff85afe9d0c0b3b5a7ed7fcdb96a3934fe7af73ee25d5d36ba42e2a858c3d134299abc0393e031db435ae156e55eb2b2b2e2300e0706dfc5c4ec73ba929ffe8a7bb7ce55d95fb6e58560c45d96a58a13aa944b98c481a82927ec071b272b4592616116116527fd2dbc0dfd58c572f714f6852063afc8358fb33ccb8a95460b32b4e26bea604e534d8983790b5e2a180fed88108b0f5a499d5f80b4e4047d9ecc03d21856a4ec0d0d41496d99dddfa9098d327d9559e82fceb2b1b1c", 0xdc}, {&(0x7f00000003c0)="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", 0x14f}, {&(0x7f0000000700)="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", 0x161}, {&(0x7f0000000800)="3a0846cacd7448e2015cc9a09c5f5608265e1e0fe02aa9077d7ddd960ba112fe1c64f57cba71e7ad8bbdc06a3299398e39498fc459bc1745e3d21a7ca987a4f4b774fe331d20dab2e846a721ff43b0491dc4cb32e16330e0d7d520f4887da0d6f356f8ef230b9b237409", 0x6a}, {&(0x7f0000000300)="77729a", 0x3}], 0x7, &(0x7f0000000580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @loopback}}}], 0x6d}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) 301.079775ms ago: executing program 3 (id=5545): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x40, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_VFINFO_LIST={0x18, 0x16, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@IFLA_VF_RATE={0x10, 0x6, {0x6}}]}]}, @IFLA_GROUP={0x8}]}, 0x40}}, 0x0) 265.70073ms ago: executing program 4 (id=5546): r0 = socket$rds(0x15, 0x5, 0x0) (async) getsockopt$XDP_MMAP_OFFSETS(0xffffffffffffffff, 0x11b, 0x1, &(0x7f0000000100), &(0x7f0000000000)=0x80) (async) r1 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) (async) setsockopt$inet6_udp_int(r1, 0x11, 0xb, &(0x7f0000000100)=0xfff, 0x4) syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97004d88c19e9ace5ffb2e9fc603dd282100000002ff02000000000000000000000000000104004e200023b0"], 0x0) (async, rerun: 32) getsockopt(r0, 0x1, 0x45, 0x0, &(0x7f0000000300)) (async, rerun: 32) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r2, 0x89f4, &(0x7f0000000180)={'sit0\x00', &(0x7f00000003c0)={@local, 0x1, 0x0, 0xa0, 0x0, [{@broadcast}, {@initdev}, {@empty}, {@initdev}, {@local}, {@multicast1}, {@multicast1}, {@empty}, {@empty}, {@multicast1}]}}) r3 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async, rerun: 64) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_EXPRESSIONS={0x4c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x16}, @NFTA_CT_DIRECTION={0x5}]}}}, {0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xd}, @NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0xc}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0xa0}, 0x1, 0x0, 0x0, 0x840}, 0x0) (async, rerun: 64) close(r4) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000007c0)=@newtaction={0x7c, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x68, 0x1, [@m_tunnel_key={0x64, 0x1, 0x0, 0x0, {{0xf}, {0x34, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0xb, @loopback={0x400000004000000}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0x4000}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SOCKET_KEY={0x8}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xc4}}, 0x0) 263.453788ms ago: executing program 3 (id=5547): r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$l2tp(0x2, 0x2, 0x73) getsockname$l2tp(r1, &(0x7f0000000380)={0x2, 0x0, @multicast2}, &(0x7f00000003c0)=0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)={0x1c, r0, 0x1, 0x70bd2b, 0x25dfdbfe, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2000c181}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x8, 0xc, 0x3, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r3}, 0x38) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) (async) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x23}, 0x38) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2400000018000100000000001c0000000a0000000000000000000000080012"], 0x24}}, 0x0) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r5) (async) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x940, 0x0) write$tun(r7, &(0x7f00000007c0)={@void, @val={0x0, 0x0, 0x0, 0x6, 0xfdf, 0x101}, @ipv6=@tipc_packet={0x4, 0x6, "a4e227", 0x11e, 0x6, 0xff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @loopback, {[@srh={0x2f, 0x6, 0x4, 0x3, 0x10, 0x40, 0x7de, [@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private0, @ipv4={'\x00', '\xff\xff', @remote}]}, @routing={0x1, 0xc, 0x0, 0x1, 0x0, [@private1, @private0, @private1={0xfc, 0x1, '\x00', 0x4}, @private1={0xfc, 0x1, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}]}, @srh={0x0, 0x8, 0x4, 0x4, 0x5, 0x78, 0x3, [@dev={0xfe, 0x80, '\x00', 0x23}, @private2={0xfc, 0x2, '\x00', 0x1}, @remote, @private2={0xfc, 0x2, '\x00', 0x1}]}], @payload_mcast={{{{{{0x36, 0x0, 0x0, 0x1, 0x0, 0xb, 0x1, 0x2, 0x9, 0x0, 0x2, 0x9, 0x1, 0x1, 0x3, 0xfffc, 0x2, 0x4e22, 0x4e23}, 0x3}, 0x2}, 0x1}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}, 0x150) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x800, 0x0) (async) writev(r8, &(0x7f00000024c0)=[{&(0x7f0000000240)="0d850ecd33a42b86f08a86e396e0af7133653b85edbd976c2a338c922a667eae1c94c629c93d8fda25f9670238c3ed769485a3df4c091e882367ad5d9caedcd48a", 0x41}], 0x1) (async) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r8, 0x0) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x13, &(0x7f0000000940)=ANY=[@ANYBLOB="18000000edffffff000000000300000018110000286d068e028e7e6355b48895aa78def30772d905ab9621252784a33d4522b9ee4c0fab1bf4907088b0f18c978e6dc49427a59799ab91846fd1eac60903f5aec9b7bdcb722e3df8c1c555b8f5ada8a3aa7d10c645d1405ea1528108ef29dce17528af80606a6396", @ANYRES32=0x1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018320000030000000000000000000000851000000600000005d2dd0003000000bf91000000000000b7020000020000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000280)='GPL\x00', 0x4, 0x61, &(0x7f00000004c0)=""/97, 0x41000, 0xdfa8c0b62f95cf0b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x7, 0x1}, 0x8, 0x10, &(0x7f0000000580)={0x0, 0x2, 0x7}, 0x10, 0x0, 0x0, 0x5, &(0x7f00000005c0)=[r5, 0xffffffffffffffff], &(0x7f0000000600)=[{0x3, 0x4, 0x10, 0x5}, {0x3, 0x3, 0x1, 0x9}, {0x1, 0x4, 0x10, 0x7}, {0x1, 0x1, 0xb, 0x6}, {0x0, 0x2, 0x5, 0xd}], 0x10, 0x400}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000780)={{r8}, &(0x7f0000000240), &(0x7f0000000740)=r9}, 0x20) (async) sendmsg$DEVLINK_CMD_PORT_SET(r5, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x74, r6, 0x400, 0x70bd29, 0x25dfdbfb, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x6}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x6, 0x4, 0x1}}]}, 0x74}, 0x1, 0x0, 0x0, 0xc800}, 0x0) 196.79147ms ago: executing program 4 (id=5548): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket(0x15, 0x5, 0x0) getsockopt(r1, 0x200000000114, 0x2711, 0x0, &(0x7f0000000000)) sendmmsg$inet6(r0, &(0x7f00000006c0)=[{{&(0x7f0000000240)={0xa, 0x4e21, 0x20061, @mcast1, 0x43}, 0x1c, &(0x7f0000000080)}}], 0x1, 0x48000) shutdown(r0, 0x1) getsockopt$bt_hci(r0, 0x84, 0x7d, &(0x7f0000000840)=""/4127, &(0x7f0000000000)=0x101f) r2 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r2, &(0x7f0000003480)=[{{&(0x7f0000000640)={0xa, 0x0, 0x0, @remote}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000000000000"], 0x18}}], 0x1, 0x0) 189.164846ms ago: executing program 3 (id=5549): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000040)={0x15c, 0x0, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x6}, {0x6, 0x11, 0x6}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x81}, {0x6}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x51490956}, {0x6, 0x11, 0x4}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x3}, {0x6, 0x11, 0xabd4}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0xe7}, {0x6, 0x11, 0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0xff}, {0x6, 0x11, 0x4}}]}, 0x15c}}, 0x4061840) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000240)) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x11, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x4}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}}, @generic={0x2, 0x8, 0x8, 0x9, 0x8dcc}]}, &(0x7f0000000380)='GPL\x00', 0x9, 0xbd, &(0x7f00000003c0)=""/189, 0x41000, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000480)={0x2, 0x2}, 0x8, 0x10, &(0x7f00000004c0)={0x2, 0xe, 0x0, 0x8}, 0x10, 0x0, 0x0, 0x7, &(0x7f0000000500)=[0xffffffffffffffff, 0x1, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff], &(0x7f0000000540)=[{0x5, 0x5, 0x10, 0x2}, {0x3, 0x2, 0x10, 0xa}, {0x2, 0x2, 0x10, 0xc}, {0x3, 0x1, 0x3, 0x6}, {0x1, 0x1, 0x5, 0xb}, {0x4, 0x1, 0xe, 0xa}, {0x4, 0x2, 0xe, 0xc}], 0x10, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000680)={&(0x7f0000000280)='rpm_return_int\x00', r1, 0x0, 0x80}, 0x18) r2 = accept$nfc_llcp(0xffffffffffffffff, &(0x7f00000006c0)={0x27, 0x0}, &(0x7f0000000740)=0x60) r4 = accept4$nfc_llcp(r2, &(0x7f0000000780), &(0x7f0000000800)=0x60, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000880), r0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x30, r5, 0x300, 0x70bd2c, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000004}, 0x80) r6 = epoll_create1(0x0) r7 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000980)={r1, 0xffffffffffffffff, 0x8, 0x0, @void}, 0x10) epoll_ctl$EPOLL_CTL_DEL(r6, 0x2, r7) ioctl$FS_IOC_GETFSSYSFSPATH(r4, 0x80811501, &(0x7f00000009c0)={0x80}) ioctl$sock_TIOCOUTQ(r4, 0x5411, &(0x7f0000000a80)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000ac0)={0xffffffffffffffff}) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000f00)=@o_path={&(0x7f0000000ec0)='./file0\x00', 0x0, 0x10, r0}, 0x18) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000f40)={&(0x7f0000000b00)="898f13ac776c107c2ae0f8aaefde1d374f3172b2f6fbf8a5ff8b261af217aabe98a8161facfe5d062a6943359abe919a3c2c7026c42455d8a6d8c51670435efbe1f084053cd5ca8d2f859c1a4720cea0751360537fca024cd7e4f7f57f5fc02476653d4c796132880563020b958b44e519c8c432e1f4d5a3a074cee6b9f312941a183806cd4e6fcbe746fbca296744cadfb734a8244aea602073299699e07cb2e07647155a14bd027b125e1c19c3bb0de7421f50dacdf2fcce37bb", &(0x7f0000000bc0)=""/235, &(0x7f0000000cc0)="7b99407bf76306321a1c1e3174858005a76d0ae4b010b60b9f89f492a30a8d2bab2373e4c1fd4c3bdb0ca073da0f8ba3ecccb14645c6239eb458b2ecc9fa65000cd6a1d50f92235be814c38f11c6e66ecc0d18be29bdacb54593373946ddd57a447f4971e69ba067c00b8fc4aa435140d0c16b2368bf3d907d812a0147f885b00c4cc7b905828105162cadef83a1f8425222fe27129b3e0df41b15041029ff6fcc865a41da87e75afd1e284e276f048fc8c7d46ae8d2f8dc770bd280e3924348257b64b663ceb2b126e3526e982c1aa992b0cbcf9f", &(0x7f0000000dc0)="8386dbca3f62a0a4a6e04fdccfa428c6584fa7b819e905117332c4b47a67c99f39628d5c536d6a3b795820d6a5dfbc87a3343fca919aabf245d5e674c751fdc9f35b671bd497f9e36fa868320584c2466c29991afac2156039b97084ef88280c0a516b4cf7282a3885f55bb2e7562be9ef30fd42e9ad42eddc44ae4d7bd4333d7993855124a6ea28786abae264d7053da06f5e4e76ef9751eee117f0e65a52524d01a6aa10fe34ecca2b31ecebb2318cb795cb759fa91462b048cf158a8cb97cb5482074553f2a8756fe996b378ec51f069f0af422487930", 0x5, r9}, 0x38) clock_gettime(0x0, &(0x7f0000000f80)) ioctl$IMGETCOUNT(r8, 0x80044943, &(0x7f0000000fc0)) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000001040)={'batadv0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000001080)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r0, &(0x7f0000001180)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001140)={&(0x7f00000010c0)={0x44, 0x0, 0x20, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r10}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x25}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r11}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xb64a}]}, 0x44}}, 0x48840) pipe(&(0x7f00000011c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_udp_int(r13, 0x11, 0xa, &(0x7f0000001200)=0x6, 0x4) bind$nfc_llcp(r6, &(0x7f0000001240)={0x27, r3, 0x0, 0x6, 0x4, 0x0, "5f3b3aa0c676782be69cf5767dcd2832232a95f8e0dfe43774c5dbabe482acae65629de25efaa614a7f8855ef8cf4674f51b428bfc6abccaa188c43100421d", 0x22}, 0x60) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001340)={0xffffffffffffffff, 0x58, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001380)={0x3, 0x4, 0x4, 0xa, 0x0, r13, 0x1, '\x00', r14, r12, 0x0, 0x5, 0x1}, 0x50) r15 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r15, 0x8983, &(0x7f0000001400)={0x1, 'veth0_macvtap\x00', {}, 0x3}) getsockopt$MRT(r12, 0x0, 0xd0, &(0x7f0000001440), &(0x7f0000001480)=0x4) 100.975033ms ago: executing program 0 (id=5550): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r0, 0x0, 0x0, 0x4041, &(0x7f0000000380)={0x11, 0x10, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) socket(0x40000000015, 0x5, 0x0) r2 = socket$kcm(0x2a, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000001f80)={&(0x7f0000001d00)=@qipcrtr={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0x80, 0x0}, 0x0) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001540)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x0, 0xb, 0x4}}}}]}, 0x40}}, 0xc0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) accept4$vsock_stream(r3, &(0x7f0000000040)={0x28, 0x0, 0x0, @my=0x0}, 0x10, 0x80400) r6 = epoll_create1(0x0) r7 = socket$phonet_pipe(0x23, 0x5, 0x2) epoll_pwait(r6, &(0x7f0000000300)=[{}], 0x1, 0x1ff, 0x0, 0x0) epoll_pwait(r6, &(0x7f0000000480)=[{}], 0x1, 0xffffffff, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r7, &(0x7f00000011c0)={0x9}) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x100, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa0100fe}, 0x3}, 0x1c) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4400000010000104470c00"/20, @ANYRES32=0x0, @ANYBLOB="000002000002000024002cddbc441d00626f6e640000000037e09d1a0800030800090000000008001400000095acbb41574883d311cdadf18c18cc32764c321df4a2e8557fe5eebec6fecd4cfac17acd022e3196016ddaf8d44cb3c342ee55013bbf58423993aade1c78e38b3188f2a1e9f16330b74136cb12d3a5826ed1314d012322fa3347f4368dab47cde7de3ef793fcd00b772f621c214e0c7f46301e5ac0eaf38654a05ad2dd341534b071e5dbdd74cf4a528f8103596242e3e174f910cdc8186c2139b38e2234e3b6626351a373d075f346a4c1dbf1"], 0x44}, 0x1, 0x0, 0x0, 0x24000840}, 0x0) 100.568726ms ago: executing program 4 (id=5551): r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000080)=@framed={{0x18, 0x3}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x4, 0x0, 0x6, 0x3}]}, &(0x7f0000001300)='GPL\x00'}, 0x90) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmsg$IPVS_CMD_SET_CONFIG(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000ac0)=ANY=[], 0xc0}, 0x1, 0x0, 0x0, 0x20040040}, 0x4c005) (async, rerun: 64) recvmmsg(r2, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/86, 0x56}, {&(0x7f0000000180)=""/169, 0xa9}], 0x2}, 0x2}], 0x1, 0x20, 0x0) (rerun: 64) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) recvfrom$packet(r2, &(0x7f00000001c0)=""/177, 0xb1, 0x10102, &(0x7f0000000040)={0x11, 0x4, r3, 0x1, 0x43}, 0x14) 98.340867ms ago: executing program 3 (id=5552): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000412ff8)="3665a1ab415b7ac7", 0x8) r2 = accept(r1, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000000740)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10008044}], 0x1, 0x40081) recvmsg(r2, &(0x7f000000b680)={0x0, 0x0, &(0x7f000000b600)=[{&(0x7f000000b4c0)=""/5, 0x5}], 0x1}, 0x0) setsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, &(0x7f0000000080), 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) r3 = socket(0x2a, 0x2, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000600)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000017c0)=@newtfilter={0x58, 0x2c, 0x52f, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {}, {}, {0x2, 0xe}}, [@filter_kind_options=@f_basic={{0xa}, {0x28, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{0x9, 0x2, 0x8001}, {0xffff}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x3ff}}]}, @TCA_BASIC_ACT={0x4}]}}]}, 0x58}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x10, 0x2, &(0x7f0000000100)=@raw=[@ldst={0x1, 0x2, 0x4, 0x0, 0x1, 0x23}, @jmp={0x5, 0x0, 0x9}], &(0x7f0000000000)='GPL\x00'}, 0x90) ioctl$SIOCGETNODEID(0xffffffffffffffff, 0x89e1, &(0x7f0000000040)) 64.180154ms ago: executing program 3 (id=5553): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, 0x0, 0xb) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01000000c2032d496b4b6cb7ff0f73e902000000000000"], 0x0, 0x26}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000600)={r1, 0x2, 0x0}, 0x10) r2 = bpf$ITER_CREATE(0x21, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$PPPIOCGFLAGS(r2, 0x8004745a, &(0x7f0000000140)) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000002b80), r3) sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000003140)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000002bc0)=ANY=[@ANYBLOB="cc000000", @ANYRES16=r4, @ANYBLOB="01ad00000000fbdbdf25170000000c00058004000280040002805400068004000300080006002000000008000600020000003c00040067636d28616573290000000000000000000000000000000000000000000000001400000050e858cb"], 0xcc}, 0x1, 0x0, 0x0, 0x20000040}, 0x90) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000f40)=@newlink={0x484, 0x10, 0x401, 0x2, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0xe59bca127d81b0fa, 0xc574450d1af3b5bc}, [@IFLA_VFINFO_LIST={0x450, 0x16, 0x0, 0x1, [{0x88, 0x1, 0x0, 0x1, [@IFLA_VF_TRUST={0xc, 0x9, {0x9, 0x1}}, @IFLA_VF_MAC={0x28, 0x1, {0x8, @local}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x80000000, 0x8000}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x100, 0x6}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0x0, 0x77f}}, @IFLA_VF_VLAN={0x10, 0x2, {0x80000000, 0x7c8}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0xe2b, 0x8}}, @IFLA_VF_RATE={0x10, 0x6, {0x5, 0x3, 0x7}}]}, {0x50, 0x1, 0x0, 0x1, [@IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x9, 0x9}}, @IFLA_VF_MAC={0x28, 0x1, {0x0, @local}}, @IFLA_VF_RATE={0x10, 0x6, {0x2, 0x7fff, 0xfffffffe}}]}, {0x68, 0x1, 0x0, 0x1, [@IFLA_VF_TX_RATE={0xc, 0x3, {0x7, 0x4}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0xe, 0xfffffffffffffffd}}, @IFLA_VF_TRUST={0xc, 0x9, {0x5, 0x5}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0xffffffff, 0x8}}, @IFLA_VF_RATE={0x10, 0x6, {0xf640, 0x4, 0xe2}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x2a, 0x4}}]}, {0x5c, 0x1, 0x0, 0x1, [@IFLA_VF_LINK_STATE={0xc, 0x5, {0xf, 0x7}}, @IFLA_VF_MAC={0x28, 0x1, {0xfffffffc, @multicast}}, @IFLA_VF_VLAN={0x10, 0x2, {0x5, 0xb12, 0x8}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x0, 0xa5}}]}, {0x70, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN_LIST={0x18, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x4, 0xdbf, 0x1, 0x88a8}}]}, @IFLA_VF_RATE={0x10, 0x6, {0x1, 0x9, 0x20}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0xc3, 0x8001}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0x3}}, @IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x401, 0x72}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x2, 0x5}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x101, 0xd}}]}, {0xe4, 0x1, 0x0, 0x1, [@IFLA_VF_SPOOFCHK={0xc, 0x4, {0x3d14, 0x9}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x6, 0xf}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0x3ff}}, @IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x1a0, 0x5}}, @IFLA_VF_RATE={0x10, 0x6, {0x1, 0xfffffffa, 0x7fff}}, @IFLA_VF_VLAN={0x10, 0x2, {0x1, 0x8ee, 0x7ff}}, @IFLA_VF_VLAN_LIST={0x68, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x400, 0xbea, 0x7, 0x88a8}}, {0x14, 0x1, {0x7, 0xf27, 0x4, 0xc96293cde4860916}}, {0x14, 0x1, {0x5, 0x82, 0x7, 0x8100}}, {0x14, 0x1, {0x6, 0xc0a, 0x1, 0x88a8}}, {0x14, 0x1, {0x80, 0x64a, 0xfffffffc, 0x88a8}}]}, @IFLA_VF_TRUST={0xc, 0x9, {0xb, 0x617}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x8, 0x5}}]}, {0x12c, 0x1, 0x0, 0x1, [@IFLA_VF_LINK_STATE={0xc, 0x5, {0x496, 0x4}}, @IFLA_VF_MAC={0x28, 0x1, {0xffffffe6, @link_local}}, @IFLA_VF_TRUST={0xc, 0x9, {0x80, 0xfffff063}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0x5, 0x1}}, @IFLA_VF_VLAN_LIST={0x68, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x10, 0x7a6, 0x7, 0x8100}}, {0x14, 0x1, {0x6, 0x722, 0x7, 0x8100}}, {0x14, 0x1, {0xffff8f03, 0x31a, 0x7, 0x8100}}, {0x14, 0x1, {0x2, 0x283, 0x7, 0x8100}}, {0x14, 0x1, {0x0, 0x1b7}}]}, @IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x0, 0xffffffeffffffffa}}, @IFLA_VF_MAC={0x28, 0x1, {0x8001}}, @IFLA_VF_MAC={0x28, 0x1, {0x400, @random="a1ac5bf928b3"}}, @IFLA_VF_RATE={0x10, 0x6, {0x4, 0x8, 0xffff}}]}, {0x30, 0x1, 0x0, 0x1, [@IFLA_VF_TRUST={0xc, 0x9, {0x40, 0x2000004}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0x10001, 0x9}}, @IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0xfffffffa, 0x1}}]}]}, @IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}]}, 0x484}, 0x1, 0x0, 0x0, 0x20044010}, 0x20000000) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r9, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}}]}, 0x3c}}, 0x800) r10 = socket$inet(0xa, 0x801, 0x84) connect$inet(r10, &(0x7f0000004cc0)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) listen(r10, 0x8) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x83, &(0x7f0000000200)=@assoc_value, &(0x7f0000000180)=0x8) write$cgroup_devices(r7, &(0x7f0000000080)=ANY=[@ANYBLOB='b *:* m'], 0x47) socket$pptp(0x18, 0x1, 0x2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r11 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r12 = openat$cgroup_devices(r11, &(0x7f00000001c0)='devices.deny\x00', 0x2, 0x0) splice(r6, 0x0, r12, 0x0, 0x1000, 0x0) r13 = socket(0x1, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, @dev, @local, 0x0, 0x0, 0x0, 0x200}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r13, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000180)={'ip6tnl0\x00', r14, 0x0, 0xff, 0x0, 0x7, 0x0, @dev, @private0, 0x0, 0x1, 0xfffffffe}}) 59.960606ms ago: executing program 4 (id=5554): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000640)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c9", 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r1) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000500)=@ipv4_newroute={0x38, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x2}, @RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x4, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, @LWTUNNEL_IP_OPT_VXLAN_GBP={0x8}}}}]}, 0x38}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0x4000}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SOCKET_KEY={0x8}, @NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xc4}}, 0x0) 0s ago: executing program 4 (id=5555): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESOCT, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000}, 0x94) bind$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x4e24, 0x1, @empty, 0x65}, 0x1c) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000007c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@func_proto={0x0, 0x0, 0x0, 0xd, 0x2}, @restrict]}}, 0x0, 0x32}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x14) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x1f2f, 0xf, 0x3253, &(0x7f00000007c0)="9f44948721919580684010a486dd", 0x0, 0x241, 0x0, 0xb1, 0x0, &(0x7f0000000700)="389ceff69d08b0af1cc71b6262d50660bbaf31a7f8cd6a6f911beb65d5fe6b54bf21a66489121f24fefd198059288c9b735e1898e77a7469489a249292c02a72bc193a3008ebdbf4e9dd4ee8fcceef55402c913c8dd0ebece1330aaa93ece835c5044a246a5967e3acd7c950b3b19f351830e545eb9bc3a9c6dd22ce97f1f857cfe8b68a2370b69ea336006b589368f92deb68f3dfc6f2bfee09f8342da437fce5dcdf658e453e3132bb42067575318c39"}, 0x23) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_WOWLAN(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)={0x24, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x57}, @val={0x8, 0x3, r5}, @void}}}, 0x24}}, 0x0) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, 0x0, 0x0) r8 = accept4(r7, 0x0, 0x0, 0x0) sendmmsg$alg(r8, &(0x7f0000005dc0)=[{0x0, 0x0, &(0x7f0000001b40)=[{&(0x7f0000001d40)="d8750288189987d0fabb09b23867772c615b8004f5071a7715f73be32aea3bb1ecc3e0814fb9b752a6d48b1d4d68a4282f76c2c6535ec3ec0fe9843311", 0x3d}], 0x1}], 0x1, 0x40) recvmmsg(r8, &(0x7f0000000980)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000740)=""/96, 0x7}, {&(0x7f0000000940)=""/53, 0x35}], 0x2}, 0x7fff}, {{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000840)=""/116, 0x74}], 0x1}, 0x9}], 0x2, 0x10000, 0x0) sendto$packet(r2, &(0x7f00000002c0)="05031600d3fc140000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r9, 0x1, 0x13, &(0x7f0000000180)=0x5, 0x4) r10 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000300)={0xffffffffffffffff, 0x1000, 0x10}, 0xc) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000380)={0x3, 0x4, 0x4, 0xa, 0x0, r10, 0x4, '\x00', r6, r0, 0x3, 0x2, 0x1}, 0x50) kernel console output (not intermixed with test programs): ink: 20 bytes leftover after parsing attributes in process `syz.4.3025'. [ 219.253449][T16303] netlink: 'syz.0.3026': attribute type 1 has an invalid length. [ 219.267647][T16300] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3025'. [ 219.276681][T16300] netlink: 43 bytes leftover after parsing attributes in process `syz.4.3025'. [ 219.285771][T16300] netlink: 43 bytes leftover after parsing attributes in process `syz.4.3025'. [ 219.297958][T16304] syzkaller0: entered promiscuous mode [ 219.303996][T16304] syzkaller0: entered allmulticast mode [ 219.315471][T16303] netlink: 'syz.0.3026': attribute type 1 has an invalid length. [ 219.324672][T16303] netlink: 'syz.0.3026': attribute type 2 has an invalid length. [ 219.334370][T16303] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3026'. [ 219.343508][T16286] netlink: 'syz.2.3023': attribute type 1 has an invalid length. [ 219.360306][T16290] bridge9: entered promiscuous mode [ 219.367604][T16290] bridge9: entered allmulticast mode [ 219.398242][T16297] tipc: Resetting bearer [ 219.405384][T16297] netlink: 'syz.3.3024': attribute type 1 has an invalid length. [ 219.569217][ T51] Bluetooth: hci2: command tx timeout [ 219.583730][T16296] tipc: Resetting bearer [ 219.610717][T16296] tipc: Disabling bearer [ 219.613158][T16326] openvswitch: netlink: IP tunnel TTL not specified. [ 219.637693][T16328] bond0: option mode: unable to set because the bond device has slaves [ 219.769765][T16199] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0 [ 219.798377][T16341] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3038'. [ 219.816709][T16199] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0 [ 219.886270][T16346] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3042'. [ 219.896439][ T51] Bluetooth: hci1: command tx timeout [ 219.957582][T16199] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0 [ 220.066758][T16199] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0 [ 220.182872][T16350] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3043'. [ 220.254191][T16199] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 220.283403][T16199] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 220.322824][T16199] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 220.361690][T16199] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 220.571235][T16407] : entered promiscuous mode [ 220.581936][T16199] 8021q: adding VLAN 0 to HW filter on device bond0 [ 220.599543][T16199] 8021q: adding VLAN 0 to HW filter on device team0 [ 220.630929][ T7023] bridge0: port 1(bridge_slave_0) entered blocking state [ 220.638080][ T7023] bridge0: port 1(bridge_slave_0) entered forwarding state [ 220.683823][T14252] bridge0: port 2(bridge_slave_1) entered blocking state [ 220.690987][T14252] bridge0: port 2(bridge_slave_1) entered forwarding state [ 220.707610][T16412] netdevsim netdevsim3: Firmware load for '..' refused, path contains '..' component [ 220.732743][T16414] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3061'. [ 220.753485][T16411] veth1_macvtap: left promiscuous mode [ 220.996760][T16199] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 221.078216][T16199] veth0_vlan: entered promiscuous mode [ 221.096373][T16199] veth1_vlan: entered promiscuous mode [ 221.136719][T16445] netlink: 'syz.0.3072': attribute type 21 has an invalid length. [ 221.188330][T16199] veth0_macvtap: entered promiscuous mode [ 221.205565][T16199] veth1_macvtap: entered promiscuous mode [ 221.241168][T16199] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 221.266959][T16199] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 221.285337][T14252] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.310188][T14252] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.324296][T14252] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.335345][T14252] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.384197][T16462] pim6reg1: entered promiscuous mode [ 221.406632][T16462] pim6reg1: entered allmulticast mode [ 221.480601][ T7023] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 221.496219][ T7023] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 221.574825][ T7018] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 221.595373][ T7018] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 221.649178][ T51] Bluetooth: hci2: command tx timeout [ 221.687085][T16490] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 221.723962][T16496] netlink: 'syz.3.3083': attribute type 4 has an invalid length. [ 221.805555][T16496] netlink: 'syz.3.3083': attribute type 4 has an invalid length. [ 222.216729][ T5869] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 222.226198][ T5869] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 222.235370][ T5869] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 222.243473][ T5869] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 222.250970][ T5869] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 222.504839][T16553] netem: change failed [ 222.573501][T16561] hsr_slave_1 (unregistering): left promiscuous mode [ 222.601436][T16564] netlink: 'syz.3.3101': attribute type 17 has an invalid length. [ 222.609718][T16524] chnl_net:caif_netlink_parms(): no params data found [ 222.666640][T16564] gretap0: entered promiscuous mode [ 222.676600][T16564] gretap0: left promiscuous mode [ 222.758154][T16524] bridge0: port 1(bridge_slave_0) entered blocking state [ 222.767421][T16524] bridge0: port 1(bridge_slave_0) entered disabled state [ 222.774965][T16524] bridge_slave_0: entered allmulticast mode [ 222.782755][T16524] bridge_slave_0: entered promiscuous mode [ 222.790403][T16524] bridge0: port 2(bridge_slave_1) entered blocking state [ 222.797528][T16524] bridge0: port 2(bridge_slave_1) entered disabled state [ 222.805228][T16524] bridge_slave_1: entered allmulticast mode [ 222.813519][T16524] bridge_slave_1: entered promiscuous mode [ 222.842290][T16524] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 222.854567][T16524] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 222.878015][T16524] team0: Port device team_slave_0 added [ 222.886064][T16524] team0: Port device team_slave_1 added [ 222.905288][T16524] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 222.912613][T16524] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 222.940574][T16524] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 222.953839][T16524] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 222.960893][T16524] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 222.987624][T16524] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 223.024794][T16524] hsr_slave_0: entered promiscuous mode [ 223.031023][T16524] hsr_slave_1: entered promiscuous mode [ 223.037077][T16524] debugfs: 'hsr0' already exists in 'hsr' [ 223.043554][T16524] Cannot create hsr debugfs directory [ 223.112816][T16524] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 223.123194][T16524] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.134445][T16524] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 223.164894][T16524] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 223.178432][T16524] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.188834][T16524] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 223.233813][T16524] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 223.244300][T16524] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.255115][T16524] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 223.292903][T16524] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 223.317928][T16524] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.358575][T16524] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 223.474876][T16590] dummy0: entered promiscuous mode [ 223.480637][T16590] team0: Port device dummy0 added [ 223.524622][T16591] team0: Port device dummy0 removed [ 223.566205][T16591] dummy0: left promiscuous mode [ 223.588161][T16591] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 223.619820][T16607] tipc: Enabled bearer , priority 10 [ 223.685504][T16524] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 223.694970][T16524] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 223.711260][T16609] bond0: option mode: unable to set because the bond device has slaves [ 223.729348][ T51] Bluetooth: hci2: command tx timeout [ 223.747736][T16524] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 223.765053][T16524] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 223.884386][T16524] 8021q: adding VLAN 0 to HW filter on device bond0 [ 223.919345][T16524] 8021q: adding VLAN 0 to HW filter on device team0 [ 223.934131][ T7023] bridge0: port 1(bridge_slave_0) entered blocking state [ 223.941294][ T7023] bridge0: port 1(bridge_slave_0) entered forwarding state [ 223.984829][ T7023] bridge0: port 2(bridge_slave_1) entered blocking state [ 223.992004][ T7023] bridge0: port 2(bridge_slave_1) entered forwarding state [ 224.102189][T16524] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 224.178342][T16633] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 224.231402][T16637] tipc: Started in network mode [ 224.236402][T16637] tipc: Node identity 3a736ab73817, cluster identity 4711 [ 224.250177][T16637] tipc: Enabled bearer , priority 0 [ 224.292828][ T51] Bluetooth: hci4: command tx timeout [ 224.313916][T16633] syzkaller0: entered promiscuous mode [ 224.322895][T16633] syzkaller0: entered allmulticast mode [ 224.378346][T16524] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 224.457355][T16633] tipc: Resetting bearer [ 224.464293][T16656] openvswitch: netlink: Message has -1 unknown bytes. [ 224.499405][T16629] tipc: Resetting bearer [ 224.520502][T16629] tipc: Disabling bearer [ 224.538227][T16524] veth0_vlan: entered promiscuous mode [ 224.545083][T16665] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 224.555030][T16524] veth1_vlan: entered promiscuous mode [ 224.568736][T16662] dvmrp0: entered allmulticast mode [ 224.625528][T16524] veth0_macvtap: entered promiscuous mode [ 224.633267][T16668] __nla_validate_parse: 14 callbacks suppressed [ 224.633284][T16668] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3133'. [ 224.650334][ T6002] tipc: Node number set to 2144435408 [ 224.665650][T16524] veth1_macvtap: entered promiscuous mode [ 224.704513][T16524] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 224.721940][T16524] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 224.738559][T16676] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3135'. [ 224.773936][T16678] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3136'. [ 224.805435][ T9529] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.815008][ T9529] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.834066][ T9529] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.876672][ T9529] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.966517][ T7018] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 225.010235][ T7018] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 225.041941][ T7018] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 225.050930][ T7018] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 225.151980][T16711] netlink: 84 bytes leftover after parsing attributes in process `syz.0.3086'. [ 225.166025][T16711] netlink: 84 bytes leftover after parsing attributes in process `syz.0.3086'. [ 225.189458][T16715] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 225.242142][T16711] netlink: 84 bytes leftover after parsing attributes in process `syz.0.3086'. [ 225.285150][T16711] netlink: 84 bytes leftover after parsing attributes in process `syz.0.3086'. [ 225.477372][T16726] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3153'. [ 225.505704][T16729] netlink: 348 bytes leftover after parsing attributes in process `syz.0.3154'. [ 225.516596][T16726] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 225.700939][ T5869] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 225.704472][T16743] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3155'. [ 225.718507][ T5869] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 225.727635][ T5869] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 225.736362][ T5869] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 225.744830][ T5869] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 225.809416][ T51] Bluetooth: hci2: command tx timeout [ 225.903952][T16753] validate_nla: 5 callbacks suppressed [ 225.903969][T16753] netlink: 'syz.2.3158': attribute type 2 has an invalid length. [ 225.927798][T16761] netlink: 'syz.2.3158': attribute type 2 has an invalid length. [ 225.972137][T16744] chnl_net:caif_netlink_parms(): no params data found [ 226.074271][T16744] bridge0: port 1(bridge_slave_0) entered blocking state [ 226.090461][T16744] bridge0: port 1(bridge_slave_0) entered disabled state [ 226.098183][T16744] bridge_slave_0: entered allmulticast mode [ 226.108848][T16744] bridge_slave_0: entered promiscuous mode [ 226.121691][T16744] bridge0: port 2(bridge_slave_1) entered blocking state [ 226.130040][T16744] bridge0: port 2(bridge_slave_1) entered disabled state [ 226.137330][T16744] bridge_slave_1: entered allmulticast mode [ 226.146088][T16744] bridge_slave_1: entered promiscuous mode [ 226.205938][T16744] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 226.218474][T16744] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 226.231069][T16784] netlink: 'syz.3.3165': attribute type 10 has an invalid length. [ 226.260415][T16784] bond0: (slave geneve1): Enslaving as an active interface with an up link [ 226.285974][T16744] team0: Port device team_slave_0 added [ 226.296777][T16744] team0: Port device team_slave_1 added [ 226.342625][T16744] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 226.359735][T16744] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 226.387828][ T51] Bluetooth: hci4: command tx timeout [ 226.394124][T16744] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 226.407213][T16744] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 226.414250][T16744] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 226.441112][T16744] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 226.448616][T16792] netlink: 'syz.2.3168': attribute type 10 has an invalid length. [ 226.489730][T16792] geneve0: entered promiscuous mode [ 226.495524][T16792] team0: Port device geneve0 added [ 226.548419][T16744] hsr_slave_0: entered promiscuous mode [ 226.555087][T16744] hsr_slave_1: entered promiscuous mode [ 226.570126][T16744] debugfs: 'hsr0' already exists in 'hsr' [ 226.587355][T16744] Cannot create hsr debugfs directory [ 226.744077][T16807] netlink: 'syz.2.3173': attribute type 1 has an invalid length. [ 226.744978][T16809] netlink: 'syz.3.3175': attribute type 1 has an invalid length. [ 226.788717][T16809] 8021q: adding VLAN 0 to HW filter on device bond1 [ 226.821462][T16744] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 226.832469][T16744] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 226.843496][T16744] netdevsim netdevsim4 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 226.873143][T16809] bond1: (slave veth7): Enslaving as an active interface with a down link [ 226.904532][T16815] 8021q: adding VLAN 0 to HW filter on device bond12 [ 226.908915][T16822] netlink: 'syz.1.3177': attribute type 11 has an invalid length. [ 226.920484][T16815] bond11: (slave bond12): making interface the new active one [ 226.923944][T16822] netlink: 'syz.1.3177': attribute type 11 has an invalid length. [ 226.933573][T16815] bond11: (slave bond12): Enslaving as an active interface with an up link [ 226.959744][T16807] bond11: (slave gretap4): Enslaving as a backup interface with an up link [ 226.970239][T16744] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 226.980499][T16744] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 226.994211][T16744] netdevsim netdevsim4 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 227.015323][T16823] 8021q: adding VLAN 0 to HW filter on device bond11 [ 227.028742][T16809] vlan2: entered allmulticast mode [ 227.034488][T16809] veth0_to_bond: entered allmulticast mode [ 227.044218][T16809] veth0_to_bond: entered promiscuous mode [ 227.051289][T16809] veth0_to_bond: left promiscuous mode [ 227.060263][T16809] bond1: (slave vlan2): making interface the new active one [ 227.073763][T16827] netlink: 'syz.0.3178': attribute type 1 has an invalid length. [ 227.082256][T16827] netlink: 'syz.0.3178': attribute type 6 has an invalid length. [ 227.082368][T16809] veth0_to_bond: entered promiscuous mode [ 227.095891][T16827] netlink: 'syz.0.3178': attribute type 5 has an invalid length. [ 227.104400][T16809] vlan2: entered promiscuous mode [ 227.104801][T16809] bond1: (slave vlan2): Enslaving as an active interface with an up link [ 227.174502][T16744] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 227.186474][T16744] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 227.197120][T16744] netdevsim netdevsim4 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 227.217606][T16829] netlink: 'syz.2.3179': attribute type 29 has an invalid length. [ 227.265916][T16744] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 227.284546][T16744] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 227.294605][T16744] netdevsim netdevsim4 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 227.427272][T16744] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 227.448214][T16744] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 227.464389][T16744] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 227.477062][T16744] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 227.594023][T16744] 8021q: adding VLAN 0 to HW filter on device bond0 [ 227.635147][T16744] 8021q: adding VLAN 0 to HW filter on device team0 [ 227.657899][ T7018] bridge0: port 1(bridge_slave_0) entered blocking state [ 227.665076][ T7018] bridge0: port 1(bridge_slave_0) entered forwarding state [ 227.686265][ T7019] bridge0: port 2(bridge_slave_1) entered blocking state [ 227.693448][ T7019] bridge0: port 2(bridge_slave_1) entered forwarding state [ 227.811783][ T51] Bluetooth: hci0: command tx timeout [ 228.060415][T16744] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 228.355375][T16915] tipc: Enabled bearer , priority 0 [ 228.384024][T16913] tipc: Resetting bearer [ 228.433731][T16913] tipc: Disabling bearer [ 228.450024][ T5869] Bluetooth: hci4: command tx timeout [ 228.482100][T16744] veth0_vlan: entered promiscuous mode [ 228.498098][T16744] veth1_vlan: entered promiscuous mode [ 228.527208][T16744] veth0_macvtap: entered promiscuous mode [ 228.556582][T16744] veth1_macvtap: entered promiscuous mode [ 228.590577][T16744] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 228.609895][T16744] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 228.633899][ T9529] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.650805][ T9529] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.675558][ T9529] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.698605][ T9529] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.780757][ T7019] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 228.799393][ T7019] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 228.824928][ T7018] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 228.837470][ T7018] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 229.007783][T16954] C: renamed from team_slave_0 (while UP) [ 229.036533][T16954] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 229.295562][ T5867] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 229.303337][ T5867] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 229.310645][ T5867] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 229.318250][ T5867] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 229.326847][ T5867] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 229.595990][T16991] tipc: Started in network mode [ 229.608474][T16991] tipc: Node identity a6e8035047b5, cluster identity 4711 [ 229.616652][T16991] tipc: Enabled bearer , priority 0 [ 229.629445][T16991] syzkaller0: entered promiscuous mode [ 229.653491][T16991] syzkaller0: entered allmulticast mode [ 229.686055][T16967] chnl_net:caif_netlink_parms(): no params data found [ 229.706599][T16991] tipc: Resetting bearer [ 229.707427][T16998] Bluetooth: MGMT ver 1.23 [ 229.733763][T16998] __nla_validate_parse: 19 callbacks suppressed [ 229.733783][T16998] netlink: 256 bytes leftover after parsing attributes in process `syz.0.3228'. [ 229.750417][T16998] openvswitch: netlink: Flow key attr not present in new flow. [ 229.778484][T17004] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3231'. [ 229.787574][T17004] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3231'. [ 229.837309][T17007] xfrm1: entered allmulticast mode [ 229.890449][ T5867] Bluetooth: hci0: command tx timeout [ 229.912893][T17007] bond1 (unregistering): Released all slaves [ 229.944131][T16967] bridge0: port 1(bridge_slave_0) entered blocking state [ 229.951866][T16967] bridge0: port 1(bridge_slave_0) entered disabled state [ 229.962832][T16967] bridge_slave_0: entered allmulticast mode [ 229.970428][T16967] bridge_slave_0: entered promiscuous mode [ 229.993846][T16967] bridge0: port 2(bridge_slave_1) entered blocking state [ 230.007897][T16967] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.017936][T16967] bridge_slave_1: entered allmulticast mode [ 230.025559][T16967] bridge_slave_1: entered promiscuous mode [ 230.092936][T16967] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 230.104132][T17028] netlink: 192 bytes leftover after parsing attributes in process `syz.1.3237'. [ 230.116897][T16967] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 230.211919][T16967] team0: Port device team_slave_0 added [ 230.231579][T16967] team0: Port device team_slave_1 added [ 230.256387][T16967] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 230.266662][T16967] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 230.295215][T16967] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 230.314777][T16967] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 230.322164][T16967] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 230.350402][T16967] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 230.365649][T17041] syzkaller1: entered promiscuous mode [ 230.373997][T17041] syzkaller1: entered allmulticast mode [ 230.414435][T17041] netlink: 576 bytes leftover after parsing attributes in process `syz.0.3242'. [ 230.464897][T16967] hsr_slave_0: entered promiscuous mode [ 230.472903][T16967] hsr_slave_1: entered promiscuous mode [ 230.482105][T16967] debugfs: 'hsr0' already exists in 'hsr' [ 230.487848][T16967] Cannot create hsr debugfs directory [ 230.493692][T17049] syzkaller1: entered promiscuous mode [ 230.499744][T17049] syzkaller1: entered allmulticast mode [ 230.507078][T16990] tipc: Resetting bearer [ 230.512809][T17049] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 230.523557][T16990] tipc: Disabling bearer [ 230.533634][ T5867] Bluetooth: hci4: command tx timeout [ 230.545521][T17054] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 230.610959][T17053] nbd5: detected capacity change from 0 to 127 [ 230.628203][ T5867] block nbd5: Receive control failed (result -32) [ 230.710274][T16967] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 230.726231][T16967] netdevsim netdevsim2 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 230.737397][T16967] netdevsim netdevsim2 eth3 (unregistering): unset [1, 2] type 2 family 0 port 6081 - 0 [ 230.738858][T17062] vxcan1: tx address claim with different name [ 230.818129][T16967] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 230.840332][T16967] netdevsim netdevsim2 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 230.852003][T16967] netdevsim netdevsim2 eth2 (unregistering): unset [1, 2] type 2 family 0 port 6081 - 0 [ 230.941293][T16967] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 230.958215][T16967] netdevsim netdevsim2 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 230.973432][T16967] netdevsim netdevsim2 eth1 (unregistering): unset [1, 2] type 2 family 0 port 6081 - 0 [ 231.075348][T16967] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 231.110056][T16967] netdevsim netdevsim2 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 231.142019][T16967] netdevsim netdevsim2 eth0 (unregistering): unset [1, 2] type 2 family 0 port 6081 - 0 [ 231.198540][T17102] validate_nla: 11 callbacks suppressed [ 231.198568][T17102] netlink: 'syz.0.3262': attribute type 1 has an invalid length. [ 231.265827][T11495] IPVS: starting estimator thread 0... [ 231.333641][T17114] vxcan1: tx drop: invalid sa for name 0x0000000000000002 [ 231.334777][T16967] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 231.368737][T16967] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 231.382736][T17116] IPVS: persistence engine module ip_vs_pe_À not found [ 231.391873][T17110] IPVS: using max 40 ests per chain, 96000 per kthread [ 231.393629][T16967] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 231.419502][ T5867] Bluetooth: hci3: command tx timeout [ 231.439606][T16967] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 231.455697][T17128] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3268'. [ 231.543650][T17138] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3269'. [ 231.580955][T16967] 8021q: adding VLAN 0 to HW filter on device bond0 [ 231.595930][T17140] netlink: 'syz.4.3270': attribute type 2 has an invalid length. [ 231.597899][T16967] 8021q: adding VLAN 0 to HW filter on device team0 [ 231.620782][ T9529] bridge0: port 1(bridge_slave_0) entered blocking state [ 231.627959][ T9529] bridge0: port 1(bridge_slave_0) entered forwarding state [ 231.644381][ T9529] bridge0: port 2(bridge_slave_1) entered blocking state [ 231.651526][ T9529] bridge0: port 2(bridge_slave_1) entered forwarding state [ 231.737237][T17144] dvmrp0: entered allmulticast mode [ 231.931448][T16967] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 231.969203][ T5867] Bluetooth: hci0: command 0x040f tx timeout [ 231.978679][T16967] veth0_vlan: entered promiscuous mode [ 232.040082][T17167] bond1: entered promiscuous mode [ 232.045733][T17167] bond1: entered allmulticast mode [ 232.052023][T17167] 8021q: adding VLAN 0 to HW filter on device bond1 [ 232.072621][T16967] veth1_vlan: entered promiscuous mode [ 232.106248][T17168] syzkaller0: entered promiscuous mode [ 232.113023][T17168] syzkaller0: entered allmulticast mode [ 232.165705][T16967] veth0_macvtap: entered promiscuous mode [ 232.173756][T17174] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3279'. [ 232.177249][T16967] veth1_macvtap: entered promiscuous mode [ 232.205580][T17174] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3279'. [ 232.213248][T16967] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 232.234082][T16967] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 232.243639][T17174] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3279'. [ 232.271400][ T7018] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.289786][T17179] tipc: Enabled bearer , priority 10 [ 232.300627][ T7018] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.320698][T17179] netlink: 'syz.4.3281': attribute type 21 has an invalid length. [ 232.328960][ T7018] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.394485][ T7018] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.478788][ T7018] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 232.516196][ T7018] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 232.560150][T17200] netlink: 'syz.4.3287': attribute type 1 has an invalid length. [ 232.573484][ T9529] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 232.606393][ T9529] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 232.665937][T17212] netlink: 'syz.3.3291': attribute type 7 has an invalid length. [ 232.827003][T17230] netlink: 'syz.0.3297': attribute type 1 has an invalid length. [ 232.848772][T17220] can: request_module (can-proto-0) failed. [ 233.289868][ T44] tipc: Node number set to 3780969296 [ 233.436162][T17274] syzkaller1: entered promiscuous mode [ 233.436270][T17269] raw_sendmsg: syz.2.3311 forgot to set AF_INET. Fix it! [ 233.441905][T17274] syzkaller1: entered allmulticast mode [ 233.454910][T17276] erspan0: entered allmulticast mode [ 233.491960][ T51] Bluetooth: hci3: command 0x041b tx timeout [ 233.819450][T17301] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_macvtap, syncid = 4, id = 0 [ 234.050913][ T51] Bluetooth: hci0: command 0x040f tx timeout [ 234.097185][T17320] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (64) [ 234.348634][T17341] netlink: 'syz.3.3332': attribute type 1 has an invalid length. [ 234.395580][T17341] bond2: entered promiscuous mode [ 234.401770][T17341] 8021q: adding VLAN 0 to HW filter on device bond2 [ 234.425024][T17346] 8021q: adding VLAN 0 to HW filter on device bond3 [ 234.436863][T17346] bond2: (slave bond3): making interface the new active one [ 234.444284][T17346] bond3: entered promiscuous mode [ 234.451311][T17346] bond2: (slave bond3): Enslaving as an active interface with an up link [ 234.681416][ T44] IPVS: starting estimator thread 0... [ 234.693099][T17359] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 234.752984][T17373] netlink: 'syz.4.3341': attribute type 2 has an invalid length. [ 234.766185][T17373] __nla_validate_parse: 22 callbacks suppressed [ 234.766221][T17373] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3341'. [ 234.795082][T17369] IPVS: using max 42 ests per chain, 100800 per kthread [ 234.818114][T17373] bridge_slave_1: left allmulticast mode [ 234.840231][T17373] bridge_slave_1: left promiscuous mode [ 234.846473][T17373] bridge0: port 2(bridge_slave_1) entered disabled state [ 234.857073][T17373] bridge_slave_0: left allmulticast mode [ 234.866793][T17373] bridge_slave_0: left promiscuous mode [ 234.873783][T17373] bridge0: port 1(bridge_slave_0) entered disabled state [ 234.903551][T17390] netlink: 232 bytes leftover after parsing attributes in process `syz.2.3345'. [ 234.945625][T17383] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 234.957884][T17383] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 234.967768][T17383] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 235.133671][ T9529] nci: nci_rsp_packet: unknown rsp opcode 0x221 [ 235.193162][T17416] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3355'. [ 235.279386][T17424] netlink: 'syz.4.3354': attribute type 10 has an invalid length. [ 235.287746][T17424] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3354'. [ 235.307493][T17424] team0: Port device geneve0 added [ 235.569179][ T51] Bluetooth: hci3: command 0x041b tx timeout [ 236.130360][ T51] Bluetooth: hci0: command 0x040f tx timeout [ 236.138589][T17466] netlink: 'syz.2.3372': attribute type 1 has an invalid length. [ 236.152079][T17466] tc_dump_action: action bad kind [ 236.165782][T17466] gretap1: entered promiscuous mode [ 236.205737][T17479] IPv6: sit1: Disabled Multicast RS [ 236.214266][T17479] sit1: entered allmulticast mode [ 236.228824][T17483] macvlan2: entered promiscuous mode [ 236.234707][T17483] macvlan2: entered allmulticast mode [ 236.363291][T17492] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 236.420077][T17490] block nbd6: server does not support multiple connections per device. [ 236.438800][T17490] block nbd6: shutting down sockets [ 236.568813][T17513] validate_nla: 1 callbacks suppressed [ 236.568832][T17513] netlink: 'syz.1.3385': attribute type 1 has an invalid length. [ 236.580340][T17518] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3385'. [ 236.592923][T17513] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3385'. [ 236.606028][T17513] vlan2: entered allmulticast mode [ 236.612327][T17513] veth0_to_bond: entered allmulticast mode [ 236.646684][T17521] netlink: 64985 bytes leftover after parsing attributes in process `syz.2.3386'. [ 236.659130][T17520] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3387'. [ 236.679692][T17520] netlink: 212272 bytes leftover after parsing attributes in process `syz.1.3387'. [ 237.139665][T17545] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3393'. [ 237.487675][T17574] unknown channel width for channel at 909000KHz? [ 237.501567][T17574] unknown channel width for channel at 909000KHz? [ 237.626227][T17583] team0 (unregistering): Port device C removed [ 237.650335][ T5869] Bluetooth: hci3: command 0x041b tx timeout [ 237.660170][T17583] team0 (unregistering): Port device team_slave_1 removed [ 237.677728][T17595] netlink: 'syz.0.3407': attribute type 4 has an invalid length. [ 237.906614][T17612] netlink: 'syz.0.3418': attribute type 1 has an invalid length. [ 238.264492][T17656] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 238.451078][T17668] veth0_to_batadv: mtu less than device minimum [ 238.470922][T17675] netlink: 'syz.2.3438': attribute type 21 has an invalid length. [ 238.519669][ T7019] vlan2: left promiscuous mode [ 238.715868][T17701] netlink: 'syz.3.3445': attribute type 13 has an invalid length. [ 238.870457][T17719] netlink: 'syz.0.3450': attribute type 1 has an invalid length. [ 239.091509][ T5869] Bluetooth: hci0: command 0x040f tx timeout [ 239.097599][ T51] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 239.126857][T17738] netlink: 'syz.2.3457': attribute type 10 has an invalid length. [ 239.155540][T17738] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 239.176810][T17744] sctp: [Deprecated]: syz.1.3455 (pid 17744) Use of int in maxseg socket option. [ 239.176810][T17744] Use struct sctp_assoc_value instead [ 239.198295][T17738] ipvlan2: entered promiscuous mode [ 239.256393][T17754] (unnamed net_device) (uninitialized): option fail_over_mac: invalid value (3) [ 239.414018][T17767] sctp: [Deprecated]: syz.2.3466 (pid 17767) Use of struct sctp_assoc_value in delayed_ack socket option. [ 239.414018][T17767] Use struct sctp_sack_info instead [ 239.443401][T17769] sctp: [Deprecated]: syz.2.3466 (pid 17769) Use of struct sctp_assoc_value in delayed_ack socket option. [ 239.443401][T17769] Use struct sctp_sack_info instead [ 239.485167][T17770] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 239.608980][T17782] A link change request failed with some changes committed already. Interface gre1 may have been left with an inconsistent configuration, please check. [ 239.625687][T17782] RDS: rds_bind could not find a transport for ::ffff:10.1.1.1, load rds_tcp or rds_rdma? [ 239.729651][ T51] Bluetooth: hci3: command 0x041b tx timeout [ 240.191947][T17800] __nla_validate_parse: 19 callbacks suppressed [ 240.191967][T17800] netlink: 112 bytes leftover after parsing attributes in process `syz.3.3474'. [ 240.357579][T17815] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3480'. [ 240.637470][T17843] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3487'. [ 240.687451][T17846] netlink: 'syz.2.3488': attribute type 11 has an invalid length. [ 240.698793][T17846] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3488'. [ 240.795083][T17861] 8021q: VLANs not supported on tunl0 [ 241.376039][T17901] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3503'. [ 241.427992][T17906] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3505'. [ 241.494601][T17911] netlink: 'syz.4.3507': attribute type 1 has an invalid length. [ 241.621612][T17923] netlink: 'syz.4.3511': attribute type 1 has an invalid length. [ 241.702806][T17928] netlink: 'syz.4.3511': attribute type 1 has an invalid length. [ 241.809173][ T51] Bluetooth: hci3: command 0x041b tx timeout [ 241.820539][T17934] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3515'. [ 241.901556][T17947] netlink: 'syz.3.3519': attribute type 12 has an invalid length. [ 241.934996][T17953] netlink: 'syz.3.3519': attribute type 12 has an invalid length. [ 242.050191][T17961] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3523'. [ 242.146496][T17965] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 242.469480][T17976] netlink: 256 bytes leftover after parsing attributes in process `syz.0.3530'. [ 242.488870][T17976] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 242.510832][T17976] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3530'. [ 242.603496][T17993] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 242.632498][T17993] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 242.651298][T17996] syzkaller1: entered promiscuous mode [ 242.657280][T17996] syzkaller1: entered allmulticast mode [ 242.663435][T17993] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 242.705079][T18002] netlink: 'syz.4.3538': attribute type 10 has an invalid length. [ 242.718442][T17996] netlink: 'syz.3.3537': attribute type 1 has an invalid length. [ 242.735097][T18007] netlink: 'syz.0.3540': attribute type 16 has an invalid length. [ 242.748755][T18007] netlink: 'syz.0.3540': attribute type 17 has an invalid length. [ 242.786169][T18004] bridge0: port 1(bridge_slave_0) entered disabled state [ 242.795461][T18004] bridge0: port 2(bridge_slave_1) entered disabled state [ 242.828776][T18002] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 242.876273][T18007] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 242.903235][T17996] bond4: (slave gretap2): making interface the new active one [ 242.917216][T17996] bond4: (slave gretap2): Enslaving as an active interface with an up link [ 243.013412][T18021] syzkaller1: entered promiscuous mode [ 243.042909][T18021] syzkaller1: entered allmulticast mode [ 243.154610][T18041] nbd: must specify a size in bytes for the device [ 243.164651][T18038] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 243.187064][T18045] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 243.221078][T18035] netlink: 'syz.3.3550': attribute type 14 has an invalid length. [ 243.242663][T18035] netlink: 'syz.3.3550': attribute type 14 has an invalid length. [ 243.250958][ T36] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 243.286229][T18049] tun0: tun_chr_ioctl cmd 1074025675 [ 243.294228][T18049] tun0: persist disabled [ 243.305986][ T36] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 243.324961][ T36] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 243.368197][ T36] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 244.118291][T18139] bond2: (slave geneve2): making interface the new active one [ 244.145052][T18139] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 244.170382][ T9520] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 244.189641][ T9520] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 244.202841][ T9520] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 244.213399][ T9520] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 245.569419][ T5869] Bluetooth: hci3: command 0x041b tx timeout [ 246.202097][T18167] __nla_validate_parse: 6 callbacks suppressed [ 246.202117][T18167] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3588'. [ 246.215497][T18173] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3591'. [ 246.268941][T18173] team0: Port device geneve0 added [ 246.442609][T18191] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3596'. [ 246.664128][T18213] IPVS: set_ctl: invalid protocol: 137 10.1.1.2:20002 [ 246.821519][T18233] delete_channel: no stack [ 246.877437][T18239] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3611'. [ 247.064911][T18257] validate_nla: 3 callbacks suppressed [ 247.064930][T18257] netlink: 'syz.4.3618': attribute type 1 has an invalid length. [ 247.127068][T18263] IPVS: set_ctl: invalid protocol: 100 224.0.0.2:20004 [ 247.742197][T18280] geneve2: entered promiscuous mode [ 247.747712][T18280] geneve2: entered allmulticast mode [ 247.755028][ T7019] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 247.757013][T18280] netlink: 'syz.3.3625': attribute type 1 has an invalid length. [ 247.775007][ T7019] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 247.784640][T18280] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3625'. [ 247.795702][ T7019] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 247.820025][ T7019] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0 [ 247.848691][T18283] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 247.867178][T18288] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3628'. [ 247.917200][ T6570] IPVS: starting estimator thread 0... [ 247.984050][T18295] netlink: 'syz.0.3631': attribute type 10 has an invalid length. [ 248.001021][T18300] netlink: 'syz.1.3632': attribute type 49 has an invalid length. [ 248.010003][T18291] IPVS: using max 40 ests per chain, 96000 per kthread [ 248.033512][T18301] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3632'. [ 248.334641][T18326] veth1_to_bond: entered allmulticast mode [ 248.546495][T18353] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3649'. [ 248.980009][T18387] erspan0: left allmulticast mode [ 249.166561][T18387] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 249.184323][T18387] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 249.258723][T18319] veth1_to_bond: left allmulticast mode [ 249.313457][ T7023] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.342948][ T7023] netdevsim netdevsim4 netdevsim0: unset [1, 1] type 2 family 0 port 20004 - 0 [ 249.365596][ T7023] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.386131][ T7023] netdevsim netdevsim4 netdevsim1: unset [1, 1] type 2 family 0 port 20004 - 0 [ 249.396570][T18410] netlink: 'syz.2.3664': attribute type 11 has an invalid length. [ 249.424152][ T7023] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.434304][ T7023] netdevsim netdevsim4 netdevsim2: unset [1, 1] type 2 family 0 port 20004 - 0 [ 249.446960][ T7023] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.457576][ T7023] netdevsim netdevsim4 netdevsim3: unset [1, 1] type 2 family 0 port 20004 - 0 [ 249.485475][T18411] sch_fq: defrate 0 ignored. [ 249.520071][T18416] netlink: 'syz.3.3666': attribute type 21 has an invalid length. [ 249.535712][T18416] netlink: 'syz.3.3666': attribute type 1 has an invalid length. [ 249.590707][T18422] bridge0: port 1(bridge_slave_0) entered disabled state [ 250.060520][T18461] netlink: 'syz.3.3682': attribute type 8 has an invalid length. [ 250.078777][T18461] netlink: 'syz.3.3682': attribute type 19 has an invalid length. [ 250.096991][T18464] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3683'. [ 250.106562][T18463] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3683'. [ 250.171186][T18469] netlink: 'syz.3.3684': attribute type 10 has an invalid length. [ 250.518137][T18494] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 250.841337][T18523] 8021q: adding VLAN 0 to HW filter on device bond1 [ 251.227850][T18567] bridge1: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 251.268777][T18559] IPv6: sit2: Disabled Multicast RS [ 251.277120][T18559] sit2: entered allmulticast mode [ 251.325000][T18567] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 251.428800][T18586] __nla_validate_parse: 4 callbacks suppressed [ 251.428820][T18586] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3716'. [ 251.716120][T18615] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3726'. [ 251.729291][T18615] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3726'. [ 251.883950][T18617] bond5: (slave geneve3): making interface the new active one [ 251.893557][T18617] bond5: (slave geneve3): Enslaving as an active interface with an up link [ 251.902947][T14252] netdevsim netdevsim3 netdevsim0: set [1, 2] type 2 family 0 port 20004 - 0 [ 251.916619][T14252] netdevsim netdevsim3 netdevsim1: set [1, 2] type 2 family 0 port 20004 - 0 [ 251.925712][T14252] netdevsim netdevsim3 netdevsim2: set [1, 2] type 2 family 0 port 20004 - 0 [ 251.935499][T14252] netdevsim netdevsim3 netdevsim3: set [1, 2] type 2 family 0 port 20004 - 0 [ 252.212730][T18633] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3732'. [ 252.253507][T18638] "syz.2.3733" (18638) uses obsolete ecb(arc4) skcipher [ 252.278569][T18641] openvswitch: netlink: Tunnel attr 0 has unexpected len 16 expected 8 [ 252.288201][T18641] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3734'. [ 252.390153][T18649] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3737'. [ 252.453051][T18658] validate_nla: 6 callbacks suppressed [ 252.453070][T18658] netlink: 'syz.4.3740': attribute type 1 has an invalid length. [ 252.500325][T18658] bond3: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 252.548595][T18658] veth5: entered promiscuous mode [ 252.583054][T18658] bond3: (slave veth5): Enslaving as a backup interface with a down link [ 252.663837][T18672] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 252.892466][T18682] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3745'. [ 253.062146][T18691] bridge0: port 1(bridge_slave_0) entered disabled state [ 253.085308][T18690] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 253.107001][T18690] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 253.212377][T18701] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.3750'. [ 253.254448][T18701] openvswitch: netlink: Port -8 exceeds max allowable 65535 [ 253.342300][T18706] netlink: 'syz.4.3752': attribute type 1 has an invalid length. [ 253.386356][T18712] netlink: 'syz.1.3753': attribute type 24 has an invalid length. [ 253.386356][T18709] netlink: 'syz.1.3753': attribute type 24 has an invalid length. [ 253.413196][T18711] netlink: 'syz.4.3755': attribute type 32 has an invalid length. [ 253.421581][T18711] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3755'. [ 253.435583][T18711] (unnamed net_device) (uninitialized): option coupled_control: invalid value (52) [ 253.633829][T18736] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3762'. [ 253.673165][T18740] tipc: Enabled bearer , priority 0 [ 253.682037][T18740] syzkaller0: entered promiscuous mode [ 253.687657][T18740] syzkaller0: entered allmulticast mode [ 253.697362][T18740] tipc: Resetting bearer [ 253.723997][T18739] tipc: Resetting bearer [ 253.744931][T18739] tipc: Disabling bearer [ 254.014832][T18769] tipc: Enabled bearer , priority 0 [ 254.024147][T18770] syzkaller0: entered promiscuous mode [ 254.034068][T18770] syzkaller0: entered allmulticast mode [ 254.056382][T18770] tipc: Resetting bearer [ 254.085698][T18770] tipc: Disabling bearer [ 254.103821][T18778] team0: Device vti0 is of different type [ 254.301837][T18793] tipc: Enabled bearer , priority 0 [ 254.328358][T18794] syzkaller0: entered promiscuous mode [ 254.340219][T18794] syzkaller0: entered allmulticast mode [ 254.363127][T18793] tipc: Resetting bearer [ 254.398517][T18792] tipc: Resetting bearer [ 254.422555][T18792] tipc: Disabling bearer [ 254.438768][T18805] batadv1: entered allmulticast mode [ 254.645600][T18832] netlink: 'syz.2.3793': attribute type 10 has an invalid length. [ 254.665966][T18830] netlink: 'syz.3.3794': attribute type 1 has an invalid length. [ 254.708587][T18832] veth1_macvtap: left promiscuous mode [ 254.811810][T18834] syzkaller0: entered promiscuous mode [ 254.817410][T18834] syzkaller0: entered allmulticast mode [ 254.881900][T18847] atomic_op ffff88807c05e198 conn xmit_atomic 0000000000000000 [ 254.899316][T18847] gretap1: entered promiscuous mode [ 254.905034][T18847] gretap1: entered allmulticast mode [ 255.100709][T18857] bond0: Error: Cannot enslave bond to itself. [ 255.262999][T18880] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 255.676050][T18910] bridge_slave_0: left allmulticast mode [ 255.683656][T18918] netlink: 'syz.3.3817': attribute type 21 has an invalid length. [ 255.692294][T18910] bridge_slave_0: left promiscuous mode [ 255.709239][T18910] bridge0: port 1(bridge_slave_0) entered disabled state [ 255.724648][T18910] bridge_slave_1: left allmulticast mode [ 255.743138][T18910] bridge_slave_1: left promiscuous mode [ 255.751947][T18910] bridge0: port 2(bridge_slave_1) entered disabled state [ 255.764036][T18910] bond0: (slave bond_slave_0): Releasing backup interface [ 255.785581][T18910] bond0: (slave bond_slave_1): Releasing backup interface [ 255.819876][T18910] team0: Port device team_slave_0 removed [ 255.833197][T18910] team0: Port device team_slave_1 removed [ 255.849892][T18910] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 255.857300][T18910] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 255.880388][T18910] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 255.887792][T18910] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 256.012557][T18910] team0: Port device geneve0 removed [ 256.027470][T14252] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.078743][T18933] tipc: Enabled bearer , priority 0 [ 256.100229][T18936] syzkaller0: entered promiscuous mode [ 256.108139][T18936] syzkaller0: entered allmulticast mode [ 256.221182][T18938] syzkaller1: entered promiscuous mode [ 256.237209][T18943] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 256.246493][T18938] syzkaller1: entered allmulticast mode [ 256.262444][T18932] tipc: Resetting bearer [ 256.270895][T18930] veth1_to_bond: entered allmulticast mode [ 256.332133][T18947] netlink: 'syz.1.3828': attribute type 1 has an invalid length. [ 256.384176][T18932] tipc: Resetting bearer [ 256.406781][T18932] tipc: Disabling bearer [ 256.471186][T18954] netlink: 'syz.0.3827': attribute type 9 has an invalid length. [ 256.487307][T18947] 8021q: adding VLAN 0 to HW filter on device bond3 [ 256.568766][T18948] bond3 (unregistering): Released all slaves [ 256.625960][T18929] veth1_to_bond: left allmulticast mode [ 256.646256][T18929] delete_channel: no stack [ 256.705636][T18963] __nla_validate_parse: 15 callbacks suppressed [ 256.705655][T18963] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3831'. [ 256.808071][T18973] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3833'. [ 256.958137][ T9520] tipc: Subscription rejected, illegal request [ 257.281658][T19014] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3850'. [ 257.495166][T19045] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3859'. [ 257.525957][T19045] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3859'. [ 257.584022][T19051] Bluetooth: MGMT ver 1.23 [ 257.592504][T19048] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3860'. [ 257.742792][T19065] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 257.753388][T19065] team0: Device macvtap1 is already an upper device of the team interface [ 257.797580][T19070] validate_nla: 1 callbacks suppressed [ 257.797596][T19070] netlink: 'syz.0.3867': attribute type 4 has an invalid length. [ 257.878181][T19075] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3870'. [ 257.895221][T19075] netlink: 43 bytes leftover after parsing attributes in process `syz.3.3870'. [ 257.906367][T19075] netlink: 'syz.3.3870': attribute type 6 has an invalid length. [ 257.916601][T19075] netlink: 'syz.3.3870': attribute type 5 has an invalid length. [ 257.925933][T19075] netlink: 43 bytes leftover after parsing attributes in process `syz.3.3870'. [ 257.941058][T19077] netlink: 256 bytes leftover after parsing attributes in process `syz.4.3869'. [ 257.950953][T19077] netlink: 'syz.4.3869': attribute type 1 has an invalid length. [ 257.977815][T19077] 8021q: adding VLAN 0 to HW filter on device bond4 [ 258.015903][T19077] bond4: (slave geneve3): making interface the new active one [ 258.040077][T19077] bond4: (slave geneve3): Enslaving as an active interface with an up link [ 258.055316][ T7019] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.091441][ T7019] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.139686][ T7019] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.202575][T19100] netlink: 'syz.0.3877': attribute type 10 has an invalid length. [ 258.225575][ T7019] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.252181][T19100] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 258.383441][T19119] : renamed from bridge_slave_0 [ 258.480197][T19126] netlink: 'syz.2.3886': attribute type 4 has an invalid length. [ 258.574230][T19139] netlink: 'syz.3.3890': attribute type 4 has an invalid length. [ 258.585347][T19137] 8021q: adding VLAN 0 to HW filter on device bond5 [ 258.598627][T19137] team0: Failed to send port change of device bond5 via netlink (err -105) [ 258.608750][T19137] team0: Failed to send options change via netlink (err -105) [ 258.616676][T19137] team0: Port device bond5 added [ 258.623392][T19142] NCSI netlink: No device for ifindex 11584 [ 258.666607][T19147] (unnamed net_device) (uninitialized): option all_slaves_active: invalid value (222) [ 258.692003][T19150] (unnamed net_device) (uninitialized): option all_slaves_active: invalid value (222) [ 258.742722][T19160] netlink: 'syz.4.3896': attribute type 83 has an invalid length. [ 258.852108][T19167] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 258.874843][T19167] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 258.875819][T19172] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 258.917866][T19175] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 259.286886][T19215] netlink: 'syz.2.3912': attribute type 1 has an invalid length. [ 259.384423][ T7019] nci: nci_ntf_packet: unknown ntf opcode 0x110 [ 259.490087][T19239] netlink: 'syz.2.3912': attribute type 10 has an invalid length. [ 259.508683][T19239] veth0_vlan: entered allmulticast mode [ 259.570409][T19239] veth0_vlan: left promiscuous mode [ 259.577194][T19239] veth0_vlan: entered promiscuous mode [ 259.587263][T19239] team0: Device veth0_vlan failed to register rx_handler [ 260.317704][T19268] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 260.725616][T19313] bridge3: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 260.772411][T19313] bridge4: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 260.810055][T19315] bridge2: entered promiscuous mode [ 260.821404][T19315] bridge2: entered allmulticast mode [ 261.321553][T19372] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 261.686539][T19398] bridge_slave_0: left allmulticast mode [ 261.700722][T19398] bridge_slave_0: left promiscuous mode [ 261.716717][T19398] bridge0: port 1(bridge_slave_0) entered disabled state [ 261.734003][T19404] __nla_validate_parse: 15 callbacks suppressed [ 261.734019][T19404] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3970'. [ 261.763477][T19398] bridge_slave_1: left allmulticast mode [ 261.779275][T19398] bridge_slave_1: left promiscuous mode [ 261.794220][T19398] bridge0: port 2(bridge_slave_1) entered disabled state [ 261.823431][T19398] bond0: (slave bond_slave_0): Releasing backup interface [ 261.837560][T19412] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3973'. [ 261.847159][T19398] bond0: (slave bond_slave_1): Releasing backup interface [ 261.868596][T19398] team0: Port device team_slave_0 removed [ 261.903821][T19398] team0: Port device team_slave_1 removed [ 261.916678][T19398] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 261.942766][T19398] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 261.966992][T19398] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 261.987705][T19398] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 262.059504][T19415] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3973'. [ 262.063821][T19407] bridge_slave_0: default FDB implementation only supports local addresses [ 262.359824][T19426] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3978'. [ 262.419481][T19426] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3978'. [ 262.646859][T19444] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3983'. [ 262.736720][T19455] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3985'. [ 262.753474][T19454] netdevsim netdevsim4 : renamed from netdevsim0 [ 262.794310][T19455] hsr_slave_1 (unregistering): left promiscuous mode [ 262.814494][T19460] netlink: 96 bytes leftover after parsing attributes in process `syz.0.3987'. [ 262.837618][T19461] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3984'. [ 262.850892][ T7018] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 262.865347][ T7018] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 262.874668][T19452] sch_tbf: burst 8 is lower than device ip6tnl0 mtu (1452) ! [ 262.902298][T19460] 8021q: VLANs not supported on gre0 [ 262.927352][ T7018] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 262.950864][ T7018] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 263.046158][T19475] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 263.128870][T19482] netlink: 256 bytes leftover after parsing attributes in process `syz.2.3993'. [ 263.325443][T19509] veth1_macvtap: Device is already in use. [ 263.554661][T19537] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 263.694948][T19556] syzkaller1: entered promiscuous mode [ 263.713968][T19556] syzkaller1: entered allmulticast mode [ 264.002140][T19573] gre1: entered promiscuous mode [ 264.007245][T19573] gre1: entered allmulticast mode [ 264.230412][T19587] tipc: New replicast peer: 255.255.255.255 [ 264.237025][T19587] tipc: Enabled bearer , priority 10 [ 264.350524][T19598] tipc: Started in network mode [ 264.369517][T19598] tipc: Node identity , cluster identity 4711 [ 264.383618][T19598] tipc: Failed to set node id, please configure manually [ 264.394665][T19598] tipc: Enabling of bearer rejected, failed to enable media [ 264.404837][T19601] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (18446744073709551615) [ 264.426051][T19601] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535 [ 264.558369][T19619] tipc: Enabled bearer , priority 0 [ 264.567628][T19619] syzkaller0: entered promiscuous mode [ 264.576770][T19619] syzkaller0: entered allmulticast mode [ 264.593515][T19619] tipc: Resetting bearer [ 264.605917][T19618] tipc: Resetting bearer [ 264.633878][T19618] tipc: Disabling bearer [ 264.684535][T19625] veth0_to_bridge: entered promiscuous mode [ 264.700075][T19624] veth0_to_bridge: left promiscuous mode [ 264.845970][T19639] geneve2: entered promiscuous mode [ 264.857938][T19639] geneve2: entered allmulticast mode [ 264.904829][T19640] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 264.927488][T19640] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.953718][ T7018] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 264.967399][ T7018] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 264.990372][ T7018] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 265.020891][T19657] validate_nla: 6 callbacks suppressed [ 265.020910][T19657] netlink: 'syz.2.4055': attribute type 3 has an invalid length. [ 265.742512][T19721] netlink: 'syz.2.4074': attribute type 1 has an invalid length. [ 265.750759][T19722] netlink: 'syz.1.4073': attribute type 1 has an invalid length. [ 265.846163][T19721] bond2: (slave gretap1): making interface the new active one [ 265.872005][T19721] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 265.883538][T19733] netlink: 'syz.1.4077': attribute type 4 has an invalid length. [ 265.894343][T19731] 8021q: adding VLAN 0 to HW filter on device bond2 [ 266.187956][T19757] team_slave_0: entered promiscuous mode [ 266.193698][T19757] team_slave_1: entered promiscuous mode [ 266.203987][T19757] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 266.214400][T19757] team0: Device macvtap1 is already an upper device of the team interface [ 266.226790][T19757] team_slave_0: left promiscuous mode [ 266.232277][T19757] team_slave_1: left promiscuous mode [ 266.264404][T19770] netlink: 'syz.1.4088': attribute type 14 has an invalid length. [ 266.275476][T19771] netlink: 'syz.4.4087': attribute type 1 has an invalid length. [ 266.660294][T19640] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 266.678505][T19640] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.690831][T19640] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 266.756520][T19640] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 266.768062][T19640] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.792284][T19640] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 266.823200][T19811] netlink: 'syz.3.4103': attribute type 4 has an invalid length. [ 266.850701][T19811] __nla_validate_parse: 12 callbacks suppressed [ 266.850719][T19811] netlink: 64 bytes leftover after parsing attributes in process `syz.3.4103'. [ 266.872918][T19640] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 266.883932][T19640] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.895097][T19640] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 266.900013][T19814] netlink: 'syz.2.4104': attribute type 17 has an invalid length. [ 266.914039][T19814] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4104'. [ 266.923227][T19814] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4104'. [ 266.959620][ T7018] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 266.967907][ T7018] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 19999 - 0 [ 266.978738][ T7018] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 267.000781][ T7018] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 267.009485][ T7018] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 19999 - 0 [ 267.017844][ T7018] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 267.026553][ T7018] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 267.035316][ T7018] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 19999 - 0 [ 267.043698][ T7018] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 267.057101][ T7019] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 267.066010][ T7019] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 19999 - 0 [ 267.074503][ T7019] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 267.412794][T19839] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4113'. [ 267.504670][T19848] netlink: 'syz.4.4116': attribute type 11 has an invalid length. [ 267.515227][T19848] netlink: 228 bytes leftover after parsing attributes in process `syz.4.4116'. [ 267.561363][T19849] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4115'. [ 267.574565][T19849] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4115'. [ 267.586433][T19845] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4115'. [ 267.770414][T19865] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4122'. [ 267.845423][T19862] netlink: 52 bytes leftover after parsing attributes in process `syz.2.4121'. [ 267.865221][T19862] netlink: 'syz.2.4121': attribute type 13 has an invalid length. [ 267.885175][T19862] netlink: 'syz.2.4121': attribute type 17 has an invalid length. [ 267.938586][T19862] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 268.134719][T19882] team0: Device vti0 is up. Set it down before adding it as a team port [ 268.422739][T19903] sctp: [Deprecated]: syz.1.4131 (pid 19903) Use of int in maxseg socket option. [ 268.422739][T19903] Use struct sctp_assoc_value instead [ 268.503116][T19906] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 268.715146][T19927] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 268.746431][T19933] (unnamed net_device) (uninitialized): option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 268.800583][T19936] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 268.831657][T19942] sch_tbf: burst 4 is lower than device ip6tnl0 mtu (1452) ! [ 269.052811][T19963] tipc: Started in network mode [ 269.057768][T19963] tipc: Node identity ca736a650ed8, cluster identity 4711 [ 269.068528][T19963] tipc: Enabled bearer , priority 0 [ 269.085883][T19963] syzkaller0: entered promiscuous mode [ 269.094454][T19963] syzkaller0: entered allmulticast mode [ 269.104177][T19963] tipc: Resetting bearer [ 269.113748][T19962] tipc: Resetting bearer [ 269.132831][T19962] tipc: Disabling bearer [ 269.375749][T19989] netem: change failed [ 269.461489][T19997] IPVS: set_ctl: invalid protocol: 47 172.30.0.4:20002 [ 269.585529][T19997] IPVS: set_ctl: invalid protocol: 58 224.0.0.2:20003 [ 270.390701][T20038] netlink: 'syz.3.4180': attribute type 12 has an invalid length. [ 270.399431][T20042] netlink: 'syz.3.4180': attribute type 12 has an invalid length. [ 270.430655][T20038] netlink: 'syz.3.4180': attribute type 11 has an invalid length. [ 270.436973][T20042] netlink: 'syz.3.4180': attribute type 11 has an invalid length. [ 270.507681][T20048] can: request_module (can-proto-0) failed. [ 270.553947][T20051] tap0: tun_chr_ioctl cmd 1074025678 [ 270.559774][T20051] tap0: group set to 0 [ 270.662330][T20059] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 270.757330][T20068] netlink: 'syz.1.4188': attribute type 49 has an invalid length. [ 270.830181][T20075] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition [ 270.843886][T20075] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0) [ 270.974362][T20087] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 271.206223][T20111] netlink: 'syz.4.4202': attribute type 2 has an invalid length. [ 271.273157][T20115] netlink: 'syz.1.4204': attribute type 8 has an invalid length. [ 271.386057][T20113] syzkaller0: entered promiscuous mode [ 271.402071][T20113] syzkaller0: entered allmulticast mode [ 271.774927][T20165] hsr_slave_0 (unregistering): left promiscuous mode [ 271.970638][T20200] __nla_validate_parse: 20 callbacks suppressed [ 271.970659][T20200] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4228'. [ 272.050110][T20204] tipc: Enabled bearer , priority 0 [ 272.057610][T20204] syzkaller0: entered promiscuous mode [ 272.065570][T20204] syzkaller0: entered allmulticast mode [ 272.077486][T20211] sctp: [Deprecated]: syz.2.4232 (pid 20211) Use of struct sctp_assoc_value in delayed_ack socket option. [ 272.077486][T20211] Use struct sctp_sack_info instead [ 272.095475][T20204] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) ! [ 272.123050][T20204] tipc: Resetting bearer [ 272.134611][T20211] netlink: 'syz.2.4232': attribute type 58 has an invalid length. [ 272.147697][T20213] netlink: 'syz.1.4233': attribute type 1 has an invalid length. [ 272.153347][T20204] vxcan1: tx address claim with different name [ 272.178086][T20203] tipc: Resetting bearer [ 272.185135][T20211] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4232'. [ 272.201671][T20203] tipc: Disabling bearer [ 272.326507][T20224] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4237'. [ 272.429168][T20233] 8021q: adding VLAN 0 to HW filter on device bond6 [ 272.509235][T20242] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4243'. [ 272.518480][T20242] netlink: 80 bytes leftover after parsing attributes in process `syz.4.4243'. [ 272.528188][T20242] netlink: 1534 bytes leftover after parsing attributes in process `syz.4.4243'. [ 272.537606][T20242] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4243'. [ 273.110776][T20246] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4246'. [ 273.176622][T20258] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.4249'. [ 273.189252][T20247] nbd6: detected capacity change from 0 to 127 [ 273.189610][T20258] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4249'. [ 273.206778][T20255] openvswitch: netlink: Flow key attr not present in new flow. [ 273.241243][T11491] hid-generic 0005:16BF:5505.0002: unknown main item tag 0x0 [ 273.249471][ T5869] block nbd6: Receive control failed (result -32) [ 273.256825][T20258] sock: sock_timestamping_bind_phc: sock not bind to device [ 273.267650][T11491] hid-generic 0005:16BF:5505.0002: hidraw0: BLUETOOTH HID vc3.b8 Device [syz0] on aa:aa:aa:aa:aa:aa [ 273.417314][T20280] syzkaller1: entered allmulticast mode [ 273.482018][T20286] bridge_slave_0: left allmulticast mode [ 273.488197][T20286] bridge0: port 1(bridge_slave_0) entered disabled state [ 273.502919][T20286] bridge_slave_1: left allmulticast mode [ 273.515979][T20286] bridge_slave_1: left promiscuous mode [ 273.529921][T20286] bridge0: port 2(bridge_slave_1) entered disabled state [ 273.556281][T20286] bond0: (slave bond_slave_0): Releasing backup interface [ 273.578244][T20286] bond0: (slave bond_slave_1): Releasing backup interface [ 273.595481][T20286] team0: Port device team_slave_0 removed [ 273.612077][T20286] team0: Port device team_slave_1 removed [ 273.618672][T20286] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 273.627250][T20286] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 273.640070][T20286] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 273.647602][T20286] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 273.674728][T20286] bond0: (slave wlan1): Releasing backup interface [ 273.690123][T20286] bond2: (slave gretap1): Releasing active interface [ 273.741397][T20294] x_tables: ip6_tables: quota.0 match: invalid size 24 (kernel) != (user) 144 [ 273.879720][T20319] netlink: 'syz.4.4267': attribute type 10 has an invalid length. [ 273.898052][T20319] tipc: Disabling bearer [ 273.928409][T20321] syz_tun: entered allmulticast mode [ 273.936002][T20320] syz_tun: left allmulticast mode [ 274.062212][T20336] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 274.114499][T20336] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 274.369190][ T5869] Bluetooth: hci0: command 0x040f tx timeout [ 274.369414][ T51] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 274.984772][T20416] bridge0: entered promiscuous mode [ 274.990846][T20416] macsec2: entered promiscuous mode [ 275.172828][T20425] openvswitch: netlink: IP tunnel TTL not specified. [ 275.593259][T20438] sock: sock_timestamping_bind_phc: sock not bind to device [ 275.762555][T20462] validate_nla: 1 callbacks suppressed [ 275.762574][T20462] netlink: 'syz.0.4312': attribute type 1 has an invalid length. [ 275.851069][T20462] bond2: (slave gretap2): making interface the new active one [ 275.890549][T20462] bond2: (slave gretap2): Enslaving as an active interface with an up link [ 275.946641][T20475] netlink: 'syz.4.4317': attribute type 3 has an invalid length. [ 276.124686][T20483] sch_tbf: burst 0 is lower than device bridge3 mtu (1514) ! [ 276.402152][T20505] batadv1: entered allmulticast mode [ 276.415773][T20507] netlink: 'syz.4.4328': attribute type 6 has an invalid length. [ 276.514299][T20517] netlink: 'syz.2.4332': attribute type 1 has an invalid length. [ 277.468117][T20566] __nla_validate_parse: 55 callbacks suppressed [ 277.468138][T20566] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4349'. [ 277.649692][ T5869] Bluetooth: hci3: command 0x041b tx timeout [ 277.796739][T20605] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4361'. [ 277.914183][T20612] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4362'. [ 278.485676][T20614] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4363'. [ 278.614037][T20626] netlink: 'syz.2.4366': attribute type 6 has an invalid length. [ 278.662451][T20626] netlink: 'syz.2.4366': attribute type 6 has an invalid length. [ 278.733003][T20643] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4372'. [ 278.733018][T20644] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4372'. [ 278.810035][T20644] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4372'. [ 278.822308][T20654] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4372'. [ 278.895733][T20659] sch_tbf: peakrate 7 is lower than or equals to rate 2147483647 ! [ 279.057020][T20670] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4377'. [ 279.106298][T20666] bridge0: port 2(bridge_slave_1) entered disabled state [ 279.301345][T20690] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 279.318299][T20688] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4382'. [ 279.388614][T20692] netlink: 'syz.4.4383': attribute type 4 has an invalid length. [ 279.733415][ T5869] Bluetooth: hci3: command 0x041b tx timeout [ 279.939844][T20734] sock: sock_set_timeout: `syz.0.4395' (pid 20734) tries to set negative timeout [ 280.032305][T20740] lo: entered promiscuous mode [ 280.046567][T20740] tunl0: entered promiscuous mode [ 280.060856][T20740] gre0: entered promiscuous mode [ 280.078423][T20740] gretap0: entered promiscuous mode [ 280.096555][T20740] erspan0: entered promiscuous mode [ 280.108167][T20740] ip_vti0: entered promiscuous mode [ 280.139870][T20740] syzkaller0: entered promiscuous mode [ 280.145589][T20740] syzkaller0: entered allmulticast mode [ 280.188925][T20753] mac80211_hwsim hwsim33 wlan1: entered allmulticast mode [ 280.232775][T20753] netlink: 'syz.3.4401': attribute type 10 has an invalid length. [ 280.240926][T20753] mac80211_hwsim hwsim33 wlan1: left allmulticast mode [ 280.258824][T20753] bridge_slave_0: left allmulticast mode [ 280.276055][T20753] bridge_slave_0: left promiscuous mode [ 280.284745][T20753] bridge0: port 1(bridge_slave_0) entered disabled state [ 280.302017][T20753] bridge_slave_1: left allmulticast mode [ 280.308360][T20753] bridge_slave_1: left promiscuous mode [ 280.317862][T20753] bridge0: port 2(bridge_slave_1) entered disabled state [ 280.333727][T20753] bond0: (slave bond_slave_0): Releasing backup interface [ 280.354439][T20753] bond0: (slave bond_slave_1): Releasing backup interface [ 280.368944][T20753] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 280.377194][T20753] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 280.391259][T20753] bond0: (slave geneve1): Releasing backup interface [ 280.415099][T20753] bond1: (slave veth7): Releasing active interface [ 280.421861][T20753] bond1: (slave veth7): the permanent HWaddr of slave - 1a:8d:7a:7e:18:45 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 280.440128][T20753] vlan2: entered promiscuous mode [ 280.454409][T20753] bond1: (slave vlan2): Releasing active interface [ 280.462058][T20753] vlan2: left promiscuous mode [ 280.468612][T20753] veth0_to_bond: left promiscuous mode [ 280.479339][T20753] bond2: (slave bond3): Releasing backup interface [ 280.486836][T20753] bond3: left promiscuous mode [ 280.501244][T20753] bond4: (slave gretap2): Releasing active interface [ 280.515653][T20753] bond5: (slave geneve3): Releasing active interface [ 280.536054][ T36] netdevsim netdevsim3 netdevsim0: unset [1, 2] type 2 family 0 port 20004 - 0 [ 280.546600][ T36] netdevsim netdevsim3 netdevsim1: unset [1, 2] type 2 family 0 port 20004 - 0 [ 280.572271][ T36] netdevsim netdevsim3 netdevsim2: unset [1, 2] type 2 family 0 port 20004 - 0 [ 280.596844][ T36] netdevsim netdevsim3 netdevsim3: unset [1, 2] type 2 family 0 port 20004 - 0 [ 280.769085][T20766] nbd7: detected capacity change from 0 to 127 [ 280.852151][T20787] netlink: 'syz.3.4412': attribute type 1 has an invalid length. [ 280.865845][T20787] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 280.868949][T20784] bond7: entered promiscuous mode [ 280.881998][T20784] bond7: entered allmulticast mode [ 280.889030][T20784] 8021q: adding VLAN 0 to HW filter on device bond7 [ 280.987304][T20796] openvswitch: netlink: IPv4 tunnel dst address is zero [ 281.028949][T20802] batadv_slave_0: entered promiscuous mode [ 281.162886][T20813] veth7: entered promiscuous mode [ 281.168116][T20813] veth7: entered allmulticast mode [ 281.447814][ T5869] block nbd7: Receive control failed (result -32) [ 281.447814][ T51] block nbd7: Receive control failed (result -32) [ 281.470134][T20791] batadv_slave_0: left promiscuous mode [ 281.635284][T20841] netlink: 'syz.3.4427': attribute type 1 has an invalid length. [ 281.657841][T20841] bond6: entered promiscuous mode [ 281.674143][T20841] 8021q: adding VLAN 0 to HW filter on device bond6 [ 281.683810][T20837] 0ªî{X¹¦: renamed from gretap0 (while UP) [ 281.692244][T20837] 0ªî{X¹¦: entered allmulticast mode [ 281.698174][T20837] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 281.748034][T20841] 8021q: adding VLAN 0 to HW filter on device bond6 [ 281.758973][T20841] bond6: (slave wireguard0): The slave device specified does not support setting the MAC address [ 281.783085][T20841] bond6: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 281.795697][T20841] bond6: (slave wireguard0): making interface the new active one [ 281.804806][T20841] wireguard0: entered promiscuous mode [ 281.812365][T20841] bond6: (slave wireguard0): Enslaving as an active interface with an up link [ 282.202355][T20900] netlink: 'syz.1.4445': attribute type 2 has an invalid length. [ 282.400626][T20911] netlink: 'syz.3.4448': attribute type 1 has an invalid length. [ 283.077630][T20933] (unnamed net_device) (uninitialized): peer notification delay (1164) is not a multiple of miimon (100), value rounded to 1100 ms [ 283.102963][T20933] bond8: entered promiscuous mode [ 283.108012][T20933] bond8: entered allmulticast mode [ 283.114002][T20933] 8021q: adding VLAN 0 to HW filter on device bond8 [ 283.329503][T20949] __nla_validate_parse: 17 callbacks suppressed [ 283.329523][T20949] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4457'. [ 283.348258][T20947] netlink: 'syz.4.4456': attribute type 21 has an invalid length. [ 283.371303][T20947] IPv6: NLM_F_CREATE should be specified when creating new route [ 283.395595][T20954] netlink: 'syz.3.4459': attribute type 10 has an invalid length. [ 283.596621][T20976] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4465'. [ 283.662376][T20984] netlink: 'syz.2.4468': attribute type 1 has an invalid length. [ 283.681312][T20984] netlink: 15 bytes leftover after parsing attributes in process `syz.2.4468'. [ 283.772241][T20993] netlink: 18 bytes leftover after parsing attributes in process `syz.3.4471'. [ 283.802951][T20997] netlink: 'syz.2.4474': attribute type 13 has an invalid length. [ 283.833042][T20995] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4473'. [ 283.833168][T20997] veth0_macvtap: left promiscuous mode [ 283.866287][T20997] macvtap0: entered allmulticast mode [ 283.906899][T20997] macvtap0: refused to change device tx_queue_len [ 283.934019][T20999] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4474'. [ 284.098353][T21017] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4480'. [ 284.218534][T21031] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4485'. [ 284.251788][T21038] netlink: 'syz.1.4487': attribute type 29 has an invalid length. [ 284.264601][T21038] netlink: 'syz.1.4487': attribute type 29 has an invalid length. [ 284.372811][T21043] block nbd1: Unsupported socket: shutdown callout must be supported. [ 284.385908][T21049] block nbd1: Unsupported socket: shutdown callout must be supported. [ 284.512515][T21057] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4493'. [ 284.588776][T21064] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4492'. [ 285.327149][T21125] nbd: socks must be embedded in a SOCK_ITEM attr [ 285.364527][T21129] sctp: [Deprecated]: syz.0.4513 (pid 21129) Use of int in max_burst socket option. [ 285.364527][T21129] Use struct sctp_assoc_value instead [ 285.385354][T21125] pim6reg1: entered promiscuous mode [ 285.394302][T21125] pim6reg1: entered allmulticast mode [ 285.679142][ T24] hid-generic 0005:16BF:5508.0003: unknown main item tag 0x0 [ 285.688304][ T24] hid-generic 0005:16BF:5508.0003: hidraw0: BLUETOOTH HID vc3.b8 Device [syz0] on aa:aa:aa:aa:aa:aa [ 285.776628][T21171] openvswitch: netlink: Message has 5 unknown bytes. [ 285.948786][T21190] validate_nla: 4 callbacks suppressed [ 285.948805][T21190] netlink: 'syz.3.4533': attribute type 3 has an invalid length. [ 286.215969][T21213] netlink: 'syz.2.4541': attribute type 10 has an invalid length. [ 286.264521][T21213] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 286.281127][T21213] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 286.306834][T21213] netlink: 'syz.2.4541': attribute type 10 has an invalid length. [ 286.352771][T21228] openvswitch: netlink: IPv6 tunnel dst address is zero [ 286.784094][T21262] netlink: 'syz.0.4554': attribute type 1 has an invalid length. [ 286.855353][T21269] sctp: [Deprecated]: syz.0.4557 (pid 21269) Use of int in maxseg socket option. [ 286.855353][T21269] Use struct sctp_assoc_value instead [ 286.871836][T21269] Unsupported ieee802154 address type: 0 [ 286.993239][T21282] netlink: 'syz.4.4561': attribute type 1 has an invalid length. [ 287.016385][T21282] 8021q: adding VLAN 0 to HW filter on device bond9 [ 287.064002][T21288] (unnamed net_device) (uninitialized): option use_carrier: invalid value (4) [ 287.134614][T21296] netlink: 'syz.4.4565': attribute type 1 has an invalid length. [ 287.175947][T21296] 8021q: adding VLAN 0 to HW filter on device bond11 [ 287.186080][T21296] bond10: (slave bond11): making interface the new active one [ 287.194275][T21296] bond10: (slave bond11): Enslaving as an active interface with an up link [ 287.325067][T21313] netlink: 'syz.4.4570': attribute type 8 has an invalid length. [ 287.735310][T21345] tipc: Enabled bearer , priority 0 [ 287.742779][T21345] syzkaller0: entered promiscuous mode [ 287.748420][T21345] syzkaller0: entered allmulticast mode [ 287.780790][T21345] tipc: Resetting bearer [ 287.797532][T21343] tipc: Resetting bearer [ 287.818307][T21343] tipc: Disabling bearer [ 287.840166][T21352] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.903891][T21352] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.010260][T21352] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.140089][T14252] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.161148][T14252] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.171422][T21384] netlink: 'syz.4.4591': attribute type 10 has an invalid length. [ 288.178582][T14252] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.197952][ T9529] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.198125][T14252] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 288.227199][T14252] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 288.424193][T21401] __nla_validate_parse: 20 callbacks suppressed [ 288.424214][T21401] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4597'. [ 288.464083][T21390] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4593'. [ 288.533543][T21405] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 1 [ 288.566890][T21407] "syz.0.4598" (21407) uses obsolete ecb(arc4) skcipher [ 288.595549][T21407] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 288.688304][T21424] netlink: 45 bytes leftover after parsing attributes in process `syz.3.4602'. [ 288.695242][T21426] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4603'. [ 288.825482][T21448] netlink: 256 bytes leftover after parsing attributes in process `syz.4.4609'. [ 288.901392][T21451] debugfs: 'netdev@ffff888057cc0610' already exists in 'ref_tracker' [ 288.922873][T21467] tipc: Enabled bearer , priority 0 [ 289.085324][T21522] netlink: 212388 bytes leftover after parsing attributes in process `syz.3.4615'. [ 289.108608][T21522] openvswitch: netlink: Message has 5 unknown bytes. [ 289.166725][T21560] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4619'. [ 289.285374][T21580] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4621'. [ 289.414633][T21588] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4625'. [ 289.459964][T21588] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4625'. [ 289.618278][T21613] tipc: Enabled bearer , priority 0 [ 289.633192][T21613] mac80211_hwsim hwsim39 syzkaller0: entered promiscuous mode [ 289.651280][T21613] mac80211_hwsim hwsim39 syzkaller0: entered allmulticast mode [ 289.666535][T21613] tipc: Resetting bearer [ 289.761713][T21624] netlink: 'syz.4.4636': attribute type 21 has an invalid length. [ 289.771326][T21624] netlink: 'syz.4.4636': attribute type 22 has an invalid length. [ 289.874999][T21635] (unnamed net_device) (uninitialized): option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 289.902963][ T30] audit: type=1800 audit(1756093663.703:8): pid=21638 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.4643" name="memory.events" dev="tmpfs" ino=1767 res=0 errno=0 [ 289.955741][ T30] audit: type=1804 audit(1756093663.703:9): pid=21638 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.4643" name="/newroot/344/memory.events" dev="tmpfs" ino=1767 res=1 errno=0 [ 290.121574][T21659] vlan0: entered allmulticast mode [ 290.127134][T21659] bridge0: entered allmulticast mode [ 290.188639][T21664] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 290.405051][T21679] tap0: tun_chr_ioctl cmd 1074025678 [ 290.411353][T21679] tap0: group set to 0 [ 290.583521][T21700] tipc: New replicast peer: 0.0.0.0 [ 290.596646][T21700] tipc: Enabled bearer , priority 10 [ 290.816681][T21730] openvswitch: netlink: Flow key attr not present in new flow. [ 290.913323][T21733] tipc: Enabled bearer , priority 0 [ 290.923666][T21733] syzkaller0: entered promiscuous mode [ 290.943252][T21733] syzkaller0: entered allmulticast mode [ 290.967698][T21733] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 291.018287][T21733] tipc: Resetting bearer [ 291.032980][T21732] tipc: Resetting bearer [ 291.122712][T21732] tipc: Disabling bearer [ 291.225893][T21756] vlan3: entered promiscuous mode [ 291.240290][T21756] bridge0: entered promiscuous mode [ 291.468098][T21782] validate_nla: 4 callbacks suppressed [ 291.468117][T21782] netlink: 'syz.2.4689': attribute type 21 has an invalid length. [ 291.482823][T21783] netlink: 'syz.2.4689': attribute type 3 has an invalid length. [ 291.812795][T21813] rdma_op ffff88802d1491f0 conn xmit_rdma 0000000000000000 [ 291.836525][T21813] rdma_op ffff88803206a1f0 conn xmit_rdma 0000000000000000 [ 291.864510][T21813] rdma_op ffff88803206b9f0 conn xmit_rdma 0000000000000000 [ 291.877596][T21813] rdma_op ffff88803206e9f0 conn xmit_rdma 0000000000000000 [ 291.886492][T21813] rdma_op ffff88803206b1f0 conn xmit_rdma 0000000000000000 [ 291.901257][T21813] rdma_op ffff88803206e1f0 conn xmit_rdma 0000000000000000 [ 291.918584][T21813] rdma_op ffff8880320681f0 conn xmit_rdma 0000000000000000 [ 291.938524][T21813] rdma_op ffff88803206d9f0 conn xmit_rdma 0000000000000000 [ 291.945541][T21824] netlink: 'syz.3.4700': attribute type 1 has an invalid length. [ 291.949949][T21813] rdma_op ffff88803206f1f0 conn xmit_rdma 0000000000000000 [ 291.965051][T21813] rdma_op ffff88802d14b9f0 conn xmit_rdma 0000000000000000 [ 292.006192][T21826] netlink: 'syz.2.4701': attribute type 4 has an invalid length. [ 292.038821][T21826] netlink: 'syz.2.4701': attribute type 4 has an invalid length. [ 292.167200][T21840] netlink: 'syz.0.4706': attribute type 6 has an invalid length. [ 292.194060][T21842] netlink: 'syz.3.4707': attribute type 1 has an invalid length. [ 292.211836][T21841] netlink: 'syz.0.4706': attribute type 6 has an invalid length. [ 292.237848][T21842] bond8: (slave vxcan3): The slave device specified does not support setting the MAC address [ 292.253249][T21842] bond8: (slave vxcan3): Error -95 calling set_mac_address [ 292.318600][T21853] netlink: 'syz.4.4711': attribute type 2 has an invalid length. [ 292.465380][T21859] tipc: Cannot configure node identity twice [ 292.615550][T21874] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0x5 [ 292.746572][T21889] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 293.444338][T21958] sctp: [Deprecated]: syz.3.4744 (pid 21958) Use of struct sctp_assoc_value in delayed_ack socket option. [ 293.444338][T21958] Use struct sctp_sack_info instead [ 293.463813][T21958] __nla_validate_parse: 43 callbacks suppressed [ 293.463831][T21958] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4744'. [ 293.545580][T21969] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4748'. [ 293.555528][T21969] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4748'. [ 293.648284][T21974] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4750'. [ 293.659964][T21974] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4750'. [ 293.710382][T21981] netlink: 72 bytes leftover after parsing attributes in process `syz.0.4752'. [ 293.765865][T21987] gtp0: entered promiscuous mode [ 293.772999][T21987] gtp0: entered allmulticast mode [ 293.821817][T21994] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4757'. [ 293.848811][T21995] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on [ 293.936534][T22002] pim6reg1: entered promiscuous mode [ 293.942835][T22002] pim6reg1: entered allmulticast mode [ 294.034245][T22011] netlink: 'syz.1.4759': attribute type 1 has an invalid length. [ 294.101710][T22011] bond4: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 294.245974][T22035] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4770'. [ 294.698768][T22033] bridge_slave_0: left promiscuous mode [ 294.710684][T22054] netlink: 184 bytes leftover after parsing attributes in process `syz.4.4775'. [ 294.737922][T22054] xt_socket: unknown flags 0xd0 [ 295.060660][T22033] ipvlan2: left promiscuous mode [ 295.097246][T22033] vlan3: left promiscuous mode [ 295.105100][T22033] bridge0: left promiscuous mode [ 295.137323][T22042] geneve2: entered promiscuous mode [ 295.155203][T22042] geneve2: entered allmulticast mode [ 295.235187][ T9520] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.251794][T22072] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4779'. [ 295.253075][ T9520] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 295.275466][ T9520] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.284669][ T9520] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 295.371123][ T9520] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.385634][ T9520] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 295.397383][ T9520] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.407428][ T9520] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0 [ 295.665828][T22100] tipc: Enabled bearer , priority 0 [ 295.717022][T22100] mac80211_hwsim hwsim32 syzkaller0: entered promiscuous mode [ 295.751332][T22100] mac80211_hwsim hwsim32 syzkaller0: entered allmulticast mode [ 295.786571][T22100] tipc: Resetting bearer [ 296.288559][T22146] team0: Device ip6gre2 is up. Set it down before adding it as a team port [ 296.544811][T22180] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 296.852284][T22213] (unnamed net_device) (uninitialized): peer notification delay (1164) is not a multiple of miimon (100), value rounded to 1100 ms [ 296.859777][T22215] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1303 [ 296.917856][T22213] bond5: entered promiscuous mode [ 296.938246][T22213] bond5: entered allmulticast mode [ 296.962569][T22213] 8021q: adding VLAN 0 to HW filter on device bond5 [ 297.023746][T22225] validate_nla: 2 callbacks suppressed [ 297.023765][T22225] netlink: 'syz.0.4832': attribute type 10 has an invalid length. [ 297.139617][ T9529] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 297.148464][ T9529] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 297.158097][T22242] netem: change failed [ 297.170897][ T7023] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 297.190981][ T7023] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 297.417405][T22266] netlink: 'syz.2.4847': attribute type 2 has an invalid length. [ 297.568601][T22273] 8021q: VLANs not supported on sit0 [ 297.575686][T22281] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 297.586781][T22282] vxcan1: entered allmulticast mode [ 297.603151][T22281] openvswitch: netlink: VXLAN extension 1 has unexpected len 0 expected 4 [ 297.628901][T22284] sch_tbf: burst 8 is lower than device ip6tnl0 mtu (1452) ! [ 297.655209][T22288] netlink: 'syz.2.4856': attribute type 12 has an invalid length. [ 298.096555][T22310] tipc: Enabling of bearer rejected, failed to enable media [ 298.188856][T22319] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 298.493659][T22356] nbd: must specify an index to disconnect [ 298.575757][T22359] netlink: 'syz.2.4875': attribute type 6 has an invalid length. [ 298.618541][T22365] bond4: (slave ip6gretap1): Releasing backup interface [ 298.637842][T22365] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 298.748693][T11494] IPVS: starting estimator thread 0... [ 298.840233][T22377] IPVS: using max 42 ests per chain, 100800 per kthread [ 298.911154][T22388] __nla_validate_parse: 20 callbacks suppressed [ 298.911173][T22388] netlink: 84 bytes leftover after parsing attributes in process `syz.0.4881'. [ 299.032856][T22398] lo: left promiscuous mode [ 299.044384][T22398] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 299.277820][T22420] netlink: 244 bytes leftover after parsing attributes in process `syz.0.4889'. [ 299.322177][T22427] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4891'. [ 299.393775][T22432] netlink: 348 bytes leftover after parsing attributes in process `syz.3.4893'. [ 299.420843][T22432] netlink: 'syz.3.4893': attribute type 33 has an invalid length. [ 299.428819][T22432] netlink: 152 bytes leftover after parsing attributes in process `syz.3.4893'. [ 299.450641][T22423] tipc: Enabling of bearer rejected, already enabled [ 299.464965][T22432] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4893'. [ 299.662082][T22455] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4897'. [ 299.729657][T22458] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4900'. [ 299.853113][T22474] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4904'. [ 300.003876][T22480] tipc: Enabled bearer , priority 0 [ 300.012614][T22479] tipc: Disabling bearer [ 300.024442][T22482] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 300.092059][T22489] netlink: 'syz.1.4909': attribute type 2 has an invalid length. [ 300.176614][T22496] netlink: 312 bytes leftover after parsing attributes in process `syz.0.4910'. [ 300.222333][T22496] tipc: Enabling of bearer rejected, failed to enable media [ 300.317597][T22502] syzkaller1: entered promiscuous mode [ 300.328541][T22502] syzkaller1: entered allmulticast mode [ 300.644553][T22524] tipc: Enabled bearer , priority 0 [ 300.663993][T22523] tipc: Disabling bearer [ 300.782252][T22551] netlink: 'syz.4.4929': attribute type 12 has an invalid length. [ 300.813541][T22551] (unnamed net_device) (uninitialized): option primary_reselect: invalid value (255) [ 300.837926][T22554] netlink: 'syz.3.4930': attribute type 1 has an invalid length. [ 301.017683][T22571] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 301.104609][T22581] netlink: 'syz.3.4938': attribute type 1 has an invalid length. [ 301.136659][T22582] netlink: 'syz.3.4938': attribute type 1 has an invalid length. [ 301.667699][T22631] nbd: must specify at least one socket [ 301.747638][T22638] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 301.774571][T22642] rds_sendmsg: 23 callbacks suppressed [ 301.774590][T22642] rdma_op ffff88807945e1f0 conn xmit_rdma 0000000000000000 [ 302.065106][T22646] (unnamed net_device) (uninitialized): up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 302.428520][T22704] geneve2: entered promiscuous mode [ 302.454562][T22704] geneve2: entered allmulticast mode [ 302.462181][ T9520] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 19999 - 0 [ 302.491376][ T9520] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 19999 - 0 [ 302.521640][ T9520] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 19999 - 0 [ 302.539551][ T9520] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 19999 - 0 [ 302.704231][T22726] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on [ 302.786971][T22734] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 303.037483][T22750] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 303.836560][T22818] pim6reg1: entered promiscuous mode [ 303.852159][T22818] pim6reg1: entered allmulticast mode [ 304.153247][T22840] __nla_validate_parse: 21 callbacks suppressed [ 304.153269][T22840] netlink: 240 bytes leftover after parsing attributes in process `syz.3.5012'. [ 304.297190][T22850] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 304.322108][T22847] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 304.322185][T22856] validate_nla: 6 callbacks suppressed [ 304.322200][T22856] netlink: 'syz.4.5021': attribute type 3 has an invalid length. [ 304.349574][T22854] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5021'. [ 304.374227][T22860] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5022'. [ 304.583173][T22877] netlink: 84 bytes leftover after parsing attributes in process `syz.2.5028'. [ 304.732429][T22886] tipc: Enabling of bearer rejected, already enabled [ 304.842135][T22898] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5033'. [ 304.905805][T22904] netlink: 'syz.4.5037': attribute type 11 has an invalid length. [ 305.013321][T22919] netlink: 148 bytes leftover after parsing attributes in process `syz.3.5042'. [ 305.196167][T22931] sch_tbf: burst 0 is lower than device lo mtu (18) ! [ 305.258604][T22939] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 305.271918][T22945] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5050'. [ 305.286149][T22947] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5049'. [ 305.471380][T22960] bond8: entered promiscuous mode [ 305.477191][T22960] bond8: entered allmulticast mode [ 305.486581][T22960] 8021q: adding VLAN 0 to HW filter on device bond8 [ 305.663235][T22960] bond8 (unregistering): Released all slaves [ 305.707663][T22961] veth9: entered allmulticast mode [ 305.750491][T22972] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5057'. [ 305.864881][T22979] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5059'. [ 306.199484][T23011] IPv6: sit1: Disabled Multicast RS [ 306.217063][T23011] sit1: entered allmulticast mode [ 306.260118][T23020] openvswitch: netlink: Actions may not be safe on all matching packets [ 306.523876][T23040] netlink: 'syz.0.5079': attribute type 5 has an invalid length. [ 306.615241][T23046] pim6reg1: entered promiscuous mode [ 306.624022][T23046] pim6reg1: entered allmulticast mode [ 307.476979][T23116] netlink: 'syz.1.5102': attribute type 5 has an invalid length. [ 307.695455][T23137] bond0: (slave batadv0): Releasing backup interface [ 307.779559][T23144] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 307.839385][T23151] tipc: Enabling of bearer rejected, media not registered [ 308.018955][T23167] netlink: 'syz.1.5116': attribute type 7 has an invalid length. [ 308.069246][T23167] netlink: 'syz.1.5116': attribute type 8 has an invalid length. [ 308.129633][ T5869] Bluetooth: hci3: command 0x041b tx timeout [ 308.479713][T23196] tipc: Enabling of bearer rejected, failed to enable media [ 308.676029][ T7019] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 308.890648][T23231] tipc: Enabled bearer , priority 0 [ 308.897499][T23232] tipc: Enabling of bearer rejected, already enabled [ 308.906667][T23231] syzkaller0: entered promiscuous mode [ 308.912294][T23231] syzkaller0: entered allmulticast mode [ 308.923757][T23232] tipc: Resetting bearer [ 308.932630][T23233] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 308.943474][T23230] tipc: Resetting bearer [ 308.965311][T23230] tipc: Disabling bearer [ 309.145458][ T36] netdevsim netdevsim4 : set [0, 0] type 1 family 0 port 8472 - 0 [ 309.165416][ T36] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 309.167810][T23250] __nla_validate_parse: 17 callbacks suppressed [ 309.167832][T23250] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5147'. [ 309.201698][ T36] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 309.225041][ T36] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 309.225629][T23256] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5147'. [ 309.274499][T23260] block nbd8: Unsupported socket: shutdown callout must be supported. [ 309.285967][T23260] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5150'. [ 309.325713][T23260] 8021q: adding VLAN 0 to HW filter on device bond4 [ 309.470099][T23272] netlink: 'syz.0.5152': attribute type 11 has an invalid length. [ 309.480448][T23272] netlink: 224 bytes leftover after parsing attributes in process `syz.0.5152'. [ 309.610484][T23225] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 309.630403][T23279] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5155'. [ 309.648325][T23279] geneve3: entered promiscuous mode [ 309.977996][T23312] vxcan1: tx drop: invalid da for name 0xfffffffffffffffc [ 309.992039][T23312] netlink: 'syz.0.5166': attribute type 1 has an invalid length. [ 310.004325][T23306] tipc: Enabling of bearer rejected, already enabled [ 310.094630][T23316] vlan1: entered promiscuous mode [ 310.111655][T23316] bridge0: entered promiscuous mode [ 310.165103][T23322] A link change request failed with some changes committed already. Interface bond1 may have been left with an inconsistent configuration, please check. [ 310.202966][T23331] netlink: 'syz.3.5172': attribute type 1 has an invalid length. [ 310.767122][T23365] tipc: Started in network mode [ 310.782453][T23365] tipc: Node identity f6a61f86fbb6, cluster identity 4711 [ 310.805067][T23365] tipc: Enabled bearer , priority 0 [ 310.871358][T23395] netlink: 'syz.4.5191': attribute type 142 has an invalid length. [ 310.893347][T23375] syzkaller0: entered promiscuous mode [ 310.898918][T23375] syzkaller0: entered allmulticast mode [ 310.906133][T23375] tipc: Resetting bearer [ 310.943005][T23361] tipc: Resetting bearer [ 311.031816][T23361] tipc: Disabling bearer [ 311.046456][T23392] batman_adv: batadv0: Adding interface: dummy0 [ 311.054759][T23392] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 311.057470][T23408] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5196'. [ 311.085016][T23392] batman_adv: batadv0: Interface activated: dummy0 [ 311.128830][T23396] batadv0: mtu less than device minimum [ 311.141405][T23396] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 311.152602][T23396] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 311.163748][T23396] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 311.174969][T23396] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 311.185860][T23396] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 311.197061][T23396] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 311.208024][T23396] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 311.219058][T23396] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 311.268343][T23412] dvmrp0: entered allmulticast mode [ 311.278572][T23408] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5196'. [ 311.344946][T23419] netlink: 'syz.2.5199': attribute type 83 has an invalid length. [ 311.363329][T23421] hsr0 speed is unknown, defaulting to 1000 [ 311.370268][T23421] hsr0 speed is unknown, defaulting to 1000 [ 311.376765][T23421] hsr0 speed is unknown, defaulting to 1000 [ 311.386026][T23421] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 311.425897][T23426] netlink: 'syz.1.5202': attribute type 58 has an invalid length. [ 311.442789][T23426] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5202'. [ 311.463577][T23421] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 311.478542][T23432] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5201'. [ 311.544622][T23421] hsr0 speed is unknown, defaulting to 1000 [ 311.563190][T23436] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5204'. [ 311.584463][T23421] hsr0 speed is unknown, defaulting to 1000 [ 311.591618][T23421] hsr0 speed is unknown, defaulting to 1000 [ 311.617472][T23421] hsr0 speed is unknown, defaulting to 1000 [ 311.632800][T23421] hsr0 speed is unknown, defaulting to 1000 [ 311.640131][T23421] hsr0 speed is unknown, defaulting to 1000 [ 311.647106][T23421] hsr0 speed is unknown, defaulting to 1000 [ 311.654998][T23421] hsr0 speed is unknown, defaulting to 1000 [ 311.662236][T23421] hsr0 speed is unknown, defaulting to 1000 [ 311.772469][T23447] tipc: Enabled bearer , priority 0 [ 311.854785][T23447] syzkaller0: entered promiscuous mode [ 311.860845][T23447] syzkaller0: entered allmulticast mode [ 311.867099][T23447] tipc: Resetting bearer [ 311.884803][T23445] tipc: Resetting bearer [ 311.955575][T23445] tipc: Disabling bearer [ 312.011978][T23457] syzkaller0: entered promiscuous mode [ 312.023097][T23457] syzkaller0: entered allmulticast mode [ 312.268899][T23467] delete_channel: no stack [ 312.497113][T23495] ipvlan0: entered promiscuous mode [ 312.507408][T23495] ipvlan0: entered allmulticast mode [ 312.538888][T23503] netlink: 'syz.3.5225': attribute type 4 has an invalid length. [ 312.559361][T23495] veth0_vlan: entered allmulticast mode [ 312.585425][T23497] bond0: entered promiscuous mode [ 312.601697][T23497] dummy0: entered promiscuous mode [ 312.613003][T23506] netlink: 'syz.0.5223': attribute type 29 has an invalid length. [ 312.640725][T23514] netlink: 'syz.0.5223': attribute type 29 has an invalid length. [ 312.845047][T23537] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 313.089126][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 313.176325][T23556] Unsupported ieee802154 address type: 0 [ 313.485015][T23579] veth0: entered promiscuous mode [ 313.500478][T23578] veth0: left promiscuous mode [ 313.693283][T23595] veth0_to_bridge: entered promiscuous mode [ 313.716632][T23594] veth0_to_bridge: left promiscuous mode [ 313.800668][T23605] 8021q: VLANs not supported on rose0 [ 313.887796][T23618] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 314.524193][T23673] tipc: Enabled bearer , priority 0 [ 314.687833][T23673] syzkaller0: entered promiscuous mode [ 314.725075][T23673] syzkaller0: entered allmulticast mode [ 314.763551][T23673] tipc: Resetting bearer [ 314.775442][T23679] __nla_validate_parse: 13 callbacks suppressed [ 314.775474][T23679] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5279'. [ 314.808949][T23686] hsr0 speed is unknown, defaulting to 1000 [ 314.819913][T23690] netlink: 108 bytes leftover after parsing attributes in process `syz.4.5281'. [ 314.838408][T23690] netlink: 108 bytes leftover after parsing attributes in process `syz.4.5281'. [ 314.898734][T23690] netlink: 108 bytes leftover after parsing attributes in process `syz.4.5281'. [ 314.956612][T23690] netlink: 108 bytes leftover after parsing attributes in process `syz.4.5281'. [ 314.995500][T23690] netlink: 108 bytes leftover after parsing attributes in process `syz.4.5281'. [ 315.027463][T23690] netlink: 108 bytes leftover after parsing attributes in process `syz.4.5281'. [ 315.047804][T23690] netlink: 108 bytes leftover after parsing attributes in process `syz.4.5281'. [ 315.058581][T23663] tipc: Resetting bearer [ 315.107659][T23690] netlink: 108 bytes leftover after parsing attributes in process `syz.4.5281'. [ 315.120882][T23702] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5286'. [ 315.163126][T23663] tipc: Disabling bearer [ 315.431975][T23717] netlink: 'syz.3.5291': attribute type 1 has an invalid length. [ 315.450897][T23717] netlink: 'syz.3.5291': attribute type 1 has an invalid length. [ 315.461961][T23717] netlink: 'syz.3.5291': attribute type 3 has an invalid length. [ 315.713914][T23749] sit1: entered promiscuous mode [ 315.719917][T23749] sit1: entered allmulticast mode [ 315.731645][T23749] netlink: 'syz.1.5298': attribute type 1 has an invalid length. [ 315.833150][T23757] IPVS: set_ctl: invalid protocol: 44 255.255.255.255:20004 [ 315.851254][T23762] netlink: 'syz.3.5301': attribute type 1 has an invalid length. [ 315.873339][T23762] netlink: 'syz.3.5301': attribute type 1 has an invalid length. [ 315.885391][T23762] netlink: 'syz.3.5301': attribute type 2 has an invalid length. [ 315.895949][T23764] netlink: 'syz.2.5304': attribute type 23 has an invalid length. [ 315.913666][T23766] : entered promiscuous mode [ 315.956898][T23768] netlink: 'syz.3.5305': attribute type 2 has an invalid length. [ 316.065587][T23784] netlink: 'syz.3.5309': attribute type 2 has an invalid length. [ 316.547119][T23824] team0: Device veth1_macvtap failed to register rx_handler [ 316.728376][T23838] netem: change failed [ 316.957446][T23871] IPv6: sit1: Disabled Multicast RS [ 316.968299][T23871] sit1: entered allmulticast mode [ 317.095592][T23882] net_ratelimit: 12 callbacks suppressed [ 317.095613][T23882] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 317.226054][T23885] hsr0 speed is unknown, defaulting to 1000 [ 317.421931][T23905] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 317.503748][T23909] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 317.903058][T23942] veth0: entered promiscuous mode [ 317.951436][T23940] veth0: left promiscuous mode [ 318.062009][T23955] 8021q: adding VLAN 0 to HW filter on device bond5 [ 318.093194][T23955] 8021q: adding VLAN 0 to HW filter on device bond5 [ 318.107588][T23955] bond5: (slave vxcan3): The slave device specified does not support setting the MAC address [ 318.120568][T23955] bond5: (slave vxcan3): Error -95 calling set_mac_address [ 318.167996][T23964] veth11: entered promiscuous mode [ 318.176428][T23964] bond5: (slave veth11): Enslaving as an active interface with a down link [ 318.198601][T23955] 8021q: adding VLAN 0 to HW filter on device bond5 [ 318.564027][T24000] mac80211_hwsim hwsim39 syzkaller0: Caught tx_queue_len zero misconfig [ 319.613992][T24002] vlan3: entered allmulticast mode [ 319.619592][T24002] mac80211_hwsim hwsim34 wlan0: entered allmulticast mode [ 319.627019][T24006] dvmrp0: left allmulticast mode [ 319.674904][T24019] ip6erspan0: entered promiscuous mode [ 319.687866][T24019] ip6erspan0: entered allmulticast mode [ 319.809200][T24036] sctp: [Deprecated]: syz.4.5386 (pid 24036) Use of int in maxseg socket option. [ 319.809200][T24036] Use struct sctp_assoc_value instead [ 319.851843][T24038] syzkaller0: entered promiscuous mode [ 319.857526][T24038] syzkaller0: entered allmulticast mode [ 320.029290][ T7019] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 320.094912][T24071] __nla_validate_parse: 73 callbacks suppressed [ 320.094934][T24071] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5394'. [ 320.143360][T24069] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5396'. [ 320.160696][T24069] netlink: 108 bytes leftover after parsing attributes in process `syz.0.5396'. [ 320.392833][T24107] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5405'. [ 320.425068][T24107] ip6gre2: entered allmulticast mode [ 320.478248][T24111] netlink: 44 bytes leftover after parsing attributes in process `syz.3.5408'. [ 320.777365][T24124] netlink: 164 bytes leftover after parsing attributes in process `syz.2.5412'. [ 320.888508][T24127] netlink: zone id is out of range [ 320.901410][T24127] netlink: zone id is out of range [ 320.908038][T24127] netlink: zone id is out of range [ 320.914365][T24127] netlink: zone id is out of range [ 320.921124][T24127] netlink: set zone limit has 8 unknown bytes [ 321.037732][T24145] tipc: Enabling of bearer rejected, already enabled [ 321.071680][T24158] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5422'. [ 321.083907][T24160] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5424'. [ 321.106831][T24160] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5424'. [ 321.124605][T24158] validate_nla: 9 callbacks suppressed [ 321.124635][T24158] netlink: 'syz.0.5422': attribute type 2 has an invalid length. [ 321.266380][T24175] netlink: 216 bytes leftover after parsing attributes in process `syz.0.5428'. [ 321.427628][T24190] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 321.625863][T24207] syzkaller0: entered promiscuous mode [ 321.632248][T24207] syzkaller0: entered allmulticast mode [ 322.290119][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 322.327024][T24236] IPVS: stopping backup sync thread 24237 ... [ 322.327039][T24237] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0 [ 322.591095][T24260] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 322.598948][T24260] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 323.647315][T24307] tipc: Enabled bearer , priority 0 [ 323.705683][T24312] netlink: 'syz.3.5469': attribute type 2 has an invalid length. [ 324.037651][T24348] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 324.158355][T24359] netlink: 'syz.4.5484': attribute type 3 has an invalid length. [ 324.267734][T24367] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 324.294756][T24368] netlink: 'syz.3.5489': attribute type 1 has an invalid length. [ 324.327560][T24286] tipc: Disabling bearer [ 324.356002][T24368] bond11: (slave bridge4): making interface the new active one [ 324.374628][T24368] bond11: (slave bridge4): Enslaving as an active interface with an up link [ 324.493299][T24383] openvswitch: netlink: nsh attr 0 has unexpected len 1 expected 0 [ 324.637747][T24399] netlink: 'syz.1.5497': attribute type 1 has an invalid length. [ 324.658201][T24394] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 324.673381][T24399] IPv6: sit2: Disabled Multicast RS [ 324.699732][T24399] sit2: entered allmulticast mode [ 324.730815][T24405] tipc: Enabling of bearer rejected, already enabled [ 325.024099][T24425] netlink: 'syz.2.5505': attribute type 1 has an invalid length. [ 325.058628][T24425] smc: net device bond0 applied user defined pnetid SYZ2 [ 325.118399][T24425] smc: removing net device bond0 with user defined pnetid SYZ2 [ 325.162347][T24425] bond0 (unregistering): Released all slaves [ 325.304469][T24447] can: request_module (can-proto-0) failed. [ 325.451795][T24472] __nla_validate_parse: 156 callbacks suppressed [ 325.451824][T24472] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5518'. [ 325.484944][T24472] tipc: Enabling of bearer rejected, failed to enable media [ 325.681732][T24499] sctp: [Deprecated]: syz.4.5522 (pid 24499) Use of int in maxseg socket option. [ 325.681732][T24499] Use struct sctp_assoc_value instead [ 325.685159][T24502] netlink: 23 bytes leftover after parsing attributes in process `syz.1.5526'. [ 325.856085][T24516] netlink: 'syz.3.5532': attribute type 12 has an invalid length. [ 325.874503][T24516] (unnamed net_device) (uninitialized): option primary_reselect: invalid value (255) [ 326.003575][T24534] netlink: 'syz.0.5537': attribute type 12 has an invalid length. [ 326.306319][T24550] netlink: 56 bytes leftover after parsing attributes in process `syz.4.5544'. [ 326.321256][T24552] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 326.583822][T24575] netlink: 'syz.4.5554': attribute type 2 has an invalid length. [ 326.585731][T24576] netlink: 88 bytes leftover after parsing attributes in process `syz.3.5553'. [ 326.647132][T24577] Oops: general protection fault, probably for non-canonical address 0xdffffc001fffe000: 0000 [#1] SMP KASAN PTI [ 326.659074][T24577] KASAN: probably user-memory-access in range [0x00000000ffff0000-0x00000000ffff0007] [ 326.668653][T24577] CPU: 1 UID: 0 PID: 24577 Comm: modprobe Not tainted syzkaller #0 PREEMPT(full) [ 326.677882][T24577] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 326.687958][T24577] RIP: 0010:percpu_ref_get_many+0x8d/0x140 [ 326.693820][T24577] Code: 01 48 c7 c7 00 4b 98 8b be 4b 03 00 00 48 c7 c2 40 4b 98 8b e8 24 bf 71 ff 49 bc 00 00 00 00 00 fc ff df 4c 89 f8 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 ff e8 e4 4d f7 ff 49 8b 07 a8 03 75 62 [ 326.713447][T24577] RSP: 0018:ffffc9000f2176f8 EFLAGS: 00010206 [ 326.719540][T24577] RAX: 000000001fffe000 RBX: ffffffff822bc619 RCX: 6b23922b9d3de500 [ 326.727541][T24577] RDX: 0000000000000000 RSI: ffffffff8be33660 RDI: ffffffff8be33620 [ 326.735550][T24577] RBP: 0000000000000078 R08: 0000000000000000 R09: 0000000000000000 [ 326.743544][T24577] R10: dffffc0000000000 R11: fffffbfff1f47087 R12: dffffc0000000000 [ 326.751535][T24577] R13: ffff8880b873b540 R14: 0000000000000001 R15: 00000000ffff0000 [ 326.759525][T24577] FS: 0000000000000000(0000) GS:ffff888125d1b000(0000) knlGS:0000000000000000 [ 326.768471][T24577] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 326.775070][T24577] CR2: 00007ff38225de9c CR3: 0000000028438000 CR4: 00000000003526f0 [ 326.783065][T24577] Call Trace: [ 326.786362][T24577] [ 326.789333][T24577] refill_obj_stock+0x254/0x850 [ 326.794203][T24577] ? refill_obj_stock+0x116/0x850 [ 326.799233][T24577] __memcg_slab_free_hook+0x127/0x3d0 [ 326.804628][T24577] ? unlink_anon_vmas+0x2cc/0x670 [ 326.809669][T24577] kmem_cache_free+0x223/0x400 [ 326.814498][T24577] unlink_anon_vmas+0x2cc/0x670 [ 326.819369][T24577] free_pgtables+0x72b/0x9c0 [ 326.823974][T24577] ? __pfx_free_pgtables+0x10/0x10 [ 326.829101][T24577] ? __pfx_down_write+0x10/0x10 [ 326.833978][T24577] ? __mas_set_range+0x12f/0x3c0 [ 326.838918][T24577] exit_mmap+0x444/0xb50 [ 326.843174][T24577] ? __pfx_exit_mmap+0x10/0x10 [ 326.847969][T24577] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 326.853614][T24577] ? __pfx_exit_aio+0x10/0x10 [ 326.858299][T24577] ? uprobe_clear_state+0x274/0x290 [ 326.863501][T24577] __mmput+0x118/0x420 [ 326.867574][T24577] exit_mm+0x1da/0x2c0 [ 326.871660][T24577] ? __pfx_exit_mm+0x10/0x10 [ 326.876254][T24577] ? hrtimer_try_to_cancel+0x3d9/0x420 [ 326.881723][T24577] ? rcu_is_watching+0x15/0xb0 [ 326.886520][T24577] do_exit+0x648/0x2300 [ 326.890683][T24577] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 326.896064][T24577] ? __pfx_do_exit+0x10/0x10 [ 326.900663][T24577] ? rcu_is_watching+0x15/0xb0 [ 326.905438][T24577] ? rcu_is_watching+0x15/0xb0 [ 326.910202][T24577] do_group_exit+0x21c/0x2d0 [ 326.914831][T24577] __x64_sys_exit_group+0x3f/0x40 [ 326.919877][T24577] x64_sys_call+0x21f7/0x2200 [ 326.924574][T24577] do_syscall_64+0xfa/0x3b0 [ 326.929090][T24577] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 326.935172][T24577] ? clear_bhb_loop+0x60/0xb0 [ 326.939855][T24577] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 326.945758][T24577] RIP: 0033:0x7ff3823bc6c5 [ 326.950172][T24577] Code: Unable to access opcode bytes at 0x7ff3823bc69b. [ 326.957185][T24577] RSP: 002b:00007ffea10c8a58 EFLAGS: 00000206 ORIG_RAX: 00000000000000e7 [ 326.965597][T24577] RAX: ffffffffffffffda RBX: 00007ff3824bdfe8 RCX: 00007ff3823bc6c5 [ 326.973605][T24577] RDX: 00000000000000e7 RSI: ffffffffffffff88 RDI: 0000000000000001 [ 326.981579][T24577] RBP: 0000000000000001 R08: 00007ffea10c89e8 R09: 0000000000000000 [ 326.989565][T24577] R10: 00007ffea10c8880 R11: 0000000000000206 R12: 0000000000000000 [ 326.997550][T24577] R13: 0000000000000001 R14: 00007ff3824bc680 R15: 00007ff3824be000 [ 327.005551][T24577] [ 327.008601][T24577] Modules linked in: [ 327.013933][T24577] ---[ end trace 0000000000000000 ]--- [ 327.019902][T24577] RIP: 0010:percpu_ref_get_many+0x8d/0x140 [ 327.026124][T24577] Code: 01 48 c7 c7 00 4b 98 8b be 4b 03 00 00 48 c7 c2 40 4b 98 8b e8 24 bf 71 ff 49 bc 00 00 00 00 00 fc ff df 4c 89 f8 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 ff e8 e4 4d f7 ff 49 8b 07 a8 03 75 62 [ 327.046140][T24577] RSP: 0018:ffffc9000f2176f8 EFLAGS: 00010206 [ 327.052528][T24577] RAX: 000000001fffe000 RBX: ffffffff822bc619 RCX: 6b23922b9d3de500 [ 327.060833][T24577] RDX: 0000000000000000 RSI: ffffffff8be33660 RDI: ffffffff8be33620 [ 327.069034][T24577] RBP: 0000000000000078 R08: 0000000000000000 R09: 0000000000000000 [ 327.077272][T24577] R10: dffffc0000000000 R11: fffffbfff1f47087 R12: dffffc0000000000 [ 327.085287][T24577] R13: ffff8880b873b540 R14: 0000000000000001 R15: 00000000ffff0000 [ 327.093526][T24577] FS: 0000000000000000(0000) GS:ffff888125d1b000(0000) knlGS:0000000000000000 [ 327.102488][T24577] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 327.109122][T24577] CR2: 00007ff38225de9c CR3: 0000000028438000 CR4: 00000000003526f0 [ 327.117137][T24577] Kernel panic - not syncing: Fatal exception [ 327.123599][T24577] Kernel Offset: disabled [ 327.127931][T24577] Rebooting in 86400 seconds..