last executing test programs: 2.835081733s ago: executing program 0 (id=4513): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x20100, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22fff6) (async, rerun: 32) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) (rerun: 32) ioctl$TUNSETOFFLOAD(r1, 0x4004743d, 0x110e22fff6) (async) close(r0) write$cgroup_type(r1, &(0x7f0000000280), 0x9) r2 = socket(0x1e, 0x4, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x20000040}, 0x4041) (async, rerun: 64) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) (rerun: 64) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) (async) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r3}, 0x8) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000140)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x18, 0xc, &(0x7f0000000d80)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfa58, 0x0, 0x0, 0x0, 0xe}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f0000000980)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, 0x94) pipe(&(0x7f0000002740)={0xffffffffffffffff}) sendmmsg$unix(r5, 0x0, 0x0, 0x4041) (async) getsockname$packet(r5, &(0x7f0000000040), &(0x7f00000000c0)=0x14) (async) ioctl$PPPIOCSCOMPRESS(r5, 0x4010744d) (async) socket(0x2d, 0x2, 0x0) 2.113122873s ago: executing program 0 (id=4525): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f000000f480), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f000000f780)={0x0, 0x0, &(0x7f000000f740)={&(0x7f000000f680)={0x28, r1, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4010}, 0x44040) ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f00000002c0)) r2 = socket$inet6(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) recvfrom$inet6(r2, &(0x7f0000000180)=""/50, 0x32, 0x10040, &(0x7f0000000200)={0xa, 0x4e24, 0x1, @empty, 0x7}, 0x1c) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x2, {0x0, 0x0, 0x0, 0x0, {0xb}, {0xfff3, 0xffff}, {0xffe0, 0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$igmp(0x2, 0x3, 0x2) bind$inet(r6, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000003c000b0000000000fcffffff04000000040000800c0001"], 0x24}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000c80)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000000)=ANY=[@ANYBLOB="48000000140009052cbd7000fddbdf25022000cb", @ANYRES32=r7, @ANYBLOB="080004006401010108001900ac1414aa08000400ac1414bb08000200ffffffff0800090031000000080009"], 0x48}, 0x1, 0x0, 0x0, 0x4040014}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) sendto$inet6(r2, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) r8 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$sock_int(r8, 0x1, 0x2d, &(0x7f0000000080)=0x3, 0x4) sendmsg$nl_route(r8, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=@delnexthop={0x60, 0x69, 0x10, 0x70bd2d, 0x25dfdbfb, {}, [{0x8, 0x1, 0x2}, {0x8, 0x1, 0x1}, {0x8, 0x1, 0x2}, {0x8, 0x1, 0x1}, {0xfffffffffffffdc6, 0x1, 0x1}, {0x8, 0x1, 0x2}, {0x8, 0x1, 0x1}, {0x8, 0x1, 0x2}, {0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x4}, 0x20008010) 1.970525374s ago: executing program 4 (id=4529): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) (async, rerun: 64) close(r1) (async, rerun: 64) r2 = socket$kcm(0x10, 0x2, 0x10) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r3, &(0x7f0000000040)={0x1f, @none}, 0x8) (async, rerun: 64) listen(r3, 0x1) (rerun: 64) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r4, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8) listen(r4, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbfd, 0x4}, 0xc) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="1400000017000b63d25a80648c2594f917a3c92b", 0x14}], 0x1}, 0x0) (async) ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f0000000100)) 1.918048274s ago: executing program 0 (id=4531): r0 = socket(0x22, 0x4, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000300)=0x2) (async) ioctl$PPPIOCSACTIVE(r1, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0}) (async) pwritev(r1, &(0x7f0000000100)=[{&(0x7f00000000c0)="1832", 0x2}], 0x1, 0xa, 0x10) (async) read(r1, 0x0, 0x300) (async) r2 = socket$inet_udplite(0x2, 0x2, 0x88) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000007f00)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x5, [@union={0x0, 0x1, 0x0, 0x5, 0x0, 0x0, [{0x3, 0x2}]}, @func={0x3, 0x0, 0x0, 0xc, 0x4}]}, {0x0, [0x0, 0x0, 0x2e]}}, 0x0, 0x41}, 0x28) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c000200200000001f000000060001000000000008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}}, 0x0) 1.484073454s ago: executing program 4 (id=4532): r0 = socket(0xa, 0x2400000001, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) setsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x8, 0x0, 0x0) ioctl$sock_ifreq(r0, 0x8943, &(0x7f0000000100)={'vlan0\x00', @ifru_names='veth0_to_bond\x00'}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_PMKSA(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010029007000fbdb5025da0fc45d08000300", @ANYRES32=r5, @ANYBLOB="0a00060089aadc5899e7000014005500180922bfe197352be283fbf4123961ce08001f0103000000"], 0x44}, 0x1, 0x0, 0x0, 0x4000041}, 0x20004800) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCSIFADDR(r6, 0x8916, &(0x7f0000000040)={'wlan1\x00', {0x2, 0x4e23, @broadcast}}) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xd, 0x12, r7, 0x1f4d2000) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b7070000000000006110180000000000040000ffffffe500950000007c7b0000c1f9df0652510c14bd894755d550838af70371133f0010ad502a7d9d7f"], &(0x7f00000002c0)='syzkaller\x00', 0x5, 0xc3, &(0x7f0000000300)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080), 0x10, 0x0, r7}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) socket$kcm(0x29, 0x5, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='percpu_create_chunk\x00', r8}, 0x10) 1.400894655s ago: executing program 3 (id=4535): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) (async) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@gettaction={0x28, 0x32, 0x49872f79ea07a1a, 0x70bd2d, 0x25dfdbfe, {}, [@action_gd, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x0, 0x4, 0x7}]}, 0x28}, 0x1, 0x0, 0x0, 0x60491}, 0x20048850) (async, rerun: 32) sendmsg$nl_route_sched(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r4, {0x9, 0xffff}, {}, {0x7}}, [@filter_kind_options=@f_route={{0xfffffffffffffe8d}, {0xc, 0x2, [@TCA_ROUTE4_FROM={0x8, 0x3, 0xa0}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) (rerun: 32) r5 = socket$nl_route(0x10, 0x3, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x14, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000ff7f00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000018010000252073250000000000202020"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000006d0001000000000000000000003c0000", @ANYRES32=r0, @ANYBLOB="00000000000000001800348014006d1bcd0dbf1993498bf537c7c44a79c017e13dcb43c369b2b8cdffa5f2aa33a3063fca5c1ab70100"/66], 0x38}}, 0x0) (async, rerun: 32) r6 = socket$netlink(0x10, 0x3, 0xc) (rerun: 32) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r8) r9 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r9) (async) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYRESOCT=r5], 0x38}, 0x1, 0x0, 0x0, 0xc000801}, 0x20040012) (async) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r10) (async, rerun: 32) r11 = socket$unix(0x1, 0x1, 0x0) (async, rerun: 32) r12 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r13, {0x0, 0x3}, {0xffff, 0xb}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) (async) sendmsg$nl_route_sched(r12, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r13, {0x0, 0x5}, {0x2, 0xffe0}, {0xa, 0xfff3}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0xbe, 0xc13, 0x2, 0x0, 0x2}, 0x5, 0x4, 0x81, 0x3, 0xa, 0x11, 0x4, 0x12, 0x7, 0x69c, {0xae0, 0x6, 0x7, 0x7, 0x0, 0x20000ea1}}}}]}, 0xfffffffffffffea1}, 0x1, 0x0, 0x0, 0x4008805}, 0x0) (async) ioctl$SIOCSIFHWADDR(r10, 0x8922, &(0x7f0000002280)={'bond_slave_1\x00', @random="001c00040008"}) syz_emit_ethernet(0x2a, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa080045000000000000000002907800000000e00000011100907800000000ed571556dd9a2641fa330be7e206e7dd1077d5aad5859e2e54e8aaf597382f8e8b85d0f908e26b230e965fb51ebf2769684de1363159870f66c9fcf5"], 0x0) 1.344071223s ago: executing program 0 (id=4536): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000100)={0x40000000, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="0218000010000000000000000000000003000600000000000200000400000000000000000000000008001200000000000000000000000000170000000000000000000000000000007f000001000000000000000000000000fc020000000000000000000000000000030005000000000002"], 0x80}}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x76, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x54}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc9ab}]}, &(0x7f0000000000)='GPL\x00'}, 0x94) 1.265029579s ago: executing program 0 (id=4538): r0 = syz_init_net_socket$ax25(0x3, 0x2, 0xca) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2}, 0x94) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000080)={r0}) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000380), r2) sendmsg$SEG6_CMD_SET_TUNSRC(r2, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000540)=ANY=[@ANYBLOB="06199400a1814ab36e20b8ea9895fe5b9bd0f1bda3e6470c2b77fe37ca205d384a377f00141a36d76ecb04", @ANYRES16=r3, @ANYBLOB="100027bd7000fcdbdf2503000000080002000700000005000600100000000c000400090000000800000008000200050000000500050001000000050006000e000000100004000004000002000000060000000800020007000000"], 0x60}, 0x1, 0x0, 0x0, 0x4004}, 0x4000004) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@ipv4_newroute={0x12, 0x1a, 0x1, 0x0, 0x200000, {0x2, 0x20, 0x20, 0x0, 0xfc, 0x0, 0x0, 0x4}}, 0x1c}}, 0x20000000) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000500)={0x8, 0x2, 0xabd, 0x8}, 0x14) getsockopt$llc_int(r2, 0x10c, 0x5, &(0x7f0000000140), &(0x7f0000000300)=0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000003c0)='sys_enter\x00', r1}, 0x18) recvmsg(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x2000) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000cc0)=@newtaction={0x84, 0x30, 0x12f, 0x0, 0x0, {0x0, 0x0, 0x1be}, [{0x70, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x5c, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x4}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x84}}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) syz_extract_tcp_res(&(0x7f0000000040)={0x41424344}, 0x12, 0x2) r9 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) ioctl$PPPIOCNEWUNIT(r9, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCSFLAGS1(r9, 0x40047459, &(0x7f00000000c0)=0x41) pwritev(r9, &(0x7f0000000840)=[{&(0x7f0000000880)="80fd02000000", 0x6}], 0x1, 0xfffffffc, 0x0) write$tun(r6, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x27}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, r8, 0x0, 0x5, 0xb, 0x0, 0x0, 0x0, 0x28, {[@window={0x9, 0x3}, @timestamp={0x5, 0xa, 0x0, 0x700}, @generic={0x0, 0x8, "d58838000391"}]}}}}}}, 0x4e) 1.183956652s ago: executing program 2 (id=4539): unshare(0xc040480) (async) unshare(0xc040480) r0 = socket$unix(0x1, 0x1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000900000000000000213f0000c50000000e800000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='mmap_lock_acquire_returned\x00', r1}, 0x10) bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r2}, 0x8) (async) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r2}, 0x8) write$cgroup_int(r3, &(0x7f00000001c0), 0xfffffdef) (async) write$cgroup_int(r3, &(0x7f00000001c0), 0xfffffdef) bind$unix(r0, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async) bind$unix(r0, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r4, &(0x7f0000000980), 0xe) (async) bind$bt_l2cap(r4, &(0x7f0000000980), 0xe) listen(r4, 0x0) ioctl$sock_SIOCINQ(r4, 0x5411, 0x0) bind$unix(r0, &(0x7f0000000040)=@abs={0x1, 0x0, 0x4e22}, 0x6e) (async) bind$unix(r0, &(0x7f0000000040)=@abs={0x1, 0x0, 0x4e22}, 0x6e) socketpair(0x2a, 0x6, 0xe, &(0x7f0000000340)) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000300)={r0, 0xee64, 0x6, 0x5}) r6 = syz_genetlink_get_family_id$gtp(&(0x7f00000003c0), r5) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), r7) sendmsg$TIPC_CMD_DISABLE_BEARER(r7, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x30, r8, 0x100, 0x70bd27, 0x25dfdbff, {{}, {}, {0x14, 0x13, @l2={'eth', 0x3a, 'netdevsim0\x00'}}}, ["", "", "", "", ""]}, 0x30}}, 0x8000) sendmsg$GTP_CMD_GETPDP(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000000200000008000700", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000200"], 0x2c}}, 0x0) 947.193867ms ago: executing program 4 (id=4541): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(r0, &(0x7f00000002c0)={{0x6, @rose, 0x400008}, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(0x3) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newtaction={0x70, 0x30, 0x1, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x3ff, 0x4000000, 0x0, 0x0, 0x1}}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_RATE={0x8, 0x3, 0xfffffffe}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x1c, 0x52, 0x1, 0x0, 0x0, {0x2}, [@typed={0x8, 0x6, 0x0, 0x0, @fd}]}, 0x1c}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r5, 0x0, 0x0) r6 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r6, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r6, 0x0, 0xca, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r7, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x3e, &(0x7f0000000340)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb0800450037860819cfc796f0d4529ae3dd175aecfa9690cc0a9c5b6c247310cc972e50a2003000000020fc9144da7f2f4de00003000306907840fa000945f4ff0000650002010400030a0100"/100], 0x0) r8 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r8, 0x0, 0xca, &(0x7f0000000080)={0x1, 0x1, 0x4, 0x2, @vifc_lcl_addr=@loopback, @remote}, 0x10) setsockopt$MRT_ADD_MFC_PROXY(r8, 0x0, 0xd2, &(0x7f00000000c0)={@multicast1=0x1c, @empty=0xe0000300, 0x0, "fc79348df081496d0420922f45a71c1daa8b610468cd140526c41efcd3a4a422", 0x3, 0x1, 0x85}, 0x3c) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b700000081140000bfa30000000000000703000000feffff720af0fff8ffffff71a4f0ff0000000071104e00000000001d300500000000004704000001ed00000f030000000000001d44020000000000620a00fe040400007203000000000000b500f7ff000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a8641aa05a1336b3b4c4becea710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fe51bef7af9aa0d7d600c095199fe3380d28e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51bf900000000000000d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343cccc953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93020000000000000080e69db384ac7eeedcf2ba3a9508f9d6aba582a896a9f1e096df6ecea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00e10000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d490cba8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e1461173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b583cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f006694d461b76a58d88cf0f520310a1e80dc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6032399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c00000000000000f59dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ed1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef67cf0216e2d81e6127bd9d7fab28800eaab2355992f8ce4cd38add4b272c0bee4076ca4847ffa691cf78fb7ec212bad3bef29f577ea7159b7f3025b3d977ff7c9102"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) r9 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0x3}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0xfffffffe}}]}, 0x38}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 887.468999ms ago: executing program 2 (id=4542): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0000000400000004000000120000000000001400", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) (async) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r2, 0x5}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB='&'], 0x10) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r1}, &(0x7f0000000140), &(0x7f0000000180)=r0}, 0x20) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYRESOCT=r2], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='xprtrdma_prepsend_failed\x00', r5, 0x0, 0x41}, 0x18) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1a, 0x1, &(0x7f0000000000)=@raw=[@exit], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) (async) sendmsg$ETHTOOL_MSG_COALESCE_SET(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x34, r7, 0x1, 0x4, 0x0, {0x10}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_COALESCE_USE_ADAPTIVE_RX={0x5}]}, 0x34}}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="240000001800094400000000000000000a000001000000d75a12eca63dca08c4efb5859480d5018fe4c62f84bf291ce55e880dd7689943a254980a6698d52a2708fa973c22ecadbeac41bfbf263a7c9297a2c7b792389ae1acd82cb532a806bff9b4e245c3bf1dc43412743fe0d5f96b25b85325f41d528b3acea956f08d1468915bcd7436970b138516421992f7be96c32b1310a7a1"], 0x24}}, 0x0) 886.242485ms ago: executing program 1 (id=4543): read$alg(0xffffffffffffffff, &(0x7f0000000080)=""/204, 0xcc) (async) r0 = socket(0x10, 0x3, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="9febb40018"], 0x0, 0x4a}, 0x20) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000180)=0x6) (async) sendto$inet6(r0, &(0x7f0000000000)="7800000018002507b9409b14ffff00000202be04020506050e130204430009003f0020480a0000000d0085a168d0bf46d32345653600648d27000b000a00000049935ade4a460c89b6ec0cff3959547f509058ba86c902000000004a3200040016000b000a0000000000e000e218d1ddf66ed538f2523250", 0x78, 0x0, 0x0, 0x0) (async) getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x80, &(0x7f00000001c0)={'broute\x00', 0x0, 0x0, 0x0, [0x7, 0x8000, 0x1, 0x465, 0x2e4]}, &(0x7f0000000240)=0x78) 811.794626ms ago: executing program 2 (id=4544): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000002000010000000000000000000a000080ffffffffffff0000140011"], 0x30}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="940000001000010400"/20, @ANYRESOCT=r0, @ANYRES32=r0, @ANYRESHEX=r1, @ANYRES64=r1], 0x94}}, 0x4000) 784.038018ms ago: executing program 3 (id=4545): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r1) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000640)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, r1}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000400)=[{0x6}]}, 0x10) getsockopt$sock_buf(r3, 0x1, 0x1a, 0x0, &(0x7f00000000c0)) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000011c0)=@newtaction={0x8c, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x78, 0x1, [@m_tunnel_key={0x74, 0x1, 0x0, 0x0, {{0xf}, {0x44, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @multicast1}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @remote}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x8c}}, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r5 = socket$netlink(0x10, 0x3, 0x8000000004) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r6, 0x40305829, &(0x7f0000000240)={0x1100, 0x0, 0x4, 0x7fffffffffffffff}) writev(r5, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff81004e230e227f000001925aa80020007b00090080007f000001e809000000ff0000f03ac71002000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005d000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) writev(0xffffffffffffffff, 0x0, 0x0) r7 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14010000", @ANYRES16=r7, @ANYBLOB="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"], 0x114}}, 0x0) 700.046244ms ago: executing program 1 (id=4546): getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000080)={0x1, [0x0]}, &(0x7f0000000100)=0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="9feb01001800000000000000200000002000000002000000000000000200000d"], 0x0, 0x3a, 0x0, 0x8}, 0x20) r1 = socket$inet6(0xa, 0x1, 0x6) getsockopt$sock_int(r1, 0x1, 0x22, 0x0, &(0x7f0000000880)) setsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000140)=ANY=[@ANYRES32=r0, @ANYBLOB="46675195c52a"], 0xa) socket$inet_tcp(0x2, 0x1, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="140100002b00010000000000ffdbdf25020100800c0002000600010000000000140001", @ANYRESOCT=r2], 0x114}], 0x1, 0x0, 0x0, 0x48bdf540c9c862c1}, 0x0) 689.312895ms ago: executing program 2 (id=4547): writev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000000)="3900000013000b4700bb65e1c3e4ffff0100000040000000560000022500000019000a001000000007fd", 0x2a}], 0x1) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x6, [@enum={0x2, 0x0, 0x0, 0x6, 0x4, [{0xd, 0x9}, {}, {0x1, 0x1}, {0xe, 0x6}, {0x7, 0x80000000}, {0x6, 0xe}, {0x2, 0x7}, {0x1, 0xb6c}, {0xf, 0x6}, {0xf, 0x1}]}]}, {0x0, [0x0, 0x0, 0x2e, 0x30]}}, 0x0, 0x2a}, 0x36) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x38, r0, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0xf4, 0x2e}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x177f}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}]]}, 0x38}, 0x1, 0x0, 0x0, 0xd37697ff280d3c0e}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYRESOCT, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000800000000000000000000000000000000000000000000000000004cf41bfcabb582f4d03993429a2321e4af49095dbacf682ae79815b44a02581f18c59b7f27b2786703a02fdde69cfd309f4b4ac99af62561ea6da88a39cfdac58906ae534e8b4787de68fc8eea269520ccc51dbac00a744e3cb62aacb2c526541fa58b3172de5ee08d4b9d95ea03770120acc7a1caefa77a67b415895304c75d293e946bee5e8be6d7faa7537a040d47d8a27880bd4ac0b005a6aca192db8a75f6ac06000000000000"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x5, 0xa, &(0x7f0000000680)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018100000", @ANYRES32=r4, @ANYBLOB="00000000000000004e800000000000001800000000000000000000000000000095000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x4, 0xfe, &(0x7f00000004c0)=""/254}, 0x80) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{r4}, &(0x7f0000000180), &(0x7f00000001c0)=r5}, 0x20) 683.819149ms ago: executing program 4 (id=4548): r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) sendto$inet6(r0, &(0x7f0000000040)="5ad7601321e91f50e5041c45fc7bf4e307501b9c3beb99968a8c1305cadad06c26d7758271962d43e24d7384aa1e544321670bd7a0687e061d668e4692fb90d4d1c1fda96457c5981e496340d8721c8daee7b73fdbcd90e43e3b29e8c74c86e9ae69", 0x62, 0x0, &(0x7f00000000c0)={0xa, 0x4e24, 0x47, @local, 0x80000001}, 0x1c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0) sendmsg$NL80211_CMD_RELOAD_REGDB(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r2, 0x0, 0x70bd26, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x44}, 0x8000) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000580)={'ip6_vti0\x00', &(0x7f0000000500)={'syztnl2\x00', 0x0, 0x4, 0xa0, 0x3c, 0x2a8, 0x6, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, 0x10, 0x700, 0xfffffffc, 0x8}}) sendmmsg$inet(r1, &(0x7f0000002780)=[{{&(0x7f0000000280)={0x2, 0x4e23, @loopback}, 0x10, &(0x7f00000004c0)=[{&(0x7f00000002c0)="a489bf0f7ce5c036b85cc77a2a73afbe07fbc4ad9ea3fcc4b9e13b84051fdedbb74cff654d8c35ff89a455babcf32863347b206f5d8c9ed9a79dfb3f3ee7015aedb4269bed93990c5d31e090ba9e55922f123fb9b92a6379e1e816ee3245c9555ec5c98ce022adb725b818e4bfdbef352b53c30cad02478d4c92ed0bdb683f7335e167c64c4b157de4da2de74e52c22f1f33bead30b7721dfeb1bd57d163031fe16c5d1b6fca2a46e9e1c5311f3e97492de9dfec9a596cf2d0739003", 0xbc}, {&(0x7f0000000380)="9828e745fb652e29160ad156e2009f5cb473f62c331a0e515da87909b433a5c19b1783b6078aa5704c881e2bbb14f689ea3e962e92fdac5027a07b5a318b3631b0bc2afe99f9fa1bcdda229a019f9b34264a5734c2b3ec55a3", 0x59}, {&(0x7f0000000400)="5f741b1327183be013a4c849dca874ecb996078be875c75fb997b4835a050e215731e9370247a7de84c20af61d519aee883c592914b060e6ed05a39ffb2c47ee8575dfc62930497915a13288ed9980928df6ef13105e3c5c7bfa26ed321ba601abe0a5ce9e8d75b61ee30e1568776ce3d20ff8ad3bee2ac56e1767e851687e70b87362588d0aefa0e585a53ae3b32cf4a0a544e8ae3e35af7f827aa2cbaf67e8", 0xa0}], 0x3, &(0x7f00000005c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @loopback, @dev={0xac, 0x14, 0x14, 0x21}}}}], 0x20}}, {{&(0x7f0000000600)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10, &(0x7f0000002680)=[{&(0x7f0000000640)="b3df5de5263c86d6dca90c63a969668783dda953d825f4e1c54157b778693f5816ce9e706f63d3c5d95758f4c219f8249dce24f4f618", 0x36}, {&(0x7f0000000680)="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", 0x1000}, {&(0x7f0000001680)="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", 0x1000}], 0x3, &(0x7f00000026c0)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x7}}, @ip_retopts={{0x74, 0x0, 0x7, {[@end, @lsrr={0x83, 0x1b, 0x93, [@loopback, @local, @local, @empty, @remote, @dev={0xac, 0x14, 0x14, 0x3d}]}, @cipso={0x86, 0x23, 0x2, [{0x6, 0xf, "457bc7dc8113d255ad7b01c3e9"}, {0x7, 0xe, "243bdd086cc0ca28e84087c6"}]}, @timestamp={0x44, 0x24, 0x50, 0x0, 0xc, [0x2, 0x4, 0x800, 0x4, 0x2fe455bf, 0x2, 0x10000, 0x80]}]}}}], 0x90}}], 0x2, 0x40) getsockopt$IP_VS_SO_GET_TIMEOUT(r3, 0x0, 0x486, &(0x7f0000002800), &(0x7f0000002840)=0xc) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000002880)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0xa95, '\x00', r4, 0xffffffffffffffff, 0x3, 0x3, 0x4}, 0x50) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000002940), r0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000002a00)={'syztnl2\x00', &(0x7f0000002980)={'tunl0\x00', r4, 0x10, 0x0, 0x8f, 0x59f7, {{0x16, 0x4, 0x3, 0x2a, 0x58, 0x68, 0x0, 0xc, 0x29, 0x0, @rand_addr=0x64010101, @empty, {[@timestamp_prespec={0x44, 0x44, 0xed, 0x3, 0x7, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x401}, {@multicast1, 0x3de}, {@local, 0x3}, {@remote, 0x7ff}, {@loopback, 0x8}, {@rand_addr=0x64010101, 0x7}, {@multicast2, 0x200}, {@loopback, 0x2}]}]}}}}}) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, &(0x7f0000002bc0)={&(0x7f0000002900)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000002b80)={&(0x7f0000002a40)={0x10c, r5, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x3c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x689b5a7fa5ef26e1}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x10}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x40, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x80}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x14}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x38, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x80}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r6}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x34, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1f}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010100}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}]}, 0x10c}}, 0x4004000) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000002c80)={'gretap0\x00', &(0x7f0000002c00)={'ip_vti0\x00', r6, 0x7, 0x8, 0x9, 0x709f, {{0x17, 0x4, 0x0, 0x8, 0x5c, 0x64, 0x0, 0x8, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, {[@end, @timestamp_addr={0x44, 0xc, 0xf1, 0x1, 0x8, [{@multicast1, 0x40}]}, @ra={0x94, 0x4, 0x1}, @timestamp_prespec={0x44, 0x34, 0x9f, 0x3, 0xd, [{@dev={0xac, 0x14, 0x14, 0x41}, 0x400}, {@empty, 0x5}, {@multicast1, 0x9}, {@multicast2, 0x8}, {@local, 0x4fa}, {@local, 0x401}]}]}}}}}) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000002cc0)={0x0, 0x9}, &(0x7f0000002d00)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000002d40)={0x1000, 0x820a, 0xfffffff9, 0x7, r7}, 0x10) r8 = accept4$llc(r0, &(0x7f0000002d80)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, &(0x7f0000002dc0)=0x10, 0x80000) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f0000002e00)) r9 = socket(0x2b, 0x3, 0x7) setsockopt$MRT_DEL_VIF(r9, 0x0, 0xcb, &(0x7f0000002e40)={0x0, 0x1, 0x9, 0x8, @vifc_lcl_addr=@private=0xa010101, @rand_addr=0x64010102}, 0x10) ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r8, 0x8982, &(0x7f0000002e80)={0x2, 'pimreg\x00', {0x5}, 0xc}) getsockname$netlink(r0, &(0x7f0000002ec0), &(0x7f0000002f00)=0xc) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r9, 0x84, 0x20, &(0x7f0000002f40)=0xfffffffc, 0x4) ioctl$sock_SIOCGIFCONF(r9, 0x8912, &(0x7f0000002fc0)=@req={0x28, &(0x7f0000002f80)={'team_slave_1\x00', @ifru_map={0x32a3, 0x2, 0x800, 0xfe, 0xe, 0x3}}}) getsockopt$netrom_NETROM_IDLE(r0, 0x103, 0x7, &(0x7f0000003000)=0x5, &(0x7f0000003040)=0x4) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000003640)=@broute={'broute\x00', 0x20, 0x4, 0x548, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000030c0], 0x0, &(0x7f0000003080), &(0x7f00000030c0)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{0x11, 0xc, 0x806, 'batadv_slave_0\x00', 'dvmrp0\x00', 'pim6reg0\x00', 'dvmrp0\x00', @remote, [0xff, 0x0, 0xff, 0x0, 0xff, 0xff], @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, [0x0, 0xff, 0x0, 0xff], 0x116, 0x14e, 0x19e, [@rateest={{'rateest\x00', 0x0, 0x48}, {{'veth1_to_bond\x00', 'team_slave_0\x00', 0x10, 0x3, 0xfffffffb, 0x5, 0x1, 0x9, {0x2}, {0x1}}}}, @cluster={{'cluster\x00', 0x0, 0x10}, {{0x4d2, 0x2, 0x7}}}], [@common=@dnat={'dnat\x00', 0x10, {{@link_local, 0x12}}}], @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x12000, 'syz0\x00'}}}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff, 0x2, [{0x11, 0x43, 0x800, 'gre0\x00', 'veth0_to_team\x00', 'syzkaller1\x00', 'ip6gre0\x00', @local, [0xff, 0x0, 0xff, 0xff], @empty, [0xff, 0x0, 0x0, 0xff, 0xff, 0xff], 0x6e, 0x6e, 0x9e, [], [], @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x1}}}}, {0x5, 0x20, 0x88e5, 'veth1_virt_wifi\x00', 'nicvf0\x00', 'syzkaller0\x00', 'team0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}, [0xff, 0xff, 0xff, 0xff], @random="8e7753e0b310", [0xff, 0x0, 0xff], 0x6e, 0x116, 0x14e, [], [@common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x2}}}, @common=@NFLOG={'NFLOG\x00', 0x50, {{0x6, 0x3, 0x7, 0x1, 0x0, "fac99e56fbcd72a8fa00d1161d6b27f2cc6c50787094b18e55097e0cd5dfb4783e6809d7b6a0699be72502498a1e5269a78a8306e0a5e1330161ae9364a35d57"}}}], @common=@mark={'mark\x00', 0x10, {{0xffffffd0, 0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x3, 0xffffffffffffffff, 0x1, [{0x1b, 0x44, 0x88e5, 'syzkaller0\x00', 'veth0_to_bridge\x00', 'vcan0\x00', 'team_slave_1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, [0xff, 0x0, 0x0, 0x0, 0x0, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, [0xff, 0x0, 0xff, 0xff, 0x0, 0xff], 0xfe, 0xfe, 0x12e, [@limit={{'limit\x00', 0x0, 0x20}, {{0x5, 0x1c00, 0x1, 0x2, 0x3, 0x1}}}, @limit={{'limit\x00', 0x0, 0x20}, {{0xf93e, 0x1b85, 0x80000001, 0x4, 0xc99, 0x4}}}], [], @common=@CLASSIFY={'CLASSIFY\x00', 0x8}}]}]}, 0x5c0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000003700)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_BEACONS(r9, &(0x7f00000037c0)={&(0x7f00000036c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000003780)={&(0x7f0000003740)={0x28, r2, 0x200, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x6, 0x78}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x84) bind$inet6(r9, &(0x7f0000003800)={0xa, 0x4e24, 0x5, @loopback, 0x9}, 0x1c) getsockname$llc(r0, &(0x7f0000003840)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000003880)=0x10) 559.734935ms ago: executing program 1 (id=4549): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)=ANY=[@ANYBLOB="15000000", @ANYRES16=r1, @ANYBLOB="0106000000000000000009000000240004801300010062726f4e64636173742d6c69666b00000c000760d3000500000000004870baf631c17ffa3b6fd3c9"], 0x38}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0xa, 0x922000000003, 0x11) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="7800000010000304000000000000000000007400", @ANYRES32=0x0, @ANYBLOB="00000000600000005800128008000100677470004c00028008000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="0800030002000000080007006401010108000700ac1414bb0800020003"], 0x78}}, 0x0) r4 = socket$pppoe(0x18, 0x1, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)={0x14, r6, 0x601, 0x70bd25}, 0x14}}, 0x0) ioctl$PPPOEIOCDFWD(r4, 0xb101, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWRULE={0x7c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_NG_DREG={0x8}]}}}]}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x2}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_ID={0x8}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x5}, @NFTA_RULE_POSITION_ID={0x8}, @NFTA_RULE_COMPAT={0xc, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x11}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0xa4}}, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000280)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x88, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x0, 0x5, 0x0, {0x5, 0x4, 0x0, 0x25, 0x9b0d, 0x67, 0x3, 0x80, 0x0, 0x5, @multicast1, @multicast2}}}}}}, 0x0) sendmsg$nl_generic(r7, &(0x7f00000026c0)={0x0, 0x0, &(0x7f0000002680)={&(0x7f0000002640)=ANY=[@ANYBLOB="140000e7b0006c002cbd7000ffdbdf250c000000"], 0x14}, 0x1, 0x0, 0x0, 0x8001}, 0xc804) r9 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_ifreq(r9, 0x8995, &(0x7f0000000180)={'bond0\x00', @ifru_names='rose0\x00'}) r10 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000f10000000000000020000018010000202070250000000000202020db09f8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000ca00000095"], &(0x7f0000000400)='GPL\x00', 0x1}, 0x94) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x44, r10, 0x1, 0x0, 0x20, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private2}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @remote}]}, 0x44}, 0x1, 0x0, 0x0, 0x1f97a012a3ecf389}, 0x0) 557.898833ms ago: executing program 3 (id=4550): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000791038000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) r0 = socket$inet6(0xa, 0x3, 0x8000000003c) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0xa, 0x4e20, 0x6, @dev={0xfe, 0x80, '\x00', 0x16}}, 0x1c) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000000), 0x10) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$can_bcm(r1, &(0x7f0000000280)={&(0x7f0000000080)={0x1d, r3}, 0x10, &(0x7f0000000240)={&(0x7f0000000180)={0x1, 0x30, 0x6, {}, {0x77359400}, {0x0, 0x0, 0x1, 0x1}, 0x1, @can={{0x3, 0x0, 0x1, 0x1}, 0x0, 0x1, 0x0, 0x0, "cf005e895979fa26"}}, 0x48}, 0x1, 0x0, 0x0, 0x8800}, 0x1) r4 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000006c0)={'ip6tnl0\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x12, &(0x7f0000000180)=0x4abf, 0x4) unshare(0x22020400) r6 = socket$rds(0x15, 0x5, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000300)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@bridge_newvlan={0x18, 0x70, 0x239, 0x70bd2c, 0x25dfdbfb, {0x7, 0x0, 0x0, r8}}, 0x18}, 0x1, 0x0, 0x0, 0x800}, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r4, 0x10e, 0x1, &(0x7f0000000100)=0xe, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) setsockopt$RDS_FREE_MR(r6, 0x114, 0x3, &(0x7f0000000140)={{0xbd4f, 0x4}, 0x8}, 0x10) r9 = socket$netlink(0x10, 0x3, 0x15) writev(r9, &(0x7f0000000040)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0202ff000040010000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100030c100000000100ffffffff", 0x58}], 0x1) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000840)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x4, 0x8002}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0xba}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) 528.896346ms ago: executing program 4 (id=4551): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0xa8, 0x0, &(0x7f0000000100)="b9ff030f6044238cb89e14f088a81bff886411004048633321fbac14142ce934a0a662079f4b4d2f87e56dca6aab845013f208001a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc04308", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xe, 0x4010, r1, 0x952de000) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, 0x7, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0x3}, [@IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x7d5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x8004}, 0x10) r4 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r4, 0x6, 0x5, 0x0, &(0x7f0000001200)) r5 = accept4$packet(r1, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000002c0)=0x14, 0x180000) setsockopt$sock_linger(r5, 0x1, 0xd, &(0x7f0000000300)={0x1, 0xd6}, 0x8) setsockopt$inet6_tcp_TLS_RX(r0, 0x6, 0x2, &(0x7f0000000200)=@gcm_256={{0x303}, "00446ea57af8aa68", "298d6827aa69b606c334f96f08dacb6dce82172d41745b5333c8728981bd1d1b", "b42a7ac4", "eebab993804f32be"}, 0x38) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100626f6e64440000000c00028008001200feffffff"], 0x3c}}, 0x0) ioctl$F2FS_IOC_SET_PIN_FILE(r0, 0x4004f50d, &(0x7f0000000040)=0x1) 471.125165ms ago: executing program 2 (id=4552): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)={0x14, 0x2, 0x6, 0x101}, 0x14}}, 0x2400c001) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x61}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$packet(0x11, 0x2, 0x300) r4 = socket(0x1, 0x80802, 0x0) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f00000000c0)={0x10000001}) epoll_pwait(r5, &(0x7f0000000080)=[{}], 0x1, 0x80000000, 0x0, 0x0) shutdown(r4, 0x1) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000b80)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x40000, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0x0, 0x10}, {0xc, 0xffff}, {0x0, 0xed27c9fa5277b9b7}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_TARGET={0x8, 0x3, 0x8}]}}]}, 0x3c}}, 0x20008000) ioctl$sock_SIOCETHTOOL(r2, 0x89f1, &(0x7f0000000380)={'sit0\x00', &(0x7f0000000140)=@ethtool_cmd={0x11, 0x2, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x4, [0x0, 0x4000]}}) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x60, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x7}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x800}, 0x0) 364.080747ms ago: executing program 3 (id=4553): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x1e}, @NFTA_META_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x7c}}, 0x0) 349.368567ms ago: executing program 1 (id=4554): r0 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ipvlan0\x00'}) r1 = socket$netlink(0x10, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) getsockopt$nfc_llcp(0xffffffffffffffff, 0x118, 0x0, &(0x7f0000000100)=""/248, 0xf8) r2 = socket$inet(0x2, 0x3, 0x8) getsockopt$inet_buf(r2, 0x0, 0x50, 0x0, &(0x7f0000000100)) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000200)=ANY=[@ANYRESHEX=r2, @ANYRES32=0x0, @ANYBLOB="0000000000080400240012800b0001006d61637365630000140002800500060000000000050007000000000008000500", @ANYRESOCT=r1], 0x4c}}, 0x0) r3 = getpid() sendmsg$nl_generic(r1, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000080)={&(0x7f00000002c0)={0x32c, 0x17, 0x4, 0x70bd29, 0x25dfdbfd, {0xd}, [@generic="723605ac2ab337166943977553d6a707b87efda72592cbe8cbf356db9a54f53c47e4f641591c5ad11d763ad92b21c0732347894acf607f14554537934b7edf389d6ffd11f2978c83efee041426c91a51e0d59159aa10dc30de6e5da154002a8746ff96163e82c3f1d0b5554c10f1fba246331e099be4cac3bcd67419b548f152d0ca636f61e3a0c411c374c2c00ab6d7157d82f89ca0d43208674d19792c555d6da0bf2fa6a7d6ad08ac4339c6d07391cd6ca33ff968104592267e2e41d827bd6934e0aa7116fe2489b96543dc9a0e1929424257bb", @typed={0x8, 0x113, 0x0, 0x0, @u32=0x8b}, @nested={0xc4, 0x4d, 0x0, 0x1, [@generic, @generic="a5195e7ba52e1266e868c49fc6ea88d7", @nested={0x4, 0x40}, @generic="3917f1067d068b519643f1a7e891227e3e28ae9002e18a18f088492db2724f65045e6fd4436ea2629cef9c536225c925c5a43c6d6f25ce8777b14fb695b33339fcb0b2bb9423c195c54f23fb5094b945ae3368950082a9d0e970d4c475fdac39340690873079cd11023bf63d650ec3bfa27b789a4dcd467301995e586db99c0d1007b0021b9a2f3d641af2d95c052eb6b2efdbaca0c40f6c0283723ca8ac68b93bae300397299a699a3a805d"]}, @generic="e92c6f8b84693b9f6d7cdd1d94c2f45b1de3b8cf1e5303bd7407b69a2b09ea83cff40ab530b58d8f73d2b119b16ce6e9058a998dfb5ae8f2311d0b4f2cee624627e55eeaa2c59799d6e76aabd8c86ba0cfa009e62746f16c7d2cf796a8e4fb325654ca74799ac3c09d2403ec0a6bd0a9a206b5d6265c430a661666e34a78fab63bf1f1446a01929706d439053027c526ca3702509f3f274c2386bb42dde671121af6520a76983ccc07a1f8f7ba4c1197ff5becdc1dfec625b8b8bbb657c99306", @typed={0x8, 0x40, 0x0, 0x0, @pid=r3}, @nested={0x21, 0x10a, 0x0, 0x1, [@nested={0x4, 0x3b}, @generic="10978aca71d2beeaea7d2c7ee658e43a8c643d80b37bb18418"]}, @generic="41cc5a8d6f37e04d7e7863b96de0587a902809dbd2f28aae36ccde1d8b3642232e5d0aebfd1491e1c0594293f1b2ced353cbcd79bf9dc04a4894ffa7d84e638d2c7bec55030ac8141ceec7902989054dc3c1550b95bf6f4e51f2319e84e257c875dc49175e68830a9cf86f68f4fca4fc18c73a726e6901e4e493030a5b544f6ce99813f87f6e99d9cb"]}, 0x32c}}, 0x4) 300.211169ms ago: executing program 4 (id=4555): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x10, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x800000}, [@alu={0x4, 0x0, 0x8, 0xa}]}, &(0x7f0000000000)='GPL\x00', 0x8, 0x0, 0x0, 0x41000, 0x62}, 0x94) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000e40)=@newqdisc={0x40, 0x24, 0x3fe3aa0262d8c583, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xf}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0xffffffffffffff8d}}]}, 0x40}, 0x1, 0x0, 0x0, 0xc083}, 0x2000400c) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0xfffffffffffffffc, 0x4) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f00000000c0)=0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r5) sendmsg$NFC_CMD_DEV_UP(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r6, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r4}]}, 0x1c}}, 0x0) write$nci(r3, &(0x7f0000000440)=ANY=[@ANYBLOB="500401f7c038e1"], 0x7) r7 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'erspan0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="480000001000050400"/20, @ANYRES32=r8, @ANYBLOB="000000767cb5a9178d7f9a800b00010065727370616e00001800270b00001200050016000100000008001500000000a5"], 0x48}}, 0x0) 256.104334ms ago: executing program 3 (id=4556): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'bridge_slave_0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=@bridge_setlink={0x20, 0x13, 0x93f, 0x0, 0x0, {0x7, 0x0, 0x0, r1}}, 0x20}}, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000000), r2) 196.064779ms ago: executing program 1 (id=4557): ioctl$sock_netrom_SIOCDELRT(0xffffffffffffffff, 0x8916, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x3c) 195.031768ms ago: executing program 2 (id=4558): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x44, 0xb, 0x6, 0x3, 0x0, 0x0, {0x6, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x64010101}}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x64010100}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x4844}, 0x4800) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r1) sendmsg$NL80211_CMD_REQ_SET_REG(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)={0x20, r3, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4040080}, 0x20000090) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000040)={0x28, r4, 0x1, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_SYNC_OFFSET_MAX_NEIGHBOR={0x8, 0x15, 0xe7}]}]}, 0x28}}, 0x40) syz_emit_ethernet(0x76, &(0x7f0000000140)={@broadcast, @random="17043a73dbde", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x13, 0x4, 0x0, 0x0, 0x0, 0x64, 0x0, 0x0, 0x11, 0x0, @empty=0xac1414aa, @rand_addr, {[@rr={0x7, 0x3}, @timestamp_prespec={0x44, 0x34, 0x0, 0x3, 0x0, [{@private=0xa010102, 0x10000}, {@broadcast}, {@local}, {@remote}, {@private}, {@remote}]}]}}}}}}}, 0x0) 136.822164ms ago: executing program 1 (id=4559): socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) (async, rerun: 64) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') (async, rerun: 64) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$unix(0x1, 0x2, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x44, r3, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x7ff, 0x70}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x44}, 0x1, 0x0, 0x0, 0x91}, 0x24044884) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3032, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) (async) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r7, &(0x7f00000001c0)='4', 0x1) (async, rerun: 64) tee(r6, r5, 0xffffffffffffffff, 0x2) (async, rerun: 64) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) r9 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x74}}, 0x0) (rerun: 64) sendmsg$nl_generic(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYRES32=r0], 0x34}, 0x1, 0x0, 0x0, 0x4008000}, 0x4010) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r8, 0x5, 0x14, 0x0, &(0x7f0000000100)="259a53f271a76d2608fff74588a80a3888a82f15", 0x0, 0xd11, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 52.026781ms ago: executing program 0 (id=4560): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x4c000000, &(0x7f0000000080)=[{&(0x7f0000000300)="d8000000180081034e81f783db4cb9040a1d020006007c09e8fc55a10a0015000400142603600e120800060000000401a800080008000a400400000004000461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d9300"/216, 0xd8}], 0x1}, 0x0) r1 = socket(0x10, 0x2, 0x0) sendto$inet6(r1, &(0x7f00000004c0)="7800000018002507b9199b02ffff48000203be04020406050a02040c5c000900580006020a0000000d0085a168d0bf46d32345653600648d07000b000a00070849935ade4a460c89b6ec0cff3959547f509058ba86c902007a00004a32000407160012000a0000000000e000e218d1dd3b6ed538f6523250", 0x78, 0xc090, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000314010000000000000000000900020073797a2f000000000800410072786500140033007465616d5f736c6176655f30"], 0x38}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000008112a2000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xc}, 0x94) ioctl$AUTOFS_IOC_FAIL(r2, 0x9361, 0xc2c1) sendmsg$AUDIT_USER_TTY(r2, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x104}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000f00)=@base={0x5, 0x4, 0x4, 0x9, 0x10, 0x1}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, r3}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001e80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@bloom_filter={0x1e, 0x0, 0x9, 0x6a, 0x0, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000440)={r4, 0x0, &(0x7f0000000400)=""/55}, 0x20) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000400)={r5, 0x3, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r6 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r6, 0x0, 0xd0, &(0x7f0000000000)=0x3, 0x4) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000540), r1) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r9, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=@setlink={0x28, 0x13, 0x1, 0x400000, 0x0, {0x0, 0x0, 0x0, r10, 0x0, 0x6c90}, [@IFLA_MASTER={0x8, 0xa, r10}]}, 0x28}, 0x1, 0x0, 0x0, 0xc0}, 0x40000) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r1, &(0x7f0000000680)={&(0x7f0000000480), 0xc, &(0x7f0000000640)={&(0x7f0000000580)={0x94, r7, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x3c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x10}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r10}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x15}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x21}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x5}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x1c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x94}, 0x1, 0x0, 0x0, 0x400c}, 0x200480d4) r11 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="140100002e000100000000000000000001"], 0x114}], 0x1}, 0x0) 0s ago: executing program 3 (id=4561): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x11, 0x30}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x76}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x7, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_USERDATA={0x0, 0x6, "fe7db15cb77d0f98b7aa4b778bc895861f1067a038c95d499fa30e038fea"}, @NFTA_TABLE_HANDLE={0x0, 0x4, 0x1, 0x0, 0x5}]}, @NFT_MSG_NEWCHAIN={0x54, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth1_macvtap\x00'}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x4c, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2000}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x20, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'veth1_macvtap\x00'}, @NFTA_HOOK_HOOKNUM={0xffffffffffffff7b, 0x1, 0x1, 0x0, 0x5}]}]}], {0x14}}, 0xe8}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x11, 0x30}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x76}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x7, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_USERDATA={0x0, 0x6, "fe7db15cb77d0f98b7aa4b778bc895861f1067a038c95d499fa30e038fea"}, @NFTA_TABLE_HANDLE={0x0, 0x4, 0x1, 0x0, 0x5}]}, @NFT_MSG_NEWCHAIN={0x54, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth1_macvtap\x00'}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x4c, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2000}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x20, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'veth1_macvtap\x00'}, @NFTA_HOOK_HOOKNUM={0xffffffffffffff7b, 0x1, 0x1, 0x0, 0x5}]}]}], {0x14}}, 0xe8}}, 0x0) (async) kernel console output (not intermixed with test programs): ffffffffffd [ 319.791987][T15856] sctp: [Deprecated]: syz.0.2767 (pid 15856) Use of int in max_burst socket option. [ 319.791987][T15856] Use struct sctp_assoc_value instead [ 319.891862][T15858] pim6reg1: entered promiscuous mode [ 319.908708][T15858] pim6reg1: entered allmulticast mode [ 320.383021][T15872] __nla_validate_parse: 14 callbacks suppressed [ 320.383043][T15872] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2772'. [ 320.405571][T15872] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2772'. [ 320.427621][T15872] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2772'. [ 320.790553][T15886] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2778'. [ 320.848156][T15889] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2779'. [ 320.871122][T15889] netlink: 'syz.4.2779': attribute type 7 has an invalid length. [ 320.906499][T15889] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2779'. [ 320.973450][T15893] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2780'. [ 321.198258][T15898] netlink: 'syz.4.2782': attribute type 2 has an invalid length. [ 321.688679][T15927] netlink: 252 bytes leftover after parsing attributes in process `syz.4.2789'. [ 321.961820][T15932] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2791'. [ 321.972028][T15932] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2791'. [ 322.505776][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.518222][ T1304] clip:clip_start_xmit: skb_dst(skb) == NULL [ 322.547977][T15972] netlink: 'syz.1.2799': attribute type 2 has an invalid length. [ 323.515205][T15996] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 323.609147][T15990] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 323.631408][T15990] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.734457][T16005] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 323.844677][T15990] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 323.876451][T15990] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 324.012576][T16017] netlink: 'syz.0.2809': attribute type 21 has an invalid length. [ 324.073136][T15990] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 324.123804][T15990] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 324.188653][T16017] netlink: 'syz.0.2809': attribute type 4 has an invalid length. [ 324.207998][T16017] netlink: 'syz.0.2809': attribute type 5 has an invalid length. [ 324.331782][T15990] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 324.359874][T15990] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 324.660808][T13316] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 324.696487][T13316] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.770265][T13316] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 324.804250][T13316] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.904658][T13329] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 324.933677][T13329] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.045443][T13335] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 325.073949][T13335] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.094136][T16053] hsr0 speed is unknown, defaulting to 1000 [ 325.822265][T16086] netlink: 'syz.3.2822': attribute type 4 has an invalid length. [ 325.899690][T16089] netlink: 'syz.3.2822': attribute type 4 has an invalid length. [ 326.098156][T16086] __nla_validate_parse: 8 callbacks suppressed [ 326.098177][T16086] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2822'. [ 327.548998][T16150] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2841'. [ 327.586429][T16154] netlink: 788 bytes leftover after parsing attributes in process `syz.0.2842'. [ 327.592161][T16145] hsr0 speed is unknown, defaulting to 1000 [ 328.354311][T16181] syzkaller1: entered promiscuous mode [ 328.359875][T16181] syzkaller1: entered allmulticast mode [ 329.379978][T16223] netlink: 'syz.1.2857': attribute type 11 has an invalid length. [ 329.413356][T16223] netlink: 'syz.1.2857': attribute type 11 has an invalid length. [ 329.443679][T16223] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2857'. [ 329.460296][T16225] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2856'. [ 330.238001][ T5180] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 330.251747][ T5180] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 330.259824][ T5180] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 330.270235][ T5180] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 330.279035][ T5180] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 330.488045][T16265] sctp: [Deprecated]: syz.3.2866 (pid 16265) Use of struct sctp_assoc_value in delayed_ack socket option. [ 330.488045][T16265] Use struct sctp_sack_info instead [ 330.514305][T16265] sctp: [Deprecated]: syz.3.2866 (pid 16265) Use of struct sctp_assoc_value in delayed_ack socket option. [ 330.514305][T16265] Use struct sctp_sack_info instead [ 330.645323][T13316] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 330.678833][T13316] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.711435][T16258] hsr0 speed is unknown, defaulting to 1000 [ 330.790513][T16280] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2869'. [ 330.806983][T16280] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2869'. [ 330.861650][T13316] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 330.891284][T13316] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.970741][T16289] netlink: 'syz.1.2872': attribute type 6 has an invalid length. [ 330.982773][T16289] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2872'. [ 330.997752][T16280] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2869'. [ 331.017721][T16280] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2869'. [ 331.050962][T13316] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 331.077904][T13316] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.123320][T16296] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2873'. [ 331.185888][T16297] netlink: 'syz.2.2873': attribute type 5 has an invalid length. [ 331.326185][T13316] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 331.337165][T13316] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.190891][T16336] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2879'. [ 332.239523][T13316] bridge_slave_0: left promiscuous mode [ 332.250330][T13316] bridge0: port 1(bridge_slave_0) entered disabled state [ 332.344185][ T51] Bluetooth: hci4: command tx timeout [ 332.692116][T16360] netlink: 'syz.2.2885': attribute type 10 has an invalid length. [ 333.927735][T13316] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 333.937407][T13316] bond_slave_0: left promiscuous mode [ 333.944885][T13316] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 333.953974][T13316] bond_slave_1: left promiscuous mode [ 333.961995][T13316] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 333.971171][T13316] bridge_slave_1: left promiscuous mode [ 333.979351][T13316] bond0 (unregistering): (slave bond5): Releasing backup interface [ 333.989100][T13316] bond5 (unregistering): left promiscuous mode [ 333.996377][T13316] bond0 (unregistering): Released all slaves [ 334.092382][T13316] bond1 (unregistering): Released all slaves [ 334.188650][T13316] bond2 (unregistering): (slave veth3): Releasing backup interface [ 334.199051][T13316] bond2 (unregistering): Released all slaves [ 334.214412][T13316] bond3 (unregistering): Released all slaves [ 334.313929][T13316] bond4 (unregistering): (slave wireguard0): Releasing backup interface [ 334.322338][T13316] wireguard0: left promiscuous mode [ 334.329819][T13316] bond4 (unregistering): Released all slaves [ 334.424031][ T51] Bluetooth: hci4: command tx timeout [ 334.424828][T13316] bond5 (unregistering): Released all slaves [ 334.443812][T13316] bond6 (unregistering): Released all slaves [ 334.458493][T13316] bond7 (unregistering): Released all slaves [ 334.551627][T13316] bond8 (unregistering): Released all slaves [ 334.590231][T16360] bridge_slave_1: entered promiscuous mode [ 334.597539][T16360] `: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 334.731058][T16367] kthread_run failed with err -4 [ 334.761666][T16369] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2887'. [ 334.782758][T13316] tipc: Disabling bearer [ 334.821638][T16258] chnl_net:caif_netlink_parms(): no params data found [ 334.828797][T13316] tipc: Left network mode [ 334.923089][T16372] tap0: tun_chr_ioctl cmd 2148553947 [ 334.944304][T13316] IPVS: stopping master sync thread 7644 ... [ 335.006070][T16372] netlink: 'syz.0.2888': attribute type 1 has an invalid length. [ 335.064116][T16373] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2888'. [ 335.133255][T16372] bond6: entered promiscuous mode [ 335.147443][T16372] 8021q: adding VLAN 0 to HW filter on device bond6 [ 335.220581][T16389] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2892'. [ 335.263215][T16389] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2892'. [ 335.289246][T16389] netlink: 'syz.3.2892': attribute type 12 has an invalid length. [ 335.301592][T16389] netlink: 'syz.3.2892': attribute type 11 has an invalid length. [ 335.557592][T16258] bridge0: port 1(bridge_slave_0) entered blocking state [ 335.572230][T16402] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2894'. [ 335.573220][T16399] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2894'. [ 335.603963][T16258] bridge0: port 1(bridge_slave_0) entered disabled state [ 335.612354][T16258] bridge_slave_0: entered allmulticast mode [ 335.628520][T16258] bridge_slave_0: entered promiscuous mode [ 335.640516][T16258] bridge0: port 2(bridge_slave_1) entered blocking state [ 335.674102][T16258] bridge0: port 2(bridge_slave_1) entered disabled state [ 335.681396][T16258] bridge_slave_1: entered allmulticast mode [ 335.707211][T16258] bridge_slave_1: entered promiscuous mode [ 335.833504][T16413] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 336.316372][T16430] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2899'. [ 336.369186][T16258] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 336.416496][T16258] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 336.466499][T16440] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2901'. [ 336.496656][ T51] Bluetooth: hci4: command tx timeout [ 336.510459][T16440] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2901'. [ 336.551047][T13316] hsr_slave_1: left promiscuous mode [ 336.616169][T16448] netlink: 'syz.3.2902': attribute type 10 has an invalid length. [ 336.688602][T13316] veth1_macvtap: left promiscuous mode [ 336.699491][T13316] veth0_macvtap: left promiscuous mode [ 336.917758][T13316] pim6reg (unregistering): left allmulticast mode [ 337.195941][T13316] team0 (unregistering): Port device team_slave_1 removed [ 337.237001][T13316] team0 (unregistering): Port device team_slave_0 removed [ 337.620989][T16449] macvtap1: entered promiscuous mode [ 337.626499][T16449] vlan0: entered promiscuous mode [ 337.631950][T16449] macvtap1: entered allmulticast mode [ 337.638229][T16449] vlan0: entered allmulticast mode [ 337.645439][T16452] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2903'. [ 337.802114][T16258] team0: Port device team_slave_0 added [ 337.875474][T16467] openvswitch: netlink: Key type 1040 is out of range max 32 [ 337.882957][T16469] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2907'. [ 337.905121][T16258] team0: Port device team_slave_1 added [ 337.921281][T16469] openvswitch: netlink: VXLAN extension message has 3 unknown bytes. [ 337.979933][T16473] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2908'. [ 338.203069][T16258] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 338.215084][T16258] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 338.280879][T16258] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 338.372947][T16258] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 338.402496][T16258] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 338.467285][T16258] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 338.584635][ T51] Bluetooth: hci4: command tx timeout [ 338.837471][T16258] hsr_slave_0: entered promiscuous mode [ 338.877287][T16258] hsr_slave_1: entered promiscuous mode [ 338.901764][T16258] debugfs: 'hsr0' already exists in 'hsr' [ 338.919223][T16258] Cannot create hsr debugfs directory [ 339.092772][T13316] IPVS: stop unused estimator thread 0... [ 339.265781][T16526] netlink: 'syz.0.2921': attribute type 1 has an invalid length. [ 339.290405][T16526] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2921'. [ 339.356940][T16530] netlink: 'syz.0.2921': attribute type 2 has an invalid length. [ 339.479293][T16537] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2922'. [ 339.494477][T16537] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2922'. [ 339.687074][T16547] IPVS: set_ctl: invalid protocol: 135 172.20.20.170:20003 [ 339.827113][T16550] openvswitch: netlink: IPv4 tun info is not correct [ 340.105601][T16558] geneve2: entered promiscuous mode [ 340.191640][T16563] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2928'. [ 341.427369][T16258] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 341.648642][T16258] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 341.667911][T16620] __nla_validate_parse: 3 callbacks suppressed [ 341.667951][T16620] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2945'. [ 341.738389][T16628] syzkaller1: entered promiscuous mode [ 341.766915][T16628] syzkaller1: entered allmulticast mode [ 341.801716][T16638] netlink: 'syz.1.2946': attribute type 2 has an invalid length. [ 341.813176][T16638] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2946'. [ 341.866731][T16258] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 341.869952][T16641] netlink: 'syz.1.2946': attribute type 1 has an invalid length. [ 341.883381][T16640] openvswitch: netlink: Duplicate or invalid key (type 0). [ 341.890896][T16640] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 341.907666][T16641] openvswitch: netlink: VXLAN extension message has 11 unknown bytes. [ 341.920835][T16258] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 342.132996][T16656] netlink: 'syz.1.2951': attribute type 13 has an invalid length. [ 342.174956][T16656] netlink: 96 bytes leftover after parsing attributes in process `syz.1.2951'. [ 342.372497][T16258] 8021q: adding VLAN 0 to HW filter on device bond0 [ 342.435517][T16667] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2953'. [ 342.493208][T16258] 8021q: adding VLAN 0 to HW filter on device team0 [ 342.595186][T13329] bridge0: port 1(bridge_slave_0) entered blocking state [ 342.602406][T13329] bridge0: port 1(bridge_slave_0) entered forwarding state [ 342.667076][T13329] bridge0: port 2(bridge_slave_1) entered blocking state [ 342.674299][T13329] bridge0: port 2(bridge_slave_1) entered forwarding state [ 342.766236][T16685] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2957'. [ 342.824714][T16684] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2957'. [ 342.854293][T16684] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2957'. [ 342.937114][T16701] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2960'. [ 343.004112][T16684] bridge0: port 2(vlan2) entered blocking state [ 343.029445][T16684] bridge0: port 2(vlan2) entered disabled state [ 343.060362][T16684] vlan2: entered allmulticast mode [ 343.135423][T16684] vlan2: left allmulticast mode [ 343.188306][T16708] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2962'. [ 343.235721][T16714] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 343.750680][T16258] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 344.336012][T16761] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on [ 344.613974][T16782] sch_fq: defrate 0 ignored. [ 345.060001][T16804] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2979'. [ 345.162406][T16258] veth0_vlan: entered promiscuous mode [ 345.210751][T16258] veth1_vlan: entered promiscuous mode [ 345.304490][ T51] Bluetooth: hci0: command tx timeout [ 345.310517][T16258] veth0_macvtap: entered promiscuous mode [ 345.327888][T16258] veth1_macvtap: entered promiscuous mode [ 345.406886][T16258] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 345.494918][T16258] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 345.538538][T13335] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.561792][T13335] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.589434][T13335] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.611910][T13335] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.924308][T13329] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 345.964503][T13329] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 346.082683][T16828] vxcan1 speed is unknown, defaulting to 1000 [ 346.112757][T16828] vxcan1 speed is unknown, defaulting to 1000 [ 346.131481][T13329] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 346.162475][T13329] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 346.175529][T16828] vxcan1 speed is unknown, defaulting to 1000 [ 346.813550][T16858] netlink: 'syz.1.2990': attribute type 1 has an invalid length. [ 347.176205][ T10] vxcan1 speed is unknown, defaulting to 1000 [ 347.186393][T16828] infiniband syz2: set active [ 347.200928][T16828] infiniband syz2: added vxcan1 [ 347.221189][T16828] syz2: rxe_create_cq: returned err = -12 [ 347.229869][T16868] netlink: 'syz.1.2993': attribute type 1 has an invalid length. [ 347.245296][T16828] infiniband syz2: Couldn't create ib_mad CQ [ 347.252510][T16868] netlink: 'syz.1.2993': attribute type 1 has an invalid length. [ 347.270873][T16828] infiniband syz2: Couldn't open port 1 [ 347.372963][T16828] RDS/IB: syz2: added [ 347.393202][T16828] smc: adding ib device syz2 with port count 1 [ 347.411213][T16828] smc: ib device syz2 port 1 has pnetid [ 347.427153][ T10] vxcan1 speed is unknown, defaulting to 1000 [ 347.470882][T16828] vxcan1 speed is unknown, defaulting to 1000 [ 347.830278][ T5180] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 347.836149][T16885] __nla_validate_parse: 1 callbacks suppressed [ 347.836171][T16885] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2998'. [ 347.864983][ T5180] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 347.870529][T16885] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2998'. [ 347.883823][ T5180] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 347.897785][ T5180] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 347.907196][ T5180] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 347.990819][ T7735] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 348.028861][ T7735] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.053203][ T7735] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 348.107852][T16885] tipc: Enabled bearer , priority 0 [ 348.150225][T16885] tipc: Resetting bearer [ 348.177486][T16892] syzkaller0: entered promiscuous mode [ 348.184272][T16892] syzkaller0: entered allmulticast mode [ 348.206169][T16884] tipc: Resetting bearer [ 348.243008][T16884] tipc: Disabling bearer [ 348.260984][T16828] vxcan1 speed is unknown, defaulting to 1000 [ 348.262825][T16900] syzkaller1: entered promiscuous mode [ 348.286907][T16900] syzkaller1: entered allmulticast mode [ 348.329802][ T7735] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 348.361041][ T7735] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.379941][ T7735] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 348.567853][ T7735] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 348.602853][ T7735] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.644775][ T7735] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 348.738305][T16891] hsr0 speed is unknown, defaulting to 1000 [ 348.746896][T16906] tipc: Enabled bearer , priority 0 [ 348.775441][T16828] vxcan1 speed is unknown, defaulting to 1000 [ 348.873439][ T7735] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 348.906010][ T7735] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.931507][ T7735] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 348.990070][T16906] tipc: Resetting bearer [ 349.047961][T16905] tipc: Disabling bearer [ 349.307329][T16933] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3005'. [ 349.343475][T16935] netlink: 'syz.4.3006': attribute type 62 has an invalid length. [ 349.376366][T16933] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 349.434543][T16938] netlink: 'syz.2.3007': attribute type 7 has an invalid length. [ 350.019867][ T51] Bluetooth: hci0: command tx timeout [ 350.631743][ T7735] bond0 (unregistering): Released all slaves [ 350.647673][ T7735] bond1 (unregistering): Released all slaves [ 350.749988][ T7735] bond2 (unregistering): Released all slaves [ 350.849302][ T7735] bond3 (unregistering): Released all slaves [ 350.946778][ T7735] bond4 (unregistering): Released all slaves [ 351.044188][ T7735] bond5 (unregistering): Released all slaves [ 351.141735][ T7735] bond6 (unregistering): Released all slaves [ 351.159035][ T7735] bond7 (unregistering): Released all slaves [ 351.173149][ T7735] bond8 (unregistering): Released all slaves [ 351.208841][T16891] vxcan1 speed is unknown, defaulting to 1000 [ 351.455372][ T7735] tipc: Left network mode [ 351.810099][T16975] netlink: 'syz.2.3012': attribute type 5 has an invalid length. [ 352.002873][T16983] 8021q: VLANs not supported on lo [ 352.039920][T16828] vxcan1 speed is unknown, defaulting to 1000 [ 352.096625][ T51] Bluetooth: hci0: command tx timeout [ 352.824184][T17010] netlink: 100 bytes leftover after parsing attributes in process `syz.1.3019'. [ 353.038222][T16891] chnl_net:caif_netlink_parms(): no params data found [ 353.182228][T16828] vxcan1 speed is unknown, defaulting to 1000 [ 353.190015][T17023] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3021'. [ 353.242018][T17023] netlink: 80 bytes leftover after parsing attributes in process `syz.1.3021'. [ 353.388653][T17032] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 353.609310][T17041] IPVS: set_ctl: invalid protocol: 59 172.30.0.2:20001 [ 353.679410][T17041] IPVS: set_ctl: invalid protocol: 59 172.30.0.2:20001 [ 353.720334][T17041] IPVS: set_ctl: invalid protocol: 59 172.30.0.2:20001 [ 353.729355][T16891] bridge0: port 1(bridge_slave_0) entered blocking state [ 353.773122][T16891] bridge0: port 1(bridge_slave_0) entered disabled state [ 353.780462][T17041] IPVS: set_ctl: invalid protocol: 59 172.30.0.2:20001 [ 353.797986][T16891] bridge_slave_0: entered allmulticast mode [ 353.819800][T17041] IPVS: set_ctl: invalid protocol: 59 172.30.0.2:20001 [ 353.835689][T16891] bridge_slave_0: entered promiscuous mode [ 353.878431][T16891] bridge0: port 2(bridge_slave_1) entered blocking state [ 353.923189][T16891] bridge0: port 2(bridge_slave_1) entered disabled state [ 353.945705][T16891] bridge_slave_1: entered allmulticast mode [ 353.995673][T16891] bridge_slave_1: entered promiscuous mode [ 354.173886][ T51] Bluetooth: hci0: command tx timeout [ 354.418890][T17072] mac80211_hwsim hwsim39 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 354.504034][T17073] mac80211_hwsim hwsim39 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 354.538754][T17071] (unnamed net_device) (uninitialized): down delay (33554432) is not a multiple of miimon (640), value rounded to 33553920 ms [ 354.732845][T16891] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 354.811277][T17087] netlink: 'syz.2.3035': attribute type 18 has an invalid length. [ 354.847921][T17091] netlink: 'syz.4.3037': attribute type 1 has an invalid length. [ 354.875403][T17099] netlink: 'syz.4.3037': attribute type 1 has an invalid length. [ 354.893480][ T7735] hsr_slave_0: left promiscuous mode [ 354.902498][ T7735] hsr_slave_1: left promiscuous mode [ 354.920770][ T7735] vlan0: left allmulticast mode [ 354.926330][ T7735] vlan0: left promiscuous mode [ 354.932229][ T7735] veth1_macvtap: left promiscuous mode [ 354.939003][ T7735] veth0_macvtap: left promiscuous mode [ 354.945896][ T7735] veth1_vlan: left promiscuous mode [ 354.982535][T17104] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3038'. [ 355.792257][T16891] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 355.860581][T13317] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 355.920613][T16891] team0: Port device team_slave_0 added [ 355.935801][T13317] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 355.961874][T13317] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 356.008181][T16891] team0: Port device team_slave_1 added [ 356.110227][T13317] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 356.151935][T17117] macvlan2: entered promiscuous mode [ 356.168632][T17117] macvlan2: entered allmulticast mode [ 356.254201][ T51] Bluetooth: hci0: command tx timeout [ 356.302997][T16891] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 356.374115][T16891] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 356.413316][T16891] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 356.505701][T16891] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 356.545294][T16891] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 356.625542][T16891] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 356.663329][T17129] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 357.135043][T13335] wlan1: Trigger new scan to find an IBSS to join [ 357.178894][T16891] hsr_slave_0: entered promiscuous mode [ 357.199432][T16891] hsr_slave_1: entered promiscuous mode [ 357.319313][T17176] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3052'. [ 357.352832][T17176] netlink: 'syz.3.3052': attribute type 5 has an invalid length. [ 357.386817][T17176] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3052'. [ 357.458926][T17176] geneve3: entered promiscuous mode [ 357.464369][T17176] geneve3: entered allmulticast mode [ 357.519968][T13316] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 256 - 0 [ 357.579950][T13340] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 256 - 0 [ 357.668018][T13340] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 256 - 0 [ 357.690285][T13340] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 256 - 0 [ 358.267016][T17211] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3062'. [ 358.978780][T17245] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3068'. [ 358.998308][T17245] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3068'. [ 359.215732][T17238] netlink: 'syz.1.3068': attribute type 2 has an invalid length. [ 359.548188][T17261] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3071'. [ 359.564757][T17261] netlink: 43 bytes leftover after parsing attributes in process `syz.2.3071'. [ 359.594396][T17261] netlink: 'syz.2.3071': attribute type 5 has an invalid length. [ 359.637901][T17261] netlink: 43 bytes leftover after parsing attributes in process `syz.2.3071'. [ 359.686687][T16891] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 359.693732][T17258] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3071'. [ 359.717142][T17258] netlink: 43 bytes leftover after parsing attributes in process `syz.2.3071'. [ 359.726815][T16891] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 359.741860][T17258] netlink: 'syz.2.3071': attribute type 5 has an invalid length. [ 359.766302][T17258] netlink: 43 bytes leftover after parsing attributes in process `syz.2.3071'. [ 359.812436][T16891] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 359.832643][T16891] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 360.059527][T17289] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 360.237982][T16891] 8021q: adding VLAN 0 to HW filter on device bond0 [ 360.289882][T16891] 8021q: adding VLAN 0 to HW filter on device team0 [ 360.344386][T13316] bridge0: port 1(bridge_slave_0) entered blocking state [ 360.351645][T13316] bridge0: port 1(bridge_slave_0) entered forwarding state [ 360.406835][T13316] bridge0: port 2(bridge_slave_1) entered blocking state [ 360.414186][T13316] bridge0: port 2(bridge_slave_1) entered forwarding state [ 360.555590][T16891] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 360.574531][ T51] Bluetooth: hci0: command tx timeout [ 360.676616][T17312] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 360.728250][T17312] bond10: entered promiscuous mode [ 360.733523][T17312] bond10: entered allmulticast mode [ 360.749364][T17312] 8021q: adding VLAN 0 to HW filter on device bond10 [ 361.007096][T17278] lec:lec_atm_close: lec0: Shut down! [ 361.042244][T17329] netlink: 'syz.3.3085': attribute type 16 has an invalid length. [ 361.082024][T17329] netlink: 'syz.3.3085': attribute type 17 has an invalid length. [ 361.136589][T17326] nbd0: detected capacity change from 0 to 549764202496 [ 361.141773][T17329] erspan0: left promiscuous mode [ 361.151819][ T51] block nbd0: Receive control failed (result -32) [ 361.154278][T17329] erspan0: left allmulticast mode [ 361.165976][ T6774] block nbd0: Dead connection, failed to find a fallback [ 361.183838][ T6774] block nbd0: shutting down sockets [ 361.192783][ T6774] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 361.210598][ T6774] Buffer I/O error on dev nbd0, logical block 0, async page read [ 361.219257][ T6774] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 361.239521][ T6774] Buffer I/O error on dev nbd0, logical block 0, async page read [ 361.257236][ T6774] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 361.277278][ T6774] Buffer I/O error on dev nbd0, logical block 0, async page read [ 361.325847][ T6774] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 361.345120][T17329] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 361.348283][ T6774] Buffer I/O error on dev nbd0, logical block 0, async page read [ 361.445107][T17135] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 361.466217][ T6774] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 361.504117][ T6774] Buffer I/O error on dev nbd0, logical block 0, async page read [ 361.520744][T16891] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 361.565256][ T6774] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 361.616113][T17135] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 361.616598][ T6774] Buffer I/O error on dev nbd0, logical block 0, async page read [ 361.650506][ T6774] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 361.704748][ T6774] Buffer I/O error on dev nbd0, logical block 0, async page read [ 361.729064][ T6774] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 361.767377][ T6774] Buffer I/O error on dev nbd0, logical block 0, async page read [ 361.794596][T13340] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 361.819373][ T6774] ldm_validate_partition_table(): Disk read failed. [ 361.851469][ T6774] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 361.869539][T17354] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3090'. [ 361.879416][T16891] veth0_vlan: entered promiscuous mode [ 361.890911][ T6774] Buffer I/O error on dev nbd0, logical block 0, async page read [ 361.922541][T16891] veth1_vlan: entered promiscuous mode [ 361.928685][ T6774] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 361.969363][ T6774] Buffer I/O error on dev nbd0, logical block 0, async page read [ 361.997783][ T6774] Dev nbd0: unable to read RDB block 0 [ 362.027885][ T6774] nbd0: unable to read partition table [ 362.087926][ T6774] ldm_validate_partition_table(): Disk read failed. [ 362.098069][T13318] wlan1: Trigger new scan to find an IBSS to join [ 362.109814][ T6774] Dev nbd0: unable to read RDB block 0 [ 362.123347][ T6774] nbd0: unable to read partition table [ 362.369156][T16891] veth0_macvtap: entered promiscuous mode [ 362.410358][T16891] veth1_macvtap: entered promiscuous mode [ 362.525706][T16891] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 362.545084][T17377] netlink: 'syz.1.3097': attribute type 64 has an invalid length. [ 362.562944][T16891] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 362.608894][ T7735] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.681768][ T7735] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.723055][T13318] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.746340][T13318] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.858447][T13316] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 362.886014][T17388] netlink: 'syz.4.3101': attribute type 1 has an invalid length. [ 362.908551][T13316] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 363.225926][T13316] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 363.263182][T13316] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 363.291041][T17406] __nla_validate_parse: 4 callbacks suppressed [ 363.291061][T17406] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3105'. [ 363.330311][T17406] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3105'. [ 363.396173][T13329] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 363.470646][T13329] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 363.694911][T17428] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3107'. [ 363.752728][T17428] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3107'. [ 363.861524][T17140] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 363.978059][T17437] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2989'. [ 364.035800][T17434] netlink: 3 bytes leftover after parsing attributes in process `syz.0.2989'. [ 364.468552][T17453] ieee802154 phy0 wpan0: encryption failed: -22 [ 364.495581][ T7735] wlan1: Creating new IBSS network, BSSID ea:5e:23:51:2c:78 [ 364.660342][T17464] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3115'. [ 364.830051][T17468] netlink: 'syz.4.3117': attribute type 2 has an invalid length. [ 364.938045][T17472] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3118'. [ 365.165167][ T5180] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 365.175582][ T5180] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 365.196745][ T5180] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 365.220226][ T5180] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 365.230038][ T5180] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 365.272670][T17487] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3122'. [ 365.308180][T17487] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3122'. [ 365.317947][T17487] netlink: 'syz.2.3122': attribute type 3 has an invalid length. [ 365.327458][T17487] netlink: 'syz.2.3122': attribute type 2 has an invalid length. [ 365.341801][T17479] hsr0 speed is unknown, defaulting to 1000 [ 365.380617][T17479] vxcan1 speed is unknown, defaulting to 1000 [ 365.672132][T17505] netlink: 'syz.4.3128': attribute type 1 has an invalid length. [ 366.240632][T17522] Unsupported ieee802154 address type: 0 [ 366.496657][T17526] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 366.654224][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 366.782439][T17479] chnl_net:caif_netlink_parms(): no params data found [ 367.308114][ T51] Bluetooth: hci1: command tx timeout [ 367.328149][T17479] bridge0: port 1(bridge_slave_0) entered blocking state [ 367.345793][T17479] bridge0: port 1(bridge_slave_0) entered disabled state [ 367.355187][T17479] bridge_slave_0: entered allmulticast mode [ 367.366240][T17479] bridge_slave_0: entered promiscuous mode [ 367.387445][T17479] bridge0: port 2(bridge_slave_1) entered blocking state [ 367.431267][T17479] bridge0: port 2(bridge_slave_1) entered disabled state [ 367.469645][T17479] bridge_slave_1: entered allmulticast mode [ 367.506000][T17479] bridge_slave_1: entered promiscuous mode [ 367.520415][T17572] netlink: 'syz.2.3149': attribute type 1 has an invalid length. [ 367.793349][T17583] netlink: 'syz.0.3150': attribute type 8 has an invalid length. [ 367.851064][T17580] bond0: (slave gretap0): making interface the new active one [ 367.905716][T17580] bond0: (slave gretap0): Enslaving as an active interface with an up link [ 367.960364][T17479] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 367.990082][T17479] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 368.107458][T17600] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 368.158039][T17479] team0: Port device team_slave_0 added [ 368.266160][T17479] team0: Port device team_slave_1 added [ 368.418356][T17479] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 368.435932][T17479] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 368.488989][T17618] __nla_validate_parse: 9 callbacks suppressed [ 368.489007][T17618] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3159'. [ 368.506895][T17479] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 368.605661][T17479] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 368.622936][T17479] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 368.689234][T17479] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 368.818755][T17632] netlink: 'syz.4.3164': attribute type 1 has an invalid length. [ 368.935092][T17636] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3164'. [ 368.972650][T17479] hsr_slave_0: entered promiscuous mode [ 368.980642][T17479] hsr_slave_1: entered promiscuous mode [ 368.987958][T17479] debugfs: 'hsr0' already exists in 'hsr' [ 369.004410][T17479] Cannot create hsr debugfs directory [ 369.014465][T17642] netlink: 'syz.1.3166': attribute type 4 has an invalid length. [ 369.066483][T17639] netlink: 'syz.1.3166': attribute type 4 has an invalid length. [ 369.128422][T17639] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3166'. [ 369.245628][T17639] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 369.374003][ T51] Bluetooth: hci1: command tx timeout [ 369.558721][T17664] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.3176'. [ 369.585662][T17667] vxcan0: tx drop: invalid da for name 0x0000000000000002 [ 369.600767][T17479] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.619489][T17479] netdevsim netdevsim3 eth3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 369.630456][ T5946] IPVS: starting estimator thread 0... [ 369.682958][T17660] hsr0 speed is unknown, defaulting to 1000 [ 369.707108][T17660] vxcan1 speed is unknown, defaulting to 1000 [ 369.723979][T17670] IPVS: using max 27 ests per chain, 64800 per kthread [ 369.729839][T17479] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.761146][T17479] netdevsim netdevsim3 eth2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 369.907517][T17479] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.932004][T17479] netdevsim netdevsim3 eth1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 370.034235][T17479] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 370.054040][T17479] netdevsim netdevsim3 eth0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 370.352998][T17685] veth0_to_team: entered promiscuous mode [ 370.388859][T17685] veth0_to_team: entered allmulticast mode [ 370.449491][T17692] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3182'. [ 370.546344][T17479] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 370.614433][T17479] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 370.699290][T17479] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 370.711842][T17479] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 370.938322][T17711] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3188'. [ 371.192889][T17711] 8021q: adding VLAN 0 to HW filter on device bond1 [ 371.193703][T17725] IPVS: lblc: SCTP 172.20.20.187:0 - no destination available [ 371.248116][T17726] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3192'. [ 371.273943][T17719] macvlan0: entered promiscuous mode [ 371.281273][T17719] macvlan0: entered allmulticast mode [ 371.309442][T17719] bond1: (slave macvlan0): Opening slave failed [ 371.415713][T17726] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3192'. [ 371.455479][ T51] Bluetooth: hci1: command tx timeout [ 371.492109][T17733] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3194'. [ 371.642231][T17479] 8021q: adding VLAN 0 to HW filter on device bond0 [ 371.686519][T17742] netlink: 156 bytes leftover after parsing attributes in process `syz.4.3197'. [ 371.732507][T17479] 8021q: adding VLAN 0 to HW filter on device team0 [ 371.800673][ T7735] bridge0: port 1(bridge_slave_0) entered blocking state [ 371.808020][ T7735] bridge0: port 1(bridge_slave_0) entered forwarding state [ 371.821696][ T7735] bridge0: port 2(bridge_slave_1) entered blocking state [ 371.828915][ T7735] bridge0: port 2(bridge_slave_1) entered forwarding state [ 372.061655][T17748] vlan2: entered allmulticast mode [ 372.076023][T17748] mac80211_hwsim hwsim40 wlan0: entered allmulticast mode [ 372.128861][T17753] geneve2: entered promiscuous mode [ 372.531479][T17771] netlink: 'syz.4.3206': attribute type 1 has an invalid length. [ 372.662476][T17479] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 372.848758][T17479] veth0_vlan: entered promiscuous mode [ 372.907364][T17479] veth1_vlan: entered promiscuous mode [ 373.051709][T17479] veth0_macvtap: entered promiscuous mode [ 373.097659][ T5946] hid (null): unknown global tag 0xc [ 373.107250][T17479] veth1_macvtap: entered promiscuous mode [ 373.113883][ T5946] hid (null): report_id 2573188558 is invalid [ 373.120640][ T5946] hid (null): report_id 1293002688 is invalid [ 373.138558][ T5946] hid (null): unknown global tag 0xd [ 373.172818][ T5946] hid (null): unknown global tag 0xa4 [ 373.199277][T17479] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 373.214390][ T5946] hid (null): report_id 17738 is invalid [ 373.232989][ T5946] hid (null): unknown global tag 0xe [ 373.242242][ T5946] hid (null): unknown global tag 0xc [ 373.257400][T17479] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 373.273039][ T5946] hid (null): unknown global tag 0xe [ 373.280599][ T5946] hid (null): unknown global tag 0x4f [ 373.291392][ T5946] hid (null): bogus close delimiter [ 373.298261][ T5946] hid (null): unknown global tag 0xd [ 373.304693][ T5946] hid (null): invalid report_count 21289 [ 373.311113][ T5946] hid (null): report_id 0 is invalid [ 373.317829][ T5946] hid (null): unknown global tag 0xe [ 373.323459][ T5946] hid (null): report_id 2755696071 is invalid [ 373.334103][ T5946] hid (null): unknown global tag 0xc [ 373.350200][T13316] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.360003][ T5946] hid (null): invalid report_count 14525 [ 373.366802][T13316] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.376193][ T5946] hid (null): invalid report_size -896741207 [ 373.394732][ T5946] hid (null): unknown global tag 0xd [ 373.415678][T13316] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.441044][ T5946] hid (null): unknown global tag 0xe [ 373.451121][T13316] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.470035][ T5946] hid (null): unknown global tag 0xd [ 373.490920][ T5946] hid (null): report_id 12109 is invalid [ 373.497664][ T5946] hid (null): unknown global tag 0x21 [ 373.534494][ T51] Bluetooth: hci1: command tx timeout [ 373.535946][ T5946] hid (null): bogus close delimiter [ 373.552673][ T5946] hid (null): unknown global tag 0x1f [ 373.601987][ T5946] hid (null): unknown global tag 0xa4 [ 373.611376][ T5946] hid (null): unknown global tag 0x5d [ 373.620610][ T5946] hid (null): unknown global tag 0xc [ 373.630422][ T5946] hid (null): unknown global tag 0xd [ 373.638781][ T5946] hid (null): invalid report_size 242360582 [ 373.646589][ T5946] hid (null): report_id 24246 is invalid [ 373.652582][ T5946] hid (null): unknown global tag 0xd [ 373.665611][T13329] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 373.673463][T13329] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 373.681507][ T5946] hid (null): report_id 0 is invalid [ 373.688060][ T5946] hid (null): unknown global tag 0xd [ 373.711073][ T5946] hid (null): invalid report_count 32518 [ 373.759106][ T5946] hid-generic 0005:03B6:0800.0002: collection stack underflow [ 373.767238][ T5946] hid-generic 0005:03B6:0800.0002: item 0 1 0 12 parsing failed [ 373.778890][ T5946] hid-generic 0005:03B6:0800.0002: probe with driver hid-generic failed with error -22 [ 373.859557][T13329] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 373.869523][T13329] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 374.333854][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 375.078410][ T5180] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 375.092491][ T5180] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 375.101326][ T5180] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 375.110580][ T5180] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 375.124812][ T5180] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 375.205470][T17861] hsr0 speed is unknown, defaulting to 1000 [ 375.219585][T17861] vxcan1 speed is unknown, defaulting to 1000 [ 375.455841][T17874] __nla_validate_parse: 10 callbacks suppressed [ 375.455861][T17874] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3236'. [ 375.517596][T17876] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3237'. [ 375.553728][T17874] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 375.579678][T17874] netlink: 184 bytes leftover after parsing attributes in process `syz.3.3236'. [ 375.823350][T17888] netlink: 'syz.0.3239': attribute type 13 has an invalid length. [ 375.919478][T17888] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 375.995846][T17895] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3244'. [ 376.053634][T17895] netlink: 'syz.3.3244': attribute type 3 has an invalid length. [ 376.127317][T17895] netlink: 104 bytes leftover after parsing attributes in process `syz.3.3244'. [ 376.230922][T17912] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3248'. [ 376.268368][T17912] veth3: entered allmulticast mode [ 376.292034][T17861] chnl_net:caif_netlink_parms(): no params data found [ 376.437605][T17861] bridge0: port 1(bridge_slave_0) entered blocking state [ 376.445292][T17861] bridge0: port 1(bridge_slave_0) entered disabled state [ 376.452559][T17861] bridge_slave_0: entered allmulticast mode [ 376.461448][T17861] bridge_slave_0: entered promiscuous mode [ 376.471957][T17861] bridge0: port 2(bridge_slave_1) entered blocking state [ 376.479271][T17861] bridge0: port 2(bridge_slave_1) entered disabled state [ 376.487744][T17861] bridge_slave_1: entered allmulticast mode [ 376.495857][T17861] bridge_slave_1: entered promiscuous mode [ 376.535331][T17861] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 376.547913][T17861] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 376.592939][T17861] team0: Port device team_slave_0 added [ 376.601980][T17861] team0: Port device team_slave_1 added [ 376.641684][T17861] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 376.648906][T17861] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 376.675667][T17861] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 376.697735][T17861] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 376.705728][T17861] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 376.736228][T17861] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 376.818284][T17861] hsr_slave_0: entered promiscuous mode [ 376.826006][T17861] hsr_slave_1: entered promiscuous mode [ 376.835258][T17861] debugfs: 'hsr0' already exists in 'hsr' [ 376.841612][T17861] Cannot create hsr debugfs directory [ 377.223750][ T5180] Bluetooth: hci3: command tx timeout [ 377.483120][T17861] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 377.494155][T17861] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 377.640490][T17861] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 377.666797][T17861] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 377.697542][T17959] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3260'. [ 377.844057][T17861] netdevsim netdevsim1 netdevsim1 (unregistering): left allmulticast mode [ 377.864905][T17861] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 377.877687][T17861] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 377.990964][T17861] bond0: (slave ÿÿÿÿÿÿ): Releasing backup interface [ 378.002065][T17861] netdevsim netdevsim1 ÿÿÿÿÿÿ (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 378.013140][T17861] netdevsim netdevsim1 ÿÿÿÿÿÿ (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.272285][T17861] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 378.330403][T17861] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 378.384851][T17861] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 378.462889][T17861] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 378.677427][T17993] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3270'. [ 378.755811][T17996] netlink: 392 bytes leftover after parsing attributes in process `syz.2.3271'. [ 378.890121][T17861] 8021q: adding VLAN 0 to HW filter on device bond0 [ 378.960650][T17861] 8021q: adding VLAN 0 to HW filter on device team0 [ 378.970022][T18005] netlink: 144 bytes leftover after parsing attributes in process `syz.2.3274'. [ 379.000873][ T7735] bridge0: port 1(bridge_slave_0) entered blocking state [ 379.008134][ T7735] bridge0: port 1(bridge_slave_0) entered forwarding state [ 379.071481][T13316] bridge0: port 2(bridge_slave_1) entered blocking state [ 379.078802][T13316] bridge0: port 2(bridge_slave_1) entered forwarding state [ 379.272804][T18012] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 379.306282][ T5180] Bluetooth: hci3: command tx timeout [ 379.319933][T18012] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 379.329405][T18012] gretap1: entered promiscuous mode [ 379.335258][T18012] gretap1: entered allmulticast mode [ 379.464751][T18019] bridge0: port 2(bridge_slave_1) entered disabled state [ 379.472537][T18019] bridge0: port 1(bridge_slave_0) entered disabled state [ 379.708226][T18019] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 379.727193][T18019] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 379.899633][T18019] vlan2: left allmulticast mode [ 379.905766][T18019] mac80211_hwsim hwsim40 wlan0: left allmulticast mode [ 379.922822][ T59] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.977117][ T59] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 380.011960][ T59] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 380.051426][ T59] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 380.195008][T18034] 0ªî{X¹¦: left allmulticast mode [ 380.208085][T18034] sit0: left allmulticast mode [ 380.228023][T18034] syz_tun: left promiscuous mode [ 380.233036][T18034] syz_tun: left allmulticast mode [ 380.253499][T18034] `: left promiscuous mode [ 380.262573][T18034] bridge_slave_1: left promiscuous mode [ 380.271369][T18034] wg1: left promiscuous mode [ 380.276148][T18034] wg1: left allmulticast mode [ 380.292187][T18034] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 380.323186][T18043] netlink: 'syz.0.3287': attribute type 7 has an invalid length. [ 380.348610][T18041] team_slave_0: entered allmulticast mode [ 380.391743][T17861] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 380.502862][T18053] __nla_validate_parse: 4 callbacks suppressed [ 380.502884][T18053] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3290'. [ 380.537265][T18053] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 380.579834][T18053] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 380.596778][T18053] gretap1: entered promiscuous mode [ 380.602158][T18053] gretap1: entered allmulticast mode [ 380.660560][T17861] veth0_vlan: entered promiscuous mode [ 380.713490][T18064] netdevsim netdevsim2 ÿÿÿÿÿÿ: renamed from netdevsim0 [ 380.761420][T17861] veth1_vlan: entered promiscuous mode [ 380.789075][T18070] netlink: 'syz.4.3294': attribute type 4 has an invalid length. [ 380.824149][T18067] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3292'. [ 380.863553][T17861] veth0_macvtap: entered promiscuous mode [ 380.892263][T17861] veth1_macvtap: entered promiscuous mode [ 380.945398][T17861] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 380.997890][T17861] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 381.041213][ T59] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.062262][ T59] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.109731][ T59] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.160199][ T59] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.260639][T18084] can: request_module (can-proto-3) failed. [ 381.325921][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 381.350638][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 381.374238][ T5180] Bluetooth: hci3: command tx timeout [ 381.512794][T13317] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 381.553085][T13317] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 381.743498][T18111] netlink: 'syz.4.3307': attribute type 6 has an invalid length. [ 381.792095][T18111] netlink: 'syz.4.3307': attribute type 1 has an invalid length. [ 381.813011][T18111] netlink: 181400 bytes leftover after parsing attributes in process `syz.4.3307'. [ 381.828199][T18116] TCP: TCP_TX_DELAY enabled [ 381.836859][T18111] netlink: 'syz.4.3307': attribute type 6 has an invalid length. [ 381.883195][T18111] netlink: 'syz.4.3307': attribute type 1 has an invalid length. [ 381.907402][T18111] netlink: 181400 bytes leftover after parsing attributes in process `syz.4.3307'. [ 382.086828][T18123] hsr0 speed is unknown, defaulting to 1000 [ 382.131693][T18127] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3311'. [ 382.202913][T18123] vxcan1 speed is unknown, defaulting to 1000 [ 382.463131][T18133] netlink: 'syz.3.3314': attribute type 25 has an invalid length. [ 382.653495][T18138] bond3: entered promiscuous mode [ 382.744047][T18138] bond3: entered allmulticast mode [ 382.749936][T18138] 8021q: adding VLAN 0 to HW filter on device bond3 [ 383.018873][T18148] netlink: 'syz.4.3317': attribute type 4 has an invalid length. [ 383.126044][T18148] netlink: 'syz.4.3317': attribute type 4 has an invalid length. [ 383.162040][ T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 383.172088][ T51] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 383.180254][ T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 383.188714][ T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 383.196550][ T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 383.412919][T18155] hsr0 speed is unknown, defaulting to 1000 [ 383.453894][ T5180] Bluetooth: hci3: command tx timeout [ 383.492860][T18164] netlink: 80 bytes leftover after parsing attributes in process `syz.1.3320'. [ 383.557872][T18155] vxcan1 speed is unknown, defaulting to 1000 [ 383.944418][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 383.962496][ T1304] clip:clip_start_xmit: skb_dst(skb) == NULL [ 384.109866][T18182] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3326'. [ 384.204976][T18185] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3327'. [ 384.231757][T18186] veth0: entered promiscuous mode [ 384.238179][T18186] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3328'. [ 384.558056][T18182] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3326'. [ 385.298908][ T5180] Bluetooth: hci2: command tx timeout [ 385.321519][T18228] lo: entered promiscuous mode [ 385.330446][T18228] tunl0: entered promiscuous mode [ 385.368443][T18228] gre0: entered promiscuous mode [ 385.393426][T18228] gretap0: entered promiscuous mode [ 385.412860][T18228] erspan0: entered promiscuous mode [ 385.424830][T18228] ip_vti0: entered promiscuous mode [ 385.442191][T18155] chnl_net:caif_netlink_parms(): no params data found [ 385.562289][T18240] sch_tbf: peakrate 7 is lower than or equals to rate 2147483647 ! [ 385.584365][T18241] sch_tbf: peakrate 7 is lower than or equals to rate 2147483647 ! [ 385.790077][T18155] bridge0: port 1(bridge_slave_0) entered blocking state [ 385.805989][T18155] bridge0: port 1(bridge_slave_0) entered disabled state [ 385.814605][T18155] bridge_slave_0: entered allmulticast mode [ 385.842317][T18155] bridge_slave_0: entered promiscuous mode [ 385.864006][T18155] bridge0: port 2(bridge_slave_1) entered blocking state [ 385.871338][T18155] bridge0: port 2(bridge_slave_1) entered disabled state [ 385.889777][T18155] bridge_slave_1: entered allmulticast mode [ 385.906948][T18155] bridge_slave_1: entered promiscuous mode [ 386.114912][T18155] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 386.168213][T18155] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 386.321013][T18271] netlink: 'syz.1.3349': attribute type 1 has an invalid length. [ 386.382662][T18155] team0: Port device team_slave_0 added [ 386.392765][T18281] __nla_validate_parse: 2 callbacks suppressed [ 386.392784][T18281] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3352'. [ 386.397838][T18282] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3351'. [ 386.425412][T18155] team0: Port device team_slave_1 added [ 386.443310][T18278] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3351'. [ 386.470914][T18281] dummy0: entered promiscuous mode [ 386.489940][T18281] dummy0: left promiscuous mode [ 386.628263][T18155] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 386.644318][T18155] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 386.692596][T18155] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 386.761975][T18155] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 386.771508][T18155] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 386.839324][T18155] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 386.857189][T18288] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3354'. [ 387.275744][T18155] hsr_slave_0: entered promiscuous mode [ 387.293137][T18155] hsr_slave_1: entered promiscuous mode [ 387.321463][T18155] debugfs: 'hsr0' already exists in 'hsr' [ 387.329061][T18155] Cannot create hsr debugfs directory [ 387.374406][ T5180] Bluetooth: hci2: command tx timeout [ 387.896250][T18155] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 387.913303][T18339] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 387.924106][T18339] IPVS: set_ctl: invalid protocol: 183 0.0.0.0:0 [ 388.105083][T18155] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 388.154131][T18352] netlink: 'syz.0.3372': attribute type 29 has an invalid length. [ 388.238990][T18352] netlink: 500 bytes leftover after parsing attributes in process `syz.0.3372'. [ 388.298273][T18155] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 388.355954][T18350] netlink: 'syz.0.3372': attribute type 29 has an invalid length. [ 388.415956][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 388.419247][T18366] Bluetooth: MGMT ver 1.23 [ 388.435991][T18155] netdevsim netdevsim2 ÿÿÿÿÿÿ (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 388.437446][T18366] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3374'. [ 388.485600][T18366] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3374'. [ 388.831671][T18155] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 388.844860][T18155] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 388.859166][T18155] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 388.871330][T18155] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 389.106545][T18155] 8021q: adding VLAN 0 to HW filter on device bond0 [ 389.199039][T18155] 8021q: adding VLAN 0 to HW filter on device team0 [ 389.239605][T13329] bridge0: port 1(bridge_slave_0) entered blocking state [ 389.246887][T13329] bridge0: port 1(bridge_slave_0) entered forwarding state [ 389.273078][T13340] bridge0: port 2(bridge_slave_1) entered blocking state [ 389.280306][T13340] bridge0: port 2(bridge_slave_1) entered forwarding state [ 389.292367][T18396] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3384'. [ 389.321952][T18404] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3386'. [ 389.407268][T18407] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3387'. [ 389.453816][ T5180] Bluetooth: hci2: command tx timeout [ 389.542954][T18155] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 389.567960][T18155] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 390.308034][T18453] netlink: 'syz.4.3399': attribute type 1 has an invalid length. [ 390.592403][T18457] 8021q: adding VLAN 0 to HW filter on device bond5 [ 390.628514][T18457] bond4: (slave bond5): making interface the new active one [ 390.659276][T18457] bond4: (slave bond5): Enslaving as an active interface with an up link [ 390.711132][T18453] bond4: (slave gretap2): Enslaving as a backup interface with an up link [ 390.726410][T18459] 8021q: adding VLAN 0 to HW filter on device bond4 [ 390.805748][T18155] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 391.012105][T18155] veth0_vlan: entered promiscuous mode [ 391.092328][T18155] veth1_vlan: entered promiscuous mode [ 391.246264][T18155] veth0_macvtap: entered promiscuous mode [ 391.337488][T18155] veth1_macvtap: entered promiscuous mode [ 391.343101][T18488] netlink: 'syz.4.3405': attribute type 28 has an invalid length. [ 391.359510][T18488] netlink: 'syz.4.3405': attribute type 3 has an invalid length. [ 391.372340][T18488] tipc: Started in network mode [ 391.383192][T18488] tipc: Node identity 6622cb657852, cluster identity 4711 [ 391.398792][T18488] tipc: Enabled bearer , priority 0 [ 391.462347][T18155] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 391.495425][T18499] syzkaller0: entered promiscuous mode [ 391.515356][T18499] syzkaller0: entered allmulticast mode [ 391.527426][T18502] netlink: 'syz.3.3408': attribute type 11 has an invalid length. [ 391.534200][ T5180] Bluetooth: hci2: command tx timeout [ 391.733200][T18155] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 391.750925][T18510] __nla_validate_parse: 3 callbacks suppressed [ 391.750945][T18510] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3412'. [ 391.782291][T18487] tipc: Resetting bearer [ 391.805890][T18512] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3412'. [ 391.816653][T18487] tipc: Disabling bearer [ 391.874143][T13317] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 391.921851][T13329] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 391.936612][T13329] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 391.987067][T13329] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 392.062154][T18518] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3414'. [ 392.089314][T13329] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 392.100108][T13329] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 392.135608][T18521] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3416'. [ 392.157241][T18518] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3414'. [ 392.192802][T18524] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3417'. [ 392.213328][T18521] netlink: 'syz.3.3416': attribute type 26 has an invalid length. [ 392.222222][T18524] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3417'. [ 392.249698][T18524] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3417'. [ 392.264465][T13318] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 392.284974][T13318] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 392.307720][T18528] netlink: 'syz.1.3418': attribute type 10 has an invalid length. [ 392.412073][T18528] 8021q: adding VLAN 0 to HW filter on device team0 [ 392.474799][T18528] bond0: (slave team0): Enslaving as an active interface with an up link [ 392.816015][T18547] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3422'. [ 392.829525][T18545] hsr0 speed is unknown, defaulting to 1000 [ 392.925892][T18554] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3426'. [ 392.982519][T18545] vxcan1 speed is unknown, defaulting to 1000 [ 392.992203][T18552] ipvlan0: entered promiscuous mode [ 393.031736][T18552] ipvlan0: entered allmulticast mode [ 393.061028][T18552] veth0_vlan: entered allmulticast mode [ 394.037755][T18590] tipc: Started in network mode [ 394.058716][T18590] tipc: Node identity 42964a07c9a6, cluster identity 4711 [ 394.082620][T18590] tipc: Enabled bearer , priority 0 [ 394.260410][T18595] syzkaller0: entered promiscuous mode [ 394.266456][T18595] syzkaller0: entered allmulticast mode [ 394.441671][T18601] tipc: Resetting bearer [ 394.509202][T13340] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 394.598733][T18588] tipc: Resetting bearer [ 394.715846][T18588] tipc: Disabling bearer [ 395.605652][T18651] netlink: 'syz.2.3448': attribute type 1 has an invalid length. [ 396.300187][T18676] netlink: 'syz.3.3458': attribute type 11 has an invalid length. [ 396.884036][T18698] netlink: 'syz.3.3467': attribute type 8 has an invalid length. [ 396.933396][T18698] __nla_validate_parse: 12 callbacks suppressed [ 396.933416][T18698] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3467'. [ 396.989034][T18713] netlink: 300 bytes leftover after parsing attributes in process `syz.1.3466'. [ 397.652611][T18717] Set syz1 is full, maxelem 6117 reached [ 397.691111][T18739] syzkaller0: tun_chr_ioctl cmd 35111 [ 397.743031][T18738] syzkaller0: tun_chr_ioctl cmd 2147767507 [ 397.790993][T18745] openvswitch: netlink: Actions may not be safe on all matching packets [ 397.827594][T13316] syzkaller0: tun_net_xmit 76 [ 397.839814][T13316] syzkaller0: tun_net_xmit 48 [ 397.845359][ T9] syzkaller0: tun_net_xmit 76 [ 399.689469][T18768] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3486'. [ 399.729150][T18768] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3486'. [ 399.825874][T18779] delete_channel: no stack [ 399.867559][T18779] ksmbd: Unknown IPC event: 3, ignore. [ 399.899143][T18780] ksmbd: Unknown IPC event: 3, ignore. [ 400.681273][T18801] netlink: 'syz.2.3494': attribute type 29 has an invalid length. [ 400.690719][T18802] netlink: 340 bytes leftover after parsing attributes in process `syz.3.3495'. [ 400.711741][T18801] netlink: 'syz.2.3494': attribute type 29 has an invalid length. [ 400.744925][T18801] netlink: 500 bytes leftover after parsing attributes in process `syz.2.3494'. [ 400.786618][T18801] netlink: 'syz.2.3494': attribute type 3 has an invalid length. [ 401.306095][T18826] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3502'. [ 401.606103][T18840] ieee802154 phy0 wpan0: encryption failed: -22 [ 401.812768][T18849] erspan0: entered allmulticast mode [ 401.848801][T18853] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 401.914494][T18853] bridge0: port 2(bridge_slave_1) entered disabled state [ 401.923437][T18853] bridge0: port 1(bridge_slave_0) entered disabled state [ 402.151513][T18863] netlink: 96 bytes leftover after parsing attributes in process `syz.1.3514'. [ 402.256604][T18866] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3518'. [ 402.293473][T18867] netlink: 112 bytes leftover after parsing attributes in process `syz.0.3516'. [ 402.492590][T18871] netlink: 'syz.1.3519': attribute type 1 has an invalid length. [ 402.523456][T18875] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3521'. [ 402.725821][T18841] lec:lec_atm_close: lec0: Shut down! [ 402.748813][T18885] vlan2: entered promiscuous mode [ 402.774243][T18885] vlan2: entered allmulticast mode [ 402.800527][T18885] hsr_slave_1: entered allmulticast mode [ 403.061073][T18903] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3527'. [ 403.095893][T18903] tipc: Enabling of bearer rejected, failed to enable media [ 403.162822][T18902] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_rx_wq": -EINTR [ 403.288671][T18914] vlan2: entered promiscuous mode [ 403.337515][T18914] bridge0: entered promiscuous mode [ 403.369178][T18920] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3532'. [ 403.396885][T18920] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3532'. [ 403.439062][T18924] netlink: 'syz.1.3533': attribute type 21 has an invalid length. [ 403.455050][T18924] IPv6: NLM_F_CREATE should be specified when creating new route [ 403.696046][T18934] pimreg: entered allmulticast mode [ 403.741621][T18942] pimreg: left allmulticast mode [ 404.021671][T18954] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3543'. [ 404.109835][T18956] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3544'. [ 404.175995][T18960] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 404.248872][T18964] netlink: 'syz.1.3546': attribute type 29 has an invalid length. [ 404.283814][T18964] netlink: 'syz.1.3546': attribute type 29 has an invalid length. [ 404.303023][T18964] netlink: 'syz.1.3546': attribute type 29 has an invalid length. [ 404.357720][T18964] netlink: 'syz.1.3546': attribute type 29 has an invalid length. [ 404.377813][T18964] netlink: 'syz.1.3546': attribute type 29 has an invalid length. [ 404.451101][T18964] netlink: 'syz.1.3546': attribute type 29 has an invalid length. [ 404.465675][T18964] netlink: 'syz.1.3546': attribute type 29 has an invalid length. [ 404.493985][T18964] netlink: 'syz.1.3546': attribute type 29 has an invalid length. [ 404.581049][T18985] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3555'. [ 404.912191][T19000] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.212642][T19018] veth0_virt_wifi: renamed from veth0_vlan [ 405.355758][T19000] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.552725][T19000] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.608348][T19037] syzkaller0: entered promiscuous mode [ 405.614817][T19037] syzkaller0: entered allmulticast mode [ 405.621436][T19040] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input5 [ 405.726018][T19000] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 406.125136][T19065] netlink: 'syz.1.3577': attribute type 11 has an invalid length. [ 406.340631][T13340] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 406.367396][T13317] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 406.452622][T13318] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 406.453944][T19079] Bluetooth: MGMT ver 1.23 [ 406.504960][T13317] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 407.229751][T19122] __nla_validate_parse: 6 callbacks suppressed [ 407.229772][T19122] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.3596'. [ 407.318089][T19131] netlink: 184104 bytes leftover after parsing attributes in process `syz.2.3599'. [ 407.335342][T19122] nbd: must specify a device to reconfigure [ 407.372185][T19130] delete_channel: no stack [ 407.458677][T19139] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3600'. [ 407.659362][T19147] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3600'. [ 407.686259][T19151] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3600'. [ 407.739685][T19139] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3600'. [ 408.199462][ T59] nci: nci_rsp_packet: unknown rsp opcode 0x26 [ 409.455033][T19204] sctp: [Deprecated]: syz.3.3617 (pid 19204) Use of int in max_burst socket option deprecated. [ 409.455033][T19204] Use struct sctp_assoc_value instead [ 409.482478][T19195] mac80211_hwsim hwsim46 wlan1: entered allmulticast mode [ 409.701665][T19217] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3621'. [ 409.862021][T19217] validate_nla: 58 callbacks suppressed [ 409.862043][T19217] netlink: 'syz.4.3621': attribute type 3 has an invalid length. [ 410.053441][T19235] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3627'. [ 410.066340][T19235] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3627'. [ 410.184949][T19233] IPVS: set_ctl: invalid protocol: 41 172.30.0.2:20001 [ 410.204445][T19240] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3628'. [ 410.547382][T19260] sch_tbf: peakrate 7 is lower than or equals to rate 2147483647 ! [ 410.594794][T19253] bridge0: port 2(bridge_slave_1) entered disabled state [ 410.786769][T19267] geneve3: entered promiscuous mode [ 411.564268][T19322] ieee802154 phy0 wpan0: encryption failed: -22 [ 411.815461][T19330] netlink: 'syz.2.3650': attribute type 23 has an invalid length. [ 411.828266][T19328] netlink: 'syz.3.3651': attribute type 1 has an invalid length. [ 411.937317][T19334] bridge0: port 3(syz_tun) entered blocking state [ 411.945235][T19334] bridge0: port 3(syz_tun) entered disabled state [ 411.952437][T19334] syz_tun: entered allmulticast mode [ 411.959935][T19334] syz_tun: entered promiscuous mode [ 411.980506][T19336] bond1: (slave bridge1): making interface the new active one [ 411.988990][T19336] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 412.040982][T19334] syzkaller0: entered promiscuous mode [ 412.060845][T19334] syzkaller0: entered allmulticast mode [ 412.081572][T19334] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 412.352451][T19354] __nla_validate_parse: 3 callbacks suppressed [ 412.352470][T19354] netlink: 108 bytes leftover after parsing attributes in process `syz.2.3659'. [ 412.411271][T19359] tunl0: entered promiscuous mode [ 412.431957][T19359] netlink: 'syz.4.3661': attribute type 3 has an invalid length. [ 412.440756][T19359] netlink: 9 bytes leftover after parsing attributes in process `syz.4.3661'. [ 412.474663][T19357] netlink: 9 bytes leftover after parsing attributes in process `syz.1.3660'. [ 412.612294][T19371] veth0: entered promiscuous mode [ 412.621724][T19369] veth0: left promiscuous mode [ 412.632525][T19374] netlink: 144 bytes leftover after parsing attributes in process `syz.1.3666'. [ 412.847400][T19378] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3667'. [ 412.901125][T19386] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3669'. [ 413.018233][T13340] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 413.032569][T19390] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 413.191270][T19398] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3673'. [ 413.351728][T19403] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3673'. [ 413.385557][T19407] netlink: 244 bytes leftover after parsing attributes in process `syz.0.3676'. [ 413.490013][T19414] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3678'. [ 413.571131][T19414] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 413.921147][T19442] netlink: 'syz.4.3685': attribute type 5 has an invalid length. [ 414.192500][T19452] netlink: 'syz.3.3687': attribute type 1 has an invalid length. [ 414.387298][T19456] 8021q: adding VLAN 0 to HW filter on device bond3 [ 414.398676][T19456] bond2: (slave bond3): making interface the new active one [ 414.407306][T19456] bond2: (slave bond3): Enslaving as an active interface with an up link [ 414.474982][T19464] 8021q: adding VLAN 0 to HW filter on device bond2 [ 414.575354][T19465] netlink: 'syz.4.3692': attribute type 4 has an invalid length. [ 415.118618][T19479] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 415.634906][T19517] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 415.677047][T19515] veth3: entered allmulticast mode [ 416.228760][T19550] netlink: 'syz.2.3722': attribute type 5 has an invalid length. [ 416.443176][T19566] netlink: 'syz.0.3727': attribute type 11 has an invalid length. [ 416.574367][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 417.133757][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 417.175569][T19607] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 417.610258][T19624] netlink: 'syz.0.3744': attribute type 1 has an invalid length. [ 418.001265][T19634] netlink: 'syz.0.3748': attribute type 33 has an invalid length. [ 418.031296][T19634] __nla_validate_parse: 14 callbacks suppressed [ 418.031341][T19634] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3748'. [ 418.095803][T19634] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3748'. [ 418.226451][T19647] sctp: [Deprecated]: syz.2.3753 (pid 19647) Use of struct sctp_assoc_value in delayed_ack socket option. [ 418.226451][T19647] Use struct sctp_sack_info instead [ 418.453416][T19642] netlink: 212352 bytes leftover after parsing attributes in process `syz.3.3750'. [ 418.481865][T19642] openvswitch: netlink: Key 6 has unexpected len 0 expected 2 [ 418.643125][T19663] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.3758'. [ 418.652214][T19664] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3757'. [ 418.656668][T19660] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3756'. [ 418.681898][T19664] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3757'. [ 418.696751][T19664] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3757'. [ 418.798649][T19671] IPVS: Unknown mcast interface: nicvf0 [ 419.235518][T19688] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 419.487894][T19707] mac80211_hwsim hwsim41 wlan1: entered allmulticast mode [ 419.597905][T19711] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 419.723475][T19716] team0: Cannot enslave team device to itself [ 419.767040][T19719] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3778'. [ 420.098821][T19732] bond6: entered promiscuous mode [ 420.104900][T19732] bond6: entered allmulticast mode [ 420.110475][T19732] 8021q: adding VLAN 0 to HW filter on device bond6 [ 420.122990][T19733] sch_tbf: burst 4 is lower than device ip6tnl0 mtu (1452) ! [ 420.198352][T19744] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 420.952153][T19766] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3793'. [ 421.583292][T19803] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 421.590768][T19803] IPv6: NLM_F_CREATE should be set when creating new route [ 421.615515][T19804] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 421.630316][T19802] veth0: entered promiscuous mode [ 421.644104][T19802] veth0: left promiscuous mode [ 421.667448][T19804] netlink: 'syz.1.3804': attribute type 1 has an invalid length. [ 421.687334][T19804] netlink: 'syz.1.3804': attribute type 1 has an invalid length. [ 421.724742][T19803] bond0: (slave bond_slave_1): Releasing backup interface [ 421.747880][T19808] nbd: must specify a size in bytes for the device [ 421.775320][T19808] netlink: 'syz.3.3806': attribute type 58 has an invalid length. [ 421.930775][T19814] Bluetooth: MGMT ver 1.23 [ 421.959410][T19814] netlink: 'syz.2.3808': attribute type 1 has an invalid length. [ 422.016255][T19822] netem: incorrect gi model size [ 422.021711][T19822] netem: change failed [ 422.192313][T19829] netlink: 'syz.1.3813': attribute type 4 has an invalid length. [ 422.389579][T19837] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 422.691343][T19853] netlink: 'syz.3.3820': attribute type 33 has an invalid length. [ 423.159085][T19874] openvswitch: netlink: IPv4 tun info is not correct [ 423.177120][T19876] __nla_validate_parse: 11 callbacks suppressed [ 423.177140][T19876] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3827'. [ 423.363413][T19885] netlink: 'syz.2.3830': attribute type 24 has an invalid length. [ 423.419411][T19889] bond0: entered promiscuous mode [ 423.424707][T19889] bond_slave_0: entered promiscuous mode [ 423.431457][T19889] bond_slave_1: entered promiscuous mode [ 423.497479][ T5180] block nbd1: Receive control failed (result -32) [ 423.616514][T19897] veth0: entered promiscuous mode [ 423.633378][T19898] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3834'. [ 423.773029][T19899] hsr0 speed is unknown, defaulting to 1000 [ 423.799901][T19899] vxcan1 speed is unknown, defaulting to 1000 [ 424.141305][T19911] team_slave_0: entered promiscuous mode [ 424.147136][T19911] team_slave_1: entered promiscuous mode [ 424.171668][T19911] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 424.180384][T19911] team0: Device macvtap1 is already an upper device of the team interface [ 424.181566][T19915] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3842'. [ 424.209129][T19911] team_slave_0: left promiscuous mode [ 424.214705][T19911] team_slave_1: left promiscuous mode [ 424.277319][T19919] syzkaller1: entered promiscuous mode [ 424.282971][T19919] syzkaller1: entered allmulticast mode [ 424.292612][T19916] PF_CAN: dropped non conform CAN skbuff: dev type 280, len 324 [ 424.453008][T19926] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3845'. [ 424.577647][T19932] netlink: 'syz.0.3844': attribute type 10 has an invalid length. [ 424.610619][T19932] mac80211_hwsim hwsim41 wlan1: left allmulticast mode [ 425.134362][T19950] netlink: 'syz.0.3853': attribute type 1 has an invalid length. [ 425.145460][T19950] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3853'. [ 425.160889][T19950] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3853'. [ 425.301657][T19958] veth1_macvtap: left promiscuous mode [ 425.316819][T19958] macsec0: entered promiscuous mode [ 425.323306][T19958] macsec0: entered allmulticast mode [ 425.351947][T19956] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3854'. [ 425.395129][T19959] bridge2: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 425.453280][T19966] bridge3: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 425.464514][T19958] veth1_macvtap: entered promiscuous mode [ 425.472710][T19958] veth1_macvtap: entered allmulticast mode [ 425.492150][T19958] macsec0: left promiscuous mode [ 425.507577][T19958] macsec0: left allmulticast mode [ 425.521698][T19958] veth1_macvtap: left allmulticast mode [ 425.534002][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 425.547914][T19956] tipc: Started in network mode [ 425.566782][T19956] tipc: Node identity c, cluster identity 4711 [ 425.589363][T19956] tipc: Node number set to 12 [ 425.843244][T19985] sctp: [Deprecated]: syz.0.3863 (pid 19985) Use of int in maxseg socket option. [ 425.843244][T19985] Use struct sctp_assoc_value instead [ 425.914207][T19990] netlink: 96 bytes leftover after parsing attributes in process `syz.1.3865'. [ 426.237637][T17135] IPVS: starting estimator thread 0... [ 426.363908][T20005] IPVS: using max 25 ests per chain, 60000 per kthread [ 426.388420][T20012] sctp: [Deprecated]: syz.3.3872 (pid 20012) Use of int in maxseg socket option. [ 426.388420][T20012] Use struct sctp_assoc_value instead [ 426.463195][T20020] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3871'. [ 426.632582][T20031] vxcan1: tx drop: invalid da for name 0x0000000000000014 [ 426.681838][T20027] netlink: 'syz.3.3876': attribute type 10 has an invalid length. [ 426.789731][T20027] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 426.889189][T20039] bridge_slave_0: left allmulticast mode [ 426.894550][T20047] netlink: 'syz.1.3878': attribute type 18 has an invalid length. [ 426.916709][T20039] bridge_slave_0: left promiscuous mode [ 426.934160][T20039] bridge0: port 1(bridge_slave_0) entered disabled state [ 426.990766][T20039] bridge_slave_1: left allmulticast mode [ 427.012513][T20039] bridge_slave_1: left promiscuous mode [ 427.039681][T20039] bridge0: port 2(bridge_slave_1) entered disabled state [ 427.072327][T20039] bond0: (slave bond_slave_0): Releasing backup interface [ 427.124986][T20039] bond0: (slave bond_slave_1): Releasing backup interface [ 427.191567][T20039] team0: Port device team_slave_0 removed [ 427.233047][T20039] team0: Port device team_slave_1 removed [ 427.252767][T20039] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 427.265838][T20039] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 427.276399][T20039] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 427.284660][T20039] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 427.311036][T20039] bond0: (slave wlan1): Releasing backup interface [ 427.360389][T20067] netlink: 'syz.4.3883': attribute type 7 has an invalid length. [ 427.370053][T20039] bond1: (slave bridge1): Releasing active interface [ 427.415335][T20039] bond2: (slave bond3): Releasing backup interface [ 427.477591][T20041] syzkaller1: entered promiscuous mode [ 427.483434][T20041] syzkaller1: entered allmulticast mode [ 427.526429][T20067] : entered promiscuous mode [ 427.639850][T20075] tipc: Enabling of bearer rejected, failed to enable media [ 427.657222][T20075] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3886'. [ 428.128673][T20099] openvswitch: netlink: Missing key (keys=40, expected=80) [ 428.219964][T20100] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.3895'. [ 428.265625][T20107] netlink: 'syz.3.3898': attribute type 24 has an invalid length. [ 428.437310][T20115] netlink: 'syz.2.3901': attribute type 1 has an invalid length. [ 428.511949][T20119] netlink: 'syz.2.3901': attribute type 1 has an invalid length. [ 428.973905][T20145] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3911'. [ 428.996399][T20146] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3910'. [ 429.042819][T20148] tipc: Enabled bearer , priority 0 [ 429.126094][T20152] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 429.261933][T20148] syzkaller0: entered promiscuous mode [ 429.279970][T20148] syzkaller0: entered allmulticast mode [ 429.290941][T20148] tipc: Resetting bearer [ 429.328642][T20147] tipc: Resetting bearer [ 429.346890][T20163] netlink: 144 bytes leftover after parsing attributes in process `syz.4.3918'. [ 429.689674][T20184] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3922'. [ 429.886486][T20190] netlink: 'syz.2.3924': attribute type 1 has an invalid length. [ 429.894374][T20190] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3924'. [ 429.903515][T20190] nbd: couldn't find device at index 1048576 [ 429.930988][T20190] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3924'. [ 431.283174][T20147] tipc: Disabling bearer [ 431.303470][T20178] netlink: 84 bytes leftover after parsing attributes in process `syz.3.3922'. [ 431.476654][T20189] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 431.665781][T20205] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3928'. [ 431.701640][T20208] netlink: 144 bytes leftover after parsing attributes in process `syz.3.3930'. [ 431.804220][T20213] sit0: entered promiscuous mode [ 431.809382][T20213] netlink: 'syz.0.3931': attribute type 1 has an invalid length. [ 431.929836][T20216] netlink: 'syz.2.3932': attribute type 13 has an invalid length. [ 431.987909][T20216] veth0_macvtap: left promiscuous mode [ 431.995979][T20216] macvtap0: entered allmulticast mode [ 432.019523][T20216] macvtap0: refused to change device tx_queue_len [ 432.043030][T20218] netlink: zone id is out of range [ 432.051730][T20218] netlink: zone id is out of range [ 432.063201][T20218] netlink: get zone limit has 8 unknown bytes [ 432.199522][T20227] netlink: 'syz.4.3935': attribute type 10 has an invalid length. [ 432.224150][T20227] dummy0: entered promiscuous mode [ 432.236153][T20227] bridge0: port 3(dummy0) entered blocking state [ 432.260292][T20227] bridge0: port 3(dummy0) entered disabled state [ 432.301329][T20227] dummy0: entered allmulticast mode [ 432.330560][T20227] bridge0: port 3(dummy0) entered blocking state [ 432.337143][T20227] bridge0: port 3(dummy0) entered forwarding state [ 432.755947][T20243] netlink: 'syz.2.3940': attribute type 3 has an invalid length. [ 433.289321][T20281] __nla_validate_parse: 11 callbacks suppressed [ 433.289343][T20281] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3951'. [ 433.310100][T20247] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3941'. [ 433.429098][T20247] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3941'. [ 433.444912][T20286] netlink: 144 bytes leftover after parsing attributes in process `syz.2.3952'. [ 433.458109][T20281] nbd: must specify a size in bytes for the device [ 433.614760][T20295] netlink: 240 bytes leftover after parsing attributes in process `syz.3.3954'. [ 433.733288][T20300] netlink: 'syz.2.3956': attribute type 1 has an invalid length. [ 433.795357][T20300] 8021q: adding VLAN 0 to HW filter on device bond2 [ 434.074566][T20319] veth0_to_team: entered promiscuous mode [ 434.080474][T20319] veth0_to_team: entered allmulticast mode [ 434.085267][T20324] netlink: 144 bytes leftover after parsing attributes in process `syz.3.3966'. [ 434.111856][T20322] smc: ib device syz2 ibport 1 applied user defined pnetid SYZ0 [ 434.262099][T20332] netlink: 27 bytes leftover after parsing attributes in process `syz.4.3968'. [ 434.536910][T20345] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 434.570960][T20346] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3972'. [ 434.761486][T20348] syzkaller0: entered promiscuous mode [ 434.769323][T20348] syzkaller0: entered allmulticast mode [ 434.927411][T20359] netlink: 'syz.4.3977': attribute type 6 has an invalid length. [ 434.936209][T20359] netlink: 'syz.4.3977': attribute type 1 has an invalid length. [ 434.947353][T20359] netlink: 181400 bytes leftover after parsing attributes in process `syz.4.3977'. [ 435.108844][T20366] netlink: 2132 bytes leftover after parsing attributes in process `syz.0.3978'. [ 435.113066][T20368] netlink: 'syz.2.3979': attribute type 1 has an invalid length. [ 435.501081][T20384] pim6reg1: entered promiscuous mode [ 435.511028][T20384] pim6reg1: entered allmulticast mode [ 436.471563][T20438] netlink: 'syz.0.4004': attribute type 39 has an invalid length. [ 436.480535][T20435] pim6reg: entered allmulticast mode [ 436.559538][T20438] syz_tun (unregistering): left allmulticast mode [ 436.575599][T20438] syz_tun (unregistering): left promiscuous mode [ 436.582347][T20438] bridge0: port 3(syz_tun) entered disabled state [ 436.611682][T20428] pim6reg: left allmulticast mode [ 436.859237][T20459] openvswitch: netlink: Missing key (keys=40, expected=100) [ 436.871728][T20452] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 437.289956][T20478] tap0: tun_chr_ioctl cmd 1074025677 [ 437.357535][T20478] tap0: linktype set to 65534 [ 437.408997][T20491] ieee802154 phy0 wpan0: encryption failed: -22 [ 437.606331][T20495] netlink: 'syz.0.4021': attribute type 64 has an invalid length. [ 437.948601][T20515] netlink: 'syz.0.4030': attribute type 1 has an invalid length. [ 438.053449][T20517] syzkaller1: entered promiscuous mode [ 438.060090][T20517] syzkaller1: entered allmulticast mode [ 438.146275][T20523] bond1: (slave gretap2): making interface the new active one [ 438.159321][T20523] bond1: (slave gretap2): Enslaving as an active interface with an up link [ 438.165085][T20527] netlink: 'syz.4.4033': attribute type 11 has an invalid length. [ 438.176787][ T51] Bluetooth: hci0: command 0x0c1a tx timeout [ 438.182938][ T5180] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 438.195612][T20515] 8021q: adding VLAN 0 to HW filter on device bond1 [ 438.335237][T13316] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 438.487072][T20541] __nla_validate_parse: 23 callbacks suppressed [ 438.487092][T20541] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4036'. [ 438.504766][T20541] bridge0: port 2(bridge_slave_1) entered disabled state [ 438.512593][T20541] bridge0: port 1(bridge_slave_0) entered disabled state [ 438.840827][T20552] netlink: 'syz.4.4041': attribute type 1 has an invalid length. [ 438.904059][T20553] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4041'. [ 439.093344][T20552] 8021q: adding VLAN 0 to HW filter on device bond7 [ 439.227517][T20561] vcan0: tx drop: invalid sa for name 0x0000000000000002 [ 439.258379][T20561] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 439.361723][T20546] lec:lec_atm_close: lec0: Shut down! [ 439.390348][T20571] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4045'. [ 439.674513][T20585] netlink: 'syz.0.4049': attribute type 2 has an invalid length. [ 439.685104][T20585] netlink: 'syz.0.4049': attribute type 8 has an invalid length. [ 439.694220][T20585] netlink: 1148 bytes leftover after parsing attributes in process `syz.0.4049'. [ 439.715300][T20587] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4050'. [ 439.730344][T20588] netlink: 204172 bytes leftover after parsing attributes in process `syz.2.4050'. [ 439.740796][T20588] openvswitch: netlink: Message has 5 unknown bytes. [ 439.758034][T20590] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4049'. [ 440.019769][T20598] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4053'. [ 440.764118][T20641] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 440.864707][T20647] tipc: Started in network mode [ 440.870699][T20647] tipc: Node identity 6a2934150de3, cluster identity 4711 [ 440.919597][T20647] tipc: Enabled bearer , priority 0 [ 440.998284][T20654] syzkaller0: entered promiscuous mode [ 441.012238][T20654] syzkaller0: entered allmulticast mode [ 441.064613][T20647] tipc: Resetting bearer [ 441.094750][T20645] tipc: Resetting bearer [ 441.196114][T20668] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 441.223771][T20645] tipc: Disabling bearer [ 441.513495][T20612] lec:lec_atm_close: lec0: Shut down! [ 441.547867][T20678] tipc: Enabling not permitted [ 441.571532][T20678] tipc: Enabling of bearer rejected, failed to enable media [ 441.875807][T20687] netlink: 'syz.3.4080': attribute type 14 has an invalid length. [ 441.915955][T20687] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4080'. [ 442.009447][T20694] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 442.015773][T20687] netlink: 'syz.3.4080': attribute type 14 has an invalid length. [ 442.020835][ T59] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 442.038307][ T59] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 442.081535][T20687] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4080'. [ 442.105239][ T59] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 442.126025][ T59] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 442.265828][T20700] mac80211_hwsim hwsim44 wlan1: entered allmulticast mode [ 442.814139][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 442.885019][T20733] pim6reg1: entered promiscuous mode [ 442.920061][T20733] pim6reg1: entered allmulticast mode [ 443.069882][T20738] tipc: Enabled bearer , priority 0 [ 443.077620][T20738] syzkaller0: entered promiscuous mode [ 443.083324][T20738] syzkaller0: entered allmulticast mode [ 443.179384][T20738] tipc: Resetting bearer [ 443.202095][T20737] tipc: Resetting bearer [ 443.246100][T20737] tipc: Disabling bearer [ 443.412462][T20755] netlink: 'syz.2.4102': attribute type 4 has an invalid length. [ 443.522862][T20719] lec:lec_atm_close: lec0: Shut down! [ 443.572410][T20760] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4104'. [ 443.805451][T20768] netlink: 'syz.1.4107': attribute type 5 has an invalid length. [ 443.977977][T20775] netlink: 104 bytes leftover after parsing attributes in process `syz.1.4110'. [ 444.317281][T20794] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4118'. [ 444.573355][T20806] netlink: 72 bytes leftover after parsing attributes in process `syz.3.4122'. [ 444.946032][T20828] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 444.983057][T20828] netlink: 6440 bytes leftover after parsing attributes in process `syz.1.4128'. [ 445.027037][T20831] netlink: 'syz.2.4129': attribute type 1 has an invalid length. [ 445.040757][T20831] netlink: 'syz.2.4129': attribute type 4 has an invalid length. [ 445.069221][T20831] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.4129'. [ 445.326220][T20791] lec:lec_atm_close: lec0: Shut down! [ 445.381340][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 445.391762][ T1304] clip:clip_start_xmit: skb_dst(skb) == NULL [ 445.711436][T20864] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.4137'. [ 446.276202][T20887] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4144'. [ 446.392617][T20895] netlink: 'syz.0.4146': attribute type 8 has an invalid length. [ 446.682938][T20907] netlink: 'syz.0.4150': attribute type 10 has an invalid length. [ 446.962250][T20913] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4152'. [ 446.982099][T20913] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4152'. [ 447.921557][T20963] netlink: 'syz.2.4167': attribute type 33 has an invalid length. [ 448.168447][T20980] netdevsim netdevsim1: Direct firmware load for ..€ failed with error -2 [ 448.226260][T20980] netdevsim netdevsim1: Falling back to sysfs fallback for: ..€ [ 448.229378][T20985] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 448.589065][T21000] bond0: entered promiscuous mode [ 448.610195][T21000] bond_slave_0: entered promiscuous mode [ 448.629098][T21000] bond_slave_1: entered promiscuous mode [ 448.652783][T21000] batadv0: entered promiscuous mode [ 448.709227][T21000] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 448.730620][T21000] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 448.759808][T21000] hsr1: entered allmulticast mode [ 448.772953][T21000] bond0: entered allmulticast mode [ 448.788194][T21000] bond_slave_0: entered allmulticast mode [ 448.808814][T21000] bond_slave_1: entered allmulticast mode [ 448.822857][T21000] batadv0: entered allmulticast mode [ 448.832078][T21000] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 448.860737][T20976] lec:lec_atm_close: lec0: Shut down! [ 448.997799][T20989] netdevsim netdevsim1: Direct firmware load for ..€ failed with error -2 [ 449.044215][T20989] netdevsim netdevsim1: Falling back to sysfs fallback for: ..€ [ 449.086939][T21013] __nla_validate_parse: 11 callbacks suppressed [ 449.086960][T21013] netlink: 144 bytes leftover after parsing attributes in process `syz.4.4183'. [ 449.112478][T21015] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4184'. [ 449.171014][T21015] macsec1: entered promiscuous mode [ 449.199410][T21018] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4185'. [ 449.212539][T21021] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4184'. [ 449.222790][T21015] team0: entered promiscuous mode [ 449.228345][T21015] team_slave_0: entered promiscuous mode [ 449.235704][T21021] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4184'. [ 449.249516][T21015] team_slave_1: entered promiscuous mode [ 449.259557][T21015] macsec1: entered allmulticast mode [ 449.272169][T21021] netlink: 'syz.0.4184': attribute type 6 has an invalid length. [ 449.277535][T21015] team0: entered allmulticast mode [ 449.286254][T21015] team_slave_0: entered allmulticast mode [ 449.292411][T21015] team_slave_1: entered allmulticast mode [ 449.299628][T21015] team0: Device macsec1 is already an upper device of the team interface [ 449.312902][T21018] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4185'. [ 449.317494][T21015] team0: left allmulticast mode [ 449.328341][T21015] team_slave_0: left allmulticast mode [ 449.334035][T21015] team_slave_1: left allmulticast mode [ 449.345958][T21015] team0: left promiscuous mode [ 449.360743][T21015] team_slave_0: left promiscuous mode [ 449.365170][T21025] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4185'. [ 449.366839][T21015] team_slave_1: left promiscuous mode [ 449.500838][T21024] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4184'. [ 449.523022][T21036] netlink: 'syz.3.4189': attribute type 1 has an invalid length. [ 449.559037][T21025] vlan4: entered allmulticast mode [ 449.568515][T21025] mac80211_hwsim hwsim47 wlan0: entered allmulticast mode [ 449.630734][T21039] bond4 (unregistering): Released all slaves [ 449.734515][T21034] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4189'. [ 449.751057][T21046] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4191'. [ 449.905268][T21046] netlink: 'syz.2.4191': attribute type 1 has an invalid length. [ 449.913279][T21046] netlink: 'syz.2.4191': attribute type 2 has an invalid length. [ 450.107345][T21060] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 451.020620][T21058] lec:lec_atm_close: lec0: Shut down! [ 451.732686][T21130] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 452.401237][T21146] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 452.574986][ T51] Bluetooth: hci4: command 0x0406 tx timeout [ 453.339837][T21149] lec:lec_atm_close: lec0: Shut down! [ 453.390703][T21174] 8021q: adding VLAN 0 to HW filter on device bond8 [ 453.402022][T21179] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_team, syncid = 4, id = 0 [ 453.853474][T21200] bridge3: entered promiscuous mode [ 453.884956][T21200] bridge3: entered allmulticast mode [ 454.110210][T21212] af_packet: tpacket_rcv: packet too big, clamped from 179 to 4294967272. macoff=96 [ 454.138878][T21211] __nla_validate_parse: 13 callbacks suppressed [ 454.138899][T21211] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4234'. [ 454.180216][T21211] netlink: 'syz.1.4234': attribute type 6 has an invalid length. [ 454.209471][T21216] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4235'. [ 454.486455][T21227] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4238'. [ 454.786182][T21236] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4242'. [ 454.804599][T21236] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4242'. [ 454.838724][T21238] netlink: 'syz.2.4243': attribute type 1 has an invalid length. [ 454.866417][T21238] netlink: 'syz.2.4243': attribute type 11 has an invalid length. [ 454.879107][T21238] netlink: 220 bytes leftover after parsing attributes in process `syz.2.4243'. [ 454.900342][T21240] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4244'. [ 454.922147][T21240] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4244'. [ 454.960843][T21243] x_tables: ip_tables: udp match: only valid for protocol 17 [ 455.221472][T21217] lec:lec_atm_close: lec0: Shut down! [ 455.247782][T21251] netlink: 128 bytes leftover after parsing attributes in process `syz.1.4246'. [ 455.257915][T21251] netlink: 128 bytes leftover after parsing attributes in process `syz.1.4246'. [ 455.737169][T21276] macvlan0: entered allmulticast mode [ 455.742910][T21276] veth1_vlan: entered allmulticast mode [ 456.208725][T21298] netlink: 'syz.2.4263': attribute type 1 has an invalid length. [ 456.767341][T21319] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 456.776692][T21317] netdevsim netdevsim2 ÿÿÿÿÿÿ: renamed from netdevsim0 [ 457.312306][T21312] lec:lec_atm_close: lec0: Shut down! [ 457.790476][T21367] bridge_slave_1: left allmulticast mode [ 457.802531][T21367] bridge_slave_1: left promiscuous mode [ 457.820200][T21367] bridge0: port 2(bridge_slave_1) entered disabled state [ 457.850218][T21367] bridge_slave_0: left allmulticast mode [ 457.880302][T21367] bridge_slave_0: left promiscuous mode [ 457.923046][T21367] bridge0: port 1(bridge_slave_0) entered disabled state [ 458.051401][T21388] netlink: 'syz.3.4289': attribute type 1 has an invalid length. [ 458.263025][T21397] netlink: 'syz.2.4290': attribute type 11 has an invalid length. [ 458.272694][T21400] netlink: 'syz.2.4290': attribute type 11 has an invalid length. [ 458.510846][T21403] IPVS: persistence engine module ip_vs_pe_@ not found [ 458.704575][T21389] gretap1: entered promiscuous mode [ 459.060355][T21395] lec:lec_atm_close: lec0: Shut down! [ 459.314891][T21439] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 459.596739][T21448] __nla_validate_parse: 16 callbacks suppressed [ 459.596759][T21448] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4303'. [ 459.633665][T21450] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4303'. [ 459.666036][T21448] netlink: 212360 bytes leftover after parsing attributes in process `syz.0.4303'. [ 459.671659][T21453] (unnamed net_device) (uninitialized): option lp_interval: invalid value (0) [ 459.706572][T21452] netlink: 212360 bytes leftover after parsing attributes in process `syz.0.4303'. [ 459.720755][T21453] (unnamed net_device) (uninitialized): option lp_interval: allowed values 1 - 2147483647 [ 459.865616][T21463] netlink: 'syz.2.4306': attribute type 2 has an invalid length. [ 459.916823][T21463] netlink: 'syz.2.4306': attribute type 178 has an invalid length. [ 460.271231][T21491] netlink: 'syz.2.4315': attribute type 1 has an invalid length. [ 460.282041][T21491] netlink: 172 bytes leftover after parsing attributes in process `syz.2.4315'. [ 460.956422][T21513] syzkaller1: entered promiscuous mode [ 460.962300][T21513] syzkaller1: entered allmulticast mode [ 460.999918][T21514] netlink: 'syz.3.4319': attribute type 13 has an invalid length. [ 461.289655][T21487] lec:lec_atm_close: lec0: Shut down! [ 461.495425][T21534] netlink: 'syz.3.4323': attribute type 23 has an invalid length. [ 461.913233][T21553] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4328'. [ 461.953907][T21561] netlink: 'syz.3.4332': attribute type 2 has an invalid length. [ 461.962584][T21553] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 462.646608][T21598] sctp: [Deprecated]: syz.0.4343 (pid 21598) Use of int in maxseg socket option. [ 462.646608][T21598] Use struct sctp_assoc_value instead [ 462.988586][T21610] netlink: 'syz.0.4347': attribute type 1 has an invalid length. [ 463.066557][T21575] lec:lec_atm_close: lec0: Shut down! [ 463.103141][T21621] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4350'. [ 463.161694][T21618] bond2: (slave gretap3): making interface the new active one [ 463.178309][T21618] bond2: (slave gretap3): Enslaving as an active interface with an up link [ 463.461262][T21630] netlink: 'syz.1.4352': attribute type 10 has an invalid length. [ 463.483078][T21630] team0: Device ipvlan1 failed to register rx_handler [ 463.569873][T21640] IPv6: addrconf: prefix option has invalid lifetime [ 463.580010][T21639] IPv6: addrconf: prefix option has invalid lifetime [ 463.706253][T21646] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4358'. [ 463.962727][T21658] netlink: 2 bytes leftover after parsing attributes in process `syz.3.4362'. [ 464.115598][T21667] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4365'. [ 464.202744][T21667] netlink: 'syz.1.4365': attribute type 10 has an invalid length. [ 464.224546][T21667] syz_tun: entered promiscuous mode [ 464.240679][T21667] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 464.779637][T21697] netlink: 'syz.4.4375': attribute type 10 has an invalid length. [ 464.801579][T21697] bridge0: port 2(bridge_slave_1) entered disabled state [ 464.834064][T21697] bridge_slave_1: left allmulticast mode [ 464.850152][T21697] bridge_slave_1: left promiscuous mode [ 464.877414][T21697] bridge0: port 2(bridge_slave_1) entered disabled state [ 465.061327][T21697] bridge_slave_1: entered promiscuous mode [ 465.076203][T21697] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 465.237544][T21704] __nla_validate_parse: 3 callbacks suppressed [ 465.237565][T21704] netlink: 163948 bytes leftover after parsing attributes in process `syz.3.4378'. [ 465.419080][T21710] syzkaller0: entered promiscuous mode [ 465.425402][T21710] syzkaller0: entered allmulticast mode [ 466.367794][T21753] openvswitch: netlink: Key type 29 is not supported [ 466.447695][T21753] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 466.538769][T21753] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 466.549046][T21753] gretap1: entered promiscuous mode [ 466.600911][T21753] gretap1: entered allmulticast mode [ 466.669951][T21759] hsr0 speed is unknown, defaulting to 1000 [ 466.682190][T21759] vxcan1 speed is unknown, defaulting to 1000 [ 466.846231][T21739] lec:lec_atm_close: lec0: Shut down! [ 466.998360][T21737] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 467.228105][T21775] tipc: Enabled bearer , priority 0 [ 467.264895][T21775] tipc: Resetting bearer [ 467.439522][T21790] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4404'. [ 467.488614][T21790] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4404'. [ 467.507565][T21790] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4404'. [ 467.572926][T21790] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4404'. [ 467.655927][T21790] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4404'. [ 467.670975][T21800] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4406'. [ 467.680840][T21800] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4406'. [ 467.904858][T21810] netlink: 256 bytes leftover after parsing attributes in process `syz.3.4409'. [ 468.244621][T21809] nbd2: detected capacity change from 0 to 127 [ 468.380212][ T5180] block nbd2: Receive control failed (result -104) [ 468.795685][T21833] netlink: 'syz.2.4414': attribute type 22 has an invalid length. [ 468.804102][T21833] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4414'. [ 468.894761][ T5956] netdevsim netdevsim2 ÿÿÿÿÿÿ: set [0, 0] type 1 family 0 port 8472 - 0 [ 468.905845][ T7735] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 468.937444][ T7735] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 468.984000][ T7735] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 469.389446][T21820] lec:lec_atm_close: lec0: Shut down! [ 469.439393][T21865] netlink: 'syz.1.4425': attribute type 39 has an invalid length. [ 469.601557][T21865] bond0: (slave syz_tun): Releasing backup interface [ 469.697825][T21890] netlink: 'syz.2.4430': attribute type 10 has an invalid length. [ 469.723214][T21890] bridge_slave_1: left allmulticast mode [ 469.752273][T21890] bridge_slave_1: left promiscuous mode [ 469.772660][T21890] bridge0: port 2(bridge_slave_1) entered disabled state [ 469.859835][T21890] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 470.108932][T21906] netlink: 'syz.1.4434': attribute type 13 has an invalid length. [ 470.403399][T21925] __nla_validate_parse: 4 callbacks suppressed [ 470.403420][T21925] netlink: 104 bytes leftover after parsing attributes in process `syz.3.4442'. [ 470.456702][T21926] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4442'. [ 470.750815][T21935] Unsupported ieee802154 address type: 0 [ 470.941843][T21943] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4448'. [ 470.972079][T21943] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4448'. [ 471.014179][T21946] veth0: entered promiscuous mode [ 471.043055][T21946] veth0: left promiscuous mode [ 471.268506][T21957] netlink: 'syz.4.4449': attribute type 27 has an invalid length. [ 471.277912][T21957] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4449'. [ 471.301287][T21957] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4449'. [ 471.515571][T21961] netlink: 68 bytes leftover after parsing attributes in process `syz.0.4455'. [ 471.540496][T21971] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4458'. [ 471.614575][T13339] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 471.739507][T21984] bridge5: entered promiscuous mode [ 471.766513][T21984] bridge5: entered allmulticast mode [ 471.964849][T21991] netlink: 'syz.2.4461': attribute type 1 has an invalid length. [ 472.012026][T21991] 8021q: adding VLAN 0 to HW filter on device bond4 [ 472.117636][T21991] bond4: (slave vlan5): making interface the new active one [ 472.150288][T21991] bond4: (slave vlan5): Enslaving as an active interface with an up link [ 472.244503][T22003] netlink: 'syz.4.4466': attribute type 21 has an invalid length. [ 472.310179][T22008] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4467'. [ 472.320737][T22008] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4467'. [ 472.542375][T22016] sch_tbf: burst 8 is lower than device ip6tnl0 mtu (1536) ! [ 473.681730][ T30] audit: type=1800 audit(1754720781.828:10): pid=22066 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.4484" name="memory.events" dev="tmpfs" ino=1484 res=0 errno=0 [ 473.958426][T22076] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 473.974377][ T5933] IPVS: starting estimator thread 0... [ 474.073911][T22085] IPVS: using max 24 ests per chain, 57600 per kthread [ 474.612050][T22120] netlink: 'syz.0.4500': attribute type 1 has an invalid length. [ 475.485689][T22171] __nla_validate_parse: 12 callbacks suppressed [ 475.485710][T22171] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4511'. [ 476.096019][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 476.106828][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 476.321386][T22218] netlink: 51 bytes leftover after parsing attributes in process `syz.0.4525'. [ 476.422549][T22223] tipc: Enabling of bearer rejected, already enabled [ 476.441588][T22222] FAULT_INJECTION: forcing a failure. [ 476.441588][T22222] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 476.469427][T22222] CPU: 0 UID: 0 PID: 22222 Comm: syz.2.4528 Not tainted 6.16.0-syzkaller-12084-g33caa208dba6 #0 PREEMPT(full) [ 476.469477][T22222] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 476.469504][T22222] Call Trace: [ 476.469513][T22222] [ 476.469523][T22222] dump_stack_lvl+0x189/0x250 [ 476.469556][T22222] ? __pfx____ratelimit+0x10/0x10 [ 476.469584][T22222] ? __pfx_dump_stack_lvl+0x10/0x10 [ 476.469610][T22222] ? __pfx__printk+0x10/0x10 [ 476.469641][T22222] ? __might_fault+0xb0/0x130 [ 476.469685][T22222] should_fail_ex+0x414/0x560 [ 476.469716][T22222] _copy_from_user+0x2d/0xb0 [ 476.469739][T22222] ___sys_sendmsg+0x158/0x2a0 [ 476.469775][T22222] ? __pfx____sys_sendmsg+0x10/0x10 [ 476.469851][T22222] ? __fget_files+0x2a/0x420 [ 476.469883][T22222] ? __fget_files+0x3a0/0x420 [ 476.469928][T22222] __sys_sendmmsg+0x227/0x430 [ 476.469968][T22222] ? __pfx___sys_sendmmsg+0x10/0x10 [ 476.469998][T22222] ? __mutex_unlock_slowpath+0x1a1/0x760 [ 476.470059][T22222] ? ksys_write+0x22a/0x250 [ 476.470091][T22222] ? __pfx_ksys_write+0x10/0x10 [ 476.470117][T22222] ? rcu_is_watching+0x15/0xb0 [ 476.470147][T22222] __x64_sys_sendmmsg+0xa0/0xc0 [ 476.470183][T22222] do_syscall_64+0xfa/0x3b0 [ 476.470210][T22222] ? lockdep_hardirqs_on+0x9c/0x150 [ 476.470244][T22222] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 476.470267][T22222] ? clear_bhb_loop+0x60/0xb0 [ 476.470294][T22222] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 476.470320][T22222] RIP: 0033:0x7f4efdb8ebe9 [ 476.470343][T22222] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 476.470363][T22222] RSP: 002b:00007f4efbdf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 476.470390][T22222] RAX: ffffffffffffffda RBX: 00007f4efddb5fa0 RCX: 00007f4efdb8ebe9 [ 476.470405][T22222] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000007 [ 476.470419][T22222] RBP: 00007f4efbdf6090 R08: 0000000000000000 R09: 0000000000000000 [ 476.470432][T22222] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 476.470444][T22222] R13: 00007f4efddb6038 R14: 00007f4efddb5fa0 R15: 00007fffe3365888 [ 476.470479][T22222] [ 477.074548][T22251] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4535'. [ 477.118516][T22251] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4535'. [ 477.168322][T22251] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4535'. [ 477.198453][T22251] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4535'. [ 477.223406][T22251] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4535'. [ 477.274372][T22251] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4535'. [ 477.284735][T22251] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4535'. [ 477.302107][T22251] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4535'. [ 477.441810][T22276] netlink: 'syz.1.4543': attribute type 11 has an invalid length. [ 477.502889][T22273] dvmrp1: entered allmulticast mode [ 477.802054][T22292] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 477.895145][ T30] audit: type=1800 audit(1754720786.058:11): pid=22296 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.4551" name=4996AE17DFFC2E43C8174B54B620636894AAACF28FF62616363C70A440AEC4014CAF28C0ADC04308 dev="tmpfs" ino=1755 res=0 errno=0 [ 478.311803][T17135] Oops: general protection fault, probably for non-canonical address 0xdffffc001fffc000: 0000 [#1] SMP KASAN PTI [ 478.323747][T17135] KASAN: probably user-memory-access in range [0x00000000fffe0000-0x00000000fffe0007] [ 478.333328][T17135] CPU: 1 UID: 0 PID: 17135 Comm: kworker/1:12 Not tainted 6.16.0-syzkaller-12084-g33caa208dba6 #0 PREEMPT(full) [ 478.345249][T17135] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 478.355318][T17135] Workqueue: mld mld_ifc_work [ 478.360018][T17135] RIP: 0010:add_grec+0x79f/0x1740 [ 478.365064][T17135] Code: c6 e8 25 ea 87 f7 45 85 ff 0f 84 b1 00 00 00 e8 d7 e5 87 f7 eb 05 e8 d0 e5 87 f7 4c 89 e0 48 c1 e8 03 48 89 84 24 a0 00 00 00 <42> 80 3c 30 00 74 08 4c 89 e7 e8 52 50 eb f7 4d 8b 3c 24 48 8b 7c [ 478.384767][T17135] RSP: 0018:ffffc90019d3f8f8 EFLAGS: 00010206 [ 478.390849][T17135] RAX: 000000001fffc000 RBX: 0000000000000000 RCX: ffff888033b49e00 [ 478.398840][T17135] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 478.406837][T17135] RBP: 0000000000000000 R08: ffff888033b49e00 R09: 0000000000000002 [ 478.414819][T17135] R10: 0000000000000004 R11: 0000000000000000 R12: 00000000fffe0000 [ 478.422799][T17135] R13: 0000000000000005 R14: dffffc0000000000 R15: 0000000000000001 [ 478.430774][T17135] FS: 0000000000000000(0000) GS:ffff888125d21000(0000) knlGS:0000000000000000 [ 478.439708][T17135] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 478.446297][T17135] CR2: 00007fbefdc3df98 CR3: 0000000074e02000 CR4: 00000000003526f0 [ 478.454288][T17135] Call Trace: [ 478.457593][T17135] [ 478.460565][T17135] mld_ifc_work+0x676/0xd60 [ 478.465105][T17135] ? _raw_spin_unlock_irq+0x23/0x50 [ 478.470332][T17135] ? process_scheduled_works+0x9ef/0x17b0 [ 478.476066][T17135] process_scheduled_works+0xade/0x17b0 [ 478.481643][T17135] ? __pfx_process_scheduled_works+0x10/0x10 [ 478.487644][T17135] worker_thread+0x8a0/0xda0 [ 478.492277][T17135] kthread+0x70e/0x8a0 [ 478.496380][T17135] ? __pfx_worker_thread+0x10/0x10 [ 478.501532][T17135] ? __pfx_kthread+0x10/0x10 [ 478.506147][T17135] ? _raw_spin_unlock_irq+0x23/0x50 [ 478.511359][T17135] ? lockdep_hardirqs_on+0x9c/0x150 [ 478.516655][T17135] ? __pfx_kthread+0x10/0x10 [ 478.521264][T17135] ret_from_fork+0x3fc/0x770 [ 478.525867][T17135] ? __pfx_ret_from_fork+0x10/0x10 [ 478.531003][T17135] ? __switch_to_asm+0x39/0x70 [ 478.535785][T17135] ? __switch_to_asm+0x33/0x70 [ 478.540562][T17135] ? __pfx_kthread+0x10/0x10 [ 478.545184][T17135] ret_from_fork_asm+0x1a/0x30 [ 478.549977][T17135] [ 478.553021][T17135] Modules linked in: [ 478.558535][T17135] ---[ end trace 0000000000000000 ]--- [ 478.601962][T17135] RIP: 0010:add_grec+0x79f/0x1740 [ 478.612404][T17135] Code: c6 e8 25 ea 87 f7 45 85 ff 0f 84 b1 00 00 00 e8 d7 e5 87 f7 eb 05 e8 d0 e5 87 f7 4c 89 e0 48 c1 e8 03 48 89 84 24 a0 00 00 00 <42> 80 3c 30 00 74 08 4c 89 e7 e8 52 50 eb f7 4d 8b 3c 24 48 8b 7c [ 478.636932][T22322] netlink: 'syz.0.4560': attribute type 21 has an invalid length. [ 478.644959][T22322] IPv6: NLM_F_CREATE should be specified when creating new route [ 478.691810][T17135] RSP: 0018:ffffc90019d3f8f8 EFLAGS: 00010206 [ 478.698642][T17135] RAX: 000000001fffc000 RBX: 0000000000000000 RCX: ffff888033b49e00 [ 478.720826][T17135] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 478.729361][T17135] RBP: 0000000000000000 R08: ffff888033b49e00 R09: 0000000000000002 [ 478.737670][T17135] R10: 0000000000000004 R11: 0000000000000000 R12: 00000000fffe0000 [ 478.745806][T17135] R13: 0000000000000005 R14: dffffc0000000000 R15: 0000000000000001 [ 478.754308][T17135] FS: 0000000000000000(0000) GS:ffff888125d21000(0000) knlGS:0000000000000000 [ 478.763387][T17135] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 478.770271][T17135] CR2: 0000001b32322ff8 CR3: 0000000074e08000 CR4: 00000000003526f0 [ 478.778438][T17135] Kernel panic - not syncing: Fatal exception [ 478.784834][T17135] Kernel Offset: disabled [ 478.789173][T17135] Rebooting in 86400 seconds..