last executing test programs: 6.011672332s ago: executing program 4 (id=3121): pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x41071, 0xffffffffffffffff, 0x0) (async) r3 = socket$tipc(0x1e, 0x5, 0x0) connect$tipc(r3, &(0x7f00000000c0)=@name={0x1e, 0x2, 0x3, {{0x0, 0x1}}}, 0x10) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r2, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x6c, 0x2, 0x8, 0x3, 0x0, 0x0, {0x2, 0x0, 0x3}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L4PROTO={0x5}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x22eb}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_DATA={0x24, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xbb7}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x6}]}]}, 0x6c}}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xa, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x67}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) splice(r2, &(0x7f0000000040)=0xfffffffffffffffc, r1, 0x0, 0x800000000ff, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) (async) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='sched_process_wait\x00', r4}, 0x10) r6 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r5}, 0x8) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x7, 0x6a, 0xa, 0xff00}, [@call={0xc}, @exit, @map_fd, @jmp]}, &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)=ANY=[@ANYRES32=0x0, @ANYRES32=r7, @ANYBLOB="110000000000000000dc3406", @ANYRES32=r6, @ANYRES64=0x0], 0x20) (async) sendmsg$NL80211_CMD_NOTIFY_RADAR(r0, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)={0x2c, 0x0, 0x8, 0x70bd25, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x696bf8d2}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x206}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xa}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000080}, 0x40004) 5.858051845s ago: executing program 4 (id=3124): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) (async) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) socket$inet_icmp(0x2, 0x2, 0x1) (async) r3 = socket$inet_icmp(0x2, 0x2, 0x1) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000017f03e3f7000000006ee2ffca1b1f00ff0f00000000000050375ed08a56331dbf9ed78105001ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00030004080c00bdad01409bbc7a46e39a54cbbda812176679df069163ce955fed0009d78f0a947ee2b49e33538afaeb2713f450ebd010a20ff27fff", 0x89}], 0x1, 0x0, 0x0, 0x7}, 0x0) (async) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000017f03e3f7000000006ee2ffca1b1f00ff0f00000000000050375ed08a56331dbf9ed78105001ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00030004080c00bdad01409bbc7a46e39a54cbbda812176679df069163ce955fed0009d78f0a947ee2b49e33538afaeb2713f450ebd010a20ff27fff", 0x89}], 0x1, 0x0, 0x0, 0x7}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000002c0)={'erspan0\x00', 0x0}) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000002a80)=ANY=[@ANYBLOB="540000002300010000000000fcdbdf2589ed6bd72848273b115778ffb608888393a49e7d92d347d92c3a3cd81d901ad210875e06b544d60a80f424356deda08eb72533ba9ea86ad7ea78c5311b6ffc9744c9b766"], 0x54}], 0x1, 0x0, 0x0, 0x48000}, 0x880) (async) sendmsg$netlink(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000002a80)=ANY=[@ANYBLOB="540000002300010000000000fcdbdf2589ed6bd72848273b115778ffb608888393a49e7d92d347d92c3a3cd81d901ad210875e06b544d60a80f424356deda08eb72533ba9ea86ad7ea78c5311b6ffc9744c9b766"], 0x54}], 0x1, 0x0, 0x0, 0x48000}, 0x880) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0xc3b, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ENCAP_DPORT={0x6}]}}}]}, 0x40}}, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x9, 0x3, 0x280, 0xe0, 0xffffffff, 0xffffffff, 0xe0, 0xffffffff, 0x1e8, 0xffffffff, 0xffffffff, 0x1e8, 0xffffffff, 0x3, &(0x7f0000000080), {[{{@uncond, 0x0, 0xa0, 0xe0, 0x0, {}, [@common=@ah={{0x30}, {[0x800, 0x3]}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x8, 0x6, {0xb0000}}}}, {{@uncond, 0x0, 0x98, 0x108, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x3, 0x6, 0x6, 0x1, 0x0, "5f5d5fb5a31aa991c925deded1545896a6b55eb3d532d24d7ab633a6cae6fde2a4f0b16285ac297f1e8053bf35c31bf531c1eb6309e83cf0a56efc0ae9fd9041"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e0) recvmsg(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000005580)=""/4084, 0xff4}, {&(0x7f0000000140)=""/155, 0x9b}], 0x2}, 0x40002020) (async) recvmsg(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000005580)=""/4084, 0xff4}, {&(0x7f0000000140)=""/155, 0x9b}], 0x2}, 0x40002020) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[@ANYBLOB="ec2ef41e55f2a65152848d7a9ee8ac1498e0cd90b7ba589c68a3dac6d5052e83d107ec59f12c09bf724421dc1ad77608c8638f7bdc4b2eafb650470601848cf1e0a276d03942ba5abf77d5db8ee568f24a1dab01c0fc7e855cfeb7216ad3401b418d3c513ecffe14635454974f54f46a21fc090e08fe12864cc4069bc024f0e09e36569eb5c601bd8736ea6e8b30f5d98b30a9502e624c5a61ea0d8b405f5b8942578117b7906e31f1c65e07ece8d1d5be84eb9fae", @ANYRESHEX=r2, @ANYRES32=r1, @ANYRESHEX=r0, @ANYRES64=r2, @ANYBLOB="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"], 0x40}}, 0x4000010) (async) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[@ANYBLOB="ec2ef41e55f2a65152848d7a9ee8ac1498e0cd90b7ba589c68a3dac6d5052e83d107ec59f12c09bf724421dc1ad77608c8638f7bdc4b2eafb650470601848cf1e0a276d03942ba5abf77d5db8ee568f24a1dab01c0fc7e855cfeb7216ad3401b418d3c513ecffe14635454974f54f46a21fc090e08fe12864cc4069bc024f0e09e36569eb5c601bd8736ea6e8b30f5d98b30a9502e624c5a61ea0d8b405f5b8942578117b7906e31f1c65e07ece8d1d5be84eb9fae", @ANYRESHEX=r2, @ANYRES32=r1, @ANYRESHEX=r0, @ANYRES64=r2, @ANYBLOB="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"], 0x40}}, 0x4000010) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$IEEE802154_LIST_PHY(r10, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r11, 0x10b, 0x70bd25, 0x25dfdbfd, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4040001}, 0x40) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f0000000000)={@remote, 0x71}) (async) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f0000000000)={@remote, 0x71}) r12 = socket(0x1, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r12, 0x5452, &(0x7f0000000380)={'gre0\x00', 0x0}) sendmmsg$unix(r12, 0x0, 0x0, 0x0) close(r12) r13 = socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r13, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r13, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r14, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r15, @ANYBLOB="0c00990000000000000000000800a102ffff0000080026008d03000008009f"], 0x40}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_MPATH(r12, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000003c0)={&(0x7f0000001880)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r14, @ANYBLOB="000227bd7000fbdbdf251500000008000300", @ANYRES32=r16, @ANYBLOB="0c00990002000000140000000a001a0008021100000100000a00060008021100000100400a001a00ffffffffffff0000"], 0x4c}, 0x1, 0x0, 0x0, 0x20008051}, 0x10) 5.637710249s ago: executing program 4 (id=3126): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1, 0x7, 0x40, 0x5}, 0x50) bpf$MAP_DELETE_ELEM(0x15, &(0x7f0000000000)={r0, &(0x7f0000000540), 0xffff800016adffff}, 0x20) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x18, 0x1411, 0x100, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x28}]}, 0x18}}, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000080)=@generic={&(0x7f0000000040)='./file0\x00', 0x0, 0x8}, 0x18) 5.450681663s ago: executing program 4 (id=3130): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) listen(r0, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000180)=0x200000000a) (async, rerun: 64) accept4$rose(r0, 0x0, 0x0, 0x0) (async, rerun: 64) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async, rerun: 32) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x28}, 0x1, 0x0, 0x0, 0x24040851}, 0x0) (rerun: 32) 5.242104445s ago: executing program 4 (id=3134): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000005c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x10}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xac}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={0x40, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "1e1c"}]}]}]}]}, 0x40}, 0x1, 0x0, 0x2000000, 0x4000805}, 0x8000) 5.069313676s ago: executing program 4 (id=3137): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f00000005c0)={0x100, 0x2, 0x1, 0x300, 0x0, 0x0, {0x7, 0x0, 0x3}, [@CTA_ID={0x8, 0xc, 0x1, 0x0, 0x4}, @CTA_LABELS_MASK={0x24, 0x17, [0x5, 0x5, 0xfffff58a, 0x95, 0x2, 0xa, 0x1ff, 0x8001]}, @CTA_NAT_DST={0x80, 0xd, 0x0, 0x1, [@CTA_NAT_V4_MAXIP={0x8, 0x2, @multicast1}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @local}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @private1={0xfc, 0x1, '\x00', 0x1}}, @CTA_NAT_V4_MINIP={0x8, 0x1, @multicast1}, @CTA_NAT_PROTO={0x2c, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0xfff8}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}]}, @CTA_NAT_V4_MINIP={0x8, 0x1, @remote}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @remote}, @CTA_NAT_V4_MINIP={0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x28}}]}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x4}, @CTA_SEQ_ADJ_REPLY={0x14, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x3}]}, @CTA_LABELS={0x24, 0x16, 0x1, 0x0, [0x7, 0xd, 0x4, 0x1, 0x0, 0x6, 0x7f, 0x7]}]}, 0x100}, 0x1, 0x0, 0x0, 0x1}, 0x80) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'macvlan0\x00', 0x0}) sendto$packet(r5, &(0x7f0000000140)="c9c9ab171baef721a5c8b12fb8efd0", 0x5ee, 0x1, &(0x7f0000000240)={0x11, 0x17, r6, 0x1, 0x7, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x90646}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_PRIMARY={0x8, 0xb, r4}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x690}, 0x20048040) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x40000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) sendmmsg(r7, &(0x7f0000000180), 0x4000190, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x1, 0x803, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f00000003c0)={{0x2, 0x4e23, @loopback}, {0x306, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}}, 0x48, {0x2, 0x4e20, @rand_addr=0x64010102}, 'bridge0\x00'}) sendmsg$nl_route(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800e0001006970366772657461700000001800028014000700fc00000000000000000000000000000008000a00", @ANYRES32=r10], 0x54}}, 0x0) 1.701981224s ago: executing program 0 (id=3170): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000010000000000000000000000850000008700000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000080)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000000)="7084c3d1b35891ae8b1ccb110ec1", 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="740000001000210400000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0000000061000000380012800e000100697036677265746170000000240002800800040004000000060010000000000005001700", @ANYRES32=0x0, @ANYBLOB='\b\x00\n\x00', @ANYBLOB="20986bfe476da6cb635fb8a15294218e4d7c827310189a9796d443a413ef5afa006b31cb6081bf5fece8d86ec08cc4bfee653b936e9faaa7de55253dac021ec5d2be9e9a555c", @ANYBLOB="0a0001"], 0x74}}, 0x8004) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) vmsplice(r4, &(0x7f00000006c0)=[{0xfffffffffffffffe}], 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'bond0\x00', 0x0}) syz_emit_ethernet(0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="ffffffffffff1780c206050086dd6018232500002c00fe8000000000000000000000000000aa00"/54], 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0xa, 0x2, @TCA_CBS_PARMS={0x18}}}]}, 0x48}}, 0x0) 1.519024814s ago: executing program 1 (id=3173): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) sendmmsg$inet(r2, &(0x7f0000000e40)=[{{&(0x7f0000000040)={0x2, 0x4e21, @empty}, 0x10, 0x0}}], 0x1, 0xc834) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback, 0x52}]}, &(0x7f0000000440)=0x10) setsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000100)={r3}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r5, 0x84, 0x80, &(0x7f0000000000)='\x00\x00\x00\x00\t\x00\x00\x00', 0x8) r6 = openat$cgroup_int(r0, &(0x7f0000000080)='pids.max\x00', 0x2, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r8, &(0x7f0000000380)=[{{&(0x7f0000000700)={0xa, 0x4e24, 0x2, @mcast1, 0x8}, 0x1c, 0x0}}, {{&(0x7f0000000100)={0xa, 0x4e24, 0x2, @local, 0x400}, 0x1c, 0x0}}], 0x2, 0x4048044) r9 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r9, 0x89f1, &(0x7f00000017c0)={'tunl0\x00', &(0x7f0000001700)={'ip_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0xffff, 0x0, 0x0, 0x0, @rand_addr, @multicast1}}}}) setsockopt$sock_attach_bpf(r8, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) r10 = socket$inet6_udp(0xa, 0x2, 0x0) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000140), r11) sendmsg$NET_DM_CMD_STOP(r11, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r12, 0x1, 0x70bd2c, 0x25dfdbff}, 0x14}}, 0x800) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), r11) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@newqdisc={0xf4, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r13, {0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0xc4, 0x2, {{}, [@TCA_NETEM_LOSS={0x88, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0x101, 0xfffffffc, 0x2, 0x5}}, @NETEM_LOSS_GI={0x18, 0x1, {0x8, 0x80000001, 0x3, 0x1, 0x1ff}}, @NETEM_LOSS_GE={0x14, 0x2, {0x2, 0x3, 0x3, 0x7}}, @NETEM_LOSS_GI={0x18, 0x1, {0x7ff, 0x3, 0xfffeffff, 0xc5, 0x401}}, @NETEM_LOSS_GE={0x14, 0x2, {0xfffff7be, 0x100000, 0x8}}, @NETEM_LOSS_GI={0x18, 0x1, {0xc, 0x4, 0x1, 0x0, 0x1000}}]}, @TCA_NETEM_RATE={0x14, 0xd}, @TCA_NETEM_CORRUPT={0xc, 0x2}]}}}]}, 0xf4}}, 0x0) write$cgroup_subtree(r6, &(0x7f0000000580)=ANY=[@ANYBLOB='-', @ANYRESOCT], 0x9) 1.343881672s ago: executing program 0 (id=3174): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x26, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x9c}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) r0 = socket$nl_crypto(0x10, 0x3, 0x15) r1 = socket(0xa, 0x3, 0x3a) sendmsg$nl_generic(r1, &(0x7f0000000300)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000ac0)={0x1024, 0x16, 0x2, 0x70bd28, 0x25dfdbfd, {0x9}, [@typed={0xc, 0x61, 0x0, 0x0, @str='ethtool\x00'}, @nested={0x1004, 0xd7, 0x0, 0x1, [@generic="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"]}]}, 0x1024}, 0x1, 0x0, 0x0, 0x800}, 0x4008811) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'vcan0\x00', 0x0}) setsockopt$MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000000)={0x4, 0x0, 0x0, r2}, 0xc) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) socket$kcm(0x29, 0x0, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_SET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)=ANY=[@ANYBLOB="08020000", @ANYRES16=r4, @ANYBLOB="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"], 0x208}, 0x1, 0x0, 0x0, 0x45}, 0x4000800) sendmsg$netlink(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000080)=ANY=[@ANYRESDEC=r3, @ANYRESHEX=0x0, @ANYRESHEX=r5, @ANYBLOB="8d189c4769b4f6551f4422ef9793e6a4c5870026d4e1219c2eb38393d86e643a91fb6f8cb9892f43bb5805706f0fbded22e68473f4a88cfb82b4e8f9eae86a279824fb1b763d8da399074322a320a8d3e79ad72c48cd99b5005e6fc85bb2b2da65448b88b592c19ddd49f340796db4d2e1e7b915d704beaf65be974257e8b3362dbd53c18e996fe3f5054b036963715ae20cb61fb8dc8b4a1bb36938bd404a9878e9b6d2c465450ab31edbc1a4f0ffcb0e31b1c071b750e465c87144814f28223c4ae03b978f1d01bf27110a4887c11d2e209b6906fbb081be5918ec5d28cd9644c087da132b128bb3e19259cfd091203f3f1f6884f7d7a7a0", @ANYRES8=r0, @ANYRESOCT=r2], 0xe0}], 0x1, 0x0, 0x0, 0x4044884}, 0x0) 1.261463883s ago: executing program 3 (id=3176): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=@ipv6_newroute={0xfffffffffffffe0d, 0x18, 0x1, 0x70bd2c, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x4, 0xfe}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000080) 1.036296882s ago: executing program 2 (id=3177): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000002c0)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000000000)=0x1, 0x4) sendmmsg$inet(r0, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000140)=[{&(0x7f00000003c0)="13f68bd6a1848ca0bc307c9b3dec5add294a086b63cc21d5956355305388510f1410f2ead415068051170d782b2a2be004e86f781469e1389b4e46be7cd2ba50c878", 0x42}], 0x1}}, {{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f00000001c0)='}', 0x1}], 0x1}}], 0x2, 0x2400c042) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x15, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport}, 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000d00)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r3, 0x1, 0x34, &(0x7f00000000c0)=r2, 0x4) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000800}, 0xc, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="44010000", @ANYRES16=r4, @ANYBLOB="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"], 0x144}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}}, 0x1c) 1.033467098s ago: executing program 3 (id=3178): socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'wlan0\x00', 0xfffffffe}) r0 = socket$rxrpc(0x21, 0x2, 0xa) ioctl(r0, 0x8b21, &(0x7f0000000040)) socket$kcm(0x2, 0x1000000000000002, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={'batadv_slave_1\x00', {0x2, 0x0, @loopback=0x7f000000}}) ioctl$sock_inet_SIOCSIFADDR(r1, 0x891c, &(0x7f0000000540)={'batadv_slave_1\x00', {0x2, 0xfffe, @empty}}) 963.534836ms ago: executing program 0 (id=3179): r0 = socket$pppl2tp(0x18, 0x1, 0x1) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001880)={@map, 0xffffffffffffffff, 0x16}, 0x20) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}, 0x2}}, 0x2e) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_FIOGETOWN(r0, 0x8903, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_crypto(0x10, 0x3, 0x15) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x8, &(0x7f0000000000)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000140)='GPL\x00', 0x6}, 0x94) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, 0x0, &(0x7f0000000240)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r3, 0x89f1, &(0x7f00000002c0)={'ip6tnl0\x00', &(0x7f0000000000)=@ethtool_cmd={0x0, 0x0, 0x0, 0x200, 0x2, 0x0, 0x0, 0x0, 0xdb, 0x4, 0x0, 0xfffff7fc, 0x7, 0x0, 0x0, 0x47, [0xfffffffc, 0x80]}}) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r1, 0x29, 0x37, &(0x7f0000000080)={0x2b, 0x0, '\x00', [@ra={0x5, 0x2, 0x8000}, @enc_lim={0x4, 0x1, 0x5}]}, 0x10) 948.845495ms ago: executing program 2 (id=3180): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000d40)=@nat={'nat\x00', 0x2, 0x5, 0x4b0, 0x0, 0xf0, 0xffffffff, 0x0, 0x310, 0x3e0, 0x3e0, 0xffffffff, 0x3e0, 0x3e0, 0x5, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @remote, [], [], 'batadv0\x00', 'veth0_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv4=@empty, @ipv6=@remote}}}, {{@ipv6={@dev, @loopback, [], [], 'batadv0\x00', 'veth1_vlan\x00'}, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@loopback, @ipv6=@private0, @icmp_id, @icmp_id}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @NETMAP={0x20, 'NETMAP\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @gre_key, @gre_key}}}, {{@ipv6={@remote, @mcast1, [], [], 'ipvlan0\x00', 'pim6reg\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE1={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x510) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="f1fc2dff0000000000000005000008000300", @ANYRES32=r4, @ANYBLOB='\b\x00&\x00\x00\x00\x00\x00'], 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x40) 884.85675ms ago: executing program 1 (id=3181): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0d0000000c00000003004074549c98a284618900", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=@newtaction={0x48, 0x30, 0x871a15abc695fa3d, 0x20, 0x0, {}, [{0x34, 0x1, [@m_ctinfo={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x20008080}, 0x4000080) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f00000000c0)=@ccm_128={{0x304}, "49bce07c8dc4e060", "e1fde81e4f5e5bc39da261a4e93b6ea1", "a1a39e9a", "da5647be0a63e939"}, 0x28) 815.249283ms ago: executing program 0 (id=3182): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)="d8000000100081046881f782db44b904021d080b16000000e8fe55a11800150006001400030000120800040048000300a80016000a0001400d000d00036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d0080000000000000b57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd6c769ad809d52a9ecbee", 0xd8}], 0x1}, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)={0x118, 0x2e, 0x1, 0x0, 0x0, "", [@nested={0x4, 0x119}, @nested={0x104, 0x11, 0x0, 0x1, [@nested={0x100, 0xcf, 0x0, 0x1, [@generic="d478b585fcf4962925eb81095dd3d92e983e841d6ef7368187237f5e91a74d57e8aaee05ec6319", @generic="8f3bec68ef62803fe98daf2de4c76a713091d7d093f16995a391c42d5dfc312e9b67f3e831135df00a399b5234733f156436b0ed25721632972efdd7a775655ff99c2abdc650ece6458a5f9db07c36adc6ebcfe60b70e5a54a83041bc8e1c08dc0afd69868eddb1e9634f84ef01b3f9c31b8c76a0e2ac9dba5adc10a3c9a2360cb2fe6e11e9efcaff1b39dd49895a112f947e4923d9b5c428a37b673f33f3ed02d225807d47efe0a590665b49bf5eaa0890c512f2a01eb6713c6b3539790dca05a2632596c591745bbbf4953c0a783a881f8cf755e"]}]}]}, 0x118}], 0x1, 0x0, 0x0, 0x84}, 0x300) 758.213988ms ago: executing program 2 (id=3183): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='dctcp', 0x5) (async) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) (async, rerun: 32) sendto$inet6(r0, &(0x7f00000004c0)="11", 0x1, 0x20008045, &(0x7f0000000440)={0xa, 0x2, 0x0, @empty, 0x40000004}, 0x1c) (async, rerun: 32) sendto$inet6(r0, &(0x7f0000000000)='\r', 0x1, 0x800, 0x0, 0x0) socket$kcm(0x29, 0x2, 0x0) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$OBJ_GET_MAP(0x7, &(0x7f0000007cc0)=@generic={&(0x7f0000007c80)='.\x00', 0x0, 0x10}, 0x18) (async) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000040)={'wpan3\x00'}) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="2400000020000103000000000000000080"], 0x24}}, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000500)="d8000b00d8980000180081064e81f782db4cb904021d0800fd027c05e8fe55a10a000b000140020203600e41b0000900ac0006031100000016000500000000000004015c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683ff2000000ccca9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000000008af26c8b7b55f4d2a6823a45f28fcb1dd07bc01866cd62b2785f6b043567f982da", 0xed}], 0x1}, 0x0) 659.913172ms ago: executing program 3 (id=3184): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) (async) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) socket(0x10, 0x3, 0x0) (async) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0x0, 0x1, 0x1009, 0x7f}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0x0, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r3, {}, {0xffe0, 0xa}, {0x1, 0x10}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x101, 0x400}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x55}, 0x4000) sendmmsg$inet(r0, &(0x7f0000002980)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000640)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b431a819bca6122c350637808dde804a048fd8696e524b2934126c443ce93d82e931eb9918e6c0827686e59209d2e02c9210fd8048f04ad6", 0x71}], 0x1}}], 0x1, 0x480e0) (async) sendmmsg$inet(r0, &(0x7f0000002980)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000640)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b431a819bca6122c350637808dde804a048fd8696e524b2934126c443ce93d82e931eb9918e6c0827686e59209d2e02c9210fd8048f04ad6", 0x71}], 0x1}}], 0x1, 0x480e0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000380)={&(0x7f00000007c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xf}}, [@NFT_MSG_DELTABLE={0x144, 0x2, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0x3}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_USERDATA={0x100, 0x6, "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"}]}, @NFT_MSG_NEWTABLE={0x120, 0x0, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_TABLE_USERDATA={0xb0, 0x6, "b895ea456f06d406793539a9ad501f6aa326f7723b3a7052b281859487645ccd334f0ead679b311419b1bf6e553e75af18bc4cacdd06cf7ec8f610d235da019956d2bd9f9490805885d1bfc80d4bc1b1a9aca65ae0e7c662f79ba50ce3e23e225ba2429191bd95481e4eab6def06d1fccead9e1943037541e48b2ebaed286b6e09f2ecb29c118ccc74c48f9ffba88adebc3f22b1404d792f3699536d50ce73cfe7d8dca149ce76c1de4e05bb"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_USERDATA={0x2a, 0x6, "77896e6e39c4a5efe8c6b891eec0ebbe09734ac567575de319f18669dd48f43341c3162c5d57"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x28c}, 0x1, 0x0, 0x0, 0x48800}, 0x4000000) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x1500, &(0x7f0000000140)=[{&(0x7f0000000180)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe55a10a000600014002020a600e41b0000900ac00060211000000120012000a00ff110048035c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000000008af26c8b7b55f4d2a6823a45f28fcb1d", 0xd8}], 0x1}, 0x0) 658.778259ms ago: executing program 1 (id=3185): socket$inet(0x2, 0x3, 0x8) (async) r0 = socket$inet(0x2, 0x3, 0x8) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x308, 0x1a0, 0xe138, 0x198, 0x1a0, 0x198, 0x270, 0x358, 0x358, 0x270, 0x358, 0x3, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x0, 'nicvf0\x00', 'veth0_to_bond\x00', {}, {}, 0x0, 0x0, 0x20}, 0x0, 0x158, 0x1a0, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'fsm\x00', "0d0003000000000000000404fff0cf81dfd28c89544e14cd3e01dd24289831867846c88621039b284c3ff45c429955608b9952bed40ce4a8c1df6cdbdb7e2378d5afd35f4c16827f55b3af494e39e8fb330200000000000032b6a99a8d87298e88a94cb519f5c17631af916a0002000000000000000000000000000000080049", 0x4}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x3, 0x3078, 0x5, 'syz1\x00', {0x5}}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @local, 0xc, 0x6, [0x97f4, 0x15, 0x33, 0x29, 0x7, 0x3c, 0x4, 0x26, 0x9, 0xc, 0xf, 0x1d, 0x3e, 0x1e, 0x30], 0x0, 0x0, 0x3}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x368) socket(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) (async) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1, 0x7, 0x40, 0x5}, 0x50) getsockname$packet(r1, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000002c0)=0x14) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000700)={0x3, 0x0}, 0x8) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000980)=@bpf_ext={0x1c, 0x1f, &(0x7f0000000740)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@call={0x85, 0x0, 0x0, 0x33}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x10001}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}, @map_val={0x18, 0xb, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x8}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000840)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x5b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000880)={0x6, 0x5}, 0x8, 0x10, &(0x7f00000008c0)={0x4, 0x1, 0xfffffff8, 0x1}, 0x10, 0x22778, r1, 0x4, &(0x7f0000000900)=[r3, r3, r3, r3, r3, r3], &(0x7f0000000940)=[{0x3, 0x3, 0x7, 0xb}, {0x2, 0x2, 0xfffffffb, 0x8}, {0x5, 0x1, 0xf, 0x2}, {0x5, 0x2, 0x10, 0xb}], 0x10, 0x665}, 0x94) (async) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000980)=@bpf_ext={0x1c, 0x1f, &(0x7f0000000740)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@call={0x85, 0x0, 0x0, 0x33}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x10001}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}, @map_val={0x18, 0xb, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x8}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000840)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x5b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000880)={0x6, 0x5}, 0x8, 0x10, &(0x7f00000008c0)={0x4, 0x1, 0xfffffff8, 0x1}, 0x10, 0x22778, r1, 0x4, &(0x7f0000000900)=[r3, r3, r3, r3, r3, r3], &(0x7f0000000940)=[{0x3, 0x3, 0x7, 0xb}, {0x2, 0x2, 0xfffffffb, 0x8}, {0x5, 0x1, 0xf, 0x2}, {0x5, 0x2, 0x10, 0xb}], 0x10, 0x665}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x1b, 0x22, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8}, [@printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}}, @cb_func={0x18, 0xb, 0x4, 0x0, 0x6}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7ff}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}, @cb_func={0x18, 0x7, 0x4, 0x0, 0x1}, @cb_func={0x18, 0x5, 0x4, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x1, 0xb, 0x8, 0x1, 0x20}, @exit, @func={0x85, 0x0, 0x1, 0x0, 0x2}, @alu={0x7, 0x0, 0x4, 0x3, 0x3, 0x40, 0x4}]}, &(0x7f0000000080)='syzkaller\x00', 0x800, 0x0, 0x0, 0x41100, 0x4, '\x00', r4, @fallback=0x2c, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x0, 0x2}, 0x8, 0x10, &(0x7f00000006c0)={0x0, 0x8, 0xd, 0x1}, 0x10, r5, r6, 0x3, &(0x7f0000000a40)=[r3, r3], &(0x7f0000000a80)=[{0x3, 0x1, 0xb, 0x6}, {0x4, 0x5, 0x7, 0x3}, {0x5, 0x1, 0x5, 0x9}], 0x10, 0x1}, 0x94) bpf$MAP_DELETE_ELEM(0x15, &(0x7f0000000000)={r3, &(0x7f0000000540), 0xffff800016adffff}, 0x20) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) (async) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r2, 0x3) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) (async) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x0, 0x0, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000340)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x9, 0x4, 0x0, 0x2, 0x44, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local, {[@timestamp_addr={0x44, 0xc, 0xb8, 0x1, 0xe, [{@multicast1, 0x8}]}, @noop]}}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x2, 0x0, 0x0, 0x1000, {[@timestamp={0x8, 0xa, 0x3, 0x20000009}]}}}}}}}, 0x0) 547.997124ms ago: executing program 2 (id=3186): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@ipv4_newroute={0x38, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x2}, @RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP6_OPTS={0x10, 0x8, @LWTUNNEL_IP_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, @LWTUNNEL_IP_OPT_VXLAN_GBP={0x8, 0x1, 0x9}}}}]}, 0x38}}, 0x0) recvmmsg(r0, &(0x7f0000000b00)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x40000102, 0x0) (async) r2 = socket$unix(0x1, 0x5, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32=r5, @ANYBLOB="24005a8020000180140003000000000000000000010000000000000004000200040001"], 0x40}}, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x7, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000010000000000000000007110b500000000009500000000000000a282cb8ecd0d254d03d44df656abed5011c51ed827438a464f0b0000ea8d4765d847ed7b45e44c2cf1d547595d12d986d5ad7f6f3399a109b3b8e3b287f14844d9231b179588f77bff8932de820630bb62e5f3d2293b3c1745ff4ef48ca55b608a4b303a0ea7e467acf15d3aa394b4d0a007ad46963de72c59651f5e4a34b44f95c9beacd193eac4640ecff86c3267b405d516b4293d20df01c27d9c081a8f04b101e57029ded08052df2ad551884d14b15a99cce8e2fa81f83a"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) 473.017573ms ago: executing program 1 (id=3187): r0 = getpid() sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c00000000000000383e5145e2a394d3d5a490be1f83b79865070c7c37ed25a9a6ce499f7d156d1e24e60be3640d8d20a938f6181eb0f89ace6b423c2bea807022d350f7b5c32c311bcb50703467c1fa9d2e66ae37bff319f3863043cde0f855dcaf1eb2a0e1e4a744fd00"/122, @ANYRES32=r0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000) r1 = socket$l2tp(0x2, 0x2, 0x73) sendto$l2tp(r1, 0x0, 0x43, 0x0, &(0x7f0000000100)={0x2, 0x0, @broadcast, 0x4}, 0x10) r2 = syz_open_procfs$namespace(r0, &(0x7f0000000000)='ns/pid\x00') ioctl$FIBMAP(r2, 0x1, &(0x7f0000000800)=0x6d) 364.142814ms ago: executing program 0 (id=3188): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x16, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bc89000000000000b5090100000000009500000000000000b509000002000000639af0ff000000008709000000000000c39af0fff1000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000056080000000000008500000000000000b70000050000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 357.444517ms ago: executing program 3 (id=3189): r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000140), 0x8) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x38, r1, 0x10, 0x70bd27, 0x25dfdbfe, {}, [@L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private2={0xfc, 0x2, '\x00', 0x1}}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x400c009}, 0x4048) r2 = socket(0x10, 0x3, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xf, "0000000000190000000100800e000f01"}}}]}, 0x48}}, 0x0) (async) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000004e00ff13"], 0x14}}, 0x0) 326.255299ms ago: executing program 1 (id=3190): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x401, 0x70bd26, 0x1000000, {0x0, 0x0, 0x0, 0x0, 0x157b}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6, 0x5, 0x4e22}]}}}]}, 0x3c}}, 0x40800) (async) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) (async, rerun: 64) listen(r1, 0x8) (rerun: 64) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000600)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x1000, 0x2}, 0x90) (async, rerun: 32) r3 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x5e}}]}, 0x30}}, 0x4014) (async) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r7, 0x6, 0x15, &(0x7f0000000000)=0x9, 0x4) (async, rerun: 32) ioctl$sock_inet6_SIOCADDRT(r6, 0x890b, &(0x7f0000000240)={@rand_addr=' \x01\x00', @remote, @remote, 0x0, 0x0, 0xff, 0x0, 0x0, 0x4400046}) (async, rerun: 32) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x3, [@var={0xe, 0x0, 0x0, 0xe, 0x5, 0x2}, @const={0xb, 0x0, 0x0, 0xa, 0x5}]}, {0x0, [0x5f]}}, &(0x7f0000002240)=""/4096, 0x37, 0x1000, 0x0, 0x80000001, 0x10000}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x13}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000540)={0xffffffffffffffff, 0x20, &(0x7f0000000500)={&(0x7f0000000300)=""/201, 0xc9, 0x0, &(0x7f0000000400)=""/250, 0xfa}}, 0x10) (async) pipe(&(0x7f0000000040)={0xffffffffffffffff}) ioctl$sock_inet_sctp_SIOCINQ(r10, 0x5760, 0x0) r11 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x1, @ANYBLOB="0600"/20, @ANYRES32=r5, @ANYRES32, @ANYBLOB="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"], 0x50) (async) r12 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="1b0000000000000000000000f7ffffff00000000b5520f476fa731b59a808f609dd5e39575b9b315cd8c6f2c93b0d4d01736d0c386ae87fbb60125717cb07b5184355ee9c96b4793d7fc1c6d1e9d6ded518d10be1c05ca0975069f2734336e4cd1df809846d72764c85ed1a93e0479c606", @ANYRES32=0x1, @ANYBLOB="8ca800"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="01000000020000000100"/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x16, 0x11, &(0x7f0000000040)=@raw=[@btf_id={0x18, 0x6, 0x3, 0x0, 0x1}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0x7}, @btf_id={0x18, 0x2, 0x3, 0x0, 0x2}, @map_idx={0x18, 0x7, 0x5, 0x0, 0x8}, @ringbuf_query, @map_idx_val={0x18, 0xb, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8}, @call={0x85, 0x0, 0x0, 0x3c}, @jmp={0x5, 0x0, 0x9, 0x5, 0x8, 0x0, 0xfffffffffffffff0}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}], &(0x7f0000000100)='syzkaller\x00', 0x5, 0x1000, &(0x7f0000001240)=""/4096, 0x40f00, 0x50, '\x00', r5, @fallback=0x2e, r8, 0x8, &(0x7f00000001c0)={0x8, 0x1}, 0x8, 0x10, &(0x7f0000000200)={0x0, 0xb, 0x7fff, 0x9}, 0x10, r9, r10, 0x6, &(0x7f0000000680)=[r11, r12], &(0x7f00000006c0)=[{0x1, 0x5, 0x1, 0xa}, {0x0, 0x3, 0x2, 0xa}, {0x0, 0x1, 0xf, 0x5}, {0x0, 0x1, 0x0, 0xc}, {0x4, 0x1, 0xd, 0x2}, {0x2, 0x5, 0x3, 0x3}], 0x10, 0x1}, 0x94) 318.452581ms ago: executing program 2 (id=3191): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) bind$unix(r0, &(0x7f0000000040)=@abs={0x1, 0x0, 0x4e22}, 0x6e) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000c40)=ANY=[@ANYBLOB="580000001000010009000000000000000000ffff", @ANYRES32=0x0, @ANYBLOB="00000000da44000024001a8020000a8014000700fe8000000000000000020040000000000500080002000000140003007866726d30"], 0x58}}, 0x40408c4) 155.684692ms ago: executing program 3 (id=3192): r0 = accept$unix(0xffffffffffffffff, 0x0, &(0x7f0000000000)) recvmmsg$unix(r0, &(0x7f0000002500)=[{{&(0x7f0000000040)=@abs, 0x6e, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/68, 0x29}], 0x1}}, {{&(0x7f00000002c0), 0x6e, &(0x7f0000000380)=[{&(0x7f0000000240)}, {&(0x7f0000000340)=""/10, 0xa}], 0x2}}, {{&(0x7f00000005c0)=@abs, 0x6e, &(0x7f0000000700), 0x3, &(0x7f0000000740)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x60}}, {{&(0x7f00000007c0), 0x6e, &(0x7f0000000a80)=[{&(0x7f0000002980)=""/229, 0xe5}, {&(0x7f0000000640)=""/80, 0x49}, {&(0x7f00000009c0)=""/27, 0x1b}, {&(0x7f0000000a00)=""/102, 0x66}], 0x4}}, {{&(0x7f0000000ac0), 0x6e, &(0x7f0000002200)=[{&(0x7f0000000b40)=""/14, 0xe}, {&(0x7f0000000b80)=""/4096, 0x1000}, {&(0x7f0000001b80)=""/223, 0xdf}, {&(0x7f0000001c80)=""/254, 0xfe}, {&(0x7f0000001d80)=""/215, 0xd7}, {&(0x7f0000001e80)=""/147, 0x93}, {&(0x7f0000001f40)=""/31, 0x1f}, {&(0x7f0000001f80)=""/225, 0xe1}, {&(0x7f0000002080)=""/187, 0xbb}, {&(0x7f0000002140)=""/155, 0x9b}], 0xa, &(0x7f00000022c0)=[@cred={{0x1c}}, @rights={{0x10}}], 0x30}}, {{&(0x7f0000002300)=@abs, 0x6e, &(0x7f00000023c0)=[{&(0x7f0000002380)=""/22, 0x16}], 0x1, &(0x7f0000002400)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xe8}}], 0x6, 0x10001, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x7c, 0x7c, 0x2, [@var, @func_proto={0x0, 0x6, 0x0, 0xd, 0x0, [{}, {}, {}, {}, {0x3, 0xfffffffd}, {0xfffffffe}]}, @fwd, @volatile, @volatile={0x0, 0x0, 0x0, 0x9, 0x4}, @volatile={0x0, 0x0, 0x0, 0x9, 0x6}]}}, 0x0, 0x96}, 0x28) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000009d00), r2) recvmsg$can_bcm(r1, &(0x7f0000002840)={&(0x7f0000002680)=@l2tp6={0xa, 0x0, 0x0, @initdev}, 0x80, &(0x7f00000027c0)=[{&(0x7f0000002700)=""/81, 0x51}, {&(0x7f0000000240)=""/18, 0x12}, {&(0x7f0000002780)=""/36, 0x24}], 0x3, &(0x7f0000002800)}, 0x100) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001580)=@ipv6_newaddrlabel={0x38, 0x48, 0x3, 0x0, 0x0, {}, [@IFAL_LABEL={0x8}, @IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x38}}, 0x0) sendmsg$NLBL_CALIPSO_C_ADD(r2, &(0x7f0000009dc0)={0x0, 0x0, &(0x7f0000009d80)={&(0x7f0000009d40)={0x24, r3, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0xc050) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000002880), r2) sendmsg$NLBL_UNLABEL_C_STATICADD(r2, &(0x7f0000002940)={&(0x7f0000002800)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000002900)={&(0x7f00000028c0)={0x1c, r5, 0x4, 0x70bd2c, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @loopback}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8050}, 0x0) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x7, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000851000000300000018000000", @ANYRES32, @ANYBLOB="000000000000000095000000000000009500000000000000"], &(0x7f0000000280)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, 0x25, r6, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x2}, 0x94) 151.114772ms ago: executing program 0 (id=3193): r0 = socket$igmp(0x2, 0x3, 0x2) r1 = socket$inet_udplite(0x2, 0x2, 0x88) (async) r2 = accept$inet(r0, &(0x7f0000000000)={0x2, 0x0, @private}, &(0x7f0000000040)=0x10) setsockopt$inet_sctp_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000080)={0xcb, 0x99, 0xfb, 0x8, 0x7, 0x2, 0x81, 0x6, 0x6, 0x3e, 0xf, 0x1, 0xe, 0x2}, 0xe) (async) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000001800)=@nat={'nat\x00', 0x670, 0x5, 0xb68, 0x8b0, 0xa00, 0xffffffff, 0x0, 0xa00, 0xad0, 0xad0, 0xffffffff, 0xad0, 0xad0, 0x5, 0x0, {[{{@ip={@rand_addr=0x64010100, @local, 0xff0000ff, 0xffffff00, 'veth1_to_bridge\x00', 'macsec0\x00', {0xff}, {}, 0x16, 0x1}, 0x0, 0x878, 0x8b0, 0x48, {}, [@common=@unspec=@u32={{0x7e0}, {[{[{0x400, 0x1}, {0x0, 0x1}, {0x5, 0x31ad6b86d1e81068}, {0x92, 0x3}, {0x1d3, 0x2}, {0x3}, {0x1, 0x2}, {}, {0x5, 0x1}, {0x80000001, 0x1}, {0xffffffff, 0x3}], [{0x3, 0x9}, {0x6, 0x1}, {0x7, 0x5}, {0x7, 0x7}, {0x200, 0x6}, {0x420, 0x89f}, {0x3, 0xffffffff}, {0x4, 0x1}, {0x2, 0x6}, {0x0, 0x9}, {0x2, 0x7}], 0x6, 0x3}, {[{0x5}, {0x40, 0x2}, {0xf37b, 0x3}, {0x6, 0x3}, {0x9, 0x2}, {0xd175}, {0xb, 0x3}, {0x80000000, 0x3}, {0x7, 0x1}, {0x80000000, 0x3}, {0x9, 0x1}], [{0xfffff915, 0x7}, {0x4, 0x7fff}, {0x7, 0x6}, {0x5, 0x1}, {0x7, 0x3}, {0x9, 0x3}, {0xfffffffe, 0x6}, {0x8, 0x3}, {0x5fd42ece, 0x7}, {0x1, 0x6}, {0xfffffff9, 0xe}], 0x4, 0x4}, {[{0x1000, 0x2}, {0x80000001}, {0x4, 0x2}, {0x1}, {0x2, 0x1}, {0x8001, 0x1}, {0x0, 0x2}, {0x80000001, 0x3}, {0x4, 0x3}, {0x7, 0x6}, {0x0, 0x1}], [{0x7f, 0x4}, {0xa, 0x6}, {0x80, 0x400}, {0x6, 0xbcdd}, {0xe, 0x40}, {0x9016, 0x1}, {0x0, 0x7ff}, {0x40, 0x1}, {0x5, 0x7}, {0x7, 0x7f}, {0x7, 0x5}], 0x9, 0x2}, {[{0xdb, 0x1}, {0x4}, {0xc, 0x2}, {0xfd0f, 0x1}, {0x4, 0x1}, {0x85bf, 0x2}, {0x5, 0x3}, {0x8}, {0x1000}, {0x6, 0x3}, {0x9e20, 0x2}], [{0x9, 0x4}, {0xfffffff8, 0x1}, {0x3ff, 0x800}, {0x3, 0xd2}, {0x9, 0x400}, {0x6, 0xcf7}, {0x3, 0x7}, {0x5, 0x3}, {0x275, 0x3}, {0x9, 0x4}, {0x1, 0x59a}], 0x7, 0x9}, {[{0x8, 0x1}, {0x1, 0x26cf73c538c095eb}, {0xff}, {0x8, 0x3}, {0x100, 0x2}, {0x7f}, {0x8, 0x1}, {0x821a, 0x1}, {0x10, 0x1}, {0x39c}, {0x2, 0x3}], [{0x4c2a, 0xffff}, {0x1, 0x4}, {0x0, 0x9}, {0x9, 0x3ff}, {0x8, 0x3c}, {0x4, 0x3}, {0x80000001, 0x7}, {0x69, 0x2}, {0xfe4, 0x944a}, {0x3}, {0x49, 0xe8b7}], 0x9, 0x3}, {[{0xfffffffc, 0x2}, {0x98}, {0xea}, {0x970c, 0x2}, {0xf}, {0x8001, 0x1}, {0x9}, {0x8000, 0x3}, {0x3}, {0x9, 0x1}, {0x5}], [{0xb, 0x247}, {0x1, 0x9}, {}, {0x581, 0x3}, {0x2}, {0x4, 0x33}, {0x6, 0x7}, {0x4, 0x9}, {0x6, 0x7}, {0x7ff, 0xffffffff}, {0x8, 0x401}], 0x6, 0x1}, {[{0x89, 0x2}, {0xfcd, 0x3}, {0x2, 0x2}, {0xdd, 0x1}, {0x5ec6, 0x2}, {0xfffffffd, 0x3}, {0x7f, 0x2}, {0x8}, {0x7fff, 0x1}, {0x8, 0x1}, {0x4, 0x1}], [{0x1, 0x81}, {0x7fff, 0x8}, {0x0, 0x7fffffff}, {0x4, 0x1000}, {0x0, 0x1}, {0x3c, 0x80000000}, {0xff, 0x2}, {0x6, 0xe4}, {0x1cc43331, 0x80000000}, {0x8, 0x3}, {0x6bf9, 0x7}], 0xf, 0x7}, {[{0xe, 0x2}, {0x9, 0x2}, {0x9, 0x1}, {0x0, 0x1}, {0x3, 0x2}, {0x4de7, 0x3}, {0x3, 0x3}, {0x56}, {0x7, 0x3}, {0xdc6, 0x2}, {0x5, 0x2}], [{0x200000, 0x9}, {0xffff, 0xca}, {0x1, 0x4}, {0x9, 0xd3}, {0x7fffffff}, {0x6, 0x7}, {0x1400, 0x1}, {0x8, 0x2}, {0x7, 0x9}, {0x6, 0xa37}, {0x9, 0x6}], 0x7, 0x3}, {[{0xffff, 0x3}, {0x6, 0x2}, {}, {0x3ff, 0x2}, {0x9b09, 0x2}, {0x80000001, 0x1}, {0xb, 0x3}, {0x4}, {0x46d1ae2e, 0x1}, {0x0, 0x2}, {0x8, 0x3}], [{0x6, 0x83}, {0x1, 0x8001}, {0x4, 0x80}, {0x4, 0x4}, {0xdd, 0x8}, {0x10000, 0xffe}, {0x8, 0x3}, {0x3, 0x4}, {0x45db, 0x6}, {0x200, 0x9}, {0x82, 0x7}], 0x6, 0x6}, {[{0x2, 0x2}, {0x2a, 0x2}, {0x8, 0x2}, {0x6, 0x1}, {0xc82, 0x3}, {0x4, 0x3}, {0x4}, {0x10001, 0x3}, {0xaa31, 0x1}, {0x9, 0x2}, {0x2, 0x1}], [{0x2a, 0x3}, {0x1, 0x9e}, {}, {0x5, 0xfffff001}, {0x5, 0x8}, {0x8, 0x2}, {0x10, 0x7}, {0xff, 0x5}, {0x1, 0x400}, {0x4f, 0xf2b2}, {0x6, 0x1}], 0x6, 0xfd}, {[{0x48}, {0x7, 0x3}, {0xffe, 0x1}, {0x2, 0x1}, {0x6}, {0x40, 0x1}, {0x5, 0x2}, {0x7ff, 0x3}, {0x7, 0x2}, {0x7, 0x2}, {0x51}], [{0x7ec7, 0xf}, {0x3, 0x954}, {0xbe}, {0x57, 0x663}, {0x2, 0x3}, {0x8, 0x9}, {0xd, 0x2}, {0x40, 0x1000}, {0x1101, 0x9}, {0x800, 0x8}, {0x5, 0x92}], 0xb, 0x1}], 0x9}}, @common=@icmp={{0x28}, {0xd, 'qt'}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x10, @broadcast, @multicast2, @gre_key=0x3, @icmp_id=0x66}}}}, {{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010101, 0xff, 0xff000000, 'veth1\x00', 'ip6erspan0\x00', {0xff}, {0xff}, 0x11, 0x2, 0x59}, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @remote, @rand_addr=0x64010100, @port=0x4e20, @gre_key=0x6}}}}, {{@ip={@multicast2, @private=0xa010102, 0xff, 0x0, 'virt_wifi0\x00', 'batadv_slave_1\x00', {}, {}, 0x0, 0x0, 0x4}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x2, @loopback, @remote, @port=0x4e23, @icmp_id=0x65}}}}, {{@uncond, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@icmp={{0x28}, {0x4, "1542", 0x1}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @rand_addr, @rand_addr=0x64010100, @icmp_id, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0xbc8) (async) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000100)={0x0, 0x4, 0x4, 0x0, @vifc_lcl_ifindex, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10) 98.545722ms ago: executing program 1 (id=3194): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_REG(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, r3, 0x1, 0x70bd29, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4) ioctl$SIOCRSSCAUSE(r1, 0x89e1, 0x0) bind$rose(r1, &(0x7f00000000c0)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, 0x1, @bcast}, 0x1c) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet_tcp_int(r6, 0x6, 0x14, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r6, &(0x7f0000000300)={0x2, 0x0, @remote}, 0x10) sendto$inet(r6, &(0x7f00000003c0)="20c0", 0x2, 0x0, 0x0, 0x0) splice(r6, 0x0, r5, 0x0, 0x1, 0xa) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000080), &(0x7f0000000140)=0x4) r7 = socket(0x28, 0x80000, 0x3) socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r7, 0x89f8, &(0x7f0000000340)={'syztnl0\x00', &(0x7f0000000600)={'syztnl1\x00', 0x0, 0x8, 0x8, 0x3, 0xfffffe01, {{0x23, 0x4, 0x2, 0x3e, 0x8c, 0x64, 0x0, 0x81, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x39}, {[@end, @timestamp={0x44, 0x10, 0xc7, 0x0, 0xb, [0x2, 0xfffffffa, 0x2]}, @lsrr={0x83, 0x7, 0xd3, [@broadcast]}, @rr={0x7, 0xb, 0x52, [@multicast2, @multicast1]}, @ra={0x94, 0x4, 0x1}, @timestamp_addr={0x44, 0x3c, 0xba, 0x1, 0x9, [{@dev={0xac, 0x14, 0x14, 0x1a}, 0x740}, {@rand_addr=0x64010100, 0xea6}, {@private=0xa010102, 0x8a47}, {@private=0xa010102, 0x9a}, {@multicast2, 0x3a1c}, {@local, 0x7fffffff}, {@broadcast, 0x8}]}, @noop, @timestamp_addr={0x44, 0x14, 0x63, 0x1, 0xa, [{@multicast1, 0x7}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xfffffff8}]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r7, 0x89f3, &(0x7f0000000400)={'syztnl0\x00', &(0x7f00000007c0)={'syztnl2\x00', 0x0, 0x700, 0x8, 0x2, 0x2e4, {{0x36, 0x4, 0x3, 0x9, 0xd8, 0x64, 0x0, 0x5, 0x2f, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x12}, {[@timestamp_prespec={0x44, 0x34, 0x4c, 0x3, 0x9, [{@private=0xa010100, 0x4c18}, {@local, 0x2}, {@empty, 0x7}, {@loopback, 0x8}, {@rand_addr=0x64010101, 0x1}, {@remote, 0x62d6}]}, @cipso={0x86, 0x24, 0xffffffffffffffff, [{0x5, 0xd, "38d8b7c8f8d49b5bd1a35c"}, {0x2, 0x11, "d17126425eef85e38d6f070c19f14f"}]}, @end, @rr={0x7, 0x7, 0x89, [@dev={0xac, 0x14, 0x14, 0x15}]}, @end, @cipso={0x86, 0x3e, 0x2, [{0x1, 0x7, "5d60bd7ca0"}, {0x6, 0xc, "8845fb19d37a4589188e"}, {0x5, 0x4, '\\8'}, {0x0, 0x4, "a62d"}, {0x1, 0x7, "bbbdab6d1b"}, {0x0, 0xf, "898ff1c6c2fabba2daed7561b6"}, {0x2, 0x7, "dbd799e9e6"}]}, @lsrr={0x83, 0x23, 0xab, [@broadcast, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, @empty, @rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0x2a}]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r7, 0x89f3, &(0x7f0000000740)={'ip6_vti0\x00', &(0x7f00000006c0)={'ip6tnl0\x00', 0x0, 0x2d, 0xff, 0x8, 0x2, 0x20, @local, @dev={0xfe, 0x80, '\x00', 0x31}, 0x7800, 0x0, 0x1, 0x6}}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000b80)={r4, 0xe0, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000008c0)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x9, &(0x7f0000000900)=[0x0, 0x0, 0x0], &(0x7f0000000940)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xc8, &(0x7f0000000980)=[{}, {}], 0x10, 0x10, &(0x7f00000009c0), &(0x7f0000000a00), 0x8, 0x40, 0x8, 0x8, &(0x7f0000000a40)}}, 0x10) sendmsg$inet(r5, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000013c0)="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", 0x1000}, {&(0x7f00000001c0)}, {&(0x7f0000000200)="c8754b42414f3b7a9b66c175b296683b4d449eb8f5f243bf01eb1358e7cc33b7b5dcc16e8ad37de8f159", 0x2a}, {&(0x7f0000000480)="64c05ba14797a6ce8f175b2e9c2e5a8bac76163c977e865e66cb1dd02c4097c2a8917001d93695fd332676a0f0ad12e114c428610b72d38c66b334bab3fe2aaa2c0534dac68aa8b52930a3e40aacabe33430e33d13a21b324be8a02cbc7e4122c04b6d3af73d4e8b1cd7059bc78d4b98c3ee04ae44cd856e4e47b855b67f464ff9ace313ad39c12bfaad9330ea058b08c3a051f3aabd81835bb03760fb62ce5d19236c6d1a33364c50c0aeacda6938309951e2e79d0c9297414cc365c44b9b5f64c3a929b411a251c3b6001c259171aed1b183ae7b008cd15c7312a84d365d908c8e494acee542945d655d7f4edcd84a4454c1", 0xf3}, {&(0x7f0000000280)="146f38661d81bc48060063aaca95e6014d67170b1c9fb9877a174c141cb1cf98e111140ea5d514e5aab05f030142ccbd058b6ff6cfd01eda86fd72653ed3bb5e17a6cc5bbd350e51a1a2b696bca87171170a339e43df86acf681e21b950bfb4d7b940de6db87b390f096060bc0", 0x6d}], 0x5, &(0x7f0000000bc0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r8, @remote, @local}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r9, @dev={0xac, 0x14, 0x14, 0x3b}, @dev={0xac, 0x14, 0x14, 0x36}}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x8}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r10, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @ip_retopts={{0x34, 0x0, 0x7, {[@timestamp={0x44, 0x24, 0xe5, 0x0, 0x7, [0x100, 0x2, 0x6, 0x4, 0xffffffff, 0x401, 0x8, 0x6]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r11, @multicast1, @dev={0xac, 0x14, 0x14, 0xc}}}}], 0xd0}, 0x4000) setsockopt$IP_VS_SO_SET_EDIT(r7, 0x0, 0x483, &(0x7f00000000c0)={0x3c, @multicast1, 0x4e20, 0x4, 'fo\x00', 0x14, 0x7, 0x20}, 0x2c) r12 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r14 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmsg$sock(r14, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@mark={{0x14, 0x1, 0x51, 0x1}}], 0x18}, 0x80) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001380)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd25, 0x8008, {0x0, 0x0, 0x0, r13, {0x0, 0xf0}, {}, {0xa, 0xb}}, [@filter_kind_options=@f_u32={{0x8}, {0x14, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x2}, @TCA_U32_FLAGS={0x8, 0xb, 0x2}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) 66.150503ms ago: executing program 3 (id=3195): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000070000000000000055090100000000009500000000000000bf91fa0000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 0s ago: executing program 2 (id=3196): sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001c80)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000440)='\x00', 0x1}], 0x1}}], 0x1, 0x0) r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000007c0)={'bridge_slave_0\x00'}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCGIFPFLAGS(r2, 0x8935, &(0x7f0000000080)={'pimreg1\x00'}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newtaction={0x60, 0x30, 0x1, 0x7ffffd, 0x0, {}, [{0x4c, 0x1, [@m_gact={0x3b, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x3, 0x10000, 0x10000000, 0x7}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x4004}, 0x24048800) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[], 0x70}}, 0x0) bind$vsock_stream(r1, &(0x7f0000000440), 0x10) listen(r1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c0000001800dd8d00000000000000000200000000000005000000000600150001000000280016802400010000000000000000000004010020000020000000000000000000000000000001"], 0x4c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000800)=@newqdisc={0x98, 0x24, 0x4ee4e6a52ff56541, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x68, 0x2, {{}, [@TCA_NETEM_LOSS={0x4c, 0xd, 0x0, 0x1, [@NETEM_LOSS_GI={0x18}, @NETEM_LOSS_GI={0x18, 0x1, {0x8001, 0x1, 0x7, 0x1, 0x4}}, @NETEM_LOSS_GI={0x18, 0x1, {0x4, 0x9, 0x8de3, 0x56b, 0x3}}]}]}}}]}, 0x98}}, 0x2800) r8 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r8, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) writev(r8, &(0x7f00000003c0)=[{&(0x7f0000000640)="98", 0x1}], 0x1) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000600)={r0}) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="3c008f959e8b1885f9a1f0346883cc7fff8e71d74e01c98ae1d395c426332fc5b523ddf4386111d22cb8905f09faa01dc5152e214e812a575c3aa82542ffffffff1869627e9e52d469cb55ac97c4d0470400"/110, @ANYRES16, @ANYBLOB="0100fdffffff0000000005000000180001801400020073797a5f74756e000000000000000000080009000400000005000200fc000000"], 0x3c}}, 0x0) bind$inet6(r6, &(0x7f0000000240)={0xa, 0x4e24, 0x10003, @private0, 0xfff}, 0x1c) r10 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TRIM(r10, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={0x10, 0x3f6, 0x8, 0x70bd28, 0x25dfdbfb}, 0x10}, 0x1, 0x0, 0x0, 0x48000}, 0x40000) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f00000001c0), 0x0, 0x41, &(0x7f0000000200)=[{}], 0x8, 0x10, &(0x7f0000000300), &(0x7f0000000680), 0x8, 0xcc, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000580)={0x1d, r11, 0x1, {0x1, 0x0, 0x38a83e98ff261eee}, 0xfd}, 0x18) r12 = accept4$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r12, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000003380)=[{&(0x7f0000000140)=""/120, 0x78}, {&(0x7f0000000040)=""/34, 0x22}, {&(0x7f0000003300)=""/107, 0x6b}], 0x3}}], 0x1, 0x2, 0x0) kernel console output (not intermixed with test programs): alid length. [ 152.406919][ T8491] macvlan2: entered promiscuous mode [ 152.412394][ T8491] macvlan2: entered allmulticast mode [ 152.638408][ T8508] netlink: 4 bytes leftover after parsing attributes in process `syz.2.652'. [ 153.114945][ T8540] syzkaller1: entered promiscuous mode [ 153.127661][ T8540] syzkaller1: entered allmulticast mode [ 153.353837][ T8553] __nla_validate_parse: 3 callbacks suppressed [ 153.353858][ T8553] netlink: 8 bytes leftover after parsing attributes in process `syz.0.665'. [ 153.527710][ T8560] netlink: 'syz.4.667': attribute type 4 has an invalid length. [ 153.562562][ T8560] netlink: 17 bytes leftover after parsing attributes in process `syz.4.667'. [ 153.602457][ T8567] xt_TPROXY: Can be used only with -p tcp or -p udp [ 153.764993][ T8576] netlink: 'syz.1.671': attribute type 2 has an invalid length. [ 153.795368][ T8576] netlink: 244 bytes leftover after parsing attributes in process `syz.1.671'. [ 153.810778][ T8580] netlink: 28 bytes leftover after parsing attributes in process `syz.3.669'. [ 153.819958][ T8580] netlink: 28 bytes leftover after parsing attributes in process `syz.3.669'. [ 154.062324][ T8592] netlink: 'syz.1.674': attribute type 4 has an invalid length. [ 154.075692][ T8592] netlink: 152 bytes leftover after parsing attributes in process `syz.1.674'. [ 154.107492][ T8592] `: renamed from bond0 [ 154.563637][ T8608] netlink: 12 bytes leftover after parsing attributes in process `syz.1.679'. [ 155.041391][ T8641] tipc: Enabled bearer , priority 0 [ 155.072282][ T8641] syzkaller0: entered promiscuous mode [ 155.096006][ T8641] syzkaller0: entered allmulticast mode [ 155.124898][ T8641] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) ! [ 155.135272][ T8650] netlink: 120 bytes leftover after parsing attributes in process `syz.3.686'. [ 155.189859][ T8641] tipc: Resetting bearer [ 155.271336][ T8638] tipc: Resetting bearer [ 155.288110][ T8662] netlink: 4 bytes leftover after parsing attributes in process `syz.1.690'. [ 155.326164][ T8638] tipc: Disabling bearer [ 155.594928][ T8677] tipc: Enabling of bearer rejected, failed to enable media [ 155.667879][ T8679] netlink: 48 bytes leftover after parsing attributes in process `syz.0.696'. [ 156.472015][ T8726] syzkaller1: entered promiscuous mode [ 156.477936][ T8726] syzkaller1: entered allmulticast mode [ 156.634800][ T8733] netlink: 'syz.4.712': attribute type 1 has an invalid length. [ 156.891239][ T8748] netlink: 'syz.1.714': attribute type 1 has an invalid length. [ 156.987820][ T8750] bond0: Unable to set up delay as MII monitoring is disabled [ 157.038137][ T8750] bond0 (unregistering): Released all slaves [ 157.153842][ T8748] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR [ 157.379049][ T8788] netlink: 'syz.0.724': attribute type 1 has an invalid length. [ 157.404850][ T8788] netlink: 'syz.0.724': attribute type 2 has an invalid length. [ 157.418210][ T8788] netlink: 'syz.0.724': attribute type 3 has an invalid length. [ 157.431653][ T8788] netlink: 'syz.0.724': attribute type 2 has an invalid length. [ 157.750451][ T8809] x_tables: unsorted entry at hook 1 [ 157.924418][ T8820] sctp: [Deprecated]: syz.3.735 (pid 8820) Use of struct sctp_assoc_value in delayed_ack socket option. [ 157.924418][ T8820] Use struct sctp_sack_info instead [ 158.326980][ T8837] netlink: 'syz.3.742': attribute type 1 has an invalid length. [ 158.473520][ T8842] __nla_validate_parse: 16 callbacks suppressed [ 158.473537][ T8842] netlink: 44 bytes leftover after parsing attributes in process `syz.4.744'. [ 158.560038][ T8850] netlink: 44 bytes leftover after parsing attributes in process `syz.3.745'. [ 158.575594][ T8850] netlink: 43 bytes leftover after parsing attributes in process `syz.3.745'. [ 158.584746][ T8850] netlink: 'syz.3.745': attribute type 5 has an invalid length. [ 158.592600][ T8850] netlink: 43 bytes leftover after parsing attributes in process `syz.3.745'. [ 158.645645][ T8852] syzkaller0: entered promiscuous mode [ 158.651178][ T8852] syzkaller0: entered allmulticast mode [ 158.722119][ T8856] netlink: 16 bytes leftover after parsing attributes in process `syz.4.747'. [ 158.737462][ T8857] netlink: 8 bytes leftover after parsing attributes in process `syz.2.748'. [ 158.746825][ T8858] netlink: 8 bytes leftover after parsing attributes in process `syz.0.749'. [ 158.756033][ T8857] netlink: 4 bytes leftover after parsing attributes in process `syz.2.748'. [ 158.768750][ T8849] tipc: Enabled bearer , priority 0 [ 158.780469][ T8849] tipc: Resetting bearer [ 158.797192][ T8848] tipc: Resetting bearer [ 158.833022][ T8848] tipc: Disabling bearer [ 159.087602][ T8879] netlink: 'syz.1.756': attribute type 1 has an invalid length. [ 159.228736][ T8887] openvswitch: netlink: Missing valid actions attribute. [ 159.236142][ T8887] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 159.250968][ T8878] netlink: 9 bytes leftover after parsing attributes in process `syz.2.755'. [ 159.264017][ T8889] netlink: 2 bytes leftover after parsing attributes in process `syz.4.759'. [ 159.264637][ T8877] 8021q: adding VLAN 0 to HW filter on device bond0 [ 159.300922][ T8877] 8021q: adding VLAN 0 to HW filter on device team0 [ 159.317461][ T8877] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 159.358126][ T8878] gretap0: entered promiscuous mode [ 159.511225][ T8901] netlink: 'syz.2.761': attribute type 11 has an invalid length. [ 159.905220][ T8920] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 159.912551][ T8920] IPv6: NLM_F_CREATE should be set when creating new route [ 159.919912][ T8920] IPv6: NLM_F_CREATE should be set when creating new route [ 159.927388][ T8920] IPv6: NLM_F_CREATE should be set when creating new route [ 159.953802][ T8920] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 160.171975][ T8936] xt_CT: You must specify a L4 protocol and not use inversions on it [ 160.593411][ T8946] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 160.606094][ T8946] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.764628][ T8946] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 160.786760][ T8946] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.928932][ T8946] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 160.975795][ T8946] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.226191][ T8995] syzkaller1: entered promiscuous mode [ 161.241450][ T8995] syzkaller1: entered allmulticast mode [ 161.308886][ T8995] bond3: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5) [ 161.342780][ T8995] bond3 (unregistering): Released all slaves [ 161.464010][ T3793] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 161.486405][ T9014] Bluetooth: hci3: Opcode 0x0c1a failed: -22 [ 161.507328][ T3793] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.601154][ T12] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 161.611195][ T12] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.706009][ T3016] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 161.714663][ T3016] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.786566][ T3016] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 161.801314][ T3016] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.146153][ T9050] bond0: (slave gre0): Error: Device type is different from other slaves [ 162.363561][ T9056] syzkaller0: entered promiscuous mode [ 162.370519][ T9056] syzkaller0: entered allmulticast mode [ 162.772578][ T9080] x_tables: unsorted underflow at hook 2 [ 163.582174][ T9105] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 163.589502][ T9105] IPv6: NLM_F_CREATE should be set when creating new route [ 163.596930][ T9105] IPv6: NLM_F_CREATE should be set when creating new route [ 163.604197][ T9105] IPv6: NLM_F_CREATE should be set when creating new route [ 163.615636][ T9105] validate_nla: 1 callbacks suppressed [ 163.615654][ T9105] netlink: 'syz.1.803': attribute type 2 has an invalid length. [ 163.629730][ T9105] __nla_validate_parse: 11 callbacks suppressed [ 163.629748][ T9105] netlink: 84 bytes leftover after parsing attributes in process `syz.1.803'. [ 163.680502][ T9106] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 163.741459][ T9107] netlink: 4 bytes leftover after parsing attributes in process `syz.1.803'. [ 163.751427][ T9106] netlink: 8 bytes leftover after parsing attributes in process `syz.1.803'. [ 164.083301][ T9063] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 164.218627][ T30] audit: type=1107 audit(1768173497.891:3): pid=9110 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='Ù‹5ž÷Œ•%èÍUýAÊÃËÙ ë0ä™l…t¿Ý•/Öÿ Ž6òŠ¨Šç›' [ 164.280172][ T9113] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.805'. [ 164.675783][ T9134] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 164.776437][ T9146] netlink: 8 bytes leftover after parsing attributes in process `syz.4.812'. [ 164.778104][ T9149] netlink: 4 bytes leftover after parsing attributes in process `syz.0.814'. [ 164.785626][ T9146] netlink: 12 bytes leftover after parsing attributes in process `syz.4.812'. [ 164.825801][ T9150] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 164.838943][ T9150] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 164.855862][ T9149] netlink: 20 bytes leftover after parsing attributes in process `syz.0.814'. [ 164.875905][ T9150] netlink: 8 bytes leftover after parsing attributes in process `syz.1.813'. [ 164.896963][ T9150] netlink: 12 bytes leftover after parsing attributes in process `syz.1.813'. [ 164.945296][ T9146] veth0: entered promiscuous mode [ 165.010530][ T9145] veth0: left promiscuous mode [ 165.206100][ T9178] pim6reg527: entered allmulticast mode [ 165.300082][ T9187] netlink: 'syz.2.825': attribute type 1 has an invalid length. [ 165.434660][ T9198] ieee802154 phy0 wpan0: encryption failed: -22 [ 165.813089][ T9226] xt_nat: multiple ranges no longer supported [ 166.220195][ T9248] x_tables: duplicate underflow at hook 1 [ 166.623057][ T9272] IPVS: set_ctl: invalid protocol: 190 224.0.0.2:20001 [ 166.818154][ T9281] net veth1_virt_wifi .: renamed from virt_wifi0 [ 166.876955][ T9286] mac80211_hwsim hwsim9 wlan0: entered allmulticast mode [ 166.971940][ T9286] erspan0: entered allmulticast mode [ 167.159664][ T9300] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 167.189002][ T9300] team0: Failed to send port change of device batadv1 via netlink (err -105) [ 167.210641][ T9300] team0: Failed to send options change via netlink (err -105) [ 167.229003][ T9300] team0: Port device batadv1 added [ 167.250635][ T9306] pim6reg: entered allmulticast mode [ 167.275750][ T9305] pim6reg: left allmulticast mode [ 167.831436][ T9351] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode [ 168.026579][ T9354] bond5: (slave C): Device is not bonding slave [ 168.033061][ T9354] bond5: option active_slave: invalid value (C) [ 168.041946][ T9354] bond5 (unregistering): Released all slaves [ 168.430642][ T9395] xfrm1: entered allmulticast mode [ 168.616540][ T9406] team0: Cannot enslave team device to itself [ 168.622894][ T9414] bridge0: port 1(veth0_to_bridge) entered blocking state [ 168.645967][ T9414] bridge0: port 1(veth0_to_bridge) entered disabled state [ 168.654276][ T9414] veth0_to_bridge: entered allmulticast mode [ 168.663557][ T9414] veth0_to_bridge: entered promiscuous mode [ 168.992908][ T9451] __nla_validate_parse: 14 callbacks suppressed [ 168.992927][ T9451] netlink: 24 bytes leftover after parsing attributes in process `syz.1.895'. [ 169.101778][ T9451] netlink: 56 bytes leftover after parsing attributes in process `syz.1.895'. [ 169.122992][ T9451] netlink: 88 bytes leftover after parsing attributes in process `syz.1.895'. [ 169.166993][ T9457] netlink: 24 bytes leftover after parsing attributes in process `syz.1.895'. [ 169.261968][ T9463] A link change request failed with some changes committed already. Interface veth0_to_bridge may have been left with an inconsistent configuration, please check. [ 169.319208][ T5992] IPVS: starting estimator thread 0... [ 169.325330][ T9470] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 169.436572][ T9473] IPVS: using max 29 ests per chain, 69600 per kthread [ 169.538786][ T9480] netlink: 8 bytes leftover after parsing attributes in process `syz.2.903'. [ 169.566860][ T9482] IPVS: set_ctl: invalid protocol: 255 172.20.20.187:20004 [ 169.641239][ T9487] netlink: 8 bytes leftover after parsing attributes in process `syz.0.905'. [ 169.801191][ T9492] veth0_vlan: entered allmulticast mode [ 169.809743][ T9492] netlink: 40 bytes leftover after parsing attributes in process `syz.0.907'. [ 170.305949][ T9509] IPVS: sync thread started: state = MASTER, mcast_ifn = geneve1, syncid = 0, id = 0 [ 170.436850][ T9517] netlink: 12 bytes leftover after parsing attributes in process `syz.4.916'. [ 170.471537][ T9518] netlink: 8 bytes leftover after parsing attributes in process `syz.2.915'. [ 170.488346][ T9512] syzkaller0: entered promiscuous mode [ 170.493879][ T9512] syzkaller0: entered allmulticast mode [ 170.719405][ T9517] dvmrp0: left allmulticast mode [ 170.724642][ T9517] netdevsim netdevsim4 netdevsim0: left allmulticast mode [ 170.919915][ T9544] tipc: New replicast peer: 255.255.255.255 [ 170.939259][ T9544] tipc: Enabled bearer , priority 10 [ 171.246657][ T9551] netlink: 'syz.3.924': attribute type 1 has an invalid length. [ 171.306607][ T9551] bond3: entered promiscuous mode [ 171.311915][ T9551] bond3: entered allmulticast mode [ 171.321120][ T9551] 8021q: adding VLAN 0 to HW filter on device bond3 [ 171.396493][ T9561] netlink: 'syz.0.926': attribute type 4 has an invalid length. [ 171.404491][ T9561] netlink: 152 bytes leftover after parsing attributes in process `syz.0.926'. [ 171.521068][ T9561] `: renamed from bond0 [ 172.069782][ T795] tipc: Node number set to 3758096386 [ 172.278233][ T9595] netlink: 'syz.2.938': attribute type 10 has an invalid length. [ 172.476487][ T9606] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 172.535732][ T9612] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 173.045144][ T9627] "syz.3.947" (9627) uses obsolete ecb(arc4) skcipher [ 173.159982][ T9642] geneve3: entered promiscuous mode [ 173.271918][ T9644] netlink: 'syz.1.950': attribute type 1 has an invalid length. [ 173.423243][ T9648] bond4 (unregistering): Released all slaves [ 173.482432][ T9654] veth1_to_bond: entered allmulticast mode [ 173.580128][ T9654] veth1_to_bond (unregistering): left allmulticast mode [ 174.018026][ T9679] __nla_validate_parse: 11 callbacks suppressed [ 174.018046][ T9679] netlink: 28 bytes leftover after parsing attributes in process `syz.1.960'. [ 174.066435][ T9679] netlink: 28 bytes leftover after parsing attributes in process `syz.1.960'. [ 174.187001][ T9674] xt_cgroup: invalid path, errno=-2 [ 174.195186][ T9686] netlink: 12 bytes leftover after parsing attributes in process `syz.2.962'. [ 174.261403][ T9686] netlink: 'syz.2.962': attribute type 2 has an invalid length. [ 174.348921][ T9674] can: request_module (can-proto-0) failed. [ 174.985737][ T9726] netlink: 4 bytes leftover after parsing attributes in process `syz.2.971'. [ 175.195888][ T9728] netlink: 'syz.4.973': attribute type 2 has an invalid length. [ 175.414373][ T9742] netlink: 132 bytes leftover after parsing attributes in process `syz.2.975'. [ 175.431160][ T9748] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.976'. [ 175.546137][ T9750] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0 [ 175.600205][ T9753] netlink: 36 bytes leftover after parsing attributes in process `syz.4.977'. [ 175.956960][ T9757] netlink: 20 bytes leftover after parsing attributes in process `syz.2.979'. [ 176.273848][ T9772] netlink: 24 bytes leftover after parsing attributes in process `syz.3.981'. [ 176.303004][ T9779] netlink: 44 bytes leftover after parsing attributes in process `syz.1.984'. [ 176.522356][ T9787] netlink: 'syz.4.986': attribute type 1 has an invalid length. [ 176.687590][ T9793] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not security [ 176.742048][ T9787] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not filter [ 176.771105][ T9794] bond1: (slave gretap1): making interface the new active one [ 176.821732][ T9794] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 176.868957][ T9804] openvswitch: netlink: Message has 1 unknown bytes. [ 176.875845][ T9804] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 176.915662][ T9804] syzkaller0: entered promiscuous mode [ 176.935821][ T9804] syzkaller0: entered allmulticast mode [ 177.455968][ T9838] tipc: Enabled bearer , priority 0 [ 177.473584][ T9842] tipc: Enabling of bearer rejected, already enabled [ 177.532274][ T9838] syzkaller0: entered promiscuous mode [ 177.571830][ T9838] syzkaller0: entered allmulticast mode [ 177.735155][ T9842] tipc: Resetting bearer [ 177.821199][ T9842] tipc: Disabling bearer [ 177.876777][ T9855] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 178.188981][ T9862] veth5: entered allmulticast mode [ 178.294136][ T9874] block nbd3: not configured, cannot reconfigure [ 178.496801][ T9884] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 178.718605][ T9897] v: renamed from veth0_vlan (while UP) [ 178.724380][ T9896] netlink: 'syz.4.1017': attribute type 1 has an invalid length. [ 178.765985][ T9896] netlink: 'syz.4.1017': attribute type 1 has an invalid length. [ 179.462953][ T9938] bridge3: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 179.689209][ T9948] __nla_validate_parse: 4 callbacks suppressed [ 179.689229][ T9948] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1029'. [ 179.942241][ T9967] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.1032'. [ 180.108558][ T9977] macvtap1: entered allmulticast mode [ 180.114026][ T9977] veth0_macvtap: entered allmulticast mode [ 180.419937][ T9999] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1041'. [ 180.446580][ T9999] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1041'. [ 180.463607][ T9999] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1041'. [ 180.473213][ T9999] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1041'. [ 180.907231][T10030] netlink: 288 bytes leftover after parsing attributes in process `syz.2.1049'. [ 181.063174][T10035] xt_policy: too many policy elements [ 181.406481][T10051] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1054'. [ 181.454431][T10051] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1054'. [ 181.498390][T10051] netlink: 'syz.3.1054': attribute type 1 has an invalid length. [ 181.553706][T10056] netlink: 1 bytes leftover after parsing attributes in process `syz.4.1056'. [ 181.734470][T10065] netlink: 'syz.2.1057': attribute type 16 has an invalid length. [ 181.775645][T10065] netlink: 'syz.2.1057': attribute type 17 has an invalid length. [ 181.910381][T10063] bond2: Unable to set down delay as MII monitoring is disabled [ 181.929207][T10063] bond2 (unregistering): Released all slaves [ 182.012846][T10061] IPVS: set_ctl: invalid protocol: 0 172.20.20.187:20003 [ 182.087288][T10065] gretap0: left promiscuous mode [ 182.115141][T10065] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 182.336563][T10093] IPVS: set_ctl: invalid protocol: 11612 172.20.20.11:21 [ 182.349505][T10094] netlink: 'syz.3.1063': attribute type 11 has an invalid length. [ 182.525869][T10099] ipt_REJECT: ECHOREPLY no longer supported. [ 182.774490][T10118] wg1: entered promiscuous mode [ 182.782131][T10118] wg1: entered allmulticast mode [ 183.027015][T10131] syzkaller0: entered promiscuous mode [ 183.032541][T10131] syzkaller0: entered allmulticast mode [ 183.067215][T10135] nbd: illegal input index 2958377 [ 183.434969][T10149] netlink: 'syz.1.1081': attribute type 2 has an invalid length. [ 184.080598][T10178] netlink: 'syz.2.1091': attribute type 2 has an invalid length. [ 184.206278][T10180] 8021q: adding VLAN 0 to HW filter on device bond0 [ 184.215405][T10180] 8021q: adding VLAN 0 to HW filter on device team0 [ 184.225225][T10180] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 184.290427][T10190] macvlan0: entered promiscuous mode [ 184.470679][T10198] netlink: 'syz.1.1098': attribute type 12 has an invalid length. [ 184.542151][T10198] bond6: option primary_reselect: invalid value (255) [ 184.556851][T10198] bond6 (unregistering): Released all slaves [ 184.704781][T10214] netlink: 'syz.3.1100': attribute type 1 has an invalid length. [ 184.904703][T10214] bond4: entered promiscuous mode [ 184.936085][T10214] 8021q: adding VLAN 0 to HW filter on device bond4 [ 185.021560][T10232] netlink: 'syz.0.1105': attribute type 2 has an invalid length. [ 185.442576][T10260] __nla_validate_parse: 10 callbacks suppressed [ 185.442597][T10260] netlink: 71 bytes leftover after parsing attributes in process `syz.0.1114'. [ 185.493123][T10268] netlink: 'syz.2.1116': attribute type 20 has an invalid length. [ 185.513323][T10268] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1116'. [ 185.642485][T10273] dvmrp0: entered allmulticast mode [ 185.674703][T10273] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1119'. [ 185.724965][T10275] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1120'. [ 185.737577][T10277] 8021q: VLANs not supported on ip_vti0 [ 185.752692][T10277] netlink: 'syz.0.1121': attribute type 1 has an invalid length. [ 185.835229][T10280] bond0: (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 185.867107][T10280] bond0: (slave ipvlan3): The slave device specified does not support setting the MAC address [ 185.879660][T10280] bond0: (slave ipvlan3): Setting fail_over_mac to active for active-backup mode [ 185.944924][T10277] sch_tbf: peakrate 5 is lower than or equals to rate 16783679728848008391 ! [ 186.400843][T10312] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1128'. [ 186.829086][T10336] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 186.956175][T10349] ip6gretap0: entered allmulticast mode [ 187.129778][T10366] openvswitch: netlink: VXLAN extension 51 out of range max 1 [ 187.183555][T10368] validate_nla: 1 callbacks suppressed [ 187.183576][T10368] netlink: 'syz.4.1147': attribute type 58 has an invalid length. [ 187.236660][T10368] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1147'. [ 187.295896][T10374] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1151'. [ 187.309486][T10374] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1151'. [ 187.557331][T10388] netlink: 'syz.2.1157': attribute type 13 has an invalid length. [ 187.595703][T10388] macvtap0: entered allmulticast mode [ 187.628123][T10388] macvtap0: refused to change device tx_queue_len [ 187.694352][T10399] netlink: 'syz.1.1160': attribute type 83 has an invalid length. [ 187.781573][T10403] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1161'. [ 187.943974][T10417] x_tables: duplicate entry at hook 3 [ 188.224346][T10434] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1169'. [ 188.235644][T10430] veth1_macvtap: left promiscuous mode [ 188.246014][T10430] macsec0: entered promiscuous mode [ 188.263987][T10430] macsec0: entered allmulticast mode [ 188.293331][T10438] veth1_macvtap: entered promiscuous mode [ 188.302181][T10438] veth1_macvtap: entered allmulticast mode [ 188.323025][T10438] macsec0: left promiscuous mode [ 188.335086][T10438] macsec0: left allmulticast mode [ 188.350021][T10438] veth1_macvtap: left allmulticast mode [ 188.477269][T10448] netlink: 'syz.0.1174': attribute type 1 has an invalid length. [ 188.485180][T10448] netlink: 'syz.0.1174': attribute type 1 has an invalid length. [ 188.498766][T10448] netlink: 'syz.0.1174': attribute type 2 has an invalid length. [ 188.978975][T10465] bond6: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 189.038801][T10465] bond6: (slave lo): Enslaving as a backup interface with an up link [ 189.049527][T10465] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 189.116351][T10475] netlink: 'syz.4.1182': attribute type 1 has an invalid length. [ 189.230836][T10475] 8021q: adding VLAN 0 to HW filter on device bond2 [ 189.372542][T10490] tipc: Enabled bearer , priority 0 [ 189.399431][T10490] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode [ 189.407830][T10490] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode [ 189.416859][T10492] netlink: 'syz.4.1186': attribute type 1 has an invalid length. [ 189.438286][T10492] netlink: 'syz.4.1186': attribute type 2 has an invalid length. [ 189.716901][T10503] syzkaller0: entered allmulticast mode [ 189.774366][T10508] netlink: 'syz.3.1192': attribute type 28 has an invalid length. [ 190.823138][T10573] __nla_validate_parse: 11 callbacks suppressed [ 190.823159][T10573] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1210'. [ 191.171356][T10598] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1217'. [ 191.612400][T10625] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1223'. [ 192.111042][T10652] IPVS: set_ctl: invalid protocol: 41 255.255.255.255:20003 [ 192.451620][T10672] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1239'. [ 192.488325][T10677] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1238'. [ 192.498199][T10676] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1239'. [ 192.508247][T10677] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1238'. [ 192.524429][T10672] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1239'. [ 192.723443][T10685] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1242'. [ 192.862656][T10695] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 192.939160][T10701] netlink: 212328 bytes leftover after parsing attributes in process `syz.1.1249'. [ 192.941811][T10697] bond5: option arp_all_targets: invalid value (18446744073709551613) [ 192.960735][T10697] bond5 (unregistering): Released all slaves [ 192.967504][T10701] netlink: Conntrack attr has 4 unknown bytes [ 193.474496][T10736] xt_cgroup: path and classid specified [ 193.615721][T10748] validate_nla: 6 callbacks suppressed [ 193.615740][T10748] netlink: 'syz.0.1261': attribute type 1 has an invalid length. [ 193.732711][T10748] 8021q: adding VLAN 0 to HW filter on device bond4 [ 193.796672][T10755] 8021q: adding VLAN 0 to HW filter on device bond4 [ 193.818636][T10755] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address [ 193.849540][T10755] bond4: (slave vxcan3): Error -95 calling set_mac_address [ 193.905411][T10754] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 193.922534][T10748] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 193.936880][T10748] bond4: (slave wlan0): Opening slave failed [ 194.111314][T10773] netlink: 'syz.4.1269': attribute type 2 has an invalid length. [ 194.235096][T10782] netlink: 'syz.1.1272': attribute type 21 has an invalid length. [ 194.282407][T10782] netlink: 'syz.1.1272': attribute type 6 has an invalid length. [ 194.318854][T10784] block nbd0: not configured, cannot reconfigure [ 194.333778][T10786] syzkaller1: entered promiscuous mode [ 194.346926][T10786] syzkaller1: entered allmulticast mode [ 194.631627][T10803] netlink: 'syz.4.1281': attribute type 1 has an invalid length. [ 194.661346][T10803] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 194.818124][T10815] xt_CT: You must specify a L4 protocol and not use inversions on it [ 194.868863][T10815] netlink: 'syz.0.1284': attribute type 2 has an invalid length. [ 195.273393][T10839] netlink: 'syz.2.1290': attribute type 16 has an invalid length. [ 196.333560][T10880] __nla_validate_parse: 9 callbacks suppressed [ 196.333579][T10880] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1303'. [ 196.372252][T10881] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1303'. [ 196.749376][T10897] ipvlan2: entered allmulticast mode [ 196.754750][T10897] batadv_slave_1: entered allmulticast mode [ 197.102528][T10911] atomic_op ffff88807be61998 conn xmit_atomic 0000000000000000 [ 197.295000][T10923] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1316'. [ 197.324168][T10923] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1316'. [ 197.427956][T10919] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1315'. [ 198.803308][T10928] tipc: Enabling of bearer rejected, already enabled [ 198.833198][T10942] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 198.839707][T10942] syzkaller1: Linktype set failed because interface is up [ 199.146716][T10950] tipc: Enabling of bearer rejected, already enabled [ 199.225200][T10950] tipc: Resetting bearer [ 199.324450][T10967] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1332'. [ 199.361095][T10968] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1330'. [ 199.424624][T10972] netlink: 'syz.3.1334': attribute type 33 has an invalid length. [ 199.432754][T10972] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1334'. [ 199.491044][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.808266][T10992] netdevsim netdevsim1 netdevsim0: IPsec offload requires 128 bit authentication [ 200.041969][T11007] netlink: 256 bytes leftover after parsing attributes in process `syz.3.1345'. [ 200.076733][T10969] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1331'. [ 200.319369][T11025] netlink: 'syz.0.1350': attribute type 13 has an invalid length. [ 200.371574][T11027] pim6reg1: entered promiscuous mode [ 200.385534][T11027] pim6reg1: entered allmulticast mode [ 201.431961][T11105] __nla_validate_parse: 9 callbacks suppressed [ 201.431981][T11105] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1373'. [ 201.484543][T11111] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1373'. [ 201.502347][T11109] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1374'. [ 201.529596][T11110] netlink: 'syz.3.1375': attribute type 83 has an invalid length. [ 201.634036][T11115] openvswitch: netlink: Missing key (keys=40, expected=100) [ 201.659946][T11117] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1378'. [ 201.719105][T11120] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1379'. [ 201.736724][T11120] IPVS: set_ctl: invalid protocol: 29 255.255.255.255:20002 [ 202.008352][T11140] netlink: 'syz.2.1387': attribute type 1 has an invalid length. [ 202.029466][T11140] netlink: 228 bytes leftover after parsing attributes in process `syz.2.1387'. [ 202.159443][T11147] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1389'. [ 202.332208][T11157] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1392'. [ 202.385886][T11156] netlink: 'syz.4.1392': attribute type 1 has an invalid length. [ 202.421962][T11160] block nbd1: NBD_DISCONNECT [ 202.450253][T11169] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1395'. [ 202.486141][T11156] bond4: entered promiscuous mode [ 202.491889][T11156] 8021q: adding VLAN 0 to HW filter on device bond4 [ 202.547637][T11165] bond5: option lp_interval: invalid value (0) [ 202.553935][T11165] bond5: option lp_interval: allowed values 1 - 2147483647 [ 202.596891][T11165] bond5 (unregistering): Released all slaves [ 202.904403][T11196] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1400'. [ 203.465520][ T6295] IPVS: starting estimator thread 0... [ 203.498891][T11234] netlink: 'syz.0.1407': attribute type 2 has an invalid length. [ 203.585583][T11236] IPVS: using max 25 ests per chain, 60000 per kthread [ 203.733452][T11252] chnl_net:caif_netlink_parms(): no params data found [ 203.868532][T11261] netlink: 'syz.4.1413': attribute type 4 has an invalid length. [ 203.895091][T11261] `: renamed from bond0 (while UP) [ 205.143591][T11319] netlink: 'syz.2.1426': attribute type 4 has an invalid length. [ 205.156393][T11320] tipc: MTU too low for tipc bearer [ 205.229279][T11325] raw_sendmsg: syz.0.1427 forgot to set AF_INET. Fix it! [ 205.389428][T11341] ieee802154 phy0 wpan0: encryption failed: -22 [ 205.402148][T11341] netlink: 'syz.4.1432': attribute type 1 has an invalid length. [ 205.469866][T11344] bridge0: entered allmulticast mode [ 205.509614][T11346] bond0: (slave ip6gretap1): making interface the new active one [ 205.539333][T11346] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 205.548284][T11346] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 205.556425][T11346] bond0: (slave ip6gretap1): Enslaving as an active interface with an up link [ 205.569512][T11349] bridge: RTM_NEWNEIGH with invalid state 0x8 [ 205.708545][T11354] ipvlan3: entered allmulticast mode [ 205.715353][T11354] batman_adv: batadv0: Adding interface: ipvlan3 [ 205.722721][T11354] batman_adv: batadv0: The MTU of interface ipvlan3 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 205.759219][T11354] batman_adv: batadv0: Interface activated: ipvlan3 [ 205.927820][T11365] pim6reg1: entered promiscuous mode [ 205.934130][T11365] pim6reg1: entered allmulticast mode [ 206.117884][T11382] IPVS: sync thread started: state = BACKUP, mcast_ifn = vlan0, syncid = 3, id = 0 [ 206.448782][T11402] __nla_validate_parse: 12 callbacks suppressed [ 206.448803][T11402] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1453'. [ 206.742569][T11417] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1460'. [ 206.770455][T11418] netlink: 9 bytes leftover after parsing attributes in process `syz.2.1459'. [ 206.796051][T11420] netlink: 'syz.1.1460': attribute type 39 has an invalid length. [ 206.826697][T11421] netlink: 'syz.2.1459': attribute type 6 has an invalid length. [ 206.950236][T11427] bridge2: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 207.073243][T11433] netlink: 'syz.4.1463': attribute type 11 has an invalid length. [ 207.082230][T11433] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1463'. [ 207.273432][T11448] tunl0: entered promiscuous mode [ 207.286877][T11450] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1467'. [ 207.297713][T11448] netlink: 'syz.1.1468': attribute type 3 has an invalid length. [ 207.306246][T11448] netlink: 9 bytes leftover after parsing attributes in process `syz.1.1468'. [ 207.348160][T11450] bond0: entered promiscuous mode [ 207.375608][T11450] ip6gretap1: entered promiscuous mode [ 207.391552][T11450] bond0: left promiscuous mode [ 207.402720][T11450] ip6gretap1: left promiscuous mode [ 207.783273][T11477] IPv6: NLM_F_CREATE should be specified when creating new route [ 207.876852][T11486] sctp: [Deprecated]: syz.1.1480 (pid 11486) Use of int in maxseg socket option. [ 207.876852][T11486] Use struct sctp_assoc_value instead [ 207.931592][T11491] ieee802154 phy0 wpan0: encryption failed: -22 [ 207.965185][T11492] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1481'. [ 208.002751][T11492] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1481'. [ 208.036458][T11492] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1481'. [ 208.066914][T11492] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1481'. [ 208.533524][T11510] bond5: option arp_interval: mode dependency failed, not supported in mode balance-alb(6) [ 208.572442][T11510] bond5 (unregistering): Released all slaves [ 208.601241][T11525] netlink: 'syz.2.1489': attribute type 1 has an invalid length. [ 208.979976][T11536] : entered promiscuous mode [ 209.214724][T11557] netlink: 'syz.0.1499': attribute type 4 has an invalid length. [ 209.248443][T11560] netlink: 'syz.2.1501': attribute type 3 has an invalid length. [ 209.418027][T11571] syzkaller0: entered promiscuous mode [ 209.423561][T11571] syzkaller0: entered allmulticast mode [ 209.442628][T11571] tipc: Enabled bearer , priority 0 [ 209.473121][T11571] tipc: Resetting bearer [ 209.524085][T11571] tipc: Disabling bearer [ 210.265743][T11614] 8021q: adding VLAN 0 to HW filter on device bond5 [ 210.288066][T11616] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 210.355113][T11614] vlan3: entered allmulticast mode [ 210.370179][T11614] bond5: entered allmulticast mode [ 210.615293][T11632] netlink: 'syz.4.1520': attribute type 1 has an invalid length. [ 210.750528][T11638] gre0: entered promiscuous mode [ 210.756009][T11638] gre0: entered allmulticast mode [ 210.931204][T11645] netlink: 'syz.1.1527': attribute type 2 has an invalid length. [ 210.991646][T11650] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 211.017982][ T6288] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 211.320367][T11671] ipt_ECN: cannot use operation on non-tcp rule [ 211.559950][T11678] bond5: Removing last ns target with arp_interval on [ 211.602632][T11691] sctp: [Deprecated]: syz.4.1540 (pid 11691) Use of int in max_burst socket option. [ 211.602632][T11691] Use struct sctp_assoc_value instead [ 211.862043][T11703] IPVS: set_ctl: invalid protocol: 41 127.0.0.1:20001 [ 211.976643][ T6288] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 213.133510][T11736] __nla_validate_parse: 49 callbacks suppressed [ 213.133530][T11736] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1552'. [ 213.486557][T11743] veth0: entered promiscuous mode [ 213.528113][T11743] veth0: left promiscuous mode [ 213.568173][T11752] netlink: 'syz.1.1555': attribute type 21 has an invalid length. [ 213.591051][T11752] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1555'. [ 213.629459][T11752] netlink: 'syz.1.1555': attribute type 5 has an invalid length. [ 213.675597][T11752] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1555'. [ 214.055698][T11781] mac80211_hwsim hwsim5 syzkaller0: left promiscuous mode [ 214.071576][T11781] mac80211_hwsim hwsim5 syzkaller0: left allmulticast mode [ 214.671266][T11821] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1573'. [ 214.706198][T11821] netlink: 4908 bytes leftover after parsing attributes in process `syz.2.1573'. [ 214.781130][T11828] netlink: 'syz.0.1575': attribute type 23 has an invalid length. [ 214.933421][T11838] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1578'. [ 215.071952][T11844] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1580'. [ 215.084849][T11841] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1579'. [ 215.116897][T11841] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1579'. [ 215.237592][T11849] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1582'. [ 215.980267][T11896] tc_dump_action: action bad kind [ 216.050134][T11895] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 216.181986][T11908] !: renamed from dummy0 (while UP) [ 216.791446][T11945] v: renamed from veth0_vlan [ 216.956452][T11962] netlink: 'syz.1.1618': attribute type 16 has an invalid length. [ 217.210770][T11972] mac80211_hwsim hwsim5 ÿ: renamed from wlan1 [ 217.251596][T11972] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 217.936887][T12006] ip6gre3: entered allmulticast mode [ 218.299349][T12031] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 218.453316][T12043] __nla_validate_parse: 9 callbacks suppressed [ 218.453336][T12043] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1645'. [ 218.472527][T12045] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1645'. [ 218.491090][T12046] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1644'. [ 218.551930][T12048] xt_CT: You must specify a L4 protocol and not use inversions on it [ 218.619516][T12053] netlink: 'syz.3.1647': attribute type 1 has an invalid length. [ 218.663238][T12058] netlink: 312 bytes leftover after parsing attributes in process `syz.1.1649'. [ 218.691739][T12053] ip6tnl2: entered promiscuous mode [ 218.697909][T12053] ip6tnl2: entered allmulticast mode [ 218.799905][T12066] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1652'. [ 218.815661][T12066] ksmbd: Unknown IPC event: 3, ignore. [ 219.065759][T12091] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1654'. [ 219.162265][T12081] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1654'. [ 219.194389][T12081] sock: sock_set_timeout: `syz.0.1654' (pid 12081) tries to set negative timeout [ 219.388266][T12108] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1663'. [ 219.529856][T12108] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1663'. [ 219.579579][T12108] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1663'. [ 219.600680][T12117] macsec2: entered promiscuous mode [ 219.708341][T12121] netlink: 'syz.0.1669': attribute type 4 has an invalid length. [ 219.851794][ T5200] udevd[5200]: worker [11833] terminated by signal 33 (Unknown signal 33) [ 220.275192][T12162] block nbd0: Unsupported socket: should be TCP or UNIX. [ 220.539762][T12177] chnl_net:caif_netlink_parms(): no params data found [ 220.560536][T12182] x_tables: ip6_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT/POSTROUTING [ 220.600261][ T2901] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 220.649413][ T2901] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 220.658380][ T2901] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 220.695886][ T2901] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 220.921497][T12204] netlink: 'syz.1.1698': attribute type 21 has an invalid length. [ 220.935777][T12204] IPv6: NLM_F_CREATE should be specified when creating new route [ 220.970053][T12204] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 220.977420][T12204] IPv6: NLM_F_CREATE should be set when creating new route [ 220.984702][T12204] IPv6: NLM_F_CREATE should be set when creating new route [ 220.992002][T12204] IPv6: NLM_F_CREATE should be set when creating new route [ 221.020513][T12212] ieee802154 phy0 wpan0: encryption failed: -22 [ 221.504582][T12247] x_tables: duplicate underflow at hook 1 [ 221.514816][T12249] sock: sock_set_timeout: `syz.1.1712' (pid 12249) tries to set negative timeout [ 221.833761][T12270] dvmrp6: entered allmulticast mode [ 221.885662][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 222.102046][T12286] bond6: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-xor(2) [ 222.120042][T12286] bond6 (unregistering): Released all slaves [ 222.314828][T12306] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 222.490002][ T795] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 222.511468][T12319] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 222.537746][ T795] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 222.547944][T12321] sctp: [Deprecated]: syz.1.1735 (pid 12321) Use of int in max_burst socket option. [ 222.547944][T12321] Use struct sctp_assoc_value instead [ 222.596451][T12327] netlink: 'syz.4.1736': attribute type 11 has an invalid length. [ 222.677802][T12327] bond5: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 222.695277][T12327] bond5 (unregistering): Released all slaves [ 222.982420][T12346] pimreg22: entered allmulticast mode [ 251.243993][T12357] openvswitch: netlink: Flow actions attr not present in new flow. [ 251.255049][T12359] __nla_validate_parse: 21 callbacks suppressed [ 251.255069][T12359] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1745'. [ 251.272194][T12360] netlink: 'syz.4.1747': attribute type 33 has an invalid length. [ 251.280300][T12357] netlink: 'syz.3.1746': attribute type 4 has an invalid length. [ 251.289357][T12357] netlink: 284 bytes leftover after parsing attributes in process `syz.3.1746'. [ 251.319705][T12359] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1745'. [ 251.456031][T12367] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1750'. [ 251.496224][T12370] netlink: 'syz.0.1752': attribute type 1 has an invalid length. [ 251.507923][T12364] netlink: 88 bytes leftover after parsing attributes in process `syz.4.1749'. [ 252.330915][T12387] netlink: 11 bytes leftover after parsing attributes in process `syz.2.1754'. [ 252.524193][T12399] dvmrp0: entered allmulticast mode [ 252.596567][T12404] tipc: Enabling of bearer rejected, failed to enable media [ 252.600465][T12406] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1758'. [ 252.615059][T12406] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1758'. [ 253.089572][T12434] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1766'. [ 253.156336][T12437] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1766'. [ 253.818132][T12469] IPVS: set_ctl: invalid protocol: 50 224.0.0.1:20003 [ 254.052309][T12478] gre0: left promiscuous mode [ 254.077177][T12489] x_tables: unsorted underflow at hook 2 [ 254.119992][T12486] netlink: 'syz.3.1777': attribute type 58 has an invalid length. [ 254.523535][T12478] wg1: left promiscuous mode [ 254.567295][T12478] macvlan0: left promiscuous mode [ 254.766121][T12478] ip6erspan0: left promiscuous mode [ 254.835119][T12478] bond4: left promiscuous mode [ 254.909729][ T2946] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.947083][ T2946] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.982005][ T2946] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.042592][T12520] netlink: 'syz.0.1788': attribute type 4 has an invalid length. [ 255.050792][ T2946] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.236497][T12533] IPVS: set_ctl: invalid protocol: 2 172.20.20.187:20004 [ 255.280166][T12527] bond5: (slave lo): Device is not bonding slave [ 255.286953][T12527] bond5: option active_slave: invalid value (lo) [ 255.375299][T12527] bond5 (unregistering): Released all slaves [ 255.534308][T12548] netlink: 'syz.4.1799': attribute type 6 has an invalid length. [ 255.939178][T12578] bridge_slave_1: entered allmulticast mode [ 256.110876][T12593] xt_hashlimit: size too large, truncated to 1048576 [ 256.122614][T12598] netlink: 'syz.1.1811': attribute type 29 has an invalid length. [ 256.421819][T12613] __nla_validate_parse: 13 callbacks suppressed [ 256.421839][T12613] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1814'. [ 256.439164][T12612] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1815'. [ 256.475622][T12612] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1815'. [ 256.488739][T12613] xt_hashlimit: invalid rate [ 256.553977][T12618] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1817'. [ 256.852945][T12640] netlink: 'syz.3.1823': attribute type 9 has an invalid length. [ 256.886049][T12636] nbd0: detected capacity change from 0 to 127 [ 256.901062][ T5150] block nbd0: Receive control failed (result -32) [ 256.947228][T12644] block nbd0: Dead connection, failed to find a fallback [ 256.955788][T12644] block nbd0: shutting down sockets [ 256.962381][T12644] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 256.973914][T12644] Buffer I/O error on dev nbd0, logical block 0, async page read [ 256.982030][T12644] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 256.992350][T12644] Buffer I/O error on dev nbd0, logical block 1, async page read [ 257.000667][T12644] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 257.001176][T12645] xt_CT: You must specify a L4 protocol and not use inversions on it [ 257.016003][T12644] Buffer I/O error on dev nbd0, logical block 2, async page read [ 257.029257][T12647] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.1822'. [ 257.039691][T12644] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 257.050777][T12644] Buffer I/O error on dev nbd0, logical block 3, async page read [ 257.060848][T12644] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 257.071491][T12644] Buffer I/O error on dev nbd0, logical block 0, async page read [ 257.080736][T12645] netlink: 'syz.3.1824': attribute type 2 has an invalid length. [ 257.095879][T12644] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 257.108751][T12644] Buffer I/O error on dev nbd0, logical block 1, async page read [ 257.118941][T12644] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 257.129135][T12644] Buffer I/O error on dev nbd0, logical block 2, async page read [ 257.138000][T12644] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 257.153731][T12644] Buffer I/O error on dev nbd0, logical block 3, async page read [ 257.162463][T12644] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 257.172877][T12644] Buffer I/O error on dev nbd0, logical block 0, async page read [ 257.181935][T12644] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 257.192211][T12644] Buffer I/O error on dev nbd0, logical block 1, async page read [ 257.209823][ T5922] IPVS: starting estimator thread 0... [ 257.240208][T12644] ldm_validate_partition_table(): Disk read failed. [ 257.259113][T12644] Dev nbd0: unable to read RDB block 0 [ 257.276042][T12644] nbd0: unable to read partition table [ 257.303787][T12644] ldm_validate_partition_table(): Disk read failed. [ 257.305986][T12654] IPVS: using max 26 ests per chain, 62400 per kthread [ 257.322019][T12644] Dev nbd0: unable to read RDB block 0 [ 257.347072][T12644] nbd0: unable to read partition table [ 257.380305][T12658] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1827'. [ 257.489153][ T30] audit: type=1107 audit(1768173591.171:4): pid=12663 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='Ù‹5ž÷Œ•%èÍUýAÊÃËÙ ë0ä™l…t¿Ý•/Öÿ Ž6òŠ¨Šç›' [ 257.510492][T12666] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1829'. [ 257.607828][T12671] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1832'. [ 257.652801][T12673] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1833'. [ 257.682819][T12671] block nbd4: not configured, cannot reconfigure [ 257.693423][T12671] netlink: 2900 bytes leftover after parsing attributes in process `syz.4.1832'. [ 257.717337][T12671] openvswitch: netlink: Flow key attr not present in new flow. [ 257.985648][T12686] bridge0: port 1(batadv1) entered blocking state [ 257.992423][T12686] bridge0: port 1(batadv1) entered disabled state [ 258.006104][T12686] batadv1: entered allmulticast mode [ 258.018882][T12686] batadv1: entered promiscuous mode [ 258.273165][T12703] netlink: 'syz.2.1843': attribute type 5 has an invalid length. [ 258.475573][ T50] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 258.485365][ T50] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 258.509841][T12716] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 258.553008][T12718] netlink: 'syz.1.1847': attribute type 1 has an invalid length. [ 258.705734][T12732] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 258.804453][T12741] netlink: 'syz.4.1855': attribute type 16 has an invalid length. [ 258.857531][T12744] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap3 [ 258.870253][T12744] gretap3: default qdisc (pfifo_fast) fail, fallback to noqueue [ 258.879387][T12744] gretap3: entered promiscuous mode [ 258.884712][T12744] gretap3: entered allmulticast mode [ 259.725689][ T9509] IPVS: ip_vs_send_async error -101 [ 260.929313][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 286.525853][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 292.957506][T12763] syzkaller0: entered allmulticast mode [ 293.008277][T12763] __nla_validate_parse: 8 callbacks suppressed [ 293.008297][T12763] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1865'. [ 293.479335][T12808] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1872'. [ 293.770659][T12823] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode [ 293.802786][T12823] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode [ 294.169688][T12851] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1885'. [ 294.198912][T12854] netlink: 'syz.2.1888': attribute type 1 has an invalid length. [ 294.244943][T12854] 8021q: adding VLAN 0 to HW filter on device bond6 [ 294.253591][T12856] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1887'. [ 294.297177][T12854] bond6: (slave gretap2): making interface the new active one [ 294.309408][T12854] bond6: (slave gretap2): Enslaving as an active interface with an up link [ 294.551716][T12868] netlink: 'syz.3.1893': attribute type 10 has an invalid length. [ 294.616195][T12868] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 295.067500][T12906] netlink: 480 bytes leftover after parsing attributes in process `syz.3.1905'. [ 295.096814][T12906] netlink: 1041 bytes leftover after parsing attributes in process `syz.3.1905'. [ 295.170230][T12906] xt_hashlimit: size too large, truncated to 1048576 [ 295.407451][T12924] netlink: 'syz.0.1911': attribute type 10 has an invalid length. [ 295.432485][T12924] 8021q: adding VLAN 0 to HW filter on device team0 [ 295.447091][T12924] `: (slave team0): Enslaving as an active interface with an up link [ 295.458504][T12925] netlink: 'syz.4.1913': attribute type 4 has an invalid length. [ 295.819890][T12947] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1919'. [ 296.008560][T12962] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1923'. [ 296.047712][T12965] netlink: 'syz.2.1922': attribute type 1 has an invalid length. [ 296.056092][T12962] netlink: 'syz.4.1923': attribute type 16 has an invalid length. [ 296.064047][T12962] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1923'. [ 296.107515][T12968] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1923'. [ 296.180220][T12961] bond7: (slave gretap3): making interface the new active one [ 296.234884][T12961] bond7: (slave gretap3): Enslaving as an active interface with an up link [ 296.284632][T12973] ipvlan3: entered allmulticast mode [ 296.336284][T12973] veth1: entered allmulticast mode [ 296.520076][T12988] netlink: 'syz.1.1932': attribute type 8 has an invalid length. [ 296.529525][T12985] sctp: [Deprecated]: syz.0.1929 (pid 12985) Use of int in max_burst socket option deprecated. [ 296.529525][T12985] Use struct sctp_assoc_value instead [ 296.568327][T12986] ip6t_rpfilter: unknown options [ 296.596531][T12988] netlink: 'syz.1.1932': attribute type 8 has an invalid length. [ 297.126802][T13036] SET target dimension over the limit! [ 297.466871][T13057] netlink: 'syz.1.1953': attribute type 1 has an invalid length. [ 297.518560][T13057] bond8: entered promiscuous mode [ 297.524178][T13057] 8021q: adding VLAN 0 to HW filter on device bond8 [ 297.561948][T13058] bond8: (slave bridge6): making interface the new active one [ 297.603129][T13058] bridge6: entered promiscuous mode [ 297.619933][T13058] bond8: (slave bridge6): Enslaving as an active interface with an up link [ 297.757904][T13082] netlink: 'syz.4.1958': attribute type 7 has an invalid length. [ 297.803849][T13076] syzkaller0: entered promiscuous mode [ 297.818271][T13076] syzkaller0: entered allmulticast mode [ 298.118945][T13103] __nla_validate_parse: 4 callbacks suppressed [ 298.118966][T13103] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1963'. [ 299.301241][T13082] gretap0: entered promiscuous mode [ 299.308859][T13082] batadv_slave_1: entered promiscuous mode [ 299.318217][T13082] batadv_slave_1: left promiscuous mode [ 299.325078][T13082] gretap0: left promiscuous mode [ 299.435180][T13116] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 299.458789][T13116] netlink: 1196 bytes leftover after parsing attributes in process `syz.4.1966'. [ 299.735353][T13125] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 299.880944][T13142] validate_nla: 1 callbacks suppressed [ 299.880965][T13142] netlink: 'syz.4.1976': attribute type 6 has an invalid length. [ 299.897317][T13140] bridge0: entered allmulticast mode [ 299.907979][T13142] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1976'. [ 299.918255][T13138] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1975'. [ 300.097149][T13150] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 300.240832][ T5150] block nbd2: Receive control failed (result -32) [ 300.346705][T13165] netlink: 'syz.0.1984': attribute type 1 has an invalid length. [ 300.368304][T13167] netlink: 182812 bytes leftover after parsing attributes in process `syz.4.1985'. [ 300.397152][T13167] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1985'. [ 300.432231][T13167] gtp0: entered promiscuous mode [ 300.438756][T13167] gtp0: entered allmulticast mode [ 300.660563][T13181] tipc: Enabled bearer , priority 0 [ 300.682640][T13182] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1988'. [ 300.694095][T13185] syzkaller0: entered promiscuous mode [ 300.716586][T13185] syzkaller0: entered allmulticast mode [ 300.734384][T13190] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1991'. [ 300.998479][T13185] tipc: Resetting bearer [ 301.034095][T13185] tipc: Disabling bearer [ 301.247052][T13215] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1995'. [ 301.289090][T13215] netlink: 232 bytes leftover after parsing attributes in process `syz.1.1995'. [ 301.402103][T13226] netlink: 'syz.3.1999': attribute type 12 has an invalid length. [ 301.410556][T13226] netlink: 'syz.3.1999': attribute type 11 has an invalid length. [ 301.752176][T13243] macvtap1: entered promiscuous mode [ 301.758096][T13243] macvtap1: entered allmulticast mode [ 301.763617][T13243] veth1_vlan: entered allmulticast mode [ 301.774913][T13243] netlink: 'syz.0.2005': attribute type 1 has an invalid length. [ 301.989605][T13260] tipc: MTU too low for tipc bearer [ 302.228783][T13274] IPVS: set_ctl: invalid protocol: 103 172.20.20.170:20003 [ 302.269139][T13274] netlink: 'syz.0.2015': attribute type 1 has an invalid length. [ 302.415105][T13287] netlink: ct family unspecified [ 303.023116][T13326] mac80211_hwsim hwsim5 syzkaller0: left promiscuous mode [ 303.031146][T13330] netlink: 'syz.4.2032': attribute type 10 has an invalid length. [ 303.097335][T13326] mac80211_hwsim hwsim5 syzkaller0: left allmulticast mode [ 303.473326][T13357] __nla_validate_parse: 10 callbacks suppressed [ 303.473349][T13357] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2039'. [ 303.599223][T13359] tipc: Enabled bearer , priority 0 [ 303.619095][T13359] tipc: Enabling of bearer rejected, already enabled [ 303.628773][T13362] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2041'. [ 303.666740][T13361] syzkaller0: entered promiscuous mode [ 303.672268][T13361] syzkaller0: entered allmulticast mode [ 303.686844][T13359] tipc: Enabling of bearer rejected, already enabled [ 303.723513][T13359] tipc: Enabling of bearer rejected, already enabled [ 303.904442][T13361] tipc: Resetting bearer [ 304.039291][T13361] tipc: Disabling bearer [ 304.273114][T13393] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2050'. [ 304.515727][T13409] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2056'. [ 304.525336][T13409] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2056'. [ 304.612960][T13414] netlink: 'syz.0.2058': attribute type 1 has an invalid length. [ 304.614966][T13416] netlink: 96 bytes leftover after parsing attributes in process `syz.3.2057'. [ 304.948165][T13430] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.2061'. [ 305.004435][T13426] veth5: entered allmulticast mode [ 305.418666][T13470] IPVS: set_ctl: invalid protocol: 33 172.20.20.170:6 [ 305.572269][T13474] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2071'. [ 305.683241][T13477] netlink: 96 bytes leftover after parsing attributes in process `syz.4.2072'. [ 305.876257][T13490] netlink: 'syz.0.2073': attribute type 1 has an invalid length. [ 305.897824][T13490] netlink: 'syz.0.2073': attribute type 1 has an invalid length. [ 306.031750][T13490] 8021q: adding VLAN 0 to HW filter on device bond6 [ 306.108233][T13500] bond6: (slave gretap5): making interface the new active one [ 306.118106][T13500] bond6: (slave gretap5): Enslaving as an active interface with an up link [ 306.142908][T13504] gtp0: entered promiscuous mode [ 306.148649][T13504] gtp0: entered allmulticast mode [ 306.355669][T13516] openvswitch: netlink: Key type 4099 is out of range max 32 [ 306.580904][T13524] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2087'. [ 306.931204][T13546] openvswitch: netlink: Multiple metadata blocks provided [ 307.819875][T13600] syzkaller0: entered promiscuous mode [ 307.825750][T13600] syzkaller0: entered allmulticast mode [ 309.187387][T13615] __nla_validate_parse: 1 callbacks suppressed [ 309.187409][T13615] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2113'. [ 309.343025][T13628] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2116'. [ 309.418120][T13633] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2118'. [ 309.506022][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 309.538213][T13646] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 309.712034][T13654] bond8: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 309.732065][T13654] bond8 (unregistering): Released all slaves [ 309.760177][T13655] tipc: Enabled bearer , priority 0 [ 309.805689][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 309.872738][T13660] syzkaller0: entered promiscuous mode [ 309.881023][T13660] syzkaller0: entered allmulticast mode [ 309.887649][T13660] tipc: Resetting bearer [ 309.895732][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 309.961447][T13641] tipc: Resetting bearer [ 311.339935][T13641] tipc: Disabling bearer [ 311.350295][T13667] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2125'. [ 311.384949][ T43] tipc: Node number set to 3989392378 [ 311.514647][T13686] netlink: 'syz.4.2131': attribute type 29 has an invalid length. [ 311.548922][T13686] netlink: 'syz.4.2131': attribute type 29 has an invalid length. [ 311.573998][T13686] netlink: 500 bytes leftover after parsing attributes in process `syz.4.2131'. [ 311.608855][T13698] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2132'. [ 311.662312][T13702] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2136'. [ 311.697596][T13697] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2135'. [ 311.863360][T13718] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2140'. [ 311.883161][T13719] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2140'. [ 312.017044][T13723] sctp: [Deprecated]: syz.2.2142 (pid 13723) Use of int in maxseg socket option. [ 312.017044][T13723] Use struct sctp_assoc_value instead [ 312.314394][T13749] nbd: must specify a size in bytes for the device [ 312.422340][T13752] tipc: Enabling of bearer rejected, failed to enable media [ 312.577173][T13761] nbd: must specify at least one socket [ 312.637045][T13768] netlink: 'syz.0.2157': attribute type 1 has an invalid length. [ 312.703593][T13768] 8021q: adding VLAN 0 to HW filter on device bond7 [ 312.750030][T13768] unsupported nla_type 33542 [ 312.922748][T13783] netlink: 'syz.1.2158': attribute type 4 has an invalid length. [ 313.289116][T13805] netlink: 'syz.4.2168': attribute type 1 has an invalid length. [ 313.335508][T13805] netlink: 'syz.4.2168': attribute type 1 has an invalid length. [ 313.431601][T13807] netlink: 'syz.4.2168': attribute type 1 has an invalid length. [ 313.436151][T13813] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 313.442904][T13807] netlink: 'syz.4.2168': attribute type 7 has an invalid length. [ 313.463528][T13807] netlink: 'syz.4.2168': attribute type 8 has an invalid length. [ 313.476595][T13807] netlink: 'syz.4.2168': attribute type 9 has an invalid length. [ 313.596729][T13816] syzkaller0: entered promiscuous mode [ 313.602429][T13816] syzkaller0: entered allmulticast mode [ 314.169048][T13834] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 314.654834][T13861] __nla_validate_parse: 7 callbacks suppressed [ 314.654854][T13861] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2185'. [ 314.747791][T13861] vlan2: entered allmulticast mode [ 314.753184][T13861] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode [ 314.812262][T13865] syzkaller0: entered promiscuous mode [ 314.818085][T13865] syzkaller0: entered allmulticast mode [ 314.898863][T13869] gretap0: refused to change device tx_queue_len [ 314.906052][T13869] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 314.924304][T13871] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2189'. [ 315.186620][T13885] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2193'. [ 315.248993][T13895] SET target dimension over the limit! [ 315.417425][T13908] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.2198'. [ 315.813831][T13930] netlink: 592 bytes leftover after parsing attributes in process `syz.0.2207'. [ 316.392076][T13936] infiniband !yz!: set down [ 316.403020][T13936] infiniband !yz!: added team_slave_0 [ 316.480680][T13953] bond0: Error: Cannot enslave bond to itself. [ 316.494076][T13936] RDS/IB: !yz!: added [ 316.498372][T13936] smc: adding ib device !yz! with port count 1 [ 316.505612][T13953] bond0: Error: Cannot enslave bond to itself. [ 316.511924][T13953] bond0: Error: Cannot enslave bond to itself. [ 316.525285][T13936] smc: ib device !yz! port 1 has no pnetid [ 316.588854][T13953] bond0: Error: Cannot enslave bond to itself. [ 316.645731][T13953] bond0: Error: Cannot enslave bond to itself. [ 316.660322][T13953] bond0: Error: Cannot enslave bond to itself. [ 316.674749][T13953] bond0: Error: Cannot enslave bond to itself. [ 316.688340][T13953] bond0: Error: Cannot enslave bond to itself. [ 316.703444][T13953] bond0: Error: Cannot enslave bond to itself. [ 316.721260][T13953] bond0: Error: Cannot enslave bond to itself. [ 316.739287][T13953] bond0: Error: Cannot enslave bond to itself. [ 316.761821][T13953] bond0: Error: Cannot enslave bond to itself. [ 316.778868][T13953] bond0: Error: Cannot enslave bond to itself. [ 316.793294][T13953] bond0: Error: Cannot enslave bond to itself. [ 316.826904][T13953] bond0: Error: Cannot enslave bond to itself. [ 316.845930][T13953] bond0: Error: Cannot enslave bond to itself. [ 316.852416][T13953] bond0: Error: Cannot enslave bond to itself. [ 316.865562][T13970] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2220'. [ 316.875081][T13953] bond0: Error: Cannot enslave bond to itself. [ 316.889855][T13964] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 316.941490][T13953] bond0: Error: Cannot enslave bond to itself. [ 316.948644][T13953] bond0: Error: Cannot enslave bond to itself. [ 316.960965][T13953] bond0: Error: Cannot enslave bond to itself. [ 316.973632][T13953] bond0: Error: Cannot enslave bond to itself. [ 316.985765][T13953] bond0: Error: Cannot enslave bond to itself. [ 316.997133][T13953] bond0: Error: Cannot enslave bond to itself. [ 317.009948][T13974] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 317.018661][T13953] bond0: Error: Cannot enslave bond to itself. [ 317.024993][T13953] bond0: Error: Cannot enslave bond to itself. [ 317.046237][T13964] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 317.075693][T13953] bond0: Error: Cannot enslave bond to itself. [ 317.082126][T13953] bond0: Error: Cannot enslave bond to itself. [ 317.093330][T13953] bond0: Error: Cannot enslave bond to itself. [ 317.111227][T13953] bond0: Error: Cannot enslave bond to itself. [ 317.124624][T13953] bond0: Error: Cannot enslave bond to itself. [ 317.141976][T13953] bond0: Error: Cannot enslave bond to itself. [ 317.163071][T13953] bond0: Error: Cannot enslave bond to itself. [ 317.197139][T13953] bond0: Error: Cannot enslave bond to itself. [ 317.221974][T13953] bond0: Error: Cannot enslave bond to itself. [ 317.733570][T14008] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2226'. [ 318.888626][T14061] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2241'. [ 318.897818][T14061] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2241'. [ 318.942271][ T34] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 318.962601][ T34] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 318.992865][ T34] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 319.011954][T14063] netlink: 14560 bytes leftover after parsing attributes in process `syz.1.2242'. [ 319.061917][ T34] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 319.802329][T14099] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2251'. [ 319.813321][T14099] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2251'. [ 319.988521][T14107] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2254'. [ 320.320812][T14120] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2257'. [ 320.340313][T14120] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2257'. [ 320.358369][T14120] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2257'. [ 320.409424][T14121] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2257'. [ 320.452391][T14121] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2257'. [ 320.481844][T14121] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2257'. [ 320.495995][T14130] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2260'. [ 320.610523][T14135] erspan0: left allmulticast mode [ 320.809215][T14135] bond10: invalid ARP target 0.0.0.0 specified for addition [ 320.825758][T14135] bond10: option arp_ip_target: invalid value (0) [ 320.847454][T14135] bond10 (unregistering): Released all slaves [ 321.468938][T14178] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 321.495785][T14180] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 321.540619][T14184] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 321.547969][T14184] IPv6: NLM_F_CREATE should be set when creating new route [ 321.555298][T14184] IPv6: NLM_F_CREATE should be set when creating new route [ 321.562618][T14184] IPv6: NLM_F_CREATE should be set when creating new route [ 322.382028][T14232] bond8: option lp_interval: invalid value (0) [ 322.401787][T14232] bond8: option lp_interval: allowed values 1 - 2147483647 [ 322.413214][T14232] bond8 (unregistering): Released all slaves [ 323.289378][T14304] validate_nla: 9 callbacks suppressed [ 323.289397][T14304] netlink: 'syz.4.2305': attribute type 4 has an invalid length. [ 323.317212][T14303] xt_l2tp: invalid flags combination: 8 [ 323.425887][T14307] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 323.567104][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 323.585789][T14313] netlink: 'syz.0.2308': attribute type 16 has an invalid length. [ 323.797672][T14319] bond6: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 323.819741][T14319] bond6 (unregistering): Released all slaves [ 324.166016][T14340] syzkaller0: entered promiscuous mode [ 324.181831][T14340] syzkaller0: entered allmulticast mode [ 324.279176][T14352] netlink: 'syz.3.2320': attribute type 1 has an invalid length. [ 325.827599][T14365] netdevsim netdevsim4 netdevsim0: IPsec offload requires 128 bit authentication [ 325.892786][T14373] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode [ 325.909696][T14373] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode [ 326.056461][T14384] netlink: 'syz.2.2330': attribute type 6 has an invalid length. [ 326.064833][T14385] __nla_validate_parse: 11 callbacks suppressed [ 326.064855][T14385] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2329'. [ 326.160078][T14392] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2333'. [ 326.377988][T14403] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2336'. [ 326.427836][T14407] xt_TCPMSS: Only works on TCP SYN packets [ 326.533826][T14414] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2337'. [ 326.578693][T14415] netlink: 'syz.3.2340': attribute type 1 has an invalid length. [ 326.622981][T14415] netlink: 228 bytes leftover after parsing attributes in process `syz.3.2340'. [ 326.754002][T14424] netlink: 'syz.1.2344': attribute type 10 has an invalid length. [ 326.767803][T14424] bridge_slave_1: entered promiscuous mode [ 326.774136][T14424] bridge_slave_1: entered allmulticast mode [ 326.796460][T14424] `: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 326.834453][T14428] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 326.866088][T14432] netlink: 'syz.4.2346': attribute type 3 has an invalid length. [ 326.909817][T14428] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 326.945436][T14428] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 326.960201][T14438] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 327.280699][T14461] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2353'. [ 327.322303][T14465] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2355'. [ 327.413371][T14469] netlink: 'syz.4.2356': attribute type 33 has an invalid length. [ 327.498243][T14474] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2357'. [ 327.673323][T14484] Bluetooth: MGMT ver 1.23 [ 327.890710][T14498] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2365'. [ 327.917593][T14502] netlink: 'syz.4.2366': attribute type 7 has an invalid length. [ 327.926228][T14500] netlink: 'syz.4.2366': attribute type 7 has an invalid length. [ 327.999059][T14498] macvlan0: left promiscuous mode [ 328.090503][T14512] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2367'. [ 328.558928][T14535] validate_nla: 6 callbacks suppressed [ 328.558950][T14535] netlink: 'syz.1.2372': attribute type 2 has an invalid length. [ 328.795890][T14544] netlink: 'syz.4.2375': attribute type 6 has an invalid length. [ 328.821621][T14546] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 328.872530][T14547] netlink: 'syz.4.2375': attribute type 6 has an invalid length. [ 329.399964][T14567] syzkaller0: entered promiscuous mode [ 329.410660][T14567] syzkaller0: entered allmulticast mode [ 353.095893][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 355.641437][T14583] __nla_validate_parse: 6 callbacks suppressed [ 355.641458][T14583] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2385'. [ 355.839993][T14597] xt_CONNSECMARK: invalid mode: 0 [ 355.918328][T14604] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 355.928569][T14591] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2390'. [ 355.951125][T14591] netlink: 'syz.1.2390': attribute type 7 has an invalid length. [ 355.966071][T14591] netlink: 'syz.1.2390': attribute type 8 has an invalid length. [ 355.974306][T14591] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2390'. [ 355.986469][T14606] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 356.157190][T14618] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2397'. [ 356.761254][T14651] bridge0: entered promiscuous mode [ 356.774383][T14651] bridge0: entered allmulticast mode [ 356.783053][T14651] team0: Port device bridge0 added [ 356.797078][T14651] bridge0: port 1(team0) entered blocking state [ 356.803837][T14651] bridge0: port 1(team0) entered disabled state [ 356.824152][T14651] team0: entered allmulticast mode [ 356.831310][T14651] batadv1: entered allmulticast mode [ 356.849577][T14651] team0: left allmulticast mode [ 356.862570][T14651] batadv1: left allmulticast mode [ 356.949321][T14662] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2408'. [ 356.992590][T14663] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2408'. [ 357.034631][T14664] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2408'. [ 357.306528][T14681] vlan3: entered promiscuous mode [ 357.326643][T14681] syz_tun: entered promiscuous mode [ 357.507282][T14699] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2417'. [ 357.880406][T14714] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2421'. [ 357.946250][T14714] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2421'. [ 358.416648][T14741] netlink: 'syz.2.2426': attribute type 12 has an invalid length. [ 358.728616][T14749] nbd: illegal input index -8454144 [ 359.009706][T14767] bridge4: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 359.225768][T14788] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) ! [ 359.258540][T14785] syzkaller1: entered promiscuous mode [ 359.275456][T14785] syzkaller1: entered allmulticast mode [ 359.514732][T14796] 8021q: adding VLAN 0 to HW filter on device bond8 [ 359.612137][T14796] vlan4: entered allmulticast mode [ 359.636476][T14796] bond8: entered allmulticast mode [ 360.170277][T14824] syzkaller0: entered promiscuous mode [ 360.179512][T14824] syzkaller0: entered allmulticast mode [ 360.233752][T14824] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 360.258673][T14824] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 360.390798][T14828] tc_dump_action: action bad kind [ 360.576699][T14833] bridge0: entered allmulticast mode [ 360.835268][T14850] __nla_validate_parse: 38 callbacks suppressed [ 360.835290][T14850] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2455'. [ 361.397960][T14878] --map-set only usable from mangle table [ 361.707378][T14890] netlink: 'syz.4.2469': attribute type 18 has an invalid length. [ 361.777583][T14895] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 361.936409][T14900] IPVS: length: 138 != 24 [ 362.140604][T14911] netlink: 'syz.4.2476': attribute type 1 has an invalid length. [ 362.291149][T14911] 8021q: adding VLAN 0 to HW filter on device bond6 [ 362.366011][T14929] netlink: 'syz.1.2480': attribute type 39 has an invalid length. [ 362.380926][T14919] bond6: (slave veth9): Enslaving as an active interface with a down link [ 362.417085][T14922] bond6: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 362.436747][T14924] macvtap1: entered allmulticast mode [ 362.442209][T14924] veth0_macvtap: entered allmulticast mode [ 362.700447][T14941] tipc: Enabled bearer , priority 0 [ 362.729180][T14941] syzkaller0: entered promiscuous mode [ 362.742670][T14941] syzkaller0: entered allmulticast mode [ 362.757379][T14938] tipc: Resetting bearer [ 362.825010][T14938] tipc: Disabling bearer [ 362.833823][T14954] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2487'. [ 363.023692][T14964] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2489'. [ 363.044043][T14964] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2489'. [ 363.255942][T14975] netlink: 'syz.1.2491': attribute type 83 has an invalid length. [ 363.269301][T14975] netlink: 'syz.1.2491': attribute type 11 has an invalid length. [ 363.296678][T14975] netlink: 'syz.1.2491': attribute type 11 has an invalid length. [ 363.330635][T14975] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2491'. [ 363.390581][T14980] bond7: option arp_all_targets: invalid value (18446744073709551613) [ 363.414509][T14980] bond7 (unregistering): Released all slaves [ 363.541720][T14984] tipc: Enabled bearer , priority 0 [ 363.554924][T14984] syzkaller0: entered promiscuous mode [ 363.561092][T14984] syzkaller0: entered allmulticast mode [ 363.601016][T14984] tipc: Resetting bearer [ 363.627005][T14983] tipc: Resetting bearer [ 363.678780][T14983] tipc: Disabling bearer [ 363.902823][T15010] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2504'. [ 364.034826][T15015] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2505'. [ 364.262653][T15025] batadv_slave_1: entered promiscuous mode [ 364.317554][T15022] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2508'. [ 364.506612][T15038] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0 [ 364.547270][T15042] x_tables: ip6_tables: eui64 match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT/FORWARD [ 364.598497][T15050] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 364.638196][T15023] batadv_slave_1: left promiscuous mode [ 364.711585][T15053] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2514'. [ 364.743877][T15056] ipip0: entered promiscuous mode [ 364.760284][T15056] ipip0: entered allmulticast mode [ 364.821592][T15060] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2516'. [ 365.899638][T15115] netlink: 'syz.1.2531': attribute type 1 has an invalid length. [ 365.921456][T15115] __nla_validate_parse: 3 callbacks suppressed [ 365.921477][T15115] netlink: 476 bytes leftover after parsing attributes in process `syz.1.2531'. [ 365.937967][T15115] netlink: 1041 bytes leftover after parsing attributes in process `syz.1.2531'. [ 366.086280][T15123] bond_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 366.458523][T15144] netlink: 'syz.2.2537': attribute type 1 has an invalid length. [ 366.490399][T15144] netlink: 236 bytes leftover after parsing attributes in process `syz.2.2537'. [ 366.577909][ T10] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 366.587120][T15149] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 366.605268][T15151] x_tables: duplicate underflow at hook 2 [ 366.708360][T15156] netlink: 'syz.0.2540': attribute type 1 has an invalid length. [ 366.826036][T15166] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2543'. [ 366.860273][T15156] bond8: entered promiscuous mode [ 366.888994][T15171] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2541'. [ 366.922780][T15156] 8021q: adding VLAN 0 to HW filter on device bond8 [ 367.004589][T15172] tipc: Enabling not permitted [ 367.011327][T15172] tipc: Enabling of bearer rejected, failed to enable media [ 367.067532][T15182] netlink: 'syz.2.2546': attribute type 21 has an invalid length. [ 367.190316][T15194] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2550'. [ 367.212488][T15194] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2550'. [ 367.246074][ T10] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 367.577044][T15222] sctp: [Deprecated]: syz.1.2557 (pid 15222) Use of struct sctp_assoc_value in delayed_ack socket option. [ 367.577044][T15222] Use struct sctp_sack_info instead [ 367.678801][T15227] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2559'. [ 367.771595][T15236] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2561'. [ 367.806919][T15227] netlink: 'syz.0.2559': attribute type 1 has an invalid length. [ 367.876861][T15242] openvswitch: netlink: Message has 8 unknown bytes. [ 368.028167][T15250] netlink: 212048 bytes leftover after parsing attributes in process `syz.1.2565'. [ 368.293174][T15266] bond9 (unregistering): Released all slaves [ 368.331218][T15265] tipc: Enabling of bearer rejected, failed to enable media [ 368.397910][T15265] netlink: 'syz.1.2568': attribute type 1 has an invalid length. [ 368.911915][T15304] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 369.295918][T15331] netlink: 'syz.1.2588': attribute type 39 has an invalid length. [ 369.454018][T15343] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 369.546956][T15345] netlink: 'syz.1.2594': attribute type 75 has an invalid length. [ 369.569546][T15350] xt_bpf: check failed: parse error [ 369.782685][T15361] 8021q: VLANs not supported on ip6_vti0 [ 369.857633][T15363] block nbd2: NBD_DISCONNECT [ 369.863505][T15363] block nbd2: Send disconnect failed -32 [ 369.871441][T15363] block nbd2: shutting down sockets [ 370.626282][T15416] netlink: 'syz.3.2615': attribute type 1 has an invalid length. [ 370.646860][T15416] nbd: error processing sock list [ 370.666173][T15416] block nbd2: shutting down sockets [ 370.666563][T15418] netlink: 'syz.3.2615': attribute type 7 has an invalid length. [ 370.706994][T15418] netlink: 'syz.3.2615': attribute type 7 has an invalid length. [ 371.034596][T15437] __nla_validate_parse: 8 callbacks suppressed [ 371.034616][T15437] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2621'. [ 371.192849][T15441] netlink: 'syz.0.2622': attribute type 20 has an invalid length. [ 371.202293][T15441] IPv6: NLM_F_CREATE should be specified when creating new route [ 371.467855][T15464] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 371.540102][T15468] netlink: 'syz.0.2628': attribute type 1 has an invalid length. [ 371.553822][T15468] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2628'. [ 371.979119][T15492] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2634'. [ 372.016930][T15492] syzkaller1: entered promiscuous mode [ 372.025690][T15492] syzkaller1: entered allmulticast mode [ 372.052481][T15492] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2634'. [ 372.100135][T15492] bond0: entered promiscuous mode [ 372.120712][T15492] gretap0: entered promiscuous mode [ 372.151386][T15492] hsr1: entered promiscuous mode [ 372.604212][T15525] netlink: 164 bytes leftover after parsing attributes in process `syz.0.2643'. [ 372.623570][T15525] netlink: 164 bytes leftover after parsing attributes in process `syz.0.2643'. [ 372.636444][T15524] netlink: 'syz.4.2642': attribute type 11 has an invalid length. [ 372.644540][T15524] netlink: 'syz.4.2642': attribute type 11 has an invalid length. [ 372.653735][T15525] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2643'. [ 372.663174][T15524] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2642'. [ 372.699141][T15528] tipc: Enabling of bearer rejected, already enabled [ 372.865847][T15534] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2645'. [ 373.151369][T15540] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 373.398550][T15552] validate_nla: 3 callbacks suppressed [ 373.398569][T15552] netlink: 'syz.4.2651': attribute type 1 has an invalid length. [ 373.423239][T15552] netlink: 228 bytes leftover after parsing attributes in process `syz.4.2651'. [ 373.432909][T15549] team0: Device ip6gre2 is of different type [ 373.550726][T15564] netlink: 'syz.4.2651': attribute type 83 has an invalid length. [ 373.929101][T15598] tipc: Enabling of bearer rejected, failed to enable media [ 374.108233][T15610] xt_hashlimit: size too large, truncated to 1048576 [ 374.361792][T15626] netlink: 'syz.1.2672': attribute type 4 has an invalid length. [ 374.694948][T15645] sctp: [Deprecated]: syz.2.2677 (pid 15645) Use of int in maxseg socket option. [ 374.694948][T15645] Use struct sctp_assoc_value instead [ 374.845261][T15650] netlink: 'syz.0.2678': attribute type 1 has an invalid length. [ 374.952972][T15650] bond9: entered promiscuous mode [ 374.997899][T15650] 8021q: adding VLAN 0 to HW filter on device bond9 [ 375.692078][T15720] netlink: 'syz.3.2698': attribute type 1 has an invalid length. [ 375.759293][T15720] netlink: 'syz.3.2698': attribute type 10 has an invalid length. [ 375.787636][T15720] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 375.811373][T15720] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 375.813990][T15727] openvswitch: netlink: Missing valid actions attribute. [ 375.831268][T15727] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 376.041381][T15740] __nla_validate_parse: 31 callbacks suppressed [ 376.041404][T15740] netlink: 148 bytes leftover after parsing attributes in process `syz.4.2702'. [ 376.497599][T15768] netlink: 212348 bytes leftover after parsing attributes in process `syz.3.2711'. [ 376.550176][T15767] netlink: 'syz.0.2712': attribute type 2 has an invalid length. [ 376.573313][T15773] bond6: option mode: unable to set because the bond device has slaves [ 376.590224][T15775] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2711'. [ 376.626665][T15773] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 377.046594][T15806] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2718'. [ 377.096459][T15806] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2718'. [ 377.124862][T15806] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2718'. [ 377.187691][T15813] netlink: 'syz.1.2722': attribute type 39 has an invalid length. [ 377.500534][T15828] netlink: zone id is out of range [ 377.505941][T15828] netlink: zone id is out of range [ 377.511184][T15828] netlink: zone id is out of range [ 377.516748][T15828] netlink: zone id is out of range [ 377.522050][T15828] netlink: zone id is out of range [ 377.529667][T15830] netlink: 'syz.1.2727': attribute type 4 has an invalid length. [ 377.537822][T15830] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2727'. [ 377.559710][T15828] netlink: zone id is out of range [ 377.570595][T15828] netlink: zone id is out of range [ 377.971889][T15849] netlink: 'syz.2.2733': attribute type 1 has an invalid length. [ 378.092907][T15851] bond9: (slave bridge5): making interface the new active one [ 378.101576][T15851] bond9: (slave bridge5): Enslaving as an active interface with an up link [ 378.137980][T15858] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2734'. [ 379.000331][T15892] tunl0: left promiscuous mode [ 379.007544][T15892] `: left promiscuous mode [ 379.024383][T15892] bridge_slave_1: left promiscuous mode [ 379.303347][T15910] dvmrp0: entered allmulticast mode [ 379.310748][T15900] tipc: Cannot configure node identity twice [ 379.884138][T15928] syzkaller0: entered promiscuous mode [ 379.890718][T15928] syzkaller0: entered allmulticast mode [ 380.143496][T15955] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2757'. [ 380.622349][T15981] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2762'. [ 380.816668][T15996] validate_nla: 64 callbacks suppressed [ 380.816688][T15996] netlink: 'syz.4.2765': attribute type 8 has an invalid length. [ 380.991918][T16003] dvmrp0: left allmulticast mode [ 380.997245][T16003] dvmrp6: left allmulticast mode [ 381.137880][T16008] __nla_validate_parse: 1 callbacks suppressed [ 381.137900][T16008] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2768'. [ 381.281977][T16012] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2770'. [ 381.384719][T16019] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2772'. [ 381.691436][T16031] nbd2: detected capacity change from 0 to 127 [ 381.788746][ T5150] block nbd2: Receive control failed (result -104) [ 381.916779][T16044] netlink: 'syz.2.2778': attribute type 9 has an invalid length. [ 381.977549][T16044] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2778'. [ 382.083357][T16051] vlan3: entered promiscuous mode [ 382.102456][T16051] bridge0: entered promiscuous mode [ 382.527321][T16070] netlink: 260 bytes leftover after parsing attributes in process `syz.0.2787'. [ 383.147551][T16098] netlink: 808 bytes leftover after parsing attributes in process `syz.1.2796'. [ 383.452741][T16114] netlink: 'syz.4.2801': attribute type 3 has an invalid length. [ 383.476053][T16117] netlink: 272 bytes leftover after parsing attributes in process `syz.4.2801'. [ 383.562953][T16123] netlink: 'syz.0.2802': attribute type 21 has an invalid length. [ 383.606009][T16123] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2802'. [ 383.651593][T16120] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2802'. [ 383.728153][T16120] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2802'. [ 383.971595][T16135] netlink: 'syz.2.2806': attribute type 1 has an invalid length. [ 384.438446][T16157] netlink: 'syz.2.2813': attribute type 1 has an invalid length. [ 384.447448][T16148] hsr_slave_1 (unregistering): left promiscuous mode [ 384.491817][T16155] : entered promiscuous mode [ 384.673634][T16157] bond10: entered promiscuous mode [ 384.709984][T16157] 8021q: adding VLAN 0 to HW filter on device bond10 [ 385.146124][T16199] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 385.157770][T16198] IPVS: stopping master sync thread 16199 ... [ 387.225755][T16215] sch_tbf: burst 0 is lower than device lo mtu (143) ! [ 387.376602][T16218] Cannot find del_set index 3 as target [ 387.706905][T16244] __nla_validate_parse: 3 callbacks suppressed [ 387.706924][T16244] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2837'. [ 387.940100][T16252] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2840'. [ 388.261486][T16266] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2843'. [ 388.361508][T16268] sctp: [Deprecated]: syz.0.2844 (pid 16268) Use of int in max_burst socket option deprecated. [ 388.361508][T16268] Use struct sctp_assoc_value instead [ 388.553202][T16273] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2846'. [ 390.020986][T16263] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2843'. [ 390.047991][T16273] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 390.059226][T16273] gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 390.069147][T16273] gretap2: entered promiscuous mode [ 390.074420][T16273] gretap2: entered allmulticast mode [ 390.762637][T16325] netlink: 'syz.1.2858': attribute type 1 has an invalid length. [ 390.781433][T16326] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2858'. [ 390.801754][T16325] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2858'. [ 390.830725][T16321] dvmrp1: entered allmulticast mode [ 391.270114][T16344] netlink: 'syz.1.2862': attribute type 1 has an invalid length. [ 391.384651][T16351] netlink: 'syz.3.2863': attribute type 25 has an invalid length. [ 391.394016][T16351] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2863'. [ 391.403925][T16351] netlink: 'syz.3.2863': attribute type 25 has an invalid length. [ 391.414181][T16351] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2863'. [ 392.066761][T16377] syzkaller0: entered promiscuous mode [ 392.072517][T16377] syzkaller0: entered allmulticast mode [ 392.606798][T16395] net_ratelimit: 48 callbacks suppressed [ 392.606817][T16395] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 392.729114][T16408] netlink: 'syz.3.2880': attribute type 28 has an invalid length. [ 392.743240][T16408] netlink: 'syz.3.2880': attribute type 3 has an invalid length. [ 392.751725][T16408] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2880'. [ 392.780719][T16397] 8021q: adding VLAN 0 to HW filter on device ` [ 392.818085][T16397] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 392.892680][T16413] syzkaller0: entered promiscuous mode [ 392.898318][T16413] syzkaller0: entered allmulticast mode [ 392.943380][T16416] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2883'. [ 393.189550][T16423] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2883'. [ 393.205190][T16433] veth0: entered promiscuous mode [ 393.208238][T16435] netlink: 164 bytes leftover after parsing attributes in process `syz.4.2889'. [ 393.220377][T16433] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2887'. [ 393.307711][T16433] veth0 (unregistering): left promiscuous mode [ 393.615877][T16454] netlink: 'syz.1.2890': attribute type 4 has an invalid length. [ 394.762865][T16494] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2903'. [ 394.829496][T16494] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2903'. [ 394.854977][T16502] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2906'. [ 395.101627][T16506] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 395.143244][T16510] bridge10: the hash_elasticity option has been deprecated and is always 16 [ 395.357713][T16529] x_tables: duplicate underflow at hook 1 [ 395.405118][T16538] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2916'. [ 395.414663][T16538] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2916'. [ 395.446808][T16538] gretap0: entered promiscuous mode [ 395.462575][T16538] gretap0: left promiscuous mode [ 395.512927][T16540] Cannot find set identified by id 65534 to match [ 395.867934][T16566] netlink: 'syz.2.2925': attribute type 2 has an invalid length. [ 396.543730][ T5836] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 396.555220][ T5836] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 396.565098][ T5836] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 396.574573][ T5836] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 396.584924][ T5836] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 396.617845][ T5150] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 396.625298][ T5150] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 396.632804][ T5150] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 396.640964][ T5150] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 396.648743][ T5150] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 396.906523][T16626] netlink: 'syz.4.2936': attribute type 9 has an invalid length. [ 397.528188][T16658] bridge7: entered promiscuous mode [ 397.543627][T16658] bridge7: entered allmulticast mode [ 397.661914][T16668] tipc: Enabling of bearer rejected, failed to enable media [ 397.908856][T16682] bridge5: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 397.946454][T16686] openvswitch: netlink: Actions may not be safe on all matching packets [ 397.978470][T16689] netlink: 'syz.3.2953': attribute type 6 has an invalid length. [ 397.997018][T16690] __nla_validate_parse: 7 callbacks suppressed [ 397.997038][T16690] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2954'. [ 398.015838][T16689] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2953'. [ 398.398653][T16717] TCP: TCP_TX_DELAY enabled [ 398.489468][T16606] chnl_net:caif_netlink_parms(): no params data found [ 398.664726][T16735] netlink: 'syz.2.2968': attribute type 11 has an invalid length. [ 398.676813][T16735] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2968'. [ 398.686237][ T5836] Bluetooth: hci5: command tx timeout [ 398.714840][T16738] netlink: 240 bytes leftover after parsing attributes in process `syz.4.2967'. [ 398.778017][T16726] tipc: Enabling of bearer rejected, already enabled [ 398.801344][T16606] bridge0: port 1(bridge_slave_0) entered blocking state [ 398.809185][T16606] bridge0: port 1(bridge_slave_0) entered disabled state [ 398.816636][T16606] bridge_slave_0: entered allmulticast mode [ 398.825761][T16606] bridge_slave_0: entered promiscuous mode [ 398.837361][T16606] bridge0: port 2(bridge_slave_1) entered blocking state [ 398.845217][T16606] bridge0: port 2(bridge_slave_1) entered disabled state [ 398.853122][T16606] bridge_slave_1: entered allmulticast mode [ 398.863294][T16606] bridge_slave_1: entered promiscuous mode [ 398.945130][T16606] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 398.959607][T16606] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 399.054348][T16749] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2972'. [ 399.060997][T16606] team0: Port device team_slave_0 added [ 399.065107][T16749] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2972'. [ 399.094787][T16606] team0: Port device team_slave_1 added [ 399.189978][T16756] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2975'. [ 399.213259][T16606] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 399.224773][T16606] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 399.261395][T16606] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 399.288271][T16606] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 399.313494][T16606] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 399.379333][T16606] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 399.401118][T16762] netlink: 'syz.4.2976': attribute type 29 has an invalid length. [ 399.546692][T16762] netlink: 'syz.4.2976': attribute type 29 has an invalid length. [ 399.559645][T16769] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2978'. [ 399.570571][T16766] netlink: 'syz.4.2976': attribute type 29 has an invalid length. [ 399.580278][T16766] netlink: 'syz.4.2976': attribute type 29 has an invalid length. [ 399.607159][T16766] netlink: 'syz.4.2976': attribute type 29 has an invalid length. [ 399.628314][T16606] hsr_slave_0: entered promiscuous mode [ 399.635955][T16606] hsr_slave_1: entered promiscuous mode [ 399.642529][T16606] debugfs: 'hsr0' already exists in 'hsr' [ 399.649463][T16606] Cannot create hsr debugfs directory [ 399.655217][T16766] netlink: 'syz.4.2976': attribute type 29 has an invalid length. [ 400.046841][T16791] tipc: New replicast peer: 255.255.255.255 [ 400.071532][T16791] tipc: Enabled bearer , priority 10 [ 400.124519][T16606] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 400.136736][T16606] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 400.197105][T16800] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2988'. [ 400.264873][T16606] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 400.286596][T16606] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 400.317081][T16801] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2988'. [ 400.460899][T16606] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 400.482118][T16606] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 400.676793][T16606] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 400.693846][T16606] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 400.773531][ T5836] Bluetooth: hci5: command tx timeout [ 401.079390][T16606] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 401.123037][T16606] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 401.149344][T16606] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 401.200607][T16619] tipc: Node number set to 674152082 [ 401.218348][T16606] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 401.496721][T16606] 8021q: adding VLAN 0 to HW filter on device bond0 [ 401.550828][T16606] 8021q: adding VLAN 0 to HW filter on device team0 [ 401.592243][T13449] bridge0: port 1(bridge_slave_0) entered blocking state [ 401.599584][T13449] bridge0: port 1(bridge_slave_0) entered forwarding state [ 401.618431][T16870] netlink: 'syz.3.3012': attribute type 11 has an invalid length. [ 401.641632][ T3793] bridge0: port 2(bridge_slave_1) entered blocking state [ 401.648841][ T3793] bridge0: port 2(bridge_slave_1) entered forwarding state [ 402.089749][T16892] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 402.344503][T16904] netlink: 'syz.2.3022': attribute type 17 has an invalid length. [ 402.387761][T16904] netlink: 'syz.2.3022': attribute type 9 has an invalid length. [ 402.401794][T16606] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 402.411662][T16904] netlink: 'syz.2.3022': attribute type 11 has an invalid length. [ 402.423721][T16904] netlink: 'syz.2.3022': attribute type 12 has an invalid length. [ 402.582434][T16606] veth0_vlan: entered promiscuous mode [ 402.665387][T16606] veth1_vlan: entered promiscuous mode [ 402.823131][T16606] veth0_macvtap: entered promiscuous mode [ 402.845963][ T5836] Bluetooth: hci5: command tx timeout [ 402.901893][T16606] veth1_macvtap: entered promiscuous mode [ 402.995585][T16606] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 403.023593][T16606] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 403.074674][ T2962] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.102550][ T2962] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.116718][ T2962] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.130232][T16945] netlink: 'syz.2.3030': attribute type 1 has an invalid length. [ 403.150638][ T2962] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.314283][ T5836] block nbd3: Receive control failed (result -32) [ 403.386909][ T2962] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 403.411521][ T2962] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 403.482942][T16956] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 403.505693][ T71] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 403.532352][ T71] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 404.237408][ T5150] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 404.249319][ T5150] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 404.268397][ T5150] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 404.277565][ T5150] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 404.288102][ T5150] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 404.350175][T16995] __nla_validate_parse: 18 callbacks suppressed [ 404.350196][T16995] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3044'. [ 404.559769][T16998] IPVS: set_ctl: invalid protocol: 98 172.20.20.187:20001 [ 404.586363][T17000] netlink: 104 bytes leftover after parsing attributes in process `syz.3.3047'. [ 404.589419][T16998] veth1_to_bond: entered allmulticast mode [ 404.664984][T16998] veth1_to_bond: left allmulticast mode [ 404.866934][T17008] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3049'. [ 404.926728][ T5836] Bluetooth: hci5: command tx timeout [ 405.080524][T17022] netlink: 'syz.3.3051': attribute type 13 has an invalid length. [ 405.100859][T17023] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3053'. [ 405.272302][T17032] netlink: 'syz.0.3055': attribute type 1 has an invalid length. [ 405.323784][T17029] bridge0: port 2(bridge_slave_1) entered disabled state [ 405.331729][T17029] bridge0: port 1(bridge_slave_0) entered disabled state [ 405.377387][T17039] ip6t_srh: unknown srh invflags 4000 [ 405.432099][T17029] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 405.742324][T17049] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3059'. [ 405.799613][T17053] xt_bpf: check failed: parse error [ 406.035839][T17065] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3062'. [ 406.094560][T17069] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 406.102083][T17069] IPv6: NLM_F_CREATE should be set when creating new route [ 406.109417][T17069] IPv6: NLM_F_CREATE should be set when creating new route [ 406.116758][T17069] IPv6: NLM_F_CREATE should be set when creating new route [ 406.145321][T17069] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 406.270983][T16989] chnl_net:caif_netlink_parms(): no params data found [ 406.375463][ T5836] Bluetooth: hci0: command tx timeout [ 406.494609][T17076] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3065'. [ 406.509862][T17076] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3065'. [ 406.529591][T17076] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3065'. [ 406.788354][T16989] bridge0: port 1(bridge_slave_0) entered blocking state [ 406.809227][T16989] bridge0: port 1(bridge_slave_0) entered disabled state [ 406.827011][T16989] bridge_slave_0: entered allmulticast mode [ 406.836517][T16989] bridge_slave_0: entered promiscuous mode [ 406.846493][T16989] bridge0: port 2(bridge_slave_1) entered blocking state [ 406.853936][T16989] bridge0: port 2(bridge_slave_1) entered disabled state [ 406.862690][T16989] bridge_slave_1: entered allmulticast mode [ 406.872136][T16989] bridge_slave_1: entered promiscuous mode [ 406.997659][T16989] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 407.037753][T16989] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 407.154135][T16989] team0: Port device team_slave_0 added [ 407.175072][T16989] team0: Port device team_slave_1 added [ 407.293014][T16989] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 407.324684][T16989] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 407.361749][T16989] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 407.437172][T16989] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 407.444180][T16989] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 407.492776][T17132] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3078'. [ 407.546944][T16989] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 407.593655][T17132] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 407.793837][T16989] hsr_slave_0: entered promiscuous mode [ 407.833545][T16989] hsr_slave_1: entered promiscuous mode [ 407.857512][T16989] debugfs: 'hsr0' already exists in 'hsr' [ 407.869992][T16989] Cannot create hsr debugfs directory [ 408.171553][T17174] netlink: 'syz.1.3089': attribute type 1 has an invalid length. [ 408.446047][ T5836] Bluetooth: hci0: command tx timeout [ 408.481513][T16989] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 408.640611][T16989] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 408.763253][T16989] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 408.836397][T17216] IPVS: set_ctl: invalid protocol: 50 255.255.255.255:20002 [ 408.855045][T17216] mac80211_hwsim hwsim10 wlan1: entered allmulticast mode [ 408.912403][T16989] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 409.003431][T17224] 8021q: adding VLAN 0 to HW filter on device bond10 [ 409.290488][T16989] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 409.331698][T16989] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 409.341183][T17240] netlink: 'syz.0.3106': attribute type 11 has an invalid length. [ 409.366224][T17240] netlink: 'syz.0.3106': attribute type 4 has an invalid length. [ 409.381132][T17240] netlink: 'syz.0.3106': attribute type 5 has an invalid length. [ 409.397508][T16989] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 409.405617][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 409.417442][T17240] netlink: 'syz.0.3106': attribute type 6 has an invalid length. [ 409.436687][T17240] __nla_validate_parse: 7 callbacks suppressed [ 409.436704][T17240] netlink: 199748 bytes leftover after parsing attributes in process `syz.0.3106'. [ 409.461217][T16989] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 409.524779][T17240] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3106'. [ 409.625205][T17247] openvswitch: netlink: Unexpected mask (mask=2020040, allowed=2010048) [ 409.665860][T17247] sctp: [Deprecated]: syz.1.3107 (pid 17247) Use of struct sctp_assoc_value in delayed_ack socket option. [ 409.665860][T17247] Use struct sctp_sack_info instead [ 409.709043][T17264] af_packet: tpacket_rcv: packet too big, clamped from 60 to 4294967272. macoff=96 [ 409.725869][T17262] netlink: 232 bytes leftover after parsing attributes in process `syz.4.3108'. [ 409.831510][T16989] 8021q: adding VLAN 0 to HW filter on device bond0 [ 409.901497][T17267] wireguard0: entered promiscuous mode [ 409.916672][T17267] wireguard0: entered allmulticast mode [ 409.925031][T17267] team0: Device wireguard0 is of different type [ 409.979504][T17276] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.3112'. [ 410.019438][T17279] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3114'. [ 410.056643][T16989] 8021q: adding VLAN 0 to HW filter on device team0 [ 410.068683][T17272] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 410.102885][ T3793] bridge0: port 1(bridge_slave_0) entered blocking state [ 410.110117][ T3793] bridge0: port 1(bridge_slave_0) entered forwarding state [ 410.241866][ T3793] bridge0: port 2(bridge_slave_1) entered blocking state [ 410.249107][ T3793] bridge0: port 2(bridge_slave_1) entered forwarding state [ 410.340918][T17289] netlink: 'syz.0.3116': attribute type 1 has an invalid length. [ 410.391715][T17289] netlink: 'syz.0.3116': attribute type 29 has an invalid length. [ 410.406288][T17291] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3117'. [ 410.416126][T17289] netlink: 'syz.0.3116': attribute type 29 has an invalid length. [ 410.490599][T17289] netlink: 548 bytes leftover after parsing attributes in process `syz.0.3116'. [ 410.526850][ T5836] Bluetooth: hci0: command tx timeout [ 410.671527][T17309] netlink: 'syz.3.3122': attribute type 1 has an invalid length. [ 410.713157][T17313] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3122'. [ 410.789842][T17306] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 410.825670][T17318] x_tables: duplicate underflow at hook 3 [ 410.869107][T16989] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 410.958134][T16989] veth0_vlan: entered promiscuous mode [ 410.996149][T16989] veth1_vlan: entered promiscuous mode [ 411.058599][T17328] sctp: [Deprecated]: syz.3.3128 (pid 17328) Use of struct sctp_assoc_value in delayed_ack socket option. [ 411.058599][T17328] Use struct sctp_sack_info instead [ 411.119727][T16989] veth0_macvtap: entered promiscuous mode [ 411.144548][T16989] veth1_macvtap: entered promiscuous mode [ 411.198683][T16989] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 411.240520][T16989] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 411.308715][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 411.328277][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 411.356490][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 411.383239][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 411.546008][T17353] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3136'. [ 411.644471][ T150] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 411.663242][ T150] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 411.733441][T17357] nbd: must specify a device to reconfigure [ 411.772950][ T150] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 411.782136][T17361] openvswitch: netlink: Port -1 exceeds max allowable 65535 [ 411.799286][ T150] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 411.972803][ T11] block nbd2: Possible stuck request ffff888025240000: control (read@0,1024B). Runtime 30 seconds [ 411.985682][ T11] block nbd2: Possible stuck request ffff888025240200: control (read@1024,1024B). Runtime 30 seconds [ 411.996744][ T11] block nbd2: Possible stuck request ffff888025240400: control (read@2048,1024B). Runtime 30 seconds [ 412.007879][ T11] block nbd2: Possible stuck request ffff888025240600: control (read@3072,1024B). Runtime 30 seconds [ 412.120483][T17375] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3143'. [ 412.501141][ T5150] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 412.510784][ T5150] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 412.523407][ T5150] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 412.535272][ T5150] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 412.546169][ T5150] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 412.606187][ T5836] Bluetooth: hci0: command tx timeout [ 412.903854][T17394] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 413.234837][T17394] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 413.360466][T17394] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 413.409826][T17414] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 413.774084][T17394] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 413.927743][T17445] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 413.952235][T17445] bond1: (slave lo): Enslaving as a backup interface with an up link [ 413.976623][T17445] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 414.013820][T17449] xfrm1: entered allmulticast mode [ 414.186925][T17452] veth1_macvtap: left promiscuous mode [ 414.261144][T13451] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 414.296211][ T3522] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 414.363265][ T3522] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 414.414501][ T12] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 414.500442][T17456] syzkaller0: entered promiscuous mode [ 414.515821][T17456] syzkaller0: entered allmulticast mode [ 414.605890][ T5836] Bluetooth: hci3: command tx timeout [ 414.670216][T17465] __nla_validate_parse: 1 callbacks suppressed [ 414.670237][T17465] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3166'. [ 414.756724][T17475] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3169'. [ 415.008014][T17486] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3170'. [ 415.074734][T17486] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3170'. [ 415.101178][T17486] netlink: 6 bytes leftover after parsing attributes in process `syz.0.3170'. [ 415.118000][T17493] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3172'. [ 415.137709][T17391] chnl_net:caif_netlink_parms(): no params data found [ 415.663760][T17391] bridge0: port 1(bridge_slave_0) entered blocking state [ 415.687716][T17391] bridge0: port 1(bridge_slave_0) entered disabled state [ 415.692944][T17524] x_tables: ip6_tables: NETMAP.0 target: invalid size 40 (kernel) != (user) 0 [ 415.705830][T17391] bridge_slave_0: entered allmulticast mode [ 415.713482][T17391] bridge_slave_0: entered promiscuous mode [ 415.748608][T17391] bridge0: port 2(bridge_slave_1) entered blocking state [ 415.766193][T17391] bridge0: port 2(bridge_slave_1) entered disabled state [ 415.773533][T17391] bridge_slave_1: entered allmulticast mode [ 415.794130][T17391] bridge_slave_1: entered promiscuous mode [ 415.925134][T17391] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 415.993410][T17391] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 416.071893][T17538] netlink: 'syz.3.3184': attribute type 6 has an invalid length. [ 416.220477][T17391] team0: Port device team_slave_0 added [ 416.235083][T17391] team0: Port device team_slave_1 added [ 416.338416][T17558] geneve2: entered promiscuous mode [ 416.347719][ T13] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 20002 - 0 [ 416.361361][T17559] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3190'. [ 416.464963][ T13] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 20002 - 0 [ 416.480864][ T13] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 20002 - 0 [ 416.502460][T17391] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 416.545619][T17391] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 416.578000][T17391] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 416.607668][ T10] Oops: general protection fault, probably for non-canonical address 0xdffffc000000004c: 0000 [#1] SMP KASAN PTI [ 416.608751][T17391] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 416.619613][ T10] KASAN: null-ptr-deref in range [0x0000000000000260-0x0000000000000267] [ 416.619655][ T10] CPU: 0 UID: 0 PID: 10 Comm: kworker/0:1 Not tainted syzkaller #0 PREEMPT(full) [ 416.619678][ T10] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 416.619693][ T10] Workqueue: events l2cap_info_timeout [ 416.619737][ T10] RIP: 0010:kasan_byte_accessible+0x12/0x30 [ 416.619767][ T10] Code: 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 40 d6 48 c1 ef 03 48 b8 00 00 00 00 00 fc ff df <0f> b6 04 07 3c 08 0f 92 c0 e9 d0 9d 35 09 cc 66 66 66 66 66 66 2e [ 416.619786][ T10] RSP: 0018:ffffc900000f77a0 EFLAGS: 00010202 [ 416.627186][T17391] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 416.635492][ T10] [ 416.635502][ T10] RAX: dffffc0000000000 RBX: ffffffff892f4e98 RCX: 0000000080000001 [ 416.635519][ T10] RDX: 0000000000000000 RSI: ffffffff892f4e98 RDI: 000000000000004c [ 416.635534][ T10] RBP: ffffffff8a620856 R08: 0000000000000001 R09: 0000000000000000 [ 416.635547][ T10] R10: dffffc0000000000 R11: ffffffff8a620810 R12: 0000000000000000 [ 416.635561][ T10] R13: 0000000000000260 R14: 0000000000000260 R15: 0000000000000001 [ 416.635575][ T10] FS: 0000000000000000(0000) GS:ffff888125e1f000(0000) knlGS:0000000000000000 [ 416.635593][ T10] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 416.635607][ T10] CR2: 00007f570a995b4c CR3: 0000000076bb2000 CR4: 00000000003526f0 [ 416.635627][ T10] Call Trace: [ 416.635634][ T10] [ 416.635642][ T10] __kasan_check_byte+0x12/0x40 [ 416.635672][ T10] lock_acquire+0x84/0x340 [ 416.645120][T17391] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 416.655027][ T10] ? work_grab_pending+0x3d6/0x8e0 [ 416.655060][ T10] lock_sock_nested+0x48/0x100 [ 416.655090][ T10] ? l2cap_sock_ready_cb+0x46/0x170 [ 416.655113][ T10] l2cap_sock_ready_cb+0x46/0x170 [ 416.655135][ T10] l2cap_conn_start+0x700/0xcd0 [ 416.655168][ T10] ? __pfx_l2cap_conn_start+0x10/0x10 [ 416.655195][ T10] ? do_raw_spin_lock+0x121/0x290 [ 416.655223][ T10] ? lock_acquire+0x107/0x340 [ 416.655245][ T10] ? __pfx___mutex_lock+0x10/0x10 [ 416.855195][ T10] ? process_scheduled_works+0x9ef/0x1770 [ 416.860955][ T10] l2cap_info_timeout+0x68/0xa0 [ 416.865827][ T10] ? process_scheduled_works+0x9ef/0x1770 [ 416.871564][ T10] process_scheduled_works+0xad1/0x1770 [ 416.877140][ T10] ? __pfx_process_scheduled_works+0x10/0x10 [ 416.883135][ T10] ? do_raw_spin_lock+0x121/0x290 [ 416.888191][ T10] worker_thread+0x8a0/0xda0 [ 416.892815][ T10] kthread+0x711/0x8a0 [ 416.896921][ T10] ? __pfx_worker_thread+0x10/0x10 [ 416.902050][ T10] ? __pfx_kthread+0x10/0x10 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 416.906668][ T10] ? _raw_spin_unlock_irq+0x23/0x50 [ 416.911897][ T10] ? __pfx_kthread+0x10/0x10 [ 416.916506][ T10] ret_from_fork+0x510/0xa50 [ 416.921118][ T10] ? __pfx_ret_from_fork+0x10/0x10 [ 416.926415][ T10] ? __switch_to+0xc9e/0x1480 [ 416.931118][ T10] ? __pfx_kthread+0x10/0x10 [ 416.935739][ T10] ret_from_fork_asm+0x1a/0x30 [ 416.940537][ T10] [ 416.943572][ T10] Modules linked in: [ 416.949311][ T10] ---[ end trace 0000000000000000 ]--- [ 417.030587][ T10] RIP: 0010:kasan_byte_accessible+0x12/0x30 [ 417.036286][ T13] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 20002 - 0 [ 417.045100][ T5836] Bluetooth: hci3: command tx timeout [ 417.051357][T17576] netlink: 11 bytes leftover after parsing attributes in process `syz.2.3196'. [ 417.062769][T17576] netlink: 11 bytes leftover after parsing attributes in process `syz.2.3196'. [ 417.072248][T17577] netlink: 11 bytes leftover after parsing attributes in process `syz.2.3196'. [ 417.259621][ T10] Code: 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 40 d6 48 c1 ef 03 48 b8 00 00 00 00 00 fc ff df <0f> b6 04 07 3c 08 0f 92 c0 e9 d0 9d 35 09 cc 66 66 66 66 66 66 2e [ 417.345965][ T10] RSP: 0018:ffffc900000f77a0 EFLAGS: 00010202 [ 417.352112][ T10] RAX: dffffc0000000000 RBX: ffffffff892f4e98 RCX: 0000000080000001 [ 417.396631][ T10] RDX: 0000000000000000 RSI: ffffffff892f4e98 RDI: 000000000000004c [ 417.436156][ T10] RBP: ffffffff8a620856 R08: 0000000000000001 R09: 0000000000000000 [ 417.444196][ T10] R10: dffffc0000000000 R11: ffffffff8a620810 R12: 0000000000000000 [ 417.495494][ T10] R13: 0000000000000260 R14: 0000000000000260 R15: 0000000000000001 [ 417.503540][ T10] FS: 0000000000000000(0000) GS:ffff888125e1f000(0000) knlGS:0000000000000000 [ 417.555443][ T10] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 417.562125][ T10] CR2: 000000110c3a3a47 CR3: 000000000dd3a000 CR4: 00000000003526f0 [ 417.595486][ T10] Kernel panic - not syncing: Fatal exception [ 417.602211][ T10] Kernel Offset: disabled [ 417.606541][ T10] Rebooting in 86400 seconds..