last executing test programs: 6.090020267s ago: executing program 4 (id=2171): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newtaction={0x14, 0x30, 0xb}, 0x14}}, 0x0) 5.972074157s ago: executing program 4 (id=2174): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01000000000000000000050000000c00020000000000000000000c00060000000000000000000400078008000100", @ANYRES32], 0x38}}, 0x0) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="58000000020605000000000000000000000000001400078005001400090000000800124008001f000500010006000000050005000200000005000400000000000900020073797a31000000000c000300686173683a6970"], 0x58}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x38, 0x10, 0x403, 0x0, 0x4, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ppp={{0x8}, {0xc, 0x2, 0x0, 0x1, {0x8, 0x1, r1}}}}]}, 0x38}, 0x1, 0x2000000000000000}, 0x0) 5.919625992s ago: executing program 4 (id=2176): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x5b}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0x10, &(0x7f0000000580)=@framed={{}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {0x7, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffe02}, {}, {0x18, 0x3, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x2}, {}, {0x85, 0x0, 0x0, 0xc5}}]}, &(0x7f0000000600)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xb, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="620ac4ff0000000071104b000000000095"], &(0x7f0000000480)='GPL\x00'}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x20, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18020000000000000000000000000000850000000700000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 5.751719141s ago: executing program 4 (id=2180): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0xd, &(0x7f00000000c0)=@req={0x8000, 0xb4f, 0x300, 0x1daf6}, 0x10) setsockopt$packet_int(r0, 0x107, 0xc, &(0x7f0000000080), 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f00000001c0)={'wg2\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3400000010000100"/20, @ANYRES32=r3, @ANYBLOB="00000000000000000c001a800800028004000180080004"], 0x34}}, 0x0) 5.145045821s ago: executing program 4 (id=2193): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00'}) (async) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) connect$802154_dgram(r1, &(0x7f0000000040), 0x14) (async) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r2, 0x100, 0x70bd2c, 0x25dfdbfb, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x2000}, 0x1) (async) splice(r0, &(0x7f00000001c0)=0x1, r0, &(0x7f0000000200)=0x2, 0x7, 0x2) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LIST_PHY(r3, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r2, 0x20, 0x70bd2a, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4000004}, 0x800) (async) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000340), r3) sendmsg$NFC_CMD_GET_TARGET(r3, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x14, 0x0, 0x2, 0x70bd2d, 0x25dfdbfd, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x48004) (async) socket$can_bcm(0x1d, 0x2, 0x2) r4 = syz_genetlink_get_family_id$nfc(&(0x7f00000004c0), r3) sendmsg$NFC_CMD_GET_TARGET(r3, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x14, r4, 0x800, 0x70bd27, 0x25dfdbff, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4080000}, 0x4048040) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000005c0)='blkio.throttle.io_serviced\x00', 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r6, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x40, 0x1410, 0x400, 0x70bd26, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x3}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x8001}, 0x20000000) (async) ioctl$TUNSETSTEERINGEBPF(r6, 0x800454e0, &(0x7f0000000700)=r6) splice(0xffffffffffffffff, &(0x7f0000000740)=0xfffffffeffffffff, r0, &(0x7f0000000780)=0x5, 0x0, 0xc) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f0000000800)=0x0) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f0000000840)=0x0) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f0000000880)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f00000008c0)=0x0) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f0000000900)=0x0) sendmsg$NFC_CMD_FW_DOWNLOAD(r3, &(0x7f0000000a00)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x799c0b718854bed0}, 0xc, &(0x7f00000009c0)={&(0x7f0000000940)={0x5c, r4, 0x2, 0x70bd29, 0x25dfdbfb, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_FIRMWARE_NAME={0x6, 0x14, '&/'}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r7}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r8}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r9}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r10}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r11}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000050}, 0xc0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000a40)={'batadv_slave_1\x00'}) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)={0x2, 0x4, 0x8, 0x1, 0x80, r6, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x4, 0x1}, 0x50) (async) getsockopt$packet_buf(r0, 0x107, 0x1, &(0x7f0000000b00)=""/251, &(0x7f0000000c00)=0xfb) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000c40), r3) ioctl$PPPIOCSCOMPRESS(r6, 0x4010744d) 4.984571692s ago: executing program 4 (id=2196): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x40900, 0x0) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket(0x10, 0x803, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWSETELEM={0x2c, 0xc, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x5}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}]}], {0x14}}, 0x54}}, 0x0) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan0\x00'}) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000280)=ANY=[@ANYRES32=r3, @ANYRES32=r3, @ANYBLOB='.\x00'/12, @ANYRES32=r2, @ANYBLOB="f3817fe144fa0122dd926d53166e12d1f68e2a65f2fd6a74fa1633b656ee5cc975439db2", @ANYRES64=0x0], 0x20) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0xb00, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff3}}}, 0x24}}, 0x0) 4.779588087s ago: executing program 1 (id=2198): r0 = socket(0x2, 0xa, 0x3) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000000)=@name={0x1e, 0x2, 0x9d3354bba4295a8d, {{0x43}}}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x2}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r3, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f00000002c0)={r4, 0x0, 0x0}, 0x20) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000200)={'syztnl0\x00', &(0x7f0000000380)={'syztnl1\x00', 0x0, 0x2f, 0x0, 0x7, 0x8, 0x1, @mcast2, @dev={0xfe, 0x80, '\x00', 0x1c}, 0x34e98a2a737053a8, 0x0, 0x2, 0x72b}}) bind$can_j1939(r0, &(0x7f0000000280)={0x1d, r6, 0x2, {0x1, 0x1, 0x4}, 0x2}, 0x18) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x58, 0x0, 0x1, 0x405, 0x0, 0x0, {0x2}, [@CTA_SYNPROXY={0x4}, @CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_SEQ_ADJ_ORIG={0x1c, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8}, @CTA_SEQADJ_CORRECTION_POS={0x8}, @CTA_SEQADJ_OFFSET_AFTER={0x8}]}]}, 0x58}}, 0x0) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCADDRT(r7, 0x890b, &(0x7f0000000140)={0x0, {0x2, 0x4e20, @remote}, {0x2, 0x4e23, @loopback}, {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x24, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x4, 0xb8b}) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r8, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000240)={0x20, r9, 0x1, 0x470bd28, 0x4, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000094}, 0x80) getsockopt$sock_int(r0, 0x1, 0xc, &(0x7f0000000000), &(0x7f0000000040)=0x4) socket(0x2, 0xa, 0x3) (async) socket$tipc(0x1e, 0x5, 0x0) (async) bind$tipc(r1, &(0x7f0000000000)=@name={0x1e, 0x2, 0x9d3354bba4295a8d, {{0x43}}}, 0x10) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x2}, 0x48) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r3}, 0x4) (async) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f00000002c0)={r4, 0x0, 0x0}, 0x20) (async) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000200)={'syztnl0\x00', &(0x7f0000000380)={'syztnl1\x00', 0x0, 0x2f, 0x0, 0x7, 0x8, 0x1, @mcast2, @dev={0xfe, 0x80, '\x00', 0x1c}, 0x34e98a2a737053a8, 0x0, 0x2, 0x72b}}) (async) bind$can_j1939(r0, &(0x7f0000000280)={0x1d, r6, 0x2, {0x1, 0x1, 0x4}, 0x2}, 0x18) (async) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x58, 0x0, 0x1, 0x405, 0x0, 0x0, {0x2}, [@CTA_SYNPROXY={0x4}, @CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_SEQ_ADJ_ORIG={0x1c, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8}, @CTA_SEQADJ_CORRECTION_POS={0x8}, @CTA_SEQADJ_OFFSET_AFTER={0x8}]}]}, 0x58}}, 0x0) (async) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) ioctl$sock_inet_SIOCADDRT(r7, 0x890b, &(0x7f0000000140)={0x0, {0x2, 0x4e20, @remote}, {0x2, 0x4e23, @loopback}, {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x24, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x4, 0xb8b}) (async) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) (async) sendmsg$NL80211_CMD_SET_TID_CONFIG(r8, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000240)={0x20, r9, 0x1, 0x470bd28, 0x4, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000094}, 0x80) (async) getsockopt$sock_int(r0, 0x1, 0xc, &(0x7f0000000000), &(0x7f0000000040)=0x4) (async) 4.753455195s ago: executing program 1 (id=2200): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000847800000000000000000000004000000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000340)=ANY=[@ANYBLOB="050000000000000071119e00000000008510000002000000850000007d00000095000000000000009500a5050000000082380a6c16cb23efcad64db91e674db95df8d0896824cb2691d06528024707d13584c797578afdc601c7f4a6f818b7f25410420f86e4b78db803197e79375fd430e64a4ed0ec3494217ffe488acb70e2fc2a3ed88e4e93d3"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5", 0x4) r1 = accept4(r0, 0x0, 0x0, 0x80800) syz_genetlink_get_family_id$SEG6(&(0x7f0000000480), r1) 4.646160431s ago: executing program 1 (id=2203): r0 = socket$kcm(0x10, 0x400000002, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x23c, 0x19, 0x1, 0x0, 0x10, {{@in=@multicast1, @in=@remote, 0x0, 0x0, 0xffff, 0x0, 0xa, 0x80, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, {0x1, 0x0, 0x80}}, [@tmpl={0x184, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast}, {{@in=@local, 0x0, 0x3c}, 0x0, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x800}, {{@in=@loopback, 0x0, 0x32}, 0x0, @in=@multicast1, 0x800000, 0x3}, {{@in6=@mcast1, 0x0, 0x33}, 0x0, @in=@private=0xa010101, 0x3504, 0x0, 0x0, 0x1, 0x0, 0xabf}, {{@in6=@local, 0x4d4, 0x6c}, 0x0, @in=@multicast1, 0x3}, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x3c}, 0xa, @in6=@private1, 0x0, 0x1, 0x0, 0x0, 0x1}]}]}, 0x23c}}, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis256-generic\x00'}, 0x58) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) 4.407730608s ago: executing program 1 (id=2207): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1f, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x24048058) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000006dc0)={0x34, 0x3f, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x10, 0x2, 0x0, 0x1, [@typed={0xc, 0xb, 0x0, 0x0, @u64=0x40}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xd}, {0xffff, 0xffff}, {0x5, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40500000000000071104f000000000006000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd96, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 4.278680883s ago: executing program 1 (id=2210): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000014c0)=@newtfilter={0x40, 0x28, 0x575ac7824d421509, 0x70bd2d, 0x4, {0x0, 0x0, 0x0, r3, {0x10}, {0xffff}, {0xfff1, 0x3d}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x8003, 0xd}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x11}, 0x40) r4 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r4, &(0x7f0000000140), 0x4924b68, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000fc0)=@raw={'raw\x00', 0x3c1, 0x3, 0x3a0, 0x1c0, 0x111, 0x4b4, 0x0, 0xd4feffff, 0x2d0, 0x20a, 0x278, 0x2d0, 0x278, 0x3, 0x0, {[{{@ipv6={@empty, @empty, [0xffffffff, 0xffffff00], [], 'ipvlan0\x00', 'team_slave_0\x00', {}, {}, 0x6}, 0x0, 0x198, 0x1c0, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x2, 0xe}}, @common=@unspec=@string={{0xc0}, {0x0, 0x0, 'fsm\x00', "6d93eb04697dfa39de04767f46614613a407abbf4ed2e83a63b484dbb3bf6b2a850e79009e2905d2f98ba19f91f3c9faee6d3686e9bee067f4e77d9ad66238750c4100d7ee97ec7646259d90edece6e9787a97bc956c01754c34c5c9518c46178ed5f9194454980e579c80eca35a58dc47d1d5e4ff6e216c724e88c702448587", 0x28}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x31}, @mcast2, [], [], 'veth1_to_hsr\x00', 'pim6reg1\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x400) socket(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket(0x10, 0x803, 0x2) (async) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) (async) getsockname$packet(r2, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) (async) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000014c0)=@newtfilter={0x40, 0x28, 0x575ac7824d421509, 0x70bd2d, 0x4, {0x0, 0x0, 0x0, r3, {0x10}, {0xffff}, {0xfff1, 0x3d}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x8003, 0xd}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x11}, 0x40) (async) socket(0x10, 0x3, 0x0) (async) sendmmsg$alg(r4, &(0x7f0000000140), 0x4924b68, 0x0) (async) socket$inet6(0xa, 0x2, 0x0) (async) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000fc0)=@raw={'raw\x00', 0x3c1, 0x3, 0x3a0, 0x1c0, 0x111, 0x4b4, 0x0, 0xd4feffff, 0x2d0, 0x20a, 0x278, 0x2d0, 0x278, 0x3, 0x0, {[{{@ipv6={@empty, @empty, [0xffffffff, 0xffffff00], [], 'ipvlan0\x00', 'team_slave_0\x00', {}, {}, 0x6}, 0x0, 0x198, 0x1c0, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x2, 0xe}}, @common=@unspec=@string={{0xc0}, {0x0, 0x0, 'fsm\x00', "6d93eb04697dfa39de04767f46614613a407abbf4ed2e83a63b484dbb3bf6b2a850e79009e2905d2f98ba19f91f3c9faee6d3686e9bee067f4e77d9ad66238750c4100d7ee97ec7646259d90edece6e9787a97bc956c01754c34c5c9518c46178ed5f9194454980e579c80eca35a58dc47d1d5e4ff6e216c724e88c702448587", 0x28}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x31}, @mcast2, [], [], 'veth1_to_hsr\x00', 'pim6reg1\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x400) (async) 4.114712768s ago: executing program 1 (id=2213): r0 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0), 0x4) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) unshare(0x4000800) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x2d, 0x0, @val=@target_btf_id=0xffffffffffffffff}, 0x14) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0) socket(0x40000000015, 0x5, 0x0) (async) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0), 0x4) (async) unshare(0x6a040000) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) (async) unshare(0x4000800) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x2d, 0x0, @val=@target_btf_id=0xffffffffffffffff}, 0x14) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0) (async) 3.904580368s ago: executing program 0 (id=2218): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) r2 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r2, &(0x7f0000000080)={0x1d, r1, 0x0, {0x0, 0x0, 0x4}}, 0x18) (async) sendmsg$can_j1939(r2, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f00000000c0)="92", 0x1a000}}, 0xee) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=@newtfilter={0x24, 0x11, 0x101, 0x70bd25, 0x100000, {0x0, 0x0, 0x74, r1, {0xa, 0x8}, {0xfff1, 0xfff3}, {0x0, 0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x40040d1}, 0xc4) 3.791001735s ago: executing program 2 (id=2219): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000100)={0x20, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x5}]}]}, 0x20}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f00000000c0), 0xffffffffffffffff) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="180000001a000100000000000000000080"], 0x1c}}, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000100)=0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="180180000000650061128400472f461bc40028d2a381c0bc047ef5b9091e7ad694c7ef0d277cb761b800000200"/66], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x90) sendmsg$NFC_CMD_DEACTIVATE_TARGET(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x34, r3, 0x4, 0x70bd2c, 0x25dfdbfc, {}, [@NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000040}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1b, 0x0, 0x0, 0x0, 0x3dfa708e056562c6}, 0x50) r6 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$IP_VS_SO_GET_TIMEOUT(r6, 0x0, 0x486, 0x0, 0x0) 1.656351879s ago: executing program 3 (id=2222): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWRULE={0x20, 0x1c, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x48}}, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56741, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0xfffffffffffffd06}}]}, 0x30}}, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000080)="7800000018002507b9409b14ffff00000204be04020b06050e020909430009003f00064c0a0000000d0085a168d0bf46d32345653600648d0a000500eb16000049935ade4a460c89b6ec0cff3959547f509058ba86c902000000004a3200", 0x5e, 0x0, 0x0, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x200000, 0x800, 0x0, 0x7}, 0x20) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r7 = socket(0x2000000015, 0x80005, 0x0) bind$inet6(r7, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r7, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) recvfrom$inet6(r7, 0x0, 0x0, 0x0, &(0x7f0000000040)={0xa, 0x0, 0x0, @private2}, 0x20000000) ioctl$sock_rose_SIOCADDRT(r6, 0x8919, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000200)=ANY=[@ANYBLOB="9c0000001000030400"/20, @ANYRES32, @ANYBLOB="00000000000000006c00128009000100766c616e000000005c000280060001", @ANYRESOCT=r6], 0x9c}, 0x1, 0xba01, 0x0, 0xc001}, 0x0) r8 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000540)=@newqdisc={0x3c, 0x24, 0xf0b, 0x70bd2f, 0x0, {0x0, 0x0, 0x12, r9, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_plug={{0x9}, {0x52, 0x2, {0x2, 0x8cb}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc850}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r7, 0x89f3, &(0x7f0000000540)={'ip_vti0\x00', &(0x7f00000005c0)={'tunl0\x00', 0x0, 0x1, 0x20, 0x9, 0x7fffffff, {{0x10, 0x4, 0x3, 0x15, 0x40, 0x67, 0x0, 0x2, 0x2f, 0x0, @rand_addr=0x64010102, @remote, {[@timestamp_prespec={0x44, 0x1c, 0xbf, 0x3, 0x7, [{@dev={0xac, 0x14, 0x14, 0x31}, 0xe6ec}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x549}, {@remote, 0x8}]}, @timestamp_prespec={0x44, 0xc, 0x4a, 0x3, 0xf, [{@multicast1, 0x8}]}, @noop]}}}}}) sendmsg$DCCPDIAG_GETSOCK(r10, &(0x7f0000000680)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000640)={&(0x7f0000001ac0)={0x1190, 0x13, 0x300, 0x70bd2d, 0x25dfdbfb, {0xa, 0x0, 0x9, 0x0, {0x4e23, 0x4e24, [0x8376], [0x1, 0x4, 0xb, 0x4f], r11, [0x6, 0x8]}, 0x6, 0x9}, [@INET_DIAG_REQ_BYTECODE={0x1004, 0x1, "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"}, @INET_DIAG_REQ_BYTECODE={0x3e, 0x1, "f14ca11731826f3c47982addcd95a5b7ff1dee88e129a5fca5a9ab94e1107a027c37b1c5375f9f0c120fa5e40408474400b82a0a273335972054"}, @INET_DIAG_REQ_BYTECODE={0xfd, 0x1, "f1c02fced4683accca2e62566065b41b973efce3fe4bddd7c2dff3ca208a6c20abbc8779b8bcdc7c52c887b55613ec2e74f5de8bc142c1416c5c4930b41d42a446d636022b8fc5ec209d7fe0770b7e4dc3de96b5203e0ec483c852760aae6967cb51a54c20ca277ef95120893982b0a603052102d5f779c74afd0f57bf83b0eaeca928e4dc3430b5d058b8cfd20f5521c6cd9d6aef30e8da0f6e48eec609975469a2f0d00809630ff55cdd351f1432fbd5c9308fc502a3b74e1a2f334a38ea755b220509d73d4d13ef396f92f25dab02f9d925f4ce9e65d1bb09e7c274ad27f804a292406607d7cff057f1f7558215f500f6d8bd2b139e9fca"}]}, 0x1190}, 0x1, 0x0, 0x0, 0x1}, 0x1) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="280500003d0007010000000000000000017c0000040000000c00"], 0x528}}, 0xc000) r12 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r12, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="180100002e00010000000000fcdbdf2507"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000b40)=@newtaction={0xf58, 0x30, 0x25, 0x0, 0x0, {}, [{0xf44, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{}, 0x4}, [{}, {}, {}, {0x0, 0x0, 0x4000000}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x100}, {}, {0x0, 0x0, 0x1000}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0xffffffff}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0xff}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x4}], [{}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}]}}]}, {0x4}, {0xc}, {0xc}}}, @m_bpf={0xf0, 0x2, 0x0, 0x0, {{0x8}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS={0x24, 0x4, [{0x1, 0xff, 0x4, 0x6}, {0x6, 0x9, 0x1, 0x3}, {0x8, 0xa, 0x9, 0xe5ad}, {0x2, 0xfd, 0x3, 0x7}]}]}, {0xa4, 0x6, "aef41341fdedc57514e9e6b7c9a7d6c6f2710911ea3f03808c1cd540f74547537bf4bd3de3af39a159c644fdacd41501de3816424920bd50948bb71277cbcb3af35a087dfca43335c1d1f7676239b2932026b5e5e0d02760eb4305f349000de9580b5ad411948e208801ff4e11df28aa70701228e871fa62bd8e1d2b3abd2494e13f35b5933263a1b9ee64b0161ef7cc4e38117db59c3db871f9eb7078642fdf"}, {0xc}, {0xc, 0x8, {0x3}}}}]}]}, 0xf58}}, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r12, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="500000001214000829bd7000ffdbdf2508004f000300000008004f000400000008004b0013000000080003000400000008004b001300000008004f0000000000080015000100"/80], 0x50}, 0x1, 0x0, 0x0, 0x4011}, 0x40824) 1.518640776s ago: executing program 0 (id=2223): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @empty, 0xffffffff}, 0x1c) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xffffffff}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r2, 0x89f1, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000000)=@ethtool_rxfh_indir={0x38}}) setsockopt$inet_mreq(r2, 0x0, 0x24, &(0x7f00000000c0)={@multicast1, @multicast2}, 0x8) r3 = socket(0x10, 0x3, 0x0) getpeername$packet(r3, 0x0, 0x0) write(r3, &(0x7f0000000080)="240000001a007f0214f9f4070009040802000000000000050002000008000f40fe00000e", 0x24) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000008095"], 0x0, 0x3}, 0x94) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x300, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1.515600227s ago: executing program 2 (id=2224): r0 = socket$l2tp(0x2, 0x2, 0x73) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000b80)={0x0}, 0x1, 0x0, 0x0, 0x8051}, 0x8000) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) syz_emit_ethernet(0xe6, &(0x7f0000001c40)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa2208004f2400d800680000bb4be55c9ed9003a907800000000e000000144249d01e000000200000004ac1414bb010dc923ac1e00010000000464010101000000070703ec004e234e21009c90780100000004000000088065528f520a9ea5937ed3bf24669f68026c1e54699655b61952fc1f887fe8e94b318ceff822adab14c441e5f027e87779aba1d0dfee4aa81a1c6f22bbfe79d73fceb744be4e28e38466a76eb373acb5bb70c0857e5eca54e9cc6818c379a53c52740243eb0f305d28b30c9ad088fe25153794c7dce6419320a6acb325c761158c0002c818"], 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) setsockopt$sock_int(r1, 0x1, 0x2b, &(0x7f0000000000)=0x7, 0x4) sendto$packet(r1, 0x0, 0x0, 0x20054001, &(0x7f00000000c0)={0x11, 0xf5, r2, 0x1, 0x0, 0x6, @local}, 0x14) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r4, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) setsockopt$bt_l2cap_L2CAP_OPTIONS(r4, 0x6, 0x1, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000580)={'wg1\x00', 0x0}) r7 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r7, &(0x7f0000000440), 0x10) listen(r7, 0x0) r8 = socket$vsock_stream(0x28, 0x1, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0xfffe}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x4}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0x11}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x5}, @NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}]}], {0x14}}, 0xdc}}, 0x0) connect$vsock_stream(r8, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) shutdown(r8, 0x1) writev(r8, &(0x7f00000003c0)=[{&(0x7f0000000100)="3a2f3ae6", 0x4}], 0x1) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000300)={r3, r6}, 0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xe, 0x4, &(0x7f00000005c0)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4166}, 0x94) 687.816373ms ago: executing program 0 (id=2225): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000180), r0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@newqdisc={0x24, 0x24, 0xf0b, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1, 0xa}, {0x0, 0x2}, {0x0, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x40c0}, 0xc4) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r2, 0x8) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) r4 = accept4(r2, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r4, 0x84, 0x7c, &(0x7f0000000100)={0x0, 0x0, 0x4}, &(0x7f0000000180)=0x8) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000001740)={0x0, 0x6, &(0x7f0000001700)={&(0x7f0000000440)={0x30, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0xc, 0x4, 0x0, 0x1, [{0x4}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_DOI={0x8}]}, 0x30}}, 0x0) 685.510537ms ago: executing program 2 (id=2226): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x6, 0x0, 0x0, 0x0, 0x71, 0x11, 0x24}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x7}, @exit]}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0xe}, 0x70) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={r0, 0xe8, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000100)=r0}, 0x20) (async) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000340), 0x8) (async) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000005c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x2, '\x00', r1, 0xffffffffffffffff, 0x0, 0x3}, 0x50) r7 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)) (async) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.bfq.dequeue\x00', 0x275a, 0x0) sendfile(r7, r8, 0x0, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xff}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000180)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r9}, {0x7, 0x0, 0x8, 0x8, 0x0, 0x0, 0x101}}]}, &(0x7f0000000200)='syzkaller\x00', 0x8}, 0x90) (async) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@bloom_filter={0x1e, 0x3, 0x9, 0xffffff80, 0xe00c, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x1, 0x2, 0x8}, 0x50) (async) r11 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000400)={0x0, 0x5, 0x18}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0xa, 0x1a, &(0x7f0000000180)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xc0000000, 0x0, 0x0, 0x0, 0x10}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000001}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x7}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000280)='GPL\x00', 0x8, 0x5c, &(0x7f00000002c0)=""/92, 0x41000, 0x10, '\x00', 0x0, @fallback=0x32, r5, 0x8, &(0x7f00000003c0)={0x3, 0x3}, 0x8, 0x10, 0x0, 0x0, r2, r0, 0x4, &(0x7f00000006c0)=[r6, r8, 0x1, r9, r10, r11], &(0x7f0000000700)=[{0x4, 0x5, 0x1, 0x4}, {0x0, 0x2, 0x5}, {0x3, 0x2, 0xe, 0x3}, {0x0, 0x4, 0x2, 0x4}], 0x10, 0x5a}, 0x94) 673.16118ms ago: executing program 3 (id=2227): r0 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) (async) r1 = socket$netlink(0x10, 0x3, 0x15) ioctl$AUTOFS_IOC_CATATONIC(r1, 0x9362, 0x0) (async) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000000)={r0, 0x8000, 0xc, 0x7ff}) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r2, 0x6, 0x21, &(0x7f0000000080)="6953dd5395e11f6483895ca8a6163051", 0x10) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="00000011a8c8b30259b653f6945aef490000000000b703000000000000850000000c000000b7000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) 443.989038ms ago: executing program 2 (id=2228): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000000380)=[{{&(0x7f0000000040)={0xa, 0x0, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8}, 0x1c, &(0x7f0000000080)=[{&(0x7f0000000300)="bc", 0x1}], 0x1}}, {{&(0x7f00000000c0)={0xa, 0x4e20, 0x4, @remote, 0x1}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000140)="7f0887", 0x3}], 0x1}}], 0x2, 0x4) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000a80)={0x40, 0x2, 0xa, 0x20, 0x1, 0x1, 0x9, 0x97, 0x3, 0xa2, 0x4, 0xdc, 0x4, 0x8}, 0xe) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x2}}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x6}]}], {0x14, 0x10}}, 0x98}}, 0x0) 442.67138ms ago: executing program 0 (id=2229): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94) vmsplice(r0, &(0x7f0000000300)=[{&(0x7f0000000400)="d70c0d3337b6e51f5cfd78fc165fa52d7027fecd6be51b5bbbf754e97854c4cf0a73ff67a8211a5ce42170cf7c9a88d67ad60703324da7d9b5dad20663f51a2ed599616971b6b6c7abba6dbd0026dd58ea659150ce9382aa30ac60cfca72350d3fa3d397c48a3e0909a9cdb5383c6f7e2422aed06863ad69373e34e385ac978e69f383f653b19ba03186735a66c760342e25ee1806490233cf20b2be898ad7fbeda156aeb7b874b825a87005a3a6265fbd2e21", 0xb3}, {&(0x7f00000004c0)="c1fda1e594d7c9e5f4137e7c5212637bcc5fc44737cd825826cfabcd08bb765e280bd7655ca9a52e3c4b7aaf3739f35a9a6b8b0eb6787ba7a01d1d398401a2266406b567b918f74b1e3fa2ca2d574f302be1b82e23daf5f7ef3a077c104fc91bfdd88a626e92a70b0ecf386636693f244fc6d8de0f6dbbc399718014", 0x7c}], 0x2, 0x0) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mctp_key_release\x00', r0}, 0x18) socket$xdp(0x2c, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) close(r1) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r5, &(0x7f00000006c0)=ANY=[@ANYBLOB="0000001501050600030080"], 0x16b) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r4) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r6) r7 = socket$unix(0x1, 0x1, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000003c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newqdisc={0x5c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0xf, 0xe}}, [@qdisc_kind_options=@q_pfifo={{}, {0x0, 0x2, 0x72}}]}, 0x2d}, 0x1, 0x0, 0x0, 0x4840}, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) bind$can_raw(r10, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) r11 = bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8) sendmsg$nl_route_sched(r11, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=@deltaction={0x24, 0x31, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) r12 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r12, 0x84, 0x2, &(0x7f0000004dc0), &(0x7f0000004e00)=0x8) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="7800000010000304000000000000000000007400", @ANYRES32=0x0, @ANYBLOB="00000000600000005800128008000100677470004c00028008000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="0800030002000000080007006401010108000700ac1414bb0800020003"], 0x78}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000280)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6000008000142c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa2b000005", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="00f4c1bb3be8cf7172a9ec3ddbe23df7a606608dc34c8a3bd2794fa26d3d59ec3cb702fbc87bd999221e5e98f8c8e323ffd1ecdbe8c03ad9ab"], 0x0) 442.044675ms ago: executing program 3 (id=2230): r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x300, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff3}}}, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)={{0x14, 0x10, 0xc00e}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x4000000, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x7, 0x1, "ac3381"}]}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0xc4}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000800)=@newtfilter={0x54, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xfff3}, {}, {0x2, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x20, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x1c, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x19}]}]}]}}]}, 0x54}}, 0x20000000) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 316.187728ms ago: executing program 3 (id=2231): socketpair(0x25, 0x6, 0xfffffffd, &(0x7f0000000000)={0xffffffffffffffff}) r1 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e25, 0xeb, @initdev={0xfe, 0x88, '\x00', 0x21, 0x0}, 0x5b56}, 0x1c) sendto$inet6(r1, &(0x7f00000000c0)="800037e92208a19e", 0x8, 0x4890, &(0x7f0000000040)={0xa, 0x1000, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xfffffffc}, 0x1c) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r2, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r2, 0x84, 0x15, &(0x7f00000001c0)={0x1}, 0x1) ioctl$SIOCSIFHWADDR(r0, 0x8b0f, &(0x7f0000000080)={'wlan1\x00', @broadcast}) 296.452921ms ago: executing program 2 (id=2232): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x21, &(0x7f0000000140)=[{&(0x7f00000004c0)="d8000000190081154e81f782db4cb904021d0800fd02fe02e8fe50a10a000548258848000c600e41b0000900ac00080325000000040015000a00ff150048035c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667daffffffffff1f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5b7276505de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000001008af26c8b7b55f4d2a6823a45", 0xd8}], 0x1}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'wg2\x00'}) socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r3, &(0x7f0000000000)=[{&(0x7f0000000440)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd000000100001000c0808004149014006040800", 0x58}], 0x1) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f000000f480), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(r2, &(0x7f000000f780)={0x0, 0x0, &(0x7f000000f740)={&(0x7f0000000240)={0x20, r4, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4010}, 0x44040) r5 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r5, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) r6 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r6, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000000200), 0x4) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c0002800500010000000000080007"], 0x98}}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) r9 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="24000000031401002cbd7000fcdbdf250900020073797a3200000000080041"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) r10 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000040)={'lo\x00'}) sendmsg$nl_route(r10, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)=ANY=[], 0x98}, 0x1, 0x0, 0x0, 0x20040800}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB="500000000001030000000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff010000000000000089e0f0be0000010c0002800500010000000000"], 0x50}}, 0x0) poll(&(0x7f0000000280)=[{r5, 0x80}], 0x1, 0x8) r11 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000280), r5) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="88000000", @ANYRES16=r11, @ANYBLOB="00022dbd7000ffdbdf250100000008000400ff0f000008000500090000006400038014000600fe880000000000000000000000000101080005007f00e29f14000200766c616e30000000000000000000000008000500e00000021400020076657468315f766972745f77696669001400020076657468305f746f5f62726964676500"], 0x88}, 0x1, 0x0, 0x0, 0x20044801}, 0x24000040) 187.858896ms ago: executing program 3 (id=2233): r0 = socket$inet6(0xa, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000000}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000070000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r3}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r3}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r2}, 0x10) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000540)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) (async) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) accept4(r4, 0x0, 0x0, 0x0) (async) r5 = accept4(r4, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), r5) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), r5) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000004c0)={'ip6_vti0\x00', &(0x7f0000000740)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x3, 0x2, 0x4e, @local, @loopback, 0x10, 0x40, 0x0, 0x4}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000680)={'syztnl1\x00', 0x0}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x41071, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x41071, 0xffffffffffffffff, 0x0) r6 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) unshare(0x26020480) (async) unshare(0x26020480) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000400)={@ifindex, r7, 0x37}, 0x20) setsockopt$MRT6_FLUSH(0xffffffffffffffff, 0x29, 0xd4, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0) 186.573119ms ago: executing program 0 (id=2234): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r1, &(0x7f00000005c0)={&(0x7f0000000000), 0x10, &(0x7f0000000480)=[{&(0x7f0000000180)="f7", 0x101d0}], 0x1}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYRES8=r0, @ANYRESDEC=r0, @ANYBLOB="875b8333f52db4b621424b2567f8877e20c7f76fc86f4834cb5f3bc25fe8f2c10f20e6ec4390a7d65e1bf77a593e"], 0x40}, 0x1, 0x0, 0x0, 0x8054}, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) 139.880925ms ago: executing program 0 (id=2235): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r1, &(0x7f0000000d00)=[{{0x0, 0x1e, &(0x7f0000002c00)=[{&(0x7f0000001500)="b25b365c0254a7c6fc7ea6155a71b613b02d1645aab67271075189c3540c4dd19ebfb3c4acf87f2eeb258e62cc6ae96db360d874500cb86b4185ee533bf708", 0x3f}, {&(0x7f0000002800)="cf", 0x1}, {&(0x7f0000000380)="08e0ac8fb1d99df61d7b518d0a62071e7ec69f658d5a52d7eb7ea31db43f8cf570f335a80860ac4cc240dc149d8468493db8aad089f590d62e0bcb9d1dcee636ee311ee51839b7201745baef82209b2ab741dc5ea481ae9dcebe39b1101a42a8c82de46107541c240ad0d9ee4a9340cffd72aaea692a60993637c81d23a0d0ebbae66f1eb2771df2482c043d8715ae788b56cc91eaa4d6bbdec82d8f91eb822d0b5f3ebd86", 0x1}, {&(0x7f0000000180)="8a", 0x1}, {&(0x7f0000002b40)='-', 0x1}], 0x5}}, {{0x0, 0x0, &(0x7f0000002f00)=[{&(0x7f0000001580)="ce90bfdbcfb8a86a74f6799f98c36e23e210f053830ac8e978a0785884001a7099c4b9016f1a65a57390caf78c272cbf9711f94505dd525af1ff7d013438df5b844226f41b81e58eb73366", 0x4b}, {&(0x7f0000000540)="f2e659a0b00d26c2ee15", 0xa}, {&(0x7f0000002e40)="d4", 0x1}], 0x3}}, {{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000003000)="e1", 0x1}, {&(0x7f00000010c0)="fa", 0x1}, {&(0x7f0000001680)="d8", 0x1}, {&(0x7f0000001600)="f2964dd16e01d56b414499264923beda58d7da0313c1ccafe53965750f25bdaa6b56a87307ec23d48b6f35ce49a813a2bc3cb23fdf42826bdc16788ff466919594de5bf8a1fa5d825947271ade4a95efeb170c", 0xfffffd57}, {&(0x7f0000001340)="b8", 0x1}, {&(0x7f0000000500)="01", 0x1}, {&(0x7f0000000280)="87", 0x1}], 0x7}}, {{0x0, 0x0, &(0x7f0000001540)=[{&(0x7f0000000140), 0x1}, {&(0x7f0000000340)="e4", 0xfffffec2}], 0x2, 0x0, 0xffffff84}}], 0x5f, 0x4000000) setsockopt$sock_int(r1, 0x1, 0x20, &(0x7f0000000000)=0x7fffffff, 0x4) ioctl$sock_TIOCINQ(r1, 0x541b, &(0x7f0000000040)) r2 = epoll_create1(0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40088a01, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="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", @ANYRES32=r0, @ANYRES32=0x0, @ANYRES32=r2, @ANYRESOCT=r0, @ANYRESDEC=r1], 0x10c}}, 0x0) 108.537183ms ago: executing program 2 (id=2236): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=@newtaction={0x70, 0x30, 0x1, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_skbedit={0x58, 0x1, 0x0, 0x0, {{0xc}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x7}, @TCA_SKBEDIT_PTYPE={0x6, 0x4}, @TCA_SKBEDIT_PARMS={0x18}]}, {0x4}, {0xc, 0x10}, {0xc, 0x9}}}]}]}, 0x70}}, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="2c0000002100010000000000fcdbdf2502000000000000000000000006001d004e24000006001c"], 0x2c}}, 0x0) (async) r2 = socket(0x10, 0x803, 0x0) (async) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40, 0x0, 0x0, r4}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_ADDRESS={0x14, 0x1, @dev={0xfe, 0x80, '\x00', 0xa}}]}, 0x40}}, 0x0) (async) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x400000, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_RT_PRIORITY={0x8, 0x9, 0x7ff}]}, 0x34}}, 0x0) (async) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r5, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f0000000680)={0x20c, r6, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x18000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x424a}]}, @TIPC_NLA_NODE={0x70, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xa}, @TIPC_NLA_NODE_ID={0x63, 0x3, "4871e6548178520751e810213975442e7091b7ccba543eba492b11bd8f31b4045c82b0ac11e75d098b312b18f32791ab611b18c67e29da230093b7c17983d7ccd3d347f554e527b845cb3087dd20107cb6f25037f20a62d9a8ab0c8f1167b3"}]}, @TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9e}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x58}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xcfb}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}]}, @TIPC_NLA_SOCK={0x8, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x10001}, @TIPC_NLA_NET_ADDR={0x8}]}, @TIPC_NLA_NODE={0xf8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ID={0xed, 0x3, "fd8d234fabc63dc61123e3c705ea9e0e587e1396f112deade0c5a26ab740505ae4b91426c4374a1198c507c2c0cd48b23b3a80a5d00b99b2957cc21dfaae563f1a1a860ef9da9fa3c0ba1709402ecec592fc01d2fcc931ab4c583e7a147096dab50cd4bd7717cbbad503248d512d88dfb2546f4998ab0a1b58bbd11b4830accc2c685933d11ab408f1f784701c68949264a5f535e73ef0ddde391eab3973d3a2370c55baf0378f08290011a94ef61caac813b093bf26ac1c4a98bc3d0207e6049c59e061affbaaafbb674302255a96a70cbc2795ec4d5d10eb70303c7f4cd27d5865871b3803da2a3a"}]}]}, 0x20c}, 0x1, 0x0, 0x0, 0x804}, 0x4000000) 0s ago: executing program 3 (id=2237): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="4dc07f947163300c", 0x8) r1 = socket$inet6(0xa, 0x1, 0x0) socket$key(0xf, 0x3, 0x2) socket$key(0xf, 0x3, 0x2) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000180)={{{@in=@broadcast, @in6=@dev={0xfe, 0x80, '\x00', 0x80}, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffd}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1}}, 0xe8) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) r2 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000008000)=@newtfilter={0x24, 0x2c, 0x40c, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0xf}, {0x5, 0x3}, {0x10, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x10) kernel console output (not intermixed with test programs): 0': attribute type 1 has an invalid length. [ 84.580740][ T6070] xt_cgroup: xt_cgroup: no path or classid specified [ 84.604675][ T6071] netlink: 4 bytes leftover after parsing attributes in process `syz.1.37'. [ 84.633576][ T6071] netlink: 20 bytes leftover after parsing attributes in process `syz.1.37'. [ 84.692887][ T6078] netlink: 'syz.3.38': attribute type 1 has an invalid length. [ 84.728979][ T6078] netlink: 'syz.3.38': attribute type 3 has an invalid length. [ 84.755366][ T6078] netlink: 224 bytes leftover after parsing attributes in process `syz.3.38'. [ 84.908751][ T6087] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 84.981341][ T6088] syzkaller1: entered allmulticast mode [ 85.433548][ T6115] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 85.602472][ T6128] syzkaller0: entered promiscuous mode [ 85.606826][ T6124] Driver unsupported XDP return value 0 on prog (id 11) dev N/A, expect packet loss! [ 85.608165][ T6128] syzkaller0: entered allmulticast mode [ 85.891571][ T6124] bond1: Removing last arp target with arp_interval on [ 85.999337][ T6143] batadv_slave_1: entered promiscuous mode [ 86.031393][ T6143] batadv_slave_1: left promiscuous mode [ 86.127807][ T6152] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 86.227635][ T6156] syzkaller0: entered promiscuous mode [ 86.233358][ T6156] syzkaller0: entered allmulticast mode [ 86.816237][ T6183] netlink: 'syz.2.67': attribute type 6 has an invalid length. [ 86.882379][ T9] cfg80211: failed to load regulatory.db [ 87.010159][ T6194] Bluetooth: MGMT ver 1.23 [ 87.309772][ T6209] __nla_validate_parse: 8 callbacks suppressed [ 87.309791][ T6209] netlink: 168 bytes leftover after parsing attributes in process `syz.1.74'. [ 87.470326][ T6209] bond1: Removing last arp target with arp_interval on [ 87.572646][ T6227] Zero length message leads to an empty skb [ 87.754301][ T6237] netlink: 'syz.2.81': attribute type 12 has an invalid length. [ 88.195895][ T6253] netlink: 'syz.2.88': attribute type 33 has an invalid length. [ 88.203577][ T6253] netlink: 152 bytes leftover after parsing attributes in process `syz.2.88'. [ 88.287507][ T6258] netlink: 8 bytes leftover after parsing attributes in process `syz.3.87'. [ 88.630661][ T6270] netlink: 12 bytes leftover after parsing attributes in process `syz.2.93'. [ 88.765996][ T6270] netlink: 4 bytes leftover after parsing attributes in process `syz.2.93'. [ 88.934865][ T6270] macvtap1: entered promiscuous mode [ 88.940271][ T6270] vlan0: entered promiscuous mode [ 88.948023][ T6270] macvtap1: entered allmulticast mode [ 88.965420][ T6270] vlan0: entered allmulticast mode [ 88.974434][ T6270] veth0_vlan: entered allmulticast mode [ 89.023802][ T6285] netlink: 28 bytes leftover after parsing attributes in process `syz.3.96'. [ 89.044192][ T6285] netlink: 36 bytes leftover after parsing attributes in process `syz.3.96'. [ 89.088020][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 89.397500][ T6310] netlink: 12 bytes leftover after parsing attributes in process `syz.1.104'. [ 89.412303][ T6310] netlink: 4 bytes leftover after parsing attributes in process `syz.1.104'. [ 89.693442][ T6328] netlink: 'syz.4.109': attribute type 11 has an invalid length. [ 89.711217][ T6328] netlink: 224 bytes leftover after parsing attributes in process `syz.4.109'. [ 90.972422][ T6396] tipc: Enabling of bearer rejected, failed to enable media [ 90.980451][ T5844] udevd[5844]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 91.054901][ T6397] udevd[6397]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 91.311649][ T6418] bond0: (slave macvlan2): Error -22 calling dev_set_mtu [ 91.758171][ T6444] netlink: 'syz.3.144': attribute type 32 has an invalid length. [ 91.765770][ T6441] netlink: 'syz.0.145': attribute type 10 has an invalid length. [ 91.803765][ T6444] bond1: Setting coupled_control to off (0) [ 91.824726][ T6441] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.832942][ T6441] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.859430][ T6441] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.866713][ T6441] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.874917][ T6441] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.882081][ T6441] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.911233][ T6441] bridge0: entered promiscuous mode [ 91.926278][ T6441] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 92.138444][ T6461] netlink: 'syz.4.150': attribute type 1 has an invalid length. [ 92.305258][ T6477] netlink: 'syz.2.153': attribute type 21 has an invalid length. [ 92.334843][ T6477] __nla_validate_parse: 14 callbacks suppressed [ 92.334860][ T6477] netlink: 128 bytes leftover after parsing attributes in process `syz.2.153'. [ 92.362083][ T6471] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 92.373004][ T6477] netlink: 'syz.2.153': attribute type 4 has an invalid length. [ 92.382933][ T6477] netlink: 'syz.2.153': attribute type 5 has an invalid length. [ 92.390640][ T6477] netlink: 3 bytes leftover after parsing attributes in process `syz.2.153'. [ 92.401677][ T3035] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 92.421448][ T3035] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 92.452745][ T3035] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 92.480326][ T3035] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 92.574635][ T6488] gre1: entered promiscuous mode [ 92.579643][ T6488] gre1: entered allmulticast mode [ 92.658220][ T6496] netlink: 4 bytes leftover after parsing attributes in process `syz.2.159'. [ 92.665101][ T6490] netlink: 24 bytes leftover after parsing attributes in process `syz.3.158'. [ 92.787568][ T6490] netlink: 32 bytes leftover after parsing attributes in process `syz.3.158'. [ 92.905287][ T6505] netlink: 24 bytes leftover after parsing attributes in process `syz.1.162'. [ 93.218746][ T6527] netlink: 'syz.4.167': attribute type 1 has an invalid length. [ 93.247300][ T6527] netlink: 224 bytes leftover after parsing attributes in process `syz.4.167'. [ 93.262366][ T6527] netlink: 8 bytes leftover after parsing attributes in process `syz.4.167'. [ 93.295650][ T6527] netlink: 'syz.4.167': attribute type 1 has an invalid length. [ 93.334287][ T6527] 8021q: adding VLAN 0 to HW filter on device bond1 [ 93.578557][ T6527] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.586522][ T6527] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.741609][ T6527] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 93.756045][ T6527] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 93.869463][ T6539] veth3: entered promiscuous mode [ 93.893225][ T6547] netlink: 2 bytes leftover after parsing attributes in process `syz.3.173'. [ 93.912974][ T1011] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.939779][ T1011] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.062154][ T1011] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.093090][ T1011] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.171968][ T6563] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 94.273824][ T6569] netlink: 12 bytes leftover after parsing attributes in process `syz.0.178'. [ 94.385143][ T6569] 8021q: adding VLAN 0 to HW filter on device bond1 [ 94.549733][ T6575] 8021q: adding VLAN 0 to HW filter on device bond1 [ 94.665298][ T6575] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 94.726065][ T6575] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 95.211780][ T6620] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 95.924019][ T6650] netlink: 'syz.1.198': attribute type 21 has an invalid length. [ 96.291725][ T6668] tipc: Started in network mode [ 96.354458][ T6668] tipc: Node identity e6f4cdd13fa5, cluster identity 4711 [ 96.361861][ T6668] tipc: Enabled bearer , priority 0 [ 96.387682][ T6672] syzkaller0: entered promiscuous mode [ 96.393728][ T6672] syzkaller0: entered allmulticast mode [ 96.422005][ T6675] tipc: Started in network mode [ 96.430252][ T6675] tipc: Node identity ac1414aa, cluster identity 4711 [ 96.438710][ T6675] tipc: Enabling of bearer rejected, failed to enable media [ 96.450126][ T6668] tipc: Resetting bearer [ 96.459684][ T6667] tipc: Resetting bearer [ 96.488124][ T6667] tipc: Disabling bearer [ 96.526675][ T6674] tipc: Enabling of bearer rejected, failed to enable media [ 96.562965][ T6681] IPv6: sit1: Disabled Multicast RS [ 96.729081][ T6687] bond2: Unable to set peer notification delay as MII monitoring is disabled [ 96.746462][ T6687] bond2 (unregistering): Released all slaves [ 96.914066][ T6702] netlink: get zone limit has 4 unknown bytes [ 96.925222][ T6703] sch_fq: defrate 0 ignored. [ 97.384111][ T6720] __nla_validate_parse: 9 callbacks suppressed [ 97.384129][ T6720] netlink: 36 bytes leftover after parsing attributes in process `syz.0.220'. [ 97.712543][ T6749] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 97.752170][ T6749] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 97.860134][ T6749] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 97.911522][ T6749] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 97.953903][ T6749] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 97.999882][ T6749] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 98.022947][ T6749] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 98.052233][ T6749] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 98.072829][ T6769] netlink: 'syz.1.235': attribute type 4 has an invalid length. [ 98.083544][ T6749] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 98.102338][ T6749] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 98.320495][ T6782] netlink: 64 bytes leftover after parsing attributes in process `syz.3.239'. [ 98.439699][ T6786] team0: No ports can be present during mode change [ 98.447558][ T6786] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.240'. [ 98.521676][ T6789] netlink: 8 bytes leftover after parsing attributes in process `syz.1.243'. [ 98.548822][ T6789] netlink: 'syz.1.243': attribute type 4 has an invalid length. [ 98.589620][ T6792] netlink: 4 bytes leftover after parsing attributes in process `syz.3.242'. [ 98.595846][ T6789] bridge_slave_0: default FDB implementation only supports local addresses [ 98.634043][ T6795] netlink: 48 bytes leftover after parsing attributes in process `syz.0.245'. [ 98.647889][ T6790] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 98.720012][ T6792] bridge0: entered promiscuous mode [ 98.729810][ T6792] macsec1: entered promiscuous mode [ 98.740897][ T6792] macsec1: entered allmulticast mode [ 98.754609][ T6792] bridge0: entered allmulticast mode [ 98.762516][ T6792] bridge0: port 3(macsec1) entered blocking state [ 98.770269][ T6792] bridge0: port 3(macsec1) entered disabled state [ 98.808579][ T6792] bridge0: left allmulticast mode [ 98.818382][ T6792] bridge0: left promiscuous mode [ 98.847683][ T6806] netlink: 'syz.2.248': attribute type 11 has an invalid length. [ 98.855577][ T6806] netlink: 'syz.2.248': attribute type 11 has an invalid length. [ 98.863352][ T6806] netlink: 224 bytes leftover after parsing attributes in process `syz.2.248'. [ 98.982752][ T6810] netlink: 28 bytes leftover after parsing attributes in process `syz.0.250'. [ 99.011640][ T6810] netlink: 'syz.0.250': attribute type 7 has an invalid length. [ 99.027909][ T6810] netlink: 'syz.0.250': attribute type 8 has an invalid length. [ 99.044785][ T6810] netlink: 4 bytes leftover after parsing attributes in process `syz.0.250'. [ 99.088460][ T6812] netlink: 96 bytes leftover after parsing attributes in process `syz.3.252'. [ 99.107394][ T6812] 8021q: VLANs not supported on ip6_vti0 [ 100.111579][ T6877] syzkaller1: entered allmulticast mode [ 100.475568][ T6899] delete_channel: no stack [ 100.763282][ T6914] xt_cluster: you have exceeded the maximum number of cluster nodes (37482740 > 32) [ 100.800816][ T6918] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 100.920244][ T6920] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 101.510422][ T5908] IPVS: starting estimator thread 0... [ 101.535077][ T6947] netlink: 'syz.1.292': attribute type 5 has an invalid length. [ 101.553434][ T6947] netlink: 'syz.1.292': attribute type 6 has an invalid length. [ 101.631152][ T6949] IPVS: using max 32 ests per chain, 76800 per kthread [ 101.825702][ T6956] syzkaller0: entered promiscuous mode [ 101.834978][ T6956] syzkaller0: entered allmulticast mode [ 102.851664][ T7002] º: renamed from veth1_vlan [ 103.839416][ T7053] netlink: 'syz.3.329': attribute type 3 has an invalid length. [ 104.021353][ T7051] syzkaller1: entered promiscuous mode [ 104.027370][ T7051] syzkaller1: entered allmulticast mode [ 104.157859][ T5887] IPVS: starting estimator thread 0... [ 104.163804][ T7071] __nla_validate_parse: 77 callbacks suppressed [ 104.163819][ T7071] netlink: 28 bytes leftover after parsing attributes in process `syz.2.334'. [ 104.183996][ T7071] netlink: 28 bytes leftover after parsing attributes in process `syz.2.334'. [ 104.241360][ T7078] tipc: Enabled bearer , priority 10 [ 104.265330][ T7073] IPVS: using max 33 ests per chain, 79200 per kthread [ 104.356072][ T7083] netlink: 'syz.3.336': attribute type 1 has an invalid length. [ 104.471034][ T7092] netlink: 'syz.2.339': attribute type 29 has an invalid length. [ 104.479568][ T7092] netlink: 8 bytes leftover after parsing attributes in process `syz.2.339'. [ 104.572908][ T7097] netlink: 4 bytes leftover after parsing attributes in process `syz.3.341'. [ 104.586507][ T7096] netlink: 'syz.0.342': attribute type 14 has an invalid length. [ 104.605469][ T7096] netlink: 4 bytes leftover after parsing attributes in process `syz.0.342'. [ 104.637683][ T7099] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.341'. [ 104.648457][ T36] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 104.663551][ T36] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 104.690386][ T7100] netlink: 'syz.2.339': attribute type 29 has an invalid length. [ 104.699161][ T7100] netlink: 8 bytes leftover after parsing attributes in process `syz.2.339'. [ 104.723261][ T7105] netlink: 36 bytes leftover after parsing attributes in process `syz.4.343'. [ 104.733196][ T36] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 104.742959][ T36] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 104.846872][ T7111] netlink: 8 bytes leftover after parsing attributes in process `syz.4.345'. [ 104.859758][ T7111] netlink: 40 bytes leftover after parsing attributes in process `syz.4.345'. [ 105.172750][ T985] IPVS: starting estimator thread 0... [ 105.266874][ T7129] IPVS: using max 31 ests per chain, 74400 per kthread [ 105.304269][ T7134] netlink: 'syz.1.352': attribute type 10 has an invalid length. [ 105.336713][ T7134] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 105.355732][ T5908] tipc: Node number set to 664538651 [ 105.710121][ T7155] IPv6: NLM_F_CREATE should be specified when creating new route [ 105.923863][ T7163] netlink: 'syz.3.361': attribute type 29 has an invalid length. [ 105.969212][ T7163] netlink: 'syz.3.361': attribute type 29 has an invalid length. [ 106.058313][ T7168] bond2: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-xor(2) [ 106.073217][ T7168] bond2 (unregistering): Released all slaves [ 106.162200][ T7174] x_tables: unsorted underflow at hook 2 [ 106.256845][ T7181] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 107.526819][ T7230] syzkaller1: entered promiscuous mode [ 107.545609][ T7230] syzkaller1: entered allmulticast mode [ 108.079511][ T7256] netlink: 'syz.0.386': attribute type 11 has an invalid length. [ 108.329036][ T7270] openvswitch: netlink: Flow actions attr not present in new flow. [ 109.045816][ T7302] Cannot find set identified by id 65534 to match [ 109.060639][ T7302] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 109.285042][ T7316] openvswitch: netlink: ufid size 17 bytes exceeds the range (1, 16) [ 109.293209][ T7316] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 109.302943][ T7316] __nla_validate_parse: 19 callbacks suppressed [ 109.302959][ T7316] netlink: 24 bytes leftover after parsing attributes in process `syz.2.407'. [ 109.418296][ T7328] netlink: 16 bytes leftover after parsing attributes in process `syz.2.407'. [ 109.461786][ T7316] netlink: 4 bytes leftover after parsing attributes in process `syz.2.407'. [ 109.520358][ T7322] netlink: 12 bytes leftover after parsing attributes in process `syz.0.409'. [ 109.525046][ T7331] netlink: 'syz.4.412': attribute type 16 has an invalid length. [ 109.544484][ T7331] netlink: 'syz.4.412': attribute type 17 has an invalid length. [ 109.743990][ T7331] 8021q: adding VLAN 0 to HW filter on device bond0 [ 109.771171][ T7331] 8021q: adding VLAN 0 to HW filter on device team0 [ 109.801079][ T7331] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 109.945562][ T7346] bond2: peer notification delay (1164) is not a multiple of miimon (100), value rounded to 1100 ms [ 109.961046][ T7346] bond2: entered promiscuous mode [ 109.967317][ T7346] bond2: entered allmulticast mode [ 109.973112][ T7346] 8021q: adding VLAN 0 to HW filter on device bond2 [ 110.278603][ T7369] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 110.555384][ T7383] netlink: 12 bytes leftover after parsing attributes in process `syz.1.424'. [ 110.620760][ T7372] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 110.665193][ T7386] netlink: 16 bytes leftover after parsing attributes in process `syz.2.425'. [ 110.685476][ T7387] netlink: 12 bytes leftover after parsing attributes in process `syz.0.426'. [ 110.696670][ T7389] netlink: 'syz.3.427': attribute type 2 has an invalid length. [ 110.719340][ T7386] netlink: 12 bytes leftover after parsing attributes in process `syz.2.425'. [ 110.773583][ T7397] netlink: 3648 bytes leftover after parsing attributes in process `syz.1.428'. [ 110.804805][ T7397] netlink: 3648 bytes leftover after parsing attributes in process `syz.1.428'. [ 111.965786][ T7459] veth0: entered promiscuous mode [ 113.056862][ T7459] veth0: left promiscuous mode [ 113.257569][ T7501] syzkaller0: entered promiscuous mode [ 113.264959][ T7501] syzkaller0: entered allmulticast mode [ 113.299207][ T7503] 8021q: adding VLAN 0 to HW filter on device bond0 [ 113.331512][ T7503] bond0: (slave gre0): The slave device specified does not support setting the MAC address [ 113.364144][ T7503] bond0: (slave gre0): Error -95 calling set_mac_address [ 113.403289][ T7504] veth0_macvtap: left promiscuous mode [ 114.233587][ T7554] bond2: Unable to set down delay as MII monitoring is disabled [ 114.253625][ T7554] bond2 (unregistering): Released all slaves [ 114.365389][ T7564] netdevsim netdevsim3: Direct firmware load for failed with error -2 [ 114.404517][ T7564] netdevsim netdevsim3: Falling back to sysfs fallback for: [ 114.979104][ T7590] __nla_validate_parse: 12 callbacks suppressed [ 114.979122][ T7590] netlink: 220 bytes leftover after parsing attributes in process `syz.0.467'. [ 115.061404][ T7590] netlink: 8 bytes leftover after parsing attributes in process `syz.0.467'. [ 115.139702][ T7590] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.236564][ T7603] netlink: 'syz.3.472': attribute type 1 has an invalid length. [ 115.442821][ T7600] syzkaller0: entered promiscuous mode [ 115.468927][ T7600] syzkaller0: entered allmulticast mode [ 115.743993][ T7603] veth5: entered promiscuous mode [ 115.927755][ T12] nci: nci_rsp_packet: unknown rsp opcode 0x936 [ 116.012243][ T7633] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 116.114967][ T7647] netlink: 4 bytes leftover after parsing attributes in process `syz.1.481'. [ 116.182092][ T7649] netlink: 24 bytes leftover after parsing attributes in process `syz.3.483'. [ 116.446703][ T7661] netlink: 9896 bytes leftover after parsing attributes in process `syz.1.484'. [ 116.631971][ T7678] netlink: 8 bytes leftover after parsing attributes in process `syz.1.488'. [ 116.746530][ T7682] syzkaller1: entered promiscuous mode [ 116.784772][ T7682] syzkaller1: entered allmulticast mode [ 117.047382][ T7693] netlink: 68 bytes leftover after parsing attributes in process `syz.4.493'. [ 117.120325][ T7695] netlink: 14 bytes leftover after parsing attributes in process `syz.3.492'. [ 117.225049][ T7701] netlink: 20 bytes leftover after parsing attributes in process `syz.0.495'. [ 117.327909][ T7695] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 117.368491][ T7695] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 117.410411][ T7695] bond0 (unregistering): Released all slaves [ 117.530539][ T7706] netlink: 'syz.1.497': attribute type 29 has an invalid length. [ 117.539842][ T7708] netlink: 'syz.1.497': attribute type 29 has an invalid length. [ 117.566303][ T7711] netlink: 4 bytes leftover after parsing attributes in process `syz.0.498'. [ 118.378896][ T7764] netlink: 'syz.1.510': attribute type 3 has an invalid length. [ 118.944671][ T7799] af_packet: tpacket_rcv: packet too big, clamped from 39 to 4294967272. macoff=96 [ 119.489541][ T7824] xt_CT: No such helper "pptp" [ 119.502440][ T13] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 119.527363][ T13] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 119.547134][ T13] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 119.568965][ T13] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 120.235462][ T7866] __nla_validate_parse: 17 callbacks suppressed [ 120.235479][ T7866] netlink: 324 bytes leftover after parsing attributes in process `syz.3.543'. [ 120.320589][ T7870] netlink: 8 bytes leftover after parsing attributes in process `syz.4.545'. [ 120.334898][ T7868] Bluetooth: hci0: invalid length 0, exp 2 for type 6 [ 120.355148][ T7868] netlink: 'syz.2.542': attribute type 7 has an invalid length. [ 120.362822][ T7868] netlink: 140 bytes leftover after parsing attributes in process `syz.2.542'. [ 120.407082][ T7876] netlink: 28 bytes leftover after parsing attributes in process `syz.2.542'. [ 120.490161][ T7880] netlink: 'syz.1.548': attribute type 1 has an invalid length. [ 120.498080][ T7880] netlink: 'syz.1.548': attribute type 4 has an invalid length. [ 120.506245][ T7880] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.548'. [ 120.553157][ T7878] ieee802154 phy0 wpan0: encryption failed: -22 [ 120.615605][ T7885] netlink: 244 bytes leftover after parsing attributes in process `syz.0.550'. [ 120.657894][ T7878] bond0: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 120.725272][ T7878] bond0 (unregistering): Released all slaves [ 121.188678][ T7916] netlink: 'syz.2.555': attribute type 27 has an invalid length. [ 121.216568][ T7919] tipc: Enabling of bearer rejected, failed to enable media [ 121.324847][ T7928] netlink: 36 bytes leftover after parsing attributes in process `syz.1.558'. [ 121.431537][ T7937] netlink: 28 bytes leftover after parsing attributes in process `syz.4.559'. [ 121.457574][ T7937] netlink: 'syz.4.559': attribute type 7 has an invalid length. [ 121.466016][ T7937] netlink: 'syz.4.559': attribute type 8 has an invalid length. [ 121.475771][ T7937] netlink: 4 bytes leftover after parsing attributes in process `syz.4.559'. [ 122.036497][ T7922] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 122.271773][ T7955] syzkaller0: tun_chr_ioctl cmd 1074025673 [ 122.538618][ T7974] netlink: 12 bytes leftover after parsing attributes in process `syz.3.571'. [ 123.083709][ T7988] --map-set only usable from mangle table [ 124.063391][ T8010] netlink: zone id is out of range [ 124.079654][ T8010] netlink: zone id is out of range [ 124.107799][ T8010] netlink: zone id is out of range [ 124.112994][ T8010] netlink: zone id is out of range [ 124.123131][ T8014] netlink: 'syz.0.577': attribute type 1 has an invalid length. [ 124.144040][ T8010] netlink: zone id is out of range [ 124.161935][ T8010] netlink: zone id is out of range [ 124.169056][ T8010] netlink: zone id is out of range [ 124.213240][ T8010] netlink: zone id is out of range [ 124.244061][ T8010] netlink: zone id is out of range [ 124.280911][ T8010] netlink: zone id is out of range [ 124.770621][ T8045] netlink: 'syz.4.589': attribute type 1 has an invalid length. [ 125.162923][ T8065] netlink: 'syz.2.596': attribute type 1 has an invalid length. [ 125.275666][ T8070] netlink: 'syz.3.598': attribute type 1 has an invalid length. [ 125.300255][ T8070] __nla_validate_parse: 11 callbacks suppressed [ 125.300272][ T8070] netlink: 224 bytes leftover after parsing attributes in process `syz.3.598'. [ 125.345207][ T8070] block nbd1: not configured, cannot reconfigure [ 125.858903][ T8107] netlink: 4 bytes leftover after parsing attributes in process `syz.4.606'. [ 125.870081][ T8107] netlink: 12 bytes leftover after parsing attributes in process `syz.4.606'. [ 126.312414][ T8136] netlink: 12 bytes leftover after parsing attributes in process `syz.3.614'. [ 126.343204][ T8136] netlink: 8 bytes leftover after parsing attributes in process `syz.3.614'. [ 126.646517][ T8154] netlink: 'syz.1.620': attribute type 1 has an invalid length. [ 126.675667][ T8155] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 126.738150][ T8161] netlink: 40 bytes leftover after parsing attributes in process `syz.1.620'. [ 127.001068][ T8176] xt_bpf: check failed: parse error [ 127.063440][ T8176] xt_bpf: check failed: parse error [ 127.070930][ T8176] xt_bpf: check failed: parse error [ 127.086972][ T8176] xt_bpf: check failed: parse error [ 127.136679][ T8176] xt_bpf: check failed: parse error [ 127.173010][ T8176] xt_bpf: check failed: parse error [ 127.183223][ T8183] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 127.205784][ T8176] xt_bpf: check failed: parse error [ 127.211706][ T8176] xt_bpf: check failed: parse error [ 127.221039][ T8183] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 127.231352][ T8176] xt_bpf: check failed: parse error [ 127.240657][ T8176] xt_bpf: check failed: parse error [ 127.341156][ T8192] netlink: 12 bytes leftover after parsing attributes in process `syz.1.629'. [ 127.373359][ T8192] netlink: 8 bytes leftover after parsing attributes in process `syz.1.629'. [ 127.508833][ T8200] netlink: 12 bytes leftover after parsing attributes in process `syz.4.631'. [ 127.850186][ T8222] netlink: 36 bytes leftover after parsing attributes in process `syz.4.640'. [ 128.306258][ T8254] netlink: 'syz.1.649': attribute type 15 has an invalid length. [ 128.457059][ T985] IPVS: starting estimator thread 0... [ 128.489221][ T8262] trusted_key: syz.0.650 sent an empty control message without MSG_MORE. [ 128.544603][ T8261] IPVS: using max 40 ests per chain, 96000 per kthread [ 129.434203][ T8319] addrtype_mt_checkentry_v1: 55 callbacks suppressed [ 129.434224][ T8319] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 130.571113][ T8333] netlink: 'syz.0.665': attribute type 1 has an invalid length. [ 130.894952][ T8356] tipc: Enabled bearer , priority 0 [ 130.917572][ T8356] syzkaller0: entered promiscuous mode [ 130.953589][ T8356] syzkaller0: entered allmulticast mode [ 130.999905][ T8356] tipc: Resetting bearer [ 131.046588][ T8354] tipc: Resetting bearer [ 131.114311][ T8354] tipc: Disabling bearer [ 131.125725][ T8371] x_tables: duplicate underflow at hook 2 [ 131.490656][ T8394] __nla_validate_parse: 9 callbacks suppressed [ 131.490676][ T8394] netlink: 12 bytes leftover after parsing attributes in process `syz.4.681'. [ 131.748679][ T8403] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.925926][ T8403] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.969957][ T8413] netlink: 8 bytes leftover after parsing attributes in process `syz.3.688'. [ 131.994187][ T8420] netlink: 16 bytes leftover after parsing attributes in process `syz.1.690'. [ 132.006677][ T8413] netlink: 4 bytes leftover after parsing attributes in process `syz.3.688'. [ 132.066741][ T8403] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.106876][ T8426] netdevsim netdevsim1: Direct firmware load for ..€ failed with error -2 [ 132.116371][ T8426] netdevsim netdevsim1: Falling back to sysfs fallback for: ..€ [ 132.189412][ T8403] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.477665][ T8440] net_ratelimit: 16 callbacks suppressed [ 132.477684][ T8440] openvswitch: netlink: Message has 8 unknown bytes. [ 132.493001][ T60] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.519145][ T1011] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.599114][ T60] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.630095][ T60] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.851503][ T8460] netlink: 68 bytes leftover after parsing attributes in process `syz.4.704'. [ 132.961807][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.968395][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.130315][ T8474] geneve2: entered promiscuous mode [ 133.137771][ T8474] geneve2: entered allmulticast mode [ 133.147282][ T12] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 133.157101][ T8480] netlink: 'syz.1.709': attribute type 14 has an invalid length. [ 133.172971][ T8479] netlink: 'syz.1.709': attribute type 14 has an invalid length. [ 133.188340][ T8474] netlink: 16 bytes leftover after parsing attributes in process `syz.1.709'. [ 133.197902][ T12] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 133.209746][ T12] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 133.236024][ T13] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0 [ 133.425875][ T8498] netlink: 'syz.1.716': attribute type 1 has an invalid length. [ 133.543390][ T8501] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.717'. [ 133.575019][ T8504] netlink: 224 bytes leftover after parsing attributes in process `syz.1.718'. [ 133.663025][ T8511] netlink: 'syz.4.721': attribute type 1 has an invalid length. [ 133.868898][ T8522] netlink: 'syz.4.726': attribute type 33 has an invalid length. [ 133.910922][ T8528] netlink: 8 bytes leftover after parsing attributes in process `syz.1.724'. [ 134.301095][ T8552] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.309286][ T8552] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.637876][ T8614] netlink: 68 bytes leftover after parsing attributes in process `syz.4.752'. [ 136.344212][ T8649] geneve3: entered promiscuous mode [ 136.350211][ T8649] geneve3: entered allmulticast mode [ 136.596855][ T8660] __nla_validate_parse: 3 callbacks suppressed [ 136.596872][ T8660] netlink: 40 bytes leftover after parsing attributes in process `syz.1.765'. [ 136.837323][ T8672] netlink: 68 bytes leftover after parsing attributes in process `syz.1.767'. [ 136.903050][ T8675] tipc: Started in network mode [ 136.908447][ T8675] tipc: Node identity ac1414aa, cluster identity 4711 [ 136.916723][ T8675] tipc: Enabled bearer , priority 10 [ 137.170478][ T8693] tipc: Enabled bearer , priority 0 [ 137.177439][ T8699] xt_hashlimit: Unknown mode mask C4, kernel too old? [ 137.221306][ T8702] syzkaller0: entered promiscuous mode [ 137.227907][ T8702] syzkaller0: entered allmulticast mode [ 137.243865][ T8693] tipc: Disabling bearer [ 137.591654][ T8724] netlink: 44 bytes leftover after parsing attributes in process `syz.1.783'. [ 137.630247][ T8724] netlink: 35 bytes leftover after parsing attributes in process `syz.1.783'. [ 137.646192][ T8724] netlink: 'syz.1.783': attribute type 5 has an invalid length. [ 137.654097][ T8724] netlink: 'syz.1.783': attribute type 6 has an invalid length. [ 137.663106][ T8724] netlink: 35 bytes leftover after parsing attributes in process `syz.1.783'. [ 137.673068][ T8725] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 138.047389][ T9] tipc: Node number set to 2886997162 [ 138.541985][ T8766] netlink: 8 bytes leftover after parsing attributes in process `syz.4.796'. [ 138.653229][ T8771] xt_ecn: cannot match TCP bits for non-tcp packets [ 138.888756][ T8793] syzkaller0: entered promiscuous mode [ 138.901518][ T8793] syzkaller0: entered allmulticast mode [ 138.971762][ T8799] xt_addrtype: ipv6 does not support BROADCAST matching [ 138.993910][ T8801] netlink: 64 bytes leftover after parsing attributes in process `syz.2.808'. [ 139.005646][ T8801] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 139.191856][ T8810] xt_hashlimit: max too large, truncated to 1048576 [ 140.222905][ T8814] syzkaller1: entered promiscuous mode [ 140.244579][ T8814] syzkaller1: entered allmulticast mode [ 140.412531][ T8821] netlink: 8 bytes leftover after parsing attributes in process `syz.3.817'. [ 140.447397][ T8821] netlink: 'syz.3.817': attribute type 1 has an invalid length. [ 140.500360][ T8821] netlink: 'syz.3.817': attribute type 2 has an invalid length. [ 140.648817][ T8833] netdevsim netdevsim0: Direct firmware load for ..€ failed with error -2 [ 140.672154][ T8835] pim6reg527: entered allmulticast mode [ 140.683376][ T8833] netdevsim netdevsim0: Falling back to sysfs fallback for: ..€ [ 140.817993][ T8843] netlink: 20 bytes leftover after parsing attributes in process `syz.4.823'. [ 140.959782][ T8853] netlink: 4 bytes leftover after parsing attributes in process `syz.1.826'. [ 140.975658][ T8853] chnl_net:caif_netlink_parms(): no params data found [ 141.073125][ T8861] netlink: 'syz.4.828': attribute type 10 has an invalid length. [ 141.086744][ T8861] bond0: (slave geneve1): Enslaving as an active interface with an up link [ 141.095968][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.106948][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.121235][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.158259][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.218064][ T8865] syzkaller0: entered promiscuous mode [ 141.223806][ T8865] syzkaller0: entered allmulticast mode [ 141.890659][ T8907] dvmrp0: entered allmulticast mode [ 141.907688][ T8908] netlink: 'syz.3.841': attribute type 11 has an invalid length. [ 141.932463][ T8913] sctp: [Deprecated]: syz.2.843 (pid 8913) Use of int in maxseg socket option. [ 141.932463][ T8913] Use struct sctp_assoc_value instead [ 142.007140][ T8917] __nla_validate_parse: 2 callbacks suppressed [ 142.007155][ T8917] netlink: 176 bytes leftover after parsing attributes in process `syz.4.844'. [ 142.031451][ T8917] netlink: 32 bytes leftover after parsing attributes in process `syz.4.844'. [ 142.147159][ T8922] netlink: 16 bytes leftover after parsing attributes in process `syz.2.845'. [ 142.744162][ T8961] sctp: [Deprecated]: syz.3.857 (pid 8961) Use of int in maxseg socket option. [ 142.744162][ T8961] Use struct sctp_assoc_value instead [ 142.829692][ T8969] netlink: 4 bytes leftover after parsing attributes in process `syz.4.860'. [ 142.915595][ T3000] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 142.936609][ T8973] netlink: 8 bytes leftover after parsing attributes in process `syz.4.860'. [ 142.945466][ T3000] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 142.945542][ T3000] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 142.977658][ T3000] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 142.995160][ T8975] x_tables: duplicate underflow at hook 3 [ 143.005471][ T8977] netlink: 'syz.0.863': attribute type 1 has an invalid length. [ 143.244855][ T8992] netlink: 15 bytes leftover after parsing attributes in process `syz.4.866'. [ 143.274153][ T8995] netlink: 4 bytes leftover after parsing attributes in process `syz.1.867'. [ 143.300122][ T8993] netlink: 'syz.0.868': attribute type 10 has an invalid length. [ 143.314820][ T8995] netlink: 4 bytes leftover after parsing attributes in process `syz.1.867'. [ 143.328720][ T9000] netlink: 8 bytes leftover after parsing attributes in process `syz.1.867'. [ 143.365506][ T8997] ip6t_srh: unknown srh match flags 4000 [ 143.373964][ T8993] team0: Port device dummy0 added [ 143.409688][ T9000] erspan0: entered promiscuous mode [ 143.440804][ T9000] netlink: 8 bytes leftover after parsing attributes in process `syz.1.867'. [ 143.944428][ T9021] blkio.reset_stats is deprecated [ 144.131507][ T9034] sctp: [Deprecated]: syz.0.879 (pid 9034) Use of int in maxseg socket option. [ 144.131507][ T9034] Use struct sctp_assoc_value instead [ 144.136685][ T9032] syzkaller0: entered promiscuous mode [ 144.155436][ T9032] syzkaller0: entered allmulticast mode [ 144.290671][ T9042] xt_l2tp: v2 doesn't support IP mode [ 144.669482][ T9064] netlink: 'syz.1.888': attribute type 10 has an invalid length. [ 144.697253][ T9064] bridge0: port 2(bridge_slave_1) entered disabled state [ 144.715080][ T9064] bridge_slave_1: left allmulticast mode [ 144.724263][ T9064] bridge_slave_1: left promiscuous mode [ 144.739707][ T9064] bridge0: port 2(bridge_slave_1) entered disabled state [ 144.790485][ T9064] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 146.168559][ T9098] xfrm1: entered promiscuous mode [ 146.202335][ T9098] xfrm1: entered allmulticast mode [ 146.450647][ T9113] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 146.797612][ T9135] netlink: 'syz.0.912': attribute type 16 has an invalid length. [ 146.866914][ T9135] netlink: 'syz.0.912': attribute type 17 has an invalid length. [ 146.890910][ T9134] IPVS: fo: FWM 3 0x00000003 - no destination available [ 147.029988][ T9135] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 147.090616][ T9141] tipc: Enabled bearer , priority 10 [ 147.099419][ T9141] xt_socket: unknown flags 0x50 [ 147.258674][ T9156] netlink: 'syz.3.919': attribute type 10 has an invalid length. [ 147.557624][ T9174] __nla_validate_parse: 80 callbacks suppressed [ 147.557994][ T9174] netlink: 68 bytes leftover after parsing attributes in process `syz.2.923'. [ 147.774851][ T9182] net veth1_virt_wifi .: renamed from virt_wifi0 [ 147.949115][ T9193] netlink: 4 bytes leftover after parsing attributes in process `syz.0.928'. [ 148.027031][ T9189] netlink: 'syz.0.928': attribute type 9 has an invalid length. [ 148.049208][ T9197] netlink: 'syz.1.931': attribute type 1 has an invalid length. [ 148.051470][ T9189] netlink: 32 bytes leftover after parsing attributes in process `syz.0.928'. [ 148.064873][ T9197] netlink: 8 bytes leftover after parsing attributes in process `syz.1.931'. [ 148.130786][ T9201] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 148.204577][ T9] tipc: Node number set to 3705722654 [ 148.211303][ T9201] netlink: 192 bytes leftover after parsing attributes in process `syz.2.932'. [ 148.227658][ T9201] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 148.281638][ T9205] tipc: Enabling of bearer rejected, failed to enable media [ 148.395047][ T9218] netlink: 68 bytes leftover after parsing attributes in process `syz.0.937'. [ 148.465930][ T9221] nbd: must specify a device to reconfigure [ 148.591589][ T9217] netlink: 'syz.2.938': attribute type 1 has an invalid length. [ 148.625232][ T9217] netlink: 224 bytes leftover after parsing attributes in process `syz.2.938'. [ 148.741828][ T9217] syzkaller0: entered promiscuous mode [ 148.762302][ T9217] syzkaller0: entered allmulticast mode [ 148.782449][ T9234] netlink: 'syz.0.942': attribute type 2 has an invalid length. [ 148.822166][ T9237] dvmrp0: entered allmulticast mode [ 148.838203][ T9237] dvmrp0: left allmulticast mode [ 148.912367][ T9241] netlink: 104 bytes leftover after parsing attributes in process `syz.0.945'. [ 149.071621][ T9248] netlink: 60 bytes leftover after parsing attributes in process `syz.1.948'. [ 150.388747][ T9269] tipc: Enabled bearer , priority 0 [ 150.407212][ T9269] syzkaller0: entered promiscuous mode [ 150.412728][ T9269] syzkaller0: entered allmulticast mode [ 150.471222][ T9269] tipc: Resetting bearer [ 150.497211][ T9268] tipc: Resetting bearer [ 150.525116][ T9268] tipc: Disabling bearer [ 151.130079][ T9311] netlink: 'syz.1.967': attribute type 1 has an invalid length. [ 151.231631][ T9304] netlink: 24 bytes leftover after parsing attributes in process `syz.4.963'. [ 152.197174][ T9353] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 152.259984][ T9353] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 152.268774][ T9353] gretap1: entered promiscuous mode [ 152.282862][ T9353] gretap1: entered allmulticast mode [ 152.312736][ T30] audit: type=1800 audit(1760593172.450:2): pid=9362 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.986" name=4996AE17DFFC2E43C8174B54B620636894AAACF28FF62616363C70A440AEC4014CAF28C0ADC04308 dev="tmpfs" ino=1109 res=0 errno=0 [ 152.519408][ T9368] syzkaller0: entered promiscuous mode [ 152.539080][ T9368] syzkaller0: entered allmulticast mode [ 152.707972][ T9377] __nla_validate_parse: 5 callbacks suppressed [ 152.707993][ T9377] netlink: 12 bytes leftover after parsing attributes in process `syz.2.991'. [ 152.829883][ T9380] netlink: 'syz.3.992': attribute type 1 has an invalid length. [ 152.846284][ T9380] netlink: 212 bytes leftover after parsing attributes in process `syz.3.992'. [ 152.865647][ T9384] veth0: entered promiscuous mode [ 152.866309][ T9380] netlink: 'syz.3.992': attribute type 1 has an invalid length. [ 153.199766][ T9379] veth0: left promiscuous mode [ 153.379945][ T9403] Cannot find del_set index 49151 as target [ 153.417438][ T9410] Cannot find del_set index 49151 as target [ 153.720609][ T9419] netlink: 'syz.0.1005': attribute type 1 has an invalid length. [ 153.728477][ T9419] netlink: 'syz.0.1005': attribute type 3 has an invalid length. [ 153.737232][ T9419] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1005'. [ 153.746265][ T9430] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1007'. [ 153.760723][ T9419] NCSI netlink: No device for ifindex 0 [ 153.803760][ T9419] batadv_slave_1: entered promiscuous mode [ 153.862140][ T9418] batadv_slave_1: left promiscuous mode [ 154.187723][ T9428] Set syz1 is full, maxelem 6117 reached [ 154.380280][ T9457] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0x5 [ 154.403274][ T9458] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1015'. [ 154.561268][ T9468] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1020'. [ 154.585399][ T9471] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1019'. [ 154.595529][ T9469] netlink: 'syz.3.1022': attribute type 1 has an invalid length. [ 154.648610][ T9469] bond0: entered promiscuous mode [ 154.654089][ T9469] 8021q: adding VLAN 0 to HW filter on device bond0 [ 154.776973][ T9469] bond0: (slave bridge1): making interface the new active one [ 154.786090][ T9469] bridge1: entered promiscuous mode [ 154.793124][ T9469] bond0: (slave bridge1): Enslaving as an active interface with an up link [ 155.371990][ T9513] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1033'. [ 155.419165][ T9519] netlink: 10 bytes leftover after parsing attributes in process `syz.1.1034'. [ 155.436182][ T9520] netlink: 10 bytes leftover after parsing attributes in process `syz.1.1034'. [ 155.467894][ T9519] unsupported nlmsg_type 40 [ 155.702700][ T9533] tipc: Enabled bearer , priority 0 [ 155.831929][ T9537] bond3: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 155.844307][ T9537] bond3 (unregistering): Released all slaves [ 155.882382][ T9533] tipc: Disabling bearer [ 156.013949][ T9550] syzkaller1: entered promiscuous mode [ 156.040786][ T9550] syzkaller1: entered allmulticast mode [ 156.070889][ T9553] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 156.652396][ T9573] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 156.708460][ T9573] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 156.819824][ T9586] netlink: 'syz.4.1058': attribute type 5 has an invalid length. [ 156.855089][ T9586] netlink: 'syz.4.1058': attribute type 6 has an invalid length. [ 156.952619][ T9595] netlink: 'syz.3.1061': attribute type 4 has an invalid length. [ 156.952619][ T9594] netlink: 'syz.3.1061': attribute type 4 has an invalid length. [ 157.062713][ T9598] batadv_slave_1: entered promiscuous mode [ 157.078907][ T9598] batadv_slave_1: entered allmulticast mode [ 157.246556][ T9604] syzkaller0: entered promiscuous mode [ 157.280960][ T9604] syzkaller0: entered allmulticast mode [ 157.308592][ T9611] netlink: 'syz.4.1067': attribute type 6 has an invalid length. [ 157.472551][ T9611] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 157.856775][ T9625] __nla_validate_parse: 14 callbacks suppressed [ 157.856795][ T9625] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1070'. [ 157.921355][ T9625] veth0_macvtap: left promiscuous mode [ 158.135814][ T9632] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1071'. [ 158.185921][ T50] bond0: (slave netdevsim0): link status definitely down, disabling slave [ 158.201240][ T9611] infiniband syz1: set active [ 158.222946][ T9611] infiniband syz1: added syz_tun [ 158.252500][ T9611] syz1: rxe_create_cq: returned err = -12 [ 158.277677][ T9638] validate_nla: 1 callbacks suppressed [ 158.277695][ T9638] netlink: 'syz.2.1072': attribute type 21 has an invalid length. [ 158.278124][ T9611] infiniband syz1: Couldn't create ib_mad CQ [ 158.283326][ T9638] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1072'. [ 158.306262][ T9611] infiniband syz1: Couldn't open port 1 [ 158.405764][ T9611] RDS/IB: syz1: added [ 158.423012][ T9611] smc: adding ib device syz1 with port count 1 [ 158.443951][ T9611] smc: ib device syz1 port 1 has no pnetid [ 158.552109][ T9648] netlink: 'syz.1.1073': attribute type 1 has an invalid length. [ 158.606970][ T9650] netlink: 'syz.1.1073': attribute type 6 has an invalid length. [ 158.624554][ T9648] netlink: 'syz.1.1073': attribute type 2 has an invalid length. [ 158.872023][ T9661] xfrm1: entered allmulticast mode [ 159.029019][ T9668] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1078'. [ 159.468641][ T9690] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1084'. [ 159.847437][ T9708] netlink: 'syz.2.1091': attribute type 1 has an invalid length. [ 159.855855][ T9708] netlink: 'syz.2.1091': attribute type 2 has an invalid length. [ 159.932057][ T9711] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1092'. [ 160.202628][ T9720] tipc: Enabled bearer , priority 0 [ 160.211562][ T9720] syzkaller0: entered promiscuous mode [ 160.218563][ T9720] syzkaller0: entered allmulticast mode [ 160.233608][ T9720] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 160.267229][ T9720] tipc: Resetting bearer [ 160.280884][ T9719] tipc: Resetting bearer [ 160.307179][ T9719] tipc: Disabling bearer [ 160.507923][ T9724] netlink: 236 bytes leftover after parsing attributes in process `syz.0.1097'. [ 160.519414][ T9724] netlink: 'syz.0.1097': attribute type 1 has an invalid length. [ 160.956855][ T9742] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 160.981355][ T9742] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 161.000527][ T9742] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 161.000583][ T9744] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1103'. [ 161.024852][ T9744] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1103'. [ 161.236397][ T9756] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1107'. [ 161.367153][ T9764] netlink: 'syz.0.1109': attribute type 10 has an invalid length. [ 161.733194][ T9783] sctp: [Deprecated]: syz.4.1116 (pid 9783) Use of int in max_burst socket option. [ 161.733194][ T9783] Use struct sctp_assoc_value instead [ 161.917866][ T9793] ip6gre3: entered allmulticast mode [ 162.150875][ T9806] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.232089][ T9811] tipc: Enabled bearer , priority 0 [ 162.252242][ T9814] openvswitch: netlink: IPv6 tunnel dst address is zero [ 162.273236][ T9806] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.349141][ T9808] syzkaller0: entered promiscuous mode [ 162.355424][ T9808] syzkaller0: entered allmulticast mode [ 162.369533][ T9811] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 162.391409][ T9808] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 162.405209][ T9817] syzkaller0: entered promiscuous mode [ 162.411343][ T9817] syzkaller0: entered allmulticast mode [ 162.434939][ T9806] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.630510][ T9806] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.668235][ T9808] tipc: Resetting bearer [ 162.702333][ T9808] tipc: Disabling bearer [ 162.837105][ T12] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.896372][ T9846] __nla_validate_parse: 4 callbacks suppressed [ 162.896390][ T9846] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1135'. [ 162.943787][ T50] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.967141][ T9849] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1134'. [ 163.000315][ T9849] netlink: 'syz.3.1134': attribute type 1 has an invalid length. [ 163.077098][ T2979] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.157645][ T9855] bond4: (slave bridge2): making interface the new active one [ 163.179452][ T9855] bond4: (slave bridge2): Enslaving as an active interface with an up link [ 163.215294][ T9858] tipc: Enabled bearer , priority 0 [ 163.236430][ T9868] syzkaller0: entered promiscuous mode [ 163.241990][ T9868] syzkaller0: entered allmulticast mode [ 163.275051][ T50] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.383022][ T9878] netlink: 'syz.1.1143': attribute type 1 has an invalid length. [ 163.384947][ T9858] tipc: Resetting bearer [ 163.429589][ T9878] netlink: 'syz.1.1143': attribute type 1 has an invalid length. [ 163.455776][ T9857] tipc: Resetting bearer [ 163.500239][ T9857] tipc: Disabling bearer [ 163.682726][ T9891] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1148'. [ 163.707659][ T9891] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1148'. [ 163.727517][ T9898] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1147'. [ 163.925047][ T9910] netlink: 'syz.0.1151': attribute type 10 has an invalid length. [ 163.945533][ T9910] batman_adv: batadv0: Adding interface: team0 [ 163.963367][ T9910] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 164.038795][ T9917] netlink: 'syz.4.1153': attribute type 1 has an invalid length. [ 164.046885][ T9910] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 164.127189][ T9927] netlink: 'syz.1.1155': attribute type 1 has an invalid length. [ 164.135685][ T9927] netlink: 'syz.1.1155': attribute type 2 has an invalid length. [ 164.150747][ T9925] bond3: (slave geneve2): making interface the new active one [ 164.159119][ T9925] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 164.169898][ T12] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 164.178973][ T12] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 164.199474][ T12] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 164.218838][ T12] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 164.274858][ T9932] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1156'. [ 164.482929][ T9947] syzkaller0: entered promiscuous mode [ 164.518351][ T9947] syzkaller0: entered allmulticast mode [ 164.538364][ T9947] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 164.572667][ T9947] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1160'. [ 164.669696][ T9961] IPv6: sit3: Disabled Multicast RS [ 164.676594][ T9961] sit3: entered allmulticast mode [ 165.071433][ T9974] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1169'. [ 165.114218][ C1] vcan0: j1939_session_tx_dat: 0xffff88802f29a400: queue data error: -100 [ 165.411363][ T9982] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1172'. [ 165.448549][ T9982] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1172'. [ 165.491403][ T9989] bond5: entered promiscuous mode [ 165.657564][ T9999] netlink: 'syz.3.1176': attribute type 1 has an invalid length. [ 165.738181][ T9999] bond6: (slave gretap1): making interface the new active one [ 165.748547][ T9999] bond6: (slave gretap1): Enslaving as an active interface with an up link [ 165.768982][ T9999] 8021q: adding VLAN 0 to HW filter on device bond6 [ 165.781308][T10002] syzkaller1: entered promiscuous mode [ 165.786987][T10002] syzkaller1: entered allmulticast mode [ 165.800101][T10005] macvlan0: entered promiscuous mode [ 165.807046][T10005] batadv0: entered promiscuous mode [ 165.813421][T10005] hsr1: Slave A (macvlan0) is not up; please bring it up to get a fully working HSR network [ 165.823602][T10005] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 165.833834][T10005] hsr1: entered allmulticast mode [ 165.839236][T10005] macvlan0: entered allmulticast mode [ 165.844692][T10005] batadv0: entered allmulticast mode [ 165.853410][T10005] macvlan0: left promiscuous mode [ 165.860250][T10005] batadv0: left promiscuous mode [ 166.303455][T10024] netlink: 'syz.4.1184': attribute type 10 has an invalid length. [ 166.335314][T10024] veth0_virt_wifi: entered allmulticast mode [ 166.358290][T10024] team0: Port device veth0_virt_wifi added [ 166.726021][T10052] xt_hashlimit: size too large, truncated to 1048576 [ 167.270015][T10072] 8ÿ: entered promiscuous mode [ 167.363672][T10090] netlink: 'syz.4.1198': attribute type 1 has an invalid length. [ 167.423207][T10090] 8021q: adding VLAN 0 to HW filter on device bond4 [ 167.438570][T10090] bond4: entered promiscuous mode [ 167.465701][T10090] bond5: peer notification delay (1164) is not a multiple of miimon (100), value rounded to 1100 ms [ 167.478691][T10090] bond5: entered promiscuous mode [ 167.483737][T10090] bond5: entered allmulticast mode [ 167.490037][T10090] 8021q: adding VLAN 0 to HW filter on device bond5 [ 167.958363][T10119] netlink: 'syz.2.1208': attribute type 4 has an invalid length. [ 167.965200][T10124] __nla_validate_parse: 9 callbacks suppressed [ 167.965217][T10124] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1207'. [ 168.023731][T10124] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1207'. [ 168.175789][T10135] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1211'. [ 168.357784][T10143] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1214'. [ 168.478787][T10152] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1214'. [ 168.482360][T10143] bond6: Setting coupled_control to off (0) [ 168.683402][T10163] netlink: 5636 bytes leftover after parsing attributes in process `syz.1.1219'. [ 168.829884][T10168] tipc: Enabled bearer , priority 0 [ 168.865041][T10176] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1224'. [ 168.958662][T10182] validate_nla: 3 callbacks suppressed [ 168.958682][T10182] netlink: 'syz.1.1227': attribute type 4 has an invalid length. [ 169.167064][T10174] syzkaller0: entered promiscuous mode [ 169.173047][T10174] syzkaller0: entered allmulticast mode [ 169.212745][T10185] tipc: Resetting bearer [ 169.251279][T10182] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1227'. [ 169.261680][T10167] tipc: Resetting bearer [ 169.297789][T10167] tipc: Disabling bearer [ 169.473885][T10208] netlink: 'syz.1.1232': attribute type 10 has an invalid length. [ 169.510505][T10201] bond3: Unable to set down delay as MII monitoring is disabled [ 169.521745][T10201] bond3 (unregistering): Released all slaves [ 169.608395][T10219] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 169.886116][T10227] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1237'. [ 169.898236][T10227] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1237'. [ 170.026291][T10233] netlink: 'syz.3.1240': attribute type 11 has an invalid length. [ 170.373993][T10249] vxlan0: entered promiscuous mode [ 170.390285][T10249] vxlan0: entered allmulticast mode [ 170.444120][ T1011] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 170.494848][ T1011] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 170.503605][ T1011] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 170.531039][ T1011] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 171.031681][T10284] xt_hashlimit: overflow, rate too high: 0 [ 171.239391][T10292] Unsupported ieee802154 address type: 0 [ 171.247971][T10293] syzkaller0: create flow: hash 610879801 index 2 [ 171.400022][ T802] syzkaller0: tun_net_xmit 76 [ 171.405707][ T802] syzkaller0: tun_net_xmit 48 [ 171.422557][T10286] syzkaller0: delete flow: hash 610879801 index 2 [ 171.425320][ T5887] syzkaller0: tun_net_xmit 76 [ 172.871929][T10321] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 173.099286][T10342] __nla_validate_parse: 7 callbacks suppressed [ 173.099303][T10342] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1275'. [ 173.105387][T10338] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1275'. [ 173.132305][T10341] syzkaller0: entered promiscuous mode [ 173.146442][T10341] syzkaller0: entered allmulticast mode [ 173.154065][T10339] tipc: Enabled bearer , priority 0 [ 173.232439][T10340] tipc: Resetting bearer [ 173.264096][T10340] tipc: Disabling bearer [ 173.810622][T10368] netlink: 144 bytes leftover after parsing attributes in process `syz.4.1283'. [ 174.015520][T10380] nbd: must specify at least one socket [ 174.283907][T10402] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1294'. [ 174.303798][T10402] xt_TCPMSS: Only works on TCP SYN packets [ 174.538703][T10417] netlink: 'syz.0.1298': attribute type 3 has an invalid length. [ 174.567816][T10417] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1298'. [ 174.594940][T10423] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1298'. [ 174.623167][T10425] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1300'. [ 174.636003][T10423] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1298'. [ 174.790739][T10433] x_tables: ip6_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT/POSTROUTING [ 174.817587][T10431] xt_cgroup: path and classid specified [ 174.918760][T10440] tipc: Enabling of bearer rejected, failed to enable media [ 174.945195][T10443] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1305'. [ 175.010617][T10443] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1305'. [ 175.664728][T10475] netlink: 'syz.2.1320': attribute type 2 has an invalid length. [ 175.746255][T10484] xt_policy: too many policy elements [ 176.063902][T10500] netlink: 'syz.2.1328': attribute type 6 has an invalid length. [ 176.068248][T10502] bond0: Error: Cannot enslave bond to itself. [ 176.238582][T10503] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 176.381947][T10517] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 176.396214][T10517] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 176.414145][T10517] gretap1: entered promiscuous mode [ 176.434856][T10517] gretap1: entered allmulticast mode [ 176.632203][T10536] netlink: 'syz.2.1338': attribute type 21 has an invalid length. [ 176.720840][T10536] xt_CT: You must specify a L4 protocol and not use inversions on it [ 176.816134][T10544] xt_cgroup: path and classid specified [ 176.936143][T10547] netlink: 'syz.2.1342': attribute type 2 has an invalid length. [ 177.098617][T10554] bridge_slave_1 (unregistering): left allmulticast mode [ 177.125328][T10554] bridge_slave_1 (unregistering): left promiscuous mode [ 177.156126][T10554] bridge0: port 2(bridge_slave_1) entered disabled state [ 177.240032][T10563] tipc: Enabled bearer , priority 0 [ 177.425735][T10563] tipc: Disabling bearer [ 177.682497][T10592] pim6reg1: entered promiscuous mode [ 177.689071][T10592] pim6reg1: entered allmulticast mode [ 177.768660][T10594] netlink: 'syz.0.1355': attribute type 1 has an invalid length. [ 177.829288][T10598] tipc: Enabling of bearer rejected, failed to enable media [ 178.089527][T10609] can: request_module (can-proto-4) failed. [ 178.210095][T10625] netlink: 'syz.1.1366': attribute type 1 has an invalid length. [ 178.274695][T10625] 8021q: adding VLAN 0 to HW filter on device bond5 [ 178.283350][T10623] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 178.348122][T10626] 8021q: adding VLAN 0 to HW filter on device bond5 [ 178.355612][T10626] bond5: (slave vxcan1): The slave device specified does not support setting the MAC address [ 178.366957][T10626] bond5: (slave vxcan1): Error -95 calling set_mac_address [ 178.392891][T10630] veth3: entered promiscuous mode [ 178.407830][T10630] bond5: (slave veth3): Enslaving as an active interface with a down link [ 178.488751][T10634] bridge0: port 1(bridge_slave_0) entered disabled state [ 178.507280][T10642] netlink: 'syz.0.1367': attribute type 16 has an invalid length. [ 178.520881][T10642] netlink: 'syz.0.1367': attribute type 17 has an invalid length. [ 178.537225][T10644] __nla_validate_parse: 7 callbacks suppressed [ 178.537242][T10644] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1369'. [ 178.563995][T10634] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1367'. [ 178.579733][T10642] 8021q: adding VLAN 0 to HW filter on device team0 [ 178.586747][T10642] batman_adv: batadv0: Interface activated: team0 [ 178.600695][T10642] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 179.114253][T10671] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1377'. [ 179.139012][T10671] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1377'. [ 179.157434][T10671] netlink: get zone limit has 4 unknown bytes [ 179.282524][T10679] netlink: 'syz.4.1379': attribute type 1 has an invalid length. [ 179.331636][T10679] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1379'. [ 179.367410][T10687] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1380'. [ 179.418197][T10684] bond6: Removing last ns target with arp_interval on [ 179.689175][T10706] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1385'. [ 179.722612][T10706] bond0: entered promiscuous mode [ 179.733782][T10706] bond_slave_0: entered promiscuous mode [ 179.746056][T10706] bond_slave_1: entered promiscuous mode [ 179.753904][T10706] bond0: left promiscuous mode [ 179.762220][T10706] bond_slave_0: left promiscuous mode [ 179.773969][T10706] bond_slave_1: left promiscuous mode [ 179.823498][T10711] tipc: Enabled bearer , priority 10 [ 179.841755][T10717] netlink: 'syz.1.1390': attribute type 21 has an invalid length. [ 179.983828][T10718] netlink: 'syz.0.1391': attribute type 1 has an invalid length. [ 180.062800][T10727] netlink: 'syz.3.1393': attribute type 12 has an invalid length. [ 180.173142][T10727] bond7: option primary_reselect: invalid value (255) [ 180.233577][T10727] bond7 (unregistering): Released all slaves [ 180.313143][T10743] bridge0: Device is already in use. [ 180.342593][T10738] bridge0: Device is already in use. [ 180.480089][T10750] batadv0: entered promiscuous mode [ 180.517148][T10750] bond0: entered promiscuous mode [ 180.538269][T10750] bond_slave_0: entered promiscuous mode [ 180.544267][T10750] bond_slave_1: entered promiscuous mode [ 180.551290][T10750] geneve1: entered promiscuous mode [ 180.572179][T10750] bridge0: entered promiscuous mode [ 180.580470][T10750] hsr1: Slave A (batadv0) is not up; please bring it up to get a fully working HSR network [ 180.597461][T10750] hsr1: entered allmulticast mode [ 180.602641][T10750] bond0: entered allmulticast mode [ 180.608314][T10750] bond_slave_0: entered allmulticast mode [ 180.609025][T10761] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1400'. [ 180.615898][T10750] bond_slave_1: entered allmulticast mode [ 180.630224][T10750] geneve1: entered allmulticast mode [ 180.635607][T10750] bridge0: entered allmulticast mode [ 180.641278][T10750] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 180.650675][T10763] netlink: 9 bytes leftover after parsing attributes in process `syz.0.1401'. [ 180.697884][T10763] gretap0: entered promiscuous mode [ 180.730442][T10759] netlink: 5 bytes leftover after parsing attributes in process `syz.0.1401'. [ 180.767332][T10766] netlink: 'syz.3.1402': attribute type 29 has an invalid length. [ 180.774836][T10759] 0ªî{X¹¦: renamed from gretap0 [ 180.808337][T10759] 0ªî{X¹¦: left promiscuous mode [ 180.813416][T10759] 0ªî{X¹¦: entered allmulticast mode [ 180.830275][T10759] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 181.076277][T10780] netlink: 'syz.1.1409': attribute type 29 has an invalid length. [ 181.105737][T10780] netlink: 'syz.1.1409': attribute type 29 has an invalid length. [ 181.301947][T10797] netlink: 'syz.0.1413': attribute type 39 has an invalid length. [ 181.378289][T10794] bond0: (slave bond_slave_1): Releasing backup interface [ 181.619637][T10816] tipc: Enabled bearer , priority 0 [ 181.744050][T10816] syzkaller0: entered promiscuous mode [ 181.749940][T10816] syzkaller0: entered allmulticast mode [ 181.756991][T10816] tipc: Resetting bearer [ 181.808513][ T12] tipc: Resetting bearer [ 181.837741][T10815] tipc: Resetting bearer [ 181.945442][T10836] tipc: Can't bind to reserved service type 0 [ 182.512919][T10854] netlink: 'syz.3.1426': attribute type 1 has an invalid length. [ 183.046358][T10815] tipc: Disabling bearer [ 183.064819][T10825] syzkaller1: entered promiscuous mode [ 183.076630][T10825] syzkaller1: entered allmulticast mode [ 183.161609][T10854] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 183.241150][T10865] netlink: 'syz.2.1428': attribute type 1 has an invalid length. [ 183.467521][T10875] 8021q: VLANs not supported on ip_vti0 [ 183.572716][T10887] bridge0: Device is already in use. [ 183.615735][T10890] __nla_validate_parse: 11 callbacks suppressed [ 183.615753][T10890] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1431'. [ 183.813245][T10899] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 183.845077][T10899] bridge0: port 2(bridge_slave_1) entered disabled state [ 183.852906][T10899] bridge0: port 1(bridge_slave_0) entered disabled state [ 184.049115][T10906] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1439'. [ 184.299654][T10918] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1443'. [ 184.311344][T10921] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1444'. [ 184.321294][T10922] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1444'. [ 184.351924][T10923] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1442'. [ 184.695779][T10940] netlink: 108 bytes leftover after parsing attributes in process `syz.0.1446'. [ 184.742801][T10940] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1446'. [ 184.779802][T10948] netlink: 'syz.0.1446': attribute type 1 has an invalid length. [ 184.971839][T10955] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1451'. [ 184.981869][T10954] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1450'. [ 185.492326][T10983] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 186.005802][T11012] netlink: 'syz.4.1465': attribute type 1 has an invalid length. [ 186.420962][T11034] ip6gre1: entered allmulticast mode [ 186.504835][T11040] netlink: 'syz.4.1473': attribute type 9 has an invalid length. [ 186.621907][T10997] clip:clip_setentry: non-CLIP VCC [ 187.059432][T11056] hsr_slave_0 (unregistering): left promiscuous mode [ 187.136215][T11060] pim6reg1: entered promiscuous mode [ 187.143321][T11060] pim6reg1: entered allmulticast mode [ 187.749942][T11096] netlink: 'syz.0.1492': attribute type 11 has an invalid length. [ 187.903457][T11107] netlink: 'syz.1.1496': attribute type 8 has an invalid length. [ 188.090123][T11115] netlink: 'syz.2.1498': attribute type 10 has an invalid length. [ 188.150993][T11115] batman_adv: batadv0: Adding interface: team0 [ 188.182169][T11115] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 188.268025][T11115] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 188.400460][T11133] openvswitch: netlink: Message has 512 unknown bytes. [ 188.430348][T11132] tipc: Enabled bearer , priority 0 [ 188.518500][T11129] tipc: Disabling bearer [ 188.570203][T11135] netlink: 'syz.2.1507': attribute type 10 has an invalid length. [ 188.593394][T11135] batadv0: entered promiscuous mode [ 188.609864][T11135] batadv0: entered allmulticast mode [ 188.625650][T11135] bridge0: port 3(batadv0) entered blocking state [ 188.639402][T11135] bridge0: port 3(batadv0) entered disabled state [ 188.727664][ T36] batman_adv: batadv0: IGMP Querier appeared [ 188.734246][ T36] batman_adv: batadv0: MLD Querier appeared [ 188.820027][T11148] __nla_validate_parse: 135 callbacks suppressed [ 188.820045][T11148] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1511'. [ 189.071726][T11161] netlink: 84 bytes leftover after parsing attributes in process `syz.0.1515'. [ 189.213825][T11176] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1520'. [ 189.317862][T11184] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1521'. [ 189.346805][T11186] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1522'. [ 189.365690][T11186] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1522'. [ 189.401915][T11187] netlink: 'syz.2.1523': attribute type 1 has an invalid length. [ 189.424447][T11187] netlink: 'syz.2.1523': attribute type 3 has an invalid length. [ 189.458239][T11187] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1523'. [ 189.503720][T11187] NCSI netlink: No device for ifindex 0 [ 189.520508][T11196] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1526'. [ 189.612662][T11200] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1527'. [ 189.668232][T11202] wg1: entered promiscuous mode [ 189.675495][T11202] wg1: entered allmulticast mode [ 189.729747][T11206] siw: device registration error -23 [ 189.744534][T11205] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1529'. [ 189.768367][T11206] Bluetooth: hci0: invalid length 0, exp 2 for type 3 [ 190.369584][T11247] : renamed from bridge_slave_0 (while UP) [ 190.726088][T11268] netlink: 'syz.2.1548': attribute type 4 has an invalid length. [ 190.796750][T11268] netlink: 'syz.2.1548': attribute type 4 has an invalid length. [ 191.507658][T11303] policy can only be matched on NF_INET_PRE_ROUTING [ 191.507680][T11303] unable to load match [ 192.076367][T11336] delete_channel: no stack [ 193.149363][ T3000] bond0: (slave bridge_slave_1): link status definitely down, disabling slave [ 193.659871][T11372] netlink: 'syz.0.1578': attribute type 8 has an invalid length. [ 194.052417][T11392] Bluetooth: hci0: unsupported parameter 512 [ 194.058947][T11392] Bluetooth: hci0: invalid length 11, exp 1 for type 31 [ 194.348778][T11401] ip6t_srh: unknown srh match flags 5F28 [ 194.413239][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.427690][T11401] ip6t_srh: unknown srh match flags 5F28 [ 194.545645][T11409] __nla_validate_parse: 16 callbacks suppressed [ 194.545664][T11409] netlink: 212388 bytes leftover after parsing attributes in process `syz.4.1588'. [ 194.679735][T11409] openvswitch: netlink: Duplicate key (type 1). [ 194.787247][T11424] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1590'. [ 195.182356][T11441] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1593'. [ 195.248374][T11441] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1593'. [ 195.390527][T11441] bridge7: port 1(bond7) entered blocking state [ 195.404699][T11441] bridge7: port 1(bond7) entered disabled state [ 195.433808][T11441] bond7: entered allmulticast mode [ 195.526785][T11441] bond7: entered promiscuous mode [ 195.579583][T11451] bridge7: port 2(gretap2) entered blocking state [ 195.638152][T11451] bridge7: port 2(gretap2) entered disabled state [ 195.653274][T11451] gretap2: entered allmulticast mode [ 195.670123][T11451] gretap2: entered promiscuous mode [ 195.678267][T11465] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1601'. [ 196.035936][T11483] lo speed is unknown, defaulting to 1000 [ 196.064206][T11483] lo speed is unknown, defaulting to 1000 [ 196.097835][T11483] lo speed is unknown, defaulting to 1000 [ 196.962978][T11483] infiniband syz0: set down [ 196.968112][ T5908] lo speed is unknown, defaulting to 1000 [ 196.987229][T11483] infiniband syz0: added lo [ 197.021675][T11483] syz0: rxe_create_cq: returned err = -12 [ 197.041432][T11538] bond7: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 197.053262][T11483] infiniband syz0: Couldn't create ib_mad CQ [ 197.055085][T11544] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1618'. [ 197.059645][T11483] infiniband syz0: Couldn't open port 1 [ 197.087634][T11538] bond7 (unregistering): Released all slaves [ 197.100755][T11544] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1618'. [ 197.162703][T11483] RDS/IB: syz0: added [ 197.196576][T11483] smc: adding ib device syz0 with port count 1 [ 197.226120][T11483] smc: ib device syz0 port 1 has no pnetid [ 197.267926][ T985] lo speed is unknown, defaulting to 1000 [ 197.315315][T11554] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1622'. [ 197.327319][T11483] lo speed is unknown, defaulting to 1000 [ 197.334870][T11555] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1621'. [ 197.334991][T11554] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1622'. [ 197.458597][T11555] bridge0: port 3(batadv0) entered disabled state [ 197.479379][T11555] bridge_slave_1: left allmulticast mode [ 197.486930][T11555] bridge_slave_1: left promiscuous mode [ 197.509613][T11555] bridge0: port 2(bridge_slave_1) entered disabled state [ 197.550633][T11555] bridge_slave_0: left allmulticast mode [ 197.556517][T11555] bridge_slave_0: left promiscuous mode [ 197.562319][T11555] bridge0: port 1(bridge_slave_0) entered disabled state [ 197.735623][T11566] team0: No ports can be present during mode change [ 197.812703][T11483] lo speed is unknown, defaulting to 1000 [ 198.043582][T11583] veth0_virt_wifi: entered allmulticast mode [ 198.124098][T11583] netlink: 'syz.0.1628': attribute type 1 has an invalid length. [ 198.134721][T11583] netlink: 'syz.0.1628': attribute type 1 has an invalid length. [ 198.154473][T11583] netlink: 'syz.0.1628': attribute type 2 has an invalid length. [ 198.243634][T11595] openvswitch: netlink: Missing key (keys=40, expected=100) [ 198.432715][T11483] lo speed is unknown, defaulting to 1000 [ 198.857257][T11483] lo speed is unknown, defaulting to 1000 [ 199.133157][T11483] lo speed is unknown, defaulting to 1000 [ 199.496027][T11647] 8021q: adding VLAN 0 to HW filter on device bond3 [ 199.538294][T11650] team1 (uninitialized): Failed to send options change via netlink (err -105) [ 199.646471][T11650] team1: entered promiscuous mode [ 199.690152][T11650] team1: entered allmulticast mode [ 199.772667][T11667] __nla_validate_parse: 12 callbacks suppressed [ 199.772685][T11667] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1648'. [ 199.977280][T11673] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1650'. [ 200.038748][T11677] xt_hashlimit: size too large, truncated to 1048576 [ 200.104481][T11680] netlink: 'syz.3.1653': attribute type 3 has an invalid length. [ 200.620874][T11710] syzkaller0: entered promiscuous mode [ 200.634553][T11710] syzkaller0: entered allmulticast mode [ 200.835280][T11720] team0: Device ip6gre2 is of different type [ 200.972288][T11726] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1668'. [ 201.266755][T11738] 8021q: adding VLAN 0 to HW filter on device bond4 [ 201.321865][T11750] ieee802154 phy1 wpan1: encryption failed: -22 [ 201.361278][T11745] bond4: (slave ip6gretap1): Enslaving as an active interface with an up link [ 201.374972][T11741] tipc: Enabled bearer , priority 0 [ 201.392388][T11741] syzkaller0: entered promiscuous mode [ 201.405810][T11741] syzkaller0: entered allmulticast mode [ 201.495455][T11741] tipc: Resetting bearer [ 201.567312][T11740] tipc: Resetting bearer [ 201.595034][ T5835] Bluetooth: hci2: command 0x0406 tx timeout [ 201.602174][ T5835] Bluetooth: hci3: command 0x0406 tx timeout [ 201.608314][ T52] Bluetooth: hci1: command 0x0406 tx timeout [ 201.643566][T11740] tipc: Disabling bearer [ 201.671129][T11774] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1681'. [ 201.718501][T11778] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1682'. [ 201.870568][T11785] netlink: 208 bytes leftover after parsing attributes in process `syz.2.1686'. [ 201.885274][T11787] netlink: 208 bytes leftover after parsing attributes in process `syz.2.1686'. [ 202.247935][T11810] netlink: 'syz.3.1693': attribute type 12 has an invalid length. [ 202.385393][T11816] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1695'. [ 202.440040][T11818] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1697'. [ 202.587603][T11831] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1697'. [ 202.653900][T11834] netlink: 'syz.4.1701': attribute type 1 has an invalid length. [ 203.023304][T11868] netlink: 'syz.3.1710': attribute type 1 has an invalid length. [ 203.407323][T11886] netlink: 'syz.2.1716': attribute type 2 has an invalid length. [ 203.497883][T11889] netlink: 'syz.2.1718': attribute type 1 has an invalid length. [ 203.557282][T11889] bond4: entered promiscuous mode [ 203.565282][T11889] 8021q: adding VLAN 0 to HW filter on device bond4 [ 203.795082][T11906] netlink: 'syz.2.1720': attribute type 10 has an invalid length. [ 203.816739][T11906] batman_adv: batadv0: Removing interface: team0 [ 203.918124][ C1] vcan0: j1939_tp_rxtimer: 0xffff888056389400: rx timeout, send abort [ 203.928247][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888056389400: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 204.000659][T11913] tipc: Enabling of bearer rejected, media not registered [ 204.557051][T11940] Bluetooth: MGMT ver 1.23 [ 204.750999][T11953] Bluetooth: hci0: invalid length 39, exp 2 for type 18 [ 204.754613][T11945] bond5: option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 204.777765][T11945] bond5 (unregistering): Released all slaves [ 204.942496][T11961] SET target dimension over the limit! [ 205.291895][T11981] __nla_validate_parse: 4 callbacks suppressed [ 205.291913][T11981] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1745'. [ 205.975708][T12000] batadv_slave_1: left promiscuous mode [ 205.981293][T12000] batadv_slave_1: left allmulticast mode [ 205.990062][T12000] veth0_virt_wifi: left allmulticast mode [ 206.078043][T12000] bond4: left promiscuous mode [ 206.090578][T12000] bond5: left promiscuous mode [ 206.096492][T12000] bond5: left allmulticast mode [ 206.111273][T12000] gretap1: left promiscuous mode [ 206.124549][T12000] gretap1: left allmulticast mode [ 206.140045][T12000] hsr1: left allmulticast mode [ 206.154888][T12000] bond0: left allmulticast mode [ 206.160161][T12000] bond_slave_0: left allmulticast mode [ 206.167248][T12000] bond_slave_1: left allmulticast mode [ 206.172724][T12000] geneve1: left allmulticast mode [ 206.178129][T12000] bridge0: left allmulticast mode [ 206.258274][T12006] bond5: Unable to set up delay as MII monitoring is disabled [ 206.268898][T12006] bond5 (unregistering): Released all slaves [ 206.313394][ T9] syz2: Port: 1 Link DOWN [ 206.320387][ T1011] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 206.344057][ T1011] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.363913][ T1011] netdevsim netdevsim4 netdevsim0: unset [1, 1] type 2 family 0 port 20004 - 0 [ 206.374329][ T1011] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 206.383745][ T1011] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.396503][ T1011] netdevsim netdevsim4 netdevsim1: unset [1, 1] type 2 family 0 port 20004 - 0 [ 206.516705][ T1011] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 206.536740][T12030] Can't find ip_set type hash:ip mac [ 206.566646][ T1011] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.575958][ T1011] netdevsim netdevsim4 netdevsim2: unset [1, 1] type 2 family 0 port 20004 - 0 [ 206.585454][ T1011] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 206.594820][ T1011] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.605979][ T1011] netdevsim netdevsim4 netdevsim3: unset [1, 1] type 2 family 0 port 20004 - 0 [ 206.658188][T12037] tipc: Enabling of bearer rejected, failed to enable media [ 206.839225][T12054] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.1764'. [ 207.014713][T12059] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1766'. [ 207.033639][T12063] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 207.332178][T12080] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1773'. [ 207.413994][T12085] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 207.737115][T12107] syzkaller0: entered promiscuous mode [ 207.742841][T12107] syzkaller0: entered allmulticast mode [ 207.760931][T12107] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1781'. [ 207.779574][T12107] delete_channel: no stack [ 207.898366][T12114] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1783'. [ 208.277365][T12121] tipc: Enabled bearer , priority 0 [ 208.285926][T12121] syzkaller0: entered promiscuous mode [ 208.291566][T12121] syzkaller0: entered allmulticast mode [ 208.310939][T12121] tipc: Resetting bearer [ 208.325209][T12120] tipc: Resetting bearer [ 208.359503][T12120] tipc: Disabling bearer [ 208.504612][T12131] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1789'. [ 208.696122][T12139] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1791'. [ 209.042460][T12155] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1794'. [ 209.058557][T12155] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1794'. [ 209.271762][T12161] bond5 (unregistering): Released all slaves [ 209.458141][T12170] vlan2: entered promiscuous mode [ 209.463563][T12170] bridge0: entered promiscuous mode [ 209.922434][T12212] openvswitch: netlink: IP tunnel dst address not specified [ 209.931688][T12199] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 210.313477][T12234] tipc: Enabling of bearer rejected, media not registered [ 210.333023][T12234] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 210.492745][T12239] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 210.623955][T12247] __nla_validate_parse: 3 callbacks suppressed [ 210.623974][T12247] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1822'. [ 210.639016][T12249] netlink: 'syz.2.1823': attribute type 1 has an invalid length. [ 210.674121][T12249] 8021q: adding VLAN 0 to HW filter on device bond5 [ 210.745564][T12249] bond5: (slave veth0_to_bond): making interface the new active one [ 210.770613][T12249] bond5: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 210.953587][T12261] bond4: option mode: unable to set because the bond device has slaves [ 210.964456][T12268] : renamed from bridge_slave_0 [ 211.124937][T12277] xt_TCPMSS: Only works on TCP SYN packets [ 211.130985][T12278] netlink: 1044 bytes leftover after parsing attributes in process `syz.4.1833'. [ 211.357320][T12290] ksmbd: Unknown IPC event: 3, ignore. [ 211.482961][T12300] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1840'. [ 211.548172][T12300] bond7 (unregistering): Released all slaves [ 211.718888][T12320] xfrm1: entered allmulticast mode [ 212.102871][T12339] ieee802154 phy1 wpan1: encryption failed: -22 [ 212.121399][T12339] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1851'. [ 212.290841][T12339] syzkaller1: entered promiscuous mode [ 212.323204][T12339] syzkaller1: entered allmulticast mode [ 212.509127][T12365] syzkaller1: entered promiscuous mode [ 212.518288][T12365] syzkaller1: entered allmulticast mode [ 212.828448][T12387] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1865'. [ 212.862686][T12389] sctp: [Deprecated]: syz.2.1864 (pid 12389) Use of int in maxseg socket option. [ 212.862686][T12389] Use struct sctp_assoc_value instead [ 212.899973][T12389] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 213.019835][T12397] netlink: 'syz.1.1867': attribute type 11 has an invalid length. [ 213.037172][T12397] netlink: 'syz.1.1867': attribute type 1 has an invalid length. [ 213.191502][T12407] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1869'. [ 213.191942][T12406] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1870'. [ 213.296439][T12412] netlink: 'syz.1.1872': attribute type 2 has an invalid length. [ 213.416656][T12421] netlink: 27 bytes leftover after parsing attributes in process `syz.3.1874'. [ 213.600311][T12432] netlink: 232 bytes leftover after parsing attributes in process `syz.3.1877'. [ 213.737032][T12441] netlink: 1036 bytes leftover after parsing attributes in process `syz.4.1882'. [ 213.747152][T12441] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 213.761140][T12442] netlink: 'syz.1.1879': attribute type 1 has an invalid length. [ 214.158729][T12469] syzkaller1: entered promiscuous mode [ 214.164262][T12469] syzkaller1: entered allmulticast mode [ 215.001491][T12504] netlink: 'syz.0.1902': attribute type 1 has an invalid length. [ 215.914787][T12517] __nla_validate_parse: 7 callbacks suppressed [ 215.914806][T12517] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1905'. [ 215.951598][T12517] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1905'. [ 215.968307][T12517] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1905'. [ 216.140077][T12532] syzkaller0: entered promiscuous mode [ 216.166879][T12532] syzkaller0: entered allmulticast mode [ 216.252400][T12541] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1914'. [ 216.658735][T12571] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1922'. [ 216.668205][T12571] chnl_net:caif_netlink_parms(): no params data found [ 216.820786][T12581] x_tables: duplicate underflow at hook 2 [ 216.882423][T12583] netlink: 'syz.2.1926': attribute type 1 has an invalid length. [ 216.899878][T12583] netlink: 'syz.2.1926': attribute type 1 has an invalid length. [ 216.970491][T12591] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1928'. [ 217.146170][T12606] block nbd0: Unsupported socket: should be TCP or UNIX. [ 217.225201][T12610] pim6reg1: entered promiscuous mode [ 217.230693][T12610] pim6reg1: entered allmulticast mode [ 217.289763][T12610] bond7: option mode: invalid value (10) [ 217.297977][T12610] bond7 (unregistering): Released all slaves [ 217.446111][T12618] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1935'. [ 217.683847][T12632] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1939'. [ 217.853398][T12642] netlink: 168 bytes leftover after parsing attributes in process `syz.4.1942'. [ 217.906581][T12642] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1942'. [ 218.040532][T12652] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not security [ 218.113354][T12657] netlink: 'syz.1.1946': attribute type 19 has an invalid length. [ 218.139537][T12660] veth3: entered allmulticast mode [ 218.421445][T12684] netlink: 'syz.4.1953': attribute type 1 has an invalid length. [ 218.504311][T12686] bridge0: Device is already in use. [ 218.539332][T12684] bridge0: Device is already in use. [ 219.158292][T12726] veth5: left promiscuous mode [ 219.169278][T12726] bond0: left promiscuous mode [ 219.189483][T12726] bridge1: left promiscuous mode [ 219.206000][T12726] bond5: left promiscuous mode [ 219.211619][T12726] team1: left promiscuous mode [ 219.222902][T12730] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 219.262568][T12727] syzkaller0: entered promiscuous mode [ 219.269066][T12727] syzkaller0: entered allmulticast mode [ 219.303470][T12727] netlink: 'syz.2.1966': attribute type 1 has an invalid length. [ 219.321770][T12727] netlink: 'syz.2.1966': attribute type 1 has an invalid length. [ 219.339195][T12727] netlink: 'syz.2.1966': attribute type 4 has an invalid length. [ 219.362224][T12727] NCSI netlink: No device for ifindex 830110067 [ 219.412726][T12740] team2: entered promiscuous mode [ 219.418488][T12740] team2: entered allmulticast mode [ 220.007840][T12779] IPVS: set_ctl: invalid protocol: 12 172.20.20.21:20003 [ 220.196914][T12793] team0: No ports can be present during mode change [ 220.259071][T12795] netlink: 'syz.2.1985': attribute type 15 has an invalid length. [ 220.299621][T12795] netlink: 'syz.2.1985': attribute type 15 has an invalid length. [ 220.321944][T12797] tipc: Enabled bearer , priority 0 [ 220.327171][T12806] netlink: 'syz.4.1988': attribute type 1 has an invalid length. [ 220.375870][T12797] syzkaller1: entered promiscuous mode [ 220.381385][T12797] syzkaller1: entered allmulticast mode [ 220.391581][T12798] tipc: Resetting bearer [ 220.413728][T12806] bond9: (slave bridge8): making interface the new active one [ 220.422237][T12806] bond9: (slave bridge8): Enslaving as an active interface with an up link [ 220.455195][T12808] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 220.502854][T12796] tipc: Disabling bearer [ 220.675769][T12824] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 221.071882][T12849] tipc: Cannot configure node identity twice [ 221.153505][T12853] __nla_validate_parse: 12 callbacks suppressed [ 221.153525][T12853] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2002'. [ 221.418038][T12870] 8021q: adding VLAN 0 to HW filter on device bond7 [ 221.457745][T12870] bond7: (slave veth7): Enslaving as an active interface with a down link [ 221.527514][T12870] bond7: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 221.635792][T12881] syzkaller1: entered promiscuous mode [ 221.642195][T12884] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2010'. [ 221.643482][T12881] syzkaller1: entered allmulticast mode [ 221.681919][T12884] veth3: left allmulticast mode [ 221.873220][T12895] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 221.979935][T12902] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2016'. [ 222.060705][T12906] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2018'. [ 222.107041][T12911] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2020'. [ 222.130450][T12914] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2019'. [ 222.209666][T12920] tipc: Enabled bearer , priority 0 [ 222.228955][T12921] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2022'. [ 222.286832][T12919] tipc: Disabling bearer [ 222.357947][T12933] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2027'. [ 222.464206][T12933] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2027'. [ 222.541831][T12945] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2031'. [ 223.041811][T12942] bridge_slave_0: left allmulticast mode [ 223.057494][T12942] bridge_slave_0: left promiscuous mode [ 223.063282][T12942] bridge0: port 1(bridge_slave_0) entered disabled state [ 223.079260][T12942] bond7: (slave veth0_to_bond): Releasing active interface [ 223.126584][T12942] team0: Port device team_slave_0 removed [ 223.143924][T12942] team0: Port device team_slave_1 removed [ 223.158730][T12942] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 223.176667][T12942] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 223.202420][T12942] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 223.217016][T12942] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 223.283331][T12942] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 223.347906][T12955] lo: entered promiscuous mode [ 223.354002][T12955] tunl0: entered promiscuous mode [ 223.399685][T12955] gre0: entered promiscuous mode [ 223.451737][T12955] gretap0: entered promiscuous mode [ 223.637533][T12955] ip_vti0: entered promiscuous mode [ 223.710110][T12956] validate_nla: 1 callbacks suppressed [ 223.710129][T12956] netlink: 'syz.1.2036': attribute type 1 has an invalid length. [ 223.753114][T12979] lo: entered promiscuous mode [ 223.758721][T12979] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 223.826964][T12979] xt_nat: multiple ranges no longer supported [ 223.862208][T12992] ipt_REJECT: ECHOREPLY no longer supported. [ 223.908576][T12996] x_tables: unsorted underflow at hook 2 [ 224.061420][T13007] openvswitch: netlink: IP tunnel dst address not specified [ 225.035884][ T1011] wlan0: Trigger new scan to find an IBSS to join [ 225.144228][T13065] sctp: [Deprecated]: syz.0.2067 (pid 13065) Use of struct sctp_assoc_value in delayed_ack socket option. [ 225.144228][T13065] Use struct sctp_sack_info instead [ 225.822663][T13123] netlink: 'syz.3.2084': attribute type 83 has an invalid length. [ 225.827595][T13124] netlink: 'syz.3.2084': attribute type 83 has an invalid length. [ 225.877632][T13127] netlink: 'syz.2.2085': attribute type 39 has an invalid length. [ 225.927716][T13137] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 226.225765][T13155] netlink: 'syz.1.2090': attribute type 2 has an invalid length. [ 226.240548][T13154] netlink: 'syz.3.2091': attribute type 11 has an invalid length. [ 226.316962][T13148] syz.4.2089 (13148) used greatest stack depth: 17832 bytes left [ 226.519124][T13175] __nla_validate_parse: 20 callbacks suppressed [ 226.519143][T13175] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2099'. [ 226.538994][T13176] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2096'. [ 226.573649][T13176] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2096'. [ 226.729248][T13189] netlink: 'syz.4.2103': attribute type 19 has an invalid length. [ 226.734996][T13173] netlink: 'syz.1.2098': attribute type 83 has an invalid length. [ 227.002386][T13196] netlink: 388 bytes leftover after parsing attributes in process `syz.0.2105'. [ 227.102528][ T5839] Bluetooth: hci4: link tx timeout [ 227.109120][ T5839] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 227.239580][T13215] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2110'. [ 227.282627][T13215] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2110'. [ 227.303800][T13215] bridge0: port 3(vlan2) entered blocking state [ 227.310473][T13215] bridge0: port 3(vlan2) entered disabled state [ 227.341238][T13220] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2113'. [ 227.351868][T13215] vlan2: entered allmulticast mode [ 227.376480][T13215] bridge0: entered allmulticast mode [ 227.409065][T13215] vlan2: left allmulticast mode [ 227.413969][T13215] bridge0: left allmulticast mode [ 227.607450][T13236] netlink: 256 bytes leftover after parsing attributes in process `syz.1.2119'. [ 227.787564][T13253] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 227.933563][T13239] lo speed is unknown, defaulting to 1000 [ 227.982886][T13261] netlink: 'syz.4.2125': attribute type 1 has an invalid length. [ 228.284436][T13272] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2129'. [ 228.285585][T13273] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2129'. [ 228.420963][T13275] netlink: 'syz.0.2130': attribute type 29 has an invalid length. [ 228.948471][T13292] netlink: 'syz.3.2135': attribute type 178 has an invalid length. [ 229.136792][T13295] "syz.3.2135" (13295) uses obsolete ecb(arc4) skcipher [ 229.196950][ T5830] Bluetooth: hci4: command 0x0405 tx timeout [ 229.265568][T13324] tipc: Enabled bearer , priority 0 [ 229.274952][T13325] netlink: 'syz.0.2144': attribute type 11 has an invalid length. [ 229.294749][T13325] netlink: 'syz.0.2144': attribute type 11 has an invalid length. [ 229.316052][T13324] tipc: Disabling bearer [ 229.330533][T13325] netlink: 'syz.0.2144': attribute type 11 has an invalid length. [ 229.339912][T13325] netlink: 'syz.0.2144': attribute type 11 has an invalid length. [ 229.349098][T13325] netlink: 'syz.0.2144': attribute type 11 has an invalid length. [ 229.357763][T13325] netlink: 'syz.0.2144': attribute type 11 has an invalid length. [ 229.370474][T13325] netlink: 'syz.0.2144': attribute type 11 has an invalid length. [ 229.379501][T13325] netlink: 'syz.0.2144': attribute type 11 has an invalid length. [ 229.388027][T13325] netlink: 'syz.0.2144': attribute type 11 has an invalid length. [ 229.462418][T13337] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 229.570817][T13343] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 229.996038][ T36] wlan0: Trigger new scan to find an IBSS to join [ 230.477576][T13417] xt_l2tp: invalid flags combination: 0 [ 230.700239][T13431] tipc: Enabled bearer , priority 0 [ 230.721157][T13431] syzkaller0: entered promiscuous mode [ 230.733431][T13431] syzkaller0: entered allmulticast mode [ 230.759372][T13434] xt_recent: hitcount (4294901760) is larger than allowed maximum (65535) [ 230.835508][T13440] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 230.876634][T13430] tipc: Resetting bearer [ 230.936209][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 230.969350][T13430] tipc: Disabling bearer [ 231.083288][T13453] syz_tun: entered allmulticast mode [ 231.445774][ T36] smc: removing ib device syz2 [ 231.727096][T13496] Can't find ip_set type [ 231.941451][T13513] __nla_validate_parse: 17 callbacks suppressed [ 231.941471][T13513] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2208'. [ 231.985670][T13518] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 232.083406][T13525] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2210'. [ 232.124891][T13525] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2210'. [ 232.302629][T13540] lo speed is unknown, defaulting to 1000 [ 232.526155][T13549] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2218'. [ 232.588984][ C0] vcan0: j1939_session_tx_dat: 0xffff8880597cb400: queue data error: -100 [ 232.598140][ C0] vcan0 (unregistering): j1939_xtp_rx_dpo: no connection found [ 232.605749][ C0] vcan0 (unregistering): j1939_xtp_rx_dpo: no connection found [ 232.613429][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 232.621310][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 232.629290][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 232.637142][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 232.645108][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 232.652937][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 232.660896][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 232.668754][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 232.676745][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 232.684600][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 232.692538][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 232.700434][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 232.708392][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 232.716277][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 232.724221][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 232.732185][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 232.740147][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 232.748025][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 232.755999][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 232.763917][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 232.771892][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 232.779752][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 232.787723][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 232.795578][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 232.803516][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 232.811389][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 232.819428][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 232.827314][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 232.835266][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 232.843267][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 232.851241][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 232.859097][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 232.867117][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 232.874960][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 232.882971][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 232.890853][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 232.898821][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 232.906696][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 232.914642][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 232.922475][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 232.930873][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 232.938738][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 232.946706][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 232.954550][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 232.962487][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 232.970359][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 232.978320][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 232.986210][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 232.994128][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 233.001990][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 233.009930][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 233.017798][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 233.025748][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 233.033578][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 233.041565][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 233.049419][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 233.057512][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 233.065363][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 233.073295][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 233.081368][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 233.089334][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 233.097210][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 233.105155][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 233.112983][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 233.120973][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 233.128847][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 233.136830][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 233.144686][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 233.152604][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 233.160559][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 233.168510][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 233.176395][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 233.184430][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 233.192257][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 233.200229][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 233.208091][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 233.216061][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 233.223888][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 233.231861][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 233.239699][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 233.247630][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 233.255485][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 233.263393][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 233.271239][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 233.279246][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 233.287107][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 233.295097][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 233.302933][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 233.310884][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 233.318726][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 233.326661][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 233.334507][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 233.342380][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 233.350211][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 233.358116][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 233.365956][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 233.373882][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 233.381740][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 233.389646][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 233.397481][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 233.405537][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 233.413364][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 233.421350][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 233.429184][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 233.437116][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 233.445481][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 233.453348][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 233.461207][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 233.469124][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 233.476994][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 233.484924][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 233.492726][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 233.500679][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 233.508517][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 233.516456][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 233.524382][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 233.532561][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 233.540434][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 233.548427][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 233.556793][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 233.564739][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 233.572570][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 233.580592][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 233.588453][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 233.596488][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 233.604303][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 233.613662][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 233.621525][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 233.629464][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 233.637302][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 233.645222][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 233.653040][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 233.661027][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 233.668889][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 233.676854][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 233.684704][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 233.692665][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 233.700557][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 233.708567][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 233.716407][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 233.724509][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 233.732338][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 233.740277][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 233.748112][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 233.756041][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 233.763883][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 233.771805][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 233.779736][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 233.787747][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 233.795684][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 233.803603][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 233.811544][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 233.819443][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 233.827326][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 233.835262][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 233.843121][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 233.851089][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 233.858923][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 233.866837][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 233.874669][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 233.882556][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 233.890403][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 233.898309][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 233.906170][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 233.914093][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 233.922226][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 233.930440][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 233.938282][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 233.946199][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 233.954012][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 233.961943][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 233.969776][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 233.977708][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 233.985715][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 233.993578][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 234.001435][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 234.009343][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 234.017277][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 234.025210][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 234.033034][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 234.041032][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 234.048899][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 234.056843][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 234.064691][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 234.072572][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 234.080417][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 234.088324][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 234.096169][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 234.104047][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 234.111885][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 234.119805][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 234.127653][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 234.135599][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 234.143413][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 234.151335][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 234.159176][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 234.167239][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 234.175179][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 234.183095][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 234.190965][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 234.198859][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 234.206689][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 234.214636][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 234.222445][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 234.230366][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 234.238207][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 234.246165][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 234.254007][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 234.261979][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 234.269824][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 234.277743][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 234.285573][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 234.293563][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 234.301474][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 234.309412][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 234.317287][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 234.325235][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 234.333066][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 234.341022][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 234.348866][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 234.356831][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 234.364682][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 234.372558][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 234.380387][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 234.388284][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 234.396136][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 234.404048][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 234.411896][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 234.419872][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 234.427710][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 234.435698][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 234.443521][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 234.451474][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 234.459346][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 234.467243][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 234.475149][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 234.483045][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 234.490894][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 234.498813][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 234.506651][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 234.514600][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 234.522421][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 234.530364][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 234.538286][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 234.546236][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 234.554075][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 234.562025][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 234.569885][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 234.577855][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 234.585714][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 234.593629][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 234.601490][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 234.609384][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 234.617943][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 234.664446][T13552] validate_nla: 28 callbacks suppressed [ 234.664467][T13552] netlink: 'syz.2.2219': attribute type 2 has an invalid length. [ 234.723286][T13563] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2222'. [ 234.839682][T13569] netlink: 244 bytes leftover after parsing attributes in process `syz.3.2222'. [ 234.868681][T13560] lo speed is unknown, defaulting to 1000 [ 235.967886][T13585] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2229'. [ 236.116250][T13594] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2232'. [ 236.131422][T13594] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2232'. [ 236.150603][T13594] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2232'. [ 236.349741][T13603] Oops: stack segment: 0000 [#1] SMP KASAN PTI [ 236.355964][T13603] CPU: 1 UID: 0 PID: 13603 Comm: syz.2.2236 Not tainted syzkaller #0 PREEMPT(full) [ 236.365344][T13603] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 236.375388][T13603] RIP: 0010:kernfs_rename_ns+0x3a/0x7a0 [ 236.380927][T13603] Code: ec 48 48 89 cb 48 89 54 24 10 49 89 f5 49 89 fe 49 bc 00 00 00 00 00 fc ff df e8 51 3a 5f ff 4d 8d 7e 30 4c 89 fd 48 c1 ed 03 <42> 80 7c 25 00 00 74 08 4c 89 ff e8 66 d8 c4 ff 49 83 3f 00 0f 84 [ 236.400518][T13603] RSP: 0018:ffffc9001bb877c0 EFLAGS: 00010206 [ 236.406587][T13603] RAX: ffffffff826059af RBX: 0000000000000000 RCX: ffff888057085ac0 [ 236.414557][T13603] RDX: 0000000000000000 RSI: ffff88801f295780 RDI: 0000000000000000 [ 236.422510][T13603] RBP: 0000000000000006 R08: ffff888057085ac0 R09: 0000000000000008 [ 236.430462][T13603] R10: 0000000000000007 R11: 0000000000000000 R12: dffffc0000000000 [ 236.438432][T13603] R13: ffff88801f295780 R14: 0000000000000000 R15: 0000000000000030 [ 236.446383][T13603] FS: 0000000000000000(0000) GS:ffff888125e0f000(0000) knlGS:0000000000000000 [ 236.455293][T13603] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 236.461874][T13603] CR2: 000000110c2804ac CR3: 0000000025d04000 CR4: 00000000003526f0 [ 236.469930][T13603] Call Trace: [ 236.473198][T13603] [ 236.476117][T13603] ? trace_kmalloc+0x1f/0xd0 [ 236.480705][T13603] kobject_move+0x3a5/0x4f0 [ 236.485219][T13603] ? __pfx_kobject_move+0x10/0x10 [ 236.490230][T13603] ? do_raw_spin_unlock+0x122/0x240 [ 236.495422][T13603] ? get_device_parent+0x366/0x3a0 [ 236.500531][T13603] device_move+0xe0/0x700 [ 236.504848][T13603] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 236.510833][T13603] hci_conn_del_sysfs+0xb8/0x170 [ 236.515773][T13603] hci_conn_del+0xc33/0x11b0 [ 236.520358][T13603] hci_conn_hash_flush+0x191/0x230 [ 236.525561][T13603] hci_dev_close_sync+0xaef/0x1330 [ 236.530669][T13603] ? __pfx_hci_dev_close_sync+0x10/0x10 [ 236.536393][T13603] ? up_write+0x1c4/0x420 [ 236.540747][T13603] hci_unregister_dev+0x21a/0x510 [ 236.546202][T13603] vhci_release+0x152/0x1a0 [ 236.550708][T13603] ? __pfx_vhci_release+0x10/0x10 [ 236.555730][T13603] __fput+0x449/0xa70 [ 236.559715][T13603] task_work_run+0x1d4/0x260 [ 236.564304][T13603] ? __pfx_task_work_run+0x10/0x10 [ 236.569437][T13603] ? do_exit+0x6b0/0x2300 [ 236.573784][T13603] ? kmem_cache_free+0x19b/0x690 [ 236.578715][T13603] do_exit+0x6b5/0x2300 [ 236.582861][T13603] ? preempt_schedule+0xae/0xc0 [ 236.587708][T13603] ? preempt_schedule_common+0x83/0xd0 [ 236.593155][T13603] ? preempt_schedule+0xae/0xc0 [ 236.598037][T13603] ? __pfx_preempt_schedule+0x10/0x10 [ 236.603417][T13603] ? __pfx_do_exit+0x10/0x10 [ 236.608013][T13603] ? preempt_schedule_thunk+0x16/0x30 [ 236.613395][T13603] do_group_exit+0x21c/0x2d0 [ 236.618000][T13603] __x64_sys_exit_group+0x3f/0x40 [ 236.623021][T13603] x64_sys_call+0x21f7/0x2200 [ 236.627689][T13603] do_syscall_64+0xfa/0xfa0 [ 236.632198][T13603] ? lockdep_hardirqs_on+0x9c/0x150 [ 236.637383][T13603] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 236.643436][T13603] ? clear_bhb_loop+0x60/0xb0 [ 236.648100][T13603] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 236.653984][T13603] RIP: 0033:0x7f94f238eec9 [ 236.658388][T13603] Code: Unable to access opcode bytes at 0x7f94f238ee9f. [ 236.665405][T13603] RSP: 002b:00007ffd8f189d68 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 236.673806][T13603] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f94f238eec9 [ 236.681767][T13603] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000 [ 236.689732][T13603] RBP: 00007ffd8f189dcc R08: 0000000c8f189e5f R09: 00000000000927c0 [ 236.697689][T13603] R10: 0000000000000001 R11: 0000000000000246 R12: 00000000000001bf [ 236.705646][T13603] R13: 00000000000927c0 R14: 0000000000039a72 R15: 00007ffd8f189e20 [ 236.713618][T13603] [ 236.716623][T13603] Modules linked in: [ 236.722179][T13603] ---[ end trace 0000000000000000 ]--- [ 236.732853][T13603] RIP: 0010:kernfs_rename_ns+0x3a/0x7a0 [ 236.739307][T13603] Code: ec 48 48 89 cb 48 89 54 24 10 49 89 f5 49 89 fe 49 bc 00 00 00 00 00 fc ff df e8 51 3a 5f ff 4d 8d 7e 30 4c 89 fd 48 c1 ed 03 <42> 80 7c 25 00 00 74 08 4c 89 ff e8 66 d8 c4 ff 49 83 3f 00 0f 84 [ 236.759599][T13603] RSP: 0018:ffffc9001bb877c0 EFLAGS: 00010206 [ 236.766127][T13603] RAX: ffffffff826059af RBX: 0000000000000000 RCX: ffff888057085ac0 [ 236.774212][T13603] RDX: 0000000000000000 RSI: ffff88801f295780 RDI: 0000000000000000 [ 236.782587][T13603] RBP: 0000000000000006 R08: ffff888057085ac0 R09: 0000000000000008 [ 236.791144][T13603] R10: 0000000000000007 R11: 0000000000000000 R12: dffffc0000000000 [ 236.799513][T13603] R13: ffff88801f295780 R14: 0000000000000000 R15: 0000000000000030 [ 236.808358][T13603] FS: 0000000000000000(0000) GS:ffff888125e0f000(0000) knlGS:0000000000000000 [ 236.818487][T13603] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 236.825359][T13603] CR2: 000000110c2804ac CR3: 000000007b96e000 CR4: 00000000003526f0 [ 236.833423][T13603] Kernel panic - not syncing: Fatal exception [ 236.839616][T13603] Kernel Offset: disabled [ 236.843936][T13603] Rebooting in 86400 seconds..