last executing test programs: 38.673607162s ago: executing program 2 (id=5464): bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x4, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000073013f00000000009500000000000000a98609bd4287c4309082e7201323aaf25ae9c5fa05483ff493be39d122e0e19ce2114611b6b521e97f5a7035ee907c35747c72fd58e659ad12103aa35900e708e803371b3ff5ef9294d2dbf62e093b6c3a370ff205d6ef4c16b7bd8f1fda0f0fcdf89be5e2766ef6be8ed8a5d7b56a65599ff1da"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 38.583323706s ago: executing program 2 (id=5466): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, '\x00', [{0x0, 0x4, 0x7fff, 0x3, 0x0, 0x3}, {0xd, 0x5, 0x6, 0xfffffffffffffff8, 0x11, 0x2}], ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r2, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB, @ANYRES64=r1], 0x20, 0x4054000}, 0x4040884) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000006c0)={0x14, 0x0, 0x1, 0x70bd28}, 0x14}}, 0x4000080) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_emit_ethernet(0xfdef, &(0x7f0000000600)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0xfde1, 0x0, 0x2000, 0xfd, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x20, 0x2}}}}}}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8b05, 0x0) close(r4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, &(0x7f0000000040)=@gcm_256={{0x304, 0x36}, "1a88ef816c4b42ed", "a5fdeb69a751e94df50ad7e9fb434d1665e9298b01e49419567b443803cf578f", "6d02cd81", "066580001e00"}, 0x38) write$tun(r4, &(0x7f0000000cc0)={@val={0x0, 0x16}, @void, @x25={0x2, 0x3, 0x27, "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"}}, 0x1004) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r6, 0x84, 0xc, &(0x7f0000000000), 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e21, @rand_addr=0x64010101}]}, &(0x7f00000000c0)=0x10) getsockopt$sock_buf(r6, 0x1, 0x1c, 0x0, &(0x7f0000000040)=0xfc) setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="00d9754dbfb4c9d053a5b438d49548fa3cb480bc2f", @ANYRESHEX=r3, @ANYRES64], 0x8) connect$inet6(r3, &(0x7f00000003c0)={0xa, 0xfffe, 0x3000000, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000240)='bridge0\x00', 0x10) socket$inet_udplite(0x2, 0x2, 0x88) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) r8 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000240)={'vxcan1\x00', 0x0}) bind$can_j1939(r8, &(0x7f0000000180)={0x1d, r9, 0x0, {0x0, 0x0, 0x1}, 0x2}, 0x18) sendmsg$can_j1939(r8, &(0x7f0000000040)={&(0x7f00000000c0)={0x1d, 0x0, 0x0, {0x0, 0x1ee, 0x2}}, 0x18, &(0x7f00000004c0)={0x0}}, 0x0) 37.645078481s ago: executing program 2 (id=5484): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r0, &(0x7f0000013c00)={0x0, 0x0, &(0x7f0000013bc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001b140100000000000d000000080004"], 0x28}, 0x1, 0x0, 0x0, 0x4855}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000ec0)={'batadv0\x00', 0x0}) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)={0x1c, r3, 0x303, 0x0, 0xfffffffc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8001}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x1, 0x2, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x3, 0x0, 0x7, 0x67}, @exit], &(0x7f00000000c0)='syzkaller\x00'}, 0x94) 37.468637857s ago: executing program 2 (id=5486): r0 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$int_out(r0, 0x5460, &(0x7f0000000000)) (async) ioctl$BTRFS_IOC_QUOTA_CTL(r0, 0xc0109428, &(0x7f0000000040)={0x1, 0x6}) (async) r1 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000080)=""/125, 0x7d, 0x1, &(0x7f0000000100)=""/11, 0xb}, &(0x7f0000000180)=0x40) (async) r2 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r2, &(0x7f00000001c0)="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", 0xff, 0x880, &(0x7f00000002c0)={0x2, 0x4e24, @loopback}, 0x10) (async) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x1, &(0x7f0000000300)=0x7, 0x8) (async) getpeername$inet(r2, &(0x7f0000000340)={0x2, 0x0, @dev}, &(0x7f0000000380)=0x10) (async) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r1, &(0x7f00000003c0)) (async) epoll_pwait(r3, &(0x7f0000000400)=[{}, {}, {}, {}], 0x4, 0x1, &(0x7f0000000440)={[0x2c21]}, 0x8) (async) r4 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) ioctl$NS_GET_OWNER_UID(r4, 0xb704, &(0x7f0000000480)=0x0) r6 = socket(0x22, 0x2, 0x1) setsockopt$inet6_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f00000004c0), 0x4) (async) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000001900)={0x0, 0x0, 0x0}, &(0x7f0000001940)=0xc) (async) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000001980)={0x0, 0x0, 0x0}, &(0x7f00000019c0)=0xc) (async) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000001a00)=0x0) (async) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000001a40)={0x0, 0x0, 0x0}, &(0x7f0000001a80)=0xc) sendmsg$netlink(r6, &(0x7f0000001b40)={&(0x7f0000000500)=@kern={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000018c0)=[{&(0x7f0000000540)={0x24, 0x42, 0x8, 0x70bd25, 0x25dfdbfd, "", [@typed={0x14, 0x58, 0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}, 0x24}, {&(0x7f0000000580)={0xb4, 0x12, 0x10a, 0x70bd28, 0x25dfdbfd, "", [@typed={0x14, 0x3, 0x0, 0x0, @ipv6=@private0={0xfc, 0x0, '\x00', 0x1}}, @nested={0x8e, 0xe4, 0x0, 0x1, [@typed={0x4, 0x76}, @generic="03ce9bad3e087520c6fad493429d2092", @typed={0x8, 0xbf, 0x0, 0x0, @uid=r5}, @typed={0x8, 0xde, 0x0, 0x0, @ipv4=@loopback}, @typed={0x14, 0x51, 0x0, 0x0, @ipv6=@private2}, @generic="fbc577fdade4ebc563926aaedd25bec50c1d63dfaea68634e0b36625a25f6ccfde7944599ee125a1a24fe4ef535ee83d887dd7578abb976b0ab67a38647671d44ff482a1a34b6048512d2ff44d4d06cef75e"]}]}, 0xb4}, {&(0x7f0000000640)={0x123c, 0x32, 0x400, 0x70bd27, 0x25dfdbfe, "", [@typed={0xb, 0x27, 0x0, 0x0, @str='\x12%{)!-\x00'}, @generic="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", @generic="2475ae71", @nested={0x166, 0xa5, 0x0, 0x1, [@nested={0x4, 0xa9}, @typed={0x8, 0x8c, 0x0, 0x0, @u32=0x58}, @generic="f58366e727747b80ea3c93565f40ebdb8e7bbe9bc9f4471d4013b49389084ff864eb58f9c9737613670adb097189c87cf321209f3ecf97c3b7f5307bee41a57a3a8ceaf03d62865d198321bbe40ec99a1f6b0d62e5f1767ce4f8ba80701e1033d40c9b44e4b3a8ec4f2bbb082e4b20e2c1fb36d0fb137da342d7466da151fde8b2bf2dce66d475793855426b", @generic="8a516ffe3da6b39b570638c956fabd2005cae2de8614b4d9bdd9e5bd69311001", @typed={0x8, 0x59, 0x0, 0x0, @fd=r0}, @generic="3e4d0e974a9deec103cb2e30e8e62943c2604a67d668ee9dd51d62f8c8e9e11dad6f44275f1c982bd0699955c968332d09de349579d040aaba192c87d6fa36a87ffe14415d350b0ee82447d2de52527dfeaca62097739d1a222c5a99d9a93003782cf1a92ce3b6097db18a67f25272f854d2136a2fc90a4069657ee07a2e8b6417101ccfb6f617f489a6f17069396504ef96", @nested={0x4, 0xf5}, @typed={0x4, 0xd8}, @typed={0x8, 0x10b, 0x0, 0x0, @ipv4=@loopback}]}, @typed={0x8, 0x9b, 0x0, 0x0, @u32=0x80}, @generic="b8866e03d5f0871ca6df2e7596b50df4cfc24bc70459e78d83ab8e83f28fbae9ffc8615ed57f36096777cc19e67e3d90ae7ace7bd2573b755b433e759e91470fc365c81bda2a549be7e6d59aca789a4338c39445fbc62e48cbf91035c5e5ece5154f3897b67ecbded3a4d48ab5898a14323d57baba5139890b092d5484afcf39fbc4d08d08b35deac8d826d3d931be387306f1095e2a64f6cf55dac70630ab432d9fe3ad", @typed={0x8, 0x124, 0x0, 0x0, @ipv4=@rand_addr=0x64010102}]}, 0x123c}, {&(0x7f0000001880)={0x10, 0x2b, 0x300, 0x70bd26, 0x25dfdbfe}, 0x10}], 0x4, &(0x7f0000001ac0)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r5, r7}}}, @cred={{0x1c, 0x1, 0x2, {0x0, r5, r8}}}, @cred={{0x1c, 0x1, 0x2, {r9, r5, r10}}}], 0x60, 0x40040}, 0xc5) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, &(0x7f0000001b80)=0x8, 0x4) (async) getsockopt$sock_buf(r0, 0x1, 0x3b, &(0x7f0000001bc0)=""/226, &(0x7f0000001cc0)=0xe2) (async) getsockopt(r1, 0x2, 0x9b, &(0x7f0000001d00)=""/248, &(0x7f0000001e00)=0xf8) r11 = syz_init_net_socket$rose(0xb, 0x5, 0x0) accept4(r11, &(0x7f0000001e40)=@phonet, &(0x7f0000001ec0)=0x80, 0x80400) r12 = accept$inet(r2, 0x0, &(0x7f0000001f00)) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r12, 0x84, 0x6b, &(0x7f0000001f40)=[@in={0x2, 0x4e24, @remote}, @in6={0xa, 0x4e23, 0x9, @private0, 0x1ff}], 0x2c) socket$inet(0x2, 0x1, 0x9) 37.26407386s ago: executing program 2 (id=5489): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000040)=ANY=[], 0x1c}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)={0x4c, r2, 0x1, 0x70bd2a, 0x25dfdbff, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0xffffffffffffff23, 0xb, 0x9}, {0x6, 0x11, 0xffff}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x40800) sendmsg$DEVLINK_CMD_SB_POOL_SET(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0xcc, r2, 0x20, 0x70bd2a, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0x6, 0x11, 0x8}, {0x8, 0x13, 0x8}, {0x5, 0x14, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x2}, {0x6, 0x11, 0xa}, {0x8, 0x13, 0xb}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x8}, {0x6, 0x11, 0xffff}, {0x8, 0x13, 0x5}, {0x5}}]}, 0xcc}, 0x1, 0x0, 0x0, 0x20000}, 0x20008000) 37.050495512s ago: executing program 2 (id=5493): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001580)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x90, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x68, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xf}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x94}]}}}, {0x30, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_MASK={0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x104}}, 0x0) recvfrom(r0, &(0x7f00000000c0)=""/231, 0xe7, 0x80000002, &(0x7f0000000240)=@ethernet={0x6, @local}, 0x80) syz_emit_ethernet(0x20, &(0x7f0000000240)={@multicast, @remote, @void, {@llc_tr={0x11, {@snap={0xaa, 0x0, "0f", "b30800", 0x8828, "ed2810b6294bab4e2bbd"}}}}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x66772}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b0400000000000000000200fffe2c0004802800018007000100637400001c0002800800014000000002080002400000001405000300000000000900010073797a30000000000900020073797a320000000014da00000011000100"/128], 0x80}}, 0x24004800) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x7, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x100}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r5 = socket(0x14, 0x2, 0x4) socket$inet_tcp(0x2, 0x1, 0x0) connect$unix(r5, &(0x7f00000002c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e) ioctl$sock_SIOCGIFINDEX(r5, 0x61d8, 0x0) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000180)={0x4000}, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="200000002200010a"], 0x20}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x16, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="7a0a00ff0000002871104e000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x90) 21.389042156s ago: executing program 32 (id=5493): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001580)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x90, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x68, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xf}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x94}]}}}, {0x30, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_MASK={0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x104}}, 0x0) recvfrom(r0, &(0x7f00000000c0)=""/231, 0xe7, 0x80000002, &(0x7f0000000240)=@ethernet={0x6, @local}, 0x80) syz_emit_ethernet(0x20, &(0x7f0000000240)={@multicast, @remote, @void, {@llc_tr={0x11, {@snap={0xaa, 0x0, "0f", "b30800", 0x8828, "ed2810b6294bab4e2bbd"}}}}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x66772}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b0400000000000000000200fffe2c0004802800018007000100637400001c0002800800014000000002080002400000001405000300000000000900010073797a30000000000900020073797a320000000014da00000011000100"/128], 0x80}}, 0x24004800) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x7, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x100}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r5 = socket(0x14, 0x2, 0x4) socket$inet_tcp(0x2, 0x1, 0x0) connect$unix(r5, &(0x7f00000002c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e) ioctl$sock_SIOCGIFINDEX(r5, 0x61d8, 0x0) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000180)={0x4000}, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="200000002200010a"], 0x20}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x16, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="7a0a00ff0000002871104e000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x90) 2.489906689s ago: executing program 0 (id=5963): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes128\x00'}, 0x58) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000040)='cdg\x00', 0x4) getsockopt$inet_tcp_buf(r1, 0x6, 0x1c, &(0x7f00000002c0)=""/222, &(0x7f0000000080)=0xde) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet(r1, &(0x7f0000000280)={0x2, 0x0, @dev}, 0x10) close(r1) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x4e24, @broadcast}, 0x10) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) 2.488732088s ago: executing program 0 (id=5964): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000240)=[@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}], 0x1c) (async) setsockopt(r0, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8) ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f00000000c0)) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0xc0c89425, &(0x7f00000002c0)={"e0dd8d5dd05ee72eb4e4938f775a2a43", 0x0, 0x0, {0x1, 0x8}, {0x9, 0x7c6}, 0x6, [0x7, 0x401, 0x2, 0x8000, 0x10001, 0x6, 0x2, 0x6, 0x7, 0x7ff, 0xfffffffffffffff9, 0x9, 0xe, 0x0, 0x4, 0x400]}) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) (async) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x24, r4, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x24}}, 0x0) (async) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) (async) bind$inet6(r5, &(0x7f0000000140)={0xa, 0x4e22, 0xfffffffd, @empty}, 0x1c) (async) listen(r5, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000200)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x66, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010100, @broadcast}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0xfffe}}}}}}, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="4c1b00001004fe0309310f696998030504000000", @ANYRES32=0x0, @ANYBLOB="04000400204c00002c00128008000100677470002000028014000800fc0100000000000000000000000000010500050000000000"], 0x4c}}, 0x24048020) 2.308018478s ago: executing program 0 (id=5969): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x100200, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000040)={r0, 0xffffffffffffff55, 0x5, 0x2}) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@func_proto={0x2, 0x0, 0x0, 0x13, 0x2}]}, {0x0, [0x0, 0x2e]}}, 0x0, 0x28, 0x0, 0x0, 0x400}, 0x28) r3 = socket$kcm(0x10, 0x2, 0x0) recvmsg(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000980)=""/4061, 0xfdd}, {&(0x7f0000001980)=""/4073, 0xfe9}, {&(0x7f0000000700)=""/234, 0xea}, {&(0x7f00000002c0)=""/213, 0xd5}, {&(0x7f0000000040)=""/50, 0x32}, {&(0x7f00000000c0)=""/67, 0x43}], 0x6}, 0x100) sendmsg$inet(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000900)="5c00000012006bab9a3fe3d86e17aa0a046b4877c4aaf68187bae53dca2ba35bda6a876c1d0048007ea608649e7524765f0ef82e3c0000a705259a3651f60a84c9f4d4938037e70e4509c5bb00000000e513aeac9bf2bee150d5fe86", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x20000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x200000, 0x10, &(0x7f00000003c0), 0x10}, 0x90) ioctl$TUNGETFEATURES(r1, 0x800454cf, &(0x7f0000000080)) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)={0x20, 0x2d, 0x1, 0x70bd26, 0x25dfdbfc, {0x4}, [@typed={0xc, 0xc, 0x0, 0x0, @u64=0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x4000804) 1.736279687s ago: executing program 0 (id=5976): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x28, 0x3b, 0x107, 0x0, 0x0, {0x1, 0x7c}, [@typed={0x4}, @nested={0x4, 0x1}, @nested={0x9, 0x2, 0x0, 0x1, [@generic="8d437a5771"]}]}, 0x28}}, 0xc000) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000a80), 0xffffffffffffffff) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@bloom_filter={0x1e, 0x91, 0x5bb6, 0xb3a7, 0xc00, 0x1, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5, 0x2, 0x2}, 0x50) (async) r2 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000080)={'vxcan1\x00', 0x0}) connect$can_bcm(r2, &(0x7f0000000040)={0x1d, r3}, 0x10) (async) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000800)={&(0x7f0000000600)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x6c, 0x6c, 0x8, [@fwd={0x5}, @const={0xa, 0x0, 0x0, 0xa, 0x5}, @enum={0xf, 0x6, 0x0, 0x6, 0x4, [{0x2, 0x4}, {0xe, 0x7c65}, {0x9, 0x9}, {0x10, 0x401}, {0x4, 0x8}, {0x10, 0x3}]}, @fwd={0x1}, @typedef={0xb, 0x0, 0x0, 0x8, 0x3}]}, {0x0, [0x30, 0x61, 0x0, 0x61, 0x61, 0x30]}}, &(0x7f0000000780)=""/121, 0x8c, 0x79, 0x0, 0x4}, 0x28) (async) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000003000000000000000000000095"], &(0x7f00000001c0)='syzkaller\x00'}, 0x94) r6 = socket$packet(0x11, 0x3, 0x300) (async) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r8, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) setsockopt$SO_TIMESTAMPING(r8, 0x1, 0x25, &(0x7f00000002c0)=0x7b73, 0x4) recvmmsg(r8, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) (async) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x5c, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x6}, @IPSET_ATTR_PORT={0x6}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}]}, 0x5c}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000040)={0x101, 0x0}, 0x8) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r5, r9, 0x25, 0x4, @val=@tracing={r10, 0x9}}, 0xe) (async) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000880)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x800, '\x00', r3, r4, 0x6, 0x2, 0x2}, 0x50) r11 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="0300000004000000040000000a000000f0000000", @ANYRES32, @ANYBLOB="0500"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="05000000010000000200"/28], 0x50) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000980)={0x1, 0xffffffffffffffff}, 0x4) r13 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000009c0)={0x0, 0x0, 0x10}, 0xc) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000ac0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000a00), &(0x7f0000000a40)='%pi6 \x00'}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000b80)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000b40)='%+9llu \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x1d, 0x5, &(0x7f00000004c0)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @map_fd={0x18, 0x3, 0x1, 0x0, r1}], &(0x7f0000000500)='syzkaller\x00', 0x81, 0xac, &(0x7f0000000540)=""/172, 0x41100, 0x3b, '\x00', r9, @fallback=0x33, r4, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000840)={0x3, 0xb, 0x101, 0xb}, 0x10, r10, r5, 0x0, &(0x7f0000000280)=[r14, r11, r12, r13, r15, r15, 0xffffffffffffffff, r15], 0x0, 0x10, 0xfffffff6}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) (async) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000b4e61406c1c8360651ebff7633174c7aa42e959a13bf420bf2f763c69ac2b174c39443d1f68ba77fe287289ad5711cada7"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) 1.655928543s ago: executing program 0 (id=5979): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000240), 0x10) clock_gettime(0x2, &(0x7f0000000180)={0x0}) sendmsg$can_bcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="05000000010400"/16, @ANYRES64=r1, @ANYRESHEX, @ANYRES32, @ANYRES16, @ANYBLOB="0000004001"], 0x48}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r3, &(0x7f0000001740)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000080)='o', 0x1}], 0x1}}], 0x1, 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000400)=@getchain={0x24, 0x66, 0x0, 0x0, 0x2000}, 0x24}}, 0x0) getsockname$packet(r4, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x48, 0x10, 0x401, 0x0, 0x1, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @mcast2}]}}}]}, 0x48}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x60, 0x10, 0x401, 0x0, 0x100, {0x0, 0x0, 0x0, r6, 0x100, 0xac}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x30, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_SPORT={0x6, 0x11, 0x4e20}, @IFLA_IPTUN_REMOTE={0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, @IFLA_IPTUN_ENCAP_DPORT={0x6, 0x12, 0x4e24}, @IFLA_IPTUN_ENCAP_LIMIT={0x5, 0x6, 0x7}]}}}]}, 0x60}}, 0xeb64d656001b2f26) setsockopt(r3, 0x84, 0x7f, &(0x7f0000000040)="010000000980ffff", 0x8) r7 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r7, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r2, {0x2, 0x0, @broadcast}, 0x2}}, 0x2e) r8 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) listen(r8, 0x0) ioctl$int_in(r8, 0x5421, &(0x7f0000000000)=0x9) accept$ax25(r8, 0x0, 0x0) ioctl$PPPIOCGL2TPSTATS(r7, 0x80487436, 0x0) 1.083993335s ago: executing program 4 (id=5989): ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, 0x0, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x24004045}, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={&(0x7f0000000140), 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x54, 0x2, 0x6, 0x101, 0x0, 0x0, {0xa, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0x30, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}, @IPSET_ATTR_CADT_FLAGS={0x8}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x2}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x6}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e20}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000280)={r0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0x88, r2, 0x8, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x7c}, @val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x5, 0x3c}}}}, [@NL80211_ATTR_VENDOR_DATA={0x4e, 0xc5, "9d9c8de6d106feb785394d8c5e3bff9175ceb43b09b091ea3ef5fc1e54b4a16f716a7a1acbfb11ab05941b19bfb48bf8f288d0ca2294c865d5325adf91e288c72777999a660cfb56c0b1"}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x4}]}, 0x88}, 0x1, 0x0, 0x0, 0x881}, 0x1) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), r1) sendmsg$NL80211_CMD_DISCONNECT(r1, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x30, r4, 0x300, 0x70bd26, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x7fff, 0x6e}}}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x3d}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0xd}]}, 0x30}, 0x1, 0x0, 0x0, 0x2000c880}, 0x20000081) sendmsg$NL80211_CMD_DEL_MPATH(r0, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x5c, r2, 0x8, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x5c}, 0x1, 0x0, 0x0, 0x84}, 0x10) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000740), 0x8) sendmsg$DEVLINK_CMD_RATE_SET(r5, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x7c, 0x0, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x9}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x60}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}]}, 0x7c}, 0x1, 0x0, 0x0, 0x20008000}, 0x801) r6 = socket$netlink(0x10, 0x3, 0x15) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), r6) sendmsg$NL80211_CMD_LEAVE_OCB(r6, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x14, r7, 0x400, 0x70bd25, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4048}, 0x40000) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a40), r6) sendmsg$NL80211_CMD_DEL_PMK(r5, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x38, r8, 0x100, 0x70bd26, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x53a9, 0xd}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}]}, 0x38}, 0x1, 0x0, 0x0, 0x24000000}, 0x804) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000c00)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x34, 0x0, 0x200, 0x70bd29, 0x25dfdbfb, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x3}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xfff}]}, 0x34}}, 0x20008000) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nfc(&(0x7f0000000c80), 0xffffffffffffffff) sendmsg$NFC_CMD_ACTIVATE_TARGET(r9, &(0x7f0000000d40)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x34, r10, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x3}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0xffffffffffffffff}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x5}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x40004}, 0x80) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000d80), 0x4) connect$802154_dgram(0xffffffffffffffff, &(0x7f0000000dc0)={0x24, @none={0x0, 0xffff}}, 0x14) r11 = socket$netlink(0x10, 0x3, 0x12) sendmsg$NL80211_CMD_NEW_KEY(r6, &(0x7f0000000ec0)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e40)={0x1c, r2, 0x1, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000040}, 0x4000000) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r5, &(0x7f0000001140)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001100)={&(0x7f0000000f40)={0x190, r2, 0x300, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @void}}, [@fils_params=[@NL80211_ATTR_FILS_ERP_USERNAME={0x11, 0xf9, "a99572b6e8d73324951173b1ea"}, @NL80211_ATTR_FILS_ERP_REALM={0x63, 0xfa, "c4f3d80d48c35e393073c8e729f2ed9181447c27dbc82812f415e4993501467a403c1e2e366cb90edd8f2f180f0eddb3ba84e35b222d4a561a6b92729cbb8d02d666a3b9bb9c2fedd6b2387a57a2d460381a8487b1583e5631e4788e716602"}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x571b}, @NL80211_ATTR_FILS_ERP_RRK={0x5f, 0xfc, "52572181894e5e08e12dc8aec6708fb9c13977a38f1efc6be517f712b22b14d75554b0e324b89cfc5fc517de3b21a067cf93523fcb19cd38f62ce6f18e87068dc22d2b8676bdc98e6b0afebf2f0bf3f991240c241046df0e3a5058"}, @NL80211_ATTR_FILS_ERP_REALM={0x99, 0xfa, "7e1ae217fc290ddf74e79e87fbbc81899adf57692744a4a81e5f2fd7f2df978efbcedac168443273aef770bf025800889f8257dfa30e745fa13b1ee42ddb8a774db5df21dd53d2b35bbb5b4872523f5ed0665980af3a4ebe45787b9cd8458ee1ac239d1158ee64ea6d6696a4fff5a35017ee4ba6bb197cbbde5ae4706e2826112508f7b3ee95ca6b6cc9ef7c02f8c8a724d77f9245"}]]}, 0x190}, 0x1, 0x0, 0x0, 0x24008814}, 0x4) sendmsg$NL80211_CMD_SET_MAC_ACL(r1, &(0x7f0000001300)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000012c0)={&(0x7f00000011c0)={0xe4, r2, 0x8, 0x70bd2b, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x80000001, 0x24}}}}, [@NL80211_ATTR_MAC_ADDRS={0x70, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa}, {0xa}, {0xa}, {0xa}, {0xa}]}, @NL80211_ATTR_MAC_ADDRS={0x4c, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa}, {0xa}, {0xa, 0x6, @device_b}]}, @NL80211_ATTR_ACL_POLICY={0x8}]}, 0xe4}, 0x1, 0x0, 0x0, 0x40}, 0x10) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000001380)=0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r11, &(0x7f0000001440)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x42002284}, 0xc, &(0x7f0000001400)={&(0x7f00000013c0)={0x30, r8, 0x204, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x11}, @void, @val={0xc, 0x99, {0x9, 0x9}}}}, [@NL80211_ATTR_PID={0x8, 0x52, r12}]}, 0x30}, 0x1, 0x0, 0x0, 0x45}, 0x1) sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, &(0x7f0000001680)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001640)={&(0x7f0000001500)={0x140, 0x0, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @DEVLINK_ATTR_RATE_NODE_NAME={0x11, 0xa8, @random="5e5adbc8f0bde6b36752d1d29b"}, @DEVLINK_ATTR_RATE_NODE_NAME={0x7c, 0xa8, @random="7e0b0f47a21a339ea527bd2ccd44bf0f52b9f87fee57f54e5d0fe98014c71284173e7dfcdb1b286b8ecca5ddba7bcd3659aa68b4ff8faaa9bed2644dafde2f2f4de30eac27804ee3f3f8fb3772ba6c0de99320ed20ef1620a9ece35e3d66a2bafd28c51e2bb5ac6ad987d2eb7b3dfa1f1dcb48da4cba053d"}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @handle=@pci={{0x8}, {0x11}}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x140}, 0x1, 0x0, 0x0, 0x10}, 0x0) 1.02206836s ago: executing program 3 (id=5991): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00'}) (async) r1 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00', 0x0}) bind$packet(r1, &(0x7f0000000080)={0x11, 0x1a, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) (async) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8481f0000005e140604000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) (async) r5 = socket$inet(0xa, 0x801, 0x84) connect$inet(r5, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) (async) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r7 = socket(0x400000000010, 0x3, 0x0) (async) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) (async) r10 = socket(0x400000000010, 0x3, 0x0) (async) r11 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r12, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) (async) listen(r5, 0x8) (async) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r13, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r13, &(0x7f0000009b40)={0x0, 0x24, &(0x7f0000009b00)={&(0x7f0000000540)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x88, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x58, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x48, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x2c, 0x3, "9ac420002e61afb9fdd672bad09dfb78c7699c74e891a0c700"/40}, @NFTA_TARGET_REV={0x8}, @NFTA_TARGET_NAME={0xe, 0x1, 'IDLETIMER\x00'}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x1c, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xb0}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) r14 = accept4(r13, 0x0, 0x0, 0x80800) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r14, 0x84, 0xa, &(0x7f0000000000)={0x80, 0x9, 0x201, 0x3, 0x279, 0x8000, 0x401, 0x400}, &(0x7f0000000040)=0x20) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'vlan0\x00'}) (async) r15 = accept$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000080)=0x14) getsockname$packet(r15, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) 932.107578ms ago: executing program 4 (id=5992): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x16, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="7a0a00ff000000287110bf000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b405000004000000799900000000000500000000000000950000000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x22e, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 873.912417ms ago: executing program 1 (id=5993): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x4, 0x80000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0x4}, {0xa, 0xffe0}, {0x0, 0x1}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_BETA={0x8, 0x6, 0x11}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}}, 0x4008840) socket(0x10, 0x80002, 0x0) (async) r0 = socket(0x10, 0x80002, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[], 0x64}, 0x1, 0x0, 0x0, 0x4004001}, 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[], 0x64}, 0x1, 0x0, 0x0, 0x4004001}, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000280), 0x10) sendmsg$can_bcm(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) sendmsg$can_bcm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYBLOB="050000008008"], 0x80}}, 0x0) (async) sendmsg$can_bcm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYBLOB="050000008008"], 0x80}}, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x213) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@ipv6_getroute={0x28, 0x1a, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x9}, [@RTA_MULTIPATH={0xc, 0x1d, {0xb, 0x1, 0x60}}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@ipv6_getroute={0x28, 0x1a, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x9}, [@RTA_MULTIPATH={0xc, 0x1d, {0xb, 0x1, 0x60}}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) 867.938796ms ago: executing program 4 (id=5994): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) (async, rerun: 64) r2 = socket$packet(0x11, 0x3, 0x300) (async, rerun: 64) r3 = socket(0x1, 0x3, 0x0) setsockopt$sock_int(r3, 0x1, 0x10, &(0x7f0000000540)=0xb5, 0x4) (async) bind$unix(r3, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e) (async) sendmmsg$unix(r3, &(0x7f0000002100)=[{{&(0x7f0000000280)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}], 0x1, 0x0) (async) setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) (async, rerun: 32) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f00000000c0)=0x800, 0x4) (rerun: 32) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x770, 0x0, 0xbabd}, 0x1c) (async, rerun: 64) write$tun(r0, &(0x7f00000000c0)={@val={0x8, 0x800}, @val={0x7, 0x3, 0x3, 0x2, 0x14}, @ipv4=@tcp={{0x5, 0x4, 0x0, 0x4, 0x28, 0x0, 0x0, 0x8, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast}, {{0x8100, 0x88a8, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x20, 0x5}}}}, 0x36) (rerun: 64) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4008000) (async) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[], 0xa8}}, 0x0) r5 = socket$nl_sock_diag(0x10, 0x3, 0x4) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, 0x0, 0x40000) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB='5', @ANYRES16=r8, @ANYBLOB="010000000000000000000300000014000180100001006574683a6970766c616e3000"], 0x28}}, 0x20000080) (async, rerun: 64) sendmsg$nl_generic(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002a40)=ANY=[@ANYRES8=r5], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x44004) (async, rerun: 64) getsockname$tipc(r3, &(0x7f0000000300), &(0x7f0000000440)=0x10) recvmmsg(r6, &(0x7f0000002c00)=[{{0x0, 0x0, 0x0}, 0x1feffe}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000580)=""/201, 0xc9}, {&(0x7f0000000900)=""/230, 0xe6}, {&(0x7f0000003e00)=""/4082, 0xff2}, {&(0x7f0000000a00)=""/229, 0xe5}], 0x4}, 0x2}, {{0x0, 0x0, 0x0}, 0x40}, {{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000000c0)=""/145, 0x91}, {&(0x7f0000000340)=""/218, 0xda}, {&(0x7f0000001a00)=""/4109, 0x100d}, {&(0x7f0000006080)=""/4085, 0xff5}, {&(0x7f0000000240)=""/112, 0x70}], 0x5}, 0x4db}, {{0x0, 0x0, 0x0}, 0x800}], 0x8, 0x40010020, 0x0) (async, rerun: 64) socket$netlink(0x10, 0x3, 0x0) (async, rerun: 64) r9 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000680)={'bridge0\x00'}) 794.258402ms ago: executing program 3 (id=5995): r0 = socket$inet(0x2, 0x3, 0x2) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001680)=@newsa={0x138, 0x1a, 0x713, 0x0, 0x0, {{@in6=@local, @in=@broadcast}, {@in=@local, 0x0, 0x33}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, {0x0, 0x0, 0x3}, {}, 0x0, 0x0, 0xa, 0x1}, [@algo_auth={0x48, 0x1, {{'sha1\x00'}}}]}, 0x138}}, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x4000, &(0x7f0000000100)={0x2, 0x4e24, @multicast1}, 0x10) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) 748.099461ms ago: executing program 1 (id=5996): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000079104e0000000000630a0000000000009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport}, 0x48) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x1}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r1, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000400)=r2, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x94) r3 = socket(0x10, 0x803, 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = syz_init_net_socket$ax25(0x3, 0x5, 0xca) connect$inet(r5, &(0x7f0000000300)={0x2, 0x4e24, @private=0xa010100}, 0x10) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="340000001400b59527bd7000fcdbdf2523090000", @ANYBLOB="303b81a7f8b51922ce45cb7e7b828296dc0cdbd772774257c943f6a803e7b717c56b8f3691ac2053129eb9c3db12b5d86d68d387d9cb661743b38264b1eba84ae6df1ff543f780fa80e84cbf29575d968e2f0a3ebc29f5d1220c1f6d58e9b9d257a08230051350fe9dfeec28b4ab6bde25c8f74eac2cbbcf6f8d6682e2a324f7cbe68a1bc26a2f5a25b4680ee22ff85fb0d53cd32678605fc46183d70f77bbe25b99796237012e610bf63ff3cd008f08fb530dc80050eacb01b2e3ade42d839859c5b07aa5b92458ddf30f544b72b3737949f68d0ef41a7546ecaab32ce69c1f9e9015", @ANYBLOB="140002"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=ANY=[@ANYRESHEX=r0], 0x34}, 0x1, 0x0, 0x0, 0x41c1}, 0x4040800) getsockopt$inet6_opts(r4, 0x29, 0x36, &(0x7f00000005c0)=""/4096, &(0x7f0000000080)=0x1000) 714.507562ms ago: executing program 0 (id=5997): syz_emit_ethernet(0x4e, &(0x7f0000000080)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "00a8bc", 0x18, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@generic={0x2, 0x2}]}}}}}}}}, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) recvfrom(r0, &(0x7f0000000000)=""/52, 0x34, 0x102, 0x0, 0x0) 699.798172ms ago: executing program 3 (id=5998): r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) (async, rerun: 32) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x2, {0x0, 0x0, 0x0, 0x0, {0xb}, {0xfff3, 0xffff}, {0xffe0, 0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async, rerun: 32) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000003c000b0000000000fcffffff04000000040000800c0001"], 0x24}}, 0x0) setsockopt$ax25_int(r0, 0x101, 0x19, &(0x7f0000000200), 0x4) r2 = socket(0x10, 0x3, 0x9) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000520001000000000000000800000000"], 0x1c}}, 0x0) 596.075334ms ago: executing program 1 (id=5999): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async, rerun: 32) sendmsg$NFT_BATCH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000980)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_DELRULE={0x38, 0x6, 0xa, 0xe01, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x2}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x60}, 0x1, 0x0, 0x0, 0x20048880}, 0x0) (rerun: 32) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'veth0_to_bond\x00', &(0x7f0000000080)=@ethtool_sset_info={0x37, 0x4, 0x10}}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x3261e) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) (async) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000040)={'wlan0\x00', 0x0}) (async) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000d80)=@newsa={0x140, 0x10, 0x1, 0x0, 0x25dfdbfd, {{@in=@local, @in6=@empty, 0x4000, 0x0, 0x3, 0x3}, {@in=@broadcast, 0x0, 0x33}, @in6=@mcast2, {0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x4}, {}, {}, 0x0, 0x0, 0xa, 0x1}, [@tfcpad={0x8, 0x23, 0xd19}, @algo_auth={0x48, 0x1, {{'sha256\x00'}}}]}, 0x140}}, 0x20000000) 554.056996ms ago: executing program 4 (id=6000): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) (async) r1 = socket$inet(0x2, 0x2, 0x1) (async, rerun: 64) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x2, 0xcd}}, 0x44) (rerun: 64) close(0xffffffffffffffff) (async) listen(r1, 0x5) r2 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8b04, &(0x7f0000000000)={'wlan1\x00'}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x45, 0x1000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000300000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r4}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r5}, 0x10) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000200)={0x40, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x4}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x40}}, 0x40000) (async, rerun: 32) sendmsg$IPSET_CMD_FLUSH(r7, &(0x7f00000001c0)={0x0, 0x48, &(0x7f00000000c0)={&(0x7f0000000100)={0x1c, 0x4, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x4) (rerun: 32) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @broadcast}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc9, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) (async) r8 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_SRC_DROPPABLE(r8, 0x10f, 0x80, &(0x7f00000002c0)=0x83b, 0x4) 541.426232ms ago: executing program 3 (id=6001): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2}}, 0x2e) sendmsg$inet(r1, &(0x7f0000000880)={0x0, 0x0, 0x0}, 0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)={0x28, r4, 0x5, 0x70bd2b, 0xffffffeb, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8, 0xb, 0x7ff}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x404c840}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="b80000001300e9990000000000000000e0000001000000000000000000000000e000000100000000000000000000000000000000000000000200002000000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="0000000000400000c485c50010000000000000000000000000000000000000000000000000ffffffffffffff0000000000000000000020000000000000000000000000000000000000000800000000000000000000000000000000000000004000000000350799f30ab686dd1b311094450e13c9bade919f62dbad5d722bf3bb99c0e9efee917b8757f68e835f5f9c83e499a8cdc20c30c3be43c9d3000000000000000000"], 0xb8}}, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x6, 0x4, &(0x7f0000000080)=@framed={{}, [@ldst={0x2, 0x0, 0x3, 0x1}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x8}, 0x90) sendmsg$nl_xfrm(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x2, {{@in=@multicast1, @in=@multicast1, 0x4e24, 0x0, 0x0, 0x0, 0x2, 0x0, 0x10, 0x0, 0x0, 0xee01}}}, 0xb8}}, 0x0) 443.995731ms ago: executing program 1 (id=6002): r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r0, 0x8923, &(0x7f0000000000)={'wlan1\x00', 0x1ff}) (async) r1 = socket$inet_udp(0x2, 0x2, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a54000000060a0b0400000000e15172d90200000028000480240001800b000100736f636b65740000140002800800024000000000080001"], 0x7c}}, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e000000180002"], 0x50}}, 0x4000000) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000021b40)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x58, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x10}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x9}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xa0}}, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r1, 0x89fa, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000040)={@initdev={0xfe, 0x88, '\x00', 0x4, 0x0}, @empty, 0x12, 0x18}}) 422.915282ms ago: executing program 3 (id=6003): r0 = socket$pptp(0x18, 0x1, 0x2) connect$pptp(r0, &(0x7f0000000040)={0x18, 0x2, {0x0, @multicast2}}, 0x1e) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_buf(r1, 0x29, 0x3d, &(0x7f0000000640)=""/140, &(0x7f0000000700)=0x8c) getsockopt$inet6_buf(r1, 0x29, 0xd3, &(0x7f0000000000)=""/117, &(0x7f0000000080)=0x75) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r6, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001cc0)=ANY=[@ANYBLOB="3c0000001000030500000000fcffffff00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001400128009000100626f6e64000000000400028008000a00", @ANYRES32=r6], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) getsockname$packet(r3, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x60, &(0x7f0000000300)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003001008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32=r7], 0x5c}}, 0x40) ioctl$sock_inet_SIOCGIFBRDADDR(r4, 0x8919, &(0x7f00000003c0)={'pim6reg\x00'}) sendmsg$nl_route(r5, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=@getnetconf={0x14, 0x52, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x4800}, 0x8004) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r6], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) sendmsg$nl_generic(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0x130}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) 371.357295ms ago: executing program 4 (id=6004): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@bloom_filter={0x3, 0x0, 0x4, 0x0, 0x44}, 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000015c0)={0x2, 0x3, &(0x7f0000001bc0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000140)='syzkaller\x00', 0x6, 0x1000, &(0x7f0000000180)=""/4096}, 0x90) bpf$PROG_BIND_MAP(0x1c, &(0x7f0000000000)={r2, 0x1}, 0xc) r3 = socket(0x10, 0x803, 0x2) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x30, r4, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x200000}, @NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r3}}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x14, 0x4a, 0x3ab3666c4349b199, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000007110b7000000000095f1ff0000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x80) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x3, 0xc, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x6}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r6}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xa}}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000011c0), r1) sendmsg$IEEE802154_LIST_PHY(r1, &(0x7f0000001280)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001240)={&(0x7f0000001200)={0x14, r7, 0x400, 0x70bd2b, 0x25dfdbfd, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x40801) r8 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x14, r8, 0x1, 0x0, 0x0, {0x2, 0x2, 0x2}}, 0x14}, 0x1, 0x40030000000000}, 0x0) sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0), 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x5c, r8, 0x10, 0x70bd25, 0x25dfdbfb, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth1_macvtap\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8891}, 0x4000000) 323.98064ms ago: executing program 1 (id=6005): ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x8991, &(0x7f0000000040)={'ip_vti0\x00', 0x0}) r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040), 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000b40), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000b80)={'batadv_slave_1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000bc0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_HARDIF(r2, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000c00)={0x24, r3, 0x1, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r4}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}]}, 0x24}, 0x1, 0x0, 0x0, 0x2000c811}, 0x0) listen(r0, 0x0) r6 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r6, &(0x7f0000000080), 0x10) setsockopt$sock_linger(r6, 0x1, 0x3c, &(0x7f0000000180)={0x1, 0x5}, 0x8) sendmmsg(r6, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x24008094) r7 = accept4$unix(r0, 0x0, 0x0, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000000c0)={'netdevsim0\x00', 0x0}) r10 = gettid() r11 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c00000010000304f9fffffffe0adf2500007400", @ANYRES32=r9, @ANYBLOB="049c01000750050008001300", @ANYRES32=r10], 0x3c}, 0x1, 0x0, 0x0, 0x4802}, 0x0) r12 = getpid() r13 = bpf$ITER_CREATE(0x21, &(0x7f0000000280)={r6}, 0x8) sendmsg$nl_route(r0, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=@RTM_NEWNSID={0x44, 0x58, 0x2, 0x70bd29, 0x25dfdbff, {}, [@NETNSA_NSID={0x8, 0x1, 0x3}, @NETNSA_FD={0x8, 0x3, r7}, @NETNSA_PID={0x8, 0x2, r10}, @NETNSA_PID={0x8, 0x2, r12}, @NETNSA_NSID={0x8, 0x1, 0x1}, @NETNSA_FD={0x8, 0x3, r13}]}, 0x44}, 0x1, 0x0, 0x0, 0x44011}, 0x4000) recvfrom$unix(r7, &(0x7f0000000140)=""/263, 0x107, 0x0, 0x0, 0x0) recvmsg(r6, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x13042) r14 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r14, 0x8b32, &(0x7f0000000040)) 172.970039ms ago: executing program 4 (id=6006): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x5, @none, 0x0, 0x2}, 0xe) listen(r1, 0xa1) accept4$bt_l2cap(r1, 0x0, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f0000000080), 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x25, 0x0, 0x8) 54.413958ms ago: executing program 1 (id=6007): bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x3, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5}, [@ldst={0x1, 0x2, 0x4, 0x0, 0x1, 0xbb}]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6e2e12bede68ed35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000280)=ANY=[@ANYBLOB="6c0100001900010000000000000000001d010900040010801e010680f1002b008eab44a5159d834f7a577417b5091d0aac85ef225fb8e3c8fdd2f87bc9333944af4d958747097f5dfa8f3a0df989a8f4cfcc8a0b0c74808d8d19286d18ace32cd6545f956216b8471f880e80f1f26bdc47e4a4205744b9ceb87f7ef7a294a9009fb421d24d53c0707e155e078a7839c40f0105a02b9c169f981fa3c96661f8579e1edb7b3b4222e84bfc269b9600d7e7e52d0874b155d588b935b48ae618a36ca423735f466467d01823ab53b10bdbb481a84735653bf5e2656f1c5db992060d7766b7aac5fffd3d2aea3579c8074e0f8681f4f8192dcda190a364823142539c7ad525134d072c0655df00000026c1e5e4409b7b2f21ea2cd84205d99f8ad8c8696cd5d3eed9ad9a6c845fff292724b9ce7c1b000014007d00000000000000000000000000000000006634e8df8cabf95bd71c6c848404e7f1d56ea201ccb370b6c9c9d538d486aa00a6e01d64"], 0x16c}}, 0x24040000) 0s ago: executing program 3 (id=6008): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000000b40)=[{{&(0x7f00000000c0)={0xa, 0x20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c, &(0x7f0000000000)=[{&(0x7f0000000240)="ad", 0x1}], 0x1}}, {{&(0x7f0000000100)={0xa, 0x4e24, 0x1, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x1}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000800)=',', 0x1}], 0x1, &(0x7f0000000a00)=ANY=[@ANYBLOB="180000000000000029000000360000003b000000000000001400000000000000290000000b000000000000020000000028"], 0x58}}], 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000e40)="480000001400190d09004beafd0d36020a8447000b4e230f00000000a2bc560119d7004f19dfb7f393d7359031033f817f00000000000000000101ff05c00e030002000000ffff01", 0x48}], 0x1) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f00000014c0)={0x2, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x2, 0x18, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @local}}, @sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in=@multicast2, @in6=@private1}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @empty}}, @sadb_x_kmaddress={0x8, 0x19, 0x0, @in6={0xa, 0x0, 0x0, @private0}, @in6={0x2, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}]}, 0xe0}}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), r1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000300)='qdisc_enqueue\x00', r3, 0x0, 0x2}, 0x18) r4 = socket$kcm(0xa, 0x922000000003, 0x11) r5 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000180)=@generic={&(0x7f0000000040)='./file0\x00'}, 0x18) setsockopt$sock_attach_bpf(r4, 0x29, 0x24, &(0x7f00000000c0)=r5, 0x4) sendmsg$kcm(r4, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x4}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000780)="f4000900062b2c25fe80000000000000dc8b71d5decf66cc00"/40, 0x28}], 0x1}, 0x0) kernel console output (not intermixed with test programs): Node identity 4a564f198b86, cluster identity 4711 [ 488.164849][T19955] tipc: Enabled bearer , priority 0 [ 488.179064][T19955] syzkaller0: entered promiscuous mode [ 488.196171][T19955] syzkaller0: entered allmulticast mode [ 488.220127][ T5873] Bluetooth: hci0: command 0x0c1a tx timeout [ 488.287598][T19955] tipc: Resetting bearer [ 488.350457][T19969] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3908'. [ 488.359713][T19969] netlink: 'syz.1.3908': attribute type 3 has an invalid length. [ 488.369132][T19969] netlink: 11 bytes leftover after parsing attributes in process `syz.1.3908'. [ 488.433253][T19955] tipc: Resetting bearer [ 488.494549][T19955] tipc: Disabling bearer [ 488.513886][T19977] netlink: 808 bytes leftover after parsing attributes in process `syz.1.3910'. [ 488.536606][T19976] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3911'. [ 488.681011][T19988] netlink: 'syz.0.3912': attribute type 24 has an invalid length. [ 488.703793][T19988] netlink: 'syz.0.3912': attribute type 4 has an invalid length. [ 488.756556][T19993] netlink: 'syz.3.3915': attribute type 33 has an invalid length. [ 489.057730][T20015] net_ratelimit: 48 callbacks suppressed [ 489.057749][T20015] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 491.165507][T20019] hsr_slave_0 (unregistering): left promiscuous mode [ 491.481626][T20055] netlink: 'syz.2.3932': attribute type 7 has an invalid length. [ 491.515823][T20055] tipc: Enabled bearer , priority 0 [ 492.132150][T20102] netlink: 'syz.2.3947': attribute type 1 has an invalid length. [ 492.243643][T20107] __nla_validate_parse: 11 callbacks suppressed [ 492.243660][T20107] netlink: 128 bytes leftover after parsing attributes in process `syz.3.3948'. [ 492.271780][T20107] netlink: 128 bytes leftover after parsing attributes in process `syz.3.3948'. [ 492.303843][T20104] !: renamed from dummy0 (while UP) [ 492.618224][T20133] netlink: 108 bytes leftover after parsing attributes in process `syz.1.3956'. [ 492.630927][ T8085] tipc: Node number set to 2279804231 [ 492.685475][T20133] bridge_slave_0: left allmulticast mode [ 492.692942][T20133] bridge_slave_0: left promiscuous mode [ 492.698762][T20133] bridge0: port 1(bridge_slave_0) entered disabled state [ 492.727989][T20133] bridge_slave_1: left allmulticast mode [ 492.747026][T20133] bridge_slave_1: left promiscuous mode [ 492.760894][T20141] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3959'. [ 492.771250][T20133] bridge0: port 2(bridge_slave_1) entered disabled state [ 492.779106][T20141] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3959'. [ 492.795490][T20133] bond0: (slave bond_slave_0): Releasing backup interface [ 492.808613][T20133] bond0: (slave bond_slave_1): Releasing backup interface [ 492.829359][T20133] team0: Port device team_slave_0 removed [ 492.843439][T20133] team0: Port device team_slave_1 removed [ 492.851215][T20133] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 492.858693][T20133] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 492.884968][T20133] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 492.903149][T20133] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 492.932020][T20133] bond2: (slave veth3): Releasing active interface [ 492.953830][T20138] netlink: 404 bytes leftover after parsing attributes in process `syz.3.3958'. [ 492.966663][T20138] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3958'. [ 492.977883][T20138] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3958'. [ 493.000560][T20138] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3958'. [ 493.036253][T20141] ip6gretap0: entered promiscuous mode [ 493.044593][T20141] syz_tun: entered promiscuous mode [ 493.054185][T20141] debugfs: 'hsr1' already exists in 'hsr' [ 493.060538][T20141] Cannot create hsr debugfs directory [ 493.066130][T20141] hsr1: Slave A (ip6gretap0) is not up; please bring it up to get a fully working HSR network [ 493.077340][T20141] hsr1: Slave B (syz_tun) is not up; please bring it up to get a fully working HSR network [ 493.091759][T20143] netlink: 7 bytes leftover after parsing attributes in process `syz.3.3958'. [ 493.311456][T20155] Bluetooth: MGMT ver 1.23 [ 493.321644][T20153] batadv2: entered allmulticast mode [ 493.466309][T20162] ipvlan0: entered promiscuous mode [ 493.700672][T20172] 8021q: VLANs not supported on ip6tnl0 [ 494.410915][T20216] pim6reg: entered allmulticast mode [ 494.487864][T20221] openvswitch: netlink: Key type 85 is out of range max 32 [ 494.997114][T20248] lo speed is unknown, defaulting to 1000 [ 495.023147][T20248] lo speed is unknown, defaulting to 1000 [ 495.042154][T20248] lo speed is unknown, defaulting to 1000 [ 495.526834][ T8085] lo speed is unknown, defaulting to 1000 [ 495.539971][T20248] infiniband syz0: set active [ 495.552420][T20248] infiniband syz0: added lo [ 495.654268][T20248] RDS/IB: syz0: added [ 495.659270][T20248] smc: adding ib device syz0 with port count 1 [ 495.666369][T20248] smc: ib device syz0 port 1 has pnetid [ 495.721872][ T5935] lo speed is unknown, defaulting to 1000 [ 495.875949][T20248] lo speed is unknown, defaulting to 1000 [ 496.102227][T20280] IPv6: sit1: Disabled Multicast RS [ 496.130764][T20280] sit1: entered allmulticast mode [ 496.491332][T20248] lo speed is unknown, defaulting to 1000 [ 496.510133][T20291] tipc: Enabled bearer , priority 0 [ 496.517656][T20291] syzkaller0: entered promiscuous mode [ 496.540886][T20291] syzkaller0: entered allmulticast mode [ 496.599747][T20291] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 496.713108][T20291] tipc: Resetting bearer [ 496.833277][T20290] tipc: Resetting bearer [ 496.935475][T20290] tipc: Disabling bearer [ 497.003436][T20318] netlink: 'syz.4.4014': attribute type 5 has an invalid length. [ 497.158409][T20248] lo speed is unknown, defaulting to 1000 [ 497.161739][T20325] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 497.376248][T20340] netlink: 'syz.1.4021': attribute type 1 has an invalid length. [ 497.473721][T20340] 8021q: adding VLAN 0 to HW filter on device bond4 [ 498.034513][T20367] __nla_validate_parse: 11 callbacks suppressed [ 498.034535][T20367] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4025'. [ 498.099813][T20248] lo speed is unknown, defaulting to 1000 [ 498.105738][T20367] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4025'. [ 498.435666][T20378] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4029'. [ 498.459885][ T5873] Bluetooth: hci3: command 0x0406 tx timeout [ 498.845420][T20248] lo speed is unknown, defaulting to 1000 [ 499.321270][T20409] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4036'. [ 499.381535][T20411] netlink: 300 bytes leftover after parsing attributes in process `syz.2.4038'. [ 499.502428][T20248] lo speed is unknown, defaulting to 1000 [ 499.508462][T20413] netlink: 9 bytes leftover after parsing attributes in process `syz.3.4039'. [ 499.574918][T20413] gretap0: entered promiscuous mode [ 499.600837][T20413] netlink: 5 bytes leftover after parsing attributes in process `syz.3.4039'. [ 499.669817][T20420] netlink: 'syz.3.4039': attribute type 4 has an invalid length. [ 499.709882][T20413] 0ªî{X¹¦: renamed from gretap0 [ 499.734737][T20413] 0ªî{X¹¦: left promiscuous mode [ 499.789194][T20413] 0ªî{X¹¦: entered allmulticast mode [ 499.798125][T20413] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 500.062863][T20248] lo speed is unknown, defaulting to 1000 [ 500.338415][T20443] kthread_run failed with err -4 [ 500.366504][T20439] IPVS: Error connecting to the multicast addr [ 500.521659][T20453] batadv_slave_1: entered promiscuous mode [ 500.541538][T20452] batadv_slave_1: left promiscuous mode [ 500.542205][T20457] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4052'. [ 500.638272][T20460] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 500.998441][T20248] lo speed is unknown, defaulting to 1000 [ 501.289981][ T3563] tipc: Subscription rejected, illegal request [ 501.413819][T20493] netlink: 216 bytes leftover after parsing attributes in process `syz.4.4063'. [ 501.439565][T20493] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4063'. [ 501.826093][T20248] lo speed is unknown, defaulting to 1000 [ 502.343462][T20543] tipc: Enabled bearer , priority 0 [ 502.402519][T20542] tipc: Disabling bearer [ 502.453733][T20548] (unnamed net_device) (uninitialized): option use_carrier: invalid value (4) [ 502.707202][T20557] vlan3: entered promiscuous mode [ 502.748526][T20558] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 503.275743][T20595] __nla_validate_parse: 7 callbacks suppressed [ 503.275763][T20595] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4089'. [ 503.598118][T20612] netlink: 'syz.2.4092': attribute type 8 has an invalid length. [ 504.128261][T20637] sctp: [Deprecated]: syz.3.4100 (pid 20637) Use of int in max_burst socket option deprecated. [ 504.128261][T20637] Use struct sctp_assoc_value instead [ 504.221015][T20642] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4099'. [ 504.240006][T20645] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.4103'. [ 504.281996][T20647] netlink: 72 bytes leftover after parsing attributes in process `syz.2.4101'. [ 504.492483][T20660] netlink: 76 bytes leftover after parsing attributes in process `syz.2.4106'. [ 504.538037][T20660] netlink: 'syz.2.4106': attribute type 1 has an invalid length. [ 504.573714][T20660] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4106'. [ 504.621224][T20666] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4108'. [ 504.672677][T20674] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4108'. [ 504.863189][T20685] netlink: 'syz.1.4114': attribute type 16 has an invalid length. [ 504.893345][T20685] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4114'. [ 504.908773][T20691] netlink: 'syz.4.4115': attribute type 10 has an invalid length. [ 504.936268][T20691] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4115'. [ 504.966073][T20691] batadv0: entered promiscuous mode [ 504.976182][T20691] batadv0: entered allmulticast mode [ 505.009982][T20691] bridge0: port 3(batadv0) entered blocking state [ 505.026262][T20691] bridge0: port 3(batadv0) entered disabled state [ 505.209373][T20712] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 505.268687][T20720] netlink: 'syz.3.4124': attribute type 1 has an invalid length. [ 505.323117][ T8657] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 505.332782][ T8657] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 505.550458][T20734] veth0: entered promiscuous mode [ 505.923299][T20748] openvswitch: netlink: Actions may not be safe on all matching packets [ 505.942453][T20745] pim6reg1: entered promiscuous mode [ 505.947899][T20745] pim6reg1: entered allmulticast mode [ 506.646476][ T8638] batadv1: left allmulticast mode [ 506.665898][ T8638] batadv1: left promiscuous mode [ 506.673689][ T8638] bridge0: port 1(batadv1) entered disabled state [ 507.442350][T20851] netlink: 'syz.0.4155': attribute type 10 has an invalid length. [ 507.455433][ T8638] gretap0 (unregistering): left promiscuous mode [ 507.505927][ T8638] bond4 (unregistering): (slave gretap1): Releasing active interface [ 507.575295][ T8638] dvmrp1 (unregistering): left allmulticast mode [ 507.961820][ T8638] bond1 (unregistering): Released all slaves [ 508.092585][ T8638] bond2 (unregistering): Released all slaves [ 508.253126][ T8638] bond3 (unregistering): Released all slaves [ 508.376697][ T8638] bond4 (unregistering): Released all slaves [ 508.500480][ T8638] bond0 (unregistering): Released all slaves [ 508.516866][T20823] tipc: Enabled bearer , priority 0 [ 508.529746][T20827] syzkaller0: entered promiscuous mode [ 508.546836][T20827] syzkaller0: entered allmulticast mode [ 508.710017][T20831] Bluetooth: hci5: command 0x0406 tx timeout [ 508.734087][T20859] netlink: 'syz.3.4157': attribute type 1 has an invalid length. [ 508.769816][ T8638] : left promiscuous mode [ 508.841596][T20840] tipc: Resetting bearer [ 508.961763][T20840] tipc: Disabling bearer [ 508.989494][ T8638] tipc: Left network mode [ 509.027696][T20869] __nla_validate_parse: 8 callbacks suppressed [ 509.027714][T20869] netlink: 256 bytes leftover after parsing attributes in process `syz.4.4161'. [ 509.099740][ T51] Bluetooth: hci1: command 0x0405 tx timeout [ 509.201256][T20872] netlink: 68 bytes leftover after parsing attributes in process `syz.2.4162'. [ 509.405336][T20877] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.4164'. [ 509.609163][T20885] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 510.133741][T20911] netlink: 'syz.0.4172': attribute type 1 has an invalid length. [ 510.166824][T20913] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4175'. [ 510.193660][T20911] netlink: 'syz.0.4172': attribute type 10 has an invalid length. [ 510.226447][T20911] netlink: 236 bytes leftover after parsing attributes in process `syz.0.4172'. [ 510.259577][T20918] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4175'. [ 510.686836][ T8638] hsr_slave_0: left promiscuous mode [ 510.717154][ T8638] hsr_slave_1: left promiscuous mode [ 510.737287][ T8638] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 510.807666][T20954] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4185'. [ 511.322887][ T8638] team0 (unregistering): Port device team_slave_1 removed [ 511.373625][ T8638] team0 (unregistering): Port device team_slave_0 removed [ 511.673685][ T8638] team0 (unregistering): Port device dummy0 removed [ 511.940426][T20959] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 511.974583][T20959] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 512.208527][T20969] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4189'. [ 512.261673][T20977] netlink: 68 bytes leftover after parsing attributes in process `syz.0.4192'. [ 512.467316][T20987] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4193'. [ 512.621158][T20991] netlink: 'syz.1.4193': attribute type 83 has an invalid length. [ 512.996120][T21021] netlink: 'syz.3.4204': attribute type 10 has an invalid length. [ 513.004961][T21021] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 513.026934][T21021] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 513.038936][T21021] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 513.137145][T21032] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 513.282238][T21040] netlink: 'syz.3.4209': attribute type 2 has an invalid length. [ 513.294801][T21040] netlink: 'syz.3.4209': attribute type 1 has an invalid length. [ 513.302959][T21040] netlink: 'syz.3.4209': attribute type 2 has an invalid length. [ 513.380812][T21036] geneve2: entered promiscuous mode [ 513.487138][T21048] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 513.830500][T21061] netlink: 'syz.4.4216': attribute type 10 has an invalid length. [ 513.850252][T21061] batman_adv: batadv0: Adding interface: team0 [ 513.878403][T21061] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 513.956146][T21061] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 514.029988][T21087] __nla_validate_parse: 5 callbacks suppressed [ 514.030007][T21087] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4220'. [ 514.482464][T21107] syz_tun: entered allmulticast mode [ 514.495705][T21106] syz_tun: left allmulticast mode [ 514.596853][T21113] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 515.363950][T21166] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4244'. [ 515.662190][T21178] bridge0: port 3(batadv0) entered disabled state [ 515.707141][T21180] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4248'. [ 515.722371][T21178] bridge_slave_1: left allmulticast mode [ 515.728366][T21178] bridge_slave_1: left promiscuous mode [ 515.736421][T21178] bridge0: port 2(bridge_slave_1) entered disabled state [ 515.778149][T21178] bridge_slave_0: left allmulticast mode [ 515.795769][T21178] bridge_slave_0: left promiscuous mode [ 515.823830][T21178] bridge0: port 1(bridge_slave_0) entered disabled state [ 516.162742][T21214] netlink: 'syz.1.4257': attribute type 32 has an invalid length. [ 516.187681][T21214] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4257'. [ 516.206423][T21214] (unnamed net_device) (uninitialized): Setting coupled_control to off (0) [ 516.432373][T21227] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4262'. [ 516.485343][T21231] bridge6: the hash_elasticity option has been deprecated and is always 16 [ 516.501077][T21227] netlink: 244 bytes leftover after parsing attributes in process `syz.4.4262'. [ 516.520317][T21233] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4262'. [ 516.642926][T21243] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4267'. [ 516.666885][T21243] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 516.679684][T21243] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 516.746534][T21248] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4270'. [ 516.759851][T21248] netlink: 252 bytes leftover after parsing attributes in process `syz.1.4270'. [ 516.896617][T21256] IPVS: Error connecting to the multicast addr [ 517.006216][T21261] 8021q: VLANs not supported on ip6gre0 [ 517.012957][T21261] 8021q: VLANs not supported on ip6gre0 [ 517.019162][T21261] 8021q: VLANs not supported on ip6gre0 [ 517.026202][T21261] 8021q: VLANs not supported on ip6gre0 [ 517.032641][T21261] 8021q: VLANs not supported on ip6gre0 [ 517.039304][T21261] 8021q: VLANs not supported on ip6gre0 [ 517.045812][T21261] 8021q: VLANs not supported on ip6gre0 [ 517.052383][T21261] 8021q: VLANs not supported on ip6gre0 [ 517.082193][T21261] 8021q: VLANs not supported on ip6gre0 [ 517.103565][T21261] 8021q: VLANs not supported on ip6gre0 [ 517.122437][T21261] 8021q: VLANs not supported on ip6gre0 [ 517.153705][T21261] 8021q: VLANs not supported on ip6gre0 [ 517.180232][T21261] 8021q: VLANs not supported on ip6gre0 [ 517.185906][T21261] 8021q: VLANs not supported on ip6gre0 [ 517.204250][T21261] 8021q: VLANs not supported on ip6gre0 [ 517.213338][T21261] 8021q: VLANs not supported on ip6gre0 [ 517.222483][T21261] 8021q: VLANs not supported on ip6gre0 [ 517.228161][T21261] 8021q: VLANs not supported on ip6gre0 [ 517.234870][T21261] 8021q: VLANs not supported on ip6gre0 [ 517.265455][T21261] 8021q: VLANs not supported on ip6gre0 [ 517.271878][T21261] 8021q: VLANs not supported on ip6gre0 [ 517.299827][T21261] 8021q: VLANs not supported on ip6gre0 [ 517.310247][T21261] 8021q: VLANs not supported on ip6gre0 [ 517.315937][T21261] 8021q: VLANs not supported on ip6gre0 [ 517.346368][T21261] 8021q: VLANs not supported on ip6gre0 [ 517.369818][T21261] 8021q: VLANs not supported on ip6gre0 [ 517.391815][T21261] 8021q: VLANs not supported on ip6gre0 [ 517.416688][T21261] 8021q: VLANs not supported on ip6gre0 [ 517.425555][T21261] 8021q: VLANs not supported on ip6gre0 [ 517.437334][T21261] 8021q: VLANs not supported on ip6gre0 [ 517.457633][T21261] 8021q: VLANs not supported on ip6gre0 [ 517.476396][T21261] 8021q: VLANs not supported on ip6gre0 [ 517.512715][T21261] 8021q: VLANs not supported on ip6gre0 [ 517.536060][T21261] 8021q: VLANs not supported on ip6gre0 [ 517.547104][T21281] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 517.617525][T21261] 8021q: VLANs not supported on ip6gre0 [ 517.686732][T21261] 8021q: VLANs not supported on ip6gre0 [ 517.692742][T21261] 8021q: VLANs not supported on ip6gre0 [ 518.315691][T21292] A link change request failed with some changes committed already. Interface veth0_to_hsr may have been left with an inconsistent configuration, please check. [ 518.333127][T21261] 8021q: VLANs not supported on ip6gre0 [ 518.496301][T21310] sctp: [Deprecated]: syz.1.4287 (pid 21310) Use of struct sctp_assoc_value in delayed_ack socket option. [ 518.496301][T21310] Use struct sctp_sack_info instead [ 518.853518][T21325] openvswitch: netlink: Geneve opt len 3 is not a multiple of 4. [ 518.905528][T21337] netlink: 'syz.4.4293': attribute type 3 has an invalid length. [ 519.034143][T21336] vcan0: entered allmulticast mode [ 519.240176][T21361] __nla_validate_parse: 5 callbacks suppressed [ 519.240197][T21361] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4300'. [ 519.264881][T21360] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4301'. [ 519.281733][T21361] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4300'. [ 519.381201][T21370] netlink: 'syz.2.4303': attribute type 33 has an invalid length. [ 519.397787][T21370] netlink: 152 bytes leftover after parsing attributes in process `syz.2.4303'. [ 519.412303][T21367] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 520.116790][T21399] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4313'. [ 520.139737][T21400] netlink: 2 bytes leftover after parsing attributes in process `syz.3.4311'. [ 520.373017][T21417] mac80211_hwsim hwsim41 syzkaller0: entered promiscuous mode [ 520.394232][T21417] mac80211_hwsim hwsim41 syzkaller0: entered allmulticast mode [ 520.427052][T21417] tipc: Resetting bearer [ 520.489068][ T8630] tipc: Resetting bearer [ 520.645873][T21423] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 520.692506][T21427] batadv0: entered promiscuous mode [ 520.722912][T21427] bond0: entered promiscuous mode [ 520.727983][T21427] bond_slave_0: entered promiscuous mode [ 520.780552][T21427] bond_slave_1: entered promiscuous mode [ 520.787754][T21427] debugfs: 'hsr1' already exists in 'hsr' [ 520.824938][T21427] Cannot create hsr debugfs directory [ 520.850060][T21427] hsr1: Slave A (batadv0) is not up; please bring it up to get a fully working HSR network [ 520.869817][T21427] hsr1: Slave B (bond0) is not up; please bring it up to get a fully working HSR network [ 520.898063][T21427] hsr1: entered allmulticast mode [ 520.919727][T21427] batadv0: entered allmulticast mode [ 520.935361][T21427] bond0: entered allmulticast mode [ 520.955759][T21427] bond_slave_0: entered allmulticast mode [ 520.976002][T21427] bond_slave_1: entered allmulticast mode [ 520.976876][T21440] netlink: 203516 bytes leftover after parsing attributes in process `syz.3.4323'. [ 520.992781][T21427] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 521.005788][T21440] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 521.019936][T21440] openvswitch: netlink: Duplicate key (type 0). [ 521.180507][T21444] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4325'. [ 521.181012][T21451] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4326'. [ 521.223853][T21452] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4326'. [ 521.496611][T21470] : renamed from bridge_slave_0 [ 521.826971][T21487] tipc: Enabled bearer , priority 0 [ 521.860330][T21487] tipc: Resetting bearer [ 521.925829][T21486] tipc: Disabling bearer [ 522.091715][T21498] netlink: 'syz.1.4339': attribute type 23 has an invalid length. [ 523.554938][T21588] ip6gre1: entered allmulticast mode [ 523.608406][T21590] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 523.683961][T21590] hsr_slave_0: left promiscuous mode [ 523.705196][T21590] hsr_slave_1: left promiscuous mode [ 523.812040][T21600] sit2: entered promiscuous mode [ 523.817045][T21600] sit2: entered allmulticast mode [ 524.146859][T21627] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 524.187849][T21631] syzkaller1: entered promiscuous mode [ 524.198000][T21631] syzkaller1: entered allmulticast mode [ 524.274896][T21638] __nla_validate_parse: 12 callbacks suppressed [ 524.274915][T21638] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4376'. [ 524.401714][T21640] warn_alloc: 1 callbacks suppressed [ 524.401733][T21640] syz.1.4378: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 524.433965][T21640] CPU: 1 UID: 0 PID: 21640 Comm: syz.1.4378 Not tainted syzkaller #0 PREEMPT(full) [ 524.433992][T21640] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 524.434007][T21640] Call Trace: [ 524.434016][T21640] [ 524.434025][T21640] dump_stack_lvl+0x189/0x250 [ 524.434058][T21640] ? __pfx_dump_stack_lvl+0x10/0x10 [ 524.434082][T21640] ? __pfx__printk+0x10/0x10 [ 524.434109][T21640] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 524.434132][T21640] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 524.434158][T21640] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 524.434183][T21640] warn_alloc+0x214/0x310 [ 524.434214][T21640] ? stack_depot_save_flags+0x40/0x860 [ 524.434246][T21640] ? __pfx_warn_alloc+0x10/0x10 [ 524.434276][T21640] ? kasan_save_track+0x4f/0x80 [ 524.434300][T21640] ? xskq_create+0x56/0x170 [ 524.434316][T21640] ? xsk_init_queue+0xb0/0x110 [ 524.434331][T21640] ? xsk_setsockopt+0x4dc/0x8d0 [ 524.434357][T21640] ? do_sock_setsockopt+0x17c/0x1b0 [ 524.434379][T21640] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 524.434399][T21640] ? do_syscall_64+0xfa/0x3b0 [ 524.434417][T21640] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 524.434445][T21640] __vmalloc_node_range_noprof+0x125/0x12f0 [ 524.434508][T21640] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 524.434544][T21640] ? __kasan_kmalloc+0x93/0xb0 [ 524.434573][T21640] vmalloc_user_noprof+0xad/0xf0 [ 524.434602][T21640] ? xskq_create+0xbf/0x170 [ 524.434622][T21640] xskq_create+0xbf/0x170 [ 524.434644][T21640] xsk_init_queue+0xb0/0x110 [ 524.434666][T21640] xsk_setsockopt+0x4dc/0x8d0 [ 524.434697][T21640] ? __pfx_xsk_setsockopt+0x10/0x10 [ 524.434726][T21640] ? __pfx_aa_sk_perm+0x10/0x10 [ 524.434760][T21640] ? aa_sock_opt_perm+0xff/0x1b0 [ 524.434784][T21640] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 524.434805][T21640] ? __pfx_xsk_setsockopt+0x10/0x10 [ 524.434836][T21640] do_sock_setsockopt+0x17c/0x1b0 [ 524.434866][T21640] __x64_sys_setsockopt+0x13f/0x1b0 [ 524.434895][T21640] do_syscall_64+0xfa/0x3b0 [ 524.434915][T21640] ? lockdep_hardirqs_on+0x9c/0x150 [ 524.434934][T21640] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 524.434963][T21640] ? clear_bhb_loop+0x60/0xb0 [ 524.434986][T21640] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 524.435009][T21640] RIP: 0033:0x7f7a2e98eba9 [ 524.435027][T21640] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 524.435044][T21640] RSP: 002b:00007f7a2f7ab038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 524.435065][T21640] RAX: ffffffffffffffda RBX: 00007f7a2ebd5fa0 RCX: 00007f7a2e98eba9 [ 524.435080][T21640] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 524.435092][T21640] RBP: 00007f7a2ea11e19 R08: 0000000000000004 R09: 0000000000000000 [ 524.435104][T21640] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 524.435117][T21640] R13: 00007f7a2ebd6038 R14: 00007f7a2ebd5fa0 R15: 00007fff9b5f14d8 [ 524.435150][T21640] [ 524.435243][T21640] Mem-Info: [ 524.458977][T21643] netlink: 80 bytes leftover after parsing attributes in process `syz.1.4378'. [ 524.477955][T21640] active_anon:5402 inactive_anon:0 isolated_anon:0 [ 524.477955][T21640] active_file:3076 inactive_file:40015 isolated_file:0 [ 524.477955][T21640] unevictable:768 dirty:31 writeback:0 [ 524.477955][T21640] slab_reclaimable:13411 slab_unreclaimable:121958 [ 524.477955][T21640] mapped:32430 shmem:2877 pagetables:990 [ 524.477955][T21640] sec_pagetables:0 bounce:0 [ 524.477955][T21640] kernel_misc_reclaimable:0 [ 524.477955][T21640] free:1300058 free_pcp:10178 free_cma:0 [ 524.890107][T21640] Node 0 active_anon:23632kB inactive_anon:0kB active_file:12304kB inactive_file:159860kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:123624kB dirty:120kB writeback:0kB shmem:12220kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14836kB pagetables:3880kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 524.941261][T21657] netlink: 'syz.2.4383': attribute type 10 has an invalid length. [ 524.959877][T21657] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4383'. [ 524.969568][T21640] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:160kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 525.060492][T21640] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 525.095021][T21640] lowmem_reserve[]: 0 2497 2499 2499 2499 [ 525.119969][T21640] Node 0 DMA32 free:1290004kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:26812kB inactive_anon:0kB active_file:12304kB inactive_file:158268kB unevictable:1536kB writepending:152kB present:3129332kB managed:2557420kB mlocked:0kB bounce:0kB free_pcp:21760kB local_pcp:12144kB free_cma:0kB [ 525.175718][T21640] lowmem_reserve[]: 0 0 1 1 1 [ 525.185129][T21640] Node 0 Normal free:0kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1592kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 525.227990][T21640] lowmem_reserve[]: 0 0 0 0 0 [ 525.237860][T21640] Node 1 Normal free:3893480kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:13280kB local_pcp:6528kB free_cma:0kB [ 525.281376][T21640] lowmem_reserve[]: 0 0 0 0 0 [ 525.287069][T21640] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 525.339947][T21640] Node 0 DMA32: 1105*4kB (UM) 1126*8kB (UME) 444*16kB (UM) 723*32kB (UM) 224*64kB (UME) 133*128kB (UM) 47*256kB (UME) 35*512kB (UM) 27*1024kB (UM) 9*2048kB (UME) 278*4096kB (UM) = 1289748kB [ 525.391869][T21640] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 525.413307][T21640] Node 1 Normal: 222*4kB (UME) 52*8kB (UME) 51*16kB (UME) 173*32kB (UME) 58*64kB (UME) 11*128kB (UME) 3*256kB (ME) 4*512kB (UME) 1*1024kB (M) 1*2048kB (E) 946*4096kB (M) = 3893480kB [ 525.434311][T21640] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 525.446066][T21640] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 525.491078][T21640] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 525.527983][T21640] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 525.554256][T21640] 44478 total pagecache pages [ 525.558996][T21640] 0 pages in swap cache [ 525.565154][T21686] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4390'. [ 525.597015][T21640] Free swap = 124996kB [ 525.610107][T21640] Total swap = 124996kB [ 525.614414][T21640] 2097051 pages RAM [ 525.618228][T21640] 0 pages HighMem/MovableOnly [ 525.625766][T21640] 425670 pages reserved [ 525.630330][T21640] 0 pages cma reserved [ 525.897925][T21703] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4397'. [ 526.061570][T21718] mac80211_hwsim hwsim41 syzkaller0: left promiscuous mode [ 526.084786][T21718] mac80211_hwsim hwsim41 syzkaller0: left allmulticast mode [ 526.102547][T21718] tipc: Resetting bearer [ 526.330549][T21737] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4404'. [ 526.409298][T21745] tipc: Enabled bearer , priority 0 [ 526.421702][T21737] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 526.548552][T21745] tipc: Disabling bearer [ 526.697229][T21764] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.4414'. [ 526.725238][T21764] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.4414'. [ 526.738829][T21764] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.4414'. [ 526.808753][T21771] macvtap1: entered allmulticast mode [ 526.819219][T21771] veth0_macvtap: entered allmulticast mode [ 526.966721][T21783] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4420'. [ 527.078065][T21788] gre0: entered allmulticast mode [ 527.333743][T21805] netlink: 'syz.4.4427': attribute type 10 has an invalid length. [ 527.355489][T21805] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 527.552776][T21816] netlink: 'syz.1.4431': attribute type 23 has an invalid length. [ 527.647731][T21815] netlink: 'syz.1.4431': attribute type 23 has an invalid length. [ 527.796172][T21827] netlink: 'syz.0.4434': attribute type 6 has an invalid length. [ 527.831830][T21827] netlink: 'syz.0.4434': attribute type 5 has an invalid length. [ 527.834872][T21828] netlink: 'syz.3.4433': attribute type 1 has an invalid length. [ 528.021513][T21841] nbd: nbd1 already in use [ 528.048230][T21849] netlink: 'syz.3.4439': attribute type 5 has an invalid length. [ 528.069989][T21851] netlink: 'syz.0.4437': attribute type 5 has an invalid length. [ 528.108780][T21849] geneve2: entered promiscuous mode [ 528.120560][T21849] geneve2: entered allmulticast mode [ 528.157757][ T8652] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 528.184143][ T8652] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 528.245132][ T8652] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 528.278206][ T8652] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 528.346410][T21858] delete_channel: no stack [ 528.532880][T21872] hsr_slave_0: left promiscuous mode [ 528.570402][T21872] hsr_slave_1: left promiscuous mode [ 528.580198][T21877] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 528.840377][T21888] can: request_module (can-proto-0) failed. [ 528.876264][T21891] lo speed is unknown, defaulting to 1000 [ 528.898222][T21900] netlink: 'syz.4.4454': attribute type 1 has an invalid length. [ 528.901722][ T8652] nci: nci_rf_discover_ntf_packet: unsupported rf_tech_and_mode 0x60 [ 528.937954][T21900] gretap2: entered promiscuous mode [ 529.435710][T21913] ipvlan1: entered promiscuous mode [ 529.927380][T21940] __nla_validate_parse: 12 callbacks suppressed [ 529.927400][T21940] netlink: 175008 bytes leftover after parsing attributes in process `syz.3.4465'. [ 529.991776][T21940] openvswitch: netlink: Port -8 exceeds max allowable 65535 [ 530.894480][T21985] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4481'. [ 530.935813][T21987] validate_nla: 1 callbacks suppressed [ 530.935829][T21987] netlink: 'syz.1.4477': attribute type 13 has an invalid length. [ 530.935979][T21980] netlink: 'syz.0.4478': attribute type 4 has an invalid length. [ 530.942767][T21987] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4477'. [ 531.052823][ T8657] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 531.068108][ T8657] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 531.084002][ T8657] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 531.144361][T21996] lo: entered promiscuous mode [ 531.149340][T21996] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 531.226390][T22001] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4485'. [ 532.223399][T20831] Bluetooth: hci1: command 0x0405 tx timeout [ 532.238583][T22044] netlink: 'syz.0.4496': attribute type 1 has an invalid length. [ 532.260127][T22044] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4496'. [ 532.271304][T22048] netlink: 'syz.3.4498': attribute type 1 has an invalid length. [ 532.482723][T22066] digital: digital_start_poll: Unknown protocol [ 532.589923][T22068] netlink: 'syz.4.4504': attribute type 18 has an invalid length. [ 532.615151][T22068] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4504'. [ 532.724790][ T8652] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 532.765139][ T8652] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 532.810883][ T8652] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 532.849964][ T8652] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 532.971888][T22077] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4505'. [ 533.228233][T22085] IPVS: persistence engine module ip_vs_pe_À not found [ 533.463873][T22095] netlink: 'syz.4.4509': attribute type 5 has an invalid length. [ 533.552167][T22095] gtp0: entered promiscuous mode [ 533.568404][T22095] gtp0: entered allmulticast mode [ 533.695638][T22103] bridge_slave_0: left allmulticast mode [ 533.712826][T22103] bridge_slave_0: left promiscuous mode [ 533.739043][T22103] bridge0: port 1(bridge_slave_0) entered disabled state [ 533.796489][T22103] bridge_slave_1: left allmulticast mode [ 533.828387][T22103] bridge_slave_1: left promiscuous mode [ 533.853935][T22103] bridge0: port 2(bridge_slave_1) entered disabled state [ 533.882052][T22103] bond0: (slave bond_slave_0): Releasing backup interface [ 533.902888][T22103] bond_slave_0: left promiscuous mode [ 533.909041][T22103] bond_slave_0: left allmulticast mode [ 533.949076][T22103] bond0: (slave bond_slave_1): Releasing backup interface [ 533.962593][T22103] bond_slave_1: left promiscuous mode [ 533.968532][T22103] bond_slave_1: left allmulticast mode [ 534.006455][T22103] team0: Port device team_slave_0 removed [ 534.015767][T22103] team0: Port device team_slave_1 removed [ 534.022500][T22103] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 534.056110][T22127] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4517'. [ 534.065999][T22127] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4517'. [ 534.076888][T22103] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 534.088254][T22103] bond3: (slave bridge2): Releasing active interface [ 534.098711][T22103] tipc: Resetting bearer [ 534.148053][T22116] vlan2: entered promiscuous mode [ 534.164695][T22116] bridge0: entered promiscuous mode [ 534.193096][T22122] netlink: 176 bytes leftover after parsing attributes in process `syz.1.4513'. [ 534.216129][T22132] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 534.300591][T22051] Bluetooth: hci2: command 0x0406 tx timeout [ 534.426938][T22144] team0: Device vti0 is up. Set it down before adding it as a team port [ 534.801120][T22168] netlink: 'syz.2.4526': attribute type 1 has an invalid length. [ 534.979346][T22168] bond7: entered promiscuous mode [ 534.996182][T22168] 8021q: adding VLAN 0 to HW filter on device bond7 [ 535.074776][T22172] 8021q: adding VLAN 0 to HW filter on device bond7 [ 535.103282][T22172] bond7: (slave wireguard1): The slave device specified does not support setting the MAC address [ 535.159599][T22172] bond7: (slave wireguard1): Setting fail_over_mac to active for active-backup mode [ 535.188655][T22172] bond7: (slave wireguard1): making interface the new active one [ 535.198138][T22172] wireguard1: entered promiscuous mode [ 535.215645][T22172] bond7: (slave wireguard1): Enslaving as an active interface with an up link [ 535.256057][T22195] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4532'. [ 535.675864][T22218] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4540'. [ 535.705254][T22218] netlink: 'syz.2.4540': attribute type 7 has an invalid length. [ 535.724235][T22218] netlink: 'syz.2.4540': attribute type 8 has an invalid length. [ 535.749716][T22218] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4540'. [ 536.086173][T22232] syzkaller0: entered promiscuous mode [ 536.099167][T22232] syzkaller0: entered allmulticast mode [ 536.116144][T22231] tipc: Enabled bearer , priority 0 [ 536.202768][T22231] tipc: Resetting bearer [ 536.215886][T22241] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4546'. [ 536.267948][T22231] tipc: Disabling bearer [ 536.361507][T22241] netlink: 88 bytes leftover after parsing attributes in process `syz.4.4546'. [ 536.385365][T22241] netem: invalid attributes len -24 [ 536.599895][T22252] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4549'. [ 536.630469][T22249] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4549'. [ 536.793782][T22258] netlink: 'syz.4.4552': attribute type 1 has an invalid length. [ 536.909061][T22258] bond3: entered promiscuous mode [ 536.917558][T22258] 8021q: adding VLAN 0 to HW filter on device bond3 [ 536.941820][T22273] netlink: 128 bytes leftover after parsing attributes in process `syz.1.4557'. [ 536.954788][T22276] netlink: 'syz.0.4558': attribute type 142 has an invalid length. [ 536.962967][T22273] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4557'. [ 536.964464][T22267] 8021q: adding VLAN 0 to HW filter on device bond4 [ 536.983403][T22267] bond3: (slave bond4): making interface the new active one [ 536.991996][T22267] bond4: entered promiscuous mode [ 536.998133][T22267] bond3: (slave bond4): Enslaving as an active interface with an up link [ 537.008226][T22276] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4558'. [ 537.027034][T22270] bridge1: entered promiscuous mode [ 537.034124][T22270] bridge1: entered allmulticast mode [ 537.103068][T22271] bridge1: entered promiscuous mode [ 537.108831][T22271] bridge1: entered allmulticast mode [ 537.367961][T22296] netlink: 'syz.1.4562': attribute type 11 has an invalid length. [ 537.417985][T22294] openvswitch: netlink: Unknown key attributes 2 [ 537.573787][T22310] netlink: 'syz.2.4567': attribute type 5 has an invalid length. [ 537.911492][T22324] macvtap1: entered allmulticast mode [ 537.917080][T22324] veth0_macvtap: entered allmulticast mode [ 537.992072][T22338] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 538.027511][T22342] netlink: 'syz.1.4577': attribute type 1 has an invalid length. [ 538.198396][T22352] 8021q: adding VLAN 0 to HW filter on device bond7 [ 538.249222][T22352] bond6: (slave bond7): making interface the new active one [ 538.268749][T22352] bond6: (slave bond7): Enslaving as an active interface with an up link [ 538.314283][T22342] bond6: entered promiscuous mode [ 538.331356][T22342] bond7: entered promiscuous mode [ 538.350612][T22342] bond6: entered allmulticast mode [ 538.366028][T22342] bond7: entered allmulticast mode [ 538.410685][T22342] 8021q: adding VLAN 0 to HW filter on device bond6 [ 538.492361][T22374] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 538.505992][T22365] tipc: Enabled bearer , priority 0 [ 538.516648][T22362] tipc: Resetting bearer [ 538.684611][T22385] netlink: 'syz.4.4585': attribute type 8 has an invalid length. [ 538.736756][T22390] netlink: 'syz.4.4585': attribute type 8 has an invalid length. [ 538.747194][T22377] netlink: 'syz.1.4583': attribute type 1 has an invalid length. [ 538.780664][T22388] (unnamed net_device) (uninitialized): down delay (33554432) is not a multiple of miimon (640), value rounded to 33553920 ms [ 538.806270][T22395] netlink: 'syz.3.4587': attribute type 2 has an invalid length. [ 538.848103][T22343] tipc: Disabling bearer [ 538.893642][T22377] bond8: (slave vxcan3): The slave device specified does not support setting the MAC address [ 538.912074][T22377] bond8: (slave vxcan3): Error -95 calling set_mac_address [ 539.058277][T22405] macsec1: entered promiscuous mode [ 539.086058][T22405] bridge0: entered promiscuous mode [ 539.094362][T22405] macsec1: entered allmulticast mode [ 539.118741][T22405] bridge0: entered allmulticast mode [ 539.129348][T22405] bridge0: port 1(macsec1) entered blocking state [ 539.147374][T22405] bridge0: port 1(macsec1) entered disabled state [ 539.168918][T22405] bridge0: left allmulticast mode [ 539.174517][T22405] bridge0: left promiscuous mode [ 539.726402][T22446] netlink: 'syz.2.4603': attribute type 10 has an invalid length. [ 539.749860][T22446] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 539.787957][T22446] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 540.333966][T22487] netlink: 'syz.2.4617': attribute type 1 has an invalid length. [ 540.347137][T22487] __nla_validate_parse: 17 callbacks suppressed [ 540.347155][T22487] netlink: 140 bytes leftover after parsing attributes in process `syz.2.4617'. [ 540.375662][T22494] syzkaller1: entered promiscuous mode [ 540.382552][T22487] netlink: 80 bytes leftover after parsing attributes in process `syz.2.4617'. [ 540.385937][T22494] syzkaller1: entered allmulticast mode [ 540.741541][T22515] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4626'. [ 540.762293][T22513] syzkaller0: entered promiscuous mode [ 540.767804][T22513] syzkaller0: entered allmulticast mode [ 541.095237][T22532] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4631'. [ 541.321331][T22544] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 541.344238][T22546] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4635'. [ 541.358377][T22502] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 541.365303][T22502] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 541.457848][T22502] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 541.478464][T22502] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 541.485603][T22550] netlink: 312 bytes leftover after parsing attributes in process `syz.3.4637'. [ 541.496088][T22551] netlink: 312 bytes leftover after parsing attributes in process `syz.3.4637'. [ 541.520699][T22552] dvmrp0: entered allmulticast mode [ 541.534589][T22553] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4637'. [ 541.549909][T22502] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 541.559653][T22502] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 541.649198][T22502] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 541.655758][T22502] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 541.705276][T22502] tipc: Resetting bearer [ 541.727004][T22502] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 541.735497][T22502] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 542.376411][T22575] gtp0: entered promiscuous mode [ 542.388992][T22575] gtp0: entered allmulticast mode [ 542.497905][T22583] netlink: 64 bytes leftover after parsing attributes in process `syz.0.4647'. [ 542.727524][T22598] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4652'. [ 542.801970][T22596] lo speed is unknown, defaulting to 1000 [ 543.010776][T22609] syzkaller1: entered promiscuous mode [ 543.016311][T22609] syzkaller1: entered allmulticast mode [ 543.030369][T22605] netlink: 'syz.1.4656': attribute type 142 has an invalid length. [ 543.237335][T22618] xt_l2tp: v2 tid > 0xffff: 1114244 [ 543.430645][T22635] netlink: 'syz.2.4663': attribute type 1 has an invalid length. [ 543.556070][T22643] netlink: 'syz.0.4665': attribute type 3 has an invalid length. [ 543.561117][T22641] tipc: Enabled bearer , priority 0 [ 543.571382][T22644] syzkaller0: entered promiscuous mode [ 543.589734][T22644] syzkaller0: entered allmulticast mode [ 543.628507][T22640] tipc: Resetting bearer [ 543.651648][T22647] netlink: 'syz.4.4667': attribute type 21 has an invalid length. [ 543.673915][T22648] netlink: 'syz.4.4667': attribute type 1 has an invalid length. [ 543.686527][T22640] tipc: Disabling bearer [ 543.799101][T22655] openvswitch: netlink: IPv4 tun info is not correct [ 543.826927][T22658] openvswitch: netlink: IPv4 tun info is not correct [ 544.022230][T22669] netlink: 'syz.0.4673': attribute type 2 has an invalid length. [ 544.072892][T22669] gretap0: entered promiscuous mode [ 544.144367][T22669] 0ªî{X¹¦: renamed from gretap0 [ 544.162865][T22669] 0ªî{X¹¦: left promiscuous mode [ 544.168018][T22669] 0ªî{X¹¦: entered allmulticast mode [ 544.195542][T22669] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 544.293133][T22683] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 544.306893][T22684] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 544.535738][T22704] netlink: 'syz.2.4684': attribute type 5 has an invalid length. [ 545.029306][T22733] netlink: 'syz.4.4692': attribute type 1 has an invalid length. [ 545.541660][T22724] 8021q: adding VLAN 0 to HW filter on device bond0 [ 545.557737][T22724] 8021q: adding VLAN 0 to HW filter on device team0 [ 545.582252][T18356] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 545.630284][T22724] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 545.676989][T22727] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 545.693126][T18355] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 545.761046][ T8614] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 545.779954][ T8614] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 545.994731][T22763] __nla_validate_parse: 19 callbacks suppressed [ 545.994748][T22763] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4703'. [ 546.173714][T18355] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 546.290238][T18355] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 546.517035][T22794] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4710'. [ 546.535264][T22795] netlink: 72 bytes leftover after parsing attributes in process `syz.4.4712'. [ 546.574127][T22795] netlink: 72 bytes leftover after parsing attributes in process `syz.4.4712'. [ 546.588034][T22796] team0: Mode changed to "activebackup" [ 546.934078][T22816] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4720'. [ 547.042912][T22825] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4722'. [ 547.092409][T22828] netlink: 7 bytes leftover after parsing attributes in process `syz.1.4724'. [ 547.305857][T22837] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4727'. [ 547.336072][T22842] netlink: 'syz.4.4729': attribute type 27 has an invalid length. [ 547.472080][T22850] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4731'. [ 547.551598][T22852] netlink: 100 bytes leftover after parsing attributes in process `syz.1.4733'. [ 547.710431][T22862] syzkaller0: entered promiscuous mode [ 547.717684][T22862] syzkaller0: entered allmulticast mode [ 547.736088][T22862] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 547.945899][T22879] 0ªî{X¹¦: entered promiscuous mode [ 547.966043][T22879] 0ªî{X¹¦: left allmulticast mode [ 548.013363][T22881] 1ªî{X¹¦: renamed from 30ªî{X¹¦ [ 548.041694][T22881] 1ªî{X¹¦: left promiscuous mode [ 548.055138][T22881] 1ªî{X¹¦: entered allmulticast mode [ 548.078228][T22881] A link change request failed with some changes committed already. Interface 31ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 548.096493][T22880] IPVS: Error connecting to the multicast addr [ 548.365142][T22899] netlink: 'syz.0.4748': attribute type 23 has an invalid length. [ 548.627118][T22919] macvtap2: entered allmulticast mode [ 548.639679][T22919] veth0_macvtap: entered allmulticast mode [ 548.674141][T22918] lo: left promiscuous mode [ 548.707979][T22918] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 548.773649][T22929] netlink: 'syz.0.4758': attribute type 8 has an invalid length. [ 549.037452][T22946] lo speed is unknown, defaulting to 1000 [ 549.080008][T22951] netlink: 'syz.4.4764': attribute type 1 has an invalid length. [ 549.433513][T22966] tipc: Enabling of bearer rejected, media not registered [ 549.630609][T22970] IPv6: sit2: Disabled Multicast RS [ 549.636960][T22970] sit2: entered allmulticast mode [ 549.819562][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 549.890736][T22982] Unsupported ieee802154 address type: 0 [ 549.906816][T22985] Unsupported ieee802154 address type: 0 [ 550.966216][T23044] netlink: 'syz.0.4796': attribute type 4 has an invalid length. [ 550.986122][T23044] netlink: 'syz.0.4796': attribute type 1 has an invalid length. [ 551.386207][T23068] __nla_validate_parse: 14 callbacks suppressed [ 551.386230][T23068] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4802'. [ 551.457012][T23068] xfrm1: entered promiscuous mode [ 551.464807][T23073] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4802'. [ 551.522858][T23068] xfrm1: entered allmulticast mode [ 551.624495][T23087] netlink: 'syz.2.4808': attribute type 3 has an invalid length. [ 551.642894][T23087] netlink: 'syz.2.4808': attribute type 1 has an invalid length. [ 551.661517][T23090] netlink: 'syz.3.4807': attribute type 15 has an invalid length. [ 551.671646][T23090] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4807'. [ 551.754141][T23096] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 551.775201][T23088] tipc: Bearer : already 2 bearers with priority 10 [ 551.785626][T23088] tipc: Bearer : trying with adjusted priority [ 551.793871][T23088] tipc: Enabling of bearer rejected, failed to enable media [ 551.804378][T23091] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 551.848701][T23098] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4810'. [ 552.005575][T18355] lo speed is unknown, defaulting to 1000 [ 552.246064][T23120] openvswitch: netlink: Flow key attr not present in new flow. [ 552.281921][T23122] netlink: 'syz.1.4820': attribute type 1 has an invalid length. [ 552.564806][T23141] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4827'. [ 552.569520][T23144] warn_alloc: 1 callbacks suppressed [ 552.569537][T23144] syz.2.4828: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 552.586754][T23141] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-tlb(5) [ 552.598719][T23144] CPU: 1 UID: 0 PID: 23144 Comm: syz.2.4828 Not tainted syzkaller #0 PREEMPT(full) [ 552.598745][T23144] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 552.598758][T23144] Call Trace: [ 552.598765][T23144] [ 552.598774][T23144] dump_stack_lvl+0x189/0x250 [ 552.598808][T23144] ? __pfx_dump_stack_lvl+0x10/0x10 [ 552.598832][T23144] ? __pfx__printk+0x10/0x10 [ 552.598859][T23144] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 552.598882][T23144] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 552.598907][T23144] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 552.598933][T23144] warn_alloc+0x214/0x310 [ 552.598964][T23144] ? stack_depot_save_flags+0x40/0x860 [ 552.598996][T23144] ? __pfx_warn_alloc+0x10/0x10 [ 552.599027][T23144] ? kasan_save_track+0x4f/0x80 [ 552.599053][T23144] ? xskq_create+0x56/0x170 [ 552.599069][T23144] ? xsk_init_queue+0xb0/0x110 [ 552.599085][T23144] ? xsk_setsockopt+0x4dc/0x8d0 [ 552.599117][T23144] ? do_sock_setsockopt+0x17c/0x1b0 [ 552.599139][T23144] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 552.599161][T23144] ? do_syscall_64+0xfa/0x3b0 [ 552.599181][T23144] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 552.599209][T23144] __vmalloc_node_range_noprof+0x125/0x12f0 [ 552.599270][T23144] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 552.599306][T23144] ? __kasan_kmalloc+0x93/0xb0 [ 552.599335][T23144] vmalloc_user_noprof+0xad/0xf0 [ 552.599366][T23144] ? xskq_create+0xbf/0x170 [ 552.599386][T23144] xskq_create+0xbf/0x170 [ 552.599408][T23144] xsk_init_queue+0xb0/0x110 [ 552.599429][T23144] xsk_setsockopt+0x4dc/0x8d0 [ 552.599460][T23144] ? __pfx_xsk_setsockopt+0x10/0x10 [ 552.599490][T23144] ? __pfx_aa_sk_perm+0x10/0x10 [ 552.599523][T23144] ? aa_sock_opt_perm+0xff/0x1b0 [ 552.599547][T23144] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 552.599568][T23144] ? __pfx_xsk_setsockopt+0x10/0x10 [ 552.599598][T23144] do_sock_setsockopt+0x17c/0x1b0 [ 552.599625][T23144] __x64_sys_setsockopt+0x13f/0x1b0 [ 552.599655][T23144] do_syscall_64+0xfa/0x3b0 [ 552.599675][T23144] ? lockdep_hardirqs_on+0x9c/0x150 [ 552.599694][T23144] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 552.599712][T23144] ? clear_bhb_loop+0x60/0xb0 [ 552.599736][T23144] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 552.599755][T23144] RIP: 0033:0x7f0f0b98eba9 [ 552.599773][T23144] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 552.599791][T23144] RSP: 002b:00007f0f09bf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 552.599811][T23144] RAX: ffffffffffffffda RBX: 00007f0f0bbd5fa0 RCX: 00007f0f0b98eba9 [ 552.599826][T23144] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000005 [ 552.599838][T23144] RBP: 00007f0f0ba11e19 R08: 0000000000000004 R09: 0000000000000000 [ 552.599851][T23144] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 552.599863][T23144] R13: 00007f0f0bbd6038 R14: 00007f0f0bbd5fa0 R15: 00007fff9f436ab8 [ 552.599895][T23144] [ 552.602787][T23144] Mem-Info: [ 552.869995][T23153] netlink: 'syz.1.4829': attribute type 1 has an invalid length. [ 552.886980][T23144] active_anon:3886 inactive_anon:0 isolated_anon:0 [ 552.886980][T23144] active_file:3076 inactive_file:40027 isolated_file:0 [ 552.886980][T23144] unevictable:768 dirty:42 writeback:0 [ 552.886980][T23144] slab_reclaimable:13482 slab_unreclaimable:127047 [ 552.886980][T23144] mapped:29885 shmem:1360 pagetables:1076 [ 552.886980][T23144] sec_pagetables:0 bounce:0 [ 552.886980][T23144] kernel_misc_reclaimable:0 [ 552.886980][T23144] free:1293722 free_pcp:12771 free_cma:0 [ 552.979619][T23144] Node 0 active_anon:15508kB inactive_anon:0kB active_file:12304kB inactive_file:159908kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:119584kB dirty:168kB writeback:0kB shmem:3972kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:15480kB pagetables:4064kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 553.046292][T23144] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:160kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 553.057519][T23153] 8021q: adding VLAN 0 to HW filter on device bond9 [ 553.115486][T23144] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 553.201578][T23144] lowmem_reserve[]: 0 2497 2499 2499 2499 [ 553.232456][T23144] Node 0 DMA32 free:1265984kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:15664kB inactive_anon:0kB active_file:12304kB inactive_file:158316kB unevictable:1536kB writepending:168kB present:3129332kB managed:2557420kB mlocked:0kB bounce:0kB free_pcp:37760kB local_pcp:18772kB free_cma:0kB [ 553.237530][T23169] sctp: [Deprecated]: syz.4.4832 (pid 23169) Use of struct sctp_assoc_value in delayed_ack socket option. [ 553.237530][T23169] Use struct sctp_sack_info instead [ 553.276394][T23144] lowmem_reserve[]: 0 0 1 1 1 [ 553.339455][T23144] Node 0 Normal free:0kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1592kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 553.419482][T23144] lowmem_reserve[]: 0 0 0 0 0 [ 553.444914][T23144] Node 1 Normal free:3893480kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:13280kB local_pcp:6752kB free_cma:0kB [ 553.502866][T23168] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 553.536649][T23144] lowmem_reserve[]: 0 0 0 0 0 [ 553.568558][T23144] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 553.609632][T23144] Node 0 DMA32: 2198*4kB (UME) 793*8kB (UM) 483*16kB (UME) 82*32kB (UME) 217*64kB (UM) 103*128kB (UME) 45*256kB (UME) 31*512kB (UME) 28*1024kB (UME) 7*2048kB (UM) 279*4096kB (UM) = 1265744kB [ 553.645239][T23173] syzkaller1: entered promiscuous mode [ 553.651117][T23144] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 553.663787][T23173] syzkaller1: entered allmulticast mode [ 553.672298][T23144] Node 1 Normal: 222*4kB (UME) 52*8kB (UME) 51*16kB (UME) 173*32kB (UME) 58*64kB (UME) 11*128kB (UME) 3*256kB (ME) 4*512kB (UME) 1*1024kB (M) 1*2048kB (E) 946*4096kB (M) = 3893480kB [ 553.702559][T23144] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 553.738360][T23144] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 553.763406][T23144] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 553.779893][T23144] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 553.790781][T23144] 44527 total pagecache pages [ 553.795485][T23144] 0 pages in swap cache [ 553.804729][T23144] Free swap = 124996kB [ 553.816530][T23144] Total swap = 124996kB [ 553.824611][T23144] 2097051 pages RAM [ 553.831216][T23144] 0 pages HighMem/MovableOnly [ 553.872002][T23144] 425670 pages reserved [ 553.890269][T23144] 0 pages cma reserved [ 553.949717][T23186] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4838'. [ 554.362995][T23208] netlink: 100 bytes leftover after parsing attributes in process `syz.3.4843'. [ 554.412818][T23207] bond6: (slave bond7): Releasing backup interface [ 554.421175][T23207] bond7: left promiscuous mode [ 554.426254][T23207] bond7: left allmulticast mode [ 554.467855][T23207] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4845'. [ 554.542274][T23207] pim6reg1: entered promiscuous mode [ 554.547610][T23207] pim6reg1: entered allmulticast mode [ 554.662938][T23222] netlink: 'syz.4.4847': attribute type 1 has an invalid length. [ 554.672118][T23218] veth15: entered promiscuous mode [ 554.776643][T23224] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 554.883825][T23229] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0) [ 555.091492][T23245] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.4855'. [ 555.564406][T23269] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4860'. [ 556.407910][T23296] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4867'. [ 556.552595][T23302] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4872'. [ 556.575851][T23306] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4871'. [ 556.586342][T23306] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4871'. [ 556.598686][T23300] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 556.614210][T23300] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 556.677684][T23311] macvlan2: entered promiscuous mode [ 556.717791][T23311] macvlan2: entered allmulticast mode [ 556.730207][T23311] bond1: (slave macvlan2): Error -98 calling set_mac_address [ 556.956629][T23330] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 557.248260][T23347] netlink: 'syz.2.4879': attribute type 1 has an invalid length. [ 557.256884][T23347] netlink: 'syz.2.4879': attribute type 1 has an invalid length. [ 557.265187][T23347] netlink: 'syz.2.4879': attribute type 4 has an invalid length. [ 557.278949][T23347] netlink: 188 bytes leftover after parsing attributes in process `syz.2.4879'. [ 557.296295][T23347] NCSI netlink: No device for ifindex 830110067 [ 557.307016][T23347] netlink: 56 bytes leftover after parsing attributes in process `syz.2.4879'. [ 557.330405][T23352] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.4882'. [ 557.501673][T23362] netlink: 256 bytes leftover after parsing attributes in process `syz.4.4886'. [ 557.524423][T23362] unsupported nlmsg_type 40 [ 557.582233][T23365] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.4887'. [ 557.680578][T23377] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 557.687869][T23377] IPv6: NLM_F_CREATE should be set when creating new route [ 557.695209][T23377] IPv6: NLM_F_CREATE should be set when creating new route [ 557.702473][T23377] IPv6: NLM_F_CREATE should be set when creating new route [ 557.721577][T23377] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 557.729243][T23382] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 557.798890][T23377] netlink: 'syz.4.4891': attribute type 1 has an invalid length. [ 557.817441][T23387] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4894'. [ 557.914700][T23387] netlink: 'syz.1.4894': attribute type 3 has an invalid length. [ 558.113779][T23405] tipc: Enabling of bearer rejected, failed to enable media [ 558.296954][T23418] tipc: Enabled bearer , priority 0 [ 558.365667][T23414] 8021q: adding VLAN 0 to HW filter on device bond5 [ 558.372560][T23423] netlink: 'syz.1.4904': attribute type 1 has an invalid length. [ 558.433237][T23411] 8021q: adding VLAN 0 to HW filter on device bond5 [ 558.449132][T23411] bond5: (slave vxcan3): The slave device specified does not support setting the MAC address [ 558.459865][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 558.484262][T23411] bond5: (slave vxcan3): Error -95 calling set_mac_address [ 558.541261][T23418] tipc: Disabling bearer [ 559.135146][T23464] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 559.274075][T23474] tipc: Enabled bearer , priority 10 [ 559.282290][T23474] netlink: 'syz.2.4921': attribute type 1 has an invalid length. [ 559.528186][T23491] netem: change failed [ 559.613213][T23499] rdma_rxe: rxe_newlink: failed to add lo [ 559.656047][T23499] vlan0: entered allmulticast mode [ 559.675333][T23499] veth0_to_bond: entered allmulticast mode [ 559.797041][T23509] netlink: 'syz.3.4929': attribute type 16 has an invalid length. [ 559.808173][T23509] netlink: 'syz.3.4929': attribute type 3 has an invalid length. [ 560.201025][T23533] netlink: 'syz.0.4938': attribute type 4 has an invalid length. [ 560.209152][T23532] netlink: 'syz.0.4938': attribute type 4 has an invalid length. [ 560.402898][T23543] Bluetooth: hci1: too big key_count value 32778 [ 560.448514][T23547] (unnamed net_device) (uninitialized): option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 560.663671][T23552] lo speed is unknown, defaulting to 1000 [ 560.750778][T23562] netlink: 'syz.4.4949': attribute type 1 has an invalid length. [ 560.887839][T23568] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 560.928848][T23568] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 560.945224][T23568] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 560.955010][T23568] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 560.975675][T23572] netlink: 'syz.0.4952': attribute type 26 has an invalid length. [ 560.999245][T23568] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 561.018867][T23568] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 561.048078][T23568] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 561.082356][T23568] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 561.091455][T23568] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 561.118901][T23568] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 561.151163][T23568] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 561.171614][T23568] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 561.187290][T23568] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 561.198306][T23568] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 561.229279][T23568] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 561.237688][T23588] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 561.242500][T23568] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 561.286357][T23568] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 561.309958][T23568] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 561.328210][T23568] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 561.329293][T23593] netlink: 'syz.0.4957': attribute type 21 has an invalid length. [ 561.337051][T23568] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 561.355729][T23568] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 561.364391][T23568] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 561.374196][T23568] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 561.382889][T23568] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 561.392002][T23568] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 561.400778][T23568] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 561.409785][T23568] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 561.418447][T23568] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 561.427692][T23568] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 561.436999][T23568] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 561.445683][T23568] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 561.454722][T23568] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 561.464016][T23568] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 561.484045][T23568] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 561.493098][T23568] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 561.514395][T23568] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 561.528886][T23568] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 561.547068][T23568] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 561.602000][T23568] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 561.619024][T23568] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 561.638734][T23568] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 561.648154][T23605] __nla_validate_parse: 16 callbacks suppressed [ 561.648172][T23605] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4961'. [ 561.673074][T23568] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 561.684449][T23568] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 561.788874][T23613] lo speed is unknown, defaulting to 1000 [ 561.818972][T23616] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4965'. [ 561.911532][T23620] gre1: entered promiscuous mode [ 561.930556][T23620] gre1: entered allmulticast mode [ 562.163262][T23633] netdevsim netdevsim0: Direct firmware load for failed with error -2 [ 562.197768][T23633] netdevsim netdevsim0: Falling back to sysfs fallback for: [ 562.347894][T23637] netlink: 'syz.3.4969': attribute type 3 has an invalid length. [ 562.504140][T23643] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4970'. [ 562.675358][T23651] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4972'. [ 562.700943][T23651] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4972'. [ 562.739005][T23651] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4972'. [ 562.788953][T23658] veth0: entered promiscuous mode [ 562.797256][T23657] veth0: left promiscuous mode [ 562.875692][T23662] netlink: 'syz.3.4978': attribute type 24 has an invalid length. [ 562.956570][T23664] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 563.016958][T23667] netlink: 165 bytes leftover after parsing attributes in process `syz.2.4981'. [ 563.074794][T23671] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.4982'. [ 563.094896][T23672] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4981'. [ 563.095140][T23669] xfrm1: entered allmulticast mode [ 563.111890][T23671] netlink: 9 bytes leftover after parsing attributes in process `syz.0.4982'. [ 563.126429][T23671] 1ªî{X¹¦: entered promiscuous mode [ 563.131943][T23671] 1ªî{X¹¦: left allmulticast mode [ 563.135902][T23672] netlink: 'syz.2.4981': attribute type 1 has an invalid length. [ 563.143652][T23671] 0ªî{X¹¦: renamed from 31ªî{X¹¦ [ 563.155597][T23671] 0ªî{X¹¦: left promiscuous mode [ 563.169472][T23671] 0ªî{X¹¦: entered allmulticast mode [ 563.180067][T23671] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 563.539312][T23688] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 563.573428][T23683] sctp: [Deprecated]: syz.3.4986 (pid 23683) Use of struct sctp_assoc_value in delayed_ack socket option. [ 563.573428][T23683] Use struct sctp_sack_info instead [ 563.720942][T23700] geneve2: entered promiscuous mode [ 563.728686][T23700] geneve2: entered allmulticast mode [ 563.755473][ T64] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 563.773990][ T64] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 563.816672][T23708] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0 [ 563.885621][T23705] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 563.897619][T23705] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 563.918384][T23697] 0ªî{X¹¦: entered promiscuous mode [ 563.924485][T23697] 0ªî{X¹¦: left allmulticast mode [ 565.062627][T23783] bridge: RTM_NEWNEIGH with invalid state 0x8 [ 565.130211][T23783] syzkaller1: entered promiscuous mode [ 565.135829][T23783] syzkaller1: entered allmulticast mode [ 565.549181][T23705] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 565.583207][T23705] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 565.615005][T23705] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 565.806281][T23705] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 565.819224][T23705] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 565.837445][T23705] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 565.996611][T23828] validate_nla: 3 callbacks suppressed [ 565.996631][T23828] netlink: 'syz.2.5030': attribute type 2 has an invalid length. [ 566.158049][ T8652] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 566.183358][ T8652] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 19999 - 0 [ 566.242766][ T8652] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 566.383794][ T8618] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 566.403006][ T8618] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 19999 - 0 [ 566.436864][ T8618] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 566.468146][T23842] netlink: 'syz.2.5032': attribute type 10 has an invalid length. [ 566.480487][ T8618] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 566.499351][ T8618] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 19999 - 0 [ 566.550040][ T8618] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 566.583429][T23842] team0: Port device dummy0 added [ 566.594131][T23849] veth0: entered promiscuous mode [ 566.619056][T23850] veth0: left promiscuous mode [ 566.624576][ T8652] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 566.634259][ T8652] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 19999 - 0 [ 566.647101][ T8652] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 567.038700][T23881] netlink: 'syz.1.5042': attribute type 2 has an invalid length. [ 567.060594][T23881] __nla_validate_parse: 13 callbacks suppressed [ 567.060612][T23881] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5042'. [ 567.498436][T23905] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5050'. [ 567.584154][ T8630] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 567.598288][T23905] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5050'. [ 567.614826][ T8630] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 567.635788][ T8630] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 567.661827][ T8630] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 567.733753][T23913] netlink: 52 bytes leftover after parsing attributes in process `syz.4.5053'. [ 567.797245][T23918] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5054'. [ 567.816133][T23917] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5055'. [ 567.836997][T23917] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5055'. [ 567.847182][T23917] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 567.885793][T23923] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5054'. [ 567.927150][T23923] netlink: 'syz.0.5054': attribute type 4 has an invalid length. [ 567.950725][T23925] netlink: 'syz.0.5054': attribute type 4 has an invalid length. [ 567.961779][ T8089] lo speed is unknown, defaulting to 1000 [ 567.967642][ T8089] syz0: Port: 1 Link DOWN [ 568.003920][T18356] lo speed is unknown, defaulting to 1000 [ 568.010870][T23927] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5057'. [ 568.031054][T18356] syz0: Port: 1 Link ACTIVE [ 568.036511][ T8089] lo speed is unknown, defaulting to 1000 [ 568.602848][T23961] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5065'. [ 568.738993][T23972] netlink: 'syz.2.5071': attribute type 2 has an invalid length. [ 568.834383][T23961] lo speed is unknown, defaulting to 1000 [ 568.892493][T23982] delete_channel: no stack [ 569.298918][T24001] netlink: 'syz.3.5079': attribute type 12 has an invalid length. [ 569.534321][T24007] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on [ 569.924467][T24034] IPVS: Error connecting to the multicast addr [ 570.242511][T24042] netlink: 'syz.4.5093': attribute type 27 has an invalid length. [ 570.315001][T24046] netlink: 'syz.0.5095': attribute type 1 has an invalid length. [ 570.415727][T24051] bond3: (slave vxcan1): The slave device specified does not support setting the MAC address [ 570.428046][T24051] bond3: (slave vxcan1): Error -95 calling set_mac_address [ 570.454639][T24046] gretap0: entered promiscuous mode [ 570.464024][T24046] bond3: (slave gretap0): making interface the new active one [ 570.472781][T24046] bond3: (slave gretap0): Enslaving as an active interface with an up link [ 570.497519][T24046] macvlan3: entered promiscuous mode [ 570.503085][T24046] macvlan3: entered allmulticast mode [ 570.510176][T24046] bond3: entered promiscuous mode [ 570.516383][T24046] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 570.527743][T24046] bond3: (slave macvlan3): the slave hw address is in use by the bond; giving it the hw address of gretap0 [ 570.565043][T24046] bond3: left promiscuous mode [ 570.834395][T24071] netlink: zone id is out of range [ 570.882964][T24067] lo: entered promiscuous mode [ 570.921999][T24067] tunl0: entered promiscuous mode [ 570.967194][T24067] gre0: entered promiscuous mode [ 570.997436][T24067] erspan0: entered promiscuous mode [ 571.017773][T24067] ip_vti0: entered promiscuous mode [ 571.044618][T18356] lo speed is unknown, defaulting to 1000 [ 571.049777][T24081] netlink: 'syz.2.5105': attribute type 1 has an invalid length. [ 571.086865][T18356] syz0: Port: 1 Link DOWN [ 571.100601][T18356] lo speed is unknown, defaulting to 1000 [ 571.208868][T24085] geneve3: entered promiscuous mode [ 571.222965][T24085] geneve3: entered allmulticast mode [ 571.233892][T24090] netlink: 'syz.0.5110': attribute type 1 has an invalid length. [ 571.233975][ T8646] netdevsim netdevsim3 netdevsim0: set [1, 2] type 2 family 0 port 19999 - 0 [ 571.275610][ T8646] netdevsim netdevsim3 netdevsim1: set [1, 2] type 2 family 0 port 19999 - 0 [ 571.407214][T24085] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 571.428883][T24085] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 571.485543][ T8646] netdevsim netdevsim3 netdevsim2: set [1, 2] type 2 family 0 port 19999 - 0 [ 571.504152][T24101] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 571.512639][T24101] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 572.058145][T24124] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 572.277478][T24140] macvtap3: entered allmulticast mode [ 572.385154][T24146] tap0: tun_chr_ioctl cmd 1074025676 [ 572.390740][T24146] tap0: owner set to 0 [ 572.638111][T24160] netlink: 'syz.0.5129': attribute type 3 has an invalid length. [ 572.706759][T24164] __nla_validate_parse: 8 callbacks suppressed [ 572.706777][T24164] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5131'. [ 572.727663][T24164] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5131'. [ 572.759040][T24164] bridge0: port 1(vlan1) entered blocking state [ 572.761883][T24166] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 572.810159][T24164] bridge0: port 1(vlan1) entered disabled state [ 572.818235][T24164] vlan1: entered allmulticast mode [ 572.827535][T24164] bridge0: entered allmulticast mode [ 572.847898][T24164] vlan1: left allmulticast mode [ 572.872036][T24164] bridge0: left allmulticast mode [ 573.037142][T24180] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5134'. [ 573.043956][T24183] netlink: 'syz.0.5135': attribute type 10 has an invalid length. [ 573.047334][T24180] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5134'. [ 573.064135][T24180] netlink: 'syz.2.5134': attribute type 3 has an invalid length. [ 573.075084][T24180] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5134'. [ 573.096591][T24185] netlink: 'syz.0.5135': attribute type 10 has an invalid length. [ 573.101009][T24183] team0: Port device 0! added [ 573.176151][T24180] vcan0 (unregistering): left allmulticast mode [ 573.211672][T24185] team0: Failed to send port change of device 0! via netlink (err -105) [ 573.235926][T24185] team0: Failed to send options change via netlink (err -105) [ 573.258240][T24185] team0: Failed to send port change of device 0! via netlink (err -105) [ 573.275711][T24185] team0: Port device 0! removed [ 573.397901][T24085] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 573.420610][T24085] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 573.431117][T24085] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 2] type 2 family 0 port 19999 - 0 [ 573.546823][T24085] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 573.587354][T24085] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 573.611354][T24085] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 2] type 2 family 0 port 19999 - 0 [ 573.667484][T24198] tipc: Trying to set illegal importance in message [ 573.734585][T24085] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 573.757434][T24085] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 573.776510][T24085] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 2] type 2 family 0 port 19999 - 0 [ 573.814517][T24195] netlink: 'syz.2.5139': attribute type 1 has an invalid length. [ 573.823162][T24195] netlink: 184 bytes leftover after parsing attributes in process `syz.2.5139'. [ 573.839947][T24195] netlink: 'syz.2.5139': attribute type 1 has an invalid length. [ 573.859167][T24195] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5139'. [ 574.049316][T24208] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5143'. [ 574.083114][ T8630] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 19999 - 0 [ 574.090581][T24209] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5142'. [ 574.092952][ T8630] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 256 - 0 [ 574.121665][ T8630] netdevsim netdevsim3 eth0: set [1, 2] type 2 family 0 port 6081 - 0 [ 574.127426][T24209] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5142'. [ 574.146313][ T8618] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 19999 - 0 [ 574.163906][ T8618] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 256 - 0 [ 574.187485][ T8618] netdevsim netdevsim3 eth1: set [1, 2] type 2 family 0 port 6081 - 0 [ 574.212699][ T8652] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 19999 - 0 [ 574.227093][ T8652] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 256 - 0 [ 574.240322][ T8652] netdevsim netdevsim3 eth2: set [1, 2] type 2 family 0 port 6081 - 0 [ 574.285551][ T64] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 19999 - 0 [ 574.294510][ T64] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 256 - 0 [ 574.306557][ T64] netdevsim netdevsim3 eth3: set [1, 2] type 2 family 0 port 6081 - 0 [ 574.418734][T24218] bridge9: the hash_elasticity option has been deprecated and is always 16 [ 574.582016][T24230] netlink: 'syz.3.5148': attribute type 1 has an invalid length. [ 574.634125][T24237] netlink: 'syz.3.5148': attribute type 4 has an invalid length. [ 574.741055][T24243] pimreg: entered allmulticast mode [ 574.978659][T24258] batadv0: entered promiscuous mode [ 574.991141][T24258] batadv0: entered allmulticast mode [ 575.015645][T24258] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 575.092073][T24260] bond10: entered promiscuous mode [ 575.097342][T24260] bond10: entered allmulticast mode [ 575.102855][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 575.117966][T24260] 8021q: adding VLAN 0 to HW filter on device bond10 [ 575.472660][T24289] sctp: [Deprecated]: syz.1.5170 (pid 24289) Use of struct sctp_assoc_value in delayed_ack socket option. [ 575.472660][T24289] Use struct sctp_sack_info instead [ 575.540677][T24294] bridge0: port 1(syz_tun) entered blocking state [ 575.547528][T24294] bridge0: port 1(syz_tun) entered disabled state [ 575.587123][T24294] syz_tun: entered allmulticast mode [ 575.612627][T24294] syz_tun: left allmulticast mode [ 576.261402][T24336] tipc: Enabled bearer , priority 0 [ 576.281833][T24336] tipc: Resetting bearer [ 576.380008][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 576.812910][T24370] validate_nla: 1 callbacks suppressed [ 576.812930][T24370] netlink: 'syz.0.5196': attribute type 1 has an invalid length. [ 576.820199][T24371] syzkaller1: entered promiscuous mode [ 576.856725][T24371] syzkaller1: entered allmulticast mode [ 578.030267][T24439] netlink: 'syz.0.5217': attribute type 4 has an invalid length. [ 578.054482][T24440] __nla_validate_parse: 47 callbacks suppressed [ 578.054501][T24440] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5216'. [ 578.084182][T24439] netlink: 'syz.0.5217': attribute type 4 has an invalid length. [ 578.141339][T18354] lo speed is unknown, defaulting to 1000 [ 578.150111][T18354] syz0: Port: 1 Link ACTIVE [ 578.161106][T18354] lo speed is unknown, defaulting to 1000 [ 578.290693][T24446] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5219'. [ 578.388876][T24451] tipc: Enabling of bearer rejected, already enabled [ 578.408891][T24451] mac80211_hwsim hwsim41 syzkaller0: entered promiscuous mode [ 578.476323][T24451] mac80211_hwsim hwsim41 syzkaller0: entered allmulticast mode [ 578.518148][T24450] tipc: Resetting bearer [ 578.519486][T24459] netlink: 56 bytes leftover after parsing attributes in process `syz.1.5223'. [ 578.700451][T24469] netlink: 'syz.2.5226': attribute type 3 has an invalid length. [ 578.717315][T24469] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.5226'. [ 578.740931][T24472] netlink: 'syz.4.5228': attribute type 21 has an invalid length. [ 578.924620][T24481] netlink: 'syz.2.5232': attribute type 1 has an invalid length. [ 578.984436][T24484] veth19: entered promiscuous mode [ 578.995606][T24484] veth19: entered allmulticast mode [ 579.027344][T24485] openvswitch: netlink: ct_state flags 0000ee01 unsupported [ 579.125384][T24489] netlink: 92 bytes leftover after parsing attributes in process `syz.2.5236'. [ 579.139815][T24489] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5236'. [ 579.149089][T24489] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5236'. [ 579.189769][T24492] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5238'. [ 579.217814][T24489] syz_tun: entered promiscuous mode [ 579.242818][T24489] syz_tun: left promiscuous mode [ 579.292129][T24502] netlink: 5636 bytes leftover after parsing attributes in process `syz.1.5240'. [ 579.520255][T24514] bridge4: entered promiscuous mode [ 579.546568][T24514] bridge4: entered allmulticast mode [ 579.597197][T24521] netlink: 'syz.3.5247': attribute type 1 has an invalid length. [ 579.605559][T24521] netlink: 224 bytes leftover after parsing attributes in process `syz.3.5247'. [ 579.776374][T24532] sctp: [Deprecated]: syz.3.5250 (pid 24532) Use of struct sctp_assoc_value in delayed_ack socket option. [ 579.776374][T24532] Use struct sctp_sack_info instead [ 579.821050][T24532] sctp: [Deprecated]: syz.3.5250 (pid 24532) Use of struct sctp_assoc_value in delayed_ack socket option. [ 579.821050][T24532] Use struct sctp_sack_info instead [ 579.861893][T24532] sctp: [Deprecated]: syz.3.5250 (pid 24532) Use of struct sctp_assoc_value in delayed_ack socket option. [ 579.861893][T24532] Use struct sctp_sack_info instead [ 579.927071][T24538] IPVS: sh: FWM 3 0x00000003 - no destination available [ 579.934528][T24538] netlink: 'syz.1.5253': attribute type 28 has an invalid length. [ 579.942856][T24538] netlink: 'syz.1.5253': attribute type 3 has an invalid length. [ 580.480726][T24579] netlink: 'syz.0.5262': attribute type 4 has an invalid length. [ 580.547677][ T8089] lo speed is unknown, defaulting to 1000 [ 580.553878][ T8089] syz0: Port: 1 Link DOWN [ 580.609086][ T8089] lo speed is unknown, defaulting to 1000 [ 580.794110][T24593] tipc: Enabling of bearer rejected, already enabled [ 580.820588][T24593] mac80211_hwsim hwsim39 syzkaller0: entered promiscuous mode [ 580.828100][T24593] mac80211_hwsim hwsim39 syzkaller0: entered allmulticast mode [ 580.985347][T24600] 8021q: adding VLAN 0 to HW filter on device bond2 [ 581.032938][T24605] bond2: (slave gretap0): making interface the new active one [ 581.042596][T24605] bond2: (slave gretap0): Enslaving as an active interface with an up link [ 581.096540][T24600] vlan2: entered allmulticast mode [ 581.121314][T24600] bond2: entered allmulticast mode [ 581.143858][T24600] gretap0: entered allmulticast mode [ 581.164539][T24600] bond2: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 581.578853][T24633] macsec2: entered promiscuous mode [ 581.600540][T24633] macsec2: entered allmulticast mode [ 582.436804][T24685] nbd: must specify an index to disconnect [ 582.484932][T24666] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 582.500829][T24666] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 582.515297][T24666] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 582.524746][T24666] bond0 (unregistering): Released all slaves [ 582.891089][T24703] validate_nla: 1 callbacks suppressed [ 582.891106][T24703] netlink: 'syz.4.5301': attribute type 1 has an invalid length. [ 582.942141][T24703] netlink: 'syz.4.5301': attribute type 11 has an invalid length. [ 583.444009][T24726] tipc: Enabled bearer , priority 0 [ 583.460726][T24726] syzkaller0: entered promiscuous mode [ 583.466230][T24726] syzkaller0: entered allmulticast mode [ 583.509284][T24725] tipc: Resetting bearer [ 583.528992][T24725] tipc: Disabling bearer [ 583.557327][T24728] __nla_validate_parse: 58 callbacks suppressed [ 583.557346][T24728] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5308'. [ 583.576489][T24728] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5308'. [ 583.586064][T24728] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5308'. [ 583.596724][T24728] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5308'. [ 583.606395][T24728] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5308'. [ 583.632572][T24728] netlink: 84 bytes leftover after parsing attributes in process `syz.0.5308'. [ 583.647694][T24730] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 583.854220][T24738] dvmrp0: entered allmulticast mode [ 583.904098][T24743] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5313'. [ 584.257605][T24764] tipc: Enabling of bearer rejected, already enabled [ 584.317974][T24757] lo speed is unknown, defaulting to 1000 [ 584.387661][T24770] sch_tbf: burst 127 is lower than device syzkaller0 mtu (313) ! [ 584.420783][T24773] netlink: 44 bytes leftover after parsing attributes in process `syz.4.5320'. [ 584.603471][T24784] team0: Port device dummy0 removed [ 584.630379][T24784] batman_adv: batadv0: Adding interface: dummy0 [ 584.655873][T24784] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 584.692333][T24790] netlink: 'syz.2.5321': attribute type 10 has an invalid length. [ 584.711714][T24790] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5321'. [ 584.731306][T24784] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 584.828249][T24795] tipc: Enabling of bearer rejected, failed to enable media [ 584.894364][T24790] bridge0: port 1(batadv0) entered blocking state [ 584.901601][T24790] bridge0: port 1(batadv0) entered disabled state [ 584.932555][T24790] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 585.052549][T24795] syzkaller0: entered promiscuous mode [ 585.058269][T24795] syzkaller0: entered allmulticast mode [ 585.314814][T24821] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5327'. [ 585.442323][T24825] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 586.459608][T24870] netlink: 'syz.3.5343': attribute type 6 has an invalid length. [ 586.476227][T24863] lo speed is unknown, defaulting to 1000 [ 587.079213][T24902] netlink: 'syz.3.5352': attribute type 10 has an invalid length. [ 587.148733][T24905] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 587.249941][T24910] netlink: 'syz.3.5355': attribute type 39 has an invalid length. [ 587.514757][T24930] nbd: must specify at least one socket [ 588.757098][T25003] netlink: 'syz.4.5385': attribute type 1 has an invalid length. [ 588.964017][T25011] veth23: entered promiscuous mode [ 588.996009][T25019] __nla_validate_parse: 13 callbacks suppressed [ 588.996028][T25019] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5388'. [ 589.013636][T25019] openvswitch: netlink: nsh attribute has unmatched MD type 0. [ 589.042789][T25019] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 589.131626][T25022] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5389'. [ 589.137568][T25026] netlink: 'syz.2.5391': attribute type 1 has an invalid length. [ 589.167412][T25029] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5392'. [ 589.194218][T25026] 8021q: adding VLAN 0 to HW filter on device bond9 [ 589.205627][T25030] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5391'. [ 589.259828][T25034] netlink: 100 bytes leftover after parsing attributes in process `syz.1.5394'. [ 589.385741][T25040] team0: Port device dummy0 removed [ 589.428510][T25046] netlink: 'syz.0.5396': attribute type 1 has an invalid length. [ 589.435139][T25040] bond0: (slave bond_slave_0): Releasing backup interface [ 589.448743][T25045] xt_HMARK: proto mask must be zero with L3 mode [ 589.461198][T25050] netlink: 'syz.1.5399': attribute type 2 has an invalid length. [ 589.483413][T25040] bond0: (slave bond_slave_1): Releasing backup interface [ 589.524349][T25040] team0: Port device team_slave_0 removed [ 589.554089][T25040] team0: Port device team_slave_1 removed [ 589.562008][T25040] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 589.573100][T25040] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 589.618152][T25040] bond2: (slave gretap0): Releasing active interface [ 589.630198][T25040] gretap0: left allmulticast mode [ 589.737928][T25048] macvlan3: entered promiscuous mode [ 589.744988][T25048] macvlan3: entered allmulticast mode [ 589.752612][T25048] bond4: entered promiscuous mode [ 589.758931][T25048] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 589.772464][T25048] bond4: left promiscuous mode [ 589.980825][T25069] bond3: entered promiscuous mode [ 589.985951][T25069] bond3: entered allmulticast mode [ 589.994614][T25069] 8021q: adding VLAN 0 to HW filter on device bond3 [ 590.067824][T25081] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5408'. [ 590.108882][T25087] netlink: 'syz.0.5410': attribute type 2 has an invalid length. [ 590.137103][T25087] netlink: 'syz.0.5410': attribute type 8 has an invalid length. [ 590.153507][T25087] netlink: 1148 bytes leftover after parsing attributes in process `syz.0.5410'. [ 590.173105][T25092] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5412'. [ 590.267061][T25097] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5415'. [ 590.898937][T25145] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5428'. [ 591.022469][T25152] pim6reg: entered allmulticast mode [ 591.218682][T25159] tipc: Enabling of bearer rejected, failed to enable media [ 591.289036][T25160] syzkaller1: entered promiscuous mode [ 591.300425][T25160] syzkaller1: entered allmulticast mode [ 591.834265][T25185] netlink: 'syz.3.5442': attribute type 29 has an invalid length. [ 591.870374][T25185] netlink: 'syz.3.5442': attribute type 29 has an invalid length. [ 592.265353][T25216] netlink: 'syz.2.5453': attribute type 4 has an invalid length. [ 592.371138][T25220] syzkaller0: entered promiscuous mode [ 592.376649][T25220] syzkaller0: entered allmulticast mode [ 592.766999][T25241] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 592.774305][T25241] IPv6: NLM_F_CREATE should be set when creating new route [ 593.087638][T25262] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 593.127110][T25267] nbd: must specify at least one socket [ 593.141705][T25267] netlink: 'syz.1.5470': attribute type 29 has an invalid length. [ 593.707835][T25295] pim6reg1: entered promiscuous mode [ 593.717878][T25295] pim6reg1: entered allmulticast mode [ 593.901685][T25307] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 594.100840][T25306] __nla_validate_parse: 19 callbacks suppressed [ 594.100860][T25306] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5482'. [ 594.352129][T25327] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5489'. [ 594.451223][T25334] netlink: 256 bytes leftover after parsing attributes in process `syz.4.5491'. [ 594.475057][T25337] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 594.514256][T25338] netlink: 256 bytes leftover after parsing attributes in process `syz.3.5492'. [ 594.579964][T25342] netlink: 256 bytes leftover after parsing attributes in process `syz.3.5492'. [ 594.900558][T25360] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5496'. [ 594.983865][T25362] netlink: 'syz.4.5497': attribute type 4 has an invalid length. [ 595.021598][T25362] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5497'. [ 595.057372][T25370] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5498'. [ 595.062738][T25365] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5498'. [ 595.136373][T25370] bridge_slave_1: left allmulticast mode [ 595.167890][T25370] bridge_slave_1: left promiscuous mode [ 595.199402][T25370] bridge0: port 2(bridge_slave_1) entered disabled state [ 595.276060][T25370] : left allmulticast mode [ 595.305388][T25370] bridge0: port 1() entered disabled state [ 595.408449][T25370] bond1: (slave vlan2): Releasing active interface [ 595.789965][T25399] sctp: [Deprecated]: syz.0.5504 (pid 25399) Use of struct sctp_assoc_value in delayed_ack socket option. [ 595.789965][T25399] Use struct sctp_sack_info instead [ 596.094924][T25419] openvswitch: netlink: Missing key (keys=40, expected=100) [ 596.100344][T25421] netlink: 68 bytes leftover after parsing attributes in process `syz.3.5512'. [ 596.226469][T25430] netlink: 'syz.0.5514': attribute type 10 has an invalid length. [ 596.276890][T25430] team0: Port device geneve0 added [ 596.475192][T25444] xt_HMARK: spi-set and port-set can't be combined [ 597.205249][T25495] bridge0: port 1(vlan2) entered blocking state [ 597.217581][T25495] bridge0: port 1(vlan2) entered disabled state [ 597.230102][T25495] vlan2: entered allmulticast mode [ 597.240656][T25495] bridge0: entered allmulticast mode [ 597.253043][T25495] vlan2: left allmulticast mode [ 597.258084][T25495] bridge0: left allmulticast mode [ 597.447444][T25510] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 597.618853][T25519] veth9: entered allmulticast mode [ 597.637548][T25520] vlan2: entered allmulticast mode [ 597.645089][T25520] bond0: entered allmulticast mode [ 597.656096][T25522] IPv6: Can't replace route, no match found [ 597.671305][T25518] vlan2: entered allmulticast mode [ 597.681448][T25519] netlink: 'syz.3.5545': attribute type 29 has an invalid length. [ 597.690776][T25519] netlink: 'syz.3.5545': attribute type 29 has an invalid length. [ 597.714307][T25519] netlink: 'syz.3.5545': attribute type 29 has an invalid length. [ 597.725187][T25519] netlink: 'syz.3.5545': attribute type 29 has an invalid length. [ 598.149188][T25555] unknown channel width for channel at 909000KHz? [ 598.524566][T25577] netlink: 'syz.3.5562': attribute type 3 has an invalid length. [ 598.553476][T25586] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 598.841531][T25599] IPVS: set_ctl: invalid protocol: 16 0.0.0.0:0 [ 599.135325][T25615] geneve3: entered promiscuous mode [ 599.157121][T25615] geneve3: entered allmulticast mode [ 599.201591][T25612] __nla_validate_parse: 21 callbacks suppressed [ 599.201612][T25612] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5572'. [ 599.244995][T25612] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5572'. [ 599.662523][T25646] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5584'. [ 599.850666][T25658] netem: change failed [ 600.028470][T25670] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5589'. [ 600.103394][T25675] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5590'. [ 600.103396][T25674] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5590'. [ 600.122333][T25670] hsr_slave_0 (unregistering): left promiscuous mode [ 600.123212][T25674] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5590'. [ 600.139264][T25674] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5590'. [ 600.150222][T25674] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5590'. [ 600.150850][T25675] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5590'. [ 600.577195][T25726] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 601.228932][T25774] veth0: entered promiscuous mode [ 601.285435][T25782] netlink: 'syz.4.5604': attribute type 25 has an invalid length. [ 601.354110][T25774] veth0: left promiscuous mode [ 601.560998][T25797] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 601.828565][T25811] netlink: 'syz.0.5615': attribute type 3 has an invalid length. [ 601.919118][T25817] netlink: 'syz.1.5617': attribute type 1 has an invalid length. [ 602.009755][T25820] netlink: 'syz.0.5618': attribute type 4 has an invalid length. [ 602.257103][T25819] infiniband syz1: set down [ 602.261839][T25819] infiniband syz1: added bond_slave_1 [ 602.331403][T25819] RDS/IB: syz1: added [ 602.336365][T25819] smc: adding ib device syz1 with port count 1 [ 602.358781][T25819] smc: ib device syz1 port 1 has pnetid SYZ0 (user defined) [ 603.096659][T25867] netlink: 'syz.0.5634': attribute type 30 has an invalid length. [ 603.678812][T25887] bridge6: entered allmulticast mode [ 603.839179][T25895] nbd: must specify a device to reconfigure [ 604.433711][T25926] 8021q: adding VLAN 0 to HW filter on device bond0 [ 604.451393][T25926] 8021q: adding VLAN 0 to HW filter on device team0 [ 604.506386][T25926] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 604.512417][T25934] __nla_validate_parse: 124 callbacks suppressed [ 604.512435][T25934] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5654'. [ 604.585086][T25929] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 604.746977][T25937] tls_set_device_offload: netdev not found [ 604.812234][T25942] netlink: 364 bytes leftover after parsing attributes in process `syz.3.5655'. [ 605.256414][T25958] sctp: [Deprecated]: syz.1.5661 (pid 25958) Use of struct sctp_assoc_value in delayed_ack socket option. [ 605.256414][T25958] Use struct sctp_sack_info instead [ 605.414336][T25960] netlink: 52 bytes leftover after parsing attributes in process `syz.0.5662'. [ 605.588089][T25976] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5665'. [ 605.642103][T25982] netlink: 'syz.0.5666': attribute type 8 has an invalid length. [ 605.726944][T25982] netlink: 'syz.0.5666': attribute type 39 has an invalid length. [ 606.767896][T26031] vlan2: entered promiscuous mode [ 606.936836][T26038] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5680'. [ 607.099639][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 607.572093][T26070] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5691'. [ 607.591654][T26070] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5691'. [ 608.138371][T26093] netlink: 'syz.1.5701': attribute type 2 has an invalid length. [ 608.147414][T26093] netlink: 'syz.1.5701': attribute type 2 has an invalid length. [ 608.156012][T26093] netlink: 'syz.1.5701': attribute type 2 has an invalid length. [ 608.164587][T26093] netlink: 'syz.1.5701': attribute type 1 has an invalid length. [ 608.181182][T26091] netlink: 'syz.3.5699': attribute type 10 has an invalid length. [ 608.627295][T26108] openvswitch: netlink: IP tunnel dst address not specified [ 609.661118][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 610.463058][T22051] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 610.483189][T22051] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 610.502002][T22051] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 610.515489][T22051] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 610.532773][T22051] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 610.557150][ T5188] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 610.584946][ T5188] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 610.600608][ T5188] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 610.608863][ T5188] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 610.617136][ T5188] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 611.025357][T26110] IPVS: Unknown mcast interface: dummy0 [ 611.182802][T26133] netlink: 9 bytes leftover after parsing attributes in process `syz.3.5712'. [ 611.236049][T26136] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5713'. [ 611.406399][T26143] veth0: entered promiscuous mode [ 611.443668][T26143] netlink: 104 bytes leftover after parsing attributes in process `syz.1.5715'. [ 611.470880][T26142] veth0: left promiscuous mode [ 611.514144][T26147] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 611.540528][T26147] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 611.595997][T26149] tipc: Enabling of bearer rejected, already enabled [ 611.702798][T26154] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 611.738441][T26155] bridge_slave_0: invalid flags given to default FDB implementation [ 611.780190][T26161] netlink: 'syz.1.5721': attribute type 1 has an invalid length. [ 611.817547][T26161] netlink: 72 bytes leftover after parsing attributes in process `syz.1.5721'. [ 611.872008][T26163] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5722'. [ 611.964159][T26167] netlink: 'syz.4.5725': attribute type 1 has an invalid length. [ 612.079274][ T3563] tipc: Resetting bearer [ 612.079843][T26176] netlink: 'syz.4.5727': attribute type 1 has an invalid length. [ 612.135429][T26176] bond7: (slave vxcan3): The slave device specified does not support setting the MAC address [ 612.147492][T26176] bond7: (slave vxcan3): Error -95 calling set_mac_address [ 612.182270][T26180] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5727'. [ 612.319210][T26186] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5730'. [ 612.656376][T26199] netlink: 10 bytes leftover after parsing attributes in process `syz.1.5734'. [ 612.699778][ T5188] Bluetooth: hci4: command tx timeout [ 612.809074][T26207] sctp: [Deprecated]: syz.3.5735 (pid 26207) Use of int in maxseg socket option. [ 612.809074][T26207] Use struct sctp_assoc_value instead [ 612.923347][T26215] netlink: 'syz.1.5736': attribute type 2 has an invalid length. [ 613.036724][T26222] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5740'. [ 613.059669][T26222] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5740'. [ 613.396740][T26247] netlink: 'syz.4.5747': attribute type 1 has an invalid length. [ 613.718087][T26264] netlink: 'syz.4.5754': attribute type 22 has an invalid length. [ 613.726368][T26264] netlink: 'syz.4.5754': attribute type 22 has an invalid length. [ 613.905170][T26281] netlink: 'syz.0.5759': attribute type 1 has an invalid length. [ 614.152196][T26294] (unnamed net_device) (uninitialized): option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 614.304539][T26304] netlink: 'syz.1.5766': attribute type 2 has an invalid length. [ 614.781286][ T5188] Bluetooth: hci4: command tx timeout [ 614.930922][T26332] netlink: zone id is out of range [ 614.936410][T26332] netlink: zone id is out of range [ 614.941866][T26332] netlink: zone id is out of range [ 614.947246][T26332] netlink: zone id is out of range [ 614.964019][T26332] netlink: zone id is out of range [ 614.970519][T26332] netlink: zone id is out of range [ 614.976101][T26332] netlink: zone id is out of range [ 614.982203][T26332] netlink: zone id is out of range [ 614.988310][T26332] netlink: zone id is out of range [ 615.005376][T26332] netlink: zone id is out of range [ 616.093038][T26410] nft_compat: unsupported protocol 5 [ 616.098668][T26410] nft_compat: unsupported protocol 5 [ 616.745805][T26436] __nla_validate_parse: 17 callbacks suppressed [ 616.745825][T26436] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5798'. [ 616.870814][ T5188] Bluetooth: hci4: command tx timeout [ 617.082434][T26451] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5801'. [ 617.230813][T26458] netlink: 152 bytes leftover after parsing attributes in process `syz.1.5803'. [ 617.262890][T26458] netlink: 'syz.1.5803': attribute type 4 has an invalid length. [ 617.308211][T26464] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5806'. [ 617.346677][T26464] netlink: 220 bytes leftover after parsing attributes in process `syz.4.5806'. [ 617.404036][T26469] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5808'. [ 617.436180][T26469] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 617.458692][T26469] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5808'. [ 617.468022][T26469] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5808'. [ 617.625546][T26479] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5812'. [ 617.791976][T26482] netlink: 'syz.1.5813': attribute type 4 has an invalid length. [ 617.876612][T26493] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5815'. [ 618.341923][T26515] tipc: Enabled bearer , priority 0 [ 618.360498][T26515] syzkaller0: entered promiscuous mode [ 618.373791][T26515] syzkaller0: entered allmulticast mode [ 618.459022][T26515] tipc: Resetting bearer [ 618.490657][T26514] tipc: Resetting bearer [ 618.555299][T26514] tipc: Disabling bearer [ 618.579770][T26525] netlink: 'syz.1.5825': attribute type 2 has an invalid length. [ 618.943798][ T5188] Bluetooth: hci4: command tx timeout [ 619.988556][T26556] netlink: 'syz.1.5834': attribute type 26 has an invalid length. [ 620.999316][T26547] 8021q: VLANs not supported on ip_vti0 [ 621.027877][T26556] netlink: 'syz.1.5834': attribute type 26 has an invalid length. [ 621.309054][T26571] tipc: Enabling of bearer rejected, already enabled [ 621.793578][T26593] net_ratelimit: 33 callbacks suppressed [ 621.793598][T26593] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 622.082321][T26609] IPVS: set_ctl: invalid protocol: 58 255.255.255.255:20003 [ 622.221777][T26615] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 622.245073][T26617] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 622.705898][T26642] __nla_validate_parse: 6 callbacks suppressed [ 622.705919][T26642] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5865'. [ 622.895087][T26651] tipc: Enabling of bearer rejected, already enabled [ 623.008555][T26657] netlink: 'syz.0.5870': attribute type 1 has an invalid length. [ 623.056143][T26657] 8021q: adding VLAN 0 to HW filter on device bond6 [ 623.078820][T26663] netlink: 'syz.1.5872': attribute type 1 has an invalid length. [ 623.358535][T26680] netlink: 'syz.4.5877': attribute type 12 has an invalid length. [ 623.366882][T26680] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5877'. [ 623.488318][T26693] mac80211_hwsim hwsim36 syzkaller0: entered promiscuous mode [ 623.496364][T26693] mac80211_hwsim hwsim36 syzkaller0: entered allmulticast mode [ 623.511685][T26692] tipc: Enabled bearer , priority 0 [ 623.571270][T26699] netlink: 'syz.3.5880': attribute type 10 has an invalid length. [ 623.634371][T26699] team0: Port device dummy0 added [ 623.715948][T26709] netlink: 256 bytes leftover after parsing attributes in process `syz.1.5883'. [ 623.750486][T26710] netlink: 256 bytes leftover after parsing attributes in process `syz.1.5883'. [ 623.823996][T26709] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5883'. [ 624.031220][T26728] block nbd0: reconnected socket [ 624.111276][T26739] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5893'. [ 624.140093][ T64] tipc: Resetting bearer [ 624.776419][T26778] tipc: Enabled bearer , priority 0 [ 624.783758][T26777] tipc: Enabling of bearer rejected, already enabled [ 624.805390][T26776] syzkaller0: entered promiscuous mode [ 624.818475][T26776] syzkaller0: entered allmulticast mode [ 624.824382][T26783] netlink: 72 bytes leftover after parsing attributes in process `syz.3.5907'. [ 624.828442][T26776] sch_tbf: burst 4 is lower than device syzkaller0 mtu (1514) ! [ 624.873590][T26777] tipc: Resetting bearer [ 624.892196][T26774] tipc: Resetting bearer [ 624.927657][T26774] tipc: Disabling bearer [ 624.996920][T26789] IPVS: set_ctl: invalid protocol: 46 172.30.1.4:20003 [ 625.019860][ T5188] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 625.164279][T26800] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5911'. [ 625.215776][T26801] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5911'. [ 625.562460][T26815] netlink: 44 bytes leftover after parsing attributes in process `syz.0.5914'. [ 625.707281][T26822] netlink: 'syz.1.5917': attribute type 1 has an invalid length. [ 626.650391][T26875] RDS: rds_bind could not find a transport for ::ffff:100.1.1.2, load rds_tcp or rds_rdma? [ 626.917771][T26894] netlink: 'syz.1.5939': attribute type 1 has an invalid length. [ 626.997985][T26894] 8021q: adding VLAN 0 to HW filter on device bond12 [ 627.007364][T26894] bond11: (slave bond12): making interface the new active one [ 627.018117][T26894] bond11: (slave bond12): Enslaving as an active interface with an up link [ 627.169147][T26906] bond11: (slave gretap1): Enslaving as a backup interface with an up link [ 627.195072][T26894] 8021q: adding VLAN 0 to HW filter on device bond11 [ 627.461791][T26922] mac80211_hwsim hwsim39 syzkaller0: left promiscuous mode [ 627.473320][T26922] mac80211_hwsim hwsim39 syzkaller0: left allmulticast mode [ 627.487309][T26922] tipc: Resetting bearer [ 627.812039][T26943] netlink: 'syz.0.5951': attribute type 1 has an invalid length. [ 628.071623][T26953] team0: Device wireguard2 is of different type [ 628.164768][T26961] nbd: socks must be embedded in a SOCK_ITEM attr [ 628.322026][T26966] netlink: 'syz.0.5959': attribute type 39 has an invalid length. [ 628.375265][T26969] __nla_validate_parse: 3 callbacks suppressed [ 628.375283][T26969] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5960'. [ 628.458155][T26976] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5961'. [ 629.106081][T26994] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5966'. [ 629.282820][T27006] (unnamed net_device) (uninitialized): option packets_per_slave: mode dependency failed, not supported in mode active-backup(1) [ 629.301027][T27006] tipc: Enabling of bearer rejected, already enabled [ 629.313178][T27006] mac80211_hwsim hwsim39 syzkaller0: entered promiscuous mode [ 629.321450][T27006] mac80211_hwsim hwsim39 syzkaller0: entered allmulticast mode [ 629.331603][T27006] tipc: Resetting bearer [ 629.337518][T27009] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5969'. [ 629.389839][T27008] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5969'. [ 629.483692][T27019] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5973'. [ 629.520724][T27019] openvswitch: netlink: Flow actions attr not present in new flow. [ 629.645968][T27008] netlink: 'syz.0.5969': attribute type 12 has an invalid length. [ 629.766552][T27031] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 629.773835][T27031] IPv6: NLM_F_CREATE should be set when creating new route [ 629.848658][T27037] netlink: 100 bytes leftover after parsing attributes in process `syz.1.5978'. [ 629.865665][T27037] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5978'. [ 629.876258][T27037] openvswitch: netlink: Unknown key attributes 2 [ 630.079892][T27044] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5981'. [ 630.144983][T27047] netlink: 212216 bytes leftover after parsing attributes in process `syz.1.5981'. [ 630.560138][T27074] netlink: 'syz.3.5991': attribute type 10 has an invalid length. [ 630.611231][T27074] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 630.695549][T27084] netlink: 'syz.1.5993': attribute type 29 has an invalid length. [ 630.703388][T27083] netlink: 'syz.1.5993': attribute type 29 has an invalid length. [ 630.712222][T27086] syzkaller1: entered promiscuous mode [ 630.712243][T27086] syzkaller1: entered allmulticast mode [ 631.075642][T27111] mac80211_hwsim hwsim64 ÿ: renamed from wlan1 [ 631.132600][T27115] netlink: 'syz.3.6003': attribute type 1 has an invalid length. [ 631.240609][T27122] block nbd4: Unsupported socket: shutdown callout must be supported. [ 631.283227][T27119] 8021q: adding VLAN 0 to HW filter on device bond6 [ 631.326937][T27119] bond5: (slave bond6): making interface the new active one [ 631.356552][T27128] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 631.367632][T27119] bond5: (slave bond6): Enslaving as an active interface with an up link [ 631.422419][T27115] bond5: (slave gretap1): Enslaving as a backup interface with an up link [ 653.260218][ T8638] unregister_netdevice: waiting for batadv_slave_0 to become free. Usage count = 2 [ 653.269951][ T8638] ref_tracker: netdev@ffff88807917c610 has 1/1 users at [ 653.269951][ T8638] batadv_hard_if_event+0xf0f/0x1730 [ 653.269951][ T8638] notifier_call_chain+0x1b3/0x3e0 [ 653.269951][ T8638] register_netdevice+0x1608/0x1ae0 [ 653.269951][ T8638] veth_newlink+0x5cc/0xa50 [ 653.269951][ T8638] rtnl_newlink_create+0x30d/0xb00 [ 653.269951][ T8638] rtnl_newlink+0x16d6/0x1c70 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=-1 (errno 104: Connection reset by peer) [ 653.269951][ T8638] rtnetlink_rcv_msg+0x7cc/0xb70 [ 653.269951][ T8638] netlink_rcv_skb+0x208/0x470 [ 653.269951][ T8638] netlink_unicast+0x82c/0x9e0 [ 653.269951][ T8638] netlink_sendmsg+0x805/0xb30 [ 653.269951][ T8638] __sock_sendmsg+0x21c/0x270 [ 653.269951][ T8638] __sys_sendto+0x3bd/0x520 [ 653.269951][ T8638] __x64_sys_sendto+0xde/0x100 [ 653.269951][ T8638] do_syscall_64+0xfa/0x3b0 [ 653.269951][ T8638] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 653.269951][ T8638]