last executing test programs: 7.065451634s ago: executing program 4 (id=3093): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) sendmsg$NFT_MSG_GETSET(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000580)={0x14, 0xa, 0xa, 0x5, 0x0, 0x0, {0x0, 0x0, 0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x4004881}, 0x40000) 7.007884019s ago: executing program 4 (id=3094): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = socket$unix(0x1, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x8000000, {0x0, 0x0, 0x0, r5, {0x0, 0xe}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x3}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20008001}, 0x24004880) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000600)=@getsa={0x34, 0x12, 0x1, 0x0, 0x0, {@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, 0x0, 0x0, 0x32}, [@mark={0xc}]}, 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=@newlink={0x44, 0x10, 0x1, 0x470bd27, 0x25dfd402, {0x0, 0x0, 0x0, r6, 0x0, 0x3eaa1}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_NEIGH_SUPPRESS={0x5}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0xc0c4}, 0x8002) 6.602590162s ago: executing program 4 (id=3100): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="1400000017000b63d25a80648c2594f917a3c92b", 0x14}], 0x1}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x22, 0x4, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r5, 0x7d4165c9) r6 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r6, &(0x7f0000000540)=[{&(0x7f0000000180)="580000001400192340834b80040d8c560a066f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0effeffe809005300fff5dd00000010000100060c10000000000000000000", 0x58}], 0x1) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) r9 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000003080)=@newtfilter={0x58, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r10, {0xffff, 0x5}, {}, {0x7, 0x3}}, [@filter_kind_options=@f_basic={{0xa}, {0x28, 0x2, [@TCA_BASIC_EMATCHES={0x24, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x4, 0x7, 0x6}, {{0x2, 0x1, 0x1, 0x1}, {0x3}}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}]}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x404c000}, 0x0) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r11) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r12 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r12, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r13, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000140)='\r', 0x5dc}], 0x1}, 0x4) ioctl$XFS_IOC_FD_TO_HANDLE(r0, 0xc038586a, &(0x7f00000001c0)={r0, &(0x7f0000000040)=':)+\xc6', 0x80002, &(0x7f0000000100)={@align=0x3, {0xff4a, 0x3, 0x2}}, 0x3, &(0x7f0000000140), &(0x7f0000000180)=0x10000}) ioctl$IOCTL_GET_NCIDEV_IDX(r14, 0x0, &(0x7f0000000200)) 4.928550086s ago: executing program 4 (id=3107): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r1, &(0x7f0000000140)="96", 0x1, 0x0, &(0x7f0000000280)={0xa, 0x0, 0x0, @private2}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f0000000000)=0x6, 0x4) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x7, &(0x7f00000000c0)="fa", 0x1) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000240)=@getchain={0x24, 0x11, 0x1, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0xd, 0x4}, {0xfff1, 0xfff2}, {0xffe0}}}, 0x24}}, 0x40000) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000400)="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", 0x245}], 0x1}, 0x0) 4.621452705s ago: executing program 4 (id=3111): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000018c0)={'veth0\x00', 0x0}) socket$igmp(0x2, 0x3, 0x2) r2 = socket$inet(0x2, 0x3, 0x2) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r4, 0x65, 0x7, &(0x7f00000001c0)=0x8, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000100)={'vxcan1\x00', 0x0}) sendmsg$can_raw(r4, &(0x7f0000000180)={&(0x7f00000005c0)={0x1d, r5}, 0x10, &(0x7f0000000240)={&(0x7f00000003c0)=@can={{}, 0x41, 0x0, 0x4, 0x0, "5000040000008e56"}, 0x10}}, 0x0) r6 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="4c000000140097fa7059ae08060c040002ff0f0200000000000001870182fa73a69d35b5cca84708f7abca1b4e7d06a6bd7c493872f750375ed08a560400000003c48f93b82a03000000469e", 0x4c}], 0x1}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r2, 0x89f4, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000040)={@broadcast, 0x1, 0x0, 0x20, 0x0, [{@initdev}, {@local}]}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000022780)=ANY=[@ANYBLOB="4000000010003b150c00"/20, @ANYRES32=0x0, @ANYBLOB="81900000815c00001800128008000200", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r1, @ANYBLOB], 0x40}}, 0x48010) 4.3742655s ago: executing program 4 (id=3113): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="8c000000", @ANYRESHEX=r2, @ANYRESOCT=r2, @ANYRES32=r2, @ANYBLOB="7000028038000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000500030003000000080004"], 0x8c}, 0x1, 0x0, 0x0, 0x24004000}, 0x24044880) socket$netlink(0x10, 0x3, 0x10) (async) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) socket$netlink(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) (async) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000240)) (async) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="8c000000", @ANYRESHEX=r2, @ANYRESOCT=r2, @ANYRES32=r2, @ANYBLOB="7000028038000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000500030003000000080004"], 0x8c}, 0x1, 0x0, 0x0, 0x24004000}, 0x24044880) (async) 2.64952167s ago: executing program 2 (id=3132): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f00000001c0)=@raw={'raw\x00', 0x8, 0x3, 0x348, 0x270, 0x1000000, 0xffffffff, 0x0, 0xffffffff, 0x308, 0xffffffff, 0xffffffff, 0x308, 0xffffffff, 0x3, 0x0, {[{{@ip={@loopback, @private=0xa010100, 0x0, 0xff000000, 'bond_slave_1\x00', 'geneve1\x00', {}, {0xff}, 0x84, 0x0, 0x28}, 0x0, 0x1b8, 0x218, 0x0, {0x0, 0x1c8}, [@common=@inet=@sctp={{0x148}, {[0x4e24, 0x4e21], [0x4e24, 0x4e21], [0x101, 0x81c, 0x4, 0x3041800, 0x10000, 0x8, 0x7f, 0x3, 0x8000, 0xe4, 0x5e9c90b, 0x4b, 0x5, 0x2, 0x5, 0x6, 0x0, 0xea, 0x8001, 0x4, 0x6937, 0x7598, 0x4, 0x5, 0x1, 0x9, 0x7, 0x81, 0x0, 0xba11, 0x4, 0x2, 0x3d, 0x10001, 0x3ff, 0xffffffff, 0xffff, 0x8000, 0x1000, 0x0, 0x28, 0x800, 0x6, 0xfffffffa, 0xd721, 0x80000000, 0x0, 0xfff, 0x0, 0x10001, 0x2, 0x3, 0x7575bec7, 0x8cdf, 0x3, 0x4, 0x1000, 0x24, 0xd8e, 0x4, 0x8, 0x4, 0xe1, 0x8a], 0x0, [{0x80, 0xb}, {0xac, 0xc, 0x5}, {0x10, 0x4f, 0x4}, {0x4, 0x80, 0x4}], 0x4, 0x4, 0x4}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x37}, 0x5, 0x0, [0x25, 0x5, 0x28, 0x23, 0x12, 0x34, 0x16, 0x3, 0x10, 0x39, 0x27, 0x2a, 0x6, 0xe, 0x36, 0x10], 0x27b02525726059f5, 0x7, 0x4}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x8}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x64}}}}, 0x3a8) writev(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000300)='0', 0x1}], 0x1) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000300)=""/8, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x4}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0xb6) (async) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) socket$nl_route(0x10, 0x3, 0x0) (async) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e01, 0x5, @loopback, 0xa}}, 0x0, 0x0, 0x3d, 0x0, "bb02a3c364ca41d6357e544524474004000b42a21d7214bf92494925208a0e2f964e0000c534a6324d6193fcf19b2df3ee818afaa4ff1f56c54dc46d8b6d2ccd008aa0cc1dc2767bbe00"}, 0xd8) (async) r2 = socket$kcm(0x23, 0x5, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async) r4 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="5500000018007f03c0fe15b282a380930a50000248a8430b916d0200390009002300ff6c0200000015000500fc01ffdd070b566881b38432009b3100b125ca997b5fdf13090200fb572fbc100800000400240200e2", 0x55}], 0x1}, 0x0) (async) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000240)=0x9, 0x4) (async) listen(r2, 0x800) (async) accept4(r2, 0x0, 0x0, 0x80000) (async) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)="e8700e4f5256b1e4344d50a944ff67347cff6127e6ef12", 0x17}], 0x1}], 0x1, 0x40800) (async) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_SEC_PARAMS(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000740)={0x17c, r5, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_SEC_ENABLED={0x5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_SEC_OUT_KEY_ID={0x8c, 0x2b, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x28, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}]}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x14, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}]}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x5c}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x101}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x2c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}]}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x7fff}]}, @NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x2a, 0x1}, @NL802154_ATTR_SEC_ENABLED={0x5}, @NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x2c, 0x4}, @NL802154_ATTR_SEC_OUT_KEY_ID={0x98, 0x2b, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x7}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xffffffffffffffff}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x7}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x58, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}]}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x80000001}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_MODE={0x8}]}]}, 0x17c}, 0x1, 0x0, 0x0, 0x55}, 0x1) (async) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) write$tun(r3, &(0x7f0000000380)=ANY=[@ANYBLOB="1c0000f500000000000000862dfdff000000"], 0x78) (async) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r7, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xb007}, 0x4) syz_emit_ethernet(0x6e, &(0x7f00000001c0)={@multicast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "02adf7", 0x38, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x2, {0x9, 0x6, "c76b72", 0x5, 0x11, 0x0, @dev={0xfe, 0x80, '\x00', 0x10}, @private2, [], "96b24e2389907a94"}}}}}}}, 0x0) (async) write$tun(r0, &(0x7f0000002240)=ANY=[@ANYBLOB="0800080000000200b7e71400020045b00fc0006801"], 0xfce) (async) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x1000, 0x0, 0x1}, 0x48) 2.446109945s ago: executing program 2 (id=3134): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64"], 0x3c}}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x70bd28, 0x25dfdbfc, {0x2, 0x20, 0x1, 0xc8, r2}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x40000c0) r3 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r3, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) r4 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r4, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @loopback}, 0xc) setsockopt$inet_MCAST_JOIN_GROUP(r4, 0x0, 0x2a, &(0x7f0000000140)={0xa, {{0x2, 0x0, @multicast2}}}, 0x88) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x503, 0x70bd2a, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3806}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x440b0) socket$netlink(0x10, 0x3, 0x0) (async) socket(0x10, 0x803, 0x0) (async) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) (async) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64"], 0x3c}}, 0x40000) (async) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x70bd28, 0x25dfdbfc, {0x2, 0x20, 0x1, 0xc8, r2}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x40000c0) (async) socket$inet(0x2, 0x3, 0x2) (async) setsockopt$inet_mreqsrc(r3, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) (async) socket$inet(0x2, 0x3, 0x2) (async) setsockopt$inet_mreqsrc(r4, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @loopback}, 0xc) (async) setsockopt$inet_MCAST_JOIN_GROUP(r4, 0x0, 0x2a, &(0x7f0000000140)={0xa, {{0x2, 0x0, @multicast2}}}, 0x88) (async) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x503, 0x70bd2a, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3806}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x440b0) (async) 2.306622563s ago: executing program 0 (id=3135): syz_80211_inject_frame(&(0x7f0000000600)=@broadcast, &(0x7f00000006c0)=ANY=[@ANYBLOB="08ba060008021100004e9ad0f44280956012aafbcbfe2ad106004780"], 0x1c) 2.270498757s ago: executing program 1 (id=3137): r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) connect$llc(r0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000010c0)={0xffffffffffffffff}) r3 = gettid() ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000000)=r3) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000040)={0x30, 0x2e, 0x20, 0xf0bd26, 0x25dfdbfc, {0x1f}, [@nested={0x1c, 0xb8, 0x0, 0x1, [@nested={0x8, 0x5a, 0x0, 0x1, [@nested={0x4, 0x4f}]}, @typed={0x8, 0x107, 0x0, 0x0, @uid}, @nested={0x8, 0x4e, 0x0, 0x1, [@nested={0x4, 0x8f}]}]}]}, 0x30}}, 0x41) 2.210964796s ago: executing program 3 (id=3138): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = accept$unix(0xffffffffffffffff, &(0x7f0000000000)=@abs, &(0x7f0000000080)=0x6e) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'netpci0\x00'}) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) readv(r2, &(0x7f0000000300)=[{&(0x7f0000000080)=""/107, 0x6b}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r4, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$XFS_IOC_ERROR_CLEARALL(r3, 0x40085875) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r0, &(0x7f0000000780)}, 0x20) 2.066392039s ago: executing program 1 (id=3139): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x43, &(0x7f0000000100)=0xd, 0x4) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$smc(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000380)=ANY=[@ANYBLOB="20000700561178741b837414899e7f8f9bdb13567537960dcef98f0d68291524350ab05755bd79634e4d3f3e71421fb9b14674a44f4f11f7", @ANYRES16=r2, @ANYBLOB="11002dbd7000fddbdf25030000000900010073797a3200000000"], 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x48000) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000000)=@newlink={0x4c, 0x10, 0x503, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6230}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GTP_CREATE_SOCKETS={0x5, 0x5, 0x1}, @IFLA_GTP_RESTART_COUNT={0x5, 0x6, 0x4}]}}}, @IFLA_ADDRESS={0xa, 0x3, @random="3a712f0756b8"}]}, 0x4c}}, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000100)={'ip_vti0\x00', &(0x7f0000000040)={'gretap0\x00', 0x0, 0x7, 0x10, 0xa, 0x8, {{0x1d, 0x4, 0x1, 0x3, 0x74, 0x68, 0x0, 0x0, 0x29, 0x0, @local, @private, {[@lsrr={0x83, 0x1f, 0xb6, [@empty, @remote, @remote, @private=0xa010100, @private=0xa010101, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @rr={0x7, 0xf, 0xc3, [@dev={0xac, 0x14, 0x14, 0x16}, @loopback, @remote]}, @cipso={0x86, 0x23, 0xffffffffffffffff, [{0x6, 0x9, "230c2b52a09f9d"}, {0x5, 0x11, "1c6a38f3ec5e723d2c79150ca6fab8"}, {0x7, 0x3, "b1"}]}, @lsrr={0x83, 0xf, 0xb7, [@empty, @multicast2, @loopback]}]}}}}}) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r6, 0x0, 0x484, &(0x7f00000000c0)=""/24, &(0x7f0000000340)=0x18) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f0000000280)={'gre0\x00', &(0x7f0000000200)={'sit0\x00', r5, 0x80, 0x700, 0x5, 0x5, {{0xd, 0x4, 0x0, 0x7, 0x34, 0x64, 0x0, 0x0, 0x2f, 0x0, @private=0xa010101, @private=0xa010100, {[@end, @timestamp={0x44, 0x1c, 0x5c, 0x0, 0x5, [0x1, 0x401, 0x623, 0x7, 0x7, 0x176814d7]}]}}}}}) (async) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000140)=@getqdisc={0x34, 0x26, 0x300, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x10, 0x7}, {0x2, 0xfffe}, {0xc, 0xa}}, [{0x4}, {0x4}, {0x4}, {0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) (async) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000008c0)=ANY=[@ANYBLOB="540100001800010000000000000000001d0100001500030000000000000000008ca5be073cff296e040000001e0106000000fe000071ec6d721744cd5200080000f8cfcad4c4ec6511ec028c5028564abce83afe14c93e15e556c2baed7f897fe841c155a2b2a4b9f3052995cdf66a9c7922ff0300005b6c67281f1519cd7c32c2bf7563b9452575505da99ea128d37616896be8764a2c78edbad5bde7a5e405bdc893770338925f824bd24689c0d11a5568fc3aaa9ad0df766d8ea8d3bf1006e3df494e2f373148ecb4adafdd39874e9808b118301f1e76054a64c6d243523f5de7b347f3b740e105d0ed18fae7289635301ebd8949268090b3bcd4cbed5f1cfe93cff41a9630802f96defe9e8ea850529827c5e301953a8abaafa1f121e590f74e28233f4129d4587eee87ec5d42c3ef0619022c005c8d586b2a88d81866930fca15c8a95d29e5b2ea00000800050091"], 0x154}}, 0x0) (async) setsockopt$inet_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f0000000300), 0x3) 2.008817204s ago: executing program 2 (id=3140): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=ANY=[@ANYBLOB="28010000100007000000000000000000ff020000000000000000000000000001e00000020000000000000000000000004e200000000000000000000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ff010000000000000000000000000001000000002b000000fc000000000000000000edff0000000000000000000000000000000000000000020000000000000000000000000000000000001000000000ffffffffffffffff00000000000000000000000000000000000000000000000000002000000000000700000000000000000000000000000000000400fdffffffe80a000000000000000000000a000200340000000000000014000e"], 0x128}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=@newsa={0x104, 0x10, 0x7, 0x80000000, 0x0, {{@in6=@mcast2, @in=@multicast2, 0x4e20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in=@empty, {0x0, 0x0, 0x2, 0x0, 0x10000000, 0xffffffffffffffff}, {0x0, 0x200000, 0x7}, {0x40000, 0xfffffffd, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x104}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) (async) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=ANY=[@ANYBLOB="28010000100007000000000000000000ff020000000000000000000000000001e00000020000000000000000000000004e200000000000000000000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ff010000000000000000000000000001000000002b000000fc000000000000000000edff0000000000000000000000000000000000000000020000000000000000000000000000000000001000000000ffffffffffffffff00000000000000000000000000000000000000000000000000002000000000000700000000000000000000000000000000000400fdffffffe80a000000000000000000000a000200340000000000000014000e"], 0x128}}, 0x0) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=@newsa={0x104, 0x10, 0x7, 0x80000000, 0x0, {{@in6=@mcast2, @in=@multicast2, 0x4e20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in=@empty, {0x0, 0x0, 0x2, 0x0, 0x10000000, 0xffffffffffffffff}, {0x0, 0x200000, 0x7}, {0x40000, 0xfffffffd, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x104}}, 0x0) (async) 1.876730575s ago: executing program 1 (id=3141): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) (async) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x16, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="7a0a00ff00000028711091000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x90) (async) sendmsg$key(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e"], 0x70}}, 0x0) sendmmsg(r3, &(0x7f0000000180), 0x3ffffffffffffe5, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000d40)=@newqdisc={0x3a8, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x378, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x0, 0x20000000, 0x0, 0x1c}}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x64, 0x2, 0x3, 0x17, 0xd, 0x8, 0x1}}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0x2}, @TCA_CHOKE_PARMS={0x14}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_PARMS={0x14, 0x1, {0xfffffffc}}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}]}}]}, 0x3a8}}, 0x0) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000140)=ANY=[@ANYBLOB='8\x00\x00\x00U\x00=\t\x00\x00\x00\x00\x00\x00\x00\x00\a\x00\x00\x00', @ANYRES32, @ANYBLOB="050001"], 0x38}}, 0x0) (async) sendmsg$OSF_MSG_ADD(r4, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="bc04000000050104000000000000000000000000540201000000000000000000000000000000000073797a31000000000000000000000000000000000000000000000000000000003405be39dc2a3ba9f2d90eca67823d459716e3f50fc1e8682163f65134d25ad2"], 0x4bc}, 0x1, 0x0, 0x0, 0x4004811}, 0x0) 1.770638765s ago: executing program 2 (id=3142): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) socket(0x2, 0x1, 0x80) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x18, 0x10, 0x3}, @TCA_FQ_FLOW_MAX_RATE={0x2, 0x2}, @TCA_FQ_QUANTUM={0x2, 0x2, 0x7000000}]}}]}, 0x48}}, 0x0) ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f0000000240)) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x3, 0xc, &(0x7f0000000500)=ANY=[@ANYBLOB="180200000004000000000000000000008500000053000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000080)='GPL\x00'}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xc, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=@newsa={0x128, 0x10, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast2, 0x4e20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x0, 0x0, 0x2, 0x0, 0x10000000, 0xad}, {0x2000000000000, 0x200000, 0x7}, {0x40000, 0xfffffffd, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x74}, [@coaddr={0x14, 0xe, @in6=@remote}, @lifetime_val={0x24, 0x9, {0x100000000, 0x8000000000000001, 0xb4, 0x5}}]}, 0x128}}, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=ANY=[@ANYBLOB="02030003120000002cbd7000fcdbdf2503000900800000001cdc0dca1d9f68846960e56de42944af05000600000000000a0000000000000000000000000000000000000000000001020000000000000002000100000000000007000c0000000005000500000000000a00000000000000000000000000000000000000000000010700000000000000010014"], 0x90}, 0x1, 0x7}, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newsa={0x104, 0x1a, 0x7, 0x0, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x1b}, @in6=@ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x0, 0xb400, 0x2, 0xfeffff7f00000000}, {0x100, 0x200000, 0x7, 0xfffffffffffffffd}, {0x40000, 0x0, 0xae8}, 0x0, 0x4000000, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x104}}, 0x4cc00) 1.581403672s ago: executing program 0 (id=3143): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000001580)=[{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000080)="7cc2fd", 0x3}], 0x1, 0x0, 0x0, 0x40844}], 0x1, 0x4000040) (async) sendmmsg$alg(r1, &(0x7f0000001580)=[{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000080)="7cc2fd", 0x3}], 0x1, 0x0, 0x0, 0x40844}], 0x1, 0x4000040) r2 = socket$netlink(0x10, 0x3, 0x10) socket(0x18, 0x0, 0x1) (async) r3 = socket(0x18, 0x0, 0x1) getsockopt$nfc_llcp(r3, 0x111, 0x0, 0x0, 0x90aa62107f0000) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfc, 0x2ffffffff}, 0xc) socket$netlink(0x10, 0x3, 0x0) (async) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB="48000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r5], 0x48}}, 0x0) (async) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB="48000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r5], 0x48}}, 0x0) 1.512624956s ago: executing program 1 (id=3144): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000240)={{0x2, 0x4e24, @multicast2}, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3b}}, 0x6, {0x2, 0x4e20, @local}, 'bridge0\x00'}) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0x50, 0x10, 0x401, 0x0, 0x4, {0x0, 0x0, 0x0, 0x0, 0x0, 0x12}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x3}, @IFLA_GRE_LOCAL={0x14, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x40801}, 0x0) (async) setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000040)={0x9}, 0x4) 1.238598128s ago: executing program 3 (id=3145): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000380)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_SET_FEATURES(r0, 0x40309439, &(0x7f0000000180)={0x1, 0x1, 0x5}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x41071, 0xffffffffffffffff, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_ERRQUEUE(r2, 0x6b, 0x4, &(0x7f0000000000)=0x1, 0x4) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r1) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0_macvtap\x00', 0x0}) bind$packet(r0, &(0x7f0000000140)={0x11, 0x0, r3, 0x1, 0x6, 0x6, @remote}, 0x14) r4 = socket$inet_udplite(0x2, 0x2, 0x88) sendmmsg$sock(r4, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}, 0x1000000}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@txtime={{0x18, 0x1, 0x3d, 0x4c}}], 0x18}}], 0x2, 0x40500f0) 1.237512397s ago: executing program 0 (id=3146): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x8004}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newtaction={0x68, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x54, 0x1, [@m_tunnel_key={0x50, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x1}, 0x2}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.199511729s ago: executing program 1 (id=3147): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000000c0)="ad56b6d5914f7f01599165e61d2622ccc8bc0fffff0000effece092af51c51ba5586465c37f456988882b87ead0c4b1d8952c13287b12558b1792a622438cd21dcf7503bd3a2b0de6db11b2b9d699fc7bd6cb89e4790301112248f2dda3725d54444fc4415634c10cd944a1e0a38f77cc37678c513ab724a5a379f7643d9b5309d50bcdbc6f1a1cf912e8f503f341b4a631ce6b00a6940e993ee714a2bbc279753d3684f98823bbeaa399bb478643d726d28a27c501eb49120b3587bbb143f933e81c8f4", 0xc4) (async) r1 = accept4(r0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x8031, 0xffffffffffffffff, 0xfffff000) (async, rerun: 64) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200), r1) (rerun: 64) sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000380)={&(0x7f0000000400)={0x118, r2, 0x4, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x54, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x7f}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_to_team\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0x50, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_to_hsr\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @multicast2}}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x71d59b4f}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x2}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0xb01a}]}, @IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'team0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x4}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x118}, 0x1, 0x0, 0x0, 0x4008090}, 0x24040000) syz_genetlink_get_family_id$team(&(0x7f0000000080), r1) 1.094032407s ago: executing program 3 (id=3148): r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001500), 0xffffffffffffffff) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) setsockopt$MRT6_FLUSH(0xffffffffffffffff, 0x29, 0xd4, 0x0, 0x0) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000002b80)={&(0x7f0000002900)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000002b40)={&(0x7f0000002940)={0x58, r0, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@TIPC_NLA_NODE={0x44, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3d, 0x4, {'gcm(aes)\x00', 0x15, "07d1529051188f200c274b574793276e88d8da56d7"}}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x8040}, 0x20048010) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(0xffffffffffffffff, 0x0, 0x8040) r1 = socket(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$ETHTOOL_MSG_DEBUG_GET(r1, 0x0, 0x40) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f00000000c0)=@newqdisc={0x5c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x9}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x2c, 0x2, {{}, [@TCA_NETEM_RATE64={0xc}, @TCA_NETEM_LOSS={0x4}]}}}]}, 0x5c}}, 0x0) 1.010517756s ago: executing program 0 (id=3149): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@dellink={0x34, 0x11, 0x1, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x1092, 0x40000}, [@IFLA_IFNAME={0x14, 0x3, 'veth1_vlan\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) (async) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r3, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) (async) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=@newlink={0x50, 0x10, 0x503, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, 0x0, 0x11508, 0x1021}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @private1={0xfc, 0x1, '\x00', 0x1}}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x4000) (async) ioctl$IMSETDEVNAME(r2, 0x80184947, &(0x7f0000000140)={0x6, 'syz1\x00'}) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$pptp(0x18, 0x1, 0x2) (async) socket$nl_route(0x10, 0x3, 0x0) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') (async) syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) (async) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socket$igmp6(0xa, 0x3, 0x2) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) r6 = openat$cgroup_procs(r5, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f0000000c40), 0x12) (async) r7 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r7, &(0x7f0000000200)=0x1, 0x12) socket$netlink(0x10, 0x3, 0x12) (async) r8 = socket$netlink(0x10, 0x3, 0xb) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r8, &(0x7f0000001c00)={0x0, 0x0, &(0x7f0000001bc0)={&(0x7f0000001b40)={0x28, 0x0, 0x300, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x8e1, 0x1e}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x400e080}, 0x4) (async) bind$pptp(r4, &(0x7f0000000300)={0x18, 0x2, {0x1, @dev={0xac, 0x14, 0x14, 0x1b}}}, 0x1e) (async) connect$pptp(r4, &(0x7f00000005c0)={0x18, 0x2, {0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1e) 877.350346ms ago: executing program 2 (id=3150): r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)=@alg={0xe0, 0x10, 0x1, 0x0, 0x0, {{'drbg_pr_hmac_sha384\x00'}}}, 0xe0}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r1, 0x89f1, &(0x7f00000002c0)={'ip_vti0\x00', &(0x7f0000000000)=@ethtool_rxfh_indir={0x39}}) 836.203714ms ago: executing program 3 (id=3151): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000000)=@newlink={0x4c, 0x10, 0x503, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6230}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GTP_CREATE_SOCKETS={0x5, 0x5, 0x1}, @IFLA_GTP_RESTART_COUNT={0x5, 0x6, 0x4}]}}}, @IFLA_ADDRESS={0xa, 0x3, @random="3a712f0756b8"}]}, 0x4c}}, 0x0) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x2, 0xa}, {0xb, 0x9}, {0xffff, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x8, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x4}}, @TCA_FLOWER_KEY_IP_TTL={0x5, 0x4b, 0x6}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4010}, 0x0) syz_emit_ethernet(0x58, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb0004aa01eb6f348c890004ef32bbffdd574d90249ee77d3b03d0de849b1732253dea30496791b83219f40380d5ce1cd8c6ae3bbfbe0c4333ae4e7831af9749d442e62de46c"], 0x0) 407.255852ms ago: executing program 0 (id=3152): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xb, 0x1c, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b70300001b0000008500000086000000bf0900000000000055090100000000009500000000000000bf080000000000007b9af8ff00000000b5090500200000007baaf0ff00000000bda804000000000007080000f8ffffffbfa400000000000007000000f0ffffffb70200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000d4ff000076000000bf91000000000000b6080000000000008500000085000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0xb, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 406.80303ms ago: executing program 2 (id=3153): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000380)={'gre0\x00'}) bind$netlink(r1, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=@newlink={0x44, 0x10, 0x40d, 0x70bd2d, 0x1ffffffc, {0x0, 0x0, 0x0, r3, 0x60046}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x2}, @IFLA_BOND_XMIT_HASH_POLICY={0x5, 0xe, 0x5}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40040}, 0x0) sendmsg$nl_route(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="30000000100001085f0000000000003a33a9e4fc", @ANYRES32=0x0, @ANYBLOB="00000000e300020008000a00", @ANYRES32=r3, @ANYBLOB="08001b"], 0x30}}, 0x0) 238.31396ms ago: executing program 0 (id=3154): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = socket(0x2b, 0x80801, 0x1) bind$tipc(r1, &(0x7f0000000000)=@name={0x1e, 0x2, 0x3, {{0x2, 0x2}, 0x3}}, 0x10) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_LOOPBACK(r2, 0x65, 0x20, 0x0, &(0x7f0000001040)=0x5d) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x3, 0x3}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1) sendmsg$NL80211_CMD_DEL_MPATH(r1, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000980)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES32=r5, @ANYBLOB="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"], 0x38}, 0x1, 0x0, 0x0, 0x4040084}, 0x800) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=@newtclass={0x88, 0x28, 0x2, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xfff1, 0x6}, {0x4}, {0xffff, 0xffef}}, [@TCA_RATE={0x6, 0x5, {0x4, 0xb4}}, @tclass_kind_options=@c_mqprio={0xb}, @tclass_kind_options=@c_netem={0xa}, @TCA_RATE={0x6, 0x5, {0x2, 0x5}}, @tclass_kind_options=@c_sfq={0x8}, @tclass_kind_options=@c_clsact={0xb}, @tclass_kind_options=@c_hfsc={{0x9}, {0x14, 0x2, [@TCA_HFSC_USC={0x10, 0x3, {0x5, 0x5, 0xa4}}]}}, @TCA_RATE={0x6}]}, 0x88}, 0x1, 0x0, 0x0, 0x2001c061}, 0x4008000) r6 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x7ffffffe, 0x278, 0xd0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x1a8, 0xffffffff, 0xffffffff, 0x1a8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0x0, 0x10000}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x2d8) 228.444954ms ago: executing program 3 (id=3155): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000300)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x200000a, 0x13, r0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) syz_emit_ethernet(0x177, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @dccp={{0x1b, 0x4, 0x0, 0x18, 0x169, 0x66, 0x0, 0x3, 0x21, 0x0, @remote, @multicast1, {[@lsrr={0x83, 0x1f, 0xfa, [@empty, @remote, @private=0xa010100, @local, @rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote]}, @end, @timestamp={0x44, 0x8, 0x59, 0x0, 0xb, [0x6]}, @ssrr={0x89, 0x13, 0x85, [@multicast1, @multicast2, @rand_addr=0x64010101, @loopback]}, @timestamp_addr={0x44, 0x1c, 0xd1, 0x1, 0x4, [{@dev={0xac, 0x14, 0x14, 0x1e}, 0x80}, {@dev={0xac, 0x14, 0x14, 0x29}, 0xfffb}, {@multicast2, 0x6}]}]}}, {{0x4e23, 0xc83c, 0x4, 0x1, 0x5, 0x0, 0x0, 0x8, 0x0, "195ca3", 0xb, "511975"}, "81179820be1d67d5333459f9c191850f4af5ed085f181883d4c60941b57cd815f7fdff7c59feba8dbd5b2626eacd3b19ebdaca1afb61949d89b63e8c1a4f11b9befdc7f26e51a2e7b69eb52bf61c6238c080e12be1ba5dcd008616abda66a88637ecf529aee772dd401e0b74e1097b23f384b60a39f4fa6f767d3a833fe0e3ecbaa6b694c1b2a4d48629905b2087bb5ee14d42e0b2ad046369c88cedfcaeb22a5b5dba1c32618cf15d4561f58458772fe99dc064293a7a0c1d3b7a09722a2b3603c05368e68c3e09eb3dbbed86eaf862a9640bb92f053ef1b2d24b44d1c1c03a580d977b5f267c049ab3dc07ca"}}}}}, 0x0) 44.910953ms ago: executing program 3 (id=3156): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r2, 0x84, 0x23, &(0x7f0000000040)="1875008e80d51858", 0x8) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x54, 0x3, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1886c301}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_HOOK_DEV={0x14}]}]}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}], {0x14}}, 0xc4}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)={0x20, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SCAN_SUPP_RATES={0x4}]}, 0x20}}, 0x0) 0s ago: executing program 1 (id=3157): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r1 = socket(0x400000000010, 0x3, 0x0) (async, rerun: 32) r2 = socket$unix(0x1, 0x5, 0x0) (rerun: 32) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x4e, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa30e, 0x1, 0xfffffffa}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=@newtfilter={0x4c, 0x2c, 0xd3f, 0x70b524, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0xfff3, 0xffe0}, {}, {0x7, 0xfff2}}, [@filter_kind_options=@f_flow={{0x9}, {0x1c, 0x2, [@TCA_FLOW_MASK={0x8, 0x6, 0xffffff5f}, @TCA_FLOW_KEYS={0x8, 0x1, 0x18d0b}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4008848}, 0xc884) (async) ioctl$sock_rose_SIOCADDRT(r1, 0x890b, &(0x7f0000000140)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x7, @null, @rose={'rose', 0x0}, 0x4, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) kernel console output (not intermixed with test programs): e deactivated: batadv_slave_0 [ 186.603685][ T9942] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1070'. [ 186.630236][ T9950] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 186.653434][ T9947] netlink: 'syz.3.1070': attribute type 1 has an invalid length. [ 186.662625][ T9947] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1070'. [ 186.698007][ T9950] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 186.719574][ T9950] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 187.289158][ T9982] delete_channel: no stack [ 187.297600][ T9982] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1078'. [ 187.329677][ T9982] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1078'. [ 187.344248][ T9982] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1078'. [ 187.361879][ T9954] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 187.369079][ T9954] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 187.404756][ T9954] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 187.433810][ T9954] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 187.499184][ T9954] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 187.516363][ T9954] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 187.544529][ T9954] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 187.560766][ T9954] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 187.613470][ T9954] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 187.629727][ T9954] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 187.932351][T10003] tipc: Enabled bearer , priority 0 [ 188.097452][T10003] syzkaller0: entered promiscuous mode [ 188.104159][T10003] syzkaller0: entered allmulticast mode [ 188.112156][T10003] tipc: Resetting bearer [ 188.231026][T10001] tipc: Resetting bearer [ 188.711350][T10040] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1095'. [ 189.653194][T10001] tipc: Disabling bearer [ 189.699699][T10039] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1096'. [ 189.734373][T10040] netlink: 'syz.4.1095': attribute type 29 has an invalid length. [ 189.772435][T10040] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1095'. [ 189.933385][T10055] netlink: 'syz.0.1100': attribute type 15 has an invalid length. [ 190.035326][T10061] netlink: 'syz.1.1103': attribute type 8 has an invalid length. [ 190.262830][T10073] tipc: Enabled bearer , priority 0 [ 190.380152][T10073] tipc: Disabling bearer [ 190.434749][ T30] audit: type=1800 audit(1773579892.334:2): pid=10085 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1110" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 190.467745][T10085] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 190.491750][T10085] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 190.520953][T10085] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 191.104144][T10128] netlink: 'syz.2.1125': attribute type 2 has an invalid length. [ 191.162594][T10130] netlink: 'syz.2.1125': attribute type 2 has an invalid length. [ 191.216535][T10136] netlink: 'syz.3.1128': attribute type 1 has an invalid length. [ 191.250700][T10139] __nla_validate_parse: 14 callbacks suppressed [ 191.250722][T10139] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1127'. [ 191.657276][T10153] syzkaller0: entered promiscuous mode [ 191.663098][T10153] syzkaller0: entered allmulticast mode [ 192.035148][T10187] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1136'. [ 192.062947][T10187] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1136'. [ 193.182485][T10172] bridge0: port 2(bridge_slave_1) entered disabled state [ 193.190682][T10172] bridge0: port 1(bridge_slave_0) entered disabled state [ 193.681214][T10215] syzkaller0: entered promiscuous mode [ 193.686927][T10215] syzkaller0: entered allmulticast mode [ 193.884992][T10234] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1149'. [ 193.976148][T10237] syzkaller0: entered promiscuous mode [ 193.982642][T10237] syzkaller0: entered allmulticast mode [ 194.146820][T10244] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1153'. [ 194.157913][T10244] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1153'. [ 194.384889][T10251] netlink: 'syz.0.1156': attribute type 20 has an invalid length. [ 194.394270][T10250] netlink: 'syz.0.1156': attribute type 20 has an invalid length. [ 194.402141][T10250] IPv6: NLM_F_CREATE should be specified when creating new route [ 194.414044][T10251] IPv6: NLM_F_CREATE should be specified when creating new route [ 194.565501][T10257] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1157'. [ 194.764144][T10266] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1160'. [ 194.774594][T10265] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1157'. [ 195.732840][T10248] bridge0: port 3(syz_tun) entered blocking state [ 195.739589][T10248] bridge0: port 3(syz_tun) entered disabled state [ 195.746755][T10248] syz_tun: entered allmulticast mode [ 195.754205][T10248] syz_tun: entered promiscuous mode [ 195.769093][T10257] xfrm1: entered promiscuous mode [ 195.777742][T10257] xfrm1: entered allmulticast mode [ 195.986236][T10277] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1164'. [ 196.449529][T10314] __nla_validate_parse: 1 callbacks suppressed [ 196.449552][T10314] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1172'. [ 196.612628][T10323] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 196.619966][T10323] IPv6: NLM_F_CREATE should be set when creating new route [ 196.627704][T10323] IPv6: NLM_F_CREATE should be set when creating new route [ 196.722088][T10331] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1180'. [ 196.723350][T10326] netlink: 'syz.3.1176': attribute type 21 has an invalid length. [ 196.740560][T10326] netlink: 'syz.3.1176': attribute type 22 has an invalid length. [ 196.750639][T10326] netlink: 'syz.3.1176': attribute type 23 has an invalid length. [ 196.783581][T10326] netlink: 'syz.3.1176': attribute type 25 has an invalid length. [ 196.876465][T10326] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1176'. [ 197.068221][T10347] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1185'. [ 197.156299][T10351] netlink: 'syz.3.1185': attribute type 21 has an invalid length. [ 197.190551][T10356] delete_channel: no stack [ 197.194558][T10351] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1185'. [ 197.211833][T10347] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1185'. [ 197.258990][T10360] netlink: 84 bytes leftover after parsing attributes in process `syz.0.1187'. [ 197.291465][T10360] netlink: 84 bytes leftover after parsing attributes in process `syz.0.1187'. [ 197.318558][T10360] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 197.392466][T10362] bond8: option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 197.415777][T10362] bond8 (unregistering): Released all slaves [ 197.437635][T10368] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1190'. [ 197.449278][T10368] nbd: illegal input index -8454144 [ 197.459215][ T7324] IPVS: starting estimator thread 0... [ 197.552411][T10370] IPVS: using max 25 ests per chain, 60000 per kthread [ 197.592079][T10380] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1192'. [ 197.690544][T10383] IPv6: sit2: Disabled Multicast RS [ 197.697121][T10383] sit2: entered allmulticast mode [ 221.450122][T10434] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 221.460754][T10439] xt_connbytes: Forcing CT accounting to be enabled [ 221.722703][T10460] __nla_validate_parse: 66 callbacks suppressed [ 221.722725][T10460] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1204'. [ 221.789168][T10465] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1203'. [ 221.838903][T10465] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1203'. [ 221.863840][T10470] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1205'. [ 221.895646][T10465] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1203'. [ 221.912402][T10465] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1203'. [ 221.929971][T10471] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1207'. [ 221.980335][T10470] 8021q: adding VLAN 0 to HW filter on device bond8 [ 222.048784][T10484] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1209'. [ 222.222169][T10489] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 222.467697][T10519] netlink: 207952 bytes leftover after parsing attributes in process `syz.1.1216'. [ 222.503544][T10517] bridge_slave_0: left allmulticast mode [ 222.516475][T10517] bridge_slave_0: left promiscuous mode [ 222.533631][T10517] bridge0: port 1(bridge_slave_0) entered disabled state [ 222.565937][T10517] bridge_slave_1: left allmulticast mode [ 222.580362][T10517] bridge_slave_1: left promiscuous mode [ 222.587178][T10517] bridge0: port 2(bridge_slave_1) entered disabled state [ 222.609532][T10517] team0: Port device team_slave_0 removed [ 222.625946][T10517] team0: Port device team_slave_1 removed [ 222.634355][T10517] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 222.643798][T10517] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 222.674973][T10517] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 222.711285][T10517] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 222.751975][T10517] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 222.809771][T10524] team0: Mode changed to "loadbalance" [ 223.099105][T10555] Bluetooth: MGMT ver 1.23 [ 223.268553][T10560] netlink: 'syz.4.1225': attribute type 21 has an invalid length. [ 223.281845][T10561] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1224'. [ 223.297931][T10560] IPv6: NLM_F_CREATE should be specified when creating new route [ 223.526801][T10580] x_tables: duplicate underflow at hook 1 [ 223.711429][ T48] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 223.722833][ T48] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 223.752055][ T48] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 223.784770][ T48] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 223.815232][T10592] netlink: 'syz.0.1237': attribute type 1 has an invalid length. [ 223.974693][T10597] netlink: 'syz.0.1237': attribute type 21 has an invalid length. [ 223.987551][T10592] 8021q: adding VLAN 0 to HW filter on device bond2 [ 224.184848][T10609] netlink: 'syz.0.1241': attribute type 11 has an invalid length. [ 224.429890][T10628] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 224.452833][T10628] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 224.594256][T10634] bond0: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 224.828401][T10647] syzkaller0: entered promiscuous mode [ 224.834540][T10647] syzkaller0: entered allmulticast mode [ 224.843521][T10647] 0: reclassify loop, rule prio 0, protocol 800 [ 225.086215][T10666] sctp: [Deprecated]: syz.0.1258 (pid 10666) Use of int in maxseg socket option. [ 225.086215][T10666] Use struct sctp_assoc_value instead [ 225.317336][T10683] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 225.531106][T10693] bond6: entered allmulticast mode [ 225.612435][T10700] netlink: 'syz.1.1269': attribute type 16 has an invalid length. [ 225.678266][T10700] netlink: 'syz.1.1269': attribute type 17 has an invalid length. [ 225.823906][T10700] bridge0: port 3(syz_tun) entered blocking state [ 225.830641][T10700] bridge0: port 3(syz_tun) entered forwarding state [ 225.879709][T10700] 8021q: adding VLAN 0 to HW filter on device bond0 [ 225.935079][T10700] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 225.980780][T10724] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 226.125423][T10718] syzkaller0: entered promiscuous mode [ 226.143338][T10718] syzkaller0: entered allmulticast mode [ 226.958149][T10773] __nla_validate_parse: 14 callbacks suppressed [ 226.958170][T10773] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1288'. [ 227.057214][T10774] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 227.301824][T10790] veth0_to_team: left allmulticast mode [ 227.310996][T10788] syzkaller0: entered promiscuous mode [ 227.320773][T10788] syzkaller0: entered allmulticast mode [ 227.348853][T10789] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 227.453888][T10789] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 227.640442][T10801] vlan2: entered allmulticast mode [ 227.656089][T10801] bridge_slave_0: entered allmulticast mode [ 227.661555][T10804] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1299'. [ 227.925910][T10814] tipc: Enabled bearer , priority 10 [ 227.970377][T10816] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1303'. [ 228.265086][T10827] tipc: Resetting bearer [ 228.581550][T10849] netlink: 9 bytes leftover after parsing attributes in process `syz.1.1312'. [ 228.609168][T10849] 0: renamed from hsr_slave_1 [ 228.630286][T10849] 0: entered allmulticast mode [ 228.638909][T10849] A link change request failed with some changes committed already. Interface c0 may have been left with an inconsistent configuration, please check. [ 228.891915][T10881] netdevsim netdevsim1 : renamed from netdevsim0 [ 228.962513][ T7328] tipc: Node number set to 2680895492 [ 228.974788][T10888] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1320'. [ 229.248403][T10904] openvswitch: netlink: Message has 1 unknown bytes. [ 229.263393][T10904] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 229.509109][T10919] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1331'. [ 229.519684][T10919] team2 (uninitialized): Failed to send options change via netlink (err -105) [ 229.591757][T10919] team2: entered promiscuous mode [ 229.598173][T10919] team2: entered allmulticast mode [ 229.651459][T10933] syzkaller0: entered promiscuous mode [ 229.683397][T10933] syzkaller0: entered allmulticast mode [ 229.826728][T10941] netlink: 'syz.3.1338': attribute type 21 has an invalid length. [ 229.845670][T10941] netlink: 'syz.3.1338': attribute type 6 has an invalid length. [ 229.853764][T10941] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1338'. [ 230.192760][T10963] netlink: 'syz.4.1348': attribute type 1 has an invalid length. [ 230.200580][T10963] netlink: 'syz.4.1348': attribute type 1 has an invalid length. [ 230.216099][T10965] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1345'. [ 230.374908][T10971] syzkaller0: entered promiscuous mode [ 230.376063][T10973] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1350'. [ 230.380442][T10971] syzkaller0: entered allmulticast mode [ 230.586060][T10989] openvswitch: netlink: Missing valid actions attribute. [ 230.603517][T10989] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 230.751112][T11002] netlink: 92 bytes leftover after parsing attributes in process `syz.2.1360'. [ 230.783559][T11003] IPVS: set_ctl: invalid protocol: 18 100.1.1.2:0 [ 231.385462][T11039] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 231.405058][T11039] team0: Device batadv0 is of different type [ 231.564107][T11049] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 232.042105][T11083] Bluetooth: MGMT ver 1.23 [ 232.288487][T11099] __nla_validate_parse: 6 callbacks suppressed [ 232.288509][T11099] netlink: 120 bytes leftover after parsing attributes in process `syz.4.1390'. [ 232.329674][T11107] xt_hashlimit: size too large, truncated to 1048576 [ 232.442755][T11104] netlink: 11562 bytes leftover after parsing attributes in process `syz.1.1391'. [ 232.627432][T11116] ksmbd: Unknown IPC event: 3, ignore. [ 232.872941][T11130] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 233.276382][T11150] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1406'. [ 233.337472][T11154] netlink: 'syz.2.1407': attribute type 1 has an invalid length. [ 233.374150][T11157] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1408'. [ 233.386069][T11154] team0: Port device dummy0 removed [ 233.395849][T11154] bond8: (slave dummy0): making interface the new active one [ 233.404244][T11154] bond8: (slave dummy0): Enslaving as an active interface with an up link [ 233.433141][T11159] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1408'. [ 233.856589][T11179] netlink: 'syz.4.1414': attribute type 1 has an invalid length. [ 233.993837][T11182] bond7: (slave gretap2): making interface the new active one [ 233.995966][T11193] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 234.037322][T11182] bond7: (slave gretap2): Enslaving as an active interface with an up link [ 234.133420][T11179] gre2: entered promiscuous mode [ 234.154657][T11179] gre2: entered allmulticast mode [ 234.191000][T11205] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1414'. [ 234.751216][T11232] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 234.813820][T11237] syzkaller0: entered promiscuous mode [ 234.820771][T11237] syzkaller0: entered allmulticast mode [ 234.871148][T11242] netlink: 'syz.4.1432': attribute type 1 has an invalid length. [ 234.884765][T11242] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1432'. [ 234.897424][T11242] lo: entered promiscuous mode [ 234.917255][T11242] tunl0: entered promiscuous mode [ 234.948876][T11242] gre0: entered promiscuous mode [ 234.971717][T11242] gretap0: entered promiscuous mode [ 234.984787][T11242] erspan0: entered promiscuous mode [ 234.996769][T11242] ip_vti0: entered promiscuous mode [ 235.143197][T11256] netlink: 'syz.4.1434': attribute type 11 has an invalid length. [ 235.158582][T11256] netlink: 199828 bytes leftover after parsing attributes in process `syz.4.1434'. [ 235.169041][T11255] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1435'. [ 235.210350][T11258] netlink: 'syz.3.1436': attribute type 13 has an invalid length. [ 235.245479][T11258] netlink: 'syz.3.1436': attribute type 58 has an invalid length. [ 235.276985][T11258] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1436'. [ 235.325261][T11261] syzkaller0: entered promiscuous mode [ 235.372023][T11271] netlink: 'syz.1.1437': attribute type 29 has an invalid length. [ 235.405931][T11271] netlink: 'syz.1.1437': attribute type 29 has an invalid length. [ 235.802184][T11290] IPv6: sit2: Disabled Multicast RS [ 236.124431][T11310] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 236.143901][T11311] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 236.161299][T11313] #: renamed from bond_slave_0 [ 236.172175][T11310] netlink: 'syz.1.1450': attribute type 7 has an invalid length. [ 236.180427][T11310] netlink: 'syz.1.1450': attribute type 8 has an invalid length. [ 236.352986][T11315] "syz.3.1452" (11315) uses obsolete ecb(arc4) skcipher [ 236.675897][T11352] netlink: 'syz.4.1460': attribute type 8 has an invalid length. [ 236.997895][T11364] syzkaller1: entered promiscuous mode [ 237.003744][T11364] syzkaller1: entered allmulticast mode [ 237.011215][T11364] PF_CAN: dropped non conform CAN skbuff: dev type 280, len 324 [ 237.020687][T11364] netlink: 'syz.4.1465': attribute type 13 has an invalid length. [ 237.069891][T11368] openvswitch: netlink: IP tunnel TTL not specified. [ 237.228159][T11374] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 237.248918][T11374] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 237.278894][ T30] audit: type=1800 audit(1773579939.184:3): pid=11376 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1469" name="memory.events" dev="tmpfs" ino=1523 res=0 errno=0 [ 237.301835][T11374] __nla_validate_parse: 8 callbacks suppressed [ 237.301855][T11374] netlink: 80 bytes leftover after parsing attributes in process `syz.4.1468'. [ 237.307748][T11372] syzkaller0: entered promiscuous mode [ 237.324323][ T30] audit: type=1804 audit(1773579939.234:4): pid=11376 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.1469" name="/newroot/296/memory.events" dev="tmpfs" ino=1523 res=1 errno=0 [ 237.346201][T11372] syzkaller0: entered allmulticast mode [ 237.414235][T11387] syzkaller1: entered promiscuous mode [ 237.421008][T11387] syzkaller1: entered allmulticast mode [ 237.700735][T11404] netlink: 244 bytes leftover after parsing attributes in process `syz.4.1476'. [ 237.721829][T11404] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1476'. [ 237.770362][T11408] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1478'. [ 237.964791][T11420] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1482'. [ 238.268518][T11436] netlink: 'syz.4.1485': attribute type 13 has an invalid length. [ 238.491472][T11440] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1486'. [ 238.660570][T11443] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1487'. [ 238.675872][T11443] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1487'. [ 238.756400][T11445] xt_NFQUEUE: number of queues (62232) out of range (got 67565) [ 238.998921][T11456] SET target dimension over the limit! [ 239.526716][T11428] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1482'. [ 239.538107][T11436] veth0_macvtap: left promiscuous mode [ 239.544483][T11436] macvtap0: entered allmulticast mode [ 239.568301][T11436] macvtap0: refused to change device tx_queue_len [ 239.741314][T11464] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1493'. [ 239.757643][T11467] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 240.416537][T11504] netlink: 'syz.1.1505': attribute type 5 has an invalid length. [ 240.506051][T11506] netlink: 'syz.1.1506': attribute type 11 has an invalid length. [ 240.730271][T11515] netlink: 'syz.3.1508': attribute type 3 has an invalid length. [ 240.958453][T11522] syzkaller0: entered promiscuous mode [ 240.965279][T11522] syzkaller0: entered allmulticast mode [ 240.979113][T11532] IPVS: set_ctl: invalid protocol: 9 172.20.20.187:20002 [ 241.494810][T11552] syzkaller0: entered promiscuous mode [ 241.505060][T11552] syzkaller0: entered allmulticast mode [ 241.534237][T11552] tipc: Enabled bearer , priority 0 [ 241.558366][T11558] netlink: 'syz.1.1526': attribute type 5 has an invalid length. [ 241.572633][T11551] tipc: Resetting bearer [ 241.615260][T11551] tipc: Disabling bearer [ 241.744585][T11565] IPVS: set_ctl: invalid protocol: 94 172.20.20.170:20002 [ 241.888044][T11576] netlink: 'syz.1.1530': attribute type 26 has an invalid length. [ 242.272035][T11596] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 242.569406][T11614] __nla_validate_parse: 13 callbacks suppressed [ 242.569428][T11614] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1541'. [ 242.600024][T11601] netlink: 'syz.1.1535': attribute type 1 has an invalid length. [ 243.362586][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 243.371893][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 243.528734][T11643] ip6gre1: entered allmulticast mode [ 243.726280][T11659] syzkaller0: entered promiscuous mode [ 243.750362][T11659] syzkaller0: entered allmulticast mode [ 243.803538][T11665] bond4: peer notification delay (1164) is not a multiple of miimon (100), value rounded to 1100 ms [ 243.819526][T11665] bond4: entered promiscuous mode [ 243.825940][T11665] bond4: entered allmulticast mode [ 243.831667][T11665] 8021q: adding VLAN 0 to HW filter on device bond4 [ 243.875337][T11665] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1555'. [ 243.948316][T11665] 8021q: adding VLAN 0 to HW filter on device bond5 [ 244.181747][T11670] macvlan4: entered promiscuous mode [ 244.194521][T11670] macvlan4: entered allmulticast mode [ 244.200562][T11670] bond5: entered allmulticast mode [ 244.208307][T11670] bond5: entered promiscuous mode [ 244.226540][T11670] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 244.237434][T11670] team0: Port device macvlan4 added [ 244.416633][T11693] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1561'. [ 244.672997][T11703] block nbd1: server does not support multiple connections per device. [ 244.694074][T11703] block nbd1: shutting down sockets [ 244.801581][T11717] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1570'. [ 244.967942][T11727] netlink: 'syz.1.1573': attribute type 1 has an invalid length. [ 244.979486][T11727] netlink: 'syz.1.1573': attribute type 1 has an invalid length. [ 245.013748][T11733] sctp: [Deprecated]: syz.2.1575 (pid 11733) Use of int in maxseg socket option. [ 245.013748][T11733] Use struct sctp_assoc_value instead [ 245.094802][T11728] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1574'. [ 245.142898][ T7329] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 245.178735][T11738] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1574'. [ 245.248539][ T7329] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 245.271308][T11744] netlink: 'syz.1.1578': attribute type 24 has an invalid length. [ 245.292560][ T7329] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 245.301143][T11738] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1574'. [ 245.432948][ T7329] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 245.473013][ T7329] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 245.638662][T11757] bond5: (slave lo): Releasing backup interface [ 245.655081][T11757] bond5: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 245.662721][ T7329] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 245.691703][T11757] syz_tun: left allmulticast mode [ 245.718913][T11757] syz_tun: left promiscuous mode [ 245.743052][T11757] bridge0: port 3(syz_tun) entered disabled state [ 245.784267][T11757] bridge_slave_0: left allmulticast mode [ 245.789977][T11757] bridge_slave_0: left promiscuous mode [ 245.810019][T11757] bridge0: port 1(bridge_slave_0) entered disabled state [ 245.851547][T11757] bridge_slave_1: left allmulticast mode [ 245.857529][T11757] bridge_slave_1: left promiscuous mode [ 245.876056][T11757] bridge0: port 2(bridge_slave_1) entered disabled state [ 245.893376][T11757] bond0: (slave bond_slave_0): Releasing backup interface [ 245.915703][T11757] bond0: (slave bond_slave_1): Releasing backup interface [ 245.945931][T11757] team0: Port device team_slave_0 removed [ 245.957158][T11757] team0: Port device team_slave_1 removed [ 245.963489][T11757] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 245.972061][T11757] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 245.997441][T11760] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 246.212994][T11799] netlink: 'syz.2.1590': attribute type 1 has an invalid length. [ 246.379126][T11799] 8021q: adding VLAN 0 to HW filter on device bond9 [ 246.509531][T11813] bond9: (slave veth0_to_bond): making interface the new active one [ 246.546881][T11813] bond9: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 246.610844][T11815] 8021q: adding VLAN 0 to HW filter on device bond10 [ 246.625782][T11815] bond9: (slave bond10): Enslaving as an active interface with a down link [ 247.472933][T11866] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1604'. [ 247.613516][T11877] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1607'. [ 247.677778][T11875] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1607'. [ 247.693413][T11888] "syz.3.1612" (11888) uses obsolete ecb(arc4) skcipher [ 248.698120][T11949] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1629'. [ 248.921682][T11956] pimreg3: entered allmulticast mode [ 249.148927][T11971] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1636'. [ 249.158462][T11971] net_ratelimit: 3 callbacks suppressed [ 249.158481][T11971] openvswitch: netlink: Flow key attr not present in new flow. [ 249.294075][T11974] tipc: Enabled bearer , priority 0 [ 249.301029][T11984] netlink: 'syz.0.1640': attribute type 11 has an invalid length. [ 249.311436][T11974] syzkaller0: entered promiscuous mode [ 249.327372][T11974] syzkaller0: entered allmulticast mode [ 249.379768][T11974] tipc: Resetting bearer [ 249.390988][T11974] pim6reg1: entered promiscuous mode [ 249.397074][T11974] pim6reg1: entered allmulticast mode [ 249.515886][T11973] tipc: Resetting bearer [ 249.553164][T11973] tipc: Disabling bearer [ 249.691928][T12010] netlink: 'syz.2.1648': attribute type 2 has an invalid length. [ 249.786552][T12018] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1649'. [ 249.920589][T12025] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1653'. [ 249.930015][T12025] netlink: 43 bytes leftover after parsing attributes in process `syz.4.1653'. [ 249.939502][T12025] netlink: 'syz.4.1653': attribute type 6 has an invalid length. [ 249.947699][T12025] netlink: 'syz.4.1653': attribute type 5 has an invalid length. [ 249.955794][T12025] netlink: 43 bytes leftover after parsing attributes in process `syz.4.1653'. [ 250.052462][T12034] netlink: 'syz.4.1656': attribute type 21 has an invalid length. [ 250.120871][T12040] netlink: 'syz.2.1657': attribute type 11 has an invalid length. [ 250.277290][T12050] netlink: 'syz.2.1660': attribute type 9 has an invalid length. [ 250.414898][T12054] netlink: 'syz.2.1661': attribute type 9 has an invalid length. [ 250.423782][T12054] netlink: 'syz.2.1661': attribute type 11 has an invalid length. [ 250.432047][T12054] netlink: 210020 bytes leftover after parsing attributes in process `syz.2.1661'. [ 250.443220][T12054] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1661'. [ 250.860228][T12077] syzkaller0: entered promiscuous mode [ 250.878713][T12077] syzkaller0: entered allmulticast mode [ 250.925601][T12081] bond1: entered promiscuous mode [ 250.931146][T12081] 8021q: adding VLAN 0 to HW filter on device bond1 [ 251.026185][T12089] IPVS: Error connecting to the multicast addr [ 251.875884][T12128] validate_nla: 2 callbacks suppressed [ 251.875905][T12128] netlink: 'syz.1.1680': attribute type 3 has an invalid length. [ 251.896772][T12128] netlink: 'syz.1.1680': attribute type 1 has an invalid length. [ 251.947047][T12130] netlink: 'syz.4.1681': attribute type 1 has an invalid length. [ 251.958815][T12130] netlink: 'syz.4.1681': attribute type 1 has an invalid length. [ 252.129035][T12139] syzkaller0: entered promiscuous mode [ 252.182483][T12141] netlink: 'syz.0.1685': attribute type 1 has an invalid length. [ 252.199930][T12139] syzkaller0: entered allmulticast mode [ 252.290791][T12145] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 252.304027][T12145] team0: Device batadv0 is of different type [ 252.787322][T12171] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 252.813883][T12171] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 252.813957][T12165] bond10 (unregistering): Released all slaves [ 253.176636][T12192] netlink: 'syz.3.1703': attribute type 1 has an invalid length. [ 253.209036][T12195] __nla_validate_parse: 8 callbacks suppressed [ 253.209057][T12195] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1702'. [ 253.265594][T12198] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1704'. [ 253.611495][T12220] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1710'. [ 253.694847][T12227] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 253.754370][T12227] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 253.935149][T12244] vcan0: tx drop: invalid da for name 0x0000000000000003 [ 254.171665][T12258] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1720'. [ 254.202403][T12260] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1721'. [ 254.276892][T12263] nbd: must specify a size in bytes for the device [ 254.350387][T12266] netlink: 'syz.2.1723': attribute type 1 has an invalid length. [ 254.358966][T12266] netlink: 16110 bytes leftover after parsing attributes in process `syz.2.1723'. [ 254.689370][T12288] netlink: 'syz.1.1728': attribute type 15 has an invalid length. [ 254.707657][T12289] netlink: 'syz.1.1728': attribute type 15 has an invalid length. [ 254.726127][T12281] atomic_op ffff88807917d998 conn xmit_atomic 0000000000000000 [ 254.750250][T12294] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1729'. [ 254.765255][T12294] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1729'. [ 254.935082][T12300] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1730'. [ 255.114508][T12312] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1733'. [ 255.219794][T12319] bond2: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 255.289346][T12319] bond2: (slave lo): Enslaving as an active interface with an up link [ 255.304513][T12319] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 255.459284][T12319] netlink: 'syz.3.1735': attribute type 21 has an invalid length. [ 255.828121][T12350] syzkaller1: entered promiscuous mode [ 255.833997][T12350] syzkaller1: entered allmulticast mode [ 256.236173][T12372] ipt_rpfilter: unknown options [ 256.554224][T12390] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 256.769975][T12399] geneve3: entered promiscuous mode [ 256.788751][ T1161] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 55705 - 0 [ 256.801591][ T1161] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 55705 - 0 [ 256.823354][ T1161] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 55705 - 0 [ 256.846826][ T1161] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 55705 - 0 [ 257.534686][T12445] validate_nla: 1 callbacks suppressed [ 257.534719][T12445] netlink: 'syz.0.1772': attribute type 1 has an invalid length. [ 257.696886][T12445] 8021q: adding VLAN 0 to HW filter on device bond6 [ 257.724744][T12449] bond6: (slave ip6erspan0): making interface the new active one [ 257.734876][T12449] bond6: (slave ip6erspan0): Enslaving as an active interface with an up link [ 258.143060][T12482] netlink: 'syz.4.1783': attribute type 10 has an invalid length. [ 258.201673][T12486] netlink: 'syz.3.1786': attribute type 58 has an invalid length. [ 258.214214][T12487] netlink: 'syz.0.1785': attribute type 7 has an invalid length. [ 258.384340][T12498] __nla_validate_parse: 6 callbacks suppressed [ 258.384363][T12498] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.1790'. [ 258.495391][T12506] netlink: 'syz.3.1791': attribute type 16 has an invalid length. [ 258.504165][T12506] netlink: 'syz.3.1791': attribute type 17 has an invalid length. [ 258.617694][T12506] bridge0: port 2(bridge_slave_1) entered blocking state [ 258.625120][T12506] bridge0: port 2(bridge_slave_1) entered forwarding state [ 258.637212][T12506] 8021q: adding VLAN 0 to HW filter on device .` [ 258.653266][T12506] 8021q: adding VLAN 0 to HW filter on device team0 [ 258.681058][T12506] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 258.699315][T12507] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1789'. [ 258.709056][T12507] netlink: 2 bytes leftover after parsing attributes in process `syz.4.1789'. [ 258.774559][T12511] bridge0: port 1(batadv0) entered blocking state [ 258.801400][T12511] bridge0: port 1(batadv0) entered disabled state [ 258.803162][T12520] netlink: 'syz.3.1794': attribute type 11 has an invalid length. [ 258.818585][T12520] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1794'. [ 258.823458][T12511] batadv0: entered allmulticast mode [ 258.841148][T12511] batadv0: entered promiscuous mode [ 258.853721][T12520] netlink: 'syz.3.1794': attribute type 11 has an invalid length. [ 258.870053][T12520] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1794'. [ 258.892191][T12524] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1794'. [ 258.902051][T12524] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1794'. [ 259.071273][T12531] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 259.254223][T11790] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 259.264798][T11790] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 259.433373][T12551] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1802'. [ 259.451448][T12549] syzkaller1: entered promiscuous mode [ 259.460911][T12549] syzkaller1: entered allmulticast mode [ 259.481063][T12549] dvmrp6: entered allmulticast mode [ 260.098073][T12572] netlink: 'syz.4.1810': attribute type 1 has an invalid length. [ 260.272948][T12572] 8021q: adding VLAN 0 to HW filter on device bond8 [ 260.415282][T12572] bond8: (slave batadv1): Opening slave failed [ 260.657375][T12611] blkio.reset_stats is deprecated [ 260.790204][T12621] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1820'. [ 261.031766][T12628] syzkaller1: entered promiscuous mode [ 261.038482][T12628] syzkaller1: entered allmulticast mode [ 261.103896][T12633] openvswitch: netlink: IP tunnel dst address not specified [ 261.116743][T12630] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 261.133962][T12636] netlink: 'syz.1.1825': attribute type 8 has an invalid length. [ 261.160416][T12637] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1827'. [ 261.241395][T12636] af_packet: tpacket_rcv: packet too big, clamped from 5084 to 3942. macoff=106 [ 261.775897][T12670] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 261.981426][T12686] 0: renamed from hsr_slave_1 (while UP) [ 262.012041][T12686] 0: entered allmulticast mode [ 262.013713][T12689] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 262.019016][T12686] A link change request failed with some changes committed already. Interface c0 may have been left with an inconsistent configuration, please check. [ 262.215166][T12698] 1: renamed from c0 (while UP) [ 262.236333][T12698] A link change request failed with some changes committed already. Interface c1 may have been left with an inconsistent configuration, please check. [ 262.302578][T12698] team0: Port device dummy0 added [ 262.409118][T12715] dvmrp0: entered allmulticast mode [ 262.681024][T12728] validate_nla: 6 callbacks suppressed [ 262.681047][T12728] netlink: 'syz.0.1851': attribute type 3 has an invalid length. [ 263.396496][T12777] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 263.487428][T12782] geneve4: entered promiscuous mode [ 263.509034][ T750] netdevsim netdevsim1 : set [1, 1] type 2 family 0 port 33269 - 0 [ 263.509393][T12773] __nla_validate_parse: 8 callbacks suppressed [ 263.509409][T12773] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1860'. [ 263.523826][ T6093] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 33269 - 0 [ 263.523875][ T6093] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 33269 - 0 [ 263.523912][ T6093] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 33269 - 0 [ 263.570595][T12773] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1860'. [ 263.592955][T12784] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 263.604452][T12784] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 263.615803][T12784] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 33269 - 0 [ 263.643845][T12790] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 263.715557][T12785] netlink: 'syz.2.1863': attribute type 4 has an invalid length. [ 263.750248][T12784] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 263.761082][T12784] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 263.776687][T12784] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 33269 - 0 [ 263.884893][T12784] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 263.896648][T12784] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 263.907726][T12784] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 33269 - 0 [ 264.008945][T12784] netdevsim netdevsim1  (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 264.029115][T12784] netdevsim netdevsim1  (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 264.040001][T12784] netdevsim netdevsim1  (unregistering): unset [1, 1] type 2 family 0 port 33269 - 0 [ 264.281102][T11790] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 264.298317][T11790] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 33269 - 0 [ 264.317382][T11790] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 20004 - 0 [ 264.453306][ T750] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 264.461551][ T750] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 33269 - 0 [ 264.479350][T12809] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1871'. [ 264.492437][ T750] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 20004 - 0 [ 264.525088][ T750] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 264.562516][ T750] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 33269 - 0 [ 264.592058][ T750] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 20004 - 0 [ 264.644101][ T750] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 264.661369][ T750] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 33269 - 0 [ 264.681540][ T750] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 20004 - 0 [ 264.708012][T12821] netlink: 232 bytes leftover after parsing attributes in process `syz.3.1872'. [ 264.742596][T12818] syzkaller1: entered promiscuous mode [ 264.748137][T12818] syzkaller1: entered allmulticast mode [ 264.785641][T12823] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 264.828240][T12823] Cannot find set identified by id 1 to match [ 264.849129][T12823] netlink: 'syz.2.1874': attribute type 6 has an invalid length. [ 264.861196][T12823] netlink: 'syz.2.1874': attribute type 9 has an invalid length. [ 264.863952][T12829] netlink: 512 bytes leftover after parsing attributes in process `syz.1.1876'. [ 265.038492][T12842] netlink: 'syz.3.1879': attribute type 1 has an invalid length. [ 265.133117][T12845] netlink: 'syz.1.1880': attribute type 5 has an invalid length. [ 265.526154][T12868] netlink: 'syz.0.1888': attribute type 2 has an invalid length. [ 265.607867][T12878] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1888'. [ 265.689237][T12878] netlink: 43 bytes leftover after parsing attributes in process `syz.0.1888'. [ 265.723145][T12878] netlink: 'syz.0.1888': attribute type 5 has an invalid length. [ 265.731201][T12878] netlink: 43 bytes leftover after parsing attributes in process `syz.0.1888'. [ 266.336124][T12917] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1902'. [ 266.347575][T12919] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1904'. [ 266.586865][T12936] netlink: 'syz.1.1908': attribute type 29 has an invalid length. [ 266.618502][T12935] : renamed from team_slave_1 [ 266.653859][T12936] netlink: 'syz.1.1908': attribute type 29 has an invalid length. [ 266.869264][T12953] erspan2: entered allmulticast mode [ 267.498785][T12991] openvswitch: netlink: Message has 1 unknown bytes. [ 267.522095][T12991] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 267.983369][T13018] validate_nla: 2 callbacks suppressed [ 267.983389][T13018] netlink: 'syz.3.1929': attribute type 1 has an invalid length. [ 268.000196][T13015] veth1_macvtap: left promiscuous mode [ 268.609683][T13048] nbd: illegal input index 2958377 [ 268.715840][T13054] IPVS: set_ctl: invalid protocol: 117 172.20.20.170:20000 [ 268.758819][T13058] __nla_validate_parse: 8 callbacks suppressed [ 268.758840][T13058] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1945'. [ 268.961524][T13072] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1947'. [ 268.976265][T13083] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1948'. [ 268.999148][T13071] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1948'. [ 269.419556][T13149] netlink: 'syz.1.1954': attribute type 23 has an invalid length. [ 270.038549][T13195] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 270.359992][T13214] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1966'. [ 270.441671][T13219] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1968'. [ 270.515924][T13224] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1969'. [ 270.785524][T13224] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1969'. [ 270.795433][T13225] syzkaller0: entered promiscuous mode [ 270.808098][T13225] syzkaller0: entered allmulticast mode [ 270.824951][T13232] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1970'. [ 271.556103][T13269] openvswitch: netlink: VXLAN extension 0 has unexpected len 2 expected 0 [ 271.570270][T13271] netlink: 'syz.4.1982': attribute type 4 has an invalid length. [ 271.721315][T13265] 0: left allmulticast mode [ 271.765509][T13265] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 271.791304][T13265] gretap1: left promiscuous mode [ 271.796594][T13265] gretap1: left allmulticast mode [ 271.809570][T13265] vlan2: left allmulticast mode [ 271.814999][T13265] veth0_to_bond: left allmulticast mode [ 271.830599][T13265] bond0: left promiscuous mode [ 271.836104][T13265] bridge2: left promiscuous mode [ 271.847139][T13265] A link change request failed with some changes committed already. Interface bridge2 may have been left with an inconsistent configuration, please check. [ 272.028459][ T6093] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.064343][ T6093] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.152293][ T6093] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.177070][ T6093] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.231535][T13291] : renamed from dvmrp0 (while UP) [ 272.326225][T13280] syzkaller0: entered promiscuous mode [ 272.328309][T13302] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1990'. [ 272.331866][T13280] syzkaller0: entered allmulticast mode [ 272.396436][T13307] xt_CT: You must specify a L4 protocol and not use inversions on it [ 272.419725][T13305] team0: Device ip6gre2 is of different type [ 272.501231][T13311] x_tables: duplicate underflow at hook 2 [ 272.546946][T13315] netlink: 'syz.0.1992': attribute type 2 has an invalid length. [ 272.570924][T13317] netlink: 'syz.3.1993': attribute type 1 has an invalid length. [ 273.881681][T13313] syzkaller0: entered promiscuous mode [ 273.887298][T13313] syzkaller0: entered allmulticast mode [ 273.949255][T13332] netlink: 'syz.1.1996': attribute type 5 has an invalid length. [ 275.255333][T13337] syzkaller1: entered promiscuous mode [ 275.272758][T13337] syzkaller1: entered allmulticast mode [ 275.428457][T13352] __nla_validate_parse: 3 callbacks suppressed [ 275.428477][T13352] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1999'. [ 275.456485][T13354] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2000'. [ 275.505372][T13352] netlink: 'syz.1.1999': attribute type 1 has an invalid length. [ 275.529155][T13352] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1999'. [ 275.529764][T13355] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2001'. [ 275.550552][T13354] RDS: rds_bind could not find a transport for ::ffff:172.30.0.3, load rds_tcp or rds_rdma? [ 275.971149][T13376] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2009'. [ 276.086706][T13391] xt_nat: multiple ranges no longer supported [ 276.099404][T13388] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2014'. [ 276.108904][T13388] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2014'. [ 276.117983][T13388] netlink: 'syz.3.2014': attribute type 15 has an invalid length. [ 276.139526][ T6086] netdevsim netdevsim3 netdevsim0: set [0, 1] type 1 family 0 port 256 - 0 [ 276.151059][T13388] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2014'. [ 276.160563][ T6086] netdevsim netdevsim3 netdevsim1: set [0, 1] type 1 family 0 port 256 - 0 [ 276.169847][ T6086] netdevsim netdevsim3 netdevsim2: set [0, 1] type 1 family 0 port 256 - 0 [ 276.188830][T13376] sctp: [Deprecated]: syz.0.2009 (pid 13376) Use of struct sctp_assoc_value in delayed_ack socket option. [ 276.188830][T13376] Use struct sctp_sack_info instead [ 276.206212][T13388] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2014'. [ 276.215998][T13388] netlink: 'syz.3.2014': attribute type 15 has an invalid length. [ 276.224913][ T6086] netdevsim netdevsim3 netdevsim3: set [0, 1] type 1 family 0 port 256 - 0 [ 276.269428][T13376] veth9: entered allmulticast mode [ 276.825200][T13435] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2022'. [ 277.711610][T13493] netlink: 'syz.0.2038': attribute type 9 has an invalid length. [ 277.741017][T13493] netlink: 'syz.0.2038': attribute type 11 has an invalid length. [ 277.760338][T13493] netlink: 'syz.0.2038': attribute type 12 has an invalid length. [ 277.914533][T13514] netlink: 'syz.0.2044': attribute type 1 has an invalid length. [ 277.963714][T13514] 8021q: adding VLAN 0 to HW filter on device bond7 [ 277.995218][T13520] bond7: entered allmulticast mode [ 278.037729][T13514] bond7: (slave ip6gretap1): making interface the new active one [ 278.077866][T13514] ip6gretap1: entered allmulticast mode [ 278.111310][T13514] bond7: (slave ip6gretap1): Enslaving as an active interface with an up link [ 278.409980][T13543] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 278.461710][T13543] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 280.987048][T13637] syzkaller0: entered promiscuous mode [ 281.002374][T13637] syzkaller0: entered allmulticast mode [ 282.699272][T13683] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 282.871928][T13687] __nla_validate_parse: 8 callbacks suppressed [ 282.871950][T13687] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2083'. [ 282.889530][T13694] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2085'. [ 282.949037][T13696] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2084'. [ 282.958777][T13696] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 283.226452][T13712] netlink: 220 bytes leftover after parsing attributes in process `syz.3.2093'. [ 283.253073][T13710] netlink: 'syz.4.2091': attribute type 10 has an invalid length. [ 283.291158][T13710] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2091'. [ 283.489108][T13727] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2099'. [ 283.492406][T13725] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2099'. [ 283.517352][T13726] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2097'. [ 283.518066][T13727] netlink: 80 bytes leftover after parsing attributes in process `syz.1.2099'. [ 283.549880][T13725] netlink: 80 bytes leftover after parsing attributes in process `syz.1.2099'. [ 283.993020][T13752] tipc: Enabling of bearer rejected, failed to enable media [ 284.267540][T13766] xt_CT: You must specify a L4 protocol and not use inversions on it [ 284.479602][T13774] netlink: ct family unspecified [ 284.498144][T13775] IPv6: sit2: Disabled Multicast RS [ 284.516341][T13775] sit2: entered allmulticast mode [ 284.877308][T13793] netlink: 'syz.3.2122': attribute type 4 has an invalid length. [ 285.049737][T13799] netlink: 'syz.3.2123': attribute type 9 has an invalid length. [ 285.090517][T13803] netlink: 'syz.1.2124': attribute type 4 has an invalid length. [ 285.189487][T13805] netlink: 'syz.4.2126': attribute type 2 has an invalid length. [ 285.201686][T13805] netlink: 'syz.4.2126': attribute type 2 has an invalid length. [ 285.223285][T13807] syzkaller0: entered promiscuous mode [ 285.228861][T13807] syzkaller0: entered allmulticast mode [ 285.472776][T13822] netlink: 'syz.3.2132': attribute type 4 has an invalid length. [ 285.489111][T13822] tipc: Enabling of bearer rejected, failed to enable media [ 285.499544][T13817] netlink: 'syz.0.2130': attribute type 1 has an invalid length. [ 285.509353][T13816] delete_channel: no stack [ 285.724094][T13831] netlink: 'syz.4.2136': attribute type 1 has an invalid length. [ 285.758802][T13831] 8021q: adding VLAN 0 to HW filter on device bond9 [ 285.766995][T13831] bond9: up delay (136) is not a multiple of miimon (100), value rounded to 100 ms [ 285.802403][T13831] bond9: entered allmulticast mode [ 285.996970][T13850] netlink: 'syz.0.2137': attribute type 1 has an invalid length. [ 286.309727][T13863] batadv_slave_1: mtu less than device minimum [ 286.496427][T13874] openvswitch: netlink: Missing valid actions attribute. [ 286.520431][T13876] xt_TCPMSS: Only works on TCP SYN packets [ 286.529285][T13874] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 286.533324][T13878] openvswitch: netlink: Missing valid actions attribute. [ 286.566293][T13873] sctp: [Deprecated]: syz.2.2149 (pid 13873) Use of int in maxseg socket option. [ 286.566293][T13873] Use struct sctp_assoc_value instead [ 286.591010][T13878] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 286.616549][T13877] vlan3: entered promiscuous mode [ 286.621664][T13877] geneve1: entered promiscuous mode [ 286.632510][T13877] vlan3: entered allmulticast mode [ 286.637690][T13877] geneve1: entered allmulticast mode [ 286.719958][T13885] delete_channel: no stack [ 287.030042][T13904] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 287.239260][T13915] macvlan2: entered promiscuous mode [ 287.281774][T13915] macvlan2: entered allmulticast mode [ 287.304254][T13915] bond11: entered promiscuous mode [ 287.310402][T13915] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 287.324415][T13915] bond11: left promiscuous mode [ 288.007380][T13943] __nla_validate_parse: 17 callbacks suppressed [ 288.007406][T13943] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2169'. [ 288.053791][T13943] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2169'. [ 288.433626][T13971] xt_socket: unknown flags 0x50 [ 288.439385][T13976] netlink: 'syz.4.2176': attribute type 21 has an invalid length. [ 288.439384][T13974] validate_nla: 3 callbacks suppressed [ 288.439401][T13974] netlink: 'syz.4.2176': attribute type 21 has an invalid length. [ 288.439420][T13974] IPv6: NLM_F_CREATE should be specified when creating new route [ 288.453645][T13976] IPv6: NLM_F_CREATE should be specified when creating new route [ 288.558470][T13968] netlink: 'syz.2.2175': attribute type 1 has an invalid length. [ 288.637423][T13981] bond11 (unregistering): Released all slaves [ 288.757999][T13993] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2181'. [ 288.774934][T13993] veth0_to_team: entered promiscuous mode [ 288.786199][T13993] veth0_to_team: left promiscuous mode [ 288.830831][T13995] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2182'. [ 288.845793][T13995] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 288.993183][T14000] netlink: 'syz.3.2184': attribute type 10 has an invalid length. [ 289.048699][T14000] team0: Port device dummy0 added [ 289.078482][T14007] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2186'. [ 289.147398][T14007] netlink: 176 bytes leftover after parsing attributes in process `syz.1.2186'. [ 289.280777][T14007] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2186'. [ 289.703772][T14044] ip6tnl1: entered allmulticast mode [ 289.740224][T14049] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2192'. [ 290.039157][T14070] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 290.084387][T14074] netlink: 'syz.3.2197': attribute type 11 has an invalid length. [ 290.093252][T14074] netlink: 199828 bytes leftover after parsing attributes in process `syz.3.2197'. [ 290.103672][T14071] sch_tbf: burst 4 is lower than device syzkaller0 mtu (1500) ! [ 290.114264][T14063] syzkaller0: entered promiscuous mode [ 290.119940][T14063] syzkaller0: entered allmulticast mode [ 290.129815][T14074] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2197'. [ 290.146413][T14074] netlink: 'syz.3.2197': attribute type 5 has an invalid length. [ 291.086083][T14124] gre1: entered promiscuous mode [ 291.091658][T14124] gre1: entered allmulticast mode [ 291.451823][T14146] syz.1.2218 (14146) used obsolete PPPIOCDETACH ioctl [ 291.535143][T14152] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 291.771264][T14167] IPVS: set_ctl: invalid protocol: 22 172.20.20.170:20001 [ 291.974064][T14173] tipc: Failed to remove unknown binding: 66,0,0/3967811604:307441673/307441675 [ 291.993084][T14173] tipc: Failed to remove unknown binding: 66,0,0/3967811604:307441673/307441674 [ 292.038710][T14178] tipc: Failed to remove unknown binding: 66,0,0/3967811604:307441673/307441675 [ 292.055895][T14178] tipc: Failed to remove unknown binding: 66,0,0/3967811604:307441673/307441674 [ 292.067304][T14173] netlink: 'syz.0.2226': attribute type 1 has an invalid length. [ 292.125109][T14173] bond8: (slave bridge0): making interface the new active one [ 292.133789][T14173] bond8: (slave bridge0): Enslaving as an active interface with an up link [ 292.329479][T14191] netlink: 'syz.0.2232': attribute type 1 has an invalid length. [ 292.358995][T14191] netlink: 'syz.0.2232': attribute type 7 has an invalid length. [ 292.384108][T14191] netlink: 'syz.0.2232': attribute type 8 has an invalid length. [ 292.494306][T14191] bond9: Invalid ad_actor_system MAC address. [ 292.543263][T14191] bond9: option ad_actor_system: invalid value (1) [ 292.589065][T14191] bond9 (unregistering): Released all slaves [ 292.670283][T14197] syzkaller1: entered promiscuous mode [ 292.678284][T14197] syzkaller1: entered allmulticast mode [ 292.939589][ C0] vcan0: j1939_tp_rxtimer: 0xffff888056791c00: rx timeout, send abort [ 293.024961][T14215] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 293.439784][ C0] vcan0: j1939_tp_rxtimer: 0xffff888056791800: rx timeout, send abort [ 293.449705][ C0] vcan0: j1939_tp_rxtimer: 0xffff888056791c00: abort rx timeout. Force session deactivation [ 293.583855][T14246] tipc: Enabled bearer , priority 0 [ 293.591621][T14246] syzkaller0: entered promiscuous mode [ 293.607211][T14247] __nla_validate_parse: 15 callbacks suppressed [ 293.607236][T14247] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2245'. [ 293.626856][T14246] syzkaller0: entered allmulticast mode [ 293.640030][T14247] openvswitch: netlink: Unknown nsh attribute 0 [ 293.641025][T14245] netlink: 'syz.2.2244': attribute type 1 has an invalid length. [ 293.692298][T14246] tipc: Resetting bearer [ 293.692298][T14245] netlink: 96 bytes leftover after parsing attributes in process `syz.2.2244'. [ 293.720710][T14245] netlink: 1 bytes leftover after parsing attributes in process `syz.2.2244'. [ 293.720768][T14244] tipc: Resetting bearer [ 293.731248][T14245] netlink: 'syz.2.2244': attribute type 1 has an invalid length. [ 293.763011][T14245] netlink: 'syz.2.2244': attribute type 8 has an invalid length. [ 293.765326][T14248] netlink: 'syz.2.2244': attribute type 1 has an invalid length. [ 293.772077][T14245] netlink: 606 bytes leftover after parsing attributes in process `syz.2.2244'. [ 293.796502][T14247] netlink: 'syz.4.2245': attribute type 23 has an invalid length. [ 293.809715][T14244] tipc: Disabling bearer [ 293.948111][ C0] vcan0: j1939_tp_rxtimer: 0xffff888056791800: abort rx timeout. Force session deactivation [ 294.002527][T14248] 8021q: adding VLAN 0 to HW filter on device bond12 [ 294.020611][T14259] bond9: (slave veth0_to_bond): Releasing active interface [ 294.028055][T14259] bond9: (slave veth0_to_bond): the permanent HWaddr of slave - aa:aa:aa:aa:aa:1d - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 294.054792][T14259] bond12: (slave veth0_to_bond): making interface the new active one [ 294.064015][T14259] bond12: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 294.094040][T14267] syzkaller0: entered promiscuous mode [ 294.099588][T14267] syzkaller0: entered allmulticast mode [ 294.243018][T14274] macvlan0: entered promiscuous mode [ 294.367181][T14281] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.2257'. [ 294.399345][T14281] netlink: Conntrack attr has 3 unknown bytes [ 294.735547][T14302] netdevsim netdevsim3 : renamed from netdevsim0 [ 295.194961][T14326] netlink: 'syz.0.2271': attribute type 1 has an invalid length. [ 295.212977][T14333] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2271'. [ 295.273712][T14330] can: request_module (can-proto-5) failed. [ 295.286166][T14336] IPVS: length: 213 != 8 [ 295.515678][T14346] syzkaller0: entered promiscuous mode [ 295.521265][T14346] syzkaller0: entered allmulticast mode [ 295.989398][T14378] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2283'. [ 296.366477][T14424] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2287'. [ 296.447246][T14423] sit2: entered promiscuous mode [ 296.466856][T14423] sit2: entered allmulticast mode [ 296.499598][T14423] netlink: 7064 bytes leftover after parsing attributes in process `syz.1.2286'. [ 296.539632][T14423] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 296.555442][T14448] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 296.749335][T14478] xt_ecn: cannot match TCP bits for non-tcp packets [ 296.758988][T14478] xt_bpf: check failed: parse error [ 296.845372][T14486] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2291'. [ 298.857404][T14646] __nla_validate_parse: 26 callbacks suppressed [ 298.857425][T14646] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2311'. [ 298.876500][T14652] netlink: 175784 bytes leftover after parsing attributes in process `syz.1.2310'. [ 298.928363][T14653] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2312'. [ 299.493110][T14671] sctp: [Deprecated]: syz.3.2317 (pid 14671) Use of int in maxseg socket option. [ 299.493110][T14671] Use struct sctp_assoc_value instead [ 299.570545][T14671] IPVS: length: 254 != 24 [ 300.211416][T14706] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2330'. [ 300.247646][T14706] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2330'. [ 300.488777][T14721] syzkaller0: entered promiscuous mode [ 300.494376][T14718] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2334'. [ 300.506141][T14721] syzkaller0: entered allmulticast mode [ 300.705878][T14734] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2340'. [ 300.947405][T14744] netlink: 'syz.3.2344': attribute type 10 has an invalid length. [ 300.964777][T14746] netlink: get zone limit has 4 unknown bytes [ 300.982938][T14744] bridge0: port 2(bridge_slave_1) entered disabled state [ 301.007962][T14744] bridge_slave_1: left allmulticast mode [ 301.017639][T14744] bridge_slave_1: left promiscuous mode [ 301.024409][T14744] bridge0: port 2(bridge_slave_1) entered disabled state [ 301.073495][T14744] .`: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 301.103038][T14752] ipt_REJECT: TCP_RESET invalid for non-tcp [ 301.243665][T14752] syzkaller0: entered promiscuous mode [ 301.249489][T14752] syzkaller0: entered allmulticast mode [ 303.094720][T14792] tipc: Enabled bearer , priority 11 [ 303.467978][T14809] IPVS: set_ctl: invalid protocol: 0 224.0.0.2:20002 [ 303.574138][T14820] syzkaller0: entered promiscuous mode [ 303.601409][T14820] syzkaller0: entered allmulticast mode [ 303.885763][T14840] bond9 (unregistering): Released all slaves [ 304.078503][T14852] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2373'. [ 304.188045][T14863] xt_CT: You must specify a L4 protocol and not use inversions on it [ 304.443461][T14870] netlink: 'syz.4.2377': attribute type 11 has an invalid length. [ 304.503039][T14877] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2378'. [ 304.535844][T14880] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2380'. [ 304.698278][T14885] syzkaller0: entered promiscuous mode [ 304.704018][T14885] syzkaller0: entered allmulticast mode [ 304.778183][T14882] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2380'. [ 304.778186][T14887] netlink: 'syz.1.2381': attribute type 13 has an invalid length. [ 304.871081][T14887] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 305.050326][T14897] pim6reg1: entered promiscuous mode [ 305.068857][T14897] pim6reg1: entered allmulticast mode [ 305.133374][T14901] syzkaller1: entered promiscuous mode [ 305.141895][T14901] syzkaller1: entered allmulticast mode [ 305.153736][T14899] tipc: Enabled bearer , priority 0 [ 305.233403][T14902] syzkaller0: entered promiscuous mode [ 305.238943][T14902] syzkaller0: entered allmulticast mode [ 305.246128][T14902] tipc: Resetting bearer [ 305.285996][T14898] tipc: Resetting bearer [ 305.839594][T14940] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2398'. [ 306.065189][T14944] netlink: 'syz.4.2398': attribute type 32 has an invalid length. [ 306.799893][T14898] tipc: Disabling bearer [ 306.848127][T14943] netlink: 308 bytes leftover after parsing attributes in process `syz.4.2398'. [ 306.998763][T14949] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 307.029192][T14953] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2403'. [ 307.047220][T14949] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 307.059463][T14949] gretap1: entered promiscuous mode [ 307.069344][T14949] gretap1: entered allmulticast mode [ 307.271892][T14971] netlink: 'syz.0.2407': attribute type 1 has an invalid length. [ 307.341552][T14971] nft_compat: unsupported protocol 5 [ 307.721114][T14992] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2411'. [ 307.758379][T14992] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2411'. [ 307.804403][T15011] netlink: 'syz.1.2415': attribute type 1 has an invalid length. [ 307.875402][T15016] netlink: 'syz.4.2417': attribute type 1 has an invalid length. [ 307.884983][T15016] netlink: 'syz.4.2417': attribute type 7 has an invalid length. [ 307.892846][T15016] netlink: 'syz.4.2417': attribute type 8 has an invalid length. [ 307.901241][T15016] netlink: 208 bytes leftover after parsing attributes in process `syz.4.2417'. [ 307.911217][T15016] NCSI netlink: No device for ifindex 65584 [ 307.930815][T15011] 8021q: adding VLAN 0 to HW filter on device bond11 [ 308.214617][T15025] vlan0: entered allmulticast mode [ 308.220016][T15025] bond0: entered allmulticast mode [ 308.242335][T15025] bridge_slave_1: entered allmulticast mode [ 308.341613][T15025] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 308.364093][T15025] bridge_slave_1: left allmulticast mode [ 308.390295][T15025] bond0 (unregistering): Released all slaves [ 308.603092][T15052] netlink: 'syz.0.2427': attribute type 4 has an invalid length. [ 308.628247][T15052] netlink: 'syz.0.2427': attribute type 4 has an invalid length. [ 308.696576][T15054] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 308.870562][T15054] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 309.154011][T15078] __nla_validate_parse: 3 callbacks suppressed [ 309.154033][T15078] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2432'. [ 309.324259][T15078] syzkaller0: entered promiscuous mode [ 309.362000][T15078] syzkaller0: entered allmulticast mode [ 309.402415][T15090] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2435'. [ 309.468019][T15090] 8021q: adding VLAN 0 to HW filter on device bond10 [ 309.575014][T15098] 8021q: adding VLAN 0 to HW filter on device bond10 [ 309.582894][T15098] bond10: (slave vxcan3): The slave device specified does not support setting the MAC address [ 309.594990][T15098] bond10: (slave vxcan3): Error -95 calling set_mac_address [ 309.861663][T15121] netlink: 212344 bytes leftover after parsing attributes in process `syz.4.2442'. [ 309.880244][T15121] xt_NFQUEUE: number of queues (62232) out of range (got 67565) [ 310.059590][T15129] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2446'. [ 311.176990][T15107] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2439'. [ 311.341985][T15140] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2448'. [ 311.365860][T15138] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2450'. [ 311.379464][T15139] netlink: 'syz.2.2448': attribute type 2 has an invalid length. [ 311.431417][T15147] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2450'. [ 311.621507][T15159] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2454'. [ 311.795820][T15169] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2455'. [ 311.967611][T15176] netlink: 'syz.2.2459': attribute type 1 has an invalid length. [ 312.049467][T15173] tipc: Enabling of bearer rejected, failed to enable media [ 312.084396][T15185] IPVS: length: 164 != 24 [ 312.161752][T15187] IPVS: length: 164 != 24 [ 312.252836][T15176] 8021q: adding VLAN 0 to HW filter on device bond13 [ 312.499283][T15176] vlan3: entered promiscuous mode [ 312.512468][T15176] bond13: entered promiscuous mode [ 312.517912][T15176] vlan3: entered allmulticast mode [ 312.554837][T15176] bond13: entered allmulticast mode [ 313.089227][T15229] netlink: 'syz.1.2478': attribute type 1 has an invalid length. [ 313.350306][T15229] 8021q: adding VLAN 0 to HW filter on device bond0 [ 313.427698][T15236] ip6tnl0: Caught tx_queue_len zero misconfig [ 313.522081][T15244] syzkaller0: entered allmulticast mode [ 313.893626][T15271] openvswitch: netlink: Flow key attr not present in new flow. [ 314.348079][T15297] __nla_validate_parse: 2 callbacks suppressed [ 314.348101][T15297] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2500'. [ 314.369570][T15297] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2500'. [ 314.385805][T15297] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2500'. [ 314.709878][T15321] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.2505'. [ 314.740400][T15321] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2505'. [ 314.759523][T15321] veth0_to_team: entered promiscuous mode [ 314.777884][T15321] veth0_to_team: left promiscuous mode [ 314.896605][T15333] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2508'. [ 314.958428][T15337] netlink: 'syz.0.2509': attribute type 12 has an invalid length. [ 314.994164][T15339] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2508'. [ 315.004190][T15339] nbd: device at index 64 is going down [ 315.238492][T13152] udevd[13152]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 315.295559][T13152] udevd[13152]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 315.379133][T15355] syzkaller0: entered promiscuous mode [ 315.392926][T15355] syzkaller0: entered allmulticast mode [ 315.409761][T15355] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2512'. [ 315.440073][T15355] netlink: 13 bytes leftover after parsing attributes in process `syz.0.2512'. [ 315.456126][T15362] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2514'. [ 315.502003][T15365] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 315.513102][T15366] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 315.523439][T15355] veth11: entered promiscuous mode [ 315.756766][T15378] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 315.767914][T15378] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 315.829328][T15379] bridge0: entered promiscuous mode [ 315.837629][T15379] macsec1: entered promiscuous mode [ 315.860638][T15383] ipt_ECN: cannot use operation on non-tcp rule [ 315.867461][T15379] macsec1: entered allmulticast mode [ 315.874317][T15379] bridge0: entered allmulticast mode [ 315.909756][T15379] bridge0: port 2(macsec1) entered blocking state [ 315.936934][T15379] bridge0: port 2(macsec1) entered disabled state [ 316.020699][T15379] bridge0: left allmulticast mode [ 316.037582][T15379] bridge0: left promiscuous mode [ 316.383475][T15411] ksmbd: Unknown IPC event: 3, ignore. [ 316.870103][T15445] Cannot find add_set index 0 as target [ 316.897499][T15439] vlan3: entered promiscuous mode [ 316.914667][T15439] bridge0: entered promiscuous mode [ 316.947081][T15439] netlink: 'syz.0.2533': attribute type 6 has an invalid length. [ 317.338740][T15473] sctp: [Deprecated]: syz.2.2543 (pid 15473) Use of int in max_burst socket option. [ 317.338740][T15473] Use struct sctp_assoc_value instead [ 317.381476][T15477] xt_NFQUEUE: number of total queues is 0 [ 317.444147][T15480] syzkaller1: entered promiscuous mode [ 317.460374][T15480] syzkaller1: entered allmulticast mode [ 317.627877][T15485] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 317.719278][T15485] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 317.770559][T15485] .` (unregistering): (slave bridge_slave_1): Releasing backup interface [ 317.796699][T15495] delete_channel: no stack [ 317.813838][T15485] .` (unregistering): Released all slaves [ 317.845608][T15498] netlink: 'syz.2.2551': attribute type 21 has an invalid length. [ 317.867415][T15498] netlink: 'syz.2.2551': attribute type 5 has an invalid length. [ 318.099460][T15510] team_slave_0: entered allmulticast mode [ 318.121454][T15510] team_slave_0: entered promiscuous mode [ 318.148833][T15513] delete_channel: no stack [ 318.240555][T15519] ipt_REJECT: TCP_RESET invalid for non-tcp [ 318.321696][T15523] bond12: entered promiscuous mode [ 318.328673][T15523] 8021q: adding VLAN 0 to HW filter on device bond12 [ 318.348316][T15523] macvlan2: entered promiscuous mode [ 318.353911][T15523] macvlan2: entered allmulticast mode [ 318.360753][T15523] bond12: (slave macvlan2): Opening slave failed [ 318.525785][T15534] bond3 (unregistering): Released all slaves [ 318.755079][T15536] syzkaller0: entered promiscuous mode [ 318.760961][T15536] syzkaller0: entered allmulticast mode [ 320.213404][T15558] vlan4: entered allmulticast mode [ 320.218667][T15558] bond0: entered allmulticast mode [ 320.241897][T15559] bond0 (unregistering): Released all slaves [ 320.433479][T15575] pim6reg: entered allmulticast mode [ 320.490383][T15583] __nla_validate_parse: 18 callbacks suppressed [ 320.490408][T15583] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2572'. [ 320.556799][T15588] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2573'. [ 320.593446][T15583] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2572'. [ 320.631661][T15588] xt_ipcomp: unknown flags 1D [ 320.689332][T15583] bond0: mtu less than device minimum [ 320.826905][T15605] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2578'. [ 320.973583][T15613] netlink: 'syz.4.2581': attribute type 1 has an invalid length. [ 320.992689][T15613] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2581'. [ 321.278496][T15628] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2585'. [ 321.326560][T15628] bond0: option ad_select: unable to set because the bond device is up [ 321.344829][T15628] xt_recent: Unsupported userspace flags (000000b1) [ 321.518168][T15635] netlink: 'syz.2.2586': attribute type 10 has an invalid length. [ 321.527602][T15635] bond0: (slave wlan1): Opening slave failed [ 321.625324][T15639] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2588'. [ 321.690258][T15644] x_tables: duplicate underflow at hook 1 [ 321.701574][T15644] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.2590'. [ 321.847178][T15651] netlink: 'syz.0.2592': attribute type 1 has an invalid length. [ 322.078252][T15665] bridge0: Device is already in use. [ 322.130602][T15678] sctp: [Deprecated]: syz.1.2598 (pid 15678) Use of int in max_burst socket option deprecated. [ 322.130602][T15678] Use struct sctp_assoc_value instead [ 322.134099][T15651] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2592'. [ 322.188151][T15672] bond9: (slave vcan1): The slave device specified does not support setting the MAC address [ 322.236551][T15672] bond9: (slave vcan1): Setting fail_over_mac to active for active-backup mode [ 322.250817][T15672] bond9: (slave vcan1): making interface the new active one [ 322.259252][T15672] bond9: (slave vcan1): Enslaving as an active interface with an up link [ 322.316059][T15658] syzkaller0: entered promiscuous mode [ 322.321939][T15658] syzkaller0: entered allmulticast mode [ 322.677286][T15700] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2602'. [ 323.763854][T15693] syzkaller0: entered promiscuous mode [ 323.769397][T15693] syzkaller0: entered allmulticast mode [ 323.903338][T15704] mac80211_hwsim hwsim9 : renamed from wlan1 [ 323.958955][T15706] syzkaller0: entered promiscuous mode [ 323.982351][T15706] syzkaller0: entered allmulticast mode [ 324.162754][T15715] ipvlan2: entered allmulticast mode [ 324.169416][T15715] batadv_slave_1: entered allmulticast mode [ 324.184459][T15715] batman_adv: batadv0: Adding interface: ipvlan2 [ 324.191064][T15715] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 324.217301][T15715] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 324.228474][T15715] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 324.238686][T15715] batman_adv: batadv0: Interface activated: ipvlan2 [ 324.860287][T15741] : left allmulticast mode [ 324.965617][T15745] netlink: 'syz.0.2619': attribute type 10 has an invalid length. [ 324.977440][T15745] team0: Device ipvlan1 failed to register rx_handler [ 325.175203][T15757] syzkaller0: entered promiscuous mode [ 325.184022][T15762] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 325.191010][T15757] syzkaller0: entered allmulticast mode [ 325.275609][T15766] netlink: 'syz.0.2627': attribute type 6 has an invalid length. [ 325.628949][T15787] bond2: option mode: unable to set because the bond device has slaves [ 325.653135][T15787] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 325.728312][T15789] __nla_validate_parse: 5 callbacks suppressed [ 325.728333][T15789] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2636'. [ 325.764957][T15792] netlink: 7 bytes leftover after parsing attributes in process `syz.0.2637'. [ 326.020663][T15806] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2642'. [ 326.058716][T15806] tipc: Enabled bearer , priority 0 [ 326.075028][T15806] syzkaller0: entered promiscuous mode [ 326.096164][T15806] syzkaller0: entered allmulticast mode [ 326.114921][T15805] tipc: Resetting bearer [ 326.143159][T15805] tipc: Disabling bearer [ 326.238955][ T30] audit: type=1800 audit(1773580028.144:5): pid=15816 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2644" name="memory.events" dev="tmpfs" ino=2677 res=0 errno=0 [ 326.388261][T15824] bond10: option mode: invalid value (133) [ 326.396101][T15824] bond10 (unregistering): Released all slaves [ 326.775543][T15842] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2653'. [ 327.180883][T15862] netlink: 'syz.4.2660': attribute type 24 has an invalid length. [ 327.192498][T15857] netlink: 'syz.1.2659': attribute type 1 has an invalid length. [ 327.210596][T15857] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2659'. [ 327.268317][T15864] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2663'. [ 327.314422][T15864] netlink: 165812 bytes leftover after parsing attributes in process `syz.3.2663'. [ 327.335680][T15867] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2662'. [ 327.365504][T15869] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2661'. [ 327.911464][T15898] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2672'. [ 329.597748][T15963] xt_CT: You must specify a L4 protocol and not use inversions on it [ 329.666469][T15965] pimreg: entered allmulticast mode [ 329.708423][T15967] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 329.721808][T15971] xt_hashlimit: size too large, truncated to 1048576 [ 329.729811][T15967] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 329.750791][T15967] gretap1: entered promiscuous mode [ 329.764849][T15967] gretap1: entered allmulticast mode [ 329.784469][T15973] syzkaller0: entered promiscuous mode [ 329.790114][T15973] syzkaller0: entered allmulticast mode [ 329.831152][T15963] bond0: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5) [ 329.874088][T15963] bond0 (unregistering): Released all slaves [ 330.148810][T15990] netlink: 'syz.3.2701': attribute type 1 has an invalid length. [ 330.900229][T16016] netlink: 'syz.1.2707': attribute type 1 has an invalid length. [ 330.914950][T16016] __nla_validate_parse: 5 callbacks suppressed [ 330.914972][T16016] netlink: 96 bytes leftover after parsing attributes in process `syz.1.2707'. [ 330.946498][T16016] netlink: 658 bytes leftover after parsing attributes in process `syz.1.2707'. [ 330.972415][T16016] netlink: 1 bytes leftover after parsing attributes in process `syz.1.2707'. [ 331.111729][T16029] pimreg: entered allmulticast mode [ 331.186578][T16027] netlink: 16150 bytes leftover after parsing attributes in process `syz.0.2712'. [ 331.377172][T16042] syzkaller1: entered promiscuous mode [ 331.388036][T16042] syzkaller1: entered allmulticast mode [ 331.520573][T16051] netlink: 'syz.0.2720': attribute type 1 has an invalid length. [ 331.534643][T16051] netlink: 'syz.0.2720': attribute type 7 has an invalid length. [ 331.545082][T16051] netlink: 'syz.0.2720': attribute type 8 has an invalid length. [ 331.553788][T16051] netlink: 208 bytes leftover after parsing attributes in process `syz.0.2720'. [ 331.567594][T16051] NCSI netlink: No device for ifindex 65584 [ 331.608019][T16056] syzkaller0: entered promiscuous mode [ 331.631492][T16056] syzkaller0: entered allmulticast mode [ 331.663133][T16058] openvswitch: netlink: VXLAN extension message has 1 unknown bytes. [ 331.704580][T16058] openvswitch: netlink: VXLAN extension message has 1 unknown bytes. [ 331.856789][T16070] openvswitch: netlink: Unexpected mask (mask=4000040, allowed=10048) [ 332.136529][T16084] veth0: entered promiscuous mode [ 332.348789][T16082] veth0: left promiscuous mode [ 332.557602][T16109] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2738'. [ 332.580580][T16109] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2738'. [ 332.675923][T16113] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2739'. [ 332.795113][T16120] netlink: 'syz.1.2735': attribute type 1 has an invalid length. [ 332.936464][T16113] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2739'. [ 332.957045][T16114] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2739'. [ 333.168512][T16140] netlink: 'syz.4.2746': attribute type 1 has an invalid length. [ 333.392967][T16140] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR [ 333.403278][T16153] xt_hashlimit: overflow, rate too high: 0 [ 333.859348][T16173] netlink: 'syz.2.2754': attribute type 5 has an invalid length. [ 333.877343][T16174] Cannot find del_set index 4 as target [ 334.130832][T16187] netlink: 'syz.2.2757': attribute type 1 has an invalid length. [ 334.257468][T16189] veth9: entered promiscuous mode [ 334.357322][T16191] netlink: 'syz.1.2760': attribute type 83 has an invalid length. [ 334.516140][T16197] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 334.768705][T16207] syz.1.2767 (16207) used greatest stack depth: 17472 bytes left [ 334.900216][T16220] xt_ecn: cannot match TCP bits for non-tcp packets [ 334.922448][T16221] xt_ecn: cannot match TCP bits for non-tcp packets [ 335.609225][T16261] netlink: 'syz.0.2783': attribute type 1 has an invalid length. [ 335.675413][T16267] netlink: 'syz.1.2784': attribute type 1 has an invalid length. [ 335.867021][T16267] bond12: entered promiscuous mode [ 335.890313][T16267] 8021q: adding VLAN 0 to HW filter on device bond12 [ 335.937364][T16291] __nla_validate_parse: 15 callbacks suppressed [ 335.937385][T16291] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2787'. [ 335.990269][T16267] ipvlan0: entered allmulticast mode [ 335.996972][T16267] bond12: entered allmulticast mode [ 336.076567][T16267] bond12: (slave bridge10): making interface the new active one [ 336.095120][T16267] bridge10: entered promiscuous mode [ 336.102001][T16267] bridge10: entered allmulticast mode [ 336.114463][T16267] bond12: (slave bridge10): Enslaving as an active interface with an up link [ 336.167279][T16304] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2793'. [ 336.235401][T16304] syz_tun: entered promiscuous mode [ 336.250831][T16308] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 336.261483][T16304] macvtap2: entered promiscuous mode [ 336.295678][T16304] syz_tun: left promiscuous mode [ 336.377789][T16315] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2797'. [ 336.559192][T16318] pim6reg1: entered promiscuous mode [ 336.567918][T16318] pim6reg1: entered allmulticast mode [ 336.576560][T16312] syzkaller1: entered promiscuous mode [ 336.583721][T16312] syzkaller1: entered allmulticast mode [ 337.083412][T16351] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2805'. [ 337.445024][T16376] syzkaller0: entered promiscuous mode [ 337.453478][T16376] syzkaller0: entered allmulticast mode [ 337.463397][T16380] caif0: entered promiscuous mode [ 337.472039][T16380] caif0: entered allmulticast mode [ 337.694670][T16392] netlink: 'syz.3.2816': attribute type 1 has an invalid length. [ 337.761464][T16392] bond3: entered promiscuous mode [ 337.778689][T16392] bond3: entered allmulticast mode [ 337.785048][T16392] 8021q: adding VLAN 0 to HW filter on device bond3 [ 337.798494][T16405] macvlan4: entered promiscuous mode [ 337.804551][T16405] macvlan4: entered allmulticast mode [ 337.829279][T16405] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 337.852286][T16397] can: request_module (can-proto-0) failed. [ 337.876690][T16394] can: request_module (can-proto-0) failed. [ 337.912124][T16401] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 337.933372][T16401] bridge0: entered allmulticast mode [ 338.058260][T16410] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2820'. [ 338.080553][T16410] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2820'. [ 338.261881][T16426] sctp: [Deprecated]: syz.3.2825 (pid 16426) Use of struct sctp_assoc_value in delayed_ack socket option. [ 338.261881][T16426] Use struct sctp_sack_info instead [ 338.704715][T16449] tipc: Resetting bearer [ 338.738562][T16461] netlink: 7 bytes leftover after parsing attributes in process `syz.2.2830'. [ 338.802096][T16449] tipc: Disabling bearer [ 339.003539][T16476] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2835'. [ 339.050748][T16479] netlink: 'syz.1.2836': attribute type 1 has an invalid length. [ 339.275524][T16487] openvswitch: netlink: Tunnel attr 10 has unexpected len 7 expected 2 [ 339.335375][T16490] netlink: 'syz.4.2840': attribute type 10 has an invalid length. [ 339.380615][T16489] lo: left promiscuous mode [ 339.412777][T16489] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 339.576194][ T5145] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 339.586369][ T5145] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 339.586846][T16504] netlink: 220 bytes leftover after parsing attributes in process `syz.3.2842'. [ 339.626161][ T5145] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 339.639424][ T5145] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 339.652147][ T5145] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 339.766442][ T5828] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 339.774061][ T5828] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 339.781524][ T5828] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 339.792052][ T5828] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 339.822349][ T5828] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 339.979106][T16521] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2847'. [ 340.447289][T16502] chnl_net:caif_netlink_parms(): no params data found [ 340.640049][T16557] netlink: 'syz.4.2854': attribute type 1 has an invalid length. [ 340.653211][T16557] netlink: 'syz.4.2854': attribute type 1 has an invalid length. [ 340.681923][T16502] bridge0: port 1(bridge_slave_0) entered blocking state [ 340.691639][T16557] netlink: 'syz.4.2854': attribute type 1 has an invalid length. [ 340.708067][T16502] bridge0: port 1(bridge_slave_0) entered disabled state [ 340.723198][T16502] bridge_slave_0: entered allmulticast mode [ 340.744047][T16502] bridge_slave_0: entered promiscuous mode [ 340.752034][T16502] bridge0: port 2(bridge_slave_1) entered blocking state [ 340.772449][T16502] bridge0: port 2(bridge_slave_1) entered disabled state [ 340.784833][T16502] bridge_slave_1: entered allmulticast mode [ 340.793988][T16502] bridge_slave_1: entered promiscuous mode [ 340.841216][T16502] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 340.856138][T16502] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 340.956065][T16502] team0: Port device team_slave_0 added [ 340.976216][T16502] team0: Port device team_slave_1 added [ 341.025681][T16502] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 341.033012][T16502] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 341.077473][T16502] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 341.117889][T16502] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 341.133950][T16502] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 341.167694][T16502] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 341.308899][T16502] hsr_slave_0: entered promiscuous mode [ 341.336594][T16502] hsr_slave_1: entered promiscuous mode [ 341.377837][T16570] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 341.408938][T16569] __nla_validate_parse: 4 callbacks suppressed [ 341.408957][T16569] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2858'. [ 341.494154][T16570] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2858'. [ 341.866102][T16502] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 341.886685][T16502] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 33269 - 0 [ 341.913627][T16502] netdevsim netdevsim1 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 341.923808][ T5145] Bluetooth: hci5: command tx timeout [ 342.010985][T16502] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 342.026169][T16502] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 33269 - 0 [ 342.039676][T16502] netdevsim netdevsim1 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 342.159254][T16502] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 342.165147][T16593] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2865'. [ 342.180464][T16502] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 33269 - 0 [ 342.222662][T16502] netdevsim netdevsim1 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 342.251387][T16595] netlink: 144 bytes leftover after parsing attributes in process `syz.0.2866'. [ 342.351702][T16603] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2866'. [ 342.584829][T16502] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 342.603263][T16502] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 33269 - 0 [ 342.625902][T16502] netdevsim netdevsim1 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 342.746668][T16613] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2869'. [ 342.793964][T16613] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2869'. [ 343.516433][T11794] bond6 (unregistering): (slave gretap1): Releasing active interface [ 343.549463][T11794] dvmrp0 (unregistering): left allmulticast mode [ 343.577184][T11794] bond7 (unregistering): (slave geneve3): Releasing active interface [ 343.592639][T11794] bond3 (unregistering): (slave geneve2): Releasing active interface [ 344.005075][ T5145] Bluetooth: hci5: command tx timeout [ 344.103615][T11794] bond12 (unregistering): (slave bridge10): Releasing backup interface [ 344.113081][T11794] bridge10 (unregistering): left promiscuous mode [ 344.120178][T11794] bridge10 (unregistering): left allmulticast mode [ 344.185590][T11794] bond1 (unregistering): Released all slaves [ 344.204573][T11794] bond2 (unregistering): Released all slaves [ 344.255447][T11794] bond3 (unregistering): Released all slaves [ 344.279298][T11794] bond4 (unregistering): Released all slaves [ 344.293158][T11794] bond5 (unregistering): Released all slaves [ 344.309398][T11794] bond6 (unregistering): Released all slaves [ 344.326712][T11794] bond7 (unregistering): Released all slaves [ 344.341060][T11794] bond8 (unregistering): Released all slaves [ 344.355768][T11794] bond9 (unregistering): Released all slaves [ 344.372043][T11794] bond10 (unregistering): Released all slaves [ 344.389091][T11794] bond11 (unregistering): Released all slaves [ 344.406594][T11794] bond0 (unregistering): Released all slaves [ 344.427118][T11794] bond12 (unregistering): Released all slaves [ 344.468565][T11796] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 344.476659][T11796] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 344.493089][ T5901] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 344.503806][T16637] syzkaller1: entered promiscuous mode [ 344.509322][T16637] syzkaller1: entered allmulticast mode [ 344.515068][T11250] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 344.759301][T11794] 9: left promiscuous mode [ 344.829593][T16502] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 344.839294][T16678] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2884'. [ 344.856205][T16502] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 344.867517][T16502] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 344.928852][T16502] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 344.942016][T11794] tipc: Disabling bearer [ 344.994526][T11794] tipc: Left network mode [ 345.151695][T16698] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2889'. [ 345.197669][T16697] sctp: [Deprecated]: syz.3.2888 (pid 16697) Use of int in max_burst socket option. [ 345.197669][T16697] Use struct sctp_assoc_value instead [ 345.275758][T16694] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2888'. [ 345.363107][ T5901] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 345.427204][T16502] 8021q: adding VLAN 0 to HW filter on device bond0 [ 345.470868][T16502] 8021q: adding VLAN 0 to HW filter on device team0 [ 345.482911][T16451] bridge0: port 1(bridge_slave_0) entered blocking state [ 345.490046][T16451] bridge0: port 1(bridge_slave_0) entered forwarding state [ 345.504096][ T6093] bridge0: port 2(bridge_slave_1) entered blocking state [ 345.511243][ T6093] bridge0: port 2(bridge_slave_1) entered forwarding state [ 345.614564][T11794] hsr_slave_0: left promiscuous mode [ 345.621070][T11794] 1: left promiscuous mode [ 345.661701][T11794] pim6reg527 (unregistering): left allmulticast mode [ 345.818785][T11794] team0 (unregistering): Port device dummy0 removed [ 345.948952][T16502] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 346.001953][T16502] veth0_vlan: entered promiscuous mode [ 346.018869][T16502] veth1_vlan: entered promiscuous mode [ 346.054748][T16502] veth0_macvtap: entered promiscuous mode [ 346.066561][T16502] veth1_macvtap: entered promiscuous mode [ 346.082572][ T5145] Bluetooth: hci5: command tx timeout [ 346.092579][T16502] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 346.110952][T16502] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 346.129917][ T6093] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.142107][T11794] IPVS: stop unused estimator thread 0... [ 346.147600][ T6093] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.158359][ T6093] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.176578][ T6093] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.239498][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 346.251595][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 346.307678][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 346.315970][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 348.162518][ T5828] Bluetooth: hci5: command tx timeout [ 348.722479][ C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 357.603124][ C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 367.511013][T16716] sctp: [Deprecated]: syz.2.2892 (pid 16716) Use of struct sctp_assoc_value in delayed_ack socket option. [ 367.511013][T16716] Use struct sctp_sack_info instead [ 367.860847][T16732] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2899'. [ 367.862138][T16733] netlink: 'syz.2.2898': attribute type 8 has an invalid length. [ 367.881779][T16733] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2898'. [ 368.023780][T16743] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2902'. [ 368.046036][T16748] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2903'. [ 368.215278][T16757] netlink: 'syz.3.2906': attribute type 1 has an invalid length. [ 368.227630][T16757] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2906'. [ 368.488095][T16769] syzkaller0: entered promiscuous mode [ 368.505061][T16769] syzkaller0: entered allmulticast mode [ 368.580764][T16782] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2913'. [ 368.625079][T16781] openvswitch: netlink: Message has 592 unknown bytes. [ 368.632073][T16781] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 368.744749][T16792] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2916'. [ 368.811213][T16799] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2919'. [ 368.822677][T16797] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2917'. [ 368.834715][T16795] netlink: 'syz.3.2918': attribute type 3 has an invalid length. [ 368.847420][T16795] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2918'. [ 368.856961][T16797] netlink: 'syz.0.2917': attribute type 1 has an invalid length. [ 368.869247][T16797] netlink: 'syz.0.2917': attribute type 2 has an invalid length. [ 368.925543][T16805] openvswitch: netlink: Flow key attr not present in new flow. [ 368.971692][T16807] pim6reg1: entered promiscuous mode [ 368.977860][T16807] pim6reg1: entered allmulticast mode [ 369.505043][T16834] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 369.538574][T16834] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.550028][T16834] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 55705 - 0 [ 369.702965][T16834] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 369.714533][T16834] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.716404][T16855] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 369.727088][T16834] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 55705 - 0 [ 369.732009][T16855] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 369.799179][T16834] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 369.809947][T16834] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.821843][T16834] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 55705 - 0 [ 369.896404][T16834] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 369.907231][T16834] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.919444][T16834] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 55705 - 0 [ 370.008254][ T13] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 370.017063][ T13] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 55705 - 0 [ 370.026575][ T13] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 370.043107][ T13] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 370.051648][ T13] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 55705 - 0 [ 370.060186][ T13] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 370.076870][ T6093] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 370.085738][ T6093] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 55705 - 0 [ 370.095518][ T6093] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 370.111255][ T6093] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 370.120072][ T6093] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 55705 - 0 [ 370.128840][ T6093] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 370.224612][T16863] IPVS: set_ctl: invalid protocol: 117 172.20.20.170:20000 [ 370.270715][T16837] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 370.567710][T16877] netlink: 'syz.3.2941': attribute type 13 has an invalid length. [ 370.593821][T16877] netlink: 'syz.3.2941': attribute type 13 has an invalid length. [ 370.711834][T16878] bond14: entered allmulticast mode [ 370.756682][T16885] bridge7: entered promiscuous mode [ 370.763350][T16885] bridge7: entered allmulticast mode [ 370.773200][T16885] bond14: (slave bridge7): Enslaving as an active interface with an up link [ 370.932186][T16896] netlink: set zone limit has 4 unknown bytes [ 370.939324][T16904] netlink: zone id is out of range [ 370.947492][T16904] netlink: zone id is out of range [ 370.984892][T16896] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 371.185874][T16915] batadv1: entered allmulticast mode [ 372.465526][T16986] vcan0: tx drop: invalid da for name 0x0000000000000003 [ 372.616910][T16991] netlink: 'syz.1.2970': attribute type 2 has an invalid length. [ 373.316956][T17009] __nla_validate_parse: 20 callbacks suppressed [ 373.316971][T17009] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2976'. [ 373.471897][T17012] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2977'. [ 373.480907][T17012] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2977'. [ 374.244213][ C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 375.317082][T16971] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 375.867986][ T5145] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 375.879604][ T5145] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 375.893803][ T5145] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 375.904606][ T5145] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 375.922918][ T5145] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 376.828551][T17072] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 376.841337][T17072] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2992'. [ 377.741331][T17070] bridge0: port 1(syz_tun) entered blocking state [ 377.753785][T17070] bridge0: port 1(syz_tun) entered disabled state [ 377.761557][T17070] syz_tun: entered allmulticast mode [ 377.776290][T17070] syz_tun: entered promiscuous mode [ 377.986208][T17086] "syz.4.2996" (17086) uses obsolete ecb(arc4) skcipher [ 378.005529][ T5828] Bluetooth: hci3: command tx timeout [ 378.125581][T17090] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2997'. [ 378.140497][T17090] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2997'. [ 378.209600][T17084] IPVS: set_ctl: invalid protocol: 103 255.255.255.255:20002 [ 378.273576][T17098] xt_hashlimit: size too large, truncated to 1048576 [ 378.508301][T17103] syzkaller0: entered promiscuous mode [ 378.514723][T17103] syzkaller0: entered allmulticast mode [ 378.744654][T17041] chnl_net:caif_netlink_parms(): no params data found [ 378.972587][T17123] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 379.081071][T17136] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3006'. [ 379.131453][T17139] netlink: 'syz.4.3009': attribute type 1 has an invalid length. [ 379.295555][T16452] bond6 (unregistering): (slave ip6erspan0): Releasing active interface [ 379.320390][T16452] bond7 (unregistering): (slave ip6gretap1): Releasing active interface [ 379.329327][T16452] ip6gretap1 (unregistering): left allmulticast mode [ 379.577184][T16452] bond0 (unregistering): (slave bridge2): Releasing backup interface [ 379.768955][T16452] bond8 (unregistering): (slave bridge0): Releasing active interface [ 379.878793][T16452] bond1 (unregistering): Released all slaves [ 379.893239][T16452] bond0 (unregistering): Released all slaves [ 379.906994][T16452] bond2 (unregistering): Released all slaves [ 379.920523][T16452] bond3 (unregistering): Released all slaves [ 379.941635][T16452] bond4 (unregistering): Released all slaves [ 379.958842][T16452] bond5 (unregistering): left allmulticast mode [ 379.965184][T16452] bond5 (unregistering): left promiscuous mode [ 379.974131][T16452] team0: Port device macvlan4 removed [ 379.985523][T16452] bond5 (unregistering): Released all slaves [ 379.999104][T16452] bond6 (unregistering): Released all slaves [ 380.017216][T16452] bond7 (unregistering): Released all slaves [ 380.035017][T16452] bond8 (unregistering): Released all slaves [ 380.048616][T16452] bond9 (unregistering): (slave vcan1): Releasing backup interface [ 380.058379][T16452] bond9 (unregistering): Released all slaves [ 380.082294][ T5828] Bluetooth: hci3: command tx timeout [ 380.148139][T17139] bond0: entered promiscuous mode [ 380.154375][T17139] 8021q: adding VLAN 0 to HW filter on device bond0 [ 380.167667][T17145] ipvlan2: entered allmulticast mode [ 380.180054][T17145] bond0: entered allmulticast mode [ 380.239599][T17148] bond0: (slave bridge13): making interface the new active one [ 380.275094][T17148] bridge13: entered promiscuous mode [ 380.280783][T17148] bridge13: entered allmulticast mode [ 380.289440][T17148] bond0: (slave bridge13): Enslaving as an active interface with an up link [ 380.373480][T16452] tipc: Left network mode [ 380.409880][T17041] bridge0: port 1(bridge_slave_0) entered blocking state [ 380.417405][T17041] bridge0: port 1(bridge_slave_0) entered disabled state [ 380.425869][T17041] bridge_slave_0: entered allmulticast mode [ 380.434215][T17041] bridge_slave_0: entered promiscuous mode [ 380.447602][T17041] bridge0: port 2(bridge_slave_1) entered blocking state [ 380.455122][T17041] bridge0: port 2(bridge_slave_1) entered disabled state [ 380.463000][T17041] bridge_slave_1: entered allmulticast mode [ 380.471730][T17041] bridge_slave_1: entered promiscuous mode [ 380.513514][T17165] syzkaller0: entered promiscuous mode [ 380.521023][T17165] syzkaller0: entered allmulticast mode [ 380.544864][T17041] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 380.593084][T17041] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 380.996991][T17041] team0: Port device team_slave_0 added [ 381.032708][T17041] team0: Port device team_slave_1 added [ 381.156846][T17041] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 381.194029][T17041] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 381.326206][T17041] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 381.366652][T17041] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 381.403353][T17041] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 381.450595][T17202] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3020'. [ 381.466642][T17206] netlink: 88 bytes leftover after parsing attributes in process `syz.2.3021'. [ 381.475828][T17041] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 381.502095][T17204] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3020'. [ 381.568517][T17204] vlan2: entered allmulticast mode [ 381.608662][T17210] netlink: 'syz.1.3020': attribute type 1 has an invalid length. [ 381.627208][T17204] hsr0: entered allmulticast mode [ 381.646618][T17204] hsr_slave_0: entered allmulticast mode [ 381.676272][T17204] hsr_slave_1: entered allmulticast mode [ 381.825972][T17223] netlink: 198504 bytes leftover after parsing attributes in process `syz.3.3023'. [ 381.937843][T17041] hsr_slave_0: entered promiscuous mode [ 381.946677][T17041] hsr_slave_1: entered promiscuous mode [ 381.953803][T17041] debugfs: 'hsr0' already exists in 'hsr' [ 381.959742][T17041] Cannot create hsr debugfs directory [ 381.979889][T17225] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3026'. [ 382.164553][ T5828] Bluetooth: hci3: command tx timeout [ 382.525705][T17261] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3037'. [ 382.564563][T17260] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3036'. [ 383.913900][T17322] netlink: 'syz.3.3052': attribute type 10 has an invalid length. [ 383.926553][T17323] netlink: 'syz.3.3052': attribute type 10 has an invalid length. [ 383.960350][T17320] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.3051'. [ 383.998551][T17322] team0: Device ipvlan1 failed to register rx_handler [ 384.057502][T17323] team0: Device ipvlan1 failed to register rx_handler [ 384.217172][T17336] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3056'. [ 384.226587][T17331] netlink: 576 bytes leftover after parsing attributes in process `syz.4.3054'. [ 384.243667][ T5828] Bluetooth: hci3: command tx timeout [ 384.330068][T17331] tipc: Resetting bearer [ 384.557548][T17354] Bluetooth: hci2: Opcode 0x0c1a failed: -22 [ 384.606783][T17355] netlink: 'syz.4.3060': attribute type 21 has an invalid length. [ 384.681101][T17359] netlink: 452 bytes leftover after parsing attributes in process `syz.1.3061'. [ 384.730636][T17041] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 384.766720][T17041] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 384.774485][T17362] netlink: 452 bytes leftover after parsing attributes in process `syz.1.3061'. [ 384.954985][T17041] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 385.037798][T17041] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 385.121270][T16452] hsr_slave_0: left promiscuous mode [ 385.136610][T16452] 0: left promiscuous mode [ 385.250832][T17382] openvswitch: netlink: IPv4 tun info is not correct [ 386.094622][T17408] netlink: 'syz.4.3067': attribute type 11 has an invalid length. [ 386.298091][T17423] syzkaller0: entered promiscuous mode [ 386.306699][T17423] syzkaller0: entered allmulticast mode [ 386.433615][T17435] netlink: 'syz.2.3072': attribute type 1 has an invalid length. [ 386.506602][T17435] bond15: entered promiscuous mode [ 386.535330][T17435] 8021q: adding VLAN 0 to HW filter on device bond15 [ 386.690773][T16452] IPVS: stop unused estimator thread 0... [ 386.731583][T17441] syzkaller1: entered promiscuous mode [ 386.737537][T17441] syzkaller1: entered allmulticast mode [ 386.752300][T17441] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3073'. [ 386.764316][T17441] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3073'. [ 386.777669][T17441] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3073'. [ 386.787157][T17441] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3073'. [ 386.825253][T17041] 8021q: adding VLAN 0 to HW filter on device bond0 [ 386.976051][T17455] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3078'. [ 387.008195][T17041] 8021q: adding VLAN 0 to HW filter on device team0 [ 387.038759][T11794] bridge0: port 1(bridge_slave_0) entered blocking state [ 387.046001][T11794] bridge0: port 1(bridge_slave_0) entered forwarding state [ 387.073726][T11794] bridge0: port 2(bridge_slave_1) entered blocking state [ 387.080974][T11794] bridge0: port 2(bridge_slave_1) entered forwarding state [ 387.094487][T17455] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3078'. [ 387.717654][T17494] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0001 with DS=0x2 [ 387.775623][T17497] xt_CT: You must specify a L4 protocol and not use inversions on it [ 387.886112][T17041] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 388.205310][T17041] veth0_vlan: entered promiscuous mode [ 388.252531][T17041] veth1_vlan: entered promiscuous mode [ 388.420471][T17041] veth0_macvtap: entered promiscuous mode [ 388.461706][T17518] bond8: (slave dummy0): Releasing active interface [ 388.489136][T17041] veth1_macvtap: entered promiscuous mode [ 388.513406][T17521] syzkaller1: entered promiscuous mode [ 388.526261][T17521] syzkaller1: entered allmulticast mode [ 390.053381][T17041] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 390.066553][T17041] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 390.152012][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 390.176841][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 390.236242][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 390.240656][T17546] __nla_validate_parse: 4 callbacks suppressed [ 390.240675][T17546] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3107'. [ 390.256330][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 390.271867][T17547] xt_CT: You must specify a L4 protocol and not use inversions on it [ 390.440362][T17551] syzkaller0: entered promiscuous mode [ 390.454272][T17551] syzkaller0: entered allmulticast mode [ 390.471153][T17553] syzkaller1: entered promiscuous mode [ 390.480340][T17553] syzkaller1: entered allmulticast mode [ 390.608985][T16452] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 390.637979][T16452] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 390.691820][ T6093] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 390.707063][T17565] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.3112'. [ 390.711826][ T6093] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 390.730923][T17565] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3112'. [ 391.197381][T17588] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 391.208203][T17588] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 391.219107][T17588] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 391.227606][T17588] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 391.235471][T17588] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 391.391346][T17593] netlink: 'syz.2.3118': attribute type 1 has an invalid length. [ 391.529098][T17599] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3120'. [ 391.580614][T17601] netlink: 1976 bytes leftover after parsing attributes in process `syz.3.3119'. [ 391.594355][T17601] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3119'. [ 391.626793][T17593] bond16: (slave vcan1): The slave device specified does not support setting the MAC address [ 391.650315][T17593] bond16: (slave vcan1): Setting fail_over_mac to active for active-backup mode [ 391.674944][T17593] bond16: (slave vcan1): making interface the new active one [ 391.687351][T17593] bond16: (slave vcan1): Enslaving as an active interface with an up link [ 391.788930][T17601] dvmrp6: entered allmulticast mode [ 391.984092][T17617] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 391.991478][T17617] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 392.156312][ T7329] IPVS: starting estimator thread 0... [ 392.250757][T17623] bond1: option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 392.252472][T17631] IPVS: using max 28 ests per chain, 67200 per kthread [ 392.261969][T17635] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3128'. [ 392.297128][T17623] bond1 (unregistering): Released all slaves [ 392.406031][T17586] chnl_net:caif_netlink_parms(): no params data found [ 392.515905][T17646] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3131'. [ 392.530526][T17646] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3131'. [ 392.678904][T17657] xt_cluster: you have exceeded the maximum number of cluster nodes (2048 > 32) [ 392.743074][T17661] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3134'. [ 392.814947][T17666] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 392.838577][T17644] s5: renamed from vlan1 (while UP) [ 392.911115][T17672] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 392.953942][T17661] bond17: entered promiscuous mode [ 392.983671][T17661] 8021q: adding VLAN 0 to HW filter on device bond17 [ 393.104163][T17586] bridge0: port 1(bridge_slave_0) entered blocking state [ 393.114209][T17685] IPVS: length: 24 != 1610624952 [ 393.116612][T17586] bridge0: port 1(bridge_slave_0) entered disabled state [ 393.128230][T17586] bridge_slave_0: entered allmulticast mode [ 393.137234][T17586] bridge_slave_0: entered promiscuous mode [ 393.174880][T17586] bridge0: port 2(bridge_slave_1) entered blocking state [ 393.182256][T17586] bridge0: port 2(bridge_slave_1) entered disabled state [ 393.189544][T17586] bridge_slave_1: entered allmulticast mode [ 393.222264][T17586] bridge_slave_1: entered promiscuous mode [ 393.283334][ T5828] Bluetooth: hci0: command tx timeout [ 393.349961][T17586] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 393.386247][T17586] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 393.454432][T17586] team0: Port device team_slave_0 added [ 393.528579][T17586] team0: Port device team_slave_1 added [ 393.706231][T17715] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 393.736818][T17715] team0: Port device batadv1 added [ 393.760805][T17714] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 393.803459][T17714] team0: Port device batadv2 added [ 393.810738][T17586] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 393.831911][T17586] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 393.877361][T17586] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 393.932112][T17586] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 393.939281][T17586] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 394.054391][T17586] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 394.200993][T17739] netlink: 'syz.0.3149': attribute type 1 has an invalid length. [ 394.582628][T17586] hsr_slave_0: entered promiscuous mode [ 394.589600][T17586] hsr_slave_1: entered promiscuous mode [ 394.616698][T17586] debugfs: 'hsr0' already exists in 'hsr' [ 394.623735][T17586] Cannot create hsr debugfs directory [ 394.995123][T17755] bond18: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 395.067845][T17755] bond18: (slave lo): Enslaving as an active interface with an up link [ 395.098780][T17755] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 395.283512][ T7325] Oops: general protection fault, probably for non-canonical address 0xdffffc000000004c: 0000 [#1] SMP KASAN PTI [ 395.295481][ T7325] KASAN: null-ptr-deref in range [0x0000000000000260-0x0000000000000267] [ 395.303925][ T7325] CPU: 1 UID: 0 PID: 7325 Comm: kworker/1:10 Not tainted syzkaller #0 PREEMPT(full) [ 395.313509][ T7325] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 395.323686][ T7325] Workqueue: events l2cap_info_timeout [ 395.329224][ T7325] RIP: 0010:kasan_byte_accessible+0x12/0x30 [ 395.335155][ T7325] Code: 79 ff ff ff 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 40 d6 48 c1 ef 03 48 b8 00 00 00 00 00 fc ff df <0f> b6 04 07 3c 08 0f 92 c0 c3 cc cc cc cc cc 66 66 66 66 66 66 2e [ 395.355048][ T7325] RSP: 0018:ffffc9000d6cf828 EFLAGS: 00010202 [ 395.361164][ T7325] RAX: dffffc0000000000 RBX: ffffffff8973f178 RCX: 0000000080000001 [ 395.369168][ T7325] RDX: 0000000000000000 RSI: ffffffff8973f178 RDI: 000000000000004c [ 395.377153][ T7325] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 395.385211][ T7325] R10: dffffc0000000000 R11: ffffffff8aadd850 R12: 0000000000000000 [ 395.393186][ T7325] R13: 0000000000000260 R14: 0000000000000260 R15: 0000000000000001 [ 395.401159][ T7325] FS: 0000000000000000(0000) GS:ffff888125560000(0000) knlGS:0000000000000000 [ 395.410260][ T7325] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 395.416841][ T7325] CR2: 00007f257a98ee9c CR3: 000000003303a000 CR4: 00000000003526f0 [ 395.424821][ T7325] Call Trace: [ 395.428102][ T7325] [ 395.431031][ T7325] __kasan_check_byte+0x12/0x40 [ 395.435894][ T7325] lock_acquire+0x79/0x2e0 [ 395.440318][ T7325] lock_sock_nested+0x48/0x100 [ 395.445083][ T7325] ? l2cap_sock_ready_cb+0x46/0x160 [ 395.450291][ T7325] l2cap_sock_ready_cb+0x46/0x160 [ 395.455411][ T7325] l2cap_conn_start+0x779/0xff0 [ 395.460274][ T7325] ? __pfx_l2cap_conn_start+0x10/0x10 [ 395.465651][ T7325] ? l2cap_info_timeout+0x60/0xa0 [ 395.470679][ T7325] ? do_raw_spin_lock+0x12b/0x2f0 [ 395.475709][ T7325] ? __pfx___mutex_lock+0x10/0x10 [ 395.481179][ T7325] l2cap_info_timeout+0x68/0xa0 [ 395.486031][ T7325] ? process_scheduled_works+0xa25/0x1830 [ 395.491753][ T7325] process_scheduled_works+0xb02/0x1830 [ 395.497322][ T7325] ? __pfx_process_scheduled_works+0x10/0x10 [ 395.503312][ T7325] ? assign_work+0x3d5/0x5e0 [ 395.507906][ T7325] worker_thread+0xa50/0xfc0 [ 395.512511][ T7325] kthread+0x388/0x470 [ 395.516577][ T7325] ? __pfx_worker_thread+0x10/0x10 [ 395.521689][ T7325] ? __pfx_kthread+0x10/0x10 [ 395.526370][ T7325] ret_from_fork+0x51e/0xb90 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 395.531005][ T7325] ? __pfx_ret_from_fork+0x10/0x10 [ 395.536126][ T7325] ? __switch_to+0xc7d/0x1450 [ 395.540809][ T7325] ? __pfx_kthread+0x10/0x10 [ 395.545412][ T7325] ret_from_fork_asm+0x1a/0x30 [ 395.550194][ T7325] [ 395.553211][ T7325] Modules linked in: [ 395.557479][ T7325] ---[ end trace 0000000000000000 ]--- [ 395.603445][ T5828] Bluetooth: hci0: command tx timeout [ 395.616905][ T7325] RIP: 0010:kasan_byte_accessible+0x12/0x30 [ 395.623216][ T7325] Code: 79 ff ff ff 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 40 d6 48 c1 ef 03 48 b8 00 00 00 00 00 fc ff df <0f> b6 04 07 3c 08 0f 92 c0 c3 cc cc cc cc cc 66 66 66 66 66 66 2e [ 395.643284][ T7325] RSP: 0018:ffffc9000d6cf828 EFLAGS: 00010202 [ 395.649390][ T7325] RAX: dffffc0000000000 RBX: ffffffff8973f178 RCX: 0000000080000001 [ 395.657790][ T7325] RDX: 0000000000000000 RSI: ffffffff8973f178 RDI: 000000000000004c [ 395.666171][ T7325] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 395.674475][ T7325] R10: dffffc0000000000 R11: ffffffff8aadd850 R12: 0000000000000000 [ 395.712411][ T7325] R13: 0000000000000260 R14: 0000000000000260 R15: 0000000000000001 [ 395.765769][T17586] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 395.776249][T17586] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 55705 - 0 [ 395.792260][ T7325] FS: 0000000000000000(0000) GS:ffff888125560000(0000) knlGS:0000000000000000 [ 395.801243][ T7325] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 395.822211][T17586] netdevsim netdevsim4 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 395.833138][ T7325] CR2: 00007fc463347e20 CR3: 000000003303a000 CR4: 00000000003526f0 [ 395.841602][ T7325] Kernel panic - not syncing: Fatal exception [ 395.848175][ T7325] Kernel Offset: disabled [ 395.852516][ T7325] Rebooting in 86400 seconds..