last executing test programs: 2.33915699s ago: executing program 3 (id=2752): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r1}, 0x10) r2 = socket$inet(0x2, 0x1, 0x6) setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000180)=0x7b, 0x4) shutdown(r2, 0x0) recvmmsg(r2, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f00000000c0)={r5, 0xff, 0x30}, 0xc) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000600)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x4, 0x8, 0x8, 0x10, 0xa, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x35}}, @mcast1, 0x20, 0xba08, 0xfffffc00, 0x1000}}) 2.111728981s ago: executing program 0 (id=2754): sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYRES16, @ANYRES16, @ANYBLOB="01000000000000000000050000000c"], 0x38}}, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000180)={0xffffffffffffffff}) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x80, r1, 0x300, 0x70bd27, 0x25dfdbfb, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xffff}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x9}, @NBD_ATTR_SOCKETS={0x40, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r3}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r4}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r5}}, {0xc, 0x1, 0x0, 0x1, {0x8}}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x40811}, 0x80) r6 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="3800000012002102000000000000000007"], 0x38}}, 0x0) 2.110155588s ago: executing program 1 (id=2756): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000380)={@dev={0xfe, 0x80, '\x00', 0x1f}, 0x76, r2}) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000100)={@ipv4={'\x00', '\xff\xff', @multicast2}, 0x56, r2}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000b80)=ANY=[@ANYBLOB="3c00000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="0000000006100000140012800b00010062726964676500000400028008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x100003, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x20) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x0, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x0, 0xf, &(0x7f00000002c0)=@ringbuf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r6, r5}, 0x90) 2.040849159s ago: executing program 0 (id=2757): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xd, 0x9, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x7}, [@map_fd={0x18, 0x9, 0x1, 0x0, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0x7}, @generic={0x4, 0x5, 0x5, 0x5, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, 0x1}]}, &(0x7f0000000080)='syzkaller\x00', 0x743, 0x7f, &(0x7f00000000c0)=""/127, 0x41000, 0x28, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000140)={0x1, 0x3, 0x2, 0xfffffb07}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x6, &(0x7f0000000180)=[0x1, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1], &(0x7f00000001c0)=[{0x3, 0x2, 0x2, 0x2}, {0x4, 0x2, 0xb, 0x1}, {0x5, 0x5, 0x7, 0x2}, {0x4, 0x1, 0x7, 0x4}, {0x5, 0x4, 0x8, 0x4}, {0x0, 0x4, 0x2, 0x2}], 0x10, 0x3}, 0x94) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x12, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000008f000000000000000b00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000086000000bf090000000000005509010000000000950000000000000018200000", @ANYRES32=r2, @ANYBLOB="000000000100000025000400fcffffffbc91100000000000b702000003000000850000002a000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x2f}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f0000000340)={0x0, r3}, 0x8) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000440), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0xa, 0x5, &(0x7f0000000480)=@raw=[@ldst={0x3, 0x0, 0x6, 0x6, 0x0, 0x20, 0x1}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x6}, @generic={0xeb, 0x2, 0x5, 0x9, 0x10}, @call={0x85, 0x0, 0x0, 0x1a}], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) 2.025858661s ago: executing program 3 (id=2758): r0 = socket$kcm(0x11, 0x3, 0x0) tee(r0, 0xffffffffffffffff, 0x8000000000000000, 0x2) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_VERDICT_BATCH(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0x6c, 0x3, 0x3, 0x303, 0x0, 0x0, {0x2}, [@NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x8}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x6}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0xfffffff8}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0xf2}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x8}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x6}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffe, 0x10001}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x4}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x1}, @NFQA_VERDICT_HDR={0xc, 0x2, {0x0, 0xb7bf}}]}, 0x6c}}, 0x840) (async, rerun: 64) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000000c0)={0x50, 0x1, 0x1, 0x201, 0x0, 0x0, {0x2}, [@CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0xc02}]}, @CTA_TUPLE_REPLY={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x14, 0x4, @private1}}}]}]}, 0x50}}, 0x0) (rerun: 64) 1.910547707s ago: executing program 0 (id=2760): ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000040)={'syztnl1\x00', 0x0, 0x2d, 0xf8, 0x0, 0x6, 0x18, @mcast2, @empty, 0x0, 0x7800, 0x1, 0x451}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=@ipv6_newnexthop={0x70, 0x68, 0x300, 0x70bd2a, 0x25dfdbfd, {0xa, 0x0, 0x1, 0x0, 0x8}, [@NHA_GROUP={0x24, 0x2, [{0x2, 0x2}, {0x0, 0x4}, {0x2, 0x1}, {0x1, 0x34}]}, @NHA_OIF={0x8, 0x5, r0}, @NHA_RES_GROUP={0x2c, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x2}, @NHA_RES_GROUP_IDLE_TIMER={0x8}, @NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x1c0}, @NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x3}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x4}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x80}, 0x24000000) r1 = accept(0xffffffffffffffff, &(0x7f0000000200)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f0000000280)=0x80) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000300), 0xffffffffffffffff) r3 = socket$l2tp(0x2, 0x2, 0x73) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x54, r2, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @broadcast}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x1}, @L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp=r3}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x200}]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x4000) r4 = syz_genetlink_get_family_id$fou(&(0x7f0000000480), r1) sendmsg$FOU_CMD_GET(r1, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x38, r4, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x37}}, @FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_IFINDEX={0x8, 0xb, r0}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1) sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x60, r5, 0x300, 0x70bd29, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x8d7}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'pimreg0\x00'}]}, @IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x5}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x5}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x8000}, 0x4) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000740), r1) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x7c, r6, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, {0xd}, {0x5}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5}}]}, 0x7c}, 0x1, 0x0, 0x0, 0x20004011}, 0x1) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r1, &(0x7f0000000a00)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000009c0)={&(0x7f00000008c0)={0xd8, r6, 0x800, 0x70bd28, 0x25dfdbff, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}]}, 0xd8}, 0x1, 0x0, 0x0, 0x24000000}, 0x4880) socketpair(0x28, 0x5, 0x2, &(0x7f0000000a80)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$batadv(&(0x7f0000000a40), r7) sendmsg$L2TP_CMD_SESSION_MODIFY(r7, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x48, r2, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x6f77}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'vxcan1\x00'}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x8}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e24}]}, 0x48}}, 0x10) r9 = getuid() sendmsg$nl_xfrm(r7, &(0x7f0000002000)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001fc0)={&(0x7f0000000c40)=@newpolicy={0x1344, 0x13, 0x200, 0x70bd27, 0x25dfdbfc, {{@in=@multicast1, @in=@rand_addr=0x64010102, 0x4e21, 0xfffe, 0x4e22, 0x8, 0xa, 0x80, 0x10, 0x8, r0, 0xffffffffffffffff}, {0x6, 0x4, 0x9e8, 0xa, 0x3, 0x0, 0x2, 0x200}, {0x10001, 0x3ff, 0xff, 0x1}, 0x8, 0x0, 0x1, 0x0, 0x2, 0x2}, [@XFRMA_IF_ID={0x8, 0x1f, 0x4}, @policy={0xac, 0x7, {{@in=@multicast2, @in6=@private1, 0x4e24, 0x750, 0x4e21, 0x0, 0xa, 0x20, 0xa0, 0x3c, r0, r9}, {0x7fffffff, 0x5, 0xc41, 0xa734, 0x7, 0x23a7e4be, 0x8, 0x4}, {0x0, 0x1, 0x1, 0x40}, 0x1, 0x6e6bbe, 0x2, 0x0, 0x3}}, @mark={0xc, 0x15, {0x35075b, 0x9}}, @tmpl={0x184, 0x5, [{{@in=@broadcast, 0x4d5, 0x2b}, 0x0, @in6=@mcast2, 0x3504, 0x3, 0x2, 0x2, 0x2, 0x1cc397d3, 0xf}, {{@in=@local, 0x4d6, 0xe}, 0x2, @in=@private=0xa010102, 0x3505, 0x3, 0x2, 0xb, 0x10001, 0x80000000, 0xd}, {{@in=@multicast2, 0x4d5}, 0xa, @in6=@private2, 0x0, 0x4, 0x3, 0x5, 0x1, 0x1577, 0x8}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4d4, 0xff}, 0x2, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3504, 0x0, 0x1, 0x0, 0x0, 0x4, 0x1fc0}, {{@in=@local, 0x4d5, 0x33}, 0x0, @in=@rand_addr=0x64010102, 0x3504, 0x3, 0x1, 0x42, 0x4, 0x4, 0x7}, {{@in6=@remote, 0x4d4, 0x6c}, 0xa, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1b}}, 0x3500, 0x4, 0x3, 0x4, 0x2, 0x9, 0xc9ac4af}]}, @algo_auth={0x1048, 0x1, {{'sha3-256-generic\x00'}, 0x8000, "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"}}]}, 0x1344}}, 0x80) listen(r3, 0x2) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r8, &(0x7f0000002100)={&(0x7f0000002040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000020c0)={&(0x7f0000002080)={0x3c, r6, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xc907}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x90}, 0x50) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000002140)={r3, 0x3e48b8ac, 0x1, 0x7f}) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000002180)=0x0) ioctl$TUNSETOWNER(r10, 0x400454cc, r11) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f00000021c0)=0x800, 0x4) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r7, &(0x7f00000022c0)={&(0x7f0000002200)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000002280)={&(0x7f0000002240)={0x38, 0x0, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x24, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r0}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x18}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x1b}}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r0}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000000}, 0x14) getsockopt$inet_sctp6_SCTP_MAX_BURST(r8, 0x84, 0x14, &(0x7f0000002300), &(0x7f0000002340)=0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000002380), r1) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f00000023c0), 0x4) r12 = syz_genetlink_get_family_id$tipc2(&(0x7f0000002440), r10) sendmsg$TIPC_NL_BEARER_GET(r8, &(0x7f0000002580)={&(0x7f0000002400)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000002540)={&(0x7f0000002480)={0xac, r12, 0x4, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3fe1}]}, @TIPC_NLA_NET={0x38, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x6}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xdbe}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xe46}]}, @TIPC_NLA_NET={0x50, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x771}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xb}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x6}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}]}]}, 0xac}, 0x1, 0x0, 0x0, 0x20009081}, 0x20000000) 1.862305427s ago: executing program 2 (id=2761): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000100900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[], 0x7c}}, 0x1) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000012c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000050a03030000000000000000020000000c00024000000000000000020900010073797a30"], 0x54}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_MATCH_NAME={0x8, 0x1, 'udp\x00'}, @NFTA_MATCH_INFO={0xe, 0x3, "7acc6338a90000b03bd9"}, @NFTA_MATCH_REV={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_COMPAT={0x14, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x88}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}]}], {0x14}}, 0xa0}}, 0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x3, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x4d}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1e}, 0x90) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x25dddbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xffff}, {0xffff, 0xffff}, {0x1, 0xd}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=@newtfilter={0x58, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r5, {0x0, 0x8}, {}, {0xa}}, [@filter_kind_options=@f_flower={{0xb}, {0x28, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x24, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x9, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x2}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_HWID={0x5, 0x4, 0x5}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_DIR={0x5, 0x3, 0x1}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x4, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x0, 0x3, 0x4}]}]}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x260008e8}, 0x804) 1.776996169s ago: executing program 0 (id=2763): r0 = socket$rds(0x15, 0x5, 0x0) (async) r1 = socket$unix(0x1, 0x2, 0x0) sendmsg$unix(r1, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8080}, 0x5) (async) setsockopt$RDS_RECVERR(r0, 0x114, 0x5, &(0x7f0000000000), 0x4) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) (async) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) (async) socket$netlink(0x10, 0x3, 0x10) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @rt={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x4}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xd4}}, 0x0) (async) r3 = socket$inet_icmp(0x2, 0x2, 0x1) (async) r4 = getuid() r5 = accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000680), &(0x7f0000000700)=0x60, 0x0) (async) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={&(0x7f0000000740)='compact_retry\x00', 0xffffffffffffffff, 0x0, 0x1}, 0x18) sendmsg$unix(r1, &(0x7f0000000900)={&(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000600)=[{&(0x7f00000000c0)="32fb157e11bb131673fdb5bade010ab9a661312bc461615f901b5e2ef6f1c746a69e37958593022a88790059085f58351e21b3f4f80ab3919885ef51bee61418a6b98a52e13ef6cfc3eabe5c211c3547db806f09cc5db42cbc271037ae9cd8d604918530d78b9631e66f1af6b555217e401d757c43bc2a39a8a763fe44e607cb8d5c2a3ae647076f8fc7ed5a3cda8352ef725f0fb35e583e6d5d05ba392afc06485282663d90cb053dad812f187e0ef26a5a4456f173b5e567b093e47985697e26538b661e73db0e8ddf2565b80f35796fe5952ccbe3d2e3407bb8ad1c431ec6fe27a75462d9cf323546", 0xea}, {&(0x7f00000001c0)="5b39862a6e0c4b6eb918d5769aa40e90fcd96b0fa7b27f01613b5da70731be9b39b0a306d918d3b3675b2bfe9ad569baa15fa1cbed1836a68b15617fe8a4bddc04a35ed0f376f15703ad874a694b413beea3b2b97417120b9e6d9139cceaf46b13df932ae14a9e62bf15c9f3ac302d12c63fda5fd5ab07f29ac48d957967683c44444b77fcb4697941f085c1e0acf9816f1f9b688792a6b3e972eae57fbbe072a3815f421dfcc3ce023eae5ceb09cb00f619e002b0", 0xb5}, {&(0x7f0000000280)="18220c47f332fc25d45c7492749a54e876fd49be8dc2a380e7f48637aba683be3653be95720ec2f77ebe420c60905fa6c10273d9a6f6f4dbaeafb155dfd9f00b348a944217c4fd717f6d5a982214bcba6ab555bac1cdc0f83c313f", 0x5b}, {&(0x7f0000000300)="55d53c302b58ff6e134d4abb4546c497bd8062153a5b40aeb21b6ea31b870356f5c9e2a1b72715b9e144b149f336f356681d2987ef89cfd6b3f0b6a63c515add16dc5ec1fdc9a9c5ae4bd82e45a0cbddc4464041d17a9cc1f19062fe128e405f5c5a76d688c6a9670f2f1c7fe53c9001706953f955a9f4a75d59038aebeaaf9139fc7c6b79ffc23ab558daa53ebc1c7b8bb1677a0b70d5d179c686bc2718cc6fde01c4d201981b482be7363ef46072bae40d1045df34572ae199fdaa610517a471e07fa8e4b9d98477f8a26635a4ad27e940e970fb66f87153a8ff494c9e369b76a7ae30923ac60132ce5e009f23", 0xee}, {&(0x7f0000000400)="4e6372f7f147d1fd286e86b6ac1a88514c8570f2033cf0e63f072f9b9982ede0c98b2298dcebe3e898b6c9e198d12bb5315c71a21981a666c250e812011c3021d89bc6e132dfc3d5246378471bde47b841ed5cbc3687508b0e2a3dd1ab5ea64ccff43437976eb756aa25433eec524ade26819de8d8ac5b5d2a400504eba61312c4b5a1d4239b1321b08fbe4bd2", 0x8d}, {&(0x7f00000004c0)="fb7fb5783e4db18462fc625bdf60a1e83da903b6e24a0375a4fc8c5fb2d32e87291ef9b3d85bc93d8da619e709626bd29d178dc6aec9495af127109dc90b79ac7ed19ddb599bbf6725dd49225dba801eb3d00569c565d305e7173dcebd3653dad3b3d4567b22d8e3f62a5e8b6a9bfa6979e55c8d7d44920229e73f024f3b6549a57170baeb2444f7d184e2192a466f71c74ace2e80c5df71cd338d67463f06ac171c4ab80bebad", 0xa7}, {&(0x7f0000000580)="f9d5422931d17733cf4a490f75811572023df1db0c3b56623008f8f7dc355592bd106a2f9a0223f642177e044749c83f697a6899b37b89ff208d36068105a1666b8a03840fcb413bbbf929875e76cbce5c8d08419bddf5", 0x57}], 0x7, &(0x7f0000000800)=[@rights={{0x24, 0x1, 0x1, [r3, r0, 0xffffffffffffffff, r0, r1]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r4}}}, @rights={{0x24, 0x1, 0x1, [r1, r0, r1, r0, r0]}}, @rights={{0x24, 0x1, 0x1, [r5, r1, r1, r6, r0]}}, @rights={{0x18, 0x1, 0x1, [r1, r0]}}, @rights={{0x1c, 0x1, 0x1, [r1, r7, r1]}}], 0xd0, 0x20004001}, 0x20080801) 651.745224ms ago: executing program 3 (id=2764): r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000340)={0x42, 0x2}, 0x10) setsockopt$TIPC_GROUP_LEAVE(r0, 0x10f, 0x88) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) syz_emit_ethernet(0x4e, &(0x7f0000003680)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x18, 0x3a, 0xff, @remote, @mcast2, {[], @mld={0x84, 0x0, 0x0, 0xc, 0x7, @dev={0xfe, 0x80, '\x00', 0x3e}}}}}}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) r3 = socket(0x2d, 0x2, 0x0) connect$qrtr(r3, &(0x7f0000000440)={0x2d, 0x3, 0x2}, 0xc) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r4, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000680)=""/153, 0x99}], 0x1, &(0x7f0000002f40)=""/229, 0xe5}, 0x0) sendmsg$tipc(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="b8d3d6eb8974aae56e0046d828cd3b00000000008bdf0100d6b9aa5ffc723899ad120cd2fdaaec07e9c09f79967483be43345a5402ae4080f64f103ee1deb7f829432647d19f732f17e4768000000047dc85fe51ee43e3499c52a16f40cb3a0900000000000000b2e6b5397f7806b663846de37a34c8342bbac5a51eac7935f926c3aa2d9c5727637f2e7a01e122b82e8976f5a4d980eaeb3b636630b8c89163", 0xa0}], 0x1, 0x0, 0x0, 0x4000890}, 0x81) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0xfb83a000) close(r5) bind$xdp(r3, &(0x7f0000000080)={0x2d, 0x0, 0x0, 0xc}, 0x10) writev(r2, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) setsockopt$inet_mreqsrc(r1, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) 638.064629ms ago: executing program 1 (id=2766): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_LEAVE_OCB(r1, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001100)={&(0x7f00000010c0)={0x1c, r2, 0x1, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x20000000) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r0, @ANYBLOB="040027bd7000fbdbdf256f00e6ff0800ff01", @ANYRES32=r3, @ANYBLOB="0800a000000000000800270000000000080022017102000008009f000200000008009f00030000000500d60006000000050018012d000000050019010600000008009f000300000008009f00000000000800270003000000080027000300000005001901080000000800a000050000000500d600cc0000000a000600ffffffffffff0000"], 0xa0}, 0x1, 0x0, 0x0, 0x140000c4}, 0x44004) r4 = syz_genetlink_get_family_id$devlink(&(0x7f00000002c0), r1) sendmsg$DEVLINK_CMD_PORT_GET(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x64, r4, 0x100, 0x70bd27, 0x25dfdbfe, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x44) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="bc1b0000400007012bbd700000000000017c00000400c2800c0001800600060088480000971b02"], 0x1bbc}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 636.385523ms ago: executing program 0 (id=2768): pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) (async) pipe(&(0x7f0000000300)) (async) r2 = socket$inet(0xa, 0x801, 0x84) (async) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0b062dbd7000000000001000003500050000000a0001007770616e300000000516340001e9ab00050033000300"/58], 0x40}, 0x1, 0x0, 0x0, 0x840}, 0x0) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) (async) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYRES32=r0, @ANYRESHEX, @ANYRES64=r0, @ANYRES16=0x0], 0x14}}, 0x20004011) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r2, 0x8) (async) r6 = accept4(r2, 0x0, 0x0, 0x0) (async) r7 = socket$inet_sctp(0x2, 0x5, 0x84) r8 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x5, @mcast2, 0x10001}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r7, 0x84, 0x7c, &(0x7f0000000000)={r9, 0x1, 0x6}, &(0x7f0000000340)=0x8) (async) sendto$inet(r8, &(0x7f0000000280)="f0aa2260abd41d02922c08721a2b4d36d98124866de114e596d311365e19539d00"/46, 0x2e, 0x48080, 0x0, 0x0) (async) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xa80a82, 0x0) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000001c0)={'veth1_to_bond\x00', 0x400}) (async) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x240400, 0x0) close(r11) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r0, 0x8922, &(0x7f0000002280)={'veth1_to_batadv\x00', @random="8bcc41dbc764"}) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x3b, &(0x7f0000000040)=ANY=[@ANYBLOB="3b00000000000004"], 0x8) sendto$inet6(0xffffffffffffffff, &(0x7f0000000240)="8a", 0x1, 0x51, &(0x7f0000000080)={0xa, 0x3, 0x2, @local, 0x9}, 0x1c) ioctl$TUNSETLINK(r10, 0x400454cd, 0x308) (async) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r6, 0x84, 0x22, &(0x7f0000000000)={0x3ff, 0x800d, 0x0, 0x1000699}, 0x10) (async) sendto$inet6(r6, &(0x7f0000000200)='x', 0x1, 0x4000000, 0x0, 0x0) 635.626016ms ago: executing program 4 (id=2769): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3e, &(0x7f0000000a00)=0x4, 0x4) sendmsg(r0, &(0x7f0000000500)={&(0x7f0000000300)=@can, 0x80, 0x0}, 0x20040000) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_sctp(0x2, 0x0, 0x84) r3 = socket$inet_sctp(0x2, 0x5, 0x84) r4 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$inet_mreqn(r5, 0x0, 0x20, &(0x7f0000000140)={@dev, @multicast2, 0x0}, &(0x7f0000000180)=0xc) setsockopt$packet_drop_memb(r4, 0x107, 0x2, &(0x7f00000001c0)={r6, 0x1, 0x6, @link_local}, 0x10) bind$inet(r5, &(0x7f0000000400)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x41, &(0x7f0000000040)=0x1b3a, 0x4) sendto$inet(r5, &(0x7f0000000080)='m', 0x1, 0x0, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) socketpair$unix(0x1, 0x1, 0x0, 0x0) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r8, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0xfffffffb}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r8, 0x84, 0x7a, &(0x7f0000000340)={r9, @in6={{0xa, 0x3, 0x0, @dev={0xfe, 0x80, '\x00', 0x36}}}}, &(0x7f0000000040)=0x84) setsockopt$inet_mreq(r3, 0x0, 0x20, &(0x7f0000000280)={@dev={0xac, 0x14, 0x14, 0x29}, @rand_addr=0x64010101}, 0x8) setsockopt$inet_sctp_SCTP_MAXSEG(r7, 0x84, 0xd, &(0x7f0000000100)=@assoc_id=r9, 0x4) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r5, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/174, 0xae, 0x1, &(0x7f0000000540)=""/251, 0xfb}, &(0x7f0000000100)=0x40) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_AUTH_KEY(r3, 0x84, 0x17, &(0x7f0000000080)={r10, 0x800, 0x6, "2184e34d4650"}, 0xe) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r2, 0x84, 0x23, &(0x7f0000000040)={r10, 0x4}, 0x8) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000880)={'bridge_slave_0\x00'}) getsockopt$PNPIPE_IFINDEX(r5, 0x113, 0x2, &(0x7f0000000200), &(0x7f0000000240)=0x4) 633.659011ms ago: executing program 3 (id=2770): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f000000fb40), r1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f000000fb80)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_ASSOCIATE(r1, &(0x7f000000fc80)={0x0, 0x0, &(0x7f000000fc40)={&(0x7f000000fbc0)={0x34, r2, 0x1, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_PREV_BSSID={0xa}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x213) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=@ipv6_getroute={0x2c, 0x1a, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8}, @RTA_IIF={0x8}]}, 0x2c}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="0c0100000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400fc0000000000000000000000000000000c00028005000100000000003c0002800c00028005000100000000002c000180140003000000000000000000000000000000000114000400fe8000000000000000000000000000aa080007400000000078000680140005"], 0x10c}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x98, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @empty}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x4}]}, 0x98}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)={0x9c, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x400}, @CTA_STATUS={0x8}]}, 0x9c}}, 0x0) 623.976384ms ago: executing program 2 (id=2771): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt(r0, 0x4, 0x26, &(0x7f0000000080)="5a1d8ebeed385133107643d0871cd3ec38ede359de4f80f0faa39ff55b8796eca902a26831a58d36026b853c92f3efbc6e694a55e2ff46868c230acba6d56d4750d94236db9e9deaea4fb3c67f7024e6c1577a9afc68a60dc6f56c7a0d13a08e975e59ca18ff9c7830f226016aea0e0d9803dbc8a8dd3d7e9a96b61291b9136f8ff71d51ca68da04c042a3e61620e088919fca29646f015f4c3afd579e83fef3862f9c9c5fde7dc5052b8f6b8e239d380d3401ca9ab0e28b60f326c16f782737fad291497245a19ff68a72cde4e544d3eaa91afd3a17a6cc4629d3c7241bd89c7f4b7d0e2094f33c7d64c51a7ce11987b0", 0xf1) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f00000003c0)=[@in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x10) (async) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f00000008c0)=0x576, 0x4) r1 = socket$netlink(0x10, 0x3, 0x0) (async, rerun: 64) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) (rerun: 64) ioctl$sock_rose_SIOCADDRT(r2, 0x890b, &(0x7f0000000000)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x40, @default, @netrom={'nr', 0x0}, 0x5, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) (async, rerun: 64) writev(r1, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) (rerun: 64) 616.101408ms ago: executing program 1 (id=2772): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @sock_ops}, 0x94) r0 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000340)={r0}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) socket(0x26, 0x1, 0x1) syz_emit_ethernet(0x86, &(0x7f0000002480)=ANY=[@ANYBLOB="aaaaaaaaaaaa1ab9000000008100000086dd60b70bff004c2f0000000000000000000000ffff7f000001ff020000000000000000000000000001000008"], 0x0) r3 = socket$unix(0x1, 0x1, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x7, 0x7, 0x6361, 0x5, 0xf, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newqdisc={0x88, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x80000, {0x0, 0x0, 0x0, r5, {}, {0xffe6, 0xb}, {0xffe0, 0xc}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x5, [0xe, 0x3, 0x6, 0x0, 0xf, 0xe, 0xa, 0x2, 0xd, 0x10, 0x5, 0x4, 0x2, 0xe, 0xb, 0xf], 0x0, [0x7, 0xffff, 0x8, 0xdde, 0x0, 0x3, 0x3dd, 0x2, 0x1, 0x76d8, 0x8, 0x7f, 0x7, 0x3, 0x81, 0x800], [0xffff, 0x5, 0x8, 0x2, 0x4, 0x3, 0x1, 0x5, 0x1000, 0x6, 0x2, 0x2, 0x1, 0x7b2, 0x2bba, 0x4]}}}}]}, 0x88}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x10, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000580)="d8001c00180081064e81f782db44fd56170d12a0b9b545c7", 0x18}], 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000040)={r1}) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e3, &(0x7f0000000180)={r0, r6}) 614.437774ms ago: executing program 0 (id=2773): syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async) r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x25, 0x4, @val=@netkit}, 0x1c) (async) r1 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x25, 0x4, @val=@netkit}, 0x1c) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f0000000440)={0x0, 0xecdf, 0x1, [0x7fffffff, 0x0, 0x3, 0x40], [0x8, 0x8, 0x8, 0x0, 0x81, 0x9, 0x6, 0x6, 0x100, 0x4, 0xcbc, 0xffffffffffff64ab, 0x9, 0x8, 0x8, 0x48b9, 0x80, 0x2, 0x9, 0x3, 0x401, 0x5, 0xffffffffffffff80, 0x2, 0x0, 0x7f, 0x5, 0x0, 0x4, 0x7fff, 0x1, 0x4, 0x9f, 0x7, 0x4, 0xffffffffbde9f911, 0x9, 0x10, 0x9, 0x1e03, 0x100, 0x8000000000000000, 0xa5, 0x3, 0x401, 0x5, 0x100000000, 0x4, 0x1a, 0x17d8, 0x1200000000000, 0x100000001, 0x200, 0xffffffff, 0x0, 0x6, 0x4, 0x3, 0x8000000000000001, 0xfffffffffffffffa, 0x80, 0x95ce, 0x8, 0x0, 0x80000001, 0x3, 0x6, 0x200, 0x908c, 0x6cd, 0x2, 0xfb3e, 0x3, 0x4, 0x9, 0x2, 0x9, 0xffff, 0x3, 0x8000000000000001, 0xc08, 0x0, 0x7, 0x7, 0xc6c, 0x2, 0x6, 0x5, 0xb, 0x7, 0x67e, 0x8, 0x7ff, 0x3, 0x8, 0x957, 0x4, 0x6, 0x1ff, 0xffffffffffffffac, 0x401, 0xfffffffffffffffc, 0x8, 0x9, 0x4, 0x5, 0x5, 0x7fffffffffffffff, 0x7fffffff, 0x8, 0x7, 0x2, 0x5, 0x9, 0x4, 0x3, 0x7, 0x6, 0x8c68, 0x528c, 0x4]}) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f0000000880)={0x0, 0x4, 0x0, [0x6, 0x6, 0x8, 0x9, 0xf], [0x4, 0x9, 0xa, 0x1ff, 0x6, 0xfffffffffffffffa, 0x1, 0x101, 0x3c, 0x9ce, 0x400000000, 0x8, 0x6, 0x9, 0x6, 0x0, 0x0, 0x401, 0x1, 0x0, 0x400, 0x6, 0x29, 0x4a, 0x3, 0x8a10, 0x4, 0xfffffffffffffff9, 0x5, 0x1, 0x0, 0x4, 0x80000000, 0x4, 0x7ff, 0x8, 0x6, 0x35acc6a9, 0x81, 0x6, 0xfffffffffffffff2, 0x1, 0xa, 0x7, 0x513, 0x8, 0xf, 0x5, 0x43de4022, 0x7, 0x7, 0x7ff, 0x100000001, 0x2, 0xfffffffffffff801, 0x8001, 0x4, 0x4, 0x24, 0x414d, 0x6, 0x1000, 0x7fffffff, 0xf, 0x9, 0x0, 0x1ff, 0x0, 0x3d1c, 0x9, 0x5, 0x30, 0x0, 0x5ede, 0x3, 0x5, 0x7, 0x6, 0x8bbf, 0x7, 0x8001, 0x3, 0x6, 0x2, 0x140000000000000, 0x3, 0x5, 0x7, 0x26dd, 0x6, 0x80000001, 0x7, 0x3, 0xb88, 0x7, 0xfffffffffffffffc, 0x4, 0x5, 0x2, 0x1, 0x8d, 0x2, 0x1, 0x6, 0x954, 0x91e, 0x6d02, 0x19, 0x1, 0xfffffffffffffff9, 0x0, 0xffffffffffffffff, 0x9, 0x1, 0x7, 0x2, 0x8000000000000001, 0x5, 0xad0, 0x6, 0x3]}) (async) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f0000000880)={0x0, 0x4, 0x0, [0x6, 0x6, 0x8, 0x9, 0xf], [0x4, 0x9, 0xa, 0x1ff, 0x6, 0xfffffffffffffffa, 0x1, 0x101, 0x3c, 0x9ce, 0x400000000, 0x8, 0x6, 0x9, 0x6, 0x0, 0x0, 0x401, 0x1, 0x0, 0x400, 0x6, 0x29, 0x4a, 0x3, 0x8a10, 0x4, 0xfffffffffffffff9, 0x5, 0x1, 0x0, 0x4, 0x80000000, 0x4, 0x7ff, 0x8, 0x6, 0x35acc6a9, 0x81, 0x6, 0xfffffffffffffff2, 0x1, 0xa, 0x7, 0x513, 0x8, 0xf, 0x5, 0x43de4022, 0x7, 0x7, 0x7ff, 0x100000001, 0x2, 0xfffffffffffff801, 0x8001, 0x4, 0x4, 0x24, 0x414d, 0x6, 0x1000, 0x7fffffff, 0xf, 0x9, 0x0, 0x1ff, 0x0, 0x3d1c, 0x9, 0x5, 0x30, 0x0, 0x5ede, 0x3, 0x5, 0x7, 0x6, 0x8bbf, 0x7, 0x8001, 0x3, 0x6, 0x2, 0x140000000000000, 0x3, 0x5, 0x7, 0x26dd, 0x6, 0x80000001, 0x7, 0x3, 0xb88, 0x7, 0xfffffffffffffffc, 0x4, 0x5, 0x2, 0x1, 0x8d, 0x2, 0x1, 0x6, 0x954, 0x91e, 0x6d02, 0x19, 0x1, 0xfffffffffffffff9, 0x0, 0xffffffffffffffff, 0x9, 0x1, 0x7, 0x2, 0x8000000000000001, 0x5, 0xad0, 0x6, 0x3]}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f0000000cc0)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f00000010c0)={0x6, 0x1, {0x2, @usage, r2, 0x3, 0x7, 0x2, 0x8000000000000000, 0x8, 0x411, @struct={0x0, 0x101}, 0xffffff00, 0x45, [0x53, 0x4, 0x3, 0x4, 0xdc99, 0xa]}, {0x2, @usage=0x200, r3, 0x8, 0x1, 0x1, 0x0, 0x1ff, 0x408, @usage=0x2cc, 0x0, 0x6, [0x7ff, 0x3, 0x6, 0x100000001, 0x3, 0xd11]}, {0x77, @usage=0x3ff, r4, 0x2b5, 0xa, 0x5, 0x2, 0x1, 0xe8, @struct={0x6, 0x5c8}, 0x90, 0x3, [0x7, 0xff, 0xb902, 0x919, 0xffff, 0x4]}, {0x9ad, 0x400, 0x4}}) connect$llc(r0, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) recvmmsg(r0, &(0x7f00000050c0)=[{{0x0, 0x0, &(0x7f0000000380)}}, {{0x0, 0x0, 0x0, 0x49}}, {{0x0, 0x0, &(0x7f0000004dc0)=[{&(0x7f0000000380)=""/171, 0xab}], 0x1, &(0x7f00000053c0)=""/196, 0xc4}, 0x4}, {{0x0, 0x0, 0x0}}], 0x4, 0x2, 0x0) sendmmsg(r0, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) 613.05425ms ago: executing program 1 (id=2774): syz_init_net_socket$x25(0x9, 0x5, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4000) (async) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4000) sendmsg$NFT_BATCH(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a00)={{0x14}, [@NFT_MSG_NEWRULE={0x184, 0x6, 0xa, 0x409, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x158, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_MATCH_INFO={0x5, 0x3, 'P'}, @NFTA_MATCH_NAME={0xb, 0x1, 'socket\x00'}, @NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x1}]}}}, {0x14, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x4}}}, {0x10, 0x1, 0x0, 0x1, @quota={{0xa}, @void}}, {0x50, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x40, 0x2, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x26}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x5}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x8bb}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x3}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x5}]}}}, {0x38, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_NAT_TYPE={0x8}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0xa}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_NAT_REG_ADDR_MIN={0x8, 0x3, 0x1, 0x0, 0xb}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0xa}]}}}, {0x2c, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x22}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0x9}]}}}, {0x20, 0x1, 0x0, 0x1, @byteorder={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_BYTEORDER_DREG={0x8, 0x2, 0x1, 0x0, 0x15}]}}}, {0x10, 0x1, 0x0, 0x1, @last={{0x9}, @void}}, {0x10, 0x1, 0x0, 0x1, @socket={{0xb}, @void}}, {0xc, 0x1, 0x0, 0x1, @dup={{0x8}, @void}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x1ac}, 0x1, 0x0, 0x0, 0x24044800}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a00)={{0x14}, [@NFT_MSG_NEWRULE={0x184, 0x6, 0xa, 0x409, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x158, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_MATCH_INFO={0x5, 0x3, 'P'}, @NFTA_MATCH_NAME={0xb, 0x1, 'socket\x00'}, @NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x1}]}}}, {0x14, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x4}}}, {0x10, 0x1, 0x0, 0x1, @quota={{0xa}, @void}}, {0x50, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x40, 0x2, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x26}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x5}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x8bb}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x3}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x5}]}}}, {0x38, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_NAT_TYPE={0x8}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0xa}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_NAT_REG_ADDR_MIN={0x8, 0x3, 0x1, 0x0, 0xb}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0xa}]}}}, {0x2c, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x22}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0x9}]}}}, {0x20, 0x1, 0x0, 0x1, @byteorder={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_BYTEORDER_DREG={0x8, 0x2, 0x1, 0x0, 0x15}]}}}, {0x10, 0x1, 0x0, 0x1, @last={{0x9}, @void}}, {0x10, 0x1, 0x0, 0x1, @socket={{0xb}, @void}}, {0xc, 0x1, 0x0, 0x1, @dup={{0x8}, @void}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x1ac}, 0x1, 0x0, 0x0, 0x24044800}, 0x0) socket$packet(0x11, 0x2, 0x300) (async) r1 = socket$packet(0x11, 0x2, 0x300) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000003c0)={0x0, 0xffffffffffffffc2, &(0x7f0000000340)={0x0, 0xffffffffffffffb0}}, 0x40050) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000540), r3) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r5, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000007c0)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01000000000000000000010000002c0004800500030080ff00000500030005080000050003000600faff05000300000000000500030000f3000008000100ffffffff0800020002"], 0x50}}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_ifreq(r6, 0x8994, &(0x7f0000000300)={'batadv0\x00', @ifru_flags=0x400}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="50000000090601020000000000000000000000000900020073797a31000000000500010007000000280007800c00018008000140ac1414aa1800020814000240fe880000000000000000000000000101"], 0x50}, 0x1, 0x0, 0x0, 0x10000047}, 0x0) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000380)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r8, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) setsockopt$inet_tcp_TCP_REPAIR(r8, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r8, &(0x7f00000006c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r8, 0x6, 0x14, &(0x7f0000000140)=0x1, 0x4) (async) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r8, 0x6, 0x14, &(0x7f0000000140)=0x1, 0x4) sendmmsg$inet(r8, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000580)="b3c4", 0x2}], 0x1, &(0x7f0000000640)=ANY=[], 0xf0}}], 0x1, 0x24004c41) socket$pppl2tp(0x18, 0x1, 0x1) (async) socket$pppl2tp(0x18, 0x1, 0x1) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) (async) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_route(0x10, 0x3, 0x0) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r10}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r10}, 0x10) syz_init_net_socket$ax25(0x3, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r11, 0x1, 0x1a, &(0x7f0000000100)={0xa, &(0x7f0000000280)=[{0xffff, 0x0, 0x0, 0xa}, {0x5, 0x9, 0x8, 0xffffff80}, {0x9, 0x5, 0x3, 0x4}, {0x1ff, 0xa, 0x6}, {0x7, 0x8, 0x80, 0x4}, {0x6, 0x81, 0x4, 0x4c}, {0x2, 0x5, 0x80, 0x8000}, {0x2, 0x7, 0x4, 0x8}, {0x7, 0x0, 0x0, 0x17}, {0x7ff, 0x0, 0xee, 0x9}]}, 0x10) 612.453575ms ago: executing program 2 (id=2775): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000100)='a', 0x1}], 0x1, 0x0, 0x0, 0x44}], 0x1, 0x0) setsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000180)={0x0, 0x20, 0x8f, 0x2, 0x0, 0x0, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x4}, 0xe) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="300000000000000084000000010000000000000004"], 0x30}], 0x1, 0x0) recvmsg$unix(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x120) r1 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet(r1, &(0x7f00000017c0)=[{{&(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x9}}], 0x18}}], 0x1, 0x0) ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000000)) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x3f0, 0x0, 0x168, 0x9, 0x230, 0xb, 0x320, 0x250, 0x250, 0x320, 0x250, 0x3, 0x0, {[{{@uncond, 0x6000000, 0x208, 0x230, 0x0, {0x0, 0x28e}, [@inet=@rpfilter={{0x28}, {0xc}}, @common=@rt={{0x138}, {0x0, [0x4, 0x8], 0x6, 0x17, 0x4, [@private2={0xfc, 0x2, '\x00', 0x1}, @mcast2, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, @private2, @dev={0xfe, 0x80, '\x00', 0x38}, @ipv4={'\x00', '\xff\xff', @broadcast}, @local, @private0, @private2, @empty, @private0={0xfc, 0x0, '\x00', 0x1}, @private1={0xfc, 0x1, '\x00', 0x1}, @private1, @mcast1, @loopback, @dev={0xfe, 0x80, '\x00', 0x26}], 0xe}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x2, 0x6, 0x4}, {0x3, 0x5, 0x1}}}}, {{@ipv6={@loopback, @mcast1, [0x0, 0xffffff00, 0x0, 0xff000000], [0xffffff00, 0xffffff00, 0x0, 0xffffffff], 'gretap0\x00', 'bridge_slave_0\x00', {}, {}, 0x2b, 0x2, 0x4, 0x3}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x3c2, 0x5fb8, 0x77, 'syz0\x00', {0x2b}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x450) 612.130189ms ago: executing program 3 (id=2776): r0 = socket(0x10, 0x3, 0x0) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r1, &(0x7f00000000c0)={0x24, @long}, 0x8) (async) bind$802154_dgram(r1, &(0x7f00000000c0)={0x24, @long}, 0x8) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="1800d09ea25ddebcdbed00000000400007000000", @ANYRES32=0x0], 0x18}, 0x1, 0x0, 0x0, 0x80}, 0x0) syz_emit_ethernet(0x68, &(0x7f0000005a40)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaa0096dd6075e70000323a00fe800000000000000000000000000000ff020000000000000000000000000001040090780000000060a3579e00002c00fe880000000000000000000000000001fe8000000000000000000000000000bb6be2"], 0x0) 610.24728ms ago: executing program 4 (id=2777): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$isdn(0x22, 0x2, 0x26) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x80044942, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) (async) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000000100)=0x3b23, 0x4) (async) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000340)=[@sack_perm, @window={0x3, 0x6, 0x7}, @mss={0x2, 0x7}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @timestamp, @window={0x3, 0xfffe}, @sack_perm], 0x200000000000005e) sendto$inet(r2, &(0x7f00000003c0)="d3", 0x1, 0x80, 0x0, 0x0) (async) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000000), 0x4) (async) sendto$inet(r2, &(0x7f00000004c0)='<', 0x381, 0x805, 0x0, 0x0) (async, rerun: 32) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000500)={0x38, r3, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xc}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'tunl0\x00'}]}, 0x38}}, 0x0) 547.146068ms ago: executing program 3 (id=2778): r0 = socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000d80)={0xffffffffffffffff}) (async) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000540)=""/264, 0x108}], 0x1}, 0x1f00) sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f0000001000)={'sit0\x00', 0x0}) (async) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0xfdfd, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x1, &(0x7f0000000080)=[{0x6}]}, 0x10) (async) close(r0) 459.220182ms ago: executing program 2 (id=2779): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x1e, 0xfffb, 0x5, 0x1}, 0x50) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x0, 0xfffffffe, 0x4}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000140)={@initdev, @private, 0x0}, &(0x7f0000000180)=0xc) connect$can_bcm(r1, &(0x7f00000001c0)={0x1d, r4}, 0x10) r5 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_attach_bpf(r5, 0x1, 0x34, &(0x7f00000000c0), 0x38) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000340), &(0x7f0000000940), 0xfffe, r0}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000000c0)={r0, &(0x7f0000000080), &(0x7f0000001300)=""/4096}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000001840)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r6, 0x0, 0xe, 0x0, &(0x7f00000004c0)="ad5ce39667bde4014c9745573838", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 449.823267ms ago: executing program 4 (id=2780): r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCBRDELBR(r0, 0x89a1, &(0x7f0000000080)='veth0_to_bridge\x00') (async) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_route(0x10, 0x3, 0x0) (async) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, 0x0, 0x0) (async) r2 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000800)={'veth0\x00', &(0x7f00000007c0)=@ethtool_cmd={0x2e, 0xc5f, 0xca, 0x876, 0x3, 0x2, 0x5, 0x2a, 0x9c, 0x0, 0x3, 0x7, 0x21a, 0x0, 0x4, 0x28, [0xb, 0x8]}}) (async) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f0000000000)={0x6}, 0x4) (async) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @empty}, 0x1c) (async) r3 = socket(0x10, 0x803, 0x0) (async) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) (async) read(0xffffffffffffffff, &(0x7f0000000040)=""/67, 0x43) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYRES32, @ANYRES32=r5], 0x1c}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_GET_HARDIF(r3, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="100025bd7000fddbdf25050000000500330000000000050030000071a42750f60001000000c95d74696ce5e49408000600", @ANYRES32=r6, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x4081}, 0x20000824) (async) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) (async) socket$inet6(0xa, 0x2, 0x3) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r8, &(0x7f0000000640)=[{&(0x7f0000000100)="afa63660", 0x4}], 0x1) (async) recvmsg$unix(r8, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) close(r9) mmap(&(0x7f000039a000/0x3000)=nil, 0x3000, 0x3000004, 0x3b071, r8, 0x0) r10 = socket$inet6_sctp(0xa, 0x801, 0x84) (async) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0e000000040000000400000003"], 0x48) r12 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x15, 0x1c, &(0x7f0000000400)=ANY=[@ANYBLOB="1808000060000000000000000000008018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bc0908000000000035090100000000009500000000070000b7020000000000007b9a00fe000000006609000000000000dbaaf0ff50000000bf8620000000000007080000f8ffffffbfa400000000000007040000f0ffffff770000000800000018220000", @ANYRES32=r12, @ANYBLOB="0000000000000000b7050000180000084609f0ff76000000bf9800000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) getsockopt$bt_hci(r10, 0x84, 0x84, &(0x7f00000010c0)=""/4111, &(0x7f0000000000)=0x100f) (async) sendmsg$nl_route(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="440000001000370400"/20, @ANYRES32=r7, @ANYBLOB="8008000200ac1414aa080014000300"/29], 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) 395.305963ms ago: executing program 1 (id=2781): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, 0x0}, 0x0) r1 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r1, &(0x7f0000000040)={0x2a, 0x1}, 0xc) r2 = socket$qrtr(0x2a, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000ac0)=[{{0x0, 0xff2c, 0x0}, 0x1}], 0x40, 0x2, 0x0) connect$qrtr(r2, &(0x7f0000000040)={0x2a, 0x1, 0x4000}, 0xc) writev(r2, &(0x7f0000000340)=[{&(0x7f0000000080)='~', 0x1}], 0x1) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xd, 0xfffffffb, 0x7ffeffff}}}}]}, 0x44}}, 0x20040084) sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000003c0)=@newqdisc={0x44, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x0, 0xfffffffc, 0x2}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x400dc}, 0x24000080) sendmsg$IPCTNL_MSG_EXP_NEW(r3, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000400)={0xfc, 0x0, 0x2, 0x101, 0x0, 0x0, {0x1, 0x0, 0x3}, [@CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0xc4}, @CTA_EXPECT_MASK={0x78, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x3d}}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x2}, @CTA_EXPECT_MASK={0x44, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010101}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x14, 0x4, @mcast1}}}]}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x1}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x3}, @CTA_EXPECT_FN={0xa, 0xb, 'Q.931\x00'}]}, 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x40010) writev(r1, &(0x7f0000000540)=[{&(0x7f0000000140)='Q', 0x1}], 0x1) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ADD(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000d00)={0x14, r7, 0x4c1dad3e3d6a7499, 0x70bd2b, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20000880}, 0x20000000) r8 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00'}) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000040)={'vlan0\x00'}) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newlink={0x28, 0x10, 0x503, 0x200000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x15a11}, [@IFLA_LINK={0x8, 0x5, r6}]}, 0x28}}, 0x44) socket$inet6_tcp(0xa, 0x1, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$inet6(0xa, 0x805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r11, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private1}]}, &(0x7f00000002c0)=0x10) getsockopt$bt_hci(r11, 0x84, 0x82, &(0x7f0000000080)=""/4076, &(0x7f0000000040)=0xfec) sendmsg$nl_route(r10, &(0x7f0000000500)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYBLOB="3000000000000000080001000000000008000100010000000800010002000000"], 0x30}, 0x1, 0x0, 0x0, 0x40488d1}, 0x24000840) 368.62657ms ago: executing program 4 (id=2782): r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) shutdown(r0, 0x0) (async) shutdown(r0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) (async) socket$inet_smc(0x2b, 0x1, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x7, 0x4, 0x3e0, 0x110, 0x0, 0x110, 0x2f8, 0x2f8, 0x2f8, 0x4, 0x0, {[{{@uncond, 0xc0, 0x11e}, @mangle={0x50, 'mangle\x00', 0x0, {@mac, @mac=@remote, @loopback, @local, 0x1, 0x1}}}, {{@arp={@multicast2, @private=0xa010100, 0xff, 0xffffff00, 0xc, 0x4, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, {[0xff, 0xff, 0xff, 0xff, 0x0, 0xbe9240b8a223bba0]}}, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x24}, {[0xff, 0x0, 0xff, 0xff, 0xff]}}, 0x2, 0x6, 0x23b0, 0x9dd7, 0x80, 0x9, 'veth1_vlan\x00', 'ip_vti0\x00', {0xff}, {0xff}, 0x0, 0x12}, 0xc0, 0x100}, @unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "716ebd2e1aa0cc683e62f312359594df00da56317f76121697127951fdba"}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE0={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x487) r2 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_proto_private(r2, 0x89e0, &(0x7f0000003180)) 231.611354ms ago: executing program 4 (id=2783): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000005c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000014000000080016000000000018000180140002006e657464657673696d3000000000000008001500170000000800130000170000080014"], 0x4c}}, 0x0) getpeername$ax25(r0, &(0x7f0000000200)={{0x3, @bcast}, [@null, @default, @default, @remote, @rose, @rose, @netrom, @default]}, &(0x7f00000000c0)=0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xd, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0xc4}}, {}, [], {{}, {0x6, 0x0, 0x5, 0x8}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x2, &(0x7f0000000300)=ANY=[@ANYBLOB="81108200000000009500000000000000c06396c7b5522d0c2ecd3cd5b8bbde8b1dde5c71510480e4830afa0b59926828884563263ee09e1d0b21f83ef0b13585fd9b6b863655998547a55285dd1d5071efa7ce46f61a083eca1af45febfb26bf919f05"], &(0x7f0000000280)='GPL\x00'}, 0x90) ioctl$SIOCSIFHWADDR(r0, 0x8b26, &(0x7f0000000080)={'wlan1\x00', @random="0911008d0c00"}) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet(0x2, 0x6, 0x5) setsockopt(r4, 0x84, 0x71, &(0x7f00000002c0)="1a00000002000000", 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x2b}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) 201.687969ms ago: executing program 2 (id=2784): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv6_delrule={0x38, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'sit0\x00'}, @FIB_RULE_POLICY=@FRA_PRIORITY={0x8}]}, 0x38}}, 0x0) r3 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r3, &(0x7f0000000280)={0xa, 0x0, 0x0, @loopback}, 0x1c) getsockname$packet(r3, 0x0, &(0x7f0000000640)) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x14, 0x35, 0x9, 0xffffffff, 0x25dfdbfb, {0x2}}, 0x14}}, 0x0) 82.799951ms ago: executing program 4 (id=2785): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000540)={'team_slave_1\x00', &(0x7f0000000440)=@ethtool_dump={0x7f, 0x9, 0x81}}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000580)={0x80, r2, 0xb97534d5fe9704cf, 0x4, 0x200, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x3ff}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x602}, @NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0x43, 0xbe, "4ac0cc004796a83373e3035e956dd131a0f9634d30f85bc8db0984473d5704fe358322e98a095bbe7ff9a0205eaa029867aed7a349dbecb5b65855a06e3d6a"}]}, 0x80}, 0x1, 0x0, 0x0, 0x80c1}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000001000)=ANY=[@ANYBLOB="80010000100001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000ffff00000000000000006c000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000480001007467723136302d67656e65726963000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000480003"], 0x180}}, 0x0) 11.740204ms ago: executing program 1 (id=2786): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f000000cbc0)=@newtaction={0xe98, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe70, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe44, 0x2, {{{}, 0x0, 0x0, [{}, {}]}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0) (async) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f00000000c0)={r4, 0xff, 0x30}, 0xc) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={r0, 0xe0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000001e80)=[0x0], 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) 0s ago: executing program 2 (id=2787): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0820000001080001615f3df8e9759169cfb0b05758d5bdadc21400160002401621c4e3a95a0503e36db9da00000000b7"], 0x40}, 0x1, 0x2000000000000000}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='mm_page_alloc\x00', r1}, 0xe0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000001340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sched_kthread_stop\x00', r4}, 0x10) r6 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) ioctl$SIOCAX25GETINFO(r6, 0x8917, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001200)=ANY=[@ANYBLOB="4000000010001fff000000000000000000060000", @ANYRES32=0x0, @ANYBLOB="0000000000000000180012800e0001007769726567756172640000000400028008000a00b8"], 0x40}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x63, 0x11, 0xc}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x70) kernel console output (not intermixed with test programs): ving interface: batadv_slave_0 [ 99.233361][ T6921] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 99.266247][ T6921] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 99.309594][ T6921] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 99.373803][ T6922] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 99.449559][ T6925] 8021q: adding VLAN 0 to HW filter on device bond1 [ 99.514541][ T6936] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.561059][ T6938] bond1: (slave ip6gretap1): making interface the new active one [ 99.571486][ T6938] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 99.612135][ T6963] openvswitch: netlink: Key type 31 is not supported [ 99.693313][ T6962] netlink: 'syz.0.283': attribute type 12 has an invalid length. [ 99.701946][ T6962] netlink: 'syz.0.283': attribute type 29 has an invalid length. [ 99.717156][ T6965] sctp: [Deprecated]: syz.2.284 (pid 6965) Use of struct sctp_assoc_value in delayed_ack socket option. [ 99.717156][ T6965] Use struct sctp_sack_info instead [ 99.924550][ T6977] IPv6: NLM_F_CREATE should be specified when creating new route [ 99.946569][ T6977] netlink: 'syz.1.287': attribute type 1 has an invalid length. [ 100.030720][ T6981] netlink: 'syz.2.290': attribute type 1 has an invalid length. [ 100.473762][ T7012] netlink: 'syz.0.298': attribute type 9 has an invalid length. [ 100.488501][ T7015] __nla_validate_parse: 6 callbacks suppressed [ 100.488516][ T7015] netlink: 8 bytes leftover after parsing attributes in process `syz.1.299'. [ 100.516642][ T7015] netlink: 12 bytes leftover after parsing attributes in process `syz.1.299'. [ 100.638692][ T7022] netlink: 4 bytes leftover after parsing attributes in process `syz.2.301'. [ 100.671894][ T7021] netlink: 8 bytes leftover after parsing attributes in process `syz.3.300'. [ 100.948923][ T7038] netlink: 28 bytes leftover after parsing attributes in process `syz.4.307'. [ 100.971061][ T7038] netlink: 'syz.4.307': attribute type 7 has an invalid length. [ 100.990067][ T7038] netlink: 'syz.4.307': attribute type 8 has an invalid length. [ 101.001728][ T7038] netlink: 4 bytes leftover after parsing attributes in process `syz.4.307'. [ 101.019626][ T7044] netlink: 'syz.2.309': attribute type 1 has an invalid length. [ 101.042080][ T7038] team0: entered promiscuous mode [ 101.048412][ T7038] team_slave_0: entered promiscuous mode [ 101.061872][ T7038] team_slave_1: entered promiscuous mode [ 101.071385][ T7038] batadv_slave_1: entered promiscuous mode [ 101.082066][ T7038] batadv_slave_1: left promiscuous mode [ 101.088026][ T7038] team0: left promiscuous mode [ 101.092816][ T7038] team_slave_0: left promiscuous mode [ 101.099482][ T7038] team_slave_1: left promiscuous mode [ 101.218861][ T7057] netlink: 48 bytes leftover after parsing attributes in process `syz.1.311'. [ 101.232081][ T7054] bond1: Unable to set up delay as MII monitoring is disabled [ 101.378269][ T7054] bond1 (unregistering): Released all slaves [ 101.768874][ T7079] netlink: 12 bytes leftover after parsing attributes in process `syz.3.317'. [ 101.778350][ T7079] tc_dump_action: action bad kind [ 101.790199][ T7079] IPv6: sit1: Disabled Multicast RS [ 101.796706][ T7079] sit1: entered allmulticast mode [ 101.884506][ T7085] netlink: 'syz.2.319': attribute type 1 has an invalid length. [ 102.119506][ T7101] sctp: [Deprecated]: syz.2.325 (pid 7101) Use of int in max_burst socket option deprecated. [ 102.119506][ T7101] Use struct sctp_assoc_value instead [ 102.119778][ T7099] tipc: Started in network mode [ 102.170914][ T7099] tipc: Node identity e0000002, cluster identity 4711 [ 102.179974][ T7099] tipc: Enabling of bearer rejected, failed to enable media [ 102.220101][ T7107] netlink: 196 bytes leftover after parsing attributes in process `syz.2.325'. [ 102.230262][ T7107] netlink: 196 bytes leftover after parsing attributes in process `syz.2.325'. [ 102.318250][ T7110] syzkaller0: left promiscuous mode [ 102.331183][ T7110] syzkaller0: left allmulticast mode [ 102.358206][ T7110] tipc: Resetting bearer [ 102.602818][ T7120] xt_ecn: cannot match TCP bits for non-tcp packets [ 103.336282][ T7169] Cannot find del_set index 4 as target [ 103.509998][ T7179] team0: No ports can be present during mode change [ 104.190867][ T7225] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 104.217727][ T7225] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 104.237705][ T7227] sctp: [Deprecated]: syz.3.358 (pid 7227) Use of int in maxseg socket option. [ 104.237705][ T7227] Use struct sctp_assoc_value instead [ 104.744433][ T7258] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 104.766622][ T7259] veth1_to_bond: entered allmulticast mode [ 104.907199][ T7259] veth1_to_bond: left allmulticast mode [ 105.497842][ T7300] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.505666][ T7300] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.518414][ T7291] __nla_validate_parse: 7 callbacks suppressed [ 105.518438][ T7291] netlink: 52 bytes leftover after parsing attributes in process `syz.0.376'. [ 105.594690][ T7263] mpoa:atm_mpoa_vcc_attach: mpoa:Short read (missed 12 bytes) from userland [ 105.694962][ T7313] netlink: 'syz.3.379': attribute type 1 has an invalid length. [ 105.703764][ T7308] netlink: 8 bytes leftover after parsing attributes in process `syz.2.378'. [ 105.770388][ T7313] netlink: 228 bytes leftover after parsing attributes in process `syz.3.379'. [ 105.889158][ T7324] syzkaller1: entered promiscuous mode [ 105.906630][ T7324] syzkaller1: entered allmulticast mode [ 105.946256][ T7323] syz.2.382 (7323) used greatest stack depth: 17832 bytes left [ 106.075573][ T7332] netlink: 36 bytes leftover after parsing attributes in process `syz.1.384'. [ 106.215000][ T7338] netlink: 44 bytes leftover after parsing attributes in process `syz.2.386'. [ 106.378205][ T7344] vxcan1: tx address claim with different name [ 106.392520][ T7346] netlink: 12 bytes leftover after parsing attributes in process `syz.1.390'. [ 106.646665][ T7361] netlink: 'syz.3.395': attribute type 6 has an invalid length. [ 106.714029][ T7368] netlink: 48 bytes leftover after parsing attributes in process `syz.2.396'. [ 107.193395][ T7391] netlink: 4 bytes leftover after parsing attributes in process `syz.4.406'. [ 107.322889][ T7405] netlink: 'syz.2.409': attribute type 7 has an invalid length. [ 107.332944][ T7405] netlink: 140 bytes leftover after parsing attributes in process `syz.2.409'. [ 107.393576][ T7408] xt_hashlimit: size too large, truncated to 1048576 [ 107.448503][ T7412] netlink: 8 bytes leftover after parsing attributes in process `syz.3.410'. [ 107.649660][ T7420] netlink: 'syz.1.412': attribute type 13 has an invalid length. [ 107.879635][ T7420] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 107.971408][ T7435] netlink: 'syz.3.414': attribute type 5 has an invalid length. [ 108.069859][ T7443] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 108.107762][ T7446] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 108.118534][ T7447] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 108.136511][ T7446] netlink: 'syz.1.418': attribute type 2 has an invalid length. [ 108.196693][ T7448] netlink: 'syz.1.418': attribute type 2 has an invalid length. [ 108.276145][ T7452] netlink: 'syz.0.419': attribute type 30 has an invalid length. [ 108.399436][ T7459] netlink: 'syz.3.422': attribute type 8 has an invalid length. [ 108.490573][ T7463] tipc: Enabling of bearer rejected, failed to enable media [ 109.709826][ T7491] bond0: Error: Cannot enslave bond to itself. [ 109.816883][ T7500] netlink: 'syz.2.430': attribute type 10 has an invalid length. [ 109.851022][ T7503] x_tables: duplicate underflow at hook 4 [ 109.895947][ T7500] batadv0: entered promiscuous mode [ 109.904310][ T7500] batadv0: entered allmulticast mode [ 109.927487][ T7500] bridge0: port 3(batadv0) entered blocking state [ 109.961351][ T7500] bridge0: port 3(batadv0) entered disabled state [ 110.157199][ T65] batman_adv: batadv0: IGMP Querier appeared [ 110.163415][ T65] batman_adv: batadv0: MLD Querier appeared [ 110.474808][ T7516] team0 (unregistering): Port device team_slave_0 removed [ 110.493240][ T7516] team0 (unregistering): Port device team_slave_1 removed [ 110.748431][ T7539] __nla_validate_parse: 11 callbacks suppressed [ 110.748447][ T7539] netlink: 208 bytes leftover after parsing attributes in process `syz.0.441'. [ 110.814071][ T7544] validate_nla: 2 callbacks suppressed [ 110.814087][ T7544] netlink: 'syz.2.444': attribute type 11 has an invalid length. [ 110.830076][ T7540] netlink: 'syz.0.441': attribute type 10 has an invalid length. [ 110.853044][ T7540] bridge_slave_1: left allmulticast mode [ 110.864438][ T7540] bridge_slave_1: left promiscuous mode [ 110.878534][ T7540] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.923391][ T7540] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 110.941531][ T7550] netlink: 212 bytes leftover after parsing attributes in process `syz.2.447'. [ 110.984776][ T7550] netlink: 12 bytes leftover after parsing attributes in process `syz.2.447'. [ 111.129227][ T7550] syzkaller1: entered promiscuous mode [ 111.155205][ T7550] syzkaller1: entered allmulticast mode [ 111.181170][ T7550] SET target dimension over the limit! [ 111.190011][ T7563] netlink: 4 bytes leftover after parsing attributes in process `syz.4.450'. [ 111.201108][ T7562] netlink: 12 bytes leftover after parsing attributes in process `syz.0.449'. [ 111.636368][ T7589] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.458'. [ 111.745576][ T7598] SET target dimension over the limit! [ 111.790110][ T7590] netlink: 'syz.2.457': attribute type 13 has an invalid length. [ 111.935051][ T7608] netlink: 16 bytes leftover after parsing attributes in process `syz.0.465'. [ 111.991948][ T7612] netlink: 'syz.0.465': attribute type 21 has an invalid length. [ 112.078182][ T7590] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 112.315493][ T7627] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 112.425135][ T7633] netlink: 'syz.1.472': attribute type 15 has an invalid length. [ 112.446206][ T7633] netlink: 24 bytes leftover after parsing attributes in process `syz.1.472'. [ 112.576391][ T7643] xt_TCPMSS: Only works on TCP SYN packets [ 112.583128][ T7633] bond1: entered allmulticast mode [ 112.607503][ T7633] 8021q: adding VLAN 0 to HW filter on device bond1 [ 112.660370][ T7648] netlink: 60 bytes leftover after parsing attributes in process `syz.3.478'. [ 112.683735][ T7648] netlink: 60 bytes leftover after parsing attributes in process `syz.3.478'. [ 112.731445][ T7648] netlink: 'syz.3.478': attribute type 10 has an invalid length. [ 112.803854][ T7648] team0: Device ipvlan1 failed to register rx_handler [ 112.830117][ T7654] policy can only be matched on NF_INET_PRE_ROUTING [ 112.830139][ T7654] unable to load match [ 113.909551][ T7690] netlink: 'syz.2.488': attribute type 5 has an invalid length. [ 114.821127][ T7748] vlan2: entered promiscuous mode [ 114.849373][ T7748] bridge0: entered promiscuous mode [ 115.445267][ T7792] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0x5 [ 115.767255][ T7807] syzkaller0: entered promiscuous mode [ 115.772909][ T7807] syzkaller0: entered allmulticast mode [ 116.146542][ T7824] netlink: 'syz.4.526': attribute type 39 has an invalid length. [ 116.857815][ T7858] pim6reg: entered allmulticast mode [ 116.907399][ T7862] pim6reg: left allmulticast mode [ 117.534246][ T7891] __nla_validate_parse: 7 callbacks suppressed [ 117.569063][ T7891] netlink: 36 bytes leftover after parsing attributes in process `syz.1.542'. [ 117.939227][ T7920] netlink: 14712 bytes leftover after parsing attributes in process `syz.2.548'. [ 118.006444][ T7924] netlink: 'syz.1.549': attribute type 3 has an invalid length. [ 118.087821][ T7925] vlan2: entered allmulticast mode [ 118.230727][ T7941] veth0: entered promiscuous mode [ 118.253116][ T7942] netlink: 28 bytes leftover after parsing attributes in process `syz.2.553'. [ 118.387251][ T7946] netlink: 28 bytes leftover after parsing attributes in process `syz.4.555'. [ 118.414895][ T7946] netlink: 576 bytes leftover after parsing attributes in process `syz.4.555'. [ 118.427114][ T7949] netlink: 128 bytes leftover after parsing attributes in process `syz.2.556'. [ 118.436404][ T7949] netlink: 128 bytes leftover after parsing attributes in process `syz.2.556'. [ 118.509140][ T7949] netlink: 'syz.2.556': attribute type 4 has an invalid length. [ 118.561033][ T7955] netlink: 12 bytes leftover after parsing attributes in process `syz.0.558'. [ 118.730315][ T7967] tipc: Enabling of bearer rejected, failed to enable media [ 118.902252][ T7931] veth0: left promiscuous mode [ 119.052495][ T7990] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 119.233570][ T8003] netlink: 8 bytes leftover after parsing attributes in process `syz.3.570'. [ 119.325059][ T8003] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 119.402325][ T8003] netlink: 148 bytes leftover after parsing attributes in process `syz.3.570'. [ 119.443414][ T8008] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 119.497933][ T8019] vlan0: entered promiscuous mode [ 119.524984][ T8019] vlan0: entered allmulticast mode [ 119.552495][ T8019] veth0_vlan: entered allmulticast mode [ 120.132362][ T8067] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 121.031593][ T8110] team1: entered promiscuous mode [ 121.054915][ T8110] team1: entered allmulticast mode [ 121.542616][ T8143] delete_channel: no stack [ 122.027034][ T8173] syzkaller0: entered promiscuous mode [ 122.032561][ T8173] syzkaller0: entered allmulticast mode [ 122.190903][ T8183] syzkaller0: entered promiscuous mode [ 122.204314][ T8183] syzkaller0: entered allmulticast mode [ 122.309297][ T8189] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 122.452736][ T8200] sctp: [Deprecated]: syz.1.626 (pid 8200) Use of int in max_burst socket option. [ 122.452736][ T8200] Use struct sctp_assoc_value instead [ 122.537091][ T8199] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 122.592924][ T8203] netlink: 'syz.4.627': attribute type 10 has an invalid length. [ 122.695676][ T8211] syz_tun: entered allmulticast mode [ 122.755937][ T8212] syz_tun: left allmulticast mode [ 122.825777][ T8222] netdevsim netdevsim4 ÿÿÿÿÿÿ: renamed from netdevsim0 (while UP) [ 123.013811][ T8230] veth1_macvtap: left promiscuous mode [ 123.025546][ T8230] macsec0: entered promiscuous mode [ 123.092661][ T8234] __nla_validate_parse: 15 callbacks suppressed [ 123.092679][ T8234] netlink: 32 bytes leftover after parsing attributes in process `syz.2.637'. [ 123.111760][ T8234] netlink: 32 bytes leftover after parsing attributes in process `syz.2.637'. [ 123.145679][ T8239] netlink: 32 bytes leftover after parsing attributes in process `syz.2.637'. [ 123.158266][ T8239] netlink: 32 bytes leftover after parsing attributes in process `syz.2.637'. [ 123.586575][ T8257] tipc: Started in network mode [ 123.611805][ T8257] tipc: Node identity a, cluster identity 4711 [ 123.657283][ T8257] tipc: Node number set to 10 [ 124.201412][ T8288] netlink: 'syz.1.653': attribute type 6 has an invalid length. [ 124.212196][ T8289] netlink: 260 bytes leftover after parsing attributes in process `syz.4.654'. [ 124.344429][ T8296] netlink: 8 bytes leftover after parsing attributes in process `syz.0.656'. [ 124.844612][ T8329] netlink: 'syz.2.667': attribute type 4 has an invalid length. [ 124.898534][ T8329] netlink: 'syz.2.667': attribute type 4 has an invalid length. [ 125.889452][ T8353] netlink: 12 bytes leftover after parsing attributes in process `syz.0.671'. [ 125.907973][ T8356] netlink: 20 bytes leftover after parsing attributes in process `syz.2.673'. [ 126.054887][ T8359] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 126.080609][ T8362] netlink: 8 bytes leftover after parsing attributes in process `syz.3.676'. [ 126.090066][ T8359] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 126.129377][ T8359] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 126.140422][ T8359] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 126.533398][ T8381] vlan0: entered promiscuous mode [ 126.555880][ T8381] geneve1: entered promiscuous mode [ 126.573167][ T8381] vlan0: entered allmulticast mode [ 126.587557][ T8381] geneve1: entered allmulticast mode [ 126.670926][ T8395] netlink: 'syz.3.684': attribute type 1 has an invalid length. [ 126.681696][ T8395] netlink: 88 bytes leftover after parsing attributes in process `syz.3.684'. [ 127.034925][ T8386] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 127.081099][ T8386] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 127.353495][ T8394] delete_channel: no stack [ 127.386438][ T998] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.421227][ T998] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.453051][ T998] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.482825][ T998] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.827377][ T8448] tipc: Resetting bearer [ 127.966925][ T8455] gre0: entered promiscuous mode [ 128.139957][ T8465] sctp: [Deprecated]: syz.4.699 (pid 8465) Use of struct sctp_assoc_value in delayed_ack socket option. [ 128.139957][ T8465] Use struct sctp_sack_info instead [ 128.256107][ T8474] netlink: 'syz.1.700': attribute type 1 has an invalid length. [ 128.296950][ T8474] __nla_validate_parse: 2 callbacks suppressed [ 128.296968][ T8474] netlink: 52 bytes leftover after parsing attributes in process `syz.1.700'. [ 128.649201][ T8500] netlink: 8 bytes leftover after parsing attributes in process `syz.4.707'. [ 128.679366][ T8502] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 128.798677][ T8500] 8021q: adding VLAN 0 to HW filter on device bond2 [ 128.799900][ T8513] netlink: 148 bytes leftover after parsing attributes in process `syz.0.710'. [ 128.933312][ T8518] bond0: (slave bond_slave_0): Releasing backup interface [ 128.983896][ T8518] bond0: (slave bond_slave_1): Releasing backup interface [ 129.013536][ T8518] team0: Port device team_slave_0 removed [ 129.030242][ T8518] team0: Port device team_slave_1 removed [ 129.047514][ T8518] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 129.064062][ T8518] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 129.078595][ T8518] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 129.086830][ T8518] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 129.098413][ T8518] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 129.234990][ T8535] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 129.269159][ T8537] xt_TCPMSS: Only works on TCP SYN packets [ 129.279587][ T8537] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 129.312197][ T8537] xt_TCPMSS: Only works on TCP SYN packets [ 129.573753][ T8560] netlink: 12 bytes leftover after parsing attributes in process `syz.3.721'. [ 129.888426][ T8575] tipc: Resetting bearer [ 129.906683][ T8421] syz2: Port: 1 Link ACTIVE [ 129.940829][ T8575] tipc: Enabling of bearer rejected, already enabled [ 129.985771][ T8575] syzkaller0: entered promiscuous mode [ 129.991291][ T8575] syzkaller0: entered allmulticast mode [ 130.014627][ T8584] netlink: 32 bytes leftover after parsing attributes in process `syz.1.729'. [ 130.187418][ T8575] tipc: Resetting bearer [ 130.226695][ T8570] tipc: Resetting bearer [ 130.232716][ T8421] syz2: Port: 1 Link DOWN [ 130.321675][ T8595] netlink: 'syz.2.732': attribute type 1 has an invalid length. [ 130.474085][ T8595] 8021q: adding VLAN 0 to HW filter on device bond3 [ 130.503882][ T8599] bond3: (slave geneve2): making interface the new active one [ 130.534631][ T8599] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 130.561152][ T2902] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.585299][ T8613] netlink: 108 bytes leftover after parsing attributes in process `syz.1.735'. [ 130.594543][ T2902] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.608005][ T2902] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.638407][ T2902] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.757257][ T2902] tipc: Resetting bearer [ 130.967340][ T8633] netlink: 'syz.3.739': attribute type 1 has an invalid length. [ 131.085900][ T8641] macsec0: entered promiscuous mode [ 131.118733][ T8643] netlink: 28 bytes leftover after parsing attributes in process `syz.4.741'. [ 132.138889][ T8688] syzkaller0: entered promiscuous mode [ 132.157442][ T8688] syzkaller0: entered allmulticast mode [ 132.297422][ T8700] netlink: 24 bytes leftover after parsing attributes in process `syz.3.756'. [ 132.315951][ T8700] netlink: 24 bytes leftover after parsing attributes in process `syz.3.756'. [ 132.469315][ T8709] netlink: 24 bytes leftover after parsing attributes in process `syz.3.760'. [ 132.486661][ T8710] netlink: 'syz.2.759': attribute type 8 has an invalid length. [ 132.489230][ T8708] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 132.526847][ T8708] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 132.558301][ T8708] gretap1: entered promiscuous mode [ 132.570773][ T8708] gretap1: entered allmulticast mode [ 132.902792][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.413233][ T8766] netlink: 'syz.1.775': attribute type 21 has an invalid length. [ 133.627040][ T8777] xt_hashlimit: overflow, try lower: 3/0 [ 133.748276][ T8783] netlink: 'syz.3.779': attribute type 1 has an invalid length. [ 134.374680][ T8808] __nla_validate_parse: 5 callbacks suppressed [ 134.374697][ T8808] netlink: 12 bytes leftover after parsing attributes in process `syz.2.786'. [ 135.255118][ T8850] netlink: 12 bytes leftover after parsing attributes in process `syz.4.800'. [ 135.315643][ T8856] netlink: 'syz.2.803': attribute type 8 has an invalid length. [ 135.499872][ T8862] syzkaller0: entered promiscuous mode [ 135.519867][ T8862] syzkaller0: entered allmulticast mode [ 135.613956][ T8869] netlink: 12 bytes leftover after parsing attributes in process `syz.3.809'. [ 135.719424][ T8869] 8021q: adding VLAN 0 to HW filter on device bond2 [ 135.772103][ T8876] 8021q: adding VLAN 0 to HW filter on device bond2 [ 135.793379][ T8876] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 135.829186][ T8876] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 136.098845][ T8885] netlink: 32 bytes leftover after parsing attributes in process `syz.3.811'. [ 136.139622][ T8885] batadv_slave_0: entered allmulticast mode [ 136.173387][ T8885] batadv_slave_0: left allmulticast mode [ 136.262729][ T8895] tipc: Resetting bearer [ 136.270067][ T8415] syz2: Port: 1 Link ACTIVE [ 136.960222][ T8901] netlink: 20 bytes leftover after parsing attributes in process `syz.1.815'. [ 137.018217][ T8893] tipc: Resetting bearer [ 137.047533][ T984] syz2: Port: 1 Link DOWN [ 137.355638][ T8918] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 137.398844][ T5838] udevd[5838]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 137.449426][ T5825] udevd[5825]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 137.601925][ T8929] netlink: 4 bytes leftover after parsing attributes in process `syz.4.822'. [ 137.687044][ T8137] tipc: Resetting bearer [ 137.709645][ T8933] netlink: 12 bytes leftover after parsing attributes in process `syz.2.823'. [ 137.841559][ T8935] netlink: 'syz.3.824': attribute type 9 has an invalid length. [ 138.313387][ T8951] IPVS: set_ctl: invalid protocol: 36 104.0.1.0:0 [ 138.335293][ T9] IPVS: starting estimator thread 0... [ 138.376973][ T8951] syzkaller0: left promiscuous mode [ 138.382230][ T8951] syzkaller0: left allmulticast mode [ 138.388038][ T8951] tipc: Resetting bearer [ 138.444453][ T8954] IPVS: using max 35 ests per chain, 84000 per kthread [ 138.795338][ T8971] netlink: 'syz.3.833': attribute type 8 has an invalid length. [ 138.991831][ T8974] netlink: 4 bytes leftover after parsing attributes in process `syz.4.836'. [ 139.035288][ T8974] netlink: 12 bytes leftover after parsing attributes in process `syz.4.836'. [ 139.147985][ T8980] netlink: 'syz.2.837': attribute type 1 has an invalid length. [ 139.417529][ T8990] netlink: 108 bytes leftover after parsing attributes in process `syz.2.842'. [ 139.434534][ T8990] netlink: 108 bytes leftover after parsing attributes in process `syz.2.842'. [ 139.470859][ T8990] netlink: 108 bytes leftover after parsing attributes in process `syz.2.842'. [ 139.482086][ T8998] netlink: 44 bytes leftover after parsing attributes in process `syz.4.844'. [ 139.506893][ T8990] netlink: 108 bytes leftover after parsing attributes in process `syz.2.842'. [ 140.010429][ T9018] 8021q: adding VLAN 0 to HW filter on device bond4 [ 140.059368][ T9020] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 140.077341][ T9020] bond4: (slave macvlan2): Enslaving as a backup interface with an up link [ 140.101327][ T9015] wg1: entered promiscuous mode [ 140.107676][ T9015] wg1: entered allmulticast mode [ 140.115129][ T36] bond4: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 140.141937][ T36] bond4: (slave macvlan2): link status up again after 0 ms [ 140.151827][ T36] bond4: (slave macvlan2): failed to get link speed/duplex [ 140.244476][ T2902] bond4: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 140.268474][ T2902] bond4: (slave macvlan2): failed to get link speed/duplex [ 140.389440][ T8137] bond4: (slave macvlan2): failed to get link speed/duplex [ 140.436466][ T9034] netlink: 20 bytes leftover after parsing attributes in process `syz.0.855'. [ 140.507458][ T2902] bond4: (slave macvlan2): failed to get link speed/duplex [ 140.624383][ T2902] bond4: (slave macvlan2): failed to get link speed/duplex [ 140.744649][ T2902] bond4: (slave macvlan2): failed to get link speed/duplex [ 141.128791][ T9045] netlink: 83 bytes leftover after parsing attributes in process `syz.1.858'. [ 141.134323][ T3487] bond4: (slave macvlan2): failed to get link speed/duplex [ 141.354644][ T9051] bond4: option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 141.405848][ T9051] bond4 (unregistering): Released all slaves [ 141.791209][ T9079] gre0: left promiscuous mode [ 141.810275][ T9079] batadv0: left promiscuous mode [ 141.834885][ T9079] bridge0: port 3(batadv0) entered disabled state [ 141.939608][ T9093] netlink: 8 bytes leftover after parsing attributes in process `syz.3.871'. [ 142.049235][ T9079] bridge_slave_0: left allmulticast mode [ 142.057400][ T9079] bridge_slave_0: left promiscuous mode [ 142.063304][ T9079] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.076540][ T9079] bridge_slave_1: left promiscuous mode [ 142.083284][ T9079] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.100683][ T9079] bond0: (slave bond_slave_0): Releasing backup interface [ 142.111985][ T9079] bond0: (slave bond_slave_1): Releasing backup interface [ 142.147836][ T9079] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 142.171789][ T9079] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 142.209554][ T9097] netlink: 32 bytes leftover after parsing attributes in process `syz.3.871'. [ 142.239006][ T9093] netlink: 64 bytes leftover after parsing attributes in process `syz.3.871'. [ 143.394003][ T9164] IPVS: set_ctl: invalid protocol: 136 172.20.20.187:20002 [ 143.553522][ T9173] tipc: Resetting bearer [ 143.577055][ T984] syz2: Port: 1 Link ACTIVE [ 143.580408][ T9173] syzkaller0: entered promiscuous mode [ 143.596048][ T9173] syzkaller0: entered allmulticast mode [ 143.611412][ T9174] syzkaller0: entered promiscuous mode [ 143.622377][ T9174] syzkaller0: entered allmulticast mode [ 143.642476][ T9180] netlink: 'syz.1.892': attribute type 1 has an invalid length. [ 143.679533][ T9180] netlink: 'syz.1.892': attribute type 3 has an invalid length. [ 143.689119][ T9180] NCSI netlink: No device for ifindex 813332851 [ 143.849015][ T9173] tipc: Resetting bearer [ 143.870323][ T984] syz2: Port: 1 Link DOWN [ 144.358153][ T9217] IPv6: Can't replace route, no match found [ 144.485882][ T9216] macvtap1: entered promiscuous mode [ 144.491680][ T9216] vlan0: entered promiscuous mode [ 144.497589][ T9216] macvtap1: entered allmulticast mode [ 144.504897][ T9224] netlink: 'syz.4.906': attribute type 10 has an invalid length. [ 144.512784][ T9216] vlan0: entered allmulticast mode [ 144.518158][ T9216] veth0_vlan: entered allmulticast mode [ 144.533010][ T2902] tipc: Resetting bearer [ 144.556252][ T9229] __nla_validate_parse: 3 callbacks suppressed [ 144.556269][ T9229] netlink: 196 bytes leftover after parsing attributes in process `syz.4.906'. [ 144.658877][ T9224] bridge_slave_1: left promiscuous mode [ 144.668264][ T9232] netlink: 528 bytes leftover after parsing attributes in process `syz.0.908'. [ 144.687422][ T9224] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 144.708710][ T9232] netlink: 8 bytes leftover after parsing attributes in process `syz.0.908'. [ 144.935766][ T9245] netlink: 'syz.4.913': attribute type 1 has an invalid length. [ 145.031070][ T9245] 8021q: adding VLAN 0 to HW filter on device bond4 [ 145.212576][ T9246] 8021q: adding VLAN 0 to HW filter on device bond4 [ 145.225912][ T9246] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address [ 145.275806][ T9246] bond4: (slave vxcan3): Error -95 calling set_mac_address [ 145.346994][ T9261] netlink: 12 bytes leftover after parsing attributes in process `syz.0.918'. [ 145.359695][ T9267] syz_tun: entered allmulticast mode [ 145.406381][ T36] net_ratelimit: 16 callbacks suppressed [ 145.406398][ T36] bond4: (slave macvlan2): failed to get link speed/duplex [ 145.501413][ T9267] netlink: 8 bytes leftover after parsing attributes in process `syz.2.919'. [ 145.626561][ T9267] syz_tun: left allmulticast mode [ 145.637870][ T9278] netlink: 4 bytes leftover after parsing attributes in process `syz.4.923'. [ 145.648038][ T9278] netlink: 4 bytes leftover after parsing attributes in process `syz.4.923'. [ 145.656182][ T9272] netlink: 224 bytes leftover after parsing attributes in process `syz.3.922'. [ 145.669141][ T13] bond4: (slave macvlan2): failed to get link speed/duplex [ 145.845007][ T9288] netlink: 8 bytes leftover after parsing attributes in process `syz.2.924'. [ 146.192625][ T9300] netlink: 'syz.1.927': attribute type 1 has an invalid length. [ 146.317015][ T9290] nbd0: detected capacity change from 0 to 127 [ 146.363351][ T9294] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 146.460014][ T13] bond4: (slave macvlan2): failed to get link speed/duplex [ 146.488971][ T5833] block nbd0: Receive control failed (result -104) [ 146.534652][ T9308] netlink: 40 bytes leftover after parsing attributes in process `syz.4.930'. [ 146.644397][ T36] bond4: (slave macvlan2): failed to get link speed/duplex [ 146.777008][ T36] bond4: (slave macvlan2): failed to get link speed/duplex [ 147.000388][ T9338] vlan2: entered promiscuous mode [ 147.020974][ T9338] vlan2: entered allmulticast mode [ 147.037078][ T9338] hsr_slave_1: entered allmulticast mode [ 147.324442][ T3487] bond4: (slave macvlan2): failed to get link speed/duplex [ 147.378398][ T9362] netlink: 'syz.1.947': attribute type 7 has an invalid length. [ 147.670741][ T9362] netlink: 'syz.1.947': attribute type 7 has an invalid length. [ 147.670757][ T13] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 147.765022][ T36] bond4: (slave macvlan2): failed to get link speed/duplex [ 147.796523][ T13] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 147.827736][ T13] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 147.885944][ T13] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 147.927291][ T13] bond4: (slave macvlan2): failed to get link speed/duplex [ 147.936684][ T5833] Bluetooth: hci1: command tx timeout [ 147.978999][ T9393] netlink: 'syz.1.957': attribute type 1 has an invalid length. [ 148.057429][ T13] bond4: (slave macvlan2): failed to get link speed/duplex [ 148.149364][ T9399] netlink: 'syz.1.959': attribute type 1 has an invalid length. [ 148.468505][ T9422] bond3: entered promiscuous mode [ 148.473594][ T9422] bond3: entered allmulticast mode [ 148.498667][ T9422] 8021q: adding VLAN 0 to HW filter on device bond3 [ 148.569064][ T9436] netlink: 'syz.2.968': attribute type 2 has an invalid length. [ 148.628957][ T9436] : entered promiscuous mode [ 148.845869][ T9460] netdevsim netdevsim3: Direct firmware load for failed with error -2 [ 148.882516][ T9460] netdevsim netdevsim3: Falling back to sysfs fallback for: [ 149.161453][ T2902] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 149.169998][ T2902] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 149.303829][ T2902] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 149.317312][ T2902] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 149.600135][ T8425] IPVS: starting estimator thread 0... [ 149.623112][ T9513] netlink: 'syz.0.986': attribute type 1 has an invalid length. [ 149.647940][ T9462] netdevsim netdevsim3: Direct firmware load for failed with error -2 [ 149.657141][ T9462] netdevsim netdevsim3: Falling back to sysfs fallback for: [ 149.672110][ T9516] __nla_validate_parse: 9 callbacks suppressed [ 149.672129][ T9516] netlink: 12 bytes leftover after parsing attributes in process `syz.4.987'. [ 149.716367][ T9519] pim6reg: entered allmulticast mode [ 149.724344][ T9514] IPVS: using max 28 ests per chain, 67200 per kthread [ 149.743143][ T9519] netlink: 'syz.0.988': attribute type 10 has an invalid length. [ 149.754855][ T9518] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 149.772756][ T9516] netlink: 'syz.4.987': attribute type 1 has an invalid length. [ 149.905689][ T9521] bond5: (slave geneve2): making interface the new active one [ 149.913981][ T9521] bond5: (slave geneve2): Enslaving as an active interface with an up link [ 149.931280][ T2902] netdevsim netdevsim4 ÿÿÿÿÿÿ: set [1, 1] type 2 family 0 port 20004 - 0 [ 149.942217][ T2902] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 149.952029][ T2902] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 149.977896][ T2902] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 150.161120][ T9534] netlink: 8 bytes leftover after parsing attributes in process `syz.2.993'. [ 150.178775][ T9535] netlink: 5 bytes leftover after parsing attributes in process `syz.4.992'. [ 150.201491][ T9534] netlink: 44 bytes leftover after parsing attributes in process `syz.2.993'. [ 150.424423][ T13] net_ratelimit: 20 callbacks suppressed [ 150.424443][ T13] bond4: (slave macvlan2): failed to get link speed/duplex [ 150.447874][ T9544] netlink: 'syz.3.997': attribute type 1 has an invalid length. [ 150.474427][ T9544] netlink: 12 bytes leftover after parsing attributes in process `syz.3.997'. [ 150.528645][ T9549] 8021q: VLANs not supported on gre0 [ 150.574837][ T998] bond4: (slave macvlan2): failed to get link speed/duplex [ 150.575414][ T9562] netlink: 'syz.1.999': attribute type 6 has an invalid length. [ 150.698896][ T998] bond4: (slave macvlan2): failed to get link speed/duplex [ 150.825479][ T3487] bond4: (slave macvlan2): failed to get link speed/duplex [ 150.934828][ T2902] bond4: (slave macvlan2): failed to get link speed/duplex [ 151.065861][ T8137] bond4: (slave macvlan2): failed to get link speed/duplex [ 151.177568][ T998] bond4: (slave macvlan2): failed to get link speed/duplex [ 151.212292][ T9605] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1010'. [ 151.297899][ T998] bond4: (slave macvlan2): failed to get link speed/duplex [ 151.371328][ T9609] netlink: 'syz.4.1012': attribute type 5 has an invalid length. [ 151.420834][ T9617] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1015'. [ 151.430002][ T2902] bond4: (slave macvlan2): failed to get link speed/duplex [ 151.522233][ T9620] dvmrp0: entered allmulticast mode [ 151.539929][ T2902] bond4: (slave macvlan2): failed to get link speed/duplex [ 151.612523][ T9626] nftables ruleset with unbound set [ 151.633962][ T9628] veth0_to_bridge: entered promiscuous mode [ 151.645617][ T9627] veth0_to_bridge: left promiscuous mode [ 151.692880][ T9630] IPVS: set_ctl: invalid protocol: 103 172.20.20.18:20003 [ 151.740266][ T9630] 8021q: adding VLAN 0 to HW filter on device bond0 [ 151.798035][ T9635] bridge_slave_1: entered promiscuous mode [ 151.803932][ T9635] bridge_slave_1: entered allmulticast mode [ 151.896290][ T8137] bond4: (slave macvlan2): link status definitely down, disabling slave [ 152.121533][ T9660] vetè0_virt_wifi: renamed from dummy0 (while UP) [ 152.170316][ T9662] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1033'. [ 152.182784][ T9660] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 152.197642][ T9660] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.217035][ T9663] tipc: Resetting bearer [ 152.234827][ T9] syz2: Port: 1 Link ACTIVE [ 152.252992][ T9663] tipc: Resetting bearer [ 152.259539][ T8421] syz2: Port: 1 Link DOWN [ 152.293966][ T9660] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 152.305381][ T9660] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.412222][ T9660] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 152.425954][ T9660] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.559695][ T9660] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 152.570685][ T9660] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.591659][ T9676] syzkaller1: entered promiscuous mode [ 152.598217][ T9676] syzkaller1: entered allmulticast mode [ 152.623417][ T9685] team0: Device ip6gre1 is up. Set it down before adding it as a team port [ 152.727428][ T8137] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 152.737527][ T8137] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.790605][ T8137] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 152.806978][ T8137] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.825047][ T8137] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 152.833604][ T8137] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.842115][ T8137] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 152.850453][ T8137] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.880728][ T9691] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1040'. [ 153.010912][ T8137] tipc: Resetting bearer [ 153.053548][ T9696] pim6reg527: entered allmulticast mode [ 153.240383][ T9711] batadv_slave_0: entered promiscuous mode [ 153.326139][ T9711] batman_adv: batadv0: Adding interface: macsec3 [ 153.390130][ T9729] netlink: 'syz.4.1048': attribute type 1 has an invalid length. [ 153.395426][ T9711] batman_adv: batadv0: The MTU of interface macsec3 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 153.462133][ T9711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 153.481274][ T9711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.492554][ T9711] batman_adv: batadv0: Interface activated: macsec3 [ 153.538827][ T9718] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1048'. [ 153.603565][ T9] IPVS: starting estimator thread 0... [ 153.665017][ T9729] 8021q: adding VLAN 0 to HW filter on device bond6 [ 153.672658][ T9730] bond6: option lacp_active: mode dependency failed, not supported in mode balance-alb(6) [ 153.724939][ T9739] IPVS: using max 36 ests per chain, 86400 per kthread [ 154.556929][ T9785] netlink: 'syz.1.1066': attribute type 8 has an invalid length. [ 154.744219][ T9806] __nla_validate_parse: 4 callbacks suppressed [ 154.767316][ T9806] netlink: 996 bytes leftover after parsing attributes in process `syz.1.1073'. [ 154.811848][ T9805] netlink: 996 bytes leftover after parsing attributes in process `syz.1.1073'. [ 154.928563][ T9816] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1077'. [ 154.946603][ T9821] xt_TPROXY: Can be used only with -p tcp or -p udp [ 154.958481][ T9816] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1077'. [ 155.061822][ T9821] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1080'. [ 155.177232][ T9833] tipc: Started in network mode [ 155.182282][ T9833] tipc: Node identity f2948fbd06be, cluster identity 4711 [ 155.202126][ T9833] tipc: Enabled bearer , priority 0 [ 155.220975][ T9828] syzkaller0: entered promiscuous mode [ 155.248306][ T9828] syzkaller0: entered allmulticast mode [ 155.306872][ T9828] tipc: Resetting bearer [ 155.331816][ T9827] tipc: Resetting bearer [ 155.346751][ T9845] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1086'. [ 155.387057][ T9827] tipc: Disabling bearer [ 155.405362][ T9847] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1088'. [ 155.552741][ T9854] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1089'. [ 155.557861][ T9856] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1091'. [ 155.657181][ T9856] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1091'. [ 155.720867][ T9865] bridge0: port 3(vlan2) entered blocking state [ 155.745985][ T9865] bridge0: port 3(vlan2) entered disabled state [ 155.752518][ T9865] vlan2: entered allmulticast mode [ 155.783821][ T9865] bridge0: entered allmulticast mode [ 155.816746][ T9865] vlan2: left allmulticast mode [ 155.821763][ T9865] bridge0: left allmulticast mode [ 155.860807][ T9877] net_ratelimit: 7 callbacks suppressed [ 155.860826][ T9877] openvswitch: netlink: IP tunnel dst address not specified [ 156.037722][ T9885] netlink: 'syz.1.1102': attribute type 2 has an invalid length. [ 156.073848][ T9887] netlink: 'syz.0.1103': attribute type 7 has an invalid length. [ 156.112330][ T9887] netlink: 'syz.0.1103': attribute type 8 has an invalid length. [ 156.305545][ T9901] netlink: 'syz.2.1108': attribute type 1 has an invalid length. [ 156.675486][ T9919] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 156.823922][ T9930] netlink: 'syz.2.1117': attribute type 6 has an invalid length. [ 157.297965][ T9962] bond5: option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 157.320886][ T9962] bond5 (unregistering): Released all slaves [ 157.363835][ T9970] : entered promiscuous mode [ 157.535094][ T9980] C: renamed from lo (while UP) [ 157.650355][ T9982] macvtap2: entered allmulticast mode [ 157.666104][ T9982] veth0_macvtap: entered allmulticast mode [ 157.711463][T10000] af_packet: tpacket_rcv: packet too big, clamped from 216 to 4294967272. macoff=96 [ 157.728624][T10000] netlink: 'syz.4.1135': attribute type 21 has an invalid length. [ 157.860934][T10011] IPv6: sit1: Disabled Multicast RS [ 157.870255][T10011] sit1: entered allmulticast mode [ 157.962658][T10020] veth1_macvtap: left promiscuous mode [ 157.985494][T10020] veth1_macvtap: entered promiscuous mode [ 158.092546][T10032] netlink: 'syz.3.1144': attribute type 1 has an invalid length. [ 158.132618][T10032] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 158.140420][T10037] tipc: New replicast peer: 255.255.255.255 [ 158.162001][T10037] tipc: Enabled bearer , priority 10 [ 158.207206][T10042] 8021q: adding VLAN 0 to HW filter on device bond1 [ 158.237882][T10042] bond_slave_0: entered promiscuous mode [ 158.243810][T10042] bond_slave_1: entered promiscuous mode [ 158.259683][T10042] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 158.269658][T10042] bond1: (slave macvlan0): unknown ethtool speed (30000) for port 1 (set it to 0) [ 158.279187][T10042] bond1: (slave macvlan0): speed changed to 0 on port 1 [ 158.287480][T10042] bond1: (slave macvlan0): Enslaving as a backup interface with an up link [ 158.446957][T10056] gretap1: entered promiscuous mode [ 158.452406][T10056] gretap1: entered allmulticast mode [ 158.526478][T10060] netlink: 'syz.3.1152': attribute type 33 has an invalid length. [ 158.563661][T10060] bond4: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 158.588906][T10060] bond4 (unregistering): Released all slaves [ 158.623734][T10067] IPv6: sit1: Disabled Multicast RS [ 158.640600][T10059] syzkaller0: entered promiscuous mode [ 158.646459][T10059] syzkaller0: entered allmulticast mode [ 159.076284][T10102] netlink: 'syz.2.1166': attribute type 83 has an invalid length. [ 159.158556][T10106] bond4: (slave bond_slave_1): Device is not our slave [ 159.166428][T10106] bond4: option active_slave: invalid value (bond_slave_1) [ 159.188723][T10106] bond4 (unregistering): Released all slaves [ 159.214133][T10111] netlink: 'syz.3.1170': attribute type 11 has an invalid length. [ 159.252137][T10115] netlink: 'syz.3.1170': attribute type 11 has an invalid length. [ 159.335210][T10119] Bluetooth: MGMT ver 1.23 [ 159.569859][T10143] tipc: Enabled bearer , priority 13 [ 159.715108][T10149] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 159.910915][T10163] __nla_validate_parse: 28 callbacks suppressed [ 159.910932][T10163] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1183'. [ 159.996137][T10172] tipc: Enabling of bearer rejected, failed to enable media [ 160.161390][T10186] netlink: 'syz.0.1189': attribute type 7 has an invalid length. [ 160.306782][T10180] delete_channel: no stack [ 160.434964][T10198] bond2 (unregistering): Released all slaves [ 160.520672][T10201] ip6tnl1: entered promiscuous mode [ 160.528448][T10201] ip6tnl1: entered allmulticast mode [ 160.685902][ T984] tipc: Node number set to 3758096386 [ 160.915889][T10241] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1203'. [ 161.181476][T10252] validate_nla: 2 callbacks suppressed [ 161.181495][T10252] netlink: 'syz.2.1207': attribute type 21 has an invalid length. [ 161.205386][T10252] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1207'. [ 161.330763][T10259] tipc: Enabled bearer , priority 0 [ 161.339926][T10259] syzkaller0: entered promiscuous mode [ 161.347877][T10259] syzkaller0: entered allmulticast mode [ 161.393206][T10258] tipc: Resetting bearer [ 161.424980][T10258] tipc: Disabling bearer [ 161.437500][T10263] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1212'. [ 161.475167][T10263] tipc: Enabled bearer , priority 2 [ 161.607473][T10278] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1218'. [ 161.621988][T10278] netlink: 176 bytes leftover after parsing attributes in process `syz.4.1218'. [ 161.636812][T10278] netlink: 'syz.4.1218': attribute type 5 has an invalid length. [ 161.649534][T10278] syzkaller0: left promiscuous mode [ 161.699632][T10278] syzkaller0: left allmulticast mode [ 161.727596][T10278] tipc: Resetting bearer [ 161.751152][T10287] ieee802154 phy0 wpan0: encryption failed: -22 [ 161.808396][T10290] tipc: Enabled bearer , priority 0 [ 161.829929][T10290] syzkaller0: entered promiscuous mode [ 161.839549][T10290] syzkaller0: entered allmulticast mode [ 161.867406][T10290] netlink: 'syz.3.1222': attribute type 1 has an invalid length. [ 161.891883][T10290] tipc: Resetting bearer [ 161.918710][T10289] tipc: Resetting bearer [ 161.948056][T10289] tipc: Disabling bearer [ 161.979729][ T50] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 162.263265][T10326] syzkaller0: entered promiscuous mode [ 162.270351][T10326] syzkaller0: entered allmulticast mode [ 162.325422][ T998] tipc: Subscription rejected, illegal request [ 162.388894][T10331] Unsupported ieee802154 address type: 0 [ 162.615156][ T8421] tipc: Node number set to 233155661 [ 162.896892][T10348] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1238'. [ 162.918021][T10340] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1235'. [ 162.990804][T10354] geneve3: entered promiscuous mode [ 162.996133][T10354] geneve3: entered allmulticast mode [ 163.009748][T10354] tipc: Resetting bearer [ 163.017682][T10354] tipc: Enabling of bearer rejected, already enabled [ 163.034465][ T65] netdevsim netdevsim4 ÿÿÿÿÿÿ: set [1, 2] type 2 family 0 port 19999 - 0 [ 163.043412][ T65] netdevsim netdevsim4 netdevsim1: set [1, 2] type 2 family 0 port 19999 - 0 [ 163.055885][ T984] syz2: Port: 1 Link ACTIVE [ 163.055897][ T65] netdevsim netdevsim4 netdevsim2: set [1, 2] type 2 family 0 port 19999 - 0 [ 163.055931][ T65] netdevsim netdevsim4 netdevsim3: set [1, 2] type 2 family 0 port 19999 - 0 [ 163.160511][T10362] tipc: Enabled bearer , priority 0 [ 163.173149][T10362] syzkaller0: entered promiscuous mode [ 163.191587][T10362] syzkaller0: entered allmulticast mode [ 163.258561][T10362] tipc: Resetting bearer [ 163.290157][T10361] tipc: Resetting bearer [ 163.331189][T10361] tipc: Disabling bearer [ 163.392359][T10369] vlan3: entered allmulticast mode [ 163.398716][T10369] hsr0: entered allmulticast mode [ 163.404824][T10369] hsr_slave_0: entered allmulticast mode [ 163.410593][T10369] hsr_slave_1: entered allmulticast mode [ 163.663668][T10394] A link change request failed with some changes committed already. Interface gre1 may have been left with an inconsistent configuration, please check. [ 163.694133][T10338] tipc: Resetting bearer [ 163.701745][ T8421] syz2: Port: 1 Link DOWN [ 163.758738][T10403] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1254'. [ 163.768501][T10403] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1254'. [ 163.779249][T10403] netlink: 'syz.2.1254': attribute type 15 has an invalid length. [ 164.150147][T10430] veth0: entered promiscuous mode [ 164.270733][T10434] syzkaller0: entered promiscuous mode [ 164.280906][T10434] syzkaller0: entered allmulticast mode [ 164.322980][T10438] netlink: 'syz.4.1263': attribute type 1 has an invalid length. [ 164.387876][T10438] 8021q: adding VLAN 0 to HW filter on device bond7 [ 164.426199][T10444] netlink: 'syz.1.1264': attribute type 1 has an invalid length. [ 164.482466][T10444] bond4: (slave bridge1): making interface the new active one [ 164.495624][T10444] bond4: (slave bridge1): Enslaving as an active interface with an up link [ 164.513129][ T998] tipc: Resetting bearer [ 164.535179][T10428] veth0: left promiscuous mode [ 164.783754][T10475] bridge2: entered promiscuous mode [ 164.804949][T10475] bridge2: entered allmulticast mode [ 164.988360][T10487] __nla_validate_parse: 1 callbacks suppressed [ 164.988378][T10487] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1277'. [ 165.081621][T10495] netlink: 'syz.1.1278': attribute type 1 has an invalid length. [ 165.138186][T10495] 8021q: adding VLAN 0 to HW filter on device bond5 [ 165.170031][T10495] veth5: entered promiscuous mode [ 165.179437][T10495] bond5: (slave veth5): Enslaving as an active interface with an up link [ 165.267669][T10508] xt_limit: Overflow, try lower: 271964/0 [ 165.313745][T10510] A link change request failed with some changes committed already. Interface gre1 may have been left with an inconsistent configuration, please check. [ 165.447978][T10518] IPVS: Scheduler module ip_vs_sip not found [ 165.537059][T10517] IPVS: Scheduler module ip_vs_sip not found [ 165.941849][T10559] IPVS: set_ctl: invalid protocol: 44 0.0.0.0:20000 [ 165.951927][T10559] tipc: Enabled bearer , priority 0 [ 165.959782][T10559] syzkaller0: entered promiscuous mode [ 165.966382][T10559] syzkaller0: entered allmulticast mode [ 165.986108][T10559] tipc: Resetting bearer [ 165.994052][T10557] tipc: Resetting bearer [ 166.013032][T10557] tipc: Disabling bearer [ 166.047771][T10565] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1297'. [ 166.235738][T10569] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1299'. [ 166.402795][T10581] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 166.420215][T10583] netlink: 'syz.1.1302': attribute type 12 has an invalid length. [ 166.428382][T10583] netlink: 'syz.1.1302': attribute type 29 has an invalid length. [ 166.436574][T10583] netlink: 148 bytes leftover after parsing attributes in process `syz.1.1302'. [ 166.446992][T10583] netlink: 59 bytes leftover after parsing attributes in process `syz.1.1302'. [ 166.529168][T10586] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1304'. [ 166.598446][T10594] netlink: 'syz.1.1307': attribute type 83 has an invalid length. [ 166.850873][T10609] syzkaller1: entered promiscuous mode [ 166.870940][T10609] syzkaller1: entered allmulticast mode [ 166.925870][T10611] geneve2: entered promiscuous mode [ 166.932292][T10611] geneve2: entered allmulticast mode [ 166.942732][ T8137] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 19999 - 0 [ 166.956198][ T8137] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 19999 - 0 [ 166.976961][T10611] rdma_rxe: rxe_newlink: failed to add vxcan1 [ 166.995120][ T8137] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 19999 - 0 [ 167.020988][T10611] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 167.038507][T10611] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.116605][T10626] bond2: (slave bond_slave_1): Device is not our slave [ 167.123699][T10626] bond2: option active_slave: invalid value (bond_slave_1) [ 167.139808][T10626] bond2 (unregistering): Released all slaves [ 167.208969][T10625] bond4: option packets_per_slave: invalid value (18446744073709551615) [ 167.217806][T10625] bond4: option packets_per_slave: allowed values 0 - 65535 [ 167.228239][T10625] bond4 (unregistering): Released all slaves [ 167.408683][T10643] netlink: 'syz.3.1320': attribute type 11 has an invalid length. [ 167.417720][T10643] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1320'. [ 167.528368][T10646] netlink: 'syz.3.1321': attribute type 3 has an invalid length. [ 167.542795][T10646] netlink: 'syz.3.1321': attribute type 3 has an invalid length. [ 167.552407][T10646] netlink: 'syz.3.1321': attribute type 64 has an invalid length. [ 167.560908][T10646] netlink: 5 bytes leftover after parsing attributes in process `syz.3.1321'. [ 167.639418][T10650] wg1: entered promiscuous mode [ 167.654492][T10650] wg1: entered allmulticast mode [ 167.662348][T10650] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1323'. [ 167.899683][T10666] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1326'. [ 168.422902][T10655] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 168.497721][T10655] geneve2: left promiscuous mode [ 168.503961][T10655] geneve2: left allmulticast mode [ 168.553119][T10655] gretap1: left promiscuous mode [ 168.558401][T10655] gretap1: left allmulticast mode [ 168.567177][T10655] vlan3: left allmulticast mode [ 168.572196][T10655] hsr0: left allmulticast mode [ 168.578013][T10655] hsr_slave_0: left allmulticast mode [ 168.583423][T10655] hsr_slave_1: left allmulticast mode [ 168.659520][T10675] bridge0: port 1(ipvlan2) entered blocking state [ 168.667041][T10675] bridge0: port 1(ipvlan2) entered disabled state [ 168.673855][T10675] ipvlan2: entered allmulticast mode [ 168.679925][T10675] bridge0: entered allmulticast mode [ 168.689806][T10675] ipvlan2: left allmulticast mode [ 168.696256][T10675] bridge0: left allmulticast mode [ 168.732384][ T8137] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.762338][ T8137] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.773791][ T8137] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.797645][ T8137] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.142540][T10611] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 169.161730][T10611] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.172025][T10611] netdevsim netdevsim1 eth2 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 169.255271][T10611] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 169.266436][T10611] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.277379][T10611] netdevsim netdevsim1 eth1 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 169.332835][T10611] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 169.343573][T10611] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.354845][T10611] netdevsim netdevsim1 eth0 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 169.403470][T10729] netlink: 'syz.2.1350': attribute type 21 has an invalid length. [ 169.411878][T10729] IPv6: NLM_F_CREATE should be specified when creating new route [ 169.483588][ T998] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 169.492835][ T998] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 19999 - 0 [ 169.505533][ T998] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 169.513781][ T998] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 169.522891][ T998] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 19999 - 0 [ 169.533582][ T998] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 169.557589][ T12] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 169.566695][ T12] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 19999 - 0 [ 169.576051][ T12] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 169.600932][ T12] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 169.610255][ T12] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 19999 - 0 [ 169.626510][ T12] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 169.832950][T10752] netlink: 'syz.2.1357': attribute type 21 has an invalid length. [ 169.842520][T10752] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 169.849807][T10752] IPv6: NLM_F_CREATE should be set when creating new route [ 169.857190][T10752] IPv6: NLM_F_CREATE should be set when creating new route [ 169.864458][T10752] IPv6: NLM_F_CREATE should be set when creating new route [ 170.014132][T10759] netlink: 'syz.4.1359': attribute type 5 has an invalid length. [ 170.081169][T10767] __nla_validate_parse: 10 callbacks suppressed [ 170.081186][T10767] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1359'. [ 170.102195][T10767] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1359'. [ 170.241660][T10771] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1361'. [ 170.289339][T10774] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 170.522776][T10792] tipc: Resetting bearer [ 170.552322][ T5889] syz2: Port: 1 Link ACTIVE [ 170.598135][T10793] tipc: Resetting bearer [ 170.605451][ T5928] syz2: Port: 1 Link DOWN [ 170.696716][T10800] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1371'. [ 170.757590][ T12] tipc: Resetting bearer [ 170.783139][T10805] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1373'. [ 170.992469][T10816] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 171.023274][T10817] netlink: 'syz.0.1375': attribute type 3 has an invalid length. [ 171.032182][T10817] netlink: 766 bytes leftover after parsing attributes in process `syz.0.1375'. [ 171.239877][T10827] netlink: 11 bytes leftover after parsing attributes in process `syz.2.1380'. [ 171.269868][T10827] tipc: Enabled bearer , priority 0 [ 171.277584][T10827] syzkaller0: entered promiscuous mode [ 171.283209][T10827] syzkaller0: entered allmulticast mode [ 171.295414][T10826] tipc: Resetting bearer [ 171.322782][T10826] tipc: Disabling bearer [ 171.577901][T10849] syzkaller0: entered promiscuous mode [ 171.583412][T10849] syzkaller0: entered allmulticast mode [ 171.857785][T10866] tipc: Enabling of bearer rejected, already enabled [ 171.904035][T10868] syzkaller0: entered promiscuous mode [ 171.911044][T10868] syzkaller0: entered allmulticast mode [ 171.952463][T10870] validate_nla: 1 callbacks suppressed [ 171.952479][T10870] netlink: 'syz.4.1390': attribute type 2 has an invalid length. [ 172.052797][T10872] netlink: 'syz.3.1392': attribute type 3 has an invalid length. [ 172.072538][T10879] vlan2: entered promiscuous mode [ 172.087113][T10877] netlink: 528 bytes leftover after parsing attributes in process `syz.3.1392'. [ 172.100801][T10877] netlink: 8776 bytes leftover after parsing attributes in process `syz.3.1392'. [ 172.126647][T10877] netlink: 528 bytes leftover after parsing attributes in process `syz.3.1392'. [ 172.460016][T10912] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 2, id = 0 [ 172.658514][T10922] netlink: 'syz.0.1403': attribute type 1 has an invalid length. [ 172.695983][T10923] netlink: 'syz.0.1403': attribute type 1 has an invalid length. [ 172.705986][T10923] netlink: 'syz.0.1403': attribute type 11 has an invalid length. [ 172.714332][T10922] netlink: 'syz.0.1403': attribute type 11 has an invalid length. [ 172.730258][T10929] syzkaller0: entered promiscuous mode [ 172.744638][T10929] syzkaller0: entered allmulticast mode [ 172.757830][T10932] tipc: Enabling of bearer rejected, failed to enable media [ 172.810678][T10925] syzkaller0: entered promiscuous mode [ 172.818202][T10925] syzkaller0: entered allmulticast mode [ 173.175081][T10956] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 173.280427][T10962] netlink: 'syz.3.1413': attribute type 11 has an invalid length. [ 173.577105][T10970] syzkaller0: entered promiscuous mode [ 173.619495][T10970] syzkaller0: entered allmulticast mode [ 174.978194][T10982] syzkaller1: entered promiscuous mode [ 174.983712][T10982] syzkaller1: entered allmulticast mode [ 175.200743][T11018] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 175.330573][T11024] __nla_validate_parse: 140 callbacks suppressed [ 175.330592][T11024] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1429'. [ 175.427272][T11024] bond5: (slave gre0): Device is not bonding slave [ 175.439426][T11024] bond5: option active_slave: invalid value (gre0) [ 175.453937][T11024] bond5 (unregistering): Released all slaves [ 175.569855][T11047] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1435'. [ 175.593945][T11046] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1434'. [ 175.621021][T11032] netlink: 'syz.0.1431': attribute type 10 has an invalid length. [ 175.698952][T11032] team0: Port device dummy0 added [ 175.831242][T11057] tipc: Enabled bearer , priority 0 [ 175.852368][T11057] syzkaller0: entered promiscuous mode [ 175.877452][T11057] syzkaller0: entered allmulticast mode [ 176.015896][T11057] tipc: Resetting bearer [ 176.055025][T11056] tipc: Resetting bearer [ 176.086207][T11056] tipc: Disabling bearer [ 176.163453][T11080] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1442'. [ 176.173034][T11080] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1442'. [ 176.192349][T11024] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 176.281770][T11082] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1443'. [ 176.310211][T11082] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1443'. [ 176.422030][ T51] block nbd0: Possible stuck request ffff888024ea0000: control (read@0,1024B). Runtime 30 seconds [ 176.436658][ T51] block nbd0: Possible stuck request ffff888024ea01c0: control (read@1024,1024B). Runtime 30 seconds [ 176.448520][ T51] block nbd0: Possible stuck request ffff888024ea0380: control (read@2048,1024B). Runtime 30 seconds [ 176.460030][ T51] block nbd0: Possible stuck request ffff888024ea0540: control (read@3072,1024B). Runtime 30 seconds [ 176.722199][T11110] openvswitch: netlink: Missing valid actions attribute. [ 176.774363][T11110] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 176.856689][T11110] openvswitch: netlink: Missing valid actions attribute. [ 176.863896][T11110] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 176.973937][T11127] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1459'. [ 176.984177][T11127] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1459'. [ 177.003219][T11127] tipc: Enabled bearer , priority 0 [ 177.014970][T11124] wg2: entered promiscuous mode [ 177.019918][T11124] wg2: entered allmulticast mode [ 177.057074][T11127] tipc: Resetting bearer [ 177.083879][T11127] tipc: Disabling bearer [ 177.226635][T11144] tipc: Enabled bearer , priority 0 [ 177.235129][T11144] syzkaller0: entered promiscuous mode [ 177.240700][T11144] syzkaller0: entered allmulticast mode [ 177.278882][T11144] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1463'. [ 177.569290][T11148] netlink: 'syz.0.1465': attribute type 10 has an invalid length. [ 177.679862][T11143] tipc: Resetting bearer [ 177.726596][T11143] tipc: Disabling bearer [ 178.181503][T11190] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 178.372883][T11208] netlink: 'syz.3.1485': attribute type 1 has an invalid length. [ 178.585637][T11220] 8021q: adding VLAN 0 to HW filter on device bond8 [ 178.636219][T11225] syzkaller0: entered promiscuous mode [ 178.641739][T11225] syzkaller0: entered allmulticast mode [ 178.702435][T11235] veth0: entered promiscuous mode [ 178.707196][T11225] netlink: 'syz.1.1490': attribute type 11 has an invalid length. [ 178.755411][T11238] veth0: left promiscuous mode [ 179.010180][T11260] syzkaller1: entered promiscuous mode [ 179.016574][T11260] syzkaller1: entered allmulticast mode [ 179.659530][T11294] openvswitch: netlink: Missing key (keys=40, expected=80) [ 179.672794][T11293] netlink: 'syz.2.1513': attribute type 21 has an invalid length. [ 179.689545][T11293] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 179.713373][T11295] vlan1: entered promiscuous mode [ 179.722894][T11295] vlan1: entered allmulticast mode [ 179.755816][T11295] gretap0: entered allmulticast mode [ 179.945121][T11314] tipc: Enabled bearer , priority 0 [ 179.969162][T11314] syzkaller0: entered promiscuous mode [ 179.984499][T11314] syzkaller0: entered allmulticast mode [ 180.017274][T11314] tipc: Resetting bearer [ 180.032455][T11323] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 180.058155][T11323] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 180.101150][T11313] tipc: Resetting bearer [ 180.125792][T11313] tipc: Disabling bearer [ 180.278898][T11337] netlink: 'syz.4.1526': attribute type 1 has an invalid length. [ 180.487791][T11356] __nla_validate_parse: 10 callbacks suppressed [ 180.487808][T11356] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1531'. [ 180.562124][T11364] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1532'. [ 180.571589][T11364] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1532'. [ 180.776203][T11376] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 180.969971][T11390] netlink: 576 bytes leftover after parsing attributes in process `syz.4.1541'. [ 181.006290][T11388] netlink: 576 bytes leftover after parsing attributes in process `syz.4.1541'. [ 181.031415][T11396] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1543'. [ 181.078842][T11400] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1542'. [ 181.088627][T11400] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1542'. [ 181.229244][T11406] netlink: 176 bytes leftover after parsing attributes in process `syz.4.1546'. [ 181.241228][T11408] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1549'. [ 181.250708][T11406] ip6gretap0: entered promiscuous mode [ 181.459661][T11424] netlink: 'syz.3.1553': attribute type 75 has an invalid length. [ 181.511163][T11426] x_tables: duplicate underflow at hook 2 [ 181.675506][T11441] syzkaller0: entered promiscuous mode [ 181.691380][T11441] syzkaller0: entered allmulticast mode [ 181.722579][T11441] IPv6: sit1: Disabled Multicast RS [ 181.863754][T11455] netlink: 'syz.1.1564': attribute type 1 has an invalid length. [ 181.871617][T11455] netlink: 'syz.1.1564': attribute type 4 has an invalid length. [ 182.047576][T11466] syzkaller0: entered promiscuous mode [ 182.053093][T11466] syzkaller0: entered allmulticast mode [ 182.075477][T11466] tipc: Enabled bearer , priority 0 [ 182.085408][T11471] netlink: 'syz.1.1568': attribute type 1 has an invalid length. [ 182.110171][T11465] tipc: Resetting bearer [ 182.158046][T11465] tipc: Disabling bearer [ 182.488284][T11495] veth0_macvtap: left promiscuous mode [ 182.642028][ T50] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 182.671537][ T50] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 182.724349][ T50] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 182.763027][ T50] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 183.144030][T11545] 8021q: VLANs not supported on wg1 [ 183.320546][T11550] bond6: Unable to set up delay as MII monitoring is disabled [ 183.334769][T11550] bond6 (unregistering): Released all slaves [ 183.413403][T11548] tipc: Enabling of bearer rejected, failed to enable media [ 183.466982][T11567] xt_hashlimit: max too large, truncated to 1048576 [ 183.563410][T11574] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 183.576249][T11574] tipc: Enabled bearer , priority 10 [ 183.602975][T11579] netlink: 'syz.4.1600': attribute type 4 has an invalid length. [ 183.787182][T11590] bond10: peer notification delay (1164) is not a multiple of miimon (100), value rounded to 1100 ms [ 183.802631][T11590] bond10: entered promiscuous mode [ 183.815694][T11590] bond10: entered allmulticast mode [ 183.821544][T11590] 8021q: adding VLAN 0 to HW filter on device bond10 [ 183.957855][T11598] 8021q: adding VLAN 0 to HW filter on device bond5 [ 184.001708][T11598] 8021q: adding VLAN 0 to HW filter on device bond5 [ 184.012404][T11598] bond5: (slave vxcan5): The slave device specified does not support setting the MAC address [ 184.026290][T11598] bond5: (slave vxcan5): Error -95 calling set_mac_address [ 184.217149][T11617] netlink: 'syz.1.1611': attribute type 83 has an invalid length. [ 184.439787][T11627] netlink: 'syz.3.1615': attribute type 83 has an invalid length. [ 184.917167][T11672] netlink: 'syz.1.1629': attribute type 1 has an invalid length. [ 185.032062][T11672] 8021q: adding VLAN 0 to HW filter on device bond6 [ 185.237684][T11685] syzkaller0: entered promiscuous mode [ 185.243203][T11685] syzkaller0: entered allmulticast mode [ 185.454083][T11704] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 185.526590][T11707] __nla_validate_parse: 23 callbacks suppressed [ 185.526608][T11707] netlink: 172 bytes leftover after parsing attributes in process `syz.3.1638'. [ 186.768757][T11713] vlan2: entered allmulticast mode [ 186.843245][T11721] netlink: 'syz.2.1644': attribute type 30 has an invalid length. [ 186.922130][T11726] netlink: 268 bytes leftover after parsing attributes in process `syz.3.1645'. [ 187.028938][T11732] team0: Device ip6gre1 is of different type [ 187.084365][T11739] netlink: 'syz.2.1649': attribute type 1 has an invalid length. [ 187.102492][T11739] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1649'. [ 187.133249][T11738] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1647'. [ 187.145504][T11744] IPVS: set_ctl: invalid protocol: 50 224.0.0.2:20001 [ 187.152294][T11738] netlink: 220 bytes leftover after parsing attributes in process `syz.0.1647'. [ 187.566031][T11770] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1655'. [ 187.570714][T11774] vlan3: entered promiscuous mode [ 187.580293][T11774] bridge0: entered promiscuous mode [ 187.801119][T11785] netlink: 'syz.4.1662': attribute type 6 has an invalid length. [ 187.827194][T11791] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 187.841730][T11785] netlink: 'syz.4.1662': attribute type 39 has an invalid length. [ 187.882047][T11789] tipc: Enabled bearer , priority 0 [ 187.896582][T11789] syzkaller0: entered promiscuous mode [ 187.902094][T11789] syzkaller0: entered allmulticast mode [ 187.942540][T11789] tipc: Resetting bearer [ 188.002005][T11788] tipc: Resetting bearer [ 188.015803][T11808] netlink: 'syz.1.1669': attribute type 33 has an invalid length. [ 188.040356][T11788] tipc: Disabling bearer [ 188.130105][T11804] syzkaller0: entered promiscuous mode [ 188.137386][T11804] syzkaller0: entered allmulticast mode [ 188.146922][T11804] tipc: Resetting bearer [ 188.319929][T11825] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1675'. [ 188.584183][T11849] smc: net device gre0 applied user defined pnetid SYZ1 [ 188.592720][T11850] smc: net device gre0 erased user defined pnetid SYZ1 [ 188.896776][T11868] netlink: 'syz.1.1688': attribute type 1 has an invalid length. [ 188.930085][T11868] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1688'. [ 189.352807][T11890] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.1692'. [ 189.795343][T11920] tipc: Resetting bearer [ 189.803026][T11924] netlink: 'syz.3.1704': attribute type 1 has an invalid length. [ 189.849634][T11927] batman_adv: batadv0: adding TT local entry ba:e1:05:00:07:00 to non-existent VLAN 1280 [ 189.876303][T11924] 8021q: adding VLAN 0 to HW filter on device bond6 [ 189.887001][T11922] tipc: Enabling of bearer rejected, already enabled [ 189.935425][T11919] tipc: Resetting bearer [ 189.950059][T11934] vlan4: entered promiscuous mode [ 189.955392][T11934] bond6: entered promiscuous mode [ 189.960697][T11934] vlan4: entered allmulticast mode [ 189.968668][T11934] bond6: entered allmulticast mode [ 190.013572][T11924] bond6: (slave gretap2): making interface the new active one [ 190.021279][T11924] gretap2: entered promiscuous mode [ 190.026910][T11924] gretap2: entered allmulticast mode [ 190.035526][T11924] bond6: (slave gretap2): Enslaving as an active interface with an up link [ 190.046990][T11947] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1707'. [ 190.108264][T11947] bond11: (slave sit0): Device is not bonding slave [ 190.114976][T11947] bond11: option active_slave: invalid value (sit0) [ 190.126239][T11947] bond11 (unregistering): Released all slaves [ 190.322370][T11967] ipt_REJECT: TCP_RESET invalid for non-tcp [ 190.590368][T11993] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 191.002392][T12019] 8021q: adding VLAN 0 to HW filter on device bond7 [ 191.010973][ T2902] tipc: Resetting bearer [ 191.101166][T12031] vlan5: entered allmulticast mode [ 191.118820][T12031] bond7: entered allmulticast mode [ 191.167535][T12036] bridge0: port 2(bridge_slave_1) entered disabled state [ 191.471761][T12053] __nla_validate_parse: 2 callbacks suppressed [ 191.471780][T12053] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1741'. [ 191.508420][T12059] netlink: 'syz.1.1742': attribute type 1 has an invalid length. [ 191.575433][T12064] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 191.603909][T12064] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1744'. [ 192.125253][T12096] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1755'. [ 192.170417][T12096] 8021q: adding VLAN 0 to HW filter on device bond7 [ 192.190053][T12102] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1757'. [ 192.218706][T12096] vlan2: entered allmulticast mode [ 192.223875][T12096] bond7: entered allmulticast mode [ 192.385263][T12113] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1761'. [ 192.393557][T12115] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1762'. [ 192.409496][T12115] netlink: 'syz.0.1762': attribute type 3 has an invalid length. [ 192.462987][T12117] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1763'. [ 193.936177][T12113] netlink: 11 bytes leftover after parsing attributes in process `syz.4.1761'. [ 194.184345][T12113] netlink: 11 bytes leftover after parsing attributes in process `syz.4.1761'. [ 194.364561][ T1301] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 194.745032][T12122] netlink: 11 bytes leftover after parsing attributes in process `syz.4.1761'. [ 196.209744][T12140] netlink: 'syz.4.1767': attribute type 1 has an invalid length. [ 196.419192][ T5842] Bluetooth: hci1: command 0x0406 tx timeout [ 196.425444][ T5835] Bluetooth: hci3: command 0x0406 tx timeout [ 196.431483][ T5835] Bluetooth: hci0: command 0x0406 tx timeout [ 196.437365][T12155] tipc: Resetting bearer [ 196.437550][ T5150] Bluetooth: hci2: command 0x0406 tx timeout [ 196.499840][T12159] syzkaller0: entered promiscuous mode [ 196.514411][T12159] syzkaller0: entered allmulticast mode [ 196.960319][T12189] __nla_validate_parse: 5 callbacks suppressed [ 196.960337][T12189] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1779'. [ 197.051659][T12203] netlink: 'syz.2.1783': attribute type 11 has an invalid length. [ 197.062020][T12202] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1784'. [ 197.131491][T12209] netlink: 'syz.3.1784': attribute type 9 has an invalid length. [ 197.139754][T12209] netlink: 'syz.3.1784': attribute type 6 has an invalid length. [ 197.148341][T12206] netlink: 80 bytes leftover after parsing attributes in process `syz.4.1786'. [ 197.164604][T12206] netlink: 80 bytes leftover after parsing attributes in process `syz.4.1786'. [ 197.283195][T12220] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1789'. [ 197.323037][T12218] netlink: 'syz.4.1788': attribute type 5 has an invalid length. [ 197.448373][T12229] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 197.459246][T12230] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 198.917267][T12237] netlink: 'syz.0.1791': attribute type 29 has an invalid length. [ 199.106769][T12252] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1794'. [ 199.216215][T12261] tipc: Resetting bearer [ 199.234887][ T8416] syz2: Port: 1 Link ACTIVE [ 199.301676][T12264] tipc: Resetting bearer [ 199.316963][ T8416] syz2: Port: 1 Link DOWN [ 199.411430][T12274] syzkaller0: entered promiscuous mode [ 199.424140][T12274] syzkaller0: entered allmulticast mode [ 199.611407][T12290] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1805'. [ 199.789187][T12299] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1808'. [ 199.902442][T12305] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 199.909782][T12305] IPv6: NLM_F_CREATE should be set when creating new route [ 199.910401][T12307] netlink: 'syz.2.1812': attribute type 4 has an invalid length. [ 200.043815][ T50] tipc: Resetting bearer [ 200.098663][T12316] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1815'. [ 200.222862][T12327] netlink: 'syz.1.1815': attribute type 2 has an invalid length. [ 200.639974][T12353] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.1823'. [ 200.828902][T12364] tap0: tun_chr_ioctl cmd 1074025677 [ 200.834651][T12364] tap0: linktype set to 65534 [ 201.063232][T12379] netlink: 'syz.1.1831': attribute type 4 has an invalid length. [ 201.102553][T12379] netlink: 'syz.1.1831': attribute type 2 has an invalid length. [ 201.295193][ T5881] page_pool_release_retry() stalled pool shutdown: id 35, 1 inflight 60 sec [ 201.555195][T12414] SET target dimension over the limit! [ 201.576450][T12421] SET target dimension over the limit! [ 201.681435][T12429] netlink: 'syz.4.1846': attribute type 1 has an invalid length. [ 201.702018][T12429] netlink: 'syz.4.1846': attribute type 7 has an invalid length. [ 201.730901][T12429] netlink: 'syz.4.1846': attribute type 8 has an invalid length. [ 201.756589][T12429] NCSI netlink: No device for ifindex 65584 [ 202.397894][T12449] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 203.380437][T12459] sctp: [Deprecated]: syz.1.1854 (pid 12459) Use of int in max_burst socket option deprecated. [ 203.380437][T12459] Use struct sctp_assoc_value instead [ 203.398224][T12461] __nla_validate_parse: 9 callbacks suppressed [ 203.398243][T12461] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1856'. [ 203.415754][T12463] netlink: 380 bytes leftover after parsing attributes in process `syz.2.1855'. [ 203.417858][T12468] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.1857'. [ 203.438913][T12463] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1855'. [ 203.452707][T12463] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1855'. [ 203.497704][T12468] netlink: 88 bytes leftover after parsing attributes in process `syz.4.1857'. [ 203.818340][T12499] netlink: 'syz.0.1864': attribute type 58 has an invalid length. [ 203.828769][T12499] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1864'. [ 204.103057][T12522] raw_sendmsg: syz.3.1871 forgot to set AF_INET. Fix it! [ 204.136978][T12522] netlink: 'syz.3.1871': attribute type 9 has an invalid length. [ 204.179951][T12528] netlink: 'syz.1.1873': attribute type 1 has an invalid length. [ 204.256579][T12533] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1874'. [ 204.380026][T12538] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1875'. [ 204.407660][T12538] tipc: Invalid UDP bearer configuration [ 204.407730][T12538] tipc: Enabling of bearer rejected, failed to enable media [ 204.452163][T12541] tipc: Resetting bearer [ 204.463830][ T8416] syz2: Port: 1 Link ACTIVE [ 204.470783][T12542] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1875'. [ 204.480397][T12542] tipc: Invalid UDP bearer configuration [ 204.480461][T12542] tipc: Enabling of bearer rejected, failed to enable media [ 204.561370][T12557] tipc: Resetting bearer [ 204.576920][ T8409] syz2: Port: 1 Link DOWN [ 205.207831][T12603] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 205.227750][T12604] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 205.322382][ T8137] tipc: Resetting bearer [ 205.653456][T12652] netlink: 'syz.0.1907': attribute type 2 has an invalid length. [ 205.773912][T12663] xt_l2tp: invalid flags combination: 8 [ 205.797396][ T5889] hid-generic 0005:0C45:1010.0002: unknown main item tag 0x1 [ 205.806246][ T5889] hid-generic 0005:0C45:1010.0002: ignoring exceeding usage max [ 205.815978][ T5889] hid-generic 0005:0C45:1010.0002: unknown main item tag 0x4 [ 205.823645][ T5889] hid-generic 0005:0C45:1010.0002: unknown main item tag 0x5 [ 205.831714][ T5889] hid-generic 0005:0C45:1010.0002: reserved main item tag 0xd [ 205.845546][ T5889] hid-generic 0005:0C45:1010.0002: hidraw0: BLUETOOTH HID v0.c3 Device [syz1] on aa:aa:aa:aa:aa:aa [ 206.179459][T12674] xt_nat: multiple ranges no longer supported [ 206.437920][T12691] netlink: 'syz.3.1914': attribute type 2 has an invalid length. [ 206.498000][ T51] block nbd0: Possible stuck request ffff888024ea0000: control (read@0,1024B). Runtime 60 seconds [ 206.509951][ T51] block nbd0: Possible stuck request ffff888024ea01c0: control (read@1024,1024B). Runtime 60 seconds [ 206.521524][ T51] block nbd0: Possible stuck request ffff888024ea0380: control (read@2048,1024B). Runtime 60 seconds [ 206.534066][ T51] block nbd0: Possible stuck request ffff888024ea0540: control (read@3072,1024B). Runtime 60 seconds [ 206.561961][T12691] : entered promiscuous mode [ 206.600694][T12698] netlink: 'syz.1.1922': attribute type 33 has an invalid length. [ 206.680283][T12698] bond8: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 206.728703][T12698] bond8 (unregistering): Released all slaves [ 207.295976][T12744] bond5: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 207.368033][T12754] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 207.936952][T12776] x_tables: ip6_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT/POSTROUTING [ 208.005450][T12779] syzkaller0: entered promiscuous mode [ 208.031177][T12779] syzkaller0: entered allmulticast mode [ 208.128886][T12783] netlink: 'syz.3.1945': attribute type 6 has an invalid length. [ 208.138442][T12783] netlink: 'syz.3.1945': attribute type 6 has an invalid length. [ 208.200770][T12780] openvswitch: netlink: Key type 234 is out of range max 32 [ 208.481399][T12810] netlink: 'syz.4.1953': attribute type 1 has an invalid length. [ 208.777448][T12825] netlink: 'syz.4.1958': attribute type 29 has an invalid length. [ 208.786133][T12825] __nla_validate_parse: 20 callbacks suppressed [ 208.786150][T12825] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1958'. [ 208.847773][T12827] netlink: 'syz.4.1958': attribute type 29 has an invalid length. [ 208.861824][T12829] rdma_rxe: rxe_newlink: failed to add vxcan1 [ 208.870691][T12827] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1958'. [ 208.872984][T12829] netlink: 'syz.0.1959': attribute type 1 has an invalid length. [ 208.926478][T12829] 8021q: adding VLAN 0 to HW filter on device bond2 [ 208.983126][T12831] veth7: entered promiscuous mode [ 208.990705][T12825] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1958'. [ 209.001303][T12825] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1958'. [ 209.170832][T12843] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1962'. [ 209.202284][T12469] netdevsim netdevsim4 ÿÿÿÿÿÿ: set [0, 0] type 1 family 0 port 8472 - 0 [ 209.212011][T12843] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1962'. [ 209.221972][T12469] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 209.243255][T12469] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 209.264271][T12469] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 209.329617][T12849] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1964'. [ 209.581491][T12869] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1972'. [ 209.592250][T12869] netlink: 'syz.3.1972': attribute type 30 has an invalid length. [ 209.609963][T12869] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1972'. [ 209.752084][T12881] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1974'. [ 210.288727][T12918] ip6gre2: entered allmulticast mode [ 210.695531][T12946] xt_nat: multiple ranges no longer supported [ 210.709287][T12949] IPVS: set_ctl: invalid protocol: 108 255.255.255.255:20003 [ 210.945431][T12974] xt_hashlimit: Unknown mode mask C4, kernel too old? [ 211.137206][T12985] bond8: (slave ip6gretap0): Device is not bonding slave [ 211.148869][T12985] bond8: option active_slave: invalid value (ip6gretap0) [ 211.158960][T12985] bond8 (unregistering): Released all slaves [ 211.662660][T13001] netlink: 'syz.2.2010': attribute type 1 has an invalid length. [ 212.078490][T13020] bond12: option packets_per_slave: invalid value (18446744073709551615) [ 212.087259][T13020] bond12: option packets_per_slave: allowed values 0 - 65535 [ 212.105647][T13020] bond12 (unregistering): Released all slaves [ 212.197700][T13025] pim6reg1: entered promiscuous mode [ 212.225877][T13025] pim6reg1: entered allmulticast mode [ 212.231667][T13035] netlink: 'syz.4.2023': attribute type 3 has an invalid length. [ 212.650958][T13073] macvtap1: entered promiscuous mode [ 212.686753][T13073] vlan0: entered promiscuous mode [ 212.687633][T13079] rdma_op ffff88802f3751f0 conn xmit_rdma 0000000000000000 [ 212.696538][T13073] macvtap1: entered allmulticast mode [ 212.721430][T13073] vlan0: entered allmulticast mode [ 212.728070][T13073] veth0_vlan: entered allmulticast mode [ 212.738935][ T5829] Bluetooth: hci4: command tx timeout [ 212.785231][T13081] bond8: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 212.820979][T13081] bond8 (unregistering): Released all slaves [ 213.128060][T13101] netlink: 'syz.4.2039': attribute type 1 has an invalid length. [ 213.235211][T13109] nftables ruleset with unbound chain [ 213.303265][T13106] 8021q: adding VLAN 0 to HW filter on device bond13 [ 213.316563][T13106] bond12: (slave bond13): making interface the new active one [ 213.325296][T13106] bond12: (slave bond13): Enslaving as an active interface with an up link [ 213.339334][T13101] 8021q: adding VLAN 0 to HW filter on device bond12 [ 213.598240][T13124] x_tables: duplicate underflow at hook 3 [ 213.624890][T13124] x_tables: duplicate underflow at hook 3 [ 213.776989][T13144] netlink: 'syz.4.2052': attribute type 4 has an invalid length. [ 213.902957][T13144] `: renamed from bond0 (while UP) [ 214.072811][T13164] __nla_validate_parse: 15 callbacks suppressed [ 214.072828][T13164] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2054'. [ 214.371245][T13185] IPv6: sit2: Disabled Multicast RS [ 214.402383][T13185] sit2: entered allmulticast mode [ 214.473180][T13203] netlink: 'syz.3.2063': attribute type 10 has an invalid length. [ 214.503538][T13204] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2064'. [ 214.518392][T13203] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2063'. [ 214.530261][T13203] batadv0: entered promiscuous mode [ 214.555092][T13203] batadv0: entered allmulticast mode [ 214.560808][T13203] bridge0: port 1(batadv0) entered blocking state [ 214.574568][T13203] bridge0: port 1(batadv0) entered disabled state [ 214.692776][T13215] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2068'. [ 214.746093][T13217] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2067'. [ 214.777035][T12466] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 214.787016][T12466] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 214.950746][T13236] tipc: Enabled bearer , priority 0 [ 214.982107][T13224] syzkaller0: entered promiscuous mode [ 214.995160][T13224] syzkaller0: entered allmulticast mode [ 215.258250][T13249] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 216.068638][ T8409] tipc: Node number set to 4096430013 [ 216.555561][T13236] tipc: Resetting bearer [ 216.564146][T13257] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2078'. [ 216.578677][T13257] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2078'. [ 216.588293][T13257] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2078'. [ 216.599606][T13223] tipc: Resetting bearer [ 216.643475][T13223] tipc: Disabling bearer [ 216.789943][T13270] macsec0: entered promiscuous mode [ 216.795941][T13270] macsec0: entered allmulticast mode [ 216.802331][T13270] veth1_macvtap: entered allmulticast mode [ 216.833458][T13270] macsec0: left promiscuous mode [ 216.849787][T13270] macsec0: left allmulticast mode [ 216.875890][T13270] veth1_macvtap: left allmulticast mode [ 217.162586][T13295] 8021q: VLANs not supported on gre0 [ 217.171523][T13298] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2095'. [ 217.373189][T13314] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2096'. [ 217.427253][T13316] : renamed from veth1_virt_wifi [ 217.627765][T13329] syzkaller1: entered promiscuous mode [ 217.646601][T13329] syzkaller1: entered allmulticast mode [ 218.069732][T13330] wg1: left promiscuous mode [ 218.074517][T13330] wg1: left allmulticast mode [ 218.087596][T13330] wg2: left promiscuous mode [ 218.096780][T13330] wg2: left allmulticast mode [ 218.122556][T13330] bridge_slave_0: left promiscuous mode [ 218.141827][T13330] bridge0: port 1(bridge_slave_0) entered disabled state [ 218.173374][T13330] bridge_slave_1: left allmulticast mode [ 218.188980][T13330] bridge_slave_1: left promiscuous mode [ 218.194932][T13330] bridge0: port 2(bridge_slave_1) entered disabled state [ 218.231437][T13330] bond0: (slave bond_slave_0): Releasing backup interface [ 218.264163][T13330] bond0: (slave bond_slave_1): Releasing backup interface [ 218.294145][T13330] team0: Port device team_slave_0 removed [ 218.337310][T13330] team0: Port device team_slave_1 removed [ 218.428813][T13330] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 218.527300][T13326] ` (unregistering): (slave bridge_slave_1): Releasing backup interface [ 218.537774][T13326] ` (unregistering): Released all slaves [ 219.111595][T13385] netlink: 'syz.1.2117': attribute type 4 has an invalid length. [ 219.125403][T13384] netlink: 'syz.1.2117': attribute type 4 has an invalid length. [ 219.142395][T13384] __nla_validate_parse: 4 callbacks suppressed [ 219.142413][T13384] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2117'. [ 219.159244][T13385] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2117'. [ 219.160489][T13385] `: renamed from bond0 [ 219.179907][T13389] xt_ipcomp: unknown flags 1D [ 219.279189][T13397] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2120'. [ 219.301011][T13397] netlink: 10 bytes leftover after parsing attributes in process `syz.4.2120'. [ 219.406270][T13402] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 219.460191][T13414] Bluetooth: MGMT ver 1.23 [ 219.500291][T13418] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2126'. [ 219.525174][T13419] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2125'. [ 219.693008][T13425] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2128'. [ 220.238243][T13425] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 220.320013][T13435] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR [ 220.386217][T13446] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.2132'. [ 220.480826][T13450] netlink: 'syz.2.2136': attribute type 1 has an invalid length. [ 220.515092][T13450] netlink: 'syz.2.2136': attribute type 1 has an invalid length. [ 220.535487][T13450] netlink: 'syz.2.2136': attribute type 1 has an invalid length. [ 220.543261][T13450] netlink: 'syz.2.2136': attribute type 2 has an invalid length. [ 220.569233][T13450] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2136'. [ 220.749950][ T36] bond4: (slave macvlan2): link status definitely down, disabling slave [ 220.900738][T13476] tipc: Enabled bearer , priority 0 [ 220.916284][T13476] syzkaller0: entered promiscuous mode [ 220.936659][T13476] syzkaller0: entered allmulticast mode [ 220.986339][T13479] tipc: Resetting bearer [ 220.997014][T13484] netlink: 260 bytes leftover after parsing attributes in process `syz.1.2146'. [ 221.033386][T13479] tipc: Disabling bearer [ 221.128191][T13484] ` (unregistering): Released all slaves [ 221.743982][T13536] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 221.785667][T13536] netlink: 'syz.2.2156': attribute type 11 has an invalid length. [ 222.261816][T13575] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 223.145584][ T30] audit: type=1107 audit(1762703117.261:3): pid=13621 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='¡$B?çÏŸ2}˜œ}NyèmÑQ¬ˆj… sì¼DÌáºoó1(Lã,½›€<¼:†®Í©·šYùCOÖJZ|%ï”yAú¾ŠÎÏþH^©4˜3âÞ÷‰f‰êÝYØœ‡$Ä)‡…·´2³(ØÞ‘Ìcû¾¦b}AV•Ã¯6Ëœ}{–Ö¾mÞiþüí-BÆuË´äÛ‹ýR¶v’è6¿Æ²C%í™TìÌ—WmRüüÅ,¢JƺôcûS,ÝPäaÝ ò£{ÈÖ¤$ŒâƒBÕ‡³âñadôѤØ3"*dìl¾ÿD/ÁŸ–›Åž' [ 223.233906][T13626] xt_HMARK: spi-set and port-set can't be combined [ 223.702287][T13664] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 223.852075][T13673] xt_hashlimit: Unknown mode mask C4, kernel too old? [ 224.406880][T13706] syzkaller0: entered promiscuous mode [ 224.413842][T13706] syzkaller0: entered allmulticast mode [ 224.563481][T13701] pimreg3: entered allmulticast mode [ 224.603358][T13714] __nla_validate_parse: 15 callbacks suppressed [ 224.603406][T13714] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2208'. [ 224.908089][T13729] delete_channel: no stack [ 224.949204][T13737] tipc: Enabled bearer , priority 10 [ 225.016912][T13740] 8021q: adding VLAN 0 to HW filter on device bond6 [ 225.028078][T13740] bond0: (slave bond6): Enslaving as an active interface with an up link [ 225.095246][ T36] bond4: (slave macvlan2): link status up again after 0 ms [ 225.122977][ T36] bond4: (slave macvlan2): failed to get link speed/duplex [ 225.201796][T13754] syzkaller1: entered promiscuous mode [ 225.208012][T13754] syzkaller1: entered allmulticast mode [ 225.277404][ T8137] bond4: (slave macvlan2): failed to get link speed/duplex [ 225.340561][T13758] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2219'. [ 225.407866][T13764] netlink: 'syz.1.2223': attribute type 1 has an invalid length. [ 225.430191][T13764] netlink: 'syz.1.2223': attribute type 1 has an invalid length. [ 225.444380][T12471] bond4: (slave macvlan2): failed to get link speed/duplex [ 225.453885][T13768] delete_channel: no stack [ 225.541371][T13772] openvswitch: netlink: IP tunnel dst address not specified [ 225.554364][T12469] bond4: (slave macvlan2): failed to get link speed/duplex [ 225.652391][T13779] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2228'. [ 225.669110][T12471] bond4: (slave macvlan2): failed to get link speed/duplex [ 225.708552][T13779] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2228'. [ 225.795536][ T8137] bond4: (slave macvlan2): failed to get link speed/duplex [ 225.926201][ T8137] bond4: (slave macvlan2): failed to get link speed/duplex [ 226.191360][T13816] veth7: entered allmulticast mode [ 226.290749][T13822] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2241'. [ 226.308084][T13822] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2241'. [ 226.320729][T13822] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2241'. [ 226.330369][T13822] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2241'. [ 226.341481][T13822] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2241'. [ 226.353228][T13813] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2239'. [ 226.716844][T13842] netlink: 'syz.4.2247': attribute type 1 has an invalid length. [ 226.770048][T12469] net_ratelimit: 5 callbacks suppressed [ 226.770068][T12469] bond4: (slave macvlan2): failed to get link speed/duplex [ 226.840377][T13849] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 226.895067][T12469] bond4: (slave macvlan2): failed to get link speed/duplex [ 226.946936][T13860] xt_cgroup: xt_cgroup: no path or classid specified [ 227.032958][T13868] chnl_net:caif_netlink_parms(): no params data found [ 227.101422][T13869] netlink: 'syz.3.2254': attribute type 4 has an invalid length. [ 227.157742][T13868] netlink: 'syz.3.2254': attribute type 4 has an invalid length. [ 227.174148][T13874] netlink: 'syz.0.2257': attribute type 4 has an invalid length. [ 227.191380][T13874] netlink: 'syz.0.2257': attribute type 1 has an invalid length. [ 227.212473][T12471] bond4: (slave macvlan2): failed to get link speed/duplex [ 227.344157][T13874] 8021q: adding VLAN 0 to HW filter on device bond3 [ 227.487458][ T8137] bond4: (slave macvlan2): failed to get link speed/duplex [ 227.624506][ T8137] bond4: (slave macvlan2): failed to get link speed/duplex [ 227.757630][T12466] bond4: (slave macvlan2): failed to get link speed/duplex [ 227.876350][ T8137] bond4: (slave macvlan2): failed to get link speed/duplex [ 227.945702][T13890] netlink: 'syz.0.2260': attribute type 13 has an invalid length. [ 228.096745][T13890] bridge0: port 1(bridge_slave_0) entered blocking state [ 228.103999][T13890] bridge0: port 1(bridge_slave_0) entered forwarding state [ 228.132139][T13890] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 228.254101][T13913] bridge2: the hash_elasticity option has been deprecated and is always 16 [ 228.284772][T12469] bond4: (slave macvlan2): failed to get link speed/duplex [ 228.366583][T13928] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 228.381493][T13928] x_tables: duplicate underflow at hook 1 [ 228.404776][T12466] bond4: (slave macvlan2): failed to get link speed/duplex [ 228.670985][T13947] wireguard: wg1: Could not create IPv4 socket [ 228.694123][T13947] wg1: entered promiscuous mode [ 228.701523][T13947] wg1: entered allmulticast mode [ 228.712961][T13950] tipc: Can't bind to reserved service type 2 [ 228.830919][T13961] netlink: 'syz.0.2278': attribute type 1 has an invalid length. [ 229.268173][T13975] netlink: 'syz.0.2283': attribute type 20 has an invalid length. [ 229.305996][ T8137] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 229.316231][ T8137] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 229.337988][ T8137] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 229.348227][ T8137] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 229.477800][T13995] bond7: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 229.520951][T13995] bond7 (unregistering): Released all slaves [ 229.586586][T13986] xt_CT: You must specify a L4 protocol and not use inversions on it [ 229.964069][T14025] __nla_validate_parse: 79 callbacks suppressed [ 229.964086][T14025] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2297'. [ 230.188550][T14042] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2299'. [ 230.281844][T14042] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2299'. [ 230.298531][T14046] dvmrp6: entered allmulticast mode [ 230.739843][T14073] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2310'. [ 230.767761][T14073] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2310'. [ 230.810668][T14076] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2311'. [ 230.821184][T14076] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2311'. [ 230.842464][T14076] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2311'. [ 230.865038][T14076] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2311'. [ 231.079831][T14091] validate_nla: 3 callbacks suppressed [ 231.080040][T14091] netlink: 'syz.1.2316': attribute type 83 has an invalid length. [ 231.099138][T14089] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2315'. [ 231.472563][T14124] netlink: 'syz.4.2326': attribute type 1 has an invalid length. [ 231.548060][T14124] bond0: entered promiscuous mode [ 231.559406][T14124] bond0: entered allmulticast mode [ 231.572561][T14124] 8021q: adding VLAN 0 to HW filter on device bond0 [ 231.611565][T14126] netlink: 'syz.1.2325': attribute type 3 has an invalid length. [ 231.671702][T14128] macvlan4: entered promiscuous mode [ 231.696275][T14128] macvlan4: entered allmulticast mode [ 231.754710][T14128] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 231.842408][T14146] ip6gre2: entered allmulticast mode [ 231.877581][ T8137] net_ratelimit: 26 callbacks suppressed [ 231.877601][ T8137] bond4: (slave macvlan2): failed to get link speed/duplex [ 231.987965][T14156] netlink: 'syz.4.2332': attribute type 3 has an invalid length. [ 232.035084][T12469] bond4: (slave macvlan2): failed to get link speed/duplex [ 232.149405][T14162] netlink: 'syz.2.2333': attribute type 10 has an invalid length. [ 232.158568][ T8137] bond4: (slave macvlan2): failed to get link speed/duplex [ 232.173190][T14162] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 232.182736][T14162] batadv0: entered promiscuous mode [ 232.188694][T14162] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 232.216682][T14162] tipc: Bearer : already 2 bearers with priority 10 [ 232.227688][T14162] tipc: Bearer : trying with adjusted priority [ 232.235845][T14162] tipc: Enabling of bearer rejected, failed to enable media [ 232.249515][T14162] netlink: 'syz.2.2333': attribute type 10 has an invalid length. [ 232.259291][T14162] bond0: (slave batadv0): Releasing backup interface [ 232.295924][T14162] bridge0: port 1(batadv0) entered blocking state [ 232.303495][T14162] bridge0: port 1(batadv0) entered disabled state [ 232.334797][T12469] bond4: (slave macvlan2): failed to get link speed/duplex [ 232.437403][T14178] netlink: 'syz.3.2339': attribute type 11 has an invalid length. [ 232.465090][ T8137] bond4: (slave macvlan2): failed to get link speed/duplex [ 232.687136][ T3487] batman_adv: batadv0: IGMP Querier appeared [ 232.693226][ T3487] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 232.795072][T12471] bond4: (slave macvlan2): failed to get link speed/duplex [ 232.936559][T12471] bond4: (slave macvlan2): failed to get link speed/duplex [ 233.046820][T12471] bond4: (slave macvlan2): failed to get link speed/duplex [ 233.159468][T14232] netlink: 'syz.4.2352': attribute type 3 has an invalid length. [ 233.198201][T12466] bond4: (slave macvlan2): failed to get link speed/duplex [ 233.315153][T12471] bond4: (slave macvlan2): failed to get link speed/duplex [ 233.324088][T14231] netlink: 'syz.3.2355': attribute type 3 has an invalid length. [ 233.441946][T14231] tipc: Enabling of bearer rejected, failed to enable media [ 233.782220][T14278] netlink: 'syz.1.2362': attribute type 4 has an invalid length. [ 233.795938][T14277] ksmbd: Unknown IPC event: 1, ignore. [ 235.125591][T14371] tipc: Resetting bearer [ 235.163286][ T8421] syz2: Port: 1 Link ACTIVE [ 235.252157][T14371] tipc: Resetting bearer [ 235.297148][ T8409] syz2: Port: 1 Link DOWN [ 235.712654][T14415] __nla_validate_parse: 18 callbacks suppressed [ 235.712672][T14415] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2405'. [ 235.871460][T14420] netlink: 80 bytes leftover after parsing attributes in process `syz.3.2408'. [ 236.050424][T12469] tipc: Resetting bearer [ 236.212378][T14440] netlink: 'syz.3.2415': attribute type 11 has an invalid length. [ 236.281847][T14445] validate_nla: 4 callbacks suppressed [ 236.281865][T14445] netlink: 'syz.4.2416': attribute type 4 has an invalid length. [ 236.329263][T14445] netlink: 'syz.4.2416': attribute type 4 has an invalid length. [ 236.512849][T14461] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2420'. [ 236.543623][T14459] netlink: 256 bytes leftover after parsing attributes in process `syz.4.2422'. [ 236.577958][ T51] block nbd0: Possible stuck request ffff888024ea0000: control (read@0,1024B). Runtime 90 seconds [ 236.589532][ T51] block nbd0: Possible stuck request ffff888024ea01c0: control (read@1024,1024B). Runtime 90 seconds [ 236.607239][ T51] block nbd0: Possible stuck request ffff888024ea0380: control (read@2048,1024B). Runtime 90 seconds [ 236.619328][ T51] block nbd0: Possible stuck request ffff888024ea0540: control (read@3072,1024B). Runtime 90 seconds [ 236.632055][T14462] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2421'. [ 236.704094][T14474] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2424'. [ 236.843852][T14483] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2427'. [ 236.925969][ T8137] net_ratelimit: 26 callbacks suppressed [ 236.925990][ T8137] bond4: (slave macvlan2): failed to get link speed/duplex [ 237.056099][T12471] bond4: (slave macvlan2): failed to get link speed/duplex [ 237.174438][T12469] bond4: (slave macvlan2): failed to get link speed/duplex [ 237.310598][T12466] bond4: (slave macvlan2): failed to get link speed/duplex [ 237.495080][ T8137] bond4: (slave macvlan2): failed to get link speed/duplex [ 237.604790][ T8137] bond4: (slave macvlan2): failed to get link speed/duplex [ 237.735731][T12466] bond4: (slave macvlan2): failed to get link speed/duplex [ 237.858631][T12471] bond4: (slave macvlan2): failed to get link speed/duplex [ 237.917383][T14553] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2442'. [ 238.005180][ T8137] bond4: (slave macvlan2): failed to get link speed/duplex [ 238.111471][T14555] vlan4: entered allmulticast mode [ 238.118408][T14555] bridge_slave_0: entered allmulticast mode [ 238.186521][T14562] syzkaller0: entered promiscuous mode [ 238.192092][T14562] syzkaller0: entered allmulticast mode [ 238.244433][ T36] bond4: (slave macvlan2): failed to get link speed/duplex [ 238.319529][T14568] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2444'. [ 238.651172][T14583] netlink: 211472 bytes leftover after parsing attributes in process `syz.2.2449'. [ 239.015666][T14619] netlink: 'syz.4.2456': attribute type 1 has an invalid length. [ 239.483621][T14643] xt_CT: No such helper "snmp_trap" [ 239.945672][T14680] v: renamed from vlan0 [ 239.969687][T14682] tipc: Enabled bearer , priority 13 [ 240.019827][T14682] batadv_slave_0: entered allmulticast mode [ 240.027142][T14682] batadv_slave_0: left allmulticast mode [ 240.770207][T14747] __nla_validate_parse: 6 callbacks suppressed [ 240.770224][T14747] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2488'. [ 240.898216][T14742] netlink: 'syz.3.2490': attribute type 13 has an invalid length. [ 241.001135][T14742] 8021q: adding VLAN 0 to HW filter on device bond0 [ 241.012093][T14742] 8021q: adding VLAN 0 to HW filter on device team0 [ 241.084669][T14758] nbd3: detected capacity change from 0 to 127 [ 241.092630][ T5829] block nbd3: Receive control failed (result -32) [ 241.177527][T14763] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2496'. [ 241.301597][T14773] netlink: 256 bytes leftover after parsing attributes in process `syz.4.2499'. [ 241.405257][T14784] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2501'. [ 241.423047][T14786] netlink: 'syz.2.2503': attribute type 16 has an invalid length. [ 241.436569][T14786] netlink: 'syz.2.2503': attribute type 17 has an invalid length. [ 241.484909][T14789] netlink: 96 bytes leftover after parsing attributes in process `syz.3.2504'. [ 241.494132][T14789] netlink: 96 bytes leftover after parsing attributes in process `syz.3.2504'. [ 241.504002][T14789] netlink: 96 bytes leftover after parsing attributes in process `syz.3.2504'. [ 241.708188][T14802] sctp: [Deprecated]: syz.3.2505 (pid 14802) Use of int in maxseg socket option. [ 241.708188][T14802] Use struct sctp_assoc_value instead [ 241.720887][T14805] netlink: 108 bytes leftover after parsing attributes in process `syz.0.2509'. [ 241.731982][T14805] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2509'. [ 241.956143][T14818] syz_tun: entered allmulticast mode [ 241.983157][T14817] syz_tun: left allmulticast mode [ 241.994521][T12466] net_ratelimit: 34 callbacks suppressed [ 241.994540][T12466] bond4: (slave macvlan2): failed to get link speed/duplex [ 242.041502][T14826] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2516'. [ 242.096044][T14830] Bluetooth: MGMT ver 1.23 [ 242.284721][T12466] bond4: (slave macvlan2): failed to get link speed/duplex [ 242.394387][ T36] bond4: (slave macvlan2): failed to get link speed/duplex [ 242.505464][ T36] bond4: (slave macvlan2): failed to get link speed/duplex [ 242.558228][T14858] netlink: 'syz.0.2526': attribute type 1 has an invalid length. [ 242.774707][ T36] bond4: (slave macvlan2): failed to get link speed/duplex [ 242.914348][T12466] bond4: (slave macvlan2): failed to get link speed/duplex [ 243.024517][T12469] bond4: (slave macvlan2): failed to get link speed/duplex [ 243.134426][T12466] bond4: (slave macvlan2): failed to get link speed/duplex [ 243.278200][T14914] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 243.417100][T12466] bond4: (slave macvlan2): failed to get link speed/duplex [ 244.578306][ T5829] block nbd4: Receive control failed (result -107) [ 244.859732][T14995] team0: Mode changed to "loadbalance" [ 244.877685][T15000] netlink: 'syz.3.2569': attribute type 1 has an invalid length. [ 244.918130][T14999] syzkaller1: entered promiscuous mode [ 244.931236][T14999] syzkaller1: entered allmulticast mode [ 244.991479][T15005] x_tables: duplicate underflow at hook 4 [ 245.041617][T15005] netlink: 'syz.4.2570': attribute type 2 has an invalid length. [ 245.286898][T15024] netlink: 'syz.0.2577': attribute type 33 has an invalid length. [ 245.702104][T15053] xt_CT: You must specify a L4 protocol and not use inversions on it [ 245.962323][T15083] tipc: Enabled bearer , priority 0 [ 246.001942][T15083] syzkaller0: entered promiscuous mode [ 246.021565][T15083] syzkaller0: entered allmulticast mode [ 246.148900][T15098] __nla_validate_parse: 20 callbacks suppressed [ 246.148917][T15098] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2599'. [ 246.200781][T15083] tipc: Resetting bearer [ 246.267982][T15081] tipc: Resetting bearer [ 246.349703][T15081] tipc: Disabling bearer [ 246.447348][T15119] tipc: Resetting bearer [ 246.453945][ T5889] syz2: Port: 1 Link ACTIVE [ 246.463097][T15119] tipc: Enabling of bearer rejected, already enabled [ 246.483709][T15113] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2600'. [ 246.559945][T15118] tipc: Resetting bearer [ 246.568749][ T36] tipc: Resetting bearer [ 246.582993][ T5889] syz2: Port: 1 Link DOWN [ 246.713282][T15136] netlink: 'syz.2.2609': attribute type 16 has an invalid length. [ 246.728655][T15136] netlink: 'syz.2.2609': attribute type 17 has an invalid length. [ 246.789283][T15137] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 246.844027][T15144] veth0_to_bond: entered allmulticast mode [ 246.882365][T15144] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2612'. [ 246.897330][T15152] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2613'. [ 247.019827][T15148] "syz.3.2613" (15148) uses obsolete ecb(arc4) skcipher [ 247.035102][T12471] net_ratelimit: 26 callbacks suppressed [ 247.035120][T12471] bond4: (slave macvlan2): failed to get link speed/duplex [ 247.175235][ T3487] bond4: (slave macvlan2): failed to get link speed/duplex [ 247.240872][T15175] netlink: 'syz.2.2621': attribute type 3 has an invalid length. [ 247.292396][T15175] veth5: entered allmulticast mode [ 247.303017][T15179] netlink: 10 bytes leftover after parsing attributes in process `syz.3.2622'. [ 247.355356][ T3487] bond4: (slave macvlan2): failed to get link speed/duplex [ 247.437969][T15189] netlink: 'syz.2.2625': attribute type 1 has an invalid length. [ 247.555610][T15199] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2629'. [ 247.581000][T15189] 8021q: adding VLAN 0 to HW filter on device bond7 [ 247.607782][T15203] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2630'. [ 247.625831][T15202] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2630'. [ 247.626029][T15209] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2631'. [ 247.741597][T15209] 8021q: adding VLAN 0 to HW filter on device bond0 [ 247.753182][T15210] syzkaller1: entered promiscuous mode [ 247.760559][T15210] syzkaller1: entered allmulticast mode [ 247.807726][T15220] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2632'. [ 247.896296][T12471] bond4: (slave macvlan2): failed to get link speed/duplex [ 248.004708][ T8137] bond4: (slave macvlan2): failed to get link speed/duplex [ 248.127789][ T3438] bond4: (slave macvlan2): failed to get link speed/duplex [ 248.190176][T15250] syz_tun: entered allmulticast mode [ 248.245397][ T36] bond4: (slave macvlan2): failed to get link speed/duplex [ 248.408547][ T36] bond4: (slave macvlan2): failed to get link speed/duplex [ 248.452808][T15261] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 248.473338][T15265] netlink: 'syz.4.2642': attribute type 2 has an invalid length. [ 248.909541][ T36] wlan1: Trigger new scan to find an IBSS to join [ 249.033307][T15286] netlink: 'syz.2.2646': attribute type 32 has an invalid length. [ 250.102967][T15285] netlink: 'syz.3.2645': attribute type 2 has an invalid length. [ 250.112181][T15286] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 250.135297][ T8137] bond4: (slave macvlan2): failed to get link speed/duplex [ 250.369715][T15293] Bluetooth: hci1: expected 19 bytes, got 2 bytes [ 250.932995][T15346] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 250.940307][T15346] IPv6: NLM_F_CREATE should be set when creating new route [ 251.071663][T15354] tipc: Resetting bearer [ 251.093350][T15354] tipc: Enabling of bearer rejected, already enabled [ 251.102511][ T8421] syz2: Port: 1 Link ACTIVE [ 251.161052][T15365] __nla_validate_parse: 8 callbacks suppressed [ 251.161069][T15365] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2669'. [ 251.164603][T15353] tipc: Resetting bearer [ 251.189908][ T8416] syz2: Port: 1 Link DOWN [ 251.313072][T15371] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2671'. [ 251.509164][T15388] vlan2: entered promiscuous mode [ 251.613792][T15394] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2680'. [ 251.631163][T15394] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2680'. [ 251.676631][T15398] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 251.706721][T15400] syzkaller1: entered promiscuous mode [ 251.712331][T15400] syzkaller1: entered allmulticast mode [ 251.935188][ T3487] wlan1: Trigger new scan to find an IBSS to join [ 252.054736][T15426] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2690'. [ 252.144931][ T36] net_ratelimit: 12 callbacks suppressed [ 252.144952][ T36] bond4: (slave macvlan2): failed to get link speed/duplex [ 252.161320][T15424] siw: device registration error -23 [ 252.181287][ T36] tipc: Resetting bearer [ 252.265314][ T3487] bond4: (slave macvlan2): failed to get link speed/duplex [ 252.385317][T12466] bond4: (slave macvlan2): failed to get link speed/duplex [ 252.504409][ T3487] bond4: (slave macvlan2): failed to get link speed/duplex [ 252.550800][T15456] netlink: 'syz.0.2699': attribute type 2 has an invalid length. [ 252.614346][ T3487] bond4: (slave macvlan2): failed to get link speed/duplex [ 252.704694][T15470] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2701'. [ 252.734466][ T8137] bond4: (slave macvlan2): failed to get link speed/duplex [ 252.809413][T15476] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 252.875233][ T8137] bond4: (slave macvlan2): failed to get link speed/duplex [ 252.887003][T15480] nbd: must specify a device to reconfigure [ 252.938503][T15482] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2706'. [ 252.985243][T12471] bond4: (slave macvlan2): failed to get link speed/duplex [ 253.077138][T15490] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2706'. [ 253.114743][ T36] bond4: (slave macvlan2): failed to get link speed/duplex [ 253.222723][T15498] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2709'. [ 253.626297][T15516] tipc: Resetting bearer [ 253.646756][ T5889] syz2: Port: 1 Link ACTIVE [ 253.712465][T15516] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2714'. [ 253.738195][T15514] tipc: Resetting bearer [ 253.765226][ T8421] syz2: Port: 1 Link DOWN [ 253.909146][T15537] syzkaller0: left promiscuous mode [ 253.923224][T15537] syzkaller0: left allmulticast mode [ 253.963626][T15537] tipc: Resetting bearer [ 254.129083][T15540] bridge: RTM_NEWNEIGH with invalid ether address [ 254.228831][ T8137] tipc: Resetting bearer [ 254.468137][T15570] netlink: 'syz.1.2726': attribute type 5 has an invalid length. [ 254.541579][T15575] bridge4: entered promiscuous mode [ 254.548755][T15575] bridge4: entered allmulticast mode [ 254.602503][T15572] bridge4: entered promiscuous mode [ 254.607887][T15572] bridge4: entered allmulticast mode [ 254.894403][T12466] wlan1: Trigger new scan to find an IBSS to join [ 255.530606][T15651] netlink: 'syz.1.2751': attribute type 4 has an invalid length. [ 255.717843][T15663] netlink: 'syz.1.2756': attribute type 1 has an invalid length. [ 255.726948][T15661] netlink: 'syz.4.2755': attribute type 1 has an invalid length. [ 255.735707][T15661] netlink: 'syz.4.2755': attribute type 2 has an invalid length. [ 255.818554][T12466] wlan1: Creating new IBSS network, BSSID 4a:c0:9d:0e:37:6f [ 255.822031][T15656] macvtap3: entered promiscuous mode [ 255.832413][T15656] macvtap3: entered allmulticast mode [ 255.892079][T15663] bond8: entered promiscuous mode [ 255.907282][T15663] 8021q: adding VLAN 0 to HW filter on device bond8 [ 256.052731][T15670] bond8: (slave bridge5): making interface the new active one [ 256.061036][T15670] bridge5: entered promiscuous mode [ 256.068114][T15670] bond8: (slave bridge5): Enslaving as an active interface with an up link [ 256.140145][T15690] netlink: 'syz.3.2764': attribute type 4 has an invalid length. [ 256.223909][T15690] netlink: 'syz.3.2764': attribute type 4 has an invalid length. [ 256.351836][T15712] __nla_validate_parse: 17 callbacks suppressed [ 256.351854][T15712] netlink: 96 bytes leftover after parsing attributes in process `syz.3.2770'. [ 257.164454][T12466] net_ratelimit: 32 callbacks suppressed [ 257.164474][T12466] bond4: (slave macvlan2): failed to get link speed/duplex [ 257.249575][T15734] delete_channel: no stack [ 257.295898][ T8137] bond4: (slave macvlan2): failed to get link speed/duplex [ 257.421837][ T3438] bond4: (slave macvlan2): failed to get link speed/duplex [ 257.545396][ T8137] bond4: (slave macvlan2): failed to get link speed/duplex [ 257.654513][ T8137] bond4: (slave macvlan2): failed to get link speed/duplex [ 257.738380][T15773] ------------[ cut here ]------------ [ 257.744297][T15773] WARNING: CPU: 1 PID: 15773 at net/mac80211/rate.c:53 rate_control_rate_init+0x64a/0x6e0 [ 257.754481][T15773] Modules linked in: [ 257.758747][T15773] CPU: 1 UID: 0 PID: 15773 Comm: syz.4.2785 Not tainted syzkaller #0 PREEMPT(full) [ 257.768295][T15773] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 257.778588][T15773] RIP: 0010:rate_control_rate_init+0x64a/0x6e0 [ 257.779380][T12466] bond4: (slave macvlan2): failed to get link speed/duplex [ 257.784794][T15773] Code: 82 01 00 00 20 48 83 c4 20 5b 41 5c 41 5d 41 5e 41 5f 5d e9 58 18 8c 00 cc e8 42 da 02 f7 90 0f 0b 90 eb e1 e8 37 da 02 f7 90 <0f> 0b 90 48 83 c4 20 5b 41 5c 41 5d 41 5e 41 5f 5d e9 90 00 00 00 [ 257.784846][T15773] RSP: 0018:ffffc9000c1e6f60 EFLAGS: 00010283 [ 257.784868][T15773] RAX: ffffffff8abd2c59 RBX: ffff888030988000 RCX: 0000000000080000 [ 257.784884][T15773] RDX: ffffc9000cedc000 RSI: 0000000000000389 RDI: 000000000000038a [ 257.784899][T15773] RBP: 0000000000000000 R08: 0000000000000000 R09: ffffffff8abd2773 [ 257.784913][T15773] R10: dffffc0000000000 R11: ffffed1006131031 R12: 1ffff1100613100a [ 257.784929][T15773] R13: ffff88802f728e80 R14: 0000000000000001 R15: ffffffff8abd2773 [ 257.784945][T15773] FS: 00007efc342e26c0(0000) GS:ffff88812623b000(0000) knlGS:0000000000000000 [ 257.784963][T15773] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 257.784978][T15773] CR2: 0000200000001080 CR3: 00000000778f4000 CR4: 00000000003526f0 [ 257.784996][T15773] Call Trace: [ 257.785006][T15773] [ 257.785024][T15773] rate_control_rate_init_all_links+0x109/0x1a0 [ 257.785055][T15773] sta_apply_auth_flags+0x1c2/0x400 [ 257.785085][T15773] sta_apply_parameters+0xe27/0x1570 [ 257.785120][T15773] ieee80211_add_station+0x424/0x6a0 [ 257.785153][T15773] rdev_add_station+0x108/0x290 [ 257.785183][T15773] nl80211_new_station+0x1755/0x1b70 [ 257.785227][T15773] ? __pfx_nl80211_new_station+0x10/0x10 [ 257.785249][T15773] ? netdev_run_todo+0xe1d/0xea0 [ 257.785302][T15773] ? nl80211_pre_doit+0x4f1/0x930 [ 257.785332][T15773] genl_family_rcv_msg_doit+0x215/0x300 [ 257.785364][T15773] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 257.785403][T15773] ? bpf_lsm_capable+0x9/0x20 [ 257.785433][T15773] ? security_capable+0x7e/0x2e0 [ 257.785466][T15773] genl_rcv_msg+0x60e/0x790 [ 257.785499][T15773] ? __pfx_genl_rcv_msg+0x10/0x10 [ 257.785521][T15773] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 257.785541][T15773] ? __pfx_nl80211_new_station+0x10/0x10 [ 257.785564][T15773] ? __pfx_nl80211_post_doit+0x10/0x10 [ 257.785588][T15773] ? __asan_memcpy+0x40/0x70 [ 257.785612][T15773] ? __pfx_ref_tracker_free+0x10/0x10 [ 257.785641][T15773] netlink_rcv_skb+0x208/0x470 [ 257.785659][T15773] ? __lock_acquire+0xab9/0xd20 [ 257.785680][T15773] ? __pfx_genl_rcv_msg+0x10/0x10 [ 257.785705][T15773] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 257.785755][T15773] ? down_read+0x1ad/0x2e0 [ 257.785779][T15773] genl_rcv+0x28/0x40 [ 257.785800][T15773] netlink_unicast+0x82f/0x9e0 [ 257.785838][T15773] ? __pfx_netlink_unicast+0x10/0x10 [ 257.785862][T15773] ? netlink_sendmsg+0x642/0xb30 [ 257.785878][T15773] ? skb_put+0x11b/0x210 [ 257.785899][T15773] netlink_sendmsg+0x805/0xb30 [ 257.785925][T15773] ? __pfx_netlink_sendmsg+0x10/0x10 [ 257.839509][T15775] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2786'. [ 257.843743][T15773] ? aa_sock_msg_perm+0xf1/0x1d0 [ 257.843782][T15773] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 257.860972][T15778] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2787'. [ 257.868894][T15773] ? __pfx_netlink_sendmsg+0x10/0x10 [ 257.868930][T15773] __sock_sendmsg+0x21c/0x270 [ 257.868960][T15773] ____sys_sendmsg+0x505/0x830 [ 257.868989][T15773] ? __pfx_____sys_sendmsg+0x10/0x10 [ 257.869023][T15773] ? import_iovec+0x74/0xa0 [ 257.869053][T15773] ___sys_sendmsg+0x21f/0x2a0 [ 257.869079][T15773] ? __pfx____sys_sendmsg+0x10/0x10 [ 257.869142][T15773] ? __fget_files+0x2a/0x420 [ 257.869161][T15773] ? __fget_files+0x3a0/0x420 [ 257.869193][T15773] __x64_sys_sendmsg+0x19b/0x260 [ 257.869219][T15773] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 257.869261][T15773] ? do_syscall_64+0xbe/0xfa0 [ 257.869293][T15773] do_syscall_64+0xfa/0xfa0 [ 257.869318][T15773] ? lockdep_hardirqs_on+0x9c/0x150 [ 257.869352][T15773] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 257.869373][T15773] ? clear_bhb_loop+0x60/0xb0 [ 257.869398][T15773] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 257.869419][T15773] RIP: 0033:0x7efc3338f6c9 [ 257.869451][T15773] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 257.869466][T15773] RSP: 002b:00007efc342e2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 257.869486][T15773] RAX: ffffffffffffffda RBX: 00007efc335e5fa0 RCX: 00007efc3338f6c9 [ 257.869501][T15773] RDX: 0000000000000000 RSI: 0000200000001080 RDI: 0000000000000005 [ 257.869513][T15773] RBP: 00007efc33411f91 R08: 0000000000000000 R09: 0000000000000000 [ 257.869525][T15773] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 257.869537][T15773] R13: 00007efc335e6038 R14: 00007efc335e5fa0 R15: 00007ffc5db41f58 [ 257.869572][T15773] [ 257.869587][T15773] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 257.869602][T15773] CPU: 1 UID: 0 PID: 15773 Comm: syz.4.2785 Not tainted syzkaller #0 PREEMPT(full) [ 257.869623][T15773] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 257.869634][T15773] Call Trace: [ 257.869643][T15773] [ 257.869651][T15773] dump_stack_lvl+0x99/0x250 [ 257.869678][T15773] ? __asan_memcpy+0x40/0x70 [ 257.869702][T15773] ? __pfx_dump_stack_lvl+0x10/0x10 [ 257.869727][T15773] ? __pfx__printk+0x10/0x10 [ 257.869760][T15773] vpanic+0x237/0x6d0 [ 257.869786][T15773] ? __pfx_vpanic+0x10/0x10 [ 257.869821][T15773] panic+0xb9/0xc0 [ 257.869846][T15773] ? __pfx_panic+0x10/0x10 [ 257.869887][T15773] __warn+0x31b/0x4b0 [ 257.869910][T15773] ? rate_control_rate_init+0x64a/0x6e0 [ 257.869931][T15773] ? rate_control_rate_init+0x64a/0x6e0 [ 257.869949][T15773] report_bug+0x2be/0x4f0 [ 257.869973][T15773] ? rate_control_rate_init+0x64a/0x6e0 [ 257.869993][T15773] ? rate_control_rate_init+0x64a/0x6e0 [ 257.870011][T15773] ? rate_control_rate_init+0x64c/0x6e0 [ 257.870029][T15773] handle_bug+0x84/0x160 [ 257.870049][T15773] exc_invalid_op+0x1a/0x50 [ 257.870068][T15773] asm_exc_invalid_op+0x1a/0x20 [ 257.870085][T15773] RIP: 0010:rate_control_rate_init+0x64a/0x6e0 [ 257.870104][T15773] Code: 82 01 00 00 20 48 83 c4 20 5b 41 5c 41 5d 41 5e 41 5f 5d e9 58 18 8c 00 cc e8 42 da 02 f7 90 0f 0b 90 eb e1 e8 37 da 02 f7 90 <0f> 0b 90 48 83 c4 20 5b 41 5c 41 5d 41 5e 41 5f 5d e9 90 00 00 00 [ 257.870120][T15773] RSP: 0018:ffffc9000c1e6f60 EFLAGS: 00010283 [ 257.870137][T15773] RAX: ffffffff8abd2c59 RBX: ffff888030988000 RCX: 0000000000080000 [ 257.870152][T15773] RDX: ffffc9000cedc000 RSI: 0000000000000389 RDI: 000000000000038a [ 257.870165][T15773] RBP: 0000000000000000 R08: 0000000000000000 R09: ffffffff8abd2773 [ 257.870176][T15773] R10: dffffc0000000000 R11: ffffed1006131031 R12: 1ffff1100613100a [ 257.870189][T15773] R13: ffff88802f728e80 R14: 0000000000000001 R15: ffffffff8abd2773 [ 257.870201][T15773] ? rate_control_rate_init+0x163/0x6e0 [ 257.870219][T15773] ? rate_control_rate_init+0x163/0x6e0 [ 257.870234][T15773] ? rate_control_rate_init+0x649/0x6e0 [ 257.870265][T15773] rate_control_rate_init_all_links+0x109/0x1a0 [ 257.870288][T15773] sta_apply_auth_flags+0x1c2/0x400 [ 257.870312][T15773] sta_apply_parameters+0xe27/0x1570 [ 257.870348][T15773] ieee80211_add_station+0x424/0x6a0 [ 257.870379][T15773] rdev_add_station+0x108/0x290 [ 257.870409][T15773] nl80211_new_station+0x1755/0x1b70 [ 257.870450][T15773] ? __pfx_nl80211_new_station+0x10/0x10 [ 257.870470][T15773] ? netdev_run_todo+0xe1d/0xea0 [ 257.870518][T15773] ? nl80211_pre_doit+0x4f1/0x930 [ 257.870545][T15773] genl_family_rcv_msg_doit+0x215/0x300 [ 257.870577][T15773] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 257.870612][T15773] ? bpf_lsm_capable+0x9/0x20 [ 257.870634][T15773] ? security_capable+0x7e/0x2e0 [ 257.870666][T15773] genl_rcv_msg+0x60e/0x790 [ 257.870694][T15773] ? __pfx_genl_rcv_msg+0x10/0x10 [ 257.870715][T15773] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 257.870735][T15773] ? __pfx_nl80211_new_station+0x10/0x10 [ 257.870755][T15773] ? __pfx_nl80211_post_doit+0x10/0x10 [ 257.870778][T15773] ? __asan_memcpy+0x40/0x70 [ 257.870800][T15773] ? __pfx_ref_tracker_free+0x10/0x10 [ 257.870827][T15773] netlink_rcv_skb+0x208/0x470 [ 257.870844][T15773] ? __lock_acquire+0xab9/0xd20 [ 257.870864][T15773] ? __pfx_genl_rcv_msg+0x10/0x10 [ 257.870887][T15773] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 257.870935][T15773] ? down_read+0x1ad/0x2e0 [ 257.870956][T15773] genl_rcv+0x28/0x40 [ 257.870976][T15773] netlink_unicast+0x82f/0x9e0 [ 257.871010][T15773] ? __pfx_netlink_unicast+0x10/0x10 [ 257.871037][T15773] ? netlink_sendmsg+0x642/0xb30 [ 257.871053][T15773] ? skb_put+0x11b/0x210 [ 257.871075][T15773] netlink_sendmsg+0x805/0xb30 [ 257.871103][T15773] ? __pfx_netlink_sendmsg+0x10/0x10 [ 257.871125][T15773] ? aa_sock_msg_perm+0xf1/0x1d0 [ 257.871153][T15773] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 257.871172][T15773] ? __pfx_netlink_sendmsg+0x10/0x10 [ 257.871190][T15773] __sock_sendmsg+0x21c/0x270 [ 257.871219][T15773] ____sys_sendmsg+0x505/0x830 [ 257.871245][T15773] ? __pfx_____sys_sendmsg+0x10/0x10 [ 257.871274][T15773] ? import_iovec+0x74/0xa0 [ 257.871301][T15773] ___sys_sendmsg+0x21f/0x2a0 [ 257.871324][T15773] ? __pfx____sys_sendmsg+0x10/0x10 [ 257.871387][T15773] ? __fget_files+0x2a/0x420 [ 257.871404][T15773] ? __fget_files+0x3a0/0x420 [ 257.871433][T15773] __x64_sys_sendmsg+0x19b/0x260 [ 257.871457][T15773] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 257.871494][T15773] ? do_syscall_64+0xbe/0xfa0 [ 257.871523][T15773] do_syscall_64+0xfa/0xfa0 [ 257.871546][T15773] ? lockdep_hardirqs_on+0x9c/0x150 [ 257.871570][T15773] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 257.871589][T15773] ? clear_bhb_loop+0x60/0xb0 [ 257.871611][T15773] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 257.871629][T15773] RIP: 0033:0x7efc3338f6c9 [ 257.871645][T15773] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 257.871660][T15773] RSP: 002b:00007efc342e2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 257.871679][T15773] RAX: ffffffffffffffda RBX: 00007efc335e5fa0 RCX: 00007efc3338f6c9 [ 257.871694][T15773] RDX: 0000000000000000 RSI: 0000200000001080 RDI: 0000000000000005 [ 257.871706][T15773] RBP: 00007efc33411f91 R08: 0000000000000000 R09: 0000000000000000 [ 257.871718][T15773] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 257.871730][T15773] R13: 00007efc335e6038 R14: 00007efc335e5fa0 R15: 00007ffc5db41f58 [ 257.871762][T15773] [ 257.877254][T15773] Kernel Offset: disabled