last executing test programs: 2.592646095s ago: executing program 1 (id=3845): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x19, 0xc, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRESOCT=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x4c, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5}, @IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}]}, 0x4c}}, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r1, &(0x7f0000000a80)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000180)="4dd9f7602c74889aca7ae03d6418a057261c28562251542735216afeba455c89fe0e64cdfb6143dea0d86f2bf91c60984c78a668386ef30cbf0e3c86edff5757f3768d801f3cf89b7fd9a839c2165c60aeb811834ce97fe6fcb56fb88822c1dba5c06896b7143fdd423f4a0c110276f78ecbfcff4f9245ab350d626aef480a73113246faf4209529e7003b5b", 0x8c}, {&(0x7f0000000440)="3b3a85ae493f42b142e01a645fe3149c62604645dae5eae1fb21d418be0461374ce9e2afcb069c10bb5070c6e076018ccc2330c1f906231933", 0x39}], 0x2}}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000001340)="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", 0x302}], 0x1}}], 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cgroup.stat\x00', 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x20, 0x2, 0x8, 0x5, 0x0, 0x0, {0xa, 0x0, 0x2}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x80) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000a00)={0x0, @remote, @initdev}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000bc0)={&(0x7f00000009c0), 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)=@delqdisc={0x64, 0x25, 0x4, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0xffe9, 0xa}, {0xffff, 0x8}, {0x4, 0x5}}, [@TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xcb, 0x7f, 0xd82b, 0x434, 0x1, 0x7, 0x8, 0x1}}, {0x6, 0x2, [0x81]}}]}, @TCA_RATE={0x6, 0x5, {0x9, 0x3}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x7ff}, @TCA_RATE={0x6, 0x5, {0x1, 0x5}}]}, 0x64}, 0x1, 0x0, 0x0, 0x8841}, 0x4000080) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = openat$cgroup_ro(r3, 0x0, 0x0, 0x0) sendmmsg$inet6(r7, &(0x7f0000000500)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000480)="7f7b9068a071c1a93e2b34f567cda4891fc98a935bb1be18c97cbf714fa4cc91e9ed19d0766614d267a79fedc845e3ab12d0b246b52ee7592a836dbf754b2baa73eede2c2982e9496180da700c5231df62238d0d348bd93cb76e927961b424a19c124c17aaf71cc42d0119cfbf201d", 0x6f}, {0x0}, {&(0x7f0000001680)="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", 0x1000}, {&(0x7f0000000700)="82bf9d387881c9ab8f4c49aec37d868032a4b7a2f76a77a07a806d09b08d193353388139d909cdd1760065fe2c0bda65de43bc8d9625d3190564851a3816eeec74459e3415b1b12b0a13217fdc25dc5f0c9e26843a5de9c2b4a5d87a5a236e41b08065e6f29ec275a5c673a95eb3eb658873", 0x72}, {&(0x7f0000000400)="309cc4c769a01cb484e871868e", 0xd}, {&(0x7f0000000800)="2f2a19781f0946665a6444673a82c0feae4dbd7484ccb7bfcd7ef22816fd56599ad2c7e6cc7518282ac65f2f8f73acf3c1fb7aa4fda48fa328d067b6b8b6f4d3bb2ed97b30f212da6402180b77a6f3144def7784fbfd54029d9e4b65818240f54033955fc4202beb0ea4be2d9fd77cef7dc571c429b974cfd59510bc9b5df64eb2d0d7ae318b3f1fa52584ec9aef92f104ce5714d10fb196c4d2bd11a6b9abcb55bd8237e47745d92e40b1b18c7688b7969c32baf71943f1adb6f189ed27b505cf2aa25eb9f56ea5dcf64b50bb2c276913304922f6ba613539cc69260357cbf2739e302f7fdbfb51", 0xe8}], 0x6, &(0x7f0000000900)=[@hopopts={{0x28, 0x29, 0x36, {0x33, 0x1, '\x00', [@padn={0x1, 0x2, [0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x6}]}}}, @dstopts={{0x50, 0x29, 0x37, {0x3a, 0x6, '\x00', [@calipso={0x7, 0x28, {0x0, 0x8, 0x4, 0x10, [0x8, 0x2, 0x0, 0x5]}}, @pad1, @enc_lim={0x4, 0x1, 0x5}, @jumbo={0xc2, 0x4, 0xf3d1}]}}}, @hoplimit={{0x14, 0x29, 0x34, 0x6}}, @tclass={{0x14, 0x29, 0x43, 0x5}}], 0xa8}}], 0x1, 0x400) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x34, 0x0, 0x1, 0x0, 0x25dfdbff, {{}, {}, {0x18, 0x17, {0xe, 0x0, @l2={'eth', 0x3a, 'ipvlan1\x00'}}}}}, 0x34}, 0x1, 0x0, 0x0, 0x20010055}, 0x0) sendto$inet(r1, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000180)={{r0}, &(0x7f0000000040), &(0x7f0000000080)='%pI4 \x00'}, 0x20) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="500000001000370400"/20, @ANYRES32=0x0, @ANYBLOB="8b04040000000000300012800800010073"], 0x50}}, 0x0) close(r8) 2.45891852s ago: executing program 1 (id=3848): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x19, 0xc, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRESOCT=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x4c, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5}, @IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}]}, 0x4c}}, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r1, &(0x7f0000000a80)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000180)="4dd9f7602c74889aca7ae03d6418a057261c28562251542735216afeba455c89fe0e64cdfb6143dea0d86f2bf91c60984c78a668386ef30cbf0e3c86edff5757f3768d801f3cf89b7fd9a839c2165c60aeb811834ce97fe6fcb56fb88822c1dba5c06896b7143fdd423f4a0c110276f78ecbfcff4f9245ab350d626aef480a73113246faf4209529e7003b5b", 0x8c}, {&(0x7f0000000440)="3b3a85ae493f42b142e01a645fe3149c62604645dae5eae1fb21d418be0461374ce9e2afcb069c10bb5070c6e076018ccc2330c1f906231933", 0x39}], 0x2}}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000001340)="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", 0x302}], 0x1}}], 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cgroup.stat\x00', 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x20, 0x2, 0x8, 0x5, 0x0, 0x0, {0xa, 0x0, 0x2}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x80) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(r3, 0x0, 0x0, 0x0) sendmmsg$inet6(r6, &(0x7f0000000500)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000480)="7f7b9068a071c1a93e2b34f567cda4891fc98a935bb1be18c97cbf714fa4cc91e9ed19d0766614d267a79fedc845e3ab12d0b246b52ee7592a836dbf754b2baa73eede2c2982e9496180da700c5231df62238d0d348bd93cb76e927961b424a19c124c17aaf71cc42d0119cfbf201d", 0x6f}, {0x0}, {&(0x7f0000001680)="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", 0x1000}, {&(0x7f0000000700)="82bf9d387881c9ab8f4c49aec37d868032a4b7a2f76a77a07a806d09b08d193353388139d909cdd1760065fe2c0bda65de43bc8d9625d3190564851a3816eeec74459e3415b1b12b0a13217fdc25dc5f0c9e26843a5de9c2b4a5d87a5a236e41b08065e6f29ec275a5c673a95eb3eb658873", 0x72}, {&(0x7f0000000400)="309cc4c769a01cb484e871868e", 0xd}, {&(0x7f0000000800)="2f2a19781f0946665a6444673a82c0feae4dbd7484ccb7bfcd7ef22816fd56599ad2c7e6cc7518282ac65f2f8f73acf3c1fb7aa4fda48fa328d067b6b8b6f4d3bb2ed97b30f212da6402180b77a6f3144def7784fbfd54029d9e4b65818240f54033955fc4202beb0ea4be2d9fd77cef7dc571c429b974cfd59510bc9b5df64eb2d0d7ae318b3f1fa52584ec9aef92f104ce5714d10fb196c4d2bd11a6b9abcb55bd8237e47745d92e40b1b18c7688b7969c32baf71943f1adb6f189ed27b505cf2aa25eb9f56ea5dcf64b50bb2c276913304922f6ba613539cc69260357cbf2739e302f7fdbfb51", 0xe8}], 0x6, &(0x7f0000000900)=[@hopopts={{0x28, 0x29, 0x36, {0x33, 0x1, '\x00', [@padn={0x1, 0x2, [0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x6}]}}}, @dstopts={{0x50, 0x29, 0x37, {0x3a, 0x6, '\x00', [@calipso={0x7, 0x28, {0x0, 0x8, 0x4, 0x10, [0x8, 0x2, 0x0, 0x5]}}, @pad1, @enc_lim={0x4, 0x1, 0x5}, @jumbo={0xc2, 0x4, 0xf3d1}]}}}, @hoplimit={{0x14, 0x29, 0x34, 0x6}}, @tclass={{0x14, 0x29, 0x43, 0x5}}], 0xa8}}], 0x1, 0x400) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x34, 0x0, 0x1, 0x0, 0x25dfdbff, {{}, {}, {0x18, 0x17, {0xe, 0x0, @l2={'eth', 0x3a, 'ipvlan1\x00'}}}}}, 0x34}, 0x1, 0x0, 0x0, 0x20010055}, 0x0) sendto$inet(r1, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000180)={{r0}, &(0x7f0000000040), &(0x7f0000000080)='%pI4 \x00'}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="500000001000370400"/20, @ANYRES32=0x0, @ANYBLOB="8b04040000000000300012800800010073"], 0x50}}, 0x0) close(r7) 2.264683839s ago: executing program 1 (id=3851): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000300)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) setsockopt$inet_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000040)=@ccm_128={{0x303}, "066ba919016f75ba", "4e58f4f0375f264184fc43d762c965dd", "f6416856", "2b73d427b9de30e6"}, 0x28) r1 = socket(0x10, 0x2, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @empty, 0x4000006}, 0x1c) listen(r3, 0x6) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r5 = accept(r2, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[], 0xfffffdef}}, 0x0) recvfrom(r4, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x3e8, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000080)={0x5, 0xfffffffb, 0x1000, 0x3108, 0x2}) write(r1, &(0x7f0000000000)="240000001e005f80004000000000000002000000000000000000080008000d00000303ff", 0x24) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000)=0x8000c, 0x4) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000000340)) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @empty}, 0x10) 1.737345177s ago: executing program 3 (id=3858): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r0, &(0x7f0000000480)='cgroup.procs\x00', 0x2, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) epoll_create1(0x0) socket$l2tp6(0xa, 0x2, 0x73) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x1, 0x803, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$inet_udp(0x2, 0x2, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) r3 = socket$l2tp6(0xa, 0x2, 0x73) socket$inet6_udplite(0xa, 0x2, 0x88) socket$l2tp6(0xa, 0x2, 0x73) socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000100)) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="6000000010000304f500"/20, @ANYRES32=0x0, @ANYBLOB="00050000000000003000128009000100766c616e00000000200002800c0002000a0000001f00000006000100000000000600050088a80000080005", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r3], 0x60}}, 0x4000000) 1.655432098s ago: executing program 3 (id=3859): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) close(0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b06, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[], 0x30}}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x44, r4, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x7ff, 0x70}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$inet_sctp(0x2, 0x1, 0x84) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) 1.416807883s ago: executing program 0 (id=3864): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)) bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) sendto$inet6(r0, &(0x7f0000000280)="02042c08ec074802010e0200c52cf7c20675e005b02f0800eb2b2ff0dac8897c6b112002faffffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0xfc13, 0x800, 0x0, 0x2f) 1.352187885s ago: executing program 3 (id=3865): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) close(r0) pipe(0x0) 1.314219959s ago: executing program 1 (id=3866): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[], 0x6c}}, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x18, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000440), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000009f00)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0x3}, 0x24}}, 0x0) socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000b00)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000180)=@newtfilter={0x4c, 0x2c, 0x52f, 0x0, 0x25dfdc01, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x2, 0xe}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xf1, 0x4, 0x4}]}}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x4}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) socket$netlink(0x10, 0x3, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r3) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000100)={'wpan0\x00', 0x0}) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r6, &(0x7f0000000040)={0x0, 0x33, &(0x7f0000000340)={&(0x7f0000000480)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0b06000000000000000030000000050036000000000008000200", @ANYRES32=r5, @ANYBLOB="0500350000070000050033000300000005003400100000008ffd826a45856cf1e8262f0bb51ea3b5906c13116f422ab47da143028efb864929dd88ea1262e61e2e7d467888227f002bf843c8554cc80663ef9529d6b461c3c683cf65317c2256f8b784e0f7fe9b5b005392e304d30019186af2f06e1e98da04fa4000ac95d278ea241e3ed0bf7f25aae0127436ef786604035f9e0634174d06fe2d1a407ed1d4d7fabff35e94d81d2e056050825e7989a40eac2721df29457918e21ab6f046f39a2511e03e09e982d0de8c3649dbeb911ce5584cdc559a8c8d9e9bebf1346aa34a0b58807685"], 0x3c}}, 0x0) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010300000000000000001f00000008000300", @ANYRES32=r5], 0x1c}, 0x1, 0x3000000}, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000d80), 0xffffffffffffffff) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="140100002d0001000000000000000000040100800c0000000000000000000000140001000000000000000000000000000000000150bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b50"], 0x114}], 0x1}, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000000), r0) 1.209203088s ago: executing program 4 (id=3867): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x11, 0x3, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@newtaction={0x8c, 0x30, 0xb, 0x0, 0x0, {}, [{0x78, 0x1, [@m_ct={0x74, 0x1, 0x0, 0x0, {{0x7}, {0x4c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}, @TCA_CT_LABELS={0x14, 0x7, "4614c334e344ae53204373dc0ddeb17f"}, @TCA_CT_LABELS_MASK={0x14, 0x8, "eb6404074c369780d3df843c4e5e039f"}, @TCA_CT_ZONE={0x6}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x8c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) sendmsg(r1, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xf}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0xe}], 0x1, 0x0, 0x0, 0x11000000}, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'bridge0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x3}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_MEMORY_LIMIT={0x8, 0x8, 0x6}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x400c884}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [], {0x14}}, 0x28}}, 0x0) pipe(&(0x7f00000000c0)) 1.208964277s ago: executing program 0 (id=3868): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = socket$kcm(0x10, 0x2, 0x0) r4 = getpid() sendmsg$unix(r3, &(0x7f0000001100)={0x0, 0x0, &(0x7f0000004600)=[{&(0x7f0000003140)="fa", 0x1}], 0x1, &(0x7f00000046c0)=[@cred={{0x1c, 0x1, 0x2, {r4, 0xee00, 0xee01}}}, @rights={{0x10}}], 0x30}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xb, 0x1f, 0x402, 0x3ff, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) close(r2) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x19, 0x4, 0x4, 0x9, 0x0, 0x1, 0xff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r5, &(0x7f0000000540), &(0x7f0000000000)=""/7, 0x2}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r6, 0xfca804a0, 0x0, 0x0, 0x0, 0x0, 0x5ee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x5}, 0x50) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@dellink={0x20, 0x11, 0x101, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, r7}}, 0x20}}, 0x20008040) 1.208536028s ago: executing program 2 (id=3869): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r0, &(0x7f0000000480)='cgroup.procs\x00', 0x2, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) epoll_create1(0x0) socket$l2tp6(0xa, 0x2, 0x73) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x1, 0x803, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$inet_udp(0x2, 0x2, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) r3 = socket$l2tp6(0xa, 0x2, 0x73) socket$inet6_udplite(0xa, 0x2, 0x88) socket$l2tp6(0xa, 0x2, 0x73) socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000100)) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="6000000010000304f500"/20, @ANYRES32=0x0, @ANYBLOB="00050000000000003000128009000100766c616e00000000200002800c0002000a0000001f00000006000100000000000600050088a80000080005", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r3], 0x60}}, 0x4000000) 1.174394524s ago: executing program 3 (id=3870): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) r2 = socket$l2tp6(0xa, 0x2, 0x73) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="6000000010000304f500"/20, @ANYRES32=0x0, @ANYBLOB="00050000000000003000128009000100766c616e00000000200002800c0002000a0000001f00000006000100000000000600050088a8000008000500", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r2], 0x60}}, 0x4000000) 1.067279643s ago: executing program 1 (id=3871): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f0000000080), 0x8) sendmsg$SMC_PNETID_ADD(r0, 0x0, 0x4c894) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) syz_emit_ethernet(0x0, 0x0, 0x0) bind$inet6(r3, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r4, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) sendmsg$SMC_PNETID_FLUSH(r2, 0x0, 0xc0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) ioctl$BTRFS_IOC_QGROUP_LIMIT(r3, 0x8030942b, &(0x7f00000000c0)={0x2, {0x4, 0x1, 0x7, 0x7fff, 0x4}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=@RTM_GETMDB={0x0, 0x56, 0x10, 0x70bd25, 0x25dfdbfd, {}, ["", "", "", "", "", ""]}, 0x40}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="0100000000000000000002000000140001800500020001"], 0x28}, 0x1, 0x0, 0x0, 0x20044811}, 0x2000c094) 967.953584ms ago: executing program 2 (id=3872): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000000c0)='sched_process_wait\x00', r0}, 0x18) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r1}, 0x8) close(r2) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$sock_SIOCGSKNS(r3, 0x894c, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="85000000080000004e00000000000000850000007d00000095000000000000007ab9e683b171b4b09980af6c1ebeda4ac0d3e3aa71a9ab17e14e1b0be949499ca6a5b2c467b6d3d1c0ae1e9820331afd90cc832c761aa3adf9be48c401c7f893694bf8cd19b7173cd4688904f7310af046fd490d3f2cf49b5f68aecf0bc659dc3d53c2"], &(0x7f0000000140)='GPL\x00', 0x0, 0xbd, &(0x7f00000004c0)=""/153, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x15) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000440)={r4, 0x0, 0x11, 0x0, &(0x7f0000000600)="61df712bc884fef053a7a9a26e9b722780", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000080)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='sched_process_wait\x00', r5}, 0x10) r7 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r6}, 0x8) close(r7) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/net\x00') r8 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000440)={r8, 0x0, 0x11, 0x0, &(0x7f0000000600)="61df712bc884fef053a7a9a26e9b722780", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 908.952562ms ago: executing program 3 (id=3873): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000300)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f0000000040)=@ccm_128={{0x303}, "066ba919016f75ba", "4e58f4f0375f264184fc43d762c965dd", "f6416856", "2b73d427b9de30e6"}, 0x28) r2 = socket(0x10, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @empty, 0x4000006}, 0x1c) listen(r4, 0x6) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r6 = accept(r3, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r6, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) recvfrom(r5, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x3e8, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000080)={0x5, 0xfffffffb, 0x1000, 0x3108, 0x2}) write(r2, &(0x7f0000000000)="240000001e005f80004000000000000002000000000000000000080008000d00000303ff", 0x24) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000)=0x8000c, 0x4) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000340)) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @empty}, 0x10) 835.059768ms ago: executing program 4 (id=3874): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[], 0x6c}}, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r0, 0x29, 0x18, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000440), 0xffffffffffffffff) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000009f00)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0x3}, 0x24}}, 0x0) socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000b00)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000180)=@newtfilter={0x24, 0x2c, 0x52f, 0x0, 0x25dfdc01, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x2, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r4) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000100)={'wpan0\x00', 0x0}) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r7, &(0x7f0000000040)={0x0, 0x33, &(0x7f0000000340)={&(0x7f0000000480)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0b06000000000000000030000000050036000000000008000200", @ANYRES32=r6, @ANYBLOB="0500350000070000050033000300000005003400100000008ffd826a45856cf1e8262f0bb51ea3b5906c13116f422ab47da143028efb864929dd88ea1262e61e2e7d467888227f002bf843c8554cc80663ef9529d6b461c3c683cf65317c2256f8b784e0f7fe9b5b005392e304d30019186af2f06e1e98da04fa4000ac95d278ea241e3ed0bf7f25aae0127436ef786604035f9e0634174d06fe2d1a407ed1d4d7fabff35e94d81d2e056050825e7989a40eac2721df29457918e21ab6f046f39a2511e03e09e982d0de8c3649dbeb911ce5584cdc559a8c8d9e9bebf1346aa34a0b58807685"], 0x3c}}, 0x0) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010300000000000000001f00000008000300", @ANYRES32=r6], 0x1c}, 0x1, 0x3000000}, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000d80), 0xffffffffffffffff) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="140100002d0001000000000000000000040100800c0000000000000000000000140001000000000000000000000000000000000150bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b50"], 0x114}], 0x1}, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000000), r1) 833.176504ms ago: executing program 2 (id=3875): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480), 0x2a240, 0x0) write$tun(r2, &(0x7f0000001740)={@val={0x0, 0x2}, @val={0x2, 0x0, 0x8, 0x1318, 0x7, 0x5}, @ipv6=@udp={0x5, 0x6, 'w^a', 0x50, 0x11, 0x0, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, {[@hopopts={0x62, 0x0, '\x00', [@generic={0x3}]}, @hopopts={0x32}, @fragment={0x87, 0x0, 0x1, 0x1, 0x0, 0x8, 0x66}, @routing={0x21, 0x0, 0x1, 0x6}, @routing={0x21, 0x2, 0x1, 0xea, 0x0, [@loopback]}], {0x4e21, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x1, 0x0, 0xff, 0x100, @val=0x80}}}}}}, 0x86) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x63, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x0, 0x200000, 0x0, 0x0, 0xffffffff, 0x8003}}}}]}, 0x4c}}, 0x4000844) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000180)='i', 0x1}], 0x1}}], 0x1, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmsg(r0, &(0x7f0000000580)={0x0, 0x7, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1}, 0x700) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x46032, 0xffffffffffffffff, 0x0) recvfrom$inet(r0, &(0x7f0000000280)=""/235, 0xeb, 0x120, 0x0, 0x0) 769.880843ms ago: executing program 0 (id=3876): socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x10, 0x3, 0x0) socket$nl_generic(0x11, 0x3, 0x10) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@newtaction={0x8c, 0x30, 0xb, 0x0, 0x0, {}, [{0x78, 0x1, [@m_ct={0x74, 0x1, 0x0, 0x0, {{0x7}, {0x4c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}, @TCA_CT_LABELS={0x14, 0x7, "4614c334e344ae53204373dc0ddeb17f"}, @TCA_CT_LABELS_MASK={0x14, 0x8, "eb6404074c369780d3df843c4e5e039f"}, @TCA_CT_ZONE={0x6}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x8c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) 694.573002ms ago: executing program 2 (id=3877): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.events\x00', 0x26e1, 0x0) close(r2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000001000010000003a194618d96d6d2e8553", @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) close(0xffffffffffffffff) socket$inet_sctp(0x2, 0x1, 0x84) 630.415329ms ago: executing program 4 (id=3878): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)) bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) sendto$inet6(r0, &(0x7f0000000280)="02042c08ec074802010e0200c52cf7c20675e005b02f0800eb2b2ff0dac8897c6b112002faffffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0xfc13, 0x800, 0x0, 0x2f) 606.019797ms ago: executing program 2 (id=3879): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x4, &(0x7f0000001080)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) writev(r1, &(0x7f0000000280)=[{&(0x7f0000000240)="b1", 0x1}], 0x1) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x304}, "00000100ebffffff", "2607080d7f4fcf00fd4ef6dece6c7c58", '\x00', "006e34fb00"}, 0x28) sendto$inet6(r1, &(0x7f00000001c0), 0xfffffffffffffede, 0x0, 0x0, 0x3000137) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='cachefiles_mkdir\x00', r2, 0x0, 0x80000}, 0x18) r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r3}, 0x8) close(r4) 579.024224ms ago: executing program 0 (id=3880): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) close(r0) pipe(0x0) 476.684067ms ago: executing program 4 (id=3881): r0 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)=@o_path={&(0x7f0000000000)='./file0\x00', 0x0, 0x18}, 0x18) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={@map=0xffffffffffffffff, 0x89f9b7b7373455d, 0x0, 0xf, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x0, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) getsockname$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000240)=0x14) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000001c0)={@ifindex=r3, 0xffffffffffffffff, 0x13, 0x12, r0, @void, @value, @void, @void, r2}, 0x20) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r1, 0x8040942d, &(0x7f0000000280)) r5 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r5, 0x84, 0x16, &(0x7f00000002c0)={0x3, [0x1ff, 0x4, 0x6]}, &(0x7f0000000300)=0xa) r6 = accept4$x25(0xffffffffffffffff, &(0x7f0000000340), &(0x7f0000000380)=0x12, 0x80000) ioctl$SIOCX25GCALLUSERDATA(r6, 0x89e4, &(0x7f00000003c0)={0x61, "a96f599ea275aae202a23244fb6101f5d4bce86e083700b6d769cba2afee365aee83cdf3d963faa1e7b316ed7ba14d37da3fcabfa6cde41802822e8b7890912aee38a13fc7d55dabf89edd66842f2191e6f5fae8a03bf145446df1d74fdd878dd318d42c5130d01c7e5a345323522d024cc2bba25f17f249f05264f5698f15b9"}) r7 = socket(0x2e, 0x80003, 0x80000001) r8 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000480), 0x2, 0x0) write$cgroup_freezer_state(r8, &(0x7f00000004c0)='FROZEN\x00', 0x7) ioctl$AUTOFS_IOC_FAIL(r1, 0x9361, 0x4) r9 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(r9, 0x89e3, &(0x7f0000000500)={0x4c, 0x800, 0xc, 0xa, 0x5}) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r7, 0x894b, &(0x7f0000000540)) sendmsg$IPSET_CMD_GET_BYINDEX(r7, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x24, 0xf, 0x6, 0x301, 0x0, 0x0, {0x5, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x400}, 0x4021) r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000680)='./cgroup/syz1\x00', 0x200002, 0x0) r11 = openat$cgroup_freezer_state(r10, &(0x7f00000006c0), 0x2, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(r4, 0x8919, &(0x7f0000000700)={'netdevsim0\x00', {0x2, 0x0, @initdev}}) socket$kcm(0x29, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r6, 0x8916, &(0x7f0000000740)={'macvtap0\x00', {0x2, 0x4e20, @broadcast}}) ioctl$FIOCLEX(r5, 0x5451) sendmsg$DEVLINK_CMD_SB_POOL_GET(r7, &(0x7f00000008c0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000880)={&(0x7f00000007c0)={0xa0, 0x0, 0x2, 0x70bd26, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xdb3}, {0x6, 0x11, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x2}, {0x6, 0x11, 0x6}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xfbe4}, {0x6, 0x11, 0x6}}]}, 0xa0}, 0x1, 0x0, 0x0, 0x24008090}, 0xf68500379797e816) sendmsg$NFULNL_MSG_CONFIG(r7, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x14, 0x1, 0x4, 0x101, 0x0, 0x0, {0x5, 0x0, 0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x20001084) tee(r11, r10, 0x3, 0x6) r12 = bpf$ITER_CREATE(0x21, &(0x7f0000000b40), 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000bc0)={0x6, 0x10, &(0x7f0000000a00)=@framed={{0x18, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0xdc2a}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x10000}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}]}, &(0x7f0000000a80)='GPL\x00', 0x3, 0x7f, &(0x7f0000000ac0)=""/127, 0x41100, 0x26, '\x00', r3, 0x25, r12, 0x8, &(0x7f0000000b80)={0x5, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc, @void, @value}, 0x94) ioctl$sock_inet_SIOCSIFADDR(r6, 0x8916, &(0x7f0000000c80)={'syzkaller0\x00', {0x2, 0x4e20, @local}}) 474.902999ms ago: executing program 0 (id=3882): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r0, &(0x7f0000000480)='cgroup.procs\x00', 0x2, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) epoll_create1(0x0) socket$l2tp6(0xa, 0x2, 0x73) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x1, 0x803, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$inet_udp(0x2, 0x2, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) r3 = socket$l2tp6(0xa, 0x2, 0x73) socket$inet6_udplite(0xa, 0x2, 0x88) socket$l2tp6(0xa, 0x2, 0x73) socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000100)) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="6000000010000304f500"/20, @ANYRES32=0x0, @ANYBLOB="00050000000000003000128009000100766c616e00000000200002800c0002000a0000001f00000006000100000000000600050088a80000080005", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r3], 0x60}}, 0x4000000) 408.644313ms ago: executing program 4 (id=3883): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) r2 = socket$l2tp6(0xa, 0x2, 0x73) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="6000000010000304f500"/20, @ANYRES32=0x0, @ANYBLOB="00050000000000003000128009000100766c616e00000000200002800c0002000a0000001f00000006000100000000000600050088a8000008000500", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r2], 0x60}}, 0x4000000) 334.792335ms ago: executing program 0 (id=3884): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x4, &(0x7f0000001080)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a800000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) writev(r1, &(0x7f0000000280)=[{&(0x7f0000000240)="b1", 0x1}], 0x1) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x304}, "00000100ebffffff", "2607080d7f4fcf00fd4ef6dece6c7c58", '\x00', "006e34fb00"}, 0x28) sendto$inet6(r1, &(0x7f00000001c0), 0xfffffffffffffede, 0x0, 0x0, 0x3000137) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='cachefiles_mkdir\x00', r2, 0x0, 0x80000}, 0x18) r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r3}, 0x8) close(r4) 305.096125ms ago: executing program 4 (id=3885): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x19, 0xc, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRESOCT=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x4c, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5}, @IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}]}, 0x4c}}, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r1, &(0x7f0000000a80)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000180)="4dd9f7602c74889aca7ae03d6418a057261c28562251542735216afeba455c89fe0e64cdfb6143dea0d86f2bf91c60984c78a668386ef30cbf0e3c86edff5757f3768d801f3cf89b7fd9a839c2165c60aeb811834ce97fe6fcb56fb88822c1dba5c06896b7143fdd423f4a0c110276f78ecbfcff4f9245ab350d626aef480a73113246faf4209529e7003b5b", 0x8c}, {&(0x7f0000000440)="3b3a85ae493f42b142e01a645fe3149c62604645dae5eae1fb21d418be0461374ce9e2afcb069c10bb5070c6e076018ccc2330c1f906231933", 0x39}], 0x2}}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000001340)="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", 0x302}], 0x1}}], 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cgroup.stat\x00', 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x20, 0x2, 0x8, 0x5, 0x0, 0x0, {0xa, 0x0, 0x2}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x80) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(r3, 0x0, 0x0, 0x0) sendmmsg$inet6(r6, &(0x7f0000000500)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000480)="7f7b9068a071c1a93e2b34f567cda4891fc98a935bb1be18c97cbf714fa4cc91e9ed19d0766614d267a79fedc845e3ab12d0b246b52ee7592a836dbf754b2baa73eede2c2982e9496180da700c5231df62238d0d348bd93cb76e927961b424a19c124c17aaf71cc42d0119cfbf201d", 0x6f}, {0x0}, {&(0x7f0000001680)="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", 0x1000}, {&(0x7f0000000700)="82bf9d387881c9ab8f4c49aec37d868032a4b7a2f76a77a07a806d09b08d193353388139d909cdd1760065fe2c0bda65de43bc8d9625d3190564851a3816eeec74459e3415b1b12b0a13217fdc25dc5f0c9e26843a5de9c2b4a5d87a5a236e41b08065e6f29ec275a5c673a95eb3eb658873", 0x72}, {&(0x7f0000000400)="309cc4c769a01cb484e871868e", 0xd}, {&(0x7f0000000800)="2f2a19781f0946665a6444673a82c0feae4dbd7484ccb7bfcd7ef22816fd56599ad2c7e6cc7518282ac65f2f8f73acf3c1fb7aa4fda48fa328d067b6b8b6f4d3bb2ed97b30f212da6402180b77a6f3144def7784fbfd54029d9e4b65818240f54033955fc4202beb0ea4be2d9fd77cef7dc571c429b974cfd59510bc9b5df64eb2d0d7ae318b3f1fa52584ec9aef92f104ce5714d10fb196c4d2bd11a6b9abcb55bd8237e47745d92e40b1b18c7688b7969c32baf71943f1adb6f189ed27b505cf2aa25eb9f56ea5dcf64b50bb2c276913304922f6ba613539cc69260357cbf2739e302f7fdbfb51", 0xe8}], 0x6, &(0x7f0000000900)=[@hopopts={{0x28, 0x29, 0x36, {0x33, 0x1, '\x00', [@padn={0x1, 0x2, [0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x6}]}}}, @dstopts={{0x50, 0x29, 0x37, {0x3a, 0x6, '\x00', [@calipso={0x7, 0x28, {0x0, 0x8, 0x4, 0x10, [0x8, 0x2, 0x0, 0x5]}}, @pad1, @enc_lim={0x4, 0x1, 0x5}, @jumbo={0xc2, 0x4, 0xf3d1}]}}}, @hoplimit={{0x14, 0x29, 0x34, 0x6}}, @tclass={{0x14, 0x29, 0x43, 0x5}}], 0xa8}}], 0x1, 0x400) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x34, 0x0, 0x1, 0x0, 0x25dfdbff, {{}, {}, {0x18, 0x17, {0xe, 0x0, @l2={'eth', 0x3a, 'ipvlan1\x00'}}}}}, 0x34}, 0x1, 0x0, 0x0, 0x20010055}, 0x0) sendto$inet(r1, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000180)={{r0}, &(0x7f0000000040), &(0x7f0000000080)='%pI4 \x00'}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="500000001000370400"/20, @ANYRES32=0x0, @ANYBLOB="8b04040000000000300012800800010073"], 0x50}}, 0x0) close(r7) 233.873236ms ago: executing program 2 (id=3886): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x11, 0x3, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@newtaction={0x8c, 0x30, 0xb, 0x0, 0x0, {}, [{0x78, 0x1, [@m_ct={0x74, 0x1, 0x0, 0x0, {{0x7}, {0x4c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}, @TCA_CT_LABELS={0x14, 0x7, "4614c334e344ae53204373dc0ddeb17f"}, @TCA_CT_LABELS_MASK={0x14, 0x8, "eb6404074c369780d3df843c4e5e039f"}, @TCA_CT_ZONE={0x6}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x8c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) sendmsg(r1, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xf}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0xe}], 0x1, 0x0, 0x0, 0x11000000}, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'bridge0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x3}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_MEMORY_LIMIT={0x8, 0x8, 0x6}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x400c884}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [], {0x14}}, 0x28}}, 0x0) 155.553373ms ago: executing program 1 (id=3887): syz_init_net_socket$llc(0x1a, 0x2, 0x0) socket$packet(0x11, 0x2, 0x300) socket$inet6(0xa, 0x6, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x9) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmmsg(r1, &(0x7f0000002840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20044000) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)={0x28, r3, 0x9, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1d}]}]}, 0x28}}, 0x0) writev(r1, &(0x7f0000000140)=[{0x0}, {0x0}, {&(0x7f0000000500)="9bdf20dd233845fff349382deff7f95780876bd856952ccf98de1ea488cf0d025521ed7c820d309cf88d2c142fe471", 0x2f}], 0x3) 0s ago: executing program 3 (id=3888): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000000a80)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000001340)="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", 0x302}], 0x1}}], 0x1, 0x0) kernel console output (not intermixed with test programs): sim netdevsim2 netdevsim1: renamed from eth1 [ 63.689743][ T5850] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 63.716850][ T5850] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 63.751056][ T5841] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 63.763570][ T5841] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 63.778004][ T5841] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 63.788016][ T5841] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 63.843924][ T5834] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.904199][ T5848] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.915660][ T5833] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.932623][ T5834] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.958581][ T5833] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.970267][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.977540][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.000055][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.007188][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.027267][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.034376][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.063975][ T5848] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.094110][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.101179][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.111721][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.118796][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.140395][ T68] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.147533][ T68] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.199142][ T5841] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.224409][ T5850] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.294762][ T5841] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.314187][ T5850] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.350776][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.357961][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.409616][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.416786][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.478430][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.485593][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.523225][ T2196] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.530331][ T2196] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.618897][ T5833] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.638198][ T5848] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.775092][ T5834] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.851281][ T5833] veth0_vlan: entered promiscuous mode [ 64.900361][ T5833] veth1_vlan: entered promiscuous mode [ 64.906423][ T5839] Bluetooth: hci0: command tx timeout [ 64.927181][ T5848] veth0_vlan: entered promiscuous mode [ 64.938975][ T5848] veth1_vlan: entered promiscuous mode [ 64.981597][ T5839] Bluetooth: hci4: command tx timeout [ 64.982464][ T5843] Bluetooth: hci3: command tx timeout [ 64.987017][ T5839] Bluetooth: hci2: command tx timeout [ 64.993502][ T5851] Bluetooth: hci1: command tx timeout [ 65.020041][ T5841] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.063217][ T5848] veth0_macvtap: entered promiscuous mode [ 65.073644][ T5833] veth0_macvtap: entered promiscuous mode [ 65.098717][ T5850] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.108285][ T5848] veth1_macvtap: entered promiscuous mode [ 65.121136][ T5833] veth1_macvtap: entered promiscuous mode [ 65.175661][ T5841] veth0_vlan: entered promiscuous mode [ 65.187116][ T5841] veth1_vlan: entered promiscuous mode [ 65.198442][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.228429][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.237468][ T5848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.248762][ T5848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.260157][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.275046][ T5848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.286127][ T5848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.297280][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.318978][ T5850] veth0_vlan: entered promiscuous mode [ 65.326130][ T5833] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.336283][ T5833] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.345241][ T5833] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.354103][ T5833] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.367848][ T5848] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.377035][ T5848] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.388767][ T5848] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.397897][ T5848] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.418258][ T5850] veth1_vlan: entered promiscuous mode [ 65.438412][ T5841] veth0_macvtap: entered promiscuous mode [ 65.459204][ T5850] veth0_macvtap: entered promiscuous mode [ 65.472557][ T5841] veth1_macvtap: entered promiscuous mode [ 65.501901][ T5850] veth1_macvtap: entered promiscuous mode [ 65.520613][ T5834] veth0_vlan: entered promiscuous mode [ 65.548783][ T5850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.573201][ T5850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.583385][ T5850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.594905][ T5850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.605798][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.618310][ T5841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.629251][ T5841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.640035][ T5841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.650803][ T5841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.660856][ T5841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.671755][ T5841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.683872][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.709327][ T5850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.719948][ T5850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.730112][ T5850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.740837][ T5850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.752503][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.766416][ T5834] veth1_vlan: entered promiscuous mode [ 65.788181][ T5850] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.803912][ T5850] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.813586][ T5850] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.824069][ T5850] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.834638][ T5841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.845495][ T5841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.855363][ T5841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.865938][ T5841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.875954][ T5841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.886461][ T5841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.897453][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.946578][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.955304][ T5841] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.963294][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.964263][ T5841] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.982414][ T5841] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.991122][ T5841] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.029261][ T2969] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.052116][ T2969] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.079692][ T5834] veth0_macvtap: entered promiscuous mode [ 66.097799][ T2969] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.108470][ T5834] veth1_macvtap: entered promiscuous mode [ 66.109092][ T2969] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.126889][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.140121][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.196359][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.205634][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.242527][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.243480][ T5833] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 66.268013][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.268050][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.268068][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.268081][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.268095][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.268108][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.268121][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.290503][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.358418][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.369367][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.379243][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.390362][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.400484][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.411285][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.423362][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.434011][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.444765][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.487329][ T2969] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.510395][ T5834] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.512574][ T2969] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.528584][ T5834] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.537633][ T5834] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.551489][ T5834] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.588089][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.606844][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.689398][ T5921] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2'. [ 66.716787][ T5921] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2'. [ 66.744259][ T2969] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.781924][ T5921] netlink: 'syz.1.2': attribute type 1 has an invalid length. [ 66.789008][ T2969] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.810590][ T5921] netlink: 10 bytes leftover after parsing attributes in process `syz.1.2'. [ 66.910195][ T5928] tipc: Failed to remove unknown binding: 66,1,1/0:2415693720/2415693722 [ 66.981989][ T5851] Bluetooth: hci0: command tx timeout [ 66.986345][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.032764][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.062432][ T5843] Bluetooth: hci1: command tx timeout [ 67.063139][ T54] Bluetooth: hci4: command tx timeout [ 67.068479][ T5851] Bluetooth: hci2: command tx timeout [ 67.073559][ T5839] Bluetooth: hci3: command tx timeout [ 67.195159][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.218329][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.351166][ T5937] netlink: 1152 bytes leftover after parsing attributes in process `syz.1.9'. [ 67.364548][ T5937] openvswitch: netlink: ufid size 109 bytes exceeds the range (1, 16) [ 67.408130][ T5937] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 67.684029][ T5928] tipc: Failed to remove unknown binding: 66,1,1/0:2415693720/2415693722 [ 67.721585][ T5928] tipc: Failed to remove unknown binding: 66,1,1/0:2415693720/2415693722 [ 67.819347][ T5956] bond_slave_0: entered promiscuous mode [ 67.825297][ T5956] bond_slave_1: entered promiscuous mode [ 67.831332][ T5956] macvtap1: entered promiscuous mode [ 67.836744][ T5956] bond0: entered promiscuous mode [ 67.843710][ T5956] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 67.859363][ T5956] bond0: left promiscuous mode [ 67.863152][ T5955] block nbd2: not configured, cannot reconfigure [ 67.869124][ T5956] bond_slave_0: left promiscuous mode [ 67.876012][ T5956] bond_slave_1: left promiscuous mode [ 68.129978][ T5964] netlink: 176 bytes leftover after parsing attributes in process `syz.3.18'. [ 68.167305][ T5964] netlink: 176 bytes leftover after parsing attributes in process `syz.3.18'. [ 68.201830][ T5962] warning: `syz.1.17' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 68.201887][ T5964] Zero length message leads to an empty skb [ 68.438096][ T5975] Bluetooth: MGMT ver 1.23 [ 68.570813][ T5977] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 68.915639][ T5995] netlink: 4 bytes leftover after parsing attributes in process `syz.4.30'. [ 68.984664][ T6000] netlink: 188 bytes leftover after parsing attributes in process `syz.0.31'. [ 69.016215][ T6000] netlink: 'syz.0.31': attribute type 1 has an invalid length. [ 69.143688][ T5839] Bluetooth: hci3: command tx timeout [ 69.149684][ T54] Bluetooth: hci4: command tx timeout [ 69.158419][ T5839] Bluetooth: hci2: command tx timeout [ 69.158471][ T5851] Bluetooth: hci1: command tx timeout [ 69.259013][ T6017] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 69.738092][ T6038] tipc: Started in network mode [ 69.743483][ T6038] tipc: Node identity 080211000001, cluster identity 4711 [ 69.750831][ T6038] tipc: Enabled bearer , priority 0 [ 69.762609][ T6038] mac80211_hwsim hwsim9 syzkaller0: entered promiscuous mode [ 69.770172][ T6038] mac80211_hwsim hwsim9 syzkaller0: entered allmulticast mode [ 70.556958][ T6087] syz.2.48 uses obsolete (PF_INET,SOCK_PACKET) [ 70.797930][ T6088] netlink: 'syz.3.50': attribute type 11 has an invalid length. [ 70.902422][ T5888] tipc: Node number set to 134418688 [ 71.265135][ T6109] raw_sendmsg: syz.4.56 forgot to set AF_INET. Fix it! [ 71.578790][ T6115] netlink: 4 bytes leftover after parsing attributes in process `syz.2.61'. [ 71.626385][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.635178][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.090875][ T6140] netlink: 28 bytes leftover after parsing attributes in process `syz.0.71'. [ 72.124237][ T6140] netlink: 8 bytes leftover after parsing attributes in process `syz.0.71'. [ 72.241266][ T6144] netlink: 'syz.1.73': attribute type 4 has an invalid length. [ 72.299083][ T6146] netlink: 36 bytes leftover after parsing attributes in process `syz.4.74'. [ 72.366280][ T6150] tipc: Enabling of bearer rejected, already enabled [ 72.379797][ T6150] tipc: Resetting bearer [ 72.937481][ T6170] netlink: 'syz.2.85': attribute type 1 has an invalid length. [ 73.290666][ T6188] netlink: 'syz.0.94': attribute type 1 has an invalid length. [ 73.352357][ T6190] netlink: 4 bytes leftover after parsing attributes in process `syz.0.94'. [ 73.417441][ T6190] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 73.469725][ T6197] netlink: 'syz.2.98': attribute type 1 has an invalid length. [ 73.522215][ T6190] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 73.543625][ T6201] netlink: 4 bytes leftover after parsing attributes in process `syz.2.98'. [ 73.575152][ T6193] hsr0: entered promiscuous mode [ 73.671955][ T6201] hsr_slave_0: left promiscuous mode [ 73.680437][ T6201] hsr_slave_1: left promiscuous mode [ 73.924006][ T6213] netlink: 8 bytes leftover after parsing attributes in process `syz.2.103'. [ 73.975641][ T6213] netlink: 4 bytes leftover after parsing attributes in process `syz.2.103'. [ 73.991108][ T6213] netlink: 32 bytes leftover after parsing attributes in process `syz.2.103'. [ 74.151262][ T6217] pim6reg1: entered promiscuous mode [ 74.164490][ T6217] pim6reg1: entered allmulticast mode [ 74.452398][ T6235] netlink: 'syz.1.110': attribute type 1 has an invalid length. [ 74.510184][ T6235] bond1 (unregistering): Released all slaves [ 74.552947][ T6239] netlink: 12 bytes leftover after parsing attributes in process `syz.0.111'. [ 74.880679][ T6233] infiniband syz1: set active [ 74.899195][ T6233] infiniband syz1: added team_slave_0 [ 75.011291][ T6233] RDS/IB: syz1: added [ 75.053380][ T6233] smc: adding ib device syz1 with port count 1 [ 75.079086][ T6233] smc: ib device syz1 port 1 has pnetid [ 75.159805][ T6258] netlink: 4 bytes leftover after parsing attributes in process `syz.0.118'. [ 76.573229][ T6233] syz.3.109 (6233) used greatest stack depth: 18128 bytes left [ 76.637884][ T6296] netlink: 'syz.3.134': attribute type 21 has an invalid length. [ 76.645806][ T6296] netlink: 'syz.3.134': attribute type 4 has an invalid length. [ 76.653711][ T6296] netlink: 'syz.3.134': attribute type 5 has an invalid length. [ 76.858518][ T6303] vlan2: entered promiscuous mode [ 76.892107][ T6303] bond0: entered promiscuous mode [ 76.897215][ T6303] bond_slave_0: entered promiscuous mode [ 76.941747][ T6303] bond_slave_1: entered promiscuous mode [ 77.023073][ T6303] bond0: left promiscuous mode [ 77.027964][ T6303] bond_slave_0: left promiscuous mode [ 77.043393][ T6303] bond_slave_1: left promiscuous mode [ 77.169599][ T6311] macsec1: entered promiscuous mode [ 77.175892][ T6311] macsec1: entered allmulticast mode [ 77.181365][ T6311] veth1_macvtap: entered allmulticast mode [ 77.208603][ T6311] veth1_macvtap: left allmulticast mode [ 78.211787][ T6336] netlink: 'syz.4.149': attribute type 29 has an invalid length. [ 78.222759][ T6340] __nla_validate_parse: 4 callbacks suppressed [ 78.222777][ T6340] netlink: 8 bytes leftover after parsing attributes in process `syz.2.148'. [ 78.239742][ T6336] netlink: 'syz.4.149': attribute type 29 has an invalid length. [ 78.248347][ T6340] netlink: 4 bytes leftover after parsing attributes in process `syz.2.148'. [ 78.268673][ T6336] netlink: 'syz.4.149': attribute type 29 has an invalid length. [ 78.276670][ T6340] netlink: 'syz.2.148': attribute type 1 has an invalid length. [ 78.285422][ T6336] netlink: 'syz.4.149': attribute type 29 has an invalid length. [ 78.298454][ T6340] netlink: 16 bytes leftover after parsing attributes in process `syz.2.148'. [ 78.311893][ T6336] netlink: 'syz.4.149': attribute type 29 has an invalid length. [ 78.322720][ T6336] netlink: 'syz.4.149': attribute type 29 has an invalid length. [ 78.351968][ T6336] netlink: 'syz.4.149': attribute type 29 has an invalid length. [ 78.364883][ T5851] block nbd0: Receive control failed (result -107) [ 78.821043][ T6372] tipc: Enabled bearer , priority 10 [ 79.648018][ T6410] netlink: 24 bytes leftover after parsing attributes in process `syz.4.172'. [ 80.210087][ T6436] batman_adv: batadv0: Adding interface: dummy0 [ 80.223538][ T6436] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.252532][ T6441] netlink: 8 bytes leftover after parsing attributes in process `syz.0.183'. [ 80.259649][ T6436] batman_adv: batadv0: Interface activated: dummy0 [ 80.369523][ T6436] batadv0: mtu less than device minimum [ 80.383171][ T6436] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 80.396111][ T6436] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 80.408529][ T6436] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 80.421074][ T6436] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 80.433589][ T6436] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 80.445695][ T6436] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 80.458232][ T6436] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 80.470781][ T6436] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 80.483191][ T6436] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 80.972485][ T6459] netlink: 'syz.1.188': attribute type 1 has an invalid length. [ 81.044610][ T6459] 8021q: adding VLAN 0 to HW filter on device bond1 [ 81.096590][ T6463] netlink: 4 bytes leftover after parsing attributes in process `syz.1.188'. [ 81.141297][ T6462] bridge_slave_0: left allmulticast mode [ 81.167242][ T6462] bridge_slave_0: left promiscuous mode [ 81.192592][ T6462] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.237564][ T6462] bridge_slave_1: left allmulticast mode [ 81.247131][ T6462] bridge_slave_1: left promiscuous mode [ 81.259842][ T6462] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.288764][ T6462] bond0: (slave bond_slave_0): Releasing backup interface [ 81.346270][ T6462] bond0: (slave bond_slave_1): Releasing backup interface [ 81.356370][ T6469] netlink: 'syz.3.191': attribute type 1 has an invalid length. [ 81.397310][ T6462] team0: Port device team_slave_0 removed [ 81.420735][ T6462] team0: Port device team_slave_1 removed [ 81.430026][ T6462] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 81.438774][ T6462] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 81.448839][ T6462] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 81.458493][ T6462] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 81.473126][ T6475] netlink: 4 bytes leftover after parsing attributes in process `syz.3.191'. [ 81.778909][ T6463] bond1 (unregistering): Released all slaves [ 81.875364][ T6469] bond1: entered promiscuous mode [ 81.886494][ T8] cfg80211: failed to load regulatory.db [ 81.905602][ T6469] 8021q: adding VLAN 0 to HW filter on device bond1 [ 81.959683][ T6473] 8021q: adding VLAN 0 to HW filter on device bond1 [ 81.973857][ T6473] bond1: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 82.003556][ T6473] bond1: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 82.041106][ T6473] bond1: (slave ip6gre1): making interface the new active one [ 82.065418][ T6473] ip6gre1: entered promiscuous mode [ 82.076740][ T6473] bond1: (slave ip6gre1): Enslaving as an active interface with an up link [ 82.339494][ T6500] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 82.376718][ T6501] : renamed from ipvlan1 [ 82.562632][ T6503] netlink: 4 bytes leftover after parsing attributes in process `syz.0.204'. [ 82.580654][ T6508] netlink: 20 bytes leftover after parsing attributes in process `syz.2.205'. [ 82.647689][ T6508] netlink: 1256 bytes leftover after parsing attributes in process `syz.2.205'. [ 82.689241][ T6510] batman_adv: batadv0: Interface deactivated: dummy0 [ 82.711825][ T6510] batman_adv: batadv0: Removing interface: dummy0 [ 82.758998][ T6510] bridge_slave_0: left allmulticast mode [ 82.779631][ T6510] bridge_slave_0: left promiscuous mode [ 82.801819][ T6510] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.832238][ T6510] bridge_slave_1: left allmulticast mode [ 82.837945][ T6510] bridge_slave_1: left promiscuous mode [ 82.871898][ T6510] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.910547][ T6510] bond0: (slave bond_slave_0): Releasing backup interface [ 82.937457][ T6510] bond0: (slave bond_slave_1): Releasing backup interface [ 82.994692][ T6510] team0: Port device team_slave_0 removed [ 83.070132][ T6510] team0: Port device team_slave_1 removed [ 83.077696][ T6510] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 83.087879][ T6510] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 83.102992][ T6510] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 83.112989][ T6510] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 83.422032][ T6529] netlink: 'syz.4.214': attribute type 1 has an invalid length. [ 83.535129][ T6529] bond1: entered promiscuous mode [ 83.556382][ T6532] netlink: 4 bytes leftover after parsing attributes in process `syz.1.216'. [ 83.570762][ T6529] 8021q: adding VLAN 0 to HW filter on device bond1 [ 83.603126][ T6538] netlink: 4 bytes leftover after parsing attributes in process `syz.4.214'. [ 83.648609][ T6534] 8021q: adding VLAN 0 to HW filter on device bond1 [ 83.655815][ T6534] bond1: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 83.670905][ T6534] bond1: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 83.685426][ T6534] bond1: (slave ip6gre1): making interface the new active one [ 83.709694][ T6534] ip6gre1: entered promiscuous mode [ 83.721249][ T6534] bond1: (slave ip6gre1): Enslaving as an active interface with an up link [ 83.879211][ T6546] netlink: 4 bytes leftover after parsing attributes in process `syz.1.216'. [ 84.007596][ T6538] bond1 (unregistering): (slave ip6gre1): Releasing backup interface [ 84.022724][ T6538] ip6gre1: left promiscuous mode [ 84.036766][ T6538] bond1 (unregistering): Released all slaves [ 84.277156][ T6550] netlink: 40 bytes leftover after parsing attributes in process `syz.4.222'. [ 85.528879][ T6586] net_ratelimit: 12 callbacks suppressed [ 85.528892][ T6586] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 85.923423][ T6607] vlan2: entered promiscuous mode [ 86.357515][ T6620] netlink: 24 bytes leftover after parsing attributes in process `syz.2.246'. [ 86.480519][ T6624] netlink: 4 bytes leftover after parsing attributes in process `syz.3.247'. [ 86.816891][ T6635] netlink: 36 bytes leftover after parsing attributes in process `syz.1.250'. [ 86.845829][ T6635] netlink: 16 bytes leftover after parsing attributes in process `syz.1.250'. [ 86.857729][ T6635] netlink: 36 bytes leftover after parsing attributes in process `syz.1.250'. [ 86.922697][ T6635] netlink: 36 bytes leftover after parsing attributes in process `syz.1.250'. [ 87.522977][ T5890] IPVS: starting estimator thread 0... [ 87.625399][ T6665] IPVS: using max 25 ests per chain, 60000 per kthread [ 88.712190][ T6674] __nla_validate_parse: 1 callbacks suppressed [ 88.712208][ T6674] netlink: 4 bytes leftover after parsing attributes in process `syz.3.265'. [ 89.252639][ C1] vcan0: j1939_tp_rxtimer: 0xffff88803046f400: rx timeout, send abort [ 89.262381][ C1] vcan0: j1939_tp_rxtimer: 0xffff88803046f800: rx timeout, send abort [ 89.271673][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88803046f400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 89.289963][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88803046f800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 89.777406][ T6683] netlink: 416 bytes leftover after parsing attributes in process `syz.4.268'. [ 89.796200][ T6683] openvswitch: netlink: Flow key attr not present in new flow. [ 89.931266][ T6686] netlink: 'syz.1.270': attribute type 10 has an invalid length. [ 90.016217][ T6686] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 90.068096][ T6692] pimreg: entered allmulticast mode [ 90.174217][ T6697] netlink: 68 bytes leftover after parsing attributes in process `syz.4.274'. [ 90.389380][ T6710] tipc: Started in network mode [ 90.394625][ T6710] tipc: Node identity 0a73f2bba5d4, cluster identity 4711 [ 90.406111][ T6710] tipc: Enabled bearer , priority 7 [ 90.414283][ T6710] ªªªªªª: renamed from syzkaller0 [ 90.423341][ T6710] tipc: Disabling bearer [ 90.430748][ T6712] netlink: 8 bytes leftover after parsing attributes in process `syz.1.279'. [ 90.440000][ T6712] netlink: 24 bytes leftover after parsing attributes in process `syz.1.279'. [ 90.597006][ T6717] netlink: 4 bytes leftover after parsing attributes in process `syz.0.281'. [ 90.765853][ T6725] netlink: 'syz.1.285': attribute type 10 has an invalid length. [ 90.791279][ T6725] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.819324][ T6725] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 91.065311][ T6736] Bluetooth: hci0: Opcode 0x0c20 failed: -22 [ 91.169949][ T6744] netlink: 4 bytes leftover after parsing attributes in process `syz.2.292'. [ 91.179516][ T6739] netlink: 'syz.0.290': attribute type 1 has an invalid length. [ 91.211686][ T6739] netlink: 224 bytes leftover after parsing attributes in process `syz.0.290'. [ 91.370690][ T6752] netlink: 36 bytes leftover after parsing attributes in process `syz.1.294'. [ 91.585713][ T6763] netlink: 52 bytes leftover after parsing attributes in process `syz.0.296'. [ 92.233684][ T6785] netlink: 'syz.4.306': attribute type 1 has an invalid length. [ 92.301186][ T6785] netlink: 'syz.4.306': attribute type 2 has an invalid length. [ 92.552331][ T6801] bond0: entered promiscuous mode [ 93.142432][ T54] Bluetooth: hci0: command tx timeout [ 93.222997][ T54] Bluetooth: hci4: command 0x0405 tx timeout [ 93.364776][ T6844] openvswitch: netlink: IP tunnel dst address not specified [ 93.552153][ T6854] IPv6: Can't replace route, no match found [ 93.877776][ T6870] __nla_validate_parse: 3 callbacks suppressed [ 93.877796][ T6870] netlink: 256 bytes leftover after parsing attributes in process `syz.4.340'. [ 95.017220][ T6928] x_tables: duplicate entry at hook 2 [ 95.310484][ T6943] netlink: 'syz.4.377': attribute type 2 has an invalid length. [ 95.379172][ T6945] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 95.402860][ T6945] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 95.442669][ T6945] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 95.829581][ T6970] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode [ 95.841893][ T6970] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode [ 95.880894][ T6974] C: renamed from lo (while UP) [ 95.893833][ T6973] netlink: 4 bytes leftover after parsing attributes in process `syz.0.392'. [ 95.908836][ T6974] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 96.027998][ T6980] netlink: 4 bytes leftover after parsing attributes in process `syz.0.395'. [ 98.224373][ T7045] x_tables: (null)_tables: DNAT target: only valid in nat table, not syz0 [ 98.423455][ T7049] ip6erspan0: entered allmulticast mode [ 98.765953][ T7067] Illegal XDP return value 4294967274 on prog (id 125) dev N/A, expect packet loss! [ 98.949375][ T7074] netlink: 'syz.0.431': attribute type 10 has an invalid length. [ 99.036648][ T7074] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 99.213871][ T7082] netlink: 4 bytes leftover after parsing attributes in process `syz.1.432'. [ 99.236910][ T7082] netlink: 12 bytes leftover after parsing attributes in process `syz.1.432'. [ 99.441479][ T7088] tipc: Started in network mode [ 99.446525][ T7088] tipc: Node identity 7, cluster identity 4711 [ 99.452858][ T7088] tipc: Node number set to 7 [ 100.123194][ T7117] netlink: 'syz.3.449': attribute type 1 has an invalid length. [ 100.277682][ T7125] netlink: 16 bytes leftover after parsing attributes in process `syz.0.452'. [ 100.511779][ T7135] netlink: 28 bytes leftover after parsing attributes in process `syz.2.457'. [ 100.933000][ T7152] netlink: 8 bytes leftover after parsing attributes in process `syz.1.466'. [ 101.437102][ T7176] netlink: 8 bytes leftover after parsing attributes in process `syz.2.476'. [ 101.532236][ T7180] netlink: 4 bytes leftover after parsing attributes in process `syz.4.474'. [ 101.552074][ T7184] netlink: 8 bytes leftover after parsing attributes in process `syz.1.478'. [ 101.588494][ T7180] bridge_slave_1: left allmulticast mode [ 101.609737][ T7180] bridge_slave_1: left promiscuous mode [ 101.648093][ T7180] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.664592][ T7180] bridge_slave_0: left allmulticast mode [ 101.670323][ T7180] bridge_slave_0: left promiscuous mode [ 101.676394][ T7180] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.851627][ T7188] vlan0: entered promiscuous mode [ 101.876532][ T7196] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.796633][ T7228] nft_compat: unsupported protocol 0 [ 102.983687][ T7233] openvswitch: netlink: Geneve opt len 2 is not a multiple of 4. [ 103.386250][ T7245] netlink: 'syz.4.507': attribute type 1 has an invalid length. [ 103.401801][ T7245] netlink: 224 bytes leftover after parsing attributes in process `syz.4.507'. [ 103.692612][ T7253] xt_l2tp: unknown flags: 18 [ 103.915762][ T7262] netlink: 'syz.3.517': attribute type 1 has an invalid length. [ 103.941907][ T7262] netlink: 244 bytes leftover after parsing attributes in process `syz.3.517'. [ 104.804388][ T7286] bond1: entered promiscuous mode [ 104.814432][ T7286] bond1: entered allmulticast mode [ 104.840229][ T7286] 8021q: adding VLAN 0 to HW filter on device bond1 [ 104.860128][ T7291] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 104.869260][ T7290] netlink: 'syz.4.528': attribute type 10 has an invalid length. [ 105.585789][ T7310] netlink: 60 bytes leftover after parsing attributes in process `syz.1.538'. [ 105.615974][ T7310] unsupported nlmsg_type 40 [ 106.119689][ T7327] netlink: 4 bytes leftover after parsing attributes in process `syz.1.546'. [ 106.320585][ T7215] Set syz1 is full, maxelem 65536 reached [ 106.339830][ T7337] netlink: 8 bytes leftover after parsing attributes in process `syz.0.550'. [ 106.464825][ T7341] netlink: 12 bytes leftover after parsing attributes in process `syz.4.552'. [ 106.547518][ T7347] netlink: 'syz.0.557': attribute type 10 has an invalid length. [ 107.219052][ T7390] netlink: 40 bytes leftover after parsing attributes in process `syz.3.572'. [ 107.444633][ T7400] "syz.3.576" (7400) uses obsolete ecb(arc4) skcipher [ 108.276625][ T7448] netlink: 12 bytes leftover after parsing attributes in process `syz.4.595'. [ 108.311814][ T7448] netlink: 12 bytes leftover after parsing attributes in process `syz.4.595'. [ 108.330055][ T7453] openvswitch: netlink: Invalid VLAN frame [ 109.950725][ T7543] netlink: 168 bytes leftover after parsing attributes in process `syz.0.630'. [ 110.732410][ T7576] netlink: 4 bytes leftover after parsing attributes in process `syz.1.644'. [ 111.226689][ T7612] veth0_to_team: entered promiscuous mode [ 111.273418][ T7612] veth0_to_team: entered allmulticast mode [ 111.333981][ T7620] netlink: 12 bytes leftover after parsing attributes in process `syz.2.667'. [ 111.492324][ T7631] tipc: New replicast peer: 255.255.255.255 [ 111.521465][ T7631] tipc: Enabled bearer , priority 10 [ 111.904081][ T7653] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.680'. [ 111.930521][ T7653] netlink: zone id is out of range [ 111.940831][ T7653] netlink: zone id is out of range [ 111.958495][ T7653] netlink: get zone limit has 8 unknown bytes [ 112.433788][ T7673] xt_CT: No such helper "pptp" [ 113.361091][ T7733] netlink: 168 bytes leftover after parsing attributes in process `syz.2.712'. [ 113.550158][ T7745] netlink: 'syz.4.714': attribute type 1 has an invalid length. [ 113.813029][ T7757] pim6reg: entered allmulticast mode [ 114.208915][ T7773] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 114.218171][ T7773] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 114.227026][ T7773] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 114.235812][ T7773] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 114.386992][ T7773] vxlan0: entered promiscuous mode [ 114.392996][ T7773] vxlan0: entered allmulticast mode [ 114.444797][ T7773] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 114.453802][ T7773] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 114.463806][ T7773] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 114.472844][ T7773] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 116.287330][ T7890] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.775'. [ 116.342073][ T7884] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.775'. [ 117.368927][ T7949] netlink: 20 bytes leftover after parsing attributes in process `syz.1.806'. [ 117.467441][ T7954] netlink: 64 bytes leftover after parsing attributes in process `syz.2.808'. [ 119.991029][ T8057] netlink: 4 bytes leftover after parsing attributes in process `syz.0.853'. [ 120.002224][ T8050] netlink: 1152 bytes leftover after parsing attributes in process `syz.3.850'. [ 120.029413][ T8050] openvswitch: netlink: ufid size 109 bytes exceeds the range (1, 16) [ 120.043223][ T8057] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 120.049998][ T8050] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 120.069035][ T8057] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 120.606550][ T8078] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 120.662024][ T8078] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 120.764138][ T8086] tipc: Failed to remove unknown binding: 66,1,1/0:322981246/322981248 [ 120.906846][ T8088] netlink: 8 bytes leftover after parsing attributes in process `syz.0.866'. [ 120.948885][ T8088] netlink: 4 bytes leftover after parsing attributes in process `syz.0.866'. [ 120.978205][ T8091] netlink: 1152 bytes leftover after parsing attributes in process `syz.2.867'. [ 120.991573][ T8088] netlink: 'syz.0.866': attribute type 1 has an invalid length. [ 121.009655][ T8091] openvswitch: netlink: ufid size 109 bytes exceeds the range (1, 16) [ 121.021623][ T8088] netlink: 10 bytes leftover after parsing attributes in process `syz.0.866'. [ 121.031665][ T8091] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 121.150612][ T8096] tipc: Failed to remove unknown binding: 66,1,1/0:322981246/322981248 [ 121.159190][ T8096] tipc: Failed to remove unknown binding: 66,1,1/0:322981246/322981248 [ 121.334164][ T8088] nbd: socks must be embedded in a SOCK_ITEM attr [ 121.343214][ T8088] block nbd2: shutting down sockets [ 121.537998][ T8113] netlink: 128 bytes leftover after parsing attributes in process `syz.0.875'. [ 121.721435][ T8123] netlink: 1152 bytes leftover after parsing attributes in process `syz.4.880'. [ 121.730572][ T8123] openvswitch: netlink: ufid size 109 bytes exceeds the range (1, 16) [ 121.739283][ T8123] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 121.842111][ T8130] netlink: 96 bytes leftover after parsing attributes in process `syz.3.883'. [ 122.055160][ T8136] tipc: Failed to remove unknown binding: 66,1,1/134418688:34295342/34295344 [ 122.296951][ T8147] netlink: 4 bytes leftover after parsing attributes in process `syz.3.891'. [ 122.535479][ T8159] netlink: 4 bytes leftover after parsing attributes in process `syz.3.898'. [ 122.545652][ T8159] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 122.553761][ T8159] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 122.562902][ T8159] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 122.576961][ T8159] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 122.637448][ T8163] netlink: 'syz.2.900': attribute type 1 has an invalid length. [ 123.287896][ T8193] netlink: 4 bytes leftover after parsing attributes in process `syz.0.910'. [ 123.820663][ T8209] netlink: 4 bytes leftover after parsing attributes in process `syz.2.916'. [ 124.117587][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 124.124268][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 125.192951][ T8258] netlink: 4 bytes leftover after parsing attributes in process `syz.2.934'. [ 125.799138][ T8284] netlink: 4 bytes leftover after parsing attributes in process `syz.4.946'. [ 125.909559][ T8291] netlink: 20 bytes leftover after parsing attributes in process `syz.3.949'. [ 125.969550][ T8291] openvswitch: netlink: Encap mask attribute is set for non-VLAN frame. [ 126.488574][ T8319] smc: net device wg0 applied user defined pnetid SYZ0 [ 126.512584][ T8319] netlink: 'syz.3.959': attribute type 39 has an invalid length. [ 126.589174][ T8319] smc: removing net device wg0 with user defined pnetid SYZ0 [ 126.898771][ T8324] trusted_key: syz.3.962 sent an empty control message without MSG_MORE. [ 127.424045][ T8321] dccp_check_seqno: Step 6 failed for RESET packet, (LSWL(108889310300132) <= P.seqno(108889310300131) <= S.SWH(108889310300206)) and (P.ackno exists or LAWL(200181710253147) <= P.ackno(200181710253148) <= S.AWH(200181710253148), sending SYNC... [ 127.675180][ T8343] syz.2.969[8343] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 127.675294][ T8343] syz.2.969[8343] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 127.711834][ T8343] syz.2.969[8343] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 127.894586][ T8347] tipc: Enabled bearer , priority 0 [ 128.102670][ T8349] syzkaller0: entered promiscuous mode [ 128.137274][ T8349] syzkaller0: entered allmulticast mode [ 128.164365][ T8349] tipc: Resetting bearer [ 128.189587][ T8353] __nla_validate_parse: 1 callbacks suppressed [ 128.189607][ T8353] netlink: 4 bytes leftover after parsing attributes in process `syz.2.973'. [ 136.065101][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 137.484495][ T8345] tipc: Resetting bearer [ 139.049336][ T8345] tipc: Disabling bearer [ 139.267101][ T8387] syz.3.984[8387] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 139.267187][ T8387] syz.3.984[8387] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 139.305007][ T8387] syz.3.984[8387] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 139.666193][ T8403] netlink: 'syz.0.989': attribute type 1 has an invalid length. [ 139.857319][ T8403] bond2: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 139.895026][ T8403] 8021q: adding VLAN 0 to HW filter on device bond2 [ 139.898282][ T68] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 140.008333][ T8412] netlink: 'syz.2.1004': attribute type 1 has an invalid length. [ 140.033859][ T68] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 140.054152][ T8412] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1004'. [ 140.286454][ T8430] netlink: 240 bytes leftover after parsing attributes in process `syz.4.1001'. [ 140.505665][ T8440] netlink: 'syz.3.1006': attribute type 10 has an invalid length. [ 140.633636][ T8450] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1005'. [ 140.661833][ T8449] bridge_slave_0: left allmulticast mode [ 140.692903][ T8449] bridge_slave_0: left promiscuous mode [ 140.711766][ T8449] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.741174][ T8455] netlink: 'syz.3.1010': attribute type 10 has an invalid length. [ 140.769127][ T8449] bridge_slave_1: left allmulticast mode [ 140.788623][ T8449] bridge_slave_1: left promiscuous mode [ 140.795229][ T8449] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.827050][ T8449] bond0: (slave bond_slave_0): Releasing backup interface [ 140.854174][ T8449] bond0: (slave bond_slave_1): Releasing backup interface [ 140.928140][ T8449] infiniband syz1: set down [ 140.935184][ T8449] team0: Port device team_slave_0 removed [ 140.969822][ T8449] team0: Port device team_slave_1 removed [ 140.993670][ T8449] bond1: (slave ip6gre1): Releasing backup interface [ 141.000419][ T8449] ip6gre1: left promiscuous mode [ 141.070251][ T8455] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 141.114827][ T8466] mac80211_hwsim hwsim9 syzkaller0: left promiscuous mode [ 141.151648][ T8466] mac80211_hwsim hwsim9 syzkaller0: left allmulticast mode [ 141.293921][ T8476] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1019'. [ 141.330056][ T8478] netlink: 'syz.2.1020': attribute type 4 has an invalid length. [ 141.499313][ T8484] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1022'. [ 141.533947][ T8484] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1022'. [ 142.027883][ T8514] mac80211_hwsim hwsim9 wlan1: entered promiscuous mode [ 142.044154][ T8514] macvtap1: entered promiscuous mode [ 142.049650][ T8514] bond0: entered promiscuous mode [ 142.056956][ T8514] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 142.080916][ T8514] bond0: left promiscuous mode [ 142.086919][ T8514] mac80211_hwsim hwsim9 wlan1: left promiscuous mode [ 142.751132][ T8535] tipc: Enabled bearer , priority 0 [ 142.854900][ T8535] syzkaller0: entered promiscuous mode [ 142.865164][ T8547] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1049'. [ 142.874543][ T8535] syzkaller0: entered allmulticast mode [ 142.881615][ T8535] tipc: Resetting bearer [ 142.893184][ T8539] vlan3: entered promiscuous mode [ 142.923521][ T8539] bond0: entered promiscuous mode [ 142.928611][ T8539] mac80211_hwsim hwsim5 wlan1: entered promiscuous mode [ 142.955473][ T8539] batadv0: entered promiscuous mode [ 142.967558][ T8539] bond0: left promiscuous mode [ 142.973087][ T8539] mac80211_hwsim hwsim5 wlan1: left promiscuous mode [ 142.980622][ T8539] batadv0: left promiscuous mode [ 143.029695][ T8534] tipc: Resetting bearer [ 143.091102][ T8551] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1053'. [ 143.113022][ T8551] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1053'. [ 143.150802][ T8551] netlink: 'syz.0.1053': attribute type 1 has an invalid length. [ 143.167439][ T8551] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1053'. [ 143.235080][ T5851] block nbd2: Receive control failed (result -107) [ 143.874340][ T8] tipc: Node number set to 2947019451 [ 144.593878][ T8534] tipc: Disabling bearer [ 144.611579][ T8558] netlink: 'syz.1.1055': attribute type 29 has an invalid length. [ 144.785338][ T8571] tipc: Started in network mode [ 144.790407][ T8571] tipc: Node identity fe800000000000000000000000000013, cluster identity 4711 [ 144.801850][ T8571] tipc: Enabled bearer , priority 10 [ 145.089558][ T8591] netlink: 176 bytes leftover after parsing attributes in process `syz.1.1066'. [ 145.099428][ T8591] netlink: 176 bytes leftover after parsing attributes in process `syz.1.1066'. [ 145.536871][ T8615] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1079'. [ 145.935195][ T5890] tipc: Node number set to 4269801491 [ 146.303366][ T8612] tipc: Failed to remove unknown binding: 66,1,1/7:3848554495/3848554497 [ 146.320394][ T8612] tipc: Failed to remove unknown binding: 66,1,1/7:3848554495/3848554497 [ 146.844252][ T8678] tipc: Failed to remove unknown binding: 66,1,1/7:49955721/49955723 [ 146.933694][ T8681] tipc: Failed to remove unknown binding: 66,1,1/7:49955721/49955723 [ 146.945502][ T8681] tipc: Failed to remove unknown binding: 66,1,1/7:49955721/49955723 [ 147.797949][ T8718] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 147.855431][ T8718] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 147.912785][ T8723] sch_tbf: burst 720 is lower than device lo mtu (65550) ! [ 147.934988][ T8727] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1131'. [ 148.130952][ T8731] tipc: Failed to remove unknown binding: 66,1,1/7:110313194/110313196 [ 148.209429][ T8740] tipc: Failed to remove unknown binding: 66,1,1/7:110313194/110313196 [ 148.238996][ T8740] tipc: Failed to remove unknown binding: 66,1,1/7:110313194/110313196 [ 149.180172][ T8769] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 149.189326][ T8769] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 149.198363][ T8769] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 149.207363][ T8769] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 149.217571][ T8769] vxlan0: entered promiscuous mode [ 149.222826][ T8769] vxlan0: entered allmulticast mode [ 149.248287][ T8769] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 149.257283][ T8769] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 149.266440][ T8769] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 149.275640][ T8769] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 149.499569][ T8781] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1157'. [ 149.592244][ T8787] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1160'. [ 149.709105][ T8792] tipc: Failed to remove unknown binding: 66,1,1/7:3061821364/3061821366 [ 149.753988][ T8795] bond0: (slave bond_slave_0): Releasing backup interface [ 149.777197][ T8795] bond0: (slave bond_slave_1): Releasing backup interface [ 149.804762][ T8798] netlink: 'syz.4.1164': attribute type 10 has an invalid length. [ 149.812950][ T8799] tipc: Failed to remove unknown binding: 66,1,1/7:3061821364/3061821366 [ 149.813008][ T8799] tipc: Failed to remove unknown binding: 66,1,1/7:3061821364/3061821366 [ 149.858648][ T8795] team0: Port device team_slave_0 removed [ 149.875055][ T8795] team0: Port device team_slave_1 removed [ 149.881886][ T8795] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 149.889682][ T8795] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 149.903734][ T8795] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 149.911158][ T8795] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 149.958400][ T8798] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 150.695643][ T8835] netlink: 'syz.2.1182': attribute type 10 has an invalid length. [ 150.778187][ T8835] mac80211_hwsim hwsim7 wlan1: entered promiscuous mode [ 150.822049][ T8835] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 151.243772][ T8861] tipc: Failed to remove unknown binding: 66,1,1/4269801491:2825668663/2825668665 [ 151.617808][ T8879] tipc: Failed to remove unknown binding: 66,1,1/4269801491:2825668663/2825668665 [ 151.632067][ T8879] tipc: Failed to remove unknown binding: 66,1,1/4269801491:2825668663/2825668665 [ 151.642445][ T8882] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1202'. [ 151.986573][ T8896] netlink: 'syz.0.1210': attribute type 1 has an invalid length. [ 152.004517][ T8896] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1210'. [ 152.100870][ T8903] netlink: 'syz.4.1209': attribute type 10 has an invalid length. [ 152.113314][ T8898] bond0: (slave wlan1): Releasing backup interface [ 152.139173][ T8903] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 152.215806][ T8907] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1214'. [ 152.320709][ T8909] tipc: Failed to remove unknown binding: 66,1,1/7:2444471041/2444471043 [ 152.524717][ T8917] tipc: Failed to remove unknown binding: 66,1,1/7:2444471041/2444471043 [ 152.533368][ T8917] tipc: Failed to remove unknown binding: 66,1,1/7:2444471041/2444471043 [ 153.211806][ T8950] tipc: Failed to remove unknown binding: 66,1,1/7:1650983620/1650983622 [ 153.231828][ T8953] netlink: 'syz.4.1232': attribute type 10 has an invalid length. [ 153.245942][ T8952] netlink: 'syz.1.1235': attribute type 1 has an invalid length. [ 153.268061][ T8952] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1235'. [ 153.683601][ T8967] tipc: Failed to remove unknown binding: 66,1,1/7:1650983620/1650983622 [ 153.694442][ T8967] tipc: Failed to remove unknown binding: 66,1,1/7:1650983620/1650983622 [ 153.723604][ T8969] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1243'. [ 153.940796][ T8976] netlink: 'syz.1.1248': attribute type 1 has an invalid length. [ 153.996143][ T8976] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1248'. [ 154.307151][ T8996] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1253'. [ 154.640513][ T9017] netlink: 'syz.3.1262': attribute type 10 has an invalid length. [ 154.689259][ T9014] bond0: (slave wlan1): Releasing backup interface [ 154.718026][ T9019] tipc: Failed to remove unknown binding: 66,1,1/7:1133006639/1133006641 [ 154.726567][ T9019] tipc: Failed to remove unknown binding: 66,1,1/7:1133006639/1133006641 [ 154.751520][ T9017] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 155.316241][ T9050] bridge_slave_0: left allmulticast mode [ 155.325696][ T9050] bridge0: port 1(bridge_slave_0) entered disabled state [ 155.339455][ T9050] bridge_slave_1: left allmulticast mode [ 155.348510][ T9050] bridge_slave_1: left promiscuous mode [ 155.354792][ T9050] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.358506][ T9054] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1280'. [ 155.367811][ T9055] netlink: 'syz.0.1279': attribute type 10 has an invalid length. [ 155.379460][ T9056] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1275'. [ 155.392800][ T9050] bond0: (slave bond_slave_0): Releasing backup interface [ 155.408363][ T9050] bond0: (slave bond_slave_1): Releasing backup interface [ 155.445089][ T9050] team0: Port device team_slave_0 removed [ 155.460913][ T9050] team0: Port device team_slave_1 removed [ 155.478779][ T9050] bond0: (slave wlan1): Releasing backup interface [ 155.488395][ T9050] bond2: (slave ip6gretap1): Removing an active aggregator [ 155.497376][ T6053] bond2: Warning: Found an uninitialized port [ 155.513199][ T9050] bond2: (slave ip6gretap1): Releasing backup interface [ 155.525885][ T9052] C: renamed from lo (while UP) [ 155.533034][ T9052] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 155.572600][ T9055] 8021q: adding VLAN 0 to HW filter on device bond0 [ 155.592068][ T9055] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 156.172550][ T9086] tipc: Failed to remove unknown binding: 66,1,1/0:424438597/424438599 [ 156.214688][ T9086] tipc: Failed to remove unknown binding: 66,1,1/0:424438597/424438599 [ 156.244976][ T9083] bond0: (slave wlan1): Releasing backup interface [ 156.260057][ T9091] netlink: 'syz.0.1290': attribute type 10 has an invalid length. [ 156.333141][ T9090] bond0: (slave wlan1): Releasing backup interface [ 156.340880][ T9094] netlink: 'syz.3.1292': attribute type 10 has an invalid length. [ 156.393853][ T9091] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 156.463309][ T9094] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 157.062358][ T9131] openvswitch: netlink: IP tunnel dst address not specified [ 157.080399][ T9129] bond0: (slave wlan1): Releasing backup interface [ 157.095274][ T9132] netlink: 'syz.0.1308': attribute type 10 has an invalid length. [ 157.135192][ T9129] debugfs: Directory 'netdev:phy5-monitor' with parent 'phy5' already present! [ 157.223900][ T9132] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 157.662210][ T9160] netlink: 'syz.0.1322': attribute type 1 has an invalid length. [ 157.676129][ T9160] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1322'. [ 157.848398][ T9168] tipc: Failed to remove unknown binding: 66,1,1/7:3244779425/3244779427 [ 157.920069][ T9172] tipc: Failed to remove unknown binding: 66,1,1/0:1287470988/1287470990 [ 157.941137][ T9172] tipc: Failed to remove unknown binding: 66,1,1/0:1287470988/1287470990 [ 158.019227][ T9174] bond0: (slave wlan1): Releasing backup interface [ 158.040656][ T9177] netlink: 'syz.4.1328': attribute type 10 has an invalid length. [ 158.056033][ T9177] 8021q: adding VLAN 0 to HW filter on device bond0 [ 158.067868][ T9177] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 158.398485][ T9193] netlink: 'syz.4.1336': attribute type 1 has an invalid length. [ 158.421606][ T9193] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1336'. [ 158.458019][ T9197] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1338'. [ 158.662859][ T9167] tipc: Failed to remove unknown binding: 66,1,1/7:3244779425/3244779427 [ 158.671350][ T9167] tipc: Failed to remove unknown binding: 66,1,1/7:3244779425/3244779427 [ 158.848723][ T9214] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1345'. [ 159.323308][ T9232] bond0: (slave batadv0): Releasing backup interface [ 159.384590][ T9234] netlink: 'syz.1.1354': attribute type 10 has an invalid length. [ 159.410316][ T9232] bond0: (slave wlan1): Releasing backup interface [ 159.537072][ T9243] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1357'. [ 159.548823][ T9238] netlink: 'syz.0.1352': attribute type 1 has an invalid length. [ 159.568350][ T9238] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1352'. [ 159.584645][ T9234] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 159.709310][ T9250] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1360'. [ 160.303193][ T9275] netlink: 'syz.3.1370': attribute type 1 has an invalid length. [ 160.321822][ T9275] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1370'. [ 160.492167][ T9278] bond0: (slave wlan1): Releasing backup interface [ 160.516219][ T9278] debugfs: Directory 'netdev:phy5-monitor' with parent 'phy5' already present! [ 160.538006][ T9284] netlink: 'syz.0.1372': attribute type 10 has an invalid length. [ 160.577953][ T9284] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 160.597921][ T9286] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1373'. [ 160.870382][ T9299] netlink: 'syz.1.1380': attribute type 1 has an invalid length. [ 160.879015][ T9299] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1380'. [ 161.097187][ T9307] netlink: 'syz.4.1384': attribute type 1 has an invalid length. [ 161.703813][ T9331] bond0: (slave wlan1): Releasing backup interface [ 161.713168][ T9336] netlink: 'syz.2.1393': attribute type 10 has an invalid length. [ 161.715339][ T9331] mac80211_hwsim hwsim7 wlan1: left promiscuous mode [ 161.772633][ T9336] mac80211_hwsim hwsim7 wlan1: entered promiscuous mode [ 161.786956][ T9336] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 162.158666][ T9349] vlan2: entered promiscuous mode [ 164.735052][ T9451] __nla_validate_parse: 5 callbacks suppressed [ 164.735071][ T9451] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1443'. [ 164.969645][ T9457] netlink: 'syz.4.1445': attribute type 10 has an invalid length. [ 166.010201][ T9496] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1461'. [ 166.756756][ T9533] netlink: 'syz.2.1477': attribute type 10 has an invalid length. [ 168.279052][ T9600] bond0: (slave wlan1): Releasing backup interface [ 168.288378][ T9605] netlink: 'syz.2.1506': attribute type 10 has an invalid length. [ 168.307613][ T9600] mac80211_hwsim hwsim7 wlan1: left promiscuous mode [ 168.349759][ T9605] mac80211_hwsim hwsim7 wlan1: entered promiscuous mode [ 168.359235][ T9605] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 169.282309][ T9651] mac80211_hwsim hwsim5 syzkaller0: left promiscuous mode [ 169.289913][ T9651] mac80211_hwsim hwsim5 syzkaller0: left allmulticast mode [ 170.063240][ T9688] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1546'. [ 170.248796][ T9699] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1549'. [ 170.270288][ T9699] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1549'. [ 170.464204][ T9705] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1551'. [ 170.488112][ T9705] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1551'. [ 171.173493][ T9730] netlink: 'syz.0.1561': attribute type 10 has an invalid length. [ 171.419515][ T9728] bond0: (slave wlan1): Releasing backup interface [ 171.480012][ T9728] debugfs: Directory 'netdev:phy5-monitor' with parent 'phy5' already present! [ 171.538795][ T9730] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 172.123955][ T9767] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1574'. [ 172.652547][ T9786] tipc: Failed to remove unknown binding: 66,1,1/134418688:525994325/525994327 [ 172.919626][ T9794] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1586'. [ 172.938006][ T9796] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1587'. [ 172.947060][ T9794] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1586'. [ 173.170675][ T9807] tipc: Failed to remove unknown binding: 66,1,1/134418688:525994325/525994327 [ 173.188555][ T9807] tipc: Failed to remove unknown binding: 66,1,1/134418688:525994325/525994327 [ 173.543059][ T9820] bond0: (slave wlan1): Releasing backup interface [ 173.568089][ T9824] netlink: 'syz.4.1595': attribute type 10 has an invalid length. [ 173.598166][ T9824] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 173.824499][ T9836] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1600'. [ 174.197546][ T9849] tipc: Failed to remove unknown binding: 66,1,1/2947019451:2126307584/2126307586 [ 174.465409][ T9857] tipc: Failed to remove unknown binding: 66,1,1/2947019451:2126307584/2126307586 [ 174.475121][ T9857] tipc: Failed to remove unknown binding: 66,1,1/2947019451:2126307584/2126307586 [ 174.673701][ T9858] bond0: (slave wlan1): Releasing backup interface [ 174.704518][ T9869] netlink: 'syz.1.1611': attribute type 10 has an invalid length. [ 174.800046][ T9869] debugfs: Directory 'netdev:phy6-monitor' with parent 'phy6' already present! [ 174.835713][ T9869] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 175.201661][ T9891] netlink: 'syz.3.1623': attribute type 1 has an invalid length. [ 175.209847][ T9891] __nla_validate_parse: 2 callbacks suppressed [ 175.209863][ T9891] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1623'. [ 175.286206][ T9895] tipc: Failed to remove unknown binding: 66,1,1/2947019451:1650127001/1650127003 [ 175.542262][ T9905] tipc: Failed to remove unknown binding: 66,1,1/2947019451:1650127001/1650127003 [ 175.551947][ T9905] tipc: Failed to remove unknown binding: 66,1,1/2947019451:1650127001/1650127003 [ 175.982522][ T9921] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1636'. [ 176.710824][ T9953] netlink: 'syz.4.1648': attribute type 10 has an invalid length. [ 176.739826][ T9952] bond0: (slave wlan1): Releasing backup interface [ 176.759308][ T9953] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 176.984915][ T9965] vlan2: entered promiscuous mode [ 177.202064][ T9977] tipc: Failed to remove unknown binding: 66,1,1/134418688:1288460481/1288460483 [ 177.501816][ T9987] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1662'. [ 177.754753][T10002] tipc: Failed to remove unknown binding: 66,1,1/134418688:1288460481/1288460483 [ 177.786851][T10002] tipc: Failed to remove unknown binding: 66,1,1/134418688:1288460481/1288460483 [ 177.832500][T10006] vlan2: entered promiscuous mode [ 177.837937][T10006] bridge0: port 1(vlan2) entered blocking state [ 177.881660][T10006] bridge0: port 1(vlan2) entered disabled state [ 177.901655][T10006] vlan2: entered allmulticast mode [ 178.127324][T10016] netlink: 'syz.4.1675': attribute type 1 has an invalid length. [ 178.138464][T10016] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1675'. [ 178.350761][T10027] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1678'. [ 178.539410][T10038] bond0: (slave wlan1): Releasing backup interface [ 178.550954][T10038] mac80211_hwsim hwsim7 wlan1: left promiscuous mode [ 178.569674][T10044] netlink: 'syz.2.1683': attribute type 10 has an invalid length. [ 178.584136][T10044] mac80211_hwsim hwsim7 wlan1: entered promiscuous mode [ 178.635837][T10044] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 178.905534][T10060] tipc: Failed to remove unknown binding: 66,1,1/2947019451:187858465/187858467 [ 179.378723][T10078] tipc: Failed to remove unknown binding: 66,1,1/2947019451:187858465/187858467 [ 179.430431][T10078] tipc: Failed to remove unknown binding: 66,1,1/2947019451:187858465/187858467 [ 179.644098][T10088] netlink: 'syz.1.1698': attribute type 10 has an invalid length. [ 179.682923][T10087] bond0: (slave wlan1): Releasing backup interface [ 179.704677][T10090] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1699'. [ 179.722716][T10090] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1699'. [ 179.782509][T10088] debugfs: Directory 'netdev:phy6-monitor' with parent 'phy6' already present! [ 179.816786][T10088] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 180.280717][T10122] tipc: Failed to remove unknown binding: 66,1,1/0:870641328/870641330 [ 180.527038][T10131] netlink: 'syz.2.1716': attribute type 10 has an invalid length. [ 180.552573][T10128] bond0: (slave wlan1): Releasing backup interface [ 180.622003][T10128] mac80211_hwsim hwsim7 wlan1: left promiscuous mode [ 180.668711][T10135] tipc: Failed to remove unknown binding: 66,1,1/0:870641328/870641330 [ 180.677244][T10135] tipc: Failed to remove unknown binding: 66,1,1/0:870641328/870641330 [ 180.700581][T10131] mac80211_hwsim hwsim7 wlan1: entered promiscuous mode [ 180.726664][T10131] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 181.667356][T10174] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1735'. [ 181.836580][T10181] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1738'. [ 181.848413][T10181] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1738'. [ 181.985412][T10189] tipc: Failed to remove unknown binding: 66,1,1/4269801491:3327800838/3327800840 [ 182.123999][T10194] netlink: 'syz.4.1742': attribute type 1 has an invalid length. [ 182.169326][T10194] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1742'. [ 182.457496][T10203] tipc: Failed to remove unknown binding: 66,1,1/4269801491:3327800838/3327800840 [ 182.467697][T10203] tipc: Failed to remove unknown binding: 66,1,1/4269801491:3327800838/3327800840 [ 182.535543][T10205] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1746'. [ 182.609043][T10213] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1750'. [ 182.619419][T10213] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1750'. [ 182.857328][T10225] netlink: 'syz.4.1752': attribute type 1 has an invalid length. [ 182.868186][T10225] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1752'. [ 183.008428][T10229] vlan2: entered promiscuous mode [ 183.041583][T10232] netlink: 'syz.2.1755': attribute type 1 has an invalid length. [ 183.049362][T10232] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1755'. [ 183.170251][T10237] bond0: (slave wlan1): Releasing backup interface [ 183.543732][T10257] tipc: Failed to remove unknown binding: 66,1,1/2947019451:1413640338/1413640340 [ 183.666946][T10265] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1767'. [ 183.856504][T10267] bond0: (slave wlan1): Releasing backup interface [ 183.906285][T10267] vlan2: left allmulticast mode [ 183.923903][T10267] bridge0: port 1(vlan2) entered disabled state [ 183.943978][T10273] tipc: Failed to remove unknown binding: 66,1,1/2947019451:1413640338/1413640340 [ 183.955586][T10273] tipc: Failed to remove unknown binding: 66,1,1/2947019451:1413640338/1413640340 [ 183.969063][T10272] netlink: 'syz.3.1771': attribute type 1 has an invalid length. [ 184.057304][ T12] tipc: Resetting bearer [ 184.625610][T10303] netlink: 'syz.1.1784': attribute type 1 has an invalid length. [ 184.702698][T10307] netlink: 'syz.0.1786': attribute type 1 has an invalid length. [ 184.779091][T10309] netlink: 'syz.1.1787': attribute type 1 has an invalid length. [ 185.143157][T10331] tipc: Failed to remove unknown binding: 66,1,1/2947019451:395101913/395101915 [ 185.814354][T10353] tipc: Failed to remove unknown binding: 66,1,1/2947019451:395101913/395101915 [ 185.827270][T10353] tipc: Failed to remove unknown binding: 66,1,1/2947019451:395101913/395101915 [ 185.864900][T10355] netlink: 'syz.1.1804': attribute type 10 has an invalid length. [ 186.226112][T10369] vlan2: entered promiscuous mode [ 186.341664][ T5843] Bluetooth: hci1: command 0x0406 tx timeout [ 186.347770][ T5838] Bluetooth: hci3: command 0x0406 tx timeout [ 186.355516][ T5854] Bluetooth: hci2: command 0x0406 tx timeout [ 186.499807][T10380] netlink: 'syz.0.1814': attribute type 1 has an invalid length. [ 186.660654][T10388] tipc: Failed to remove unknown binding: 66,1,1/4269801491:1739849944/1739849946 [ 186.686960][T10390] netlink: 'syz.0.1817': attribute type 1 has an invalid length. [ 186.694921][T10390] __nla_validate_parse: 8 callbacks suppressed [ 186.694936][T10390] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1817'. [ 186.756708][T10395] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1821'. [ 186.766218][T10395] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1821'. [ 187.272876][T10415] tipc: Failed to remove unknown binding: 66,1,1/4269801491:1739849944/1739849946 [ 187.286346][T10413] vlan2: entered promiscuous mode [ 187.292689][T10415] tipc: Failed to remove unknown binding: 66,1,1/4269801491:1739849944/1739849946 [ 187.566456][T10428] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1832'. [ 187.746898][T10437] tipc: Failed to remove unknown binding: 66,1,1/4269801491:72842668/72842670 [ 188.192097][T10460] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1844'. [ 188.265559][T10464] netlink: 'syz.4.1845': attribute type 1 has an invalid length. [ 188.275660][T10464] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1845'. [ 188.572027][T10435] tipc: Failed to remove unknown binding: 66,1,1/4269801491:72842668/72842670 [ 188.605716][T10435] tipc: Failed to remove unknown binding: 66,1,1/4269801491:72842668/72842670 [ 188.716404][T10484] vlan3: entered promiscuous mode [ 189.221142][T10511] tipc: Failed to remove unknown binding: 66,1,1/0:2132527365/2132527367 [ 189.394441][T10519] vlan2: entered promiscuous mode [ 190.039687][T10510] tipc: Failed to remove unknown binding: 66,1,1/0:2132527365/2132527367 [ 190.049660][T10510] tipc: Failed to remove unknown binding: 66,1,1/0:2132527365/2132527367 [ 190.935334][T10586] tipc: Failed to remove unknown binding: 66,1,1/134418688:2748102323/2748102325 [ 191.761784][T10585] tipc: Failed to remove unknown binding: 66,1,1/134418688:2748102323/2748102325 [ 191.770969][T10585] tipc: Failed to remove unknown binding: 66,1,1/134418688:2748102323/2748102325 [ 192.432536][T10641] vlan3: entered promiscuous mode [ 193.499992][T10701] vlan3: entered promiscuous mode [ 194.523513][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.414745][T10794] netlink: 'syz.4.1962': attribute type 1 has an invalid length. [ 195.431941][T10794] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1962'. [ 195.477176][T10800] tipc: Resetting bearer [ 195.489627][T10803] netlink: 'syz.3.1964': attribute type 10 has an invalid length. [ 195.528596][T10803] bond0: (slave wlan1): Opening slave failed [ 195.640987][T10811] netlink: 'syz.4.1968': attribute type 1 has an invalid length. [ 195.669281][T10815] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1970'. [ 195.671776][T10811] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1968'. [ 195.680910][T10815] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1970'. [ 196.430878][T10856] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1983'. [ 196.445381][T10856] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1983'. [ 196.816871][T10877] netlink: 'syz.0.1990': attribute type 1 has an invalid length. [ 196.835421][T10877] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1990'. [ 197.564086][T10914] netlink: 'syz.2.2005': attribute type 1 has an invalid length. [ 197.578926][T10914] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2005'. [ 197.728671][T10922] netlink: 'syz.1.2007': attribute type 1 has an invalid length. [ 197.749877][T10922] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2007'. [ 198.398142][T10957] netlink: 'syz.1.2021': attribute type 1 has an invalid length. [ 198.421882][T10957] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2021'. [ 199.122515][T10991] netlink: 'syz.4.2035': attribute type 1 has an invalid length. [ 199.214796][T10996] netlink: 'syz.2.2036': attribute type 10 has an invalid length. [ 199.232016][T10993] bond0: (slave wlan1): Releasing backup interface [ 199.252833][T10993] mac80211_hwsim hwsim7 wlan1: left promiscuous mode [ 199.297827][T10996] mac80211_hwsim hwsim7 wlan1: entered promiscuous mode [ 199.312821][T10996] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 199.936189][T11030] netlink: 'syz.4.2050': attribute type 1 has an invalid length. [ 200.093378][T11035] bond0: (slave wlan1): Releasing backup interface [ 200.119087][T11035] mac80211_hwsim hwsim7 wlan1: left promiscuous mode [ 200.228483][T11044] bond0: (slave wlan1): Releasing backup interface [ 200.292526][T11037] mac80211_hwsim hwsim7 wlan1: entered promiscuous mode [ 200.314049][T11037] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 200.401672][T11045] debugfs: Directory 'netdev:phy6-monitor' with parent 'phy6' already present! [ 200.423399][T11045] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 200.778816][T11066] tipc: Failed to remove unknown binding: 66,1,1/2947019451:4150986844/4150986846 [ 201.040052][T11079] validate_nla: 2 callbacks suppressed [ 201.040071][T11079] netlink: 'syz.3.2068': attribute type 1 has an invalid length. [ 201.055965][T11079] __nla_validate_parse: 4 callbacks suppressed [ 201.055982][T11079] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2068'. [ 201.466857][T11099] tipc: Failed to remove unknown binding: 66,1,1/134418688:220892489/220892491 [ 201.681694][T11114] netlink: 'syz.1.2082': attribute type 1 has an invalid length. [ 201.695379][T11114] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2082'. [ 202.409472][T11159] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2098'. [ 203.247265][T11202] netlink: 'syz.2.2115': attribute type 1 has an invalid length. [ 203.265632][T11202] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2115'. [ 203.769596][T11226] netlink: 'syz.0.2124': attribute type 10 has an invalid length. [ 203.818819][T11226] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 204.053210][T11245] tipc: Failed to remove unknown binding: 66,1,1/7:2727049271/2727049273 [ 204.191779][T11249] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2131'. [ 204.351881][T11249] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2131'. [ 204.534711][T11269] netlink: 'syz.3.2140': attribute type 1 has an invalid length. [ 204.605808][T11269] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2140'. [ 204.653102][T11278] batadv_slave_1: entered promiscuous mode [ 204.863902][T11288] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2142'. [ 204.916871][T11290] tipc: Failed to remove unknown binding: 66,1,1/7:778655288/778655290 [ 205.166374][T11300] netlink: 'syz.4.2146': attribute type 10 has an invalid length. [ 205.265669][T11295] bond0: (slave wlan1): Releasing backup interface [ 205.367937][T11300] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 205.444709][T11313] netlink: 'syz.0.2152': attribute type 1 has an invalid length. [ 205.489749][T11313] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2152'. [ 205.536979][T11316] bond0: Master is either lo or non-ether device [ 206.062152][T11345] tipc: Resetting bearer [ 206.126698][T11345] netlink: 'syz.3.2164': attribute type 10 has an invalid length. [ 206.136931][T11345] bond0: (slave wlan1): Opening slave failed [ 206.339779][T11356] netlink: 'syz.0.2168': attribute type 1 has an invalid length. [ 206.347863][T11356] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2168'. [ 206.450652][T11360] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2170'. [ 206.972039][T11382] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2179'. [ 207.084039][T11387] netlink: 'syz.2.2180': attribute type 1 has an invalid length. [ 207.094181][T11387] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2180'. [ 207.639949][T11416] tipc: Failed to remove unknown binding: 66,1,1/4269801491:2224234349/2224234351 [ 207.889135][T11431] netlink: 'syz.2.2196': attribute type 1 has an invalid length. [ 207.898061][T11431] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2196'. [ 208.235162][T11448] vlan2: entered promiscuous mode [ 208.598734][T11465] netlink: 'syz.1.2209': attribute type 1 has an invalid length. [ 208.626985][T11465] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2209'. [ 208.999656][T11483] bond0: (slave wlan1): Releasing backup interface [ 209.038304][T11488] netlink: 'syz.4.2216': attribute type 10 has an invalid length. [ 209.102861][T11488] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 209.152555][T11491] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2219'. [ 209.520784][T11511] netlink: 'syz.2.2227': attribute type 1 has an invalid length. [ 209.537066][T11511] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2227'. [ 209.697336][T11522] vlan2: entered promiscuous mode [ 209.742697][T11524] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2233'. [ 209.855430][T11532] netlink: 'syz.4.2234': attribute type 10 has an invalid length. [ 209.866585][T11528] bond0: (slave wlan1): Releasing backup interface [ 209.884098][T11534] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2235'. [ 209.924326][T11532] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 210.142713][T11547] netlink: 'syz.4.2241': attribute type 1 has an invalid length. [ 210.468070][T11559] vlan2: entered promiscuous mode [ 210.676487][T11567] bond0: (slave wlan1): Releasing backup interface [ 210.698540][T11571] netlink: 'syz.1.2252': attribute type 10 has an invalid length. [ 210.757086][T11571] debugfs: Directory 'netdev:phy6-monitor' with parent 'phy6' already present! [ 210.800044][T11571] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 211.244131][T11597] validate_nla: 1 callbacks suppressed [ 211.244170][T11597] netlink: 'syz.1.2264': attribute type 1 has an invalid length. [ 211.852763][T11626] __nla_validate_parse: 5 callbacks suppressed [ 211.852782][T11626] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2277'. [ 212.345693][T11656] vlan2: entered promiscuous mode [ 212.790791][T11675] netlink: 'syz.4.2297': attribute type 1 has an invalid length. [ 212.799237][T11675] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2297'. [ 213.223458][T11698] netlink: 'syz.3.2308': attribute type 1 has an invalid length. [ 213.241581][T11698] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2308'. [ 213.654599][T11722] netlink: 'syz.1.2317': attribute type 1 has an invalid length. [ 213.663827][T11722] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2317'. [ 213.718032][T11724] vlan3: entered promiscuous mode [ 213.810322][T11726] netlink: 'syz.1.2319': attribute type 1 has an invalid length. [ 213.818999][T11726] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2319'. [ 214.279792][T11747] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2326'. [ 214.355981][T11752] netlink: 'syz.3.2328': attribute type 1 has an invalid length. [ 214.372236][T11752] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2328'. [ 214.533545][T11760] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2332'. [ 214.854063][T11780] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2339'. [ 214.911286][T11785] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2342'. [ 215.023178][T11791] netlink: 'syz.2.2343': attribute type 1 has an invalid length. [ 215.573459][T11818] netlink: 'syz.2.2356': attribute type 1 has an invalid length. [ 215.618230][T11820] netlink: 'syz.4.2357': attribute type 1 has an invalid length. [ 216.142906][T11847] netlink: 'syz.2.2369': attribute type 1 has an invalid length. [ 216.785916][T11886] validate_nla: 1 callbacks suppressed [ 216.785935][T11886] netlink: 'syz.2.2385': attribute type 1 has an invalid length. [ 217.105444][T11903] __nla_validate_parse: 15 callbacks suppressed [ 217.105462][T11903] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2392'. [ 217.131861][T11903] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2392'. [ 217.261561][T11911] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2395'. [ 217.332288][T11916] bond0: (slave wlan1): Releasing backup interface [ 217.359345][T11920] netlink: 'syz.1.2397': attribute type 10 has an invalid length. [ 217.384355][T11920] debugfs: Directory 'netdev:phy6-monitor' with parent 'phy6' already present! [ 217.433499][T11920] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 217.686257][T11935] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2406'. [ 217.713185][T11935] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2406'. [ 217.797095][T11942] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2409'. [ 217.956608][T11952] batadv0: entered promiscuous mode [ 217.972177][T11952] macsec1: entered promiscuous mode [ 217.977562][T11952] macsec1: entered allmulticast mode [ 217.988773][T11952] batadv0: entered allmulticast mode [ 218.104292][T11961] netlink: 'syz.0.2417': attribute type 1 has an invalid length. [ 218.112175][T11961] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2417'. [ 218.216740][T11968] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2422'. [ 218.490532][T11984] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2425'. [ 218.513912][T11984] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2425'. [ 218.696159][T11997] netlink: 'syz.2.2430': attribute type 10 has an invalid length. [ 218.778050][T11992] bond0: (slave wlan1): Releasing backup interface [ 218.788207][T11992] mac80211_hwsim hwsim7 wlan1: left promiscuous mode [ 218.837893][T11997] mac80211_hwsim hwsim7 wlan1: entered promiscuous mode [ 218.846697][T11997] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 218.859520][T11996] netlink: 'syz.1.2432': attribute type 1 has an invalid length. [ 219.539712][T12038] bond0: (slave wlan1): Releasing backup interface [ 219.564452][T12044] netlink: 'syz.2.2447': attribute type 10 has an invalid length. [ 219.585960][T12038] mac80211_hwsim hwsim7 wlan1: left promiscuous mode [ 219.642876][T12044] mac80211_hwsim hwsim7 wlan1: entered promiscuous mode [ 219.691825][T12044] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 219.717902][T12049] vlan2: entered promiscuous mode [ 219.959211][T12063] IPv6: NLM_F_CREATE should be specified when creating new route [ 220.461294][T12097] bond0: (slave wlan1): Releasing backup interface [ 220.492853][T12102] netlink: 'syz.0.2471': attribute type 10 has an invalid length. [ 220.515411][T12094] vlan2: entered promiscuous mode [ 220.533062][T12102] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 220.994052][T12131] netlink: 'syz.4.2485': attribute type 1 has an invalid length. [ 221.080990][T12135] bond0: (slave wlan1): Releasing backup interface [ 221.115149][T12135] netlink: 'syz.0.2487': attribute type 10 has an invalid length. [ 221.164958][T12135] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 221.557492][T12163] netlink: 'syz.3.2499': attribute type 1 has an invalid length. [ 222.476821][T12214] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 222.510558][T12218] __nla_validate_parse: 11 callbacks suppressed [ 222.510577][T12218] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2520'. [ 222.850763][T12234] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2528'. [ 222.872931][T12234] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2528'. [ 223.412322][T12256] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2535'. [ 223.658505][T12264] netlink: 'syz.1.2539': attribute type 10 has an invalid length. [ 223.756442][T12270] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2541'. [ 223.807236][T12270] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2541'. [ 224.069196][T12281] netlink: 'syz.1.2545': attribute type 1 has an invalid length. [ 224.103096][T12281] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2545'. [ 224.275909][T12290] tipc: Failed to remove unknown binding: 66,1,1/2947019451:410372186/410372188 [ 224.782596][T12314] netlink: 'syz.3.2560': attribute type 1 has an invalid length. [ 224.811517][T12314] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2560'. [ 224.865395][T12320] tipc: Failed to remove unknown binding: 66,1,1/2947019451:410372186/410372188 [ 224.888273][T12320] tipc: Failed to remove unknown binding: 66,1,1/2947019451:410372186/410372188 [ 225.165357][T12335] netlink: 1044 bytes leftover after parsing attributes in process `syz.0.2568'. [ 225.284775][T12341] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2571'. [ 225.706296][T12365] tipc: Failed to remove unknown binding: 66,1,1/4269801491:2731562983/2731562985 [ 226.523335][T12401] tipc: Failed to remove unknown binding: 66,1,1/4269801491:2731562983/2731562985 [ 226.561621][T12401] tipc: Failed to remove unknown binding: 66,1,1/4269801491:2731562983/2731562985 [ 226.841327][T12416] netlink: 'syz.0.2601': attribute type 1 has an invalid length. [ 227.221145][T12435] tipc: Failed to remove unknown binding: 66,1,1/7:4084714464/4084714466 [ 227.608509][T12455] tipc: Failed to remove unknown binding: 66,1,1/7:4084714464/4084714466 [ 227.617787][T12455] tipc: Failed to remove unknown binding: 66,1,1/7:4084714464/4084714466 [ 228.047778][T12484] __nla_validate_parse: 2 callbacks suppressed [ 228.047797][T12484] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2633'. [ 228.161545][T12491] tipc: Failed to remove unknown binding: 66,1,1/4269801491:2730135158/2730135160 [ 228.577823][T12511] tipc: Failed to remove unknown binding: 66,1,1/4269801491:2730135158/2730135160 [ 228.587422][T12511] tipc: Failed to remove unknown binding: 66,1,1/4269801491:2730135158/2730135160 [ 229.108785][T12541] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2657'. [ 229.232118][T12544] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2658'. [ 229.267263][T12544] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2658'. [ 229.317154][T12554] tipc: Failed to remove unknown binding: 66,1,1/134418688:3772435960/3772435962 [ 229.566719][T12561] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2664'. [ 229.623537][T12565] tipc: Failed to remove unknown binding: 66,1,1/134418688:3772435960/3772435962 [ 229.638472][T12565] tipc: Failed to remove unknown binding: 66,1,1/134418688:3772435960/3772435962 [ 229.967815][T12581] tipc: New replicast peer: 255.255.255.255 [ 229.975335][T12581] tipc: Enabled bearer , priority 10 [ 230.308860][T12600] tipc: Failed to remove unknown binding: 66,1,1/4269801491:3808248751/3808248753 [ 230.656675][T12617] tipc: Failed to remove unknown binding: 66,1,1/4269801491:3808248751/3808248753 [ 230.676001][T12617] tipc: Failed to remove unknown binding: 66,1,1/4269801491:3808248751/3808248753 [ 231.449389][T12660] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2708'. [ 231.826166][T12690] xt_CT: You must specify a L4 protocol and not use inversions on it [ 232.961981][T12753] netlink: 'syz.4.2744': attribute type 10 has an invalid length. [ 232.980944][T12752] bond0: (slave wlan1): Releasing backup interface [ 232.983401][T12755] TCP: tcp_parse_options: Illegal window scaling value 192 > 14 received [ 233.035177][T12753] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 233.070280][T12760] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2746'. [ 233.184235][T12766] netlink: 10 bytes leftover after parsing attributes in process `syz.1.2751'. [ 233.192910][T12768] vlan2: entered allmulticast mode [ 233.648929][T12791] netlink: 'syz.1.2759': attribute type 10 has an invalid length. [ 233.669572][T12791] macvlan0: entered promiscuous mode [ 233.685023][T12791] macvlan0: entered allmulticast mode [ 233.711958][T12791] veth1_vlan: entered allmulticast mode [ 233.735692][T12791] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 233.846899][T12799] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2763'. [ 233.872056][T12797] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2761'. [ 233.882233][T12799] netlink: 'syz.2.2763': attribute type 7 has an invalid length. [ 233.903448][T12799] netlink: 'syz.2.2763': attribute type 8 has an invalid length. [ 233.929914][T12799] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2763'. [ 234.074490][T12804] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2765'. [ 234.494373][T12834] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2777'. [ 234.525347][T12838] team0: entered promiscuous mode [ 234.542898][T12838] batadv_slave_1: entered promiscuous mode [ 234.758695][T12850] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2784'. [ 234.897786][T12858] netlink: 'syz.3.2786': attribute type 1 has an invalid length. [ 234.913943][T12858] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2786'. [ 235.844927][T12905] netlink: 'syz.0.2804': attribute type 4 has an invalid length. [ 236.056781][T12917] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2808'. [ 236.666350][T12943] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.676360][T12943] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.686725][T12943] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.695707][T12943] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.729282][T12943] debugfs: Directory 'netdev:phy12-monitor' with parent 'phy12' already present! [ 236.740391][T12943] batadv0: left allmulticast mode [ 236.748576][T12943] macsec1: left promiscuous mode [ 236.754404][T12943] macsec1: left allmulticast mode [ 236.760799][T12943] vlan2: left allmulticast mode [ 237.496331][T12992] syzkaller1: entered promiscuous mode [ 237.504683][T12992] syzkaller1: entered allmulticast mode [ 237.637253][T13003] mac80211_hwsim hwsim4 wlan1: entered allmulticast mode [ 237.651754][T13001] mac80211_hwsim hwsim4 wlan1: left allmulticast mode [ 238.018232][T13025] af_packet: tpacket_rcv: packet too big, clamped from 3698 to 2928. macoff=96 [ 238.137212][T13032] syzkaller1: entered promiscuous mode [ 238.143320][T13032] syzkaller1: entered allmulticast mode [ 238.152984][T13030] syzkaller1: entered promiscuous mode [ 238.174578][T13030] syzkaller1: entered allmulticast mode [ 238.215940][T13036] tipc: Failed to remove unknown binding: 66,1,1/0:3328133785/3328133787 [ 238.533630][T13048] tipc: Failed to remove unknown binding: 66,1,1/0:3328133785/3328133787 [ 238.551168][T13048] tipc: Failed to remove unknown binding: 66,1,1/0:3328133785/3328133787 [ 238.845574][T13060] netlink: 'syz.2.2863': attribute type 1 has an invalid length. [ 238.872153][T13060] __nla_validate_parse: 2 callbacks suppressed [ 238.872167][T13060] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2863'. [ 239.512401][T13100] netlink: 'syz.0.2878': attribute type 1 has an invalid length. [ 239.530512][T13100] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2878'. [ 240.116394][T13125] netlink: 'syz.1.2888': attribute type 1 has an invalid length. [ 240.131539][T13125] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2888'. [ 240.808416][T13160] netlink: 'syz.4.2902': attribute type 1 has an invalid length. [ 240.827375][T13160] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2902'. [ 240.936544][T13162] veth1: entered promiscuous mode [ 240.993741][T13162] veth1: left promiscuous mode [ 241.075002][T13173] vxcan1: tx address claim with different name [ 241.462780][T13192] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2916'. [ 241.654281][T13202] netlink: 'syz.1.2919': attribute type 10 has an invalid length. [ 241.700481][T13201] bond0: (slave macvlan0): Releasing backup interface [ 241.715630][T13201] veth1_vlan: left allmulticast mode [ 241.746898][T13201] bond0: (slave wlan1): Releasing backup interface [ 241.758267][T13202] debugfs: Directory 'netdev:phy6-monitor' with parent 'phy6' already present! [ 241.771236][T13202] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 241.855116][T13211] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2923'. [ 241.868885][T13213] netlink: 'syz.1.2924': attribute type 10 has an invalid length. [ 242.092180][T13222] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 242.494790][T13242] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2935'. [ 242.540422][T13244] netlink: 'syz.2.2936': attribute type 10 has an invalid length. [ 242.697877][T13251] netlink: 'syz.2.2938': attribute type 1 has an invalid length. [ 242.726746][T13251] bond2: (slave ipip0): The slave device specified does not support setting the MAC address [ 242.739486][T13251] bond2: (slave ipip0): Setting fail_over_mac to active for active-backup mode [ 242.764549][T13251] bond2: (slave ipip0): making interface the new active one [ 242.775037][T13251] bond2: (slave ipip0): Enslaving as an active interface with an up link [ 242.797567][T13255] netlink: 'syz.3.2940': attribute type 1 has an invalid length. [ 242.809025][T13255] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2940'. [ 243.208584][T13273] netlink: 'syz.3.2947': attribute type 10 has an invalid length. [ 243.236991][T13275] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2946'. [ 243.611642][T13301] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 60 [ 243.817031][T13312] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2962'. [ 243.886931][T13315] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2961'. [ 244.016805][T13327] validate_nla: 2 callbacks suppressed [ 244.016823][T13327] netlink: 'syz.3.2965': attribute type 10 has an invalid length. [ 244.468378][T13353] netlink: 'syz.1.2975': attribute type 1 has an invalid length. [ 244.488937][T13353] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2975'. [ 244.725057][T13365] macvlan0: entered promiscuous mode [ 244.763959][T13365] macvlan0: left promiscuous mode [ 244.777151][T13369] netlink: 'syz.1.2982': attribute type 10 has an invalid length. [ 244.892295][T13374] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2986'. [ 244.909343][T13374] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2986'. [ 244.911873][T13375] netlink: 'syz.3.2984': attribute type 1 has an invalid length. [ 244.953493][T13375] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2984'. [ 245.379383][T13405] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2997'. [ 245.394408][T13405] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2997'. [ 245.527607][T13414] netlink: 'syz.2.2999': attribute type 1 has an invalid length. [ 245.540824][T13414] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2999'. [ 245.661038][T13420] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3003'. [ 246.037708][T13441] xt_hashlimit: size too large, truncated to 1048576 [ 246.154733][T13447] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3013'. [ 246.174143][T13444] netdevsim netdevsim3 »»»»»»: renamed from netdevsim0 (while UP) [ 246.331937][T13452] netlink: 'syz.2.3015': attribute type 1 has an invalid length. [ 246.565716][T13462] veth1_to_hsr: entered promiscuous mode [ 247.667013][T13506] sctp: [Deprecated]: syz.1.3038 (pid 13506) Use of struct sctp_assoc_value in delayed_ack socket option. [ 247.667013][T13506] Use struct sctp_sack_info instead [ 248.730545][T13548] vlan1: entered promiscuous mode [ 248.740452][T13547] vlan1: left promiscuous mode [ 249.202045][ T8] IPVS: starting estimator thread 0... [ 249.301608][T13567] IPVS: using max 26 ests per chain, 62400 per kthread [ 249.355016][T13573] __nla_validate_parse: 3 callbacks suppressed [ 249.355038][T13573] netlink: 336 bytes leftover after parsing attributes in process `syz.0.3057'. [ 250.263009][T13607] netlink: 'syz.0.3071': attribute type 1 has an invalid length. [ 250.270803][T13607] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3071'. [ 250.504689][T13622] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3076'. [ 250.601763][T13626] netlink: 'syz.4.3077': attribute type 10 has an invalid length. [ 250.743353][T13633] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3081'. [ 250.774039][T13633] netlink: 'syz.1.3081': attribute type 7 has an invalid length. [ 250.801603][T13633] netlink: 'syz.1.3081': attribute type 8 has an invalid length. [ 250.819665][T13633] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3081'. [ 250.841008][T13633] erspan0: entered promiscuous mode [ 250.849775][T13633] erspan0: left promiscuous mode [ 251.124564][T13651] netlink: 'syz.3.3086': attribute type 1 has an invalid length. [ 251.156492][T13651] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3086'. [ 251.165357][T13656] syzkaller1: entered promiscuous mode [ 251.171052][T13656] syzkaller1: entered allmulticast mode [ 251.404901][T13614] IPVS: You probably need to specify IP address on multicast interface. [ 251.418036][T13614] IPVS: Error connecting to the multicast addr [ 252.185298][T13700] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3110'. [ 252.196927][T13700] netlink: 'syz.3.3110': attribute type 7 has an invalid length. [ 252.204886][T13700] netlink: 'syz.3.3110': attribute type 8 has an invalid length. [ 252.218604][T13700] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3110'. [ 252.729417][T13733] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3120'. [ 252.785851][T13737] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 252.839545][T13737] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 253.291228][T13765] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3135'. [ 254.156275][T13814] netlink: 'syz.3.3157': attribute type 1 has an invalid length. [ 254.774169][T13848] mac80211_hwsim hwsim9 syzkaller0: entered promiscuous mode [ 254.782311][T13848] mac80211_hwsim hwsim9 syzkaller0: entered allmulticast mode [ 254.790415][T13848] tipc: Resetting bearer [ 254.801034][T13831] syzkaller1: entered promiscuous mode [ 254.807449][T13831] syzkaller1: entered allmulticast mode [ 255.113407][T13862] geneve2: entered promiscuous mode [ 255.128145][T13864] netlink: 'syz.4.3176': attribute type 11 has an invalid length. [ 255.164413][T13866] __nla_validate_parse: 4 callbacks suppressed [ 255.164431][T13866] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3177'. [ 255.259882][T13870] netlink: 'syz.2.3177': attribute type 10 has an invalid length. [ 255.316197][T13873] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3179'. [ 255.499051][T13877] mac80211_hwsim hwsim11 syzkaller0: entered allmulticast mode [ 255.501361][T13879] netlink: 'syz.2.3182': attribute type 1 has an invalid length. [ 255.532558][T13879] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3182'. [ 255.542906][T13876] mac80211_hwsim hwsim11 syzkaller0: left allmulticast mode [ 255.661259][T13892] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3186'. [ 255.833590][T13904] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3192'. [ 255.844252][T13904] netlink: 'syz.1.3192': attribute type 10 has an invalid length. [ 255.944767][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.313970][T13930] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3203'. [ 256.324738][T13930] netlink: 'syz.1.3203': attribute type 10 has an invalid length. [ 256.989105][T13962] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3217'. [ 257.118458][T13971] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3222'. [ 257.162539][T13972] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3221'. [ 257.278987][T13979] mac80211_hwsim hwsim9 syzkaller0: left promiscuous mode [ 257.301574][T13979] mac80211_hwsim hwsim9 syzkaller0: left allmulticast mode [ 257.326241][T13979] tipc: Resetting bearer [ 257.550495][T13995] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3232'. [ 258.573353][T14047] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc. [ 258.681855][T14052] syzkaller1: entered promiscuous mode [ 258.687374][T14052] syzkaller1: entered allmulticast mode [ 259.174913][T14083] bond0: (slave macvlan3): Error -22 calling dev_set_mtu [ 260.250569][T14129] __nla_validate_parse: 8 callbacks suppressed [ 260.250588][T14129] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3287'. [ 260.296067][T14133] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3289'. [ 260.448364][T14141] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3293'. [ 260.460722][T14141] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3293'. [ 260.582591][T14144] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3295'. [ 260.785200][T14161] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3302'. [ 260.811333][T14161] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3302'. [ 260.831134][T14166] netlink: 'syz.4.3303': attribute type 1 has an invalid length. [ 260.897406][T14166] 8021q: adding VLAN 0 to HW filter on device bond1 [ 260.945473][T14169] 8021q: adding VLAN 0 to HW filter on device bond2 [ 260.957096][T14169] bond1: (slave bond2): Enslaving as an active interface with a down link [ 261.027309][T14166] 8021q: adding VLAN 0 to HW filter on device bond3 [ 261.040456][T14166] bond1: (slave bond3): Enslaving as an active interface with a down link [ 261.078550][T14166] 8021q: adding VLAN 0 to HW filter on device bond4 [ 261.087636][T14166] bond1: (slave bond4): Enslaving as an active interface with a down link [ 261.532218][T14192] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3312'. [ 261.572608][T14192] nbd: nbd0 already in use [ 261.899558][T14200] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3315'. [ 261.974122][T14200] 8021q: adding VLAN 0 to HW filter on device bond5 [ 261.987395][T14203] vxcan0: entered allmulticast mode [ 262.025772][T14184] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3309'. [ 262.036263][T14203] 8021q: adding VLAN 0 to HW filter on device bond5 [ 262.052043][T14203] bond5: (slave vxcan1): The slave device specified does not support setting the MAC address [ 262.065676][T14203] bond5: (slave vxcan1): Error -95 calling set_mac_address [ 262.097793][T14200] bond5: (slave vlan3): Opening slave failed [ 262.247565][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88807f4c2c00: rx timeout, send abort [ 262.256272][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88807f4c1800: rx timeout, send abort [ 262.266750][ C0] vxcan0: j1939_xtp_rx_abort_one: 0xffff88807f4c1800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 262.282009][ C0] vxcan0: j1939_xtp_rx_cmd_bad_pgn: 0xffff88807f4c2c00: CMD 0xff with PGN 0x00000 for running session with different PGN 0x40000. [ 262.337517][T14215] netlink: 'syz.0.3319': attribute type 4 has an invalid length. [ 262.367217][T14215] netlink: 'syz.0.3319': attribute type 4 has an invalid length. [ 262.755978][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88807f4c2c00: abort rx timeout. Force session deactivation [ 263.033156][T14250] bond0: entered promiscuous mode [ 263.060721][T14249] netlink: 'syz.1.3329': attribute type 1 has an invalid length. [ 263.147353][T14254] IPv6: Can't replace route, no match found [ 263.296694][T14263] netlink: 'syz.4.3337': attribute type 10 has an invalid length. [ 264.225847][T14320] mac80211_hwsim hwsim4 syzkaller0: entered allmulticast mode [ 265.320664][T14380] __nla_validate_parse: 3 callbacks suppressed [ 265.320686][T14380] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.3385'. [ 265.357562][T14380] netlink: zone id is out of range [ 265.362987][T14380] netlink: zone id is out of range [ 265.368632][T14380] netlink: get zone limit has 8 unknown bytes [ 265.541281][T14390] pim6reg: entered allmulticast mode [ 265.772897][T14400] netlink: 'syz.4.3395': attribute type 1 has an invalid length. [ 265.801543][T14400] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3395'. [ 266.218123][T14425] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3405'. [ 266.243349][T14427] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3406'. [ 266.614800][T14450] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 266.841335][T14460] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3421'. [ 266.892495][T14467] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3423'. [ 266.912168][T14467] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3423'. [ 266.922116][T14467] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3423'. [ 266.936441][T14467] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3423'. [ 267.023393][T14476] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3426'. [ 267.135138][T14481] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode [ 267.152236][T14481] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode [ 267.229835][T14488] bond0: left promiscuous mode [ 267.250310][T14488] 8021q: adding VLAN 0 to HW filter on device bond0 [ 267.272753][T14488] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 267.883302][T14527] Dead loop on virtual device ipvlan1, fix it urgently! [ 267.899870][T14524] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 267.904322][T14527] syz.2.3446 (14527) used greatest stack depth: 6296 bytes left [ 267.943293][T14525] netlink: 'syz.4.3449': attribute type 10 has an invalid length. [ 268.242304][T14544] bond0: Master is either lo or non-ether device [ 269.725502][T14641] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 269.839691][T14651] vlan3: entered promiscuous mode [ 269.917912][T14653] tipc: Started in network mode [ 269.933719][T14653] tipc: Node identity 080211000001, cluster identity 4711 [ 269.956617][T14653] tipc: Enabled bearer , priority 7 [ 269.979790][T14653] mac80211_hwsim hwsim5 ªªªªªª: renamed from syzkaller0 (while UP) [ 269.997040][T14653] tipc: Disabling bearer [ 270.007081][T14659] netlink: 'syz.3.3496': attribute type 1 has an invalid length. [ 270.201929][T14668] pim6reg1: entered promiscuous mode [ 270.207279][T14668] pim6reg1: entered allmulticast mode [ 270.359889][T14683] mac80211_hwsim hwsim9 syzkaller0: entered promiscuous mode [ 270.368141][T14683] mac80211_hwsim hwsim9 syzkaller0: entered allmulticast mode [ 270.377505][T14683] tipc: Resetting bearer [ 270.549353][T14692] netlink: 'syz.1.3510': attribute type 1 has an invalid length. [ 270.558010][T14692] __nla_validate_parse: 7 callbacks suppressed [ 270.558028][T14692] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3510'. [ 271.113823][T14722] netlink: 'syz.1.3522': attribute type 10 has an invalid length. [ 271.292916][T14733] syzkaller1: entered promiscuous mode [ 271.298636][T14733] syzkaller1: entered allmulticast mode [ 271.434031][T14744] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3529'. [ 271.473563][T14747] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3533'. [ 271.589277][T14754] netlink: 'syz.2.3536': attribute type 10 has an invalid length. [ 271.784124][T14772] netlink: 'syz.2.3542': attribute type 1 has an invalid length. [ 271.793431][T14772] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3542'. [ 271.884785][T14777] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3544'. [ 271.895462][T14777] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3544'. [ 272.200264][T14792] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3550'. [ 272.210903][T14792] netlink: 'syz.2.3550': attribute type 10 has an invalid length. [ 272.451158][T14799] netlink: 'syz.2.3553': attribute type 1 has an invalid length. [ 272.472102][T14799] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3553'. [ 272.632506][T14805] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3555'. [ 272.654153][T14805] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3555'. [ 274.340212][T14824] netlink: 'syz.1.3561': attribute type 10 has an invalid length. [ 274.847298][T14831] mac80211_hwsim hwsim9 syzkaller0: left promiscuous mode [ 274.865563][T14831] mac80211_hwsim hwsim9 syzkaller0: left allmulticast mode [ 274.882111][T14831] tipc: Resetting bearer [ 274.919112][T14839] netlink: 'syz.2.3565': attribute type 1 has an invalid length. [ 275.184068][T14844] tipc: Resetting bearer [ 275.248024][T14847] syzkaller1: entered promiscuous mode [ 275.253751][T14847] syzkaller1: entered allmulticast mode [ 275.275284][T14858] mac80211_hwsim hwsim4 syzkaller0: entered promiscuous mode [ 275.469206][T14862] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 275.476580][T14862] IPv6: NLM_F_CREATE should be set when creating new route [ 275.483911][T14862] IPv6: NLM_F_CREATE should be set when creating new route [ 275.493240][ T5886] Dead loop on virtual device ipvlan1, fix it urgently! [ 275.532311][T14862] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 275.551162][T14864] tipc: Enabled bearer , priority 10 [ 275.617438][T14876] __nla_validate_parse: 4 callbacks suppressed [ 275.617458][T14876] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3579'. [ 275.697314][T14878] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3582'. [ 275.709068][ T5886] Dead loop on virtual device ipvlan1, fix it urgently! [ 275.773585][T14881] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 275.780376][T14886] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3584'. [ 275.796041][T14886] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3584'. [ 275.806498][T14881] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 276.065497][T14895] bond0: left promiscuous mode [ 276.070324][T14895] mac80211_hwsim hwsim7 wlan1: left promiscuous mode [ 276.079221][T14895] 8021q: adding VLAN 0 to HW filter on device bond0 [ 276.088419][T14895] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 276.159166][T14897] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3588'. [ 276.338333][T14906] tipc: Can't bind to reserved service type 2 [ 276.413402][T14908] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3592'. [ 276.456846][T14911] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3594'. [ 276.712344][T14925] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3599'. [ 276.869261][T14933] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3603'. [ 277.064088][T14946] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3606'. [ 278.468479][T15020] openvswitch: netlink: Invalid VLAN frame [ 279.534876][T15088] netlink: 'syz.1.3665': attribute type 10 has an invalid length. [ 280.386589][T15147] netlink: 'syz.2.3688': attribute type 1 has an invalid length. [ 280.560709][T15157] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 280.775529][T15170] __nla_validate_parse: 14 callbacks suppressed [ 280.775552][T15170] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3696'. [ 280.776209][T15171] mac80211_hwsim hwsim7 syzkaller0: left promiscuous mode [ 280.822123][T15171] mac80211_hwsim hwsim7 syzkaller0: left allmulticast mode [ 280.830869][T15175] bond0: Master is either lo or non-ether device [ 281.110844][T15194] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3705'. [ 281.137723][T15194] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3705'. [ 281.152036][T15195] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3702'. [ 281.172408][T15194] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3705'. [ 281.195278][T15194] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3705'. [ 281.352643][T15210] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3710'. [ 281.483578][T15219] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3712'. [ 281.697454][T15231] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3716'. [ 281.969406][T15248] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3726'. [ 282.172577][T15256] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 282.212109][T15260] netlink: 'syz.4.3731': attribute type 10 has an invalid length. [ 282.230223][T15260] syz_tun: entered promiscuous mode [ 282.748530][T15284] netlink: 'syz.1.3739': attribute type 1 has an invalid length. [ 283.236551][T15306] xt_hashlimit: size too large, truncated to 1048576 [ 283.370881][T15312] netlink: 'syz.1.3750': attribute type 1 has an invalid length. [ 283.814628][ T973] IPVS: starting estimator thread 0... [ 283.921600][T15327] IPVS: using max 28 ests per chain, 67200 per kthread [ 284.424142][ T54] Bluetooth: hci4: command 0x0405 tx timeout [ 284.627186][T15356] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 284.634576][T15356] IPv6: NLM_F_CREATE should be set when creating new route [ 284.641871][T15356] IPv6: NLM_F_CREATE should be set when creating new route [ 284.675646][T15356] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 285.724397][T15398] sctp: [Deprecated]: syz.4.3777 (pid 15398) Use of struct sctp_assoc_value in delayed_ack socket option. [ 285.724397][T15398] Use struct sctp_sack_info instead [ 285.869683][T15399] __nla_validate_parse: 12 callbacks suppressed [ 285.869704][T15399] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3778'. [ 285.874577][T15402] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3781'. [ 286.163751][T15410] bond0: (slave wlan1): Releasing backup interface [ 286.188704][T15411] netlink: 'syz.0.3783': attribute type 10 has an invalid length. [ 286.244039][T15413] bond0: (slave wlan1): Releasing backup interface [ 286.260973][T15413] bond2: (slave ipip0): Releasing backup interface [ 286.269645][ T5888] Dead loop on virtual device ipvlan1, fix it urgently! [ 286.293694][T15414] netlink: 'syz.2.3785': attribute type 10 has an invalid length. [ 286.311378][T15411] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 286.337936][T15414] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 286.925362][T15439] vlan2: entered promiscuous mode [ 286.930781][T15439] bridge0: port 1(vlan2) entered blocking state [ 286.940240][T15439] bridge0: port 1(vlan2) entered disabled state [ 286.946954][T15439] vlan2: entered allmulticast mode [ 286.985049][ T5890] Dead loop on virtual device ipvlan1, fix it urgently! [ 287.027402][T15442] netlink: 'syz.2.3795': attribute type 1 has an invalid length. [ 287.064849][T15442] 8021q: adding VLAN 0 to HW filter on device bond3 [ 287.098735][T15442] 8021q: adding VLAN 0 to HW filter on device bond3 [ 287.105934][T15442] bond3: (slave vti0): The slave device specified does not support setting the MAC address [ 287.117583][T15442] bond3: (slave vti0): Error -95 calling set_mac_address [ 287.145317][T15445] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 287.163628][T15445] bond3: (slave batadv0): making interface the new active one [ 287.175996][T15445] bond3: (slave batadv0): Enslaving as an active interface with an up link [ 287.768961][T15467] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 287.980614][T15481] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3804'. [ 287.991053][T15481] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3804'. [ 287.992951][T15482] bond0: (slave wlan1): Releasing backup interface [ 288.040149][T15482] netlink: 'syz.1.3806': attribute type 10 has an invalid length. [ 288.053173][T15482] debugfs: Directory 'netdev:phy6-monitor' with parent 'phy6' already present! [ 288.064179][T15482] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 288.127581][T15484] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3807'. [ 288.137647][T15484] nbd: nbd0 already in use [ 288.194129][T15486] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3808'. [ 288.372123][T15491] netlink: 'syz.1.3810': attribute type 1 has an invalid length. [ 288.388045][T15491] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3810'. [ 288.784406][T15512] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 288.999985][T15517] tipc: Enabled bearer , priority 0 [ 289.007963][T15517] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode [ 289.016106][T15517] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode [ 289.122821][T15521] bond0: (slave wlan1): Releasing backup interface [ 289.132838][T15521] vlan2: left allmulticast mode [ 289.137888][T15521] bridge0: port 1(vlan2) entered disabled state [ 289.149420][ T5888] Dead loop on virtual device ipvlan1, fix it urgently! [ 289.160229][T15522] netlink: 'syz.2.3820': attribute type 10 has an invalid length. [ 289.170046][T15521] bond3: (slave batadv0): Releasing active interface [ 289.186093][T15522] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 289.270022][T15524] tipc: Resetting bearer [ 289.304615][ T5890] Dead loop on virtual device ipvlan1, fix it urgently! [ 289.345579][T15524] netlink: 'syz.3.3821': attribute type 10 has an invalid length. [ 289.521021][T15534] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3824'. [ 289.710162][T15549] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3826'. [ 289.710935][T15550] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3825'. [ 290.939232][T15595] __nla_validate_parse: 4 callbacks suppressed [ 290.939246][T15595] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3843'. [ 291.159898][T15601] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3845'. [ 291.347281][T15611] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3848'. [ 291.464033][T15618] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3847'. [ 291.502096][T15618] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3847'. [ 291.677435][T15627] tipc: Resetting bearer [ 291.745992][T15627] netlink: 'syz.3.3852': attribute type 10 has an invalid length. [ 291.836160][T15640] tipc: Resetting bearer [ 291.854364][T15642] syzkaller1: entered promiscuous mode [ 291.860209][T15642] syzkaller1: entered allmulticast mode [ 291.889996][T15640] netlink: 'syz.3.3856': attribute type 10 has an invalid length. [ 292.036737][T15647] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3857'. [ 292.039830][T15649] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3858'. [ 292.170665][T15652] netlink: 'syz.3.3859': attribute type 10 has an invalid length. [ 292.210391][T15654] netlink: 'syz.2.3860': attribute type 10 has an invalid length. [ 292.580946][T15672] netlink: 'syz.1.3866': attribute type 1 has an invalid length. [ 292.597978][T15672] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3866'. [ 292.635302][T15678] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3869'. [ 292.651175][T15674] syz_tun: left promiscuous mode [ 292.664885][T15674] 8021q: adding VLAN 0 to HW filter on device bond0 [ 292.675459][T15674] 8021q: adding VLAN 0 to HW filter on device team0 [ 292.696812][T15674] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 292.791178][T15688] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3871'. [ 293.038833][T15701] netlink: 'syz.4.3874': attribute type 1 has an invalid length. [ 293.079760][T15703] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 293.098263][T15705] netlink: 'syz.2.3877': attribute type 10 has an invalid length. [ 293.570640][T15724] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 293.714228][T15734] ------------[ cut here ]------------ [ 293.720186][T15734] WARNING: CPU: 1 PID: 15734 at net/mptcp/pm_netlink.c:1496 mptcp_pm_nl_set_flags+0x974/0xdc0 [ 293.730607][T15734] Modules linked in: [ 293.734626][T15734] CPU: 1 UID: 0 PID: 15734 Comm: syz.1.3887 Not tainted 6.13.0-rc5-syzkaller-00172-gd1bf27c4e176 #0 [ 293.745624][T15734] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 293.755989][T15734] RIP: 0010:mptcp_pm_nl_set_flags+0x974/0xdc0 [ 293.762167][T15734] Code: 01 00 00 49 89 c5 e8 fb 45 e8 f5 e9 b8 fc ff ff e8 f1 45 e8 f5 4c 89 f7 be 03 00 00 00 e8 44 1d 0b f9 eb a0 e8 dd 45 e8 f5 90 <0f> 0b 90 e9 17 ff ff ff 89 d9 80 e1 07 38 c1 0f 8c c9 fc ff ff 48 [ 293.781871][T15734] RSP: 0018:ffffc900033e7240 EFLAGS: 00010283 [ 293.788000][T15734] RAX: ffffffff8bb72e03 RBX: 0000000000000000 RCX: 0000000000080000 [ 293.796153][T15734] RDX: ffffc9000db7d000 RSI: 0000000000004f25 RDI: 0000000000004f26 [ 293.804216][T15734] RBP: ffffc900033e7430 R08: ffffffff8bb72cf0 R09: 1ffff1100bb328de [ 293.812278][T15734] R10: dffffc0000000000 R11: ffffed100bb328df R12: ffff88807b128000 [ 293.820292][T15734] R13: ffff88805d993c00 R14: ffff88805d9946e8 R15: 1ffff1100bb328dd [ 293.828393][T15734] FS: 00007f0a1d41b6c0(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 293.837516][T15734] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 293.844187][T15734] CR2: 00007fcba1703c39 CR3: 00000000339a8000 CR4: 00000000003526f0 [ 293.852252][T15734] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 293.860277][T15734] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 293.868365][T15734] Call Trace: [ 293.871719][T15734] [ 293.874682][T15734] ? __warn+0x165/0x4d0 [ 293.878878][T15734] ? mptcp_pm_nl_set_flags+0x974/0xdc0 [ 293.884453][T15734] ? report_bug+0x2b3/0x500 [ 293.889012][T15734] ? mptcp_pm_nl_set_flags+0x974/0xdc0 [ 293.894582][T15734] ? handle_bug+0x60/0x90 [ 293.898948][T15734] ? exc_invalid_op+0x1a/0x50 [ 293.903714][T15734] ? asm_exc_invalid_op+0x1a/0x20 [ 293.908843][T15734] ? mptcp_pm_nl_set_flags+0x860/0xdc0 [ 293.914393][T15734] ? mptcp_pm_nl_set_flags+0x973/0xdc0 [ 293.919946][T15734] ? mptcp_pm_nl_set_flags+0x974/0xdc0 [ 293.925517][T15734] ? __pfx_mptcp_pm_nl_set_flags+0x10/0x10 [ 293.931448][T15734] ? genl_family_rcv_msg_attrs_parse+0x1d1/0x290 [ 293.937857][T15734] genl_rcv_msg+0xb14/0xec0 [ 293.942474][T15734] ? __pfx_genl_rcv_msg+0x10/0x10 [ 293.947579][T15734] ? __pfx_lock_acquire+0x10/0x10 [ 293.952778][T15734] ? __pfx_mptcp_pm_nl_set_flags_doit+0x10/0x10 [ 293.959067][T15734] ? __pfx___might_resched+0x10/0x10 [ 293.964463][T15734] netlink_rcv_skb+0x1e3/0x430 [ 293.969273][T15734] ? __pfx_genl_rcv_msg+0x10/0x10 [ 293.974397][T15734] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 293.979857][T15734] ? __netlink_deliver_tap+0x7aa/0x7f0 [ 293.985428][T15734] genl_rcv+0x28/0x40 [ 293.989972][T15734] netlink_unicast+0x7f6/0x990 [ 293.994830][T15734] ? __pfx_netlink_unicast+0x10/0x10 [ 294.000186][T15734] ? __virt_addr_valid+0x45f/0x530 [ 294.005372][T15734] ? __phys_addr_symbol+0x2f/0x70 [ 294.010455][T15734] ? __check_object_size+0x47a/0x730 [ 294.015792][T15734] netlink_sendmsg+0x8e4/0xcb0 [ 294.020652][T15734] ? __pfx_netlink_sendmsg+0x10/0x10 [ 294.026017][T15734] ? aa_sock_msg_perm+0x91/0x160 [ 294.030987][T15734] ? __pfx_netlink_sendmsg+0x10/0x10 [ 294.036346][T15734] __sock_sendmsg+0x221/0x270 [ 294.041083][T15734] ____sys_sendmsg+0x52a/0x7e0 [ 294.045937][T15734] ? __pfx_____sys_sendmsg+0x10/0x10 [ 294.051261][T15734] ? __fget_files+0x2a/0x410 [ 294.056203][T15734] ? __fget_files+0x2a/0x410 [ 294.060840][T15734] __sys_sendmsg+0x269/0x350 [ 294.065478][T15734] ? __pfx_futex_wake+0x10/0x10 [ 294.070347][T15734] ? __pfx___sys_sendmsg+0x10/0x10 [ 294.075571][T15734] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 294.081990][T15734] ? do_syscall_64+0x100/0x230 [ 294.086784][T15734] ? do_syscall_64+0xb6/0x230 [ 294.091520][T15734] do_syscall_64+0xf3/0x230 [ 294.096051][T15734] ? clear_bhb_loop+0x35/0x90 [ 294.100733][T15734] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 294.106677][T15734] RIP: 0033:0x7f0a1c585d29 [ 294.111117][T15734] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 294.130787][T15734] RSP: 002b:00007f0a1d41b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 294.139309][T15734] RAX: ffffffffffffffda RBX: 00007f0a1c776080 RCX: 00007f0a1c585d29 [ 294.147385][T15734] RDX: 0000000000000000 RSI: 0000000020000480 RDI: 0000000000000007 [ 294.155474][T15734] RBP: 00007f0a1c601b08 R08: 0000000000000000 R09: 0000000000000000 [ 294.163533][T15734] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 294.171601][T15734] R13: 0000000000000000 R14: 00007f0a1c776080 R15: 00007ffdaba8ed78 [ 294.179639][T15734] [ 294.182752][T15734] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 294.190050][T15734] CPU: 1 UID: 0 PID: 15734 Comm: syz.1.3887 Not tainted 6.13.0-rc5-syzkaller-00172-gd1bf27c4e176 #0 [ 294.200807][T15734] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 294.210859][T15734] Call Trace: [ 294.214135][T15734] [ 294.217068][T15734] dump_stack_lvl+0x241/0x360 [ 294.221787][T15734] ? __pfx_dump_stack_lvl+0x10/0x10 [ 294.227000][T15734] ? __pfx__printk+0x10/0x10 [ 294.231606][T15734] ? _printk+0xd5/0x120 [ 294.235814][T15734] ? __init_begin+0x41000/0x41000 [ 294.240853][T15734] ? vscnprintf+0x5d/0x90 [ 294.245214][T15734] panic+0x349/0x880 [ 294.249161][T15734] ? __warn+0x174/0x4d0 [ 294.253348][T15734] ? __pfx_panic+0x10/0x10 [ 294.257783][T15734] __warn+0x344/0x4d0 [ 294.261767][T15734] ? mptcp_pm_nl_set_flags+0x974/0xdc0 [ 294.267239][T15734] report_bug+0x2b3/0x500 [ 294.271574][T15734] ? mptcp_pm_nl_set_flags+0x974/0xdc0 [ 294.277043][T15734] handle_bug+0x60/0x90 [ 294.281210][T15734] exc_invalid_op+0x1a/0x50 [ 294.285726][T15734] asm_exc_invalid_op+0x1a/0x20 [ 294.290580][T15734] RIP: 0010:mptcp_pm_nl_set_flags+0x974/0xdc0 [ 294.296667][T15734] Code: 01 00 00 49 89 c5 e8 fb 45 e8 f5 e9 b8 fc ff ff e8 f1 45 e8 f5 4c 89 f7 be 03 00 00 00 e8 44 1d 0b f9 eb a0 e8 dd 45 e8 f5 90 <0f> 0b 90 e9 17 ff ff ff 89 d9 80 e1 07 38 c1 0f 8c c9 fc ff ff 48 [ 294.316282][T15734] RSP: 0018:ffffc900033e7240 EFLAGS: 00010283 [ 294.322358][T15734] RAX: ffffffff8bb72e03 RBX: 0000000000000000 RCX: 0000000000080000 [ 294.330330][T15734] RDX: ffffc9000db7d000 RSI: 0000000000004f25 RDI: 0000000000004f26 [ 294.338321][T15734] RBP: ffffc900033e7430 R08: ffffffff8bb72cf0 R09: 1ffff1100bb328de [ 294.346332][T15734] R10: dffffc0000000000 R11: ffffed100bb328df R12: ffff88807b128000 [ 294.354312][T15734] R13: ffff88805d993c00 R14: ffff88805d9946e8 R15: 1ffff1100bb328dd [ 294.362295][T15734] ? mptcp_pm_nl_set_flags+0x860/0xdc0 [ 294.367766][T15734] ? mptcp_pm_nl_set_flags+0x973/0xdc0 [ 294.373242][T15734] ? __pfx_mptcp_pm_nl_set_flags+0x10/0x10 [ 294.379098][T15734] ? genl_family_rcv_msg_attrs_parse+0x1d1/0x290 [ 294.385433][T15734] genl_rcv_msg+0xb14/0xec0 [ 294.389947][T15734] ? __pfx_genl_rcv_msg+0x10/0x10 [ 294.395025][T15734] ? __pfx_lock_acquire+0x10/0x10 [ 294.400087][T15734] ? __pfx_mptcp_pm_nl_set_flags_doit+0x10/0x10 [ 294.406361][T15734] ? __pfx___might_resched+0x10/0x10 [ 294.411673][T15734] netlink_rcv_skb+0x1e3/0x430 [ 294.416441][T15734] ? __pfx_genl_rcv_msg+0x10/0x10 [ 294.421493][T15734] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 294.426815][T15734] ? __netlink_deliver_tap+0x7aa/0x7f0 [ 294.432318][T15734] genl_rcv+0x28/0x40 [ 294.436310][T15734] netlink_unicast+0x7f6/0x990 [ 294.441086][T15734] ? __pfx_netlink_unicast+0x10/0x10 [ 294.446381][T15734] ? __virt_addr_valid+0x45f/0x530 [ 294.451508][T15734] ? __phys_addr_symbol+0x2f/0x70 [ 294.456576][T15734] ? __check_object_size+0x47a/0x730 [ 294.461903][T15734] netlink_sendmsg+0x8e4/0xcb0 [ 294.466676][T15734] ? __pfx_netlink_sendmsg+0x10/0x10 [ 294.471959][T15734] ? aa_sock_msg_perm+0x91/0x160 [ 294.476927][T15734] ? __pfx_netlink_sendmsg+0x10/0x10 [ 294.482236][T15734] __sock_sendmsg+0x221/0x270 [ 294.486930][T15734] ____sys_sendmsg+0x52a/0x7e0 [ 294.491749][T15734] ? __pfx_____sys_sendmsg+0x10/0x10 [ 294.497036][T15734] ? __fget_files+0x2a/0x410 [ 294.501657][T15734] ? __fget_files+0x2a/0x410 [ 294.506364][T15734] __sys_sendmsg+0x269/0x350 [ 294.510962][T15734] ? __pfx_futex_wake+0x10/0x10 [ 294.515816][T15734] ? __pfx___sys_sendmsg+0x10/0x10 [ 294.521053][T15734] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 294.527387][T15734] ? do_syscall_64+0x100/0x230 [ 294.532428][T15734] ? do_syscall_64+0xb6/0x230 [ 294.537122][T15734] do_syscall_64+0xf3/0x230 [ 294.541809][T15734] ? clear_bhb_loop+0x35/0x90 [ 294.546491][T15734] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 294.552389][T15734] RIP: 0033:0x7f0a1c585d29 [ 294.556809][T15734] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 294.576417][T15734] RSP: 002b:00007f0a1d41b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 294.584850][T15734] RAX: ffffffffffffffda RBX: 00007f0a1c776080 RCX: 00007f0a1c585d29 [ 294.592909][T15734] RDX: 0000000000000000 RSI: 0000000020000480 RDI: 0000000000000007 [ 294.600882][T15734] RBP: 00007f0a1c601b08 R08: 0000000000000000 R09: 0000000000000000 [ 294.608852][T15734] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 294.616933][T15734] R13: 0000000000000000 R14: 00007f0a1c776080 R15: 00007ffdaba8ed78 [ 294.624930][T15734] [ 294.628253][T15734] Kernel Offset: disabled [ 294.632811][T15734] Rebooting in 86400 seconds..