last executing test programs: 1.992866531s ago: executing program 4 (id=2534): bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x67) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r1 = socket(0x2a, 0x2, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) getpeername$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=@ipv6_deladdrlabel={0x44, 0x49, 0x1, 0x70bd2a, 0x25dfdbfb, {0xa, 0x0, 0x8, 0x0, r2, 0x2}, [@IFAL_ADDRESS={0x14, 0x1, @ipv4={'\x00', '\xff\xff', @empty}}, @IFAL_ADDRESS={0x14, 0x1, @rand_addr=' \x01\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x4801}, 0x4800) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x6) 1.849141308s ago: executing program 4 (id=2537): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000004780)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f00000004c0)=[{&(0x7f0000000040)='}', 0x1}], 0x1}}], 0x1, 0x40090) shutdown(r0, 0x1) setsockopt(r0, 0x87, 0x77, &(0x7f00000000c0)="1a001000df6f2fe53ea6000000009a0708000a", 0x13) 1.841477152s ago: executing program 4 (id=2539): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@newtclass={0x24, 0x28, 0x4, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x9, 0x4}, {0x7, 0xb}, {0xb, 0xf}}}, 0x24}}, 0x80000) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0x4c, 0x10, 0x401, 0x70bd26, 0x0, {0x0, 0x0, 0x0, 0x0, 0x38091}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_IFNAME={0x14, 0x3, 'nicvf0\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x24048c00}, 0x10) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="64000000020605000000000000000000000049001400078008000800000000000800064000000000050001001b00000005000500020000000500040000000000090002009c5b7a310000000015000300686173683a6970"], 0x64}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0xa0}, [@ldst={0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000017000000400006803c00040067636d28616573290000000000000000000000000000000000000000000000ee77"], 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) 1.68276738s ago: executing program 4 (id=2542): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x4c, &(0x7f0000000000), 0x4) recvmsg$unix(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x2000) ioctl$TUNSETNOCSUM(r3, 0xff04, 0x0) ioctl$PPPIOCSCOMPRESS(r3, 0x4010744d) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r4, &(0x7f0000000340)="4700000001003f", 0x7) r5 = socket$inet6(0xa, 0x800000000000002, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x0, @mcast2}, 0x1c) sendto$inet6(r5, 0x0, 0x0, 0x80, &(0x7f00000000c0)={0xa, 0x4e22, 0x1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, 0x5}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000bc0)={{{@in=@rand_addr=0x4, @in6=@private0, 0x0, 0x0, 0x4, 0x0, 0x2, 0x20, 0x20}, {0x0, 0x0, 0x2, 0x0, 0x8, 0x8, 0x4}, {0x4, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x1, 0x0, 0x1}, {{@in6=@remote, 0x4d3, 0x32}, 0x0, @in6=@empty, 0x0, 0x0, 0x0, 0x8}}, 0xe8) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="34804400", @ANYRES16=r6, @ANYBLOB="01002cbd701004000000050000000600010005000000080009000200000008000b000000000008000c00a80a0000"], 0x34}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) 1.603090791s ago: executing program 0 (id=2544): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r0, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x7, 0x1, 0x5, 0x0, 0x0, {0xc96eee455dd52aad, 0x0, 0x1}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20040000}, 0x20004000) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @range={{0xa}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_RANGE_SREG={0x8}, @NFTA_RANGE_OP={0x8}, @NFTA_RANGE_TO_DATA={0xc, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "a840"}]}, @NFTA_RANGE_FROM_DATA={0xc, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, "8d"}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}}, 0x0) 1.548822722s ago: executing program 2 (id=2545): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000100)={r0}) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000cc0)={0x544, r2, 0x4, 0x70bd27, 0x25dfdbfb, {}, [@WGDEVICE_A_FWMARK={0x8, 0x7, 0x9}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0xffffff1f}, @WGDEVICE_A_PEERS={0x518, 0x8, 0x0, 0x1, [{0x294, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @multicast1}}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "f3a0916598262b494db8cc3a47f8cce1e6b3f5f29727e7d2d2ce060acfcfb144"}, @WGPEER_A_ALLOWEDIPS={0x240, 0x9, 0x0, 0x1, [{0x94, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @multicast1}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x2e}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0xf}}, {0x5, 0x3, 0x3}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0xe}}, {0x5}}]}, {0x88, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x19}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x2}}]}, {0x88, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x16}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x41}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x2}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_FLAGS={0x8, 0x3, 0xa}]}, {0x84, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "014267038fd76b7baa9973b0f73748fc087f0f40ba46d72cf012d6d51a255dd9"}, @WGPEER_A_FLAGS={0x8, 0x3, 0x2}, @WGPEER_A_FLAGS={0x8, 0x3, 0x4}, @WGPEER_A_FLAGS={0x8, 0x3, 0x2}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0x10001, @private0, 0x9}}]}, {0x198, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ALLOWEDIPS={0x16c, 0x9, 0x0, 0x1, [{0x88, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}]}, {0xa0, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @loopback}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x10}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x31}}}, {0x5}}]}]}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0xc, @empty, 0x2}}]}, {0x20, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @empty}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x6}]}, {0xc, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x9f0}]}, {0x38, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x800}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}]}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x40}]}, 0x544}, 0x1, 0x0, 0x0, 0x800}, 0x24000004) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000001e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000c00)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_HASH_SREG={0x8}, @NFTA_HASH_LEN={0x8}, @NFTA_HASH_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x84}}, 0x0) 1.548109129s ago: executing program 1 (id=2546): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), r0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000140)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r5, 0x84, 0x71, &(0x7f0000000040), &(0x7f0000000080)=0x8) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r2, {0x2, 0x4e24, @multicast2}, 0x0, 0x0, 0x3, 0x3}}, 0x26) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010028bd7000fedbdf25030000000800040002004cbbcd1e198c96e6000009e6c788d9d6f22b6cb3bda274c371be228075496608531046f0a6cfd63ab7ea9077c459bc692a42c7aa6f6cc37ce29fa4598792f39453c288167c6ded173dfe44dde319a129d11072556b2a7f97d84d1593f6831299d23ac69b7fc0aa186f81f9e6a6aad65d0d485af1779553903e752f8ab2c4ac6460e4568363407c0e023adc5aa5e9b7ffa2aee282ad27e1453addd7d20a2fa3fa460bbeead76e4fef035547"], 0x1c}, 0x1, 0x0, 0x0, 0x4040000}, 0x4000080) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r4) sendmsg$NFNL_MSG_ACCT_NEW(r4, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x2c, 0x0, 0x7, 0x500, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x2}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x26}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000010) sendmsg$ETHTOOL_MSG_DEBUG_SET(r6, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x18, 0x10, 0x3}, @TCA_FQ_FLOW_MAX_RATE={0x2, 0x2}, @TCA_FQ_QUANTUM={0x2, 0x2, 0x10270000}]}}]}, 0x48}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000140)={'ip6_vti0\x00', &(0x7f00000000c0)={'ip6tnl0\x00', 0x0, 0x0, 0x5, 0xff, 0x0, 0x60, @private0, @dev={0xfe, 0x80, '\x00', 0x3b}, 0x7800, 0x1, 0x3, 0x6}}) sendmsg$ETHTOOL_MSG_PAUSE_SET(r6, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="000225bd7000fedbdf2516000000200001801400020067656e6576653100000000000000000008000100", @ANYRES32=r12, @ANYBLOB="e0e7ccebe57adb84ffd0739583461d690e16fce6b1acfd8ccec02fb9"], 0x34}, 0x1, 0x0, 0x0, 0x10}, 0xc040) 1.51410405s ago: executing program 2 (id=2547): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x10, 0x4, &(0x7f0000001300)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x47}]}, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x91) r0 = socket$kcm(0x10, 0x2, 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000005, 0x13, r1, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001880)="5c00000012006b949e3de3d86e6c1dffff137e03000000000000fcce1ef0f8001d000a00a0e6b1e517d34460bc24eab556a7e6241e6182949a36c23d3b48dfd8cdbf9367b4fa51f60a64c9f408000300060100000800030011000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xb, 0x1c, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b70300001b0000008500000083000000bf0900000000000055090100000000009500000000000000bf080000000000007b9af8ff00000000b5090500000000007baaf0ff00000000bda804000000000007080000f8ffffffbfa400000000000007000000f0ffffffb70200000800000018220000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7050000080000004600000076000000bf91000000000000b6080000000000008500000085000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0xb, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.467175482s ago: executing program 0 (id=2548): sendmsg$NFT_MSG_GETOBJ_RESET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, 0x15, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x40580}, 0x4) r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="89000000120081ae08060cdc016b3f087f03e3520000000000e2ffca1b1f000000000cc00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120800030004010000bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) 1.361080769s ago: executing program 2 (id=2549): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000580)={'veth1_to_bond\x00', 0x0}) r3 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000300)={r0, r2, 0x25, 0x4}, 0x14) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000010000507000000000004000000000000", @ANYRES32=r6, @ANYBLOB="00000016010000001800120008000100736974000c0002000800030036"], 0x38}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB="68000000100039042cbd7000eaffffff000003e4", @ANYRES32=r6, @ANYBLOB="83000400000000004800128008000100736974003c0002800500090029000000190010"], 0x68}, 0x1, 0x0, 0x0, 0x8000}, 0x4040) bpf$LINK_DETACH(0x22, &(0x7f0000000040)=r3, 0x4) 1.314246676s ago: executing program 3 (id=2550): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'morus1280-generic\x00'}, 0x58) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x48, 0x10, 0x609, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x48}}, 0x0) setsockopt(r1, 0x84, 0x11, &(0x7f0000000040)="020000000980ffff", 0x8) r3 = accept(r0, 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000300), r3) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r3, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="400000000e14000228bd7000fddbdf250800030003000000080001000100000008003c000100000008003c000400000008fe3c0000000000080001000200000029114d23aa13a5d73855ebbe7316b0587acfde395c978cc8536c607e7ab8843d97c74afc6c827207aa79c464a46f"], 0x40}, 0x1, 0x0, 0x0, 0x40040d0}, 0x4000) r4 = socket$pppoe(0x18, 0x1, 0x0) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000380)={0x0, @dev, @remote}, &(0x7f00000003c0)=0xc) sendmsg$nl_route_sched(r3, &(0x7f0000000480)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)=@newtclass={0x3c, 0x28, 0x100, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0xc, 0xfff2}, {0x4, 0xc}, {0x8}}, [@tclass_kind_options=@c_red={0x8}, @TCA_RATE={0x6, 0x5, {0xff, 0xc6}}, @TCA_RATE={0x6, 0x5, {0x5, 0x7}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4010}, 0x4) connect$pppoe(r4, &(0x7f0000000100)={0x18, 0x0, {0x7, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, 'xfrm0\x00'}}, 0x1e) connect$pppoe(r4, &(0x7f0000000280)={0x18, 0x0, {0x2, @multicast, 'veth1_to_team\x00'}}, 0x1e) sendmsg$NFT_BATCH(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001780)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_DELSET={0x28, 0xb, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x9}, @NFTA_SET_ID={0x8}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x1) 1.2443979s ago: executing program 0 (id=2551): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0x17}, 0xb}) ioctl$BTRFS_IOC_SYNC(r0, 0x9408, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpuset.effective_mems\x00', 0x0, 0x0) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x3c, r2, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x9}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x4546}]}, 0x3c}, 0x1, 0x0, 0x0, 0x91}, 0x4) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200), r1) sendmsg$IPVS_CMD_SET_SERVICE(r1, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0xc0, r3, 0x20, 0x70bd27, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}, @IPVS_CMD_ATTR_DEST={0x64, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x8000}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x1}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x1}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x4}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x2}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x6}]}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x6b1d}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x2}, @IPVS_DEST_ATTR_WEIGHT={0x8}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}]}, 0xc0}, 0x1, 0x0, 0x0, 0x4040000}, 0x20040094) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000380)={@initdev={0xac, 0x1e, 0x1, 0x0}, @local, 0x0, 0x2, [@broadcast, @private=0xa010102]}, 0x18) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)={0x1b, 0x0, 0x0, 0x7e000000, 0x0, r1, 0x4, '\x00', 0x0, r1, 0x5, 0x3, 0x3}, 0x50) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000500)={'team0\x00', 0x0}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000880)={0xffffffffffffffff, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f00000005c0)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x9a, &(0x7f0000000680)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f00000006c0), &(0x7f0000000700), 0x8, 0xb9, 0x8, 0x8, &(0x7f0000000740)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x1a, 0x10, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xbcc}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@exit], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000004c0)='GPL\x00', 0x8, 0x0, 0x0, 0x83f00, 0x0, '\x00', r5, @tracing=0x1a, r1, 0x8, &(0x7f0000000540)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000580)={0xfff, 0xe, 0x0, 0x2}, 0x10, r7, r1, 0x7, &(0x7f00000008c0)=[r1, r1, r1], &(0x7f0000000900)=[{0x4, 0x4, 0x10, 0x3}, {0x4, 0x1, 0x0, 0x3}, {0x3, 0x4, 0x1, 0x5}, {0x1, 0x1, 0xf, 0x1}, {0x3, 0x2, 0x6}, {0x5, 0x4, 0xb, 0x8}, {0x2, 0x5, 0x3, 0x1}], 0x10, 0x5}, 0x94) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000a40)={'ip6_vti0\x00', 0x0}) r9 = accept4(r0, &(0x7f0000000a80)=@ethernet={0x0, @link_local}, &(0x7f0000000b00)=0x80, 0x800) r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000b40)={0x1b, 0x0, 0x0, 0xa47, 0x0, r1, 0x40, '\x00', r8, 0xffffffffffffffff, 0x3, 0x0, 0x5}, 0x50) r11 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000e40)={&(0x7f0000000d80)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x6, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2, 0xd594}}, @typedef={0x8, 0x0, 0x0, 0x8, 0x5}]}, {0x0, [0x0, 0x5f, 0x2e, 0x0]}}, &(0x7f0000000e00)=""/16, 0x42, 0x10, 0x1, 0x3}, 0x28) r12 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001280)=@bpf_lsm={0x1d, 0x33, &(0x7f0000000f00)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x374b, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@generic={0x0, 0xc, 0x0, 0x1ff, 0x8001}, @map_fd={0x18, 0x4, 0x1, 0x0, r4}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x100}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfff}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @map_idx={0x18, 0x7, 0x5, 0x0, 0xd}, @jmp={0x5, 0x0, 0x3, 0xa, 0x5, 0x20, 0xffffffffffffffff}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000010c0)='syzkaller\x00', 0x80000000, 0x51, &(0x7f0000001100)=""/81, 0x41100, 0x2, '\x00', r8, 0x1b, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001180)={0x3, 0x5, 0x7, 0x1}, 0x10, r7, 0x0, 0x8, &(0x7f00000011c0)=[r1, r1, r1, r1, r4], &(0x7f0000001200)=[{0x3, 0x3, 0x3, 0xb}, {0x0, 0x5, 0x6, 0xa}, {0x3, 0x2, 0xc, 0xc}, {0x4, 0x3, 0x5, 0x2}, {0x4, 0x3, 0xc, 0x9}, {0x3, 0x3, 0x1}, {0x0, 0x5, 0x1, 0x6}, {0x3, 0x1, 0x7, 0x2}], 0x10, 0x6}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000013c0)={{r1, 0xffffffffffffffff}, &(0x7f0000001340), &(0x7f0000001380)=r1}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000001500)={0x9, 0x18, &(0x7f0000000bc0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r10}}, {}, [@map_idx={0x18, 0x8, 0x5, 0x0, 0x1}, @call={0x85, 0x0, 0x0, 0xad}, @map_val={0x18, 0x8, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0x9}, @initr0={0x18, 0x0, 0x0, 0x0, 0x2dcc, 0x0, 0x0, 0x0, 0x66c000}, @map_idx_val={0x18, 0x6, 0x6, 0x0, 0xd, 0x0, 0x0, 0x0, 0x1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000c80)='syzkaller\x00', 0xffff2e70, 0xaf, &(0x7f0000000cc0)=""/175, 0x41100, 0x34, '\x00', r6, @fallback=0x1a, r11, 0x8, &(0x7f0000000e80)={0x1, 0x1}, 0x8, 0x10, &(0x7f0000000ec0)={0x2, 0xc, 0x4, 0x4}, 0x10, r7, r12, 0x9, &(0x7f0000001400)=[r1, r4, r1, r1, r4, r13], &(0x7f0000001440)=[{0x1, 0x3, 0x0, 0xbcb93a48bfa9cc64}, {0x4, 0x1, 0x3, 0xa}, {0x3, 0x4, 0x3, 0x9}, {0x5, 0x2, 0x5, 0xb}, {0x3, 0x3, 0x7, 0x1}, {0x5, 0x4, 0xe, 0x16}, {0x1, 0x2, 0x5, 0x9}, {0x5, 0x5, 0x1, 0x6}, {0x5, 0x1, 0x1, 0x8}], 0x10, 0xef48}, 0x94) r14 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001600), r1) sendmsg$NL80211_CMD_GET_REG(r9, &(0x7f00000016c0)={&(0x7f00000015c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001680)={&(0x7f0000001640)={0x30, r14, 0x2, 0x70bd25, 0x25dfdbfe, {}, [@NL80211_ATTR_REG_RULES={0x4}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x65}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x5b}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x8080) r15 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) ioctl$sock_FIOGETOWN(r9, 0x8903, &(0x7f0000001700)=0x0) getsockopt$inet_IP_XFRM_POLICY(r9, 0x0, 0x11, &(0x7f0000001740)={{{@in6=@initdev, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@private0}}, &(0x7f0000001840)=0xe8) r18 = getgid() setsockopt$sock_cred(r15, 0x1, 0x11, &(0x7f0000001880)={r16, r17, r18}, 0xc) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000001940)={'ip6_vti0\x00', &(0x7f00000018c0)={'syztnl1\x00', r5, 0x29, 0x7, 0x8, 0x4, 0x21, @rand_addr=' \x01\x00', @mcast1, 0x700, 0x0, 0x2, 0xc}}) getsockopt$sock_int(r0, 0x1, 0x3, &(0x7f0000001980), &(0x7f00000019c0)=0x4) getpeername$inet6(r0, &(0x7f0000001a00)={0xa, 0x0, 0x0, @empty}, &(0x7f0000001a40)=0x1c) 1.243728413s ago: executing program 1 (id=2552): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="2400000076000907000000000000000007020000", @ANYRES32=0x0, @ANYBLOB="0c000d800600"], 0x24}, 0x1, 0x5502000000000000}, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x15, 0x0, &(0x7f0000000100)='GPL\x00'}, 0x94) (async) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r1, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) 1.097159168s ago: executing program 1 (id=2553): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3032, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(0xffffffffffffffff, 0x0, 0x80) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2000000011000100"/20, @ANYRES8=r0], 0x20}, 0x1, 0x0, 0x0, 0x8c050}, 0x0) syz_init_net_socket$x25(0x9, 0x2, 0x10) 1.096703013s ago: executing program 2 (id=2554): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x36, &(0x7f0000000000)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0xf5d4, 0x0, 0x0, 0x0, 0x3}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}}, @tail_call, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffff8}}, @exit, @printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xd8000000}}, @printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}, @map_idx={0x18, 0x9, 0x5, 0x0, 0x7}, @map_idx={0x18, 0x0, 0x5, 0x0, 0x7}], &(0x7f00000001c0)='syzkaller\x00', 0x3, 0xad, &(0x7f0000000200)=""/173, 0x41000, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x8, 0x2}, 0x8, 0x10, &(0x7f0000000300)={0x3, 0x0, 0x80000000, 0x8}, 0x10, 0x0, 0x0, 0x8, &(0x7f0000000340)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000380)=[{0x1, 0x2, 0xd, 0x1}, {0x5, 0x4, 0xd}, {0x0, 0x2, 0x3, 0x1}, {0x1, 0x3, 0xf, 0xa}, {0x5, 0x5, 0x1, 0x5}, {0x0, 0x3, 0xd, 0x5}, {0x1, 0x4, 0x10, 0x2}, {0x1, 0x4, 0xb, 0x8}], 0x10, 0x3}, 0x94) r1 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f00000004c0), 0x2, 0x0) ioctl$BTRFS_IOC_RM_DEV(r0, 0x5000940b, &(0x7f0000000500)={{r1}, "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"}) getsockname$packet(0xffffffffffffffff, &(0x7f0000001640)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000001680)=0x14) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001600)={@ifindex=r2, 0x26, 0x1, 0x5, &(0x7f0000001500)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x0, &(0x7f0000001540)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000001580)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000015c0)=[0x0]}, 0x40) (async, rerun: 32) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) (rerun: 32) readv(r3, &(0x7f00000027c0)=[{&(0x7f00000016c0)=""/220, 0xdc}, {&(0x7f00000017c0)=""/4096, 0x1000}], 0x2) (async) ioctl$BTRFS_IOC_DEV_REPLACE(r3, 0xca289435, &(0x7f0000002800)={0x0, 0x81, @status={[0x2, 0x4, 0xfffffffffffffffa, 0x6, 0x1, 0x8]}, [0x3, 0x800, 0x78, 0x58f5, 0x8d7, 0xb, 0xffff, 0x0, 0x8d05, 0x8, 0x1fe00, 0x1, 0x2, 0x8, 0xa, 0x4, 0x5328, 0xd, 0x7, 0x9, 0x2, 0x1, 0x40, 0x7, 0xd, 0x6, 0x4, 0x0, 0x714b, 0xffffffffffffff50, 0x6, 0x84f, 0x7, 0xffffffffffffffff, 0x5, 0x6, 0x6, 0x2, 0x7, 0x17d, 0x3ff, 0x3ff, 0xffffffffffffffff, 0x58, 0x8000, 0x401, 0x9, 0xb, 0x5, 0x6, 0x1, 0x0, 0x8, 0x9, 0x2, 0x5, 0x100000001, 0x3, 0x5, 0x4, 0x0, 0x7, 0x5, 0x6a6e]}) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$FS_IOC_GETFSUUID(r0, 0x80111500, &(0x7f0000003240)) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000003280), 0x480800, 0x0) ioctl$TUNGETIFF(r4, 0x800454d2, &(0x7f00000032c0)={'veth0_to_bond\x00'}) (async) r5 = accept$inet(r0, &(0x7f0000003300), &(0x7f0000003340)=0x10) setsockopt$IP_VS_SO_SET_DELDEST(r5, 0x0, 0x488, &(0x7f0000003380)={{0x2b, @local, 0x4e21, 0x1, 'none\x00', 0x1, 0x7, 0x49}, {@empty, 0x4e21, 0x10000, 0x7, 0x0, 0x6}}, 0x44) (async, rerun: 64) r6 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000003400), 0x2, 0x0) (rerun: 64) write$cgroup_subtree(r6, &(0x7f0000003440)={[{0x0, 'memory'}, {0x2b, 'net'}, {0x2b, 'perf_event'}, {0x2d, 'cpuset'}]}, 0x21) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r5, 0x84, 0xa, &(0x7f0000003480)={0x31, 0x8, 0x200, 0x6, 0x1b1, 0xfffffffb, 0x3ff, 0x400, 0x0}, &(0x7f00000034c0)=0x20) setsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000003500)=@assoc_value={r7, 0x33}, 0x8) (async) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000003540)={'batadv_slave_1\x00', 0x2}) (async) r8 = epoll_create(0xffffff80) (async) bind$bt_l2cap(r5, &(0x7f0000003580)={0x1f, 0xbe4c, @any, 0x6, 0x2}, 0xe) (async) pipe(&(0x7f00000035c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r9, 0x84, 0xc, &(0x7f0000003600), &(0x7f0000003640)=0x4) (async) sendto$x25(r9, &(0x7f0000003680)="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", 0x1000, 0x30, &(0x7f0000004680)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x2}}, 0x12) (async) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r8, 0xf507, 0x0) (async) close(r9) (async) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r10, 0xc400941d, &(0x7f00000046c0)={0x0, 0x6, 0x2, 0x1}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r3, 0xc400941d, &(0x7f0000004ac0)={r11, 0xffffffffffff0000, 0x7, 0x1}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r9, 0x89f9, &(0x7f0000004f00)={'sit0\x00', &(0x7f0000004ec0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @dev={0xac, 0x14, 0x14, 0x11}, 0x8, 0x1b}}) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r3, &(0x7f0000004f40)={0x90000011}) 1.095275557s ago: executing program 0 (id=2555): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="05000000050000000200000004"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000200b703000000000000850000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000300)='tlb_flush\x00', r1}, 0x10) r2 = socket$inet6_icmp(0xa, 0x2, 0x3a) sendmsg$inet6(r2, &(0x7f00000002c0)={&(0x7f0000000000)={0xa, 0x4e21, 0x800, @private0, 0xf4}, 0x1c, &(0x7f0000000180)=[{&(0x7f0000000040)="d64c41990447806cf8a1", 0xa}, {&(0x7f0000000080)="a07401e131ca07f2ea5daafb307ea60f46cbdc7bd51807088851b226282f9411702b960688201f6a94", 0x29}, {&(0x7f00000000c0)="6cd8281d703c2612fbc193462e628773b64839854cbc348f4f65f6ef255296", 0x1f}, {&(0x7f0000000340)="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", 0xfd}, {&(0x7f0000000140)="13dcd487d491b0391ed8390ee09b96dfb574d49f1d31ca27180963ef7ef37b13", 0x20}, {&(0x7f0000000580)="a717549acec04cad119adbe838d1ffb19141481ec8bc1518ba2e540c4412b766d3d9eab935a51196e0fe423c060dce4bead7a472d6ec82c7be9919e63a4fee4288caf6a96ec147b83ba5d58c88eeee6f218154ad65c20161d3b8fcb3ddc03db1efb78966b7dadaef6b7d6f59292d995551ec35077b55134fe806497891fd672b7eb8a0dece06874e9ac13359434ae13778da4f686c536f68a60c2135089260f3ea2b6c9f9ca3104657341b95a9f7d2f547f09e26b1e31d4046ef2231ef6ecf0c3a11312c265ab36e39ac2418a9edcb80163e", 0xd2}], 0x6, &(0x7f0000000680)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0xfff}}, @dstopts_2292={{0x68, 0x29, 0x4, {0x87, 0x9, '\x00', [@ra={0x5, 0x2, 0x4}, @pad1, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x40, {0x0, 0xe, 0x9, 0x4, [0x9, 0x6, 0xdc1, 0x100, 0x7, 0x1, 0x1]}}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x9}}, @dontfrag={{0x14, 0x29, 0x3e, 0x3206}}, @rthdr={{0x48, 0x29, 0x39, {0x3a, 0x6, 0x2, 0x7f, 0x0, [@private2={0xfc, 0x2, '\x00', 0x1}, @mcast2, @mcast1]}}}], 0xf8}, 0xb0) 1.059343128s ago: executing program 3 (id=2556): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xd, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0xc4}}, {}, [], {{}, {0x6, 0x0, 0x5, 0x8}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bind$can_j1939(r0, &(0x7f0000000340)={0x1d, r1, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) connect$can_j1939(r0, &(0x7f0000000000)={0x1d, r1, 0x0, {0x2, 0xff, 0x4}, 0xff}, 0x18) r3 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r3, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @dev}}, 0x8c, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0xfffffdef}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0xff48) 987.615306ms ago: executing program 0 (id=2557): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x800) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x54, 0x10, 0x1, 0x70bd25, 0x25dfdbfc, {0x6, 0x0, 0x8100, 0x0, {0x1, 0x10}, {0xfff1}, {0xe, 0x10}}, [@TCA_RATE={0x6, 0x5, {0xfc}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x400c800}, 0x0) (async, rerun: 64) shutdown(r1, 0x0) (rerun: 64) 853.056532ms ago: executing program 2 (id=2558): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, 0x0, 0x0}, 0x90) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="2800000012002102000000000000000007"], 0x28}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001400)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c001a800800028008000200080000003e1200"], 0x44}}, 0x48000) r3 = socket(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket(0x1e, 0x5, 0x0) getsockname$packet(r5, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) poll(&(0x7f0000000040)=[{r6, 0x16842e9bd142d0d5}], 0x1, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, r4, 0x0) socket$inet6(0xa, 0x2, 0x3a) sendmmsg(r3, &(0x7f0000000000), 0x4000000000001f2, 0x0) unshare(0x20000400) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r7, 0x107, 0x10, 0x0, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) splice(r0, 0x0, r0, &(0x7f0000000100)=0x4, 0x7, 0x4) getsockopt$bt_hci(r3, 0x0, 0x3, &(0x7f0000000340)=""/131, &(0x7f0000000400)=0x83) r9 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0)={r8}, 0x8) sendmsg$TIPC_NL_MON_GET(r9, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="d8000000", @ANYRES16=0x0, @ANYBLOB="00002cbd7000fedbdf25120000005400038008000100ffff00000800030001000000080001000000000008000300810000000800020004000000080001000700000008000100e00000000800020001875d6c7a0000000000000008000300050000003c00038008000300030000000800010005000000080001000700000008000100060000000800010010060000080003000f000000080001000300000034000980080001000300000008000100050000000800010005000000080001000400000008000200010000000800010005000000"], 0xd8}, 0x1, 0x0, 0x0, 0x84}, 0x5) 783.958224ms ago: executing program 1 (id=2559): syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) (async) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r2, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) r3 = socket(0x10, 0x803, 0x2) socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) (async) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYRES64=r6, @ANYRESOCT=r7, @ANYBLOB="46060900000000001c00128009000100766c616e000000000c000280060001000400000008000500", @ANYRES32=r7, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r6], 0x4c}}, 0x80) 738.785377ms ago: executing program 4 (id=2560): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x63, 0x11, 0xa4}, [@ldst={0x4}]}, &(0x7f0000000040)='GPL\x00', 0x8, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 681.049128ms ago: executing program 3 (id=2561): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) (async) ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f0000000040)={0x5, &(0x7f0000000440)=[{0x45, 0x0, 0x3, 0x6}, {}, {0x0, 0x1}, {}, {0x6}]}) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) (async) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newtfilter={0x38, 0x2c, 0xd3f, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r6, {0x0, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_bpf={{0x8}, {0xc, 0x2, [@TCA_BPF_FD={0x8}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r1) (async) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) (async) r8 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r8, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) (async) socket(0x1a, 0x2, 0xfffffff9) recvmsg(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001240)=[{&(0x7f00000027c0)=""/4102, 0x1006}, {&(0x7f0000005540)=""/4093, 0xffd}, {&(0x7f0000000440)=""/207, 0xcf}], 0x3}, 0x0) (async) r9 = socket$inet6_sctp(0xa, 0x801, 0x84) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) (async) getsockopt$bt_hci(r9, 0x84, 0x85, &(0x7f0000002380)=""/4107, &(0x7f00000000c0)=0x1012) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="380000001000390400"/20, @ANYRES32=0x0, @ANYBLOB="00000000408000001800128008000100736974000c00028008000100", @ANYRES32=r7], 0x38}}, 0x0) 586.859768ms ago: executing program 4 (id=2562): bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r0 = socket$alg(0x26, 0x5, 0x0) (async) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r1, &(0x7f0000000000)={0x24, @long={0x3, 0x1, {0xaaaaaaaaaaaa0102}}}, 0x14) (async) bind$alg(r0, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) (async) r2 = accept4(r0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000035c0), r2) sendmmsg$alg(r2, &(0x7f0000001c40)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x895}], 0x1, 0x24002894) sendmsg$kcm(r2, &(0x7f0000001a00)={0x0, 0x0, &(0x7f0000001980)=[{&(0x7f0000000480)="00e88a79f76008c77f19ee3a8a898217187ebc0aa050c397794998615839e716f8d25c5395c8156963ad36d87a63a54d23d4868e24a7ff2b491038482ee5c8795658243cea3072be48479232c7f76cedcb210e82519f6a885a9fe4a8", 0x5c}, {&(0x7f0000000500)="909dcb6b2ff63f57b07f672dd7a3ca8b94227a5c618d5a442da9c1e9a442c27321f5690de8053f3945c9ae744d1f385c3a6c65eaf1ca23a0da70e987b202e2de5dac48a8d6839fa5855b5aeb3473e85dd24db36da7695c187d21f4fa3f08324826ad75aa3f35876eab89b25ebc0c987d9fc7de06b8a712fc6643ffc6e1193a9c0653273f83a0832322f32ea812d1a5a97dc19fed1b38018a3bbca96d642f7b25fcaa872f01bb2d6756223aefe8dc84d30cb58461e67906e255cae3d12a6daba59ca4a7e78146c0737a2a35d202d51ee336d51bd4b2a8c00633c35ef6363ca3b4254e9ce8864727afb7", 0xe9}, {&(0x7f0000000600)="88a22f8ecda9f23526d39762eee1bb0086a5d54bea96a65c449935941023bde325bcd633d048b5c2a72be87108dc41c931a107940b0c6ba129cb1f2ea089c3ad6a6329faae8ec8088d925589a5cbdc893445dd254ea0ec0e14fe5bd81b2b13310bc4679539a6bbd816bb3aaa6c9dd4", 0x6f}, {&(0x7f0000000680)="ad5768f024e33b50048a9cdacedfaca0af29385f5674304f99f2ae9d42956a8a8371ed5b427af6f5a867b75ce75fa4d95b2b9b9de567f0ac25936c35b153ff6b1535d058adcea62e5502d5171e327d86acaae098213cbea0822bef709bb8be92b2ad526cba98caf02bafc4e7b6d9403c900388264ff0a3d2d7061ebd4412fb68ed784c4690a1b624b83eb3edf47a8b6b63700d13f3698d4156f35c0e472607e81c8b8eb6336c2d86db5ee108cff68b1028ed646853b0fd945dcd0d59bc1f3c5ea4ed2ba2a409576f4152d4b6131a43944754b8df93f9c5d0cb4b78", 0xdb}, {&(0x7f0000000780)="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", 0x171}], 0x5}, 0x20000000) 489.563262ms ago: executing program 1 (id=2563): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="7a0a00ff000000007110bc000000000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x42}, 0x94) 233.147479ms ago: executing program 1 (id=2564): getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x30, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000080)={0x2, 0x1, 0x0, 0x3, 0x8, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @broadcast}}]}, 0x40}, 0x1, 0x7}, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="38000000100039042bbd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100677265000c000281060011004e210000"], 0x38}}, 0x0) setsockopt$inet_sctp6_SCTP_CONTEXT(r3, 0x84, 0x83, &(0x7f0000000000)={r5, 0x2}, 0x8) setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(r1, 0x111, 0x2, 0x0, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="780000001000010400"/20, @ANYRES32=r10, @ANYBLOB="60300300001400005800128009000100626f6e6400000000480002802c0008"], 0x78}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@getqdisc={0x28, 0x26, 0x10, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x9, 0xf}, {0xfff2, 0xfff1}, {0xfff2, 0x7}}, [{0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd26, 0x25dfdc00, {0x0, 0x0, 0x0, r7, {0x1d}, {}, {0x5, 0xfff0}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x4080014) 232.484566ms ago: executing program 3 (id=2565): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) (async) r1 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) setsockopt$ax25_int(r1, 0x101, 0x1, &(0x7f0000000040)=0x2, 0x4) (async, rerun: 64) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) (async, rerun: 64) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_TYPE={0x5, 0x2, 0x112}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}]}}}]}]}], {0x14}}, 0x7c}}, 0x0) (async, rerun: 64) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @none, 0x4, 0x2}, 0xe) (rerun: 64) 197.0601ms ago: executing program 3 (id=2566): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = socket(0x2a, 0x2, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001000)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000026c0)=@newtfilter={0x87c, 0x2c, 0xd27, 0x70bd2d, 0x4, {0x0, 0x0, 0x0, r2, {0xe, 0x6}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0x84c, 0x2, [@TCA_BASIC_POLICE={0x848, 0x4, [@TCA_POLICE_RATE={0x404, 0x2, [0x8, 0x5, 0x8, 0x401, 0x7, 0xffffffff, 0x6, 0x8, 0x7f, 0x101, 0x3, 0x9, 0x5, 0x4dc6, 0x7fff, 0x6, 0x8, 0x3, 0xd, 0x4, 0x3ae0, 0x5, 0x99, 0x1, 0xff, 0x1, 0x6, 0x80, 0x7f1b, 0x5, 0x5, 0x80000000, 0xfffffffa, 0xffffffff, 0x800, 0xf20d, 0x800, 0x0, 0x1, 0x4, 0x80000000, 0x6, 0x9, 0x3, 0xff, 0x0, 0x9f0, 0x1ff, 0xdf7a, 0x7fffffff, 0x0, 0x0, 0xc, 0x14, 0xffffffff, 0xc, 0x401, 0xffff, 0x9bf, 0x6f3c, 0x8, 0x9, 0x7ff, 0x3, 0x9, 0x8000, 0x8, 0xffffffc0, 0x4, 0x1, 0x2, 0x8, 0x4, 0x9, 0x200, 0x3ff, 0x8000, 0x81, 0x3, 0x4, 0x7ff, 0x1, 0x5, 0x80000000, 0x2, 0x5, 0x2, 0x1, 0x0, 0x10001, 0x81, 0xc, 0x6, 0x80000001, 0x401, 0x6, 0x0, 0x3, 0x800, 0xf79, 0x6, 0x1, 0x4, 0xfff, 0x2, 0x1, 0x37800000, 0x0, 0x3, 0xae5, 0x4, 0x4, 0xae, 0xfffffffe, 0x1, 0x6, 0x8, 0x400, 0x1, 0x8000, 0xc, 0x1, 0x8, 0x3, 0x95, 0x1, 0x6, 0x3, 0xca, 0x0, 0x0, 0x3, 0x7, 0xffffb09a, 0x1, 0xe, 0x9, 0x5, 0x6, 0x4b, 0x9, 0x4, 0xfffffffe, 0xfffffffe, 0x4, 0x69, 0x2, 0x2, 0x6c, 0x0, 0x5, 0xffff, 0x4, 0x5, 0x2, 0x6, 0xffffffd1, 0x6, 0x1, 0xb3, 0x5, 0x5, 0x1, 0x9, 0x4, 0x3, 0x9, 0xffffffff, 0x5, 0x2c9, 0x8bf, 0x0, 0xde39067, 0x9, 0x8, 0x6, 0x1534fe8b, 0x7, 0x0, 0x6, 0x2, 0x4, 0x81, 0xd16d, 0x0, 0xf9, 0x8, 0x401, 0xffffffff, 0xe19b, 0x80000000, 0x6, 0x81, 0x800, 0x9, 0x651, 0x10001, 0x6, 0x0, 0x5, 0x1d58, 0x401, 0x3, 0x8002, 0x80000008, 0x36, 0x15a, 0x2, 0x6, 0x5, 0x7, 0x6, 0x79, 0x8, 0x1da, 0x1, 0x9, 0x30, 0x0, 0xfffffff9, 0x9c06, 0x7, 0x0, 0x27b, 0x5, 0x1001, 0x3, 0x400001, 0x6, 0x5, 0x64c, 0x4, 0xfffffff7, 0x9, 0x4, 0x80000000, 0x80, 0x7, 0x7, 0x7, 0x3, 0xa, 0x8, 0xffff, 0x22, 0x9, 0x4, 0x3, 0x3, 0x9, 0xfffffffa, 0x1, 0x6, 0x3321, 0x9, 0x5]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x80000001, 0x7, 0x3ff, 0x7, 0x4, 0x2, 0xffffffc0, 0x7ff, 0x86, 0x9, 0x9, 0x2, 0x8c, 0x1000200, 0x5, 0x5, 0x40000000, 0x5, 0x7, 0x1, 0x0, 0x4, 0x0, 0xc, 0xd, 0x3, 0x9, 0x49, 0x80000000, 0xd35, 0x25431060, 0xd2, 0x5, 0x9, 0xb5f0, 0x401, 0x7, 0x2, 0x6, 0x80000001, 0xa, 0x8, 0x9, 0x1, 0xccf1793, 0x2c800000, 0x5d, 0x1, 0x239, 0x5, 0x5a5057fd, 0x5, 0x4, 0x6, 0x8, 0x5, 0x200, 0x3d, 0x10000, 0xf9, 0x6, 0x408, 0x7, 0x3, 0xfffffeff, 0x9, 0x1, 0x401, 0x1ff, 0x2, 0x0, 0x20000, 0x800, 0x3, 0x0, 0x8, 0x10000, 0x6, 0x7c, 0x1, 0x9, 0xffffff01, 0x9, 0x8, 0x8052, 0x9, 0x5, 0x8, 0x142, 0x2d, 0x7, 0x8, 0xb, 0x81, 0x9, 0x3ff, 0x1, 0x10000, 0x9, 0x1c0, 0x7, 0xffffffff, 0x5, 0xe8, 0x6, 0x8, 0xf, 0x3, 0x0, 0xff, 0xfffffffa, 0xfffffff7, 0x8001, 0x5, 0x9, 0x8, 0x5, 0x9, 0x1ff, 0x2, 0x10001, 0x8, 0x0, 0x6, 0x4, 0x866, 0x7fff, 0xe0, 0x8, 0x80000d3a, 0x6000000, 0xfffffffc, 0x9, 0x7fff, 0x7, 0x10000, 0x3, 0x7fff, 0x40000000, 0x1, 0x7, 0xfffffffb, 0x3, 0x1, 0x9, 0x0, 0x7, 0x6, 0x4, 0x700, 0x4, 0x1, 0x2, 0x0, 0x5, 0x7, 0x6, 0x7, 0x8, 0x8, 0xc, 0x9, 0x6, 0x5, 0x0, 0x5, 0x2, 0x2, 0x8, 0x9, 0x9, 0x9, 0x5847cb5c, 0x9, 0x2, 0xffffffd8, 0x10001, 0xfffffffc, 0x5, 0x401, 0x8, 0x1, 0x2, 0x0, 0x0, 0x1200, 0x2, 0x0, 0xef2c, 0x80000001, 0xac5ae1dd, 0x0, 0x800, 0xffffffff, 0x2, 0x3, 0x1, 0x8, 0x7785, 0x8001, 0x4, 0x5, 0x4, 0x7, 0x0, 0x6, 0xffffff2f, 0x8001, 0x3, 0x5, 0x3, 0x4, 0x7, 0x5, 0x7, 0xabd, 0x0, 0x10001, 0x9, 0x4, 0x30000000, 0x5, 0x13c1, 0x3, 0x7, 0x1, 0x8, 0x2, 0x6, 0x1, 0x2, 0x2, 0xb, 0x8, 0xa, 0x9, 0xfffffff9, 0x7, 0x7, 0x3, 0x8, 0x9, 0xfffffffc, 0x81, 0xe7a9, 0x10001, 0x6, 0x0, 0xb9, 0x8cca, 0xdda5, 0x1, 0xa, 0x7fffffff, 0x10, 0x31f]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x4, 0x4, 0x7f, 0x0, {0x6, 0x0, 0x6, 0x7ff, 0x6e6, 0xd74}, {0x8, 0x0, 0xffff, 0x8, 0x7f, 0x7fff}, 0x0, 0x8000, 0xbab2}}]}]}}]}, 0x87c}}, 0x20000050) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d0f65acc0d06d1a1434e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622e03b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab0300817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c690220b87b20581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd713089856f756436303767d2e24f29e5dad9796edb697a8ad004eea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014751c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff22dc518afc9ffc2cc788bee1b47683db01a2f9398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa407e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae526aca54183fb01c73f979ca9857399537f5831808b0dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a0c93d47018c12e7ba8188a22e8b15c3e233db00002e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e4845535a8b90dfae158b94f50adab188dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b4896c7aabf4df517d90bdc01e73835d50200a90800c66ee2b1ad76dff9f9003f07000099d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987595ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e547f7ad33850d9feccd0111a2e3700845dee734fe7da3770845cf442d488afd80e17000000000000000000000000000000000000000000000000000005202000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a12489c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db08407081c6281e2d8429a8639034a75f4c7df3ea8fc2018d07af14915f29b719f54926fc32468f65bd06b4092140faed0c329be610c3082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b4c8787361f3289f86ae826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce1d9bc7ef3e3f40c14089c82759106f422582b42e3e8484ea5a6ad9aa520000afe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da357f9e93ce055019c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137ff47257f164391c672b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d6fccbecfae5553d9950d48c774eaa35b24fce69a20d8bc410d9f48bf7eac90529cd6af061c9e53addddc620ce73c5d177e3d097159f2768636fc10276c6a0adc57483b3f7083f66b87ef296ee85e9bb70a3009a5d30f479e293a3302e11350ea857b37e76ca2f50378e4092ce2c574ad278b9b7b717c571afb2077b019fd9d89efd59b41f051ec5a8ff87ecc8df917a1e386d849fcd10e2f9ca52e02339c2f4666b0c545e25f1cd62421c28d25994be0cff7271a0dee38d7ac4ac736b090e1d29f981fd9086e4000000000000646174b55d251f7f8ca5ccc22a5efb33b237eff5597a3c3a5f3a9bb54abb40e54593e1a7ce4cfa17b3c3fe91c06363496341eae20dcc59b6179b32ddddef5c34000096a54c0c571a91878f61f74912e2299e5501d4d6943bfd74c856511726f0ac8f7d17f1c6b4451c1bcdc6b6e1700e4cd87709d97afc5423c96fa981873d4369b04bbf1fb9f68f17991540868e408201ad1a74179e489aa61f021a437a3fa935588be2068f7ff9b253106326fde795e530b93626cc68e06e602198724249b4445eef08401cd1a3e266db41474e69902e4d8f5da4e94cc36794258fd4032de7ab36bc24c5efd5c8495c1ccd580033c55725f2d60354f8ad5914a0155eaa743350ddb388f486b6de0549ef3b1b3c3b7d4d3a830ff39885776119408029be3788dd8422b1ab7b4c9d5b7d8682fd759c713108e1bdfc64b9121bbf07099def5c0ce3c861ae4b5cad8bba5a0b6059b9ef90c2f96a59320309e25df89484522bb1d6eaa92164f9e4042cb689a45a898354c17b08705205a9189772bcbcb6414e44b33a2470d3bc16f761c33f565b9da5e7991ad8482579cc1b16c1fcec815a5482ae8b1779c5e339971a6ec1217bcfd1ef24284de8a0a9f068f297037d6478c2434a9a18dcc6c7c791e444a79d7ce37f9cf2826b47ad8ca6a2fa254aa02cd098026798a6d336348af0fc11fa2809a5ebbe17ca4d0f889d518f64ee50f562b5fdb1f76d4a7fe14701f8ed0c6a55d66a6efea3e449e6b478abc5b196dd5308cb20c4e2a0bd702651bb39f10523102dcd8ece692159028f314e0d6bfa400475c6699fdc40efe0948e3cef7419a7f113134e5ee20fd87c4521ccfbd32d6f147f743d30866bdd86ca8bf0c7bcc475f4ed53517aaa51f1c151d859a7f0b53abd332c84bdad313e82ac3777a6f7f649ff8a25f6dfe09cb29213896b49a825257bf143e9fa3bbd47009e66fe5705b3ef2b40a182e408c680727d64e00e1ce508f8fd64ac6c84ccc28fc333067de63b9bb5daaa12ce60ee3779ded79651be69d2a413cd948a873dd7ad7017b150828cf100d3df8537f22aff58343c9ee966fceb594bbe10b911427f76a25a219be2f85287b7f83d323a30991067ad1369792166062085ff20c5fb9f6e4f78dd09c7d2d6ca3c8a5d0d26ccbe576f44a1bc94194817"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x18000000000002a0, 0xe80, 0x6000, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e088641100050000210057ac141440e0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r5) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r7], 0x1c}}, 0x0) write$nci(r0, &(0x7f0000000680)=ANY=[@ANYBLOB="410306a0b9cdb6f89f09e5"], 0xb) 62.267592ms ago: executing program 2 (id=2567): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYRES64=r0], 0x80}, 0x1, 0x7}, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xc7d, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1, 0x2}, 0x50) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000f00)='kfree\x00', r3}, 0x18) r4 = socket$caif_stream(0x25, 0x1, 0x0) sendmmsg$inet(r4, &(0x7f0000000040)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) r5 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000180), 0x8) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) r6 = socket$inet(0x2, 0x6000000000000001, 0x0) mmap(&(0x7f0000001000/0x200000)=nil, 0x200000, 0x2000001, 0x2011, r6, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@bloom_filter={0x1e, 0x2, 0x0, 0xeb0, 0x10400, r2, 0x7f, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2, 0x4, 0x1, @void, @value, @value=r5}, 0x50) getsockopt$bt_hci(r0, 0x84, 0x76, &(0x7f0000001f00)=""/4062, &(0x7f00000004c0)=0x744) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$team(&(0x7f0000000200), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_NOOP(r7, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0x90, r8, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [{{0x8, 0x1, r9}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}]}}]}, 0x90}, 0x1, 0x0, 0x0, 0x4c004}, 0x8080) socket$inet6_sctp(0xa, 0x1, 0x84) (async) socket$key(0xf, 0x3, 0x2) (async) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYRES64=r0], 0x80}, 0x1, 0x7}, 0x0) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xc7d, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1, 0x2}, 0x50) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000f00)='kfree\x00', r3}, 0x18) (async) socket$caif_stream(0x25, 0x1, 0x0) (async) sendmmsg$inet(r4, &(0x7f0000000040)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) (async) bpf$TOKEN_CREATE(0x24, &(0x7f0000000180), 0x8) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) (async) socket$inet(0x2, 0x6000000000000001, 0x0) (async) mmap(&(0x7f0000001000/0x200000)=nil, 0x200000, 0x2000001, 0x2011, r6, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@bloom_filter={0x1e, 0x2, 0x0, 0xeb0, 0x10400, r2, 0x7f, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2, 0x4, 0x1, @void, @value, @value=r5}, 0x50) (async) getsockopt$bt_hci(r0, 0x84, 0x76, &(0x7f0000001f00)=""/4062, &(0x7f00000004c0)=0x744) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$team(&(0x7f0000000200), 0xffffffffffffffff) (async) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000240)) (async) sendmsg$TEAM_CMD_NOOP(r7, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0x90, r8, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [{{0x8, 0x1, r9}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}]}}]}, 0x90}, 0x1, 0x0, 0x0, 0x4c004}, 0x8080) (async) 911.941µs ago: executing program 0 (id=2568): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x3}, [@map_fd={0x18, 0xab9af7866437f5ea, 0x1, 0x0, 0x1}]}, &(0x7f0000000080)='syzkaller\x00', 0xa, 0xfd, &(0x7f00000000c0)=""/253, 0x41100, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x6, 0x3}, 0x8, 0x10, &(0x7f0000000200)={0x1, 0xb, 0x4, 0x4}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000240)=[0xffffffffffffffff, 0x1], &(0x7f0000000280)=[{0x4, 0x3, 0x8, 0x8}, {0x4, 0x1, 0xf, 0x9}, {0x3, 0x1, 0x5, 0x9}, {0x2, 0x2, 0x6, 0x7}], 0x10, 0xfffffffe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000000)='afs_volume\x00', r1, 0x0, 0x8}, 0x18) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000b40)={'dummy0\x00'}) 0s ago: executing program 3 (id=2569): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000300)={{0x6, @rose}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) bind$netrom(r0, 0x0, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x1038, 0xffffffffffffffff, 0x0) r1 = socket(0xa, 0x3, 0x3a) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r3, &(0x7f0000000000)={0x23, 0x20}, 0x10) r4 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r4, &(0x7f0000000000)={0x23, 0x20}, 0x10) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r2, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44) bind$unix(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x12, &(0x7f00000002c0)={@broadcast, @remote, @val={@void, {0x8100, 0x6, 0x1, 0x3}}, {@generic={0x86dd}}}, 0x0) setsockopt$MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @private2}, {0xa, 0x0, 0x0, @empty}}, 0x5c) connect$tipc(r1, &(0x7f0000001040)=@id={0x1e, 0x3, 0x1, {0x4e24, 0x4}}, 0x10) r5 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$sock_buf(r5, 0x1, 0x31, 0x0, &(0x7f00000008c0)) unshare(0xa6030a80) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="4400000010000504fcfffffffcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0255040004000000140012800b0001006970766c616e0000040002808e8c13bd", @ANYRES32=r8, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r8, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x4001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000001300)={&(0x7f0000001080), 0xc, &(0x7f00000012c0)={&(0x7f00000010c0)=@newqdisc={0x1c4, 0x24, 0x2, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {0x10, 0xffff}, {0xfff1, 0xc}, {0x2, 0xfff1}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x1}, @TCA_STAB={0xe8, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x3, 0xd, 0x100, 0xffffffff, 0x2, 0xc, 0x3, 0x3}}, {0xa, 0x2, [0x6, 0x81, 0x3]}}, {{0x1c, 0x1, {0x0, 0x2, 0x8, 0xffffff0c, 0x0, 0x6, 0x7fff, 0x3}}, {0xa, 0x2, [0x4, 0x0, 0x0]}}, {{0x1c, 0x1, {0x2, 0x4, 0x1, 0x6, 0x0, 0x7ff, 0x8, 0x7}}, {0x12, 0x2, [0x9b8b, 0xfffe, 0x6e46, 0x8000, 0x7f, 0x1, 0x3]}}, {{0x1c, 0x1, {0x5, 0x61, 0xf4, 0x2, 0x0, 0xfffffffa, 0x4, 0x8}}, {0x14, 0x2, [0xffff, 0x83, 0x969, 0x2, 0x7ff, 0x9, 0x401, 0x4]}}, {{0x1c, 0x1, {0x79, 0x3b, 0x3, 0x585, 0x2, 0x8, 0x180, 0x9}}, {0x16, 0x2, [0x9, 0x6, 0x6, 0x1, 0x2, 0x1, 0x7c, 0x7, 0x200]}}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0xa2b}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0xe553}, @qdisc_kind_options=@q_netem={{0xa}, {0x94, 0x2, {{0xa18b, 0x9, 0x9, 0xd32, 0x1, 0xfffffe01}, [@TCA_NETEM_CORR={0x10, 0x1, {0x4, 0x9}}, @TCA_NETEM_CORR={0x10, 0x1, {0x7, 0x6, 0x1}}, @TCA_NETEM_RATE64={0xc, 0x8, 0xe28a3661ecb90a8e}, @TCA_NETEM_LATENCY64={0xc, 0xa, 0x2}, @TCA_NETEM_RATE={0x14, 0x6, {0xb1, 0x3, 0xc, 0x7}}, @TCA_NETEM_ECN={0x8, 0x7, 0x1}, @TCA_NETEM_LATENCY64={0xc, 0xa, 0xdc}, @TCA_NETEM_REORDER={0xc, 0x3, {0x2, 0x7}}, @TCA_NETEM_REORDER={0xc, 0x3, {0x6, 0x4023}}]}}}]}, 0x1c4}, 0x1, 0x0, 0x0, 0x20000800}, 0x8004) r9 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) r10 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r10, 0x11c, 0x4, 0x0, 0x0) write(r9, &(0x7f0000000040)="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", 0x1000) kernel console output (not intermixed with test programs): 129] netlink: 'syz.2.612': attribute type 10 has an invalid length. [ 123.486036][ T8139] tipc: Enabled bearer , priority 0 [ 123.497446][ T8140] syzkaller0: entered promiscuous mode [ 123.502942][ T8140] syzkaller0: entered allmulticast mode [ 123.547790][ T8140] tipc: Resetting bearer [ 123.579745][ T8140] tipc: Disabling bearer [ 123.686580][ T8150] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 123.695243][ T8150] veth0: entered promiscuous mode [ 123.701534][ T8150] netlink: 12 bytes leftover after parsing attributes in process `syz.1.619'. [ 123.713177][ T8149] veth0: left promiscuous mode [ 123.720159][ T8152] netlink: 4 bytes leftover after parsing attributes in process `syz.2.620'. [ 123.778778][ T8156] netlink: 60 bytes leftover after parsing attributes in process `syz.4.622'. [ 123.810840][ T8158] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 123.992322][ T8167] netlink: 8 bytes leftover after parsing attributes in process `syz.2.625'. [ 124.227540][ T8185] netlink: 16 bytes leftover after parsing attributes in process `syz.2.630'. [ 124.269467][ T8186] netlink: 20 bytes leftover after parsing attributes in process `syz.4.629'. [ 124.322888][ T8190] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 124.389784][ T8197] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 124.541986][ T8204] netlink: 'syz.4.635': attribute type 1 has an invalid length. [ 124.553662][ T8204] netlink: 244 bytes leftover after parsing attributes in process `syz.4.635'. [ 124.649071][ T8209] netlink: 12 bytes leftover after parsing attributes in process `syz.4.637'. [ 124.863014][ T8219] netlink: 132 bytes leftover after parsing attributes in process `syz.4.641'. [ 125.015708][ T8227] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.067243][ T8230] ICMPv6: NA: bb:bb:bb:bb:bb:bb advertised our address fe80::aa on syz_tun! [ 125.427672][ T8256] netlink: 'syz.0.652': attribute type 2 has an invalid length. [ 125.555178][ T8261] team0: No ports can be present during mode change [ 125.575349][ T8262] syz_tun: entered allmulticast mode [ 126.014568][ T8291] Bluetooth: MGMT ver 1.23 [ 126.356241][ T7275] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 126.369037][ T7275] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 126.396411][ T7275] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 126.422616][ T7275] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 126.536152][ T8309] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 126.639899][ T8306] netlink: 'syz.3.666': attribute type 1 has an invalid length. [ 126.674744][ T8306] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 126.676512][ T8312] bridge_slave_1: left allmulticast mode [ 126.718015][ T8312] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.789989][ T8312] bridge_slave_0: left allmulticast mode [ 126.836607][ T8312] bridge0: port 1(bridge_slave_0) entered disabled state [ 127.302837][ T8367] netlink: 'syz.3.681': attribute type 2 has an invalid length. [ 127.508797][ T8376] can: request_module (can-proto-4) failed. [ 127.586150][ T8384] __nla_validate_parse: 7 callbacks suppressed [ 127.586168][ T8384] netlink: 168 bytes leftover after parsing attributes in process `syz.1.687'. [ 127.667197][ T8383] netlink: 4 bytes leftover after parsing attributes in process `syz.0.688'. [ 127.699177][ T8383] team1: entered promiscuous mode [ 127.704309][ T8383] team1: entered allmulticast mode [ 127.801269][ T8392] netlink: 40 bytes leftover after parsing attributes in process `syz.1.691'. [ 127.837259][ T8400] netlink: 244 bytes leftover after parsing attributes in process `syz.2.693'. [ 127.859662][ T8401] netlink: 'syz.0.694': attribute type 1 has an invalid length. [ 127.870925][ T8401] netlink: 224 bytes leftover after parsing attributes in process `syz.0.694'. [ 127.883982][ T8402] netlink: 244 bytes leftover after parsing attributes in process `syz.2.693'. [ 127.902369][ T8400] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 128.240654][ T8428] netlink: 'syz.1.703': attribute type 11 has an invalid length. [ 128.253482][ T8428] netlink: 224 bytes leftover after parsing attributes in process `syz.1.703'. [ 128.264824][ T8430] Dead loop on virtual device ip6_vti0, fix it urgently! [ 128.307374][ T8432] openvswitch: netlink: Key type 85 is out of range max 32 [ 128.315524][ T8432] netlink: 'syz.0.704': attribute type 1 has an invalid length. [ 128.570754][ T8453] netlink: 'syz.2.709': attribute type 3 has an invalid length. [ 128.691192][ T8467] netlink: 'syz.2.714': attribute type 15 has an invalid length. [ 128.706828][ T8467] netlink: 4 bytes leftover after parsing attributes in process `syz.2.714'. [ 128.725621][ T6774] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 2816 - 0 [ 128.741325][ T3016] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 128.763948][ T7275] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 2816 - 0 [ 128.784028][ T7275] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 2816 - 0 [ 128.799183][ T7275] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 2816 - 0 [ 128.800736][ T8483] netlink: 64 bytes leftover after parsing attributes in process `syz.3.716'. [ 129.139606][ T8494] netlink: 4 bytes leftover after parsing attributes in process `syz.0.720'. [ 129.813810][ T8531] netlink: 'syz.1.733': attribute type 1 has an invalid length. [ 129.881152][ T8531] bond6: entered promiscuous mode [ 129.891973][ T8531] 8021q: adding VLAN 0 to HW filter on device bond6 [ 129.943730][ T8541] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 129.951067][ T8541] IPv6: NLM_F_CREATE should be set when creating new route [ 130.648810][ T8585] netlink: 'syz.3.745': attribute type 10 has an invalid length. [ 131.059656][ T8585] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 131.280960][ T8600] NCSI netlink: No device for ifindex 0 [ 131.745631][ T8633] netlink: 'syz.2.762': attribute type 1 has an invalid length. [ 131.924063][ T8641] sock: sock_timestamping_bind_phc: sock not bind to device [ 132.774913][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.824113][ T8699] bridge: RTM_NEWNEIGH with invalid state 0x8 [ 132.951598][ T8707] __nla_validate_parse: 16 callbacks suppressed [ 132.951617][ T8707] netlink: 20 bytes leftover after parsing attributes in process `syz.2.786'. [ 132.995543][ T8707] netlink: 8 bytes leftover after parsing attributes in process `syz.2.786'. [ 133.049532][ T8716] netlink: 36 bytes leftover after parsing attributes in process `syz.2.786'. [ 133.079040][ T8711] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode [ 133.088012][ T8711] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode [ 133.099980][ T8712] netlink: 4 bytes leftover after parsing attributes in process `syz.4.787'. [ 133.149354][ T8711] tipc: Resetting bearer [ 133.207077][ T8711] netlink: 48 bytes leftover after parsing attributes in process `syz.0.788'. [ 133.235405][ T8721] netlink: 'syz.2.791': attribute type 4 has an invalid length. [ 133.398417][ T8730] netlink: 96 bytes leftover after parsing attributes in process `syz.2.794'. [ 133.427449][ T8730] 8021q: VLANs not supported on gre0 [ 133.553497][ T8740] veth0_to_bond: entered allmulticast mode [ 133.579588][ T30] audit: type=1107 audit(1759226987.319:4): pid=8738 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='Pf!P9AdhD!8{' [ 133.753004][ T8748] Bluetooth: MGMT ver 1.23 [ 133.769986][ T8755] netlink: 'syz.4.801': attribute type 1 has an invalid length. [ 133.779812][ T8755] netlink: 12 bytes leftover after parsing attributes in process `syz.4.801'. [ 133.799643][ T8755] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 133.908036][ T8765] netlink: 144 bytes leftover after parsing attributes in process `syz.0.806'. [ 133.940594][ T8765] tipc: Enabling of bearer rejected, already enabled [ 133.955317][ T8765] tipc: Resetting bearer [ 134.042433][ T8765] mac80211_hwsim hwsim3 syzkaller0: left allmulticast mode [ 134.086780][ T8775] netlink: 'syz.3.807': attribute type 21 has an invalid length. [ 134.095342][ T8775] netlink: 132 bytes leftover after parsing attributes in process `syz.3.807'. [ 134.254056][ T8792] netlink: 'syz.3.812': attribute type 21 has an invalid length. [ 134.787765][ T8830] netlink: 'syz.2.817': attribute type 1 has an invalid length. [ 134.804157][ T8830] netlink: 'syz.2.817': attribute type 1 has an invalid length. [ 134.850530][ T8830] netlink: 144 bytes leftover after parsing attributes in process `syz.2.817'. [ 135.157463][ T8853] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 135.199444][ T8856] netlink: 'syz.4.827': attribute type 1 has an invalid length. [ 135.247257][ T8864] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 135.300967][ T8856] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address [ 135.313401][ T8856] bond4: (slave vxcan3): Error -95 calling set_mac_address [ 135.427337][ T8870] bond4: (slave bridge5): Enslaving as an active interface with a down link [ 135.487179][ T8856] gretap0: entered promiscuous mode [ 135.515573][ T8856] gretap0: entered allmulticast mode [ 135.538221][ T8856] bond4: (slave gretap0): making interface the new active one [ 135.575519][ T8856] bond4: (slave gretap0): Enslaving as an active interface with an up link [ 135.590697][ T8884] netlink: 'syz.2.835': attribute type 75 has an invalid length. [ 135.602262][ T8884] team0: No ports can be present during mode change [ 135.766690][ T8895] netlink: 'syz.4.840': attribute type 1 has an invalid length. [ 135.854272][ T8899] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 136.077279][ T8921] netlink: 'syz.3.846': attribute type 1 has an invalid length. [ 136.168926][ T8925] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.176717][ T8925] bridge0: port 1(bridge_slave_0) entered disabled state [ 136.208647][ T8925] bridge0: entered allmulticast mode [ 136.303152][ T8932] IPv6: NLM_F_CREATE should be specified when creating new route [ 136.339390][ T8931] syzkaller1: entered promiscuous mode [ 136.345281][ T8931] syzkaller1: entered allmulticast mode [ 136.457495][ T8938] syzkaller0: entered promiscuous mode [ 136.463409][ T8938] syzkaller0: entered allmulticast mode [ 136.472191][ T8937] tipc: Enabled bearer , priority 0 [ 136.532861][ T8938] tipc: Resetting bearer [ 136.579574][ T8938] tipc: Disabling bearer [ 136.589251][ T8948] bridge0: port 3(syz_tun) entered blocking state [ 136.596153][ T8948] bridge0: port 3(syz_tun) entered disabled state [ 136.602832][ T8948] syz_tun: entered allmulticast mode [ 136.611711][ T8948] syz_tun: entered promiscuous mode [ 136.743314][ T8959] netlink: 'syz.0.862': attribute type 27 has an invalid length. [ 136.845018][ T3016] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 136.861803][ T3016] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 136.891366][ T3016] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 136.909056][ T3016] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 137.251225][ T8988] veth5: entered promiscuous mode [ 137.486171][ T8987] veth5: entered promiscuous mode [ 137.532611][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 137.539085][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 137.546991][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 137.554840][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 137.562702][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 137.570535][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 137.578448][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 137.586302][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 137.594179][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 137.602034][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 137.609936][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 137.617776][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 137.625702][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 137.633564][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 137.641486][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 137.649314][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 137.657218][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 137.665052][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 137.672909][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 137.680738][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 137.688622][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 137.696454][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 137.704305][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 137.712130][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 137.720084][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 137.727921][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 137.735871][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 137.743687][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 137.751632][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 137.759455][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 137.767349][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 137.775177][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 137.783052][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 137.790885][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 137.798767][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 137.806597][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 137.814504][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 137.822303][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 137.830196][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 137.838013][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 137.845915][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 137.853719][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 137.862383][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 137.870215][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 137.878122][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 137.885950][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 137.893848][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 137.901686][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 137.909571][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 137.917405][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 137.925286][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 137.933075][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 137.940979][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 137.948794][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 137.956723][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 137.964551][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 137.972443][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 137.980286][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 137.988215][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 137.996055][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 138.003905][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 138.011716][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 138.019591][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 138.027405][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 138.035323][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 138.043125][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 138.051024][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 138.058840][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 138.066734][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 138.074559][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 138.082409][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 138.090220][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 138.098185][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 138.106015][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 138.113933][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 138.121753][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 138.129626][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 138.137439][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 138.145356][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 138.153144][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 138.161035][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 138.168850][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 138.176781][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 138.184611][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 138.192464][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 138.200276][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 138.208185][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 138.216018][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 138.223921][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 138.231762][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 138.239690][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 138.247524][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 138.255465][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 138.263276][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 138.271209][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 138.279041][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 138.286964][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 138.294797][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 138.302673][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 138.310501][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 138.318388][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 138.326232][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 138.334096][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 138.341922][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 138.349832][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 138.357672][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 138.365653][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 138.373449][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 138.381382][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 138.389209][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 138.397129][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 138.405049][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 138.413040][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 138.420941][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 138.428820][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 138.436649][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 138.445042][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 138.452826][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 138.460731][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 138.468555][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 138.476472][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 138.484302][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 138.492200][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 138.500022][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 138.507949][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 138.515780][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 138.523737][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 138.531583][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 138.539556][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 138.547392][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 138.555309][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 138.563111][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 138.571013][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 138.578832][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 138.586772][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 138.594599][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 138.602501][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 138.610377][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 138.618255][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 138.626071][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 138.633931][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 138.641841][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 138.649777][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 138.657622][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 138.665549][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 138.673360][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 138.681290][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 138.689109][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 138.697004][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 138.704858][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 138.712728][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 138.720545][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 138.728416][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 138.736238][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 138.744094][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 138.751912][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 138.759784][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 138.767602][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 138.775549][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 138.783384][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 138.791345][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 138.799178][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 138.807259][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 138.815091][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 138.822942][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 138.831342][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 138.839215][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 138.847055][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 138.854983][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 138.862790][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 140.199271][ T9088] vlan0: entered allmulticast mode [ 140.204436][ T9088] hsr0: entered allmulticast mode [ 140.212552][ T9088] hsr_slave_0: entered allmulticast mode [ 140.219606][ T9088] hsr_slave_1: entered allmulticast mode [ 140.273963][ T9090] tipc: Started in network mode [ 140.288226][ T9090] tipc: Node identity 863468d30e94, cluster identity 1 [ 140.315443][ T9090] tipc: Enabled bearer , priority 0 [ 140.344843][ T9086] syzkaller0: entered promiscuous mode [ 140.350380][ T9086] syzkaller0: entered allmulticast mode [ 140.475214][ T9090] tipc: Resetting bearer [ 140.705747][ T9114] validate_nla: 1 callbacks suppressed [ 140.705764][ T9114] netlink: 'syz.2.904': attribute type 1 has an invalid length. [ 140.729776][ T9114] __nla_validate_parse: 15 callbacks suppressed [ 140.729792][ T9114] netlink: 236 bytes leftover after parsing attributes in process `syz.2.904'. [ 140.943419][ T9130] netlink: 'syz.2.905': attribute type 21 has an invalid length. [ 140.952174][ T9130] netlink: 152 bytes leftover after parsing attributes in process `syz.2.905'. [ 140.979790][ T9085] tipc: Resetting bearer [ 141.016106][ T9085] tipc: Disabling bearer [ 141.190093][ T9137] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 141.195204][ T9145] netlink: 4 bytes leftover after parsing attributes in process `syz.1.913'. [ 141.199424][ T1344] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 141.234779][ T9136] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 141.249434][ T9149] netlink: 4 bytes leftover after parsing attributes in process `syz.1.913'. [ 141.469366][ T9165] netlink: 20 bytes leftover after parsing attributes in process `syz.1.919'. [ 141.784153][ T9193] netlink: 'syz.0.924': attribute type 9 has an invalid length. [ 141.840785][ T9193] sch_tbf: burst 8 is lower than device ip6tnl0 mtu (1452) ! [ 141.927646][ T9199] netlink: 4 bytes leftover after parsing attributes in process `syz.1.925'. [ 141.950355][ T9199] (unnamed net_device) (uninitialized): Unable to set peer notification delay as MII monitoring is disabled [ 142.031101][ T9206] openvswitch: netlink: VXLAN extension 47 out of range max 1 [ 142.165693][ T9212] PF_CAN: dropped non conform CAN XL skbuff: dev type 19, len 40 [ 142.175230][ T9213] netlink: 12 bytes leftover after parsing attributes in process `syz.2.929'. [ 142.207932][ T9213] netlink: 4 bytes leftover after parsing attributes in process `syz.2.929'. [ 142.524045][ T9242] netlink: 16 bytes leftover after parsing attributes in process `syz.4.939'. [ 142.540041][ T9233] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 142.566444][ T9233] netlink: 8 bytes leftover after parsing attributes in process `syz.1.936'. [ 142.582180][ T9233] tipc: Enabled bearer , priority 0 [ 142.627702][ T9247] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 142.666311][ T9250] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 142.703311][ T9233] syzkaller0: entered promiscuous mode [ 142.709196][ T9233] syzkaller0: entered allmulticast mode [ 142.715645][ T9233] tipc: Resetting bearer [ 142.727727][ T9232] tipc: Resetting bearer [ 143.898629][ T9232] tipc: Disabling bearer [ 143.935728][ T9271] pim6reg: entered allmulticast mode [ 143.941293][ T9272] pim6reg: left allmulticast mode [ 144.920031][ T9332] netlink: 'syz.0.965': attribute type 13 has an invalid length. [ 144.930227][ T9332] netlink: 'syz.0.965': attribute type 58 has an invalid length. [ 145.664594][ T9368] bridge0: port 3(vlan0) entered blocking state [ 145.673592][ T9368] bridge0: port 3(vlan0) entered disabled state [ 145.681452][ T9368] vlan0: entered allmulticast mode [ 145.690394][ T9368] bridge0: entered allmulticast mode [ 145.690432][ T9369] netlink: 'syz.3.978': attribute type 6 has an invalid length. [ 145.708631][ T9368] vlan0: left allmulticast mode [ 145.717536][ T9368] bridge0: left allmulticast mode [ 145.809063][ T9377] sch_fq: defrate 0 ignored. [ 145.986876][ T9386] __nla_validate_parse: 14 callbacks suppressed [ 145.986894][ T9386] netlink: 277 bytes leftover after parsing attributes in process `syz.2.981'. [ 146.045225][ T9386] lo: entered allmulticast mode [ 146.057126][ T9386] tunl0: entered allmulticast mode [ 146.083258][ T9390] netlink: 4 bytes leftover after parsing attributes in process `syz.3.984'. [ 146.089830][ T9386] gre0: entered allmulticast mode [ 146.130861][ T9386] gretap0: entered allmulticast mode [ 146.249707][ T9386] erspan0: entered allmulticast mode [ 146.298039][ T9386] ip_vti0: entered allmulticast mode [ 146.337018][ T9386] ip6_vti0: entered allmulticast mode [ 146.363640][ T9386] sit0: entered allmulticast mode [ 146.407697][ T9386] ip6tnl0: entered allmulticast mode [ 146.477015][ T9386] ip6gre0: entered allmulticast mode [ 146.518864][ T9386] syz_tun: entered allmulticast mode [ 146.559409][ T9386] ip6gretap0: entered allmulticast mode [ 146.596023][ T9386] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.603786][ T9386] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.632047][ T9415] netlink: 28 bytes leftover after parsing attributes in process `syz.1.992'. [ 146.634958][ T9386] bridge0: entered allmulticast mode [ 146.642944][ T9415] netlink: 'syz.1.992': attribute type 7 has an invalid length. [ 146.656594][ T9415] netlink: 'syz.1.992': attribute type 8 has an invalid length. [ 146.657594][ T9386] vcan0: entered allmulticast mode [ 146.664367][ T9415] netlink: 4 bytes leftover after parsing attributes in process `syz.1.992'. [ 146.680236][ T9386] bond0: entered allmulticast mode [ 146.687973][ T9386] bond_slave_0: entered allmulticast mode [ 146.693789][ T9386] bond_slave_1: entered allmulticast mode [ 146.700049][ T9386] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode [ 146.719154][ T9386] team0: entered allmulticast mode [ 146.724695][ T9386] team_slave_0: entered allmulticast mode [ 146.730661][ T9386] team_slave_1: entered allmulticast mode [ 146.745501][ T9386] dummy0: entered allmulticast mode [ 146.752463][ T9386] nlmon0: entered allmulticast mode [ 146.764327][ T9386] caif0: entered allmulticast mode [ 146.774039][ T9386] batadv0: entered allmulticast mode [ 146.792312][ T9386] veth0: entered allmulticast mode [ 146.814250][ T9386] veth1: entered allmulticast mode [ 146.832040][ T9386] wg0: entered allmulticast mode [ 146.840820][ T9386] wg1: entered allmulticast mode [ 146.853252][ T9386] wg2: entered allmulticast mode [ 146.865909][ T9386] veth0_to_bridge: entered allmulticast mode [ 146.890568][ T9386] veth1_to_bridge: entered allmulticast mode [ 146.916833][ T9404] Bluetooth: hci2: Opcode 0x0401 failed: -4 [ 146.942779][ T9386] veth0_to_bond: entered allmulticast mode [ 146.978508][ T9386] veth1_to_bond: entered allmulticast mode [ 146.994086][ T9386] veth0_to_team: entered allmulticast mode [ 147.009395][ T9386] veth1_to_team: entered allmulticast mode [ 147.032984][ T9386] veth0_to_batadv: entered allmulticast mode [ 147.049588][ T9386] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 147.065330][ T9386] batadv_slave_0: entered allmulticast mode [ 147.077035][ T9386] veth1_to_batadv: entered allmulticast mode [ 147.119727][ T9386] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 147.130773][ T9386] batadv_slave_1: entered allmulticast mode [ 147.148108][ T9386] xfrm0: entered allmulticast mode [ 147.168312][ T9386] veth0_to_hsr: entered allmulticast mode [ 147.185013][ T9386] veth1_to_hsr: entered allmulticast mode [ 147.219016][ T9386] veth1_virt_wifi: entered allmulticast mode [ 147.232297][ T9386] veth0_virt_wifi: entered allmulticast mode [ 147.251558][ T9386] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 147.262660][ T9386] veth1_macvtap: entered allmulticast mode [ 147.277686][ T9386] veth0_macvtap: entered allmulticast mode [ 147.357746][ T9386] macvtap0: entered allmulticast mode [ 147.372454][ T9386] macsec0: entered allmulticast mode [ 147.379089][ T9386] geneve0: entered allmulticast mode [ 147.391978][ T9386] geneve1: entered allmulticast mode [ 147.402857][ T9386] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 147.420052][ T9386] netdevsim netdevsim2 netdevsim1: entered allmulticast mode [ 147.435314][ T9386] netdevsim netdevsim2 netdevsim2: entered allmulticast mode [ 147.451260][ T9386] netdevsim netdevsim2 netdevsim3: entered allmulticast mode [ 147.476251][ T9386] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode [ 147.524619][ T9386] ip6gre1: entered allmulticast mode [ 147.530115][ T9386] veth2: entered allmulticast mode [ 147.535866][ T9386] veth3: entered allmulticast mode [ 147.541260][ T9386] gre1: entered allmulticast mode [ 147.547033][ T9386] macsec1: entered allmulticast mode [ 147.552417][ T9386] erspan1: entered allmulticast mode [ 147.558245][ T9386] ip6tnl1: entered allmulticast mode [ 147.563861][ T9386] bridge1: entered allmulticast mode [ 147.569456][ T9386] bond1: entered allmulticast mode [ 147.574854][ T9386] sit1: entered allmulticast mode [ 147.580636][ T9386] @: entered allmulticast mode [ 147.594381][ T9386] bond2: entered allmulticast mode [ 147.599919][ T9386] ip6gretap1: entered allmulticast mode [ 147.606038][ T9386] macsec2: entered allmulticast mode [ 147.691562][ T3016] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 2816 - 0 [ 147.702801][ T9426] netlink: 24 bytes leftover after parsing attributes in process `syz.2.994'. [ 147.722603][ T3016] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.736618][ T3016] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 2816 - 0 [ 147.775201][ T3016] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.827561][ T9430] tipc: New replicast peer: 255.255.255.255 [ 147.834454][ T9430] tipc: Enabled bearer , priority 10 [ 147.860260][ T9426] netlink: 4 bytes leftover after parsing attributes in process `syz.2.994'. [ 147.879604][ T3016] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 2816 - 0 [ 147.890449][ T3016] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.911845][ T3016] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 2816 - 0 [ 147.922102][ T3016] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.968306][ T9443] IPVS: length: 24 != 55320 [ 147.978806][ T9443] syzkaller0 speed is unknown, defaulting to 1000 [ 147.989803][ T9443] syzkaller0 speed is unknown, defaulting to 1000 [ 148.003322][ T9443] syzkaller0 speed is unknown, defaulting to 1000 [ 148.066559][ T9443] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 148.099405][ T9456] netlink: 14 bytes leftover after parsing attributes in process `syz.0.999'. [ 148.139501][ T9451] netlink: 'syz.3.1000': attribute type 2 has an invalid length. [ 148.174037][ T9443] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 148.316359][ T9463] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1002'. [ 148.332564][ T9456] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 148.355435][ T9456] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 148.364764][ T5865] Bluetooth: hci2: command 0x0401 tx timeout [ 148.382408][ T9456] bond0 (unregistering): Released all slaves [ 148.420820][ T9443] syzkaller0 speed is unknown, defaulting to 1000 [ 148.432495][ T9443] syzkaller0 speed is unknown, defaulting to 1000 [ 148.442513][ T9443] syzkaller0 speed is unknown, defaulting to 1000 [ 148.468179][ T9443] syzkaller0 speed is unknown, defaulting to 1000 [ 148.498851][ T9443] syzkaller0 speed is unknown, defaulting to 1000 [ 148.690974][ T9484] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.1008'. [ 148.701196][ T9486] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.1008'. [ 148.876627][ T9501] netlink: 'syz.2.1013': attribute type 1 has an invalid length. [ 148.929497][ T9512] smc: net device ip6gretap0 applied user defined pnetid SYZ2 [ 148.955375][ T9513] bridge_slave_0: left allmulticast mode [ 148.961154][ T9513] bridge_slave_0: left promiscuous mode [ 148.972400][ T9513] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.039338][ T9513] bridge_slave_1: left allmulticast mode [ 149.045719][ T9513] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.089642][ T9513] bond0: (slave bond_slave_0): Releasing backup interface [ 149.118994][ T9513] bond0: (slave bond_slave_1): Releasing backup interface [ 149.130483][ T9524] netlink: 'syz.3.1020': attribute type 23 has an invalid length. [ 149.143404][ T9513] team0: Port device team_slave_0 removed [ 149.155446][ T9513] team0: Port device team_slave_1 removed [ 149.162260][ T9513] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 149.170058][ T9513] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 149.180481][ T9513] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 149.198012][ T9513] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 149.220440][ T9513] bond1: (slave geneve2): Releasing active interface [ 149.233466][ T9513] bond2: (slave ip6gretap1): Releasing backup interface [ 149.257208][ T9528] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 149.733596][ T9550] netlink: 'syz.4.1029': attribute type 10 has an invalid length. [ 149.749286][ T9550] team0: Device ipvlan1 failed to register rx_handler [ 150.168394][ T1344] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 150.185681][ T9578] netlink: 'syz.0.1037': attribute type 1 has an invalid length. [ 151.155415][ T9626] __nla_validate_parse: 8 callbacks suppressed [ 151.155434][ T9626] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1052'. [ 151.186028][ T9616] syzkaller0 speed is unknown, defaulting to 1000 [ 151.794914][ T9663] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1063'. [ 151.832428][ T9642] team0 (unregistering): Port device team_slave_0 removed [ 151.874719][ T9642] team0 (unregistering): Port device team_slave_1 removed [ 151.927635][ T9647] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1058'. [ 151.959904][ T9674] netlink: 'syz.4.1062': attribute type 2 has an invalid length. [ 151.971334][ T9666] tipc: Enabling of bearer rejected, failed to enable media [ 152.478187][ T9693] netlink: 'syz.2.1068': attribute type 1 has an invalid length. [ 152.494739][ T9693] netlink: 17 bytes leftover after parsing attributes in process `syz.2.1068'. [ 152.506309][ T9695] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1069'. [ 152.567012][ T9698] gretap0: entered promiscuous mode [ 152.572612][ T9698] vlan2: entered promiscuous mode [ 152.731825][ T9709] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1074'. [ 152.776717][ T9714] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1075'. [ 152.792661][ T9709] bond0: entered promiscuous mode [ 152.814752][ T9709] bond_slave_0: entered promiscuous mode [ 152.821007][ T9709] bond_slave_1: entered promiscuous mode [ 152.852266][ T9709] bond0: left promiscuous mode [ 152.873090][ T9717] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1074'. [ 152.877136][ T9709] bond_slave_0: left promiscuous mode [ 152.893302][ T9721] netlink: 'syz.0.1076': attribute type 1 has an invalid length. [ 152.893383][ T9709] bond_slave_1: left promiscuous mode [ 152.929862][ T9721] IPVS: set_ctl: invalid protocol: 56 172.20.20.40:20000 [ 153.052425][ T9732] netlink: del zone limit has 4 unknown bytes [ 153.061915][ T9730] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 153.071355][ T9733] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1080'. [ 153.093995][ T9733] openvswitch: netlink: Unknown nsh attribute 0 [ 153.107548][ T9733] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 153.108013][ T9732] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1079'. [ 153.450891][ T9757] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 153.489287][ T9756] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 153.553607][ T9764] netlink: 'syz.3.1090': attribute type 4 has an invalid length. [ 153.607232][ T9761] syzkaller1: entered promiscuous mode [ 153.612846][ T9761] syzkaller1: entered allmulticast mode [ 153.777861][ T9771] netlink: 'syz.1.1091': attribute type 4 has an invalid length. [ 153.843037][ T9777] netlink: 'syz.1.1091': attribute type 1 has an invalid length. [ 154.127176][ T9803] sctp: [Deprecated]: syz.1.1100 (pid 9803) Use of int in maxseg socket option. [ 154.127176][ T9803] Use struct sctp_assoc_value instead [ 154.355329][ T9817] openvswitch: netlink: nsh attribute has 1 unknown bytes. [ 154.364722][ T9817] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 154.440177][ T9820] sctp: [Deprecated]: syz.2.1108 (pid 9820) Use of struct sctp_assoc_value in delayed_ack socket option. [ 154.440177][ T9820] Use struct sctp_sack_info instead [ 154.720746][ T9847] netlink: 'syz.1.1115': attribute type 29 has an invalid length. [ 155.180191][ T9872] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 155.191423][ T9876] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 155.399535][ T9886] ksmbd: Unknown IPC event: 3, ignore. [ 155.467594][ T9896] tipc: Enabled bearer , priority 0 [ 155.480029][ T9899] syzkaller0: entered promiscuous mode [ 155.487057][ T9899] syzkaller0: entered allmulticast mode [ 155.506197][ T9898] tipc: Resetting bearer [ 155.555420][ T9892] tipc: Resetting bearer [ 155.608708][ T9892] tipc: Disabling bearer [ 155.649405][ T9908] netlink: 'syz.3.1138': attribute type 1 has an invalid length. [ 155.733360][ T9919] netlink: 'syz.1.1142': attribute type 1 has an invalid length. [ 155.985648][ T9935] netlink: 'syz.4.1146': attribute type 5 has an invalid length. [ 156.020322][ T9934] IPv6: sit2: Disabled Multicast RS [ 156.026715][ T9934] sit2: entered allmulticast mode [ 156.303011][ T9952] tipc: Enabled bearer , priority 0 [ 156.325954][ T9952] syzkaller0: entered promiscuous mode [ 156.331450][ T9952] syzkaller0: entered allmulticast mode [ 156.355189][ T9954] IPVS: set_ctl: invalid protocol: 41 172.30.0.4:20000 [ 156.364778][ T9953] __nla_validate_parse: 24 callbacks suppressed [ 156.364795][ T9953] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1144'. [ 156.390718][ T9951] syz.3.1152 (9951) used greatest stack depth: 17864 bytes left [ 156.440941][ T9958] netlink: 830 bytes leftover after parsing attributes in process `syz.4.1154'. [ 156.461457][ T9952] tipc: Resetting bearer [ 156.484341][ T9950] tipc: Resetting bearer [ 156.530438][ T9950] tipc: Disabling bearer [ 157.011048][ T9991] IPVS: Unknown mcast interface: vcan0 [ 157.081675][ T9995] netlink: 112 bytes leftover after parsing attributes in process `syz.3.1164'. [ 157.107420][ T9927] infiniband syz1: set down [ 157.122787][ T9927] infiniband syz1: added bond_slave_0 [ 157.142159][ T9927] syz1: rxe_create_cq: returned err = -12 [ 157.154263][T10000] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1167'. [ 157.163377][ T9927] infiniband syz1: Couldn't create ib_mad CQ [ 157.171993][ T9927] infiniband syz1: Couldn't open port 1 [ 157.177908][T10000] openvswitch: netlink: nsh attribute has 1 unknown bytes. [ 157.194890][T10000] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 157.232265][ T9927] RDS/IB: syz1: added [ 157.240276][ T9927] smc: adding ib device syz1 with port count 1 [ 157.250392][ T9927] smc: ib device syz1 port 1 has pnetid SYZ0 (user defined) [ 157.365883][T10006] validate_nla: 2 callbacks suppressed [ 157.365901][T10006] netlink: 'syz.2.1168': attribute type 1 has an invalid length. [ 157.877738][T10018] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1171'. [ 158.068549][T10030] netlink: 'syz.0.1174': attribute type 13 has an invalid length. [ 158.166955][T10033] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1175'. [ 158.661398][T10058] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1182'. [ 158.710796][T10058] ip6gre2: entered allmulticast mode [ 158.845999][T10067] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1186'. [ 158.864606][ T6069] IPVS: starting estimator thread 0... [ 158.954665][T10069] IPVS: using max 25 ests per chain, 60000 per kthread [ 159.131008][T10083] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1188'. [ 159.221012][T10087] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1190'. [ 159.338214][T10092] netlink: 'syz.0.1191': attribute type 11 has an invalid length. [ 159.433914][T10098] openvswitch: netlink: IPv4 tun info is not correct [ 159.447993][T10094] pim6reg1: entered promiscuous mode [ 159.453364][T10094] pim6reg1: entered allmulticast mode [ 159.569966][T10101] vti0: entered allmulticast mode [ 159.724948][ T1321] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 159.732794][ T1321] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 160.091276][T10143] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 160.494245][T10168] netlink: 'syz.1.1219': attribute type 1 has an invalid length. [ 160.518402][T10171] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 160.622341][T10181] netlink: 'syz.2.1222': attribute type 12 has an invalid length. [ 160.775566][T10191] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 160.792727][T10191] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 160.821371][T10191] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 160.845622][T10191] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 161.100959][T10211] netlink: 'syz.1.1231': attribute type 1 has an invalid length. [ 161.309538][T10229] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 161.403769][T10234] __nla_validate_parse: 13 callbacks suppressed [ 161.403788][T10234] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1235'. [ 161.468359][T10234] tap0: tun_chr_ioctl cmd 1074025677 [ 161.474021][T10234] tap0: linktype set to 65534 [ 162.492957][T10271] netlink: 'syz.2.1240': attribute type 1 has an invalid length. [ 162.502971][T10271] nbd: error processing sock list [ 162.516511][T10271] block nbd0: shutting down sockets [ 163.589060][T10290] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 164.065044][T10309] netlink: 88 bytes leftover after parsing attributes in process `syz.0.1250'. [ 164.239698][T10335] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1255'. [ 164.310638][T10337] xfrm1: entered allmulticast mode [ 164.790192][T10360] tipc: Enabling of bearer rejected, failed to enable media [ 164.801029][T10360] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1263'. [ 165.236738][T10389] netlink: 'syz.0.1273': attribute type 3 has an invalid length. [ 165.489147][T10407] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1278'. [ 165.634350][T10417] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1283'. [ 165.762250][T10421] tipc: Enabled bearer , priority 0 [ 165.835049][T10421] syzkaller0: entered promiscuous mode [ 165.835646][T10432] netlink: 'syz.2.1285': attribute type 1 has an invalid length. [ 165.853805][T10421] syzkaller0: entered allmulticast mode [ 165.899398][T10435] netlink: 'syz.2.1288': attribute type 1 has an invalid length. [ 165.900171][T10420] tipc: Resetting bearer [ 165.909343][T10435] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1288'. [ 165.934855][T10438] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1287'. [ 165.940615][T10440] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1287'. [ 165.957380][T10436] netlink: 'syz.0.1286': attribute type 83 has an invalid length. [ 165.966894][T10420] tipc: Disabling bearer [ 166.240755][T10453] vlan0: entered promiscuous mode [ 166.246843][T10453] bridge0: entered promiscuous mode [ 166.356793][T10465] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1293'. [ 166.403591][T10469] netlink: 'syz.3.1294': attribute type 1 has an invalid length. [ 166.481583][T10480] netlink: 'syz.2.1296': attribute type 10 has an invalid length. [ 166.536343][T10470] bond7: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 166.558165][T10484] netlink: 'syz.2.1296': attribute type 10 has an invalid length. [ 166.575920][T10470] bond7: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 166.594258][T10470] bond7: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 166.621571][T10480] bridge_slave_1: left allmulticast mode [ 166.627673][T10480] bridge_slave_1: left promiscuous mode [ 166.633740][T10480] bridge0: port 2(bridge_slave_1) entered disabled state [ 166.645303][T10480] bridge_slave_1: entered allmulticast mode [ 166.651586][T10480] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 166.735115][T10492] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1298'. [ 166.850421][T10496] netlink: 'syz.1.1300': attribute type 1 has an invalid length. [ 166.868631][T10496] netlink: 'syz.1.1300': attribute type 3 has an invalid length. [ 166.896423][T10496] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1300'. [ 166.966810][T10488] bond6: (slave vcan0): The slave device specified does not support setting the MAC address [ 166.978770][T10488] bond6: (slave vcan0): Error -95 calling set_mac_address [ 167.050695][T10509] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1300'. [ 167.138987][T10502] bond8: (slave vcan1): The slave device specified does not support setting the MAC address [ 167.152479][T10502] bond8: (slave vcan1): Error -95 calling set_mac_address [ 167.252672][T10496] syzkaller1: entered promiscuous mode [ 167.297589][T10496] syzkaller1: entered allmulticast mode [ 167.492656][T10536] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1310'. [ 167.604139][T10540] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1312'. [ 167.761836][T10549] netlink: 108 bytes leftover after parsing attributes in process `syz.0.1313'. [ 167.815420][T10553] netlink: 108 bytes leftover after parsing attributes in process `syz.0.1313'. [ 167.847612][T10554] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1317'. [ 168.094860][T10570] netlink: 84 bytes leftover after parsing attributes in process `syz.2.1322'. [ 168.826277][T10587] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1327'. [ 168.934594][T10606] bridge_slave_0: invalid flags given to default FDB implementation [ 169.055158][T10609] netlink: 'syz.2.1333': attribute type 3 has an invalid length. [ 169.096956][T10617] netlink: 'syz.3.1336': attribute type 2 has an invalid length. [ 169.112509][T10613] netlink: 'syz.4.1332': attribute type 8 has an invalid length. [ 169.288635][T10629] netlink: 'syz.3.1339': attribute type 1 has an invalid length. [ 169.336022][T10629] bond8: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 169.348787][T10629] bond8: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 169.362419][T10629] bond8: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 169.481569][T10638] bond8: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 169.499114][T10638] bond8: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 169.804128][T10661] 8021q: VLANs not supported on ip_vti0 [ 169.940404][T10675] netlink: 'syz.0.1354': attribute type 1 has an invalid length. [ 170.099416][T10682] netlink: 'syz.1.1356': attribute type 1 has an invalid length. [ 170.110333][T10682] netlink: 'syz.1.1356': attribute type 2 has an invalid length. [ 170.306292][T10691] team0: No ports can be present during mode change [ 170.712460][T10722] netlink: 'syz.2.1373': attribute type 4 has an invalid length. [ 170.746236][T10713] syzkaller0 speed is unknown, defaulting to 1000 [ 170.958899][T10730] sctp: [Deprecated]: syz.1.1378 (pid 10730) Use of struct sctp_assoc_value in delayed_ack socket option. [ 170.958899][T10730] Use struct sctp_sack_info instead [ 171.055988][ T30] audit: type=1800 audit(1759227024.799:5): pid=10734 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1375" name="memory.events" dev="tmpfs" ino=1527 res=0 errno=0 [ 171.066363][T10733] syzkaller0: entered allmulticast mode [ 171.121393][T10735] syzkaller0: entered promiscuous mode [ 171.134699][ T30] audit: type=1804 audit(1759227024.829:6): pid=10734 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.1375" name="/newroot/296/memory.events" dev="tmpfs" ino=1527 res=1 errno=0 [ 171.157175][T10735] syzkaller0: entered allmulticast mode [ 171.578859][T10753] pim6reg: entered allmulticast mode [ 171.592379][T10762] netlink: 'syz.1.1385': attribute type 1 has an invalid length. [ 171.871854][T10768] __nla_validate_parse: 14 callbacks suppressed [ 171.871872][T10768] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1386'. [ 171.909995][T10777] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 172.114243][T10788] netlink: 'syz.4.1392': attribute type 25 has an invalid length. [ 172.156057][T10791] tipc: Enabled bearer , priority 0 [ 172.180813][T10795] syzkaller0: entered promiscuous mode [ 172.189068][T10795] syzkaller0: entered allmulticast mode [ 172.192393][T10794] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.1395'. [ 172.204167][T10794] openvswitch: netlink: Message has 5 unknown bytes. [ 172.253557][T10795] tipc: Resetting bearer [ 172.305930][T10803] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1398'. [ 172.313178][T10795] tipc: Disabling bearer [ 173.152094][T10864] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1416'. [ 173.297820][T10883] netlink: 191164 bytes leftover after parsing attributes in process `syz.2.1420'. [ 173.300542][T10886] tipc: Enabled bearer , priority 0 [ 173.316289][T10886] syzkaller0: entered promiscuous mode [ 173.321845][T10886] syzkaller0: entered allmulticast mode [ 173.356503][T10886] tipc: Resetting bearer [ 173.462623][T10891] tipc: Resetting bearer [ 173.520543][T10891] tipc: Disabling bearer [ 173.663438][T10907] lo: left allmulticast mode [ 173.669651][T10907] tunl0: left allmulticast mode [ 173.674005][T10911] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1428'. [ 173.684736][T10907] gre0: left allmulticast mode [ 173.696663][T10907] gretap0: left allmulticast mode [ 173.706735][T10907] erspan0: left allmulticast mode [ 173.723531][T10907] ip_vti0: left allmulticast mode [ 173.742683][T10907] ip6_vti0: left allmulticast mode [ 173.752838][T10907] sit0: left allmulticast mode [ 173.761093][T10907] ip6tnl0: left allmulticast mode [ 173.768719][T10907] ip6gre0: left allmulticast mode [ 173.773964][T10907] ip6gretap0: left allmulticast mode [ 173.782405][T10907] bridge0: left allmulticast mode [ 173.789338][T10907] vcan0: left allmulticast mode [ 173.796711][T10907] bond0: left allmulticast mode [ 173.801674][T10907] bridge_slave_1: left allmulticast mode [ 173.809208][T10907] team0: left allmulticast mode [ 173.815709][T10907] dummy0: left allmulticast mode [ 173.822200][T10907] nlmon0: left allmulticast mode [ 173.827655][T10907] caif0: left allmulticast mode [ 173.832841][T10907] batadv0: left allmulticast mode [ 173.841314][T10907] veth0: left allmulticast mode [ 173.846658][T10907] veth1: left allmulticast mode [ 173.851763][T10907] wg0: left allmulticast mode [ 173.861850][T10907] wg1: left allmulticast mode [ 173.867085][T10907] wg2: left allmulticast mode [ 173.872000][T10907] veth0_to_bridge: left allmulticast mode [ 173.881002][T10907] veth1_to_bridge: left allmulticast mode [ 173.888562][T10907] veth0_to_bond: left allmulticast mode [ 173.894344][T10907] bond_slave_0: left allmulticast mode [ 173.900871][T10907] veth1_to_bond: left allmulticast mode [ 173.906987][T10907] bond_slave_1: left allmulticast mode [ 173.912744][T10907] veth0_to_team: left allmulticast mode [ 173.918989][T10907] team_slave_0: left allmulticast mode [ 173.924991][T10907] veth1_to_team: left allmulticast mode [ 173.930639][T10907] team_slave_1: left allmulticast mode [ 173.936926][T10907] veth0_to_batadv: left allmulticast mode [ 173.942807][T10907] batadv_slave_0: left allmulticast mode [ 173.949364][T10907] veth1_to_batadv: left allmulticast mode [ 173.955514][T10907] batadv_slave_1: left allmulticast mode [ 173.961528][T10907] xfrm0: left allmulticast mode [ 173.966755][T10907] veth0_to_hsr: left allmulticast mode [ 173.972644][T10907] veth1_to_hsr: left allmulticast mode [ 173.978647][T10907] veth1_virt_wifi: left allmulticast mode [ 173.984748][T10907] veth0_virt_wifi: left allmulticast mode [ 173.990666][T10907] net veth1_virt_wifi virt_wifi0: left allmulticast mode [ 173.998221][T10907] veth1_macvtap: left allmulticast mode [ 174.003983][T10907] veth0_macvtap: left allmulticast mode [ 174.009838][T10907] macvtap0: left allmulticast mode [ 174.205663][T10929] can: request_module (can-proto-0) failed. [ 174.256141][T10940] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1434'. [ 174.302607][T10944] veth1_macvtap: left promiscuous mode [ 174.352968][T10945] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1436'. [ 174.397750][T10944] netlink: 1044 bytes leftover after parsing attributes in process `syz.3.1435'. [ 174.464071][T10950] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.478120][T10958] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1440'. [ 174.546099][T10950] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.696931][T10950] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.804036][T10950] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.029058][T10878] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.076970][T10878] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.099130][T10878] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.111397][T10878] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.256366][T10995] validate_nla: 2 callbacks suppressed [ 175.256384][T10995] netlink: 'syz.4.1453': attribute type 8 has an invalid length. [ 175.277675][T10995] netlink: 'syz.4.1453': attribute type 4 has an invalid length. [ 175.291829][T10999] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 175.320389][T10998] syz_tun: entered allmulticast mode [ 175.458737][T10998] syzkaller0 speed is unknown, defaulting to 1000 [ 175.654391][T11017] netlink: 'syz.4.1459': attribute type 12 has an invalid length. [ 175.978882][T11034] netlink: 'syz.4.1463': attribute type 11 has an invalid length. [ 176.251919][T10997] syz_tun: left allmulticast mode [ 177.214881][T11109] netlink: 'syz.1.1484': attribute type 1 has an invalid length. [ 177.291834][T11117] openvswitch: netlink: IPv6 tunnel dst address is zero [ 177.353183][T11118] bond9: (slave gretap1): making interface the new active one [ 177.363859][T11118] bond9: (slave gretap1): Enslaving as an active interface with an up link [ 177.441761][T11123] bond9: entered promiscuous mode [ 177.446861][T11123] bond9: entered allmulticast mode [ 177.452317][T11123] 8021q: adding VLAN 0 to HW filter on device bond9 [ 177.463632][T11123] netlink: 'syz.3.1487': attribute type 1 has an invalid length. [ 177.724345][T11120] netlink: 'syz.2.1486': attribute type 1 has an invalid length. [ 177.744377][T11120] __nla_validate_parse: 7 callbacks suppressed [ 177.744420][T11120] netlink: 184 bytes leftover after parsing attributes in process `syz.2.1486'. [ 177.763016][T11120] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1486'. [ 177.970431][T11137] nbd: device at index 1 is going down [ 177.986511][T11137] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1491'. [ 178.118388][T11146] bridge3: entered promiscuous mode [ 178.123638][T11146] bridge3: entered allmulticast mode [ 178.220796][T11156] netlink: 'syz.1.1496': attribute type 83 has an invalid length. [ 178.242699][T11156] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1496'. [ 178.333357][T11159] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1495'. [ 178.587406][T11180] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1503'. [ 178.637126][T11183] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1502'. [ 178.983844][T11203] netlink: 'syz.1.1507': attribute type 1 has an invalid length. [ 178.992810][T11203] netlink: 'syz.1.1507': attribute type 1 has an invalid length. [ 179.015628][T11206] netlink: 88 bytes leftover after parsing attributes in process `syz.4.1508'. [ 179.035997][T11206] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1508'. [ 179.049896][T11206] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1508'. [ 179.107331][T11210] sctp: [Deprecated]: syz.1.1509 (pid 11210) Use of struct sctp_assoc_value in delayed_ack socket option. [ 179.107331][T11210] Use struct sctp_sack_info instead [ 179.222242][T11221] netlink: 'syz.1.1513': attribute type 1 has an invalid length. [ 179.484331][T11242] nbd: couldn't find a device at index 1 [ 179.969546][T11287] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 179.979069][T11287] openvswitch: netlink: Message has 6332 unknown bytes. [ 179.992145][T11287] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 180.068633][T11295] openvswitch: netlink: IP tunnel dst address not specified [ 180.212405][T11301] 8021q: adding VLAN 0 to HW filter on device bond1 [ 180.302664][T11308] validate_nla: 10 callbacks suppressed [ 180.302681][T11308] netlink: 'syz.2.1540': attribute type 7 has an invalid length. [ 180.427289][T11318] veth7: entered promiscuous mode [ 180.439195][T11318] bond1: (slave veth7): Enslaving as an active interface with an up link [ 180.516363][T11308] : entered promiscuous mode [ 180.521145][T11325] netlink: 'syz.4.1543': attribute type 1 has an invalid length. [ 180.668808][T11334] netlink: 'syz.2.1546': attribute type 1 has an invalid length. [ 180.678548][T11334] netlink: 'syz.2.1546': attribute type 3 has an invalid length. [ 180.689039][T11334] NCSI netlink: No device for ifindex 131080 [ 180.779667][T11344] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 180.816368][T11346] lo: MTU too low for tipc bearer [ 180.821452][T11346] tipc: Enabling of bearer rejected, failed to enable media [ 180.842017][T11343] veth0_to_bond: entered allmulticast mode [ 181.098477][T11362] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 181.319215][T11380] netlink: 'syz.4.1559': attribute type 1 has an invalid length. [ 181.377722][T11380] 8021q: adding VLAN 0 to HW filter on device bond9 [ 181.585407][T10871] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 181.593390][T10871] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 181.621273][ T5922] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 181.794738][ T9416] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 182.131765][T11433] veth0: entered promiscuous mode [ 182.260529][T11445] netlink: 'syz.0.1575': attribute type 10 has an invalid length. [ 182.445458][ T9416] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 182.566595][T11464] netlink: 'syz.2.1581': attribute type 4 has an invalid length. [ 182.727013][T11473] lo: entered promiscuous mode [ 182.745598][T11473] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 182.761418][T11475] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 182.897975][T11489] veth0: entered promiscuous mode [ 182.909702][T11489] netlink: 'syz.0.1587': attribute type 18 has an invalid length. [ 182.917656][T11489] __nla_validate_parse: 22 callbacks suppressed [ 182.917674][T11489] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1587'. [ 183.103425][T11481] veth0: left promiscuous mode [ 183.323358][T11498] netlink: 'syz.3.1590': attribute type 4 has an invalid length. [ 183.338379][T11515] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1594'. [ 183.536789][T11523] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1597'. [ 183.587189][T11527] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.1598'. [ 183.594010][T11530] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1596'. [ 183.606670][T11529] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1599'. [ 183.807925][T11542] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1604'. [ 183.952695][T11552] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1607'. [ 184.041219][T11562] netlink: 'syz.0.1611': attribute type 12 has an invalid length. [ 184.149713][T11569] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 184.224713][T11573] 8021q: VLANs not supported on ip6_vti0 [ 184.317735][T11581] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1617'. [ 184.929437][T11616] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1624'. [ 185.201898][T11624] af_packet: tpacket_rcv: packet too big, clamped from 112 to 4294967272. macoff=96 [ 185.255164][T11635] openvswitch: netlink: Missing key (keys=40, expected=80) [ 185.298789][T11639] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 185.664269][T11664] netlink: 'syz.1.1639': attribute type 1 has an invalid length. [ 185.679351][T11665] netlink: 'syz.1.1639': attribute type 1 has an invalid length. [ 185.688388][T11667] tipc: Can't bind to reserved service type 3 [ 185.697799][T11667] sctp: [Deprecated]: syz.2.1640 (pid 11667) Use of struct sctp_assoc_value in delayed_ack socket option. [ 185.697799][T11667] Use struct sctp_sack_info instead [ 185.718648][T11668] sctp: [Deprecated]: syz.2.1640 (pid 11668) Use of struct sctp_assoc_value in delayed_ack socket option. [ 185.718648][T11668] Use struct sctp_sack_info instead [ 185.751002][T11665] bond10: (slave gretap2): making interface the new active one [ 185.761352][T11665] bond10: (slave gretap2): Enslaving as an active interface with an up link [ 185.964682][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 186.090554][T11689] netlink: zone id is out of range [ 186.115438][T11684] can: request_module (can-proto-0) failed. [ 186.140604][T11689] netlink: zone id is out of range [ 186.176373][T11689] netlink: zone id is out of range [ 186.216625][T11694] : entered promiscuous mode [ 186.247849][T11689] netlink: zone id is out of range [ 186.253147][T11689] netlink: zone id is out of range [ 186.582660][T11728] netlink: 'syz.4.1652': attribute type 1 has an invalid length. [ 186.936288][T11752] netlink: 'syz.1.1660': attribute type 2 has an invalid length. [ 187.939951][T11833] __nla_validate_parse: 10 callbacks suppressed [ 187.939970][T11833] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1677'. [ 188.030963][T11836] ipvlan0: entered promiscuous mode [ 188.523892][T11878] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1688'. [ 188.574210][ T5865] Bluetooth: hci4: link tx timeout [ 188.580684][ T5865] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 188.812216][T11893] tls_set_device_offload_rx: netdev not found [ 189.083333][T11908] netlink: 'syz.2.1699': attribute type 24 has an invalid length. [ 189.154435][T11908] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1699'. [ 189.289053][T11923] 8021q: VLANs not supported on sit0 [ 189.563998][T11941] : renamed from veth0_to_hsr (while UP) [ 189.625274][T11945] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1707'. [ 189.826344][T11962] batadv_slave_0: entered allmulticast mode [ 189.846853][ T5875] Bluetooth: hci4: link tx timeout [ 189.852429][ T5875] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 189.870536][ T5875] Bluetooth: hci4: link tx timeout [ 189.875926][ T5875] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 189.883579][ T5875] Bluetooth: hci4: link tx timeout [ 189.889522][ T5875] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 189.922648][ T5875] Bluetooth: hci4: link tx timeout [ 189.927835][ T5875] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 189.935559][ T5875] Bluetooth: hci4: link tx timeout [ 189.940669][ T5875] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 189.950263][ T5875] Bluetooth: hci4: link tx timeout [ 189.957012][ T5875] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 189.970400][ T5875] Bluetooth: hci4: link tx timeout [ 189.977565][ T5875] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 190.049586][T11972] IPv6: sit1: Disabled Multicast RS [ 190.055994][T11972] sit1: entered allmulticast mode [ 190.085277][T11975] netlink: 'syz.1.1714': attribute type 1 has an invalid length. [ 190.093031][T11975] netlink: 'syz.1.1714': attribute type 2 has an invalid length. [ 190.157871][T11961] batadv_slave_0: left allmulticast mode [ 190.324199][T11994] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1720'. [ 190.339223][T11994] xt_l2tp: invalid flags combination: 0 [ 190.446697][T12003] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1724'. [ 190.573102][T12015] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1729'. [ 190.606785][ T5875] Bluetooth: hci4: command 0x0405 tx timeout [ 190.617851][T12013] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1728'. [ 190.637579][T12020] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1730'. [ 190.660277][T12013] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1728'. [ 190.845053][T12003] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 190.858457][T12003] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 190.868034][T12033] netlink: 'syz.4.1733': attribute type 64 has an invalid length. [ 191.378316][T12058] tipc: Enabling of bearer rejected, already enabled [ 191.416799][T12058] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode [ 191.430017][ T9424] syzkaller0 speed is unknown, defaulting to 1000 [ 191.436994][ T9424] syz2: Port: 1 Link ACTIVE [ 191.551653][T12070] net_ratelimit: 9 callbacks suppressed [ 191.551671][T12070] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 191.584666][T12070] openvswitch: netlink: Message has 6332 unknown bytes. [ 192.141097][T12090] IPv6: NLM_F_CREATE should be specified when creating new route [ 192.287226][T12101] netlink: 'syz.1.1756': attribute type 10 has an invalid length. [ 192.370535][T12107] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 192.375834][T12103] syzkaller1: entered promiscuous mode [ 192.386413][T12103] syzkaller1: entered allmulticast mode [ 192.400663][T12110] lo: left promiscuous mode [ 192.406539][T12101] IPVS: set_ctl: invalid protocol: 135 255.255.255.255:20002 [ 192.822483][T12110] bridge_slave_0: left promiscuous mode [ 193.057442][T12110] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 193.143844][T12110] bond9: left promiscuous mode [ 193.174734][T11778] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.193958][T11778] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.288901][T12131] netlink: 'syz.2.1762': attribute type 39 has an invalid length. [ 193.308212][T12135] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 193.315964][T11778] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.329657][T11778] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.558010][T12148] lo: entered allmulticast mode [ 193.563076][T12148] tunl0: entered allmulticast mode [ 193.567260][T12145] __nla_validate_parse: 8 callbacks suppressed [ 193.567276][T12145] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1766'. [ 193.586400][T12145] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1766'. [ 193.596064][T12145] netlink: 'syz.4.1766': attribute type 14 has an invalid length. [ 193.604032][T12145] netlink: 'syz.4.1766': attribute type 13 has an invalid length. [ 193.628936][T12148] gre0: entered allmulticast mode [ 193.634208][T12148] gretap0: entered allmulticast mode [ 193.678239][T12148] erspan0: entered allmulticast mode [ 193.688179][T12154] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.1768'. [ 193.692556][T12148] ip_vti0: entered allmulticast mode [ 193.700910][T12154] openvswitch: netlink: Message has 5 unknown bytes. [ 193.718551][T12147] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1767'. [ 193.729915][T12148] ip6_vti0: entered allmulticast mode [ 193.745269][T12148] sit0: entered allmulticast mode [ 193.750538][T12148] ip6tnl0: entered allmulticast mode [ 193.756375][T12148] ip6gre0: entered allmulticast mode [ 193.761904][T12148] ip6gretap0: entered allmulticast mode [ 193.768306][T12148] bridge0: entered allmulticast mode [ 193.773870][T12148] vcan0: entered allmulticast mode [ 193.779171][T12148] bond0: entered allmulticast mode [ 193.785177][T12148] bond_slave_0: entered allmulticast mode [ 193.790988][T12148] bond_slave_1: entered allmulticast mode [ 193.799302][T12148] bridge_slave_1: entered allmulticast mode [ 193.805664][T12148] team0: entered allmulticast mode [ 193.810932][T12148] team_slave_0: entered allmulticast mode [ 193.818321][T12148] team_slave_1: entered allmulticast mode [ 193.825082][T12148] dummy0: entered allmulticast mode [ 193.830542][T12148] nlmon0: entered allmulticast mode [ 193.837742][T12148] caif0: entered allmulticast mode [ 193.843095][T12148] batadv0: entered allmulticast mode [ 193.848899][T12148] veth0: entered allmulticast mode [ 193.854224][T12148] veth1: entered allmulticast mode [ 193.859677][T12148] wg0: entered allmulticast mode [ 193.865476][T12148] wg1: entered allmulticast mode [ 193.871014][T12148] wg2: entered allmulticast mode [ 193.876242][T12148] veth0_to_bridge: entered allmulticast mode [ 193.883160][T12148] veth1_to_bridge: entered allmulticast mode [ 193.889815][T12148] veth0_to_bond: entered allmulticast mode [ 193.896057][T12148] veth1_to_bond: entered allmulticast mode [ 193.902263][T12148] veth0_to_team: entered allmulticast mode [ 193.908765][T12148] veth1_to_team: entered allmulticast mode [ 193.915061][T12148] veth0_to_batadv: entered allmulticast mode [ 193.921315][T12148] batadv_slave_0: entered allmulticast mode [ 193.927492][T12148] veth1_to_batadv: entered allmulticast mode [ 193.933735][T12148] batadv_slave_1: entered allmulticast mode [ 193.939893][T12148] xfrm0: entered allmulticast mode [ 193.945321][T12148] veth0_to_hsr: entered allmulticast mode [ 193.951393][T12148] veth1_to_hsr: entered allmulticast mode [ 193.957780][T12148] veth1_virt_wifi: entered allmulticast mode [ 193.963982][T12148] veth0_virt_wifi: entered allmulticast mode [ 193.971179][T12148] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 193.980146][T12148] veth1_macvtap: entered allmulticast mode [ 193.988060][T12148] veth0_macvtap: entered allmulticast mode [ 193.994113][T12148] macvtap0: entered allmulticast mode [ 194.000062][T12148] netdevsim netdevsim2 eth0: entered allmulticast mode [ 194.007330][T12148] netdevsim netdevsim2 eth1: entered allmulticast mode [ 194.017770][T12148] netdevsim netdevsim2 eth2: entered allmulticast mode [ 194.025293][T12148] netdevsim netdevsim2 eth3: entered allmulticast mode [ 194.032407][T12148] bond3: entered allmulticast mode [ 194.038016][T12148] gre2: entered allmulticast mode [ 194.043469][T12148] sit2: entered allmulticast mode [ 194.049595][T12148] macvtap0.0: entered allmulticast mode [ 194.055722][T12148] : entered allmulticast mode [ 194.060852][T12148] mac80211_hwsim hwsim6 dvmrp0: entered allmulticast mode [ 194.069916][T12148] ipvlan0: left promiscuous mode [ 194.075202][T12148] ipvlan0: entered allmulticast mode [ 194.084019][T12175] netlink: 1 bytes leftover after parsing attributes in process `syz.1.1772'. [ 194.089993][T12148] syztnl2: entered allmulticast mode [ 194.099735][T12148] syzkaller0: entered allmulticast mode [ 194.142493][T12167] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1768'. [ 194.369757][T12191] netlink: 'syz.3.1773': attribute type 10 has an invalid length. [ 194.444407][T12188] bridge0: port 4(batadv0) entered blocking state [ 194.459646][T12188] bridge0: port 4(batadv0) entered disabled state [ 194.480109][T12188] batadv0: entered allmulticast mode [ 194.538248][T12188] batadv0: entered promiscuous mode [ 194.813891][T12225] netlink: 'syz.1.1784': attribute type 4 has an invalid length. [ 194.854626][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 194.917063][T11777] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 194.929570][T11777] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 195.817175][T12242] syzkaller0 speed is unknown, defaulting to 1000 [ 195.963644][T12253] netlink: 666 bytes leftover after parsing attributes in process `syz.0.1793'. [ 196.164795][T12259] netem: change failed [ 196.287676][ T5880] Bluetooth: hci3: command 0x0406 tx timeout [ 196.296851][ T5882] Bluetooth: hci2: command 0x0401 tx timeout [ 196.303593][ T5185] Bluetooth: hci1: command 0x0406 tx timeout [ 196.501832][T12276] netlink: 'syz.1.1799': attribute type 4 has an invalid length. [ 196.584922][T12271] netlink: 'syz.1.1799': attribute type 4 has an invalid length. [ 196.594988][T12276] tipc: Enabled bearer , priority 0 [ 196.680046][T12276] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 196.689496][T12276] tipc: Resetting bearer [ 196.695689][T12271] syzkaller0: entered promiscuous mode [ 196.703158][T12285] netlink: 92 bytes leftover after parsing attributes in process `syz.0.1803'. [ 196.720203][T12286] netlink: 204 bytes leftover after parsing attributes in process `syz.2.1804'. [ 196.731025][T12285] netlink: 92 bytes leftover after parsing attributes in process `syz.0.1803'. [ 196.746772][T12271] syzkaller0: entered allmulticast mode [ 196.814332][T12268] tipc: Resetting bearer [ 196.888547][T12268] tipc: Disabling bearer [ 196.952211][ T10] hid-generic 0005:15C2:3010.0001: item fetching failed at offset 0/1 [ 196.987508][ T10] hid-generic 0005:15C2:3010.0001: probe with driver hid-generic failed with error -22 [ 197.143321][T12308] syzkaller1: entered promiscuous mode [ 197.153800][T12308] syzkaller1: entered allmulticast mode [ 197.346066][T12317] bridge3: entered promiscuous mode [ 197.351659][T12317] bridge3: entered allmulticast mode [ 197.699570][T12331] IPVS: set_ctl: invalid protocol: 98 10.1.1.2:0 [ 197.709703][T12331] IPVS: set_ctl: invalid protocol: 98 10.1.1.2:0 [ 198.002218][T12360] openvswitch: netlink: IPv4 tun info is not correct [ 198.011488][T12364] openvswitch: netlink: IP tunnel dst address not specified [ 198.060203][T12362] tap0: tun_chr_ioctl cmd 1074025673 [ 198.096204][T12367] tap0: tun_chr_ioctl cmd 2148553947 [ 198.476465][T12394] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (64) [ 198.506668][T12396] netlink: 'syz.2.1834': attribute type 2 has an invalid length. [ 198.594417][T12404] __nla_validate_parse: 9 callbacks suppressed [ 198.652650][T12404] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1834'. [ 198.690745][T12404] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1834'. [ 198.738479][T12409] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1833'. [ 198.752482][T12396] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1834'. [ 198.780191][T12396] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1834'. [ 198.799880][T12396] netlink: 'syz.2.1834': attribute type 12 has an invalid length. [ 198.808588][T12396] netlink: 'syz.2.1834': attribute type 11 has an invalid length. [ 198.966927][T12418] sctp: [Deprecated]: syz.4.1837 (pid 12418) Use of struct sctp_assoc_value in delayed_ack socket option. [ 198.966927][T12418] Use struct sctp_sack_info instead [ 199.010522][T12419] sctp: [Deprecated]: syz.4.1837 (pid 12419) Use of struct sctp_assoc_value in delayed_ack socket option. [ 199.010522][T12419] Use struct sctp_sack_info instead [ 199.098287][T12427] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1838'. [ 199.338234][T12444] dvmrp0: entered allmulticast mode [ 199.479778][T12452] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1847'. [ 199.505326][T12453] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1844'. [ 199.607891][T12467] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1847'. [ 199.619256][T12461] IPVS: Scheduler module ip_vs_sip not found [ 199.902573][T12487] netlink: 'syz.2.1854': attribute type 10 has an invalid length. [ 199.914868][T12487] batadv0: left allmulticast mode [ 199.931186][T12487] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 199.941595][T12487] batadv0: entered allmulticast mode [ 199.969741][T12487] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 199.990701][T12492] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 199.999133][T12492] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 200.041807][T12492] bond0: (slave batadv0): Releasing backup interface [ 200.042881][T12499] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1855'. [ 200.058758][T12492] batadv0 (unregistering): left allmulticast mode [ 200.396305][T12517] netlink: 'syz.3.1862': attribute type 3 has an invalid length. [ 200.571715][T12535] bridge0: port 3(vlan1) entered blocking state [ 200.578579][T12535] bridge0: port 3(vlan1) entered disabled state [ 200.596302][T12535] vlan1: entered allmulticast mode [ 200.616676][T12535] bridge0: entered allmulticast mode [ 200.635515][T12535] vlan1: left allmulticast mode [ 200.651059][T12535] bridge0: left allmulticast mode [ 200.721259][T12542] syzkaller0: entered promiscuous mode [ 200.737620][T12542] syzkaller0: entered allmulticast mode [ 201.552019][T12578] IPv6: NLM_F_CREATE should be specified when creating new route [ 201.708875][T12588] netlink: 'syz.2.1882': attribute type 1 has an invalid length. [ 202.173097][T12623] openvswitch: netlink: EtherType 0 is less than min 600 [ 202.274738][T12630] netlink: 'syz.1.1890': attribute type 30 has an invalid length. [ 203.423324][T12709] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 203.523148][T12712] IPv6: sit3: Disabled Multicast RS [ 203.540015][T12712] sit3: entered allmulticast mode [ 203.604810][T12716] tipc: Enabled bearer , priority 0 [ 203.614060][T12716] syzkaller0: entered promiscuous mode [ 203.621712][T12716] syzkaller0: entered allmulticast mode [ 203.650274][T12716] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 203.697037][T12716] tipc: Resetting bearer [ 203.708238][T12714] tipc: Resetting bearer [ 203.724055][T12714] tipc: Disabling bearer [ 203.744857][T12719] rdma_rxe: rxe_newlink: failed to add bond0 [ 203.755277][T12719] netlink: 'syz.2.1914': attribute type 13 has an invalid length. [ 203.933873][T12719] 8021q: adding VLAN 0 to HW filter on device bond0 [ 203.945843][T12719] 8021q: adding VLAN 0 to HW filter on device team0 [ 203.966458][T12719] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 203.991391][T12739] __nla_validate_parse: 11 callbacks suppressed [ 204.001295][T12739] netlink: 88 bytes leftover after parsing attributes in process `syz.4.1918'. [ 204.022119][T12738] openvswitch: netlink: IP tunnel dst address not specified [ 204.092491][T12738] netlink: 576 bytes leftover after parsing attributes in process `syz.1.1920'. [ 204.214996][T12748] netlink: 'syz.3.1922': attribute type 27 has an invalid length. [ 204.223521][T12748] netlink: 'syz.3.1922': attribute type 4 has an invalid length. [ 204.275676][T12753] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1923'. [ 204.277371][T12748] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1922'. [ 204.378417][T12756] netlink: 'syz.2.1925': attribute type 1 has an invalid length. [ 204.406994][T12762] netlink: 'syz.4.1926': attribute type 29 has an invalid length. [ 204.415414][T12756] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1925'. [ 204.426177][T12758] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1924'. [ 204.436249][T12758] batadv0: left allmulticast mode [ 204.443648][T12758] batadv0: left promiscuous mode [ 204.490687][T12766] netlink: 'syz.1.1927': attribute type 1 has an invalid length. [ 204.496010][T12758] bridge0: port 4(batadv0) entered disabled state [ 204.558026][T12758] syz_tun: left allmulticast mode [ 204.577656][T12758] syz_tun: left promiscuous mode [ 204.593626][T12758] bridge0: port 3(syz_tun) entered disabled state [ 204.637040][T12776] netlink: 'syz.2.1929': attribute type 17 has an invalid length. [ 204.649063][T12758] bridge_slave_1: left allmulticast mode [ 204.655042][T12758] bridge_slave_1: left promiscuous mode [ 204.656955][T12776] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1929'. [ 204.675607][T12758] bridge0: port 2(bridge_slave_1) entered disabled state [ 204.688046][T12776] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1929'. [ 204.700389][T12758] bridge_slave_0: left allmulticast mode [ 204.711087][T12758] bridge_slave_0: left promiscuous mode [ 204.717614][T12758] bridge0: port 1(bridge_slave_0) entered disabled state [ 204.802096][T12767] netlink: 'syz.0.1924': attribute type 1 has an invalid length. [ 204.810330][T12767] netlink: 5624 bytes leftover after parsing attributes in process `syz.0.1924'. [ 204.929708][T12769] 8021q: adding VLAN 0 to HW filter on device bond12 [ 204.941274][T12769] bond11: (slave bond12): making interface the new active one [ 204.949989][T12769] bond11: (slave bond12): Enslaving as an active interface with an up link [ 204.982724][T12779] syzkaller1: entered promiscuous mode [ 204.988535][T12779] syzkaller1: entered allmulticast mode [ 205.155882][T12793] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1933'. [ 205.273068][T12802] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 205.647179][T12828] dvmrp0: entered allmulticast mode [ 205.682173][T12828] dvmrp0: left allmulticast mode [ 205.695765][T12828] syz_tun: left allmulticast mode [ 205.792279][T12841] Bluetooth: hci1: expected 19 bytes, got 2 bytes [ 206.982618][T12921] 8021q: adding VLAN 0 to HW filter on device bond11 [ 207.260478][T12943] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 207.335858][T12942] syzkaller0: entered promiscuous mode [ 207.341553][T12942] syzkaller0: entered allmulticast mode [ 207.349864][T12945] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 208.659280][T12959] tipc: Enabling of bearer rejected, failed to enable media [ 208.818997][T12972] geneve2: entered promiscuous mode [ 208.825689][T12972] geneve2: entered allmulticast mode [ 208.865059][ T755] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 19999 - 0 [ 208.882205][ T755] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 19999 - 0 [ 208.911893][ T755] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 19999 - 0 [ 208.929024][ T755] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 19999 - 0 [ 209.027848][T12978] __nla_validate_parse: 11 callbacks suppressed [ 209.027869][T12978] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.1984'. [ 209.328628][T12998] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1991'. [ 209.353002][T13003] validate_nla: 2 callbacks suppressed [ 209.353019][T13003] netlink: 'syz.3.1990': attribute type 1 has an invalid length. [ 209.354679][T13000] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1993'. [ 209.370374][T13003] netlink: 184 bytes leftover after parsing attributes in process `syz.3.1990'. [ 209.389076][T13003] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1990'. [ 209.392931][T13004] veth1: entered promiscuous mode [ 209.408668][T13003] netlink: 'syz.3.1990': attribute type 1 has an invalid length. [ 209.411334][T13004] veth1: entered allmulticast mode [ 209.424903][T13002] netlink: 13 bytes leftover after parsing attributes in process `syz.0.1994'. [ 209.425106][T13003] netlink: 184 bytes leftover after parsing attributes in process `syz.3.1990'. [ 209.463614][T13003] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1990'. [ 209.478633][T13003] netlink: 'syz.3.1990': attribute type 1 has an invalid length. [ 209.510289][T13003] netlink: 184 bytes leftover after parsing attributes in process `syz.3.1990'. [ 209.532411][T13003] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1990'. [ 209.581996][T13003] netlink: 'syz.3.1990': attribute type 1 has an invalid length. [ 209.620925][T13003] netlink: 'syz.3.1990': attribute type 1 has an invalid length. [ 209.662068][T13003] netlink: 'syz.3.1990': attribute type 1 has an invalid length. [ 209.682028][T13003] netlink: 'syz.3.1990': attribute type 1 has an invalid length. [ 209.699308][T13003] netlink: 'syz.3.1990': attribute type 1 has an invalid length. [ 209.733510][T13003] netlink: 'syz.3.1990': attribute type 1 has an invalid length. [ 209.758125][T13003] netlink: 'syz.3.1990': attribute type 1 has an invalid length. [ 210.765996][T13068] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !寿$ULvyڇv[Dwz [ 211.040756][T13090] bridge2: entered allmulticast mode [ 211.099873][T13090] 8021q: adding VLAN 0 to HW filter on device bond0 [ 211.133919][T13090] bond0: (slave rose0): Enslaving as an active interface with an up link [ 211.494623][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 211.626586][T13129] syzkaller1: entered promiscuous mode [ 211.632245][T13129] syzkaller1: entered allmulticast mode [ 212.408619][T13170] syzkaller0 speed is unknown, defaulting to 1000 [ 212.432905][T13168] tipc: New replicast peer: 255.255.255.255 [ 212.442477][T13168] tipc: Enabled bearer , priority 10 [ 212.471360][T11773] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 212.499695][T11773] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 212.531426][T11773] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 212.564342][T11773] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 212.687201][T13189] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 212.878871][T13204] tipc: Enabled bearer , priority 0 [ 212.903659][T13204] syzkaller0: entered promiscuous mode [ 212.951284][T13204] syzkaller0: entered allmulticast mode [ 213.003602][T13209] macsec2: entered promiscuous mode [ 213.048258][T13209] bridge0: entered promiscuous mode [ 213.078206][T13209] macsec2: entered allmulticast mode [ 213.099655][T13209] bridge0: entered allmulticast mode [ 213.112931][T13209] bridge0: port 1(macsec2) entered blocking state [ 213.123277][T13209] bridge0: port 1(macsec2) entered disabled state [ 213.162825][T13209] bridge0: left allmulticast mode [ 213.168172][T13209] bridge0: left promiscuous mode [ 213.518351][T13223] syzkaller0 speed is unknown, defaulting to 1000 [ 213.537206][T13196] tipc: Resetting bearer [ 213.608165][T13196] tipc: Disabling bearer [ 214.315639][T13260] netlink: 'syz.1.2053': attribute type 11 has an invalid length. [ 214.340756][T13260] __nla_validate_parse: 141 callbacks suppressed [ 214.340776][T13260] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2053'. [ 214.855605][T13284] tipc: Enabling of bearer rejected, failed to enable media [ 215.556637][T13324] syzkaller1: entered promiscuous mode [ 215.562342][T13324] syzkaller1: entered allmulticast mode [ 215.573880][T13326] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2075'. [ 215.613862][T13326] netlink: 2 bytes leftover after parsing attributes in process `syz.1.2075'. [ 215.925247][T13350] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2081'. [ 216.033331][T13360] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2084'. [ 216.045794][T13360] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2084'. [ 216.068858][T13360] validate_nla: 58 callbacks suppressed [ 216.068876][T13360] netlink: 'syz.2.2084': attribute type 12 has an invalid length. [ 216.082464][T13360] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2084'. [ 216.251161][T13373] netlink: 'syz.3.2090': attribute type 4 has an invalid length. [ 216.313586][T13379] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2091'. [ 216.344118][T13379] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2091'. [ 216.374138][T13379] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2091'. [ 216.564134][T13402] IPVS: ip_vs_edit_dest(): server weight less than zero [ 216.718511][T13412] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 217.743332][T13483] netlink: 'syz.0.2125': attribute type 1 has an invalid length. [ 217.822019][T13485] sctp: [Deprecated]: syz.4.2124 (pid 13485) Use of struct sctp_assoc_value in delayed_ack socket option. [ 217.822019][T13485] Use struct sctp_sack_info instead [ 218.150157][T13508] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 218.249403][T13500] nbd: nbd4 already in use [ 218.327278][T13513] netlink: 'syz.0.2134': attribute type 30 has an invalid length. [ 218.359665][T13513] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 218.510411][T11753] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 218.545367][T11753] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 218.594780][T11753] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 218.603527][T11753] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 218.871273][T13560] netlink: 'syz.3.2149': attribute type 13 has an invalid length. [ 218.888917][T13560] macvtap0: entered allmulticast mode [ 218.895637][T13560] macvtap0: refused to change device tx_queue_len [ 219.050070][T13579] netlink: 'syz.3.2154': attribute type 1 has an invalid length. [ 219.150209][T13581] sctp: [Deprecated]: syz.1.2155 (pid 13581) Use of struct sctp_assoc_value in delayed_ack socket option. [ 219.150209][T13581] Use struct sctp_sack_info instead [ 219.172050][T13583] (unnamed net_device) (uninitialized): option use_carrier: invalid value (4) [ 219.410077][T13605] bond0: (slave bond_slave_0): Releasing backup interface [ 219.429400][T13607] __nla_validate_parse: 18 callbacks suppressed [ 219.429416][T13607] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2159'. [ 219.464783][T13605] bond0: (slave bond_slave_1): Releasing backup interface [ 219.492571][T13605] team0: Port device team_slave_0 removed [ 219.538140][T13605] team0: Port device team_slave_1 removed [ 219.553795][T13605] bond0: (slave wlan1): Releasing backup interface [ 219.591293][T13616] openvswitch: netlink: Actions may not be safe on all matching packets [ 219.615814][T13605] bond2: (slave geneve2): Releasing active interface [ 219.626957][T13605] bond6: left allmulticast mode [ 219.635878][T13605] bond6: left promiscuous mode [ 219.640962][T13605] bridge2: port 1(bond6) entered disabled state [ 219.653616][T13605] gretap1: left allmulticast mode [ 219.663224][T13605] gretap1: left promiscuous mode [ 219.671491][T13605] bridge2: port 2(gretap1) entered disabled state [ 219.692714][T13610] team0: Mode changed to "broadcast" [ 219.869688][T13627] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2165'. [ 219.880943][T13627] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2165'. [ 219.891298][T13622] veth1: entered promiscuous mode [ 219.903489][T13622] veth1: entered allmulticast mode [ 220.039313][T13638] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.2170'. [ 220.074849][T13643] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2172'. [ 220.437657][T13667] syzkaller0 speed is unknown, defaulting to 1000 [ 220.465647][T13673] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2184'. [ 220.576469][T13683] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2182'. [ 220.605600][T13673] 8021q: adding VLAN 0 to HW filter on device bond12 [ 220.677275][T13688] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2182'. [ 220.752639][T13694] netlink: 196 bytes leftover after parsing attributes in process `syz.0.2188'. [ 220.799269][ T755] tipc: Resetting bearer [ 220.828125][ T9417] syzkaller0 speed is unknown, defaulting to 1000 [ 220.828394][T13699] sch_fq: defrate 0 ignored. [ 220.843854][ T9417] syz2: Port: 1 Link DOWN [ 220.946011][T13704] netlink: 'syz.4.2190': attribute type 21 has an invalid length. [ 220.954212][T13704] netlink: 128 bytes leftover after parsing attributes in process `syz.4.2190'. [ 221.185151][T13704] netlink: 'syz.4.2190': attribute type 5 has an invalid length. [ 221.371452][T13704] syzkaller0 speed is unknown, defaulting to 1000 [ 221.774805][T13738] siw: device registration error -23 [ 222.463456][T13769] netlink: 'syz.0.2206': attribute type 16 has an invalid length. [ 245.405197][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 259.189661][T13840] __nla_validate_parse: 7 callbacks suppressed [ 259.189680][T13840] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2222'. [ 259.453877][T13857] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2224'. [ 259.556439][T13862] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2227'. [ 259.673380][T13868] tipc: Enabling of bearer rejected, failed to enable media [ 259.716220][T13874] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2231'. [ 259.798294][T13881] netlink: 300 bytes leftover after parsing attributes in process `syz.1.2230'. [ 259.842936][T13884] netlink: 'syz.3.2232': attribute type 6 has an invalid length. [ 259.895742][T13884] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2232'. [ 259.908914][T13887] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2233'. [ 259.965736][T13887] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2233'. [ 260.227374][T13903] veth7: entered promiscuous mode [ 260.232445][T13903] veth7: entered allmulticast mode [ 260.349632][T13910] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2240'. [ 260.380677][T13910] xfrm1: entered promiscuous mode [ 260.394955][T13910] xfrm1: entered allmulticast mode [ 260.431284][T13910] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2240'. [ 260.867302][T13946] netlink: 'syz.4.2252': attribute type 1 has an invalid length. [ 260.917560][T13945] netlink: 'syz.4.2252': attribute type 1 has an invalid length. [ 260.955192][T13949] netdevsim netdevsim0: Direct firmware load for .. failed with error -2 [ 260.964737][T13949] netdevsim netdevsim0: Falling back to sysfs fallback for: .. [ 260.991084][T13956] netlink: 'syz.2.2256': attribute type 5 has an invalid length. [ 261.012769][T13956] geneve3: entered promiscuous mode [ 261.021330][T13956] geneve3: entered allmulticast mode [ 261.040351][T11779] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 256 - 0 [ 261.056857][T11779] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 256 - 0 [ 261.076599][T11779] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 256 - 0 [ 261.122723][T11779] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 256 - 0 [ 261.141833][T13963] (unnamed net_device) (uninitialized): option miimon: invalid value (18446744073709551585) [ 261.179704][T13963] (unnamed net_device) (uninitialized): option miimon: allowed values 0 - 2147483647 [ 261.247762][T13965] pim6reg: entered allmulticast mode [ 261.258655][T13970] pim6reg: left allmulticast mode [ 261.341271][T13979] syzkaller1: entered promiscuous mode [ 261.352778][T13979] syzkaller1: entered allmulticast mode [ 262.006719][ T755] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 262.022758][ T755] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 262.049441][ T755] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 262.075181][ T755] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 262.136467][T14034] sch_fq: defrate 0 ignored. [ 262.469630][T14063] tipc: Enabled bearer , priority 0 [ 262.483092][T14063] syzkaller0: entered promiscuous mode [ 262.492010][T14063] syzkaller0: entered allmulticast mode [ 262.529681][T14067] IPv6: sit3: Disabled Multicast RS [ 262.584324][T14060] tipc: Resetting bearer [ 262.621579][T14060] tipc: Disabling bearer [ 263.029014][T14103] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 263.280459][T14114] team0: Mode changed to "loadbalance" [ 263.311290][T14123] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 263.318584][T14123] IPv6: NLM_F_CREATE should be set when creating new route [ 263.325883][T14123] IPv6: NLM_F_CREATE should be set when creating new route [ 263.333100][T14123] IPv6: NLM_F_CREATE should be set when creating new route [ 263.343543][T14122] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 263.388696][T14129] netlink: 'syz.3.2306': attribute type 1 has an invalid length. [ 263.424808][T14133] IPv4: Oversized IP packet from 127.202.26.0 [ 263.523842][T14137] netlink: 'syz.0.2309': attribute type 2 has an invalid length. [ 263.603353][T14144] batadv_slave_1: entered promiscuous mode [ 263.664054][T14144] batadv_slave_1: left promiscuous mode [ 263.977981][T14162] netlink: 'syz.1.2315': attribute type 6 has an invalid length. [ 264.571203][T14187] syzkaller1: entered promiscuous mode [ 264.582746][T14187] syzkaller1: entered allmulticast mode [ 265.027662][T14220] netlink: 'syz.4.2331': attribute type 21 has an invalid length. [ 265.077840][T14220] __nla_validate_parse: 16 callbacks suppressed [ 265.077864][T14220] netlink: 128 bytes leftover after parsing attributes in process `syz.4.2331'. [ 265.104592][T14220] netlink: 3 bytes leftover after parsing attributes in process `syz.4.2331'. [ 265.452468][T14244] netlink: 'syz.3.2338': attribute type 1 has an invalid length. [ 265.554673][T14251] veth0_to_team: entered promiscuous mode [ 265.561198][T14251] veth0_to_team: entered allmulticast mode [ 265.613460][T14254] pimreg: entered allmulticast mode [ 265.639789][T14255] netlink: 'syz.4.2340': attribute type 2 has an invalid length. [ 266.014895][T14282] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2350'. [ 266.051849][T14282] workqueue: Failed to create a rescuer kthread for wq "bond13": -EINTR [ 266.082075][T14292] syz.0.2352: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 266.138811][T14296] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 266.176088][T14292] CPU: 0 UID: 0 PID: 14292 Comm: syz.0.2352 Not tainted syzkaller #0 PREEMPT(full) [ 266.176119][T14292] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 266.176138][T14292] Call Trace: [ 266.176146][T14292] [ 266.176155][T14292] dump_stack_lvl+0x189/0x250 [ 266.176189][T14292] ? __pfx_dump_stack_lvl+0x10/0x10 [ 266.176214][T14292] ? __pfx__printk+0x10/0x10 [ 266.176243][T14292] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 266.176267][T14292] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 266.176299][T14292] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 266.176327][T14292] warn_alloc+0x214/0x310 [ 266.176359][T14292] ? stack_depot_save_flags+0x40/0x860 [ 266.176397][T14292] ? __pfx_warn_alloc+0x10/0x10 [ 266.176431][T14292] ? kasan_save_track+0x4f/0x80 [ 266.176458][T14292] ? xskq_create+0x56/0x170 [ 266.176477][T14292] ? xsk_init_queue+0xb0/0x110 [ 266.176493][T14292] ? xsk_setsockopt+0x4dc/0x8d0 [ 266.176521][T14292] ? do_sock_setsockopt+0x179/0x1b0 [ 266.176544][T14292] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 266.176566][T14292] ? do_syscall_64+0xfa/0x3b0 [ 266.176588][T14292] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 266.176617][T14292] __vmalloc_node_range_noprof+0x125/0x12f0 [ 266.176679][T14292] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 266.176716][T14292] ? __kasan_kmalloc+0x93/0xb0 [ 266.176747][T14292] vmalloc_user_noprof+0xad/0xf0 [ 266.176776][T14292] ? xskq_create+0xbf/0x170 [ 266.176797][T14292] xskq_create+0xbf/0x170 [ 266.176821][T14292] xsk_init_queue+0xb0/0x110 [ 266.176842][T14292] xsk_setsockopt+0x4dc/0x8d0 [ 266.176875][T14292] ? __pfx_xsk_setsockopt+0x10/0x10 [ 266.176906][T14292] ? __pfx_aa_sk_perm+0x10/0x10 [ 266.176941][T14292] ? aa_sock_opt_perm+0xff/0x1b0 [ 266.176966][T14292] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 266.176987][T14292] ? __pfx_xsk_setsockopt+0x10/0x10 [ 266.177020][T14292] do_sock_setsockopt+0x179/0x1b0 [ 266.177049][T14292] __x64_sys_setsockopt+0x13f/0x1b0 [ 266.177080][T14292] do_syscall_64+0xfa/0x3b0 [ 266.177101][T14292] ? lockdep_hardirqs_on+0x9c/0x150 [ 266.177122][T14292] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 266.177141][T14292] ? clear_bhb_loop+0x60/0xb0 [ 266.177166][T14292] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 266.177186][T14292] RIP: 0033:0x7f89e7b8eec9 [ 266.177209][T14292] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 266.177227][T14292] RSP: 002b:00007f89e8975038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 266.177249][T14292] RAX: ffffffffffffffda RBX: 00007f89e7de5fa0 RCX: 00007f89e7b8eec9 [ 266.177263][T14292] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000008 [ 266.177277][T14292] RBP: 00007f89e7c11f91 R08: 0000000000000004 R09: 0000000000000000 [ 266.177294][T14292] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 266.177307][T14292] R13: 00007f89e7de6038 R14: 00007f89e7de5fa0 R15: 00007ffe345f5488 [ 266.177341][T14292] [ 266.177487][T14292] Mem-Info: [ 266.381818][T14302] netlink: 'syz.1.2354': attribute type 28 has an invalid length. [ 266.456676][T14292] active_anon:4732 inactive_anon:0 isolated_anon:0 [ 266.456676][T14292] active_file:3081 inactive_file:39936 isolated_file:0 [ 266.456676][T14292] unevictable:768 dirty:58 writeback:0 [ 266.456676][T14292] slab_reclaimable:11924 slab_unreclaimable:114218 [ 266.456676][T14292] mapped:29084 shmem:1358 pagetables:1218 [ 266.456676][T14292] sec_pagetables:0 bounce:0 [ 266.456676][T14292] kernel_misc_reclaimable:0 [ 266.456676][T14292] free:1308127 free_pcp:15231 free_cma:0 [ 266.533462][T14301] netlink: 'syz.1.2354': attribute type 28 has an invalid length. [ 266.561609][T14301] netlink: 'syz.1.2354': attribute type 3 has an invalid length. [ 266.580279][T14296] gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 266.604575][T14301] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2354'. [ 266.606674][T14309] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2356'. [ 266.624992][T14296] gretap2: entered promiscuous mode [ 266.628458][T14302] netlink: 'syz.1.2354': attribute type 3 has an invalid length. [ 266.631358][T14292] Node 0 active_anon:19028kB inactive_anon:0kB active_file:12324kB inactive_file:159540kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:116336kB dirty:232kB writeback:0kB shmem:3896kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:15032kB pagetables:4524kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 266.638209][T14302] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2354'. [ 266.683165][T14296] gretap2: entered allmulticast mode [ 266.691849][T14292] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:148kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 266.729248][T14292] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 266.794560][T14292] lowmem_reserve[]: 0 2497 2499 2499 2499 [ 266.800684][T14292] Node 0 DMA32 free:1337428kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:18956kB inactive_anon:0kB active_file:12324kB inactive_file:157972kB unevictable:1536kB writepending:232kB present:3129332kB managed:2557408kB mlocked:0kB bounce:0kB free_pcp:41324kB local_pcp:22028kB free_cma:0kB [ 266.871076][T14292] lowmem_reserve[]: 0 0 1 1 1 [ 266.876320][T14292] Node 0 Normal free:12kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1568kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:8kB free_cma:0kB [ 266.906743][T14292] lowmem_reserve[]: 0 0 0 0 0 [ 266.911489][T14292] Node 1 Normal free:3887144kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:19144kB local_pcp:8168kB free_cma:0kB [ 266.919117][T14312] bond13: (slave vcan0): The slave device specified does not support setting the MAC address [ 266.956367][T14292] lowmem_reserve[]: 0 0 0 0 0 [ 266.976349][T14292] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 267.001138][T14312] bond13: (slave vcan0): Error -95 calling set_mac_address [ 267.022224][T14292] Node 0 DMA32: 1782*4kB (UM) 1115*8kB (UM) 185*16kB (UM) 244*32kB (UME) 58*64kB (UME) 69*128kB (UME) 51*256kB (UM) 34*512kB (UME) 23*1024kB (UM) 4*2048kB (UME) 302*4096kB (M) = 1338560kB [ 267.047770][T14292] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 267.079853][T14292] Node 1 Normal: 202*4kB (UM) 60*8kB (UME) 38*16kB (UME) 98*32kB (UME) 20*64kB (UME) 7*128kB (UME) 6*256kB (UME) 5*512kB (UM) 3*1024kB (UME) 1*2048kB (E) 945*4096kB (M) = 3887144kB [ 267.204845][T14292] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 267.225713][ T5879] Bluetooth: hci4: link tx timeout [ 267.232340][ T5879] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 267.250478][T14292] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 267.281232][T14292] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 267.291383][T14292] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 267.301850][T14292] 44420 total pagecache pages [ 267.306895][T14292] 0 pages in swap cache [ 267.311052][T14292] Free swap = 124996kB [ 267.315291][T14292] Total swap = 124996kB [ 267.319445][T14292] 2097051 pages RAM [ 267.323249][T14292] 0 pages HighMem/MovableOnly [ 267.328041][T14292] 425673 pages reserved [ 267.332366][T14292] 0 pages cma reserved [ 267.355142][T14338] openvswitch: netlink: Flow actions attr not present in new flow. [ 267.425005][T14343] netlink: 'syz.2.2361': attribute type 10 has an invalid length. [ 267.461340][T14343] team0: left allmulticast mode [ 267.500069][T14343] 8021q: adding VLAN 0 to HW filter on device team0 [ 267.515035][T14343] team0: entered allmulticast mode [ 267.633475][T14343] bond0: (slave team0): Enslaving as an active interface with an up link [ 267.713715][T14347] syzkaller0 speed is unknown, defaulting to 1000 [ 267.745934][T14361] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2370'. [ 268.233602][T14388] tipc: Enabled bearer , priority 0 [ 268.299571][T14391] syzkaller0: entered promiscuous mode [ 268.333140][T14391] syzkaller0: entered allmulticast mode [ 268.627416][T14379] tipc: Resetting bearer [ 268.814011][T14418] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2382'. [ 268.893528][T14418] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 268.991158][T14376] tipc: Resetting bearer [ 269.055798][T14376] tipc: Disabling bearer [ 269.098171][T14423] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2384'. [ 269.249240][ T5875] Bluetooth: hci4: command 0x0405 tx timeout [ 269.294229][T14445] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2391'. [ 269.469932][T14453] erspan0: entered promiscuous mode [ 269.485998][T14453] batadv_slave_1: entered promiscuous mode [ 269.513755][T14453] batadv_slave_1: left promiscuous mode [ 269.556743][T14453] erspan0: left promiscuous mode [ 269.751426][T14472] netlink: 'syz.2.2399': attribute type 21 has an invalid length. [ 269.771683][T14472] netlink: 'syz.2.2399': attribute type 6 has an invalid length. [ 269.880598][T14480] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 270.201359][T14501] netlink: 'syz.1.2407': attribute type 1 has an invalid length. [ 270.250048][T14501] netlink: 'syz.1.2407': attribute type 1 has an invalid length. [ 270.370445][T14511] netlink: 'syz.2.2410': attribute type 10 has an invalid length. [ 270.397644][T14513] __nla_validate_parse: 7 callbacks suppressed [ 270.397670][T14513] netlink: 100 bytes leftover after parsing attributes in process `syz.4.2409'. [ 270.456892][T14519] netlink: 51 bytes leftover after parsing attributes in process `syz.0.2413'. [ 270.489511][T14522] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2412'. [ 270.861298][T14542] netlink: 'syz.4.2420': attribute type 7 has an invalid length. [ 270.988518][T14545] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2421'. [ 271.089964][T14556] netlink: 'syz.4.2427': attribute type 1 has an invalid length. [ 271.100498][T14556] netlink: 'syz.4.2427': attribute type 1 has an invalid length. [ 271.110157][T14556] netlink: 'syz.4.2427': attribute type 2 has an invalid length. [ 271.128994][T14560] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2426'. [ 271.134856][T14556] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2427'. [ 271.143082][T14562] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2426'. [ 271.208557][T14562] netlink: 6 bytes leftover after parsing attributes in process `syz.3.2426'. [ 271.390369][T14577] netlink: 'syz.3.2430': attribute type 29 has an invalid length. [ 271.411032][T14577] netlink: 'syz.3.2430': attribute type 29 has an invalid length. [ 271.479841][T14584] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2431'. [ 271.723730][T14602] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2436'. [ 271.754967][T14602] netlink: 'syz.3.2436': attribute type 5 has an invalid length. [ 272.084525][T14617] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 272.150612][T14621] IPVS: set_ctl: invalid protocol: 1 172.30.0.3:20004 [ 272.279572][T14628] gtp1: entered promiscuous mode [ 272.294687][T14628] gtp1: entered allmulticast mode [ 272.393432][T14634] 8021q: adding VLAN 0 to HW filter on device bond2 [ 272.432887][T14628] vlan0: entered promiscuous mode [ 272.471484][T14628] bond2: entered promiscuous mode [ 272.478616][T14628] vlan0: entered allmulticast mode [ 272.483775][T14628] bond2: entered allmulticast mode [ 272.514094][T14628] bond2: (slave gretap1): making interface the new active one [ 272.525779][T14628] gretap1: entered promiscuous mode [ 272.531158][T14628] gretap1: entered allmulticast mode [ 272.538679][T14628] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 272.632590][T14651] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 273.151642][T14682] veth1_macvtap: left promiscuous mode [ 273.384653][T14696] macvtap0: entered allmulticast mode [ 273.411497][T14696] macvtap0: refused to change device tx_queue_len [ 273.450330][T14703] syzkaller1: entered promiscuous mode [ 273.456297][T14703] syzkaller1: entered allmulticast mode [ 273.482678][T14703] ip6gretap0: entered promiscuous mode [ 273.515750][T14703] batadv_slave_1: entered promiscuous mode [ 273.541442][T14703] ip6gretap0: left promiscuous mode [ 273.552291][T14703] batadv_slave_1: left promiscuous mode [ 273.630874][T14719] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 273.997775][T14736] gretap0: entered promiscuous mode [ 274.257781][T14753] bond0: entered allmulticast mode [ 275.238091][T14802] validate_nla: 6 callbacks suppressed [ 275.238111][T14802] netlink: 'syz.0.2497': attribute type 1 has an invalid length. [ 275.433628][T14811] __nla_validate_parse: 17 callbacks suppressed [ 275.433647][T14811] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2497'. [ 275.518817][T14811] 8021q: adding VLAN 0 to HW filter on device bond3 [ 275.605131][ T9419] IPVS: starting estimator thread 0... [ 275.714816][T14824] IPVS: using max 25 ests per chain, 60000 per kthread [ 275.929703][T14848] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2504'. [ 276.153693][T14863] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2510'. [ 276.218793][T14868] sock: sock_set_timeout: `syz.3.2510' (pid 14868) tries to set negative timeout [ 276.333037][T14876] netlink: 'syz.1.2513': attribute type 1 has an invalid length. [ 276.342147][T14876] netlink: 'syz.1.2513': attribute type 1 has an invalid length. [ 276.855864][T14912] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2524'. [ 276.997393][T14928] netlink: 5 bytes leftover after parsing attributes in process `syz.1.2524'. [ 277.016547][T14912] bond14: entered promiscuous mode [ 277.021694][T14912] bond14: entered allmulticast mode [ 277.035729][T14912] 8021q: adding VLAN 0 to HW filter on device bond14 [ 277.043873][T14929] : renamed from veth1_macvtap (while UP) [ 277.148131][T14941] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2530'. [ 277.268287][T14950] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on [ 277.358406][T14956] netlink: 'syz.2.2535': attribute type 11 has an invalid length. [ 277.378430][T14958] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 277.404314][T14956] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2535'. [ 278.003936][T14996] netlink: 'syz.2.2549': attribute type 16 has an invalid length. [ 278.023092][T14996] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2549'. [ 278.355808][T15027] netlink: 'syz.0.2557': attribute type 16 has an invalid length. [ 278.383148][T15027] netlink: 'syz.0.2557': attribute type 17 has an invalid length. [ 278.408756][T15027] tunl0: left promiscuous mode [ 278.463808][T15027] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 278.487045][T15027] netlink: 'syz.0.2557': attribute type 16 has an invalid length. [ 278.508454][T15027] netlink: 'syz.0.2557': attribute type 17 has an invalid length. [ 278.563728][T15027] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 278.617779][T15034] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2559'. [ 278.635265][T15027] netlink: 'syz.0.2557': attribute type 16 has an invalid length. [ 278.659025][T15027] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 278.782447][T15027] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 278.861591][T15027] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 278.910658][T15027] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 278.966078][T15027] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 279.026892][T15027] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 279.192975][T15057] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2564'. [ 280.333669][ T755] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 280.354542][ T755] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.469219][ T755] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 280.481765][ T755] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.574732][ T755] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 280.587698][ T755] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.652820][ T755] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 280.663197][ T755] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.014021][ T755] bond2 (unregistering): (slave gretap1): Releasing active interface [ 281.022547][ T755] gretap1 (unregistering): left promiscuous mode [ 281.029023][ T755] gretap1 (unregistering): left allmulticast mode [ 281.370246][ T755] bond0 (unregistering): Released all slaves [ 281.451671][ T755] bond1 (unregistering): (slave veth7): Releasing backup interface [ 281.461104][ T755] bond1 (unregistering): Released all slaves [ 281.550670][ T755] bond2 (unregistering): Released all slaves [ 281.629459][ T755] bond3 (unregistering): Released all slaves [ 281.723905][ T755] tipc: Disabling bearer [ 281.739438][ T755] tipc: Disabling bearer [ 281.746890][ T755] tipc: Left network mode [ 282.057758][ T755] ------------[ cut here ]------------ [ 282.063357][ T755] WARNING: CPU: 1 PID: 755 at net/mac80211/key.c:1163 ieee80211_free_keys+0x536/0x650 [ 282.073685][ T755] Modules linked in: [ 282.078117][ T755] CPU: 1 UID: 0 PID: 755 Comm: kworker/u8:5 Not tainted syzkaller #0 PREEMPT(full) [ 282.087556][ T755] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 282.097690][ T755] Workqueue: netns cleanup_net [ 282.102475][ T755] RIP: 0010:ieee80211_free_keys+0x536/0x650 [ 282.108401][ T755] Code: 00 00 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 09 5e c4 f6 90 0f 0b 90 e9 46 fc ff ff e8 fb 5d c4 f6 90 <0f> 0b 90 4c 8b 24 24 e9 7c fe ff ff e8 e9 5d c4 f6 e9 2f fe ff ff [ 282.128057][ T755] RSP: 0018:ffffc900031e7040 EFLAGS: 00010293 [ 282.134105][ T755] RAX: ffffffff8afb50c5 RBX: dffffc0000000000 RCX: ffff8880244ebc00 [ 282.142100][ T755] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 282.150164][ T755] RBP: ffffc900031e70f0 R08: ffffc900031e6de7 R09: 1ffff9200063cdbc [ 282.158171][ T755] R10: dffffc0000000000 R11: fffff5200063cdbd R12: 0000000000000001 [ 282.166252][ T755] R13: ffff8880558969d0 R14: 1ffff1100ab12d3a R15: 0000000000000000 [ 282.174206][ T755] FS: 0000000000000000(0000) GS:ffff888125d12000(0000) knlGS:0000000000000000 [ 282.183172][ T755] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 282.189833][ T755] CR2: 00007f89e8917d60 CR3: 000000000df36000 CR4: 00000000003526f0 [ 282.197938][ T755] Call Trace: [ 282.201214][ T755] [ 282.204130][ T755] ? __pfx_ieee80211_free_keys+0x10/0x10 [ 282.209824][ T755] ? wiphy_work_cancel+0x1eb/0x3c0 [ 282.215002][ T755] ieee80211_do_stop+0xf47/0x1fb0 [ 282.220034][ T755] ? __lock_acquire+0xab9/0xd20 [ 282.224970][ T755] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 282.230347][ T755] ? __pfx_ieee80211_do_stop+0x10/0x10 [ 282.235816][ T755] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 282.241693][ T755] ? lockdep_hardirqs_on+0x9c/0x150 [ 282.246915][ T755] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 282.253227][ T755] ? wiphy_work_cancel+0x1eb/0x3c0 [ 282.258437][ T755] ieee80211_stop+0x1b1/0x240 [ 282.263100][ T755] ? __pfx_ieee80211_stop+0x10/0x10 [ 282.268325][ T755] __dev_close_many+0x364/0x6f0 [ 282.273161][ T755] ? __pfx___dev_close_many+0x10/0x10 [ 282.278656][ T755] netif_close_many+0x225/0x410 [ 282.283522][ T755] ? __pfx_netif_close_many+0x10/0x10 [ 282.290746][ T755] ? __mutex_trylock_common+0x153/0x260 [ 282.296340][ T755] ? __pfx___mutex_trylock_common+0x10/0x10 [ 282.302257][ T755] netif_close+0x158/0x210 [ 282.306694][ T755] ? __pfx_netif_close+0x10/0x10 [ 282.311613][ T755] ? trace_contention_end+0x39/0x120 [ 282.316985][ T755] ? __mutex_lock+0x335/0x1350 [ 282.321758][ T755] dev_close+0x10a/0x220 [ 282.326021][ T755] cfg80211_shutdown_all_interfaces+0xd4/0x220 [ 282.332160][ T755] ieee80211_remove_interfaces+0x109/0x6e0 [ 282.337983][ T755] ? __pfx_synchronize_rcu+0x10/0x10 [ 282.343254][ T755] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 282.349165][ T755] ? __pfx_ieee80211_remove_interfaces+0x10/0x10 [ 282.355511][ T755] ? rcu_is_watching+0x15/0xb0 [ 282.360262][ T755] ieee80211_unregister_hw+0x5d/0x2c0 [ 282.365771][ T755] mac80211_hwsim_del_radio+0x275/0x460 [ 282.371328][ T755] ? __pfx_mac80211_hwsim_del_radio+0x10/0x10 [ 282.377421][ T755] hwsim_exit_net+0x584/0x640 [ 282.382084][ T755] ? __pfx_hwsim_exit_net+0x10/0x10 [ 282.387315][ T755] ? __ip_vs_dev_cleanup_batch+0x238/0x260 [ 282.393123][ T755] ops_undo_list+0x49a/0x990 [ 282.397746][ T755] ? __pfx_ops_undo_list+0x10/0x10 [ 282.402863][ T755] ? do_raw_spin_unlock+0x122/0x240 [ 282.408223][ T755] cleanup_net+0x4c5/0x800 [ 282.412641][ T755] ? __pfx_cleanup_net+0x10/0x10 [ 282.417607][ T755] ? _raw_spin_unlock_irq+0x23/0x50 [ 282.422814][ T755] ? process_scheduled_works+0x9ef/0x17b0 [ 282.428595][ T755] ? process_scheduled_works+0x9ef/0x17b0 [ 282.434326][ T755] process_scheduled_works+0xae1/0x17b0 [ 282.439897][ T755] ? __pfx_process_scheduled_works+0x10/0x10 [ 282.445955][ T755] worker_thread+0x8a0/0xda0 [ 282.450541][ T755] kthread+0x70e/0x8a0 [ 282.454656][ T755] ? __pfx_worker_thread+0x10/0x10 [ 282.459766][ T755] ? __pfx_kthread+0x10/0x10 [ 282.464340][ T755] ? _raw_spin_unlock_irq+0x23/0x50 [ 282.469549][ T755] ? lockdep_hardirqs_on+0x9c/0x150 [ 282.474749][ T755] ? __pfx_kthread+0x10/0x10 [ 282.479323][ T755] ret_from_fork+0x439/0x7d0 [ 282.483915][ T755] ? __pfx_ret_from_fork+0x10/0x10 [ 282.489051][ T755] ? __switch_to_asm+0x39/0x70 [ 282.493798][ T755] ? __switch_to_asm+0x33/0x70 [ 282.498565][ T755] ? __pfx_kthread+0x10/0x10 [ 282.503143][ T755] ret_from_fork_asm+0x1a/0x30 [ 282.507969][ T755] [ 282.511003][ T755] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 282.518261][ T755] CPU: 1 UID: 0 PID: 755 Comm: kworker/u8:5 Not tainted syzkaller #0 PREEMPT(full) [ 282.527609][ T755] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 282.537642][ T755] Workqueue: netns cleanup_net [ 282.542391][ T755] Call Trace: [ 282.545650][ T755] [ 282.548560][ T755] dump_stack_lvl+0x99/0x250 [ 282.553128][ T755] ? __asan_memcpy+0x40/0x70 [ 282.557713][ T755] ? __pfx_dump_stack_lvl+0x10/0x10 [ 282.562891][ T755] ? __pfx__printk+0x10/0x10 [ 282.567494][ T755] vpanic+0x281/0x750 [ 282.571482][ T755] ? __pfx__printk+0x10/0x10 [ 282.576075][ T755] ? __pfx_vpanic+0x10/0x10 [ 282.580568][ T755] ? is_bpf_text_address+0x26/0x2b0 [ 282.585789][ T755] panic+0xb9/0xc0 [ 282.589516][ T755] ? __pfx_panic+0x10/0x10 [ 282.593943][ T755] __warn+0x31b/0x4b0 [ 282.597927][ T755] ? ieee80211_free_keys+0x536/0x650 [ 282.603221][ T755] ? ieee80211_free_keys+0x536/0x650 [ 282.608496][ T755] report_bug+0x2be/0x4f0 [ 282.612824][ T755] ? ieee80211_free_keys+0x536/0x650 [ 282.618103][ T755] ? ieee80211_free_keys+0x536/0x650 [ 282.623382][ T755] ? ieee80211_free_keys+0x538/0x650 [ 282.628655][ T755] handle_bug+0x84/0x160 [ 282.632890][ T755] exc_invalid_op+0x1a/0x50 [ 282.637385][ T755] asm_exc_invalid_op+0x1a/0x20 [ 282.642222][ T755] RIP: 0010:ieee80211_free_keys+0x536/0x650 [ 282.648117][ T755] Code: 00 00 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 09 5e c4 f6 90 0f 0b 90 e9 46 fc ff ff e8 fb 5d c4 f6 90 <0f> 0b 90 4c 8b 24 24 e9 7c fe ff ff e8 e9 5d c4 f6 e9 2f fe ff ff [ 282.667722][ T755] RSP: 0018:ffffc900031e7040 EFLAGS: 00010293 [ 282.673786][ T755] RAX: ffffffff8afb50c5 RBX: dffffc0000000000 RCX: ffff8880244ebc00 [ 282.681746][ T755] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 282.689711][ T755] RBP: ffffc900031e70f0 R08: ffffc900031e6de7 R09: 1ffff9200063cdbc [ 282.697675][ T755] R10: dffffc0000000000 R11: fffff5200063cdbd R12: 0000000000000001 [ 282.705683][ T755] R13: ffff8880558969d0 R14: 1ffff1100ab12d3a R15: 0000000000000000 [ 282.713654][ T755] ? ieee80211_free_keys+0x535/0x650 [ 282.718952][ T755] ? __pfx_ieee80211_free_keys+0x10/0x10 [ 282.724585][ T755] ? wiphy_work_cancel+0x1eb/0x3c0 [ 282.729692][ T755] ieee80211_do_stop+0xf47/0x1fb0 [ 282.734706][ T755] ? __lock_acquire+0xab9/0xd20 [ 282.739563][ T755] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 282.744927][ T755] ? __pfx_ieee80211_do_stop+0x10/0x10 [ 282.750381][ T755] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 282.756263][ T755] ? lockdep_hardirqs_on+0x9c/0x150 [ 282.761450][ T755] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 282.767770][ T755] ? wiphy_work_cancel+0x1eb/0x3c0 [ 282.772878][ T755] ieee80211_stop+0x1b1/0x240 [ 282.777542][ T755] ? __pfx_ieee80211_stop+0x10/0x10 [ 282.782732][ T755] __dev_close_many+0x364/0x6f0 [ 282.787846][ T755] ? __pfx___dev_close_many+0x10/0x10 [ 282.793216][ T755] netif_close_many+0x225/0x410 [ 282.798060][ T755] ? __pfx_netif_close_many+0x10/0x10 [ 282.803420][ T755] ? __mutex_trylock_common+0x153/0x260 [ 282.808967][ T755] ? __pfx___mutex_trylock_common+0x10/0x10 [ 282.814859][ T755] netif_close+0x158/0x210 [ 282.819265][ T755] ? __pfx_netif_close+0x10/0x10 [ 282.824189][ T755] ? trace_contention_end+0x39/0x120 [ 282.829462][ T755] ? __mutex_lock+0x335/0x1350 [ 282.834220][ T755] dev_close+0x10a/0x220 [ 282.838458][ T755] cfg80211_shutdown_all_interfaces+0xd4/0x220 [ 282.844607][ T755] ieee80211_remove_interfaces+0x109/0x6e0 [ 282.850400][ T755] ? __pfx_synchronize_rcu+0x10/0x10 [ 282.855671][ T755] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 282.861555][ T755] ? __pfx_ieee80211_remove_interfaces+0x10/0x10 [ 282.867871][ T755] ? rcu_is_watching+0x15/0xb0 [ 282.872634][ T755] ieee80211_unregister_hw+0x5d/0x2c0 [ 282.878003][ T755] mac80211_hwsim_del_radio+0x275/0x460 [ 282.883549][ T755] ? __pfx_mac80211_hwsim_del_radio+0x10/0x10 [ 282.889622][ T755] hwsim_exit_net+0x584/0x640 [ 282.894294][ T755] ? __pfx_hwsim_exit_net+0x10/0x10 [ 282.899487][ T755] ? __ip_vs_dev_cleanup_batch+0x238/0x260 [ 282.905291][ T755] ops_undo_list+0x49a/0x990 [ 282.909882][ T755] ? __pfx_ops_undo_list+0x10/0x10 [ 282.914985][ T755] ? do_raw_spin_unlock+0x122/0x240 [ 282.920180][ T755] cleanup_net+0x4c5/0x800 [ 282.924706][ T755] ? __pfx_cleanup_net+0x10/0x10 [ 282.929647][ T755] ? _raw_spin_unlock_irq+0x23/0x50 [ 282.934829][ T755] ? process_scheduled_works+0x9ef/0x17b0 [ 282.940534][ T755] ? process_scheduled_works+0x9ef/0x17b0 [ 282.946240][ T755] process_scheduled_works+0xae1/0x17b0 [ 282.951798][ T755] ? __pfx_process_scheduled_works+0x10/0x10 [ 282.957779][ T755] worker_thread+0x8a0/0xda0 [ 282.962380][ T755] kthread+0x70e/0x8a0 [ 282.966443][ T755] ? __pfx_worker_thread+0x10/0x10 [ 282.971540][ T755] ? __pfx_kthread+0x10/0x10 [ 282.976129][ T755] ? _raw_spin_unlock_irq+0x23/0x50 [ 282.981309][ T755] ? lockdep_hardirqs_on+0x9c/0x150 [ 282.986492][ T755] ? __pfx_kthread+0x10/0x10 [ 282.991077][ T755] ret_from_fork+0x439/0x7d0 [ 282.995656][ T755] ? __pfx_ret_from_fork+0x10/0x10 [ 283.000762][ T755] ? __switch_to_asm+0x39/0x70 [ 283.005516][ T755] ? __switch_to_asm+0x33/0x70 [ 283.010270][ T755] ? __pfx_kthread+0x10/0x10 [ 283.014850][ T755] ret_from_fork_asm+0x1a/0x30 [ 283.019620][ T755] [ 283.022892][ T755] Kernel Offset: disabled [ 283.027198][ T755] Rebooting in 86400 seconds..