last executing test programs: 2.926118125s ago: executing program 1 (id=3090): getsockname$packet(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r3, 0x0, 0x7, 0x0) write$cgroup_int(r3, &(0x7f0000000040)=0x1ff, 0x12) writev(r1, &(0x7f0000000100)=[{&(0x7f0000000140)='Y', 0x1}], 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) socket(0x15, 0x5, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r4, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x803}, 0xe) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_tracing={0x1a, 0x2, &(0x7f0000000180)=@raw=[@ldst={0x2, 0x0, 0x3, 0x2, 0x4, 0x100}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}], &(0x7f00000001c0)='syzkaller\x00', 0x3, 0xd2, &(0x7f0000000200)=""/210, 0x41000, 0x4, '\x00', 0x0, 0x19, r2, 0x8, &(0x7f0000000400)={0x101, 0x4}, 0x8, 0x10, &(0x7f0000000440)={0x4, 0xd, 0xfffffe5a, 0x96}, 0x10, 0x272ac, r2, 0x0, &(0x7f0000000480)=[r3, r2, r3, r2, r3, r2, 0x1], 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000005c00)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) r6 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r6, 0x400448c8, &(0x7f0000000340)={r4, r4, 0x8, 0x0, 0x0, 0xb, 0x81, 0x46d, 0xfff9, 0x3, 0x0, 0x8, 'syz0\x00'}) shutdown(r4, 0x1) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0) r7 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r7, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) sendto$inet(r7, &(0x7f0000000300)="ab", 0x1, 0x0, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10) ioctl$sock_inet_sctp_SIOCINQ(r7, 0x541b, &(0x7f0000000080)) 2.566853808s ago: executing program 4 (id=3097): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0x3, &(0x7f0000000940)=ANY=[], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='tcp_cong_state_set\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = socket$netlink(0x10, 0x3, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x40}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x4c}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0xd3}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_EVENTS(r6, 0x84, 0xb, &(0x7f0000000580), &(0x7f0000000180)=0x1) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) read(r7, &(0x7f0000005f40)=""/175, 0xaf) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=@newlink={0x40, 0x10, 0xd8a88b3807bbf5cf, 0x0, 0x0, {0x0, 0x0, 0x7}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r9}, @IFLA_HSR_SLAVE1={0x8, 0x1, r11}]}}}]}, 0x40}}, 0x0) syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={0x0}, 0x1, 0x0, 0x0, 0x24004000}, 0x24040840) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0x3, &(0x7f0000000940)=ANY=[], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r12 = socket$kcm(0x2, 0x1, 0x106) sendmsg$inet(r12, &(0x7f0000000080)={0x0, 0x3, 0x0}, 0x30004001) 1.995559629s ago: executing program 1 (id=3104): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_sctp(0x2, 0x1, 0x84) syz_init_net_socket$netrom(0x6, 0x5, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) socket$nl_rdma(0x10, 0x3, 0x14) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000340)=ANY=[@ANYBLOB="18020000020000000000000000000000850000000700000085000000a000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) recvmmsg(r1, &(0x7f0000001980), 0x0, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r0, @ANYBLOB="08000100", @ANYRES32=r3], 0x90}}, 0x0) 1.917788574s ago: executing program 2 (id=3105): socket$inet6_sctp(0xa, 0x1, 0x84) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) unshare(0x20040600) sendto$inet6(r0, &(0x7f0000000340)="a4", 0x1, 0x4000, &(0x7f0000000400)={0xa, 0x4e20, 0x0, @private1}, 0x1c) sendto$inet6(r0, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) shutdown(r0, 0x1) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, &(0x7f0000000240)={0x1f, 0x3, 0x0, 0x0, 0x0, 0x0, 0x3}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) 1.853507768s ago: executing program 1 (id=3106): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = socket$unix(0x1, 0x2, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) r3 = epoll_create(0x3d325564) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000200)={0x2003}) connect$unix(r2, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r2, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) connect$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ppoll(&(0x7f0000000400)=[{r2, 0x1114}, {r1, 0x1620}], 0x2, 0x0, 0x0, 0x0) close(r0) 1.709480667s ago: executing program 1 (id=3107): setsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES16, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket(0x10, 0x2, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) socket$l2tp6(0xa, 0x2, 0x73) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYRES32, @ANYRES16=r0, @ANYRES16=r3, @ANYRES32, @ANYBLOB='\x00'/25], 0x48) setsockopt(0xffffffffffffffff, 0x84, 0x80, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r4) socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socket$kcm(0xa, 0x2, 0x3a) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="010b000a0000000000000e00000008000300", @ANYRES32=r8], 0x1c}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="150000000800000004000000000000004c100000", @ANYRES32=0x1, @ANYBLOB="eaffffff00"/15, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) sendmsg$nl_netfilter(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="1400930d5ff3a600000c01010129bd7000fddbdf"], 0x14}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0bfc0000000000000000020000000900010073797a30000000000900020073797a320000000014000000110001cc"], 0x54}, 0x1, 0x0, 0x0, 0x40820}, 0x0) close(r1) 1.656287533s ago: executing program 4 (id=3108): socket$nl_audit(0x10, 0x3, 0x9) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller0\x00', 0x1}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r2, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller0\x00', @random="371692e7f7ef"}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f00000002c0)) close(r3) socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random='\x00\a\x00'}) 1.591494761s ago: executing program 1 (id=3110): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x1e, 0x4, 0x3, 0x3, 0x420, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{r1}, 0x0, &(0x7f0000000480)}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x1a, 0x0, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000180)=0x44, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10) ioctl$sock_netdev_private(0xffffffffffffffff, 0x89f1, 0x0) sendto$inet(r0, &(0x7f0000000700)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff959bcecc7a95425a3a07e758044ab4ea6f7c555d88fecf90b037511bf746bec66ba", 0x994b6e03113064ae, 0x0, 0x0, 0x0) recvmsg(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)=[{0x0}], 0x1, 0x0, 0x0, 0x407006}, 0x104) 1.492762498s ago: executing program 0 (id=3111): r0 = socket(0x1e, 0x4, 0x0) connect$tipc(r0, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) sendmmsg$unix(r0, &(0x7f0000004400), 0x400000000000203, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10) r1 = socket$inet(0xa, 0x801, 0x84) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r2, 0xfffffffd) listen(r1, 0x8) r3 = socket$inet(0xa, 0x801, 0x84) listen(r3, 0x8) r4 = socket$inet(0xa, 0x801, 0x84) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) listen(r5, 0x100) listen(r4, 0x8) r6 = socket$inet(0xa, 0x801, 0x84) r7 = socket$inet_sctp(0x2, 0x5, 0x84) r8 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000002f00)={0x0, 0x0, 0x0}, &(0x7f0000002f40)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_CONTEXT(r7, 0x84, 0x11, &(0x7f0000000180)={r9, 0x8}, &(0x7f00000001c0)=0x8) listen(r6, 0x1) r10 = socket$netlink(0x10, 0x3, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r10) writev(r10, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600000000590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x40b}], 0x1) connect$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x2, {0x40, 0x3}}, 0x10) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="240000001e000100000000000000000002000000010000000000000008"], 0x24}}, 0x0) 1.409107635s ago: executing program 4 (id=3112): getsockname$packet(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r3, 0x0, 0x7, 0x0) write$cgroup_int(r3, &(0x7f0000000040)=0x1ff, 0x12) writev(r1, &(0x7f0000000100)=[{&(0x7f0000000140)='Y', 0x1}], 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) socket(0x15, 0x5, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r4, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x803}, 0xe) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_tracing={0x1a, 0x2, &(0x7f0000000180)=@raw=[@ldst={0x2, 0x0, 0x3, 0x2, 0x4, 0x100}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}], &(0x7f00000001c0)='syzkaller\x00', 0x3, 0xd2, &(0x7f0000000200)=""/210, 0x41000, 0x4, '\x00', 0x0, 0x19, r2, 0x8, &(0x7f0000000400)={0x101, 0x4}, 0x8, 0x10, &(0x7f0000000440)={0x4, 0xd, 0xfffffe5a, 0x96}, 0x10, 0x272ac, r2, 0x0, &(0x7f0000000480)=[r3, r2, r3, r2, r3, r2, 0x1], 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000005c00)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) r6 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r6, 0x400448c8, &(0x7f0000000340)={r4, r4, 0x8, 0x0, 0x0, 0xb, 0x81, 0x46d, 0xfff9, 0x3, 0x0, 0x8, 'syz0\x00'}) shutdown(r4, 0x1) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0) r7 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r7, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) sendto$inet(r7, &(0x7f0000000300)="ab", 0x1, 0x0, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10) ioctl$sock_inet_sctp_SIOCINQ(r7, 0x541b, &(0x7f0000000080)) 1.408216712s ago: executing program 3 (id=3113): r0 = socket$igmp6(0xa, 0x3, 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00110c0000001400000f0007000000", @ANYRES32=r3, @ANYBLOB="800202000a000200577f0000aabb000020000e80050001008f000000050001000100000004000200050001"], 0x48}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000006c0)={'ip6gre0\x00', &(0x7f0000000640)={'ip6_vti0\x00', 0x0, 0x4, 0x1, 0xfc, 0xbe22, 0x62, @empty, @rand_addr=' \x01\x00', 0x40, 0x7, 0x4, 0x6}}) sendmsg$nl_route(r1, &(0x7f0000000840)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000800)={&(0x7f0000000700)=@bridge_getneigh={0xd8, 0x1e, 0x300, 0x70bd25, 0x25dfdbfe, {0x7, 0x0, 0x0, r3, 0x400, 0x84}, [@IFLA_PROP_LIST={0x7c, 0x34, 0x0, 0x1, [{0x14, 0x35, 'veth1_vlan\x00'}, {0x14, 0x35, 'vlan0\x00'}, {0x14, 0x35, 'wg0\x00'}, {0x14, 0x35, 'nicvf0\x00'}, {0x14, 0x35, 'vlan0\x00'}, {0x14, 0x35, 'bridge0\x00'}]}, @IFLA_VF_PORTS={0x20, 0x18, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0x6, 0x2, '\xff\xff'}, @IFLA_PORT_PROFILE={0xf, 0x2, 'syzkaller0\x00'}]}]}, @IFLA_IFALIASn={0x4}, @IFLA_NET_NS_PID={0x8}, @IFLA_LINKMODE={0x5, 0x11, 0x3}, @IFLA_LINK={0x8, 0x5, r4}]}, 0xd8}, 0x1, 0x0, 0x0, 0x20000044}, 0x48040) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x18) r5 = socket$netlink(0x10, 0x3, 0x15) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'aegis256-aesni\x00'}, 0x58) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="04010000100053"], 0x104}, 0x1, 0x0, 0x0, 0x20040890}, 0x200080c0) r7 = syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/pid\x00') bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@cgroup=r7, 0x11, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0}, 0x40) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r9 = accept4(r8, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f00000002c0), r9) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)={0x114, 0x32, 0x1, 0x0, 0x0, "", [@nested={0x101, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@loopback}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd"]}]}, 0x114}], 0x1}, 0x0) r10 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x9, [@decl_tag={0x10, 0x0, 0x0, 0x11, 0x4, 0x6}, @volatile={0x5, 0x0, 0x0, 0x9, 0x1}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x4, 0x7}}]}, {0x0, [0x61, 0x30, 0x0, 0x61, 0x61, 0x30, 0x5f]}}, &(0x7f0000000100)=""/31, 0x55, 0x1f, 0x0, 0x1ff, 0x0, @void, @value}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@bloom_filter={0x1e, 0x8, 0x6, 0x1ff, 0x3520, 0xffffffffffffffff, 0x1, '\x00', 0x0, r10, 0x5, 0x1, 0x2, 0xd, @void, @value, @void, @value}, 0x50) 1.38160327s ago: executing program 0 (id=3114): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r0, &(0x7f0000003540)=[{{&(0x7f0000000040)={0x2, 0x0, @private=0xa010100}, 0x10, &(0x7f00000006c0)=[{&(0x7f00000003c0)="b792b6c728", 0x5}], 0x1}}, {{&(0x7f0000000740)={0x2, 0x0, @loopback}, 0x10, &(0x7f0000001a40)=[{&(0x7f0000000780)="e4", 0x1}], 0x1}}], 0x2, 0x0) r1 = socket(0x21, 0x2, 0xa) getsockopt$nfc_llcp(r1, 0x110, 0x6, 0x0, 0x20000000) r2 = socket$inet6(0xa, 0x3, 0x3c) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x2, 0x0, &(0x7f0000000100)="06ff", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000b00)=ANY=[@ANYBLOB="0600000004000000be45b9005c"], 0x48) setsockopt$inet6_IPV6_RTHDR(r2, 0x29, 0x39, &(0x7f0000000f00)=ANY=[@ANYBLOB="0002020100000008ff"], 0x18) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0xffffffff, @dev, 0x9}, 0x1c) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000100)="88", 0xfdef}], 0x1) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x4, {0x0, 0x0, 0x0, 0x0, 0x2a4c4}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_NET_NS_PID={0x8}]}, 0x3c}}, 0x0) setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f00000000c0)=0xcd5e, 0x4) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x64, 0x30, 0x1, 0x0, 0x0, {}, [{0x50, 0x1, [@m_ct={0x4c, 0x1, 0x0, 0x0, {{0x7}, {0x24, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}, @TCA_CT_ACTION={0x6, 0x3, 0x38}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x10}, 0x0) 1.288107644s ago: executing program 0 (id=3115): r0 = socket$alg(0x26, 0x5, 0x0) r1 = accept4(r0, &(0x7f0000000100)=@qipcrtr, &(0x7f0000000180)=0x80, 0x80000) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r2, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r3 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r3, 0x0, 0x42, &(0x7f0000000000)={'HL\x00'}, &(0x7f0000000040)=0x1e) getsockopt$IPT_SO_GET_REVISION_MATCH(r3, 0x0, 0x42, &(0x7f0000000080)={'TPROXY\x00'}, &(0x7f00000000c0)=0x1e) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x4e20, 0x9, @private0={0xfc, 0x0, '\x00', 0x1}}}, 0x4, 0x1000, 0xb, 0x8, 0x98, 0x0, 0x5}, &(0x7f0000000200)=0x9c) getsockopt$inet_sctp_SCTP_MAXSEG(r4, 0x84, 0xd, &(0x7f00000003c0)=@assoc_id=r5, &(0x7f00000005c0)=0x4) getsockopt$IPT_SO_GET_REVISION_MATCH(r3, 0x0, 0x42, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, 0x0, 0x20050800) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0xf8}], 0x1, 0x0, 0x0, 0xf5ffffff}, 0x0) sendmsg$tipc(r8, &(0x7f0000000240)={0x0, 0x18, &(0x7f00000000c0), 0x31}, 0x0) bind$alg(r0, &(0x7f00000007c0)={0x26, 'rng\x00', 0x0, 0x0, 'jitterentropy_rng\x00'}, 0x58) 1.071134977s ago: executing program 2 (id=3116): socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000adf000/0x4000)=nil, 0x4000, 0x4, 0x8010, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r1 = socket$key(0xf, 0x3, 0x2) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="60000000020605000000000000000000000000001400078008000640001b0000080013400000000205000100060000000900020073797a32000000000500040000000000050005000a00000011000300686173683a69702c6d61726b"], 0x60}}, 0x0) r3 = socket(0xa, 0x1, 0x0) setsockopt(r0, 0xc, 0xff, &(0x7f00000006c0)="60e914184d921edfe93ad0497c7df432971381d339dfaa9f2fc2725970f3e3b5d558ddc2dfc6ba23c42d296fff06eb96df3593e897e0158957804ccee314ccb5012ca390614d7812f23f3e306beec24101cf50380dcb1daa0b94ff28b64172e446b39b88d6da0be9efe65e8132d3a5199cc41f04a66118d37db49c7aa3369126163194a3e6d02e7e68bb8f08c92bf6408d4d65fdf84a665f2dc28e65ac71cd17e980f07d34a573e8f9003f79a15b473d0f4538dfc6f9049b837cfbf84a8f48ed8fec6376a4203e6d7d4dea1074f3bc1339f648bef23dc59427fee13701c618ad36e2097aa552212bd5e243867795c5f8a7f87c092b1223008ce1d673be884d", 0xff) close(r3) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000020c0)=[@in={0x2, 0x4e21, @local}]}, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, 0x0, &(0x7f0000000140)) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x13, 0x10, 0x2, 0x0, 0x100, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x30) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000180)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {0x7, 0x0, 0xb, 0x2}, {0x85, 0x0, 0x0, 0x51}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0xb6}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[], &(0x7f0000000000)='GPL\x00', 0xa, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0), r1) getsockopt(r3, 0x79, 0x2, &(0x7f00000005c0)=""/149, &(0x7f0000000680)=0x95) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r6, &(0x7f0000000200)='devices.list\x00', 0x0, 0x0) socket$igmp(0x2, 0x3, 0x2) 1.019382361s ago: executing program 2 (id=3117): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0xff, r3}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) r4 = socket$inet(0x2, 0x3, 0x2) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r5 = socket(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000300)={0x28, 0x0, 0x0, @my=0x0}, 0x10) recvmmsg$unix(r5, &(0x7f0000000100)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x8000000}], 0x1, 0x0, 0x0) connect$pppoe(r5, 0x0, 0x0) setsockopt$inet_mreqsrc(r4, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local}, 0xc) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_msfilter(r6, 0x0, 0x23, &(0x7f0000004b00)=ANY=[@ANYBLOB="e0000808ac1414aa"], 0x10) 909.582176ms ago: executing program 2 (id=3118): socket$vsock_stream(0x28, 0x1, 0x0) unshare(0x6a040000) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x9) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmmsg(r2, &(0x7f0000002840), 0x0, 0x20044000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f00000004c0)={0x1f, 0xffff, 0x3}, 0x6) write(0xffffffffffffffff, 0x0, 0x0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$FOU_CMD_GET(0xffffffffffffffff, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x38, r5, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}}, 0x0) sendmsg$FOU_CMD_ADD(r3, 0x0, 0x4801) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r6, @ANYBLOB="010000000000fbdbdf250100000008000200000000000500050000000000080003000100000048000180050002002000000006000100020000000800060003000000080003"], 0x84}}, 0x20000000) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x8, 0x3, 0x490, 0x360, 0xa, 0x148, 0x360, 0x60, 0x3f8, 0x2a8, 0x2a8, 0x3f8, 0x2a8, 0x3, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'bridge0\x00', 'rose0\x00'}, 0x0, 0x2f8, 0x360, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'veth1_to_team\x00', {0x0, 0x0, 0x2, 0x0, 0x4, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x8601, 0x6, './file0\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x1, 0x6, 0x3, 0x81, 'snmp_trap\x00', 'syz0\x00', {0x30f6a663}}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@MARK={0x28}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x4f0) 676.661413ms ago: executing program 1 (id=3119): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0x3, &(0x7f0000000940)=ANY=[], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='tcp_cong_state_set\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = socket$netlink(0x10, 0x3, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x40}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x4c}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0xd3}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_EVENTS(r6, 0x84, 0xb, &(0x7f0000000580), &(0x7f0000000180)=0x1) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) read(r7, &(0x7f0000005f40)=""/175, 0xaf) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=@newlink={0x40, 0x10, 0xd8a88b3807bbf5cf, 0x0, 0x0, {0x0, 0x0, 0x7}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r9}, @IFLA_HSR_SLAVE1={0x8, 0x1, r11}]}}}]}, 0x40}}, 0x0) syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={0x0}, 0x1, 0x0, 0x0, 0x24004000}, 0x24040840) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0x3, &(0x7f0000000940)=ANY=[], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r12 = socket$kcm(0x2, 0x1, 0x106) sendmsg$inet(r12, &(0x7f0000000080)={0x0, 0x3, 0x0}, 0x30004001) 607.889559ms ago: executing program 2 (id=3120): setsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES16, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket(0x10, 0x2, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) socket$l2tp6(0xa, 0x2, 0x73) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYRES32, @ANYRES16=r0, @ANYRES16=r3, @ANYRES32, @ANYBLOB='\x00'/25], 0x48) setsockopt(0xffffffffffffffff, 0x84, 0x80, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r4) socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socket$kcm(0xa, 0x2, 0x3a) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="010b000a0000000000000e00000008000300", @ANYRES32=r8], 0x1c}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="150000000800000004000000000000004c100000", @ANYRES32=0x1, @ANYBLOB="eaffffff00"/15, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) sendmsg$nl_netfilter(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="1400930d5ff3a600000c01010129bd7000fddbdf"], 0x14}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0bfc0000000000000000020000000900010073797a30000000000900020073797a320000000014000000110001cc"], 0x54}, 0x1, 0x0, 0x0, 0x40820}, 0x0) close(r1) 535.883244ms ago: executing program 2 (id=3121): r0 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x40000000000012d, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x17, &(0x7f0000000180)=0x6, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xfe0, &(0x7f0000001040)={@broadcast, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xfd2, 0x0, 0x0, 0x8, 0x11, 0x0, @empty, @empty}, {0x4e23, 0x4e20, 0xfbe, 0x0, @wg=@data={0x4, 0x5f, 0x2, "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"}}}}}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) bind$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) syz_emit_ethernet(0xfe, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, 0x0, 0x0) getsockopt$XDP_STATISTICS(r2, 0x11b, 0x7, 0x0, 0x0) syz_genetlink_get_family_id$ieee802154(0x0, r1) 477.834106ms ago: executing program 4 (id=3122): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f00000045c0)) syz_init_net_socket$ax25(0x3, 0x2, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket(0x2, 0x80805, 0x0) socket$tipc(0x1e, 0x5, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x14}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x8f) socket$tipc(0x1e, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400000006000000005dcc0300", @ANYRES32=r2, @ANYBLOB="71e79fd800000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r3], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x2c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x74, r2, {0xffe0}, {}, {0xa, 0x1}}, [@TCA_RATE={0x6, 0x5, {0x39, 0x1}}]}, 0x2c}, 0x1, 0xf0ffffffffffff, 0x0, 0x4004140}, 0x0) 472.924816ms ago: executing program 3 (id=3123): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) socket$inet6(0xa, 0x2, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_init_net_socket$llc(0x1a, 0x1, 0x0) socket$alg(0x26, 0x5, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r0, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r2}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) 410.414057ms ago: executing program 3 (id=3124): r0 = socket(0x1e, 0x4, 0x0) connect$tipc(r0, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) sendmmsg$unix(r0, &(0x7f0000004400), 0x400000000000203, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10) r1 = socket$inet(0xa, 0x801, 0x84) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r2, 0xfffffffd) listen(r1, 0x8) r3 = socket$inet(0xa, 0x801, 0x84) listen(r3, 0x8) r4 = socket$inet(0xa, 0x801, 0x84) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) listen(r5, 0x100) listen(r4, 0x8) r6 = socket$inet(0xa, 0x801, 0x84) r7 = socket$inet_sctp(0x2, 0x5, 0x84) r8 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000002f00)={0x0, 0x0, &(0x7f0000002ec0)}, &(0x7f0000002f40)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_CONTEXT(r7, 0x84, 0x11, &(0x7f0000000180)={r9, 0x8}, &(0x7f00000001c0)=0x8) listen(r6, 0x1) r10 = socket$netlink(0x10, 0x3, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r10) writev(r10, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600000000590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x40b}], 0x1) connect$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x2, {0x40, 0x3}}, 0x10) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="240000001e000100000000000000000002000000010000000000000008"], 0x24}}, 0x0) 297.540521ms ago: executing program 0 (id=3125): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x2, 0x8, &(0x7f0000000240)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0xb2}, {0x7, 0x0, 0xb, 0x7}}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = socket$nl_rdma(0x10, 0x3, 0x14) r3 = syz_open_procfs$namespace(0x0, &(0x7f00000001c0)='ns/cgroup\x00') ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x2012, r4, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x8, 0x4, &(0x7f0000000000)=@framed={{}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}]}, &(0x7f0000000080)='syzkaller\x00', 0x4, 0xff7, &(0x7f0000002e00)=""/4087, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000500), 0x8) sendmsg$NFQNL_MSG_VERDICT(r5, &(0x7f00000005c0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000800)={0x18, 0x1, 0x3, 0x0, 0x0, 0x0, {}, [@NFQA_CT={0x4}]}, 0x18}}, 0x0) sendmsg$RDMA_NLDEV_CMD_SET(r2, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)={0x2c, 0x1402, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r3}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz0\x00'}]}, 0x2c}}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) r7 = socket$netlink(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, 0x2, 0x2, 0x201, 0x0, 0x0, {}, [@CTA_EXPECT_HELP_NAME={0x5, 0x6, '\x00'}]}, 0x1c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000ae5000/0x1000)=nil, 0x1000, 0xd, 0x11, 0xffffffffffffffff, 0x1000) mmap(&(0x7f00005fe000/0x4000)=nil, 0x4000, 0x0, 0x12, 0xffffffffffffffff, 0x2000) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, 0xffffffffffffffff, 0x1000) sendto$inet6(r0, 0x0, 0x0, 0x24000000, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x8}, 0x1c) recvmsg(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000002c0)=""/106, 0x6a}], 0x1}, 0x2) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1, 0x31, r0, 0x8871b000) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x937, @ipv4={'\x00', '\xff\xff', @local}, 0x7f}, 0x1c) 289.682363ms ago: executing program 4 (id=3126): setsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES16, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket(0x10, 0x2, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) socket$l2tp6(0xa, 0x2, 0x73) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYRES32, @ANYRES16=r0, @ANYRES16=r3, @ANYRES32, @ANYBLOB='\x00'/25], 0x48) setsockopt(0xffffffffffffffff, 0x84, 0x80, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r4) socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socket$kcm(0xa, 0x2, 0x3a) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="010b000a0000000000000e00000008000300", @ANYRES32=r8], 0x1c}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="150000000800000004000000000000004c100000", @ANYRES32=0x1, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) sendmsg$nl_netfilter(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="1400930d5ff3a600000c01010129bd7000fddbdf"], 0x14}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0bfc0000000000000000020000000900010073797a30000000000900020073797a320000000014000000110001cc"], 0x54}, 0x1, 0x0, 0x0, 0x40820}, 0x0) close(r1) 205.089902ms ago: executing program 3 (id=3127): r0 = socket$inet(0x2, 0x2, 0x1) connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r0, &(0x7f0000000500)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="08001497733f5d3e", 0x8}], 0x1}}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000400)="2841baed08e5fb4c", 0x8}, {0x0}], 0x2}, 0x3000000}], 0x2, 0x2004000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000001080)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$bt_hci(r3, 0x84, 0x6d, &(0x7f0000000000)=""/4102, &(0x7f0000001040)=0x1006) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.current\x00', 0x275a, 0x0) setsockopt$packet_int(r2, 0x107, 0x16, &(0x7f0000000000), 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{0x1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f00000001c0)={0x0, @empty, @dev}, &(0x7f0000000200)=0xc) syz_emit_ethernet(0x86, &(0x7f0000000440)={@link_local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "fec000", 0x4c, 0x3a, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, {[], @ni={0x4e8ef1decde2b390, 0x0, 0x0, 0x1, 0x2, 0xa6f, "6575f14d4a4a0aa99b83e9e84fd0f6b750a21a842e3a344ab5b9535ea0d6e36069b66dfc337e0893431a93d4ce637bd5a3903871a3bc76c1e3dc9d5e"}}}}}}, 0x0) r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000240)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000280)={0x1b, 0x0, 0x0, 0xfffffff9, 0x0, r4, 0x6, '\x00', r5, r6, 0x5, 0x3, 0x2, 0x0, @void, @value, @void, @value}, 0x50) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000580)=ANY=[@ANYBLOB="141000002500090003000000fddbdf2502000000ad26c90edee4c071c2441d83dbf078da923026a4c187f2fb04796ca0f68946697869437cb336552dfe4b069aaa48e96b8cc54c0a7b9e4649fe2007b569ba2a2f5f9f871971962ca03c2dbe0fd91993f000abea2bc90ba4c808a41fa8600dd5fae5c892907a40d517a456d66dd584245942f8028f261cc9f9aac0195b3587d7434dec0fd8bb0af1caec525dac4816729ddee63bc09834ef8055da656c03133fd37d108c89a9b5686c7f616be71470331f229d218e80457d00b68115d357ce66ea1da3ba93c76e62b2bc816752264ac859e65d5221b7f720d3b0e4e3d54db205d2ffbd4e5c50885a4f0797645488e9eb096e97ba2da430ce18d71851558334f37e18ed23a57bac75e6ead33c857d65f27eb281ea799f815c558817bbd3c63aecd45b06692453b97a20485a6232428dc3bc48f403ddfdae4c94aeb490726e03c3b1c2a020d7de95e565307b1e8a983d0c64078bee8bd06ca9d420dd2deedb5e5bea76cc491774f5dd7ca7d8182c11a354407ffdf5b56881c264795582414cb3d261dc0950d457d1dfe47f27220cefcbcf067222de5789155c7dd7cbcc56cc16193910a5da7f191cdecacc919e0300d5a7c6c6bfbbcc63eadb37203f228d90e06ce736c1e4049f0f3344686f6f1656691f79c8cf8db0781319042ff0144d63b91f13cbe574eec509bee2b641a095928904379ebf9fd2574254014bebbb545d84a761d218e8e4b5392b84ef51e31dcf7077ef4236050855eec6a023260e5abf09d0c4ef373e1ebe58355f7cf432176b7e05e1a3e1b54b168ccb27e3a430fdabc18e8d91d0121c53dd29b8858265bb768f1ba161a2d7158ffae2d6026fce76098bfdba8bd099cd6f91de6b193e6009de5439ee1a9d700a9f67f1e2f614780eb5570ccda9c279a8ebbeafc0b080ef2d89361f5e272814cb729d1add0586dd8cc71afa2ea6f93b50eeb5b599aa95dba56f60071ae5fad0a48bbee4e66eeb39fe11d5d08c8e594f360d3901808ef6adf712b439afdf38510a206909dd0581cba59d2ead6d66d8a748bb6ade05568d9c5c64d556fdf906a50c23b48914bd1bada3a8d25c81472b484888c0aed363b7d3d0c491a3c9fef4a6692a3239e20504253bec355a9592fdc9cc77b8a082228b7934a58863b7214259f616df2be5445fca80c97051049ef13d05d471dcd2be48f9b9e697cafd244cfdb74c21f500d0d7d8e9ef6a0e338e854853c105e1cca93ff54cdcfb0aaf3b7549394ecce76683d5122744cb2895f583c1c4c31987393c5846bb9b781454c2ac9f775737525d7541f25e304de7e2ff4800f26058034b59241175c9d47e02b994850cbd988ad677d884b604cb4a7de72e12459a693a8bbe86174ba165154f89840eb7b7cf9d7bd51037f9abe41616b92f0da8dbff4e8905278eba716c351f904530305d17e7b5d123e369737e0f67a3d486bf28027f56a55c1fae794f98234003f7ac3363f8ce13854464b03078da8be3f846785e77a252741a7ca40caf236420ad42df90bdcf7336d8ddedc49b2e9c95301f00d5c2e226e5f45c09cda7f0c43ec49547287327be7a9c563d8df89c150d31b2f078a5e552b4f5a75a6759506a948e9d4188a604f3b799b456adbffae77a940891832c635bb5ec7da549accb76abcfd8518f406bde6d55f27c2a05a624d4c9f35580f0d8e0dafc69ed4cee4985d75d90ed432e06ba289a1b01c68e09d35361f59e9b03a315d8e2630a3dba641a5838b1ac8b4b309f3795cca3ae32bf11032dfa75668f4efbc53ec12fcb433e3fcdfb8046f6dd5310e2b455d46c9bdb18cb961fe513b0924bacc853c97b98f4617379127d0de8ee41df5b30844adb277c8f3a04e634e486c5c17d5619eae05813dcee19af823c7c241d1ab8aa517916fc0b6868acbe96135d10933cb344c1953542a254d38ae97ffed4899d2e664fef1b0d874c55f5fcd6df924a61e7e156f790bb765be5295aabe977efe1ddb4fcec4d34610556e10bc88f6dec3e3cb964e13c4171aae7bd6971c32535b5eef74e4bbcb4b0a34a2d61ffb4d7263b8a47272af2228b15154b81c1afb8c4ecd3fb7f7dcfcd2a1f95ce10d845af7477160c76c97e1c8cb0c18502877827ff262f32d3afe8dc1cfccb34c58888e6f23145b703f46bb17b8431c8c4048fee236f0e17ad43863fc05cd84942377821587d29536e546f9ed853b770e9276ad063cc1e13f97f2373b9137bb799a775592afd969a9965ab8b47f1d484b0b997fdbb283b300199872084ca18fd0b41a4b2d88b25df70095b2c3cc68094736836417907bbc2ab646abc01cb5653e08fdc1e8303ecc7898ff313b9baaf4ec40f5c23f6fb9260bce1da8801efb95cccac2003f393ee8dd8600cfb76419613b17efe684ada03d7e801766d607180aa9f9056b7823f8395e712898049f8cbbd55207a512e64c882e33d3723d47c8dbb30d375a4601e532d4ce9115d6b6ba73bd30390df63ca24d6065e4413251d34eee95d3c64a4a56fdbfe495ab7b56e8c0ca0a3f5ded96f5c4b5d28c934a5d00521a1a4df8b5811bbfd61331ae4cfada00750fc5f133c5a44b85c42a7d19376eebb13feff4c346d0ad97814d85c25669fc6e839de0b26ceabc859ab69d985bc5863d2ab7ed5beeaf47f6e406683a0cbc0f6511b245808adf7c0bb89d5f14b22d93026bf14ff94428353b70dd8e3ce7ed83f41226e374e074dc8ee061f2d189fef93d489d0d97a10e572b8cfbdc8a2b171f5d8f0ca3abc9de567a3d46c756323ff2c270e8e92a5fd1fc56d1e4319c234fb692a9e64e054b0a5d285031f10cc9fedc79434b2c4b216451f7a74f8ad7eb9a5e866194b64863dd34f19991e7363c24db30363717c1ea08488b843a0b5be0dda9d5fac82721a929cbd26bafe0b5a009ced0c547a1c1964b68375504a554aba1b87e3515ca4782c0d3b7a30014504647cb0df96acd38a5366bb81db5f348255fcf1428c25ff7363a0dd8961f1f559f19a644f7120d13c6c85aebdc45ce45db7851c68629aa245cd02a1c3f57f27df7914032dc93d7cd6320066152a28ae450392c358918f78cbb3567cd3db8192f7493672e6b77b9934e5a1e62e9a91661fec239f4d6b868c02b640e60c40f04292baae7c367da2a3c5e17d5671ff00a83be4b773945e50089a60c0cb2ad7da45e41987dcf906bce8e441782f627917d9cb7ceeb2d7f058a8bf4476010054fdfa9c38167194861d3ef874cbacb0259594b4f9d5ff3102cbbb5721786d8a2fb000263eb7792db66405b19e2884d0b03b480326bdf10e86a5a980e2e799c0ac741fd1d8764b5a58f5bcc3cb5959258c8d6cb1aca04fb46f750f9eae2a6d1ac5ee8451b643e64e7ef0caa4e23e9e27e318a763e5fe3a07444ffa4098b7e3d687f902b563d926c147edf3b300ca63d5ded94fd57f8065ff8ddc79d71aea5da8bdfcbb2433bea5c158ddc4e6d58cce91ab37a7f896101facc4c2a167dfaefa92977317227850f64bcc404576f635af2773c3910d53b100975ad6aa50bda138e046f04cca1515dd32a95de44a1db477d903baa8c4bd58c9fe673d0aef3109663581a72f79ba10c23ba8cad3b9a5b72fd1be1d9fab0e2def625ec1d9dbdedc6e801c9af9b8b326fd0dbf9471b976e7e58bcd48723422a8e1179296b9b55671ae88efc108e8f1ee5226c04b58bfc501610eb95af2d877c0dc65a5bd7cfa971b72f343fff02efe5fa3b225eb94b02337e3b0ba7bad912c53a392d1f00b5d41a0655925ef73a7ffd30a8f8261695ef61c2d3321dc44bdd0eabc771eeb651fc03b4593d623ddb451305ffbab6166cd3dd66b3907f17f1121250031e757512786b3153082a1909893fa5f90cc95fe0ded8e6bbfee7cd1cea895b858e66e86127998f8a4a79aa30a2256dfc9d4d7acdd5123b76308f4354f5cd96d6fc2212997a19987525a95b1f2fa2f3e80790172ef91183701c7e7c71c9d5a5e2dc234cc89f98cc36fc101b05a5a8a646c040286bb59344d6e81c5d6dd7026bb5b5ec72ed2794211bc65122d8cbcffa1e7d47a7afa2e85d3289fc88c85d6a3c5427f690b9d36c702010bb4f72befe9556383e4b6f1c643cb9788d8b3ea04fd90a57ee143b62890c11261bba1eb48a68159f7d6a2a985c67015946df39a65f1e190352be14b4590dddaa740ae1c331c44156ddbaf31781a60d22142d48954a1e4cf71bbff15f8abf031288b43355507737e22b2fb336625daf94929047696ce02a4e0c7d597c5d065f3b9f13134a7cf560046d92286dddd6dd77df66f238b88566ca54eafc7c7afcb745fc419690d029bc64c8608ff24702a338a018e47031adc02421b69529d8caacf75de0a3f6c93a52a6e07abc3bfa8b33633520f040b5a21bf42af52445d9114945fcd8fecf24e5865b942124b86f11b14760ed6eae486fd0925de6aac0494bb54cfcf41479598df6e0c5222b0546698c1d3ab600558de4bb4245cc094cd34c3e83281906710010b503aef9ab99d0d1b8f5ad4f0c4932abe13f0b08cf81a344e60d79d55e488b718a2dc8deba74da79e97349a1926dc0f81ead2ead6464cea0ea3d21271d3e8f75409bb056b224ddb5caaacd51d6f89f89a446f2e0f3dd4cc7fffe8bcd10449a15d85054926ccb4f30487d0fdae011e634675ecacf8e2c1237144fa5babc153ea8302cd0c1ced9d33e8d365ded53b8f0e33831d9eae8fb239a0add51b9a214262aba898412956e0094c994b46adb2d425eb8c98f41a255bb84c5bd0d65c325beb24f697ee8ca46714f41d89951decc560bd1b87e2dab4e50e4375a92800d11a2207770a97cefbc43b96823c97ebdea1f3c5a2a3d9dc1c3d17d659c38405ba8fbc4a50b6ab1819c91ba344ad085f008dcc5d691869c113fcaec981a28860acc33411928e6baaba7eee5cee2863222b884efa970be72a226e505daa4b2cc6080f327304cf89db9c891881967b86fc76d0799dd2eafebc94b30eedbd654ec066150a51921b11d7950344e2146cdc5736f62b3293b0e6956b5c91cdacc77e19e11d6379b4509bdd70fd22f59287cfe4ff6237baf4becd2214988d64105fa9142a42028d563519d115b48c33e9d6d99131ef45078b6f6ed8ef2746fd058a7d7b54812a253265ba7af802c98fca5140f9e7bab157ca4446b65453338854e1a2fe2bee60260aa18fe1ff241042ce77377003ecf625499373e96c886f0b0c6146d65872471e34a94e9c9bc4f04d09acd2881115b17c8dff09ef75aadeb002123df5514ee63116ac2bb5480417c3408f78734433c13e3771f817ae4f3a432cbd6aaab8c468bd06ea2e977f8807123055ab311ee65be697618f1ea9d14c01b4180ced0c77dcc9d8c285b859a1cf9e489155135490d31e4242a70af2c951a4b9b1c2c0e0ee0ecd0e219c8ee313fa290247e1a4f6f09f4e4b9e26e12a5a0bc5c8a4f8a2cdf7b64175fa2af06ff0f43811e67c189d22dd47fd844456a5e1348c1ba6a8dedbd24dca0cd5963a8de22ccdcd03387e9ab8c8a012de5d9d3c1b730d8a25fd014cd23db425d7603353873c06ee33b6dd8d3922e344a8501e9438c5bd17ea1159b266979fbd8bbccaca76d40857530ef9aa7d5ed3b728c473f853114b1ee00805e3fc39a7137c8cad57899ffb39972f29bbb20b01b8f887df9a56488c6d68904a8d673a3848ce3ff4dceae5bd7fc3a8494cac8a0a60e0c64ad4965e61d5b55a66c1db31ab9c4379a8e7c57491aebd770c7bd8d545e1418498b4086b5040d1f202d789a266adaded6189e1263fcd1cd3ee492fe8a6d9f54bbffd3470a5742e"], 0x1014}, 0x1, 0x0, 0x0, 0x48091}, 0x0) 144.154141ms ago: executing program 0 (id=3128): bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000440)=ANY=[@ANYBLOB="8fcacb7907051175f37538e486dd6300800701082c00db5b686158bbcfe8875a060300000023000000000000000000000000ac1414aa"], 0xfdef) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="8fedcb5d07081175f37538e486dd6372ce22fdb929"], 0xfdef) 69.769023ms ago: executing program 3 (id=3129): openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a80)={{r1}, &(0x7f0000000a00), &(0x7f0000000a40)=r0}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000001340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r1}, &(0x7f0000000880), &(0x7f00000008c0)=r0}, 0x20) 48.355118ms ago: executing program 4 (id=3130): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}}], {0x14}}, 0x3c}}, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r1, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x81, 0x42}, 0x10) listen(r1, 0x6) syz_emit_ethernet(0x82, &(0x7f0000000400)={@broadcast, @random="8eff80ec0031", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x74, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010101, @local}, @source_quench={0x4, 0x0, 0x0, 0x0, {0x16, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@noop, @cipso={0x86, 0x40, 0x0, [{0x0, 0x10, "9e0cec69d2dae06de9173b3f60c8"}, {0x0, 0x5, "f34629"}, {0x0, 0xb, "3033a70f1c0f9d1bfd"}, {0x0, 0xa, "3aba454f6dc54cc6"}, {0x0, 0xb, "debbd3e9f1fdeefc2c"}, {0x0, 0x5, "91ec92"}]}]}}}}}}}, 0x0) connect$llc(r1, &(0x7f0000000340)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random="48bd00"}, 0x10) r2 = socket$igmp(0x2, 0x3, 0x2) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00005fe000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r4, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r4, 0x1000) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000001440)={'vlan0\x00', &(0x7f0000000300)=@ethtool_link_settings={0x4c, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8, [0x0, 0x0, 0x0, 0xfffffffe], [0x105]}}) r5 = socket(0x200000000000011, 0x3, 0x0) sendmsg$kcm(r5, &(0x7f0000000900)={&(0x7f0000000700)=@isdn={0x22, 0x0, 0x0, 0x9}, 0x80, &(0x7f00000008c0)=[{&(0x7f0000000780)="e0", 0x1}], 0x1, &(0x7f0000000a40)=[{0x10}], 0x6}, 0x0) r6 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x9}, 0x1c) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000240)={0x40, r8, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x14, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}]}]}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}]}]}, 0x40}}, 0x0) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r5, 0x84, 0x12, &(0x7f0000000e00), &(0x7f0000000e40)=0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000004540)={0xa, 0x0, 0x0, @dev}, 0x1c) sendmmsg$inet6(r6, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) r10 = socket(0xa, 0x40000000002, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r10, 0x0, 0x80, &(0x7f0000000880)=@nat={'nat\x00', 0x19, 0x2, 0x348, [0x20000280, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x2, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="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"]}, 0x3c0) 3.82097ms ago: executing program 3 (id=3131): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000000)="89e7ee2c7cdad9b4b47380c988cafbe863cac5058031c97d70ccd0f76db9", 0x1e}, {&(0x7f0000000100)="e3f4e01bb64d88aff4c99218e5450df5392e79789c3968b1c72fc30961", 0x1d}], 0x2) 0s ago: executing program 0 (id=3132): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}}], {0x14}}, 0x3c}}, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r1, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x81, 0x42}, 0x10) listen(r1, 0x6) syz_emit_ethernet(0x82, &(0x7f0000000400)={@broadcast, @random="8eff80ec0031", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x74, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010101, @local}, @source_quench={0x4, 0x0, 0x0, 0x0, {0x16, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@noop, @cipso={0x86, 0x40, 0x0, [{0x0, 0x10, "9e0cec69d2dae06de9173b3f60c8"}, {0x0, 0x5, "f34629"}, {0x0, 0xb, "3033a70f1c0f9d1bfd"}, {0x0, 0xa, "3aba454f6dc54cc6"}, {0x0, 0xb, "debbd3e9f1fdeefc2c"}, {0x0, 0x5, "91ec92"}]}]}}}}}}}, 0x0) connect$llc(r1, &(0x7f0000000340)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random="48bd00"}, 0x10) r2 = socket$igmp(0x2, 0x3, 0x2) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00005fe000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r4, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r4, 0x1000) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000001440)={'vlan0\x00', &(0x7f0000000300)=@ethtool_link_settings={0x4c, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8, [0x0, 0x0, 0x0, 0xfffffffe], [0x105]}}) r5 = socket(0x200000000000011, 0x3, 0x0) sendmsg$kcm(r5, &(0x7f0000000900)={&(0x7f0000000700)=@isdn={0x22, 0x0, 0x0, 0x9}, 0x80, &(0x7f00000008c0)=[{&(0x7f0000000780)="e0", 0x1}], 0x1, &(0x7f0000000a40)=[{0x10}], 0x6}, 0x0) r6 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x9}, 0x1c) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000240)={0x40, r8, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x14, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}]}]}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}]}]}, 0x40}}, 0x0) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r5, 0x84, 0x12, &(0x7f0000000e00), &(0x7f0000000e40)=0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000004540)={0xa, 0x0, 0x0, @dev}, 0x1c) sendmmsg$inet6(r6, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) r10 = socket(0xa, 0x40000000002, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r10, 0x0, 0x80, &(0x7f0000000880)=@nat={'nat\x00', 0x19, 0x2, 0x348, [0x20000280, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x2, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="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"]}, 0x3c0) kernel console output (not intermixed with test programs): 865][ T8] lo speed is unknown, defaulting to 1000 [ 76.389491][ T6224] infiniband syz0: added lo [ 76.527357][ T6242] netlink: 4 bytes leftover after parsing attributes in process `syz.0.112'. [ 76.541542][ T6242] nlmon0: Master is either lo or non-ether device [ 76.555867][ T6224] RDS/IB: syz0: added [ 76.561416][ T6224] smc: adding ib device syz0 with port count 1 [ 76.584995][ T6224] smc: ib device syz0 port 1 has pnetid [ 76.614114][ T8] lo speed is unknown, defaulting to 1000 [ 76.640420][ T6224] lo speed is unknown, defaulting to 1000 [ 76.954876][ T6252] netlink: 'syz.2.118': attribute type 10 has an invalid length. [ 77.087483][ T6252] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.097121][ T6252] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 77.111610][ T6257] bond0: entered promiscuous mode [ 77.118560][ T6257] bond_slave_0: entered promiscuous mode [ 77.131973][ T6257] bond_slave_1: entered promiscuous mode [ 77.138880][ T6257] batadv0: entered promiscuous mode [ 77.233921][ T6256] team_slave_0: entered promiscuous mode [ 77.239699][ T6256] team_slave_1: entered promiscuous mode [ 77.433361][ T6256] vlan3: entered promiscuous mode [ 77.438825][ T6256] team0: entered promiscuous mode [ 77.454669][ T6256] team0: Device vlan3 is already an upper device of the team interface [ 77.480130][ T6256] team0: left promiscuous mode [ 77.492279][ T6256] team_slave_0: left promiscuous mode [ 77.497785][ T6256] team_slave_1: left promiscuous mode [ 77.562503][ T6224] lo speed is unknown, defaulting to 1000 [ 77.583410][ T6266] team_slave_0: entered promiscuous mode [ 77.589181][ T6266] team_slave_1: entered promiscuous mode [ 77.600591][ T6266] vlan3: entered promiscuous mode [ 77.606575][ T6266] team0: entered promiscuous mode [ 77.614144][ T6266] team0: Device vlan3 is already an upper device of the team interface [ 77.653876][ T6266] team0: left promiscuous mode [ 77.660269][ T6266] team_slave_0: left promiscuous mode [ 77.665805][ T6266] team_slave_1: left promiscuous mode [ 77.883349][ T6224] lo speed is unknown, defaulting to 1000 [ 77.916479][ T6273] netlink: 'syz.2.126': attribute type 10 has an invalid length. [ 78.261113][ T6224] lo speed is unknown, defaulting to 1000 [ 78.300478][ T6287] netlink: 8 bytes leftover after parsing attributes in process `syz.2.130'. [ 78.342772][ T6289] netlink: 4 bytes leftover after parsing attributes in process `syz.3.132'. [ 78.360428][ T6289] ipvlan2: entered promiscuous mode [ 78.404560][ T6224] lo speed is unknown, defaulting to 1000 [ 78.407214][ T6286] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input8 [ 78.751103][ T6296] (unnamed net_device) (uninitialized): option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 78.788225][ T6296] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input9 [ 78.916776][ T6296] Illegal XDP return value 726441472 on prog (id 84) dev N/A, expect packet loss! [ 79.208154][ T6309] netlink: 'syz.3.139': attribute type 1 has an invalid length. [ 79.233709][ T6309] netlink: 224 bytes leftover after parsing attributes in process `syz.3.139'. [ 79.721631][ T6323] netlink: 4 bytes leftover after parsing attributes in process `syz.3.143'. [ 79.754100][ T6323] ipvlan2: entered promiscuous mode [ 79.945643][ T6327] netlink: 'syz.0.144': attribute type 10 has an invalid length. [ 79.970478][ T6327] netlink: 2 bytes leftover after parsing attributes in process `syz.0.144'. [ 79.987591][ T6327] team0: entered promiscuous mode [ 79.995961][ T6327] team_slave_0: entered promiscuous mode [ 80.004852][ T6330] netlink: 8 bytes leftover after parsing attributes in process `syz.4.145'. [ 80.025620][ T6327] team_slave_1: entered promiscuous mode [ 80.035587][ T6327] bridge0: port 3(team0) entered blocking state [ 80.051260][ T6330] netlink: 36 bytes leftover after parsing attributes in process `syz.4.145'. [ 80.061075][ T6327] bridge0: port 3(team0) entered disabled state [ 80.069552][ T6327] team0: entered allmulticast mode [ 80.072143][ T6332] netlink: 8 bytes leftover after parsing attributes in process `syz.3.146'. [ 80.075486][ T6327] team_slave_0: entered allmulticast mode [ 80.091621][ T6327] team_slave_1: entered allmulticast mode [ 80.096010][ T6332] netlink: 36 bytes leftover after parsing attributes in process `syz.3.146'. [ 80.104388][ T6327] bridge0: port 3(team0) entered blocking state [ 80.113392][ T6327] bridge0: port 3(team0) entered forwarding state [ 80.979076][ T6359] netlink: 4 bytes leftover after parsing attributes in process `syz.2.156'. [ 81.019210][ T6359] ipvlan2: entered promiscuous mode [ 81.266405][ T6365] vlan1: entered promiscuous mode [ 81.272721][ T6365] team0: Device vlan1 is already an upper device of the team interface [ 81.866153][ T874] cfg80211: failed to load regulatory.db [ 82.105139][ T6389] netlink: 'syz.2.166': attribute type 10 has an invalid length. [ 82.371824][ T6392] netlink: 4 bytes leftover after parsing attributes in process `syz.0.169'. [ 82.385112][ T6392] ipvlan0: entered promiscuous mode [ 82.818581][ T6400] bridge0: port 3(team0) entered disabled state [ 82.832613][ T6400] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.842138][ T6400] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.979679][ T6398] netlink: 'syz.2.171': attribute type 4 has an invalid length. [ 83.079376][ T6411] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551613) [ 83.091588][ T6411] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 83.129780][ T6409] team_slave_0: entered promiscuous mode [ 83.135558][ T6409] team_slave_1: entered promiscuous mode [ 83.141762][ T6409] vlan3: entered promiscuous mode [ 83.146960][ T6409] team0: entered promiscuous mode [ 83.153613][ T6409] team0: Device vlan3 is already an upper device of the team interface [ 83.163851][ T6409] team0: left promiscuous mode [ 83.169057][ T6409] team_slave_0: left promiscuous mode [ 83.174554][ T6409] team_slave_1: left promiscuous mode [ 83.278204][ T6400] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.285432][ T6400] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.303569][ T6400] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.310797][ T6400] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.336288][ T6418] netlink: 'syz.3.178': attribute type 10 has an invalid length. [ 83.353953][ T11] bridge0: port 3(team0) entered blocking state [ 83.361073][ T11] bridge0: port 3(team0) entered forwarding state [ 83.650322][ T6426] team_slave_0: entered promiscuous mode [ 83.656092][ T6426] team_slave_1: entered promiscuous mode [ 83.664575][ T6426] vlan3: entered promiscuous mode [ 83.685357][ T6426] team0: entered promiscuous mode [ 83.691966][ T6426] team0: Device vlan3 is already an upper device of the team interface [ 83.707433][ T6426] team0: left promiscuous mode [ 83.715773][ T6431] netlink: 'syz.3.180': attribute type 10 has an invalid length. [ 83.727571][ T6426] team_slave_0: left promiscuous mode [ 83.733082][ T6426] team_slave_1: left promiscuous mode [ 83.931966][ T6439] netlink: 8 bytes leftover after parsing attributes in process `syz.1.181'. [ 84.211460][ T6447] netlink: 'syz.0.188': attribute type 6 has an invalid length. [ 85.378066][ T6478] bond_slave_0: entered promiscuous mode [ 85.384075][ T6478] bond_slave_1: entered promiscuous mode [ 85.391564][ T6478] vlan3: entered promiscuous mode [ 85.396720][ T6478] bond0: entered promiscuous mode [ 85.431244][ T6478] bond0: left promiscuous mode [ 85.440517][ T6478] bond_slave_0: left promiscuous mode [ 85.446060][ T6478] bond_slave_1: left promiscuous mode [ 86.225991][ T8] IPVS: starting estimator thread 0... [ 86.353071][ T6514] IPVS: using max 19 ests per chain, 45600 per kthread [ 86.514508][ T6522] netlink: 'syz.2.206': attribute type 10 has an invalid length. [ 86.907622][ T6530] netlink: 8 bytes leftover after parsing attributes in process `syz.4.210'. [ 86.923212][ T6530] netlink: 12 bytes leftover after parsing attributes in process `syz.4.210'. [ 86.948745][ T6542] netlink: 4 bytes leftover after parsing attributes in process `syz.3.212'. [ 86.982839][ T6542] nlmon0: Master is either lo or non-ether device [ 87.338755][ T6555] netlink: 8 bytes leftover after parsing attributes in process `syz.4.214'. [ 87.376493][ T6555] netlink: 36 bytes leftover after parsing attributes in process `syz.4.214'. [ 88.052181][ T6587] netlink: 'syz.1.225': attribute type 10 has an invalid length. [ 88.337911][ T6597] infiniband syz0: set active [ 88.365400][ T6597] bond0: (slave batadv0): Releasing backup interface [ 88.413970][ T6597] batadv0: left promiscuous mode [ 88.444960][ T6597] bridge_slave_0: left allmulticast mode [ 88.468853][ T6597] bridge_slave_0: left promiscuous mode [ 88.481700][ T6597] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.531003][ T6597] bridge_slave_1: left allmulticast mode [ 88.541538][ T6597] bridge_slave_1: left promiscuous mode [ 88.575310][ T6597] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.632691][ T6597] bond0: (slave bond_slave_0): Releasing backup interface [ 88.667343][ T6597] bond_slave_0: left promiscuous mode [ 88.685065][ T6597] bond0: (slave bond_slave_1): Releasing backup interface [ 88.685239][ T6617] netlink: 8 bytes leftover after parsing attributes in process `syz.0.233'. [ 88.703676][ T6597] bond_slave_1: left promiscuous mode [ 88.735280][ T6597] team0: Port device team_slave_0 removed [ 88.745920][ T6597] team0: Port device team_slave_1 removed [ 88.752299][ T6597] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 88.760026][ T6597] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 88.769423][ T6597] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 88.778912][ T6597] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 88.787924][ T6619] netlink: 32 bytes leftover after parsing attributes in process `syz.0.233'. [ 88.806567][ T51] lo speed is unknown, defaulting to 1000 [ 88.812407][ T6598] team0: Mode changed to "loadbalance" [ 88.852067][ T6609] vlan3: entered promiscuous mode [ 89.317353][ T6633] netlink: 'syz.3.239': attribute type 10 has an invalid length. [ 89.328952][ T6631] : renamed from pim6reg1 [ 89.353339][ T6631] infiniband syz0: set active [ 89.378540][ T25] lo speed is unknown, defaulting to 1000 [ 89.447454][ T6637] vlan1: entered promiscuous mode [ 89.483790][ T5914] IPVS: starting estimator thread 0... [ 89.583201][ T6639] IPVS: using max 21 ests per chain, 50400 per kthread [ 89.608910][ T6642] vlan1: entered promiscuous mode [ 89.629224][ T6642] team0: Device vlan1 is already an upper device of the team interface [ 89.914518][ T6651] : renamed from ipvlan1 [ 90.071574][ T6658] netlink: 'syz.0.249': attribute type 4 has an invalid length. [ 90.136213][ T6660] netlink: 20 bytes leftover after parsing attributes in process `syz.3.250'. [ 90.159603][ T6664] netlink: 188 bytes leftover after parsing attributes in process `syz.4.247'. [ 90.243640][ T6664] netlink: 48 bytes leftover after parsing attributes in process `syz.4.247'. [ 90.303751][ T6669] netlink: 'syz.1.253': attribute type 10 has an invalid length. [ 90.313700][ T6669] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.323655][ T6669] batadv0: entered promiscuous mode [ 90.330508][ T6669] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 90.351685][ T6670] nlmon0: Master is either lo or non-ether device [ 90.902791][ T6680] netlink: 'syz.0.257': attribute type 10 has an invalid length. [ 91.078655][ T6684] vlan1: entered promiscuous mode [ 91.094875][ T6684] team0: Device vlan1 is already an upper device of the team interface [ 91.432614][ T6693] siw: device registration error -23 [ 91.622515][ T6708] vcan0: entered promiscuous mode [ 91.630904][ T6708] vlan3: entered promiscuous mode [ 91.647248][ T6708] vcan0: left promiscuous mode [ 92.065149][ T6719] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input10 [ 92.128759][ T6725] __nla_validate_parse: 2 callbacks suppressed [ 92.128775][ T6725] netlink: 4 bytes leftover after parsing attributes in process `syz.3.272'. [ 92.146976][ T6725] nlmon0: Master is either lo or non-ether device [ 92.407974][ T6732] netlink: 4 bytes leftover after parsing attributes in process `syz.1.275'. [ 92.428213][ T6732] nlmon0: Master is either lo or non-ether device [ 93.148126][ T6760] TCP: tcp_parse_options: Illegal window scaling value 254 > 14 received [ 93.185437][ T6760] netlink: 4 bytes leftover after parsing attributes in process `syz.3.284'. [ 93.412123][ T6770] netlink: 'syz.0.287': attribute type 10 has an invalid length. [ 93.473528][ T6771] netlink: 'syz.0.287': attribute type 10 has an invalid length. [ 93.538565][ T6770] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 93.562319][ T6770] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 93.580065][ T6770] team0: Failed to send options change via netlink (err -105) [ 93.620713][ T6775] netlink: 'syz.1.288': attribute type 1 has an invalid length. [ 93.643456][ T6775] netlink: 'syz.1.288': attribute type 2 has an invalid length. [ 93.653267][ T6775] netlink: 'syz.1.288': attribute type 2 has an invalid length. [ 93.683428][ T6775] netlink: 'syz.1.288': attribute type 1 has an invalid length. [ 93.689535][ T6770] team0: Port device netdevsim0 added [ 93.708511][ T6775] netlink: 'syz.1.288': attribute type 1 has an invalid length. [ 93.773217][ T6775] netlink: 'syz.1.288': attribute type 1 has an invalid length. [ 93.792582][ T6771] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 93.815185][ T6771] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 93.822790][ T6771] netdevsim netdevsim0 netdevsim0: left allmulticast mode [ 93.846828][ T6771] team0: Failed to send options change via netlink (err -105) [ 93.864781][ T6771] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 93.903047][ T6771] team0: Port device netdevsim0 removed [ 93.920650][ T6771] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 93.940461][ T6771] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 94.381045][ T6798] netlink: 4 bytes leftover after parsing attributes in process `syz.2.294'. [ 94.396582][ T6798] nlmon0: Master is either lo or non-ether device [ 94.523217][ T6803] netlink: 8 bytes leftover after parsing attributes in process `syz.1.296'. [ 94.553353][ T6803] netlink: 8 bytes leftover after parsing attributes in process `syz.1.296'. [ 94.832707][ T6811] vcan0: entered promiscuous mode [ 94.851503][ T6811] vlan1: entered promiscuous mode [ 94.866778][ T6811] vcan0: left promiscuous mode [ 95.002612][ T6819] netlink: 8 bytes leftover after parsing attributes in process `syz.4.303'. [ 95.028502][ T6819] netlink: 36 bytes leftover after parsing attributes in process `syz.4.303'. [ 95.644702][ T6849] tipc: Started in network mode [ 95.679109][ T6849] tipc: Node identity ffffffff, cluster identity 4711 [ 95.686456][ T6849] tipc: Node number set to 4294967295 [ 95.833417][ T6855] netlink: 'syz.0.315': attribute type 12 has an invalid length. [ 96.111996][ T6865] siw: device registration error -23 [ 96.792523][ T6883] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input11 [ 96.801909][ T6890] (unnamed net_device) (uninitialized): option updelay: invalid value (18446744071562067969) [ 96.833640][ T6890] (unnamed net_device) (uninitialized): option updelay: allowed values 0 - 2147483647 [ 97.199577][ T6904] netlink: 'syz.1.328': attribute type 12 has an invalid length. [ 97.521114][ T6916] rdma_op ffff88803339e9f0 conn xmit_rdma 0000000000000000 [ 97.667490][ T6926] bridge1: entered promiscuous mode [ 97.672759][ T6926] bridge1: entered allmulticast mode [ 97.722234][ T6926] team0: Port device bridge1 added [ 97.951803][ T6926] bridge0: port 4(ip6gretap0) entered blocking state [ 97.989633][ T6926] bridge0: port 4(ip6gretap0) entered disabled state [ 98.000302][ T6926] ip6gretap0: entered allmulticast mode [ 98.033421][ T6926] ip6gretap0: entered promiscuous mode [ 98.068891][ T6926] bridge0: port 4(ip6gretap0) entered blocking state [ 98.075805][ T6926] bridge0: port 4(ip6gretap0) entered forwarding state [ 98.199641][ T6941] vlan0: entered promiscuous mode [ 98.371947][ T6941] team0: Port device vlan0 added [ 98.459257][ T6963] netlink: 8 bytes leftover after parsing attributes in process `syz.0.337'. [ 98.487071][ T6963] netlink: 36 bytes leftover after parsing attributes in process `syz.0.337'. [ 98.600259][ T6969] team0: Mode changed to "activebackup" [ 98.624152][ T6972] validate_nla: 1 callbacks suppressed [ 98.624169][ T6972] netlink: 'syz.3.340': attribute type 10 has an invalid length. [ 98.834283][ T6986] netlink: 'syz.4.342': attribute type 12 has an invalid length. [ 99.239891][ T7005] netlink: 4 bytes leftover after parsing attributes in process `syz.0.347'. [ 99.266797][ T7005] nlmon0: Master is either lo or non-ether device [ 99.666611][ T7017] netlink: 44 bytes leftover after parsing attributes in process `syz.1.349'. [ 99.728008][ T7017] syzkaller0: entered promiscuous mode [ 99.742578][ T7017] syzkaller0: entered allmulticast mode [ 100.185330][ T7033] pimreg: entered allmulticast mode [ 100.262773][ T7038] netlink: 'syz.4.354': attribute type 10 has an invalid length. [ 100.297402][ T7038] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 100.339359][ T7038] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 100.358368][ T7044] netlink: 'syz.0.355': attribute type 12 has an invalid length. [ 100.415203][ T7046] bond0: entered promiscuous mode [ 100.424544][ T7046] bond_slave_0: entered promiscuous mode [ 100.447248][ T7046] bond_slave_1: entered promiscuous mode [ 100.468198][ T7046] batadv0: entered promiscuous mode [ 100.728629][ T7064] netlink: 12 bytes leftover after parsing attributes in process `syz.4.359'. [ 100.770686][ T7059] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.847620][ T7066] ip6_tunnel: non-ECT from 0000:0000:0000:0000:0000:ffff:ffff:fffd with DS=0xb [ 100.990288][ T7059] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.045442][ T7079] netlink: 4 bytes leftover after parsing attributes in process `syz.4.362'. [ 101.084341][ T7081] siw: device registration error -23 [ 101.099581][ T7079] nlmon0: Master is either lo or non-ether device [ 101.209624][ T7059] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.301603][ T7088] vlan1: entered promiscuous mode [ 101.380329][ T7059] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.561352][ T7095] vlan1: entered promiscuous mode [ 101.672106][ T7059] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.734805][ T7059] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.769413][ T7059] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.828197][ T7059] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.984361][ T7100] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input12 [ 101.999190][ T7108] netlink: 'syz.4.368': attribute type 12 has an invalid length. [ 102.090939][ T7112] netlink: 8 bytes leftover after parsing attributes in process `syz.2.369'. [ 102.100299][ T7112] netlink: 36 bytes leftover after parsing attributes in process `syz.2.369'. [ 102.415234][ T7122] vlan1: entered promiscuous mode [ 102.498874][ T7128] vlan3: entered promiscuous mode [ 102.568905][ T7133] netlink: zone id is out of range [ 102.582499][ T7133] netlink: zone id is out of range [ 102.618859][ T7133] netlink: zone id is out of range [ 102.647099][ T7124] gtp0: entered promiscuous mode [ 102.652885][ T7133] netlink: set zone limit has 4 unknown bytes [ 102.765257][ T7138] vcan0: entered promiscuous mode [ 102.770401][ T7138] vlan1: entered promiscuous mode [ 102.800007][ T7138] vcan0: left promiscuous mode [ 102.814325][ T7137] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input13 [ 102.837081][ T7147] netlink: 'syz.4.379': attribute type 10 has an invalid length. [ 102.882444][ T7150] netlink: 4 bytes leftover after parsing attributes in process `syz.3.378'. [ 102.900694][ T7150] nlmon0: Master is either lo or non-ether device [ 103.091282][ T7154] netlink: 8 bytes leftover after parsing attributes in process `syz.4.382'. [ 103.579119][ T7161] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input14 [ 103.651033][ T5849] udevd[5849]: setting mode of /dev/input/mouse1 to 020660 failed: No such file or directory [ 103.712795][ T5849] udevd[5849]: setting owner of /dev/input/mouse1 to uid=0, gid=104 failed: No such file or directory [ 103.949387][ T7173] vlan1: entered promiscuous mode [ 104.064051][ T7178] vlan1: entered promiscuous mode [ 104.161866][ T7182] netlink: 8 bytes leftover after parsing attributes in process `syz.1.391'. [ 104.210041][ T7184] vcan0: entered promiscuous mode [ 104.219287][ T7184] vlan1: entered promiscuous mode [ 104.262440][ T7184] vcan0: left promiscuous mode [ 104.319127][ T7187] netlink: 8 bytes leftover after parsing attributes in process `syz.2.393'. [ 104.532817][ T7198] netlink: 'syz.1.398': attribute type 1 has an invalid length. [ 104.612522][ T7194] netlink: 60 bytes leftover after parsing attributes in process `syz.2.396'. [ 104.816776][ T7205] xt_TPROXY: Can be used only with -p tcp or -p udp [ 104.904505][ T7212] x_tables: ip_tables: bpf.1 match: invalid size 528 (kernel) != (user) 1024 [ 105.277811][ T7219] vlan0: entered promiscuous mode [ 105.367462][ T7223] netlink: 'syz.4.405': attribute type 10 has an invalid length. [ 105.480318][ T7225] netlink: 8 bytes leftover after parsing attributes in process `syz.4.406'. [ 105.616269][ T7227] vcan0: entered promiscuous mode [ 105.621399][ T7227] vlan0: entered promiscuous mode [ 105.703643][ T7227] vcan0: left promiscuous mode [ 106.089140][ T7248] netlink: 4 bytes leftover after parsing attributes in process `syz.2.414'. [ 106.126782][ T7248] netlink: 12 bytes leftover after parsing attributes in process `syz.2.414'. [ 106.154473][ T7251] openvswitch: netlink: VXLAN extension message has 2 unknown bytes. [ 106.216741][ T7251] xt_hashlimit: max too large, truncated to 1048576 [ 106.327535][ T7258] netlink: 'syz.1.417': attribute type 10 has an invalid length. [ 106.578671][ T7260] netlink: 'syz.1.419': attribute type 6 has an invalid length. [ 106.876929][ T7274] netlink: 'syz.0.422': attribute type 25 has an invalid length. [ 106.916456][ T7274] netlink: 'syz.0.422': attribute type 7 has an invalid length. [ 106.987481][ T7277] netlink: 16 bytes leftover after parsing attributes in process `syz.2.423'. [ 107.071081][ T7283] Bluetooth: MGMT ver 1.23 [ 107.100102][ T7283] netlink: 'syz.4.425': attribute type 21 has an invalid length. [ 107.114178][ T7283] netlink: 132 bytes leftover after parsing attributes in process `syz.4.425'. [ 107.357606][ T7288] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input15 [ 107.612240][ T7297] netlink: 36 bytes leftover after parsing attributes in process `syz.4.429'. [ 107.625960][ T7297] netlink: 100 bytes leftover after parsing attributes in process `syz.4.429'. [ 107.650143][ T7298] nlmon0: Master is either lo or non-ether device [ 108.291486][ T7308] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input16 [ 108.747656][ T7326] vlan1: entered promiscuous mode [ 109.829769][ T7356] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 109.840759][ T7356] bond_slave_0: left promiscuous mode [ 109.858880][ T7356] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 109.878694][ T7356] bond_slave_1: left promiscuous mode [ 109.901660][ T7356] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 109.941302][ T7356] batadv0: left promiscuous mode [ 109.957138][ T7356] bond0 (unregistering): (slave netdevsim0): Releasing backup interface [ 109.974870][ T7356] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 109.982381][ T7356] bond0 (unregistering): Released all slaves [ 110.212370][ T7374] netlink: 'syz.1.453': attribute type 10 has an invalid length. [ 110.591031][ T7394] __nla_validate_parse: 1 callbacks suppressed [ 110.591048][ T7394] netlink: 8 bytes leftover after parsing attributes in process `syz.3.459'. [ 111.547064][ T7420] bond0: (slave batadv0): Releasing backup interface [ 111.584428][ T7417] netlink: 132 bytes leftover after parsing attributes in process `syz.4.466'. [ 111.615149][ T7420] batadv0: left promiscuous mode [ 111.622730][ T7420] bridge_slave_0: left allmulticast mode [ 111.664091][ T7420] bridge_slave_0: left promiscuous mode [ 111.669863][ T7420] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.707417][ T7420] bridge_slave_1: left allmulticast mode [ 111.718173][ T7420] bridge_slave_1: left promiscuous mode [ 111.723752][ T7431] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 111.738347][ T7420] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.749420][ T7420] bond0: (slave bond_slave_0): Releasing backup interface [ 111.761968][ T7420] bond_slave_0: left promiscuous mode [ 111.793871][ T7420] bond0: (slave bond_slave_1): Releasing backup interface [ 111.811773][ T7420] bond_slave_1: left promiscuous mode [ 111.853802][ T7420] team0: Port device team_slave_0 removed [ 111.878779][ T7420] team0: Port device team_slave_1 removed [ 111.904003][ T7420] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 111.913236][ T7420] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 111.932661][ T7420] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 111.941834][ T7420] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 111.984042][ T7420] team0: Port device vlan0 removed [ 112.267422][ T7442] tap0: tun_chr_ioctl cmd 1074025677 [ 112.273771][ T7442] tap0: linktype set to 778 [ 112.366824][ T7450] netlink: 12 bytes leftover after parsing attributes in process `syz.3.473'. [ 112.548569][ T7463] netlink: 'syz.4.475': attribute type 1 has an invalid length. [ 112.672664][ T7463] 8021q: adding VLAN 0 to HW filter on device bond2 [ 112.779262][ T7478] netlink: 'syz.2.478': attribute type 10 has an invalid length. [ 112.850207][ T7444] xt_nfacct: accounting object `sy' does not exists [ 112.889261][ T7458] bond2: (slave bridge1): Enslaving as an active interface with a down link [ 113.179018][ T7498] netlink: 8 bytes leftover after parsing attributes in process `syz.1.482'. [ 113.229918][ T7498] netlink: 36 bytes leftover after parsing attributes in process `syz.1.482'. [ 113.557397][ T7516] vlan1: entered promiscuous mode [ 113.739555][ T7534] netlink: 8 bytes leftover after parsing attributes in process `syz.4.484'. [ 113.770703][ T7532] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input17 [ 114.647655][ T7570] netlink: 8 bytes leftover after parsing attributes in process `syz.4.495'. [ 114.860828][ T7579] syz.4.495 uses old SIOCAX25GETINFO [ 115.070941][ T7587] netlink: 'syz.0.498': attribute type 1 has an invalid length. [ 115.102388][ T7587] pimreg3: entered allmulticast mode [ 115.154582][ T7587] netlink: 'syz.0.498': attribute type 1 has an invalid length. [ 115.196737][ T7587] netlink: 8 bytes leftover after parsing attributes in process `syz.0.498'. [ 115.287254][ T7587] pimreg3: left allmulticast mode [ 115.608908][ T7607] netlink: 4 bytes leftover after parsing attributes in process `syz.0.502'. [ 115.675068][ T7607] caif0: Master is either lo or non-ether device [ 115.692100][ T5145] Bluetooth: hci4: link tx timeout [ 115.699405][ T5145] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 116.210005][ T7630] netlink: 'syz.1.506': attribute type 10 has an invalid length. [ 116.256268][ T7635] netlink: 'syz.4.509': attribute type 1 has an invalid length. [ 116.356383][ T7639] xt_hashlimit: overflow, rate too high: 0 [ 116.390004][ T7639] netlink: 'syz.2.510': attribute type 4 has an invalid length. [ 116.681814][ T7652] netlink: 16 bytes leftover after parsing attributes in process `syz.4.514'. [ 116.708282][ T7652] erspan0: entered promiscuous mode [ 116.726313][ T7652] batman_adv: batadv0: Adding interface: macvlan2 [ 116.766379][ T7652] batman_adv: batadv0: The MTU of interface macvlan2 is too small (1450) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 116.850520][ T7652] batman_adv: batadv0: Interface activated: macvlan2 [ 117.029890][ T7662] lo speed is unknown, defaulting to 1000 [ 117.239594][ T7677] netlink: 16 bytes leftover after parsing attributes in process `syz.2.518'. [ 117.281701][ T7677] netlink: 4 bytes leftover after parsing attributes in process `syz.2.518'. [ 117.317117][ T7677] netlink: 36 bytes leftover after parsing attributes in process `syz.2.518'. [ 117.565038][ T7685] netlink: 'syz.4.521': attribute type 10 has an invalid length. [ 117.602237][ T7685] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 117.626175][ T7685] batadv0: entered promiscuous mode [ 117.654602][ T7685] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 117.773558][ T5145] Bluetooth: hci4: command 0x0405 tx timeout [ 118.081974][ T7700] netlink: 12 bytes leftover after parsing attributes in process `syz.2.525'. [ 118.178130][ T7722] netlink: 4 bytes leftover after parsing attributes in process `syz.2.525'. [ 118.217712][ T7722] bridge_slave_1: left allmulticast mode [ 118.243049][ T7722] bridge_slave_1: left promiscuous mode [ 118.248826][ T7722] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.310496][ T7722] bridge_slave_0: left allmulticast mode [ 118.333329][ T7722] bridge_slave_0: left promiscuous mode [ 118.349302][ T7722] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.231009][ T7751] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 119.363098][ T7763] vlan0: entered promiscuous mode [ 119.721354][ T7782] netlink: 4 bytes leftover after parsing attributes in process `syz.1.541'. [ 119.777813][ T7782] nlmon0: Master is either lo or non-ether device [ 119.840128][ T7788] netlink: 28 bytes leftover after parsing attributes in process `syz.3.542'. [ 119.914842][ T7791] netlink: 16 bytes leftover after parsing attributes in process `syz.2.543'. [ 120.016032][ T7798] netlink: 'syz.3.546': attribute type 10 has an invalid length. [ 120.146095][ T7801] vlan3: entered promiscuous mode [ 120.640736][ T7822] __nla_validate_parse: 2 callbacks suppressed [ 120.640754][ T7822] netlink: 68 bytes leftover after parsing attributes in process `syz.4.552'. [ 120.763922][ T7826] netlink: 'syz.3.553': attribute type 6 has an invalid length. [ 121.014978][ T7843] netlink: 'syz.1.557': attribute type 10 has an invalid length. [ 121.782524][ T7868] netlink: 68 bytes leftover after parsing attributes in process `syz.0.563'. [ 121.841316][ T7875] netlink: 4 bytes leftover after parsing attributes in process `syz.3.564'. [ 121.879991][ T7875] nlmon0: Master is either lo or non-ether device [ 121.905932][ T7873] lo speed is unknown, defaulting to 1000 [ 122.185715][ T7889] netlink: 8 bytes leftover after parsing attributes in process `syz.1.566'. [ 122.565861][ T7902] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input18 [ 122.723348][ T7905] netlink: 'syz.0.569': attribute type 10 has an invalid length. [ 123.135424][ T7916] vlan0: entered promiscuous mode [ 123.297528][ T7873] netlink: 36 bytes leftover after parsing attributes in process `syz.2.565'. [ 123.324720][ T7873] netlink: 16 bytes leftover after parsing attributes in process `syz.2.565'. [ 123.335051][ T7873] netlink: 36 bytes leftover after parsing attributes in process `syz.2.565'. [ 123.360955][ T7873] netlink: 36 bytes leftover after parsing attributes in process `syz.2.565'. [ 123.386393][ T7925] netlink: 8 bytes leftover after parsing attributes in process `syz.0.572'. [ 123.441230][ T7927] netlink: 'syz.3.573': attribute type 1 has an invalid length. [ 124.200730][ T25] IPVS: starting estimator thread 0... [ 124.208238][ T7946] netlink: 'syz.2.576': attribute type 39 has an invalid length. [ 124.294138][ T7953] netlink: 'syz.3.579': attribute type 10 has an invalid length. [ 124.303912][ T7952] IPVS: using max 26 ests per chain, 62400 per kthread [ 124.856167][ T7974] vlan1: entered promiscuous mode [ 124.896340][ T7969] netlink: 4 bytes leftover after parsing attributes in process `syz.1.580'. [ 124.946814][ T7969] caif0: Master is either lo or non-ether device [ 125.100292][ T7983] netlink: 'syz.3.585': attribute type 32 has an invalid length. [ 125.310724][ T7993] netlink: 'syz.2.587': attribute type 21 has an invalid length. [ 125.344795][ T7993] IPv6: NLM_F_CREATE should be specified when creating new route [ 125.352638][ T7993] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 125.360294][ T7993] IPv6: NLM_F_CREATE should be set when creating new route [ 125.367613][ T7993] IPv6: NLM_F_CREATE should be set when creating new route [ 125.374901][ T7993] IPv6: NLM_F_CREATE should be set when creating new route [ 125.652238][ T8008] vlan2: entered promiscuous mode [ 125.715124][ T8005] netlink: 8 bytes leftover after parsing attributes in process `syz.4.591'. [ 126.228099][ T8028] netlink: 8 bytes leftover after parsing attributes in process `syz.3.599'. [ 126.393984][ T8032] netlink: 16 bytes leftover after parsing attributes in process `syz.2.601'. [ 126.819149][ T8049] netlink: 4 bytes leftover after parsing attributes in process `syz.0.604'. [ 126.852667][ T8047] vlan3: entered promiscuous mode [ 126.865257][ T8051] netlink: 40 bytes leftover after parsing attributes in process `syz.2.606'. [ 126.882429][ T8049] caif0: Master is either lo or non-ether device [ 126.883331][ T8051] netlink: 40 bytes leftover after parsing attributes in process `syz.2.606'. [ 126.928539][ T8053] netlink: 8 bytes leftover after parsing attributes in process `syz.2.606'. [ 127.424126][ T8060] netlink: 'syz.2.608': attribute type 10 has an invalid length. [ 127.884367][ T8076] netlink: 'syz.2.614': attribute type 2 has an invalid length. [ 128.146978][ T8084] netlink: 8 bytes leftover after parsing attributes in process `syz.2.617'. [ 128.271560][ T8092] netlink: 'syz.1.620': attribute type 10 has an invalid length. [ 128.291300][ T8084] netlink: 'syz.2.617': attribute type 21 has an invalid length. [ 128.299643][ T8084] netlink: 160 bytes leftover after parsing attributes in process `syz.2.617'. [ 128.300167][ T8096] netlink: 16 bytes leftover after parsing attributes in process `syz.4.618'. [ 128.355316][ T8096] netlink: 'syz.4.618': attribute type 11 has an invalid length. [ 128.698056][ T8109] caif0: Master is either lo or non-ether device [ 128.715699][ T8108] netlink: 'syz.2.625': attribute type 21 has an invalid length. [ 128.923068][ T8119] sch_fq: defrate 511 ignored. [ 129.101332][ T8128] netlink: 'syz.3.631': attribute type 10 has an invalid length. [ 129.338350][ T8131] syzkaller0: entered promiscuous mode [ 129.344023][ T8131] syzkaller0: entered allmulticast mode [ 131.598658][ T8165] __nla_validate_parse: 10 callbacks suppressed [ 131.598678][ T8165] netlink: 8 bytes leftover after parsing attributes in process `syz.1.639'. [ 131.842505][ T8176] netlink: 'syz.0.643': attribute type 10 has an invalid length. [ 131.894018][ T8178] netlink: 24 bytes leftover after parsing attributes in process `syz.2.642'. [ 131.939827][ T8178] netlink: 8 bytes leftover after parsing attributes in process `syz.2.642'. [ 131.972799][ T8178] netlink: 4 bytes leftover after parsing attributes in process `syz.2.642'. [ 131.981931][ T8178] netlink: 'syz.2.642': attribute type 13 has an invalid length. [ 131.989949][ T8178] netlink: 'syz.2.642': attribute type 11 has an invalid length. [ 132.112455][ T8185] smc: ib device syz0 ibport 1 applied user defined pnetid SYZ2 [ 132.127042][ T8185] netlink: 'syz.3.644': attribute type 9 has an invalid length. [ 132.136062][ T8185] netlink: 'syz.3.644': attribute type 7 has an invalid length. [ 132.387567][ T8198] netlink: 68 bytes leftover after parsing attributes in process `syz.1.649'. [ 132.740784][ T8211] smc: ib device syz0 ibport 1 erased user defined pnetid SYZ2 [ 132.925876][ T8218] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc. [ 132.968011][ T8220] netlink: 12 bytes leftover after parsing attributes in process `syz.1.651'. [ 133.292615][ T8225] lo speed is unknown, defaulting to 1000 [ 133.322214][ T8229] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input19 [ 133.614282][ T8240] validate_nla: 1 callbacks suppressed [ 133.614302][ T8240] netlink: 'syz.3.655': attribute type 10 has an invalid length. [ 134.338587][ T8257] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input20 [ 134.616804][ T8268] GUP no longer grows the stack in syz.0.663 (8268): 20006000-2000a000 (20005000) [ 134.637684][ T8268] CPU: 0 UID: 0 PID: 8268 Comm: syz.0.663 Not tainted 6.13.0-rc2-syzkaller-00378-g5098462fbac6 #0 [ 134.648328][ T8268] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 134.658413][ T8268] Call Trace: [ 134.661718][ T8268] [ 134.664672][ T8268] dump_stack_lvl+0x241/0x360 [ 134.669402][ T8268] ? __pfx_dump_stack_lvl+0x10/0x10 [ 134.674636][ T8268] ? __pfx__printk+0x10/0x10 [ 134.679246][ T8268] ? find_vma+0xf9/0x170 [ 134.683490][ T8268] ? vma_is_secretmem+0xd/0x50 [ 134.688252][ T8268] ? check_vma_flags+0x52b/0x5a0 [ 134.693201][ T8268] __get_user_pages+0x4385/0x49e0 [ 134.698248][ T8268] ? mark_lock+0x9a/0x360 [ 134.702600][ T8268] ? __pfx___get_user_pages+0x10/0x10 [ 134.707984][ T8268] __gup_longterm_locked+0x49a/0x17f0 [ 134.713350][ T8268] ? __pfx___might_resched+0x10/0x10 [ 134.718636][ T8268] ? __pfx___gup_longterm_locked+0x10/0x10 [ 134.724435][ T8268] ? down_read+0x82b/0xa40 [ 134.728868][ T8268] ? is_valid_gup_args+0x124/0x200 [ 134.734002][ T8268] pin_user_pages+0x137/0x1f0 [ 134.738674][ T8268] ? __pfx_pin_user_pages+0x10/0x10 [ 134.743877][ T8268] ? trace_kmalloc+0x1f/0xd0 [ 134.748513][ T8268] xdp_umem_create+0x978/0xf30 [ 134.753692][ T8268] xsk_setsockopt+0x732/0x950 [ 134.758399][ T8268] ? __pfx_xsk_setsockopt+0x10/0x10 [ 134.763631][ T8268] ? __pfx_lock_acquire+0x10/0x10 [ 134.768674][ T8268] ? aa_sock_opt_perm+0x79/0x120 [ 134.773638][ T8268] ? __pfx_xsk_setsockopt+0x10/0x10 [ 134.778863][ T8268] do_sock_setsockopt+0x3af/0x720 [ 134.783916][ T8268] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 134.789462][ T8268] ? __fget_files+0x395/0x410 [ 134.794147][ T8268] ? __fget_files+0x2a/0x410 [ 134.798774][ T8268] __x64_sys_setsockopt+0x1ee/0x280 [ 134.803977][ T8268] do_syscall_64+0xf3/0x230 [ 134.808472][ T8268] ? clear_bhb_loop+0x35/0x90 [ 134.813172][ T8268] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.819053][ T8268] RIP: 0033:0x7f54c0185d19 [ 134.823470][ T8268] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 134.843078][ T8268] RSP: 002b:00007f54c0f89038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 134.851536][ T8268] RAX: ffffffffffffffda RBX: 00007f54c0375fa0 RCX: 00007f54c0185d19 [ 134.859530][ T8268] RDX: 0000000000000004 RSI: 000000000000011b RDI: 0000000000000006 [ 134.867524][ T8268] RBP: 00007f54c0201a20 R08: 0000000000000020 R09: 0000000000000000 [ 134.875518][ T8268] R10: 0000000020000040 R11: 0000000000000246 R12: 0000000000000000 [ 134.883517][ T8268] R13: 0000000000000000 R14: 00007f54c0375fa0 R15: 00007ffeaa201ed8 [ 134.891540][ T8268] [ 135.207531][ T8278] netlink: 'syz.3.666': attribute type 10 has an invalid length. [ 135.337499][ T8283] netlink: 'syz.1.668': attribute type 10 has an invalid length. [ 135.787835][ T8297] netlink: 16 bytes leftover after parsing attributes in process `syz.3.674'. [ 135.885287][ T8293] netlink: 'syz.1.672': attribute type 1 has an invalid length. [ 135.923158][ T8293] netlink: 224 bytes leftover after parsing attributes in process `syz.1.672'. [ 136.213634][ T8314] sctp: [Deprecated]: syz.4.677 (pid 8314) Use of struct sctp_assoc_value in delayed_ack socket option. [ 136.213634][ T8314] Use struct sctp_sack_info instead [ 136.260973][ T8317] netlink: 'syz.1.678': attribute type 1 has an invalid length. [ 136.293405][ T8317] netlink: 224 bytes leftover after parsing attributes in process `syz.1.678'. [ 136.465221][ T8323] xt_CT: You must specify a L4 protocol and not use inversions on it [ 136.809067][ T8325] netlink: 'syz.3.680': attribute type 10 has an invalid length. [ 137.021070][ T8332] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.038374][ T8332] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.081866][ T8332] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.099925][ T8332] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.503286][ T8351] SET target dimension over the limit! [ 137.727319][ T8361] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.795545][ T8361] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.842175][ T8361] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.886616][ T8361] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.163990][ T8376] netlink: 20 bytes leftover after parsing attributes in process `syz.1.690'. [ 138.238266][ T8376] ip6t_rpfilter: unknown options [ 139.501451][ T8379] hsr_slave_0: left promiscuous mode [ 139.585003][ T8379] hsr_slave_1: left promiscuous mode [ 140.253297][ T5145] Bluetooth: hci4: command 0x0405 tx timeout [ 140.282796][ T8438] netlink: 'syz.0.703': attribute type 3 has an invalid length. [ 140.298434][ T8438] netlink: 224 bytes leftover after parsing attributes in process `syz.0.703'. [ 140.393498][ T8438] netlink: 4 bytes leftover after parsing attributes in process `syz.0.703'. [ 140.465390][ T8438] netlink: 4 bytes leftover after parsing attributes in process `syz.0.703'. [ 140.555401][ T8444] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input21 [ 140.620015][ T8447] netlink: 'syz.2.705': attribute type 21 has an invalid length. [ 140.634824][ T8447] netlink: 132 bytes leftover after parsing attributes in process `syz.2.705'. [ 141.191205][ T8466] netlink: 100 bytes leftover after parsing attributes in process `syz.4.707'. [ 141.307017][ T8471] netlink: 8 bytes leftover after parsing attributes in process `syz.0.709'. [ 141.317203][ T8471] netlink: 36 bytes leftover after parsing attributes in process `syz.0.709'. [ 141.474992][ T8464] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 141.515956][ T8464] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 141.868408][ T8483] nbd: must specify a device to reconfigure [ 142.179119][ T8498] netlink: 'syz.1.715': attribute type 10 has an invalid length. [ 142.226528][ T8498] bridge0: entered promiscuous mode [ 142.232144][ T8498] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 142.273955][ T8517] netlink: 48 bytes leftover after parsing attributes in process `syz.3.719'. [ 142.464081][ T8517] xt_CT: No such helper "netbios-ns" [ 142.727444][ T8525] netlink: 32 bytes leftover after parsing attributes in process `syz.2.720'. [ 142.737404][ T8533] xt_cgroup: xt_cgroup: no path or classid specified [ 143.061903][ T8550] sctp: [Deprecated]: syz.1.722 (pid 8550) Use of struct sctp_assoc_value in delayed_ack socket option. [ 143.061903][ T8550] Use struct sctp_sack_info instead [ 143.117182][ T8552] netlink: 'syz.1.722': attribute type 12 has an invalid length. [ 143.286740][ T8560] xt_cluster: node mask cannot exceed total number of nodes [ 143.296154][ T8556] __nla_validate_parse: 2 callbacks suppressed [ 143.296172][ T8556] netlink: 8 bytes leftover after parsing attributes in process `syz.3.724'. [ 143.314234][ T8556] netlink: 36 bytes leftover after parsing attributes in process `syz.3.724'. [ 143.330547][ T8561] netlink: 12 bytes leftover after parsing attributes in process `syz.2.723'. [ 143.453981][ T8575] netlink: 12 bytes leftover after parsing attributes in process `syz.0.728'. [ 143.768606][ T8568] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 143.794860][ T8568] batadv0: left promiscuous mode [ 143.822316][ T8568] bond0 (unregistering): Released all slaves [ 143.839494][ T8595] netlink: 'syz.3.730': attribute type 3 has an invalid length. [ 143.847860][ T8595] netlink: 224 bytes leftover after parsing attributes in process `syz.3.730'. [ 143.879224][ T8584] batadv_slave_1: entered promiscuous mode [ 144.068449][ T8601] netlink: 120 bytes leftover after parsing attributes in process `syz.3.731'. [ 144.078859][ T8601] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 144.114307][ T8603] vlan1: entered promiscuous mode [ 144.371783][ T8611] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 144.569961][ T8617] bridge0: port 5(wlan1) entered blocking state [ 144.631167][ T8617] bridge0: port 5(wlan1) entered disabled state [ 144.678605][ T8617] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode [ 144.724092][ T8617] mac80211_hwsim hwsim9 wlan1: entered promiscuous mode [ 144.762726][ T8618] syz.3.735 (8618) used obsolete PPPIOCDETACH ioctl [ 144.838267][ T8599] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 145.188528][ T8625] syzkaller0: entered promiscuous mode [ 145.194350][ T8625] syzkaller0: entered allmulticast mode [ 145.286671][ T8627] netlink: 20 bytes leftover after parsing attributes in process `syz.0.739'. [ 145.359822][ T8631] netlink: 76 bytes leftover after parsing attributes in process `syz.2.740'. [ 145.432617][ T8631] netlink: 56 bytes leftover after parsing attributes in process `syz.2.740'. [ 145.448165][ T8633] netlink: 'syz.4.741': attribute type 3 has an invalid length. [ 145.456941][ T8633] netlink: 224 bytes leftover after parsing attributes in process `syz.4.741'. [ 145.486312][ T8631] netlink: 'syz.2.740': attribute type 2 has an invalid length. [ 145.571392][ T8636] set match dimension is over the limit! [ 147.088894][ T8640] vlan2: entered promiscuous mode [ 147.099421][ T8643] pim6reg: entered allmulticast mode [ 147.108197][ T8645] pim6reg: left allmulticast mode [ 147.272499][ T8655] netlink: 'syz.2.748': attribute type 21 has an invalid length. [ 147.328338][ T8651] lo speed is unknown, defaulting to 1000 [ 147.334997][ T8656] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc. [ 147.405634][ T8663] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 147.623571][ T8663] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.776484][ T8663] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.914060][ T8663] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.024673][ T8663] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.225726][ T8663] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.278024][ T8663] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.318561][ T8663] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.369031][ T8663] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.469303][ T8687] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 148.675772][ T8694] netlink: 'syz.2.759': attribute type 4 has an invalid length. [ 148.736377][ T8694] __nla_validate_parse: 7 callbacks suppressed [ 148.736399][ T8694] netlink: 20 bytes leftover after parsing attributes in process `syz.2.759'. [ 148.757182][ T8691] trusted_key: syz.3.758 sent an empty control message without MSG_MORE. [ 148.839542][ T8691] pim6reg: entered allmulticast mode [ 148.908400][ T8700] netlink: 'syz.2.759': attribute type 1 has an invalid length. [ 148.934682][ T8700] netlink: 224 bytes leftover after parsing attributes in process `syz.2.759'. [ 149.060661][ T8691] pim6reg: left allmulticast mode [ 149.325233][ T8713] xt_TCPMSS: Only works on TCP SYN packets [ 149.342815][ T8716] netlink: 'syz.0.762': attribute type 10 has an invalid length. [ 149.404448][ T8724] netlink: 4 bytes leftover after parsing attributes in process `syz.2.764'. [ 149.717255][ T8740] netlink: 36 bytes leftover after parsing attributes in process `syz.3.766'. [ 149.731474][ T8740] netlink: 16 bytes leftover after parsing attributes in process `syz.3.766'. [ 149.750273][ T8737] netlink: 8 bytes leftover after parsing attributes in process `syz.1.769'. [ 149.760143][ T8740] netlink: 36 bytes leftover after parsing attributes in process `syz.3.766'. [ 149.802337][ T8746] netlink: 4 bytes leftover after parsing attributes in process `syz.1.769'. [ 149.824205][ T8740] netlink: 36 bytes leftover after parsing attributes in process `syz.3.766'. [ 150.094778][ T8752] tipc: Enabled bearer , priority 0 [ 150.148499][ T8754] netlink: 12 bytes leftover after parsing attributes in process `syz.4.772'. [ 150.185798][ T8754] bond0: entered promiscuous mode [ 150.227251][ T8754] gretap1: entered promiscuous mode [ 150.248525][ T8754] bond0: (slave gretap1): Enslaving as an active interface with an up link [ 150.698843][ T8776] bond0: (slave batadv0): Releasing backup interface [ 150.719206][ T8776] batadv0 (unregistering): left promiscuous mode [ 150.793762][ T8780] netlink: 'syz.0.777': attribute type 10 has an invalid length. [ 151.215083][ T1788] tipc: Node number set to 4278255617 [ 151.330576][ T8802] netlink: 'syz.4.782': attribute type 4 has an invalid length. [ 151.842701][ T8822] sch_fq: defrate 511 ignored. [ 152.336635][ T8830] netlink: 'syz.0.788': attribute type 10 has an invalid length. [ 152.845308][ T8853] bond0: entered promiscuous mode [ 152.875280][ T8853] gretap1: entered promiscuous mode [ 152.880736][ T8853] bond0: (slave gretap1): Enslaving as an active interface with an up link [ 154.027660][ T8877] netlink: 'syz.1.799': attribute type 10 has an invalid length. [ 154.379107][ T8896] vlan2: entered promiscuous mode [ 154.533921][ T8900] __nla_validate_parse: 7 callbacks suppressed [ 154.533939][ T8900] netlink: 36 bytes leftover after parsing attributes in process `syz.3.808'. [ 154.669590][ T8910] lo speed is unknown, defaulting to 1000 [ 155.146246][ T8920] netlink: 'syz.3.813': attribute type 10 has an invalid length. [ 155.397806][ T8922] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input22 [ 156.568221][ T8954] netlink: 'syz.4.824': attribute type 10 has an invalid length. [ 157.092124][ T8961] sctp: [Deprecated]: syz.0.826 (pid 8961) Use of struct sctp_assoc_value in delayed_ack socket option. [ 157.092124][ T8961] Use struct sctp_sack_info instead [ 157.965652][ T9000] netlink: 'syz.4.835': attribute type 10 has an invalid length. [ 158.140763][ T9005] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 158.239956][ T9007] netlink: 36 bytes leftover after parsing attributes in process `syz.3.837'. [ 158.358333][ T9007] netlink: 12 bytes leftover after parsing attributes in process `syz.3.837'. [ 159.027596][ T9034] netlink: 'syz.0.848': attribute type 10 has an invalid length. [ 159.215321][ T9043] netlink: 40 bytes leftover after parsing attributes in process `syz.3.851'. [ 159.623531][ T9064] netlink: 'syz.2.860': attribute type 10 has an invalid length. [ 159.644455][ T9036] delete_channel: no stack [ 159.670391][ T9066] netlink: 12 bytes leftover after parsing attributes in process `syz.1.861'. [ 159.699491][ T9066] bridge2: port 1(bridge_slave_1) entered blocking state [ 159.707067][ T9066] bridge2: port 1(bridge_slave_1) entered disabled state [ 159.733284][ T9066] bridge_slave_1: entered allmulticast mode [ 159.745820][ T9066] bridge_slave_1: entered promiscuous mode [ 159.800748][ T9066] netlink: 'syz.1.861': attribute type 39 has an invalid length. [ 159.853244][ T9077] netlink: 'syz.2.864': attribute type 10 has an invalid length. [ 159.930721][ T9082] netlink: 'syz.0.863': attribute type 4 has an invalid length. [ 159.960272][ T9074] netlink: 'syz.4.857': attribute type 21 has an invalid length. [ 159.998416][ T9074] netlink: 132 bytes leftover after parsing attributes in process `syz.4.857'. [ 160.017625][ T9074] netlink: 'syz.4.857': attribute type 1 has an invalid length. [ 160.040576][ T9074] netlink: 12 bytes leftover after parsing attributes in process `syz.4.857'. [ 161.127110][ T9110] netlink: 'syz.4.872': attribute type 10 has an invalid length. [ 161.332737][ T9115] netlink: 24 bytes leftover after parsing attributes in process `syz.3.875'. [ 161.341173][ T9117] netlink: 8 bytes leftover after parsing attributes in process `syz.1.874'. [ 161.741720][ T9128] netlink: 8 bytes leftover after parsing attributes in process `syz.4.877'. [ 161.773909][ T5840] Bluetooth: hci4: command 0x0405 tx timeout [ 161.956514][ T9137] netlink: 16 bytes leftover after parsing attributes in process `syz.0.879'. [ 161.957813][ T9130] ip6gretap0: entered promiscuous mode [ 161.985976][ T9130] batadv_slave_0: entered promiscuous mode [ 162.020779][ T9137] batadv1: entered promiscuous mode [ 162.030436][ T9137] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 162.613824][ T9156] netlink: 'syz.2.885': attribute type 21 has an invalid length. [ 162.621643][ T9156] netlink: 132 bytes leftover after parsing attributes in process `syz.2.885'. [ 162.688944][ T9160] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input23 [ 162.776563][ T9165] vlan2: entered promiscuous mode [ 162.788528][ T9165] team0: entered promiscuous mode [ 162.797047][ T9165] team0: Device vlan2 is already an upper device of the team interface [ 162.828699][ T9165] team0: left promiscuous mode [ 162.979262][ T9177] ax25_connect(): syz.1.890 uses autobind, please contact jreuter@yaina.de [ 163.115889][ T9186] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input24 [ 163.633895][ T9192] bond0: left promiscuous mode [ 163.638739][ T9192] bond_slave_0: left promiscuous mode [ 163.649668][ T9192] bond_slave_1: left promiscuous mode [ 163.655935][ T9192] batadv0: left promiscuous mode [ 163.982174][ T9192] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 164.013877][ T9192] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 164.297123][ T9192] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.312966][ T9192] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.321335][ T9192] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.334987][ T9192] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.365383][ T9192] mac80211_hwsim hwsim6 wlan0: left promiscuous mode [ 164.379502][ T9192] macvlan2: left allmulticast mode [ 164.580928][ T9219] netlink: 8 bytes leftover after parsing attributes in process `syz.3.900'. [ 164.585274][ T9216] vlan2: entered promiscuous mode [ 164.639262][ T9222] netlink: 'syz.1.902': attribute type 10 has an invalid length. [ 164.956260][ T9239] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input25 [ 164.996081][ T9244] pimreg: left allmulticast mode [ 165.237831][ T9236] netlink: 'syz.0.906': attribute type 12 has an invalid length. [ 165.258568][ T9257] netlink: 4 bytes leftover after parsing attributes in process `syz.4.911'. [ 165.318229][ T9257] netlink: 'syz.4.911': attribute type 10 has an invalid length. [ 165.359585][ T9257] netlink: 40 bytes leftover after parsing attributes in process `syz.4.911'. [ 165.415822][ T9257] batman_adv: batadv0: Adding interface: vlan1 [ 165.422038][ T9257] batman_adv: batadv0: The MTU of interface vlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 165.454239][ T9257] batman_adv: batadv0: Interface activated: vlan1 [ 165.553486][ T9262] infiniband syz1: set down [ 165.562256][ T9262] infiniband syz1: added syzkaller0 [ 165.636227][ T9262] RDS/IB: syz1: added [ 165.653377][ T9273] netlink: 'syz.0.917': attribute type 1 has an invalid length. [ 165.653416][ T9262] smc: adding ib device syz1 with port count 1 [ 165.668750][ T9262] smc: ib device syz1 port 1 has pnetid [ 165.732158][ T9275] netlink: 12 bytes leftover after parsing attributes in process `syz.0.917'. [ 166.006390][ T9290] netlink: 4 bytes leftover after parsing attributes in process `syz.1.920'. [ 166.728182][ T9323] netlink: 32 bytes leftover after parsing attributes in process `syz.0.926'. [ 166.734733][ T9322] vlan0: entered promiscuous mode [ 167.315547][ T52] smc: removing ib device syz1 [ 167.541758][ T9327] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input26 [ 168.548749][ T9359] xt_cgroup: path and classid specified [ 168.582212][ T9359] batadv_slave_0: entered allmulticast mode [ 168.800453][ T9368] netlink: 'syz.3.938': attribute type 1 has an invalid length. [ 169.711936][ T9405] netlink: 48 bytes leftover after parsing attributes in process `syz.4.948'. [ 169.921123][ T9408] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.952'. [ 169.961172][ T9408] openvswitch: netlink: Message has 8 unknown bytes. [ 170.007168][ T9408] netlink: 'syz.3.952': attribute type 12 has an invalid length. [ 170.650431][ T9441] netlink: 1256 bytes leftover after parsing attributes in process `syz.4.963'. [ 170.686573][ T9441] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 170.728735][ T9442] netlink: 'syz.4.963': attribute type 2 has an invalid length. [ 170.830330][ T9442] sctp: [Deprecated]: syz.4.963 (pid 9442) Use of int in max_burst socket option deprecated. [ 170.830330][ T9442] Use struct sctp_assoc_value instead [ 171.263833][ T9455] lo speed is unknown, defaulting to 1000 [ 171.673583][ T9471] netlink: 8 bytes leftover after parsing attributes in process `syz.2.972'. [ 171.682532][ T9471] netlink: 36 bytes leftover after parsing attributes in process `syz.2.972'. [ 171.722676][ T9458] lo speed is unknown, defaulting to 1000 [ 171.740344][ T9474] xt_CT: You must specify a L4 protocol and not use inversions on it [ 173.510790][ T9523] veth0_vlan: entered allmulticast mode [ 173.557379][ T9523] smc: net device bond0 applied user defined pnetid SYZ0 [ 173.561780][ T9525] lo speed is unknown, defaulting to 1000 [ 173.684087][ T9529] tipc: Enabling of bearer rejected, failed to enable media [ 173.707333][ T9529] netlink: 'syz.4.986': attribute type 1 has an invalid length. [ 173.865276][ T9534] netlink: 36 bytes leftover after parsing attributes in process `syz.0.988'. [ 174.181490][ T9542] ip6gretap0: entered promiscuous mode [ 174.210779][ T9542] batadv_slave_0: entered promiscuous mode [ 174.899281][ T9553] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 174.909820][ T9553] bond_slave_0: left promiscuous mode [ 174.928987][ T9553] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 174.943953][ T9553] bond_slave_1: left promiscuous mode [ 174.949960][ T9562] netlink: 'syz.0.994': attribute type 10 has an invalid length. [ 174.966076][ T9553] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 174.975178][ T9553] batadv0: left promiscuous mode [ 174.980791][ T9553] bond0 (unregistering): Released all slaves [ 175.048015][ T9563] ip6gretap0: entered promiscuous mode [ 175.117589][ T9563] batadv_slave_0: entered promiscuous mode [ 175.160024][ T9563] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 175.168634][ T9563] Cannot create hsr debugfs directory [ 175.401246][ T9572] netlink: 'syz.1.997': attribute type 2 has an invalid length. [ 175.432989][ T9572] infiniband syz0: set down [ 175.481125][ T9577] netlink: zone id is out of range [ 175.496080][ T9576] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 175.497881][ T9577] netlink: zone id is out of range [ 175.519890][ T9577] netlink: zone id is out of range [ 175.525498][ T9577] netlink: zone id is out of range [ 175.530750][ T9577] netlink: zone id is out of range [ 175.551889][ T9577] netlink: zone id is out of range [ 175.565091][ T9577] netlink: zone id is out of range [ 175.571260][ T9577] netlink: zone id is out of range [ 175.603239][ T9577] netlink: zone id is out of range [ 175.664446][ T9572] bond0: left promiscuous mode [ 175.669564][ T9572] bridge0: left promiscuous mode [ 175.892716][ T9572] veth0_to_team: left promiscuous mode [ 175.900495][ T9572] veth0_to_team: left allmulticast mode [ 175.929464][ T9572] batadv_slave_1: left promiscuous mode [ 175.958763][ T9572] veth0_vlan: left allmulticast mode [ 176.008354][ T9572] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.023773][ T9572] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.033046][ T9572] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.042076][ T9572] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.137058][ T9574] netlink: 132 bytes leftover after parsing attributes in process `syz.3.998'. [ 176.157455][ T25] lo speed is unknown, defaulting to 1000 [ 176.173344][ T9578] tipc: Enabling of bearer rejected, failed to enable media [ 176.213847][ T25] lo speed is unknown, defaulting to 1000 [ 176.298515][ T9580] vlan0: entered promiscuous mode [ 176.324326][ T9580] team0: Device vlan0 is already an upper device of the team interface [ 178.025638][ T9609] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1007'. [ 178.040731][ T9609] netlink: 'syz.0.1007': attribute type 10 has an invalid length. [ 178.049009][ T9609] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1007'. [ 178.327339][ T9619] rdma_op ffff888024eb41f0 conn xmit_rdma 0000000000000000 [ 178.588719][ T9623] pim6reg: entered allmulticast mode [ 178.600518][ T9623] pim6reg: left allmulticast mode [ 178.878582][ T9626] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 179.198507][ T9637] lo speed is unknown, defaulting to 1000 [ 180.379843][ T9650] tipc: Enabled bearer , priority 0 [ 180.559605][ T9655] vlan3: entered promiscuous mode [ 181.194155][ T9537] net_ratelimit: 427 callbacks suppressed [ 181.194175][ T9537] Set syz1 is full, maxelem 65536 reached [ 181.237921][ T9662] netlink: 'syz.1.1025': attribute type 1 has an invalid length. [ 181.508537][ T9680] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input27 [ 181.540891][ T9677] xt_SECMARK: invalid mode: 0 [ 181.636514][ T9686] vxcan3: entered allmulticast mode [ 181.699930][ T9684] tipc: Enabling of bearer rejected, failed to enable media [ 181.809704][ T9695] x_tables: duplicate underflow at hook 1 [ 182.302672][ T9709] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1039'. [ 183.419449][ T9736] tipc: Enabling of bearer rejected, already enabled [ 183.510580][ T9739] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1048'. [ 183.541329][ T9739] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1048'. [ 184.127762][ T9751] delete_channel: no stack [ 184.890677][ T9771] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1056'. [ 184.966137][ T9763] netlink: 'syz.4.1056': attribute type 10 has an invalid length. [ 185.048621][ T9763] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1056'. [ 185.326791][ T9784] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1061'. [ 185.609733][ T9789] lo speed is unknown, defaulting to 1000 [ 186.121888][ T9789] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1064'. [ 186.132408][ T9789] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1064'. [ 186.141904][ T9789] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1064'. [ 186.151255][ T9789] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1064'. [ 186.335897][ T5833] Bluetooth: hci1: command 0x0406 tx timeout [ 186.342052][ T5833] Bluetooth: hci2: command 0x0406 tx timeout [ 186.349877][ T5837] Bluetooth: hci3: command 0x0406 tx timeout [ 186.582824][ T9820] netlink: 'syz.0.1073': attribute type 1 has an invalid length. [ 186.639242][ T9820] bond1: entered promiscuous mode [ 186.645457][ T9820] 8021q: adding VLAN 0 to HW filter on device bond1 [ 186.660550][ T9822] batadv2: entered promiscuous mode [ 186.687196][ T9822] batadv2: entered allmulticast mode [ 186.748286][ T9822] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 186.794578][ T9822] bond1: (slave batadv2): making interface the new active one [ 186.809421][ T9822] bond1: (slave batadv2): Enslaving as an active interface with an up link [ 186.827810][ T9824] veth0_to_batadv: entered promiscuous mode [ 187.461470][ T9837] pimreg3: entered allmulticast mode [ 187.469570][ T9835] __nla_validate_parse: 1 callbacks suppressed [ 187.469588][ T9835] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1077'. [ 187.699106][ T9846] lo speed is unknown, defaulting to 1000 [ 188.211013][ T9858] nr0: entered allmulticast mode [ 188.333526][ T9846] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1082'. [ 188.349757][ T9846] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1082'. [ 188.377314][ T9846] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1082'. [ 188.394234][ T9846] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1082'. [ 188.622096][ T9876] set match dimension is over the limit! [ 188.684154][ T9876] pim6reg: entered allmulticast mode [ 188.718759][ T9876] pim6reg: left allmulticast mode [ 189.312719][ T9879] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 189.329060][ T9879] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 189.338624][ T9879] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 189.347811][ T9879] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 191.489624][ T9944] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 191.523338][ T9944] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 191.553106][ T9944] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 20000 - 0 [ 191.561601][ T9944] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 20000 - 0 [ 191.627277][ T9941] tipc: Started in network mode [ 191.632217][ T9941] tipc: Node identity aaaaaaaaaa3, cluster identity 7 [ 191.644811][ T9941] tipc: Enabled bearer , priority 0 [ 192.405329][ T9986] tipc: Enabling of bearer rejected, failed to enable media [ 192.763087][ T51] tipc: Node number set to 10136234 [ 193.130340][T10016] lo speed is unknown, defaulting to 1000 [ 193.199832][T10020] team0 (unregistering): Port device team_slave_0 removed [ 193.253618][T10020] team0 (unregistering): Port device team_slave_1 removed [ 193.371928][T10031] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 193.378864][T10031] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 194.006340][T10052] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1155'. [ 194.261508][T10064] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 194.480446][T10070] tipc: Enabling of bearer rejected, already enabled [ 194.800483][ T5145] Bluetooth: hci4: link tx timeout [ 194.805922][ T5145] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 195.034188][T10090] tipc: Enabling of bearer rejected, failed to enable media [ 195.100574][T10095] Cannot find del_set index 4 as target [ 195.273768][T10080] hsr_slave_0: left promiscuous mode [ 195.295124][T10080] hsr_slave_1: left promiscuous mode [ 195.462075][T10105] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1173'. [ 195.522441][T10105] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1173'. [ 196.116623][T10121] netlink: 'syz.1.1179': attribute type 6 has an invalid length. [ 196.294781][T10128] tipc: Enabling of bearer rejected, already enabled [ 196.441760][T10134] netlink: 'syz.4.1185': attribute type 3 has an invalid length. [ 196.468817][T10134] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1185'. [ 196.482695][T10137] xt_connbytes: Forcing CT accounting to be enabled [ 196.534354][T10137] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 196.621689][T10143] Unknown options in mask 1f4 [ 196.709710][T10146] ip6gre1: entered allmulticast mode [ 196.904170][ T5846] Bluetooth: hci4: command 0x0405 tx timeout [ 199.883633][T10266] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1219'. [ 201.268051][T10291] lo speed is unknown, defaulting to 1000 [ 202.078477][T10294] lo speed is unknown, defaulting to 1000 [ 202.421552][T10317] netlink: 'syz.0.1232': attribute type 10 has an invalid length. [ 204.159934][T10400] lo speed is unknown, defaulting to 1000 [ 204.960225][T10400] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1255'. [ 204.983040][T10400] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1255'. [ 205.011190][T10400] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1255'. [ 205.047468][T10400] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1255'. [ 205.701037][T10430] netlink: 84 bytes leftover after parsing attributes in process `syz.2.1266'. [ 205.737095][T10430] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1266'. [ 205.961415][T10443] lo speed is unknown, defaulting to 1000 [ 206.734101][T10467] lo speed is unknown, defaulting to 1000 [ 206.823642][T10443] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1271'. [ 206.857986][T10443] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1271'. [ 206.883424][T10443] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1271'. [ 206.892452][T10443] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1271'. [ 207.230418][T10477] ip6t_srh: unknown srh match flags 4000 [ 207.798194][T10499] lo speed is unknown, defaulting to 1000 [ 208.374173][T10532] netlink: 'syz.2.1301': attribute type 16 has an invalid length. [ 210.006843][T10598] vlan2: entered promiscuous mode [ 211.427338][T10617] Set syz1 is full, maxelem 65536 reached [ 211.931382][T10687] __nla_validate_parse: 10 callbacks suppressed [ 211.931398][T10687] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1370'. [ 212.890042][T10727] vlan0: entered promiscuous mode [ 212.901399][T10727] team0: Device vlan0 is already an upper device of the team interface [ 213.189974][T10741] lo speed is unknown, defaulting to 1000 [ 213.804986][T10741] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1392'. [ 213.821433][T10741] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1392'. [ 213.830691][T10741] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1392'. [ 213.849225][T10741] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1392'. [ 214.063336][T10775] netlink: 188 bytes leftover after parsing attributes in process `syz.0.1405'. [ 214.090139][T10775] netlink: 'syz.0.1405': attribute type 1 has an invalid length. [ 214.290482][T10785] netlink: 'syz.3.1406': attribute type 9 has an invalid length. [ 214.939613][T10816] tipc: Enabling of bearer rejected, already enabled [ 215.500295][T10850] tipc: Enabling of bearer rejected, already enabled [ 215.648037][T10858] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1436'. [ 215.693793][T10863] tipc: New replicast peer: 255.255.255.255 [ 215.702293][T10863] tipc: Enabled bearer , priority 10 [ 215.717595][T10863] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1438'. [ 216.751084][T10920] sch_fq: defrate 511 ignored. [ 217.341488][T10948] tap0: tun_chr_ioctl cmd 1074025692 [ 218.464702][T11012] lo speed is unknown, defaulting to 1000 [ 218.853733][T11014] lo speed is unknown, defaulting to 1000 [ 219.326565][T11012] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1504'. [ 219.335904][T11012] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1504'. [ 219.353543][T11012] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1504'. [ 219.362574][T11012] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1504'. [ 219.363325][T11043] netlink: 'syz.1.1514': attribute type 16 has an invalid length. [ 219.374044][T11014] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1505'. [ 219.388888][T11014] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1505'. [ 219.398079][T11014] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1505'. [ 219.408502][T11043] netlink: 'syz.1.1514': attribute type 3 has an invalid length. [ 219.417752][T11014] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1505'. [ 219.426164][T11043] netlink: 'syz.1.1514': attribute type 1 has an invalid length. [ 219.470100][T11043] netlink: 'syz.1.1514': attribute type 2 has an invalid length. [ 219.479063][T11043] netlink: 64022 bytes leftover after parsing attributes in process `syz.1.1514'. [ 219.899018][T11059] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1521'. [ 220.198733][T11072] lo speed is unknown, defaulting to 1000 [ 220.904103][T11094] netlink: zone id is out of range [ 220.917434][T11094] netlink: set zone limit has 8 unknown bytes [ 221.072460][T11101] tipc: Enabling of bearer rejected, already enabled [ 221.519623][T11124] lo speed is unknown, defaulting to 1000 [ 221.905898][T11135] lo speed is unknown, defaulting to 1000 [ 222.190786][T11152] vlan3: entered promiscuous mode [ 222.210503][T11152] team0: entered promiscuous mode [ 222.223895][T11152] team0: Device vlan3 is already an upper device of the team interface [ 222.253866][T11152] team0: left promiscuous mode [ 223.042629][T11177] tipc: Enabling of bearer rejected, failed to enable media [ 223.071511][T11182] ip6gretap0: entered promiscuous mode [ 223.122500][T11182] batadv_slave_0: entered promiscuous mode [ 223.131944][T11182] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 223.142650][T11182] Cannot create hsr debugfs directory [ 223.648306][ T29] audit: type=1107 audit(1734052370.679:2): pid=11209 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='"dTQyc_ۻm4qvļfDJujȟXS8_in|s}Ol^t̹m+zdw-0Zܘ̿Jgdㆭ,wEG' [ 224.391748][T11231] __nla_validate_parse: 15 callbacks suppressed [ 224.391841][T11231] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1588'. [ 225.571575][T11176] Set syz1 is full, maxelem 65536 reached [ 226.341859][T11305] tipc: Enabling of bearer rejected, already enabled [ 226.905861][T11336] nicvf0: tun_chr_ioctl cmd 1074025676 [ 226.911713][T11336] nicvf0: owner set to 0 [ 226.975954][ T5837] Bluetooth: hci4: command 0x0405 tx timeout [ 227.290214][T11353] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1630'. [ 228.309654][T11405] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1651'. [ 228.577383][T11417] vlan2: entered promiscuous mode [ 229.053112][ T5837] Bluetooth: hci4: command 0x0405 tx timeout [ 230.687618][T11529] sctp: [Deprecated]: syz.3.1695 (pid 11529) Use of struct sctp_assoc_value in delayed_ack socket option. [ 230.687618][T11529] Use struct sctp_sack_info instead [ 231.112783][T11556] netlink: 188 bytes leftover after parsing attributes in process `syz.1.1704'. [ 231.122124][T11556] netlink: 'syz.1.1704': attribute type 1 has an invalid length. [ 231.417130][T11572] netlink: 'syz.3.1711': attribute type 2 has an invalid length. [ 231.453387][T11572] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1711'. [ 232.386142][T11628] xt_CT: You must specify a L4 protocol and not use inversions on it [ 232.771482][T11647] netlink: 220 bytes leftover after parsing attributes in process `syz.0.1743'. [ 233.126541][T11663] lo speed is unknown, defaulting to 1000 [ 233.703836][T11684] siw: device registration error -23 [ 233.962042][T11698] tipc: Enabling of bearer rejected, failed to enable media [ 233.978641][T11663] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1750'. [ 233.993020][T11663] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1750'. [ 234.012371][T11663] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1750'. [ 234.039015][T11663] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1750'. [ 234.725086][T11725] lo speed is unknown, defaulting to 1000 [ 235.387073][T11748] lo speed is unknown, defaulting to 1000 [ 235.411047][T11763] netlink: 'syz.3.1785': attribute type 10 has an invalid length. [ 235.657556][T11751] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1779'. [ 235.688169][T11751] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1779'. [ 235.718013][T11751] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1779'. [ 235.783157][T11779] tipc: Enabling of bearer rejected, failed to enable media [ 236.263214][T11799] netlink: 'syz.0.1799': attribute type 10 has an invalid length. [ 236.855542][T11820] tipc: Enabling of bearer rejected, failed to enable media [ 237.065779][T11829] __nla_validate_parse: 5 callbacks suppressed [ 237.065799][T11829] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1809'. [ 237.102746][T11835] netlink: 'syz.3.1811': attribute type 10 has an invalid length. [ 237.601989][T11860] tipc: Enabled bearer , priority 10 [ 237.641914][T11863] netlink: 'syz.4.1825': attribute type 10 has an invalid length. [ 237.750718][T11867] netlink: 'syz.1.1828': attribute type 9 has an invalid length. [ 237.763618][T11867] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1828'. [ 237.792207][T11871] netlink: 'syz.4.1829': attribute type 29 has an invalid length. [ 237.802141][T11871] netlink: 'syz.4.1829': attribute type 29 has an invalid length. [ 237.815377][T11871] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1829'. [ 237.936560][T11878] syzkaller1: entered promiscuous mode [ 237.942309][T11878] syzkaller1: entered allmulticast mode [ 238.396926][T11901] netlink: 11 bytes leftover after parsing attributes in process `syz.2.1839'. [ 239.014212][T11934] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1852'. [ 239.378487][T11955] syz.2.1859[11955] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 239.378595][T11955] syz.2.1859[11955] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 239.420375][T11955] syz.2.1859[11955] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 240.099500][T11979] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 240.120756][T11979] tipc: Enabled bearer , priority 10 [ 240.258790][T11992] lo speed is unknown, defaulting to 1000 [ 241.233220][ T874] tipc: Node number set to 4278255617 [ 241.455443][T12047] raw_sendmsg: syz.3.1889 forgot to set AF_INET. Fix it! [ 241.468702][T12048] tipc: Enabling of bearer rejected, failed to enable media [ 241.478955][T12045] netlink: 'syz.1.1890': attribute type 10 has an invalid length. [ 241.493542][T12045] bond0: entered promiscuous mode [ 241.498859][T12045] bridge0: entered promiscuous mode [ 242.141122][T12075] tipc: Enabling of bearer rejected, already enabled [ 242.200057][T12077] netlink: 'syz.4.1903': attribute type 10 has an invalid length. [ 242.287577][T12079] syz.2.1904[12079] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 242.287674][T12079] syz.2.1904[12079] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 242.325288][T12079] syz.2.1904[12079] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 242.337713][ T5837] Bluetooth: hci4: command 0x0405 tx timeout [ 242.466651][T12090] netlink: 'syz.2.1908': attribute type 8 has an invalid length. [ 242.678538][T12103] tipc: Enabling of bearer rejected, failed to enable media [ 242.728373][T12109] netlink: 'syz.4.1916': attribute type 10 has an invalid length. [ 243.344695][T12147] netlink: 'syz.3.1928': attribute type 10 has an invalid length. [ 243.418808][T12150] tipc: Enabling of bearer rejected, failed to enable media [ 243.659679][T12161] vlan0: entered promiscuous mode [ 243.984191][T12177] netlink: 'syz.1.1940': attribute type 10 has an invalid length. [ 244.174213][T12185] tipc: Enabling of bearer rejected, failed to enable media [ 244.475819][T12203] netlink: 'syz.1.1953': attribute type 10 has an invalid length. [ 244.551767][T12207] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1952'. [ 245.162558][T12233] netlink: 'syz.1.1965': attribute type 10 has an invalid length. [ 245.404393][T12241] lo speed is unknown, defaulting to 1000 [ 245.633594][T12253] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 245.634332][ T874] IPVS: starting estimator thread 0... [ 245.783025][T12257] IPVS: using max 23 ests per chain, 55200 per kthread [ 245.821643][T12261] netlink: 'syz.4.1973': attribute type 2 has an invalid length. [ 245.829573][T12261] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1973'. [ 245.889396][T12266] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1976'. [ 246.120138][T12246] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1967'. [ 246.129318][T12246] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1967'. [ 246.138600][T12246] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1967'. [ 246.147931][T12246] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1967'. [ 246.203060][T12280] lo speed is unknown, defaulting to 1000 [ 246.641400][T12285] lo speed is unknown, defaulting to 1000 [ 247.694443][T12326] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1993'. [ 248.061419][T12339] lo speed is unknown, defaulting to 1000 [ 248.289951][T12350] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2001'. [ 248.465142][T12357] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2004'. [ 248.483272][T12357] netlink: 'syz.0.2004': attribute type 7 has an invalid length. [ 248.498147][T12357] netlink: 'syz.0.2004': attribute type 8 has an invalid length. [ 248.547865][T12357] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:16) already exists on: macvlan2 [ 248.583044][T12357] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.614177][T12357] erspan0: entered promiscuous mode [ 248.624618][T12357] batadv_slave_1: entered promiscuous mode [ 248.636192][T12363] Bluetooth: hci0: Opcode 0x0c20 failed: -22 [ 248.646933][T12357] gretap0: entered promiscuous mode [ 248.663089][T12357] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 248.670701][T12357] Cannot create hsr debugfs directory [ 249.816784][T12422] lo speed is unknown, defaulting to 1000 [ 250.653340][ T5145] Bluetooth: hci0: command tx timeout [ 250.860331][T12424] __nla_validate_parse: 7 callbacks suppressed [ 250.860353][T12424] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2028'. [ 250.909339][T12424] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2028'. [ 250.962947][T12424] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2028'. [ 250.971975][T12424] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2028'. [ 251.409651][T12465] netlink: 'syz.4.2044': attribute type 10 has an invalid length. [ 251.417932][T12465] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2044'. [ 251.741089][T12476] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2046'. [ 251.771255][T12476] 8021q: adding VLAN 0 to HW filter on device bond2 [ 251.920560][T12476] 8021q: adding VLAN 0 to HW filter on device bond2 [ 251.953171][T12476] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 251.998281][T12476] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 252.543933][T12503] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2057'. [ 252.807120][T12511] netlink: 'syz.3.2060': attribute type 4 has an invalid length. [ 252.864089][T12516] netlink: 'syz.3.2060': attribute type 4 has an invalid length. [ 252.875507][T12394] Set syz1 is full, maxelem 65536 reached [ 253.036634][T12522] batadv_slave_0: entered promiscuous mode [ 253.048464][T12520] batadv_slave_0: left promiscuous mode [ 253.232120][T12535] tipc: Enabling of bearer rejected, failed to enable media [ 253.902723][T12565] lo speed is unknown, defaulting to 1000 [ 253.968415][T12573] tipc: Enabling of bearer rejected, failed to enable media [ 254.104420][T12578] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2084'. [ 254.179065][T12578] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 254.186416][T12578] IPv6: NLM_F_CREATE should be set when creating new route [ 254.196142][T12581] netlink: 'syz.4.2085': attribute type 1 has an invalid length. [ 254.221713][T12581] netlink: 'syz.4.2085': attribute type 4 has an invalid length. [ 254.240008][T12581] netlink: 15334 bytes leftover after parsing attributes in process `syz.4.2085'. [ 254.284258][T12583] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2086'. [ 254.776354][T12565] syzkaller1: entered promiscuous mode [ 254.789765][T12565] syzkaller1: entered allmulticast mode [ 254.895486][T12603] lo speed is unknown, defaulting to 1000 [ 255.141874][T12605] netlink: 'syz.1.2093': attribute type 4 has an invalid length. [ 255.195618][T12609] netlink: 'syz.1.2093': attribute type 4 has an invalid length. [ 255.242826][T12609] infiniband syz0: set active [ 255.285955][ T874] lo speed is unknown, defaulting to 1000 [ 255.303409][ T874] lo speed is unknown, defaulting to 1000 [ 255.419010][T12618] tipc: Enabling of bearer rejected, already enabled [ 256.154041][T12654] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2108'. [ 256.377649][T12664] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2111'. [ 256.392195][T12662] sit0: entered promiscuous mode [ 256.414510][T12662] netlink: 'syz.3.2112': attribute type 1 has an invalid length. [ 256.422285][T12662] netlink: 1 bytes leftover after parsing attributes in process `syz.3.2112'. [ 257.359281][T12719] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2131'. [ 258.037242][T12755] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2144'. [ 258.154516][T12759] netlink: 'syz.4.2146': attribute type 39 has an invalid length. [ 258.502843][T12765] netlink: 6 bytes leftover after parsing attributes in process `syz.3.2148'. [ 259.175784][T12800] netlink: 'syz.1.2161': attribute type 10 has an invalid length. [ 259.183873][T12800] syz_tun: entered promiscuous mode [ 259.191550][T12800] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 259.628717][T12820] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2169'. [ 259.638083][T12820] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2169'. [ 259.666269][T12820] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2169'. [ 259.676577][T12820] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2169'. [ 262.047194][T12862] __nla_validate_parse: 2 callbacks suppressed [ 262.047213][T12862] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2181'. [ 262.103771][T12867] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2184'. [ 262.731744][T12891] tipc: Failed to remove unknown binding: 66,1,1/0:32691165/32691167 [ 262.751316][T12891] tipc: Failed to remove unknown binding: 66,1,1/0:32691165/32691167 [ 263.171746][T12907] netlink: 'syz.3.2200': attribute type 10 has an invalid length. [ 267.052570][T12960] lo speed is unknown, defaulting to 1000 [ 267.472334][T12963] lo speed is unknown, defaulting to 1000 [ 267.618873][T12980] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2229'. [ 267.835091][T12991] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2230'. [ 267.837608][T12985] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2222'. [ 267.854073][T12985] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2222'. [ 267.863157][T12985] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2222'. [ 267.872633][T12985] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2222'. [ 267.890180][T12991] 8021q: adding VLAN 0 to HW filter on device bond2 [ 267.934452][T12994] bond2: (slave bridge3): Enslaving as an active interface with an up link [ 267.999003][T12960] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2221'. [ 268.008218][T12960] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2221'. [ 268.021117][T12960] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2221'. [ 268.030410][T12960] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2221'. [ 268.334125][T13002] xt_recent: Unsupported userspace flags (00000042) [ 268.745652][T13014] syzkaller0: entered promiscuous mode [ 268.751168][T13014] syzkaller0: entered allmulticast mode [ 268.831572][T13017] siw: device registration error -23 [ 270.802308][T13037] lo speed is unknown, defaulting to 1000 [ 272.676695][T13047] vcan0: entered promiscuous mode [ 272.681787][T13047] vlan0: entered promiscuous mode [ 272.688550][T13056] __nla_validate_parse: 5 callbacks suppressed [ 272.688568][T13056] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2249'. [ 272.712244][T13056] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 272.719535][T13056] IPv6: NLM_F_CREATE should be set when creating new route [ 272.726840][T13056] IPv6: NLM_F_CREATE should be set when creating new route [ 272.738752][T13057] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.748826][T13057] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.767326][T13057] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.775823][T13057] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.210183][T13080] netlink: 'syz.2.2259': attribute type 4 has an invalid length. [ 273.399077][T13088] syz.2.2261[13088] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 273.399278][T13088] syz.2.2261[13088] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 273.411021][T13088] syz.2.2261[13088] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 273.567262][ T1097] bridge0: port 2(bridge_slave_1) entered disabled state [ 273.912772][T13105] lo speed is unknown, defaulting to 1000 [ 274.109511][T13112] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2270'. [ 274.168318][T13114] netlink: 'syz.4.2272': attribute type 2 has an invalid length. [ 274.209770][T13118] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 274.251056][T13118] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 274.270884][T13111] lo speed is unknown, defaulting to 1000 [ 274.299236][T13118] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !寿$ULvyآDUDw}z [ 274.628543][T13105] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2269'. [ 274.663202][T13105] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2269'. [ 274.681526][T13129] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2275'. [ 274.692396][T13105] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2269'. [ 274.740423][T13105] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2269'. [ 275.228723][T13141] sctp: [Deprecated]: syz.1.2280 (pid 13141) Use of int in maxseg socket option. [ 275.228723][T13141] Use struct sctp_assoc_value instead [ 276.526650][T13171] lo speed is unknown, defaulting to 1000 [ 276.962120][T13176] siw: device registration error -23 [ 277.357440][T13171] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2289'. [ 277.367417][T13171] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2289'. [ 277.376689][T13171] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2289'. [ 277.550856][T13192] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 49938 - 0 [ 277.574245][T13192] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 49938 - 0 [ 277.582554][T13192] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 49938 - 0 [ 277.628595][T13192] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 49938 - 0 [ 277.659173][T13192] netdevsim netdevsim3 eth0: set [1, 2] type 2 family 0 port 46000 - 0 [ 277.707053][T13192] netdevsim netdevsim3 eth1: set [1, 2] type 2 family 0 port 46000 - 0 [ 277.779705][T13192] netdevsim netdevsim3 eth2: set [1, 2] type 2 family 0 port 46000 - 0 [ 277.842690][T13192] netdevsim netdevsim3 eth3: set [1, 2] type 2 family 0 port 46000 - 0 [ 277.857818][T13192] geneve3: entered promiscuous mode [ 277.864604][T13192] geneve3: entered allmulticast mode [ 277.933542][T13200] netlink: 'syz.3.2295': attribute type 4 has an invalid length. [ 277.970839][T13201] lo speed is unknown, defaulting to 1000 [ 278.241315][T13210] lo speed is unknown, defaulting to 1000 [ 278.443523][T13221] __nla_validate_parse: 1 callbacks suppressed [ 278.443544][T13221] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2303'. [ 279.357207][T13234] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2306'. [ 279.867057][T13236] lo speed is unknown, defaulting to 1000 [ 279.981523][T13245] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 279.990357][T13245] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 279.998775][T13245] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 280.007163][T13245] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 280.025768][T13245] vxlan0: entered promiscuous mode [ 280.038670][T13245] vxlan0: entered allmulticast mode [ 280.087577][T13245] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 280.096509][T13245] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 280.105116][T13245] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 280.113617][T13245] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 280.311462][T13240] lo speed is unknown, defaulting to 1000 [ 280.714318][T13241] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2307'. [ 280.778156][T13241] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2307'. [ 280.893985][T13241] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2307'. [ 280.923861][T13241] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2307'. [ 280.930728][T13257] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2313'. [ 281.192482][T13260] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2314'. [ 281.234335][T13262] veth0_to_team: entered promiscuous mode [ 281.268432][T13262] veth0_to_team: entered allmulticast mode [ 282.738319][T13297] lo: entered allmulticast mode [ 282.788120][T13297] tunl0: entered allmulticast mode [ 282.823725][T13297] gre0: entered allmulticast mode [ 282.848525][T13297] gretap0: entered allmulticast mode [ 282.883704][T13297] erspan0: entered allmulticast mode [ 282.933563][T13297] ip_vti0: entered allmulticast mode [ 282.958063][T13297] ip6_vti0: entered allmulticast mode [ 282.982118][T13297] sit0: left promiscuous mode [ 282.995588][T13297] sit0: entered allmulticast mode [ 283.023895][T13297] ip6tnl0: entered allmulticast mode [ 283.049587][T13297] ip6gre0: entered allmulticast mode [ 283.100773][T13297] ip6gretap0: entered allmulticast mode [ 283.126176][T13297] bridge0: port 2(bridge_slave_1) entered disabled state [ 283.133724][T13297] bridge0: port 1(bridge_slave_0) entered disabled state [ 283.172215][T13297] bridge0: entered allmulticast mode [ 283.199272][T13297] vcan0: entered allmulticast mode [ 283.227982][T13297] team0: entered allmulticast mode [ 283.243186][T13297] team_slave_0: entered allmulticast mode [ 283.263463][T13297] team_slave_1: entered allmulticast mode [ 283.282041][T13297] dummy0: entered allmulticast mode [ 283.326427][T13297] nlmon0: entered allmulticast mode [ 283.340325][T13297] caif0: entered allmulticast mode [ 283.360886][T13297] batadv0: entered allmulticast mode [ 283.379181][T13297] veth0: entered allmulticast mode [ 283.403706][T13297] veth1: entered allmulticast mode [ 283.428987][T13297] wg0: entered allmulticast mode [ 283.617363][T13297] wg1: entered allmulticast mode [ 283.721673][T13297] wg2: entered allmulticast mode [ 283.729889][T13297] veth0_to_bridge: entered allmulticast mode [ 283.784720][T13297] veth1_to_bridge: entered allmulticast mode [ 283.825659][T13297] veth0_to_bond: entered allmulticast mode [ 283.858762][T13297] bond_slave_0: entered allmulticast mode [ 283.881070][T13297] veth1_to_bond: entered allmulticast mode [ 283.895676][T13304] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2326'. [ 283.911564][T13304] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2326'. [ 283.942224][T13297] bond_slave_1: entered allmulticast mode [ 283.963090][T13304] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2326'. [ 283.972096][T13304] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2326'. [ 283.994134][T13297] veth0_to_team: left promiscuous mode [ 284.024670][T13297] veth1_to_team: entered allmulticast mode [ 284.064559][T13297] veth0_to_batadv: left promiscuous mode [ 284.075827][T13297] veth0_to_batadv: entered allmulticast mode [ 284.099265][T13297] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 284.137155][T13297] batadv_slave_0: entered allmulticast mode [ 284.173806][T13297] veth1_to_batadv: entered allmulticast mode [ 284.206969][T13297] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 284.242751][T13297] batadv_slave_1: entered allmulticast mode [ 284.262438][T13297] xfrm0: entered allmulticast mode [ 284.275258][T13297] veth0_to_hsr: entered allmulticast mode [ 284.286908][T13297] hsr_slave_0: entered allmulticast mode [ 284.302301][T13297] veth1_to_hsr: entered allmulticast mode [ 284.312666][T13297] hsr_slave_1: entered allmulticast mode [ 284.326990][T13297] veth1_virt_wifi: entered allmulticast mode [ 284.353703][T13297] veth0_virt_wifi: entered allmulticast mode [ 284.378853][T13297] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 284.394901][T13297] geneve0: entered allmulticast mode [ 284.400526][T13297] geneve1: entered allmulticast mode [ 284.412057][T13297] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode [ 284.422439][T13297] batadv0.11: entered allmulticast mode [ 284.441054][T13297] vlan2: entered allmulticast mode [ 284.461306][T13297] syztnl0: entered allmulticast mode [ 284.482295][T13297] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.519518][T13297] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.528473][T13297] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.548661][T13297] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.574023][T13297] geneve2: entered allmulticast mode [ 284.674716][T13297] netdevsim netdevsim3 eth0: entered allmulticast mode [ 284.682093][T13297] netdevsim netdevsim3 eth1: entered allmulticast mode [ 284.702275][T13297] netdevsim netdevsim3 eth2: entered allmulticast mode [ 284.729447][T13297] netdevsim netdevsim3 eth3: entered allmulticast mode [ 284.743394][T13297] veth2: entered allmulticast mode [ 284.761263][T13297] veth3: entered allmulticast mode [ 284.770335][T13297] hsr0: entered allmulticast mode [ 284.781071][T13297] gre1: entered allmulticast mode [ 284.790556][T13297] veth4: entered allmulticast mode [ 284.809650][T13297] veth5: entered allmulticast mode [ 284.876249][T13297] veth6: entered allmulticast mode [ 284.881601][T13297] veth7: entered allmulticast mode [ 284.887648][T13297] veth8: entered allmulticast mode [ 284.893039][T13297] veth9: entered allmulticast mode [ 284.898406][T13297] vlan0: left promiscuous mode [ 284.903332][T13297] vlan0: entered allmulticast mode [ 284.910303][T13297] netdevsim netdevsim3 eth0: unset [1, 2] type 2 family 0 port 46000 - 0 [ 284.919001][T13297] netdevsim netdevsim3 eth1: unset [1, 2] type 2 family 0 port 46000 - 0 [ 284.927570][T13297] netdevsim netdevsim3 eth2: unset [1, 2] type 2 family 0 port 46000 - 0 [ 284.936462][T13297] netdevsim netdevsim3 eth3: unset [1, 2] type 2 family 0 port 46000 - 0 [ 284.945376][T13297] netdevsim netdevsim3 eth0: unset [1, 1] type 2 family 0 port 49938 - 0 [ 284.954422][T13297] netdevsim netdevsim3 eth1: unset [1, 1] type 2 family 0 port 49938 - 0 [ 284.963077][T13297] netdevsim netdevsim3 eth2: unset [1, 1] type 2 family 0 port 49938 - 0 [ 284.971720][T13297] netdevsim netdevsim3 eth3: unset [1, 1] type 2 family 0 port 49938 - 0 [ 284.980868][T13297] geneve3: left promiscuous mode [ 284.988106][T13297] erspan1: entered allmulticast mode [ 284.998648][T13300] lo speed is unknown, defaulting to 1000 [ 285.509163][T13316] sch_tbf: burst 4398 is lower than device lo mtu (39798) ! [ 285.957135][T13331] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2334'. [ 286.191548][T13335] xt_HMARK: spi-set and port-set can't be combined [ 286.744946][T13350] netlink: 'syz.4.2343': attribute type 1 has an invalid length. [ 286.752734][T13350] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2343'. [ 286.769264][T13352] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2342'. [ 286.822462][T13350] lo speed is unknown, defaulting to 1000 [ 286.950094][T13358] netlink: 504 bytes leftover after parsing attributes in process `syz.1.2346'. [ 287.027072][T13361] syzkaller0: entered promiscuous mode [ 287.032599][T13361] syzkaller0: entered allmulticast mode [ 287.073408][T13366] tipc: Enabling of bearer rejected, already enabled [ 287.294665][T13371] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2350'. [ 289.210251][T13385] veth1_to_bridge: left allmulticast mode [ 289.505576][T13399] bridge0: port 4(ip6gretap0) entered disabled state [ 289.513672][T13399] bridge0: port 3(team0) entered disabled state [ 289.520759][T13399] bridge0: port 1(bridge_slave_0) entered disabled state [ 289.585239][T13399] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 289.598151][T13399] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 289.641068][T13399] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.650392][T13399] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.659957][T13399] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.668863][T13399] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.681713][T13399] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 289.711961][T13399] gtp0: left promiscuous mode [ 289.720193][T13399] bond0: left promiscuous mode [ 289.725126][T13399] gretap1: left promiscuous mode [ 289.732700][T13399] batadv1: left promiscuous mode [ 289.745969][T13399] bond1: left promiscuous mode [ 289.753836][T13399] batadv2: left promiscuous mode [ 289.758800][T13399] batadv2: left allmulticast mode [ 289.764877][T13399] vlan0: left promiscuous mode [ 290.592017][T13421] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2365'. [ 290.601193][T13421] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2365'. [ 290.610913][T13421] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2365'. [ 290.655425][T13424] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.746962][T13424] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.821994][T13424] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.889652][T13424] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.897209][T13432] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2368'. [ 291.025305][T13437] rdma_rxe: rxe_newlink: failed to add lo [ 291.035268][T13424] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.083374][T13424] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.117143][T13424] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.143633][T13440] tipc: Enabled bearer , priority 0 [ 291.166564][T13424] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.182050][T13442] tipc: Started in network mode [ 291.201989][T13442] tipc: Node identity ac14140f, cluster identity 4711 [ 291.217201][T13442] tipc: New replicast peer: 255.255.255.255 [ 291.232401][T13442] tipc: Enabled bearer , priority 10 [ 291.299386][T13440] syzkaller0: entered promiscuous mode [ 291.305362][T13440] syzkaller0: entered allmulticast mode [ 291.311568][T13440] tipc: Resetting bearer [ 291.394199][ T1084] tipc: Resetting bearer [ 291.403361][T13438] tipc: Resetting bearer [ 291.593000][T13452] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2375'. [ 291.969035][T13452] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2375'. [ 292.222997][ T8] tipc: Node number set to 2886997007 [ 292.395501][T13465] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2377'. [ 292.418964][T13465] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2377'. [ 292.445513][T13465] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2377'. [ 292.850955][T13473] netlink: 'syz.0.2378': attribute type 4 has an invalid length. [ 294.090473][T13486] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2380'. [ 295.159916][T13438] tipc: Disabling bearer [ 295.203964][T13486] batman_adv: batadv0: Interface deactivated: vlan1 [ 295.210758][T13486] batman_adv: batadv0: Removing interface: vlan1 [ 295.244089][T13486] batman_adv: batadv0: Interface deactivated: macvlan2 [ 295.253003][T13486] batman_adv: batadv0: Removing interface: macvlan2 [ 295.747407][T13510] __nla_validate_parse: 1 callbacks suppressed [ 295.747426][T13510] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2385'. [ 297.381333][T13536] netlink: 'syz.2.2392': attribute type 4 has an invalid length. [ 297.413178][T13536] netlink: 'syz.2.2392': attribute type 4 has an invalid length. [ 297.474484][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 297.633568][T13551] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2397'. [ 297.636633][T13550] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2398'. [ 297.660504][T13551] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2397'. [ 297.686715][T13550] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2398'. [ 297.703714][T13551] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2397'. [ 297.754286][T13553] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2399'. [ 297.831842][T13551] ax25_connect(): syz.4.2397 uses autobind, please contact jreuter@yaina.de [ 297.861155][T13556] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2400'. [ 298.052665][T13560] netlink: 'syz.0.2402': attribute type 12 has an invalid length. [ 298.174334][T13566] netlink: 'syz.2.2404': attribute type 21 has an invalid length. [ 298.188915][T13566] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2404'. [ 298.569765][T13581] (unnamed net_device) (uninitialized): Unable to set down delay as MII monitoring is disabled [ 298.580490][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 298.629767][T13581] lo speed is unknown, defaulting to 1000 [ 298.658566][T13582] tipc: Enabled bearer , priority 10 [ 299.553989][T13609] rdma_rxe: rxe_newlink: failed to add lo [ 299.613457][T13617] netlink: 'syz.1.2420': attribute type 6 has an invalid length. [ 300.321705][T13643] netlink: 'syz.4.2426': attribute type 10 has an invalid length. [ 300.331032][T13643] syz_tun: entered promiscuous mode [ 300.556533][T13654] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2427'. [ 300.606943][T13653] netlink: 'syz.4.2430': attribute type 6 has an invalid length. [ 300.794656][T13664] Cannot find add_set index 0 as target [ 301.017500][T13673] infiniband syz0: set active [ 301.033887][T13673] bond0: (slave syz_tun): Releasing backup interface [ 301.099317][T13673] bond0: (slave bridge0): Releasing backup interface [ 301.100964][T13679] __nla_validate_parse: 1 callbacks suppressed [ 301.100980][T13679] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2434'. [ 301.125127][T13673] bridge0: left promiscuous mode [ 301.131745][T13673] bridge_slave_1: left allmulticast mode [ 301.138705][T13673] bridge_slave_1: left promiscuous mode [ 301.153508][T13681] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2435'. [ 301.164029][T13673] bridge2: port 1(bridge_slave_1) entered disabled state [ 301.202061][ T1788] lo speed is unknown, defaulting to 1000 [ 301.207341][T13678] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2435'. [ 301.250291][T13677] lo speed is unknown, defaulting to 1000 [ 301.690622][T13695] bond2: (slave bridge1): Releasing active interface [ 301.706615][T13698] Cannot find set identified by id 0 to match [ 301.719257][T13695] bond0: (slave gretap1): Releasing backup interface [ 301.729067][T13695] gretap1: left promiscuous mode [ 301.896976][T13705] netlink: 'syz.2.2441': attribute type 21 has an invalid length. [ 301.915445][T13705] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2441'. [ 301.969784][T13706] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2436'. [ 302.003112][T13706] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2436'. [ 302.062933][T13706] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2436'. [ 302.072813][T13706] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2436'. [ 302.781714][T13748] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2456'. [ 303.179491][T13764] smc: net device bond0 erased user defined pnetid SYZ0 [ 303.779669][T13782] lo: left allmulticast mode [ 304.215154][T13803] siw: device registration error -23 [ 304.587488][T13814] netlink: 'syz.1.2481': attribute type 12 has an invalid length. [ 304.603355][T13814] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2481'. [ 304.816663][T13815] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 305.329009][T13857] ax25_connect(): syz.4.2498 uses autobind, please contact jreuter@yaina.de [ 305.540522][T13868] pim6reg: entered allmulticast mode [ 305.552769][T13868] pim6reg: left allmulticast mode [ 305.694378][T13876] netlink: 'syz.4.2506': attribute type 2 has an invalid length. [ 307.381758][T13945] __nla_validate_parse: 2 callbacks suppressed [ 307.381778][T13945] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2532'. [ 307.658402][T13951] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2535'. [ 307.672973][T13951] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2535'. [ 307.688655][T13950] lo speed is unknown, defaulting to 1000 [ 308.515277][T13969] lo speed is unknown, defaulting to 1000 [ 308.853797][T13970] siw: device registration error -23 [ 308.926590][T13977] netlink: 'syz.0.2543': attribute type 3 has an invalid length. [ 309.039063][T13910] Set syz1 is full, maxelem 65536 reached [ 309.168101][T13980] netlink: 88 bytes leftover after parsing attributes in process `syz.0.2545'. [ 309.928595][T14014] netlink: 120 bytes leftover after parsing attributes in process `syz.1.2557'. [ 309.941468][T14014] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 310.028865][T14019] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 310.038034][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 310.068209][T14019] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 310.076688][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 310.262142][T14026] netlink: 88 bytes leftover after parsing attributes in process `syz.2.2561'. [ 310.508397][T14037] siw: device registration error -23 [ 310.567953][T14039] netlink: 'syz.4.2566': attribute type 29 has an invalid length. [ 310.589126][T14041] netlink: 'syz.2.2567': attribute type 2 has an invalid length. [ 310.592027][T14039] netlink: 'syz.4.2566': attribute type 29 has an invalid length. [ 310.601391][T14041] netlink: 'syz.2.2567': attribute type 8 has an invalid length. [ 310.619565][T14041] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2567'. [ 311.024673][T14062] netlink: 88 bytes leftover after parsing attributes in process `syz.1.2577'. [ 312.576214][T14149] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2611'. [ 312.601812][T14149] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2611'. [ 312.620167][T14149] netlink: 'syz.3.2611': attribute type 14 has an invalid length. [ 312.629524][T14149] netlink: 'syz.3.2611': attribute type 11 has an invalid length. [ 313.507579][T14196] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2629'. [ 313.519047][T14196] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2629'. [ 313.529242][T14196] netlink: 'syz.0.2629': attribute type 20 has an invalid length. [ 313.575955][T14198] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2631'. [ 314.111202][T14228] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2642'. [ 314.782411][T14262] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2656'. [ 315.151478][T14290] batadv0: entered promiscuous mode [ 315.156969][T14290] batadv0: left allmulticast mode [ 315.163713][T14292] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2667'. [ 315.168604][T14290] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 315.180134][T14290] batadv0: entered allmulticast mode [ 315.310230][T14301] netlink: 'syz.3.2671': attribute type 9 has an invalid length. [ 315.424801][T14308] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2673'. [ 315.772780][T14330] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2680'. [ 316.982003][T14401] netlink: 'syz.4.2708': attribute type 21 has an invalid length. [ 317.858106][T14464] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 318.038837][T14470] __nla_validate_parse: 3 callbacks suppressed [ 318.038857][T14470] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2729'. [ 318.054066][T14476] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2728'. [ 318.444039][T14498] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2737'. [ 318.850567][T14525] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2746'. [ 318.867318][T14525] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2746'. [ 319.195435][T14553] siw: device registration error -23 [ 319.294151][T14557] netlink: 88 bytes leftover after parsing attributes in process `syz.0.2757'. [ 319.364472][T14565] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2760'. [ 319.631005][T14581] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2762'. [ 319.661532][T14580] lo speed is unknown, defaulting to 1000 [ 320.109042][T14596] netlink: 'syz.3.2767': attribute type 8 has an invalid length. [ 320.122631][T14596] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2767'. [ 320.316435][T14580] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2764'. [ 323.154315][T14768] __nla_validate_parse: 9 callbacks suppressed [ 323.154336][T14768] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2830'. [ 323.563940][T14790] syz_tun: entered promiscuous mode [ 323.572785][T14790] syz_tun: left promiscuous mode [ 323.838026][T14802] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2839'. [ 323.869381][T14804] netlink: 88 bytes leftover after parsing attributes in process `syz.2.2841'. [ 323.869655][T14802] vlan1: entered promiscuous mode [ 324.187934][T14825] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2845'. [ 324.655780][T14851] netlink: 88 bytes leftover after parsing attributes in process `syz.1.2855'. [ 324.939828][T14874] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2861'. [ 325.006623][T14874] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2861'. [ 325.318633][T14897] tipc: Enabled bearer , priority 10 [ 325.543610][T14910] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2876'. [ 325.557254][T14910] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2876'. [ 325.720427][T14924] netlink: 11 bytes leftover after parsing attributes in process `syz.2.2879'. [ 326.591216][T14978] siw: device registration error -23 [ 327.297189][T15011] sch_fq: defrate 117 ignored. [ 327.770027][T15037] tipc: Enabling of bearer rejected, failed to enable media [ 327.885651][T15042] lo speed is unknown, defaulting to 1000 [ 328.637136][T15042] siw: device registration error -23 [ 328.979895][T15080] tipc: Enabling of bearer rejected, already enabled [ 329.438668][T15098] lo speed is unknown, defaulting to 1000 [ 329.687160][T15113] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 329.702715][T15113] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 329.711859][T15113] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 329.730452][T15113] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 329.740684][T15113] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 330.713860][T15161] sctp: [Deprecated]: syz.0.2961 (pid 15161) Use of struct sctp_assoc_value in delayed_ack socket option. [ 330.713860][T15161] Use struct sctp_sack_info instead [ 331.167549][T15191] __nla_validate_parse: 8 callbacks suppressed [ 331.167563][T15191] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2974'. [ 331.204678][T15191] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 331.213884][T15191] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 331.222608][T15191] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 331.231447][T15191] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 331.251238][T15193] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 332.358996][T15255] netlink: 88 bytes leftover after parsing attributes in process `syz.2.2995'. [ 332.702531][T15274] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 332.717068][T15274] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 332.732299][T15274] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 332.746926][T15274] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 332.757449][T15274] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 333.696163][T15295] netlink: 88 bytes leftover after parsing attributes in process `syz.1.3009'. [ 334.422584][T15340] netlink: 'syz.2.3022': attribute type 4 has an invalid length. [ 334.432491][T15343] netlink: 88 bytes leftover after parsing attributes in process `syz.3.3024'. [ 334.456805][T15340] netlink: 'syz.2.3022': attribute type 4 has an invalid length. [ 334.612982][T15355] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3025'. [ 334.717772][T15361] vlan1: entered promiscuous mode [ 334.723155][T15361] gretap0: entered promiscuous mode [ 335.045820][T15380] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3032'. [ 335.204869][T15386] netlink: 88 bytes leftover after parsing attributes in process `syz.3.3036'. [ 336.041548][T15408] macvlan1: entered promiscuous mode [ 336.057080][T15408] macvlan1: left promiscuous mode [ 336.312366][T15384] net_ratelimit: 1 callbacks suppressed [ 336.312388][T15384] Set syz1 is full, maxelem 65536 reached [ 336.527025][T15421] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3045'. [ 336.581782][T15423] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3047'. [ 336.610562][T15423] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3047'. [ 336.621319][T15426] netlink: 88 bytes leftover after parsing attributes in process `syz.2.3048'. [ 336.631805][T15426] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3048'. [ 336.831120][T15433] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3049'. [ 337.145379][T15446] tipc: Enabling of bearer rejected, failed to enable media [ 337.529020][T15462] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3058'. [ 337.930959][T15475] smc: ib device syz0 ibport 1 applied user defined pnetid SYZ2 [ 338.354917][T15497] netlink: 1284 bytes leftover after parsing attributes in process `syz.2.3072'. [ 338.601783][T15512] lo speed is unknown, defaulting to 1000 [ 338.648368][T15510] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 338.679931][T15510] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 338.726939][T15510] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 338.761524][T15510] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 338.802369][T15510] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 339.319453][T15506] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 339.581278][T15541] netlink: 'syz.2.3085': attribute type 39 has an invalid length. [ 339.960435][T15552] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 340.015393][T15552] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 340.035039][T15552] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 340.246888][T15573] vlan3: entered promiscuous mode [ 340.715621][T15593] netlink: 'syz.2.3103': attribute type 2 has an invalid length. [ 340.870180][T15598] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3104'. [ 340.879756][T15598] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3104'. [ 340.891829][T15598] team0: entered promiscuous mode [ 340.901423][T15598] hsr2: Slave A (team0) is not up; please bring it up to get a fully working HSR network [ 340.911453][T15598] hsr2: Slave B (syz_tun) is not up; please bring it up to get a fully working HSR network [ 341.236463][T15612] syzkaller0: entered allmulticast mode [ 341.639257][T15634] sctp: [Deprecated]: syz.0.3115 (pid 15634) Use of int in maxseg socket option. [ 341.639257][T15634] Use struct sctp_assoc_value instead [ 341.798910][T15644] __nla_validate_parse: 1 callbacks suppressed [ 341.798923][T15644] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3117'. [ 341.869815][T15646] lo speed is unknown, defaulting to 1000 [ 341.927604][T15647] net_ratelimit: 3 callbacks suppressed [ 341.927617][T15647] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 341.942155][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 341.963721][T15647] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 341.975699][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 341.995784][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 341.997820][T15648] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3118'. [ 342.014109][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 342.019139][T15648] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3118'. [ 342.023736][ T1788] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 342.031568][T15648] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3118'. [ 342.050422][ T1788] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 342.062864][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 342.068887][T15648] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3118'. [ 342.071636][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 342.410880][T15662] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3122'. [ 342.644458][T15674] netlink: 4096 bytes leftover after parsing attributes in process `syz.3.3127'. [ 342.859797][T15685] tipc: Enabled bearer , priority 0 [ 342.927594][T15685] syzkaller0: entered promiscuous mode [ 342.929342][T15690] ------------[ cut here ]------------ [ 342.939137][T15690] kernel BUG at net/core/skbuff.c:2849! [ 342.939166][T15685] syzkaller0: entered allmulticast mode [ 342.944769][T15690] Oops: invalid opcode: 0000 [#1] PREEMPT SMP KASAN PTI [ 342.944793][T15690] CPU: 0 UID: 0 PID: 15690 Comm: syz.3.3131 Not tainted 6.13.0-rc2-syzkaller-00378-g5098462fbac6 #0 [ 342.944815][T15690] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 342.978043][T15690] RIP: 0010:__pskb_pull_tail+0x1568/0x1570 [ 342.983855][T15690] Code: 38 c1 0f 8c 32 f1 ff ff 4c 89 f7 e8 c2 38 78 f8 e9 25 f1 ff ff e8 f8 d7 11 f8 48 8b 5c 24 08 e9 eb fb ff ff e8 e9 d7 11 f8 90 <0f> 0b 66 0f 1f 44 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 343.003460][T15690] RSP: 0018:ffffc900048fef30 EFLAGS: 00010287 [ 343.009534][T15690] RAX: ffffffff898d8657 RBX: 00000000fffffff2 RCX: 0000000000080000 [ 343.017502][T15690] RDX: ffffc9000e1d1000 RSI: 0000000000000202 RDI: 0000000000000203 [ 343.025471][T15690] RBP: ffff88805cd5b06a R08: ffffffff898d7394 R09: 1ffff1100b9ab65c [ 343.033434][T15690] R10: dffffc0000000000 R11: ffffed100b9ab65d R12: ffff888055507850 [ 343.041397][T15690] R13: ffff888055507780 R14: ffff8880555077f4 R15: ffff888055507780 [ 343.049362][T15690] FS: 00007f5e4746a6c0(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 343.058283][T15690] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 343.064855][T15690] CR2: 00007f5e47469f98 CR3: 000000005c79c000 CR4: 00000000003526f0 [ 343.072818][T15690] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 343.080780][T15690] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 343.088740][T15690] Call Trace: [ 343.092006][T15690] [ 343.094936][T15690] ? __die_body+0x5f/0xb0 [ 343.099260][T15690] ? die+0x9e/0xc0 [ 343.102971][T15690] ? do_trap+0x15a/0x3a0 [ 343.107204][T15690] ? __pskb_pull_tail+0x1568/0x1570 [ 343.112395][T15690] ? do_error_trap+0x1dc/0x2c0 [ 343.117144][T15690] ? __pskb_pull_tail+0x1568/0x1570 [ 343.122332][T15690] ? __pfx_do_error_trap+0x10/0x10 [ 343.127435][T15690] ? handle_invalid_op+0x34/0x40 [ 343.132358][T15690] ? __pskb_pull_tail+0x1568/0x1570 [ 343.137547][T15690] ? exc_invalid_op+0x38/0x50 [ 343.142210][T15690] ? asm_exc_invalid_op+0x1a/0x20 [ 343.147224][T15690] ? __pskb_pull_tail+0x2a4/0x1570 [ 343.152326][T15690] ? __pskb_pull_tail+0x1567/0x1570 [ 343.157529][T15690] ? __pskb_pull_tail+0x1568/0x1570 [ 343.162731][T15690] skb_cow_data+0x2da/0xcb0 [ 343.167230][T15690] tipc_crypto_rcv+0x402/0x24e0 [ 343.172079][T15690] ? tipc_crypto_rcv+0x27f/0x24e0 [ 343.177093][T15690] ? __pfx_tipc_crypto_rcv+0x10/0x10 [ 343.182368][T15690] ? __pfx_tipc_node_find_by_id+0x10/0x10 [ 343.188074][T15690] ? tipc_ehdr_validate+0x186/0x340 [ 343.193277][T15690] tipc_rcv+0x57e/0x12a0 [ 343.197514][T15690] ? __pfx_tipc_rcv+0x10/0x10 [ 343.202183][T15690] ? tipc_l2_rcv_msg+0x28/0x450 [ 343.207026][T15690] tipc_l2_rcv_msg+0x2bd/0x450 [ 343.211780][T15690] ? __pfx_tipc_l2_rcv_msg+0x10/0x10 [ 343.217050][T15690] __netif_receive_skb_list_core+0x8b7/0x980 [ 343.223029][T15690] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 343.229521][T15690] ? dev_gro_receive+0x1318/0x2510 [ 343.234627][T15690] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 343.240946][T15690] netif_receive_skb_list_internal+0xa51/0xe30 [ 343.247093][T15690] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 343.253418][T15690] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 343.260088][T15690] ? eth_type_trans+0x3ce/0x7b0 [ 343.264937][T15690] napi_complete_done+0x2b5/0x870 [ 343.269957][T15690] ? __pfx_napi_complete_done+0x10/0x10 [ 343.275490][T15690] ? napi_gro_frags+0xa5f/0x1360 [ 343.280431][T15690] ? tun_get_user+0x2bbe/0x4890 [ 343.285272][T15690] tun_get_user+0x2ea0/0x4890 [ 343.289940][T15690] ? tun_get_user+0x2bbe/0x4890 [ 343.294790][T15690] ? __pfx_tun_get_user+0x10/0x10 [ 343.299811][T15690] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 343.305263][T15690] ? tun_get+0x1e/0x2f0 [ 343.309413][T15690] ? __pfx_lock_release+0x10/0x10 [ 343.314435][T15690] ? tun_get+0x1e/0x2f0 [ 343.318843][T15690] ? tun_get+0x27d/0x2f0 [ 343.323083][T15690] tun_chr_write_iter+0x10d/0x1f0 [ 343.328099][T15690] do_iter_readv_writev+0x600/0x880 [ 343.333290][T15690] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 343.338997][T15690] ? bpf_lsm_file_permission+0x9/0x10 [ 343.344363][T15690] ? security_file_permission+0x74/0x280 [ 343.349990][T15690] ? rw_verify_area+0x1c3/0x6f0 [ 343.354833][T15690] vfs_writev+0x376/0xba0 [ 343.359158][T15690] ? __pfx_lock_acquire+0x10/0x10 [ 343.364174][T15690] ? __pfx_vfs_writev+0x10/0x10 [ 343.369021][T15690] ? __fget_files+0x2a/0x410 [ 343.373602][T15690] ? __fget_files+0x395/0x410 [ 343.378271][T15690] ? __fget_files+0x2a/0x410 [ 343.382854][T15690] do_writev+0x1b6/0x360 [ 343.387090][T15690] ? __pfx_do_writev+0x10/0x10 [ 343.391844][T15690] ? exc_page_fault+0x590/0x8b0 [ 343.396687][T15690] ? do_syscall_64+0xb6/0x230 [ 343.401353][T15690] do_syscall_64+0xf3/0x230 [ 343.405848][T15690] ? clear_bhb_loop+0x35/0x90 [ 343.410516][T15690] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 343.416396][T15690] RIP: 0033:0x7f5e46585d19 [ 343.420800][T15690] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 343.440393][T15690] RSP: 002b:00007f5e4746a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 343.448805][T15690] RAX: ffffffffffffffda RBX: 00007f5e46776080 RCX: 00007f5e46585d19 [ 343.456764][T15690] RDX: 0000000000000002 RSI: 00000000200001c0 RDI: 0000000000000005 [ 343.464729][T15690] RBP: 00007f5e46601a20 R08: 0000000000000000 R09: 0000000000000000 [ 343.472689][T15690] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 343.480649][T15690] R13: 0000000000000001 R14: 00007f5e46776080 R15: 00007ffe2a53fcd8 [ 343.488616][T15690] [ 343.491624][T15690] Modules linked in: [ 343.495670][T15690] ---[ end trace 0000000000000000 ]--- [ 343.501139][T15690] RIP: 0010:__pskb_pull_tail+0x1568/0x1570 [ 343.503372][T15685] tipc: Resetting bearer [ 343.506989][T15690] Code: 38 c1 0f 8c 32 f1 ff ff 4c 89 f7 e8 c2 38 78 f8 e9 25 f1 ff ff e8 f8 d7 11 f8 48 8b 5c 24 08 e9 eb fb ff ff e8 e9 d7 11 f8 90 <0f> 0b 66 0f 1f 44 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 343.532342][T15690] RSP: 0018:ffffc900048fef30 EFLAGS: 00010287 [ 343.538460][T15690] RAX: ffffffff898d8657 RBX: 00000000fffffff2 RCX: 0000000000080000 [ 343.546498][T15690] RDX: ffffc9000e1d1000 RSI: 0000000000000202 RDI: 0000000000000203 [ 343.554523][T15690] RBP: ffff88805cd5b06a R08: ffffffff898d7394 R09: 1ffff1100b9ab65c [ 343.562514][T15690] R10: dffffc0000000000 R11: ffffed100b9ab65d R12: ffff888055507850 [ 343.570539][T15690] R13: ffff888055507780 R14: ffff8880555077f4 R15: ffff888055507780 [ 343.578549][T15690] FS: 00007f5e4746a6c0(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 343.587498][T15690] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 343.594102][T15690] CR2: 00007f5e47469f98 CR3: 000000005c79c000 CR4: 00000000003526f0 [ 343.602097][T15690] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 343.610118][T15690] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 343.618154][T15690] Kernel panic - not syncing: Fatal exception in interrupt [ 343.625599][T15690] Kernel Offset: disabled [ 343.629913][T15690] Rebooting in 86400 seconds..