last executing test programs: 2.825312476s ago: executing program 4 (id=1757): r0 = socket(0x840000000002, 0x3, 0xff) setsockopt$inet_int(r0, 0x0, 0x16, &(0x7f0000000000)=0x9, 0x4) sendmmsg$inet(r0, &(0x7f0000000bc0)=[{{&(0x7f00000001c0)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000000a40)=[{&(0x7f0000000b00)="1667dbca63e151d2a42d020949b4d03863a664469252181d", 0x18}], 0x1}, 0x6800}], 0x1, 0x0) 2.681210723s ago: executing program 4 (id=1762): r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000300)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000280)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0100000000002f0000000100000038002f800c00020000000000000000002800038008000100000000001c00038006000300000000000600010000000000080002000200000008000300", @ANYRES32=r3], 0x54}}, 0x0) 2.55700528s ago: executing program 4 (id=1767): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100003020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0x14, 0xe80, &(0x7f00000002c0)="0000ffffffffa0fe", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 2.374481159s ago: executing program 4 (id=1772): socket$packet(0x11, 0x3, 0x300) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000280)={0x1, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0x1f, &(0x7f0000000b00)=ANY=[@ANYBLOB="1800000005000000000000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000186100000800000000000000000000808510000001000000b7080000000000007b8af8ff00000000b7080000ffffffff7b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a5100000bf91000000000000b7020000000000008500000085000000b70000000000000095000000000000000c756f7f2658c5f3c1f174148388646506e85620a095c0838f3444d073770eace70e62d23aade6d16cde3ff6fdfbf4982772a8a17efc475c4e90ea095ae192754a85f41910feb78116792912c370fc18f7a4aec76b3efec62fc8f81a80f4882ef62a432034f81c26317b8729b3691a4606f7"], &(0x7f00000003c0)='syzkaller\x00', 0x2, 0xaa, &(0x7f0000000400)=""/170, 0x40f00, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0)={0x1, 0x9, 0x8, 0xc46b}, 0x10, 0x0, 0x0, 0x5, 0x0, &(0x7f0000000500)=[{0x5, 0x4, 0x9, 0xc}, {0x4, 0x3, 0xe}, {0x3, 0x4, 0x8}, {0x1, 0x3, 0x9, 0x1}, {0x5, 0x4, 0xd, 0x8}], 0x10, 0x8}, 0x90) socket$packet(0x11, 0x0, 0x300) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000011c0)={'vxcan0\x00', 0x0}) r4 = socket$can_j1939(0x1d, 0x2, 0x7) connect$can_j1939(r4, &(0x7f0000000080)={0x1d, r3}, 0x18) sendmsg$can_j1939(r4, &(0x7f0000000780)={&(0x7f0000000300)={0x1d, 0x0, 0x0, {0x0, 0xff, 0x1}, 0x2}, 0x18, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x81) writev(0xffffffffffffffff, &(0x7f0000000240)=[{}], 0x1) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0), 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb010000000000000000000c000000010000000d0000e453e236410133a3ba1355bb00001302000000000000"], &(0x7f00000001c0)=""/233, 0x2d, 0xe9, 0x1}, 0x20) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x6, '\x00', 0x0, 0x0}, 0x48) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, &(0x7f0000000340)={&(0x7f0000000840)={0x2, 0x3, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0xfb}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @loopback}}, @sadb_x_sec_ctx={0x1}]}, 0x58}, 0x1, 0x7}, 0x0) bind$can_j1939(r2, &(0x7f0000001200)={0x1d, r3, 0x0, {}, 0xfe}, 0x18) connect$can_j1939(r2, &(0x7f0000000080)={0x1d, r3, 0x0, {}, 0xfe}, 0x18) writev(r2, &(0x7f0000000240)=[{&(0x7f0000000000)='h', 0xfdef}], 0x1) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb010018000000000000002000000120000000020000af1800"], 0x0, 0x3a}, 0x20) socket$packet(0x11, 0x0, 0x300) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="2e00000010008188040f80ec59acbc0413a1f848100000005e0c00f0ffffff180e000a001400000002801687121f", 0x2e}], 0x1}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r6, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000ac0)={0x38, r7, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_NODEID_W1={0xfffffffffffffd96}]}]}, 0x38}}, 0x0) r8 = accept4(r4, &(0x7f00000007c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, &(0x7f0000000840)=0x80, 0x0) setsockopt$RDS_FREE_MR(r8, 0x114, 0x3, &(0x7f00000002c0)={{0xffffff81, 0x2}, 0x28}, 0x10) 1.544921919s ago: executing program 3 (id=1787): r0 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x4e22, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) recvfrom$inet(r0, &(0x7f0000000080)=""/128, 0xfffffce3, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(r1, 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r2, &(0x7f0000000000)="c0", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x15}, 0x1c) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, 0x0, &(0x7f00000004c0)) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000180)={0x2, [0x0, 0x0]}, &(0x7f00000004c0)=0xc) writev(r0, &(0x7f0000000400)=[{&(0x7f0000000200)="67a818beb2c030ce59945b", 0xb}, {&(0x7f0000000180)="910986b7878cdd7d4ff2f297a84d92cf8e671cc4597e59442029d33e333be4782457e1c98bb01e538b6986efe7e2ce55f296ed8966a213bae89284223f0dc81065dd022556fc978e968e9fa2", 0x4c}, {0x0}], 0x3) 1.457344354s ago: executing program 1 (id=1789): r0 = socket$netlink(0x10, 0x3, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x2c}}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000017000000400006803c00040067636d286165732907000000000000000000f12700000000dee20000"], 0x54}}, 0x0) 1.380750434s ago: executing program 1 (id=1791): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd96, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) sendmsg$DEVLINK_CMD_PORT_SET(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="88010000", @ANYRES16=r1, @ANYBLOB="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"], 0x188}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x7a05, 0x1700) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c", 0x8) r2 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f000000cec0)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000180)="9e53ad83fe789c8d", 0x8}], 0x1}}], 0x1, 0x0) r3 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r3, &(0x7f0000000040)={0x2a, 0x1}, 0xc) write(r3, &(0x7f0000000140)="fe", 0xfdef) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_service_time\x00', 0x7a05, 0x1700) setsockopt$inet6_buf(r4, 0x29, 0x3d, &(0x7f00000004c0)="5f3bbbf34b69724bd80ea152942e4d83ff9c990263da74e53a65974da4d77c7a400ba2804a1dfa81d4b4bf7e43b303347267af878d9561035dc043f77da5c4cd", 0x40) syz_emit_ethernet(0x56, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb88a800008100000086dd600000000018000000000000000000000000000000000000fc00000000000001000000000000"], 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) read(r5, &(0x7f00000000c0)=""/97, 0x61) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.swap.events\x00', 0x275a, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x24, 0x3b, 0x107, 0x0, 0x0, {0x4, 0x7c}, [@typed={0x4}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x3, 0x0, 0x0, @u32}]}]}, 0x24}}, 0x0) write$binfmt_script(r7, &(0x7f0000001380), 0x4) sendfile(r6, r7, &(0x7f0000000040), 0x80000000) ioctl$AUTOFS_IOC_READY(0xffffffffffffffff, 0x9360, 0x3ff) r9 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r9, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[@ANYBLOB="10000000feff030029bd7000ffdbdf25"], 0x10}, 0x1, 0x0, 0x0, 0x44801}, 0x8000) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c10a319a700", @ANYRES16=r10, @ANYBLOB="0100fdffffff0000000012000000080008000000000018000180140002007465616d5f736c6176655f31000000000800090029000000"], 0x3c}}, 0x20008800) socket$packet(0x11, 0x2, 0x300) 1.213344356s ago: executing program 3 (id=1792): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x0, 0x0, 0x0, 0xff, 0x0, 0x1}, 0x48) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000002c0)) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000000c0), 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$tipc(0x1e, 0x0, 0x0, &(0x7f00000000c0)) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000029c0)) close(0xffffffffffffffff) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000000)={r1}, 0x8) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x89f0, &(0x7f0000000900)={'bridge0\x00', @random='\x00\x00\x00 \x00'}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003580)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r2}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newlink={0x40, 0x10, 0x44b, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x41, @dev}]}, 0x40}}, 0x0) socket$netlink(0x10, 0x3, 0x7) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000d40)={'wlan0\x00'}) 1.19879073s ago: executing program 2 (id=1794): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f0000000140)={0x0, 0x1d, '\x00', [@pad1, @enc_lim, @generic={0x0, 0xce, "37c560fdc11b0b97fa59fc6fb33a849ed3d68b58485331877f0c31c3e63e05231de04d9405aa82d81f33dc026445f0f1f62921d8d0c2be99cd0be7599c2bc4a81dd7b2eefc9f318abce9716020193580a7951a42fecba2fcf2ceb57bf357d3dde247947c23171ff476ac8679dccc7755c6b783f00c27088fd3b9cc4d1635acfa701734e5d29a9fcaa91aac839ef02bcf689984651203337b5d572b75b9e7e8e4c9de6e63e257129db56ea9c894d00e962d6cac6f61f5768e27380776c3020aecb084eeb4327fba183ac0aa5dc83e"}, @calipso={0x7, 0x10, {0x0, 0x2, 0x0, 0x0, [0x0]}}]}, 0xf0) (async) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f0000000140)={0x0, 0x1d, '\x00', [@pad1, @enc_lim, @generic={0x0, 0xce, "37c560fdc11b0b97fa59fc6fb33a849ed3d68b58485331877f0c31c3e63e05231de04d9405aa82d81f33dc026445f0f1f62921d8d0c2be99cd0be7599c2bc4a81dd7b2eefc9f318abce9716020193580a7951a42fecba2fcf2ceb57bf357d3dde247947c23171ff476ac8679dccc7755c6b783f00c27088fd3b9cc4d1635acfa701734e5d29a9fcaa91aac839ef02bcf689984651203337b5d572b75b9e7e8e4c9de6e63e257129db56ea9c894d00e962d6cac6f61f5768e27380776c3020aecb084eeb4327fba183ac0aa5dc83e"}, @calipso={0x7, 0x10, {0x0, 0x2, 0x0, 0x0, [0x0]}}]}, 0xf0) listen(r0, 0x0) r1 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r1, &(0x7f0000000000)={0x18, 0x2, {0x1, @multicast2}}, 0x1e) socket$pptp(0x18, 0x1, 0x2) (async) r2 = socket$pptp(0x18, 0x1, 0x2) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000500)=@ipv4_newroute={0x30, 0x18, 0x1, 0x0, 0x0, {0x2, 0x10, 0x0, 0x20, 0x0, 0x0, 0x0, 0x9}, [@RTA_ENCAP_TYPE={0x6}, @RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @LWT_BPF_XMIT_HEADROOM={0x8, 0x4, 0xd6}}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x0) (async) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000500)=@ipv4_newroute={0x30, 0x18, 0x1, 0x0, 0x0, {0x2, 0x10, 0x0, 0x20, 0x0, 0x0, 0x0, 0x9}, [@RTA_ENCAP_TYPE={0x6}, @RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @LWT_BPF_XMIT_HEADROOM={0x8, 0x4, 0xd6}}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) (async) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f0000000080)={'ip6gre0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}) bind$pptp(r2, &(0x7f0000000080)={0x18, 0x2, {0x1, @local}}, 0x1e) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_int(r5, 0x6, 0x9, 0xfffffffffffffffd, &(0x7f0000000040)) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x4a, &(0x7f0000000c00)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "2a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x4, 0x5, 0xc2}}}}}}}, 0x0) (async) syz_emit_ethernet(0x4a, &(0x7f0000000c00)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "2a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x4, 0x5, 0xc2}}}}}}}, 0x0) 1.125820944s ago: executing program 1 (id=1795): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={0x2c, r1, 0x1, 0x0, 0xffffff7f, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) 1.009620253s ago: executing program 0 (id=1796): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x38, 0x10, 0x1, 0xd000000, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_VFINFO_LIST={0xc, 0x16, 0x0, 0x1, [{0x8, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN_LIST={0x4}]}]}, @IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x38}}, 0x0) 1.005280892s ago: executing program 1 (id=1797): socket$nl_route(0x10, 0x3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_XMIT_HASH_POLICY={0x5, 0xe, 0x6}]}}}]}, 0x3c}}, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) openat$cgroup_devices(r1, &(0x7f0000000300)='devices.deny\x00', 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x200000100000011, 0x803, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000880), 0xfffffffffffffddd}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r3, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0xffffffa3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x100, 0x100, 0x9, 0x1, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000), &(0x7f00000002c0), 0x8, r5}, 0x38) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x2, r5}, 0x38) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r6) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x38, r7, 0x1, 0x0, 0x0, {0x4}, [@NLBL_UNLABEL_A_IPV4ADDR={0x5, 0x4, @multicast1}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth1_to_team\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x5, 0x5, @multicast1}]}, 0x38}}, 0x0) bind$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x14) write$binfmt_aout(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="90020ee7ff072d2200000e210806000108000604"], 0x120) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r9 = socket$inet6_dccp(0xa, 0x6, 0x0) sendmsg$sock(r9, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000140)="e498ab758eda1b6fd636f695a4017df5cb8283ce1c6654410448dd460bbd6f2723", 0x21}, {&(0x7f0000000180)="1f978feef32482361e6ea99d8ffed624d06adb46", 0x14}, {&(0x7f0000000600)="54146687b4a8bdabcebfbf1d0c232a7e676a45cab6172ab903da1350ab64b1b66c0ffcb77115fabe3b375ae5c3b90eba61aae0190c8b2cd144c70d473bbd2b9bd980853af7563537e83a65310683ebfed417abaa8e73b6c0ea954b8080c5db1779e81eb65db4f122c67463e11dfbdc3b0d5ead381050cdf44145b402dbc6f81ad4ef4053ff295f20291c91639cf179a9ee79f555acdcf16131359af7d76a2a9d1b6807ee625e917bfa6726faeccbe573b6b2bfb7ccd879e5d9f37511faae678d9fc80d28dcb081cf089e2f6a18ca118c5e25383c903b057e21f349c6d4eb14770bf4141e8e9780808516918c70", 0xed}, {&(0x7f00000001c0)="b44a41b5958dd489b40785c8311227e1a6e386ad83bc98767571", 0x1a}, {&(0x7f0000000700)="a29f189a343fb8f2f8ab1c5bb5403a5cab6af9ea257937036050a72f2f30e9456b4362522eb234aa1bf8bbc991a698d270913c145d3e9edb69fd5f6d169e5429f2845cbeb1fae4c02fc53a44fe49f885c47207485c708ac656294014c649358584276233ad74fd1a44a268b88eb8bac57552fb5ef2739c8e0483fb410b253da35b2f4b816d124a6d05592ff885faac02006c6cb37b99134e03881138fc8f7dd1ba59a9eec79dc153303a3f9dc179734af9adbd609de215b3e782b1a4dcd5a37d99bf055ceb98d23f5e", 0xc9}, {&(0x7f00000002c0)}, {&(0x7f0000000800)="be4fc7ee07aafcee7dcf496dd87c2dd28fa2c914fd43f6b3801fce87d1641bdbe9b536f99041973fcc7ca822303b18f47af84c35c6ac305bac1ab64fa1aa9306b27d3a81619d8aa420ab36d0af1193a1ff9eeca36e0286e41fc4968471ed8e48896d109dd958bd810ddb6121958bf7f2c85a8307db2dda3f2130d8f2e42c9cdfd8712439ae8d7edb94fa041b561baf43da728d2727a1f00f2c1a2717f599363a93722f64e6121502dda012737b73d330b3a53e0b7f28bad5c8c24e5261facff609cc07a709a1a33d416a5eb6012fed", 0xcf}, {&(0x7f0000000900)="73a6837d1043add1d2910c7efb76455300b400a3976f2635bb1c0dd5f36580dbc4f758deb06a76b393f49d3e98fb9f7efa25310950dd5517c338451c9be49b5d1fb269404542a6caeef8a9b7765cd471aee746c8739c498f929c74edc669ba7d18c0f1b91cdea2a59343057512772dff644a4a21686bbb2065d7b577129da308c613f5fca49a250aacf4b30b3105820669365523f5b138a8fdd4aec633662c473514612a52a8b3d999abe1308a97c650b49360e9bf87ccb47a0db1dd2ba7389a37493b3e", 0xc4}], 0x8, &(0x7f0000000300)=[@mark={{0x14, 0x1, 0x24, 0x3a}}, @mark={{0x14, 0x1, 0x24, 0x3}}], 0x30}, 0x40) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r8, &(0x7f0000003380)={0x0, 0x0, &(0x7f0000003100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="c35b6b760854883b07d4b7608670881827df42ae07c674b2"], 0x14}}, 0x0) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r10, &(0x7f0000000100), 0xfecc) r11 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r11, 0x10e, 0xc, &(0x7f0000000040)={0x1}, 0x6f) sendmsg$nl_route(r11, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000a00)=@ipv4_newroute={0x68, 0x1a, 0x1, 0x0, 0x0, {0xa, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, [@RTA_TABLE={0x8, 0xf, 0x472}, @RTA_DST={0x8, 0x1, @remote}, @RTA_OIF={0x8, 0x4, r4}, @RTA_UID={0xfffffffffffffd95}, @RTA_MULTIPATH={0xc, 0x9, {0x2, 0x22, 0x81, r4}}, @RTA_TABLE={0x8, 0xf, 0xe093}, @RTA_ENCAP={0x18, 0x16, 0x0, 0x1, @SEG6_LOCAL_NH6={0x14, 0x5, @remote}}]}, 0x68}}, 0x0) 989.081715ms ago: executing program 3 (id=1798): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=@newlink={0x2c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x48, 0x0, r1}, [@IFLA_BROADCAST={0xa, 0x2, @remote}]}, 0x2c}, 0x1, 0x0, 0xffffff7f}, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r3}, 0x10) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_INTERFACE(r4, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x137b}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6}, @IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}, @IFLA_LINK={0x8}]}, 0x48}}, 0x0) 978.179573ms ago: executing program 2 (id=1799): socket$inet6_sctp(0xa, 0x0, 0x84) pipe(0x0) socket$inet_smc(0x2b, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000500000008001c000000002018000180140002006e657464657673696d300000000000000800080000000000080009"], 0x44}}, 0x0) 817.404623ms ago: executing program 1 (id=1800): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f00000005c0)=[@in={0x2, 0x0, @local}], 0x10) sendto$inet(r0, &(0x7f0000000640)="f5", 0x1, 0x0, &(0x7f00000006c0)={0x2, 0x0, @dev}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) write$binfmt_misc(r2, 0x0, 0x0) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x2012, r1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000002000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xa, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x78) socket$inet_sctp(0x2, 0x1, 0x84) (async) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f00000005c0)=[@in={0x2, 0x0, @local}], 0x10) (async) sendto$inet(r0, &(0x7f0000000640)="f5", 0x1, 0x0, &(0x7f00000006c0)={0x2, 0x0, @dev}, 0x10) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) (async) syz_init_net_socket$x25(0x9, 0x5, 0x0) (async) write$binfmt_misc(r2, 0x0, 0x0) (async) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x2012, r1, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000002000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xa, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x78) (async) 815.654092ms ago: executing program 0 (id=1801): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_OFFSET={0x8}, @NFTA_PAYLOAD_BASE={0x8}, @NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0x15}, @NFTA_PAYLOAD_LEN={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x8c}, 0x1, 0x0, 0x24000000}, 0x0) 732.804667ms ago: executing program 2 (id=1802): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000180), r1) sendmsg$NFC_CMD_GET_TARGET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r2, 0x1}, 0x14}}, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000800000000000000000000009500000100000000"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='contention_end\x00', r3}, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r1) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r1) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="014800000000000000000600000008000100000000000c000d000000000b"], 0x28}}, 0x0) 689.348364ms ago: executing program 0 (id=1803): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = accept(r0, &(0x7f00000000c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000000140)=0x80) recvmsg$kcm(r1, 0x0, 0x2023) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000240)={r4, 0x5, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r2, 0x107, 0x2, &(0x7f0000000080)={r4, 0x5, 0x6, @multicast}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r1, 0x6, 0x1, &(0x7f0000000000)=0x401, 0x4) bind$inet(r5, &(0x7f0000000200)={0x2, 0x4e24, @multicast1}, 0x10) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001f80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001800)=ANY=[@ANYBLOB], 0x18}}], 0x1, 0x0) r6 = socket$inet(0x2, 0x2000080001, 0x84) bind$inet(r6, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10) sendto$inet(r5, &(0x7f00000000c0)="18", 0x1, 0x2404c094, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) sendto$inet(r6, &(0x7f0000000100)='h', 0x1, 0x0, &(0x7f0000000240)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) sendto$inet(r6, &(0x7f0000000300)="99", 0x1, 0x0, &(0x7f0000000040)={0x2, 0x4e20, @local}, 0x10) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r6, 0x84, 0x12, &(0x7f00000003c0), &(0x7f00000004c0)=0x4) r7 = socket$netlink(0x10, 0x3, 0x4) recvmmsg(r7, 0x0, 0x0, 0x0, 0x0) writev(r7, &(0x7f0000000280)=[{&(0x7f0000000340)="4800000014001d0d09074beafd0d8c560284606080ffe0064e204e20590000a2bc5603ca00000f7f8907000020008d42188fedc22e47ad8f75edc6d100000101ff0000000309ff5b", 0x48}], 0x1) r8 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$NL80211_CMD_STOP_NAN(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x1c}}, 0x8040) socket$kcm(0x10, 0x0, 0x4) 593.096351ms ago: executing program 3 (id=1804): socket$nl_route(0x10, 0x3, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4), 0xc) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x1, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6(0xa, 0x80002, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021100011800c0001000000000c0a01030000000000000000070000000900020073797a31000000000900010073797a30000000000900020073797a3200000000140000001000010000000000000000000084000a"], 0xcc}}, 0x0) 586.928759ms ago: executing program 1 (id=1805): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000240)='bbr\x00', 0x4) bind$inet(r0, 0x0, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000440)="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", 0x39d}], 0x1}}], 0x1, 0x0) sendto$inet(r0, &(0x7f0000000040)='u', 0xa792a, 0x801, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/128, 0xfffffce3, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(r1, 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r2, &(0x7f0000000000)="c0", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x15}, 0x1c) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, 0x0, &(0x7f00000004c0)) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000180)={0x2, [0x0, 0x0]}, &(0x7f00000004c0)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000540)={r3, 0x20, &(0x7f0000000500)=[@in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x4e21, @loopback}]}, &(0x7f0000000580)=0x10) writev(r0, &(0x7f0000000400)=[{&(0x7f0000000200)="67a818beb2c030ce59945b", 0xb}, {&(0x7f0000000180)="910986b7878cdd7d4ff2f297a84d92cf8e671cc4597e59442029d33e333be4782457e1c98bb01e538b6986efe7e2ce55f296ed8966a213bae89284223f0dc81065dd022556fc978e968e9fa2", 0x4c}, {0x0}], 0x3) 547.914286ms ago: executing program 2 (id=1806): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r4 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) bind$packet(r4, &(0x7f0000000080)={0x11, 0x800, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) bind$packet(r2, &(0x7f0000000080)={0x11, 0x18, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) syz_emit_ethernet(0xe, &(0x7f0000000540)={@broadcast, @random="fcab26b3f67b", @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x11, 0x0, @dev, @broadcast}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x96, &(0x7f0000000040)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "101040", 0x60, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x18, 0xc2, 0x0, 0x0, 0x0, {[@fastopen={0x22, 0x5, "03c0ab"}, @window={0x3, 0x3}, @mss={0x2, 0x4, 0x9}, @sack_perm={0x4, 0x2}, @generic={0x0, 0xa, "8bfbd54ae56dd076"}, @timestamp={0x8, 0xa}, @sack_perm={0x4, 0x2}, @md5sig={0x13, 0x12, "7232407c80067615774fdbb46eb86cc8"}, @generic={0x0, 0xa, "111fad2ea7434823"}, @exp_fastopen={0xfe, 0x9, 0xf989, "b43eb61a1a"}]}}}}}}}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket(0x0, 0x803, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) bind$packet(r6, &(0x7f0000000000)={0x11, 0x0, r8}, 0x14) write$binfmt_aout(r6, 0x0, 0x120) r9 = socket(0x22, 0x2, 0x4) r10 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0xc, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x5, 0x3}}]}, {0x0, [0x30, 0x21, 0x0, 0x5f, 0x51, 0x30, 0x1e, 0x5f, 0x2e, 0x61]}}, &(0x7f0000000340)=""/215, 0x3c, 0xd7, 0x0, 0x4}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000004c0)={0xffffffffffffffff, 0x20, &(0x7f0000000480)={&(0x7f0000000440)=""/48, 0x30, 0x0, &(0x7f0000000580)=""/248, 0xf8}}, 0x10) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r12, &(0x7f0000000180), 0x2000) r13 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000680)={0x1b, 0x0, 0x0, 0x7, 0x0, 0x1, 0x3, '\x00', r5, 0xffffffffffffffff, 0x4}, 0x48) r14 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r14, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x14, 0x5, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x80}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0x1}]}, &(0x7f0000000140)='GPL\x00', 0xea24, 0x6e, &(0x7f0000000180)=""/110, 0x41000, 0x10, '\x00', r3, 0x5, r10, 0x8, &(0x7f0000000280)={0x6, 0x3}, 0x8, 0x10, &(0x7f00000002c0)={0x0, 0x4, 0x6, 0x5}, 0x10, r11, r12, 0x8, &(0x7f0000000500)=[r13, r14], &(0x7f0000000700)=[{0x3, 0x3, 0xd, 0x6}, {0x5, 0x2, 0xc, 0x7}, {0x0, 0x1, 0x5, 0x4}, {0x3, 0x5, 0x7, 0xc}, {0x4, 0x3, 0x0, 0x4}, {0x1, 0x3, 0x8, 0xa}, {0x4, 0x1, 0xa, 0x4}, {0x0, 0x2, 0x1, 0x1}], 0x10, 0x7e8a030a}, 0x90) setsockopt$MRT6_DEL_MIF(r9, 0x29, 0xcb, &(0x7f0000000080)={0x1, 0x0, 0x8, r8, 0x6}, 0xc) syz_genetlink_get_family_id$fou(&(0x7f0000000000), r9) 361.508879ms ago: executing program 4 (id=1807): bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) socket(0x0, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c0000001800dd8d000000000000000002000000000000060000000006"], 0x3c}}, 0x0) socket(0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[], 0x85}}, 0x5865) syz_emit_ethernet(0x66, &(0x7f0000000340)={@multicast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "02adf7", 0x30, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @time_exceed={0x2, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "fd9063", 0x0, 0x3a, 0x0, @mcast1, @loopback={0x0, 0xffffac1414aa}}}}}}}}, 0x0) 361.110934ms ago: executing program 0 (id=1808): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x5, 0x8}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000280)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x24, 0x3b, 0x107, 0x0, 0x0, {0x3, 0x7c}, [@typed={0x4}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x89O'}]}]}, 0x24}, 0x1, 0x1000000}, 0x0) 306.803354ms ago: executing program 3 (id=1809): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000000000000000000000000095000000000000000ba7f7966be8c243db0e702fa2a38828747466b7e25c355599b94b699bb985626c17bfa7417feaa1ad4f222f066b8f9946acb974095f8a700d656c2c4a648a440038b89356c399de04cd6d896d9993cc05c15d7f5daeea36a0d6a201d66ce0fcb850cd9571500543c49619d54bc9ebaa7c863c1cb448d466e23ac46ae26ee001fdd92f56c66f95f1a726bbd20c6eadd7815229ab81d304c4ebec360706569ba18b29ed44a42ad40396fcc3ba9c4f9d1ad35787f3d0b201c4cefe674fd3322f7af824f0e5836055a4dae3edbbf66ed69645858476b4cfbcda14bc8c2ead8d4872"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x4e21, 0x94, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x76}}, 0x0, 0x0, 0x3, 0x0, 0x20, 0x0, 0x82}, 0x9c) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40004) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000380)={0x1f, 0x0, @none, 0x0, 0x3}, 0xe) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x67, &(0x7f0000000180)=0x7f, 0x4) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) close(r2) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10) r4 = socket$tipc(0x1e, 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r6, 0x1}, 0x1c}}, 0x0) bind$tipc(r4, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x5}}, 0x10) close(r3) ioctl$sock_inet_SIOCGARP(0xffffffffffffffff, 0x8954, &(0x7f00000001c0)={{0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x0, @local}, 0x0, {0x2, 0x0, @broadcast}, 'netdevsim0\x00'}) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r7, 0x1, 0x41, &(0x7f0000000080)=0x677c, 0x4) bind$inet(r7, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="2c010000160001000000000000000000ac141400000000000000000000000000fe8000"/64, @ANYRES32=0x0, @ANYRES64=r8, @ANYBLOB="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"], 0x12c}}, 0x0) 263.698031ms ago: executing program 0 (id=1810): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, &(0x7f0000000100)=""/7, &(0x7f0000000140)=0x7) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, r0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000020000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000740)=ANY=[@ANYBLOB="540100001a001307000000000000001cac141400"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffff0000000000000000000000000000000032000000ac141417000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000048000200656362286369706865725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c001c"], 0x154}}, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r6, 0x0, 0x50) r7 = socket$key(0xf, 0x3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$NFT_MSG_GETOBJ(r5, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB="20000000130a0000000001000000007a9562b8b27dd9810073797a3000000000"], 0x20}, 0x1, 0x0, 0x0, 0x44}, 0x2000c000) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0xf, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000000000000000000000000040095"], &(0x7f0000000440)='GPL\x00'}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r8}, 0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c1000003e0007012ebd700004101c000100000004000002041001"], 0x101c}}, 0x0) sendmsg$key(r7, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="020400030e000000000000000000000005000600000000000a000000000000000000000000000000000000000000000000000000000000000200010000000000000000000000000005000500000000000a00000000000000ff010000000000000000000000000001000000000000000040b77bb25db6c5583a23a147ce"], 0x70}}, 0x0) vmsplice(r6, &(0x7f00000001c0), 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000300)={{{@in=@private=0xa010102, @in=@multicast2, 0x4e21, 0x244f, 0x4e20, 0x0, 0x2, 0x80, 0xa0}, {0x9, 0x1e, 0x9, 0x9, 0x30, 0x7, 0x7, 0x7}, {0x5, 0xfff, 0x9, 0x101}, 0x0, 0x6e6bb9, 0x2, 0x0, 0x2}, {{@in6=@mcast2, 0x4d4}, 0xa, @in6=@mcast1, 0x3504, 0x4, 0x0, 0x7f, 0xfffffffb, 0x3, 0x5}}, 0xe8) write$binfmt_elf64(r6, 0x0, 0x78) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYRES16=r4], &(0x7f0000000080)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r10, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$PPPIOCSDEBUG(r5, 0x40047440, &(0x7f0000000100)) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) ioctl$FS_IOC_SETFLAGS(r11, 0x40086602, &(0x7f0000000000)) 209.503408ms ago: executing program 2 (id=1811): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2400000370000100000000000000000007000000", @ANYRES32=r2, @ANYBLOB="0c000280060009"], 0x24}}, 0x0) 123.312202ms ago: executing program 2 (id=1812): socket$inet6_tcp(0xa, 0x1, 0x0) unshare(0x600) (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000140)={0x9, {{0xa, 0x4e23, 0x9, @mcast1, 0xc43}}}, 0x88) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) unshare(0x20000400) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) (async) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@bridge_setlink={0x2c, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r2}, [@IFLA_AF_SPEC={0xc, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x4, 0x0, 0x1, {0x4, 0x2}}]}]}, 0x2c}}, 0x0) (async) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r4}, 0x10) (async) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000340)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000580)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010029bd7000000000000f00000005002e005500000008000300", @ANYRES32=r8], 0x5c}}, 0x0) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000240)={@cgroup=r9, 0xffffffffffffffff, 0x1e, 0x0, 0x4000}, 0x10) (async) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0xe) (async) bind$inet6(0xffffffffffffffff, &(0x7f00004b8fe4)={0xa, 0x4e20, 0x4, @dev={0xfe, 0x80, '\x00', 0x31}}, 0x1c) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x4}, 0x48) (async) sendto$inet6(0xffffffffffffffff, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r10 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r10, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) r12 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r12, 0x84, 0x23, &(0x7f0000000280)={r11}, 0x8) pipe(&(0x7f0000000000)={0xffffffffffffffff}) tee(r13, r5, 0x80000001, 0x0) 99.539003ms ago: executing program 4 (id=1813): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000140), 0x8) (async, rerun: 32) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000340), 0x48) (rerun: 32) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x5, 0x8, &(0x7f0000000040)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0xad}}]}, &(0x7f0000000100)='GPL\x00', 0x6, 0xa4, &(0x7f00000002c0)=""/164}, 0x90) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2002}, [@IFLA_IFNAME={0x14, 0x3, 'wlan1\x00'}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x3, &(0x7f0000000140)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', r3}, 0x90) (async) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (async, rerun: 32) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 32) pipe(&(0x7f00000000c0)) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000005c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff7e}, 0x48) (async) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) close(r7) (async) r8 = socket(0xa, 0x3, 0x4) ioctl$sock_SIOCBRDELBR(r8, 0x89a2, &(0x7f0000000000)='bridge0\x00') sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r8, &(0x7f0000000300)={&(0x7f0000000100), 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x40, 0x140f, 0x300, 0x70bd29, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x8, 0x45, 'cma\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x4040000) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x268040, 0x0) (async) unshare(0x24020400) (async) getsockname$packet(r7, 0x0, 0x0) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000500)=@ipv4_newroute={0x38, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x4}, @RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, @LWTUNNEL_IP_OPT_VXLAN_GBP={0x8, 0x2}}}}]}, 0x38}}, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) r10 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r10, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r10, 0x107, 0x16, &(0x7f0000000000)={0x3, &(0x7f0000000180)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x1d}, {0x6}]}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b}, 0x48) syz_emit_ethernet(0x7a, &(0x7f0000000080)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa86dd60000b28000c2f00fe800000000000000000000000100002fe8000000000000000000000000000aa242088be39028f836f"], 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) (async) splice(r5, 0x0, r4, 0x0, 0xf3a, 0x0) 45.242669ms ago: executing program 3 (id=1814): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000000000000000000000000071123300000080c3ebabf5a97abb00009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) poll(&(0x7f0000000080)=[{r0, 0x30}, {r0, 0x1206}, {r0, 0x120}], 0x3, 0x9) (async) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_OPER(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000005100000008000300", @ANYRES32=r3, @ANYBLOB="0a00060008021100000100ff05008a"], 0x30}}, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) (async) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x38, 0x38, 0x4, [@var={0x2, 0x0, 0x0, 0x11, 0x4}, @const={0x0, 0x0, 0x0, 0x2}, @func_proto={0x2, 0x0, 0x0, 0x8, 0x2}, @var={0x2, 0x0, 0x0, 0xe, 0x1}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x54}, 0x20) (async) connect$inet(r4, &(0x7f0000000440)={0x2, 0x0, @multicast2}, 0x10) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000180)='GPL\x00'}, 0x90) r6 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r6, &(0x7f00000000c0)={0x1d, r7}, 0x18) (async) connect$can_j1939(r6, &(0x7f0000000140)={0x1d, r7}, 0x18) (async, rerun: 32) sendmsg$can_j1939(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)="4480502ac1216c3f00", 0x9}}, 0x0) (async, rerun: 32) recvmsg$can_j1939(r6, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=""/79, 0x10}, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r5}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffd51, &(0x7f0000000000)='cgroup\x00'}, 0x30) (async, rerun: 32) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (rerun: 32) r9 = openat$cgroup_int(r8, &(0x7f0000000040)='cpu.max\x00', 0x2, 0x0) write$cgroup_subtree(r9, &(0x7f0000000080)=ANY=[@ANYRESOCT], 0x8) (async, rerun: 32) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) (rerun: 32) sendmsg$nl_xfrm(r10, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="500100001000130700000000000000007f0000010012000000000000000000000000007fffffff000000ffffac14140000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff010000697f000000000000000000010000000032000000ff02040000000000000000000000000100000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000400000000000000000060001200726663343534332867636d2861657329290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000080"], 0x150}}, 0x0) 0s ago: executing program 0 (id=1815): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000080)="4c0000001200ff09ff3a150099a283ff07b8008000f0ffff000000060040150024001d00120511a09798bc593ab6821148a730cc33a49868c62b2ca654a6613b6aab9d25bf46050d3c3a2b04", 0x4c}], 0x1}, 0xe000000) kernel console output (not intermixed with test programs): : 12 bytes leftover after parsing attributes in process `syz.0.18'. [ 83.767085][ T5249] netlink: 'syz.4.19': attribute type 29 has an invalid length. [ 83.784632][ T5249] netlink: 8 bytes leftover after parsing attributes in process `syz.4.19'. [ 83.820165][ T5249] netlink: 'syz.4.19': attribute type 29 has an invalid length. [ 83.846464][ T5249] netlink: 8 bytes leftover after parsing attributes in process `syz.4.19'. [ 83.911089][ T5257] syz.3.21 uses obsolete (PF_INET,SOCK_PACKET) [ 83.920373][ T5255] netlink: 16 bytes leftover after parsing attributes in process `syz.1.22'. [ 83.981804][ T5255] macvlan2: entered allmulticast mode [ 84.011352][ T5255] mac80211_hwsim hwsim10 wlan0: entered promiscuous mode [ 84.039480][ T5255] mac80211_hwsim hwsim10 wlan0: entered allmulticast mode [ 84.069269][ T5255] bond0: (slave macvlan2): Enslaving as an active interface with an up link [ 84.396529][ T5264] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 84.453489][ T5266] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.28'. [ 84.575369][ T5269] netlink: 'syz.0.27': attribute type 10 has an invalid length. [ 84.701192][ T5274] netlink: 'syz.1.31': attribute type 1 has an invalid length. [ 84.722265][ T5274] netlink: 3440 bytes leftover after parsing attributes in process `syz.1.31'. [ 84.744395][ T5274] netlink: 44 bytes leftover after parsing attributes in process `syz.1.31'. [ 84.753451][ T5274] netlink: 'syz.1.31': attribute type 1 has an invalid length. [ 84.762244][ T5269] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 85.122655][ T5289] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 85.840804][ T5311] Zero length message leads to an empty skb [ 85.864024][ T5314] netlink: 'syz.4.42': attribute type 29 has an invalid length. [ 85.901219][ T5314] netlink: 'syz.4.42': attribute type 29 has an invalid length. [ 86.215946][ T5328] macvlan3: entered promiscuous mode [ 86.240805][ T5328] macvlan3: entered allmulticast mode [ 86.514044][ T5348] Cannot find add_set index 0 as target [ 86.549094][ T5347] raw_sendmsg: syz.4.53 forgot to set AF_INET. Fix it! [ 86.731699][ T5357] netlink: 'syz.2.57': attribute type 29 has an invalid length. [ 86.756929][ T5355] macvlan2: entered promiscuous mode [ 86.780294][ T5355] macvlan2: entered allmulticast mode [ 86.798882][ T5357] netlink: 'syz.2.57': attribute type 29 has an invalid length. [ 87.141769][ T45] cfg80211: failed to load regulatory.db [ 87.435996][ T5387] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 87.701787][ T5393] sctp: failed to load transform for md5: -2 [ 87.777169][ T5391] sctp: failed to load transform for md5: -2 [ 87.787629][ T5407] __nla_validate_parse: 17 callbacks suppressed [ 87.787649][ T5407] netlink: 20 bytes leftover after parsing attributes in process `syz.0.72'. [ 88.133179][ T5424] netlink: 24 bytes leftover after parsing attributes in process `syz.4.77'. [ 88.530113][ T5448] netlink: 20 bytes leftover after parsing attributes in process `syz.0.82'. [ 88.728321][ T5452] netlink: 32 bytes leftover after parsing attributes in process `syz.4.85'. [ 88.865538][ T5465] netlink: 'syz.2.88': attribute type 1 has an invalid length. [ 88.893914][ T5465] netlink: 8 bytes leftover after parsing attributes in process `syz.2.88'. [ 89.081722][ T5471] netlink: 104 bytes leftover after parsing attributes in process `syz.0.90'. [ 89.214081][ T5475] netlink: 20 bytes leftover after parsing attributes in process `syz.2.92'. [ 89.247187][ T5478] bond0: option mode: unable to set because the bond device has slaves [ 89.268225][ T5474] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 89.442724][ T5486] netlink: 12 bytes leftover after parsing attributes in process `syz.3.97'. [ 89.462134][ T5486] IPv6: NLM_F_REPLACE set, but no existing node found! [ 89.485573][ T5161] IPVS: starting estimator thread 0... [ 89.492231][ T5486] IPVS: rr: TCP 172.20.20.170:0 - no destination available [ 89.501084][ T5490] pim6reg527: entered allmulticast mode [ 89.548218][ T5493] netlink: 4 bytes leftover after parsing attributes in process `syz.3.97'. [ 89.585449][ T5493] netlink: 24 bytes leftover after parsing attributes in process `syz.3.97'. [ 89.597402][ T5492] IPVS: using max 19 ests per chain, 45600 per kthread [ 90.405875][ T5520] FAULT_INJECTION: forcing a failure. [ 90.405875][ T5520] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 90.435998][ T5520] CPU: 1 PID: 5520 Comm: syz.4.110 Not tainted 6.10.0-rc6-syzkaller-01261-ge0ee68a8bef9 #0 [ 90.446051][ T5520] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 90.456151][ T5520] Call Trace: [ 90.459447][ T5520] [ 90.462386][ T5520] dump_stack_lvl+0x241/0x360 [ 90.467095][ T5520] ? __pfx_dump_stack_lvl+0x10/0x10 [ 90.472329][ T5520] ? __pfx__printk+0x10/0x10 [ 90.476939][ T5520] ? snprintf+0xda/0x120 [ 90.481202][ T5520] should_fail_ex+0x3b0/0x4e0 [ 90.485902][ T5520] _copy_to_user+0x2f/0xb0 [ 90.490333][ T5520] simple_read_from_buffer+0xca/0x150 [ 90.495742][ T5520] proc_fail_nth_read+0x1e9/0x250 [ 90.500807][ T5520] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 90.506385][ T5520] ? rw_verify_area+0x520/0x6b0 [ 90.511253][ T5520] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 90.516898][ T5520] vfs_read+0x204/0xbc0 [ 90.521068][ T5520] ? __pfx_lock_release+0x10/0x10 [ 90.526117][ T5520] ? __pfx_vfs_read+0x10/0x10 [ 90.530903][ T5520] ? __fget_files+0x29/0x470 [ 90.535518][ T5520] ? __fget_files+0x3f6/0x470 [ 90.540404][ T5520] ksys_read+0x1a0/0x2c0 [ 90.544677][ T5520] ? __pfx_ksys_read+0x10/0x10 [ 90.549455][ T5520] ? do_syscall_64+0x100/0x230 [ 90.554242][ T5520] ? do_syscall_64+0xb6/0x230 [ 90.559022][ T5520] do_syscall_64+0xf3/0x230 [ 90.563624][ T5520] ? clear_bhb_loop+0x35/0x90 [ 90.568326][ T5520] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.574242][ T5520] RIP: 0033:0x7fae4b1746bc [ 90.578781][ T5520] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8c 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 1f 8d 02 00 48 [ 90.598406][ T5520] RSP: 002b:00007fae4bfa4040 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 90.606857][ T5520] RAX: ffffffffffffffda RBX: 00007fae4b303f60 RCX: 00007fae4b1746bc [ 90.614838][ T5520] RDX: 000000000000000f RSI: 00007fae4bfa40b0 RDI: 0000000000000005 [ 90.622847][ T5520] RBP: 00007fae4bfa40a0 R08: 0000000000000000 R09: 0000000000000000 [ 90.630846][ T5520] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 90.638829][ T5520] R13: 000000000000000b R14: 00007fae4b303f60 R15: 00007ffe65619dd8 [ 90.646840][ T5520] [ 91.345354][ T5546] netlink: 'syz.1.119': attribute type 63 has an invalid length. [ 91.774788][ T5553] netlink: 'syz.2.123': attribute type 1 has an invalid length. [ 92.725308][ T5595] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:20004 [ 93.309697][ T5620] __nla_validate_parse: 20 callbacks suppressed [ 93.309719][ T5620] netlink: 23 bytes leftover after parsing attributes in process `syz.2.144'. [ 93.400530][ T5624] netlink: 40 bytes leftover after parsing attributes in process `syz.1.145'. [ 93.574678][ T5636] netlink: 32 bytes leftover after parsing attributes in process `syz.4.146'. [ 93.629920][ T5634] netlink: 20 bytes leftover after parsing attributes in process `syz.1.149'. [ 94.078786][ T5648] netlink: 116 bytes leftover after parsing attributes in process `syz.3.152'. [ 94.108833][ T5650] netlink: 3 bytes leftover after parsing attributes in process `syz.2.155'. [ 94.176101][ T5650] netlink: 64 bytes leftover after parsing attributes in process `syz.2.155'. [ 94.185408][ T5650] netlink: 40 bytes leftover after parsing attributes in process `syz.2.155'. [ 94.243490][ T5655] netlink: 20 bytes leftover after parsing attributes in process `syz.4.156'. [ 94.423993][ T5657] FAULT_INJECTION: forcing a failure. [ 94.423993][ T5657] name failslab, interval 1, probability 0, space 0, times 1 [ 94.460182][ T5657] CPU: 0 PID: 5657 Comm: syz.1.157 Not tainted 6.10.0-rc6-syzkaller-01261-ge0ee68a8bef9 #0 [ 94.470258][ T5657] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 94.480371][ T5657] Call Trace: [ 94.483688][ T5657] [ 94.486657][ T5657] dump_stack_lvl+0x241/0x360 [ 94.488181][ T5664] netlink: 40 bytes leftover after parsing attributes in process `syz.4.159'. [ 94.491398][ T5657] ? __pfx_dump_stack_lvl+0x10/0x10 [ 94.491434][ T5657] ? __pfx__printk+0x10/0x10 [ 94.491464][ T5657] ? netlink_insert+0x10b7/0x14b0 [ 94.515266][ T5657] should_fail_ex+0x3b0/0x4e0 [ 94.520008][ T5657] ? __alloc_skb+0x1c3/0x440 [ 94.524649][ T5657] should_failslab+0x9/0x20 [ 94.529203][ T5657] kmem_cache_alloc_node_noprof+0x71/0x320 [ 94.535074][ T5657] __alloc_skb+0x1c3/0x440 [ 94.539544][ T5657] ? __pfx___alloc_skb+0x10/0x10 [ 94.544638][ T5657] ? netlink_autobind+0xd6/0x2f0 [ 94.549623][ T5657] ? netlink_autobind+0x2b0/0x2f0 [ 94.551678][ T5616] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 94.554684][ T5657] netlink_sendmsg+0x638/0xcb0 [ 94.554732][ T5657] ? __pfx_netlink_sendmsg+0x10/0x10 [ 94.554762][ T5657] ? __import_iovec+0x536/0x820 [ 94.554786][ T5657] ? aa_sock_msg_perm+0x91/0x160 [ 94.554822][ T5657] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 94.554844][ T5657] ? security_socket_sendmsg+0x87/0xb0 [ 94.600940][ T5657] ? __pfx_netlink_sendmsg+0x10/0x10 [ 94.606356][ T5657] __sock_sendmsg+0x221/0x270 [ 94.611085][ T5657] ____sys_sendmsg+0x525/0x7d0 [ 94.615919][ T5657] ? __pfx_____sys_sendmsg+0x10/0x10 [ 94.621292][ T5657] __sys_sendmsg+0x2b0/0x3a0 [ 94.626555][ T5657] ? __pfx___sys_sendmsg+0x10/0x10 [ 94.631723][ T5657] ? vfs_write+0x7c4/0xc90 [ 94.636328][ T5657] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 94.642709][ T5657] ? do_syscall_64+0x100/0x230 [ 94.647615][ T5657] ? do_syscall_64+0xb6/0x230 [ 94.652344][ T5657] do_syscall_64+0xf3/0x230 [ 94.656894][ T5657] ? clear_bhb_loop+0x35/0x90 [ 94.661631][ T5657] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.667581][ T5657] RIP: 0033:0x7fa6b9b75bd9 [ 94.672038][ T5657] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 94.691693][ T5657] RSP: 002b:00007fa6ba9d4048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 94.700158][ T5657] RAX: ffffffffffffffda RBX: 00007fa6b9d03f60 RCX: 00007fa6b9b75bd9 [ 94.708176][ T5657] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000003 [ 94.716233][ T5657] RBP: 00007fa6ba9d40a0 R08: 0000000000000000 R09: 0000000000000000 [ 94.724257][ T5657] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 94.732274][ T5657] R13: 000000000000000b R14: 00007fa6b9d03f60 R15: 00007ffc8f561ba8 [ 94.740397][ T5657] [ 95.329017][ T5685] sctp: [Deprecated]: syz.1.169 (pid 5685) Use of int in max_burst socket option deprecated. [ 95.329017][ T5685] Use struct sctp_assoc_value instead [ 95.847206][ T5706] netlink: 'syz.0.175': attribute type 1 has an invalid length. [ 95.883771][ T5706] netlink: 'syz.0.175': attribute type 1 has an invalid length. [ 95.979841][ T5714] netlink: 'syz.2.176': attribute type 6 has an invalid length. [ 96.583435][ T5740] netlink: 'syz.1.188': attribute type 13 has an invalid length. [ 96.787336][ T5748] Bluetooth: MGMT ver 1.22 [ 97.166316][ T5759] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 52117 - 0 [ 97.218748][ T5759] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 52117 - 0 [ 97.259371][ T5759] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 52117 - 0 [ 97.281741][ T5759] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 52117 - 0 [ 97.312468][ T5759] netdevsim netdevsim2 netdevsim0: set [1, 2] type 2 family 0 port 47782 - 0 [ 97.342583][ T5759] netdevsim netdevsim2 netdevsim1: set [1, 2] type 2 family 0 port 47782 - 0 [ 97.368531][ T5759] netdevsim netdevsim2 netdevsim2: set [1, 2] type 2 family 0 port 47782 - 0 [ 97.382736][ T5759] netdevsim netdevsim2 netdevsim3: set [1, 2] type 2 family 0 port 47782 - 0 [ 97.392858][ T5759] geneve2: entered promiscuous mode [ 97.405017][ T5759] geneve2: entered allmulticast mode [ 97.670932][ T5791] netlink: 'syz.2.205': attribute type 10 has an invalid length. [ 97.750648][ T5791] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 97.849298][ T5801] netlink: 'syz.1.208': attribute type 10 has an invalid length. [ 98.189413][ T5817] macvlan3: entered promiscuous mode [ 98.203296][ T5817] macvlan3: entered allmulticast mode [ 98.604815][ T5839] xt_cgroup: path and classid specified [ 98.637874][ T5839] netlink: zone id is out of range [ 98.675856][ T5839] netlink: zone id is out of range [ 98.688889][ T5843] macvlan4: entered promiscuous mode [ 98.712880][ T5843] macvlan4: entered allmulticast mode [ 98.723978][ T5839] netlink: zone id is out of range [ 98.735910][ T5839] netlink: zone id is out of range [ 98.774767][ T5845] __nla_validate_parse: 18 callbacks suppressed [ 98.774789][ T5845] netlink: 20 bytes leftover after parsing attributes in process `syz.1.221'. [ 98.776139][ T5839] netlink: zone id is out of range [ 98.807403][ T5849] netlink: 12 bytes leftover after parsing attributes in process `syz.0.223'. [ 98.822509][ T5839] netlink: zone id is out of range [ 98.873902][ T5839] netlink: zone id is out of range [ 98.900900][ T5839] netlink: zone id is out of range [ 98.934904][ T5839] netlink: zone id is out of range [ 98.999718][ T5856] netlink: 8 bytes leftover after parsing attributes in process `syz.2.225'. [ 99.023109][ T5858] netlink: 'syz.0.226': attribute type 10 has an invalid length. [ 99.052295][ T5858] netlink: 40 bytes leftover after parsing attributes in process `syz.0.226'. [ 99.419382][ T5870] netlink: 40 bytes leftover after parsing attributes in process `syz.1.231'. [ 99.425275][ T5873] netlink: 8 bytes leftover after parsing attributes in process `syz.4.232'. [ 99.440121][ T5875] netlink: 28 bytes leftover after parsing attributes in process `syz.3.233'. [ 99.568467][ T5878] netlink: 104 bytes leftover after parsing attributes in process `syz.3.236'. [ 99.688480][ T5885] bond0: option mode: unable to set because the bond device has slaves [ 99.867535][ T5892] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 99.901192][ T5896] netlink: 20 bytes leftover after parsing attributes in process `syz.0.241'. [ 99.909673][ T5898] netlink: 24 bytes leftover after parsing attributes in process `syz.1.240'. [ 100.451906][ T5914] IPv6: NLM_F_REPLACE set, but no existing node found! [ 100.469058][ T5914] net_ratelimit: 2 callbacks suppressed [ 100.469081][ T5914] IPVS: sed: TCP 172.20.20.170:0 - no destination available [ 100.857220][ T5925] xt_connbytes: Forcing CT accounting to be enabled [ 100.872447][ T5925] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 100.904105][ T5925] xt_bpf: check failed: parse error [ 101.154825][ T5938] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 101.711510][ T5955] macvlan2: entered allmulticast mode [ 101.738377][ T5955] mac80211_hwsim hwsim5 wlan0: entered promiscuous mode [ 101.745876][ T5963] xt_connbytes: Forcing CT accounting to be enabled [ 101.768109][ T5955] mac80211_hwsim hwsim5 wlan0: entered allmulticast mode [ 101.784756][ T5963] Cannot find add_set index 0 as target [ 101.804819][ T5955] bond0: (slave macvlan2): Enslaving as an active interface with an up link [ 102.578549][ T5996] netlink: 'syz.4.277': attribute type 1 has an invalid length. [ 102.722460][ T6000] bond1: (slave gretap1): making interface the new active one [ 102.752329][ T6000] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 103.150238][ T6007] macvlan2: entered promiscuous mode [ 103.183748][ T6007] macvlan2: entered allmulticast mode [ 103.376124][ T6014] openvswitch: netlink: Multiple metadata blocks provided [ 103.601636][ T6019] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 103.657043][ T6024] IPv6: NLM_F_REPLACE set, but no existing node found! [ 103.842269][ T6026] __nla_validate_parse: 14 callbacks suppressed [ 103.842292][ T6026] netlink: 16 bytes leftover after parsing attributes in process `syz.2.288'. [ 104.191191][ T6044] netlink: 'syz.3.293': attribute type 11 has an invalid length. [ 104.312698][ T6056] netlink: 36 bytes leftover after parsing attributes in process `syz.2.295'. [ 104.578593][ T6064] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 104.686024][ T6068] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 104.816111][ T6075] tc_dump_action: action bad kind [ 105.223009][ T6087] netlink: 24 bytes leftover after parsing attributes in process `syz.0.303'. [ 105.506102][ T6100] netlink: 56 bytes leftover after parsing attributes in process `syz.4.309'. [ 105.621750][ T6104] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 105.995183][ T6121] Bluetooth: MGMT ver 1.22 [ 105.999717][ T6121] Bluetooth: hci3: invalid length 0, exp 2 for type 12 [ 106.098090][ T6129] macvlan3: entered allmulticast mode [ 106.134668][ T6129] team0: Port device macvlan3 added [ 106.172449][ T6123] netlink: 56 bytes leftover after parsing attributes in process `syz.1.318'. [ 106.632190][ T6150] netlink: 'syz.3.324': attribute type 1 has an invalid length. [ 106.652408][ T6150] netlink: 244 bytes leftover after parsing attributes in process `syz.3.324'. [ 106.695215][ T6153] netlink: 8 bytes leftover after parsing attributes in process `syz.0.326'. [ 106.799208][ T6157] netlink: 8 bytes leftover after parsing attributes in process `syz.0.326'. [ 106.799408][ T6160] netlink: 12 bytes leftover after parsing attributes in process `syz.3.328'. [ 106.814564][ T6158] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 106.884594][ T6162] netlink: 'syz.4.329': attribute type 6 has an invalid length. [ 106.952358][ T6164] netlink: 'syz.1.330': attribute type 33 has an invalid length. [ 106.961826][ T6164] netlink: 152 bytes leftover after parsing attributes in process `syz.1.330'. [ 107.144080][ T6171] netlink: 'syz.0.331': attribute type 1 has an invalid length. [ 107.156508][ T6172] netlink: 'syz.1.333': attribute type 6 has an invalid length. [ 107.232323][ T6174] FAULT_INJECTION: forcing a failure. [ 107.232323][ T6174] name failslab, interval 1, probability 0, space 0, times 0 [ 107.273695][ T6174] CPU: 0 PID: 6174 Comm: syz.3.334 Not tainted 6.10.0-rc6-syzkaller-01261-ge0ee68a8bef9 #0 [ 107.283739][ T6174] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 107.293891][ T6174] Call Trace: [ 107.297179][ T6174] [ 107.300132][ T6174] dump_stack_lvl+0x241/0x360 [ 107.304852][ T6174] ? __pfx_dump_stack_lvl+0x10/0x10 [ 107.310058][ T6174] ? __pfx__printk+0x10/0x10 [ 107.314658][ T6174] ? ref_tracker_alloc+0x332/0x490 [ 107.319792][ T6174] should_fail_ex+0x3b0/0x4e0 [ 107.324510][ T6174] ? skb_clone+0x20c/0x390 [ 107.328938][ T6174] should_failslab+0x9/0x20 [ 107.333453][ T6174] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 107.338934][ T6174] skb_clone+0x20c/0x390 [ 107.343206][ T6174] __netlink_deliver_tap+0x3cc/0x7c0 [ 107.348511][ T6174] ? netlink_deliver_tap+0x2e/0x1b0 [ 107.353721][ T6174] netlink_deliver_tap+0x19d/0x1b0 [ 107.358842][ T6174] netlink_unicast+0x7be/0x990 [ 107.363741][ T6174] ? __pfx_netlink_unicast+0x10/0x10 [ 107.369048][ T6174] ? __virt_addr_valid+0x183/0x520 [ 107.374194][ T6174] ? __check_object_size+0x49c/0x900 [ 107.379521][ T6174] ? bpf_lsm_netlink_send+0x9/0x10 [ 107.384652][ T6174] netlink_sendmsg+0x8e4/0xcb0 [ 107.389464][ T6174] ? __pfx_netlink_sendmsg+0x10/0x10 [ 107.394765][ T6174] ? __import_iovec+0x536/0x820 [ 107.399625][ T6174] ? aa_sock_msg_perm+0x91/0x160 [ 107.404579][ T6174] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 107.409868][ T6174] ? security_socket_sendmsg+0x87/0xb0 [ 107.415340][ T6174] ? __pfx_netlink_sendmsg+0x10/0x10 [ 107.420657][ T6174] __sock_sendmsg+0x221/0x270 [ 107.425346][ T6174] ____sys_sendmsg+0x525/0x7d0 [ 107.430139][ T6174] ? __pfx_____sys_sendmsg+0x10/0x10 [ 107.435457][ T6174] __sys_sendmsg+0x2b0/0x3a0 [ 107.440064][ T6174] ? __pfx___sys_sendmsg+0x10/0x10 [ 107.445186][ T6174] ? vfs_write+0x7c4/0xc90 [ 107.449663][ T6174] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 107.456017][ T6174] ? do_syscall_64+0x100/0x230 [ 107.460804][ T6174] ? do_syscall_64+0xb6/0x230 [ 107.465498][ T6174] do_syscall_64+0xf3/0x230 [ 107.470109][ T6174] ? clear_bhb_loop+0x35/0x90 [ 107.474842][ T6174] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.480747][ T6174] RIP: 0033:0x7f4cc3575bd9 [ 107.485175][ T6174] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 107.504788][ T6174] RSP: 002b:00007f4cc4370048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 107.513214][ T6174] RAX: ffffffffffffffda RBX: 00007f4cc3703f60 RCX: 00007f4cc3575bd9 [ 107.521196][ T6174] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000005 [ 107.529182][ T6174] RBP: 00007f4cc43700a0 R08: 0000000000000000 R09: 0000000000000000 [ 107.537179][ T6174] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 107.545165][ T6174] R13: 000000000000000b R14: 00007f4cc3703f60 R15: 00007fff8bffa8a8 [ 107.553168][ T6174] [ 107.912754][ T6192] smc: net device lo applied user defined pnetid SYZ2 [ 108.119403][ T6202] warning: `syz.2.344' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 108.409216][ T6211] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 108.623326][ T6223] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 108.836369][ T6225] macvlan4: entered promiscuous mode [ 108.841741][ T6225] macvlan4: entered allmulticast mode [ 109.022839][ T6234] __nla_validate_parse: 4 callbacks suppressed [ 109.022860][ T6234] netlink: 28 bytes leftover after parsing attributes in process `syz.2.354'. [ 109.226230][ T6237] netlink: 168 bytes leftover after parsing attributes in process `syz.4.355'. [ 109.252001][ T6237] netlink: 'syz.4.355': attribute type 2 has an invalid length. [ 109.274181][ T6242] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 109.286436][ T6237] netlink: 60 bytes leftover after parsing attributes in process `syz.4.355'. [ 109.288191][ T6243] netlink: 'syz.3.358': attribute type 10 has an invalid length. [ 109.309474][ T6243] netlink: 40 bytes leftover after parsing attributes in process `syz.3.358'. [ 109.317739][ T6239] netlink: 'syz.2.356': attribute type 4 has an invalid length. [ 109.320828][ T6243] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 109.485537][ T6248] netlink: 96 bytes leftover after parsing attributes in process `syz.3.359'. [ 109.511373][ T6213] netlink: 5 bytes leftover after parsing attributes in process `syz.0.347'. [ 109.561134][ T6237] pim6reg1: entered promiscuous mode [ 109.573828][ T6237] pim6reg1: entered allmulticast mode [ 109.788496][ T6260] netlink: 8 bytes leftover after parsing attributes in process `syz.2.363'. [ 109.843223][ T6258] pim6reg: entered allmulticast mode [ 109.899633][ T6258] netlink: 12 bytes leftover after parsing attributes in process `syz.3.362'. [ 110.000415][ T6268] netlink: 12 bytes leftover after parsing attributes in process `syz.2.365'. [ 110.680283][ T6301] netlink: 8 bytes leftover after parsing attributes in process `syz.0.374'. [ 112.710143][ T6391] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 113.255105][ T6415] xt_CT: You must specify a L4 protocol and not use inversions on it [ 113.270563][ T6421] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 113.358670][ T6423] IPv6: NLM_F_REPLACE set, but no existing node found! [ 113.678055][ T6439] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 113.685397][ T6439] IPv6: NLM_F_CREATE should be set when creating new route [ 113.805373][ T6443] xt_TCPMSS: Only works on TCP SYN packets [ 113.895708][ T6449] FAULT_INJECTION: forcing a failure. [ 113.895708][ T6449] name failslab, interval 1, probability 0, space 0, times 0 [ 113.908836][ T6449] CPU: 1 PID: 6449 Comm: syz.2.429 Not tainted 6.10.0-rc6-syzkaller-01261-ge0ee68a8bef9 #0 [ 113.918857][ T6449] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 113.928951][ T6449] Call Trace: [ 113.932262][ T6449] [ 113.935231][ T6449] dump_stack_lvl+0x241/0x360 [ 113.939992][ T6449] ? __pfx_dump_stack_lvl+0x10/0x10 [ 113.945230][ T6449] ? __pfx__printk+0x10/0x10 [ 113.949852][ T6449] should_fail_ex+0x3b0/0x4e0 [ 113.954568][ T6449] ? skb_clone+0x20c/0x390 [ 113.959005][ T6449] should_failslab+0x9/0x20 [ 113.963537][ T6449] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 113.968945][ T6449] skb_clone+0x20c/0x390 [ 113.973206][ T6449] ? dev_queue_xmit_nit+0x220/0xc10 [ 113.978420][ T6449] dev_queue_xmit_nit+0x419/0xc10 [ 113.983462][ T6449] ? dev_queue_xmit_nit+0x2b/0xc10 [ 113.988591][ T6449] ? validate_xmit_skb+0x9f9/0x1120 [ 113.993810][ T6449] dev_hard_start_xmit+0x15f/0x7e0 [ 113.998938][ T6449] ? __pfx_validate_xmit_skb+0x10/0x10 [ 114.004424][ T6449] __dev_queue_xmit+0x1b63/0x3e90 [ 114.009464][ T6449] ? kasan_save_track+0x51/0x80 [ 114.014341][ T6449] ? vfs_writev+0x37c/0xbb0 [ 114.018880][ T6449] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.024970][ T6449] ? __dev_queue_xmit+0x2da/0x3e90 [ 114.030106][ T6449] ? __pfx___dev_queue_xmit+0x10/0x10 [ 114.035536][ T6449] ? __copy_skb_header+0x437/0x5b0 [ 114.040665][ T6449] ? __asan_memcpy+0x40/0x70 [ 114.045266][ T6449] ? __copy_skb_header+0x437/0x5b0 [ 114.050399][ T6449] ? __skb_clone+0x454/0x6c0 [ 114.055014][ T6449] ? skb_clone+0x240/0x390 [ 114.059452][ T6449] __netlink_deliver_tap+0x54d/0x7c0 [ 114.064761][ T6449] ? netlink_deliver_tap+0x2e/0x1b0 [ 114.069970][ T6449] netlink_deliver_tap+0x19d/0x1b0 [ 114.075109][ T6449] netlink_unicast+0x7be/0x990 [ 114.079890][ T6449] ? __pfx_netlink_unicast+0x10/0x10 [ 114.085186][ T6449] ? __virt_addr_valid+0x183/0x520 [ 114.090314][ T6449] ? __check_object_size+0x49c/0x900 [ 114.095614][ T6449] ? bpf_lsm_netlink_send+0x9/0x10 [ 114.100747][ T6449] netlink_sendmsg+0x8e4/0xcb0 [ 114.105541][ T6449] ? __pfx_netlink_sendmsg+0x10/0x10 [ 114.110842][ T6449] ? aa_sock_msg_perm+0x91/0x160 [ 114.115801][ T6449] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 114.121093][ T6449] ? security_socket_sendmsg+0x87/0xb0 [ 114.126568][ T6449] ? __pfx_netlink_sendmsg+0x10/0x10 [ 114.131865][ T6449] __sock_sendmsg+0x221/0x270 [ 114.136561][ T6449] sock_write_iter+0x2dd/0x400 [ 114.141337][ T6449] ? __pfx_sock_write_iter+0x10/0x10 [ 114.146655][ T6449] do_iter_readv_writev+0x5a4/0x800 [ 114.151875][ T6449] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 114.157612][ T6449] ? bpf_lsm_file_permission+0x9/0x10 [ 114.163016][ T6449] ? security_file_permission+0x7f/0xa0 [ 114.168588][ T6449] ? rw_verify_area+0x1d2/0x6b0 [ 114.173460][ T6449] vfs_writev+0x37c/0xbb0 [ 114.177835][ T6449] ? __pfx_lock_acquire+0x10/0x10 [ 114.182890][ T6449] ? __pfx_vfs_writev+0x10/0x10 [ 114.187762][ T6449] ? vfs_write+0x7c4/0xc90 [ 114.192206][ T6449] ? __fget_files+0x29/0x470 [ 114.196917][ T6449] do_writev+0x1b1/0x350 [ 114.201186][ T6449] ? __pfx_do_writev+0x10/0x10 [ 114.205979][ T6449] ? do_syscall_64+0x100/0x230 [ 114.210847][ T6449] ? do_syscall_64+0xb6/0x230 [ 114.215541][ T6449] do_syscall_64+0xf3/0x230 [ 114.220056][ T6449] ? clear_bhb_loop+0x35/0x90 [ 114.224768][ T6449] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.230678][ T6449] RIP: 0033:0x7fa73c575bd9 [ 114.235110][ T6449] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 114.254817][ T6449] RSP: 002b:00007fa73d33d048 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 114.263244][ T6449] RAX: ffffffffffffffda RBX: 00007fa73c703f60 RCX: 00007fa73c575bd9 [ 114.271256][ T6449] RDX: 0000000000000001 RSI: 0000000020000080 RDI: 0000000000000005 [ 114.279411][ T6449] RBP: 00007fa73d33d0a0 R08: 0000000000000000 R09: 0000000000000000 [ 114.287395][ T6449] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 114.295378][ T6449] R13: 000000000000000b R14: 00007fa73c703f60 R15: 00007ffeb46a9128 [ 114.303380][ T6449] [ 114.391048][ T6452] __nla_validate_parse: 11 callbacks suppressed [ 114.391069][ T6452] netlink: 28 bytes leftover after parsing attributes in process `syz.1.431'. [ 114.773060][ T6473] netlink: 'syz.4.438': attribute type 2 has an invalid length. [ 114.796084][ T6473] netlink: 4 bytes leftover after parsing attributes in process `syz.4.438'. [ 114.956633][ T6477] netlink: 9412 bytes leftover after parsing attributes in process `syz.1.439'. [ 114.986953][ T6478] netlink: 9412 bytes leftover after parsing attributes in process `syz.1.439'. [ 115.005318][ T6479] netlink: 'syz.3.440': attribute type 1 has an invalid length. [ 115.020435][ T6481] netlink: 76 bytes leftover after parsing attributes in process `syz.4.441'. [ 115.042416][ T6483] netlink: 20 bytes leftover after parsing attributes in process `syz.0.442'. [ 115.150225][ T6486] netlink: 'syz.3.443': attribute type 20 has an invalid length. [ 115.681797][ T6508] netlink: 8 bytes leftover after parsing attributes in process `syz.4.452'. [ 115.703665][ T6510] netlink: 8 bytes leftover after parsing attributes in process `syz.0.451'. [ 115.725653][ T6508] netlink: 56 bytes leftover after parsing attributes in process `syz.4.452'. [ 115.907827][ T6525] netlink: 8 bytes leftover after parsing attributes in process `syz.2.457'. [ 116.806625][ T6570] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 117.336909][ T6592] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 117.868659][ T6603] macvlan3: entered promiscuous mode [ 117.900258][ T6603] macvlan3: entered allmulticast mode [ 118.243874][ T5107] Bluetooth: hci3: command 0x1407 tx timeout [ 118.250309][ T5100] Bluetooth: hci3: Opcode 0x1407 failed: -110 [ 119.399919][ T6648] macvlan4: entered allmulticast mode [ 119.440796][ T6648] bond0: (slave macvlan4): Error -98 calling set_mac_address [ 119.515829][ T6652] netlink: 'syz.0.502': attribute type 1 has an invalid length. [ 119.532581][ T6652] __nla_validate_parse: 8 callbacks suppressed [ 119.532602][ T6652] netlink: 8 bytes leftover after parsing attributes in process `syz.0.502'. [ 119.724726][ T6659] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 119.738009][ T6660] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 119.893051][ T6663] IPVS: rr: TCP 172.20.20.170:0 - no destination available [ 120.301833][ T6676] Bluetooth: hci3: invalid length 0, exp 2 for type 15 [ 120.676880][ T6683] netlink: 104 bytes leftover after parsing attributes in process `syz.1.514'. [ 120.688007][ T6662] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 120.836601][ T6685] netlink: 40 bytes leftover after parsing attributes in process `syz.1.515'. [ 120.846119][ T6685] netlink: 40 bytes leftover after parsing attributes in process `syz.1.515'. [ 120.964099][ C1] IPVS: rr: TCP 172.20.20.170:0 - no destination available [ 121.090998][ T6694] netlink: 8 bytes leftover after parsing attributes in process `syz.2.518'. [ 121.266476][ T6697] netlink: 84 bytes leftover after parsing attributes in process `syz.0.520'. [ 121.661724][ T6713] netlink: 36 bytes leftover after parsing attributes in process `syz.0.527'. [ 121.728111][ T6717] netlink: 8 bytes leftover after parsing attributes in process `syz.3.528'. [ 121.969625][ T6723] Cannot find set identified by id 0 to match [ 122.017588][ T6725] netlink: 16 bytes leftover after parsing attributes in process `syz.0.532'. [ 122.029585][ T6727] netlink: 12 bytes leftover after parsing attributes in process `syz.1.533'. [ 122.038953][ T6727] IPv6: NLM_F_REPLACE set, but no existing node found! [ 122.345979][ T6737] xt_bpf: check failed: parse error [ 123.464320][ T6782] netlink: 'syz.4.556': attribute type 21 has an invalid length. [ 123.498996][ T6783] netlink: 'syz.4.556': attribute type 21 has an invalid length. [ 123.626736][ T6794] FAULT_INJECTION: forcing a failure. [ 123.626736][ T6794] name failslab, interval 1, probability 0, space 0, times 0 [ 123.692343][ T6794] CPU: 0 PID: 6794 Comm: syz.1.559 Not tainted 6.10.0-rc6-syzkaller-01261-ge0ee68a8bef9 #0 [ 123.702410][ T6794] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 123.712517][ T6794] Call Trace: [ 123.715845][ T6794] [ 123.718819][ T6794] dump_stack_lvl+0x241/0x360 [ 123.723577][ T6794] ? __pfx_dump_stack_lvl+0x10/0x10 [ 123.728925][ T6794] ? __pfx__printk+0x10/0x10 [ 123.733570][ T6794] ? ref_tracker_alloc+0x332/0x490 [ 123.738843][ T6794] should_fail_ex+0x3b0/0x4e0 [ 123.743667][ T6794] ? skb_clone+0x20c/0x390 [ 123.748166][ T6794] should_failslab+0x9/0x20 [ 123.752729][ T6794] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 123.758175][ T6794] skb_clone+0x20c/0x390 [ 123.762485][ T6794] __netlink_deliver_tap+0x3cc/0x7c0 [ 123.767844][ T6794] ? netlink_deliver_tap+0x2e/0x1b0 [ 123.773116][ T6794] netlink_deliver_tap+0x19d/0x1b0 [ 123.778294][ T6794] netlink_unicast+0x7be/0x990 [ 123.783142][ T6794] ? __pfx_netlink_unicast+0x10/0x10 [ 123.788651][ T6794] ? __virt_addr_valid+0x183/0x520 [ 123.793827][ T6794] ? __check_object_size+0x49c/0x900 [ 123.799178][ T6794] ? bpf_lsm_netlink_send+0x9/0x10 [ 123.804371][ T6794] netlink_sendmsg+0x8e4/0xcb0 [ 123.809213][ T6794] ? __pfx_netlink_sendmsg+0x10/0x10 [ 123.814576][ T6794] ? __import_iovec+0x536/0x820 [ 123.819493][ T6794] ? aa_sock_msg_perm+0x91/0x160 [ 123.824497][ T6794] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 123.829834][ T6794] ? security_socket_sendmsg+0x87/0xb0 [ 123.835353][ T6794] ? __pfx_netlink_sendmsg+0x10/0x10 [ 123.840718][ T6794] __sock_sendmsg+0x221/0x270 [ 123.845458][ T6794] ____sys_sendmsg+0x525/0x7d0 [ 123.850984][ T6794] ? __pfx_____sys_sendmsg+0x10/0x10 [ 123.856352][ T6794] __sys_sendmsg+0x2b0/0x3a0 [ 123.861001][ T6794] ? __pfx___sys_sendmsg+0x10/0x10 [ 123.866164][ T6794] ? vfs_write+0x7c4/0xc90 [ 123.870689][ T6794] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 123.873457][ T6806] netlink: 'syz.0.564': attribute type 1 has an invalid length. [ 123.877100][ T6794] ? do_syscall_64+0x100/0x230 [ 123.877137][ T6794] ? do_syscall_64+0xb6/0x230 [ 123.877164][ T6794] do_syscall_64+0xf3/0x230 [ 123.877190][ T6794] ? clear_bhb_loop+0x35/0x90 [ 123.877221][ T6794] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.877246][ T6794] RIP: 0033:0x7fa6b9b75bd9 [ 123.877280][ T6794] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 123.901668][ T6806] netlink: 'syz.0.564': attribute type 1 has an invalid length. [ 123.903661][ T6794] RSP: 002b:00007fa6ba9d4048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 123.903693][ T6794] RAX: ffffffffffffffda RBX: 00007fa6b9d03f60 RCX: 00007fa6b9b75bd9 [ 123.903710][ T6794] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000003 [ 123.903724][ T6794] RBP: 00007fa6ba9d40a0 R08: 0000000000000000 R09: 0000000000000000 [ 123.903740][ T6794] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 123.903754][ T6794] R13: 000000000000004d R14: 00007fa6b9d03f60 R15: 00007ffc8f561ba8 [ 123.903788][ T6794] [ 124.140694][ T6812] xt_TPROXY: Can be used only with -p tcp or -p udp [ 124.501019][ T6837] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 124.609901][ T6838] __nla_validate_parse: 10 callbacks suppressed [ 124.609922][ T6838] netlink: 32 bytes leftover after parsing attributes in process `syz.2.573'. [ 124.958668][ T6859] netlink: 8 bytes leftover after parsing attributes in process `syz.1.579'. [ 125.295507][ T6873] netlink: 'syz.4.584': attribute type 11 has an invalid length. [ 125.762556][ T6892] netlink: 32 bytes leftover after parsing attributes in process `syz.1.593'. [ 126.029627][ T6913] netlink: 12 bytes leftover after parsing attributes in process `syz.0.599'. [ 126.296788][ T6925] trusted_key: syz.3.600 sent an empty control message without MSG_MORE. [ 126.473673][ T6938] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 47146 - 0 [ 126.500140][ T6938] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 47146 - 0 [ 126.510135][ T6938] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 47146 - 0 [ 126.520892][ T6938] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 47146 - 0 [ 126.539019][ T6938] netdevsim netdevsim4 netdevsim0: set [1, 2] type 2 family 0 port 41467 - 0 [ 126.561117][ T6938] netdevsim netdevsim4 netdevsim1: set [1, 2] type 2 family 0 port 41467 - 0 [ 126.579963][ T6938] netdevsim netdevsim4 netdevsim2: set [1, 2] type 2 family 0 port 41467 - 0 [ 126.592004][ T6938] netdevsim netdevsim4 netdevsim3: set [1, 2] type 2 family 0 port 41467 - 0 [ 126.609145][ T6938] geneve2: entered promiscuous mode [ 126.633792][ T6938] geneve2: entered allmulticast mode [ 126.670404][ T6941] bond0: (slave macsec1): Error -34 calling dev_set_mtu [ 126.811455][ T6952] netlink: 'syz.4.609': attribute type 10 has an invalid length. [ 126.951473][ T6952] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 127.461304][ T6985] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 127.604705][ T6991] netlink: 8 bytes leftover after parsing attributes in process `syz.2.622'. [ 127.652891][ T6996] bond0: option mode: unable to set because the bond device has slaves [ 127.772105][ T5100] Bluetooth: hci2: link tx timeout [ 127.778238][ T5100] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 127.799091][ T5100] Bluetooth: hci2: link tx timeout [ 127.805317][ T5100] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 128.001021][ T7017] netlink: 8 bytes leftover after parsing attributes in process `syz.0.631'. [ 128.046580][ T7017] macvlan4: entered promiscuous mode [ 128.052213][ T7017] macvlan4: entered allmulticast mode [ 128.493238][ T7001] xt_CT: You must specify a L4 protocol and not use inversions on it [ 128.572897][ T7037] netlink: 20 bytes leftover after parsing attributes in process `syz.1.636'. [ 128.635633][ T7042] netlink: 8 bytes leftover after parsing attributes in process `syz.0.639'. [ 128.823096][ T7043] bridge0: port 3(ipvlan0) entered blocking state [ 128.837047][ T7043] bridge0: port 3(ipvlan0) entered disabled state [ 128.869187][ T7043] ipvlan0: entered allmulticast mode [ 128.913977][ T7043] veth0_vlan: entered allmulticast mode [ 128.946115][ T7043] ipvlan0: left allmulticast mode [ 128.951306][ T7043] veth0_vlan: left allmulticast mode [ 129.023729][ T7052] netlink: 'syz.0.641': attribute type 4 has an invalid length. [ 129.150282][ T7060] xt_cgroup: path and classid specified [ 129.183207][ T7060] netlink: zone id is out of range [ 129.200139][ T7060] netlink: zone id is out of range [ 129.219924][ T7060] netlink: zone id is out of range [ 129.229277][ T7060] netlink: zone id is out of range [ 129.244863][ T7060] netlink: zone id is out of range [ 129.264876][ T7060] netlink: zone id is out of range [ 129.270326][ T7060] netlink: zone id is out of range [ 129.305659][ T7060] netlink: zone id is out of range [ 129.319374][ T7060] netlink: zone id is out of range [ 129.378578][ T7060] netlink: set zone limit has 4 unknown bytes [ 129.527762][ T7077] netlink: 8 bytes leftover after parsing attributes in process `syz.0.651'. [ 129.623474][ T7084] netlink: 'syz.4.654': attribute type 6 has an invalid length. [ 129.669428][ T7085] netlink: 64 bytes leftover after parsing attributes in process `syz.3.652'. [ 129.846768][ T5100] Bluetooth: hci2: command 0x0406 tx timeout [ 129.865818][ T7093] netlink: 20 bytes leftover after parsing attributes in process `syz.0.658'. [ 129.964670][ T7096] netlink: 28 bytes leftover after parsing attributes in process `syz.3.659'. [ 129.973935][ T7096] nbd: must specify at least one socket [ 130.074257][ T7101] netlink: 8 bytes leftover after parsing attributes in process `syz.2.661'. [ 130.524633][ T7125] netlink: 16 bytes leftover after parsing attributes in process `syz.3.670'. [ 130.735279][ T7137] netlink: 12 bytes leftover after parsing attributes in process `syz.3.676'. [ 130.758198][ T7137] IPv6: NLM_F_REPLACE set, but no existing node found! [ 130.833271][ T7141] netlink: 4 bytes leftover after parsing attributes in process `syz.3.676'. [ 130.847915][ T7141] netlink: 24 bytes leftover after parsing attributes in process `syz.3.676'. [ 131.395509][ T7127] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 131.525575][ T7145] Illegal XDP return value 65538 on prog (id 111) dev N/A, expect packet loss! [ 131.601736][ T7148] xt_NFQUEUE: number of queues (65530) out of range (got 66566) [ 131.793340][ T7155] netlink: 16 bytes leftover after parsing attributes in process `syz.3.681'. [ 131.853076][ T7161] netlink: 20 bytes leftover after parsing attributes in process `syz.4.683'. [ 132.173373][ T7173] netlink: 'syz.1.685': attribute type 10 has an invalid length. [ 132.216672][ T7173] batman_adv: batadv0: Adding interface: virt_wifi0 [ 132.245196][ T7173] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 132.302076][ T7173] batman_adv: batadv0: Interface activated: virt_wifi0 [ 132.424915][ T7190] FAULT_INJECTION: forcing a failure. [ 132.424915][ T7190] name failslab, interval 1, probability 0, space 0, times 0 [ 132.453953][ T7190] CPU: 0 PID: 7190 Comm: syz.3.691 Not tainted 6.10.0-rc6-syzkaller-01261-ge0ee68a8bef9 #0 [ 132.464022][ T7190] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 132.474212][ T7190] Call Trace: [ 132.477522][ T7190] [ 132.480493][ T7190] dump_stack_lvl+0x241/0x360 [ 132.485228][ T7190] ? __pfx_dump_stack_lvl+0x10/0x10 [ 132.490467][ T7190] ? __pfx__printk+0x10/0x10 [ 132.495098][ T7190] ? ref_tracker_alloc+0x332/0x490 [ 132.500262][ T7190] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 132.505774][ T7190] should_fail_ex+0x3b0/0x4e0 [ 132.510479][ T7190] ? skb_clone+0x20c/0x390 [ 132.514922][ T7190] should_failslab+0x9/0x20 [ 132.519447][ T7190] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 132.524845][ T7190] skb_clone+0x20c/0x390 [ 132.529114][ T7190] __netlink_deliver_tap+0x3cc/0x7c0 [ 132.534427][ T7190] ? netlink_deliver_tap+0x2e/0x1b0 [ 132.539661][ T7190] netlink_deliver_tap+0x19d/0x1b0 [ 132.544803][ T7190] netlink_sendskb+0x68/0x140 [ 132.549536][ T7190] netlink_unicast+0x39d/0x990 [ 132.554317][ T7190] ? __asan_memcpy+0x40/0x70 [ 132.558982][ T7190] ? __pfx_netlink_unicast+0x10/0x10 [ 132.564479][ T7190] netlink_rcv_skb+0x262/0x430 [ 132.569297][ T7190] ? __pfx_sock_diag_rcv_msg+0x10/0x10 [ 132.574781][ T7190] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 132.580132][ T7190] ? netlink_deliver_tap+0x2e/0x1b0 [ 132.585436][ T7190] netlink_unicast+0x7f0/0x990 [ 132.590307][ T7190] ? __pfx_netlink_unicast+0x10/0x10 [ 132.595602][ T7190] ? __virt_addr_valid+0x183/0x520 [ 132.600764][ T7190] ? __check_object_size+0x49c/0x900 [ 132.606115][ T7190] ? bpf_lsm_netlink_send+0x9/0x10 [ 132.611261][ T7190] netlink_sendmsg+0x8e4/0xcb0 [ 132.616106][ T7190] ? __pfx_netlink_sendmsg+0x10/0x10 [ 132.621431][ T7190] ? aa_sock_msg_perm+0x91/0x160 [ 132.626395][ T7190] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 132.631698][ T7190] ? security_socket_sendmsg+0x87/0xb0 [ 132.637177][ T7190] ? __pfx_netlink_sendmsg+0x10/0x10 [ 132.642472][ T7190] __sock_sendmsg+0x221/0x270 [ 132.647164][ T7190] sock_write_iter+0x2dd/0x400 [ 132.651966][ T7190] ? __pfx_sock_write_iter+0x10/0x10 [ 132.657300][ T7190] do_iter_readv_writev+0x5a4/0x800 [ 132.662533][ T7190] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 132.668386][ T7190] ? bpf_lsm_file_permission+0x9/0x10 [ 132.673779][ T7190] ? security_file_permission+0x7f/0xa0 [ 132.679442][ T7190] ? rw_verify_area+0x1d2/0x6b0 [ 132.684313][ T7190] vfs_writev+0x37c/0xbb0 [ 132.688678][ T7190] ? __pfx_lock_acquire+0x10/0x10 [ 132.693715][ T7190] ? __pfx_vfs_writev+0x10/0x10 [ 132.698581][ T7190] ? vfs_write+0x7c4/0xc90 [ 132.703018][ T7190] ? __fget_files+0x29/0x470 [ 132.707642][ T7190] do_writev+0x1b1/0x350 [ 132.711926][ T7190] ? __pfx_do_writev+0x10/0x10 [ 132.716796][ T7190] ? do_syscall_64+0x100/0x230 [ 132.721580][ T7190] ? do_syscall_64+0xb6/0x230 [ 132.726271][ T7190] do_syscall_64+0xf3/0x230 [ 132.730787][ T7190] ? clear_bhb_loop+0x35/0x90 [ 132.735483][ T7190] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.741392][ T7190] RIP: 0033:0x7f4cc3575bd9 [ 132.745821][ T7190] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 132.765533][ T7190] RSP: 002b:00007f4cc4370048 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 132.773965][ T7190] RAX: ffffffffffffffda RBX: 00007f4cc3703f60 RCX: 00007f4cc3575bd9 [ 132.781943][ T7190] RDX: 0000000000000001 RSI: 0000000020000080 RDI: 0000000000000005 [ 132.790021][ T7190] RBP: 00007f4cc43700a0 R08: 0000000000000000 R09: 0000000000000000 [ 132.798003][ T7190] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 132.805981][ T7190] R13: 000000000000000b R14: 00007f4cc3703f60 R15: 00007fff8bffa8a8 [ 132.813975][ T7190] [ 133.208400][ T1249] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.222389][ T1249] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.573423][ T7230] ip6gre1: entered allmulticast mode [ 133.810023][ T7242] netlink: 'syz.2.710': attribute type 10 has an invalid length. [ 133.905093][ T7242] team0: Failed to send options change via netlink (err -105) [ 133.920602][ T7242] team0: Port device netdevsim0 added [ 133.978183][ T5161] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 133.997222][ T7250] netlink: 'syz.2.710': attribute type 10 has an invalid length. [ 134.037919][ T7258] netlink: 'syz.0.714': attribute type 1 has an invalid length. [ 134.060666][ T7250] team0: Failed to send options change via netlink (err -105) [ 134.082908][ T7250] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 134.104122][ T7250] team0: Port device netdevsim0 removed [ 134.129616][ T7250] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 134.296758][ T7272] netlink: 'syz.1.722': attribute type 1 has an invalid length. [ 134.850920][ T7301] netlink: 'syz.2.729': attribute type 1 has an invalid length. [ 134.893073][ T7301] __nla_validate_parse: 11 callbacks suppressed [ 134.893096][ T7301] netlink: 9352 bytes leftover after parsing attributes in process `syz.2.729'. [ 134.993918][ T7301] netlink: 'syz.2.729': attribute type 1 has an invalid length. [ 135.025439][ T7301] netlink: 'syz.2.729': attribute type 2 has an invalid length. [ 135.051235][ T7301] netlink: 4 bytes leftover after parsing attributes in process `syz.2.729'. [ 135.135400][ T7296] netlink: 12 bytes leftover after parsing attributes in process `syz.4.732'. [ 135.235096][ T7327] tls_set_device_offload: netdev not found [ 135.252571][ T7328] Cannot find del_set index 1280 as target [ 135.574838][ T7340] netlink: 12 bytes leftover after parsing attributes in process `syz.1.739'. [ 135.750076][ T7344] netlink: 20 bytes leftover after parsing attributes in process `syz.2.740'. [ 135.878624][ T7350] netlink: 8 bytes leftover after parsing attributes in process `syz.3.745'. [ 135.907685][ T7350] macvlan2: entered promiscuous mode [ 135.936808][ T7350] macvlan2: entered allmulticast mode [ 136.096700][ T7353] netlink: 32 bytes leftover after parsing attributes in process `syz.0.744'. [ 136.282978][ T7364] netlink: 8 bytes leftover after parsing attributes in process `syz.4.746'. [ 136.311305][ T7368] netlink: 'syz.3.748': attribute type 33 has an invalid length. [ 136.393783][ T7368] netlink: 5 bytes leftover after parsing attributes in process `syz.3.748'. [ 136.474390][ T7376] xt_bpf: check failed: parse error [ 136.499268][ T7377] netlink: 24 bytes leftover after parsing attributes in process `syz.2.749'. [ 136.631004][ T7381] bridge0: port 3(macvlan4) entered blocking state [ 136.680609][ T7381] bridge0: port 3(macvlan4) entered disabled state [ 136.704806][ T7381] macvlan4: entered allmulticast mode [ 136.732737][ T7381] macvlan4: entered promiscuous mode [ 136.823202][ T7377] macvlan4 (unregistering): left allmulticast mode [ 136.847838][ T7377] macvlan4 (unregistering): left promiscuous mode [ 136.868010][ T7377] bridge0: port 3(macvlan4) entered disabled state [ 137.374294][ T7420] netlink: 'syz.3.763': attribute type 6 has an invalid length. [ 137.489901][ T7429] netlink: 'syz.4.762': attribute type 2 has an invalid length. [ 137.542915][ T7435] net_ratelimit: 13 callbacks suppressed [ 137.542939][ T7435] Dead loop on virtual device ipvlan1, fix it urgently! [ 138.069961][ T7459] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 138.131114][ T7462] macvlan5: entered allmulticast mode [ 138.144355][ T7462] bond0: (slave macvlan5): Error -98 calling set_mac_address [ 138.273093][ T7435] syz.2.764 (7435) used greatest stack depth: 6008 bytes left [ 139.195158][ T7519] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 139.595969][ T7541] netlink: 'syz.3.804': attribute type 4 has an invalid length. [ 139.793746][ T7549] macvlan5: entered promiscuous mode [ 139.809406][ T7549] macvlan5: entered allmulticast mode [ 139.894018][ T7557] __nla_validate_parse: 11 callbacks suppressed [ 139.894040][ T7557] netlink: 23 bytes leftover after parsing attributes in process `syz.4.809'. [ 139.940619][ T7557] caif0: entered allmulticast mode [ 140.009730][ T7563] netlink: 104 bytes leftover after parsing attributes in process `syz.0.812'. [ 140.117685][ T7568] netlink: 'syz.2.815': attribute type 6 has an invalid length. [ 140.367793][ T7584] netlink: 104 bytes leftover after parsing attributes in process `syz.0.819'. [ 140.415290][ T7586] netlink: 'syz.1.821': attribute type 25 has an invalid length. [ 140.428485][ T7586] netlink: 'syz.1.821': attribute type 7 has an invalid length. [ 140.554248][ T7590] netlink: 8 bytes leftover after parsing attributes in process `syz.3.822'. [ 140.609474][ T7598] netlink: 2 bytes leftover after parsing attributes in process `syz.1.824'. [ 140.732026][ T7607] netlink: 36 bytes leftover after parsing attributes in process `syz.0.829'. [ 141.006534][ T7618] netlink: 24 bytes leftover after parsing attributes in process `syz.3.833'. [ 141.065354][ T7618] netlink: 4 bytes leftover after parsing attributes in process `syz.3.833'. [ 141.076423][ T7618] bridge_slave_1: left allmulticast mode [ 141.083146][ T7618] bridge_slave_1: left promiscuous mode [ 141.090940][ T7618] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.119569][ T7618] bridge_slave_0: left allmulticast mode [ 141.133387][ T7618] bridge_slave_0: left promiscuous mode [ 141.142292][ T7618] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.178783][ T7626] netlink: 'syz.4.837': attribute type 1 has an invalid length. [ 141.187156][ T7626] netlink: 3440 bytes leftover after parsing attributes in process `syz.4.837'. [ 141.196419][ T7626] netlink: 44 bytes leftover after parsing attributes in process `syz.4.837'. [ 141.209940][ T7626] netlink: 'syz.4.837': attribute type 1 has an invalid length. [ 141.312983][ T7622] netlink: 'syz.2.835': attribute type 4 has an invalid length. [ 141.743812][ T7652] netlink: 'syz.2.847': attribute type 10 has an invalid length. [ 141.766211][ T7652] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 141.849764][ T7652] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 141.910484][ T7651] netlink: 'syz.1.846': attribute type 1 has an invalid length. [ 142.081143][ T7671] IPv6: NLM_F_REPLACE set, but no existing node found! [ 142.099389][ T5148] IPVS: starting estimator thread 0... [ 142.119225][ T7671] IPVS: rr: TCP 172.20.20.170:0 - no destination available [ 142.122637][ T7670] netlink: 'syz.2.853': attribute type 33 has an invalid length. [ 142.213919][ T7677] IPVS: using max 16 ests per chain, 38400 per kthread [ 142.402554][ T7697] x_tables: duplicate underflow at hook 2 [ 142.468382][ T7699] smc: net device lo applied user defined pnetid SYZ2 [ 142.808855][ T7722] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 143.050542][ T7738] Cannot find add_set index 0 as target [ 143.420032][ T7765] macvlan5: entered allmulticast mode [ 143.461181][ T7765] bond0: (slave macvlan5): Error -98 calling set_mac_address [ 143.546111][ T7766] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 143.769397][ T7784] batadv0: entered promiscuous mode [ 143.795696][ T7784] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 143.854355][ T7784] batadv0: left promiscuous mode [ 143.936010][ T7783] batadv0: entered promiscuous mode [ 143.942864][ T7783] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 143.985870][ T7783] batadv0: left promiscuous mode [ 144.006673][ T7794] tipc: Failed to remove unknown binding: 66,1,1/0:2808258975/2808258977 [ 144.036728][ T7794] tipc: Failed to remove unknown binding: 66,1,1/0:2808258975/2808258977 [ 144.047673][ T7794] tipc: Failed to remove unknown binding: 66,1,1/0:2808258975/2808258977 [ 144.813834][ T7826] validate_nla: 4 callbacks suppressed [ 144.813858][ T7826] netlink: 'syz.2.910': attribute type 1 has an invalid length. [ 144.832210][ T7833] ebt_limit: overflow, try lower: 0/0 [ 145.045819][ T7835] macvlan5: entered promiscuous mode [ 145.091661][ T7835] macvlan5: entered allmulticast mode [ 145.215583][ T7854] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 145.395267][ T7863] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 145.718795][ T7878] __nla_validate_parse: 24 callbacks suppressed [ 145.718819][ T7878] netlink: 40 bytes leftover after parsing attributes in process `syz.0.930'. [ 145.844064][ T7888] ipvlan4: entered promiscuous mode [ 145.849350][ T7888] ipvlan4: entered allmulticast mode [ 145.877009][ T7888] ip6gretap0: entered allmulticast mode [ 145.964453][ T7894] bridge0: port 2(bridge_slave_1) entered listening state [ 145.980345][ T7896] netlink: 24 bytes leftover after parsing attributes in process `syz.2.934'. [ 146.359473][ T7914] netlink: 'syz.1.943': attribute type 1 has an invalid length. [ 146.392780][ T7914] netlink: 9320 bytes leftover after parsing attributes in process `syz.1.943'. [ 146.417709][ T7914] netlink: 'syz.1.943': attribute type 1 has an invalid length. [ 146.432243][ T7914] netlink: 'syz.1.943': attribute type 2 has an invalid length. [ 146.454077][ T7912] bond0: option lp_interval: invalid value (0) [ 146.481477][ T7912] bond0: option lp_interval: allowed values 1 - 2147483647 [ 146.582411][ T7932] netlink: 104 bytes leftover after parsing attributes in process `syz.2.947'. [ 146.604086][ T7933] batman_adv: batadv0: adding TT local entry 4a:c8:2b:75:00:00 to non-existent VLAN 2358 [ 146.670827][ T7935] netlink: 8 bytes leftover after parsing attributes in process `syz.2.951'. [ 146.804099][ T7942] netlink: 12 bytes leftover after parsing attributes in process `syz.4.952'. [ 146.826061][ T7942] IPv6: NLM_F_REPLACE set, but no existing node found! [ 146.843352][ T7942] IPVS: rr: TCP 172.20.20.170:0 - no destination available [ 146.849983][ T7946] netlink: 12 bytes leftover after parsing attributes in process `syz.1.954'. [ 146.878973][ T7950] xt_bpf: check failed: parse error [ 146.889656][ T7946] IPv6: NLM_F_REPLACE set, but no existing node found! [ 146.898153][ T7951] netlink: 4 bytes leftover after parsing attributes in process `syz.4.952'. [ 146.938599][ T7951] netlink: 24 bytes leftover after parsing attributes in process `syz.4.952'. [ 146.956966][ T7948] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 147.010415][ T7948] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 147.063982][ T7962] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 147.098873][ T7964] netlink: 32 bytes leftover after parsing attributes in process `syz.1.959'. [ 147.123076][ T7956] ɶƣ0GC¦: entered promiscuous mode [ 147.308153][ T7976] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 147.596153][ T7992] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 149.404079][ T8017] netlink: 'syz.3.974': attribute type 1 has an invalid length. [ 149.411791][ T8017] netlink: 'syz.3.974': attribute type 1 has an invalid length. [ 149.427971][ T8017] netlink: 'syz.3.974': attribute type 1 has an invalid length. [ 149.444091][ T8017] netlink: 'syz.3.974': attribute type 1 has an invalid length. [ 149.461101][ T8017] netlink: 'syz.3.974': attribute type 1 has an invalid length. [ 149.482539][ T8017] netlink: 'syz.3.974': attribute type 1 has an invalid length. [ 149.871748][ T8042] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 149.913886][ T8044] ipvlan2: entered promiscuous mode [ 149.923991][ T8044] ipvlan2: entered allmulticast mode [ 149.971868][ T8044] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 150.760788][ T8072] validate_nla: 3 callbacks suppressed [ 150.760811][ T8072] netlink: 'syz.4.993': attribute type 6 has an invalid length. [ 150.822285][ T8083] __nla_validate_parse: 12 callbacks suppressed [ 150.822362][ T8083] netlink: 28 bytes leftover after parsing attributes in process `syz.1.996'. [ 150.876212][ T8086] netlink: 4 bytes leftover after parsing attributes in process `syz.3.998'. [ 150.986938][ T8090] netlink: 496 bytes leftover after parsing attributes in process `syz.2.1000'. [ 151.182700][ T8111] FAULT_INJECTION: forcing a failure. [ 151.182700][ T8111] name failslab, interval 1, probability 0, space 0, times 0 [ 151.231640][ T8111] CPU: 1 PID: 8111 Comm: syz.2.1004 Not tainted 6.10.0-rc6-syzkaller-01261-ge0ee68a8bef9 #0 [ 151.241875][ T8111] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 151.252067][ T8111] Call Trace: [ 151.255486][ T8111] [ 151.258461][ T8111] dump_stack_lvl+0x241/0x360 [ 151.263278][ T8111] ? __pfx_dump_stack_lvl+0x10/0x10 [ 151.268530][ T8111] ? __pfx__printk+0x10/0x10 [ 151.272111][ T8115] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1008'. [ 151.273145][ T8111] ? stack_depot_save_flags+0x29/0x830 [ 151.287723][ T8111] should_fail_ex+0x3b0/0x4e0 [ 151.292464][ T8111] ? __alloc_skb+0x1c3/0x440 [ 151.297125][ T8111] should_failslab+0x9/0x20 [ 151.301677][ T8111] kmem_cache_alloc_node_noprof+0x71/0x320 [ 151.307509][ T8111] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 151.313684][ T8111] __alloc_skb+0x1c3/0x440 [ 151.318144][ T8111] ? __pfx___alloc_skb+0x10/0x10 [ 151.323721][ T8111] netlink_dump+0x2cd/0xd80 [ 151.328245][ T8111] ? __pfx_ethnl_parse_header_dev_get+0x10/0x10 [ 151.334503][ T8111] ? __pfx_netlink_dump+0x10/0x10 [ 151.339555][ T8111] ? genl_start+0x597/0x6d0 [ 151.344082][ T8111] __netlink_dump_start+0x59f/0x780 [ 151.349391][ T8111] genl_rcv_msg+0x88c/0xec0 [ 151.353955][ T8111] ? mark_lock+0x9a/0x350 [ 151.358345][ T8111] ? __pfx_genl_rcv_msg+0x10/0x10 [ 151.363410][ T8111] ? __pfx_genl_start+0x10/0x10 [ 151.368284][ T8111] ? __pfx_genl_dumpit+0x10/0x10 [ 151.373239][ T8111] ? __pfx_genl_done+0x10/0x10 [ 151.378034][ T8111] ? __pfx_lock_acquire+0x10/0x10 [ 151.383095][ T8111] ? __pfx_ethnl_default_start+0x10/0x10 [ 151.388746][ T8111] ? __pfx_ethnl_default_dumpit+0x10/0x10 [ 151.394482][ T8111] ? __pfx_ethnl_default_done+0x10/0x10 [ 151.400046][ T8111] ? __pfx___might_resched+0x10/0x10 [ 151.405365][ T8111] netlink_rcv_skb+0x1e3/0x430 [ 151.410176][ T8111] ? __pfx_genl_rcv_msg+0x10/0x10 [ 151.415223][ T8111] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 151.420537][ T8111] ? __netlink_deliver_tap+0x77e/0x7c0 [ 151.426145][ T8111] genl_rcv+0x28/0x40 [ 151.430147][ T8111] netlink_unicast+0x7f0/0x990 [ 151.434961][ T8111] ? __pfx_netlink_unicast+0x10/0x10 [ 151.440261][ T8111] ? __virt_addr_valid+0x183/0x520 [ 151.445394][ T8111] ? __check_object_size+0x49c/0x900 [ 151.450702][ T8111] ? bpf_lsm_netlink_send+0x9/0x10 [ 151.455839][ T8111] netlink_sendmsg+0x8e4/0xcb0 [ 151.460635][ T8111] ? __pfx_netlink_sendmsg+0x10/0x10 [ 151.465936][ T8111] ? __import_iovec+0x536/0x820 [ 151.470801][ T8111] ? aa_sock_msg_perm+0x91/0x160 [ 151.475760][ T8111] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 151.481060][ T8111] ? security_socket_sendmsg+0x87/0xb0 [ 151.486542][ T8111] ? __pfx_netlink_sendmsg+0x10/0x10 [ 151.491875][ T8111] __sock_sendmsg+0x221/0x270 [ 151.496571][ T8111] ____sys_sendmsg+0x525/0x7d0 [ 151.501366][ T8111] ? __pfx_____sys_sendmsg+0x10/0x10 [ 151.506778][ T8111] __sys_sendmsg+0x2b0/0x3a0 [ 151.511394][ T8111] ? __pfx___sys_sendmsg+0x10/0x10 [ 151.516524][ T8111] ? vfs_write+0x7c4/0xc90 [ 151.521000][ T8111] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 151.527347][ T8111] ? do_syscall_64+0x100/0x230 [ 151.532131][ T8111] ? do_syscall_64+0xb6/0x230 [ 151.536919][ T8111] do_syscall_64+0xf3/0x230 [ 151.541446][ T8111] ? clear_bhb_loop+0x35/0x90 [ 151.546231][ T8111] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 151.552166][ T8111] RIP: 0033:0x7fa73c575bd9 [ 151.556596][ T8111] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 151.576217][ T8111] RSP: 002b:00007fa73d33d048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 151.584648][ T8111] RAX: ffffffffffffffda RBX: 00007fa73c703f60 RCX: 00007fa73c575bd9 [ 151.592805][ T8111] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000005 [ 151.600786][ T8111] RBP: 00007fa73d33d0a0 R08: 0000000000000000 R09: 0000000000000000 [ 151.608792][ T8111] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 151.616797][ T8111] R13: 000000000000000b R14: 00007fa73c703f60 R15: 00007ffeb46a9128 [ 151.624795][ T8111] [ 151.646501][ T8119] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 151.888544][ T8138] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1013'. [ 152.261150][ T8159] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1020'. [ 152.330503][ T8164] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1023'. [ 152.467503][ T8171] dummy0: entered promiscuous mode [ 152.529065][ T8171] dummy0: left promiscuous mode [ 152.610791][ T8182] netlink: 'syz.1.1028': attribute type 6 has an invalid length. [ 152.979491][ T8201] IPVS: persistence engine module ip_vs_pe_À not found [ 153.039422][ T8212] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1037'. [ 153.222851][ T8220] vlan3: entered promiscuous mode [ 153.234258][ T8220] bridge0: entered promiscuous mode [ 153.316696][ T8220] team0: Port device vlan3 added [ 153.524420][ T8224] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.561838][ T8234] netlink: 'syz.4.1044': attribute type 1 has an invalid length. [ 153.570593][ T8234] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1044'. [ 153.726793][ T8224] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.790561][ T8243] dummy0: entered promiscuous mode [ 153.815182][ T8243] dummy0: left promiscuous mode [ 153.898938][ T8244] bridge0: port 2(bridge_slave_1) entered listening state [ 153.963397][ T8224] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.101074][ T8224] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.198874][ T8262] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1051'. [ 154.220003][ T8262] tipc: Invalid UDP bearer configuration [ 154.220054][ T8262] tipc: Enabling of bearer rejected, failed to enable media [ 154.297966][ T8265] : entered promiscuous mode [ 154.341456][ T8224] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.422472][ T8224] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.456325][ T8224] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.476096][ T8268] macvlan5: entered allmulticast mode [ 154.485887][ T8268] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 154.494205][ T8268] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 154.506613][ T8268] bond0: (slave macvlan5): Enslaving as an active interface with an up link [ 154.526964][ T8224] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.621843][ T8275] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 154.924871][ T8300] netlink: 'syz.3.1063': attribute type 1 has an invalid length. [ 154.974938][ T8300] netlink: 'syz.3.1063': attribute type 1 has an invalid length. [ 155.190228][ T8310] macvlan6: entered promiscuous mode [ 155.204163][ T8310] macvlan6: entered allmulticast mode [ 155.365722][ T8319] caif0: entered allmulticast mode [ 155.519881][ T8324] netlink: 'syz.1.1074': attribute type 1 has an invalid length. [ 155.529335][ T8323] netlink: 'syz.0.1073': attribute type 10 has an invalid length. [ 155.544010][ T8323] geneve0: entered promiscuous mode [ 155.849265][ T8335] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 155.856627][ T8335] IPv6: NLM_F_CREATE should be set when creating new route [ 156.358357][ T8366] __nla_validate_parse: 5 callbacks suppressed [ 156.358379][ T8366] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1086'. [ 156.489606][ T8373] IPv6: Can't replace route, no match found [ 156.546871][ T8373] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1089'. [ 156.580028][ T8378] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1091'. [ 156.800016][ T8373] mac80211_hwsim hwsim5 wlan0 (unregistering): left allmulticast mode [ 156.921549][ T8373] bond0: (slave macvlan2): Releasing backup interface [ 157.002249][ T8373] team0: Port device macvlan3 removed [ 157.681753][ T8410] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 157.926159][ T8431] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1106'. [ 157.993188][ T8435] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1108'. [ 158.081915][ T8445] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1112'. [ 158.250562][ T8451] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1114'. [ 158.575475][ T8471] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 158.730879][ T8476] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1120'. [ 158.944357][ T8483] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1123'. [ 159.084944][ T8488] vxcan1: entered promiscuous mode [ 159.090575][ T8488] vlan2: entered promiscuous mode [ 159.148711][ T8488] vxcan1: left promiscuous mode [ 159.211034][ T8494] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1128'. [ 159.293160][ T8499] netlink: 'syz.1.1132': attribute type 10 has an invalid length. [ 159.395669][ T8499] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 160.044470][ T8530] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 160.870323][ T8579] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048) [ 161.003703][ T8590] xt_connbytes: Forcing CT accounting to be enabled [ 161.010487][ T8590] xt_bpf: check failed: parse error [ 161.086993][ T8587] macvlan4: entered promiscuous mode [ 161.112340][ T8587] macvlan4: entered allmulticast mode [ 161.651359][ T8619] tipc: Enabling of bearer rejected, failed to enable media [ 162.019689][ T8638] netlink: 'syz.2.1179': attribute type 1 has an invalid length. [ 162.051894][ T8638] __nla_validate_parse: 6 callbacks suppressed [ 162.051918][ T8638] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1179'. [ 162.192985][ T8652] netlink: 'syz.0.1184': attribute type 1 has an invalid length. [ 162.203547][ T8652] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1184'. [ 162.584134][ T8674] xt_cgroup: path and classid specified [ 162.625332][ T8674] netlink: zone id is out of range [ 162.630672][ T8674] netlink: zone id is out of range [ 162.681364][ T8674] netlink: zone id is out of range [ 162.702921][ T8674] netlink: zone id is out of range [ 162.723870][ T8674] netlink: zone id is out of range [ 162.741452][ T8674] netlink: zone id is out of range [ 162.760260][ T8674] netlink: zone id is out of range [ 162.779350][ T8674] netlink: zone id is out of range [ 162.809686][ T8674] netlink: zone id is out of range [ 162.865836][ T8674] netlink: set zone limit has 4 unknown bytes [ 162.903956][ T8691] netlink: 'syz.3.1199': attribute type 6 has an invalid length. [ 162.945891][ T8693] netlink: 105120 bytes leftover after parsing attributes in process `syz.4.1200'. [ 163.063292][ T8699] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1203'. [ 163.153208][ T8702] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1204'. [ 163.160397][ T8704] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1205'. [ 163.311888][ T8704] netlink: 'syz.2.1205': attribute type 14 has an invalid length. [ 163.453294][ T8720] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1208'. [ 163.509566][ T8720] netlink: 'syz.1.1208': attribute type 10 has an invalid length. [ 163.574340][ T8720] batman_adv: batadv0: Adding interface: team0 [ 163.609552][ T8720] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 163.663272][ T8720] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 163.709400][ T8725] ipvlan3: entered promiscuous mode [ 163.733764][ T8725] ipvlan3: entered allmulticast mode [ 163.755921][ T8725] ip6gretap0: entered allmulticast mode [ 163.759489][ T8737] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1214'. [ 163.885726][ T8744] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1216'. [ 164.032838][ T8750] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1219'. [ 164.177434][ T8754] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 164.506297][ T8781] macvlan6: entered promiscuous mode [ 164.511943][ T8781] macvlan6: entered allmulticast mode [ 164.600858][ T8785] netlink: 'syz.1.1231': attribute type 1 has an invalid length. [ 164.993416][ T8808] x_tables: duplicate underflow at hook 2 [ 165.511158][ T8843] netlink: 'syz.2.1251': attribute type 1 has an invalid length. [ 165.542243][ T8843] netlink: 'syz.2.1251': attribute type 1 has an invalid length. [ 165.562596][ T8841] vlan4: entered promiscuous mode [ 165.734888][ T8851] dummy0: entered promiscuous mode [ 165.753953][ T8851] macsec1: entered promiscuous mode [ 165.766218][ T8851] macsec1: entered allmulticast mode [ 165.776191][ T8851] dummy0: entered allmulticast mode [ 165.809567][ T8851] dummy0: left allmulticast mode [ 165.821817][ T8851] dummy0: left promiscuous mode [ 165.911222][ T8860] netlink: 'syz.2.1260': attribute type 4 has an invalid length. [ 166.265423][ T8879] netlink: 'syz.0.1266': attribute type 1 has an invalid length. [ 166.498346][ T8894] FAULT_INJECTION: forcing a failure. [ 166.498346][ T8894] name failslab, interval 1, probability 0, space 0, times 0 [ 166.534929][ T8894] CPU: 1 PID: 8894 Comm: syz.3.1273 Not tainted 6.10.0-rc6-syzkaller-01261-ge0ee68a8bef9 #0 [ 166.545071][ T8894] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 166.555252][ T8894] Call Trace: [ 166.558567][ T8894] [ 166.561535][ T8894] dump_stack_lvl+0x241/0x360 [ 166.566266][ T8894] ? __pfx_dump_stack_lvl+0x10/0x10 [ 166.571510][ T8894] ? __pfx__printk+0x10/0x10 [ 166.576166][ T8894] ? ref_tracker_alloc+0x332/0x490 [ 166.581337][ T8894] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 166.586847][ T8894] should_fail_ex+0x3b0/0x4e0 [ 166.591580][ T8894] ? skb_clone+0x20c/0x390 [ 166.596037][ T8894] should_failslab+0x9/0x20 [ 166.600566][ T8894] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 166.605978][ T8894] skb_clone+0x20c/0x390 [ 166.610249][ T8894] __netlink_deliver_tap+0x3cc/0x7c0 [ 166.615559][ T8894] ? netlink_deliver_tap+0x2e/0x1b0 [ 166.620771][ T8894] netlink_deliver_tap+0x19d/0x1b0 [ 166.625899][ T8894] netlink_sendskb+0x68/0x140 [ 166.630586][ T8894] netlink_unicast+0x39d/0x990 [ 166.635357][ T8894] ? __asan_memcpy+0x40/0x70 [ 166.639968][ T8894] ? __pfx_netlink_unicast+0x10/0x10 [ 166.645294][ T8894] netlink_rcv_skb+0x262/0x430 [ 166.650093][ T8894] ? __pfx_genl_rcv_msg+0x10/0x10 [ 166.655154][ T8894] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 166.660474][ T8894] ? __netlink_deliver_tap+0x77e/0x7c0 [ 166.665961][ T8894] genl_rcv+0x28/0x40 [ 166.669959][ T8894] netlink_unicast+0x7f0/0x990 [ 166.674743][ T8894] ? __pfx_netlink_unicast+0x10/0x10 [ 166.680057][ T8894] ? __virt_addr_valid+0x183/0x520 [ 166.685186][ T8894] ? __check_object_size+0x49c/0x900 [ 166.690488][ T8894] ? bpf_lsm_netlink_send+0x9/0x10 [ 166.695706][ T8894] netlink_sendmsg+0x8e4/0xcb0 [ 166.700500][ T8894] ? __pfx_netlink_sendmsg+0x10/0x10 [ 166.705888][ T8894] ? __import_iovec+0x536/0x820 [ 166.710760][ T8894] ? aa_sock_msg_perm+0x91/0x160 [ 166.715743][ T8894] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 166.721054][ T8894] ? security_socket_sendmsg+0x87/0xb0 [ 166.726535][ T8894] ? __pfx_netlink_sendmsg+0x10/0x10 [ 166.731831][ T8894] __sock_sendmsg+0x221/0x270 [ 166.736525][ T8894] ____sys_sendmsg+0x525/0x7d0 [ 166.741317][ T8894] ? __pfx_____sys_sendmsg+0x10/0x10 [ 166.746636][ T8894] __sys_sendmsg+0x2b0/0x3a0 [ 166.751258][ T8894] ? __pfx___sys_sendmsg+0x10/0x10 [ 166.756421][ T8894] ? vfs_write+0x7c4/0xc90 [ 166.760894][ T8894] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 166.767237][ T8894] ? do_syscall_64+0x100/0x230 [ 166.772020][ T8894] ? do_syscall_64+0xb6/0x230 [ 166.776797][ T8894] do_syscall_64+0xf3/0x230 [ 166.781310][ T8894] ? clear_bhb_loop+0x35/0x90 [ 166.786001][ T8894] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.791905][ T8894] RIP: 0033:0x7f4cc3575bd9 [ 166.796420][ T8894] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 166.816048][ T8894] RSP: 002b:00007f4cc4370048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 166.824472][ T8894] RAX: ffffffffffffffda RBX: 00007f4cc3703f60 RCX: 00007f4cc3575bd9 [ 166.832480][ T8894] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 166.840459][ T8894] RBP: 00007f4cc43700a0 R08: 0000000000000000 R09: 0000000000000000 [ 166.848440][ T8894] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 166.856429][ T8894] R13: 000000000000000b R14: 00007f4cc3703f60 R15: 00007fff8bffa8a8 [ 166.864425][ T8894] [ 166.934434][ T8902] netlink: 'syz.2.1275': attribute type 33 has an invalid length. [ 167.070078][ T8907] netlink: 'syz.0.1276': attribute type 1 has an invalid length. [ 167.106121][ T8907] netlink: 'syz.0.1276': attribute type 2 has an invalid length. [ 167.114130][ T8907] __nla_validate_parse: 9 callbacks suppressed [ 167.114148][ T8907] netlink: 16074 bytes leftover after parsing attributes in process `syz.0.1276'. [ 167.146194][ T8908] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1277'. [ 167.193993][ T8904] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1276'. [ 167.300061][ T8904] bond0: entered allmulticast mode [ 167.337109][ T8904] bond_slave_0: entered allmulticast mode [ 167.342919][ T8904] bond_slave_1: entered allmulticast mode [ 167.355586][ T8911] netlink: 7 bytes leftover after parsing attributes in process `syz.0.1276'. [ 167.404622][ T8904] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode [ 167.456729][ T8926] xt_hashlimit: overflow, try lower: 1125899906842624/8 [ 167.656532][ T8935] netlink: 'syz.2.1284': attribute type 7 has an invalid length. [ 167.671550][ T8933] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1283'. [ 167.702134][ T8880] macsec1: entered promiscuous mode [ 167.723868][ T8880] macvlan1: entered promiscuous mode [ 167.744308][ T8880] macsec1: entered allmulticast mode [ 167.775190][ T8880] macvlan1: entered allmulticast mode [ 167.790130][ T8880] veth1_vlan: entered allmulticast mode [ 167.801036][ T8880] macvlan1: left allmulticast mode [ 167.810362][ T8880] veth1_vlan: left allmulticast mode [ 167.815981][ T8880] macvlan1: left promiscuous mode [ 167.901437][ T8942] netlink: 'syz.3.1287': attribute type 10 has an invalid length. [ 167.911641][ T8950] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1289'. [ 167.926574][ T8951] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 167.948965][ T8942] hsr0: entered promiscuous mode [ 167.967437][ T8942] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 167.986858][ T8942] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 168.007563][ T8953] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 168.024623][ T8942] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 168.048256][ T8942] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 168.520880][ T8970] netlink: 1584 bytes leftover after parsing attributes in process `syz.1.1296'. [ 168.788404][ T8982] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1300'. [ 168.861046][ T8983] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1302'. [ 168.962244][ T8995] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1302'. [ 169.334843][ T9012] ip6gretap0: entered promiscuous mode [ 169.369257][ T9012] batadv_slave_0: entered promiscuous mode [ 169.522743][ T9021] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 169.550832][ T9021] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 169.671936][ T9027] netlink: 'syz.0.1314': attribute type 24 has an invalid length. [ 169.860055][ T9032] macvlan6: entered allmulticast mode [ 169.889679][ T9032] bond0: (slave macvlan6): Error -98 calling set_mac_address [ 170.090584][ T9038] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 170.556963][ T9055] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 170.692067][ T9061] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 20000 - 0 [ 170.722616][ T9061] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 20000 - 0 [ 170.745372][ T9061] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 20000 - 0 [ 170.776000][ T9061] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 20000 - 0 [ 170.797636][ T9061] geneve2: entered allmulticast mode [ 170.907661][ T9069] netlink: 'syz.1.1328': attribute type 4 has an invalid length. [ 171.002642][ T9077] netlink: 'syz.1.1328': attribute type 4 has an invalid length. [ 171.072496][ T9084] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 172.193897][ T9138] macvlan5: entered promiscuous mode [ 172.211888][ T9138] macvlan5: entered allmulticast mode [ 173.351900][ T9190] netlink: 'syz.1.1369': attribute type 3 has an invalid length. [ 173.974711][ T9154] xt_CT: You must specify a L4 protocol and not use inversions on it [ 174.156931][ T9225] netlink: 'syz.2.1381': attribute type 6 has an invalid length. [ 174.348668][ T9229] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 174.430927][ T9233] netlink: 'syz.1.1384': attribute type 1 has an invalid length. [ 174.674673][ T9241] __nla_validate_parse: 11 callbacks suppressed [ 174.674696][ T9241] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1388'. [ 175.143977][ T9259] netlink: 'syz.3.1392': attribute type 1 has an invalid length. [ 175.184478][ T9260] netlink: 'syz.3.1392': attribute type 10 has an invalid length. [ 175.184570][ T9259] netlink: 616 bytes leftover after parsing attributes in process `syz.3.1392'. [ 175.204014][ T9266] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 175.233855][ T9267] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 175.405279][ T9272] batman_adv: batadv0: adding TT local entry 4a:c8:1f:75:00:00 to non-existent VLAN 2358 [ 175.587898][ T9280] macvlan5: entered promiscuous mode [ 175.593259][ T9280] macvlan5: entered allmulticast mode [ 175.697517][ T9285] batman_adv: batadv0: Adding interface: macvlan3 [ 175.733862][ T9285] batman_adv: batadv0: The MTU of interface macvlan3 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 175.770606][ T9285] batman_adv: batadv0: Not using interface macvlan3 (retrying later): interface not active [ 176.144027][ T9312] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1410'. [ 176.444691][ T9317] team0: Device sit2 is of different type [ 176.669139][ T9324] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1418'. [ 176.697168][ T9324] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 176.709742][ T9327] netlink: 'syz.4.1419': attribute type 25 has an invalid length. [ 176.750286][ T9327] netlink: 'syz.4.1419': attribute type 7 has an invalid length. [ 176.976251][ T9332] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1422'. [ 177.512870][ T9359] pimreg: entered allmulticast mode [ 177.539721][ T9359] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1432'. [ 177.575383][ T9359] netlink: 188 bytes leftover after parsing attributes in process `syz.3.1432'. [ 177.668923][ T9365] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1428'. [ 177.697798][ T9365] netlink: 'syz.4.1428': attribute type 12 has an invalid length. [ 177.754292][ T9365] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 177.763956][ T9365] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 177.772812][ T9365] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 177.781792][ T9365] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 177.801051][ T9365] vxlan0: entered promiscuous mode [ 178.017741][ T9371] netlink: 'syz.2.1437': attribute type 32 has an invalid length. [ 178.043779][ T9371] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0) [ 178.254856][ T9374] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1438'. [ 178.592395][ T9387] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition [ 178.615279][ T9387] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0) [ 178.661020][ T9389] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1441'. [ 179.063325][ T9392] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 179.797507][ T9423] __nla_validate_parse: 2 callbacks suppressed [ 179.797531][ T9423] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1454'. [ 179.845290][ T9432] vlan4: entered allmulticast mode [ 179.870544][ T9432] bond0: (slave vlan4): Opening slave failed [ 179.978438][ T9439] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1460'. [ 180.051778][ T9439] netlink: 'syz.3.1460': attribute type 8 has an invalid length. [ 180.133937][ T9447] Cannot find del_set index 2816 as target [ 180.168264][ T9450] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1464'. [ 180.210150][ T9451] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1465'. [ 180.312253][ T9457] netlink: 1584 bytes leftover after parsing attributes in process `syz.0.1467'. [ 180.371155][ T9460] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 180.659573][ T9474] xt_NFQUEUE: number of total queues is 0 [ 180.875228][ T9488] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1478'. [ 180.958107][ T9494] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1481'. [ 180.990131][ T9494] openvswitch: netlink: Tunnel attr 7 has unexpected len 8 expected 0 [ 181.165405][ T9506] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1488'. [ 181.180841][ T9506] macvlan5: entered promiscuous mode [ 181.187900][ T9506] macvlan5: entered allmulticast mode [ 181.197885][ T9502] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1485'. [ 181.244346][ T9509] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1487'. [ 181.304454][ T9509] veth8: entered promiscuous mode [ 181.304578][ T9514] ieee802154 phy0 wpan0: encryption failed: -22 [ 181.330061][ T9509] veth8: entered allmulticast mode [ 181.747981][ T9534] netlink: 'syz.2.1494': attribute type 1 has an invalid length. [ 182.179098][ T9546] netlink: 'syz.0.1498': attribute type 13 has an invalid length. [ 182.381653][ T9552] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 183.081714][ T9586] netlink: 'syz.2.1515': attribute type 10 has an invalid length. [ 183.100683][ T9586] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 183.522203][ T9601] netlink: 'syz.2.1520': attribute type 1 has an invalid length. [ 183.821194][ T9620] netlink: 'syz.0.1529': attribute type 1 has an invalid length. [ 183.863731][ T9619] netlink: 'syz.3.1527': attribute type 1 has an invalid length. [ 183.992793][ T9634] macvlan4: entered promiscuous mode [ 184.031273][ T9634] macvlan4: entered allmulticast mode [ 184.537871][ T9657] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 184.636454][ T9657] netlink: 'syz.2.1540': attribute type 10 has an invalid length. [ 184.775415][ T9657] team0: Cannot enslave team device to itself [ 185.556343][ T9693] __nla_validate_parse: 19 callbacks suppressed [ 185.556366][ T9693] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1553'. [ 185.784601][ T9712] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 185.864725][ T9716] netlink: 23 bytes leftover after parsing attributes in process `syz.3.1561'. [ 186.032728][ T9718] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1562'. [ 186.139777][ T9725] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1565'. [ 186.290374][ T9735] netlink: 'syz.4.1569': attribute type 1 has an invalid length. [ 186.444596][ T9748] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1574'. [ 186.555081][ T9748] macvlan4: entered allmulticast mode [ 186.574797][ T9748] mac80211_hwsim hwsim7 wlan0: entered promiscuous mode [ 186.583641][ T9748] mac80211_hwsim hwsim7 wlan0: entered allmulticast mode [ 186.646038][ T9748] bond0: (slave macvlan4): Enslaving as an active interface with an up link [ 186.712276][ T9761] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1576'. [ 187.074890][ T9777] netlink: 100 bytes leftover after parsing attributes in process `syz.1.1581'. [ 187.230526][ T5107] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 187.241847][ T5107] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 187.251132][ T5107] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 187.265807][ T5107] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 187.275743][ T5107] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 187.283264][ T5107] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 187.308572][ T9788] batman_adv: batadv0: adding TT local entry 4a:c8:19:75:00:00 to non-existent VLAN 2358 [ 187.477590][ T9774] netlink: 'syz.1.1581': attribute type 4 has an invalid length. [ 187.618492][ T9798] SET target dimension over the limit! [ 187.653329][ T61] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.669471][ T61] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 52117 - 0 [ 187.680732][ T61] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 2] type 2 family 0 port 47782 - 0 [ 187.727764][ T9800] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 187.741111][ T9800] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 187.749503][ T9807] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1592'. [ 187.765552][ T9800] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 187.790865][ T9809] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 187.862718][ T61] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.882219][ T61] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 52117 - 0 [ 187.903667][ T61] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 2] type 2 family 0 port 47782 - 0 [ 188.032457][ T9820] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1597'. [ 188.046835][ T61] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.069895][ T61] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 52117 - 0 [ 188.091146][ T61] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 2] type 2 family 0 port 47782 - 0 [ 188.200234][ T61] bond0: (slave netdevsim0): Releasing backup interface [ 188.211302][ T61] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.222551][ T61] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 52117 - 0 [ 188.235151][ T61] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 2] type 2 family 0 port 47782 - 0 [ 188.304216][ T9829] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1598'. [ 188.561011][ T9782] chnl_net:caif_netlink_parms(): no params data found [ 188.673417][ T9836] netlink: 'syz.3.1600': attribute type 4 has an invalid length. [ 188.702707][ T61] bridge_slave_1: left allmulticast mode [ 188.709886][ T61] bridge_slave_1: left promiscuous mode [ 188.717874][ T61] bridge0: port 2(bridge_slave_1) entered disabled state [ 188.735061][ T61] bridge_slave_0: left allmulticast mode [ 188.740889][ T61] bridge_slave_0: left promiscuous mode [ 188.756245][ T61] bridge0: port 1(bridge_slave_0) entered disabled state [ 188.886223][ T61] bridge0: left promiscuous mode [ 189.134941][ T61] team0: Port device vlan3 removed [ 189.374221][ T5100] Bluetooth: hci2: command tx timeout [ 189.397052][ T61] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 189.412860][ T61] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 189.431361][ T61] bond0 (unregistering): (slave macvlan2): Releasing backup interface [ 189.441530][ T61] mac80211_hwsim hwsim4 wlan0: left allmulticast mode [ 189.450150][ T61] mac80211_hwsim hwsim4 wlan0: left promiscuous mode [ 189.462056][ T61] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 189.472203][ T61] bond0 (unregistering): Released all slaves [ 189.488465][ T61] bond1 (unregistering): Released all slaves [ 189.774357][ T9782] bridge0: port 1(bridge_slave_0) entered blocking state [ 189.786746][ T9782] bridge0: port 1(bridge_slave_0) entered disabled state [ 189.804579][ T9782] bridge_slave_0: entered allmulticast mode [ 189.819501][ T9782] bridge_slave_0: entered promiscuous mode [ 189.831740][ T9782] bridge0: port 2(bridge_slave_1) entered blocking state [ 189.839723][ T9782] bridge0: port 2(bridge_slave_1) entered disabled state [ 189.847642][ T9782] bridge_slave_1: entered allmulticast mode [ 189.864677][ T9782] bridge_slave_1: entered promiscuous mode [ 190.146027][ T9782] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 190.203901][ T9782] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 190.530233][ T5107] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 190.565915][ T5107] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 190.578058][ T5107] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 190.587473][ T5107] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 190.603065][ T5107] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 190.613587][ T5107] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 190.656318][ T9888] __nla_validate_parse: 4 callbacks suppressed [ 190.656341][ T9888] netlink: 100 bytes leftover after parsing attributes in process `syz.3.1615'. [ 190.851119][ T9782] team0: Port device team_slave_0 added [ 190.882037][ T9894] netlink: 'syz.1.1617': attribute type 33 has an invalid length. [ 190.891792][ T9894] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1617'. [ 191.065755][ T9895] netlink: 'syz.3.1615': attribute type 4 has an invalid length. [ 191.092656][ T9782] team0: Port device team_slave_1 added [ 191.218895][ T61] hsr_slave_0: left promiscuous mode [ 191.249015][ T61] hsr_slave_1: left promiscuous mode [ 191.263431][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 191.273310][ T61] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 191.335433][ T61] veth1_macvtap: left promiscuous mode [ 191.341577][ T61] veth0_macvtap: left promiscuous mode [ 191.368407][ T61] veth1_vlan: left promiscuous mode [ 191.378499][ T61] veth0_vlan: left promiscuous mode [ 191.443900][ T5107] Bluetooth: hci2: command tx timeout [ 191.585278][ T5100] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 191.601423][ T5100] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 191.613486][ T5100] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 191.622475][ T5100] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 191.633122][ T5100] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 191.644205][ T5100] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 192.119446][ T61] team0 (unregistering): Port device team_slave_1 removed [ 192.159970][ T61] team0 (unregistering): Port device team_slave_0 removed [ 192.497796][ T61] smc: removing net device lo with user defined pnetid SYZ2 [ 192.509685][ T9782] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 192.517381][ T9782] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 192.583641][ T9782] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 192.622639][ T9902] ip6gre1: entered allmulticast mode [ 192.648519][ T5107] Bluetooth: hci3: command tx timeout [ 192.892897][ T9908] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1622'. [ 192.904499][ T9782] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 192.911483][ T9782] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 192.939094][ T9782] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 193.104472][ T9920] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1626'. [ 193.148906][ T9782] hsr_slave_0: entered promiscuous mode [ 193.156524][ T9782] hsr_slave_1: entered promiscuous mode [ 193.163165][ T9782] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 193.171419][ T9782] Cannot create hsr debugfs directory [ 193.281496][ T9929] netlink: 'syz.1.1629': attribute type 8 has an invalid length. [ 193.299075][ T9931] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1630'. [ 193.518073][ T9942] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 193.524038][ T5107] Bluetooth: hci2: command tx timeout [ 193.691338][ T5107] Bluetooth: hci5: command tx timeout [ 193.943362][ T9905] chnl_net:caif_netlink_parms(): no params data found [ 193.985716][ T9963] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 194.036754][ T61] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.051154][ T61] netdevsim netdevsim3 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 194.102541][ T9965] netlink: 84 bytes leftover after parsing attributes in process `syz.1.1638'. [ 194.143426][ T9881] chnl_net:caif_netlink_parms(): no params data found [ 194.188551][ T61] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.202269][ T61] netdevsim netdevsim3 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 194.297700][ T61] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.310588][ T61] netdevsim netdevsim3 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 194.382204][ T9905] bridge0: port 1(bridge_slave_0) entered blocking state [ 194.404496][ T9905] bridge0: port 1(bridge_slave_0) entered disabled state [ 194.411982][ T9905] bridge_slave_0: entered allmulticast mode [ 194.427660][ T9975] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 194.443292][ T9905] bridge_slave_0: entered promiscuous mode [ 194.515989][ T61] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.531811][ T61] netdevsim netdevsim3 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 194.552561][ T9905] bridge0: port 2(bridge_slave_1) entered blocking state [ 194.560410][ T9905] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.568858][ T9905] bridge_slave_1: entered allmulticast mode [ 194.587009][ T9905] bridge_slave_1: entered promiscuous mode [ 194.649095][ T1249] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.659026][ T1249] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.666944][ T9991] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1646'. [ 194.667547][ T9992] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1643'. [ 194.725787][ T5111] Bluetooth: hci3: command tx timeout [ 194.862740][ T9881] bridge0: port 1(bridge_slave_0) entered blocking state [ 194.893832][ T9881] bridge0: port 1(bridge_slave_0) entered disabled state [ 194.901170][ T9881] bridge_slave_0: entered allmulticast mode [ 194.925364][ T9881] bridge_slave_0: entered promiscuous mode [ 194.949591][ T9782] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 194.961392][ T9782] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 195.002614][ T9881] bridge0: port 2(bridge_slave_1) entered blocking state [ 195.012658][ T9881] bridge0: port 2(bridge_slave_1) entered disabled state [ 195.020259][ T9881] bridge_slave_1: entered allmulticast mode [ 195.028369][ T9881] bridge_slave_1: entered promiscuous mode [ 195.059449][ T9782] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 195.083468][ T9905] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 195.098273][ T9905] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 195.114086][T10003] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 195.197393][ T9782] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 195.268490][ T9881] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 195.298836][ T9905] team0: Port device team_slave_0 added [ 195.317535][ T9881] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 195.438427][ T9905] team0: Port device team_slave_1 added [ 195.525507][ T9905] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 195.532626][ T9905] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 195.563844][ T9905] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 195.581464][ T9881] team0: Port device team_slave_0 added [ 195.603878][ T5111] Bluetooth: hci2: command tx timeout [ 195.647144][ T9905] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 195.655570][ T9905] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 195.683421][ T9905] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 195.699604][ T9881] team0: Port device team_slave_1 added [ 195.734802][ T61] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.759207][T10012] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1650'. [ 195.763737][ T5111] Bluetooth: hci5: command tx timeout [ 195.891388][ T61] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.907419][ T9881] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 195.915227][ T9881] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 195.944859][ T9881] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 195.958612][ T9881] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 195.965749][ T9881] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 195.992504][ T9881] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 196.070545][ T9905] hsr_slave_0: entered promiscuous mode [ 196.087862][ T9905] hsr_slave_1: entered promiscuous mode [ 196.103653][ T9905] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 196.112966][ T9905] Cannot create hsr debugfs directory [ 196.142862][ T61] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.171238][T10019] bond0: option mode: unable to set because the bond device has slaves [ 196.303344][ T61] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.325732][T10022] netlink: 'syz.1.1653': attribute type 10 has an invalid length. [ 196.460555][T10028] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1656'. [ 196.477758][T10028] macvlan6: entered promiscuous mode [ 196.483218][T10028] macvlan6: entered allmulticast mode [ 196.525684][ T9881] hsr_slave_0: entered promiscuous mode [ 196.555351][ T9881] hsr_slave_1: entered promiscuous mode [ 196.561989][ T9881] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 196.593266][ T9881] Cannot create hsr debugfs directory [ 196.724123][ T5111] Bluetooth: hci4: command 0x0406 tx timeout [ 196.730235][ T53] Bluetooth: hci0: command 0x0406 tx timeout [ 196.803825][ T5100] Bluetooth: hci3: command tx timeout [ 196.928233][ T61] bridge_slave_1: left allmulticast mode [ 196.934803][ T61] bridge_slave_1: left promiscuous mode [ 196.940688][ T61] bridge0: port 2(bridge_slave_1) entered disabled state [ 196.950164][ T61] bridge_slave_0: left allmulticast mode [ 196.957305][ T61] bridge_slave_0: left promiscuous mode [ 196.963050][ T61] bridge0: port 1(bridge_slave_0) entered disabled state [ 197.211624][ T61] ip6gretap0 (unregistering): left promiscuous mode [ 197.844167][ T5100] Bluetooth: hci5: command tx timeout [ 198.002166][ T61] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 198.017159][ T61] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 198.032464][ T61] bond0 (unregistering): (slave macvlan4): Releasing backup interface [ 198.041832][ T61] mac80211_hwsim hwsim7 wlan0: left allmulticast mode [ 198.051067][ T61] mac80211_hwsim hwsim7 wlan0: left promiscuous mode [ 198.060298][ T61] bond0 (unregistering): Released all slaves [ 198.180074][ T61] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 198.189207][ T61] bond_slave_0: left allmulticast mode [ 198.199400][ T61] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 198.212954][ T61] bond_slave_1: left allmulticast mode [ 198.221634][ T61] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 198.230227][ T61] mac80211_hwsim hwsim3 wlan1: left allmulticast mode [ 198.248406][ T61] bond0 (unregistering): (slave macvlan5): Releasing backup interface [ 198.260829][ T61] mac80211_hwsim hwsim2 wlan0: left allmulticast mode [ 198.268195][ T61] mac80211_hwsim hwsim2 wlan0: left promiscuous mode [ 198.277438][ T61] bond0 (unregistering): Released all slaves [ 198.386645][T10049] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1662'. [ 198.442381][T10049] macvlan7: entered allmulticast mode [ 198.450542][T10049] bond0: (slave macvlan7): Error -98 calling set_mac_address [ 198.508092][ T61] ɶƣ0GC¦: left promiscuous mode [ 198.521617][T10051] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1663'. [ 198.631438][ T9782] 8021q: adding VLAN 0 to HW filter on device bond0 [ 198.699111][ T9782] 8021q: adding VLAN 0 to HW filter on device team0 [ 198.738210][ T25] bridge0: port 1(bridge_slave_0) entered blocking state [ 198.745569][ T25] bridge0: port 1(bridge_slave_0) entered forwarding state [ 198.864977][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 198.872309][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 198.884791][ T5100] Bluetooth: hci3: command tx timeout [ 198.997226][ T9905] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 199.006511][T10062] netlink: 209844 bytes leftover after parsing attributes in process `syz.4.1666'. [ 199.088973][ T9905] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 199.206952][ T9905] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 199.229340][ T9905] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 199.545365][ T9782] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 199.868084][T10067] netlink: 5 bytes leftover after parsing attributes in process `syz.1.1667'. [ 199.924761][ T5100] Bluetooth: hci5: command tx timeout [ 200.030544][ T61] hsr_slave_0: left promiscuous mode [ 200.040404][ T61] hsr_slave_1: left promiscuous mode [ 200.053556][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 200.061497][ T61] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 200.070247][ T61] batman_adv: batadv0: Removing interface: macvlan3 [ 200.078441][ T61] batadv_slave_0: left promiscuous mode [ 200.102432][ T61] hsr_slave_0: left promiscuous mode [ 200.127006][ T61] hsr_slave_1: left promiscuous mode [ 200.133135][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 200.142154][ T61] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 200.150678][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 200.158620][ T61] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 200.236531][ T61] veth1_macvtap: left promiscuous mode [ 200.242148][ T61] veth0_macvtap: left promiscuous mode [ 200.248537][ T61] veth1_vlan: left promiscuous mode [ 200.255139][ T61] veth0_vlan: left promiscuous mode [ 200.270367][ T61] veth1_macvtap: left promiscuous mode [ 200.281301][ T61] veth0_macvtap: left promiscuous mode [ 200.287201][ T61] veth1_vlan: left promiscuous mode [ 200.292579][ T61] veth0_vlan: left promiscuous mode [ 200.626386][ T61] pimreg (unregistering): left allmulticast mode [ 200.669894][ T61] pim6reg (unregistering): left allmulticast mode [ 201.069564][ T61] team0 (unregistering): Port device team_slave_1 removed [ 201.109078][ T61] team0 (unregistering): Port device team_slave_0 removed [ 201.494009][ T61] smc: removing net device lo with user defined pnetid SYZ2 [ 201.861501][ T61] team0 (unregistering): Port device team_slave_1 removed [ 201.907664][ T61] team0 (unregistering): Port device team_slave_0 removed [ 202.328435][ T9782] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 202.543943][ T9881] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 202.570161][ T9881] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 202.657992][ T9881] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 202.696986][ T9881] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 202.841244][ T9905] 8021q: adding VLAN 0 to HW filter on device bond0 [ 202.954355][ T9782] veth0_vlan: entered promiscuous mode [ 202.996392][ T9905] 8021q: adding VLAN 0 to HW filter on device team0 [ 203.075429][ T9782] veth1_vlan: entered promiscuous mode [ 203.106194][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 203.113353][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 203.202138][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 203.209519][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 203.260520][ T9881] 8021q: adding VLAN 0 to HW filter on device bond0 [ 203.378338][ T9881] 8021q: adding VLAN 0 to HW filter on device team0 [ 203.436281][ T784] bridge0: port 1(bridge_slave_0) entered blocking state [ 203.443581][ T784] bridge0: port 1(bridge_slave_0) entered forwarding state [ 203.476139][ T784] bridge0: port 2(bridge_slave_1) entered blocking state [ 203.483432][ T784] bridge0: port 2(bridge_slave_1) entered forwarding state [ 203.521400][ T9782] veth0_macvtap: entered promiscuous mode [ 203.579976][ T9782] veth1_macvtap: entered promiscuous mode [ 203.599479][ T9881] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 203.625970][ T9881] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 203.702200][ T9782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 203.725692][ T9782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.736188][ T9782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 203.747048][ T9782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.759275][ T9782] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 203.835111][ T9782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 203.873590][ T9782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.903898][ T9782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 203.919902][ T9782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.949478][ T9782] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 203.970122][ T9782] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.990038][ T9782] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.001662][ T9782] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.024160][ T9782] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.326592][ T9905] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 204.434766][ T9881] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 204.445502][ T61] IPVS: stop unused estimator thread 0... [ 204.452660][ T752] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 204.469104][ T752] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 204.635070][ T752] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 204.658269][ T752] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 204.692537][ T9881] veth0_vlan: entered promiscuous mode [ 204.702904][T10151] batadv_slave_1: entered promiscuous mode [ 204.729905][ T9905] veth0_vlan: entered promiscuous mode [ 204.756630][T10150] batadv_slave_1: left promiscuous mode [ 204.779650][ T9881] veth1_vlan: entered promiscuous mode [ 204.812216][ T9905] veth1_vlan: entered promiscuous mode [ 204.932352][ T9905] veth0_macvtap: entered promiscuous mode [ 204.940738][T10156] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1692'. [ 204.987324][ T9905] veth1_macvtap: entered promiscuous mode [ 205.010002][ T9881] veth0_macvtap: entered promiscuous mode [ 205.074553][ T9881] veth1_macvtap: entered promiscuous mode [ 205.103130][T10158] netlink: 84 bytes leftover after parsing attributes in process `syz.2.1693'. [ 205.119646][ T9905] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 205.174861][ T9905] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.204140][ T9905] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 205.233806][ T9905] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.253682][ T9905] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 205.278462][ T9905] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.305597][ T9905] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 205.331768][T10167] vcan0 speed is unknown, defaulting to 1000 [ 205.346625][ T9905] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 205.378589][ T9905] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.413905][ T9905] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 205.444063][ T9905] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.463572][ T9905] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 205.483656][ T9905] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.505627][ T9905] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 205.510316][T10175] batman_adv: batadv0: adding TT local entry 4a:c8:0a:3f:00:00 to non-existent VLAN 2358 [ 205.536006][ T9905] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.556932][ T9905] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.583905][ T9905] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.592677][ T9905] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.639852][T10167] vcan0 speed is unknown, defaulting to 1000 [ 205.740650][T10167] vcan0 speed is unknown, defaulting to 1000 [ 205.769800][ T9881] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 205.811216][ T9881] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.844144][ T9881] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 205.881948][ T9881] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.903278][ T9881] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 205.933918][ T9881] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.974949][ T9881] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 206.005760][ T9881] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 206.036341][ T9881] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 206.090648][ T9881] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 206.123664][ T9881] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 206.134147][ T9881] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 206.144746][ T9881] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 206.154886][ T9881] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 206.166939][ T9881] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 206.176957][ T9881] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 206.189920][ T9881] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 206.200133][T10188] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1703'. [ 206.212214][ T9881] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 206.290386][ T9881] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.307630][ T9881] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.319784][T10167] infiniband syz1: set active [ 206.320009][ T9881] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.329483][T10167] infiniband syz1: added vcan0 [ 206.336360][ T9881] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.360390][ T5161] vcan0 speed is unknown, defaulting to 1000 [ 206.370067][T10167] syz1: rxe_create_cq: returned err = -12 [ 206.387990][T10167] infiniband syz1: Couldn't create ib_mad CQ [ 206.399554][T10167] infiniband syz1: Couldn't open port 1 [ 206.458814][ T5199] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 206.475902][ T5199] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 206.504458][T10167] RDS/IB: syz1: added [ 206.510592][T10167] smc: adding ib device syz1 with port count 1 [ 206.528636][T10167] smc: ib device syz1 port 1 has pnetid [ 206.541436][ T1793] vcan0 speed is unknown, defaulting to 1000 [ 206.577768][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 206.592834][T10167] vcan0 speed is unknown, defaulting to 1000 [ 206.599608][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 206.696055][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 206.721420][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 206.806854][ T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 206.843665][ T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 207.038337][T10203] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1708'. [ 207.070502][T10203] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1708'. [ 207.102532][T10209] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1611'. [ 207.140045][T10213] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1712'. [ 207.336492][T10167] vcan0 speed is unknown, defaulting to 1000 [ 207.402123][T10222] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1715'. [ 207.565376][T10232] syzkaller1: entered promiscuous mode [ 207.591890][T10232] syzkaller1: entered allmulticast mode [ 207.632689][T10220] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1715'. [ 207.810890][T10241] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1719'. [ 207.949897][T10167] vcan0 speed is unknown, defaulting to 1000 [ 208.515094][T10167] vcan0 speed is unknown, defaulting to 1000 [ 209.135562][T10278] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 209.173230][T10167] vcan0 speed is unknown, defaulting to 1000 [ 209.207983][T10279] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 210.018756][T10303] __nla_validate_parse: 5 callbacks suppressed [ 210.018788][T10303] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1742'. [ 210.494057][T10313] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1747'. [ 210.641104][T10320] Cannot find add_set index 0 as target [ 210.811221][T10324] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1751'. [ 211.241382][T10350] netlink: 1584 bytes leftover after parsing attributes in process `syz.1.1764'. [ 211.436245][T10366] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1771'. [ 211.505289][T10368] netlink: 'syz.4.1772': attribute type 10 has an invalid length. [ 211.626560][T10368] batman_adv: batadv0: Adding interface: team0 [ 211.663940][T10368] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 211.693376][T10368] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 211.760313][T10389] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1777'. [ 211.903132][T10398] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1782'. [ 211.953368][T10398] macvlan2: entered promiscuous mode [ 211.965502][T10398] macvlan2: entered allmulticast mode [ 211.988655][T10393] netlink: 'syz.2.1779': attribute type 10 has an invalid length. [ 212.077085][T10393] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 212.242940][T10412] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1786'. [ 212.269118][T10412] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1786'. [ 212.428598][T10425] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1790'. [ 212.521995][T10427] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 212.667186][T10435] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 212.747024][ C0] vxcan0: j1939_tp_rxtimer: 0xffff8880228b7800: rx timeout, send abort [ 212.769403][T10441] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (6) [ 212.805658][T10442] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 212.869166][T10444] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 41758 - 0 [ 212.893754][T10444] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 41758 - 0 [ 212.923693][T10444] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 41758 - 0 [ 212.943657][T10444] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 41758 - 0 [ 212.960195][T10444] netdevsim netdevsim3 netdevsim0: set [1, 2] type 2 family 0 port 54510 - 0 [ 212.981206][T10444] netdevsim netdevsim3 netdevsim1: set [1, 2] type 2 family 0 port 54510 - 0 [ 212.994734][T10444] netdevsim netdevsim3 netdevsim2: set [1, 2] type 2 family 0 port 54510 - 0 [ 213.017426][T10444] netdevsim netdevsim3 netdevsim3: set [1, 2] type 2 family 0 port 54510 - 0 [ 213.033712][T10444] geneve2: entered promiscuous mode [ 213.051174][T10444] geneve2: entered allmulticast mode [ 213.134565][T10456] netlink: 'syz.2.1802': attribute type 13 has an invalid length. [ 213.244249][T10467] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 213.256885][ C0] vxcan0: j1939_tp_rxtimer: 0xffff8880228b7800: abort rx timeout. Force session deactivation [ 213.315466][T10470] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 213.426104][T10478] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 213.573392][T10487] netlink: zone id is out of range [ 213.594915][T10487] netlink: zone id is out of range [ 213.611799][T10487] netlink: zone id is out of range [ 213.626652][T10487] netlink: zone id is out of range [ 213.633237][T10487] netlink: zone id is out of range [ 213.748966][T10496] bond0: (slave wlan1): Releasing backup interface [ 213.762619][T10496] [ 213.764999][T10496] ====================================================== [ 213.772028][T10496] WARNING: possible circular locking dependency detected [ 213.779046][T10496] 6.10.0-rc6-syzkaller-01261-ge0ee68a8bef9 #0 Not tainted [ 213.786161][T10496] ------------------------------------------------------ [ 213.793197][T10496] syz.4.1813/10496 is trying to acquire lock: [ 213.799260][T10496] ffff88805aae0768 (&rdev->wiphy.mtx){+.+.}-{3:3}, at: ieee80211_open+0xe7/0x200 [ 213.808436][T10496] [ 213.808436][T10496] but task is already holding lock: [ 213.815822][T10496] ffff888021cd0d40 (team->team_lock_key#3){+.+.}-{3:3}, at: team_add_slave+0xad/0x2750 [ 213.825524][T10496] [ 213.825524][T10496] which lock already depends on the new lock. [ 213.825524][T10496] [ 213.835926][T10496] [ 213.835926][T10496] the existing dependency chain (in reverse order) is: [ 213.844940][T10496] [ 213.844940][T10496] -> #1 (team->team_lock_key#3){+.+.}-{3:3}: [ 213.853123][T10496] lock_acquire+0x1ed/0x550 [ 213.858156][T10496] __mutex_lock+0x136/0xd70 [ 213.863189][T10496] team_port_change_check+0x51/0x1e0 [ 213.869010][T10496] team_device_event+0x161/0x5b0 [ 213.874651][T10496] notifier_call_chain+0x19f/0x3e0 [ 213.880296][T10496] dev_close_many+0x33c/0x4c0 [ 213.885501][T10496] unregister_netdevice_many_notify+0x537/0x1d20 [ 213.892359][T10496] macvlan_device_event+0x7e0/0x870 [ 213.898178][T10496] notifier_call_chain+0x19f/0x3e0 [ 213.903813][T10496] unregister_netdevice_many_notify+0xdc8/0x1d20 [ 213.910676][T10496] unregister_netdevice_queue+0x303/0x370 [ 213.916926][T10496] _cfg80211_unregister_wdev+0x162/0x560 [ 213.923089][T10496] ieee80211_if_remove+0x25d/0x3a0 [ 213.928812][T10496] ieee80211_del_iface+0x19/0x30 [ 213.934280][T10496] cfg80211_remove_virtual_intf+0x23f/0x410 [ 213.940701][T10496] genl_rcv_msg+0xb14/0xec0 [ 213.945735][T10496] netlink_rcv_skb+0x1e3/0x430 [ 213.951023][T10496] genl_rcv+0x28/0x40 [ 213.955534][T10496] netlink_unicast+0x7f0/0x990 [ 213.960821][T10496] netlink_sendmsg+0x8e4/0xcb0 [ 213.966113][T10496] __sock_sendmsg+0x221/0x270 [ 213.971314][T10496] ____sys_sendmsg+0x525/0x7d0 [ 213.976608][T10496] __sys_sendmsg+0x2b0/0x3a0 [ 213.981731][T10496] do_syscall_64+0xf3/0x230 [ 213.986760][T10496] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 213.993180][T10496] [ 213.993180][T10496] -> #0 (&rdev->wiphy.mtx){+.+.}-{3:3}: [ 214.000919][T10496] validate_chain+0x18e0/0x5900 [ 214.006304][T10496] __lock_acquire+0x1346/0x1fd0 [ 214.011706][T10496] lock_acquire+0x1ed/0x550 [ 214.016776][T10496] __mutex_lock+0x136/0xd70 [ 214.021808][T10496] ieee80211_open+0xe7/0x200 [ 214.026922][T10496] __dev_open+0x2d3/0x450 [ 214.031800][T10496] dev_open+0xae/0x1b0 [ 214.036496][T10496] team_add_slave+0x9b3/0x2750 [ 214.041796][T10496] do_setlink+0xe70/0x41f0 [ 214.046737][T10496] rtnl_newlink+0x180d/0x20a0 [ 214.051944][T10496] rtnetlink_rcv_msg+0x89b/0x1180 [ 214.057495][T10496] netlink_rcv_skb+0x1e3/0x430 [ 214.062784][T10496] netlink_unicast+0x7f0/0x990 [ 214.068072][T10496] netlink_sendmsg+0x8e4/0xcb0 [ 214.073382][T10496] __sock_sendmsg+0x221/0x270 [ 214.078589][T10496] ____sys_sendmsg+0x525/0x7d0 [ 214.083883][T10496] __sys_sendmsg+0x2b0/0x3a0 [ 214.089087][T10496] do_syscall_64+0xf3/0x230 [ 214.094116][T10496] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 214.100711][T10496] [ 214.100711][T10496] other info that might help us debug this: [ 214.100711][T10496] [ 214.110962][T10496] Possible unsafe locking scenario: [ 214.110962][T10496] [ 214.118412][T10496] CPU0 CPU1 [ 214.123775][T10496] ---- ---- [ 214.129140][T10496] lock(team->team_lock_key#3); [ 214.134090][T10496] lock(&rdev->wiphy.mtx); [ 214.141125][T10496] lock(team->team_lock_key#3); [ 214.148598][T10496] lock(&rdev->wiphy.mtx); [ 214.153102][T10496] [ 214.153102][T10496] *** DEADLOCK *** [ 214.153102][T10496] [ 214.161242][T10496] 2 locks held by syz.4.1813/10496: [ 214.166438][T10496] #0: ffffffff8f5e7f48 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x842/0x1180 [ 214.175951][T10496] #1: ffff888021cd0d40 (team->team_lock_key#3){+.+.}-{3:3}, at: team_add_slave+0xad/0x2750 [ 214.186080][T10496] [ 214.186080][T10496] stack backtrace: [ 214.191965][T10496] CPU: 1 PID: 10496 Comm: syz.4.1813 Not tainted 6.10.0-rc6-syzkaller-01261-ge0ee68a8bef9 #0 [ 214.202114][T10496] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 214.212203][T10496] Call Trace: [ 214.215488][T10496] [ 214.218426][T10496] dump_stack_lvl+0x241/0x360 [ 214.223114][T10496] ? __pfx_dump_stack_lvl+0x10/0x10 [ 214.228322][T10496] ? print_circular_bug+0x130/0x1a0 [ 214.233533][T10496] check_noncircular+0x36a/0x4a0 [ 214.238483][T10496] ? __pfx_check_noncircular+0x10/0x10 [ 214.243949][T10496] ? lockdep_lock+0x123/0x2b0 [ 214.248716][T10496] ? validate_chain+0x11e/0x5900 [ 214.253660][T10496] ? mark_lock+0x9a/0x350 [ 214.258002][T10496] validate_chain+0x18e0/0x5900 [ 214.262961][T10496] ? __pfx_validate_chain+0x10/0x10 [ 214.268179][T10496] ? mark_lock+0x9a/0x350 [ 214.272523][T10496] ? __pfx_validate_chain+0x10/0x10 [ 214.277733][T10496] ? __pfx_validate_chain+0x10/0x10 [ 214.282943][T10496] ? mark_lock+0x9a/0x350 [ 214.287282][T10496] ? __lock_acquire+0x1346/0x1fd0 [ 214.292409][T10496] ? mark_lock+0x9a/0x350 [ 214.296745][T10496] __lock_acquire+0x1346/0x1fd0 [ 214.301614][T10496] lock_acquire+0x1ed/0x550 [ 214.306125][T10496] ? ieee80211_open+0xe7/0x200 [ 214.310898][T10496] ? __pfx_lock_acquire+0x10/0x10 [ 214.315930][T10496] ? __pfx___might_resched+0x10/0x10 [ 214.321221][T10496] ? ib_device_get_by_netdev+0x595/0x5e0 [ 214.326889][T10496] ? ib_device_get_by_netdev+0x85/0x5e0 [ 214.332448][T10496] ? __pfx_ib_device_get_by_netdev+0x10/0x10 [ 214.338461][T10496] ? net_generic+0x1f/0x240 [ 214.342974][T10496] ? net_generic+0x1f0/0x240 [ 214.347576][T10496] __mutex_lock+0x136/0xd70 [ 214.352100][T10496] ? ieee80211_open+0xe7/0x200 [ 214.356870][T10496] ? rxe_notify+0xef/0x4c0 [ 214.361329][T10496] ? __pfx_vxlan_netdevice_event+0x10/0x10 [ 214.367144][T10496] ? __pfx_rxe_notify+0x10/0x10 [ 214.372007][T10496] ? is_hsr_master+0x19/0x70 [ 214.376619][T10496] ? ieee80211_open+0xe7/0x200 [ 214.381394][T10496] ? __pfx___mutex_lock+0x10/0x10 [ 214.386435][T10496] ? ip6_route_dev_notify+0x99/0x600 [ 214.391736][T10496] ieee80211_open+0xe7/0x200 [ 214.396335][T10496] __dev_open+0x2d3/0x450 [ 214.400674][T10496] ? __pfx___dev_open+0x10/0x10 [ 214.405533][T10496] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 214.411008][T10496] dev_open+0xae/0x1b0 [ 214.415084][T10496] ? __pfx_dev_open+0x10/0x10 [ 214.419767][T10496] ? rcu_is_watching+0x15/0xb0 [ 214.424535][T10496] ? team_add_slave+0x686/0x2750 [ 214.429506][T10496] ? team_add_slave+0x8a0/0x2750 [ 214.434544][T10496] team_add_slave+0x9b3/0x2750 [ 214.439329][T10496] ? __pfx___bond_release_one+0x10/0x10 [ 214.444890][T10496] ? __dev_change_flags+0x515/0x6f0 [ 214.450097][T10496] ? __pfx_team_add_slave+0x10/0x10 [ 214.455312][T10496] ? kernel_text_address+0xa7/0xe0 [ 214.460430][T10496] ? nla_strscpy+0x100/0x180 [ 214.465027][T10496] ? mutex_is_locked+0x12/0x50 [ 214.469800][T10496] do_setlink+0xe70/0x41f0 [ 214.474228][T10496] ? stack_trace_save+0x118/0x1d0 [ 214.479367][T10496] ? __pfx_stack_trace_save+0x10/0x10 [ 214.484758][T10496] ? __pfx_do_setlink+0x10/0x10 [ 214.489624][T10496] ? __nla_validate_parse+0x26ce/0x3090 [ 214.495178][T10496] ? kmalloc_trace_noprof+0x19c/0x2c0 [ 214.500621][T10496] ? rtnl_newlink+0xf2/0x20a0 [ 214.505344][T10496] ? __pfx___nla_validate_parse+0x10/0x10 [ 214.511091][T10496] ? nla_strscpy+0x100/0x180 [ 214.515701][T10496] ? full_name_hash+0x93/0xe0 [ 214.520432][T10496] ? validate_linkmsg+0x71e/0x900 [ 214.525571][T10496] rtnl_newlink+0x180d/0x20a0 [ 214.530287][T10496] ? __pfx_rtnl_newlink+0x10/0x10 [ 214.535331][T10496] ? __pfx___mutex_trylock_common+0x10/0x10 [ 214.541352][T10496] ? __pfx_lock_release+0x10/0x10 [ 214.546402][T10496] ? __pfx_rtnl_newlink+0x10/0x10 [ 214.551439][T10496] rtnetlink_rcv_msg+0x89b/0x1180 [ 214.556498][T10496] ? rtnetlink_rcv_msg+0x208/0x1180 [ 214.561706][T10496] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 214.567175][T10496] ? __local_bh_enable_ip+0x168/0x200 [ 214.572576][T10496] ? lockdep_hardirqs_on+0x99/0x150 [ 214.577877][T10496] ? __local_bh_enable_ip+0x168/0x200 [ 214.583255][T10496] ? dev_hard_start_xmit+0x773/0x7e0 [ 214.588555][T10496] ? __dev_queue_xmit+0x2da/0x3e90 [ 214.593681][T10496] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 214.599411][T10496] ? __dev_queue_xmit+0x2da/0x3e90 [ 214.604536][T10496] ? __dev_queue_xmit+0x1763/0x3e90 [ 214.609830][T10496] ? kasan_save_track+0x51/0x80 [ 214.614779][T10496] ? do_syscall_64+0xf3/0x230 [ 214.619463][T10496] ? __dev_queue_xmit+0x2da/0x3e90 [ 214.624589][T10496] ? __pfx___dev_queue_xmit+0x10/0x10 [ 214.629998][T10496] ? ref_tracker_free+0x643/0x7e0 [ 214.635057][T10496] netlink_rcv_skb+0x1e3/0x430 [ 214.639845][T10496] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 214.645351][T10496] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 214.650668][T10496] ? netlink_deliver_tap+0x2e/0x1b0 [ 214.655881][T10496] netlink_unicast+0x7f0/0x990 [ 214.660690][T10496] ? __pfx_netlink_unicast+0x10/0x10 [ 214.665988][T10496] ? __virt_addr_valid+0x183/0x520 [ 214.671124][T10496] ? __check_object_size+0x49c/0x900 [ 214.676511][T10496] ? bpf_lsm_netlink_send+0x9/0x10 [ 214.681645][T10496] netlink_sendmsg+0x8e4/0xcb0 [ 214.686550][T10496] ? __pfx_netlink_sendmsg+0x10/0x10 [ 214.691853][T10496] ? __import_iovec+0x536/0x820 [ 214.696708][T10496] ? aa_sock_msg_perm+0x91/0x160 [ 214.701664][T10496] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 214.706976][T10496] ? security_socket_sendmsg+0x87/0xb0 [ 214.712451][T10496] ? __pfx_netlink_sendmsg+0x10/0x10 [ 214.717854][T10496] __sock_sendmsg+0x221/0x270 [ 214.722570][T10496] ____sys_sendmsg+0x525/0x7d0 [ 214.727362][T10496] ? __pfx_____sys_sendmsg+0x10/0x10 [ 214.732669][T10496] __sys_sendmsg+0x2b0/0x3a0 [ 214.737276][T10496] ? __pfx___sys_sendmsg+0x10/0x10 [ 214.742512][T10496] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 214.748935][T10496] ? do_syscall_64+0x100/0x230 [ 214.753711][T10496] ? do_syscall_64+0xb6/0x230 [ 214.758390][T10496] do_syscall_64+0xf3/0x230 [ 214.762901][T10496] ? clear_bhb_loop+0x35/0x90 [ 214.767679][T10496] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 214.773602][T10496] RIP: 0033:0x7fae4b175bd9 [ 214.778028][T10496] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 214.797644][T10496] RSP: 002b:00007fae4bfa4048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 214.806064][T10496] RAX: ffffffffffffffda RBX: 00007fae4b303f60 RCX: 00007fae4b175bd9 [ 214.814042][T10496] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000025 [ 214.822013][T10496] RBP: 00007fae4b1e4e60 R08: 0000000000000000 R09: 0000000000000000 [ 214.829988][T10496] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 214.837959][T10496] R13: 000000000000000b R14: 00007fae4b303f60 R15: 00007ffe65619dd8 [ 214.845942][T10496] [ 214.850625][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 214.868737][T10503] netlink: 'syz.0.1815': attribute type 29 has an invalid length. [ 214.898017][T10496] team0: Port device wlan1 added [ 214.911298][T10503] netlink: 'syz.0.1815': attribute type 29 has an invalid length.