last executing test programs: 2.267659572s ago: executing program 0 (id=4396): r0 = socket(0x15, 0x5, 0xd) getsockopt(r0, 0x200000000114, 0x8, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002) (async) getsockopt(r0, 0x200000000114, 0x8, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002) 2.223707595s ago: executing program 0 (id=4397): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'macvtap0\x00', @link_local}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000006c000000160a01020000000000000000010000000900010073797a30000000000900020073797a3000000000400003802c00038004000100766c616e31000000000000000000000014000100776c616e3100000000000000000000000800014000000000080002"], 0xfc}}, 0x0) write$tun(r0, &(0x7f0000000200)={@val, @void, @eth={@multicast, @multicast, @val={@val={0x88a8, 0x5, 0x1, 0x4}, {0x8100, 0x6, 0x0, 0x6}}, {@ipv4={0x800, @generic={{0x5, 0x4, 0x1, 0x6, 0x14, 0xe4, 0x0, 0x8, 0x11, 0x0, @dev={0xac, 0x14, 0x14, 0x29}, @loopback}}}}}}, 0x2e) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'team_slave_1\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@bridge_dellink={0x20, 0x11, 0x5, 0x0, 0x0, {0x7, 0x0, 0x0, r5, 0x0, 0x10022}}, 0x20}}, 0x0) setsockopt$CAN_RAW_RECV_OWN_MSGS(0xffffffffffffffff, 0x65, 0x4, &(0x7f0000000040), 0x4) 2.08471631s ago: executing program 0 (id=4400): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) socketpair(0x1, 0x5, 0x6, &(0x7f0000000080)) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'geneve1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="3c00000010000100000100"/20, @ANYRES32=r1, @ANYBLOB="00000000000000001c0012800b00010067656e65766500000c00028008000f"], 0x3c}, 0x1, 0x0, 0x0, 0x20040000}, 0x20000000) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(r2, &(0x7f0000001980)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="090b0000000000000000050000000800030089"], 0x1c}}, 0x0) r4 = socket(0x10, 0x3, 0x0) r5 = socket$inet6(0xa, 0x3, 0x1) setsockopt$inet6_int(r5, 0x29, 0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b80)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00'}, 0x94) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010102}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0xfe, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x68, 0x0, 0x0, 0x1, 0x2, @loopback, @loopback}}}}}}, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0x4000, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) (async) sendmmsg(r4, &(0x7f0000000000), 0x4000000000001f2, 0x0) 1.706869411s ago: executing program 0 (id=4405): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r0, 0x0, 0x25, &(0x7f0000000340)="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"/483, 0x11f) sendto$inet(r0, 0x0, 0x0, 0x2406c014, &(0x7f0000000040)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x26}}, 0x10) getsockopt$IPT_SO_GET_REVISION_MATCH(r0, 0x0, 0x42, &(0x7f00000000c0)={'NETMAP\x00'}, &(0x7f0000000100)=0x1e) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) socket$nl_netfilter(0x10, 0x3, 0xc) sendmmsg$inet6(r1, &(0x7f0000000d00)=[{{&(0x7f0000000040)={0xa, 0x0, 0x0, @private1={0xfc, 0x1, '\x00', 0x11}, 0xfffffffc}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000300)="bc039355", 0x4}], 0x1}}], 0x1, 0x4) shutdown(r1, 0x1) setsockopt(r1, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)=ANY=[@ANYBLOB="ac1414157f000001c2fe010008000008000000ac1414aa0a010101ac1414aa0a010100ac14142000001000e0000002ac"], 0x30) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0xa0202, 0x0) 1.705168902s ago: executing program 2 (id=4407): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="33030000000000000000150000000c0001800800030004"], 0x20}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x4c, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5}]}, 0x4c}}, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x1}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r3, 0x86, &(0x7f0000002600)}, 0x10) 1.51876067s ago: executing program 2 (id=4411): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) listen(r1, 0x0) ioctl$SIOCX25SDTEFACILITIES(r1, 0x89eb, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, "bb67a153cd0e3e4a1aac449e5ad88b56923d9dfe", "b1610538917aa875e9b6000000007aa56a33d100"}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x6, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000001818200000", @ANYRES32=r0, @ANYBLOB="0000000000000000c30000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x4, 0xd2, &(0x7f00000002c0)=""/210}, 0x90) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.time\x00', 0x26e1, 0x0) close(r2) connect$unix(r2, &(0x7f0000000280)=@file={0x0, './file0\x00'}, 0x6e) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000100f00000000002a000000180001801400020073797a5f74756e"], 0x2c}, 0x1, 0x0, 0x0, 0x40040}, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(r2, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="0c020000", @ANYRES16=r4, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="040003009000028014000180080001000300000008000100020000003c00018008000100060000000800010000000000080001000600000008000100030000000800010001000000080001000800000008000100080000003c0001800800010007000000080001000d00000008000100090000000800010000000000080001000400000008000100040000000800010004000000"], 0x20c}, 0x1, 0x0, 0x0, 0x440008c1}, 0x5) 1.370763166s ago: executing program 2 (id=4414): r0 = socket$xdp(0x2c, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000000c0)={'syztnl1\x00', &(0x7f0000000000)={'sit0\x00', 0x0, 0x20, 0x7800, 0x4, 0xea, {{0xf, 0x4, 0x2, 0x3e, 0x3c, 0x65, 0x0, 0x9, 0x29, 0x0, @multicast1, @multicast1, {[@ra={0x94, 0x4, 0x1}, @timestamp_prespec={0x44, 0x24, 0x89, 0x3, 0x3, [{@broadcast, 0x5}, {@broadcast, 0x8}, {@rand_addr=0x64010100, 0x7}, {@rand_addr=0x64010101, 0x24}]}]}}}}}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@ipv4_delroute={0x24, 0x18, 0x901, 0x0, 0x0, {0x2, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x20}, [@RTA_DST={0x8, 0x1, @dev}]}, 0x24}}, 0x0) bind$xdp(r0, &(0x7f0000000140)={0x2c, 0x0, r1, 0x12}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) recvfrom(r3, &(0x7f00000004c0)=""/91, 0x5b, 0x10023, 0x0, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_FRAME(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002000)={0x28, r6, 0x421, 0x4, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x80}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) r7 = syz_init_net_socket$llc(0x1a, 0x3, 0x0) sendto(r7, &(0x7f00000002c0)="8449deb46965396e5ecd1ffd96d0f95a2143619db0bb03f9c1a56c636d96fa2c30b3033619b40887b3b334d83577d0c4adaa9b5c82ad80eb63b3d2f1349ed681331a51468f669d191c28b70823e40b80a0136ff5709af143", 0x58, 0x4, &(0x7f0000000340)=@ieee802154={0x24, @none={0x0, 0x3}}, 0x80) sendmsg$IPCTNL_MSG_CT_DELETE(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="288000000201cad6028e00000000000000f347000800034000002002060012400000000004000f8054a61e2cc60cdb8ca3b6a8a1aaa6cefa937d395a2a2eb6b8db6c5cd67323429757b6"], 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000001c0)={'wlan1\x00'}) 1.369578007s ago: executing program 1 (id=4415): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000180)={0xffffff}, 0x10) write(r2, &(0x7f0000000000)="240000001a005f0214f9f407000904ff80000000fe280000000000000800040001000000", 0x24) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_MPATH(r0, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0xa0, r1, 0x8, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x3, 0x7d}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0xa0}, 0x1, 0x0, 0x0, 0x8000}, 0x20008040) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x7, &(0x7f0000000140)=@framed={{0x18, 0x7}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @alu={0x6}, @exit={0x95, 0x0, 0x7b00}, @call={0x85, 0x0, 0x0, 0x13}]}, &(0x7f0000000040)='GPL\x00', 0x4}, 0x94) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000001680)=ANY=[@ANYBLOB="580100001000030400"/20, @ANYRES32=0x0, @ANYBLOB="15020000000000003001128009000100766c616e000000002001028006000100000000001c0004800c00010032d10000ffff00000c000100ae0200009e000000700004800c00010009000000010000e29b5d2a0008000000010100000c000100f8ffffff080000000c00010006000000040000000c00010007000000010000800c00010005000000060000000c00010001000000000000000c000100910a00000d0000000c0001000e00000032000000880003800c002100060000000c0000000c00010003000000400000000c00010004000000ffffffff0c00010002000000110000000c00010001000000020000000c0001000b000000270000000c000100ffff00005f0200000c000100ffffffff030000000c00010001000000030000000c00010000000000018000000c000100090000000900000008000500", @ANYRES8=r4], 0x158}, 0x1, 0xba01}, 0x44) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f00000007c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000780)={&(0x7f0000000600)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="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"], 0x160}, 0x1, 0x0, 0x0, 0x810}, 0x20000001) r5 = socket$can_bcm(0x1d, 0x2, 0x2) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f00000003c0)=@bridge_getlink={0x2c, 0x12, 0x101, 0x0, 0xffffffe0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x4000}, [@IFLA_BROADCAST={0xa, 0x2, @random="643a87b6cdb3"}]}, 0x2c}}, 0xc090) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000440), r0) sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f0000000580)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000540)={&(0x7f0000000480)={0xa8, r7, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x14, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}]}, @TIPC_NLA_NET={0x28, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x12}]}, @TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}]}, @TIPC_NLA_NET={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x262}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x24}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x44000}, 0x800) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x7, 0x1, 0x801, 0x0, 0x0, {0x5, 0x0, 0x7}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000800}, 0x80) socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$alg(0x26, 0x5, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYRES32=r8, @ANYRESDEC=r3, @ANYRESOCT=r5], 0x34}, 0x1, 0x0, 0x0, 0xc800}, 0xc080) 1.328804338s ago: executing program 1 (id=4417): bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) (async) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000300), 0x4) (async) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000300), 0x4) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000340), 0x4) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x3, '\x00', 0x0, 0x0, 0x0, 0x0, 0x1}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000280), &(0x7f00000000c0)='%+9llu \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r0}, 0x4) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x10, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000ff0500000000000000000000b7080000000000007b8af8ff00000000b7080000ff0100007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="b34715ecd04550d3abc89b6f7bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.241316566s ago: executing program 1 (id=4419): ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000000)={'tunl0\x00', 0x0, 0x7800, 0x0, 0xfffffff9, 0xa, {{0x10, 0x4, 0x1, 0xb, 0x40, 0x64, 0x0, 0xfd, 0x2f, 0x0, @loopback, @local, {[@timestamp_addr={0x44, 0x2c, 0x79, 0x1, 0x7, [{@local, 0xf}, {@remote, 0x7}, {@private=0xa010102, 0x4}, {@empty, 0x3}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x2}]}]}}}}}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x275a, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r2, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r2, 0xfff) r3 = accept4(r2, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_STATUS(r3, 0x84, 0xe, &(0x7f0000000300)={0x0, 0x80000000, 0x8000, 0x7f, 0xc6d, 0x6, 0x0, 0xfffffffc, {0x0, @in6={{0xa, 0x4e20, 0x7, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}}, 0x25, 0x1, 0x7, 0x5, 0xd}}, &(0x7f00000000c0)=0xb0) writev(r1, &(0x7f0000000400)=[{&(0x7f00000002c0)="a609a89c9edd34187123b5adceb3968557f4e107445a53c0815c9636d00f896d1e8cd8de77a79f1e3e2c53ddf1bb9f8ac5cb5257ff4e8b960026bc4244c4b09179a97dffdf02563e23546d3e78f944e7e2fee2a00b6313048fe354223318badb21d8c086669c5f7772f4a6d90d0997babdf79f7d557e055b3e6f2e4f41ec06a39a57b9ccc00bbca22395e41f9e9652af665f0e1603fb85d4799d54d44c706ff8df9bb805b182a1260b5936ae44f649b5e2fdca240984dcd0033ec28aeaaa686608c5c50538eea153", 0xc8}, {&(0x7f00000004c0)="7ee25c099579d92f8da721f68a8100b6adf04e0cd543f7d26019d57e6a3ecf7ef34486da35c482845d517dc801cca9e4f248b15413a7e252b0", 0x39}], 0x2) getsockopt$inet_sctp6_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000001080)={0x0, 0x0, 0x2, 0x0, 0x317, 0x7, 0x1ff, 0x3, {0x0, @in6={{0xa, 0x4e22, 0xf269, @private1={0xfc, 0x1, '\x00', 0x1}, 0x9}}, 0x2, 0x10, 0x6, 0xe, 0x5}}, &(0x7f0000001140)=0xb0) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r1, 0x84, 0x5, &(0x7f0000001180)={r4, @in6={{0xa, 0x4e21, 0xff, @mcast2, 0x4}}}, 0x84) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r1, &(0x7f0000001300)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000012c0)={&(0x7f0000001280)={0x18, 0x1411, 0xb28, 0x70bd2d, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_MRN={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x40010}, 0x2) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x50) socket$netlink(0x10, 0x3, 0x4) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x8001}, 0x8) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0xa, &(0x7f0000000080)=0x26, 0xffffffffffffff34) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$bt_hci(r6, 0x84, 0x7f, &(0x7f0000000080)=""/4057, &(0x7f0000000000)=0xfd9) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x18, 0x6, &(0x7f00000000c0)=ANY=[@ANYRES64=0x0, @ANYRES16=r0, @ANYRESHEX=r0, @ANYBLOB="e8038c42a49463bf570dc07b61df6e4f53e4163e6c02bd3e7ed1b713599a07038f273ba186f9ebf57e8a56960c0e4e03c410cbabc692aaf65fb1544e150e7ae264c34c2cf2ee03443ff9471c68c1ed387905c0e31633d7b9dcbda7dbc2bdd19ae51c366336630d3076086453", @ANYRES64=r0, @ANYRESOCT=r0], &(0x7f0000000180)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x8, '\x00', r0}, 0x94) socket$inet6_tcp(0xa, 0x1, 0x0) 1.212478451s ago: executing program 2 (id=4420): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000002304e800000000000000ea850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) (async) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000002304e800000000000000ea850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='netlink_extack\x00', r0}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='netlink_extack\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) (async) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x24}}, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0xfe3b) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@delchain={0x24, 0x25, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0x0, 0xfff1}}}, 0x24}}, 0x0) r4 = socket$tipc(0x1e, 0x2, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r5, &(0x7f00000016c0)={0x10, 0x0, 0x25dfdbfb, 0x40000044}, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000078000000030a01030000000000000000050000000900010073797a300000000008000540000000001c0008800c00024000000000000000000c00014000000000000000000900030073797a3200000000280004800800024000000000140003007465616d5f736c6176655f3000000000080001400000000114000000020a090100000000000000000000000014000000110001"], 0xd4}}, 0x4000010) (async) sendmsg$NFT_BATCH(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000078000000030a01030000000000000000050000000900010073797a300000000008000540000000001c0008800c00024000000000000000000c00014000000000000000000900030073797a3200000000280004800800024000000000140003007465616d5f736c6176655f3000000000080001400000000114000000020a090100000000000000000000000014000000110001"], 0xd4}}, 0x4000010) bind$tipc(r4, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r8, &(0x7f0000000500)='g', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) shutdown(r8, 0x1) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r8, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x4e21, @empty}}, 0x1ff, 0xa, 0xfff, 0x4fb4, 0x40, 0xb6b, 0x40}, &(0x7f00000000c0)=0x9c) (async) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r8, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x4e21, @empty}}, 0x1ff, 0xa, 0xfff, 0x4fb4, 0x40, 0xb6b, 0x40}, &(0x7f00000000c0)=0x9c) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000180)={0x1042}, 0x10) 1.022682712s ago: executing program 2 (id=4421): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0e00000004000000080000000b"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='contention_end\x00', r1}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1802"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r2, 0x4010744d, &(0x7f0000000180)) r4 = socket$key(0xf, 0x3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x0, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000020c000000b400000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000760100"/104], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8a00fe00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ff8effb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70500000800000085000000c5"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r8 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r7, &(0x7f00000003c0)=ANY=[@ANYBLOB="000008000100000000003d0000004600004000000000008490783fffffffac1414aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="b4000000907800040aa1f45d229a2d1efecc940300050200000000000000000002d58838068b91000000"], 0x4e) bpf$MAP_CREATE(0x0, 0x0, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="2c0000008050382be72290f6b5c17f61338a2ba6406c9c7c2fd12e439396fe53546b14351377c682205df6c35c127f922062e4e788b9531967b5e27afb9f2710004e3784c2e3c6260f26b5594d33de2b8845", @ANYRES16=r6, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r10, @ANYBLOB="08009f00d74e06d90800260085160000"], 0x2c}}, 0x0) r11 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r11, &(0x7f0000000140)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7ff}, 0xe) setsockopt$bt_l2cap_L2CAP_OPTIONS(r11, 0x6, 0x1, 0x0, 0x0) sendmsg$key(r4, &(0x7f0000000040)={0xa, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300090b000000000000000000000003000600000000000200000000000000000000000000000002000100000000000000fb0200000000030005000000000002000000ac1414aa0000000000000000010008000029"], 0x58}, 0x1, 0x7}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xc, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x73}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) 786.230163ms ago: executing program 0 (id=4425): r0 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r0, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10) connect$llc(r0, &(0x7f0000000240)={0x1a, 0x302, 0x0, 0x6, 0x0, 0x0, @broadcast}, 0x10) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000", @ANYRES32=r1, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRESOCT=r0], 0x1c}}, 0x0) write$nci(r1, &(0x7f0000001800)=ANY=[@ANYBLOB="710502180102820681055a05997713b9affa06070203267a53"], 0x19) accept4$llc(r0, 0x0, 0x0, 0x0) 778.801112ms ago: executing program 0 (id=4427): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000007c0)={'rose0\x00', 0x112}) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000040)={0x2, &(0x7f0000000080)=[{0x30, 0xcf, 0x5, 0xfffff000}, {0x6}]}) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r2 = socket(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9feb01001800000000000000100000001000000007000000060000000000000100000200000000000000ed1002006f5d5f003000"], 0x0, 0x2f, 0x0, 0x1, 0xd6f}, 0x28) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)=@newqdisc={0x140, 0x24, 0xd0f, 0x70bd2b, 0x0, {0x60, 0x0, 0x0, r4, {}, {0xffff, 0xffef}, {0xa, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x110, 0x2, [@TCA_GRED_STAB={0x104, 0x2, "52087def75c736f85cc7d27338360e8cb966058f66908611a2da3e15d87ea4bbea3d646bddcbf88d74a8f9e560e73cc92e50a1e1eb696bc28149a6f97bca767db6d5a2e4a0ce4e1f337f52af8d065ab3903bf929f30662e91d6466b050411964902e6bfd3d89271fd28b48677d5cf2caefd8a40abbe65daabf39f028156294855a66954d2349461e5b3fdf380433eb7182203d89bd1637c99109d611ac6ddd1f8bd70df15be1196d73cf82360c81beb73bd89d4e22511b72fa9373f5ff75156b83de4ba43f4325cb81ad4e1ebabd12279a1c2cb16d9b64ac46472168b729780d5697663cde109a2ea16079fdfb016066bd7f663500"}, @TCA_GRED_MAX_P={0x8, 0x4, 0xbc5}]}}]}, 0x140}}, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000180)={'ip_vti0\x00', &(0x7f0000000300)={'sit0\x00', r4, 0x80, 0x8, 0x5, 0x9, {{0x29, 0x4, 0x3, 0x6, 0xa4, 0x64, 0x0, 0xf3, 0x4, 0x0, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@rr={0x7, 0xb, 0xbb, [@private=0xa010102, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @cipso={0x86, 0x63, 0x2, [{0x6, 0xf, "2c9b338e4418bb5dc8094c829d"}, {0x1, 0xb, "dcb9b1df91470eb489"}, {0x6, 0x2}, {0x0, 0xa, "e7a2cdb9c41898dd"}, {0x2, 0x4, "99d5"}, {0x0, 0x5, "3ff74d"}, {0x4, 0x10, "9adbe0755ecc2664a0693b4b65e9"}, {0x7, 0xb, "70852d7a4a0ce8bafa"}, {0x1, 0xe, "179497642ff4cf05a9818a43"}, {0x0, 0x5, "53d013"}]}, @timestamp_prespec={0x44, 0xc, 0x9a, 0x3, 0xf, [{@dev={0xac, 0x14, 0x14, 0x3f}, 0x2}]}, @cipso={0x86, 0x13, 0xffffffffffffffff, [{0x5, 0x6, "f6d6c5ca"}, {0x0, 0x7, "74f699436e"}]}, @noop]}}}}}) sendmsg$nl_route(r2, &(0x7f0000000480)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000440)={&(0x7f00000001c0)=@RTM_DELMDB={0x58, 0x55, 0x100, 0x70bd26, 0x25dfdbfb, {0x7, r4}, [@MDBA_SET_ENTRY={0x20, 0x1, {r6, 0x1, 0x2, 0x2, {@in6_addr=@empty, 0x800}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r4, 0x1, 0x1, 0x2, {@ip4=@broadcast, 0x8edd}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000801}, 0x4) ioctl$int_in(r5, 0x5452, &(0x7f0000000000)=0xf4e) r7 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r8) ioctl$IOCTL_GET_NCIDEV_IDX(r7, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r9, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r10], 0x1c}}, 0x0) write$nci(r7, &(0x7f00000003c0)=ANY=[@ANYBLOB="7105020682020181070602abab027f0b08026af8"], 0x14) writev(r5, &(0x7f0000019880)=[{&(0x7f0000000400)="fb", 0xffffff5c}, {&(0x7f00000197c0)="1902eb02d5e5f29e59e1a7caec33eb76d2430da474d87e367f6598d026438b65eda8341073b6752abdcee080c8e1e876b25227c37d7dd79886ce33f13e857c8eda1cecf6ac36c03dbf54e3cb5136da5a33fee76fb3113f8b6700e9e5fc006b8eed665fed48738d59395ad07438c3610ae3976aac75caf2facafa21c25be3c2", 0x7f}], 0x2) sendto$inet6(r0, &(0x7f0000000040)='l', 0x1, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 617.295275ms ago: executing program 3 (id=4429): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_NL_NET_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) recvmmsg(r0, &(0x7f0000000c40)=[{{&(0x7f0000000300)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000080)=""/48, 0x30}], 0x1}, 0x7a04}, {{&(0x7f0000000380)=@isdn, 0x80, &(0x7f0000000280)=[{&(0x7f0000000640)=""/211, 0xd3}, {&(0x7f00000001c0)=""/41, 0x29}], 0x2, &(0x7f0000000440)=""/8, 0x8}, 0xa}, {{&(0x7f0000000480)=@xdp, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000740)=""/153, 0x99}, {&(0x7f0000000580)=""/37, 0x25}, {&(0x7f0000000800)=""/147, 0x93}, {&(0x7f00000008c0)=""/162, 0xa2}], 0x4, &(0x7f0000000980)=""/235, 0xeb}, 0x3}, {{&(0x7f0000000a80)=@vsock={0x28, 0x0, 0x0, @local}, 0x80, &(0x7f0000000bc0)=[{&(0x7f0000000b00)=""/45, 0x2d}, {&(0x7f0000000b40)=""/125, 0x7d}], 0x2, &(0x7f0000000c00)=""/27, 0x1b}, 0xf321}], 0x4, 0x10141, &(0x7f0000000d40)={0x0, 0x3938700}) sendmsg$NFT_MSG_GETOBJ(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="34000000150a03000000000000000000020000000900020073797a310000000008000340000000010900010073797a30"], 0x34}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) r4 = socket$packet(0x11, 0x3, 0x300) r5 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r5, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) sendmmsg(r5, &(0x7f0000001500)=[{{&(0x7f00000001c0)=@nl=@unspec, 0x80, 0x0}}], 0x1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x8923, &(0x7f00000000c0)={'dummy0\x00', @random="0130210100ff"}) getsockopt$packet_int(r4, 0x107, 0xb, 0x0, &(0x7f0000000040)) getsockname$packet(r1, &(0x7f0000000d80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000dc0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@newlink={0x4c, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xffffff81}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r3}]}}}, @IFLA_TXQLEN={0x8}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x8}]}, 0x4c}}, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) socket(0x10, 0x803, 0x0) (async) sendmsg$TIPC_NL_NET_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) (async) recvmmsg(r0, &(0x7f0000000c40)=[{{&(0x7f0000000300)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000080)=""/48, 0x30}], 0x1}, 0x7a04}, {{&(0x7f0000000380)=@isdn, 0x80, &(0x7f0000000280)=[{&(0x7f0000000640)=""/211, 0xd3}, {&(0x7f00000001c0)=""/41, 0x29}], 0x2, &(0x7f0000000440)=""/8, 0x8}, 0xa}, {{&(0x7f0000000480)=@xdp, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000740)=""/153, 0x99}, {&(0x7f0000000580)=""/37, 0x25}, {&(0x7f0000000800)=""/147, 0x93}, {&(0x7f00000008c0)=""/162, 0xa2}], 0x4, &(0x7f0000000980)=""/235, 0xeb}, 0x3}, {{&(0x7f0000000a80)=@vsock={0x28, 0x0, 0x0, @local}, 0x80, &(0x7f0000000bc0)=[{&(0x7f0000000b00)=""/45, 0x2d}, {&(0x7f0000000b40)=""/125, 0x7d}], 0x2, &(0x7f0000000c00)=""/27, 0x1b}, 0xf321}], 0x4, 0x10141, &(0x7f0000000d40)={0x0, 0x3938700}) (async) sendmsg$NFT_MSG_GETOBJ(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="34000000150a03000000000000000000020000000900020073797a310000000008000340000000010900010073797a30"], 0x34}}, 0x0) (async) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) (async) socket$packet(0x11, 0x3, 0x300) (async) socket$inet6(0xa, 0x3, 0x5) (async) setsockopt$inet6_int(r5, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) (async) sendmmsg(r5, &(0x7f0000001500)=[{{&(0x7f00000001c0)=@nl=@unspec, 0x80, 0x0}}], 0x1, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) (async) ioctl$SIOCSIFHWADDR(r6, 0x8923, &(0x7f00000000c0)={'dummy0\x00', @random="0130210100ff"}) (async) getsockopt$packet_int(r4, 0x107, 0xb, 0x0, &(0x7f0000000040)) (async) getsockname$packet(r1, &(0x7f0000000d80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000dc0)=0x14) (async) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@newlink={0x4c, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xffffff81}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r3}]}}}, @IFLA_TXQLEN={0x8}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x8}]}, 0x4c}}, 0x0) (async) 585.395708ms ago: executing program 3 (id=4430): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY(r1, 0x0, 0x1, &(0x7f0000000080), 0x4) sendmsg$802154_dgram(r1, &(0x7f0000000040)={&(0x7f0000000500)={0x24, @long}, 0x14, &(0x7f0000001880)={0x0}}, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_int(r2, 0x6, 0x0, 0x0, &(0x7f0000000080)) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x30, 0xa, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x1}, [@IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_ADT={0x4}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x30}}, 0x50) 495.061297ms ago: executing program 3 (id=4432): r0 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000100), 0x8) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f00000001c0)={"b815566c1c4944f577f6583a175e440f", 0x0, 0x0, {0xffffffff, 0x3}, {0x5, 0x6}, 0x7, [0x4, 0x200, 0x8, 0x4, 0x9, 0x100000001, 0x7, 0x8, 0x7, 0x2, 0x9, 0x4, 0x3, 0x2, 0xec35, 0x3]}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r0, 0x50009417, &(0x7f00000009c0)={{r0}, r1, 0x0, @inherit={0x78, &(0x7f00000002c0)={0x1, 0x6, 0x3, 0x0, {0x0, 0x6, 0x4, 0x4, 0xfffffffffffffffd}, [0x6, 0x0, 0x80, 0x4, 0x3, 0x2]}}, @name="8777a8d0aee4d81e7edcbe0422d71fe366c418a6d671366c49e5c53dcbad8dcefa8d4cbb61a528fd085693ddb060fa49e2ea91c363e6ed53129371d0939637a5c140002b56c49a27d4c1d55a280b57659faa94510990e94eb985d1e7ddcfc1adb4a64276ac59ca9f73c155ead50a114441b2e9a1787a5570f7085134579abc6d93fb48fcbc3c8b4fb922d3005a3c5252f7faefd7c9315183f93df74d63fa4e2c0ad89cc6d5d1bcbd5130450568adf2d020e3f32447bafd2d303fae0076b48f39705a96f26f8b82e0742cde5b7e6a301576e3869f75b1fe30aea9e4e8a55ac2fca6c5f1b1204b6202d9ad952d2af8f8eb0cad071046337f5c83fec6e039f4beed1556353daa2a4d2b2c68fc31f6c18fdd4e6d9c22d4331600d627ed4067b0544810bcafa13a3fd85ae990bb548020e9a70f8f36293a1392653a995034a167634d12c5c4eda977eaf8b0c5b2f3d64f920882270e6ee14a33c52434376b46e202c10dba673d0d7b8777a9176c5b259de66b947caf9475ccfa9737bff0723f6de0f7953d40c66db07b3e767cc618940f985db5380f9ba90acb55a273be3383e202f30a0d515cf3137647faef963264c13f5db0aa33b36b10651d1da0d946f19b3d3fc637575bb57a16c882378d26c9400632713a1568cb6cc76f2e25f06fb11d69bb3ee488b4c28031abee13fbe3cb349f7e17782bc3058dfa1e0b3758089e7fd09ceb5f592708e88b3fe54f5347b95d53e34ab430ae5baa4c1428cc22c2b8eca93b3de3af98f757c20700367730867b17ba892a92fdf564535382e9c90e15bc2f1325550aac2e6f2cb13395dee1081db316bd19a7b8f7b99fa738f16615d9b7d119802af7bd52b968b2a2e338594366c5688625613eaf44e7d05c6f543808b26be1f8e13811399eca02edcb9ca0d339b7c3e12600a3ad5a048ed2e74c5aaecbb55a9db66366604331a01678cee63eda48a29e9f5f5aecdd6130ccccd67302266ef303f221df0c35afd8df728bae5103e07ff1afd9cfd60beb0dd0d36be4c186ad992db936d1a457bb809101254bac046f61b62ebc51e514042ae9e6615ede1960aa56b43e0195c14a4c4e513cc1b6914ff080de83a1e20616bc7e9450cafb4897c33ee1a69f39de8ac1410627a02ce802201fc4822549f68770b0e51e1d8a4878bd807bdbb34958672d011816f3070ea83bc02c6650e0adccb0affa7617d5c60ac96cf25752e244e4cc1035225dd6689420861d4dcbf169ba3fda9023a00a97aed62535c69b7d879ed16117c3d558f2597b702e0a7225cc04059b3dff3d073687c988a613a91b9752b55384db23aa40d43881ac2444b0940956d44de315c9419c555c05dd6dd674540b473927fc10e9910370b38697ac06cce698cfe5cb1c32fa76bc317646805149618a97ebfff459e362d13d55e0db70ac5ef45035a92eaef77a6e078aaf655c5bff1a7f19c5201d7710558967aa11fadf67ed28972d5df3d01528d73a391cf8ce98f30bba1a0a017b08fe5349720c004eb9e63176d9be96a44005a77844a57aa17684abc8ea512ac69036ab3ee040447773645a21b573d7aa939b1a546f386cedb10003412f7529aa557d9ca0b2fc2f590c9832f7db4a80a4d20336b54423b370bb7551c0a91b22523700b833bc00d0db21ba2a25d99188067ed07adb39e1517d379b7a1f085bbb4c44e2305e0b63bb3f8ba6ba9ab4da7b5a5462786977fe1847ac390da7267b8eaa227bbe448cb1bd45b07a9b7130af7cca8ae4a8c4c0357609bab2356fb904d3f5dc9cbdd523a084e01b48d7f19acbaab3801834a3b6230c10c2d6c23774837650961acd61778dc68c27cbf1f31bec8f117a03766874dfc0d3beda78d7e9303e72c1c501a7104407069f6c5ff07ba0b79aa8c23525edcac881e0bb0c7c22dd2ef75a6fc1f95e58a9a58b5ce50aa604b1d41c4475add3a28b90c5c4a11cd746c2c82a711fbc36754f286b4550cd3c780cede836243cda9187f09a13c0d323c44ca0c396855bfe3baa2420a0946e4bf194dfd2b3db6b7d1567fedc39d11e2de739c4c7ab37cbbce7ae022d321191f4ce6684b9363982414f47874fc0c917701c6f9ce071b0445be1b858213c5cadb1be2a64cf584159c1144f8fa6c83e70ca2208f73ab9ef1ae98c3a7ca4f8b27377f08c9c7e82b067f1baf33934a023fa9bda9fe2342d3d79544a2d62e50fbad800b520ccad9bf73a37ebe1d2d460f3ed04047e92812e890d157baca76b8ec043f31b2bb52ef33c4827628d689036585ee5d5831a6ce61715005e76267530f0b5abd1d4a96562f9715ebab3a9bf0a75ab2bc37bc22aa5ab1fbece82f37ded5ccf79ca16d8f102ab58d82e44e71c77006bd83ef315eb3c7f9648dbe040d6cb899991ba698da56a0fca0079dd21a8cc687fbf75b724167ef1bcacc18cdb63365a86910592cc5fe100a60428d46002307340071d79bb0156d7ec7f70a8542081b7a561f0c0429f1626f5670f5173ce73fd06c9d3116265878cfe5a92ef7049d1ed1702522987c8b59528fc3b0a72171e17bacf333cd07faee1bbcaacfa7ee0ee3ad8d41734f445ad96b4776c92d99cf2b7e0538f5f43476be083ecf530924d6fd1239c80ce08772af34a438c84675aa1fe7a48c7110752ecc85fe8ac42a9b16728f22a8f880432a18acd390d6e39fd3867643921216bc333c370fe2547da74b1fe9197bbd5f6c5a00e20ff7fa141cef6c445ffb83cd79df3aabc9ddf35e3537b687b0c8fd99cd721616d60105cc0fbe348ab76c0b1c4fc66636d22aa1f687e8ed70f83714ad4698b2bc45f3752529f045231cc54cdbd3e7f9d361b535040a653feb0b8140b62f22592b17e06604267e055db69ae9084d8257225301233721362e148f75db3e41540f30a14c290cbaa1bf01aff3b16f033ff80510fab3e37a428b00c8935b8f607b831220b1234493eaa05aaf444b31565f5f1f29530c4b316f8a0689f7ef42f9c89c5a1973c84d75a8be09b46a57809c26645ddd67d0828600c14766ad4648f8a0253ba1adbe67649d561c4cdc971bd316f1ade1866705349b710681a59eecf07ba6efb5ce0f71b3b679f0296154e57244fae249bac270dcf8e3ab8612b6d6bcad93bd11f2b48c51aabda4d508fa94682ee3762ccd737d1f1ec98f37c4b691726f6d8c227d654df73f43903d2ff33747914aaea92e12ad03ffbd3ccfbe32cbfbfead87665603a6db7a6bfd6efac29f79e72bcdb8c5e47370ef07ae795d23b36efe7ef729f0d34dc3f7ce1a1bdaf82c96306fd9fcba09df30204a1811f910876d134a58479e40b40681769b82a02f1b94cdea5b093b46654cbf64f679bb586532c8cea5901e7a4932613ff693cb0e059b629871f3387adcea948a3e3ee6f2d40bf578e4218e1ef1f4777c6e3a9a7a5e33d6bbe1d66145ac76484ad36dc01beb66ac824924baa400c45009864f8799d353be73e5af18d73448b0c8b3b83651ec5811899f1b01f1381aecd0882807232bf579339247d61d4f92d439e04dcd994dce70cbc70703a1134095950d2159eb62d4aea67d6e76eb1c8907185d0bea8f5f9148835a9693422f8c60441d38538bacab36aa775559a448de82021cb66c848011800e01dece81f421a579cf0a74797389d5354121dbe76b26a168b65130884eb548ecb5cd61df23cf855366ed5ed4e47f56f6ac1d7ca24b29467c822cc3564e3dfdf9023b7f3f7cd3520d1b9152c3a5f799eb21a6c355ab8f5085cf7c7f094f59aa9339be1c45357e99963a21e055f61403fa99eee56189348f8845019619dac9c6f8eca2f9b5e98716a2fa17b901723ab5cbbbac20f5e5605e66937e2eca839bf0188d6967665cdcf6ca8d2e1fb6ee02bc7f5706fb848738dc3437257e401bcc2ab4e54ff64d81ece8f076bce4e96c64c02ead4d7e08d5aeb1ac16b2b046ebee8b9e5c4b7de8aec302f741be60cff1a48c2acd0559041f28701bda3fef3a385a3ef3bc6a09e605e39c36d715b100ecaef4f63acf523ba102fb34b193c115ebd2f75157ce8719de9a6a41a5e64467cfe00ff795e3e01ee3238cc22325102ad0e31cde5cf211237dc58533eb7cef52c03569cba1d82fe2b05bdaf07678c5162294768115128a0119934d7aa1aa64abaf7fb9748ff3c7fb7555c8b1b8334277b3195e5c42283fa9781abb1b0ae520a1bea8b421f217e96ef298fc1d1ca5702e344b096b5bda267a3856a054fa6e7c2465f634721bc5d43440e16734f96420f3c2e38ba0a0e515ed88feb54a7ed19fcc83f2881c8b5685a2b3da37bc6e36d8c04018f7094357f18edd35b837eb9e5c939aaa52613d6512a2215f8bc6bf78004d28032e2b45cef6912f0bf90843d1531b3fb19dd13b92875978ea2d7c8494befecf6d7acc0d3e60657c4697f8560b7f33ea9a7964bfceb993a2e5b2c74d8065a3f918635a9e39260fab5377a9fa76a0ccc6078d9433b6966a020fd791ea48016f6450436baa606a141455d5aa0afae238aff7c9b7b2f109e527cb0c03dbd222b350f86c7f41f1c2fbbb0ab92f9f170836f71a1ffa79ceda8ac2ce874d47ce3b7eefbc91b65d6147563244a617ae7f791615ce262b022f2fc1f988dc6fc17967cb8e00996e30280b09b2ea879166e9ba1717c6ee158f8646af2208870a4c04fb7a865aeb64bf850c6f29ca8d21d427384b0b05e4a2b5745dd6ef3b9c4bb61a68d03f9ab2dfcaa4cb7f7f281a18e4df3efe5fd482852231537dd9fb30303db2217ee76a66731131d0193661da9439797e1b639f8c28097b3746043de2bebb16426b126628d5a03da75866b5ecf485ae5057588533305fe74d45281b6f41d9e9b0e92704fb49fe4d9cac5dae36aeb79b58ee1e69467e2afcac0b270f9a873dcc00de1b975921863a1ae88f920ca1ea1039e29360e002532200b61f47ccdc44bf31e92a03f87cfc8af24850480262ba27210bb44988439e8d4407b21d452c8073859bba8c5f4b4d9c20495547037e0a3615174b47852951f823806f7b9c4fc4a9517d306623204dcf2fceb9ed2391ef7cb6aa133a7ced7ca8e40f0825e7a9d754457c860461407cdbfe862d9f8096ba324eced6640ccea5aed91c60d65d038d05c301d1db75236a482eec7c9f35bf11dd7ea5616f76f1d9a6d493e37e1e48db0239ce345aa8df800b0a148bcc75de5d07a9ed0564c7664ac2dfd8a7f27c9c7c95fb786a76a0790f56886c412123a3233cf4e0aac4d636ec859715867b1abb43669a284b892553ac9b522841bf07e092bcffeb68850c18e03fddbdce32595a325fc432faf6bb7e3b8931ac0986f1c752f58bf7f0b7a83c2392e4f44827e9ecbabb86955c07b522b3f891686d87b7401772ac35938444023c47815814614adf403ce9760fb7b6c71b24e3de8b189b3b56dce0489740609cff1849e28d412a6b502aeba666b4f0da4ec40f2653ae3d8619406a6b4abc3f736fac9de81f0a0f421021fdcccf6fc23cf6a0b88bf6e877c3fd372cdad8cff104b9a0e740f4f39971c40d4805005cc43686d6160e5e609ff260135d44d4190d5e53ede1e94028082be8c5e7d977b844920b16325ef0c20b516bbb844b5cecfbd2ba62c452678161515544abec4b0137f768cc9edd77611f4424c1820db7d7a13edee3d16656347db306d5180241916aac4697884463ab36ef0892b71cc83e371b6588ce59c768d8dba103eea30cfc019679c03f32928ec"}) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x1419, 0x1}, 0x10}}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x880, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNSETQUEUE(r5, 0x400454d9, &(0x7f0000000380)={'dummy0\x00', 0x400}) ioctl$TUNATTACHFILTER(r5, 0x401054d5, &(0x7f0000000040)={0x0, 0x0}) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x9, 0x11, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@exit, @jmp={0x5, 0x1, 0x8, 0xa, 0x0, 0x50, 0x8}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000400)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @cgroup_sock=0xc, 0xffffffffffffffff, 0x8, &(0x7f0000000440)={0x2, 0x3}, 0x8, 0x10, &(0x7f0000000480)={0x3, 0x8, 0x1c000000, 0x5}, 0x10, 0x0, 0xffffffffffffffff, 0x1, &(0x7f00000004c0)=[r3, r3, 0x1, r0, r3, r3, r2, r2], &(0x7f0000000500)=[{0x3, 0x5, 0xd, 0xc}], 0x10, 0x5}, 0x94) ioctl$TUNSETSTEERINGEBPF(r5, 0x800454e0, &(0x7f0000000600)=r6) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xb, 0x1c, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES8=r2, @ANYBLOB="0000000000000000b702000014000000b70300001b0000008500000083000000bf0900000000000055090100000000009500000000000000bf080000000000007b9af8ff00000000b5090500000000007baaf0ff00000000bda804000000000007080000f8ffffffbfa400000000000007000000f0ffffffb70200000800000018220000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7050000080000004600000076000000bf91000000000000b6080000000000008500000085000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0xb, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 465.075515ms ago: executing program 4 (id=4433): r0 = socket$unix(0x1, 0x2, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @multicast2}, 0x3, 0x3, 0xffffffff}}, 0x2e) sendmmsg(r1, &(0x7f000000b200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8044) bind$unix(r0, &(0x7f0000000100)=@abs={0x1}, 0x6e) bind$unix(r0, &(0x7f0000000840)=@file={0x1, './file0\x00'}, 0x6e) socket$unix(0x1, 0x2, 0x0) (async) socket$pppl2tp(0x18, 0x1, 0x1) (async) connect$pppl2tp(r1, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @multicast2}, 0x3, 0x3, 0xffffffff}}, 0x2e) (async) sendmmsg(r1, &(0x7f000000b200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8044) (async) bind$unix(r0, &(0x7f0000000100)=@abs={0x1}, 0x6e) (async) bind$unix(r0, &(0x7f0000000840)=@file={0x1, './file0\x00'}, 0x6e) (async) 430.831338ms ago: executing program 4 (id=4434): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1f, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="38410000ffffffff00000000000000009500000000800000"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) 374.842478ms ago: executing program 3 (id=4435): syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto]}}, 0x0, 0x26}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x8, &(0x7f0000000240), &(0x7f0000000280)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x3e, 0x0, 0x60}, 0x90) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000000b0601"], 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0xc00c0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180100002100000000000000000000108500000075000000a40000002300000095"], &(0x7f0000000000)='GPL\x00'}, 0x94) syz_genetlink_get_family_id$gtp(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$gtp(0x0, 0xffffffffffffffff) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c010000190001000000000000000000e0000001000000000000000000000000fe8000000000000000000000000000aa4e220000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000104000000000000feffffffffffffff030000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000008400050020010000000000000000000000000000000000002b00000000000000000000000000000000000000000500000000000002000700000000000000000000000000e00000020000000000000000000000004000000033"], 0x13c}, 0x1, 0x0, 0x0, 0x1}, 0x20040880) r5 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x8040) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001280)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r3}, 0x18) syz_genetlink_get_family_id$tipc(&(0x7f00000004c0), r2) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[@ANYBLOB="1800000024000103000000000000000001008c000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r6, &(0x7f0000000e40)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)=""/89, 0x59}, {&(0x7f0000003780)=""/4097, 0x1001}, {&(0x7f00000001c0)=""/177, 0xb1}], 0x3}, 0x4}], 0x1, 0x40010000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 373.802553ms ago: executing program 4 (id=4436): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000080), 0x4) getsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, 0x0, &(0x7f00000000c0)) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) sendmsg$NFC_CMD_START_POLL(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x24, r2, 0x1, 0x127, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x20}]}, 0x24}, 0x1, 0x0, 0x0, 0xc854}, 0x24000040) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x28, r3, 0x701, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x7c}, @void, @val={0xc}}}}, 0x28}, 0x1, 0x0, 0x0, 0x85}, 0x0) 336.037523ms ago: executing program 4 (id=4437): setsockopt$MRT_ADD_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd2, &(0x7f0000000040)={@dev={0xac, 0x14, 0x14, 0x18}, @local, 0x2, "4f6fb4d1af0f724e6118ecfbac0200843af297baebb0efa284da1403011a00", 0x0, 0x4, 0x81, 0x6}, 0x3c) (async) r0 = socket$kcm(0x10, 0x2, 0x10) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4, {0x3}}}}]}]}, 0x48}}, 0x0) (async) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0x17c, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1, @in, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@tmpl={0xc4, 0x5, [{{@in=@private, 0x0, 0x2b}, 0x0, @in=@empty}, {{@in=@broadcast, 0x0, 0x3c}, 0xa, @in=@local}, {{@in=@empty, 0x0, 0x33}}]}]}, 0x17c}}, 0x0) (async) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0) 326.180094ms ago: executing program 1 (id=4438): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x60880, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64-generic\x00'}, 0x58) r2 = accept$alg(r1, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000004e00)=[{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000040)="607be25f2e", 0x5}], 0x1}], 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newtfilter={0x48, 0x2c, 0xd27, 0x70bd25, 0x6, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8035}, @TCA_FLOWER_KEY_ARP_SHA={0xa, 0x3f, @local}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000}, 0x44010) 258.725336ms ago: executing program 3 (id=4439): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000980)=ANY=[@ANYBLOB="1400000042000b06"], 0x14}}, 0x0) recvmmsg(r0, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000d40)=""/4084, 0xff4}, {&(0x7f00000002c0)=""/136, 0x88}, {&(0x7f0000000380)=""/174, 0xae}], 0x3}, 0x8000}], 0x1, 0x12002, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000140), r2) sendmsg$NLBL_CALIPSO_C_REMOVE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x14, r3, 0x1, 0x70bd2c, 0x0, {0x3}}, 0x14}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r4, &(0x7f0000000240)={0x0, 0x1, &(0x7f0000000040)={&(0x7f0000000cc0)={0x24, 0x7, 0x6, 0x101, 0x0, 0x0, {0x1, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x4000044) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=@newsa={0x138, 0x10, 0x300, 0x0, 0x4, {{@in=@dev, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}, {@in6=@mcast2, 0x0, 0x32}, @in=@multicast1, {0x0, 0x0, 0xfffffffffffffffc}, {}, {}, 0x0, 0x0, 0xa}, [@algo_comp={0x48, 0x3, {{'lzs\x00'}}}]}, 0x138}}, 0x4000800) r6 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r6, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x4) recvmmsg(r6, &(0x7f0000001340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/48, 0x30}, 0x400000}], 0x1, 0x20010060, 0x0) r7 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000002e80)={'gre0\x00', &(0x7f0000002e40)=@ethtool_wolinfo={0x7, 0x1, 0x1ff, "729d3031f960"}}) r8 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r8, 0x891c, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0xa, 0x3032, 0xffffffffffffffff, 0x0) 256.896431ms ago: executing program 4 (id=4440): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="020300000a000000000000000000000003000600000000000200000000000000000000000000000002000100000000000000000600000000030005000000000002"], 0x50}, 0x1, 0x7}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)={0x2, 0x17, 0xd, 0x5, 0x1e, 0x0, 0x70bd2d, 0x25dfdbfc, [@sadb_spirange={0x2, 0x10, 0x4d2, 0x4d3}, @sadb_x_sec_ctx={0x19, 0x18, 0x7, 0x9, 0xb9, "ff440adf91841badca95d158d08bb16f4145bf260a9fa7c28f28b3bf0dc3883027057a3a2b40b567428486a4c01b44dedc7b7e968e28f6b3cdf56729284f5bd444daadaeea3a850b82e1283027fd50a844a56a6c619ffb886138263fc5831988fbde7faf1bc14c8550f1fbb370ed762bda0ad6d6ab4c4630a98bbd81835d0d696c0a8aa1532f495919ee8ecf2853a81559df6ee6ed52e6d58a875876546159eacb68bd4254aa79f7d8d6198375d169a784f42ddeec64df4799"}, @sadb_x_nat_t_type={0x1, 0x14, 0xa}]}, 0xf0}}, 0x24006811) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="380000000d14013128bd7000040000000800010000000000080003"], 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x0) setsockopt$sock_int(r2, 0x1, 0x1000000000000f, &(0x7f0000000180)=0x57bb, 0x3c) sendmsg$inet(r2, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x800) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x33, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6}]}, 0x10) write(r2, &(0x7f0000000040)="16a26645985743b2c2ca0c2007be5049e24ccd77eec31437808820956c981e571155a147f85d5c1c2eb00dae10", 0x2d) 141.258258ms ago: executing program 4 (id=4441): r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) recvfrom(r0, 0x0, 0x0, 0x40000100, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97004d88c19e9ace5ffb2e9fc603dd282100000002ff02000000000000000000000000000104004e200023"], 0x0) 118.420514ms ago: executing program 1 (id=4442): r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000000)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {}, [{0x34, 0x1, [@m_simple={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) (async) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000240)={&(0x7f0000000080), 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0xb4, r2, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x58, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x9}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x3}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1b9}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@remote}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x5}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x10000}, @IPVS_DEST_ATTR_INACT_CONNS={0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x48, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x5}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x10}}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x6}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xfffc}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x8000}, 0x40) (async) sendmsg$netlink(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005800)=ANY=[@ANYBLOB="280000002d000100000008000000000008000000", @ANYRES32=0x0, @ANYBLOB="040000800c0001800800000000000000"], 0x28}], 0x1}, 0x0) 30.631014ms ago: executing program 1 (id=4443): syz_genetlink_get_family_id$tipc2(&(0x7f0000000d00), 0xffffffffffffffff) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) (async) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETOFFLOAD(r1, 0x400454ce, 0x8) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r4) (async) r5 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r4) sendmsg$NLBL_CIPSOV4_C_ADD(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000001c0)={0x14, r5, 0x1}, 0x14}}, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) (async) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) listen(r6, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r6, 0x5411, &(0x7f00000000c0)) (async) ioctl$sock_inet_tcp_SIOCOUTQ(r6, 0x5411, &(0x7f00000000c0)) sendmsg$TIPC_NL_LINK_GET(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="000000008a94a18f8c69eced2b224e614f7104c113e3e4858c7d45f910da0b017508f2111878453d99c859a732d4e9b81f13bf7d86ee540da4b9fbd33a8e2370e8f6fac3b7bf2ed25b9b6828dd337786610e58600f10df1e2a81e297f279edbe10ca164bbe38d4950b73c50541218e535f5ed6eb437c408b244321ebbf79522cf3c8118df40054d5033fbb9331a491d9b1517c9b8bd46e56a7fd0f6206bdfd70af", @ANYBLOB="030700000000000000000800000068000480", @ANYBLOB="c3f2cc232e66b91194d7e069233c91e56cee8a0682dc94fb80cc33135d68baf621644e2ef304b78d7a7075080cc28e9e5c4366838e300582417455ad7003b01cd4fd1635c7625a5609db51240d666e1dd37e9c54a710ee18b85c9d4a5f7417c5c6e878e060d75a9113d10b2ed714d009654b63202957018cc58db07a94ae87520359e667", @ANYRESHEX=0x0], 0x7c}, 0x1, 0x0, 0x0, 0x200480c0}, 0x0) 4.589736ms ago: executing program 3 (id=4444): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) (async) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000002c0)={@cgroup, 0xffffffffffffffff, 0x12, 0x2000000, 0x0, @void, @value=0x0}, 0x20) r2 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000240)=0x14) sendto$packet(r2, &(0x7f0000000180)="abb71189fa79f6ec0451de63", 0xc, 0xc800, &(0x7f00000002c0)={0x11, 0x5, r3, 0x1, 0x44, 0x6, @local}, 0x14) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f0000000000)={0x0, 0x1a, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYRESDEC=r4, @ANYRES16=r0, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230", @ANYRESHEX=r0, @ANYRESHEX=r1], 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r5) (async) r6 = socket$unix(0x1, 0x1, 0x0) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000880)=@newqdisc={0x80, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x8000000, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0x1e}, {0xfff2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xffffffff, 0x400, 0x7fff, 0x9, 0x4, 0x0, 0x0, 0x70d0db32, 0x8}}}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x2, 0x4, 0x1ff, 0xffff, 0x1, 0x401, 0x4, 0x1}}, {0x6, 0x2, [0xac86]}}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x20000001}, 0x4040010) ioctl$SIOCSIFHWADDR(r5, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 0s ago: executing program 2 (id=4445): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'ip6gre0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'ip6gre0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@bridge_delneigh={0x30, 0x1e, 0x1, 0xfffffffc, 0x0, {0x7, 0x0, 0x0, r2}, [@NDA_LLADDR={0xa}, @NDA_MASTER={0x8, 0x9, 0x9}]}, 0x30}}, 0x48000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r4, &(0x7f0000000000)={0x1f, 0x0, @none, 0x0, 0x2}, 0xe) recvmmsg(r4, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socket$can_raw(0x1d, 0x3, 0x1) (async) r5 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) bind$can_raw(r5, &(0x7f00000001c0)={0x1d, r6}, 0x10) setsockopt$CAN_RAW_RECV_OWN_MSGS(r5, 0x65, 0x4, &(0x7f00000003c0)=0x1, 0x4) sendmsg$can_raw(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@can={{}, 0x0, 0x0, 0x0, 0x0, "0000000000000003"}, 0x10}}, 0x20000000) read(r5, &(0x7f00000007c0)=""/56, 0x38) (async) read(r5, &(0x7f00000007c0)=""/56, 0x38) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000180), r3) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x8000}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1d, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x39}}]}, &(0x7f0000000180)='syzkaller\x00', 0x4, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2b}, 0x94) sendmsg$NFC_CMD_LLC_SET_PARAMS(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000002c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010025bd7000fedbdf251000000008000100", @ANYRES32, @ANYRES16=r8], 0x24}, 0x1, 0x0, 0x0, 0x40400d0}, 0x0) kernel console output (not intermixed with test programs): [ 267.931333][T14244] macvlan0: left promiscuous mode [ 267.936489][T14244] macvlan1: left promiscuous mode [ 267.941805][T14244] ipvlan0: left promiscuous mode [ 267.947096][T14244] ipvlan1: left promiscuous mode [ 267.952595][T14244] macvtap0: left promiscuous mode [ 267.958225][T14244] macsec0: left promiscuous mode [ 267.963427][T14244] geneve0: left promiscuous mode [ 267.968876][T14244] geneve1: left promiscuous mode [ 267.974036][T14244] mac80211_hwsim hwsim3 wlan0: left promiscuous mode [ 267.983995][T14244] bond1: left promiscuous mode [ 267.989038][T14244] sit1: left promiscuous mode [ 267.993942][T14244] dvmrp1: left promiscuous mode [ 268.000219][T14244] bond2: left promiscuous mode [ 268.005327][T14244] vxlan0: left promiscuous mode [ 268.010840][T14244] geneve2: left promiscuous mode [ 268.016324][T14244] netdevsim netdevsim1 eth0: left promiscuous mode [ 268.023523][T14244] netdevsim netdevsim1 eth1: left promiscuous mode [ 268.030717][T14244] netdevsim netdevsim1 eth2: left promiscuous mode [ 268.037511][T14244] netdevsim netdevsim1 eth3: left promiscuous mode [ 268.044532][T14244] bridge1: left promiscuous mode [ 268.050177][T14244] bridge2: left promiscuous mode [ 268.055373][T14244] ip6tnl1: left promiscuous mode [ 268.060789][T14244] veth2: left promiscuous mode [ 268.065714][T14244] veth3: left promiscuous mode [ 268.070771][T14244] ipvlan2: left promiscuous mode [ 268.075867][T14244] bond3: left promiscuous mode [ 268.080868][T14244] bond4: left promiscuous mode [ 268.085776][T14244] gretap1: left promiscuous mode [ 268.090991][T14244] veth4: left promiscuous mode [ 268.095934][T14244] veth5: left promiscuous mode [ 268.100953][T14244] ip6tnl2: left promiscuous mode [ 268.106010][T14244] erspan1: left promiscuous mode [ 268.111242][T14244] bridge3: left promiscuous mode [ 268.116353][T14244] bond5: left promiscuous mode [ 268.121385][T14244] mac80211_hwsim hwsim3 pim6reg0: left promiscuous mode [ 268.128538][T14244] bridge4: left promiscuous mode [ 268.134887][T14244] veth7: left promiscuous mode [ 268.140606][T14244] veth9: left promiscuous mode [ 268.146168][T14244] mac80211_hwsim hwsim5 syzkaller0: left promiscuous mode [ 268.160612][T14244] veth15: left promiscuous mode [ 268.216320][T14257] __nla_validate_parse: 34 callbacks suppressed [ 268.216345][T14257] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2441'. [ 268.224595][T14249] bond7: (slave gretap0): making interface the new active one [ 268.256279][T14249] bond7: (slave gretap0): Enslaving as an active interface with an up link [ 268.276917][T14259] mac80211_hwsim hwsim10 wlan1: left promiscuous mode [ 268.312674][T14259] bond0: (slave wlan1): Opening slave failed [ 268.342177][T14265] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2442'. [ 268.422815][T14272] openvswitch: netlink: Tunnel attr 303 out of range max 16 [ 268.525427][T14290] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2444'. [ 268.634009][T14304] gretap0: mtu less than device minimum [ 268.667508][T14308] netlink: 260 bytes leftover after parsing attributes in process `syz.0.2448'. [ 268.720807][T14311] sctp: [Deprecated]: syz.3.2453 (pid 14311) Use of int in max_burst socket option deprecated. [ 268.720807][T14311] Use struct sctp_assoc_value instead [ 268.762283][T14314] openvswitch: netlink: Actions may not be safe on all matching packets [ 268.778808][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 268.847275][T14317] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2453'. [ 268.857753][T14317] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2453'. [ 268.962582][T14331] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2461'. [ 269.004656][T14331] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2461'. [ 269.055491][T14342] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2461'. [ 269.117196][T14342] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2461'. [ 269.797269][T14408] tipc: Enabled bearer , priority 0 [ 269.806238][T14408] syzkaller0: entered promiscuous mode [ 269.813186][T14408] syzkaller0: entered allmulticast mode [ 269.832133][T14408] tipc: Resetting bearer [ 269.850327][T14407] tipc: Resetting bearer [ 269.861099][T14407] tipc: Disabling bearer [ 269.965365][T14414] netlink: zone id is out of range [ 269.974782][T14414] netlink: zone id is out of range [ 269.982712][T14414] netlink: zone id is out of range [ 269.987998][T14414] netlink: zone id is out of range [ 270.011057][T14419] validate_nla: 15 callbacks suppressed [ 270.011078][T14419] netlink: 'syz.2.2493': attribute type 1 has an invalid length. [ 270.068389][T14419] 8021q: adding VLAN 0 to HW filter on device bond4 [ 270.101269][T14420] bond4: (slave gretap1): making interface the new active one [ 270.111476][T14420] bond4: (slave gretap1): Enslaving as an active interface with an up link [ 270.192444][T14433] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 270.209687][ T37] tipc: Subscription rejected, illegal request [ 270.331840][T14445] netlink: 'syz.4.2502': attribute type 8 has an invalid length. [ 271.241343][T14508] syzkaller0: entered promiscuous mode [ 271.247669][T14508] syzkaller0: entered allmulticast mode [ 271.982363][T14584] : renamed from vlan0 (while UP) [ 272.640604][T14609] netlink: 'syz.2.2541': attribute type 10 has an invalid length. [ 272.699566][T14614] net_ratelimit: 226 callbacks suppressed [ 272.699587][T14614] openvswitch: netlink: Missing key (keys=40, expected=80) [ 272.872219][T14630] netlink: 'syz.1.2546': attribute type 2 has an invalid length. [ 272.944112][T14637] bond5: entered promiscuous mode [ 272.967108][T14637] bond5: entered allmulticast mode [ 272.973690][T14637] 8021q: adding VLAN 0 to HW filter on device bond5 [ 273.019095][T14644] bond6: entered promiscuous mode [ 273.043200][T14644] bond6: entered allmulticast mode [ 273.054673][T14644] 8021q: adding VLAN 0 to HW filter on device bond6 [ 273.081889][T14643] team0: Device vti0 is of different type [ 273.217942][ T5184] Bluetooth: hci4: link tx timeout [ 273.227011][ T5184] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 273.686604][T14699] __nla_validate_parse: 24 callbacks suppressed [ 273.686626][T14699] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2563'. [ 273.773876][T14699] netlink: 'syz.1.2563': attribute type 9 has an invalid length. [ 273.783094][T14699] netlink: 'syz.1.2563': attribute type 9 has an invalid length. [ 273.823831][T14711] netlink: 9 bytes leftover after parsing attributes in process `syz.4.2554'. [ 273.864147][T14659] netlink: 5 bytes leftover after parsing attributes in process `syz.4.2554'. [ 273.895242][T14716] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2569'. [ 273.908996][T14659] 0{X: renamed from gretap0 [ 273.925107][T14659] 0{X: left promiscuous mode [ 273.935043][T14659] 0{X: entered allmulticast mode [ 273.955815][T14659] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 274.013209][T14725] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2572'. [ 274.055310][T14727] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2573'. [ 274.237308][T14743] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2578'. [ 274.237376][T14740] vlan4: entered promiscuous mode [ 274.251653][T14740] bridge0: entered promiscuous mode [ 274.261580][T14739] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2577'. [ 274.292029][T14745] netlink: 'syz.4.2579': attribute type 1 has an invalid length. [ 274.302696][T14745] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2579'. [ 274.331840][T14748] syz.2.2580: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 274.347584][T14745] netlink: 'syz.4.2579': attribute type 1 has an invalid length. [ 274.356466][T14745] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2579'. [ 274.371155][T14748] CPU: 0 UID: 0 PID: 14748 Comm: syz.2.2580 Not tainted syzkaller #0 PREEMPT(full) [ 274.371187][T14748] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 274.371214][T14748] Call Trace: [ 274.371223][T14748] [ 274.371231][T14748] dump_stack_lvl+0x189/0x250 [ 274.371265][T14748] ? __pfx_dump_stack_lvl+0x10/0x10 [ 274.371291][T14748] ? __pfx__printk+0x10/0x10 [ 274.371318][T14748] ? lock_release+0x4b/0x3e0 [ 274.371351][T14748] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 274.371378][T14748] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 274.371403][T14748] warn_alloc+0x214/0x310 [ 274.371436][T14748] ? stack_depot_save_flags+0x40/0x860 [ 274.371465][T14748] ? __pfx_warn_alloc+0x10/0x10 [ 274.371497][T14748] ? kasan_save_track+0x4f/0x80 [ 274.371523][T14748] ? xskq_create+0x56/0x170 [ 274.371551][T14748] ? xsk_init_queue+0xb0/0x110 [ 274.371575][T14748] ? xsk_setsockopt+0x4dc/0x8d0 [ 274.371599][T14748] ? do_sock_setsockopt+0x17c/0x1b0 [ 274.371618][T14748] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 274.371638][T14748] ? do_syscall_64+0xfa/0x3b0 [ 274.371668][T14748] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 274.371693][T14748] __vmalloc_node_range_noprof+0x125/0x12f0 [ 274.371741][T14748] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 274.371773][T14748] ? xsk_setsockopt+0x462/0x8d0 [ 274.371800][T14748] ? __kasan_kmalloc+0x93/0xb0 [ 274.371830][T14748] vmalloc_user_noprof+0xad/0xf0 [ 274.371860][T14748] ? xskq_create+0xbf/0x170 [ 274.371888][T14748] xskq_create+0xbf/0x170 [ 274.371917][T14748] xsk_init_queue+0xb0/0x110 [ 274.371953][T14748] xsk_setsockopt+0x4dc/0x8d0 [ 274.371980][T14748] ? __pfx_xsk_setsockopt+0x10/0x10 [ 274.372007][T14748] ? __pfx_aa_sk_perm+0x10/0x10 [ 274.372038][T14748] ? lock_release+0x4b/0x3e0 [ 274.372069][T14748] ? aa_sock_opt_perm+0xff/0x1b0 [ 274.372089][T14748] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 274.372112][T14748] ? __pfx_xsk_setsockopt+0x10/0x10 [ 274.372139][T14748] do_sock_setsockopt+0x17c/0x1b0 [ 274.372167][T14748] __x64_sys_setsockopt+0x13f/0x1b0 [ 274.372191][T14748] do_syscall_64+0xfa/0x3b0 [ 274.372223][T14748] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 274.372243][T14748] ? clear_bhb_loop+0x60/0xb0 [ 274.372267][T14748] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 274.372288][T14748] RIP: 0033:0x7f51e718ebe9 [ 274.372306][T14748] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 274.372326][T14748] RSP: 002b:00007f51e808c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 274.372349][T14748] RAX: ffffffffffffffda RBX: 00007f51e73b5fa0 RCX: 00007f51e718ebe9 [ 274.372365][T14748] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 274.372378][T14748] RBP: 00007f51e7211e19 R08: 0000000000000004 R09: 0000000000000000 [ 274.372392][T14748] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 274.372406][T14748] R13: 00007f51e73b6038 R14: 00007f51e73b5fa0 R15: 00007fff5c3c8a18 [ 274.372431][T14748] [ 274.372494][T14748] Mem-Info: [ 274.547938][T14766] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 274.595439][T14748] active_anon:4709 inactive_anon:0 isolated_anon:0 [ 274.595439][T14748] active_file:2820 inactive_file:39893 isolated_file:0 [ 274.595439][T14748] unevictable:1227 dirty:31 writeback:0 [ 274.595439][T14748] slab_reclaimable:12494 slab_unreclaimable:184062 [ 274.595439][T14748] mapped:29197 shmem:1854 pagetables:1063 [ 274.595439][T14748] sec_pagetables:0 bounce:0 [ 274.595439][T14748] kernel_misc_reclaimable:0 [ 274.595439][T14748] free:1238534 free_pcp:17706 free_cma:0 [ 274.747930][T14772] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_rx_wq": -EINTR [ 274.763309][T14748] Node 0 active_anon:19236kB inactive_anon:0kB active_file:11280kB inactive_file:159368kB unevictable:3372kB isolated(anon):0kB isolated(file):0kB mapped:116788kB dirty:124kB writeback:0kB shmem:5880kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14028kB pagetables:4108kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 274.765985][T14766] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 274.782886][T14748] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:80kB pagetables:144kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 274.843410][T14766] gretap1: entered promiscuous mode [ 274.844998][T14748] Node 0 [ 274.849278][T14766] gretap1: entered allmulticast mode [ 274.885048][T14748] DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 274.916509][T14748] lowmem_reserve[]: 0 2497 2499 2499 2499 [ 274.923589][T14748] Node 0 DMA32 free:1059184kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:19288kB inactive_anon:0kB active_file:11280kB inactive_file:157792kB unevictable:3372kB writepending:124kB present:3129332kB managed:2557460kB mlocked:1836kB bounce:0kB free_pcp:48280kB local_pcp:19028kB free_cma:0kB [ 275.035286][T14748] lowmem_reserve[]: 0 0 1 1 1 [ 275.048494][T14748] Node 0 Normal free:12kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1576kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 275.085339][T14791] sctp: [Deprecated]: syz.1.2590 (pid 14791) Use of struct sctp_assoc_value in delayed_ack socket option. [ 275.085339][T14791] Use struct sctp_sack_info instead [ 275.106301][T14748] lowmem_reserve[]: 0 0 0 0 0 [ 275.111212][T14748] Node 1 Normal free:3879580kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:22112kB local_pcp:9792kB free_cma:0kB [ 275.168783][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 275.185751][T14748] lowmem_reserve[]: 0 0 0 0 0 [ 275.196668][T14748] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 275.256772][T14748] Node 0 DMA32: 2315*4kB (UM) 861*8kB (UME) 349*16kB (UM) 1364*32kB (UME) 531*64kB (UME) 202*128kB (UME) 56*256kB (UM) 26*512kB (UM) 24*1024kB (UME) 7*2048kB (UM) 213*4096kB (UM) = 1064228kB [ 275.260966][ T5875] Bluetooth: hci4: command 0x0406 tx timeout [ 275.284325][T14748] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 275.315268][T14748] Node 1 Normal: 223*4kB (UE) 46*8kB (UME) 45*16kB (UME) 79*32kB (UME) 24*64kB (UME) 8*128kB (UME) 5*256kB (UME) 3*512kB (ME) 3*1024kB (UME) 0*2048kB 944*4096kB (M) = 3879580kB [ 275.372306][T14748] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 275.382054][T14748] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 275.391630][T14748] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 275.421481][T14748] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 275.470964][T14748] 44079 total pagecache pages [ 275.475718][T14748] 0 pages in swap cache [ 275.518028][T14748] Free swap = 124996kB [ 275.533526][T14748] Total swap = 124996kB [ 275.547792][T14748] 2097051 pages RAM [ 275.557544][T14748] 0 pages HighMem/MovableOnly [ 275.598776][T14748] 425660 pages reserved [ 275.602998][T14748] 0 pages cma reserved [ 276.003419][T14874] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0) [ 276.717812][T14924] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 276.745102][T14931] vlan0: entered promiscuous mode [ 276.887268][T14947] netlink: 'syz.0.2638': attribute type 11 has an invalid length. [ 277.036897][T14968] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 277.207918][T14979] netlink: 'syz.1.2650': attribute type 1 has an invalid length. [ 277.223013][T14979] netlink: 'syz.1.2650': attribute type 2 has an invalid length. [ 277.233158][T14981] vlan4: entered allmulticast mode [ 277.238332][T14981] mac80211_hwsim hwsim3 wlan0: entered allmulticast mode [ 277.246174][T14979] netlink: 'syz.1.2650': attribute type 1 has an invalid length. [ 277.335168][T14988] netlink: 'syz.2.2653': attribute type 11 has an invalid length. [ 277.388186][T14996] openvswitch: netlink: IPv4 tun info is not correct [ 277.455603][T15005] tipc: Enabling of bearer rejected, failed to enable media [ 277.872590][T15047] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 277.956439][T15049] netlink: 'syz.4.2672': attribute type 10 has an invalid length. [ 277.964777][T15049] bridge_slave_1: left allmulticast mode [ 277.971383][T15049] bridge_slave_1: left promiscuous mode [ 277.980569][T15049] bridge0: port 2(bridge_slave_1) entered disabled state [ 277.993721][T15049] bridge_slave_1: entered promiscuous mode [ 278.001801][T15049] bridge_slave_1: entered allmulticast mode [ 278.008209][T15049] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 278.735222][T15112] __nla_validate_parse: 27 callbacks suppressed [ 278.735238][T15112] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2686'. [ 278.953551][T15117] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.2688'. [ 278.987173][T15115] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2687'. [ 279.044419][T15130] netlink: 'syz.3.2690': attribute type 3 has an invalid length. [ 279.160808][T15140] veth1_to_bond: entered allmulticast mode [ 279.206187][T15148] netlink: 248 bytes leftover after parsing attributes in process `syz.2.2698'. [ 279.261582][T15148] NCSI netlink: No device for ifindex 0 [ 279.275184][T15152] netlink: 248 bytes leftover after parsing attributes in process `syz.2.2698'. [ 279.301489][T15152] NCSI netlink: No device for ifindex 0 [ 279.308168][T15158] erspan0: entered promiscuous mode [ 279.316595][T15158] erspan0: entered allmulticast mode [ 279.323063][T15136] veth1_to_bond: left allmulticast mode [ 279.356163][T15157] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2699'. [ 279.405401][T15161] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2702'. [ 279.417461][T15161] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 279.436526][T15164] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2703'. [ 279.590573][T15181] batadv_slave_1: entered promiscuous mode [ 279.633960][T15181] netlink: 'syz.2.2709': attribute type 8 has an invalid length. [ 279.652671][T15181] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 279.687689][T15178] batadv_slave_1: left promiscuous mode [ 279.770790][T15198] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2714'. [ 279.779466][T15196] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2714'. [ 279.918468][T15213] netlink: 'syz.0.2722': attribute type 7 has an invalid length. [ 279.959654][T15216] netlink: 'syz.2.2723': attribute type 1 has an invalid length. [ 279.986188][T15213] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 279.993387][ T6010] IPVS: starting estimator thread 0... [ 280.057410][T15216] bond5 (unregistering): Released all slaves [ 280.091279][T15221] IPVS: using max 37 ests per chain, 88800 per kthread [ 280.099349][T15226] 8021q: VLANs not supported on wg1 [ 280.161278][T15225] ip6tnl1: entered promiscuous mode [ 280.166763][T15225] ip6tnl1: entered allmulticast mode [ 280.431212][T15249] syzkaller0: entered promiscuous mode [ 280.436846][T15249] syzkaller0: entered allmulticast mode [ 280.450349][T15249] syzkaller0: mtu greater than device maximum [ 280.490448][T15256] netlink: 'syz.2.2735': attribute type 1 has an invalid length. [ 280.517072][T15256] 8021q: adding VLAN 0 to HW filter on device bond5 [ 280.607687][T15262] bond5: (slave geneve3): making interface the new active one [ 280.630648][T15262] bond5: (slave geneve3): Enslaving as an active interface with an up link [ 280.769390][T15275] macvtap1: entered promiscuous mode [ 280.802589][T15284] netlink: 'syz.4.2743': attribute type 7 has an invalid length. [ 280.806627][T15275] vlan0: entered promiscuous mode [ 280.828561][T15275] macvtap1: entered allmulticast mode [ 280.835674][T15275] vlan0: entered allmulticast mode [ 280.841290][T15275] veth0_vlan: entered allmulticast mode [ 281.061220][T15305] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode [ 281.225559][T15314] bond17: entered promiscuous mode [ 281.233519][T15314] 8021q: adding VLAN 0 to HW filter on device bond17 [ 281.273829][T15314] 8021q: adding VLAN 0 to HW filter on device bond18 [ 281.282985][T15314] bond17: (slave bond18): making interface the new active one [ 281.291255][T15314] bond18: entered promiscuous mode [ 281.298464][T15314] bond17: (slave bond18): Enslaving as an active interface with an up link [ 281.464143][T15335] sctp: [Deprecated]: syz.3.2761 (pid 15335) Use of struct sctp_assoc_value in delayed_ack socket option. [ 281.464143][T15335] Use struct sctp_sack_info instead [ 282.550417][T15372] IPVS: set_ctl: invalid protocol: 100 224.0.0.2:20004 [ 282.967923][T15414] veth0_to_team: entered allmulticast mode [ 283.216762][T15443] validate_nla: 3 callbacks suppressed [ 283.216785][T15443] netlink: 'syz.0.2793': attribute type 11 has an invalid length. [ 283.238581][T15444] netlink: 'syz.0.2793': attribute type 11 has an invalid length. [ 283.323562][T15454] bridge0: port 3(vlan4) entered blocking state [ 283.333928][T15454] bridge0: port 3(vlan4) entered disabled state [ 283.341115][T15454] vlan4: entered allmulticast mode [ 283.346470][T15454] bridge0: entered allmulticast mode [ 283.355427][T15454] vlan4: left allmulticast mode [ 283.360605][T15454] bridge0: left allmulticast mode [ 283.446277][T15463] netlink: 'syz.1.2798': attribute type 10 has an invalid length. [ 283.460969][T15463] mac80211_hwsim hwsim5 syzkaller0: left promiscuous mode [ 283.470223][T15463] mac80211_hwsim hwsim5 syzkaller0: left allmulticast mode [ 283.529685][T15468] : renamed from bridge_slave_0 [ 283.536760][T15470] netlink: 'syz.0.2802': attribute type 1 has an invalid length. [ 283.546108][T15470] netlink: 'syz.0.2802': attribute type 2 has an invalid length. [ 283.554515][T15470] netlink: 'syz.0.2802': attribute type 1 has an invalid length. [ 283.562756][T15468] netlink: 'syz.1.2801': attribute type 1 has an invalid length. [ 283.797842][T15483] __nla_validate_parse: 36 callbacks suppressed [ 283.797865][T15483] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2808'. [ 283.821784][T15483] tipc: Invalid UDP bearer configuration [ 283.821832][T15483] tipc: Enabling of bearer rejected, failed to enable media [ 283.837465][T15483] netlink: 88 bytes leftover after parsing attributes in process `syz.1.2808'. [ 283.845095][T15487] tipc: Enabled bearer , priority 0 [ 283.899808][T15495] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2809'. [ 283.910382][T15496] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2809'. [ 283.936657][T15488] syzkaller0: entered promiscuous mode [ 283.942645][T15488] syzkaller0: entered allmulticast mode [ 283.949243][T15488] tipc: Resetting bearer [ 283.960023][T15497] batadv2: entered allmulticast mode [ 283.980084][T15495] team0: entered promiscuous mode [ 283.985148][T15495] team0: entered allmulticast mode [ 283.991441][T15488] tipc: Resetting bearer [ 284.066352][T15488] tipc: Disabling bearer [ 284.216249][T15508] tipc: Enabled bearer , priority 0 [ 284.224716][T15508] syzkaller0: entered promiscuous mode [ 284.249727][T15508] syzkaller0: entered allmulticast mode [ 284.263887][T15510] netlink: 'syz.4.2811': attribute type 15 has an invalid length. [ 284.292517][T15510] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2811'. [ 284.310051][T15510] netlink: 'syz.4.2811': attribute type 15 has an invalid length. [ 284.318172][T15510] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2811'. [ 284.327455][ T7676] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 2816 - 0 [ 284.342241][ T7676] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 2816 - 0 [ 284.374365][T15499] netlink: 'syz.1.2810': attribute type 13 has an invalid length. [ 284.381437][ T7676] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 2816 - 0 [ 284.412829][T15506] tipc: Resetting bearer [ 284.436357][T15506] tipc: Disabling bearer [ 284.485407][T15499] erspan0: left promiscuous mode [ 284.503165][T15499] erspan0: left allmulticast mode [ 284.535804][T15499] 8021q: adding VLAN 0 to HW filter on device bond0 [ 284.546621][T15499] 8021q: adding VLAN 0 to HW filter on device team0 [ 284.576185][T15499] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 284.610729][ T7676] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 2816 - 0 [ 284.825323][T15531] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2816'. [ 284.868179][T15545] 8021q: adding VLAN 0 to HW filter on device bond7 [ 284.895489][T15545] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2819'. [ 285.002030][T15545] bond7: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 285.019728][T15551] can: request_module (can-proto-3) failed. [ 285.065053][T15555] bridge7: entered promiscuous mode [ 285.070710][T15555] bridge7: entered allmulticast mode [ 285.099570][T15555] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2822'. [ 285.108606][T15555] tipc: Invalid UDP bearer configuration [ 285.128813][T15555] tipc: Enabling of bearer rejected, failed to enable media [ 285.183614][T15560] netlink: 'syz.4.2823': attribute type 11 has an invalid length. [ 285.203253][T15560] netlink: 'syz.4.2823': attribute type 11 has an invalid length. [ 285.227061][T15560] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2823'. [ 285.534673][T15590] ieee802154 phy1 wpan1: encryption failed: -22 [ 285.595422][T15597] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 285.616395][T15596] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 286.092898][T15634] delete_channel: no stack [ 286.097978][T15634] delete_channel: no stack [ 286.371315][T15657] tipc: Enabling of bearer rejected, already enabled [ 286.390833][T15657] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode [ 286.418954][T15657] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode [ 286.456084][ T5875] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 286.467818][ T5875] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 286.477544][ T5875] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 286.485462][ T5875] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 286.493279][ T5875] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 286.688806][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 286.974974][T15664] chnl_net:caif_netlink_parms(): no params data found [ 287.158291][T15721] netlink: zone id is out of range [ 287.196104][T15721] netlink: zone id is out of range [ 287.222137][T15721] netlink: zone id is out of range [ 287.227334][T15721] netlink: zone id is out of range [ 287.259123][T15721] netlink: zone id is out of range [ 287.264313][T15721] netlink: zone id is out of range [ 287.289956][T15721] netlink: zone id is out of range [ 287.307278][T15721] netlink: zone id is out of range [ 287.329507][T15721] netlink: zone id is out of range [ 287.384721][T15664] bridge0: port 1(bridge_slave_0) entered blocking state [ 287.435859][T15664] bridge0: port 1(bridge_slave_0) entered disabled state [ 287.443433][T15664] bridge_slave_0: entered allmulticast mode [ 287.451509][T15664] bridge_slave_0: entered promiscuous mode [ 287.459511][T15664] bridge0: port 2(bridge_slave_1) entered blocking state [ 287.466789][T15664] bridge0: port 2(bridge_slave_1) entered disabled state [ 287.474261][T15664] bridge_slave_1: entered allmulticast mode [ 287.493787][T15664] bridge_slave_1: entered promiscuous mode [ 287.540346][T15743] gretap2: entered promiscuous mode [ 287.545632][T15743] gretap2: entered allmulticast mode [ 287.606433][T15664] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 287.619691][T15744] tipc: Enabled bearer , priority 0 [ 287.627184][T15744] syzkaller0: entered promiscuous mode [ 287.633137][T15744] syzkaller0: entered allmulticast mode [ 287.642077][T15664] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 287.680183][T15664] team0: Port device team_slave_0 added [ 287.686344][T15744] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 287.701333][T15664] team0: Port device team_slave_1 added [ 287.716198][T15744] tipc: Resetting bearer [ 287.752251][T15742] tipc: Resetting bearer [ 287.769680][T15742] tipc: Disabling bearer [ 287.796535][T15664] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 287.805090][T15664] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 287.833249][T15664] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 287.860765][T15664] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 287.867870][T15664] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 287.894738][T15664] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 287.964161][T15664] hsr_slave_0: entered promiscuous mode [ 287.971679][T15664] hsr_slave_1: entered promiscuous mode [ 288.078096][T15771] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.117808][T15771] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.142604][T15664] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 288.170784][T15771] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.216798][T15664] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 288.250412][T15771] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.272056][T15781] netlink: 'syz.0.2889': attribute type 11 has an invalid length. [ 288.303074][T15664] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 288.346442][T15780] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 288.354224][ T37] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.363727][ T37] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.399616][T15664] team0: Port device netdevsim0 removed [ 288.406719][T15664] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 288.424624][ T37] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.437827][ T37] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.530804][ T5875] Bluetooth: hci5: command tx timeout [ 288.537070][T15791] validate_nla: 6 callbacks suppressed [ 288.537091][T15791] netlink: 'syz.2.2893': attribute type 12 has an invalid length. [ 288.558902][T15664] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 288.570145][T15664] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 288.580818][T15664] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 288.593245][T15664] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 288.757141][T15664] 8021q: adding VLAN 0 to HW filter on device bond0 [ 288.802305][T15664] 8021q: adding VLAN 0 to HW filter on device team0 [ 288.827987][ T1151] bridge0: port 1(bridge_slave_0) entered blocking state [ 288.835370][ T1151] bridge0: port 1(bridge_slave_0) entered forwarding state [ 288.855459][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 288.862671][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 289.159075][T15847] __nla_validate_parse: 16 callbacks suppressed [ 289.159098][T15847] netlink: 176 bytes leftover after parsing attributes in process `syz.0.2907'. [ 289.216857][T15847] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2907'. [ 289.245290][T15664] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 289.293915][T15858] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2910'. [ 289.392887][T15664] veth0_vlan: entered promiscuous mode [ 289.435513][T15664] veth1_vlan: entered promiscuous mode [ 289.508040][T15664] veth0_macvtap: entered promiscuous mode [ 289.518310][T15664] veth1_macvtap: entered promiscuous mode [ 289.527686][T15873] netlink: 'syz.2.2913': attribute type 1 has an invalid length. [ 289.537872][T15873] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2913'. [ 289.561943][T15664] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 289.602751][T15664] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 289.622038][ T7669] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.635201][ T7669] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.655273][T15880] tipc: New replicast peer: 255.255.255.255 [ 289.667018][T15880] tipc: Enabled bearer , priority 10 [ 289.688036][ T7669] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.722761][ T7669] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.807876][T15893] netlink: 'syz.0.2920': attribute type 1 has an invalid length. [ 289.842001][T15893] 8021q: adding VLAN 0 to HW filter on device bond19 [ 289.854158][ T7674] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 289.862578][ T7674] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 289.882411][T15902] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2921'. [ 289.931206][ T7674] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 289.953128][T15906] netlink: 'syz.1.2924': attribute type 10 has an invalid length. [ 289.954415][ T7674] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 290.039902][T15915] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2923'. [ 290.253459][T15923] netlink: 'syz.0.2929': attribute type 1 has an invalid length. [ 290.279923][T15923] netlink: 'syz.0.2929': attribute type 1 has an invalid length. [ 290.288192][T15927] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2931'. [ 290.325499][T15927] net_ratelimit: 47 callbacks suppressed [ 290.325523][T15927] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 290.406212][T15935] tipc: Enabling of bearer rejected, failed to enable media [ 290.529016][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 290.565424][T15935] macsec0: mtu less than device minimum [ 290.610880][ T5875] Bluetooth: hci5: command tx timeout [ 290.622431][ T5184] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 290.632028][ T37] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.640853][T15946] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2935'. [ 290.646718][ T5184] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 290.662081][ T5184] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 290.671640][ T5184] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 290.685223][ T5184] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 290.714683][ T37] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.785299][ T37] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.840765][T15952] bond20: entered promiscuous mode [ 290.845948][T15952] bond20: entered allmulticast mode [ 290.851890][T15952] 8021q: adding VLAN 0 to HW filter on device bond20 [ 290.865425][T15952] bond20 (unregistering): Released all slaves [ 290.887973][ T37] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.982690][T15963] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2940'. [ 291.050100][ T37] dummy0: left allmulticast mode [ 291.055282][ T37] bridge0: port 1(dummy0) entered disabled state [ 291.062905][T15964] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 291.175623][ T37] bond4 (unregistering): (slave gretap1): Releasing active interface [ 291.197816][ T37] dvmrp1 (unregistering): left allmulticast mode [ 291.213723][ T37] dvmrp0 (unregistering): left allmulticast mode [ 291.222886][ T37] bond5 (unregistering): (slave geneve3): Releasing active interface [ 291.719883][ T37] bond1 (unregistering): Released all slaves [ 291.740601][ T37] bond2 (unregistering): Released all slaves [ 291.771268][ T37] smc: removing net device bond0 with user defined pnetid SYZ2 [ 291.783781][ T37] bond0 (unregistering): Released all slaves [ 291.805866][ T37] bond3 (unregistering): Released all slaves [ 291.823198][ T37] bond4 (unregistering): Released all slaves [ 291.840162][ T37] bond5 (unregistering): Released all slaves [ 291.921028][T15943] chnl_net:caif_netlink_parms(): no params data found [ 291.956108][ T37] tipc: Left network mode [ 292.026382][T15992] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2950'. [ 292.076352][T15993] IPv6: sit1: Disabled Multicast RS [ 292.083765][T15993] sit1: entered allmulticast mode [ 292.225861][T15943] bridge0: port 1(bridge_slave_0) entered blocking state [ 292.235046][T16011] netlink: 'syz.3.2955': attribute type 8 has an invalid length. [ 292.246939][T15943] bridge0: port 1(bridge_slave_0) entered disabled state [ 292.257421][T15943] bridge_slave_0: entered allmulticast mode [ 292.264777][T15943] bridge_slave_0: entered promiscuous mode [ 292.273072][T15943] bridge0: port 2(bridge_slave_1) entered blocking state [ 292.280514][T15943] bridge0: port 2(bridge_slave_1) entered disabled state [ 292.288024][T15943] bridge_slave_1: entered allmulticast mode [ 292.295500][T15943] bridge_slave_1: entered promiscuous mode [ 292.363362][ T37] hsr_slave_0: left promiscuous mode [ 292.389507][ T37] hsr_slave_1: left promiscuous mode [ 292.689232][ T5875] Bluetooth: hci5: command tx timeout [ 292.735237][T16040] A link change request failed with some changes committed already. Interface wg0 may have been left with an inconsistent configuration, please check. [ 292.751407][T16043] batadv1: left allmulticast mode [ 292.759677][T16043] bridge0: port 3(batadv1) entered disabled state [ 292.768992][ T5875] Bluetooth: hci2: command tx timeout [ 292.806412][T16043] bridge_slave_0: left allmulticast mode [ 292.815228][T16045] netlink: 'syz.1.2966': attribute type 6 has an invalid length. [ 292.826831][T16046] netlink: 'syz.1.2966': attribute type 6 has an invalid length. [ 292.830197][T16043] bridge0: port 1(bridge_slave_0) entered disabled state [ 292.902830][T15943] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 292.943449][T15943] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 293.031964][T15943] team0: Port device team_slave_0 added [ 293.043359][T15943] team0: Port device team_slave_1 added [ 293.087582][T15943] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 293.096850][T15943] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 293.100553][ T30] audit: type=1107 audit(1755941506.732:7): pid=16065 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='u1Oh_v:ÃUOe[HSWp' [ 293.127860][T15943] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 293.161566][T16068] pimreg: entered allmulticast mode [ 293.167589][T15943] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 293.179317][T15943] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 293.205751][T15943] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 293.232665][ T37] IPVS: stop unused estimator thread 0... [ 293.290058][T15943] hsr_slave_0: entered promiscuous mode [ 293.296952][T15943] hsr_slave_1: entered promiscuous mode [ 293.304008][T15943] debugfs: 'hsr0' already exists in 'hsr' [ 293.310354][T16073] netlink: 'syz.1.2975': attribute type 83 has an invalid length. [ 293.310675][T15943] Cannot create hsr debugfs directory [ 293.634018][T15943] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 293.646035][T15943] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 293.659757][T15943] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 293.670801][T15943] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 293.752928][T15943] 8021q: adding VLAN 0 to HW filter on device bond0 [ 293.787120][T15943] 8021q: adding VLAN 0 to HW filter on device team0 [ 293.805639][ T1151] bridge0: port 1(bridge_slave_0) entered blocking state [ 293.812942][ T1151] bridge0: port 1(bridge_slave_0) entered forwarding state [ 293.831813][ T1151] bridge0: port 2(bridge_slave_1) entered blocking state [ 293.839148][ T1151] bridge0: port 2(bridge_slave_1) entered forwarding state [ 294.020545][T16111] bridge0: port 2(bridge_slave_1) entered disabled state [ 294.169354][T16128] tipc: New replicast peer: 255.255.255.255 [ 294.186044][T16128] tipc: Enabled bearer , priority 10 [ 294.346133][T15943] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 294.393516][T16146] __nla_validate_parse: 4 callbacks suppressed [ 294.393537][T16146] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2994'. [ 294.437179][T15943] veth0_vlan: entered promiscuous mode [ 294.473324][T15943] veth1_vlan: entered promiscuous mode [ 294.552618][T15943] veth0_macvtap: entered promiscuous mode [ 294.565979][T15943] veth1_macvtap: entered promiscuous mode [ 294.586065][T16154] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2996'. [ 294.600929][T15943] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 294.617944][T15943] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 294.636256][ T1101] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.657998][ T1101] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.681942][ T1101] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.705840][ T1101] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.741188][T16161] validate_nla: 1 callbacks suppressed [ 294.741210][T16161] netlink: 'syz.3.2999': attribute type 58 has an invalid length. [ 294.756969][T16161] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2999'. [ 294.769952][ T5875] Bluetooth: hci5: command tx timeout [ 294.806934][ T1151] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 294.823211][ T1151] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 294.844251][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 294.852364][ T5875] Bluetooth: hci2: command tx timeout [ 294.866853][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 294.879065][T16163] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3000'. [ 295.045736][T16165] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 295.072103][T16180] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not our slave [ 295.106730][T16180] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1) [ 295.540703][T16209] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 295.597280][T16212] netlink: 104 bytes leftover after parsing attributes in process `syz.0.3013'. [ 295.625085][ T5866] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 295.632794][ T5866] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 295.642579][ T5866] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 295.654404][ T5866] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 295.662597][ T5866] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 295.903062][T16240] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3019'. [ 295.988512][T16214] chnl_net:caif_netlink_parms(): no params data found [ 296.091309][T16254] netlink: 'syz.3.3024': attribute type 29 has an invalid length. [ 296.111577][T16214] bridge0: port 1(bridge_slave_0) entered blocking state [ 296.122445][T16214] bridge0: port 1(bridge_slave_0) entered disabled state [ 296.131150][T16214] bridge_slave_0: entered allmulticast mode [ 296.140877][T16214] bridge_slave_0: entered promiscuous mode [ 296.186500][T16258] bridge0: port 2(bridge_slave_1) entered disabled state [ 296.194118][T16258] bridge0: port 1(bridge_slave_0) entered disabled state [ 296.272129][T16258] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 296.285251][T16258] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 296.366402][T16214] bridge0: port 2(bridge_slave_1) entered blocking state [ 296.374273][T16214] bridge0: port 2(bridge_slave_1) entered disabled state [ 296.384050][T16214] bridge_slave_1: entered allmulticast mode [ 296.392458][T16214] bridge_slave_1: entered promiscuous mode [ 296.402196][ T1101] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.417467][ T1101] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.427194][ T1101] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.467923][ T1101] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.494186][T16214] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 296.543605][T16214] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 296.577236][T16282] sctp: [Deprecated]: syz.2.3032 (pid 16282) Use of int in maxseg socket option. [ 296.577236][T16282] Use struct sctp_assoc_value instead [ 296.602728][T16214] team0: Port device team_slave_0 added [ 296.612538][T16214] team0: Port device team_slave_1 added [ 296.649847][T16214] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 296.667126][T16214] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 296.694025][T16214] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 296.707309][T16214] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 296.715071][T16214] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 296.786328][T16214] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 296.862157][T16297] netlink: 'syz.4.3038': attribute type 16 has an invalid length. [ 296.870480][T16297] netlink: 'syz.4.3038': attribute type 17 has an invalid length. [ 296.889157][T16297] lo: left promiscuous mode [ 296.901830][T16297] tunl0: left promiscuous mode [ 296.908416][T16297] gre0: left promiscuous mode [ 296.917251][T16297] 0{X: left allmulticast mode [ 296.926998][T16297] ip_vti0: left promiscuous mode [ 296.932803][ T5866] Bluetooth: hci2: command tx timeout [ 296.934512][T16297] ip6_vti0: left promiscuous mode [ 296.944805][T16297] sit0: left promiscuous mode [ 296.954481][T16297] ip6tnl0: left promiscuous mode [ 296.960828][T16297] ip6gre0: left promiscuous mode [ 296.967488][T16297] syz_tun: left promiscuous mode [ 296.975424][T16297] ip6gretap0: left promiscuous mode [ 296.982060][T16297] bond0: left promiscuous mode [ 296.987069][T16297] bridge_slave_1: left promiscuous mode [ 296.994254][T16297] 8021q: adding VLAN 0 to HW filter on device bond0 [ 297.002579][T16297] !: left promiscuous mode [ 297.008569][T16297] nlmon0: left promiscuous mode [ 297.015317][T16297] caif0: left promiscuous mode [ 297.020526][T16297] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 297.046755][T16214] hsr_slave_0: entered promiscuous mode [ 297.055191][T16214] hsr_slave_1: entered promiscuous mode [ 297.061682][T16214] debugfs: 'hsr0' already exists in 'hsr' [ 297.067520][T16214] Cannot create hsr debugfs directory [ 297.176271][T16310] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not our slave [ 297.188003][T16310] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1) [ 297.434274][T16332] netlink: 'syz.3.3050': attribute type 1 has an invalid length. [ 297.465105][T16332] gretap1: entered promiscuous mode [ 297.473879][T16332] bond1: (slave gretap1): making interface the new active one [ 297.483366][T16332] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 297.497961][T16332] macvlan2: entered promiscuous mode [ 297.504720][T16332] macvlan2: entered allmulticast mode [ 297.511913][T16332] bond1: entered promiscuous mode [ 297.517605][T16332] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 297.527403][T16332] bond1: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 297.543832][T16332] bond1: left promiscuous mode [ 297.676251][T16214] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 297.699453][T16338] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3051'. [ 297.702495][T16214] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 297.729524][ T5866] Bluetooth: hci3: command tx timeout [ 297.751760][T16214] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 297.789694][T16214] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 297.810052][T16347] netlink: 6 bytes leftover after parsing attributes in process `syz.2.3053'. [ 297.826434][T16347] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 297.846208][T16343] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 298.090482][T16375] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3061'. [ 298.111498][T16214] 8021q: adding VLAN 0 to HW filter on device bond0 [ 298.157312][T16214] 8021q: adding VLAN 0 to HW filter on device team0 [ 298.182147][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 298.189344][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 298.199787][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 298.206967][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 298.374684][T16395] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3067'. [ 298.521596][T16403] netlink: 'syz.0.3070': attribute type 1 has an invalid length. [ 298.555752][T16404] netlink: 'syz.0.3070': attribute type 10 has an invalid length. [ 298.611749][T16404] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 298.743747][T16403] bond20 (unregistering): Released all slaves [ 298.772161][T16404] ip6tnl3: entered promiscuous mode [ 298.785102][T16404] ip6tnl3: entered allmulticast mode [ 298.826923][T16214] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 298.882632][T16214] veth0_vlan: entered promiscuous mode [ 298.934722][T16214] veth1_vlan: entered promiscuous mode [ 299.009304][ T5866] Bluetooth: hci2: command 0x0419 tx timeout [ 299.032175][T16214] veth0_macvtap: entered promiscuous mode [ 299.045835][T16214] veth1_macvtap: entered promiscuous mode [ 299.065974][T16214] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 299.078345][T16459] netlink: 'syz.3.3083': attribute type 10 has an invalid length. [ 299.078537][T16214] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 299.109191][T16459] bridge0: port 1(bridge_slave_0) entered disabled state [ 299.125177][T16459] bridge0: port 1(bridge_slave_0) entered blocking state [ 299.132427][T16459] bridge0: port 1(bridge_slave_0) entered forwarding state [ 299.146116][T16459] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 299.168071][ T7674] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.196091][ T7674] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.219810][ T7674] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.255996][ T7674] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.272182][T16463] veth0: entered promiscuous mode [ 299.296973][ T7674] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 299.332529][ T7674] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 299.424435][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 299.440769][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 299.517022][T16481] netlink: 'syz.3.3091': attribute type 2 has an invalid length. [ 299.735365][T16491] team_slave_0: entered allmulticast mode [ 299.809711][ T5866] Bluetooth: hci3: command tx timeout [ 299.867416][T16497] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 299.996636][ T5875] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 300.005698][ T5875] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 300.015587][ T5875] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 300.025208][ T5875] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 300.033547][ T5875] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 300.074464][T16461] veth0: left promiscuous mode [ 300.162698][T16518] __nla_validate_parse: 7 callbacks suppressed [ 300.162720][T16518] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3102'. [ 300.320507][T16524] netlink: 212296 bytes leftover after parsing attributes in process `syz.1.3103'. [ 300.402015][T16507] chnl_net:caif_netlink_parms(): no params data found [ 300.497736][T16535] openvswitch: netlink: Flow key attribute not present in set flow. [ 300.543871][T16507] bridge0: port 1(bridge_slave_0) entered blocking state [ 300.554617][T16507] bridge0: port 1(bridge_slave_0) entered disabled state [ 300.565103][T16507] bridge_slave_0: entered allmulticast mode [ 300.613150][T16507] bridge_slave_0: entered promiscuous mode [ 300.666619][T16547] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3108'. [ 300.670451][T16507] bridge0: port 2(bridge_slave_1) entered blocking state [ 300.702897][T16507] bridge0: port 2(bridge_slave_1) entered disabled state [ 300.712134][T16549] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3109'. [ 300.721771][T16507] bridge_slave_1: entered allmulticast mode [ 300.723283][T16507] bridge_slave_1: entered promiscuous mode [ 300.731244][T16549] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3109'. [ 300.739837][T16547] bond0: entered promiscuous mode [ 300.747798][T16547] bond_slave_0: entered promiscuous mode [ 300.753979][T16547] bond_slave_1: entered promiscuous mode [ 300.761557][T16547] bond0: left promiscuous mode [ 300.766391][T16547] bond_slave_0: left promiscuous mode [ 300.773587][T16547] bond_slave_1: left promiscuous mode [ 300.816003][T16507] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 300.830965][T16507] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 300.868628][T16552] netlink: 3 bytes leftover after parsing attributes in process `syz.3.3110'. [ 300.880861][T16552] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 300.927284][T16507] team0: Port device team_slave_0 added [ 300.941319][T16559] sctp: [Deprecated]: syz.1.3112 (pid 16559) Use of int in max_burst socket option deprecated. [ 300.941319][T16559] Use struct sctp_assoc_value instead [ 300.969335][T16507] team0: Port device team_slave_1 added [ 301.089170][ T5875] Bluetooth: hci2: command 0x0419 tx timeout [ 301.097567][T16507] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 301.097818][T16567] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3114'. [ 301.105933][T16507] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 301.160823][T16507] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 301.177540][T16507] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 301.185536][T16507] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 301.224153][T16507] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 301.258997][T16571] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3117'. [ 301.355169][T16507] hsr_slave_0: entered promiscuous mode [ 301.363975][T16507] hsr_slave_1: entered promiscuous mode [ 301.371225][T16507] debugfs: 'hsr0' already exists in 'hsr' [ 301.377065][T16507] Cannot create hsr debugfs directory [ 301.393674][T16586] netlink: 'syz.1.3119': attribute type 10 has an invalid length. [ 301.455274][T16586] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 301.555569][T16597] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0x5 [ 301.619961][T16507] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 301.639914][T16507] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 301.675335][T16606] sctp: [Deprecated]: syz.0.3128 (pid 16606) Use of struct sctp_assoc_value in delayed_ack socket option. [ 301.675335][T16606] Use struct sctp_sack_info instead [ 301.706642][T16507] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 301.720388][T16507] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 301.784751][T16507] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 301.797343][T16507] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 301.816722][T16619] netlink: 'syz.1.3131': attribute type 3 has an invalid length. [ 301.828181][T16619] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3131'. [ 301.842497][T16619] netlink: 'syz.1.3131': attribute type 3 has an invalid length. [ 301.871550][T16619] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3131'. [ 301.891096][ T5875] Bluetooth: hci3: command tx timeout [ 301.934847][T16507] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 301.953855][T16507] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 302.013690][T16636] nftables ruleset with unbound chain [ 302.052214][ T5875] Bluetooth: hci4: command tx timeout [ 302.075459][T16507] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 302.096033][T16507] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 302.121176][T16507] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 302.138156][T16507] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 302.270365][T16658] netlink: 'syz.2.3141': attribute type 2 has an invalid length. [ 302.297888][T16662] block nbd2: Unsupported socket: shutdown callout must be supported. [ 302.334547][T16507] 8021q: adding VLAN 0 to HW filter on device bond0 [ 302.352447][T16507] 8021q: adding VLAN 0 to HW filter on device team0 [ 302.391031][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 302.398192][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 302.457157][ T7676] bridge0: port 2(bridge_slave_1) entered blocking state [ 302.464350][ T7676] bridge0: port 2(bridge_slave_1) entered forwarding state [ 302.485682][T16675] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 302.495435][T16675] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 302.577136][ T37] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 302.597371][ T37] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 302.632699][ T37] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 302.653128][ T37] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 302.752846][ T30] audit: type=1804 audit(1755941516.382:8): pid=16693 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.3152" name="/newroot/18/cgroup.controllers" dev="tmpfs" ino=109 res=1 errno=0 [ 302.806734][ T30] audit: type=1800 audit(1755941516.382:9): pid=16693 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3152" name="cgroup.controllers" dev="tmpfs" ino=109 res=0 errno=0 [ 302.908292][T16507] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 303.475027][T16507] veth0_vlan: entered promiscuous mode [ 303.501701][T16507] veth1_vlan: entered promiscuous mode [ 303.536940][T16507] veth0_macvtap: entered promiscuous mode [ 303.546736][T16507] veth1_macvtap: entered promiscuous mode [ 303.564448][T16507] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 303.582932][T16507] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 303.655481][ T37] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.679956][ T37] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.714006][ T37] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.745250][ T37] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.867336][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 303.896247][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 303.923560][ T7674] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 303.938611][ T7674] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 303.974076][ T5875] Bluetooth: hci3: command tx timeout [ 304.129320][ T5875] Bluetooth: hci4: command tx timeout [ 304.630085][ T5866] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 304.637553][ T5866] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 304.645062][ T5866] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 304.663073][ T5866] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 304.671191][ T5866] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 304.950870][T16795] chnl_net:caif_netlink_parms(): no params data found [ 305.067117][T16795] bridge0: port 1(bridge_slave_0) entered blocking state [ 305.074820][T16795] bridge0: port 1(bridge_slave_0) entered disabled state [ 305.085588][T16795] bridge_slave_0: entered allmulticast mode [ 305.094228][T16795] bridge_slave_0: entered promiscuous mode [ 305.107673][T16795] bridge0: port 2(bridge_slave_1) entered blocking state [ 305.115081][T16795] bridge0: port 2(bridge_slave_1) entered disabled state [ 305.126008][T16795] bridge_slave_1: entered allmulticast mode [ 305.133828][T16795] bridge_slave_1: entered promiscuous mode [ 305.153545][T16831] netlink: 'syz.1.3206': attribute type 10 has an invalid length. [ 305.191961][T16831] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 305.232640][T16795] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 305.261592][T16795] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 305.338792][T16795] team0: Port device team_slave_0 added [ 305.345003][T16838] syzkaller1: entered promiscuous mode [ 305.354584][T16838] syzkaller1: entered allmulticast mode [ 305.366581][T16795] team0: Port device team_slave_1 added [ 305.398540][T16795] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 305.405866][T16795] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 305.433769][T16795] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 305.446354][T16795] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 305.453648][T16795] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 305.482033][T16795] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 305.587020][T16795] hsr_slave_0: entered promiscuous mode [ 305.601444][T16795] hsr_slave_1: entered promiscuous mode [ 305.614853][T16795] debugfs: 'hsr0' already exists in 'hsr' [ 305.621073][T16795] Cannot create hsr debugfs directory [ 305.757877][T16853] syzkaller0: entered promiscuous mode [ 305.765999][T16853] syzkaller0: entered allmulticast mode [ 305.887718][T16795] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.953156][T16795] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.007147][T16795] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.083190][T16795] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.209565][ T5866] Bluetooth: hci4: command tx timeout [ 306.318287][T16795] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 306.352140][T16795] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 306.367810][T16795] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 306.387947][T16795] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 306.457807][T16885] __nla_validate_parse: 7 callbacks suppressed [ 306.457830][T16885] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3222'. [ 306.525655][ T6010] IPVS: starting estimator thread 0... [ 306.618984][T16891] IPVS: using max 38 ests per chain, 91200 per kthread [ 306.630959][T16795] 8021q: adding VLAN 0 to HW filter on device bond0 [ 306.672356][T16795] 8021q: adding VLAN 0 to HW filter on device team0 [ 306.690678][ T7676] bridge0: port 1(bridge_slave_0) entered blocking state [ 306.697842][ T7676] bridge0: port 1(bridge_slave_0) entered forwarding state [ 306.723254][ T7676] bridge0: port 2(bridge_slave_1) entered blocking state [ 306.730458][ T7676] bridge0: port 2(bridge_slave_1) entered forwarding state [ 306.768779][ T5866] Bluetooth: hci1: command tx timeout [ 307.026412][T16795] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 307.136947][T16795] veth0_vlan: entered promiscuous mode [ 307.174035][T16795] veth1_vlan: entered promiscuous mode [ 307.265158][T16795] veth0_macvtap: entered promiscuous mode [ 307.285619][T16795] veth1_macvtap: entered promiscuous mode [ 307.330298][T16795] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 307.357358][T16795] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 307.377137][T16925] tipc: Started in network mode [ 307.383979][T16925] tipc: Node identity 228ec4975ae2, cluster identity 4711 [ 307.391603][T16925] tipc: Enabled bearer , priority 0 [ 307.402779][ T1101] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.423380][ T1101] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.453027][ T1101] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.503391][T16925] syzkaller0: entered promiscuous mode [ 307.509244][T16925] syzkaller0: entered allmulticast mode [ 307.523824][T16925] tipc: Resetting bearer [ 307.550011][ T1101] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.593764][T16924] tipc: Resetting bearer [ 307.602349][T16924] tipc: Disabling bearer [ 307.722875][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 307.752741][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 307.800738][ T7674] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 307.832865][ T7674] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 308.000516][T16956] syzkaller0: entered promiscuous mode [ 308.006518][T16956] syzkaller0: entered allmulticast mode [ 308.013101][T16959] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3250'. [ 308.152597][T16967] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 308.289694][ T5866] Bluetooth: hci4: command tx timeout [ 308.302364][T16976] ip6tnl0: Caught tx_queue_len zero misconfig [ 308.389043][T16978] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3258'. [ 308.472857][T16978] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3258'. [ 308.577499][T16992] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3265'. [ 308.754901][ T7674] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 308.757920][T17008] tipc: Started in network mode [ 308.769874][ T7674] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 308.778228][T17008] tipc: Node identity ac1414aa, cluster identity 4711 [ 308.793927][T17008] tipc: Enabled bearer , priority 10 [ 308.853046][ T5866] Bluetooth: hci1: command tx timeout [ 308.895161][T17016] veth: renamed from dummy0 [ 308.978223][T17022] pim6reg: entered allmulticast mode [ 308.997177][T17024] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3278'. [ 309.806170][T17085] netlink: 156 bytes leftover after parsing attributes in process `syz.2.3304'. [ 309.816895][T17085] netlink: 156 bytes leftover after parsing attributes in process `syz.2.3304'. [ 309.915651][ T5951] tipc: Node number set to 2886997162 [ 309.968047][T17093] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3307'. [ 310.087145][T17099] veth1_to_hsr: mtu less than device minimum [ 310.465651][T17126] netlink: 'syz.2.3317': attribute type 1 has an invalid length. [ 310.474007][T17126] netlink: 'syz.2.3317': attribute type 1 has an invalid length. [ 310.834555][T17147] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 310.887836][T17151] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3329'. [ 310.928779][ T5866] Bluetooth: hci1: command tx timeout [ 311.009513][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 311.184820][T17183] vxlan0: entered promiscuous mode [ 311.194027][T17183] vxlan0: entered allmulticast mode [ 311.213177][ T1151] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 311.235038][ T1151] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 311.248006][ T1151] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 311.261632][ T1151] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 311.460799][T17191] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 311.563881][T17193] openvswitch: netlink: Flow actions attr not present in new flow. [ 311.620500][T17195] __nla_validate_parse: 3 callbacks suppressed [ 311.620521][T17195] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3345'. [ 311.634144][T17199] mac80211_hwsim hwsim24 wlan1: entered allmulticast mode [ 311.648495][T17199] netlink: 'syz.2.3348': attribute type 10 has an invalid length. [ 311.658482][T17199] mac80211_hwsim hwsim24 wlan1: left allmulticast mode [ 311.673138][T17199] bridge_slave_0: left allmulticast mode [ 311.679116][T17199] bridge_slave_0: left promiscuous mode [ 311.685334][T17199] bridge0: port 1(bridge_slave_0) entered disabled state [ 311.713299][T17199] bridge_slave_1: left allmulticast mode [ 311.721356][T17199] bridge_slave_1: left promiscuous mode [ 311.727338][T17199] bridge0: port 2(bridge_slave_1) entered disabled state [ 311.744598][T17204] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 311.805805][T17199] bond0: (slave bond_slave_0): Releasing backup interface [ 311.819255][T17199] bond0: (slave bond_slave_1): Releasing backup interface [ 311.832540][T17199] team0: Port device team_slave_0 removed [ 311.851060][T17199] team0: Port device team_slave_1 removed [ 311.862025][T17199] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 311.877549][T17199] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 311.975490][T17223] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.3355'. [ 311.979137][T17224] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3356'. [ 312.015392][T17223] syz.0.3355 uses old SIOCAX25GETINFO [ 312.174811][T17240] netlink: 'syz.1.3358': attribute type 28 has an invalid length. [ 312.208166][T17240] netlink: 'syz.1.3358': attribute type 3 has an invalid length. [ 312.234416][T17240] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3358'. [ 312.315124][T17251] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3365'. [ 312.388824][T17257] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3366'. [ 312.473312][T17264] netlink: 104 bytes leftover after parsing attributes in process `syz.0.3368'. [ 312.495261][T17264] netlink: 104 bytes leftover after parsing attributes in process `syz.0.3368'. [ 312.624350][T17277] netlink: 'syz.2.3372': attribute type 25 has an invalid length. [ 312.766386][T17291] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 312.790962][ T8286] wlan1: authenticate with 08:02:11:00:00:00 (local address=08:02:11:00:00:01) [ 312.802988][ T8286] wlan1: send auth to 08:02:11:00:00:00 (try 1/3) [ 312.811609][T17286] can: request_module (can-proto-0) failed. [ 312.931804][ T1101] wlan1: send auth to 08:02:11:00:00:00 (try 2/3) [ 312.997995][T17310] netlink: 'syz.3.3383': attribute type 10 has an invalid length. [ 313.010575][ T5866] Bluetooth: hci1: command tx timeout [ 313.040496][T17316] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3382'. [ 313.050695][ T1151] wlan1: send auth to 08:02:11:00:00:00 (try 3/3) [ 313.054483][T17310] veth0_vlan: entered allmulticast mode [ 313.059341][T17316] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3382'. [ 313.080620][T17310] veth0_vlan: left promiscuous mode [ 313.087475][T17310] veth0_vlan: entered promiscuous mode [ 313.097901][T17310] team0: Device veth0_vlan failed to register rx_handler [ 313.182814][ T1151] wlan1: authentication with 08:02:11:00:00:00 timed out [ 313.190666][ T7676] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 313.209061][ T7676] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 313.258593][ T7676] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 313.279269][ T7676] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 313.321381][T17338] netlink: 'syz.1.3393': attribute type 1 has an invalid length. [ 313.525088][T17359] openvswitch: netlink: Missing key (keys=40, expected=80) [ 313.561993][T17367] 8021q: VLANs not supported on gre0 [ 313.743555][T17393] vxcan1: entered allmulticast mode [ 314.310839][T17352] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 314.426854][T17403] openvswitch: netlink: Duplicate or invalid key (type 0). [ 314.449157][T17404] openvswitch: netlink: Duplicate or invalid key (type 0). [ 314.463896][T17404] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 314.492374][T17403] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 314.623394][T17417] tipc: Failed to remove unknown binding: 66,1,1/2886997162:2576562826/2576562828 [ 314.654860][T17417] tipc: Failed to remove unknown binding: 66,1,1/2886997162:2576562826/2576562828 [ 314.759791][T17430] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 315.077855][T17460] netdevsim netdevsim1 : renamed from netdevsim0 (while UP) [ 315.668369][T17505] bridge_slave_1: left allmulticast mode [ 315.690025][T17505] bridge_slave_1: left promiscuous mode [ 315.703687][T17505] bridge0: port 2(bridge_slave_1) entered disabled state [ 315.747160][T17505] bridge_slave_0: left allmulticast mode [ 315.756796][T17505] bridge_slave_0: left promiscuous mode [ 315.763112][ T5951] IPVS: starting estimator thread 0... [ 315.763608][T17505] bridge0: port 1(bridge_slave_0) entered disabled state [ 315.859739][T17514] IPVS: using max 36 ests per chain, 86400 per kthread [ 316.032411][T17531] netlink: 'syz.4.3447': attribute type 3 has an invalid length. [ 316.188077][T17547] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 316.254091][T17552] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 316.263526][T17547] mac80211_hwsim hwsim24 wlan1: entered allmulticast mode [ 316.267906][T17550] netlink: zone id is out of range [ 316.276453][T17550] netlink: zone id is out of range [ 316.571821][T17583] syzkaller1: entered promiscuous mode [ 316.593327][T17583] syzkaller1: entered allmulticast mode [ 316.644980][T17589] __nla_validate_parse: 19 callbacks suppressed [ 316.645001][T17589] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3468'. [ 316.741084][T17597] netlink: 244 bytes leftover after parsing attributes in process `syz.2.3470'. [ 316.785437][T17599] netlink: 260 bytes leftover after parsing attributes in process `syz.1.3471'. [ 316.796925][T17603] netlink: 'syz.0.3473': attribute type 1 has an invalid length. [ 316.856803][T17606] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3474'. [ 316.881959][T17608] netlink: 72 bytes leftover after parsing attributes in process `syz.3.3475'. [ 316.891302][T17608] netlink: 72 bytes leftover after parsing attributes in process `syz.3.3475'. [ 316.906199][T17608] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.3475'. [ 317.034550][T17622] syzkaller1: entered promiscuous mode [ 317.041841][T17622] syzkaller1: entered allmulticast mode [ 317.089945][T17629] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3483'. [ 317.203154][T17641] netlink: 'syz.1.3486': attribute type 21 has an invalid length. [ 317.212137][T17641] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3486'. [ 317.535918][ T7676] dvmrp1 (unregistering): left allmulticast mode [ 317.895949][ T7676] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 317.905102][ T7676] mac80211_hwsim hwsim5 wlan1: left allmulticast mode [ 317.912375][ T7676] bond0 (unregistering): Released all slaves [ 317.923663][ T7676] bond1 (unregistering): Released all slaves [ 317.935182][ T7676] bond2 (unregistering): Released all slaves [ 317.947167][ T7676] bond3 (unregistering): Released all slaves [ 317.964687][ T7676] bond4 (unregistering): Released all slaves [ 317.977151][ T7676] bond5 (unregistering): Released all slaves [ 317.992621][ T7676] bond6 (unregistering): (slave veth7): Releasing active interface [ 318.004774][ T7676] bond6 (unregistering): (slave veth9): Releasing active interface [ 318.014277][ T7676] bond6 (unregistering): Released all slaves [ 318.027944][ T7676] bond7 (unregistering): (slave veth13): Releasing active interface [ 318.036818][ T7676] bond7 (unregistering): Released all slaves [ 318.099683][ T7676] : left promiscuous mode [ 318.123732][T17636] netlink: 'syz.3.3484': attribute type 10 has an invalid length. [ 318.199262][ T7676] tipc: Disabling bearer [ 318.225531][ T7676] tipc: Disabling bearer [ 318.237330][ T7676] tipc: Left network mode [ 318.365362][T17667] dvmrp0: entered allmulticast mode [ 318.474430][T17678] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3497'. [ 318.718360][ T7676] hsr_slave_0: left promiscuous mode [ 318.813403][ T7676] pimreg (unregistering): left allmulticast mode [ 319.166997][T17701] netlink: 'syz.3.3504': attribute type 13 has an invalid length. [ 319.175371][T17701] netlink: 'syz.3.3504': attribute type 17 has an invalid length. [ 319.183460][T17701] netlink: 'syz.3.3504': attribute type 27 has an invalid length. [ 319.324363][T17716] ip6erspan0: entered promiscuous mode [ 319.332046][T17716] ip6erspan0: entered allmulticast mode [ 319.732837][ T7676] IPVS: stop unused estimator thread 0... [ 319.945227][T17759] net_ratelimit: 228 callbacks suppressed [ 319.945250][T17759] openvswitch: netlink: IP tunnel dst address not specified [ 320.496735][T17813] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 320.902781][T17866] netlink: 'syz.3.3554': attribute type 11 has an invalid length. [ 321.145695][T17891] unsupported nlmsg_type 40 [ 321.233476][T17894] tipc: Started in network mode [ 321.238445][T17894] tipc: Node identity ac14140f, cluster identity 4711 [ 321.249132][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 321.252592][T17894] tipc: New replicast peer: 255.255.255.255 [ 321.268132][T17894] tipc: Enabled bearer , priority 10 [ 321.325036][T17899] syzkaller0: entered promiscuous mode [ 321.331710][T17899] syzkaller0: entered allmulticast mode [ 321.414940][T17909] netlink: 'syz.3.3568': attribute type 1 has an invalid length. [ 321.612977][T17909] 8021q: adding VLAN 0 to HW filter on device bond2 [ 321.664669][T17914] bond2: (slave veth3): Enslaving as an active interface with a down link [ 321.712676][T17922] bond2: (slave veth0_to_bond): making interface the new active one [ 321.722344][T17922] veth0_to_bond: entered promiscuous mode [ 321.734236][T17922] bond2: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 321.764155][T17925] bond2: (slave veth5): Enslaving as an active interface with a down link [ 321.839612][T17950] __nla_validate_parse: 12 callbacks suppressed [ 321.839634][T17950] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3580'. [ 322.097540][T17970] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3585'. [ 322.167700][T17977] vxlan1: entered promiscuous mode [ 322.173112][T17977] vxlan1: entered allmulticast mode [ 322.385160][T17998] netlink: 'syz.1.3594': attribute type 1 has an invalid length. [ 322.393140][ T5928] tipc: Node number set to 2886997007 [ 322.399191][T17998] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 322.531753][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 322.631256][T18022] netlink: 'syz.0.3603': attribute type 27 has an invalid length. [ 322.641041][T18022] hsr0 speed is unknown, defaulting to 1000 [ 322.647328][T18022] hsr0 speed is unknown, defaulting to 1000 [ 322.657702][T18022] hsr0 speed is unknown, defaulting to 1000 [ 322.674020][T18022] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 322.694891][T18022] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 322.714595][T18029] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 322.735835][T18022] hsr0 speed is unknown, defaulting to 1000 [ 322.746736][T18022] hsr0 speed is unknown, defaulting to 1000 [ 322.754072][T18022] hsr0 speed is unknown, defaulting to 1000 [ 322.761391][T18022] hsr0 speed is unknown, defaulting to 1000 [ 322.768534][T18022] hsr0 speed is unknown, defaulting to 1000 [ 322.776398][T18022] hsr0 speed is unknown, defaulting to 1000 [ 322.783590][T18022] hsr0 speed is unknown, defaulting to 1000 [ 322.790969][T18022] hsr0 speed is unknown, defaulting to 1000 [ 322.857063][T18044] IPVS: set_ctl: invalid protocol: 41 127.0.0.1:20003 [ 322.866383][ T8286] IPVS: starting estimator thread 0... [ 322.958779][T18045] IPVS: using max 37 ests per chain, 88800 per kthread [ 323.055977][T18057] netlink: 80 bytes leftover after parsing attributes in process `syz.0.3610'. [ 323.672731][T18092] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3621'. [ 324.424433][T18086] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check. [ 324.509259][T18094] bond0: (slave rose0): Error: Device can not be enslaved while up [ 324.930874][T18121] nbd: must specify at least one socket [ 324.936679][T18121] nbd: must specify at least one socket [ 325.004444][T18121] nbd: must specify at least one socket [ 325.042608][T18121] nbd: must specify at least one socket [ 325.061895][T18121] nbd: must specify at least one socket [ 325.074465][T18121] nbd: must specify at least one socket [ 325.080557][T18121] nbd: must specify at least one socket [ 325.086525][T18121] nbd: must specify at least one socket [ 325.096706][T18121] nbd: must specify at least one socket [ 325.102983][T18121] nbd: must specify at least one socket [ 325.111926][T18121] nbd: must specify at least one socket [ 325.117796][T18121] nbd: must specify at least one socket [ 325.123885][T18121] nbd: must specify at least one socket [ 325.130050][T18121] nbd: must specify at least one socket [ 325.135949][T18121] nbd: must specify at least one socket [ 325.141845][T18121] nbd: must specify at least one socket [ 325.147694][T18121] nbd: must specify at least one socket [ 325.153522][T18121] nbd: must specify at least one socket [ 325.159484][T18121] nbd: must specify at least one socket [ 325.165286][T18121] nbd: must specify at least one socket [ 325.173464][T18121] nbd: must specify at least one socket [ 325.187407][T18121] nbd: must specify at least one socket [ 325.197166][T18121] nbd: must specify at least one socket [ 325.203105][T18121] nbd: must specify at least one socket [ 325.212016][T18121] nbd: must specify at least one socket [ 325.221349][T18121] nbd: must specify at least one socket [ 325.228263][T18121] nbd: must specify at least one socket [ 325.238461][T18121] nbd: must specify at least one socket [ 325.251339][T18121] nbd: must specify at least one socket [ 325.257165][T18121] nbd: must specify at least one socket [ 325.264264][T18121] nbd: must specify at least one socket [ 325.270145][T18121] nbd: must specify at least one socket [ 325.276412][T18121] nbd: must specify at least one socket [ 325.547910][T18143] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3636'. [ 325.872225][T18164] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 325.879545][T18164] IPv6: NLM_F_CREATE should be set when creating new route [ 325.886790][T18164] IPv6: NLM_F_CREATE should be set when creating new route [ 325.894073][T18164] IPv6: NLM_F_CREATE should be set when creating new route [ 325.905921][T18164] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 326.168120][T18183] netlink: 'syz.2.3646': attribute type 21 has an invalid length. [ 326.177763][T18183] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3646'. [ 326.250156][T18179] ieee802154 phy1 wpan1: encryption failed: -22 [ 326.263349][T18187] tls_set_device_offload_rx: netdev not found [ 326.369585][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 326.687858][T18222] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3655'. [ 326.972904][T18053] Set syz1 is full, maxelem 65536 reached [ 327.076625][T18254] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3667'. [ 327.110403][T18254] bridge0: port 2(bridge_slave_1) entered disabled state [ 327.117960][T18254] bridge0: port 1(bridge_slave_0) entered disabled state [ 327.153438][T18261] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3669'. [ 327.300064][T18271] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3672'. [ 327.325562][T18270] macvlan0: entered promiscuous mode [ 327.333471][T18270] macvlan0: entered allmulticast mode [ 327.339498][T18270] veth1_to_bond: entered promiscuous mode [ 327.345277][T18270] veth1_to_bond: entered allmulticast mode [ 327.383541][T18270] team0: Port device macvlan0 added [ 327.389658][T18271] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3672'. [ 327.542373][T18292] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3679'. [ 327.593980][T18292] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3679'. [ 328.700775][T18391] netlink: 'syz.0.3704': attribute type 10 has an invalid length. [ 328.918153][T18412] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3710'. [ 328.972718][T18412] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 329.178210][T18424] netlink: 256 bytes leftover after parsing attributes in process `syz.4.3715'. [ 329.267370][T18432] Bluetooth: MGMT ver 1.23 [ 329.428901][T18438] IPVS: Unknown mcast interface: virt_wifi0 [ 329.447387][T18439] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3719'. [ 329.526834][T18443] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3722'. [ 329.636611][T18451] bridge2: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 330.127970][T18499] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 330.244855][T18509] netlink: 'syz.1.3742': attribute type 11 has an invalid length. [ 330.258514][T18509] netlink: 'syz.1.3742': attribute type 10 has an invalid length. [ 330.520554][T18527] netem: incorrect ge model size [ 330.544263][T18527] netem: change failed [ 330.555595][T18527] netem: incorrect ge model size [ 330.576029][T18527] netem: change failed [ 330.585008][T18527] netem: incorrect ge model size [ 330.600256][T18527] netem: change failed [ 330.612318][T18535] netlink: 'syz.2.3750': attribute type 5 has an invalid length. [ 330.623062][T18527] netem: incorrect ge model size [ 330.631750][T18527] netem: change failed [ 330.644903][T18535] geneve2: entered promiscuous mode [ 330.662366][T18535] geneve2: entered allmulticast mode [ 330.672866][T18527] netem: incorrect ge model size [ 330.677977][T18527] netem: change failed [ 330.683678][ T7669] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 256 - 0 [ 330.701475][ T7669] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 256 - 0 [ 330.720143][ T7669] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 256 - 0 [ 330.729883][ T7669] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 256 - 0 [ 330.740648][T18527] netem: incorrect ge model size [ 330.745794][T18527] netem: change failed [ 330.752060][T18527] netem: incorrect ge model size [ 330.757165][T18527] netem: change failed [ 330.785466][T18527] netem: incorrect ge model size [ 330.790901][T18527] netem: change failed [ 330.797327][T18527] netem: incorrect ge model size [ 330.804150][T18527] netem: change failed [ 330.814404][T18527] netem: incorrect ge model size [ 330.819699][T18527] netem: change failed [ 330.824938][T18527] netem: incorrect ge model size [ 330.850364][T18527] netem: change failed [ 330.873909][T18527] netem: incorrect ge model size [ 330.879768][T18527] netem: change failed [ 330.885494][T18550] veth0: entered promiscuous mode [ 330.892842][T18527] netem: incorrect ge model size [ 330.906155][T18527] netem: change failed [ 330.951719][T18527] netem: incorrect ge model size [ 330.956745][T18527] netem: change failed [ 330.966255][T18527] netem: incorrect ge model size [ 330.976015][T18527] netem: change failed [ 330.989058][T18527] netem: incorrect ge model size [ 331.013099][T18527] netem: change failed [ 331.028762][T18557] veth0: left promiscuous mode [ 331.041614][T18562] vlan2: entered allmulticast mode [ 331.055674][T18562] mac80211_hwsim hwsim21 wlan0: entered allmulticast mode [ 331.070668][T18527] netem: incorrect ge model size [ 331.078086][T18527] netem: change failed [ 331.087516][T18566] team0: Device gtp0 is of different type [ 331.140438][T18527] netem: incorrect ge model size [ 331.145482][T18527] netem: change failed [ 331.183353][T18527] netem: incorrect ge model size [ 331.190623][T18527] netem: change failed [ 331.203612][T18527] netem: incorrect ge model size [ 331.211719][T18527] netem: change failed [ 331.223898][T18527] netem: incorrect ge model size [ 331.238424][T18527] netem: change failed [ 331.254961][T18527] netem: incorrect ge model size [ 331.268184][T18527] netem: change failed [ 331.311970][T18527] netem: incorrect ge model size [ 331.326081][T18527] netem: change failed [ 331.336571][T18527] netem: incorrect ge model size [ 331.403921][T18527] netem: change failed [ 331.606368][T18598] (unnamed net_device) (uninitialized): peer notification delay (1164) is not a multiple of miimon (100), value rounded to 1100 ms [ 331.723937][T18598] bond3: entered promiscuous mode [ 331.747993][T18598] bond3: entered allmulticast mode [ 331.761550][T18598] 8021q: adding VLAN 0 to HW filter on device bond3 [ 331.780254][T18606] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 332.011846][T18623] bond0: entered promiscuous mode [ 332.017185][T18623] bond_slave_0: entered promiscuous mode [ 332.029619][T18623] bond_slave_1: entered promiscuous mode [ 332.036077][T18623] bridge0: entered promiscuous mode [ 332.046321][T18623] batadv0: entered promiscuous mode [ 332.062398][T18623] debugfs: 'hsr1' already exists in 'hsr' [ 332.068315][T18623] Cannot create hsr debugfs directory [ 332.074906][T18623] hsr1: entered allmulticast mode [ 332.082542][T18623] bond0: entered allmulticast mode [ 332.087892][T18623] bond_slave_0: entered allmulticast mode [ 332.094643][T18623] bond_slave_1: entered allmulticast mode [ 332.101280][T18623] bridge0: entered allmulticast mode [ 332.106744][T18623] batadv0: entered allmulticast mode [ 332.113090][T18623] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 332.125560][T18623] bond0: left promiscuous mode [ 332.128282][ T30] audit: type=1800 audit(1755941545.762:10): pid=18626 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.3781" name=4996AE17DFFC2E43C8174B54B620636894AAACF28FF62616363C70A440AEC4014CAF28C0ADC04308 dev="tmpfs" ino=595 res=0 errno=0 [ 332.139888][T18623] bond_slave_0: left promiscuous mode [ 332.164217][T18623] bond_slave_1: left promiscuous mode [ 332.170239][T18623] bridge0: left promiscuous mode [ 332.176230][T18623] batadv0: left promiscuous mode [ 332.195848][T18625] veth1_to_bond: left allmulticast mode [ 332.202376][T18625] veth1_to_bond: left promiscuous mode [ 332.215685][T18625] macvlan0: left promiscuous mode [ 332.224341][T18625] macvlan0: left allmulticast mode [ 332.266834][T18625] __nla_validate_parse: 16 callbacks suppressed [ 332.266858][T18625] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3781'. [ 332.337330][T18631] bond0: (slave gretap0): Opening slave failed [ 332.393804][T18638] netlink: 'syz.4.3784': attribute type 9 has an invalid length. [ 332.428532][ T7676] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x2 [ 332.509001][T18644] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3786'. [ 332.535233][T18646] syzkaller0: entered allmulticast mode [ 332.617475][T18649] netlink: 830 bytes leftover after parsing attributes in process `syz.0.3789'. [ 332.762109][T18667] netlink: 104 bytes leftover after parsing attributes in process `syz.0.3793'. [ 332.834235][T18671] netlink: 144 bytes leftover after parsing attributes in process `syz.0.3795'. [ 332.853833][T18671] netlink: 18 bytes leftover after parsing attributes in process `syz.0.3795'. [ 332.870973][T18675] netlink: 'syz.2.3794': attribute type 1 has an invalid length. [ 332.905479][T18674] vlan3: entered allmulticast mode [ 332.913183][T18674] veth1: entered allmulticast mode [ 333.039915][ T7669] veth0_to_bond: left promiscuous mode [ 333.155348][T18692] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3802'. [ 333.270320][T18702] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3805'. [ 333.279844][T18702] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 333.292681][T18707] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 333.354575][T18713] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 333.458589][T18721] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3812'. [ 333.476438][T18721] veth6: entered promiscuous mode [ 333.502228][T18721] veth6: entered allmulticast mode [ 333.532245][T18725] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3813'. [ 333.941063][T18760] af_packet: tpacket_rcv: packet too big, clamped from 132 to 4294967272. macoff=96 [ 334.039731][T18759] netlink: 'syz.3.3825': attribute type 1 has an invalid length. [ 334.335529][T18793] bridge_slave_0: entered promiscuous mode [ 334.482126][T18809] hsr0 speed is unknown, defaulting to 1000 [ 334.507499][T18812] vlan2: entered promiscuous mode [ 334.513258][T18812] vlan2: entered allmulticast mode [ 334.518520][T18812] hsr_slave_1: entered allmulticast mode [ 334.751111][T18827] openvswitch: netlink: Missing valid actions attribute. [ 334.758457][T18827] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 334.822401][T18831] netlink: 'syz.0.3843': attribute type 13 has an invalid length. [ 334.850007][T18831] netlink: 'syz.0.3843': attribute type 58 has an invalid length. [ 335.046875][T18856] !: renamed from dummy0 (while UP) [ 335.180212][T18866] netlink: 'syz.1.3855': attribute type 7 has an invalid length. [ 335.212043][T18866] : entered promiscuous mode [ 335.323796][T18879] lo: Caught tx_queue_len zero misconfig [ 335.334464][T18883] netlink: 'syz.1.3861': attribute type 39 has an invalid length. [ 335.391922][T18889] nftables ruleset with unbound set [ 335.399471][T18884] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 335.877803][T18920] netlink: 'syz.0.3875': attribute type 1 has an invalid length. [ 335.910417][T18921] bond1: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 335.924749][T18921] bond1: (slave ipvlan0): The slave device specified does not support setting the MAC address [ 335.942924][T18921] bond1: (slave ipvlan0): Setting fail_over_mac to active for active-backup mode [ 335.957242][T18922] netlink: 'syz.4.3874': attribute type 11 has an invalid length. [ 336.122753][T18928] bridge0: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 336.413316][T18946] openvswitch: netlink: VXLAN extension 1 has unexpected len 0 expected 4 [ 336.510235][T18948] sock: sock_set_timeout: `syz.4.3885' (pid 18948) tries to set negative timeout [ 336.865869][T18977] xt_socket: unknown flags 0xd0 [ 336.874935][T18974] FAULT_INJECTION: forcing a failure. [ 336.874935][T18974] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 336.897051][T18974] CPU: 0 UID: 0 PID: 18974 Comm: syz.1.3893 Not tainted syzkaller #0 PREEMPT(full) [ 336.897082][T18974] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 336.897096][T18974] Call Trace: [ 336.897105][T18974] [ 336.897113][T18974] dump_stack_lvl+0x189/0x250 [ 336.897153][T18974] ? __pfx____ratelimit+0x10/0x10 [ 336.897183][T18974] ? __pfx_dump_stack_lvl+0x10/0x10 [ 336.897208][T18974] ? __pfx__printk+0x10/0x10 [ 336.897240][T18974] ? rcu_is_watching+0x15/0xb0 [ 336.897262][T18974] should_fail_ex+0x414/0x560 [ 336.897292][T18974] _copy_to_user+0x31/0xb0 [ 336.897317][T18974] simple_read_from_buffer+0xe1/0x170 [ 336.897349][T18974] proc_fail_nth_read+0x1b3/0x220 [ 336.897374][T18974] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 336.897398][T18974] ? rw_verify_area+0x2a6/0x4d0 [ 336.897423][T18974] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 336.897448][T18974] vfs_read+0x200/0xa30 [ 336.897472][T18974] ? fdget_pos+0x247/0x320 [ 336.897492][T18974] ? __pfx___mutex_lock+0x10/0x10 [ 336.897522][T18974] ? __pfx_vfs_read+0x10/0x10 [ 336.897552][T18974] ? __fget_files+0x3a0/0x420 [ 336.897580][T18974] ? __fget_files+0x2a/0x420 [ 336.897613][T18974] ksys_read+0x145/0x250 [ 336.897638][T18974] ? __pfx_ksys_read+0x10/0x10 [ 336.897659][T18974] ? rcu_is_watching+0x15/0xb0 [ 336.897678][T18974] ? rcu_is_watching+0x15/0xb0 [ 336.897695][T18974] do_syscall_64+0xfa/0x3b0 [ 336.897724][T18974] ? rcu_is_watching+0x15/0xb0 [ 336.897742][T18974] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 336.897762][T18974] ? clear_bhb_loop+0x60/0xb0 [ 336.897805][T18974] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 336.897826][T18974] RIP: 0033:0x7f922958d5fc [ 336.897844][T18974] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 336.897864][T18974] RSP: 002b:00007f922a322030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 336.897887][T18974] RAX: ffffffffffffffda RBX: 00007f92297b5fa0 RCX: 00007f922958d5fc [ 336.897908][T18974] RDX: 000000000000000f RSI: 00007f922a3220a0 RDI: 0000000000000004 [ 336.897922][T18974] RBP: 00007f922a322090 R08: 0000000000000000 R09: 0000000000000000 [ 336.897936][T18974] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 336.897949][T18974] R13: 00007f92297b6038 R14: 00007f92297b5fa0 R15: 00007ffd8d2db598 [ 336.897972][T18974] [ 336.905567][T18981] tipc: Enabled bearer , priority 0 [ 337.142762][T18982] syzkaller0: entered promiscuous mode [ 337.148336][T18982] syzkaller0: entered allmulticast mode [ 337.161479][T18981] tipc: Resetting bearer [ 337.234132][T18979] tipc: Resetting bearer [ 337.242930][T18979] tipc: Disabling bearer [ 337.381047][T19003] __nla_validate_parse: 29 callbacks suppressed [ 337.381104][T19003] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3901'. [ 337.500711][T19009] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.3904'. [ 337.522322][T19012] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3905'. [ 337.533005][T19012] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3905'. [ 337.775870][T19035] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3909'. [ 337.796930][T19022] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3907'. [ 337.858194][T19041] netlink: 'syz.1.3912': attribute type 83 has an invalid length. [ 337.924919][T19045] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3913'. [ 337.952587][T19045] tipc: Invalid UDP bearer configuration [ 337.952636][T19045] tipc: Enabling of bearer rejected, failed to enable media [ 338.128058][T19063] netlink: 'syz.0.3917': attribute type 1 has an invalid length. [ 338.141208][T19060] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 338.278044][T19072] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3921'. [ 338.360412][T19078] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3922'. [ 338.416783][T19078] hsr0 speed is unknown, defaulting to 1000 [ 338.481896][T19088] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3922'. [ 338.525771][T19095] netlink: 'syz.1.3926': attribute type 1 has an invalid length. [ 338.785583][T19110] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 338.924120][T19127] batman_adv: batadv0: Adding interface: team0 [ 338.931958][T19127] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 338.958020][T19127] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 338.984369][T19131] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 339.011300][T19133] team0: Port device dummy0 added [ 339.029988][T19133] team0: Port device dummy0 removed [ 339.040625][T19133] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 339.765552][T19179] validate_nla: 4 callbacks suppressed [ 339.765576][T19179] netlink: 'syz.2.3953': attribute type 21 has an invalid length. [ 339.789651][T19179] netlink: 'syz.2.3953': attribute type 4 has an invalid length. [ 339.797569][T19179] netlink: 'syz.2.3953': attribute type 5 has an invalid length. [ 339.832424][T19179] netlink: 'syz.2.3953': attribute type 21 has an invalid length. [ 339.848567][T19179] netlink: 'syz.2.3953': attribute type 4 has an invalid length. [ 339.859014][T19179] netlink: 'syz.2.3953': attribute type 5 has an invalid length. [ 339.980817][T19197] netlink: 'syz.2.3957': attribute type 1 has an invalid length. [ 339.992289][T19197] netlink: 'syz.2.3957': attribute type 4 has an invalid length. [ 340.391319][T19218] netlink: 'syz.3.3963': attribute type 10 has an invalid length. [ 340.434212][T19218] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 340.968517][T19239] smc: adding net device nicvf0 with user defined pnetid SYZ0 [ 341.019436][T19246] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 341.184970][T19260] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 341.521960][T19292] bridge0: Caught tx_queue_len zero misconfig [ 341.877502][T19320] batman_adv: batadv0: Adding interface: wlan1 [ 341.887957][T19320] batman_adv: batadv0: The MTU of interface wlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 341.940511][T19320] batman_adv: batadv0: Not using interface wlan1 (retrying later): interface not active [ 342.528552][T19388] __nla_validate_parse: 25 callbacks suppressed [ 342.528575][T19388] netlink: 100 bytes leftover after parsing attributes in process `syz.4.4015'. [ 342.548526][T19388] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4015'. [ 342.561216][T19388] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4015'. [ 342.757536][T19406] openvswitch: netlink: IP tunnel TTL not specified. [ 342.805918][T19410] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 342.875052][T19415] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4022'. [ 343.016412][T19427] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4025'. [ 343.077305][T19436] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4027'. [ 343.084564][T19432] tipc: Enabling of bearer rejected, failed to enable media [ 343.102880][T19427] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 343.107166][T19432] : renamed from macvtap0 (while UP) [ 343.226280][T19443] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4032'. [ 343.389285][T19460] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4037'. [ 343.441305][T19468] netlink: 'syz.0.4040': attribute type 1 has an invalid length. [ 343.463358][T19468] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4040'. [ 343.516855][T19472] team0: Device vti0 is of different type [ 343.534953][T19478] netlink: 184 bytes leftover after parsing attributes in process `syz.2.4042'. [ 343.545346][T19478] xt_socket: unknown flags 0xd0 [ 344.091006][T19529] batman_adv: batadv0: Adding interface: team0 [ 344.101792][T19529] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 344.131172][T19529] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 344.145699][T19528] IPv6: sit1: Disabled Multicast RS [ 344.245760][T19535] syzkaller0: entered promiscuous mode [ 344.262010][T19535] syzkaller0: entered allmulticast mode [ 344.331252][T19542] 8021q: adding VLAN 0 to HW filter on device bond3 [ 344.363065][T19542] bond3: (slave gretap1): making interface the new active one [ 344.372083][T19542] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 344.382294][T19535] hsr0 speed is unknown, defaulting to 1000 [ 344.765226][T19567] C: renamed from team_slave_0 (while UP) [ 344.805232][T19567] validate_nla: 4 callbacks suppressed [ 344.805252][T19567] netlink: 'syz.4.4071': attribute type 1 has an invalid length. [ 344.825005][T19567] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 345.344411][T19611] netlink: 'syz.4.4086': attribute type 1 has an invalid length. [ 345.523665][T19626] netlink: 'syz.0.4091': attribute type 4 has an invalid length. [ 345.626932][T19634] netlink: 'syz.1.4094': attribute type 16 has an invalid length. [ 345.641388][T19634] netlink: 'syz.1.4094': attribute type 3 has an invalid length. [ 345.870120][T19656] syzkaller1: entered promiscuous mode [ 345.889604][T19656] syzkaller1: entered allmulticast mode [ 346.018111][T19669] netlink: 'syz.3.4107': attribute type 1 has an invalid length. [ 346.744508][T19719] gtp0: entered promiscuous mode [ 346.841531][ T7669] netdevsim netdevsim1 : set [0, 0] type 1 family 0 port 8472 - 0 [ 346.851615][ T7669] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 346.860634][ T7669] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 346.869847][ T7669] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 347.110930][T19727] team0: Caught tx_queue_len zero misconfig [ 347.361302][T19737] netlink: 'syz.2.4125': attribute type 1 has an invalid length. [ 347.416415][T19737] bond4: (slave gretap2): making interface the new active one [ 347.433552][T19737] bond4: (slave gretap2): Enslaving as an active interface with an up link [ 347.445856][T19729] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 347.474358][T19754] sch_tbf: burst 8 is lower than device ip6tnl0 mtu (1452) ! [ 347.656159][T19773] __nla_validate_parse: 18 callbacks suppressed [ 347.656191][T19773] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4134'. [ 347.673260][T19772] openvswitch: netlink: Key type 1551 is out of range max 32 [ 347.726070][T19773] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4134'. [ 347.763642][T19773] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4134'. [ 347.791561][T19773] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4134'. [ 347.831465][T19773] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4134'. [ 347.853983][T19773] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4134'. [ 347.874425][T19773] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4134'. [ 347.902355][T19773] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4134'. [ 347.912163][T19773] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4134'. [ 347.922570][T19773] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4134'. [ 348.076895][T19808] Unsupported ieee802154 address type: 0 [ 348.208404][T19816] netlink: 'syz.0.4146': attribute type 4 has an invalid length. [ 348.842579][T19850] : entered promiscuous mode [ 349.157768][T19872] netlink: 'syz.4.4163': attribute type 10 has an invalid length. [ 349.190841][T19872] netlink: 'syz.4.4163': attribute type 10 has an invalid length. [ 349.246532][T19884] pim6reg: entered allmulticast mode [ 349.256011][T19886] xt_HMARK: proto mask must be zero with L3 mode [ 349.269730][T19878] delete_channel: no stack [ 349.423976][T19900] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 349.534359][ T30] audit: type=1107 audit(1755941563.172:11): pid=19914 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='l7,,3 aTL}f51lJYŐS 3H' [ 349.858489][T19944] netlink: 'syz.1.4188': attribute type 1 has an invalid length. [ 350.972898][T20046] netlink: 'syz.2.4221': attribute type 13 has an invalid length. [ 351.189699][T20067] Set syz1 is full, maxelem 65536 reached [ 351.227455][T20070] netlink: 'syz.0.4230': attribute type 1 has an invalid length. [ 351.235677][T20070] netlink: 'syz.0.4230': attribute type 4 has an invalid length. [ 351.290297][T20071] netlink: 'syz.0.4230': attribute type 1 has an invalid length. [ 351.315756][T20075] netlink: 'syz.0.4230': attribute type 1 has an invalid length. [ 351.401652][T20085] delete_channel: no stack [ 351.817978][T20125] netlink: 'syz.1.4246': attribute type 1 has an invalid length. [ 351.826095][T20126] netlink: 'syz.0.4244': attribute type 33 has an invalid length. [ 351.853683][T20129] netlink: 'syz.4.4247': attribute type 10 has an invalid length. [ 351.858526][T20125] 8021q: adding VLAN 0 to HW filter on device bond2 [ 351.870386][T20126] (unnamed net_device) (uninitialized): option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 351.891791][T20129] team0: Port device geneve0 added [ 351.905794][T20125] bond2: (slave gretap1): making interface the new active one [ 351.914933][T20125] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 352.060958][T20140] nbd2: detected capacity change from 0 to 549764202496 [ 352.075940][ T5866] block nbd2: Receive control failed (result -32) [ 352.121539][T20147] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 352.142472][T20149] syzkaller1: entered promiscuous mode [ 352.148064][T20149] syzkaller1: entered allmulticast mode [ 352.556862][T20191] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 352.594485][T20191] erspan0: entered allmulticast mode [ 352.748028][T20206] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 352.777795][T20208] netlink: 'syz.1.4269': attribute type 3 has an invalid length. [ 352.792278][T20208] __nla_validate_parse: 82 callbacks suppressed [ 352.792299][T20208] netlink: 666 bytes leftover after parsing attributes in process `syz.1.4269'. [ 352.836561][T20213] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4272'. [ 352.857889][ T30] audit: type=1800 audit(1755941566.492:12): pid=20212 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.4273" name=4996AE17DFFC2E43C8174B54B620636894AAACF28FF62616363C70A440AEC4014CAF28C0ADC04308 dev="tmpfs" ino=1110 res=0 errno=0 [ 353.297586][T20243] bond0: entered allmulticast mode [ 353.306473][T20243] bond_slave_0: entered allmulticast mode [ 353.312931][T20243] bond_slave_1: entered allmulticast mode [ 353.319814][T20243] mac80211_hwsim hwsim26 wlan1: entered allmulticast mode [ 353.327179][T20243] netdevsim netdevsim1 : entered allmulticast mode [ 353.336416][T20243] dummy0: entered allmulticast mode [ 353.385232][T20247] 8021q: adding VLAN 0 to HW filter on device bond4 [ 353.394443][T20247] bond3: (slave bond4): making interface the new active one [ 353.402587][T20247] bond3: (slave bond4): Enslaving as an active interface with an up link [ 353.430622][T20245] bond3: (slave gretap1): Enslaving as a backup interface with an up link [ 353.444183][T20245] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4283'. [ 353.455429][T20245] 8021q: adding VLAN 0 to HW filter on device bond3 [ 353.746519][T20271] openvswitch: netlink: VXLAN extension message has 11 unknown bytes. [ 353.775421][T20274] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4291'. [ 353.814570][T20270] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 353.863021][T20274] macvtap1: entered promiscuous mode [ 353.868583][T20274] vlan0: entered promiscuous mode [ 353.874695][T20274] macvtap1: entered allmulticast mode [ 353.884244][T20274] vlan0: entered allmulticast mode [ 353.890581][T20274] veth0_vlan: entered allmulticast mode [ 353.945869][T20279] netlink: 108 bytes leftover after parsing attributes in process `syz.0.4293'. [ 353.958016][T20279] tipc: Enabling of bearer rejected, failed to enable media [ 354.038131][T20285] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4296'. [ 354.056385][T20288] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4297'. [ 354.157669][T20292] bridge0: port 1(bridge_slave_0) entered disabled state [ 354.238523][T20292] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 354.252462][T20292] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 354.310278][T20304] netlink: 'syz.2.4300': attribute type 11 has an invalid length. [ 354.318560][T20304] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4300'. [ 354.354806][T20302] netlink: 64 bytes leftover after parsing attributes in process `syz.4.4301'. [ 354.378821][ T1151] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 354.387769][ T1151] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.421611][ T1151] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 354.433621][ T1151] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.473751][T20312] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4304'. [ 354.498507][T20310] sctp: [Deprecated]: syz.4.4303 (pid 20310) Use of int in max_burst socket option. [ 354.498507][T20310] Use struct sctp_assoc_value instead [ 354.517714][ T1151] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 354.529569][T20310] sctp: [Deprecated]: syz.4.4303 (pid 20310) Use of int in max_burst socket option. [ 354.529569][T20310] Use struct sctp_assoc_value instead [ 354.547222][ T1151] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.584468][ T1151] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 354.603515][ T1151] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.743628][T20328] tipc: Started in network mode [ 354.753599][T20328] tipc: Node identity 6e303b13e796, cluster identity 4711 [ 354.763878][T20328] tipc: Enabled bearer , priority 0 [ 354.792723][T20328] syzkaller0: entered promiscuous mode [ 354.806336][T20328] syzkaller0: entered allmulticast mode [ 354.820622][T20328] tipc: Resetting bearer [ 354.838327][T20327] tipc: Resetting bearer [ 354.859466][T20327] tipc: Disabling bearer [ 355.033752][T20349] tipc: Enabled bearer , priority 0 [ 355.061096][T20349] syzkaller0: entered promiscuous mode [ 355.082338][T20349] syzkaller0: entered allmulticast mode [ 355.153564][T20352] team_slave_0: entered promiscuous mode [ 355.159349][T20352] team_slave_1: entered promiscuous mode [ 355.180290][T20352] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 355.188552][T20352] team0: Device macvtap1 is already an upper device of the team interface [ 355.202150][T20352] team_slave_0: left promiscuous mode [ 355.207656][T20352] team_slave_1: left promiscuous mode [ 355.236213][T20355] tipc: Resetting bearer [ 355.255347][T20345] tipc: Resetting bearer [ 355.265235][T20345] tipc: Disabling bearer [ 355.295635][T20362] veth3: entered promiscuous mode [ 355.302212][T20362] veth3: entered allmulticast mode [ 355.540250][T20386] IPv6: Can't replace route, no match found [ 355.587136][T20394] sock: sock_timestamping_bind_phc: sock not bind to device [ 355.668345][T20398] delete_channel: no stack [ 358.927156][T20428] validate_nla: 39 callbacks suppressed [ 358.927179][T20428] netlink: 'syz.1.4337': attribute type 12 has an invalid length. [ 358.940991][T20428] netlink: 'syz.1.4337': attribute type 29 has an invalid length. [ 358.960144][T20428] __nla_validate_parse: 5 callbacks suppressed [ 358.960165][T20428] netlink: 148 bytes leftover after parsing attributes in process `syz.1.4337'. [ 359.055374][T20428] netlink: 'syz.1.4337': attribute type 1 has an invalid length. [ 359.064737][T20431] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4341'. [ 359.082379][T20431] tipc: Invalid UDP bearer configuration [ 359.082428][T20431] tipc: Enabling of bearer rejected, failed to enable media [ 359.121041][T20432] netlink: 64 bytes leftover after parsing attributes in process `syz.3.4341'. [ 359.145134][T20432] netlink: 64 bytes leftover after parsing attributes in process `syz.3.4341'. [ 359.187158][T20436] geneve3: entered promiscuous mode [ 359.205699][T20436] geneve3: entered allmulticast mode [ 359.244419][ T12] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 359.306651][ T12] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 359.377577][ T12] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 359.444664][ T12] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0 [ 359.803227][T20472] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4353'. [ 359.840821][T20469] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4351'. [ 360.084153][T20492] netlink: 14 bytes leftover after parsing attributes in process `syz.2.4357'. [ 360.095015][T20493] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4356'. [ 360.178299][T20492] bond0 (unregistering): Released all slaves [ 360.340338][T20517] netlink: 'syz.2.4364': attribute type 5 has an invalid length. [ 360.361455][T20517] netlink: 140 bytes leftover after parsing attributes in process `syz.2.4364'. [ 360.673605][T20548] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4374'. [ 361.248964][T20597] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 361.306085][T20601] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 361.315658][T20601] netlink: 'syz.0.4390': attribute type 1 has an invalid length. [ 361.581325][T20627] netlink: 'syz.2.4398': attribute type 6 has an invalid length. [ 361.591153][T20627] netlink: 'syz.2.4398': attribute type 5 has an invalid length. [ 362.329439][T20691] 8021q: VLANs not supported on ip6_vti0 [ 363.017504][ T7674] nci: nci_rf_intf_activated_ntf_packet: unsupported rf_interface 0x82 [ 363.057387][T20752] !: renamed from dummy0 [ 363.067926][T20752] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 363.080567][T20752] gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 363.089487][T20752] gretap2: entered promiscuous mode [ 363.095010][T20752] gretap2: entered allmulticast mode [ 363.156950][T20759] netlink: 'syz.4.4431': attribute type 1 has an invalid length. [ 363.193487][T20759] bond1: (slave gretap1): making interface the new active one [ 363.201950][T20759] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 363.218087][T20759] 8021q: adding VLAN 0 to HW filter on device bond1 [ 363.740699][T20797] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 363.747118][T20797] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 363.758729][T20797] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 363.764786][T20797] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 363.788082][T20797] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 363.794316][T20797] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 363.814559][T20797] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 363.821175][T20797] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 363.833455][T16607] Oops: general protection fault, probably for non-canonical address 0xdffffc000000000b: 0000 [#1] SMP KASAN PTI [ 363.845390][T16607] KASAN: null-ptr-deref in range [0x0000000000000058-0x000000000000005f] [ 363.853861][T16607] CPU: 0 UID: 0 PID: 16607 Comm: kbnepd bnep0 Not tainted syzkaller #0 PREEMPT(full) [ 363.863425][T16607] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 363.873524][T16607] RIP: 0010:klist_del+0x49/0x110 [ 363.878500][T16607] Code: f6 49 89 dd 49 c1 ed 03 43 80 7c 25 00 00 74 08 48 89 df e8 09 5e b3 f6 4c 8b 33 49 83 e6 fe 49 8d 7e 58 48 89 f8 48 c1 e8 03 <42> 80 3c 20 00 74 05 e8 eb 5d b3 f6 4d 8b 7e 58 4c 89 f7 e8 bf 73 [ 363.898166][T16607] RSP: 0018:ffffc9001c10f768 EFLAGS: 00010202 [ 363.904371][T16607] RAX: 000000000000000b RBX: ffff88807d1ed860 RCX: ffff888067410000 [ 363.912368][T16607] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000058 [ 363.920374][T16607] RBP: ffffc9001c10f890 R08: ffff88802e6c5b43 R09: 1ffff11005cd8b68 [ 363.928512][T16607] R10: dffffc0000000000 R11: ffffed1005cd8b69 R12: dffffc0000000000 [ 363.936667][T16607] R13: 1ffff1100fa3db0c R14: 0000000000000000 R15: ffff8880502ee750 [ 363.944688][T16607] FS: 0000000000000000(0000) GS:ffff888125c1b000(0000) knlGS:0000000000000000 [ 363.953653][T16607] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 363.960254][T16607] CR2: 00007fb128b746a0 CR3: 000000002e212000 CR4: 00000000003526f0 [ 363.968254][T16607] Call Trace: [ 363.971551][T16607] [ 363.974500][T16607] device_del+0x280/0x8e0 [ 363.978856][T16607] ? _raw_spin_unlock_irq+0x2e/0x50 [ 363.984080][T16607] ? pm_runtime_set_memalloc_noio+0x1f4/0x260 [ 363.990170][T16607] ? __pfx_device_del+0x10/0x10 [ 363.995060][T16607] ? netdev_unregister_kobject+0x344/0x450 [ 364.000882][T16607] unregister_netdevice_many_notify+0x1a6b/0x1ff0 [ 364.007320][T16607] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 364.014099][T16607] ? do_raw_spin_lock+0x121/0x290 [ 364.019138][T16607] ? rtnl_net_dev_lock+0x257/0x2f0 [ 364.024291][T16607] ? rcu_is_watching+0x15/0xb0 [ 364.029076][T16607] unregister_netdevice_queue+0x33c/0x380 [ 364.034827][T16607] ? rcu_is_watching+0x15/0xb0 [ 364.039647][T16607] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 364.045922][T16607] ? down_write+0x162/0x1f0 [ 364.050439][T16607] ? rtnl_net_dev_lock+0x36/0x2f0 [ 364.055583][T16607] ? rtnl_net_dev_lock+0x2de/0x2f0 [ 364.060745][T16607] unregister_netdev+0x1f/0x60 [ 364.065542][T16607] bnep_session+0x294d/0x2b40 [ 364.070273][T16607] ? rcu_is_watching+0x15/0xb0 [ 364.075046][T16607] ? trace_sched_exit_tp+0x36/0x110 [ 364.080257][T16607] ? __schedule+0x17ae/0x4cc0 [ 364.084953][T16607] ? __pfx_bnep_session+0x10/0x10 [ 364.089996][T16607] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 364.095939][T16607] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 364.102309][T16607] ? __pfx_woken_wake_function+0x10/0x10 [ 364.107990][T16607] ? __kthread_parkme+0x7b/0x200 [ 364.112961][T16607] ? __kthread_parkme+0x1a1/0x200 [ 364.118002][T16607] kthread+0x70e/0x8a0 [ 364.122112][T16607] ? __pfx_bnep_session+0x10/0x10 [ 364.127326][T16607] ? __pfx_kthread+0x10/0x10 [ 364.131940][T16607] ? rcu_is_watching+0x15/0xb0 [ 364.136723][T16607] ? __pfx_kthread+0x10/0x10 [ 364.141354][T16607] ret_from_fork+0x3f9/0x770 [ 364.145975][T16607] ? __pfx_ret_from_fork+0x10/0x10 [ 364.151120][T16607] ? __switch_to_asm+0x39/0x70 [ 364.155927][T16607] ? __switch_to_asm+0x33/0x70 [ 364.160791][T16607] ? __pfx_kthread+0x10/0x10 [ 364.165484][T16607] ret_from_fork_asm+0x1a/0x30 [ 364.170282][T16607] [ 364.173337][T16607] Modules linked in: [ 364.178612][T16607] ---[ end trace 0000000000000000 ]--- [ 364.188083][T16607] RIP: 0010:klist_del+0x49/0x110 [ 364.193194][T16607] Code: f6 49 89 dd 49 c1 ed 03 43 80 7c 25 00 00 74 08 48 89 df e8 09 5e b3 f6 4c 8b 33 49 83 e6 fe 49 8d 7e 58 48 89 f8 48 c1 e8 03 <42> 80 3c 20 00 74 05 e8 eb 5d b3 f6 4d 8b 7e 58 4c 89 f7 e8 bf 73 [ 364.213779][T16607] RSP: 0018:ffffc9001c10f768 EFLAGS: 00010202 [ 364.223697][T16607] RAX: 000000000000000b RBX: ffff88807d1ed860 RCX: ffff888067410000 [ 364.231938][T16607] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000058 [ 364.240144][T16607] RBP: ffffc9001c10f890 R08: ffff88802e6c5b43 R09: 1ffff11005cd8b68 [ 364.248168][T16607] R10: dffffc0000000000 R11: ffffed1005cd8b69 R12: dffffc0000000000 [ 364.256566][T16607] R13: 1ffff1100fa3db0c R14: 0000000000000000 R15: ffff8880502ee750 [ 364.264631][T16607] FS: 0000000000000000(0000) GS:ffff888125d1b000(0000) knlGS:0000000000000000 [ 364.273795][T16607] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 364.280762][T16607] CR2: 000055557c3e05c8 CR3: 0000000076e7c000 CR4: 00000000003526f0 [ 364.291195][T16607] Kernel panic - not syncing: Fatal exception [ 364.297601][T16607] Kernel Offset: disabled [ 364.301950][T16607] Rebooting in 86400 seconds..