last executing test programs: 46.201634813s ago: executing program 1 (id=3248): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5}, [@printk={@p, {}, {}, {}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x5}, {}, {0x85, 0x0, 0x0, 0x72}}, @call={0x85, 0x0, 0x0, 0x23}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={r2, 0xe0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f00000003c0)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x7, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x81, &(0x7f00000004c0)=[{}, {}], 0x10, 0x10, &(0x7f0000000500), &(0x7f0000000540), 0x8, 0xa1, 0x8, 0x8, &(0x7f0000000580)}}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffefb702000005000000b70300000000ff808500000004"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x52, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380)={r4}, 0xc) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000600)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="3103000000000000000004"], 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000040)=@ethtool_wolinfo={0x5, 0x0, 0x2, "0a08cf30c194"}}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r7) sendmsg$IEEE802154_ASSOCIATE_REQ(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x24, r8, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@IEEE802154_ATTR_COORD_PAN_ID={0x6}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0xc}]}, 0x24}, 0x1, 0x0, 0x0, 0x45}, 0xc400) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r11 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r11, 0x0, 0xb, &(0x7f00000000c0)=0xffeffff8, 0x4) sendto$inet(r11, 0x0, 0xffe5, 0xe000, &(0x7f0000000000)={0x2, 0x4e20}, 0x10) recvmmsg$unix(r11, &(0x7f00000000c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40002040, 0x0) setsockopt$CAN_RAW_FD_FRAMES(r11, 0x65, 0x5, &(0x7f0000000000), 0x4) sendmsg$ETHTOOL_MSG_DEBUG_SET(r9, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f00000002c0)=ANY=[@ANYBLOB="440000006ca98419f69b975bda031659eb68814429c915e125aa860cf3bb71349ff28a750a63473385248ac639579726c10cb10e27697e3643de176d25166ac3d122c54a3e117360418d4514b330891c51274b0c3378476d781748ffe05c521dfd1942cb094981edb721247d404e8e67914c4275325f5a343b3725c16caaeb2fad9bd91d48de9f37a32433", @ANYRES16=r10, @ANYBLOB="0100000000000003000008000000180001801400020073797a5f74756e0000000000000000001800028004000100100003800c0001800800010000000000"], 0x44}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r0) 45.9098352s ago: executing program 1 (id=3249): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x18, 0x1402, 0x1, 0x70bd2a, 0x25dfdc02, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000801}, 0x40810) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) setsockopt$inet_int(r3, 0x0, 0xa, &(0x7f0000000100)=0x9, 0x4) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) setsockopt$sock_int(r2, 0x1, 0x2a, &(0x7f0000000240)=0x8, 0x4) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000000), 0x6) ioctl$sock_bt_hci(r4, 0x800448d5, &(0x7f0000000100)) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x40000}, 0x1c) sendmsg(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)="1318371559927769d3", 0x9}], 0x1}, 0x40) recvfrom(r2, 0x0, 0x0, 0x99bcb88de02507f2, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="170000001e000100000000000000000007"], 0x28}}, 0x24008000) syz_emit_ethernet(0x3e, &(0x7f0000000540)={@local, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "000210", 0x8, 0x3a, 0x0, @remote, @mcast2, {[], @mlv2_report}}}}}, 0x0) ioctl$NILFS_IOCTL_GET_CPSTAT(r0, 0x80186e83, &(0x7f0000000000)) 45.593248822s ago: executing program 1 (id=3252): r0 = socket(0xa, 0x3, 0xff) sendmsg$unix(r0, &(0x7f0000001b40)={&(0x7f0000000140)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000001600)=[{&(0x7f0000000280)="c0beeda5a486001300f2ceff3bcd14ee4a98a520780c268eef47650f17d0e9a03233378888c474c5", 0x28}], 0x1, &(0x7f0000001a00)=[@rights={{0x10}}], 0x10, 0x448f569fa84bd46c}, 0x20000840) (async) r1 = accept4$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000000)=0x1c, 0x80000) setsockopt$sock_int(r1, 0x1, 0x38, &(0x7f0000000080)=0x8, 0x4) 45.450138054s ago: executing program 1 (id=3254): syz_emit_ethernet(0xe, &(0x7f0000000040)={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}, @void, {@generic={0x88f5}}}, 0x0) r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000000)={0x0, 0x2}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f00000000c0)={r1, @in={{0x2, 0x4e20, @multicast1}}}, 0x84) 45.339627771s ago: executing program 1 (id=3255): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b00010067726574617000002400028008000700640101000600030010"], 0x5c}}, 0x40) (async) r1 = gettid() (async) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@mcast1, @in=@initdev}}, {{@in6=@remote}, 0x0, @in=@empty}}, &(0x7f0000000200)=0xe8) sendmsg$nl_generic(r0, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000380)={&(0x7f0000000980)={0x147c, 0x38, 0x1, 0x70bd2d, 0x25dfdbfe, {0x1d}, [@generic="b10ea965ee088da1eef1b97c07fb58c6b38418c6fc11802cba085e1c594e465c2f4105819dcc31c144f43092650ebb9687988f95d1312d89d46bc8ec6e7930dd68bc8a8d25c5aa1422b0ae272a4b2d6ab85393437da9932882408f99d9407dbcbfcee36d3a2519777a567348b1958d45050cadb32ae3f9ce3e50824ff0fd5372e6fe86e5ed0799f9cc7edaa96fe095d8de1e5431df864bb11a634074bab09f188c3b48f1a7bddf41ad34cc1859dca291e4eff047e4e86f6012d3c4782bd82cfc4bf98ed37b4d244826cb7feb6666ad4ea35777e83567f3e2081da41e4f951973d0bdf2b019fd96f2a9d8e65b93d1f8935770409f", @generic="1bfd7c6e70c04e26ea86210d611a3de7088c5822db9c361fe4a0753a94a3b97b9a6cfa6ca665eff0cf4712fe1a81309acd50b2", @nested={0x2cb, 0xf6, 0x0, 0x1, [@nested={0xdf, 0x23, 0x0, 0x1, [@typed={0x8, 0xcd, 0x0, 0x0, @pid=r1}, @typed={0x8, 0x107, 0x0, 0x0, @u32=0xfff}, @nested={0x4, 0x140}, @nested={0x4, 0x7b}, @typed={0x16, 0x36, 0x0, 0x0, @binary="8ac661ca1925325f768cac64db248bb358c2"}, @generic="cd5940fc105828e7faa011bf86e7c62b8143a74b29c4ce5c3b44254d6c1bef01023547aa50d6e0bb9df6dd7f7b474a2062f6ad55064ee62c514a1c0cb80ddb0d08433935affe07ea651e0b04381b54b9a0911f585579af9c64a611868f930c2821956941e8908d40a57394430195ca534202d57b5568bb1bc71ffaf9dd9e7a0084c7e57b5ef556a9cab25e7938b95d067427b4337a595d1e7b0d557f2dfc752fb30a96ef290f96", @nested={0x4, 0x41}]}, @generic="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", @nested={0xce, 0x37, 0x0, 0x1, [@nested={0x24, 0x94, 0x0, 0x1, [@nested={0x20, 0x82, 0x0, 0x1, [@typed={0x8, 0x81, 0x0, 0x0, @u32=0x2}, @nested={0xc, 0x53, 0x0, 0x1, [@nested={0x4, 0x8b}, @typed={0x4, 0x13b}]}, @typed={0x6, 0x56, 0x0, 0x0, @str='\xda\x00'}]}]}, @generic="a98a983fa0e58f45e791058eb8bf2782e8f31f59a3d2f44600f2f36d7dccf6ae5df260377ed84b7281c1f423affba61c2b427132e0fde8e1aae24310b4098ec76ad0eb6d31297109250095310fc5de9144bbd39bd9c4e6c6cc9c5efe5792c7e8cdecc2d5f0b8b829d1a13c465864821f3f63d14d04c4caa5f057cb229a76e16756785e97eadd63110c1dcee0fe5ebad1cd07c5bf091b", @nested={0x4, 0x163}, @typed={0xc, 0x25, 0x0, 0x0, @u64=0x9}]}, @nested={0x10, 0x8c, 0x0, 0x1, [@typed={0x7, 0x56, 0x0, 0x0, @str='{-\x00'}, @nested={0x4, 0x1}]}, @generic="7c142de442657f73a17c"]}, @nested={0x3f, 0x36, 0x0, 0x1, [@generic="d9c8d7ada82db55f1410fdfa7d2d8d842140f4516af06d2c56276eca6d1a04a45fb200", @typed={0x8, 0x23, 0x0, 0x0, @pid=r1}, @typed={0x8, 0x100, 0x0, 0x0, @ipv4=@broadcast}, @typed={0x8, 0x6f, 0x0, 0x0, @fd=r0}]}, @typed={0x8, 0x159, 0x0, 0x0, @str='\x00\x00\x0e\x00'}, @nested={0x10, 0xd6, 0x0, 0x1, [@typed={0xc, 0x71, 0x0, 0x0, @u64=0x6}]}, @nested={0x100e, 0xdc, 0x0, 0x1, [@generic="d523f1d7f5d210bbae2c", @generic="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"]}, @typed={0xc, 0x71, 0x0, 0x0, @u64=0x1}]}, 0x147c}, 0x1, 0x0, 0x0, 0x404c010}, 0x4) 45.133177884s ago: executing program 1 (id=3257): r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_inet_SIOCRTMSG(r1, 0x890d, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xb, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000fdffffff850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x1000000, 0xdc0, 0x0, &(0x7f0000000400)="e0b9547ed387c6e950a4e1f95bec", 0x0, 0xf, 0x0, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x18) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x18, 0x1411, 0x828949ab3fe143d7, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8}]}, 0x18}}, 0x0) 29.215798708s ago: executing program 3 (id=3337): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6(0xa, 0x2, 0x2) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000040)=0xbe8, 0x4) setsockopt$sock_attach_bpf(r0, 0x1, 0x4c, &(0x7f0000000000), 0x4) r2 = socket$nl_rdma(0x10, 0x3, 0x14) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0x1, &(0x7f00000007c0), 0x4) socket$inet6_mptcp(0xa, 0x1, 0x106) sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffde4}, 0x40000) recvmsg$unix(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x2000) ioctl$sock_inet_tcp_SIOCINQ(r4, 0xff02, 0x0) 28.030628476s ago: executing program 3 (id=3341): r0 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$802154_dgram(r2, &(0x7f0000000cc0)={0x0, 0x48, &(0x7f0000000040)={&(0x7f00000002c0)="05000000b92ba9e375f3d5a1fc0751577daff448fb417eb76377c3075661e57f6a1ad88443faf85a902e03e4c4e68c258b10a733e428ae2cd65cf9e52e6a23541f4bc6970df209050bf052c6624effea5f1e99ad3d96ed78ff3f524af2c90d5643d563b4f469a937cccad6efa449da086721a42a6616eb56afdf6e1e977964a59a007754d9a22bf26ddb67fb3cd24af531bb3a42a0532ff51473993bd4fb62b7fae1a02f982796fe3df1f080196ff1db13e62950561bf6330ce41dde70f59450a43a0e5678b45689b989d46e9e242cc89f34cd04c4e22e5cc1f1035c5010fd47be95ca79f9a85bf56011d8397d00"/253, 0x1}}, 0x20000855) recvfrom(r1, &(0x7f0000000100)=""/23, 0x17, 0x120, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r3) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0700000000000000000005000000180001801400020073797a5f74756e007afa2f9186761f5cdd331300000000000000000c0003800400038004000100"], 0x38}}, 0x0) r5 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB="48000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r6, @ANYBLOB="0a0001"], 0x48}}, 0x0) 27.215342028s ago: executing program 4 (id=3348): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="540000001800010400000000000000000a000000fe030001000000000800040001000000060015000700000028001680080001000200000014"], 0x54}}, 0x0) syz_emit_ethernet(0x6a, &(0x7f0000000000)=ANY=[@ANYBLOB="0580c20000000180c200000008004510005c00000000002f90780000000000000000248065580000000010"], 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000190001000000000000000000021800000000fd000000ed0008000100ac1414000800080004"], 0x2c}}, 0x0) sendto$inet6(r1, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000140)={0x0, r0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000711294000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2a, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 26.930947574s ago: executing program 2 (id=3349): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) write(0xca, &(0x7f0000000040)="040e0c000320", 0x6) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a300000000040000000030a01080000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d657461000000001400028008000140000000120800024000000019140000001100", @ANYRES16=r1], 0xd8}, 0x1, 0x0, 0x0, 0x40000}, 0x4000010) (async) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) (async) getsockname$packet(r4, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001840)=@newtfilter={0x40, 0x28, 0x575ac7824d421509, 0x70bd29, 0x4, {0x0, 0x0, 0x0, r5, {0x9}, {0xffff}, {0x10, 0x5}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x3, 0xfff2}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x11}, 0x40) (async) r6 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r6, &(0x7f0000000140), 0x4924b68, 0x0) (async) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000002c0), 0x4) (async) syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async) r7 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r7, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @remote}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x4c080) sendmsg$kcm(r7, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) (async) write$tun(0xffffffffffffffff, 0x0, 0x141) (async) r8 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind$inet6(r8, &(0x7f0000000240)={0xa, 0x2, 0x1000, @empty}, 0x1c) (async) connect$inet6(r8, &(0x7f00000000c0)={0xa, 0x4e1f, 0x2200005, @local, 0x1}, 0x1c) (async) syz_emit_ethernet(0x3e, &(0x7f0000000300)=ANY=[@ANYBLOB="0180c20000030180c200000086dd6100000000083aff00006dbbb30ce3671bc2e99f1f0000000000000000ffffac1e0001ff0200000000000000000000000000018100907800020004"], 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r6, 0x6, 0x14, &(0x7f0000000100), 0x4) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f0000000180)=@gcm_128={{0x304}, "0100008000", "149549338ebfc6ac106613634ae5b78e", "64fe57c7", "2eb7dd09e154b2a9"}, 0x28) (async) sendmsg$inet6(0xffffffffffffffff, 0x0, 0x800) (async) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYRES64=r0, @ANYRES32], 0x58}, 0x1, 0x0, 0x0, 0x44004}, 0x20004080) (async) connect$l2tp(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x29}, 0x1}, 0x10) 26.930158864s ago: executing program 3 (id=3350): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c00018006000600800a000014000280100014800c001580"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, r3, 0x1, 0x70bd2a, 0x25dfdbfd, {{}, {}, {0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x4001}, 0x40000) sendmsg$TIPC_CMD_SET_NODE_ADDR(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r3, 0x300, 0x70bd26, 0x25dfdbfe, {{}, {}, {0x8, 0x11, 0xffff}}, ["", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x48044}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)) 26.638512623s ago: executing program 4 (id=3351): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000002a0000000100000000000001040000002000000105000000010000040400000013000000010000000000000017000000020000040800000021000000010000000000000025000000020000002000000000696e74006270665f7370696e5f6c6f636b0076616c006d61705f76616c756500636e74006c"], 0x0, 0x8e}, 0x28) ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f0000000000)='cgroup\x00', 0x101, 0x0, 0xf, 0x0, 0x0}) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r1, &(0x7f0000000080)='memory.swap.max\x00', 0x2, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000040)='pids.max\x00', 0x2, 0x0) sendfile(r3, r3, 0x0, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0200000004000000080000000100000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000004ef3b3be25f02ba2a3b099023be6f54f5816bca1c60411a037a250061bfbd0231daa6ee0065a325d1a399fdef7a7eff23c4a", @ANYRES64=0x0, @ANYRES32=r0, @ANYRES16=r2, @ANYRES32=r3], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x3, 0x10, &(0x7f0000000400)=ANY=[@ANYBLOB="bfa200000000000007020000fcfeffff620200000000000018110000", @ANYRES32=r4, @ANYBLOB="000000000000000085000000010000001500070000000000bf06000000000000bf610000000000000701000004000000850000005d000000bf61000000000000070100000400000085000000c2000000b70000000000000095"], &(0x7f0000000500)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 26.548354105s ago: executing program 0 (id=3352): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000140)={'ip6_vti0\x00', r3, 0x2f, 0x5e, 0x1, 0x7, 0x40, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local, 0x8000, 0x7800, 0xc, 0x8}}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001300)=@deltfilter={0x122c, 0x2d, 0x200, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0x13, 0x1}, {0x1, 0xfff2}}, [@TCA_RATE={0x6, 0x5, {0x5, 0x6}}, @TCA_CHAIN={0x8, 0xb, 0x3}, @TCA_CHAIN={0x8, 0xb, 0x8}, @TCA_CHAIN={0x8, 0xb, 0x400}, @filter_kind_options=@f_route={{0xa}, {0x11c4, 0x2, [@TCA_ROUTE4_ACT={0x1198, 0x6, [@m_ct={0x150, 0x13, 0x0, 0x0, {{0x7}, {0x4c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x6, 0x101, 0x0, 0x10000, 0x9}}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @dev={0xac, 0x14, 0x14, 0x44}}, @TCA_CT_ZONE={0x6, 0x4, 0x101}, @TCA_CT_PARMS={0x18, 0x1, {0xff, 0x5, 0x5, 0x400, 0x2}}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e22}]}, {0xdd, 0x6, "d441694862e5451d1f0cf0ef5ae63121399f8502a62e8ca1512a8058fdb17bda7e667837dedd74fd2653f5a4ee5cd28219c3aad97291289af96d0b4152cd3a57e93759832aab302bf885fae41bb9907ff9af1a670af009a408ef128904eb359b2cce10db39419b427d1d2ec339b5ab3841e1abf40583cc94043e8395bbb5209ac63631aa86c35ab0c24fd306f7ce704a7e7d2b1f6987db7d8aecf82730823855a5e0fc5f2e5f41fe532cad305736f0d6f1676c64208f1a2601114c20806857f0665106fbeb5c92c4daacea20ab26566d83ed21342edd6a907e"}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}, @m_vlan={0x134, 0x1d, 0x0, 0x0, {{0x9}, {0x7c, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x2, 0x2, 0x1, 0x40, 0x1ff}, 0x2}}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x0, 0x9, 0x5, 0x7, 0x1}, 0x1}}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x8, 0x3fa9, 0x20000000, 0x1ff, 0xfff}, 0x3}}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0xad72, 0x5, 0x4, 0xdfd, 0xe22}, 0x1}}]}, {0x8e, 0x6, "3a8f484e2c20f4d5db35033707b537d802de198ada5f3fc667beba61d655d0a0028fe86a98ce2cca1fe6fa428d7f74b2428976624e37f343f4d290d60af722107fc8b9ee8aa7728ec50a626d9fd899b3971c9843a575ea982368baa39b4c192a8171af1afeffa7e5d0360a13304894e2e24c61ba47ad261e0a7d39b1340aeb114d69cb6427e10a33639b"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_pedit={0xf10, 0x13, 0x0, 0x0, {{0xa}, {0xea4, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x68, 0x5, 0x0, 0x1, [{0x24, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x34, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}]}, @TCA_PEDIT_PARMS_EX={0xe38, 0x4, {{{0x1, 0xffffffb4, 0x1, 0xf, 0x7}, 0x1, 0x1, [{0x8, 0x6, 0x8500, 0x4, 0x214, 0xffffffff}]}, [{0x3ff, 0x4, 0x2, 0xffffffff, 0x6, 0x2}, {0xfffffffc, 0x4, 0x7fff, 0x90, 0xa, 0x6}, {0xffffffff, 0x31e, 0x5, 0x0, 0xf39, 0x69}, {0x5, 0xb2, 0x7, 0x8, 0x3, 0xa}, {0x8001, 0x10001, 0x4, 0x0, 0x7f, 0xf}, {0x5, 0x4, 0x400, 0x8, 0xdb, 0x68}, {0x3dc, 0x2, 0x2, 0xa1, 0x5, 0x5}, {0x3, 0x4000000, 0x7, 0x3, 0x5, 0x8}, {0x80000, 0x1, 0x3, 0x561, 0xfffffffb, 0x3}, {0x8, 0xfffffffa, 0xfe1d, 0x7, 0x42c8, 0x4e57b6bb}, {0x0, 0x2, 0x9, 0x1, 0x200, 0x759b}, {0x4, 0x28, 0x8, 0xff, 0x6, 0x3ff}, {0x9, 0x4, 0x5, 0x9, 0xffff7eba, 0x3}, {0x3, 0x1, 0x1, 0x2, 0x7, 0x3}, {0x40, 0xfff, 0x6, 0xd9, 0x0, 0x7fff}, {0x9, 0x3, 0x1, 0x7, 0x6, 0x1}, {0x4, 0x3, 0x7fffffff, 0x7, 0x10}, {0x0, 0x0, 0xaf, 0x80000001, 0x5, 0x6}, {0x4cb, 0xd52b, 0x101, 0x1, 0x4, 0x3}, {0x0, 0x7ff, 0x5, 0x40, 0x5, 0x1}, {0x8, 0x4, 0x1ff, 0x0, 0x8, 0xd}, {0x12b9, 0x81, 0x4, 0x36ce6cfd, 0x3, 0x80000000}, {0x5, 0x52, 0x3, 0x7, 0x50, 0x1}, {0x6, 0x2, 0x5, 0x3, 0x3, 0x800}, {0xa2, 0x79, 0x6, 0x3, 0xe, 0x200}, {0x5, 0x7, 0x8, 0x80, 0x9, 0x9}, {0x7, 0xea59, 0x0, 0x2, 0x80000001, 0x2}, {0x2, 0xd, 0xe, 0xe, 0x2, 0x9d}, {0x0, 0x200, 0x9, 0x0, 0x61, 0x35c}, {0x8001, 0x18e99118, 0x3, 0x0, 0x1, 0xffff0001}, {0x800, 0x100, 0x8, 0x2, 0x6, 0xe}, {0x7f, 0x2, 0x1, 0x0, 0x5, 0x8}, {0x2, 0xf55e, 0x7, 0xfbbf, 0x2, 0x5}, {0x8, 0x51, 0x6, 0x2, 0x3, 0x10001}, {0x2, 0x7, 0x4, 0x2, 0x4}, {0x7, 0xfffffffa, 0x2, 0xff, 0x58, 0x4}, {0x7f, 0x9, 0x3, 0x5, 0x9}, {0xffff, 0x2, 0x5, 0x3, 0xffff0000, 0x1}, {0x3, 0x7ff, 0x0, 0x100005, 0xff, 0x5}, {0x4, 0x401, 0xd, 0x4000000, 0x8, 0x72}, {0xdc, 0x6, 0x401, 0x3, 0x13ea, 0xfffffffe}, {0x86, 0x7fffffff, 0x100, 0x0, 0x9, 0x5}, {0xc000, 0x2, 0x6d2f6e4f, 0x9, 0x5, 0x5}, {0x5, 0x13f, 0x733, 0x3, 0x8, 0xc25}, {0x3, 0x380c, 0x9, 0x1, 0x7, 0x4}, {0x2b, 0x65, 0x0, 0x2, 0x1000, 0x10001}, {0xfffffffd, 0x2, 0x0, 0x5, 0x1, 0xb34}, {0x9, 0x40, 0x401, 0x80, 0x3ff, 0x6}, {0x9, 0x3, 0x1, 0x1ff, 0x2, 0xc6b1}, {0x6, 0x4, 0x3, 0x0, 0x7, 0x4}, {0x0, 0x0, 0xf168, 0x2, 0x10000, 0xc}, {0xffffffff, 0x6e, 0x40800, 0x1, 0x79d6, 0x2}, {0x4, 0x2, 0x81, 0x6, 0x64c, 0xff}, {0x6, 0x8c, 0x7ff, 0xd4, 0xb, 0x4}, {0x5, 0x1, 0x86f, 0xffffff7f, 0x665, 0x9}, {0x1, 0x4, 0x9, 0x2, 0x80, 0x1}, {0x100, 0x4, 0x4b, 0x8, 0x4, 0x7}, {0x4000, 0x1b, 0x0, 0x6, 0x0, 0x7fff}, {0x8, 0x1, 0x6, 0x6, 0x7, 0x19}, {0x2, 0x5, 0x63, 0x1, 0x6, 0x4}, {0x5, 0x7, 0x10001, 0x80, 0x2, 0xe5}, {0xaeb8, 0x10000, 0x9, 0x1, 0x80, 0x5}, {0x36, 0x4, 0x461d, 0xa07, 0x2, 0x7}, {0xa, 0x6f, 0x0, 0x3, 0x4, 0xfff}, {0x6, 0x9, 0x1, 0x3, 0x10000, 0x987c}, {0x3, 0x0, 0x40, 0x4, 0x2, 0xf}, {0x0, 0xa, 0x7fffffff, 0x1, 0x66, 0xfffffff8}, {0x4, 0x2, 0x2, 0x3, 0x8, 0x8001}, {0x3ff, 0x40, 0x7, 0x4, 0x8, 0x8000}, {0x9, 0x9e4, 0x59fe, 0x7, 0xe4b, 0x7fffffff}, {0x3, 0x35d96a62, 0x4, 0x1, 0x48ba, 0x5}, {0x0, 0xf2e6, 0x0, 0x10001, 0x0, 0x6}, {0xa, 0xc83, 0x4, 0x7ea4, 0x7, 0xffff0001}, {0x0, 0x5, 0xfffffff9, 0xa, 0x5, 0xd}, {0x3, 0x7, 0xffff00b2, 0x40, 0x7f, 0x9}, {0x80, 0x2, 0x0, 0xef7, 0xc0d7, 0x1}, {0x8, 0x4, 0x4, 0xa422, 0x9, 0x4}, {0x8, 0x5, 0x9, 0x1ff, 0x0, 0x7}, {0xeb5cf300, 0x7fffffff, 0x9, 0x5, 0x3, 0x5}, {0x200, 0x9, 0x8, 0x1000, 0x10001, 0x1ff}, {0x800, 0x1000, 0x1, 0x49ef8, 0x1000, 0x3}, {0x0, 0x70000000, 0xffff, 0x7fff, 0xb, 0xec2}, {0x0, 0x7, 0x3, 0x0, 0x3ff, 0xfffff958}, {0x5, 0xf70, 0x6, 0x4, 0x3, 0x4}, {0x7fffffff, 0x10, 0x4, 0x7df, 0xb4a8, 0x80}, {0x5, 0x9, 0x3, 0x7, 0x6, 0x8000}, {0xeef, 0x2, 0x3ff, 0x1, 0x3}, {0x9, 0x5, 0x8, 0x800, 0x4, 0xb}, {0xc, 0x1400, 0x70, 0x200, 0x1, 0x8}, {0x4, 0x6, 0x5, 0x2, 0x2, 0x1}, {0x8, 0x0, 0x5, 0x9, 0x6, 0x80000001}, {0x0, 0x3, 0x6, 0x5, 0x80000001, 0x9}, {0x604, 0x5, 0xfff, 0x4, 0x3, 0x3}, {0x3, 0x7, 0x0, 0x5, 0x4, 0x5}, {0x5, 0x7, 0x5, 0x101, 0x7, 0x5}, {0x514, 0x75a6, 0x10001, 0x6, 0x2}, {0x1, 0x7, 0xfffffff6, 0x7, 0x1bb0000, 0x1}, {0x8000, 0x8, 0x4, 0xc, 0x1, 0x4}, {0x80, 0x80, 0x2, 0xe, 0x6, 0x4}, {0x7ff, 0x0, 0xb, 0x0, 0x8, 0x40}, {0x6, 0x3, 0x9, 0xa, 0x8, 0x3}, {0x14, 0x9, 0x8, 0x4, 0x7, 0x5}, {0x5, 0xfffffff9, 0x5, 0x10001, 0xea31, 0x1}, {0x80000000, 0xd5, 0x7fffffff, 0x3, 0x514998c8, 0x2}, {0x0, 0x3ff, 0xfffffff2, 0x5e, 0x3ff, 0x7f}, {0xd9, 0x740c, 0xff, 0x6f3, 0x3ff, 0x1}, {0x3ff, 0x1, 0x4, 0x6, 0xec1, 0x6}, {0x7, 0x4, 0x4, 0x52f9617b, 0x4, 0x8}, {0x4, 0x9, 0x200, 0x5, 0x3ff, 0x1}, {0x2, 0x3, 0x1, 0x4, 0x101, 0x10001}, {0x1000, 0x4, 0x7, 0x9, 0x8, 0xc1d3}, {0xfffffc39, 0x8, 0x1, 0x2, 0x5, 0x4}, {0x2aa5d619, 0x8bd, 0x6, 0xe, 0xffffff60}, {0x9, 0xffffffff, 0x7b4c, 0x1, 0xdc, 0x512}, {0x1, 0xf8, 0x400, 0xff, 0xfffffff7, 0x7ee}, {0x1, 0xd5, 0x9, 0x255c000, 0x8, 0xff}, {0x7, 0x4, 0x3, 0x9, 0x4, 0x3}, {0x7ff, 0x1ff, 0xc0, 0x7ff, 0xe1, 0x5}, {0x5, 0x8, 0x7, 0xb, 0xb, 0x3}, {0x9, 0x7, 0x5, 0x7, 0x10000, 0xfffffff7}, {0x3936, 0x7, 0x1ff, 0x7a3, 0x2, 0x6}, {0xe, 0x400, 0xfffffffb, 0x3f, 0x6, 0x8}, {0x7, 0x9, 0x400, 0xeb32, 0x2, 0x3}, {0x8, 0x780, 0xfffffb5b, 0xea, 0x2, 0x7f}, {0x7, 0x1, 0x6, 0x5, 0x101, 0x6}, {0x2, 0x7fffffff, 0x6, 0x4, 0x9, 0x10}, {0x1, 0x2872, 0xb58, 0xb57, 0x7, 0xf63e}, {0x0, 0xfff, 0x1, 0x359, 0x6, 0xfffffff8}], [{0x4}, {0x2, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x3}, {0x4}, {0x5, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x3}, {0x2, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x4, 0xdd09543a404481ae}, {0x4}, {0x0, 0x1}, {0x0, 0x1}, {0x4}, {0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x3}, {0x4}, {0x4, 0x1}, {}, {}, {0x2, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x2}, {0x4, 0x1}, {0x2}, {0x5, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x2}, {0x2, 0x1}, {0x2, 0x1}, {}, {0x4}, {}, {0x2, 0x1}, {}, {0x2}, {0x5, 0x1}, {}, {0x5}, {}, {0x1}, {0x4}, {0x4}, {0x1, 0x1}, {0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x3}, {0x5, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x2}, {0x1}, {0x4, 0x1}, {0x4}, {0x2}, {0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x5}, {0x3}, {0x2}, {}, {0x5, 0x1}, {0x2, 0x1}, {0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x5}, {0x1, 0x1}, {0x7, 0x1}, {}, {0x2, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {}, {0x3}, {0x2, 0x1}, {0x2, 0x1}, {0x5}, {0x2}, {0x1, 0x1}, {0x2}, {0x4}, {0x2}, {0x3, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {}, {0x2}, {0x2, 0x1}, {0x0, 0x1}, {0x1}, {0x2}, {0x3, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x1, 0x1}], 0x1}}]}, {0x41, 0x6, "af44f54c39e6dd3c85dd8aa1639b71f5e7cb7d79557e78d0dc68fdafd90465a709f863c872ef626be4917e8bf70deb77b438f2f69a1b53bb7c63fe9000"}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}, @TCA_ROUTE4_CLASSID={0x8, 0x1, {0xffe0, 0x8}}, @TCA_ROUTE4_CLASSID={0x8, 0x1, {0xb, 0x1}}, @TCA_ROUTE4_IIF={0x8, 0x4, r4}, @TCA_ROUTE4_CLASSID={0x8, 0x1, {0xf}}, @TCA_ROUTE4_IIF={0x8, 0x4, r3}]}}, @TCA_RATE={0x6, 0x5, {0x4e, 0x2}}, @TCA_CHAIN={0x8, 0xb, 0x8}, @TCA_RATE={0x6, 0x5, {0x1f, 0x1}}]}, 0x122c}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$sock_buf(r6, 0x1, 0x1c, 0x0, &(0x7f0000000040)=0xfc) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=@newqdisc={0x58, 0x28, 0x4ee4e6a52ff56541, 0x5001, 0xfffffdfc, {0x0, 0x0, 0x0, r8, {0x2}, {0xffff, 0xfff1}, {0x4, 0xfff2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x0, 0xdb, 0x7ff, 0x400, 0x9, 0x6, 0x2, 0xfffffffb, 0xc00000}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40098}, 0x20000000) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, 0x0, 0x4c040) 26.353191569s ago: executing program 4 (id=3353): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$XFS_IOC_FD_TO_HANDLE(r0, 0xc038586a, &(0x7f0000000580)={r0, &(0x7f0000000300)='+\'\x00', 0x40040, &(0x7f0000000340)={@align=0x8, {0x900, 0xffff, 0x7, 0x7fffffffffffffff}}, 0x2, &(0x7f00000003c0), &(0x7f00000004c0)=0x4}) bind$vsock_stream(r1, &(0x7f00000005c0)={0x28, 0x0, 0x2710, @hyper}, 0x10) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0xffffffffffffff5e, &(0x7f0000000ac0)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x4) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000009b40)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a98000000060a010400000000000000000a0004050900010073797a31000000006c000480680001800a000100696e6e6572000000580002800800044000000017340005800c0001007061796c6f6164002400028008000340400000920800024000000000080004400000000008000140000000110800034000000002080002400000008408000140000000000900020073797a32"], 0xc0}, 0x1, 0x0, 0x0, 0x8890}, 0x20000000) (async) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) (async) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000380), r5) r8 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x1a, &(0x7f0000000240)={0x2, &(0x7f00000000c0)=[{0x9c}, {0x6}]}, 0x10) ioctl$sock_FIOGETOWN(r8, 0x8903, &(0x7f00000000c0)) sendmsg$IEEE802154_LLSEC_DEL_KEY(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010029bd7000fedbdf252800000008000200", @ANYRES32=r6, @ANYBLOB="a80b0700000003000000366b00064001"], 0x2c}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=@newlink={0x50, 0x10, 0x403, 0x70bd27, 0x3, {0x0, 0x0, 0x0, 0x0, 0x90446}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x1}, @IFLA_VLAN_INGRESS_QOS={0x4}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x8100}]}}}, @IFLA_LINK={0x8, 0x5, r10}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000600}, 0x0) sendmsg$nl_route(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="5800000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0880000008440000300012800b00010067656e65766500001e0002801400070000000000000000000000000000000001050004000100000008000a00", @ANYRES32=r4, @ANYBLOB], 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 26.190421092s ago: executing program 2 (id=3354): sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4800000041000501010000000000000003010000000000001c0001000600060008000000100007"], 0x48}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000140)=ANY=[@ANYBLOB='8\x00\x00\x00U\x00=\t\x00\x00\x00\x00\x00\x00\x00\x00\a\x00\x00\x00', @ANYRES32, @ANYBLOB="050001"], 0x38}}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{0x1, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f00000000c0)}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xd, 0x5, 0x0, 0x7, 0x0, r2, 0xffffffff}, 0x50) 26.016133285s ago: executing program 0 (id=3355): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4058587a, &(0x7f0000000200)={{r0, &(0x7f0000000040)='\xaa\xaa\xaa\xaa\xaa', 0x80000, &(0x7f0000000080)={@_ha_fsid={[0x9, 0x7fff]}, {0x0, 0x1, 0x7fffffff, 0x5}}, 0xe26, &(0x7f00000000c0)={@_ha_fsid}, &(0x7f0000000140)=0xdd}, {[0x6, 0x4d64, 0x8, 0xb]}, 0xa, 0x51, &(0x7f0000000180)=""/81}) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={@ifindex, 0xa, 0x0, 0x5, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000480)={'ip6gre0\x00', &(0x7f0000000400)={'syztnl1\x00', 0x0, 0x2f, 0x2, 0x4, 0x1, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x40}, 0x8000, 0x7800, 0x6a8, 0x8}}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="10000000040000000800000002"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r5}, &(0x7f0000000080), &(0x7f0000000240)=r6}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r6, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000280)="b9ff03076804268c989e14f088a8", 0x0, 0x800, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x50) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000003c0)={@ifindex=r3, r1, 0x9, 0x0, 0x0, @void, @value=r6, @void, @void, r2}, 0x20) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x40d, 0x0, 0x0, {0x0, 0x0, 0xc3, 0x0, 0x0, 0x58049}, [@IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'macvlan0\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x8000) 25.7944293s ago: executing program 3 (id=3356): socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x0, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x0, 0x0, 0x0, {{0xffffffffffffff4e}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_PSAMPLE_GROUP={0x0, 0x5, 0x4}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x1, 0x0, 0xe, 0x0, 0x80000}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1}}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4008085}, 0x20040000) r0 = socket$nl_route(0x10, 0x3, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x4e22, @multicast2}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xbf22}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r1, &(0x7f0000000140), &(0x7f0000000080)=@udp}, 0x20) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r0, @ANYBLOB="08000100", @ANYRES32=r2], 0x90}}, 0x0) 25.525680276s ago: executing program 2 (id=3357): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0xe24, 0x0, @empty, 0x80002}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000200), 0x3) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000040)=@gcm_256={{0x304, 0x36}, "00001f880000dbaa", "a504eb69a751e9d7e9fb434d1665e900000000ffffff7f00", '\x00\t\x00', "a301fbcf1fe65504"}, 0x38) writev(r0, &(0x7f0000002640)=[{&(0x7f0000000240)="94c0020187f2c020372deb2b10efa3f826217c4fd01e8dd1bc4758ee45eed79322186fee88", 0x25}, {&(0x7f00000002c0)="b961d5ffe0e8", 0x6}, {&(0x7f0000001400)="4d58d0d333adb8b2cc24c48bc1b7ec65a3cd1fb3c538f9e33d3d2530a34258029282c82a27ca2da931f4e7f8e456e512a97d454f07a1a9a85da1fa23134a4abf51018acf", 0x44}, {&(0x7f0000001480)="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", 0x211}], 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x10, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x7, 0x20}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, 0x8}, 0x94) 25.493753693s ago: executing program 4 (id=3358): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) (async, rerun: 32) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x30, r2, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x214e}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x890) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x2c, 0x2d, 0x107, 0x0, 0x25dfdbff, {0x8, 0x7c}, [@nested={0x8, 0x1, 0x0, 0x1, [@typed={0x4, 0x6}]}, @nested={0xc, 0x2, 0x0, 0x1, [@typed={0x8, 0x2, 0x0, 0x0, @fd=r3}]}, @nested={0x4, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40500000006000061104c00000000005f500000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x3}, 0x2f) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4001, 0xfffffffe, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3d}, 0x1c) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'ccm(aes)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000080)="046bf184b7b7f1a55a5a9c11a44b7193cf786d2f6e3e7d299a814d1a26591bf94e10", 0xfffffffffffffd33, 0x0, 0x0, 0x0) (async) sendmmsg$inet6(r0, &(0x7f0000005840)=[{{0x0, 0x0, &(0x7f0000000980)=[{0x0}, {0x0}, {&(0x7f00000006c0)="2e826f42ebcfca23d29c3605dbb299f1884b78c57ef1f54b8d9dcc625e86c927919e47d4e14d59ff5e382b45b97fcd16ded33bd6", 0x34}], 0x3}}, {{0x0, 0x0, &(0x7f00000051c0)=[{&(0x7f0000004f80)="a5", 0x1}], 0x1}}], 0x2, 0x10) 25.430676161s ago: executing program 0 (id=3359): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYRES16=r1], 0x7c}, 0x1, 0x0, 0x0, 0xc005}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40ffffff07000000400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x20004015}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a01010000000000f9ff000a0000090900020073797a31000000200900010073797a310000000014000380100000800c00018006000100582e000014000000110001"], 0x68}, 0x1, 0x0, 0x0, 0x4004850}, 0x40) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2c, 0xd, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) 25.12933461s ago: executing program 2 (id=3360): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWSETELEM={0x58, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x2c, 0x3, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x2df31ab3}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x81}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x80}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'gretap0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x25dfdbfd, {0x60, 0x0, 0x0, r3, {0x0, 0x5}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x18, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x2}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x3}]}}]}, 0x48}}, 0x0) socket(0x10, 0x3, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWSETELEM={0x58, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x2c, 0x3, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x2df31ab3}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x81}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x80}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'gretap0\x00'}) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x25dfdbfd, {0x60, 0x0, 0x0, r3, {0x0, 0x5}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x18, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x2}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x3}]}}]}, 0x48}}, 0x0) (async) 24.941488807s ago: executing program 0 (id=3361): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000000340)={0x2, 0x4e22, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000080)={0x0, 0x5, 0x2, 0x1}, &(0x7f0000000100)=0x10) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000bc0)=@raw={'raw\x00', 0x3c1, 0x3, 0x308, 0x0, 0x4c, 0x1a, 0x0, 0x73, 0x238, 0x258, 0x258, 0x238, 0x258, 0x3, 0x0, {[{{@ipv6={@private0, @local, [], [], 'dvmrp1\x00', 'macvlan1\x00', {}, {}, 0x73}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0xff, 0x0, 0x7}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{}, {0x0, 0x20}}}}], {{'\x00', 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x5400}}, {0x28}}}}, 0x368) setsockopt$inet6_int(r2, 0x29, 0x9, &(0x7f0000000040)=0x100, 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000001c0)=ANY=[@ANYBLOB="180000002f00090028bd7000010000000400400004000d"], 0x18}, 0x1, 0x0, 0x0, 0x42804}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_freezer_state(r4, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r5, &(0x7f0000000040)='FROZEN\x00', 0x7) mkdirat$cgroup(r4, &(0x7f00000000c0)='syz1\x00', 0x1ff) mkdirat$cgroup(r4, &(0x7f0000000100)='syz0\x00', 0x1ff) sendfile(r5, r5, 0x0, 0x9) syz_emit_ethernet(0x18, &(0x7f0000000100)=ANY=[@ANYBLOB="0180c2000021001122334455000a42420300010102"], 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffdb7}, 0x48) 24.297104921s ago: executing program 4 (id=3362): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000040)={0xa}, 0x8) shutdown(r0, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000a80)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYBLOB="953a04"], 0x24}}, 0x0) recvmmsg$unix(r1, &(0x7f0000002a40)=[{{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000640)=""/249, 0xf9}, {&(0x7f0000004480)=""/4098, 0x1002}, {&(0x7f0000000740)=""/13, 0xd}, {&(0x7f00000003c0)=""/97, 0x61}, {&(0x7f00000001c0)=""/104, 0x68}, {&(0x7f0000000540)=""/130, 0x82}, {&(0x7f00000009c0)=""/133, 0x85}], 0x7}}], 0x1, 0x40, 0x0) write(r1, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000080000000000", 0x14) 24.032539577s ago: executing program 3 (id=3363): r0 = socket(0x10, 0x3, 0x0) (async) r1 = socket(0x400000000010, 0x3, 0x0) getsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000080), &(0x7f00000000c0)=0x8) (async) r2 = socket$can_j1939(0x1d, 0x2, 0x7) socket$inet6_icmp(0xa, 0x2, 0x3a) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$can_j1939(0x1d, 0x2, 0x7) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000280)={0x1d, r5, 0x2, {0x0, 0x1, 0x2}, 0xfe}, 0x18) bind$can_j1939(r2, &(0x7f0000000a40)={0x1d, r5, 0x3, {0x1, 0xff}, 0xff}, 0x18) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmmsg$inet(r2, &(0x7f00000005c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) (async) ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000000)=@ethtool_eeprom={0xb, 0x0, 0xffff0000}}) write(r0, &(0x7f0000000040)="1300000032001f00030300f9002304000a04d6", 0x13) 24.025464354s ago: executing program 2 (id=3364): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="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"/1752], &(0x7f0000000100)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) (async) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="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"/1752], &(0x7f0000000100)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) (async) 23.798509175s ago: executing program 0 (id=3365): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000005c40)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000080)=@newtaction={0x14, 0x30, 0x9}, 0x14}}, 0x80800) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x80, r2, 0x20, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x28, 0x3a}}}}, [@NL80211_ATTR_KEY={0x10, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_TYPE={0x8, 0x7, 0x1}]}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY={0x38, 0x50, 0x0, 0x1, [@NL80211_KEY_TYPE={0x8, 0x7, 0x2}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT_TYPES={0x8, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "2262983ccaa84577ec99f11948"}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, @NL80211_ATTR_KEY_SEQ={0x7, 0xa, "f31668"}]}, 0x80}, 0x1, 0x0, 0x0, 0x4000001}, 0x1) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="7800000010000100"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000008001b000000000050001a804c000a801400"], 0x78}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c00000047000701feffffffffffffff017c0000380004803295"], 0x4c}, 0x1, 0x0, 0x0, 0x4048011}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 23.786454054s ago: executing program 4 (id=3366): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000000)=ANY=[@ANYRES32=0x0, @ANYBLOB="09fdfffff733d8adaab9073977d75e897f8a2782587055e9ece312240cbd7d"], 0x9) setsockopt$inet6_IPV6_DSTOPTS(0xffffffffffffffff, 0x29, 0x3b, 0x0, 0x20) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wlan1\x00'}) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f0000000080), 0x10) sendmsg$can_bcm(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="0500"], 0x48}, 0x1, 0x0, 0x0, 0x48850}, 0x0) sendmsg$can_bcm(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="05000000"], 0x48}}, 0x4) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) recvmmsg$unix(r1, &(0x7f00000043c0)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000002c0)=""/240, 0xf0}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f0000000580)={0x0, 0x3}, 0x8) 23.551824794s ago: executing program 2 (id=3367): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="300000001a00010000000001000000008100800000001600a24e0097140002"], 0x30}}, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x200}, 0x1c) listen(r1, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r4 = accept(r1, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0x24008840}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000400), r5) r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_SECURITY(r7, 0x112, 0x10, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x28, r6, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}]}]}, 0x28}, 0x1, 0x900}, 0x0) 23.520848168s ago: executing program 3 (id=3368): r0 = socket(0x1e, 0x1, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0xfffffffd, 0xffffffffffffffff, 0x4}, 0x38) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9feb010018000000000000005000000050000000020000000b0000000000001104000000070000000a0000000000000203000000000000000500000dee400000020000000100000000000000000000000d000000feffffff100000000000000001000000030010"], 0x0, 0x6a, 0x0, 0x0, 0x1}, 0x28) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r1) socket$nl_sock_diag(0x10, 0x3, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0500000003f01f006600"/20, @ANYRES32, @ANYRESOCT=r0], 0x48) socket(0x1d, 0x4, 0x1) ioctl$SIOCSIFHWADDR(r1, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) sendmmsg$alg(r0, &(0x7f0000009480)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20040081}], 0x1, 0x40) 20.764340366s ago: executing program 0 (id=3369): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x100, 0x0) close(r0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x2}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x1c, 0x3, 0x1, 0x201, 0x0, 0x0, {}, [@CTA_STATUS={0x8}]}, 0x1c}}, 0x0) (async) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r1, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000180)={0x14, 0x3, 0x2, 0x5, 0x0, 0x0, {0x5, 0x0, 0x5}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x4040004}, 0x20000) (async) r2 = socket(0x80000000000000a, 0x2, 0x0) (async, rerun: 64) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (rerun: 64) write$cgroup_subtree(r3, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) (async) setsockopt$inet6_group_source_req(r2, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}}}, 0x108) (async, rerun: 32) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (rerun: 32) r4 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) (async) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=@newtfilter={0x38, 0x2c, 0xd3f, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0xc, 0xfff1}, {0x0, 0x9}, {0x8, 0x2}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_FLAGS={0x8, 0xb, 0x3}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x20048044) 0s ago: executing program 32 (id=3367): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="300000001a00010000000001000000008100800000001600a24e0097140002"], 0x30}}, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x200}, 0x1c) listen(r1, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r4 = accept(r1, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0x24008840}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000400), r5) r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_SECURITY(r7, 0x112, 0x10, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x28, r6, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}]}]}, 0x28}, 0x1, 0x900}, 0x0) kernel console output (not intermixed with test programs): g up backlog [ 356.276698][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 356.395610][ T96] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 356.429183][ T96] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 356.449548][ T96] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 356.454379][ T96] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 356.556224][T14103] __nla_validate_parse: 8 callbacks suppressed [ 356.556245][T14103] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1963'. [ 356.588182][T14113] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1965'. [ 356.613107][T14114] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1965'. [ 356.697575][ T7428] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 357.199660][T14127] netlink: 'syz.4.1969': attribute type 2 has an invalid length. [ 357.280221][T14127] : entered promiscuous mode [ 357.309011][T14127] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1969'. [ 357.510268][T14136] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1971'. [ 357.720985][T14146] netlink: 'syz.4.1974': attribute type 12 has an invalid length. [ 357.996679][T14155] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1976'. [ 358.047476][T14145] syz.0.1975: vmalloc error: size 8589938688, exceeds total pages, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 358.047741][T14145] CPU: 1 UID: 0 PID: 14145 Comm: syz.0.1975 Not tainted syzkaller #0 PREEMPT(full) [ 358.047769][T14145] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 358.047792][T14145] Call Trace: [ 358.047806][T14145] [ 358.047817][T14145] dump_stack_lvl+0xe8/0x150 [ 358.047857][T14145] warn_alloc+0x24d/0x270 [ 358.047884][T14145] ? kasan_save_track+0x4f/0x80 [ 358.047909][T14145] ? kasan_save_track+0x3e/0x80 [ 358.047937][T14145] ? __pfx_warn_alloc+0x10/0x10 [ 358.047958][T14145] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 358.048000][T14145] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 358.048047][T14145] __vmalloc_node_range_noprof+0x127/0x1540 [ 358.048109][T14145] ? rcu_is_watching+0x16/0xb0 [ 358.048148][T14145] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 358.048192][T14145] ? __kmalloc_cache_noprof+0x321/0x600 [ 358.048217][T14145] ? __kmalloc_cache_noprof+0x14d/0x600 [ 358.048240][T14145] ? xskq_create+0x56/0x220 [ 358.048274][T14145] xskq_create+0x148/0x220 [ 358.048303][T14145] ? xsk_init_queue+0x8a/0xe0 [ 358.048333][T14145] xsk_init_queue+0x8a/0xe0 [ 358.048364][T14145] xsk_setsockopt+0x52a/0x960 [ 358.048394][T14145] ? __pfx_xsk_setsockopt+0x10/0x10 [ 358.048422][T14145] ? __pfx_aa_sk_perm+0x10/0x10 [ 358.048465][T14145] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 358.048495][T14145] ? __pfx_xsk_setsockopt+0x10/0x10 [ 358.048524][T14145] do_sock_setsockopt+0x17c/0x1b0 [ 358.048562][T14145] __x64_sys_setsockopt+0x13d/0x1b0 [ 358.048602][T14145] do_syscall_64+0x166/0x520 [ 358.048632][T14145] ? trace_irq_disable+0x3b/0x140 [ 358.048656][T14145] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 358.048681][T14145] ? clear_bhb_loop+0x70/0xc0 [ 358.048711][T14145] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 358.048735][T14145] RIP: 0033:0x7f72cff9e159 [ 358.048757][T14145] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 358.048777][T14145] RSP: 002b:00007f72d0f0c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 358.048801][T14145] RAX: ffffffffffffffda RBX: 00007f72d0225fa0 RCX: 00007f72cff9e159 [ 358.048819][T14145] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 358.048834][T14145] RBP: 00007f72d003506b R08: 0000000000000004 R09: 0000000000000000 [ 358.048849][T14145] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 358.048865][T14145] R13: 00007f72d0226038 R14: 00007f72d0225fa0 R15: 00007fffcd2a0af8 [ 358.048904][T14145] [ 358.157970][T14145] Mem-Info: [ 358.157991][T14145] active_anon:6167 inactive_anon:0 isolated_anon:0 [ 358.157991][T14145] active_file:0 inactive_file:42775 isolated_file:0 [ 358.157991][T14145] unevictable:0 dirty:57 writeback:0 [ 358.157991][T14145] slab_reclaimable:11099 slab_unreclaimable:110836 [ 358.157991][T14145] mapped:29295 shmem:530 pagetables:1353 [ 358.157991][T14145] sec_pagetables:0 bounce:0 [ 358.157991][T14145] kernel_misc_reclaimable:0 [ 358.157991][T14145] free:1279190 free_pcp:10012 free_cma:0 [ 358.158051][T14145] Node 0 active_anon:24668kB inactive_anon:0kB active_file:0kB inactive_file:170892kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:117180kB dirty:228kB writeback:0kB shmem:2120kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14300kB pagetables:5268kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 358.158111][T14145] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:144kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 358.158174][T14145] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 358.158240][T14145] lowmem_reserve[]: 0 2487 2487 2487 2487 [ 358.158283][T14145] Node 0 DMA32 free:1160548kB boost:0kB min:34140kB low:42672kB high:51204kB reserved_highatomic:0kB free_highatomic:0kB active_anon:24668kB inactive_anon:0kB active_file:0kB inactive_file:170892kB unevictable:0kB writepending:228kB zspages:0kB present:3129332kB managed:2546900kB mlocked:0kB bounce:0kB free_pcp:40048kB local_pcp:19528kB free_cma:0kB [ 358.158348][T14145] lowmem_reserve[]: 0 0 0 0 0 [ 358.158388][T14145] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:0kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 358.158448][T14145] lowmem_reserve[]: 0 0 0 0 0 [ 358.158490][T14145] Node 1 Normal free:3940852kB boost:0kB min:55760kB low:69700kB high:83640kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 358.158553][T14145] lowmem_reserve[]: 0 0 0 0 0 [ 358.158593][T14145] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 358.158760][T14145] Node 0 DMA32: 913*4kB (M) 284*8kB (UM) 49*16kB (UME) 305*32kB (UME) 122*64kB (UME) 103*128kB (UME) 37*256kB (UM) 15*512kB (UM) 8*1024kB (UM) 8*2048kB (UME) 264*4096kB (UM) = 1160532kB [ 358.158949][T14145] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 358.159072][T14145] Node 1 Normal: 3*4kB (UM) 3*8kB (UM) 3*16kB (UM) 3*32kB (UM) 9*64kB (UM) 6*128kB (UM) 4*256kB (UM) 2*512kB (M) 3*1024kB (UM) 1*2048kB (U) 960*4096kB (M) = 3940852kB [ 358.498375][T14145] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 358.498405][T14145] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 358.498430][T14145] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 358.498450][T14145] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 358.498469][T14145] 43301 total pagecache pages [ 358.498484][T14145] 0 pages in swap cache [ 358.498492][T14145] Free swap = 124996kB [ 358.498502][T14145] Total swap = 124996kB [ 358.498513][T14145] 2097051 pages RAM [ 358.498523][T14145] 0 pages HighMem/MovableOnly [ 358.498531][T14145] 428710 pages reserved [ 358.498540][T14145] 0 pages cma reserved [ 359.172577][T14168] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1979'. [ 360.605261][T14176] netlink: 'syz.3.1981': attribute type 3 has an invalid length. [ 360.634664][T14181] ip6gre1: entered allmulticast mode [ 360.816720][T14189] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1986'. [ 360.936278][ T1103] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 361.492066][T14204] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1987'. [ 361.538721][T14204] netlink: 'syz.3.1987': attribute type 10 has an invalid length. [ 361.671395][T14204] team0: Port device dummy0 added [ 361.946661][T14220] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 362.194480][T14229] syz_tun: entered allmulticast mode [ 362.360536][T14229] dvmrp8: entered allmulticast mode [ 362.389615][T14241] IPv6: NLM_F_REPLACE set, but no existing node found! [ 362.491476][T14244] netlink: 'syz.4.1996': attribute type 1 has an invalid length. [ 362.605439][T14244] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1996'. [ 362.984046][T14225] syz_tun: left allmulticast mode [ 363.493186][T14264] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 364.635134][T14285] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 364.686933][T14285] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2007'. [ 364.686962][T14285] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2007'. [ 365.259479][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 366.687012][T14348] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2024'. [ 366.781613][T14346] netlink: 'syz.4.2023': attribute type 12 has an invalid length. [ 367.724818][T14361] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2027'. [ 368.031962][T14367] netlink: 2 bytes leftover after parsing attributes in process `syz.0.2029'. [ 368.366610][T14377] tipc: Enabling of bearer rejected, failed to enable media [ 368.389844][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 368.779988][T14384] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2033'. [ 368.852104][T14384] macvlan2: entered promiscuous mode [ 368.852130][T14384] macvlan2: entered allmulticast mode [ 370.244713][T14418] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2042'. [ 370.578207][T14424] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2045'. [ 370.702533][T14424] netlink: 165 bytes leftover after parsing attributes in process `syz.1.2045'. [ 370.745080][T14429] netlink: 'syz.0.2046': attribute type 10 has an invalid length. [ 370.764091][T14426] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2046'. [ 370.855878][T14429] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2046'. [ 371.141579][T14429] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2046'. [ 371.153784][T14429] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2046'. [ 371.424741][T14446] netlink: 'syz.3.2050': attribute type 1 has an invalid length. [ 371.693524][T14448] bond11: (slave gretap2): making interface the new active one [ 371.694387][T14448] bond11: (slave gretap2): Enslaving as an active interface with an up link [ 372.506595][T14477] openvswitch: netlink: IP tunnel attribute has 5413 unknown bytes. [ 372.553702][T14481] openvswitch: netlink: IP tunnel attribute has 5413 unknown bytes. [ 373.012235][T14489] netlink: 'syz.4.2061': attribute type 1 has an invalid length. [ 373.179895][T14489] bond4: entered promiscuous mode [ 373.181167][T14489] 8021q: adding VLAN 0 to HW filter on device bond4 [ 373.224906][T14491] ipvlan2: entered allmulticast mode [ 373.224929][T14491] bond4: entered allmulticast mode [ 373.428647][T14489] bond4: (slave bridge5): making interface the new active one [ 373.428681][T14489] bridge5: entered promiscuous mode [ 373.428910][T14489] bridge5: entered allmulticast mode [ 373.523413][T14489] bond4: (slave bridge5): Enslaving as an active interface with an up link [ 373.526766][T14443] wg0 speed is unknown, defaulting to 1000 [ 373.585722][T14443] lo speed is unknown, defaulting to 1000 [ 374.140250][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 374.210773][T14522] atomic_op ffff888020f1b9e0 conn xmit_atomic 0000000000000000 [ 374.301003][T14524] __nla_validate_parse: 31 callbacks suppressed [ 374.301026][T14524] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2070'. [ 374.488646][T14532] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2072'. [ 374.488675][T14532] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2072'. [ 374.586029][T14534] syzkaller1: entered allmulticast mode [ 375.726683][T14561] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2080'. [ 376.110899][T14571] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 376.882781][ T986] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 377.133868][T14603] x_tables: unsorted underflow at hook 3 [ 377.311635][T14610] netlink: 'syz.2.2091': attribute type 26 has an invalid length. [ 377.751509][T14618] netlink: 'syz.0.2092': attribute type 58 has an invalid length. [ 377.751534][T14618] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2092'. [ 378.002074][T14623] tipc: Enabling of bearer rejected, failed to enable media [ 378.040276][T14621] dvmrp1: left allmulticast mode [ 378.593686][T14638] netlink: 232 bytes leftover after parsing attributes in process `syz.4.2098'. [ 378.646522][T14639] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2097'. [ 379.417114][T14670] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2105'. [ 379.496610][T14670] netlink: 'syz.3.2105': attribute type 2 has an invalid length. [ 380.206775][T14694] netlink: 236 bytes leftover after parsing attributes in process `syz.4.2108'. [ 380.309844][T14700] bond_slave_0: mtu less than device minimum [ 380.309939][T14700] bond_slave_0: mtu less than device minimum [ 380.310021][T14700] bond_slave_0: mtu less than device minimum [ 380.310103][T14700] bond_slave_0: mtu less than device minimum [ 380.310190][T14700] bond_slave_0: mtu less than device minimum [ 380.310275][T14700] bond_slave_0: mtu less than device minimum [ 380.310358][T14700] bond_slave_0: mtu less than device minimum [ 380.310459][T14700] bond_slave_0: mtu less than device minimum [ 380.310558][T14700] bond_slave_0: mtu less than device minimum [ 380.310649][T14700] bond_slave_0: mtu less than device minimum [ 380.619484][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 380.814199][T14726] bridge0: entered allmulticast mode [ 380.818838][T14726] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2114'. [ 380.818920][T14726] bond2: left allmulticast mode [ 380.839919][T14726] bond2: left promiscuous mode [ 380.849197][T14726] bridge0: port 4(bond2) entered disabled state [ 380.893896][T14726] batadv1: left allmulticast mode [ 380.897528][T14726] batadv1: left promiscuous mode [ 380.904637][T14726] bridge0: port 3(batadv1) entered disabled state [ 381.018765][T14726] bridge_slave_1: left allmulticast mode [ 381.018795][T14726] bridge_slave_1: left promiscuous mode [ 381.019007][T14726] bridge0: port 2(bridge_slave_1) entered disabled state [ 381.050134][T14730] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2115'. [ 381.055480][T14726] bridge_slave_0: left allmulticast mode [ 381.055508][T14726] bridge_slave_0: left promiscuous mode [ 381.055717][T14726] bridge0: port 1(bridge_slave_0) entered disabled state [ 381.089463][T14730] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 381.123714][T14726] bridge0 (unregistering): left allmulticast mode [ 381.408920][T14736] xt_hashlimit: size too large, truncated to 1048576 [ 381.415240][T14736] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2117'. [ 381.948013][T14772] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2123'. [ 382.069928][T14775] netlink: 96 bytes leftover after parsing attributes in process `syz.1.2125'. [ 382.407793][T14783] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2128'. [ 382.408801][T14783] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2128'. [ 382.411146][T14783] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2128'. [ 383.111010][T14812] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 383.126139][T14805] can: request_module (can-proto-0) failed. [ 383.336142][T14816] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 384.105941][T14851] netlink: 'syz.0.2144': attribute type 7 has an invalid length. [ 384.190323][T14837] netlink: 'syz.3.2141': attribute type 10 has an invalid length. [ 384.486343][T14837] 8021q: adding VLAN 0 to HW filter on device team0 [ 384.509641][T14837] bond0: (slave team0): Enslaving as an active interface with an up link [ 384.931707][T14869] __nla_validate_parse: 63 callbacks suppressed [ 384.931729][T14869] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2148'. [ 384.963937][T14874] xt_TPROXY: Can be used only with -p tcp or -p udp [ 384.985310][T14876] xt_TPROXY: Can be used only with -p tcp or -p udp [ 385.301622][T14891] netlink: 5 bytes leftover after parsing attributes in process `syz.2.2155'. [ 385.647448][T14902] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2156'. [ 385.689558][T14908] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2156'. [ 385.701926][T14904] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 385.702098][T14906] x_tables: duplicate underflow at hook 1 [ 385.921047][T14916] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 385.944738][T14905] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2156'. [ 385.944768][T14905] net_ratelimit: 56 callbacks suppressed [ 385.944781][T14905] openvswitch: netlink: IPv4 frag type 128 is out of range max 2 [ 386.211243][T14904] bond13: option packets_per_slave: mode dependency failed, not supported in mode balance-xor(2) [ 386.237302][T14904] bond13 (unregistering): Released all slaves [ 386.457498][T14937] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2159'. [ 386.490089][T14910] bond13: option packets_per_slave: mode dependency failed, not supported in mode balance-xor(2) [ 386.574492][T14910] bond13 (unregistering): Released all slaves [ 387.733161][T14980] IPVS: set_ctl: invalid protocol: 50 224.0.0.2:20004 [ 387.889199][T14986] veth0: entered promiscuous mode [ 387.908793][T14986] veth0: left promiscuous mode [ 388.219500][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 388.912624][T15025] sctp: [Deprecated]: syz.2.2182 (pid 15025) Use of int in maxseg socket option. [ 388.912624][T15025] Use struct sctp_assoc_value instead [ 388.947422][T15027] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2183'. [ 389.197144][T15027] netlink: 'syz.1.2183': attribute type 83 has an invalid length. [ 389.343022][T15048] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 389.650480][T15054] netlink: 80 bytes leftover after parsing attributes in process `syz.2.2189'. [ 389.711187][T15055] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2190'. [ 390.170666][T15074] netlink: 'syz.4.2195': attribute type 1 has an invalid length. [ 390.194028][T15077] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2196'. [ 390.384162][T15074] bond5: entered promiscuous mode [ 390.387949][T15074] 8021q: adding VLAN 0 to HW filter on device bond5 [ 390.779624][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 390.795552][T15105] netlink: 'syz.4.2203': attribute type 11 has an invalid length. [ 390.795615][T15105] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2203'. [ 390.863426][T15108] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2204'. [ 390.975491][T15110] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2205'. [ 390.991584][T15110] xt_REDIRECT: bad rangesize 26624. [ 391.155286][T15114] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 391.828711][T15143] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2213'. [ 391.975350][T15143] vlan0: entered allmulticast mode [ 391.975373][T15143] veth1_virt_wifi: entered allmulticast mode [ 392.847941][T15172] syzkaller0: entered promiscuous mode [ 392.847967][T15172] syzkaller0: entered allmulticast mode [ 393.263115][T15190] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 396.479082][T15220] netlink: 'syz.1.2229': attribute type 1 has an invalid length. [ 396.688328][T15220] bond8: entered promiscuous mode [ 396.694888][T15220] 8021q: adding VLAN 0 to HW filter on device bond8 [ 396.792406][T15222] 8021q: adding VLAN 0 to HW filter on device bond8 [ 396.798448][T15222] bond8: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 396.798470][T15222] bond8: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 396.841801][T15222] bond8: (slave ip6gre1): making interface the new active one [ 396.841824][T15222] ip6gre1: entered promiscuous mode [ 396.848194][T15222] bond8: (slave ip6gre1): Enslaving as an active interface with an up link [ 396.906411][T15224] lo: entered promiscuous mode [ 396.907302][T15224] tunl0: entered promiscuous mode [ 396.926221][T15224] gre0: entered promiscuous mode [ 396.936789][T15224] gretap0: entered promiscuous mode [ 396.951871][T15224] erspan0: entered promiscuous mode [ 396.954811][T15224] ip_vti0: entered promiscuous mode [ 397.244950][T15234] lo: entered promiscuous mode [ 397.247821][T15234] tunl0: entered promiscuous mode [ 397.343363][T15234] gre0: entered promiscuous mode [ 397.361218][T15245] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2235'. [ 397.414076][T15246] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2235'. [ 397.465482][T15219] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 397.468761][ T96] IPVS: starting estimator thread 0... [ 397.501064][T15234] erspan0: entered promiscuous mode [ 397.507895][T15234] ip_vti0: entered promiscuous mode [ 397.550053][T15247] IPVS: using max 26 ests per chain, 62400 per kthread [ 397.577784][T15238] geneve3: entered promiscuous mode [ 397.606822][T15245] bridge_slave_1: left promiscuous mode [ 397.607062][T15245] bridge0: port 2(bridge_slave_1) entered disabled state [ 397.649631][T15245] bridge_slave_0: left allmulticast mode [ 397.649663][T15245] bridge_slave_0: left promiscuous mode [ 397.649911][T15245] bridge0: port 1(bridge_slave_0) entered disabled state [ 397.937837][T15250] sctp: [Deprecated]: syz.1.2237 (pid 15250) Use of int in maxseg socket option. [ 397.937837][T15250] Use struct sctp_assoc_value instead [ 398.373376][T15232] wg0 speed is unknown, defaulting to 1000 [ 398.398892][T15232] lo speed is unknown, defaulting to 1000 [ 398.455929][T15262] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 398.512525][T15268] netlink: NAT flags may be given only when NAT range (SRC or DST) is also specified. [ 398.512571][T15268] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 399.753562][T15300] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2249'. [ 399.826986][T15298] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2249'. [ 399.863335][T15310] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2252'. [ 399.910967][T15308] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2251'. [ 399.939496][T15310] bond6: option lacp_strict: mode dependency failed, not supported in mode balance-rr(0) [ 399.948252][T15310] bond6 (unregistering): Released all slaves [ 399.968852][T15312] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2251'. [ 400.380484][T15321] netlink: 'syz.1.2254': attribute type 34 has an invalid length. [ 400.380509][T15321] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2254'. [ 400.414106][T15322] netlink: 'syz.2.2255': attribute type 3 has an invalid length. [ 400.414127][T15322] netlink: 244 bytes leftover after parsing attributes in process `syz.2.2255'. [ 401.210251][T15340] xt_cluster: node mask cannot exceed total number of nodes [ 401.471680][T15344] netlink: 'syz.4.2259': attribute type 1 has an invalid length. [ 402.293242][T15373] 8021q: adding VLAN 0 to HW filter on device macsec3 [ 402.299498][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 402.412560][T15376] 8021q: adding VLAN 0 to HW filter on device macsec3 [ 402.752807][T15391] openvswitch: netlink: Unexpected mask (mask=200440, allowed=10048) [ 403.628599][T15429] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 403.923227][T15435] netlink: 164 bytes leftover after parsing attributes in process `syz.2.2279'. [ 403.959972][T15435] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2279'. [ 404.280220][T15449] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2282'. [ 404.441767][T15453] IPVS: set_ctl: invalid protocol: 92 224.0.0.1:20001 [ 404.728372][T15464] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 404.754833][T15464] netlink: 'syz.0.2288': attribute type 1 has an invalid length. [ 405.308351][T15482] af_packet: packet size is too long (558759946 > 2016) [ 405.309920][T15485] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2290'. [ 405.998284][T15508] 8021q: VLANs not supported on wg1 [ 406.440351][ T4933] block nbd1: Receive control failed (result -32) [ 406.712741][T15532] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2304'. [ 407.057096][T15541] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 407.115939][ T5738] syz1: Port: 1 Link ACTIVE [ 407.451733][T15553] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2308'. [ 408.015412][T15572] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2313'. [ 408.439073][T15587] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2318'. [ 408.744348][T15596] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2319'. [ 408.746493][T15596] syzkaller0: entered promiscuous mode [ 408.746513][T15596] syzkaller0: entered allmulticast mode [ 408.783704][T15601] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2323'. [ 408.934979][T15610] Bluetooth: hci0: unsupported parameter 5161 [ 408.935003][T15610] Bluetooth: hci0: unsupported parameter 8192 [ 408.935017][T15610] Bluetooth: hci0: unsupported parameter 5161 [ 408.935042][T15610] Bluetooth: hci0: unsupported parameter 8192 [ 409.005506][T15616] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2327'. [ 409.005531][T15616] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2327'. [ 409.253291][T15596] bond6: option fail_over_mac: invalid value (16) [ 409.257724][T15596] bond6 (unregistering): Released all slaves [ 409.947162][T15634] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2334'. [ 410.007279][T15637] netlink: 'syz.3.2335': attribute type 1 has an invalid length. [ 410.154005][T15637] bond12: entered promiscuous mode [ 410.157775][T15637] 8021q: adding VLAN 0 to HW filter on device bond12 [ 410.270122][T15641] netlink: 'syz.3.2335': attribute type 1 has an invalid length. [ 410.270147][T15641] netlink: 240 bytes leftover after parsing attributes in process `syz.3.2335'. [ 410.270164][T15641] netlink: 'syz.3.2335': attribute type 1 has an invalid length. [ 410.291986][T15637] bond12: (slave bridge7): making interface the new active one [ 410.292011][T15637] bridge7: entered promiscuous mode [ 410.336270][T15637] bond12: (slave bridge7): Enslaving as an active interface with an up link [ 410.941033][T15662] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2343'. [ 411.723556][T15691] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2350'. [ 411.723589][T15691] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2350'. [ 411.971611][T15699] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2353'. [ 411.971805][T15699] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2353'. [ 412.036822][T15704] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2355'. [ 412.038069][T15703] ip_tables: iptables: counters copy to user failed while replacing table [ 412.253443][ T13] IPVS: starting estimator thread 0... [ 412.280281][T15713] Bluetooth: hci0: unsupported parameter 5135 [ 412.280304][T15713] Bluetooth: hci0: unsupported parameter 8192 [ 412.280320][T15713] Bluetooth: hci0: unsupported parameter 5135 [ 412.280334][T15713] Bluetooth: hci0: unsupported parameter 8192 [ 412.283638][T15713] netlink: 'syz.3.2358': attribute type 14 has an invalid length. [ 412.283657][T15713] netlink: 'syz.3.2358': attribute type 13 has an invalid length. [ 412.352183][T15714] IPVS: using max 26 ests per chain, 62400 per kthread [ 412.991509][T15728] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 413.248638][T15732] Set syz1 is full, maxelem 2076 reached [ 413.726248][T15751] bond13: entered promiscuous mode [ 414.098865][T15775] __nla_validate_parse: 3 callbacks suppressed [ 414.098886][T15775] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2373'. [ 414.477598][T15780] netlink: 'syz.0.2374': attribute type 11 has an invalid length. [ 414.477623][T15780] netlink: 'syz.0.2374': attribute type 4 has an invalid length. [ 414.477637][T15780] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2374'. [ 414.516053][T15780] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2374'. [ 414.566396][T15781] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2375'. [ 414.882769][T15795] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2378'. [ 415.240665][T15800] netlink: 'syz.0.2381': attribute type 21 has an invalid length. [ 415.240692][T15800] IPv6: NLM_F_CREATE should be specified when creating new route [ 415.241218][T15800] netlink: 'syz.0.2381': attribute type 1 has an invalid length. [ 415.243984][T15801] netlink: 'syz.0.2381': attribute type 21 has an invalid length. [ 415.244084][T15801] netlink: 'syz.0.2381': attribute type 1 has an invalid length. [ 415.356610][T15798] bond0: (slave veth0_vlan): Error: Device is in use and cannot be enslaved [ 415.357244][T15798] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2380'. [ 415.379772][T15798] xt_l2tp: missing protocol rule (udp|l2tpip) [ 415.401881][T15806] netlink: 'syz.3.2383': attribute type 1 has an invalid length. [ 415.464259][T15810] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2383'. [ 415.585030][T15806] 8021q: adding VLAN 0 to HW filter on device bond14 [ 415.784287][T15806] bond14: (slave bridge8): making interface the new active one [ 415.805970][T15806] bond14: (slave bridge8): Enslaving as an active interface with an up link [ 416.300080][T15831] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0001 with DS=0x2 [ 416.714168][T15848] netlink: 'syz.1.2396': attribute type 1 has an invalid length. [ 416.866523][T15848] 8021q: adding VLAN 0 to HW filter on device bond11 [ 416.965404][T15855] bond6: (slave veth0_to_bond): Releasing backup interface [ 417.039341][T15855] bond11: (slave veth0_to_bond): making interface the new active one [ 417.046528][T15855] bond11: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 417.113388][T15848] bond11: entered promiscuous mode [ 417.113414][T15848] veth0_to_bond: entered promiscuous mode [ 417.113620][T15848] bond11: entered allmulticast mode [ 417.113636][T15848] veth0_to_bond: entered allmulticast mode [ 417.188290][T15858] netlink: 'syz.4.2398': attribute type 2 has an invalid length. [ 417.188312][T15858] netlink: 'syz.4.2398': attribute type 1 has an invalid length. [ 417.212494][T15857] netlink: 'syz.4.2398': attribute type 2 has an invalid length. [ 417.212516][T15857] netlink: 'syz.4.2398': attribute type 1 has an invalid length. [ 418.086178][T15882] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2406'. [ 418.137336][T15882] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2406'. [ 418.155825][T15882] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2406'. [ 418.227017][T15840] wg0 speed is unknown, defaulting to 1000 [ 418.228883][T15840] lo speed is unknown, defaulting to 1000 [ 419.176171][T15915] openvswitch: netlink: Multiple metadata blocks provided [ 419.417691][T15924] __nla_validate_parse: 5 callbacks suppressed [ 419.417711][T15924] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2415'. [ 419.417744][T15924] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2415'. [ 419.485617][T15924] syz_tun: entered promiscuous mode [ 419.485816][T15924] syz_tun: left promiscuous mode [ 419.579656][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 419.580653][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 419.817261][T15942] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2417'. [ 419.817301][T15942] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2417'. [ 420.079516][T15951] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2418'. [ 420.558620][T15967] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2422'. [ 420.686961][T15970] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2424'. [ 420.730695][T15968] netlink: 1047 bytes leftover after parsing attributes in process `syz.4.2422'. [ 420.730724][T15968] veth0_to_bond: default FDB implementation only supports local addresses [ 420.909144][T15975] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2425'. [ 421.577644][T16005] IPVS: length: 198 != 8 [ 421.767611][T15992] 8021q: adding VLAN 0 to HW filter on device bond12 [ 421.923091][T16008] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2429'. [ 423.419511][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 423.957516][T16080] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 424.862665][T16101] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 424.862812][T16101] syzkaller1: linktype set to 823 [ 425.053514][T16109] validate_nla: 4 callbacks suppressed [ 425.053536][T16109] netlink: 'syz.3.2453': attribute type 1 has an invalid length. [ 425.053550][T16109] __nla_validate_parse: 3 callbacks suppressed [ 425.053561][T16109] netlink: 16042 bytes leftover after parsing attributes in process `syz.3.2453'. [ 425.053948][T16108] netlink: 'syz.3.2453': attribute type 1 has an invalid length. [ 425.053965][T16108] netlink: 16042 bytes leftover after parsing attributes in process `syz.3.2453'. [ 425.055113][T16109] netlink: 'syz.3.2453': attribute type 1 has an invalid length. [ 425.055132][T16109] netlink: 16042 bytes leftover after parsing attributes in process `syz.3.2453'. [ 425.414064][T16119] netlink: 'syz.3.2456': attribute type 1 has an invalid length. [ 425.627610][T16133] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2459'. [ 425.674583][T16123] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2456'. [ 425.807090][T16128] netlink: 'syz.4.2458': attribute type 2 has an invalid length. [ 426.257661][T16149] bond6: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-alb(6) [ 426.285860][T16149] bond6 (unregistering): Released all slaves [ 426.423246][T16150] bond6: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-alb(6) [ 426.426571][T16150] bond6 (unregistering): Released all slaves [ 426.695219][T16175] netlink: 'syz.4.2468': attribute type 21 has an invalid length. [ 426.695244][T16175] netlink: 128 bytes leftover after parsing attributes in process `syz.4.2468'. [ 426.695321][T16175] netlink: 3 bytes leftover after parsing attributes in process `syz.4.2468'. [ 427.029165][T16186] IPVS: set_ctl: invalid protocol: 58 10.1.1.1:20002 [ 427.045497][T16187] IPVS: set_ctl: invalid protocol: 58 172.20.20.170:20000 [ 427.045906][T16187] IPVS: set_ctl: invalid protocol: 58 172.20.20.170:20000 [ 427.046306][T16187] IPVS: set_ctl: invalid protocol: 58 172.20.20.170:20000 [ 427.046713][T16187] IPVS: set_ctl: invalid protocol: 58 172.20.20.170:20000 [ 427.047130][T16187] IPVS: set_ctl: invalid protocol: 58 172.20.20.170:20000 [ 427.047525][T16187] IPVS: set_ctl: invalid protocol: 58 172.20.20.170:20000 [ 427.047916][T16187] IPVS: set_ctl: invalid protocol: 58 172.20.20.170:20000 [ 427.048351][T16187] IPVS: set_ctl: invalid protocol: 58 172.20.20.170:20000 [ 427.048751][T16187] IPVS: set_ctl: invalid protocol: 58 172.20.20.170:20000 [ 427.049148][T16187] IPVS: set_ctl: invalid protocol: 58 172.20.20.170:20000 [ 427.049556][T16187] IPVS: set_ctl: invalid protocol: 58 172.20.20.170:20000 [ 427.049961][T16187] IPVS: set_ctl: invalid protocol: 58 172.20.20.170:20000 [ 427.050459][T16187] IPVS: set_ctl: invalid protocol: 58 172.20.20.170:20000 [ 427.053565][T16187] IPVS: set_ctl: invalid protocol: 58 172.20.20.170:20000 [ 427.054442][T16187] IPVS: set_ctl: invalid protocol: 58 172.20.20.170:20000 [ 427.055250][T16187] IPVS: set_ctl: invalid protocol: 58 172.20.20.170:20000 [ 427.056108][T16187] IPVS: set_ctl: invalid protocol: 58 172.20.20.170:20000 [ 427.059377][T16187] IPVS: set_ctl: invalid protocol: 58 172.20.20.170:20000 [ 427.060357][T16187] IPVS: set_ctl: invalid protocol: 58 172.20.20.170:20000 [ 427.061294][T16187] IPVS: set_ctl: invalid protocol: 58 172.20.20.170:20000 [ 427.062172][T16187] IPVS: set_ctl: invalid protocol: 58 172.20.20.170:20000 [ 427.063062][T16187] IPVS: set_ctl: invalid protocol: 58 172.20.20.170:20000 [ 427.064028][T16187] IPVS: set_ctl: invalid protocol: 58 172.20.20.170:20000 [ 427.064918][T16187] IPVS: set_ctl: invalid protocol: 58 172.20.20.170:20000 [ 427.065313][T16187] IPVS: set_ctl: invalid protocol: 58 172.20.20.170:20000 [ 427.065718][T16187] IPVS: set_ctl: invalid protocol: 58 172.20.20.170:20000 [ 427.068678][T16187] IPVS: set_ctl: invalid protocol: 58 172.20.20.170:20000 [ 427.069310][T16187] IPVS: set_ctl: invalid protocol: 58 172.20.20.170:20000 [ 427.070415][T16187] IPVS: set_ctl: invalid protocol: 58 172.20.20.170:20000 [ 427.071292][T16187] IPVS: set_ctl: invalid protocol: 58 172.20.20.170:20000 [ 427.072339][T16187] IPVS: set_ctl: invalid protocol: 58 172.20.20.170:20000 [ 427.073333][T16187] IPVS: set_ctl: invalid protocol: 58 172.20.20.170:20000 [ 427.074002][T16187] IPVS: set_ctl: invalid protocol: 58 172.20.20.170:20000 [ 428.010520][T16202] netlink: 'syz.2.2478': attribute type 1 has an invalid length. [ 428.330093][T16206] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2480'. [ 428.836252][T16191] wg0 speed is unknown, defaulting to 1000 [ 428.871950][T16191] lo speed is unknown, defaulting to 1000 [ 429.023476][T16227] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2486'. [ 429.487852][T16228] bond13: entered allmulticast mode [ 429.493997][T16228] 8021q: adding VLAN 0 to HW filter on device bond13 [ 430.134893][T16249] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2490'. [ 430.195470][T16249] bridge0: entered promiscuous mode [ 430.195678][T16249] bridge0: entered allmulticast mode [ 430.227578][T16249] team0: Port device bridge0 added [ 430.684630][T16256] IPVS: set_ctl: invalid protocol: 12 127.0.0.1:20003 [ 430.873320][T16263] ipt_REJECT: TCP_RESET invalid for non-tcp [ 431.099447][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 431.171863][T16275] netlink: 'syz.0.2497': attribute type 1 has an invalid length. [ 431.484873][T16275] block nbd296: server does not support multiple connections per device. [ 431.598189][ T5641] block nbd296: shutting down sockets [ 431.903733][T16294] netlink: 'syz.2.2503': attribute type 3 has an invalid length. [ 432.327596][T16310] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2509'. [ 432.327851][T16310] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2509'. [ 432.954774][T16331] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2515'. [ 432.954801][T16331] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2515'. [ 432.957327][T16331] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2515'. [ 432.958440][T16331] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2515'. [ 433.166952][T16339] netlink: 232 bytes leftover after parsing attributes in process `syz.0.2517'. [ 433.351269][T16346] netlink: NAT attribute has 8 unknown bytes [ 433.352472][T16346] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 433.416043][T16351] netlink: NAT attribute has 8 unknown bytes [ 433.416079][T16351] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 433.641306][T16357] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2521'. [ 433.757446][T16340] syzkaller0: entered promiscuous mode [ 433.757471][T16340] syzkaller0: entered allmulticast mode [ 434.251745][T16375] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048) [ 434.306074][T16377] netlink: 88 bytes leftover after parsing attributes in process `syz.3.2526'. [ 435.196596][T16402] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2534'. [ 435.226252][T16402] netlink: 'syz.1.2534': attribute type 24 has an invalid length. [ 435.320893][T16404] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2535'. [ 435.376126][T16408] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2535'. [ 435.456676][T16412] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2536'. [ 435.456700][T16412] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2536'. [ 435.457355][T16411] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 435.667261][T16417] netlink: Unknown nat attribute (0) [ 435.667294][T16417] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 435.684733][T16418] netlink: Unknown nat attribute (0) [ 435.684767][T16418] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 435.772720][T16424] netlink: 164 bytes leftover after parsing attributes in process `syz.4.2539'. [ 436.094896][T16431] tipc: Started in network mode [ 436.094918][T16431] tipc: Node identity 2, cluster identity 4711 [ 436.094930][T16431] tipc: Node number set to 2 [ 436.139056][T16436] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 436.767559][T16450] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2546'. [ 437.169114][ T39] smc: removing ib device syz1 [ 437.176298][ T2220] infiniband syz1: ib_query_port failed (-19) [ 437.476531][ T39] smbdirect: ib_dev[syz1] removed [ 437.867736][T16470] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2552'. [ 437.867760][T16470] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2552'. [ 438.360459][ T1103] net_ratelimit: 430 callbacks suppressed [ 438.360479][ T1103] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 438.361369][ T1103] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 438.362223][ T1103] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 438.362995][ T1103] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 438.363866][ T1103] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 438.365054][ T1103] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 438.366289][ T1103] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 438.367268][ T1103] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 438.368104][ T1103] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 438.374346][ T1103] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 440.305235][T16525] netlink: 'syz.2.2563': attribute type 2 has an invalid length. [ 440.627196][T16532] netlink: 244 bytes leftover after parsing attributes in process `syz.3.2566'. [ 441.687468][T16562] veth0: entered promiscuous mode [ 441.700738][T16564] netlink: 'syz.4.2573': attribute type 1 has an invalid length. [ 441.834611][T16573] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2574'. [ 441.951233][T16564] bond7: entered promiscuous mode [ 441.951764][T16564] 8021q: adding VLAN 0 to HW filter on device bond7 [ 441.955518][T16581] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2577'. [ 442.168011][T16562] bond7: (slave bridge0): making interface the new active one [ 442.168038][T16562] bridge0: entered promiscuous mode [ 442.198483][T16562] bond7: (slave bridge0): Enslaving as an active interface with an up link [ 442.245232][T16572] bond0: (slave team0): Releasing backup interface [ 442.315332][T16572] team0: Port device dummy0 removed [ 442.410144][T16560] veth0: left promiscuous mode [ 442.931728][T16591] netlink: 'syz.4.2580': attribute type 2 has an invalid length. [ 442.931752][T16591] netlink: 'syz.4.2580': attribute type 8 has an invalid length. [ 442.931793][T16591] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2580'. [ 443.119125][T16606] vcan0: tx drop: invalid sa for name 0x0000000000000002 [ 443.629132][T16612] net_ratelimit: 58 callbacks suppressed [ 443.629153][T16612] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 443.676743][T16613] openvswitch: netlink: Duplicate or invalid key (type 0). [ 443.906972][T16624] netlink: 'syz.4.2586': attribute type 1 has an invalid length. [ 443.935220][T16590] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2578'. [ 443.965292][T16630] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 444.113563][T16638] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 444.234568][T16646] Cannot find del_set index 4 as target [ 444.237115][T16646] netlink: 'syz.1.2591': attribute type 64 has an invalid length. [ 444.237135][T16646] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2591'. [ 444.702722][T16653] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 444.702764][T16653] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 444.702824][T16653] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 444.751249][T16656] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2595'. [ 444.987648][T16653] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 444.987689][T16653] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 444.987719][T16653] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 445.122260][T16662] ip6gre0: entered promiscuous mode [ 445.122284][T16662] ip6gre0: entered allmulticast mode [ 445.365960][T16653] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 445.366005][T16653] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 445.393699][T16653] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 445.450952][T16667] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2598'. [ 445.450981][T16667] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2598'. [ 445.572245][T16653] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 445.572320][T16653] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 445.572350][T16653] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 446.088953][T16676] netlink: 'syz.1.2600': attribute type 1 has an invalid length. [ 446.130838][T16678] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2601'. [ 446.130865][T16678] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2601'. [ 446.285368][T16676] 8021q: adding VLAN 0 to HW filter on device bond13 [ 446.462900][T16684] bond13: (slave geneve3): making interface the new active one [ 446.467602][T16684] bond13: (slave geneve3): Enslaving as an active interface with an up link [ 446.561233][ T96] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 446.561271][ T96] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 446.561299][ T96] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 446.563806][ T96] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 446.563839][ T96] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 446.563866][ T96] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 446.659510][ T96] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 446.659547][ T96] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 446.659575][ T96] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 446.696295][ T96] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 446.696331][ T96] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 446.696369][ T96] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 447.264383][T16711] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2605'. [ 447.886860][T16737] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2611'. [ 447.888806][T16701] syz.4.2603 (16701) used greatest stack depth: 18088 bytes left [ 447.994343][T16740] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2612'. [ 447.994469][T16740] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 448.116739][T16740] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 448.906599][T16769] netlink: 'syz.1.2620': attribute type 1 has an invalid length. [ 449.192934][T16772] netlink: 80 bytes leftover after parsing attributes in process `syz.2.2622'. [ 449.656142][T16778] can: request_module (can-proto-4) failed. [ 449.710559][T16790] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2625'. [ 449.959962][T16802] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2627'. [ 449.965274][T16802] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2627'. [ 449.993605][T16802] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2627'. [ 450.581562][T16810] Unsupported ieee802154 address type: 0 [ 450.722223][T16816] xt_SECMARK: invalid mode: 9 [ 451.044975][T16835] sctp: [Deprecated]: syz.2.2638 (pid 16835) Use of struct sctp_assoc_value in delayed_ack socket option. [ 451.044975][T16835] Use struct sctp_sack_info instead [ 451.411588][T16838] IPVS: fo: TCP 127.0.0.1:5376 - no destination available [ 451.890131][T16858] __nla_validate_parse: 1 callbacks suppressed [ 451.890152][T16858] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2643'. [ 452.269619][T16870] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2646'. [ 452.276380][T16870] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2646'. [ 452.354069][T16875] Bluetooth: hci0: unsupported parameter 5135 [ 452.354093][T16875] Bluetooth: hci0: unsupported parameter 8192 [ 452.354108][T16875] Bluetooth: hci0: unsupported parameter 5135 [ 452.354121][T16875] Bluetooth: hci0: unsupported parameter 8192 [ 452.538435][T16881] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2649'. [ 452.538468][T16881] openvswitch: netlink: IPv4 frag type 32 is out of range max 2 [ 452.733981][T16888] netlink: 'syz.3.2652': attribute type 64 has an invalid length. [ 452.734006][T16888] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2652'. [ 452.938869][T16896] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2653'. [ 452.939099][T16896] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2653'. [ 452.963526][T16896] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2653'. [ 452.966699][T16894] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2653'. [ 452.966943][T16894] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2653'. [ 453.139281][T16912] netlink: 'syz.3.2657': attribute type 2 has an invalid length. [ 453.139304][T16912] netlink: 'syz.3.2657': attribute type 11 has an invalid length. [ 453.242531][T16918] netlink: 'syz.0.2658': attribute type 1 has an invalid length. [ 453.242557][T16918] NCSI netlink: No device for ifindex 0 [ 453.837455][T16930] ip_tables: iptables: counters copy to user failed while replacing table [ 454.497466][T16954] netlink: 'syz.0.2669': attribute type 12 has an invalid length. [ 455.005580][T16935] bridge0: entered promiscuous mode [ 455.005616][T16935] bridge0: entered allmulticast mode [ 456.087970][T17001] netlink: 'syz.1.2682': attribute type 1 has an invalid length. [ 456.553289][T17016] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 457.147965][T17042] netlink: 'syz.4.2693': attribute type 11 has an invalid length. [ 457.232310][T17046] __nla_validate_parse: 82 callbacks suppressed [ 457.232332][T17046] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2694'. [ 457.369061][T17046] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2694'. [ 457.384484][T17046] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2694'. [ 458.838799][T17103] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2710'. [ 458.882285][T17107] batman_adv: batadv0: Adding interface: veth0 [ 458.882303][T17107] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 458.882332][T17107] batman_adv: batadv0: Interface activated: veth0 [ 458.885578][T17103] netlink: 'syz.3.2710': attribute type 2 has an invalid length. [ 458.888800][T17110] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2711'. [ 458.888820][T17110] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 458.888837][T17110] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 458.976579][T17110] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 458.978381][T17110] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 458.995147][T17110] batman_adv: batadv0: Interface deactivated: veth0 [ 458.995170][T17110] batman_adv: batadv0: Removing interface: veth0 [ 459.518159][T17119] netlink: 'syz.4.2714': attribute type 1 has an invalid length. [ 459.614409][T17122] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2714'. [ 459.705722][T17124] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2714'. [ 459.737665][T17119] 8021q: adding VLAN 0 to HW filter on device bond8 [ 460.049063][T17133] ip6_vti0: entered promiscuous mode [ 460.058109][T17133] sit0: entered promiscuous mode [ 460.067256][T17133] ip6tnl0: entered promiscuous mode [ 460.068493][T17133] ip6gre0: entered promiscuous mode [ 460.086632][T17133] syz_tun: entered promiscuous mode [ 460.087487][T17133] ip6gretap0: entered promiscuous mode [ 460.101931][T17133] vcan0: entered promiscuous mode [ 460.107414][T17133] dummy0: entered promiscuous mode [ 460.108321][T17133] nlmon0: entered promiscuous mode [ 460.127720][T17133] veth0: entered promiscuous mode [ 460.128667][T17133] veth1: entered promiscuous mode [ 460.142446][T17133] wg0: entered promiscuous mode [ 460.143204][T17133] wg2: entered promiscuous mode [ 460.144861][T17133] veth0_to_bridge: entered promiscuous mode [ 460.145749][T17133] bridge_slave_0: entered promiscuous mode [ 460.146513][T17133] veth1_to_bridge: entered promiscuous mode [ 460.147437][T17133] bridge_slave_1: entered promiscuous mode [ 460.147457][T17133] bridge_slave_1: left allmulticast mode [ 460.148309][T17133] veth0_to_bond: entered promiscuous mode [ 460.211115][T17133] veth1_to_bond: entered promiscuous mode [ 460.236322][T17133] veth0_to_team: entered promiscuous mode [ 460.243549][T17133] team_slave_0: entered promiscuous mode [ 460.258286][T17133] veth1_to_team: entered promiscuous mode [ 460.282083][T17143] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2721'. [ 460.285841][T17133] team_slave_1: entered promiscuous mode [ 460.288979][T17133] veth0_to_batadv: entered promiscuous mode [ 460.398139][T17133] batadv_slave_0: entered promiscuous mode [ 460.418933][T17133] xfrm0: entered promiscuous mode [ 460.419840][T17133] veth0_to_hsr: entered promiscuous mode [ 460.443415][T17133] veth1_to_hsr: entered promiscuous mode [ 460.464877][T17133] hsr0: entered promiscuous mode [ 460.465807][T17133] veth1_virt_wifi: entered promiscuous mode [ 460.484118][T17133] veth0_virt_wifi: entered promiscuous mode [ 460.487965][T17133] virt_wifi0: entered promiscuous mode [ 460.517253][T17133] vlan0: entered promiscuous mode [ 460.538074][T17133] ÿÿÿÿÿÿ: entered promiscuous mode [ 460.551254][T17133] macvlan0: entered promiscuous mode [ 460.553943][T17133] macvlan1: entered promiscuous mode [ 460.584114][T17133] ipvlan0: entered promiscuous mode [ 460.584319][T17133] ipvlan1: entered promiscuous mode [ 460.615595][T17133] macvtap0: entered promiscuous mode [ 460.618278][T17133] macsec0: entered promiscuous mode [ 460.638665][T17133] geneve0: entered promiscuous mode [ 460.650813][T17133] geneve1: entered promiscuous mode [ 460.651106][T17133] mac80211_hwsim hwsim11 wlan1: entered promiscuous mode [ 460.651282][T17133] bond1: entered promiscuous mode [ 460.745353][T17152] ip_tables: iptables: counters copy to user failed while replacing table [ 460.765031][T17152] ip_tables: iptables: counters copy to user failed while replacing table [ 460.780496][T17133] ip6gre1: entered promiscuous mode [ 460.781126][T17133] vxlan0: entered promiscuous mode [ 460.781720][T17133] gre1: entered promiscuous mode [ 460.782546][T17133] gretap1: left allmulticast mode [ 460.783110][T17133] @: entered promiscuous mode [ 460.783746][T17133] bridge1: entered promiscuous mode [ 460.784449][T17133] hsr1: entered promiscuous mode [ 460.785564][T17133] syzkaller0: left allmulticast mode [ 460.786266][T17133] dummy1: entered promiscuous mode [ 460.786999][T17133] bond2: entered promiscuous mode [ 460.788132][T17133] gre2: entered promiscuous mode [ 460.890351][T17133] ip6_vti1: entered promiscuous mode [ 460.890528][T17133] bond3: entered promiscuous mode [ 460.890543][T17133] bridge2: entered promiscuous mode [ 460.930282][T17138] netlink: 108 bytes leftover after parsing attributes in process `syz.2.2718'. [ 460.930307][T17138] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2718'. [ 460.933485][T17138] xt_NETMAP: bad MAP_IPS. [ 461.025664][T17133] vlan1: entered promiscuous mode [ 461.027004][T17133] xfrm1: entered promiscuous mode [ 461.027219][T17133] geneve2: left allmulticast mode [ 461.056012][T17133] ipip0: entered promiscuous mode [ 461.058191][T17133] gretap2: entered promiscuous mode [ 461.058321][T17133] ip6tnl1: left allmulticast mode [ 461.085661][T17133] bridge3: entered promiscuous mode [ 461.095549][T17133] ip6gre2: entered promiscuous mode [ 461.095570][T17133] ip6gre2: left allmulticast mode [ 461.122026][T17133] macsec1: entered promiscuous mode [ 461.122172][T17133] mac80211_hwsim hwsim10 dvmrp1: entered promiscuous mode [ 461.122334][T17133] vlan2: entered promiscuous mode [ 461.122524][T17133] vlan2: left allmulticast mode [ 461.122538][T17133] bond0: left allmulticast mode [ 461.122552][T17133] bond_slave_0: left allmulticast mode [ 461.124988][T17133] bond_slave_1: left allmulticast mode [ 461.125271][T17133] nicvf0: entered promiscuous mode [ 461.125403][T17133] ip6tnl2: entered promiscuous mode [ 461.126760][T17133] bridge4: entered promiscuous mode [ 461.126924][T17133] macsec2: entered promiscuous mode [ 461.163573][T17133] mac80211_hwsim hwsim28 wlan2: entered promiscuous mode [ 461.163788][T17133] mac80211_hwsim hwsim29 wlan3: entered promiscuous mode [ 461.230432][T17133] macvlan2: left allmulticast mode [ 461.239149][T17133] ipvlan2: entered promiscuous mode [ 461.239169][T17133] ipvlan2: left allmulticast mode [ 461.239183][T17133] bond4: left allmulticast mode [ 461.239693][T17133] bridge5: left allmulticast mode [ 461.279098][T17133] bridge6: entered promiscuous mode [ 461.287462][T17133] gretap3: entered promiscuous mode [ 461.287821][T17133] bond6: entered promiscuous mode [ 461.302203][T17133] bridge7: entered promiscuous mode [ 461.302339][T17133] netdevsim netdevsim4 eth0: entered promiscuous mode [ 461.302504][T17133] netdevsim netdevsim4 eth1: entered promiscuous mode [ 461.302657][T17133] netdevsim netdevsim4 eth2: entered promiscuous mode [ 461.302841][T17133] netdevsim netdevsim4 eth3: entered promiscuous mode [ 461.306238][T17133] veth2: entered promiscuous mode [ 461.306422][T17133] veth3: entered promiscuous mode [ 461.306607][T17133] bond8: entered promiscuous mode [ 461.308941][T17133] vlan3: entered promiscuous mode [ 461.454195][T17141] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 461.502645][T17155] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 461.742980][T17166] netlink: 'syz.1.2729': attribute type 2 has an invalid length. [ 461.747941][T17166] netlink: 'syz.1.2729': attribute type 1 has an invalid length. [ 461.991538][T17166] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 461.998259][T17178] tipc: Started in network mode [ 461.998290][T17178] tipc: Node identity ac1414aa, cluster identity 4711 [ 462.054681][T17178] tipc: New replicast peer: 172.20.20.187 [ 462.122480][T17178] tipc: Enabled bearer , priority 10 [ 462.517585][T17188] __nla_validate_parse: 3 callbacks suppressed [ 462.517607][T17188] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2734'. [ 462.544029][T17191] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2734'. [ 462.546643][T17188] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2734'. [ 462.933503][T17204] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2740'. [ 462.978195][T17204] netlink: 'syz.0.2740': attribute type 24 has an invalid length. [ 463.193083][ T5738] tipc: Node number set to 2886997162 [ 463.285280][T17217] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2738'. [ 463.320302][T17214] batadv_slave_0: entered promiscuous mode [ 463.324007][T17214] bridge_slave_0: entered promiscuous mode [ 463.324875][T17214] debugfs: 'hsr1' already exists in 'hsr' [ 463.324897][T17214] Cannot create hsr debugfs directory [ 463.344580][T17216] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2743'. [ 464.097019][T17243] ip_tables: iptables: counters copy to user failed while replacing table [ 464.391683][T17258] netlink: 'syz.4.2757': attribute type 12 has an invalid length. [ 464.419096][T17256] netlink: 'syz.3.2755': attribute type 2 has an invalid length. [ 464.587112][T17261] netlink: 'syz.2.2758': attribute type 1 has an invalid length. [ 465.101707][T17277] netlink: 'syz.3.2762': attribute type 1 has an invalid length. [ 465.292271][T17284] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2763'. [ 465.377242][T17287] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2762'. [ 465.666083][T17281] 8021q: adding VLAN 0 to HW filter on device bond18 [ 465.681611][T17281] bond17: (slave bond18): making interface the new active one [ 465.683918][T17281] bond17: (slave bond18): Enslaving as an active interface with an up link [ 465.927903][T17287] 8021q: adding VLAN 0 to HW filter on device bond17 [ 465.943876][T17300] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2767'. [ 466.324948][T17308] syzkaller0: entered allmulticast mode [ 466.491747][T17320] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2772'. [ 467.288074][T17358] netlink: 'syz.4.2781': attribute type 1 has an invalid length. [ 467.554230][T17358] 8021q: adding VLAN 0 to HW filter on device bond9 [ 467.616342][T17358] bond9: (slave geneve4): making interface the new active one [ 467.642361][T17358] bond9: (slave geneve4): Enslaving as an active interface with an up link [ 467.667401][T17358] syz.4.2781 (17358) used greatest stack depth: 17416 bytes left [ 467.869165][ T7421] IPVS: starting estimator thread 0... [ 467.933372][T17376] __nla_validate_parse: 4 callbacks suppressed [ 467.933393][T17376] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2784'. [ 467.980058][T17375] IPVS: using max 24 ests per chain, 57600 per kthread [ 468.313739][T17376] bond10: Invalid ad_actor_system MAC address. [ 468.313787][T17376] bond10: option ad_actor_system: invalid value (1) [ 468.354875][T17391] openvswitch: netlink: ct_state flags ffffffff unsupported [ 468.357047][T17391] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2787'. [ 468.357069][T17391] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2787'. [ 468.481612][T17376] bond10 (unregistering): Released all slaves [ 468.605699][T17400] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2786'. [ 468.848630][T17391] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2787'. [ 468.848655][T17391] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2787'. [ 468.902914][T17403] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2788'. [ 469.067025][T17402] syzkaller1: entered promiscuous mode [ 469.067049][T17402] syzkaller1: entered allmulticast mode [ 471.312590][T17480] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2806'. [ 471.546219][T17486] batman_adv: batadv0: Adding interface: gretap1 [ 471.546239][T17486] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1532. [ 471.546265][T17486] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active [ 471.548785][T17487] netlink: 'syz.0.2807': attribute type 5 has an invalid length. [ 471.626942][T17486] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 472.357012][T17507] 8021q: adding VLAN 0 to HW filter on device bond19 [ 472.745115][T17535] ip_tunnel: non-ECT from 2.0.0.0 with TOS=0x3 [ 472.811740][T17538] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2821'. [ 472.811802][T17538] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2821'. [ 472.939953][ T7429] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 472.942382][ T7429] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 472.942428][ T7429] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 472.942466][ T7429] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 473.658801][T17562] __nla_validate_parse: 2 callbacks suppressed [ 473.658826][T17562] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2825'. [ 473.794215][T17565] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2826'. [ 473.857673][T17565] IPVS: length: 116 != 8 [ 474.193422][T17583] xt_cluster: node mask cannot exceed total number of nodes [ 474.286546][T17587] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 474.288232][T17587] netlink: 'syz.3.2831': attribute type 29 has an invalid length. [ 474.470873][T17594] netlink: 'syz.4.2835': attribute type 32 has an invalid length. [ 474.470897][T17594] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2835'. [ 474.593790][T17597] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not security [ 474.626571][T17597] netlink: 1196 bytes leftover after parsing attributes in process `syz.3.2834'. [ 474.763702][T17597] netlink: 'syz.3.2834': attribute type 10 has an invalid length. [ 474.795667][T17597] team0: Port device dummy0 added [ 475.389861][T17620] sch_tbf: burst 0 is lower than device gre0 mtu (1500) ! [ 475.437815][T17619] netlink: 'syz.0.2842': attribute type 4 has an invalid length. [ 475.454266][T17616] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2841'. [ 475.916715][T17624] 8021q: adding VLAN 0 to HW filter on device bond20 [ 476.199335][T17641] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 477.026712][T17661] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2854'. [ 477.441127][T17677] ip_tables: iptables: counters copy to user failed while replacing table [ 477.776096][T17681] sch_tbf: peakrate 4 is lower than or equals to rate 24576 ! [ 478.446048][T17705] batman_adv: batadv0: Adding interface: syzkaller0 [ 478.446265][T17705] batman_adv: batadv0: Interface activated: syzkaller0 [ 478.705021][T17711] openvswitch: netlink: Geneve opt len 3 is not a multiple of 4. [ 478.770937][T17725] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2868'. [ 478.773221][T17725] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2868'. [ 478.776665][T17725] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2868'. [ 478.777709][T17725] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2868'. [ 478.781343][T17725] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2868'. [ 478.788437][T17725] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2868'. [ 478.814828][T17725] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2868'. [ 478.823918][T17725] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2868'. [ 478.845022][T17725] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2868'. [ 478.880847][T17725] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2868'. [ 478.989166][T17704] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 479.086594][T17704] batman_adv: batadv0: Removing interface: syzkaller0 [ 479.777948][T17740] ip_tables: iptables: counters copy to user failed while replacing table [ 479.791696][T17743] ip_tables: iptables: counters copy to user failed while replacing table [ 480.567368][T17735] ip_tables: iptables: counters copy to user failed while replacing table [ 480.586522][T17735] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 481.461176][T17792] netlink: 'syz.4.2888': attribute type 64 has an invalid length. [ 482.017138][T17797] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 482.045351][T17801] openvswitch: netlink: Message has 4 unknown bytes. [ 482.103463][ T5623] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 482.120086][ T5623] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 482.122578][ T5623] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 482.127637][ T5623] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 482.158056][ T5623] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 482.406457][ T4933] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 482.431706][ T4933] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 482.464627][ T4933] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 482.465728][ T4933] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 482.468302][ T4933] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 482.957316][T17812] nbd: socks must be embedded in a SOCK_ITEM attr [ 483.365489][T17820] nbd: must specify a size in bytes for the device [ 483.621306][T17839] ip_tables: iptables: counters copy to user failed while replacing table [ 483.796580][T17847] __nla_validate_parse: 6 callbacks suppressed [ 483.796602][T17847] netlink: 348 bytes leftover after parsing attributes in process `syz.0.2900'. [ 483.870892][T17850] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2900'. [ 483.931222][ T986] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 484.176947][ T986] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 484.225343][T17856] netlink: 'syz.3.2901': attribute type 83 has an invalid length. [ 484.237873][T17856] Bluetooth: hci0: unsupported parameter 5134 [ 484.237926][T17856] Bluetooth: hci0: unsupported parameter 8192 [ 484.237967][T17856] Bluetooth: hci0: unsupported parameter 5134 [ 484.238019][T17856] Bluetooth: hci0: unsupported parameter 8192 [ 484.329505][T17859] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2902'. [ 484.580005][ T986] netdevsim netdevsim2  (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 484.702572][ T5623] Bluetooth: hci5: command tx timeout [ 484.858695][T17871] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2905'. [ 484.938480][T17871] netlink: 'syz.1.2905': attribute type 5 has an invalid length. [ 485.060870][T17802] wg0 speed is unknown, defaulting to 1000 [ 485.156514][T17802] lo speed is unknown, defaulting to 1000 [ 485.522605][ T986] dvmrp0: left allmulticast mode [ 485.851301][T17912] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2911'. [ 485.854411][T17913] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2911'. [ 485.946370][T17915] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2911'. [ 486.288896][ T986] bond11 (unregistering): (slave gretap1): Releasing backup interface [ 486.470642][ T986] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 486.474901][ T986] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 486.503734][ T986] bond0 (unregistering): (slave team0): Releasing backup interface [ 486.507336][ T986] bond0 (unregistering): (slave bond10): Releasing backup interface [ 486.508361][ T986] bond0 (unregistering): Released all slaves [ 486.542920][ T986] bond1 (unregistering): Released all slaves [ 486.588832][ T986] bond2 (unregistering): Released all slaves [ 486.626299][ T986] bond3 (unregistering): (slave veth0_to_bond): Releasing active interface [ 486.628665][ T986] bond3 (unregistering): Released all slaves [ 486.672569][ T986] bond4 (unregistering): Released all slaves [ 486.694806][ T986] bond5 (unregistering): Released all slaves [ 486.727097][ T986] bond6 (unregistering): Released all slaves [ 486.755398][ T986] bond7 (unregistering): Released all slaves [ 486.785153][ T5623] Bluetooth: hci5: command tx timeout [ 486.800657][ T986] bond8 (unregistering): Released all slaves [ 486.828663][ T986] bond9 (unregistering): Released all slaves [ 486.854330][ T986] bond10 (unregistering): Released all slaves [ 486.881389][ T986] bond11 (unregistering): (slave bond12): Releasing backup interface [ 486.882185][ T986] bond11 (unregistering): Released all slaves [ 486.925888][ T986] bond12 (unregistering): Released all slaves [ 486.950297][ T986] bond13 (unregistering): Released all slaves [ 486.973607][ T986] bond14 (unregistering): Released all slaves [ 487.014008][T17898] geneve4: entered promiscuous mode [ 487.433159][T17931] pim6reg527: entered allmulticast mode [ 487.545873][T17933] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2915'. [ 487.562136][ T986] tipc: Left network mode [ 487.723084][T17941] netlink: 'syz.4.2915': attribute type 8 has an invalid length. [ 487.723109][T17941] netlink: 'syz.4.2915': attribute type 3 has an invalid length. [ 487.723122][T17941] netlink: 'syz.4.2915': attribute type 4 has an invalid length. [ 487.723136][T17941] netlink: 11575 bytes leftover after parsing attributes in process `syz.4.2915'. [ 488.658453][T17965] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2920'. [ 488.875189][ T5623] Bluetooth: hci5: command tx timeout [ 489.698208][T17802] bridge0: port 1(bridge_slave_0) entered blocking state [ 489.698325][T17802] bridge0: port 1(bridge_slave_0) entered disabled state [ 489.698500][T17802] bridge_slave_0: entered allmulticast mode [ 489.725783][T17802] bridge_slave_0: entered promiscuous mode [ 489.751104][T17802] bridge0: port 2(bridge_slave_1) entered blocking state [ 489.751534][T17802] bridge0: port 2(bridge_slave_1) entered disabled state [ 489.760513][T17802] bridge_slave_1: entered allmulticast mode [ 489.813526][T17802] bridge_slave_1: entered promiscuous mode [ 489.885228][T18009] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 490.145780][T17802] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 490.174279][T17802] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 490.470476][T17802] team0: Port device team_slave_0 added [ 490.553257][T17802] team0: Port device team_slave_1 added [ 490.641279][T18032] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2933'. [ 490.725478][T17802] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 490.725498][T17802] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 490.725528][T17802] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 490.877341][T18043] sctp: [Deprecated]: syz.3.2934 (pid 18043) Use of int in max_burst socket option deprecated. [ 490.877341][T18043] Use struct sctp_assoc_value instead [ 490.933230][T17802] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 490.933250][T17802] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 490.933289][T17802] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 490.940447][ T5623] Bluetooth: hci5: command tx timeout [ 491.139980][T17802] hsr_slave_0: entered promiscuous mode [ 491.141081][T17802] hsr_slave_1: entered promiscuous mode [ 491.259437][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 491.267734][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 491.392860][T18063] netlink: 'syz.0.2939': attribute type 3 has an invalid length. [ 491.468319][T18070] sctp: [Deprecated]: syz.0.2939 (pid 18070) Use of int in max_burst socket option. [ 491.468319][T18070] Use struct sctp_assoc_value instead [ 492.118654][T18082] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2943'. [ 492.132884][T18090] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2944'. [ 492.132907][T18090] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2944'. [ 492.737430][T18098] ip_tables: iptables: counters copy to user failed while replacing table [ 493.061395][T18104] netlink: NAT attribute has 8 unknown bytes [ 493.061435][T18104] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 493.213406][T18109] x_tables: unsorted entry at hook 3 [ 493.329395][ T986] batadv_slave_0: left promiscuous mode [ 493.337282][ T986] bridge_slave_0: left promiscuous mode [ 493.387849][ T986] hsr_slave_0: left promiscuous mode [ 493.396157][ T986] hsr_slave_1: left promiscuous mode [ 493.478210][ T986] veth1_macvtap: left promiscuous mode [ 493.478285][ T986] veth0_macvtap: left promiscuous mode [ 493.794526][T18127] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2950'. [ 493.794554][T18127] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2950'. [ 493.794590][T18127] netlink: 'syz.0.2950': attribute type 12 has an invalid length. [ 493.794606][T18127] netlink: 'syz.0.2950': attribute type 11 has an invalid length. [ 494.370149][ T986] team0 (unregistering): Port device team_slave_1 removed [ 494.662241][T18112] team0 (unregistering): Port device dummy0 removed [ 494.689670][T18117] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 494.771684][ T5278] 8021q: adding VLAN 0 to HW filter on device eth1 [ 495.041501][T18139] IPVS: length: 127 != 8 [ 495.866657][ T986] IPVS: stop unused estimator thread 0... [ 496.418791][T17802] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 496.452684][T17802] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 496.455341][T17802] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 496.497989][T17802] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 496.536467][T17802] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 496.577073][T17802] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 496.585384][T17802] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 496.690323][T17802] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 496.967280][T18209] sock: sock_set_timeout: `syz.3.2967' (pid 18209) tries to set negative timeout [ 497.032199][T18212] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2968'. [ 497.065256][T18212] netlink: 'syz.4.2968': attribute type 10 has an invalid length. [ 497.620916][T17802] 8021q: adding VLAN 0 to HW filter on device bond0 [ 497.744929][T17802] 8021q: adding VLAN 0 to HW filter on device team0 [ 497.797935][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 497.798066][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 497.912717][ T7421] bridge0: port 2(bridge_slave_1) entered blocking state [ 497.912955][ T7421] bridge0: port 2(bridge_slave_1) entered forwarding state [ 498.109828][T18242] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2974'. [ 498.115274][T18242] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2974'. [ 498.236583][T18250] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 498.667265][T18246] netlink: 'syz.3.2975': attribute type 12 has an invalid length. [ 500.107188][T18307] Bluetooth: hci0: unsupported parameter 5161 [ 500.107213][T18307] Bluetooth: hci0: unsupported parameter 8192 [ 500.107227][T18307] Bluetooth: hci0: unsupported parameter 5161 [ 500.107242][T18307] Bluetooth: hci0: unsupported parameter 8192 [ 500.151108][ T7428] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 500.290279][T18302] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 500.866352][T18324] ip6gre3: entered promiscuous mode [ 500.981164][T18324] netlink: 'syz.3.2987': attribute type 11 has an invalid length. [ 500.981188][T18324] netlink: 'syz.3.2987': attribute type 4 has an invalid length. [ 500.981203][T18324] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2987'. [ 500.983193][T17802] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 501.417147][T18346] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2989'. [ 501.477614][T18346] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2989'. [ 501.551917][T17802] veth0_vlan: entered promiscuous mode [ 501.707203][T17802] veth1_vlan: entered promiscuous mode [ 501.866978][T18356] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.2991'. [ 501.899715][T18354] bridge0: entered promiscuous mode [ 501.899738][T18354] bridge0: entered allmulticast mode [ 501.903248][T18354] team0: Port device bridge0 added [ 502.072616][T17802] veth0_macvtap: entered promiscuous mode [ 502.118235][T17802] veth1_macvtap: entered promiscuous mode [ 502.212691][T18361] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2994'. [ 502.455733][T18377] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2996'. [ 502.505677][T18376] bond0: option miimon: invalid value (18446744071829782528) [ 502.505703][T18376] bond0: option miimon: allowed values 0 - 2147483647 [ 502.515908][T18378] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2996'. [ 502.560363][T17802] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 502.745629][T17802] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 503.030947][ T7421] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 503.031969][ T7421] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 503.032007][ T7421] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 503.032041][ T7421] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 503.326797][T18393] bond14 (unregistering): Released all slaves [ 503.754096][ T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 503.754120][ T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 503.816326][T18414] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 503.900974][ T5623] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 503.967986][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 503.968009][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 504.226153][T18429] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 505.181671][ T4933] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 505.202763][ T4933] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 505.204590][ T4933] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 505.209539][ T4933] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 505.233588][ T4933] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 505.817324][ T5620] syz_tun (unregistering): left allmulticast mode [ 506.128164][ T7421] IPVS: starting estimator thread 0... [ 506.181079][T18493] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3018'. [ 506.224219][T18496] IPVS: using max 26 ests per chain, 62400 per kthread [ 506.409091][ T59] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 506.409129][ T59] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 506.409157][ T59] netdevsim netdevsim4 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 506.733969][ T59] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 506.734044][ T59] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 506.734079][ T59] netdevsim netdevsim4 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 506.849732][T18513] netlink: 'syz.1.3022': attribute type 1 has an invalid length. [ 506.923612][T18513] 8021q: adding VLAN 0 to HW filter on device bond14 [ 507.168080][T18520] bond14: (slave veth13): Enslaving as a backup interface with a down link [ 507.197452][ T59] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 507.197491][ T59] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 507.197519][ T59] netdevsim netdevsim4 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 507.274061][T18529] netlink: 'syz.3.3025': attribute type 4 has an invalid length. [ 507.274088][T18529] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3025'. [ 507.275238][T18530] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3024'. [ 507.340036][ T5623] Bluetooth: hci1: command tx timeout [ 507.369015][T18529] .`: renamed from bond0 (while UP) [ 507.500912][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 507.577909][T18532] bridge9: the hash_elasticity option has been deprecated and is always 16 [ 507.678146][ T59] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 507.678187][ T59] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 507.678215][ T59] netdevsim netdevsim4 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 507.765177][T18464] wg0 speed is unknown, defaulting to 1000 [ 507.806776][T18464] lo speed is unknown, defaulting to 1000 [ 508.014469][T18545] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3028'. [ 508.014494][T18545] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3028'. [ 509.160185][T18567] bond4: (slave syz_tun): Removing an active aggregator [ 509.239834][ T13] bond4: Warning: Found an uninitialized port [ 509.266697][T18567] bond4: (slave syz_tun): Releasing backup interface [ 509.419722][ T5623] Bluetooth: hci1: command tx timeout [ 509.536395][T18567] bond5: (slave veth0_to_bond): Releasing backup interface [ 509.594621][T18567] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 510.254208][T18596] openvswitch: netlink: Missing valid actions attribute. [ 511.152717][ T59] bond9 (unregistering): (slave geneve4): Releasing active interface [ 511.276064][ T59] bond3 (unregistering): (slave bridge2): Releasing active interface [ 511.318163][ T59] bond4 (unregistering): (slave bridge5): Releasing backup interface [ 511.356205][ T59] bond7 (unregistering): (slave bridge0): Releasing backup interface [ 511.405999][ T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 511.425125][ T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 511.444090][ T59] bond0 (unregistering): Released all slaves [ 511.458585][ T59] bond1 (unregistering): Released all slaves [ 511.483748][ T59] bond2 (unregistering): Released all slaves [ 511.499731][ T5623] Bluetooth: hci1: command tx timeout [ 511.521320][ T59] bond3 (unregistering): Released all slaves [ 511.566659][ T59] bond4 (unregistering): Released all slaves [ 511.605976][ T59] bond5 (unregistering): Released all slaves [ 511.630002][ T59] bond6 (unregistering): Released all slaves [ 511.667300][ T59] bond7 (unregistering): Released all slaves [ 511.697068][ T59] bond8 (unregistering): Released all slaves [ 511.733542][ T59] bond9 (unregistering): Released all slaves [ 511.807548][ T2220] wg0 speed is unknown, defaulting to 1000 [ 511.807589][ T2220] syz0: Port: 1 Link DOWN [ 512.040220][T18619] netlink: 9 bytes leftover after parsing attributes in process `syz.2.3042'. [ 512.051023][T18619] netlink: 9 bytes leftover after parsing attributes in process `syz.2.3042'. [ 512.654101][ T59] tipc: Disabling bearer [ 512.654316][ T59] tipc: Left network mode [ 512.757614][T18641] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3047'. [ 513.128538][T18651] syzkaller1: entered allmulticast mode [ 513.579706][ T5623] Bluetooth: hci1: command tx timeout [ 514.090221][T18696] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3052'. [ 514.160405][T18464] bridge0: port 1(bridge_slave_0) entered blocking state [ 514.160826][T18464] bridge0: port 1(bridge_slave_0) entered disabled state [ 514.160993][T18464] bridge_slave_0: entered allmulticast mode [ 514.195795][T18464] bridge_slave_0: entered promiscuous mode [ 514.330106][T18704] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 514.473448][T18464] bridge0: port 2(bridge_slave_1) entered blocking state [ 514.473986][T18464] bridge0: port 2(bridge_slave_1) entered disabled state [ 514.474357][T18464] bridge_slave_1: entered allmulticast mode [ 514.501622][T18464] bridge_slave_1: entered promiscuous mode [ 514.542411][T18692] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3053'. [ 514.603921][T18705] netlink: 88 bytes leftover after parsing attributes in process `syz.3.3053'. [ 514.817984][T18692] syzkaller1: entered promiscuous mode [ 514.818009][T18692] syzkaller1: entered allmulticast mode [ 514.837860][T18464] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 514.849694][T18464] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 515.209443][T18464] team0: Port device team_slave_0 added [ 515.223153][T18464] team0: Port device team_slave_1 added [ 515.541050][T18738] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3059'. [ 515.541077][T18738] openvswitch: netlink: Flow actions attr not present in new flow. [ 515.584641][T18744] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3059'. [ 515.584667][T18744] openvswitch: netlink: Flow actions attr not present in new flow. [ 515.589680][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 515.757328][T18464] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 515.757347][T18464] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 515.757392][T18464] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 515.815447][T18464] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 515.815467][T18464] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 515.815497][T18464] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 516.255527][T18764] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3064'. [ 516.483721][T18771] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3065'. [ 516.483780][T18771] openvswitch: netlink: Missing key (keys=c0, expected=880) [ 516.593737][T18763] netlink: Failed to add %pB helper -22 [ 516.593794][T18763] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 516.751391][T18464] hsr_slave_0: entered promiscuous mode [ 516.781106][ T5623] Bluetooth: hci1: command tx timeout [ 516.832042][T18464] hsr_slave_1: entered promiscuous mode [ 516.832863][T18464] debugfs: 'hsr0' already exists in 'hsr' [ 516.832883][T18464] Cannot create hsr debugfs directory [ 517.317982][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 517.318039][ T59] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 517.446318][T18786] ip6t_hbh: unknown flags 38 [ 518.657297][ T39] smbdirect: ib_dev[syz0] removed [ 519.125850][T18828] ip_tables: iptables: counters copy to user failed while replacing table [ 519.141085][T18830] ip_tables: iptables: counters copy to user failed while replacing table [ 519.268852][T18827] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3078'. [ 519.810710][ T59] IPVS: stop unused estimator thread 0... [ 520.137176][T18853] bridge_slave_1: entered promiscuous mode [ 520.546569][T18884] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3089'. [ 520.753232][T18892] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3090'. [ 521.027008][T18464] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 521.050577][T18464] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 521.053263][T18464] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 521.057734][T18464] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 521.088053][T18464] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 521.126114][T18464] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 521.129135][T18905] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode [ 521.145711][T18905] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode [ 521.169057][T18464] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 521.196490][T18464] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 521.207287][T18900] mac80211_hwsim hwsim6 wlan0: left promiscuous mode [ 521.333611][T18900] bridge6: entered promiscuous mode [ 521.333676][T18900] bridge6: entered allmulticast mode [ 521.680158][T18464] 8021q: adding VLAN 0 to HW filter on device bond0 [ 521.718389][T18938] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3097'. [ 521.730214][T18464] 8021q: adding VLAN 0 to HW filter on device team0 [ 521.739898][T18934] af_packet: tpacket_rcv: packet too big, clamped from 4080 to 3952. macoff=96 [ 521.771055][ T7421] bridge0: port 1(bridge_slave_0) entered blocking state [ 521.771165][ T7421] bridge0: port 1(bridge_slave_0) entered forwarding state [ 521.797847][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 521.797941][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 522.025567][T18946] netlink: 9 bytes leftover after parsing attributes in process `syz.3.3099'. [ 522.252752][T18957] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3102'. [ 522.370705][T18957] hsr_slave_1 (unregistering): left promiscuous mode [ 522.547309][T18973] netlink: 'syz.1.3106': attribute type 1 has an invalid length. [ 526.015572][T19009] gretap0: entered promiscuous mode [ 526.644136][T19015] openvswitch: netlink: ct_state flags ffffffff unsupported [ 527.117468][T19032] netlink: 'syz.2.3118': attribute type 1 has an invalid length. [ 527.360424][T19040] smc: ib device syz2 ibport 1 applied user defined pnetid SYZ2 [ 527.734382][T19032] bond1: entered promiscuous mode [ 527.751841][T19032] 8021q: adding VLAN 0 to HW filter on device bond1 [ 527.936505][T19052] openvswitch: netlink: nsh attribute has unmatched MD type 0. [ 528.283330][T18464] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 528.395554][T19064] Cannot find add_set index 0 as target [ 528.476946][T19064] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3122'. [ 528.476978][T19064] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3122'. [ 528.515311][T19064] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.3122'. [ 528.594695][T19071] netlink: 'syz.3.3123': attribute type 12 has an invalid length. [ 528.594720][T19071] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3123'. [ 528.868909][T19075] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:00bb with DS=0x1b [ 529.352200][T18464] veth0_vlan: entered promiscuous mode [ 529.382420][T18464] veth1_vlan: entered promiscuous mode [ 529.516186][T18464] veth0_macvtap: entered promiscuous mode [ 529.536889][T18464] veth1_macvtap: entered promiscuous mode [ 529.610295][T18464] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 529.661730][T18464] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 529.710900][ T986] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 529.711181][ T7429] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 529.711220][ T7429] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 529.711270][ T7429] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 529.797127][T19108] netlink: 'syz.1.3132': attribute type 3 has an invalid length. [ 530.045787][ T7429] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 530.045810][ T7429] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 530.168431][T19123] netlink: 104 bytes leftover after parsing attributes in process `syz.0.3137'. [ 530.205662][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 530.205684][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 530.256688][T19127] xt_TCPMSS: Only works on TCP SYN packets [ 530.374369][T19133] netlink: 'syz.0.3139': attribute type 16 has an invalid length. [ 530.374394][T19133] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3139'. [ 530.374420][T19133] veth0_macvtap: entered allmulticast mode [ 530.828256][ T4933] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 530.840439][ T4933] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 530.841538][ T4933] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 530.846198][ T4933] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 530.847448][ T4933] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 530.939635][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 531.243242][T19158] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3146'. [ 531.386189][T19166] bond1: Unable to set up delay as MII monitoring is disabled [ 531.387939][T19166] bond1 (unregistering): Released all slaves [ 531.630596][T19182] IPVS: set_ctl: invalid protocol: 60 0.0.0.0:20000 [ 531.648530][T19180] netlink: 'syz.4.3153': attribute type 2 has an invalid length. [ 531.697713][T19182] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3154'. [ 531.832918][T19188] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3155'. [ 531.960166][T19195] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3158'. [ 532.058419][T19201] x_tables: duplicate underflow at hook 2 [ 532.205677][T19204] netlink: 'syz.1.3161': attribute type 1 has an invalid length. [ 532.303666][T19145] lo speed is unknown, defaulting to 1000 [ 532.358860][T19212] bond15: (slave gretap3): making interface the new active one [ 532.361057][T19212] bond15: (slave gretap3): Enslaving as an active interface with an up link [ 532.362431][T19204] 8021q: adding VLAN 0 to HW filter on device bond15 [ 532.582607][T19226] tipc: Enabling of bearer rejected, already enabled [ 532.791206][T19232] netlink: 'syz.1.3169': attribute type 11 has an invalid length. [ 532.791230][T19232] netlink: 'syz.1.3169': attribute type 11 has an invalid length. [ 532.796893][T19238] syzkaller0: entered promiscuous mode [ 532.796914][T19238] syzkaller0: entered allmulticast mode [ 532.940349][ T5623] Bluetooth: hci4: command tx timeout [ 532.945516][T19238] veth3: entered allmulticast mode [ 533.754344][T19275] __nla_validate_parse: 7 callbacks suppressed [ 533.754365][T19275] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3181'. [ 533.754661][T19275] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3181'. [ 533.789823][T19145] bridge0: port 1(bridge_slave_0) entered blocking state [ 533.790116][T19145] bridge0: port 1(bridge_slave_0) entered disabled state [ 533.790259][T19145] bridge_slave_0: entered allmulticast mode [ 533.792402][T19145] bridge_slave_0: entered promiscuous mode [ 533.822771][T19145] bridge0: port 2(bridge_slave_1) entered blocking state [ 533.823048][T19145] bridge0: port 2(bridge_slave_1) entered disabled state [ 533.823190][T19145] bridge_slave_1: entered allmulticast mode [ 533.825271][T19145] bridge_slave_1: entered promiscuous mode [ 533.889902][T19145] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 533.893998][T19145] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 534.024919][T19145] team0: Port device team_slave_0 added [ 534.033136][T19145] team0: Port device team_slave_1 added [ 534.125359][T19145] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 534.125378][T19145] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 534.125407][T19145] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 534.126309][T19283] syzkaller0: entered promiscuous mode [ 534.126330][T19283] syzkaller0: entered allmulticast mode [ 534.156523][T19145] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 534.156572][T19145] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 534.156655][T19145] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 534.228126][T19283] tipc: Enabled bearer , priority 0 [ 534.258750][T19281] tipc: Resetting bearer [ 534.312275][T19281] tipc: Disabling bearer [ 534.315751][T19292] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3187'. [ 534.316597][T19293] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3187'. [ 534.548557][T19145] hsr_slave_0: entered promiscuous mode [ 534.567316][T19145] hsr_slave_1: entered promiscuous mode [ 534.568081][T19145] debugfs: 'hsr0' already exists in 'hsr' [ 534.568101][T19145] Cannot create hsr debugfs directory [ 534.623827][T19302] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3189'. [ 534.653291][T19304] netlink: 'syz.4.3191': attribute type 10 has an invalid length. [ 534.710895][T19310] vcan0: tx address claim with broadcast sa [ 534.743421][T19311] netlink: 'syz.1.3190': attribute type 2 has an invalid length. [ 534.872228][T19305] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3189'. [ 534.930889][T19304] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 534.933355][T19304] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 535.001296][T19310] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 535.019851][ T5623] Bluetooth: hci4: command tx timeout [ 535.039994][T19310] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 535.052528][T19310] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 535.078188][T19310] bond0 (unregistering): Released all slaves [ 535.106991][T19319] sctp: [Deprecated]: syz.2.3193 (pid 19319) Use of struct sctp_assoc_value in delayed_ack socket option. [ 535.106991][T19319] Use struct sctp_sack_info instead [ 535.302130][T19319] netlink: 'syz.2.3193': attribute type 10 has an invalid length. [ 535.336810][T19319] team0: Port device dummy0 added [ 535.456072][T19319] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3193'. [ 535.493995][T19319] team0: Port device dummy0 removed [ 535.865427][T19356] netlink: 'syz.4.3200': attribute type 3 has an invalid length. [ 535.888266][T19145] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 535.930878][T19351] openvswitch: netlink: Duplicate or invalid key (type 0). [ 536.078547][T19145] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 536.184792][T19145] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 536.320590][T19145] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 537.063079][T19145] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 537.081375][T19401] netlink: 'syz.1.3214': attribute type 2 has an invalid length. [ 537.086101][T19145] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 537.087276][T19145] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 537.094714][T19403] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3215'. [ 537.105458][ T5623] Bluetooth: hci4: command tx timeout [ 537.131919][T19145] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 537.134339][T19145] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 537.145778][T19145] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 537.146629][T19145] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 537.195952][T19145] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 537.497198][T19429] IPVS: set_ctl: invalid protocol: 51 172.30.0.5:20000 [ 537.692529][T19145] 8021q: adding VLAN 0 to HW filter on device bond0 [ 537.761999][T19145] 8021q: adding VLAN 0 to HW filter on device team0 [ 537.824313][ T7429] bridge0: port 1(bridge_slave_0) entered blocking state [ 537.824415][ T7429] bridge0: port 1(bridge_slave_0) entered forwarding state [ 537.847545][ T7429] bridge0: port 2(bridge_slave_1) entered blocking state [ 537.847661][ T7429] bridge0: port 2(bridge_slave_1) entered forwarding state [ 537.920577][T19439] netlink: 'syz.4.3223': attribute type 2 has an invalid length. [ 537.920600][T19439] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3223'. [ 538.152916][T19450] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3228'. [ 538.260794][T19457] netlink: 'syz.2.3230': attribute type 12 has an invalid length. [ 538.664536][T19478] syzkaller1: entered promiscuous mode [ 538.664561][T19478] syzkaller1: entered allmulticast mode [ 539.130810][T19145] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 539.200315][ T5623] Bluetooth: hci4: command tx timeout [ 539.299105][T19145] veth0_vlan: entered promiscuous mode [ 539.316813][T19145] veth1_vlan: entered promiscuous mode [ 539.370419][T19145] veth0_macvtap: entered promiscuous mode [ 539.892790][T19145] veth1_macvtap: entered promiscuous mode [ 540.053542][T19145] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 540.107494][T19145] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 540.290283][ T39] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 540.291274][ T39] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 540.291318][ T39] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 540.291358][ T39] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 540.675375][T19514] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 540.712407][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 540.712430][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 540.817174][T19511] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3243'. [ 540.859079][T19518] xt_hashlimit: invalid interval [ 540.962188][T19520] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3246'. [ 541.114962][T19507] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 541.262615][ T96] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 541.262638][ T96] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 542.073461][T19547] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3255'. [ 542.073495][T19547] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3255'. [ 542.452125][T19560] openvswitch: netlink: Unexpected mask (mask=4000010, allowed=10058) [ 543.032383][T19567] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3258'. [ 543.057929][T19567] hsr_slave_0: left promiscuous mode [ 543.081554][T19567] hsr_slave_1: left promiscuous mode [ 543.111893][T19569] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3260'. [ 543.919918][ T4933] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 543.945945][ T4933] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 543.973932][ T4933] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 544.030138][T19594] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 544.053671][ T4933] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 544.097905][ T4933] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 544.220500][T19597] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 544.285504][T19594] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 544.521557][T19602] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3264'. [ 544.790571][ T5614] bond0: (slave syz_tun): Releasing backup interface [ 545.595627][T19620] netlink: 5140 bytes leftover after parsing attributes in process `syz.3.3269'. [ 545.700841][T19632] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3271'. [ 545.891219][T19632] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3271'. [ 546.005324][T19632] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3271'. [ 546.097137][T19632] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3271'. [ 546.165957][ T5623] Bluetooth: hci2: command tx timeout [ 546.370819][T19632] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3271'. [ 546.701082][T19643] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3272'. [ 546.707867][T19642] IPVS: set_ctl: invalid protocol: 0 224.0.0.1:20003 [ 546.738825][T19641] batadv0: vlans aren't supported yet for dev_uc|mc_add() [ 546.810719][T19643] bond1: option lacp_strict: mode dependency failed, not supported in mode balance-rr(0) [ 546.816005][T19643] bond1 (unregistering): Released all slaves [ 546.964285][T19583] lo speed is unknown, defaulting to 1000 [ 547.620153][T19658] x_tables: duplicate underflow at hook 1 [ 548.076919][T19665] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3282'. [ 548.219796][ T5623] Bluetooth: hci2: command tx timeout [ 548.249831][T18418] hid-generic 0005:10CF:0002.0003: unknown main item tag 0x0 [ 548.253711][T19665] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 548.292685][T18418] hid-generic 0005:10CF:0002.0003: hidraw0: BLUETOOTH HID v0.09 Device [syz1] on aa:aa:aa:aa:aa:aa [ 548.511421][T19665] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 548.513679][T19667] netlink: 'syz.2.3282': attribute type 4 has an invalid length. [ 548.513702][T19667] netlink: 11575 bytes leftover after parsing attributes in process `syz.2.3282'. [ 549.078646][T19685] netlink: 'syz.3.3285': attribute type 32 has an invalid length. [ 549.078670][T19685] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3285'. [ 549.145937][T19692] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3287'. [ 549.303698][T19685] bond1: option coupled_control: invalid value (192) [ 549.335941][T19685] bond1 (unregistering): Released all slaves [ 549.766532][T19709] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3289'. [ 550.299872][ T5623] Bluetooth: hci2: command tx timeout [ 550.345113][T19583] bridge0: port 1(bridge_slave_0) entered blocking state [ 550.346280][T19583] bridge0: port 1(bridge_slave_0) entered disabled state [ 550.346451][T19583] bridge_slave_0: entered allmulticast mode [ 550.376659][T19583] bridge_slave_0: entered promiscuous mode [ 550.396098][T19583] bridge0: port 2(bridge_slave_1) entered blocking state [ 550.396257][T19583] bridge0: port 2(bridge_slave_1) entered disabled state [ 550.396422][T19583] bridge_slave_1: entered allmulticast mode [ 550.423282][T19583] bridge_slave_1: entered promiscuous mode [ 550.703558][T19583] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 550.731906][T19583] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 550.966912][T19583] team0: Port device team_slave_0 added [ 550.985003][T19583] team0: Port device team_slave_1 added [ 551.176377][T19583] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 551.176419][T19583] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 551.176448][T19583] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 551.258220][T19583] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 551.258256][T19583] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 551.258287][T19583] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 551.356595][T19748] __nla_validate_parse: 1 callbacks suppressed [ 551.356614][T19748] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3297'. [ 551.433044][T19583] hsr_slave_0: entered promiscuous mode [ 551.434143][T19583] hsr_slave_1: entered promiscuous mode [ 552.246851][T19765] bond1: option packets_per_slave: invalid value (18446744073709551615) [ 552.246877][T19765] bond1: option packets_per_slave: allowed values 0 - 65535 [ 552.277155][T19765] bond1 (unregistering): Released all slaves [ 552.330476][T19760] vlan0: entered allmulticast mode [ 552.330497][T19760] bond0: entered allmulticast mode [ 552.330510][T19760] bridge3: entered allmulticast mode [ 552.379321][ T5623] Bluetooth: hci2: command tx timeout [ 552.876537][T19779] bond1: option packets_per_slave: invalid value (18446744073709551615) [ 552.876563][T19779] bond1: option packets_per_slave: allowed values 0 - 65535 [ 552.912765][T19779] bond1 (unregistering): Released all slaves [ 553.123789][T19583] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 553.123826][T19583] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 553.191132][T19793] netlink: 'syz.2.3306': attribute type 1 has an invalid length. [ 553.226232][T19798] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3306'. [ 553.353386][T19803] netlink: 'syz.4.3307': attribute type 3 has an invalid length. [ 553.977055][T19583] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 554.017729][T19583] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 554.086150][T19816] netlink: 'syz.0.3310': attribute type 29 has an invalid length. [ 554.252821][T19822] netlink: 272 bytes leftover after parsing attributes in process `syz.3.3313'. [ 554.317527][T19822] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3313'. [ 554.438686][T19819] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3313'. [ 554.460507][T19820] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3311'. [ 554.480471][T19820] bridge0: port 2(bridge_slave_1) entered disabled state [ 554.550008][T19825] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3314'. [ 554.816301][T19830] netlink: 'syz.2.3312': attribute type 32 has an invalid length. [ 554.816325][T19830] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3312'. [ 554.841297][T19583] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 554.841335][T19583] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 555.091001][T19830] bond2: Setting coupled_control to off (0) [ 555.151626][T19836] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3317'. [ 555.344967][T19841] netlink: 'syz.0.3319': attribute type 1 has an invalid length. [ 555.468088][T19583] netdevsim netdevsim1 netdevsim0 (unregistering): left allmulticast mode [ 555.627973][T19841] 8021q: adding VLAN 0 to HW filter on device bond6 [ 555.739060][T19847] macvtap1: entered allmulticast mode [ 556.136167][T19856] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3322'. [ 556.878947][T19583] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 557.149981][T19583] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 557.152725][T19583] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 557.227447][T19583] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 557.239564][T19877] netlink: 'syz.3.3329': attribute type 11 has an invalid length. [ 557.239587][T19877] __nla_validate_parse: 1 callbacks suppressed [ 557.239601][T19877] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3329'. [ 557.315517][T19877] netlink: 'syz.3.3329': attribute type 11 has an invalid length. [ 557.315541][T19877] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3329'. [ 557.318899][T19583] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 557.442929][T19881] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3331'. [ 557.467152][T19583] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 557.481071][T19583] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 557.562767][T19583] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 557.563946][ T1103] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 557.700922][ T39] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 557.700970][ T39] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 557.701008][ T39] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 557.923589][T19893] xt_cgroup: no path or classid specified [ 557.923796][T19892] xt_cgroup: no path or classid specified [ 557.999438][T19895] netlink: 'syz.2.3335': attribute type 2 has an invalid length. [ 558.039536][T19895] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3335'. [ 558.226790][T19583] 8021q: adding VLAN 0 to HW filter on device bond0 [ 558.273944][T19583] 8021q: adding VLAN 0 to HW filter on device team0 [ 558.466624][ T7429] bridge0: port 1(bridge_slave_0) entered blocking state [ 558.466755][ T7429] bridge0: port 1(bridge_slave_0) entered forwarding state [ 558.543467][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 558.543582][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 558.671194][T19913] syzkaller0: entered promiscuous mode [ 558.671245][T19913] syzkaller0: entered allmulticast mode [ 558.876285][T19914] netlink: 'syz.0.3332': attribute type 2 has an invalid length. [ 559.586765][T19935] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3341'. [ 559.869041][T19948] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3344'. [ 559.913794][T19948] netlink: 'syz.2.3344': attribute type 3 has an invalid length. [ 559.913815][T19948] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3344'. [ 560.478334][T19957] netlink: 71 bytes leftover after parsing attributes in process `syz.4.3348'. [ 560.588813][T19962] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3350'. [ 560.588854][T19962] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 560.829565][ T5623] Bluetooth: hci5: unexpected cc 0x2003 length: 0 < 9 [ 561.112657][T19583] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 561.278195][T19979] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3353'. [ 561.278449][T19980] netlink: 'syz.4.3353': attribute type 1 has an invalid length. [ 561.338692][T19985] openvswitch: netlink: Missing key (keys=c0, expected=880) [ 561.506915][T19980] 8021q: adding VLAN 0 to HW filter on device bond0 [ 561.619463][T19981] bond0: (slave geneve3): making interface the new active one [ 561.622080][T19981] bond0: (slave geneve3): Enslaving as an active interface with an up link [ 561.686351][T19583] veth0_vlan: entered promiscuous mode [ 561.753616][T19583] veth1_vlan: entered promiscuous mode [ 561.993525][T19583] veth0_macvtap: entered promiscuous mode [ 562.044882][T19583] veth1_macvtap: entered promiscuous mode [ 562.130867][T19583] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 562.182241][T19583] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 562.261035][ T39] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 562.261416][ T39] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 562.261458][ T39] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 562.261496][ T39] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 562.600744][T20001] __nla_validate_parse: 2 callbacks suppressed [ 562.600767][T20001] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3356'. [ 562.600797][T20001] netlink: 'syz.3.3356': attribute type 7 has an invalid length. [ 562.600812][T20001] netlink: 'syz.3.3356': attribute type 8 has an invalid length. [ 562.600826][T20001] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3356'. [ 562.679467][T20003] xt_l2tp: wrong L2TP version: 255 [ 562.941921][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 563.577701][T20017] vcan0: tx drop: invalid sa for name 0x0000000000000003 [ 563.632795][ T7429] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 563.632818][ T7429] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 563.933940][ T96] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 563.933963][ T96] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 564.878108][ T5623] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 564.887619][ T5623] Bluetooth: hci5: Injecting HCI hardware error event [ 564.971090][ T4933] Bluetooth: hci5: hardware error 0x00 [ 567.840053][ C1] sched: DL replenish lagged too much [ 588.546813][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 599.114221][ T4933] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 603.905171][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 619.266659][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 629.505697][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 708.449115][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 708.456165][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P20028/1:b..l [ 708.464206][ C1] rcu: (detected by 1, t=10503 jiffies, g=94945, q=1054 ncpus=2) [ 708.472060][ C1] task:syz.3.3368 state:R running task stack:27480 pid:20028 tgid:20027 ppid:19145 task_flags:0x400040 flags:0x00080002 [ 708.485709][ C1] Call Trace: [ 708.489068][ C1] [ 708.492072][ C1] __schedule+0x17db/0x58f0 [ 708.496736][ C1] ? unwind_next_frame+0x1baf/0x2550 [ 708.502076][ C1] ? __pfx___schedule+0x10/0x10 [ 708.506968][ C1] ? do_syscall_64+0x166/0x520 [ 708.511859][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 708.518075][ C1] preempt_schedule_irq+0x4b/0x90 [ 708.523140][ C1] irqentry_exit+0x14f/0x910 [ 708.527761][ C1] ? trace_irq_disable+0x3b/0x140 [ 708.532825][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 708.538818][ C1] RIP: 0010:rcu_lockdep_current_cpu_online+0xf4/0x120 [ 708.545591][ C1] Code: 00 4c 85 3b 75 1a 48 c7 c7 80 2e d6 8e be 04 00 00 00 e8 1f 30 8b 00 83 3d c8 7b 29 0d 00 74 17 b0 01 65 48 ff 0d 4c ad e8 11 <74> 0f 5b 41 5e 41 5f e9 90 b6 3c 0a cc 31 c0 eb e7 e8 c6 b2 86 ff [ 708.565224][ C1] RSP: 0018:ffffc9000621f228 EFLAGS: 00000286 [ 708.571303][ C1] RAX: 1ffffffff1dac401 RBX: ffffffff8ed625f0 RCX: 8000000000000001 [ 708.579298][ C1] RDX: ffffc90006451000 RSI: ffffffff8c6dac60 RDI: ffff8880b863cb68 [ 708.587270][ C1] RBP: 0000000000000002 R08: ffffffff8241f69e R09: 0000000000000000 [ 708.595243][ C1] R10: 0000000000000010 R11: ffffffff81b293f0 R12: 0000000000083c28 [ 708.603222][ C1] R13: dffffc0000000000 R14: dffffc0000000000 R15: 0000000000000001 [ 708.611204][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 708.617362][ C1] ? __update_page_owner_free_handle+0x2e/0x4a0 [ 708.623614][ C1] ? rcu_lockdep_current_cpu_online+0x39/0x120 [ 708.629781][ C1] rcu_read_lock_held+0x1e/0x50 [ 708.634644][ C1] page_ext_lookup+0xe7/0x180 [ 708.639331][ C1] ? __update_page_owner_free_handle+0x2e/0x4a0 [ 708.645594][ C1] __update_page_owner_free_handle+0x13a/0x4a0 [ 708.651755][ C1] ? page_ext_put+0x97/0xc0 [ 708.656265][ C1] __reset_page_owner+0x85/0x1f0 [ 708.661212][ C1] __free_frozen_pages+0xc93/0xd90 [ 708.666342][ C1] __slab_free+0x274/0x2c0 [ 708.670763][ C1] ? lock_acquire+0x115/0x350 [ 708.675448][ C1] ? qlist_free_all+0x8e/0x100 [ 708.680220][ C1] qlist_free_all+0x99/0x100 [ 708.684835][ C1] kasan_quarantine_reduce+0x148/0x160 [ 708.690313][ C1] __kasan_kmalloc+0x22/0xb0 [ 708.694907][ C1] __kmalloc_noprof+0x36b/0x720 [ 708.699756][ C1] ? rcu_is_watching+0x16/0xb0 [ 708.704524][ C1] ? __kmalloc_noprof+0x1ab/0x720 [ 708.709545][ C1] ? tomoyo_realpath_from_path+0xef/0x640 [ 708.715349][ C1] ? tomoyo_realpath_from_path+0xef/0x640 [ 708.721091][ C1] tomoyo_realpath_from_path+0xef/0x640 [ 708.726653][ C1] ? tomoyo_path_number_perm+0x219/0x5f0 [ 708.732286][ C1] tomoyo_path_number_perm+0x246/0x5f0 [ 708.737750][ C1] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 708.743735][ C1] ? rcu_is_watching+0x16/0xb0 [ 708.748527][ C1] ? __pfx_current_check_access_path+0x10/0x10 [ 708.754745][ C1] tomoyo_path_mknod+0x14a/0x1a0 [ 708.759694][ C1] ? __d_lookup+0x66/0x790 [ 708.764112][ C1] ? __pfx_tomoyo_path_mknod+0x10/0x10 [ 708.769581][ C1] ? d_lookup+0x1f/0xa0 [ 708.773747][ C1] security_path_mknod+0x176/0x370 [ 708.778918][ C1] lookup_open+0x626/0x1a40 [ 708.783445][ C1] path_openat+0x677/0x1d60 [ 708.787965][ C1] do_file_open+0x23e/0x4a0 [ 708.792475][ C1] ? __pfx_do_file_open+0x10/0x10 [ 708.797515][ C1] ? _raw_spin_unlock+0x28/0x50 [ 708.802382][ C1] ? alloc_fd+0x651/0x6c0 [ 708.806744][ C1] do_sys_openat2+0x115/0x200 [ 708.811445][ C1] ? __se_sys_futex+0x3a8/0x450 [ 708.816332][ C1] ? __pfx_do_sys_openat2+0x10/0x10 [ 708.821572][ C1] ? rcu_is_watching+0x16/0xb0 [ 708.826349][ C1] __x64_sys_openat+0x138/0x170 [ 708.831215][ C1] do_syscall_64+0x166/0x520 [ 708.835818][ C1] ? trace_irq_disable+0x3b/0x140 [ 708.840852][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 708.846925][ C1] ? clear_bhb_loop+0x70/0xc0 [ 708.851624][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 708.857529][ C1] RIP: 0033:0x7f523ff9e159 [ 708.861974][ C1] RSP: 002b:00007f5240f02028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 708.870397][ C1] RAX: ffffffffffffffda RBX: 00007f5240225fa0 RCX: 00007f523ff9e159 [ 708.878390][ C1] RDX: 00000000000026e1 RSI: 0000200000000940 RDI: ffffffffffffff9c [ 708.886452][ C1] RBP: 00007f524003506b R08: 0000000000000000 R09: 0000000000000000 [ 708.894427][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 708.902394][ C1] R13: 00007f5240226038 R14: 00007f5240225fa0 R15: 00007ffd9fd43968 [ 708.910409][ C1]