last executing test programs: 56.672582005s ago: executing program 2 (id=1600): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xe, &(0x7f0000000040)=@framed={{0x18, 0x8}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @alu={0x7, 0x1, 0xb}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xf316}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f0000000000)='GPL\x00', 0x117}, 0x94) (async) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@flushpolicy={0x1c, 0x1d, 0x1, 0x0, 0x0, "", [@policy_type={0xa, 0x10, {0x2}}]}, 0x1c}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000071173e000000000095"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) (async) syz_genetlink_get_family_id$net_dm(&(0x7f0000000100), r1) (async) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000000c0), r1) 46.561003967s ago: executing program 2 (id=1600): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xe, &(0x7f0000000040)=@framed={{0x18, 0x8}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @alu={0x7, 0x1, 0xb}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xf316}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f0000000000)='GPL\x00', 0x117}, 0x94) (async) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@flushpolicy={0x1c, 0x1d, 0x1, 0x0, 0x0, "", [@policy_type={0xa, 0x10, {0x2}}]}, 0x1c}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000071173e000000000095"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) (async) syz_genetlink_get_family_id$net_dm(&(0x7f0000000100), r1) (async) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000000c0), r1) 37.268383562s ago: executing program 2 (id=1600): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xe, &(0x7f0000000040)=@framed={{0x18, 0x8}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @alu={0x7, 0x1, 0xb}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xf316}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f0000000000)='GPL\x00', 0x117}, 0x94) (async) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@flushpolicy={0x1c, 0x1d, 0x1, 0x0, 0x0, "", [@policy_type={0xa, 0x10, {0x2}}]}, 0x1c}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000071173e000000000095"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) (async) syz_genetlink_get_family_id$net_dm(&(0x7f0000000100), r1) (async) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000000c0), r1) 26.797764887s ago: executing program 2 (id=1600): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xe, &(0x7f0000000040)=@framed={{0x18, 0x8}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @alu={0x7, 0x1, 0xb}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xf316}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f0000000000)='GPL\x00', 0x117}, 0x94) (async) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@flushpolicy={0x1c, 0x1d, 0x1, 0x0, 0x0, "", [@policy_type={0xa, 0x10, {0x2}}]}, 0x1c}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000071173e000000000095"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) (async) syz_genetlink_get_family_id$net_dm(&(0x7f0000000100), r1) (async) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000000c0), r1) 17.749180324s ago: executing program 2 (id=1600): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xe, &(0x7f0000000040)=@framed={{0x18, 0x8}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @alu={0x7, 0x1, 0xb}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xf316}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f0000000000)='GPL\x00', 0x117}, 0x94) (async) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@flushpolicy={0x1c, 0x1d, 0x1, 0x0, 0x0, "", [@policy_type={0xa, 0x10, {0x2}}]}, 0x1c}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000071173e000000000095"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) (async) syz_genetlink_get_family_id$net_dm(&(0x7f0000000100), r1) (async) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000000c0), r1) 8.399457649s ago: executing program 2 (id=1600): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xe, &(0x7f0000000040)=@framed={{0x18, 0x8}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @alu={0x7, 0x1, 0xb}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xf316}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f0000000000)='GPL\x00', 0x117}, 0x94) (async) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@flushpolicy={0x1c, 0x1d, 0x1, 0x0, 0x0, "", [@policy_type={0xa, 0x10, {0x2}}]}, 0x1c}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000071173e000000000095"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) (async) syz_genetlink_get_family_id$net_dm(&(0x7f0000000100), r1) (async) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000000c0), r1) 2.67789458s ago: executing program 1 (id=2461): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6gre0\x00', 0x0}) accept(r0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x4c, 0x10, 0x403, 0x4, 0x25ffdbfe, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r1}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @remote}, @IFLA_IPTUN_TOS={0x5, 0x5, 0x4}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000054}, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) accept(0xffffffffffffffff, 0x0, 0x0) bind$inet(r2, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'ip6_vti0\x00'}) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000400)='nv\x00', 0x3) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r3 = socket$inet6(0x10, 0x2, 0x4) sendto$inet6(r3, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000720114000000000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x3, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x90) 2.465918007s ago: executing program 1 (id=2467): r0 = socket(0x10, 0x80002, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000040)) ioctl$PPPIOCGNPMODE(r1, 0xc008744c, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtaction={0x16c, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x158, 0x1, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x20}, @TCA_SAMPLE_PARMS={0x18}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x20}]}, {0x4}, {0xb}, {0xc, 0x4}}}, @m_xt={0x58, 0x17, 0x0, 0x0, {{0x7}, {0x14, 0x2, 0x0, 0x1, [@TCA_IPT_INDEX={0x8, 0x3, 0x90b}, @TCA_IPT_HOOK={0x8, 0x2, 0x4}]}, {0x1f, 0x6, "f62f5842d5a9b8e8524ed558e3b65cc1fc86a749027b865caa0a1c"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_skbmod={0xa4, 0x1c, 0x0, 0x0, {{0xb}, {0x10, 0x2, 0x0, 0x1, [@TCA_SKBMOD_SMAC={0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}}]}, {0x6a, 0x6, "2b45b9197ecf7bcbd6d5d0b89e829e9d769f0a6fcdf2f493491fd74e2215c1ff57261a537b40d82cf2a7e591517e2575dfd2d9175e10cab5f40f0e8cd5d063c0ec791f379873f196923734be8ec74e54b7c9aee8b3ba3986a11dc9d804cd96293f161fe9ffc4"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1}}}}]}]}, 0x16c}}, 0x0) 2.222672081s ago: executing program 1 (id=2470): r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_INTERFACE(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, 0x0, 0x300, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x3, 0x4a}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x24000000) r3 = accept4(r0, &(0x7f00000001c0)=@xdp={0x2c, 0x0, 0x0}, &(0x7f0000000240)=0x80, 0x80000) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), r0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000044000701fcffffff00000000017c00000c0004804e0a00"], 0x20}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) sendmsg$L2TP_CMD_SESSION_CREATE(r3, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="9f6a108095a0cb23000000", @ANYRES16=r5, @ANYBLOB="00042bbd7000fedbdf250500000008000c000300000008001800e0000002"], 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x90) r7 = socket$kcm(0x10, 0x2, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r8, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r8, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r8, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r8, 0x11a, 0x1, &(0x7f0000000540)=@gcm_128={{0x303}, "ffffffffffffffe2", "8e083700daf38a6d69e9b5e9c2f133d7", "6a3a05b9", "12772541f8eb02bb"}, 0x28) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r8, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0) write$cgroup_int(r9, &(0x7f0000000000), 0xffffff6a) sendfile(r8, r9, 0x0, 0xffffffff004) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000740)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000006c0), &(0x7f0000000700)='%pi6 \x00'}, 0x20) r11 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r11, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) r12 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000780)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x33b4, '\x00', r4, 0xffffffffffffffff, 0x4, 0x0, 0x4}, 0x50) r13 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000800)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x5, '\x00', r1, 0xffffffffffffffff, 0x1, 0x1, 0x3}, 0x50) r14 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=@bloom_filter={0x1e, 0xd93a, 0x80000000, 0x5, 0x1a0, 0x1, 0xb, '\x00', r4, 0xffffffffffffffff, 0x0, 0x5, 0x1, 0x2}, 0x50) r15 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000900)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x8001, '\x00', r4, 0xffffffffffffffff, 0x5, 0x5, 0x5}, 0x50) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r16, &(0x7f0000001140)="62cd309cd5ceb7455eadb98a10eb786c9d61363a09aba8c9c0d3e8ecccd321882363307ee15c1a57a4fd96b9afcc206e536d5ce63cb84fe2b56f9531d689d9ea4d4a138d62bb51b0034deb063c61d6a9cd470ef3dd4e0a3171d6c25a9348a680a577b8b0b6a63d655480a484e9bfb67306ab923e373ef1ac60ffadad5565631d393e", 0x82) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x6, 0x1e, &(0x7f0000000400)=@framed={{0x18, 0x0, 0x0, 0x0, 0x438e, 0x0, 0x0, 0x0, 0x486b}, [@ldst={0x0, 0x3, 0x3, 0x4, 0x4, 0x4, 0x8}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3ff}, @printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x10001}}, @cb_func={0x18, 0x5, 0x4, 0x0, 0xffffffffffffffff}, @exit, @printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x4}, @cb_func={0x18, 0xb, 0x4, 0x0, 0x8}]}, &(0x7f0000000300)='syzkaller\x00', 0x4, 0x9a, &(0x7f0000000500)=""/154, 0x41000, 0x50, '\x00', r4, 0x25, r9, 0x8, &(0x7f00000005c0)={0x0, 0x6}, 0x8, 0x10, &(0x7f0000000640)={0x0, 0xd, 0x200, 0x2}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000980)=[r10, r11, r12, r13, r14, r15, r16], &(0x7f00000009c0)=[{0x0, 0x3, 0x10, 0x2}, {0x4, 0x1, 0xe}, {0x4, 0x4, 0x2}, {0x3, 0x3, 0x3, 0x1}], 0x10, 0x9}, 0x94) sendmsg$kcm(r7, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e1406ca000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x4000) 1.567353782s ago: executing program 1 (id=2477): r0 = socket$alg(0x26, 0x5, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MAC_ACL(0xffffffffffffffff, 0x0, 0x40) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x7a7241, 0x0) close(r1) ioctl$SIOCSIFHWADDR(r1, 0x8922, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r2, 0x84, 0x81, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x19, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_GET(0xffffffffffffffff, 0x0, 0x840) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r3, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000100), 0x237}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0x1f00, 0xf, 0x2f, &(0x7f00000007c0)="9f44948721919580684010a49e66", 0x0, 0x7ff, 0x0, 0xb1, 0x0, &(0x7f0000000700)="389ceff69d08b0af1cc71b6262d50660bbaf31a7f8cd6a6f911beb65d5fe6b54bf21a66489121f24fefd198059288c9b735e1898e77a7469489a249292c02a72bc193a3008ebdbf4e9dd4ee8fcceef55402c913c8dd0ebece1330aaa93ece835c5044a246a5967e3acd7c950b3b19f351830e545eb9bc3a9c6dd22ce97f1f857cfe8b68a2370b69ea336006b589368f92deb68f3dfc6f2bfee09f8342da437fce5dcdf658e453e3132bb42067575318c39"}, 0x23) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r5 = accept4(r0, 0x0, 0x0, 0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_buf(r6, 0x29, 0xcf, 0x0, 0x4) sendmsg$alg(r5, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x890}, 0x0) sendmsg$nl_route_sched_retired(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000008c0)=@delqdisc={0x100, 0x25, 0x800, 0x70bd2d, 0x25dfdafe, {0x0, 0x0, 0x0, 0x0, {0xd}, {0x7, 0x9}, {0x1, 0xffe0}}, [@q_dsmark={{0xb}, {0x24, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x8}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x30}]}}, @q_dsmark={{0xb}, {0x18, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x15}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}]}}, @q_dsmark={{0xb}, {0x1c, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x9d}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x3}]}}, @q_dsmark={{0xb}, {0x4}}, @q_dsmark={{0xb}, {0xc, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x20}]}}, @q_dsmark={{0xb}, {0xc, 0x2, [@TCA_DSMARK_INDICES={0x6}]}}, @q_dsmark={{0xb}, {0x14, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x10}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x14}]}}]}, 0x100}, 0x1, 0x0, 0x0, 0x4008044}, 0x0) recvmmsg(r5, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f0000000080)}, 0x7}], 0x1, 0x60, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xf, 0x4, 0x8, 0x22}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x4, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x4, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 1.209204126s ago: executing program 0 (id=2481): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCSPASS(r1, 0x40107447, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00'}, 0x10) r3 = socket$inet(0x2, 0x3, 0xd) getsockopt$inet_mreqsrc(r3, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x34, r2, 0x5, 0x1, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0xaf, 0x1f}}}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x34}, 0x1, 0x0, 0x0, 0x8044}, 0x0) 1.001442366s ago: executing program 1 (id=2484): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000003d80)={0x1, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) syz_emit_ethernet(0x66, &(0x7f0000000340)={@multicast, @multicast, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @multicast2, @private=0xa010100}, {{0x0, 0x0, 0x1, 0x0, 0xb, 0x0, 0x0, 0x4, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {0x8, 0x88be, 0x0, {{}, 0xfffff788}}}}}}}, 0x0) close(r1) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newlink={0x50, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r4}, @IFLA_IFALIAS={0x14, 0x14, 'dummy0\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@dellink={0x20, 0x11, 0x1, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, 0x1480, 0x2104}}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x80) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0xfffffffc) ioctl$IMGETVERSION(r3, 0x80044942, &(0x7f0000000040)) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x3c, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x500}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000804}, 0x8000) r10 = socket$alg(0x26, 0x5, 0x0) bind$alg(r10, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha20\x00'}, 0x58) setsockopt$ALG_SET_KEY(r10, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) r11 = accept4(r1, 0x0, 0x0, 0x180800) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r11) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r11, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x1405, 0x200, 0x70bd2b, 0x25dfdbfd}, 0x10}, 0x1, 0x0, 0x0, 0x8000}, 0x8855) r12 = socket(0x1, 0x803, 0x0) getsockname$packet(r12, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x58, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1f}}, @IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r13}, @IFLA_MASTER={0x8, 0xa, r13}]}, 0x58}, 0x1, 0x0, 0x0, 0x600}, 0x0) 927.529759ms ago: executing program 4 (id=2485): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1802000000000000001f000000000000850000009b000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ffffff80850000007100000095"], &(0x7f0000000080)='GPL\x00'}, 0x90) 920.217236ms ago: executing program 0 (id=2486): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=@newsa={0x140, 0x1a, 0x713, 0x70bd28, 0x25dfdbfe, {{@in=@multicast1, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0xfffd, 0x8, 0x4e21, 0x2, 0x2, 0x0, 0x0, 0x3a, 0x0, 0xee00}, {@in6=@private2, 0x4d3, 0xcd}, @in6=@private2, {0x2, 0x10001, 0x0, 0x6, 0xffffffffffffffff, 0x1c00000000000}, {0x11df, 0xfffffffffffffffd, 0x0, 0xa}, {0x9, 0x4}, 0x70bd27, 0xfffffffe, 0x2, 0x4}, [@algo_aead={0x32, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x20, 0x80, '\x00\x00\x00\x00'}}]}, 0x140}, 0x1, 0x0, 0x0, 0x40400c0}, 0x800) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="600000000206010100000000000000000a00000005000400000000000900020073797a32000000001400078008001340ffffffff08000640000000000500050002000000050001000600000013000300686173683a6e65742c6966616365000011651bb2399f862d3701c6319a881a7e62fbadc019bbdba143c255312bfb3ff2d7d8a3aefccb0015160e1b60d5bf14587f80c3f87313e5932c63f0622499d7eb5818c75c1937c3eab360aabb57994d1139130cd8c3c6bc7bea397bc33d94d10629ed3d26e08f9d6f76bc751ffd001579"], 0x60}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff01000000000000001b000000000001e000040100000400000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000020000000000010510000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e30000000000200000000000003f"], 0xb8}, 0x1, 0xfffff000}, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f00000001c0)={@broadcast, @broadcast, 0x0}, &(0x7f0000000200)=0xc) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@multicast, @random="9c38ee464632", @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @private, @multicast1}, {0x11, 0x4, 0x0, @remote}}}}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000680)=@updpolicy={0xb8, 0x14, 0x1, 0x0, 0x0, {{@in=@local, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0xffffffffffffffff}, {0x3f000000}}}, 0xb8}, 0x1, 0xfffff000}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_BITWISE_SREG={0x8}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x7fffffff}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x84}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x7e, &(0x7f0000000000)={@broadcast, @random="6c7621d7cc94", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "fec000", 0x48, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "98a350", 0x0, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x2}, @private1, [@hopopts={0x2f}], "fafb17c103001c193eb46558f48ce6b9"}}}}}}}, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000003e000b0023ad7000fedbdf250500000008000200", @ANYRES32=0x0, @ANYBLOB="1f30fda8e9121835bf18d5a77b1a5be17127867b3568c67cbf2495c02fdfa18fedacbd9719316c37835e4b169a1aa7933953299086a17c93a47c77336757242f9bb01a4b23375b83ee20b17561f73aa9651d27651864e59f0a2736b040fca9662e44856ef9de595b4d4dc1532f5c53dd1e47451dfd17eb733fd30e8edef4"], 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x4040084) 839.036865ms ago: executing program 3 (id=2487): syz_emit_ethernet(0xd0, &(0x7f0000000000)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x9a, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0xe5, 0xdb0b, 0x0, 0x0, [{0x0, 0x4, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472ee"}, {0x0, 0x1, "000000050000000026000400"}, {0x0, 0x5, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a3"}, {0x3}, {0x21, 0x2, "b8a3e10090cf616400000002000000000000000000"}, {}, {0x0, 0x2, "d5170000dce9674a36da018dff16e7"}]}}}}}}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xf, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ba00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) close(r0) listen(0xffffffffffffffff, 0xfffffffc) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x30, r3, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}]}]}, 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0x28, r5, 0x1, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1a}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x8) 812.165398ms ago: executing program 4 (id=2488): r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x9, 0x5}}}}]}, 0x44}}, 0x0) socket(0x21, 0x5, 0x4) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x4001}, 0xfea3) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0xffffffb9, &(0x7f0000000280)={&(0x7f00000000c0)=@ipv6_getaddr={0x18, 0x16, 0x3c2be10bca706f15, 0x0, 0xffffffff, {0xa, 0x0, 0x10}}, 0x18}, 0x1, 0x0, 0x0, 0x44000}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000600)=@newtfilter={0x3c, 0x2c, 0x4, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {}, {0x1, 0xfff1}}, [@filter_kind_options=@f_flow={{0x9}, {0xc, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x811}, 0x24000041) r3 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000000)={0x7, 0xffffffff, 0x6, 0x6}, 0x10) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 717.860479ms ago: executing program 0 (id=2489): r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='xen_mmu_pte_clear\x00', 0xffffffffffffffff, 0x0, 0x4acd}, 0x18) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, r0, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000400)={r1, 0x3, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_ENCAP(r2, 0x113, 0x1, &(0x7f0000000280)=0x1, 0x4) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000040)=0x8, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='xen_mmu_pte_clear\x00', 0xffffffffffffffff, 0x0, 0x4acd}, 0x18) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, r0, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000400)={r1, 0x3, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) socket$phonet_pipe(0x23, 0x5, 0x2) (async) setsockopt$PNPIPE_ENCAP(r2, 0x113, 0x1, &(0x7f0000000280)=0x1, 0x4) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000040)=0x8, 0x4) (async) 639.178743ms ago: executing program 3 (id=2490): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[], 0x0}, 0x94) r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x4098884, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) bind$inet6(r1, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff81004e210e227f000001925aa80020007b00090080007f000006e809000000ff0000f03ac71002000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) r3 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r3, 0x8922, &(0x7f0000000440)={'syz_tun\x00', 0x101}) sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x3, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="660a00000000000061114c000000000085000000cf00000095"], &(0x7f0000000000)='GPL\x00'}, 0x90) 634.625635ms ago: executing program 4 (id=2491): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=ANY=[@ANYBLOB="38000000180001000000000000000000020000000003000900000000080001006401010214001680100008800c000680080001"], 0x38}}, 0x20000054) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYRESDEC=r0], 0xf8}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) (async) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYRES64=r0], &(0x7f0000000100)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) (async) r1 = socket(0x1e, 0x1, 0x0) connect$tipc(r1, &(0x7f0000000040)=@id, 0x10) shutdown(r1, 0x2) accept4$rose(r1, &(0x7f0000000080)=@full={0xb, @dev, @null, 0x0, [@default, @bcast, @bcast, @bcast, @remote, @default]}, &(0x7f00000000c0)=0x40, 0x40400) 581.927517ms ago: executing program 0 (id=2492): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000001bc0)={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00', 0xb}, 0x1c) listen(r0, 0x9) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) socket$netlink(0x10, 0x3, 0x10) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000040)=@mangle={'mangle\x00', 0x64, 0x6, 0x590, 0xd0, 0x3d0, 0x1a0, 0x1a0, 0x1a0, 0x578, 0x578, 0x578, 0x578, 0x578, 0x6, 0x0, {[{{@ipv6={@private0, @private1, [], [], 'veth1\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x3a010000}}, @HL={0x28}}, {{@ipv6={@private1, @loopback, [], [], 'tunl0\x00', 'bridge_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x300}}, {{@ipv6={@private0, @remote, [], [], 'veth0_to_team\x00', 'tunl0\x00', {}, {}, 0x11, 0x0, 0x3}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x8, 0x1, 0x1}}}, {{@ipv6={@loopback, @private2, [], [], 'syzkaller1\x00', 'veth0_to_batadv\x00'}, 0x0, 0x138, 0x180, 0x0, {}, [@common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @dev, @private0, @local}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@loopback, 'ipvlan1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5f0) syz_emit_ethernet(0x4e, &(0x7f0000000040)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f900f5", 0x18, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0xffff, 0x0, 0x0, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000040000000160a01010000000000000000010000000900010073797a30000000000900020073797a3000000000140003"], 0xc8}}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r3, 0x29, 0x46, &(0x7f0000000100)=0x40000003, 0x4) sendto$inet6(r3, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet6_buf(r0, 0x29, 0x1b, &(0x7f0000001b40)=""/33, &(0x7f0000001b80)=0x21) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r6}, 0x10) r8 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r7}, 0x8) close(r8) sendmsg$kcm(r1, &(0x7f0000001b00)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000640)="135f2568d27e60e2cc47ba2685f291243ccc866d22d3884712b515a7b81865d0fb1bc1394e59432499aecb8b0593a3ac0d0eea85a8c23790de2ff40303c324a75add929c9b4d108465a65f66a1f40a11ab", 0x51}, {&(0x7f00000006c0)="863cf56da4f1c25765a337c8", 0xc}, {&(0x7f0000000700)="96182e83b7971897f08792ebd59196d80f71a08a3c23", 0x16}, {&(0x7f0000000740)="7379a622fe769a61b4b78d3b78de0dd1c66251910c4bbb793f7376d16cff8ad0da7aabbfb6fefc1a85feb51b5ba7694367f8fd2227e1b0d6444f41e882c5538652c5af30d3ca7fb5c1ebb57f1b805fd88dd1856423d65a9355a5fb00d7c3d8021094c41a5b259b027487cb655bfbd2a1556bcbdff0f6ca87ebf9df0ca2bd6f94f74b062a2efc23020125e9287f24f61a93351316c4e3ad3a241aa6cf0f5f08b7715f8acfd662de00d31cf7a2401d9d3a77277c8a186daf5cf8b938ba0d16c6cc1f8f968113fbd0a10a3a2b2a2619b0f41e7220243cb029182a38bb", 0xdb}, {&(0x7f0000000840)="2ae3b6b5ca1f49fd51be12b21d235ee41e094a4e3b818d0768cc970aa2694f7f2f46c2781004e08c4db5549e332e3eef77e40beba820efaf64e999c7aff11e89b00cedb72fbf2bb866ed88a7f1293e58dcf8fc3bf6b9ab82391af3e9385111e1c276dafff95c4a5a8160f9de00c5ba2aed989c647aa011afa4a4021013903ebc2dc32edbdb812dcbe1e9a837655ec57446ab088df5111c7c967e1068853585a01a3d7b5d07ee249ee7411b5f285a1f28042567dae71e1ae953d7ec573c44585ed451c89f9b89898eeb1b7e193e", 0xcd}], 0x5, &(0x7f00000009c0)=[{0x60, 0x113, 0x8, "493d8a461b5a69c1fa7b06ba109202f9961e419bf023165a5448fedc1870e826a6424d1b126a0c84195dc334836218fb978a1a88b29df4b0d547d907ecd06b74929afa30d9738cd721af"}, {0x1010, 0x10b, 0xf, "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"}, {0x68, 0x0, 0x8001, "f237e2f6e1d99707ee1cf8aaa63d47f2c070357eff3ef971bf06359d164b9798294783f2b72294a281bd03381fe96d28fe32dca79adfc2aa3bfba8b3b2b1f1433085d4322820b256dda6f8c2d19de36cab5f1c1ebc"}], 0x10d8}, 0x4004804) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="98000000100001002abd7000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="a009000000000000140003006e657464657673696d3000000000000008002800babc00005c0016805800018054000c8014"], 0x98}, 0x1, 0x0, 0x0, 0x24040854}, 0x40000) sendmsg$netlink(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="140100001f0001000000000000000000060100800c0001"], 0x114}], 0x1}, 0x0) 463.293769ms ago: executing program 4 (id=2493): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) recvmmsg(r0, &(0x7f0000002c00)=[{{0x0, 0x0, 0x0}, 0x8101}, {{0x0, 0x0, 0x0}, 0xd}, {{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000000)=""/196, 0xc4}, {&(0x7f0000000d80)=""/264, 0x108}, {&(0x7f0000007080)=""/4109, 0x100d}, {&(0x7f00000006c0)=""/229, 0xe5}], 0x4}, 0x549aea9f}, {{0x0, 0x0, 0x0}, 0xffffede0}], 0x5, 0x20, 0x0) 462.636588ms ago: executing program 3 (id=2494): r0 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x0, @multicast1}}, 0x24) listen(r0, 0xffffffff) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000006ac0), r1) (async) r3 = socket$netlink(0x10, 0x3, 0x0) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x30, 0x3e, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x14, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}, @typed={0x6, 0x20, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x4, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) (async) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r5, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) (async) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) (async) sendmsg$FOU_CMD_DEL(r3, &(0x7f0000006bc0)={0x0, 0x0, &(0x7f0000006b80)={&(0x7f0000006b00)=ANY=[@ANYBLOB="18000000", @ANYRES16=r2, @ANYBLOB="01002abd7004000500000008000000000000"], 0x18}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) (async) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r1, 0xc0709411, &(0x7f0000000040)={{0x0, 0x2, 0x8, 0x1, 0x2, 0x0, 0x1000, 0xfffffffd, 0x100, 0x6, 0xb, 0x7, 0x92e9, 0x9, 0xfffffffffffffffa}, 0x30, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0xd000943e, &(0x7f0000000100)={0x0, r7, "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", "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"}) r8 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r10 = openat$cgroup_ro(r9, &(0x7f0000000080)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_subtree(r10, &(0x7f0000000280)=ANY=[@ANYBLOB='-', @ANYRESOCT, @ANYRESOCT], 0x44) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r8, 0x0, &(0x7f00000000c0)=0x0) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r13 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r13) sendmsg$NFC_CMD_DEV_UP(r12, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x1c, r14, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r11}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) (async) sendmmsg(r5, &(0x7f0000001540)=[{{&(0x7f0000001100)=@nfc={0x27, r11, 0xffffffffffffffff, 0x2}, 0x80, &(0x7f00000014c0)=[{&(0x7f0000001180)="086e0ea7df275f93877bb95d014c6646d91fc8ef98067f7e4d", 0x19}, {&(0x7f00000011c0)="a2c462e1654df504faf7dbdc552c237affe41f5ac59962fb42364f1c4adda089108f666b048ea5414479329c9983b71fbd0b62a5", 0x34}, {&(0x7f0000001200)="782f787f6c72b2b6be1c69ddfb0154f9160231a38354de2802a8fbd5e58a50106e54dcec4e7fb726c456f0b163941401416d48757c4b258f5d6d9cefb5952c1ce8d095338fc026236b456fa8db7cf53a07e97d", 0x53}, {&(0x7f0000001280)="ac52ce063243", 0x6}, {&(0x7f00000012c0)="99ca759d616d971a6c0263c9883ed607972ce8af203670d0c5b26894c2c6b472f8bf055a408b14f38e66180437e7e79a6f4636428210298190179c92cb8c988fb0f47cc45dad1b8238509399a7682a86c63aeb49a3e04f052ca281ad8ba223c2b76fdba80cd250db46fc36096cc8d5aeb4691fdd63b0a23a72ea36a065e9c0c89a8de6c7c16132884d778d5f92e03a40caed7db51c7111d006daad0a3b6d465c0e152c06f6f7f15b789e1853732413a654211c33b46bbbb4f5d4c3e961ea2bcaf74997d45346b1eaa43befd2695e997b09c2fe07fda34fa60f", 0xd9}, {&(0x7f00000013c0)="84eac04851f9b944d2bb4f76b14cd336a842518d80b63b0d7365e61d122ffe532854f62604b6100b30d0ac9ec144616286c5d2d676ed56146da3285837a7ee4d3d6d1485e7cf1651eb24eb1df07292bc5804d40835a4412d42baba590f67f4f07ff060ee97040dc03c00be978d8e2e15704f50cf81bce369ecc0aa2bd511791c7776dba0a29dbb9633ad1f642dc21791c7445451ef91a288edbef421b153cd24bda1821eedd75bb1104f67194fbdc034543862bce9376214a8a2a4b370eeb963024b22976bd8ff3c73568d55e100955e2343dc5504ed3d8c9a7d73", 0xdb}], 0x6}}], 0x1, 0x4050080) 371.993099ms ago: executing program 3 (id=2495): mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha512\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$kcm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)}, 0x0) r2 = socket(0xf, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x8604}, 0x10) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_BT_SNDMTU(r3, 0x112, 0xc, 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="a00000001a006d87"], 0xa0}}, 0x40c0) r4 = socket(0x10, 0x3, 0x0) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x1, 0x1, 0x401, 0x0, 0x0, {0x5, 0x0, 0xea}}, 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x40010) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f00000001c0)={0x80000006}, 0x10) sendmsg$kcm(r5, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1c0000004a008102e00f80ecdb4cb9020a", 0x4a}, {&(0x7f0000001700)="0c74c75350f4a590e15c61c7942348092734fe1863473bbce6798a60e9", 0x1d}], 0x2, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_generic(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="130000001802010000000000010000001d01010004000080b6aa938add3b67ca27966ad1b3a6f8a00ad6e60a10fe6711241d746066a07310872f6b9772716a803acdd3b83d"], 0x18}}, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0xc3072, r4, 0x0) 312.160454ms ago: executing program 0 (id=2496): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000001c0)=0x2, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000980)={0x802}, 0x10) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r4, 0x84, 0x7, 0x0, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x1c, 0x52, 0x1, 0x0, 0xfffffffc, {0x2}, [@typed={0x8, 0x3, 0x0, 0x0, @binary="feffffff"}]}, 0x1c}}, 0x4040081) 227.0139ms ago: executing program 1 (id=2497): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xe, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000071103b000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="280000003d0007010000000000000000037c000014003780100003007174722834a9197334"], 0x28}}, 0xc000) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYRESHEX=r0, @ANYRESOCT=r0, @ANYRES8=r0], 0x3c}, 0x1, 0x0, 0x0, 0x20000010}, 0x200000a0) sendmmsg(r0, &(0x7f0000000000), 0x400000000000235, 0x0) read$alg(r0, &(0x7f0000000040)=""/192, 0xc0) 226.514999ms ago: executing program 3 (id=2498): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r6, &(0x7f0000000000)={0x1f, 0x8ef, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) r7 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPCONNADD(r7, 0x400442c8, &(0x7f0000000540)=ANY=[@ANYRES32=r6]) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r7, 0x800442d2, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.swap.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r8, 0x0) r9 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_RECVERR(r9, 0x114, 0x3f, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'veth1_macvtap\x00', 0x0}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f0000000140)={r10, 0x1, 0x6}, 0x10) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0xfffffffe, 0x8}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newtfilter={0x68, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xfff1, 0x4}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x38, 0x2, [@TCA_CGROUP_ACT={0x34}]}}]}, 0x68}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r11 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r11, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r12 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r12, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r13, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x40000) sendmsg$nl_route_sched(r12, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r13, {0xfffa, 0xfff3}, {0x0, 0xffe0}, {0x10, 0x4}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_CT_STATE={0x6, 0x5b, 0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x4) 216.672813ms ago: executing program 4 (id=2499): r0 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x2710, @hyper}, 0x10, 0x80800) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f0000000080)=0xc) (async) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000000c0)={{{@in=@remote, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private2}, 0x0, @in6=@ipv4={""/10, ""/2, @initdev}}}, &(0x7f00000001c0)=0xe8) (async) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0, 0x0}, &(0x7f0000000240)=0xc) setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000280)={r1, r3, r4}, 0xc) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x2010, r0, 0xcf9e7000) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)=@bridge_newvlan={0x30, 0x70, 0x400, 0x70bd25, 0x25dfdbfe, {0x7, 0x0, 0x0, r2}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x8, 0x4}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5}}]}, 0x30}, 0x1, 0x0, 0x0, 0x8080}, 0x2004c084) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)=@getrule={0x14, 0x22, 0x10, 0x70bd26, 0x25dfdbfb, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) (async) r6 = accept4$x25(0xffffffffffffffff, &(0x7f00000004c0)={0x9, @remote}, &(0x7f0000000500)=0x12, 0x0) ioctl$SIOCX25SENDCALLACCPT(r6, 0x89e9) (async) connect$vsock_stream(r0, &(0x7f0000000540)={0x28, 0x0, 0x2711, @my=0x0}, 0x10) (async) ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f0000000580)={0x0, 0x0, 0x4, 0x0, '\x00', [{0x7, 0x1, 0x23d, 0x6, 0x9, 0xc}, {0x7, 0x76, 0x5, 0xffffffff80000000, 0x7fff, 0x2baa}], ['\x00', '\x00', '\x00', '\x00']}) (async) socket$vsock_stream(0x28, 0x1, 0x0) (async) r7 = accept$packet(0xffffffffffffffff, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000780)=0x14) sendto$packet(r7, &(0x7f00000007c0)="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", 0x1000, 0x4, &(0x7f00000017c0)={0x11, 0x18, r2, 0x1, 0x3}, 0x14) getsockopt$sock_linger(r5, 0x1, 0xd, &(0x7f0000001800), &(0x7f0000001840)=0x8) (async) r9 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r9, 0x89f2, &(0x7f00000018c0)={'erspan0\x00', &(0x7f0000001880)={'erspan0\x00', r8, 0x8000, 0x8, 0x907d, 0x400, {{0x8, 0x4, 0x2, 0x1, 0x20, 0x64, 0x0, 0x1, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0xc}, @loopback, {[@generic={0x83, 0xb, "141f3a713f812f725f"}]}}}}}) (async) sendmsg$nl_route(r5, &(0x7f00000019c0)={&(0x7f0000001900), 0xc, &(0x7f0000001980)={&(0x7f0000001940)=@ipmr_delroute={0x24, 0x19, 0x400, 0x70bd2d, 0x25dfdbfb, {0x80, 0x20, 0x0, 0x6, 0xfd, 0x3, 0xff, 0x0, 0x2c00}, [@RTA_SPORT={0x6, 0x1c, 0x4e22}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) (async) bpf$MAP_CREATE(0x0, &(0x7f0000001a00)=@bloom_filter={0x1e, 0x7, 0x2, 0x2, 0x100, 0x1, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3, 0x4, 0x2}, 0x50) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt(r10, 0x6, 0x1, &(0x7f0000001a80)=""/4096, &(0x7f0000002a80)=0x1000) (async) socket$vsock_stream(0x28, 0x1, 0x0) (async) r11 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) ioctl$sock_inet_SIOCGIFADDR(r11, 0x8915, &(0x7f0000002ac0)={'pimreg1\x00', {0x2, 0x0, @dev}}) (async) sendmsg$nl_route(r5, &(0x7f0000002bc0)={&(0x7f0000002b00)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000002b80)={&(0x7f0000002b40)=@ipv4_getnexthop={0x30, 0x6a, 0x800, 0x70bd2a, 0x25dfdbfd, {}, [@NHA_ID={0x8, 0x1, 0x2}, @NHA_MASTER={0x8, 0xa, 0x2}, @NHA_ID={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x8000) (async) socket$packet(0x11, 0x2, 0x300) (async) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r12, &(0x7f0000002cc0)={&(0x7f0000002c00)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000002c80)={&(0x7f0000002c40)={0x40, 0x1, 0x8, 0x101, 0x0, 0x0, {0x1, 0x0, 0x6}, [@CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0xffffffff}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2f}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x16}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x8010) 65.734732ms ago: executing program 4 (id=2500): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f00000000c0)='rpc_stats_latency\x00', r1, 0x0, 0xf}, 0x18) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) ioctl$BTRFS_IOC_SET_FEATURES(0xffffffffffffffff, 0x40309439, &(0x7f0000000000)={0x2, 0x0, 0x4}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp256-generic\x00'}, 0x58) r3 = accept4$alg(r2, 0x0, 0x0, 0x0) sendmmsg$sock(r3, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000340)="8224aca5f4", 0x5}], 0x1}}], 0x1, 0x0) r4 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8b04, &(0x7f0000000000)={'wlan1\x00'}) 7.199042ms ago: executing program 0 (id=2501): r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000080)={0x0, 0x728}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000100)={r1, @in={{0x2, 0x4e21, @private=0xa010100}}, 0x4, 0xffff}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x11, 0xb8}, [@ldst={0x4}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x2, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffff0b}, 0x48) 0s ago: executing program 3 (id=2502): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x100, {0x0, 0x0, 0x0, 0x0, 0x100, 0xac}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0xfff9}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40001}, 0x20004090) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x100, {0x0, 0x0, 0x0, 0x0, 0x100, 0xac}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0xfff9}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40001}, 0x20004090) pipe(&(0x7f0000000080)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000001800)=ANY=[@ANYBLOB="18000000000000000000000000000000730135000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) kernel console output (not intermixed with test programs): 85] netlink: 32 bytes leftover after parsing attributes in process `syz.1.782'. [ 139.143924][ T8781] netlink: 8 bytes leftover after parsing attributes in process `syz.3.781'. [ 139.277004][ T8809] netlink: 8 bytes leftover after parsing attributes in process `syz.0.790'. [ 139.322953][ T8809] netlink: 8 bytes leftover after parsing attributes in process `syz.0.790'. [ 139.406884][ T8816] validate_nla: 2 callbacks suppressed [ 139.406916][ T8816] netlink: 'syz.1.792': attribute type 3 has an invalid length. [ 139.462606][ T8816] netlink: 'syz.1.792': attribute type 3 has an invalid length. [ 139.509811][ T8816] pimreg: entered allmulticast mode [ 139.675675][ T8830] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 139.837965][ T8843] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 139.896447][ T8807] FAULT_INJECTION: forcing a failure. [ 139.896447][ T8807] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 139.911273][ T8841] openvswitch: netlink: Unknown key attributes 2 [ 139.911297][ T8845] netlink: 8 bytes leftover after parsing attributes in process `syz.1.800'. [ 139.932707][ T8807] CPU: 1 UID: 0 PID: 8807 Comm: syz.2.789 Not tainted 6.16.0-rc5-syzkaller-00187-gb640daa2822a #0 PREEMPT(full) [ 139.932730][ T8807] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 139.932741][ T8807] Call Trace: [ 139.932748][ T8807] [ 139.932755][ T8807] dump_stack_lvl+0x189/0x250 [ 139.932789][ T8807] ? __pfx____ratelimit+0x10/0x10 [ 139.932819][ T8807] ? __pfx_dump_stack_lvl+0x10/0x10 [ 139.932842][ T8807] ? __pfx__printk+0x10/0x10 [ 139.932880][ T8807] should_fail_ex+0x414/0x560 [ 139.932912][ T8807] _copy_to_user+0x31/0xb0 [ 139.932936][ T8807] simple_read_from_buffer+0xe1/0x170 [ 139.932964][ T8807] proc_fail_nth_read+0x1df/0x250 [ 139.932993][ T8807] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 139.933023][ T8807] ? rw_verify_area+0x258/0x650 [ 139.933042][ T8807] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 139.933070][ T8807] vfs_read+0x200/0x980 [ 139.933095][ T8807] ? __pfx___mutex_lock+0x10/0x10 [ 139.933115][ T8807] ? __pfx_vfs_read+0x10/0x10 [ 139.933136][ T8807] ? __fget_files+0x2a/0x420 [ 139.933164][ T8807] ? __fget_files+0x3a0/0x420 [ 139.933186][ T8807] ? __fget_files+0x2a/0x420 [ 139.933217][ T8807] ksys_read+0x145/0x250 [ 139.933246][ T8807] ? __pfx_ksys_read+0x10/0x10 [ 139.933270][ T8807] ? do_syscall_64+0xbe/0x3b0 [ 139.933291][ T8807] do_syscall_64+0xfa/0x3b0 [ 139.933306][ T8807] ? lockdep_hardirqs_on+0x9c/0x150 [ 139.933333][ T8807] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.933350][ T8807] ? clear_bhb_loop+0x60/0xb0 [ 139.933372][ T8807] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.933389][ T8807] RIP: 0033:0x7fbc8c18d33c [ 139.933411][ T8807] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 139.933426][ T8807] RSP: 002b:00007fbc8d0a8030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 139.933446][ T8807] RAX: ffffffffffffffda RBX: 00007fbc8c3b5fa0 RCX: 00007fbc8c18d33c [ 139.933457][ T8807] RDX: 000000000000000f RSI: 00007fbc8d0a80a0 RDI: 0000000000000007 [ 139.933468][ T8807] RBP: 00007fbc8d0a8090 R08: 0000000000000000 R09: 0000000000000000 [ 139.933479][ T8807] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 139.933489][ T8807] R13: 0000000000000000 R14: 00007fbc8c3b5fa0 R15: 00007fffc0a16298 [ 139.933516][ T8807] [ 140.296623][ T8855] sock: sock_timestamping_bind_phc: sock not bind to device [ 140.398413][ T8856] x_tables: duplicate underflow at hook 1 [ 140.468801][ T8867] RDS: rds_bind could not find a transport for 400:0:1200:0:1030:0:ffff:ffff, load rds_tcp or rds_rdma? [ 140.585287][ T8874] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 140.793449][ T8891] tipc: Enabled bearer , priority 2 [ 140.802291][ T8890] tipc: Enabling of bearer rejected, already enabled [ 140.877625][ T5917] IPVS: starting estimator thread 0... [ 140.884724][ T8887] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 140.967134][ T8899] IPVS: using max 24 ests per chain, 57600 per kthread [ 141.889544][ T8943] tipc: Enabling of bearer rejected, failed to enable media [ 141.993611][ T8947] sock: sock_timestamping_bind_phc: sock not bind to device [ 142.110315][ T8956] netlink: 'syz.0.831': attribute type 4 has an invalid length. [ 142.146276][ T8956] netlink: 'syz.0.831': attribute type 4 has an invalid length. [ 142.199985][ T8963] __nla_validate_parse: 7 callbacks suppressed [ 142.200004][ T8963] netlink: 20 bytes leftover after parsing attributes in process `syz.4.832'. [ 142.234092][ T8963] netlink: 20 bytes leftover after parsing attributes in process `syz.4.832'. [ 142.563144][ T8985] netlink: 'syz.4.839': attribute type 10 has an invalid length. [ 142.575537][ T8985] netlink: 16 bytes leftover after parsing attributes in process `syz.4.839'. [ 142.855934][ T9000] sch_fq: defrate 0 ignored. [ 142.879018][ T9000] sch_fq: defrate 0 ignored. [ 142.901959][ T9000] sch_fq: defrate 0 ignored. [ 142.942178][ T9000] sch_fq: defrate 0 ignored. [ 142.954362][ T9000] sch_fq: defrate 0 ignored. [ 142.974759][ T9000] sch_fq: defrate 0 ignored. [ 142.996657][ T9000] sch_fq: defrate 0 ignored. [ 143.015828][ T9000] sch_fq: defrate 0 ignored. [ 143.039866][ T9000] sch_fq: defrate 0 ignored. [ 143.045633][ T9000] sch_fq: defrate 0 ignored. [ 143.064129][ T9011] netlink: 12 bytes leftover after parsing attributes in process `syz.0.846'. [ 143.085878][ T9012] netlink: 4 bytes leftover after parsing attributes in process `syz.0.846'. [ 143.094973][ T9011] netlink: 4 bytes leftover after parsing attributes in process `syz.0.846'. [ 143.121247][ T9012] netlink: 4 bytes leftover after parsing attributes in process `syz.0.846'. [ 143.136092][ T9011] netlink: 4 bytes leftover after parsing attributes in process `syz.0.846'. [ 143.136719][ T9012] netlink: 12 bytes leftover after parsing attributes in process `syz.0.846'. [ 143.191821][ T9011] netlink: 12 bytes leftover after parsing attributes in process `syz.0.846'. [ 143.276852][ T9018] netlink: 'syz.2.849': attribute type 11 has an invalid length. [ 143.361747][ T9028] veth7: entered allmulticast mode [ 143.380888][ T9030] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 143.392136][ T9030] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 143.410780][ T9033] netem: change failed [ 143.643321][ T9046] : entered promiscuous mode [ 143.882344][ T9074] xt_bpf: check failed: parse error [ 144.020347][ T9084] macsec0: entered promiscuous mode [ 144.028840][ T9084] netlink: 'syz.1.864': attribute type 28 has an invalid length. [ 144.036982][ T9084] netlink: 'syz.1.864': attribute type 3 has an invalid length. [ 144.203355][ T9089] (unnamed net_device) (uninitialized): option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 144.363297][ T9102] netlink: 'syz.4.869': attribute type 32 has an invalid length. [ 144.378647][ T9102] (unnamed net_device) (uninitialized): option coupled_control: invalid value (52) [ 144.510866][ T9097] netlink: 'syz.4.869': attribute type 11 has an invalid length. [ 144.746457][ T9113] netlink: 'syz.2.871': attribute type 11 has an invalid length. [ 144.754329][ T9113] netlink: 'syz.2.871': attribute type 4 has an invalid length. [ 144.768164][ T9118] (unnamed net_device) (uninitialized): option lp_interval: invalid value (0) [ 144.783338][ T9118] (unnamed net_device) (uninitialized): option lp_interval: allowed values 1 - 2147483647 [ 144.797329][ T9113] xt_CT: You must specify a L4 protocol and not use inversions on it [ 144.911013][ T9123] Bluetooth: hci1: Opcode 0x0401 failed: -4 [ 145.583822][ T9118] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 146.124832][ T9145] xt_TCPMSS: Only works on TCP SYN packets [ 146.318821][ T9153] netlink: 'syz.1.885': attribute type 1 has an invalid length. [ 146.329722][ T9153] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 146.797205][ T9192] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 146.895552][ T5852] Bluetooth: hci0: command 0x0401 tx timeout [ 146.959942][ T9203] netlink: 'syz.2.902': attribute type 1 has an invalid length. [ 146.976951][ T5852] Bluetooth: hci1: command 0x0401 tx timeout [ 147.091807][ T9215] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 147.139232][ T9213] macvlan2: entered promiscuous mode [ 147.162245][ T9213] macvlan2: entered allmulticast mode [ 147.172201][ T9213] bond2: entered promiscuous mode [ 147.183202][ T9213] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 147.221157][ T9213] bond2: left promiscuous mode [ 147.549580][ T9241] __nla_validate_parse: 16 callbacks suppressed [ 147.549599][ T9241] netlink: 24 bytes leftover after parsing attributes in process `syz.1.913'. [ 147.576847][ T9243] netlink: 6 bytes leftover after parsing attributes in process `syz.0.914'. [ 147.605644][ T9243] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 147.743254][ T9243] netlink: 40 bytes leftover after parsing attributes in process `syz.0.914'. [ 147.754883][ T9243] netlink: 28 bytes leftover after parsing attributes in process `syz.0.914'. [ 147.765381][ T9255] syz_tun: left allmulticast mode [ 147.792153][ T9257] netlink: 168 bytes leftover after parsing attributes in process `syz.4.918'. [ 147.811671][ T9257] netlink: 32 bytes leftover after parsing attributes in process `syz.4.918'. [ 148.028754][ T9273] netlink: 4 bytes leftover after parsing attributes in process `syz.4.922'. [ 148.116644][ T9283] netlink: 'syz.3.924': attribute type 10 has an invalid length. [ 148.152934][ T9285] netlink: 4 bytes leftover after parsing attributes in process `syz.2.925'. [ 148.199518][ T9285] netlink: 4 bytes leftover after parsing attributes in process `syz.2.925'. [ 148.300421][ T9285] netlink: 'syz.2.925': attribute type 2 has an invalid length. [ 148.322851][ T9296] netlink: 4 bytes leftover after parsing attributes in process `syz.1.929'. [ 148.389673][ T9296] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.531520][ T9296] bridge_slave_1 (unregistering): left allmulticast mode [ 148.568472][ T9296] bridge_slave_1 (unregistering): left promiscuous mode [ 148.599275][ T9296] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.827000][ T9310] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 148.849050][ T9310] syzkaller0: linktype set to 768 [ 149.244949][ T9342] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 149.244949][ T9345] netlink: 'syz.1.938': attribute type 1 has an invalid length. [ 149.285024][ T9345] netlink: 'syz.1.938': attribute type 11 has an invalid length. [ 149.673945][ T30] audit: type=1800 audit(1752485384.669:4): pid=9345 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.938" name="cgroup.controllers" dev="tmpfs" ino=1013 res=0 errno=0 [ 150.483953][ T9358] ipvlan0: entered promiscuous mode [ 150.497663][ T9358] ipvlan0: entered allmulticast mode [ 150.503111][ T9358] veth0_vlan: entered allmulticast mode [ 150.782748][ T9377] bridge0: entered promiscuous mode [ 150.792271][ T9377] macsec1: entered promiscuous mode [ 151.105008][ T5918] IPVS: starting estimator thread 0... [ 151.161071][ T9399] bridge1: entered promiscuous mode [ 151.168715][ T9399] bridge1: entered allmulticast mode [ 151.206391][ T9401] IPVS: using max 28 ests per chain, 67200 per kthread [ 151.300698][ T9417] sch_tbf: burst 21990 is lower than device lo mtu (65550) ! [ 151.768594][ T9433] ipt_ECN: cannot use operation on non-tcp rule [ 152.261022][ T9478] RDS: rds_bind could not find a transport for fc01::1, load rds_tcp or rds_rdma? [ 152.277837][ T9479] netlink: 'syz.0.974': attribute type 2 has an invalid length. [ 152.324784][ T9470] xt_CT: No such helper "snmp" [ 152.492416][ T9484] xt_CT: You must specify a L4 protocol and not use inversions on it [ 152.576818][ T9492] IPVS: set_ctl: invalid protocol: 51 100.1.1.2:20001 [ 152.594622][ T9492] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 152.859005][ T9510] netlink: 'syz.0.987': attribute type 29 has an invalid length. [ 152.869530][ T9512] netlink: 'syz.0.987': attribute type 29 has an invalid length. [ 152.878001][ T9509] __nla_validate_parse: 11 callbacks suppressed [ 152.878033][ T9509] netlink: 500 bytes leftover after parsing attributes in process `syz.0.987'. [ 152.894539][ T9509] unsupported nla_type 58 [ 152.900471][ T9510] netlink: 256 bytes leftover after parsing attributes in process `syz.0.987'. [ 153.033089][ T9521] IPVS: set_ctl: invalid protocol: 58 224.0.0.2:20000 [ 153.148001][ T9528] netlink: 51 bytes leftover after parsing attributes in process `syz.3.992'. [ 153.190392][ T9525] netlink: 4 bytes leftover after parsing attributes in process `syz.0.993'. [ 153.266887][ T9534] netlink: 12 bytes leftover after parsing attributes in process `syz.4.996'. [ 153.331657][ T9525] macvtap1: entered promiscuous mode [ 153.356614][ T9525] vlan0: entered promiscuous mode [ 153.362133][ T9525] macvtap1: entered allmulticast mode [ 153.371935][ T9525] vlan0: entered allmulticast mode [ 153.459613][ T9534] 8021q: adding VLAN 0 to HW filter on device bond0 [ 153.485891][ T9537] tipc: Enabled bearer , priority 0 [ 153.496541][ T9545] syzkaller0: entered promiscuous mode [ 153.502306][ T9545] syzkaller0: entered allmulticast mode [ 153.514810][ T9548] macvlan0: entered promiscuous mode [ 153.549397][ T9535] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 153.569995][ T9548] macvlan0: entered allmulticast mode [ 153.597284][ T9548] bond0: entered promiscuous mode [ 153.606413][ T9548] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 153.622337][ T9548] bond0: left promiscuous mode [ 153.657977][ T9537] tipc: Resetting bearer [ 153.674077][ T9523] tipc: Resetting bearer [ 153.703933][ T9523] tipc: Disabling bearer [ 153.715653][ T9566] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1004'. [ 153.795543][ T9568] netlink: 212404 bytes leftover after parsing attributes in process `syz.2.1005'. [ 153.812883][ T9566] hsr_slave_0: left promiscuous mode [ 153.824073][ T9566] hsr_slave_1: left promiscuous mode [ 154.090080][ T183] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 154.107332][ T183] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 154.127779][ T9595] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1012'. [ 154.154789][ T9595] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 154.333923][ T9611] netlink: 'syz.0.1018': attribute type 29 has an invalid length. [ 154.342903][ T9611] netlink: 'syz.0.1018': attribute type 29 has an invalid length. [ 154.364774][ T9611] netlink: 'syz.0.1018': attribute type 29 has an invalid length. [ 154.373426][ T9611] netlink: 'syz.0.1018': attribute type 29 has an invalid length. [ 154.407582][ T9611] netlink: 'syz.0.1018': attribute type 29 has an invalid length. [ 154.450545][ T9620] netem: change failed [ 154.462841][ T9622] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1022'. [ 154.473019][ T9622] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1022'. [ 155.347039][ T9654] veth9: entered allmulticast mode [ 155.405285][ T9680] bond0: entered promiscuous mode [ 155.411857][ T9680] bond_slave_0: entered promiscuous mode [ 155.429433][ T9680] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 155.439492][ T9680] hsr1: Slave B (bond_slave_0) is not up; please bring it up to get a fully working HSR network [ 155.452890][ T9680] hsr1: entered promiscuous mode [ 155.468562][ T9682] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 155.672551][ T9696] Driver unsupported XDP return value 0 on prog (id 288) dev N/A, expect packet loss! [ 156.160802][ T9729] dvmrp8: entered allmulticast mode [ 156.639235][ T9737] IPVS: set_ctl: invalid protocol: 22 255.255.255.255:20001 [ 156.643603][ T9735] pim6reg1: entered promiscuous mode [ 156.652272][ T9735] pim6reg1: entered allmulticast mode [ 156.741337][ T9747] IPVS: set_ctl: invalid protocol: 60 172.20.20.187:20002 [ 157.261312][ T9] hid-generic 0005:046D:0A0E.0001: collection stack underflow [ 157.269743][ T9776] xt_policy: neither incoming nor outgoing policy selected [ 157.277070][ T9] hid-generic 0005:046D:0A0E.0001: item 0 0 0 12 parsing failed [ 157.285393][ T9775] xt_policy: neither incoming nor outgoing policy selected [ 157.293335][ T9] hid-generic 0005:046D:0A0E.0001: probe with driver hid-generic failed with error -22 [ 157.449166][ T9784] netlink: 'syz.1.1067': attribute type 5 has an invalid length. [ 157.481577][ T9785] netlink: 'syz.1.1067': attribute type 5 has an invalid length. [ 157.992051][ T9811] __nla_validate_parse: 54 callbacks suppressed [ 157.992071][ T9811] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1074'. [ 158.137311][ T9815] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 158.230089][ T9821] netlink: 'syz.3.1079': attribute type 11 has an invalid length. [ 158.388069][ T9829] netlink: 'syz.3.1082': attribute type 23 has an invalid length. [ 158.433554][ T9832] netlink: 'syz.3.1082': attribute type 23 has an invalid length. [ 158.554728][ T9840] netlink: 'syz.2.1085': attribute type 1 has an invalid length. [ 158.573355][ T9840] netlink: 184 bytes leftover after parsing attributes in process `syz.2.1085'. [ 158.588755][ T9840] netlink: 'syz.2.1085': attribute type 1 has an invalid length. [ 158.600363][ T9840] netlink: 184 bytes leftover after parsing attributes in process `syz.2.1085'. [ 158.624324][ T9842] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 158.633129][ T9842] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 158.641966][ T9842] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 158.650772][ T9842] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 158.744892][ T9853] netlink: 'syz.4.1087': attribute type 1 has an invalid length. [ 158.766377][ T9853] netlink: 232 bytes leftover after parsing attributes in process `syz.4.1087'. [ 158.818503][ T9853] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1087'. [ 158.907477][ T9864] netlink: 'syz.2.1091': attribute type 21 has an invalid length. [ 158.948409][ T9864] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1091'. [ 158.989142][ T9864] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1091'. [ 159.008186][ T9864] netlink: 'syz.2.1091': attribute type 1 has an invalid length. [ 159.760202][ T9935] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1105'. [ 159.772347][ T9935] netlink: 43 bytes leftover after parsing attributes in process `syz.0.1105'. [ 159.817273][ T9935] netlink: 43 bytes leftover after parsing attributes in process `syz.0.1105'. [ 159.923740][ T9944] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1340 [ 160.195304][ T9963] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 160.507149][ T9977] veth0_to_hsr: entered allmulticast mode [ 160.550306][ T9976] veth0_to_hsr: left allmulticast mode [ 160.620885][ T13] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 160.641634][ T9984] xt_cluster: you have exceeded the maximum number of cluster nodes (257 > 32) [ 160.665747][ T119] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 160.673656][ T13] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 160.748011][ T119] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 160.977298][ T9995] netlink: 'syz.4.1130': attribute type 11 has an invalid length. [ 161.697611][ T119] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 162.304401][T10014] tipc: Enabled bearer , priority 10 [ 162.464884][T10046] 8021q: VLANs not supported on lo [ 162.695070][T10060] delete_channel: no stack [ 163.302128][T10105] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.391805][T10108] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 163.415221][ T119] tipc: Node number set to 1593835521 [ 163.483210][T10108] Unsupported ieee802154 address type: 0 [ 163.526469][T10116] IPv6: NLM_F_CREATE should be specified when creating new route [ 163.559160][T10116] IPv6: Can't replace route, no match found [ 163.706029][T10119] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 163.758884][T10134] sch_tbf: burst 21990 is lower than device lo mtu (65550) ! [ 163.958855][T10143] __nla_validate_parse: 10 callbacks suppressed [ 163.958873][T10143] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1176'. [ 164.412223][T10180] validate_nla: 5 callbacks suppressed [ 164.412240][T10180] netlink: 'syz.1.1189': attribute type 2 has an invalid length. [ 164.573364][T10188] netlink: 'syz.1.1191': attribute type 1 has an invalid length. [ 164.609398][T10188] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.1191'. [ 164.626103][T10192] netlink: 'syz.4.1192': attribute type 1 has an invalid length. [ 164.679164][T10198] netlink: 'syz.1.1191': attribute type 1 has an invalid length. [ 164.701313][T10198] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.1191'. [ 164.894749][T10172] netlink: 216 bytes leftover after parsing attributes in process `syz.3.1185'. [ 164.895485][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 164.929394][T10172] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1185'. [ 165.307967][T10232] macvtap2: entered promiscuous mode [ 165.319376][T10232] macvtap2: entered allmulticast mode [ 165.356297][T10237] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1200'. [ 165.438339][T10237] chnl_net:caif_netlink_parms(): no params data found [ 165.507430][T10243] sch_tbf: burst 21990 is lower than device lo mtu (11337746) ! [ 165.516746][T10239] netlink: 'syz.4.1201': attribute type 8 has an invalid length. [ 165.569753][T10247] veth0: entered promiscuous mode [ 165.589595][T10246] veth0: left promiscuous mode [ 165.646738][T10249] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1205'. [ 165.754709][T10257] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 166.213739][T10292] netlink: 'syz.2.1217': attribute type 1 has an invalid length. [ 166.268882][T10292] netlink: 16150 bytes leftover after parsing attributes in process `syz.2.1217'. [ 166.410765][T10298] netlink: 'syz.3.1220': attribute type 21 has an invalid length. [ 166.431304][T10298] netlink: 'syz.3.1220': attribute type 22 has an invalid length. [ 166.451596][T10298] netlink: 'syz.3.1220': attribute type 23 has an invalid length. [ 166.472223][T10298] netlink: 'syz.3.1220': attribute type 25 has an invalid length. [ 166.503326][T10307] netlink: 240 bytes leftover after parsing attributes in process `syz.3.1220'. [ 166.533107][T10298] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1220'. [ 166.597713][T10312] bridge_slave_0: default FDB implementation only supports local addresses [ 166.636032][T10312] netlink: 'syz.0.1223': attribute type 11 has an invalid length. [ 166.901119][T10334] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 166.941921][T10336] tipc: Started in network mode [ 166.948056][T10336] tipc: Node identity 3a76f4cd891, cluster identity 4711 [ 166.968013][T10336] tipc: Enabled bearer , priority 0 [ 166.990011][T10334] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 167.060780][T10346] netlink: 'syz.0.1232': attribute type 11 has an invalid length. [ 167.402875][T10371] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 167.557804][T10371] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 167.573431][T10371] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 167.589243][T10371] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 167.612936][T10371] bond0 (unregistering): Released all slaves [ 167.651536][T10325] tipc: Disabling bearer [ 167.731296][T10380] sctp: [Deprecated]: syz.3.1244 (pid 10380) Use of int in maxseg socket option. [ 167.731296][T10380] Use struct sctp_assoc_value instead [ 167.980988][ T9] hid-generic 0005:16C0:5505.0002: unknown main item tag 0x0 [ 168.003528][ T9] hid-generic 0005:16C0:5505.0002: unknown main item tag 0x0 [ 168.011096][ T9] hid-generic 0005:16C0:5505.0002: unknown main item tag 0x0 [ 168.018818][ T9] hid-generic 0005:16C0:5505.0002: unknown main item tag 0x0 [ 168.027351][ T9] hid-generic 0005:16C0:5505.0002: unknown main item tag 0x0 [ 168.034928][ T9] hid-generic 0005:16C0:5505.0002: unknown main item tag 0x3 [ 168.052821][ T9] hid-generic 0005:16C0:5505.0002: hidraw0: BLUETOOTH HID v0.8b Device [syz0] on aa:aa:aa:aa:aa:aa [ 168.279374][T10411] pim6reg1: entered promiscuous mode [ 168.289259][T10411] pim6reg1: entered allmulticast mode [ 168.504237][T10425] x_tables: duplicate underflow at hook 2 [ 168.541943][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805b8ec000: rx timeout, send abort [ 168.580611][T10428] team0: Device veth0_vlan failed to register rx_handler [ 168.890477][T10454] openvswitch: netlink: IP tunnel dst address not specified [ 168.910290][T10457] openvswitch: netlink: IP tunnel dst address not specified [ 169.051026][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805b8ec000: abort rx timeout. Force session deactivation [ 169.120874][T10466] __nla_validate_parse: 15 callbacks suppressed [ 169.120892][T10466] netlink: 300 bytes leftover after parsing attributes in process `syz.4.1273'. [ 169.136833][T10466] netlink: 5952 bytes leftover after parsing attributes in process `syz.4.1273'. [ 169.435777][T10487] x_tables: duplicate underflow at hook 2 [ 169.449357][T10487] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1279'. [ 169.472556][T10489] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1278'. [ 169.509397][T10489] macsec0: entered promiscuous mode [ 169.726185][T10510] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1284'. [ 169.750410][T10513] validate_nla: 5 callbacks suppressed [ 169.750427][T10513] netlink: 'syz.0.1285': attribute type 1 has an invalid length. [ 169.757562][T10510] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1284'. [ 169.818920][T10517] netlink: 64985 bytes leftover after parsing attributes in process `syz.1.1286'. [ 169.920159][T10523] netlink: 'syz.1.1287': attribute type 18 has an invalid length. [ 170.129017][T10535] netlink: 'syz.0.1290': attribute type 10 has an invalid length. [ 170.143627][T10535] team0: Device veth1_vlan failed to register rx_handler [ 170.283397][T10550] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1297'. [ 170.302617][ T5852] Bluetooth: hci4: link tx timeout [ 170.303230][T10546] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 170.313204][ T5852] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 170.337803][T10552] (unnamed net_device) (uninitialized): peer notification delay (1164) is not a multiple of miimon (100), value rounded to 1100 ms [ 170.394045][T10552] bond0: entered promiscuous mode [ 170.399413][T10552] bond0: entered allmulticast mode [ 170.405662][T10552] 8021q: adding VLAN 0 to HW filter on device bond0 [ 170.443000][T10564] netlink: 'syz.1.1296': attribute type 33 has an invalid length. [ 170.481629][T10564] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1296'. [ 170.660853][T10578] netlink: 'syz.0.1300': attribute type 11 has an invalid length. [ 170.669730][T10578] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1300'. [ 171.629631][T10632] team0: No ports can be present during mode change [ 171.988574][T10657] netlink: 'syz.4.1329': attribute type 23 has an invalid length. [ 172.060885][T10657] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 172.082070][T10657] netlink: 'syz.4.1329': attribute type 10 has an invalid length. [ 172.097922][T10657] bridge_slave_1: left allmulticast mode [ 172.108720][T10657] bridge_slave_1: left promiscuous mode [ 172.116119][T10657] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.304738][T10670] netlink: 'syz.4.1333': attribute type 1 has an invalid length. [ 172.324653][T10670] netlink: 'syz.4.1333': attribute type 10 has an invalid length. [ 172.343588][T10670] netlink: 'syz.4.1333': attribute type 10 has an invalid length. [ 172.353190][ T5853] Bluetooth: hci4: command 0x0406 tx timeout [ 172.758777][T10695] xt_CONNSECMARK: invalid mode: 0 [ 172.783850][T10702] netlink: 'syz.2.1341': attribute type 6 has an invalid length. [ 172.881354][T10711] x_tables: duplicate underflow at hook 3 [ 173.535335][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 173.850627][T10769] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 173.857939][T10769] IPv6: NLM_F_CREATE should be set when creating new route [ 174.162631][ T9] hid-generic 0005:0458:0004.0003: collection stack underflow [ 174.180691][T10798] __nla_validate_parse: 17 callbacks suppressed [ 174.180706][T10798] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1372'. [ 174.198654][ T9] hid-generic 0005:0458:0004.0003: item 0 0 0 12 parsing failed [ 174.229090][T10800] openvswitch: netlink: Key 6 has unexpected len 4 expected 2 [ 174.275859][ T9] hid-generic 0005:0458:0004.0003: probe with driver hid-generic failed with error -22 [ 174.688025][T10820] syzkaller0: entered promiscuous mode [ 174.705318][T10820] syzkaller0: entered allmulticast mode [ 174.713884][T10822] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1380'. [ 175.042416][T10835] xt_TPROXY: Can be used only with -p tcp or -p udp [ 175.047408][T10836] xt_TPROXY: Can be used only with -p tcp or -p udp [ 175.234459][T10840] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1384'. [ 175.954629][T10822] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1380'. [ 175.963962][T10827] sch_tbf: burst 21990 is lower than device lo mtu (65550) ! [ 176.101849][T10846] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1388'. [ 176.125274][T10848] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1387'. [ 176.143053][T10854] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1389'. [ 176.160389][T10854] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1389'. [ 176.473981][T10874] ipt_REJECT: ECHOREPLY no longer supported. [ 176.481448][T10874] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1394'. [ 176.794568][T10874] team0 (unregistering): Port device team_slave_0 removed [ 176.822922][T10874] team0 (unregistering): Port device team_slave_1 removed [ 176.919709][T10891] sch_tbf: burst 21990 is lower than device lo mtu (65550) ! [ 177.069453][T10895] validate_nla: 4 callbacks suppressed [ 177.069469][T10895] netlink: 'syz.4.1401': attribute type 1 has an invalid length. [ 177.149544][T10895] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 177.249707][T10910] netlink: 129256 bytes leftover after parsing attributes in process `syz.1.1405'. [ 177.260986][T10913] netlink: 'syz.2.1404': attribute type 21 has an invalid length. [ 177.317817][T10913] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 177.381514][T10919] netlink: 'syz.3.1407': attribute type 4 has an invalid length. [ 177.412897][T10919] netlink: 'syz.3.1407': attribute type 4 has an invalid length. [ 177.807275][T10944] netlink: 'syz.4.1416': attribute type 11 has an invalid length. [ 177.846467][T10945] netlink: 'syz.0.1417': attribute type 1 has an invalid length. [ 177.975655][T10929] netlink: 'syz.2.1411': attribute type 7 has an invalid length. [ 178.174823][T10959] xt_CT: No such helper "snmp" [ 178.786234][T11002] Unsupported ieee802154 address type: 0 [ 178.806066][T11006] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 178.837825][T11007] netlink: 'syz.2.1434': attribute type 10 has an invalid length. [ 178.953275][T11007] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 179.309223][T11041] __nla_validate_parse: 11 callbacks suppressed [ 179.309240][T11041] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1444'. [ 179.326533][T11041] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1444'. [ 179.366588][T11037] netlink: 'syz.4.1443': attribute type 1 has an invalid length. [ 179.417181][T11050] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1446'. [ 179.456619][ T59] nci: nci_extract_activation_params_nfc_dep: unsupported activation_rf_tech_and_mode 0x6 [ 179.767862][T11069] netlink: 'syz.1.1452': attribute type 10 has an invalid length. [ 179.810631][T11074] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1455'. [ 179.901251][T11076] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1456'. [ 179.923019][T11080] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1457'. [ 179.939649][T11076] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1456'. [ 179.948885][T11082] netlink: 'syz.2.1459': attribute type 64 has an invalid length. [ 179.957216][T11082] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1459'. [ 179.987410][T11080] 8021q: adding VLAN 0 to HW filter on device bond4 [ 180.002100][T11081] netlink: 64138 bytes leftover after parsing attributes in process `syz.3.1457'. [ 180.048254][T11091] Unknown options in mask 1f4 [ 180.212235][T11098] bridge4: entered promiscuous mode [ 180.218924][T11098] bridge4: entered allmulticast mode [ 180.314857][T11101] netlink: 192 bytes leftover after parsing attributes in process `syz.2.1464'. [ 180.845939][T11128] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 180.958744][T11131] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 181.358813][T11145] IPVS: wrr: UDP 224.0.0.2:20004 - no destination available [ 181.531999][T11165] x_tables: duplicate underflow at hook 2 [ 182.592665][T11229] validate_nla: 1 callbacks suppressed [ 182.592682][T11229] netlink: 'syz.1.1502': attribute type 1 has an invalid length. [ 182.878172][T11257] syz_tun: left allmulticast mode [ 182.887502][T11257] pimreg: left allmulticast mode [ 183.106513][T11272] pim6reg: entered allmulticast mode [ 183.639078][T11310] netlink: 'syz.2.1525': attribute type 3 has an invalid length. [ 184.186298][T11348] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 184.271789][T11354] (unnamed net_device) (uninitialized): ARP target 1.0.0.0 is already present [ 184.273016][T11357] openvswitch: netlink: nsh attr 0 has unexpected len 1 expected 0 [ 184.303953][T11354] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (1) [ 184.336899][T11354] __nla_validate_parse: 11 callbacks suppressed [ 184.336917][T11354] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1538'. [ 184.467507][T11354] sctp: [Deprecated]: syz.3.1538 (pid 11354) Use of int in max_burst socket option deprecated. [ 184.467507][T11354] Use struct sctp_assoc_value instead [ 184.498450][T11369] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1545'. [ 184.560349][T11374] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1545'. [ 184.728192][T11385] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 185.015339][T11408] bridge: RTM_NEWNEIGH with invalid state 0x8 [ 185.116671][T11416] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1559'. [ 185.148479][T11416] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1559'. [ 185.272386][T11431] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1563'. [ 185.283717][T11431] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1563'. [ 185.462868][T11444] netlink: 'syz.1.1567': attribute type 7 has an invalid length. [ 185.495261][T11444] netlink: 'syz.1.1567': attribute type 8 has an invalid length. [ 185.850343][T11464] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 186.129553][T11473] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1578'. [ 186.143914][T11479] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1578'. [ 186.667047][T11517] netlink: 'syz.1.1591': attribute type 33 has an invalid length. [ 186.685334][T11517] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1591'. [ 187.095373][T11540] netlink: 'syz.0.1599': attribute type 7 has an invalid length. [ 187.098696][ T3463] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.115201][T11540] netlink: 'syz.0.1599': attribute type 8 has an invalid length. [ 187.199170][T11540] netlink: 'syz.0.1599': attribute type 10 has an invalid length. [ 187.243376][ T3463] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.404627][ T3463] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.831057][T11565] netlink: 'syz.0.1609': attribute type 12 has an invalid length. [ 187.924802][ T5853] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 187.934271][ T5853] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 187.945018][ T5853] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 187.953168][ T5853] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 187.962321][ T5853] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 188.313122][ T3463] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 188.324970][ T3463] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 188.336726][ T3463] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 188.354099][ T3463] bond0 (unregistering): Released all slaves [ 188.368397][ T3463] bond1 (unregistering): Released all slaves [ 188.382868][ T3463] bond2 (unregistering): Released all slaves [ 188.401741][T11565] (unnamed net_device) (uninitialized): option primary_reselect: invalid value (255) [ 188.565021][ T3463] tipc: Left network mode [ 188.627092][T11592] tipc: Enabled bearer , priority 10 [ 188.683207][ T3463] IPVS: stopping master sync thread 6491 ... [ 188.970395][T11616] sctp: [Deprecated]: syz.3.1624 (pid 11616) Use of int in max_burst socket option. [ 188.970395][T11616] Use struct sctp_assoc_value instead [ 189.434978][T11641] netlink: 'syz.4.1631': attribute type 1 has an invalid length. [ 189.442985][T11641] __nla_validate_parse: 8 callbacks suppressed [ 189.442999][T11641] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1631'. [ 189.631982][ T3463] hsr_slave_0: left promiscuous mode [ 189.654917][ T3463] hsr_slave_1: left promiscuous mode [ 189.663380][T11650] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1635'. [ 189.678252][ T3463] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 189.688639][ T3463] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 189.699588][ T3463] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 189.702371][T11656] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1636'. [ 189.722941][ T3463] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 189.752277][ T3463] veth1_macvtap: left promiscuous mode [ 189.760308][ T3463] veth0_macvtap: left promiscuous mode [ 189.766088][ T3463] veth1_vlan: left promiscuous mode [ 189.771434][ T3463] veth0_vlan: left promiscuous mode [ 189.943843][T11668] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1636'. [ 190.015279][ T5853] Bluetooth: hci3: command tx timeout [ 190.191583][ T3463] team_slave_1 (unregistering): left allmulticast mode [ 190.204449][ T3463] team0 (unregistering): Port device team_slave_1 removed [ 190.235784][ T3463] team_slave_0 (unregistering): left allmulticast mode [ 190.244192][ T3463] team0 (unregistering): Port device team_slave_0 removed [ 190.537231][T11667] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode [ 190.548034][T11667] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode [ 190.650660][T11574] chnl_net:caif_netlink_parms(): no params data found [ 190.914641][T11574] bridge0: port 1(bridge_slave_0) entered blocking state [ 190.922292][T11574] bridge0: port 1(bridge_slave_0) entered disabled state [ 190.930187][T11574] bridge_slave_0: entered allmulticast mode [ 190.938213][T11574] bridge_slave_0: entered promiscuous mode [ 190.954960][T11693] veth0: entered promiscuous mode [ 190.974243][T11695] veth0: left promiscuous mode [ 191.019033][T11574] bridge0: port 2(bridge_slave_1) entered blocking state [ 191.039108][T11574] bridge0: port 2(bridge_slave_1) entered disabled state [ 191.050163][T11574] bridge_slave_1: entered allmulticast mode [ 191.068883][T11574] bridge_slave_1: entered promiscuous mode [ 191.178865][T11574] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 191.188919][T11706] netlink: 'syz.0.1648': attribute type 1 has an invalid length. [ 191.191700][T11574] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 191.223040][T11703] netlink: 'syz.4.1647': attribute type 1 has an invalid length. [ 191.231191][T11703] netlink: 16150 bytes leftover after parsing attributes in process `syz.4.1647'. [ 191.361551][T11574] team0: Port device team_slave_0 added [ 191.367430][T11709] x_tables: unsorted underflow at hook 3 [ 191.387575][T11574] team0: Port device team_slave_1 added [ 191.430088][ T3463] IPVS: stop unused estimator thread 0... [ 191.558038][T11574] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 191.565039][T11574] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 191.611812][T11574] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 191.683277][T11724] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1655'. [ 191.685561][T11732] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1656'. [ 191.710937][T11730] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1658'. [ 191.764999][T11736] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1659'. [ 191.778099][T11736] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 191.806017][T11574] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 191.813086][T11574] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 191.844558][T11574] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 191.878962][T11732] vlan3: entered allmulticast mode [ 191.884354][T11732] gretap0: entered allmulticast mode [ 191.979800][T11745] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 192.053074][T11574] hsr_slave_0: entered promiscuous mode [ 192.064127][T11574] hsr_slave_1: entered promiscuous mode [ 192.072442][T11574] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 192.091667][T11574] Cannot create hsr debugfs directory [ 192.097884][ T5853] Bluetooth: hci3: command tx timeout [ 192.132595][T11754] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1664'. [ 192.517900][T11759] vlan0 (unregistering): left allmulticast mode [ 192.532811][T11759] veth0_vlan (unregistering): left allmulticast mode [ 192.549283][T11759] vlan0 (unregistering): left promiscuous mode [ 192.645498][T11780] !: renamed from dummy0 (while UP) [ 192.812897][T11785] netlink: 'syz.3.1673': attribute type 1 has an invalid length. [ 192.834724][T11785] netlink: 'syz.3.1673': attribute type 2 has an invalid length. [ 193.093137][ T30] audit: type=1800 audit(1752485428.089:5): pid=11801 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1678" name="memory.events" dev="tmpfs" ino=1801 res=0 errno=0 [ 193.145028][ T30] audit: type=1804 audit(1752485428.089:6): pid=11801 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.1678" name="/newroot/351/memory.events" dev="tmpfs" ino=1801 res=1 errno=0 [ 193.489073][T11816] IPVS: Error connecting to the multicast addr [ 193.530487][T11574] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 193.567650][T11574] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 193.633757][T11574] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 193.668771][T11574] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 193.874697][T11574] 8021q: adding VLAN 0 to HW filter on device bond0 [ 193.910884][T11574] 8021q: adding VLAN 0 to HW filter on device team0 [ 193.933017][ T3463] bridge0: port 1(bridge_slave_0) entered blocking state [ 193.940243][ T3463] bridge0: port 1(bridge_slave_0) entered forwarding state [ 193.958837][ T3556] bridge0: port 2(bridge_slave_1) entered blocking state [ 193.966083][ T3556] bridge0: port 2(bridge_slave_1) entered forwarding state [ 194.024934][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.175325][ T5853] Bluetooth: hci3: command tx timeout [ 194.243674][T11574] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 194.402074][T11854] vxcan1: entered allmulticast mode [ 194.421620][T11854] vxcan1: left allmulticast mode [ 194.455688][T11574] veth0_vlan: entered promiscuous mode [ 194.464957][T11858] __nla_validate_parse: 5 callbacks suppressed [ 194.464972][T11858] netlink: 248 bytes leftover after parsing attributes in process `syz.4.1694'. [ 194.479900][T11574] veth1_vlan: entered promiscuous mode [ 194.572941][T11574] veth0_macvtap: entered promiscuous mode [ 194.589851][T11574] veth1_macvtap: entered promiscuous mode [ 194.614775][T11574] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 194.632473][T11574] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 194.672728][T11574] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.683008][T11574] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.693903][T11574] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.703253][T11574] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.769428][T11871] netlink: 8280 bytes leftover after parsing attributes in process `syz.1.1697'. [ 194.837763][ T3500] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 194.846654][ T3500] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 194.902897][ T3500] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 194.912878][ T3500] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 195.089929][T11882] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1700'. [ 195.184445][T11889] pim6reg1: entered promiscuous mode [ 195.193576][T11889] pim6reg1: entered allmulticast mode [ 195.391991][T11903] bridge2: entered promiscuous mode [ 195.400772][T11903] bridge2: entered allmulticast mode [ 196.203218][T11930] x_tables: duplicate underflow at hook 1 [ 196.369131][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.852996][ T5852] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 196.863093][ T5852] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 196.871004][ T5852] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 196.879407][ T5852] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 196.888284][ T5852] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 197.058132][T11964] chnl_net:caif_netlink_parms(): no params data found [ 197.142632][T11964] bridge0: port 1(bridge_slave_0) entered blocking state [ 197.149942][T11964] bridge0: port 1(bridge_slave_0) entered disabled state [ 197.157245][T11964] bridge_slave_0: entered allmulticast mode [ 197.164570][T11964] bridge_slave_0: entered promiscuous mode [ 197.173429][T11964] bridge0: port 2(bridge_slave_1) entered blocking state [ 197.181135][T11964] bridge0: port 2(bridge_slave_1) entered disabled state [ 197.188595][T11964] bridge_slave_1: entered allmulticast mode [ 197.196208][T11964] bridge_slave_1: entered promiscuous mode [ 197.233615][T11964] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 197.245929][T11964] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 197.283894][T11964] team0: Port device team_slave_0 added [ 197.292734][T11964] team0: Port device team_slave_1 added [ 197.324901][T11964] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 197.331986][T11964] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 197.362742][T11964] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 197.394062][T11964] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 197.406182][T11964] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 197.498538][T11964] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 197.556122][T11980] netlink: 148 bytes leftover after parsing attributes in process `syz.3.1727'. [ 197.572070][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.605604][T11983] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1726'. [ 197.713541][T11964] hsr_slave_0: entered promiscuous mode [ 197.749138][T11964] hsr_slave_1: entered promiscuous mode [ 197.802654][T11964] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 197.815157][T11964] Cannot create hsr debugfs directory [ 197.876500][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.890993][T11998] sctp: [Deprecated]: syz.4.1729 (pid 11998) Use of int in maxseg socket option. [ 197.890993][T11998] Use struct sctp_assoc_value instead [ 198.107462][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.216185][T12015] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1734'. [ 198.324088][ T12] bridge_slave_1: left allmulticast mode [ 198.343276][ T12] bridge_slave_1: left promiscuous mode [ 198.343549][T12021] netlink: 'syz.1.1735': attribute type 1 has an invalid length. [ 198.365057][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.389700][ T12] bridge_slave_0: left allmulticast mode [ 198.395612][ T12] bridge_slave_0: left promiscuous mode [ 198.401362][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 198.761536][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 198.772465][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 198.782503][ T12] bond0 (unregistering): Released all slaves [ 198.846542][T12036] IPVS: set_ctl: invalid protocol: 46 224.0.0.2:20002 [ 198.975842][ T5853] Bluetooth: hci3: command tx timeout [ 199.064995][T12049] xt_l2tp: invalid flags combination: 4 [ 199.233021][T12024] tipc: Resetting bearer [ 199.241681][T12024] tipc: Resetting bearer [ 199.256277][T12024] veth1_vlan: left allmulticast mode [ 199.279363][T12024] ipvlan0: left promiscuous mode [ 199.284927][T12024] ipvlan0: left allmulticast mode [ 199.317790][T12024] netdevsim netdevsim0 ÿÿÿÿÿÿ: unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.326841][T12024] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.339182][T12024] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.350812][T12024] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.444496][T12024] gtp0: left promiscuous mode [ 199.454357][T12024] gtp0: left allmulticast mode [ 199.518456][T12024] bridge1: left promiscuous mode [ 199.523634][T12024] bridge1: left allmulticast mode [ 199.536270][T12024] vlan0: left allmulticast mode [ 199.541640][T12024] veth0_vlan: left allmulticast mode [ 199.547877][T12024] vlan0: left promiscuous mode [ 199.555399][T12024] macvtap1: left promiscuous mode [ 199.562589][T12024] macvtap1: left allmulticast mode [ 199.572211][T12024] hsr1: left promiscuous mode [ 199.589077][T12024] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode [ 199.596994][T12024] mac80211_hwsim hwsim3 syzkaller0: left allmulticast mode [ 199.954710][T12068] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1742'. [ 199.976524][T12068] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1742'. [ 200.060970][T12072] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1745'. [ 200.119348][T12074] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 200.163473][ T12] hsr_slave_0: left promiscuous mode [ 200.171700][ T12] hsr_slave_1: left promiscuous mode [ 200.178181][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 200.187601][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 200.195661][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 200.203196][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 200.228826][ T12] veth1_macvtap: left promiscuous mode [ 200.234500][ T12] veth0_macvtap: left promiscuous mode [ 200.253507][ T12] veth1_vlan: left promiscuous mode [ 200.271006][ T12] veth0_vlan: left promiscuous mode [ 200.372522][T12092] netlink: 'syz.3.1751': attribute type 1 has an invalid length. [ 200.381540][T12092] netlink: 'syz.3.1751': attribute type 2 has an invalid length. [ 200.413185][T12084] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1749'. [ 200.579070][T12098] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1749'. [ 200.645333][T12099] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1749'. [ 200.834782][T12103] netlink: 'syz.4.1752': attribute type 10 has an invalid length. [ 200.880392][ T12] team0 (unregistering): Port device team_slave_1 removed [ 200.921234][ T12] team0 (unregistering): Port device team_slave_0 removed [ 201.055463][ T5864] Bluetooth: hci3: command tx timeout [ 201.215347][ T5864] Bluetooth: hci2: command 0x0406 tx timeout [ 201.215358][ T5856] Bluetooth: hci1: command 0x0401 tx timeout [ 201.383844][T12103] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 201.544444][T11964] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 201.577159][T11964] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 201.612581][T11964] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 201.642716][T11964] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 201.743955][T12117] netlink: 'syz.3.1755': attribute type 3 has an invalid length. [ 201.987194][T11964] 8021q: adding VLAN 0 to HW filter on device bond0 [ 202.047369][T11964] 8021q: adding VLAN 0 to HW filter on device team0 [ 202.081273][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 202.088464][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 202.129595][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 202.136832][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 202.201600][T12136] sctp: [Deprecated]: syz.0.1761 (pid 12136) Use of int in max_burst socket option. [ 202.201600][T12136] Use struct sctp_assoc_value instead [ 202.572122][T12153] IPVS: Error connecting to the multicast addr [ 202.620960][T12149] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1765'. [ 202.861504][T11964] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 203.003262][T11964] veth0_vlan: entered promiscuous mode [ 203.049517][T11964] veth1_vlan: entered promiscuous mode [ 203.103546][T11964] veth0_macvtap: entered promiscuous mode [ 203.122476][T11964] veth1_macvtap: entered promiscuous mode [ 203.138700][ T5853] Bluetooth: hci3: command tx timeout [ 203.163635][T11964] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 203.175998][T11964] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 203.186489][T11964] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.195374][T11964] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.204086][T11964] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.233014][T11964] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.403895][ T3500] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 203.436079][ T3500] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 203.452940][T12182] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1776'. [ 203.536001][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 203.543882][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 203.637089][T12188] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1777'. [ 203.908202][T12199] netlink: 'syz.1.1781': attribute type 18 has an invalid length. [ 203.948741][T12202] netlink: 'syz.1.1781': attribute type 18 has an invalid length. [ 204.363164][T12234] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1790'. [ 204.729103][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.323005][T12272] __nla_validate_parse: 3 callbacks suppressed [ 205.323024][T12272] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1803'. [ 205.472483][ T5852] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 205.481887][ T5852] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 205.493187][ T5852] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 205.501275][ T5852] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 205.506679][T12279] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1806'. [ 205.512498][ T5852] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 205.555992][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.585015][T12279] vlan0: entered allmulticast mode [ 205.603701][T12279] mac80211_hwsim hwsim9 wlan0: entered allmulticast mode [ 205.653409][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.752301][T12291] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1810'. [ 205.887475][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.057128][T12306] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1815'. [ 206.142790][T12312] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1817'. [ 206.202865][T12312] netlink: 'syz.4.1817': attribute type 10 has an invalid length. [ 206.344542][T12320] netlink: 'syz.4.1820': attribute type 21 has an invalid length. [ 206.375586][T12320] netlink: 'syz.4.1820': attribute type 6 has an invalid length. [ 206.384998][T12320] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1820'. [ 206.401184][T12278] chnl_net:caif_netlink_parms(): no params data found [ 206.452493][ T12] bridge_slave_1: left allmulticast mode [ 206.471599][ T12] bridge_slave_1: left promiscuous mode [ 206.486600][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.516299][ T12] bridge_slave_0: left allmulticast mode [ 206.521989][ T12] bridge_slave_0: left promiscuous mode [ 206.546243][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.571938][T12331] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1824'. [ 206.591778][T12330] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1824'. [ 206.709230][T12343] IPVS: set_ctl: invalid protocol: 98 10.1.1.0:20001 [ 206.921427][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 206.931917][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 206.943080][ T12] bond0 (unregistering): Released all slaves [ 206.968524][T12329] sch_tbf: burst 21990 is lower than device lo mtu (11337746) ! [ 206.991097][T12345] vlan4: entered allmulticast mode [ 206.996826][T12345] team0: entered allmulticast mode [ 207.001987][T12345] team_slave_0: entered allmulticast mode [ 207.008214][T12345] team_slave_1: entered allmulticast mode [ 207.014119][T12345] team0: Device vlan4 is already an upper device of the team interface [ 207.400759][T12369] netlink: 'syz.4.1834': attribute type 11 has an invalid length. [ 207.429321][T12373] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1835'. [ 207.452241][T12374] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1834'. [ 207.467619][T12278] bridge0: port 1(bridge_slave_0) entered blocking state [ 207.507840][T12278] bridge0: port 1(bridge_slave_0) entered disabled state [ 207.528520][T12278] bridge_slave_0: entered allmulticast mode [ 207.535392][ T5852] Bluetooth: hci3: command tx timeout [ 207.548257][T12278] bridge_slave_0: entered promiscuous mode [ 207.595187][T12278] bridge0: port 2(bridge_slave_1) entered blocking state [ 207.604510][T12278] bridge0: port 2(bridge_slave_1) entered disabled state [ 207.613283][T12278] bridge_slave_1: entered allmulticast mode [ 207.623155][T12278] bridge_slave_1: entered promiscuous mode [ 207.679521][ T12] hsr_slave_0: left promiscuous mode [ 207.705259][ T12] hsr_slave_1: left promiscuous mode [ 207.718887][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 207.743925][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 207.770417][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 207.791789][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 207.878883][ T12] veth1_macvtap: left promiscuous mode [ 207.901424][ T12] veth0_macvtap: left promiscuous mode [ 207.919123][ T12] veth1_vlan: left promiscuous mode [ 207.934832][ T12] veth0_vlan: left promiscuous mode [ 208.467929][ T12] team0 (unregistering): Port device team_slave_1 removed [ 208.505049][ T12] team0 (unregistering): Port device team_slave_0 removed [ 208.920290][T12278] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 208.967864][T12278] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 209.081894][T12417] netlink: 'syz.4.1847': attribute type 39 has an invalid length. [ 209.113539][T12278] team0: Port device team_slave_0 added [ 209.128400][T12278] team0: Port device team_slave_1 added [ 209.283338][T12278] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 209.297558][T12278] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 209.341978][T12278] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 209.368373][T12278] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 209.392866][T12278] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 209.429106][T12278] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 209.515470][T12433] SET target dimension over the limit! [ 209.625529][ T5852] Bluetooth: hci3: command tx timeout [ 209.709820][T12278] hsr_slave_0: entered promiscuous mode [ 209.728010][T12278] hsr_slave_1: entered promiscuous mode [ 209.744306][T12278] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 209.766380][T12278] Cannot create hsr debugfs directory [ 210.398730][T12471] netlink: 'syz.0.1862': attribute type 1 has an invalid length. [ 210.724063][T12498] __nla_validate_parse: 4 callbacks suppressed [ 210.724081][T12498] netlink: 66 bytes leftover after parsing attributes in process `syz.1.1863'. [ 210.972523][T12510] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1867'. [ 210.986099][ T5852] Bluetooth: hci2: command 0x0406 tx timeout [ 211.062198][T12516] netlink: 'syz.4.1871': attribute type 6 has an invalid length. [ 211.269985][T12278] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 211.333286][T12278] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 211.413886][T12278] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 211.478628][T12278] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 211.672860][T12558] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1882'. [ 211.682901][T12559] netlink: 'syz.4.1881': attribute type 1 has an invalid length. [ 211.699198][ T5852] Bluetooth: hci3: command tx timeout [ 211.739585][T12558] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1882'. [ 211.826921][T12278] 8021q: adding VLAN 0 to HW filter on device bond0 [ 211.891447][T12278] 8021q: adding VLAN 0 to HW filter on device team0 [ 211.974809][T12491] bridge0: port 1(bridge_slave_0) entered blocking state [ 211.982057][T12491] bridge0: port 1(bridge_slave_0) entered forwarding state [ 212.044552][T12491] bridge0: port 2(bridge_slave_1) entered blocking state [ 212.051776][T12491] bridge0: port 2(bridge_slave_1) entered forwarding state [ 212.111873][T12561] bridge_slave_0: left allmulticast mode [ 212.117893][T12561] bridge_slave_0: left promiscuous mode [ 212.138338][T12561] bridge0: port 1(bridge_slave_0) entered disabled state [ 212.442959][T12561] team0: Port device team_slave_0 removed [ 212.466683][T12561] team0: Port device team_slave_1 removed [ 212.473135][T12561] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 212.495536][T12561] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 212.746558][T12590] netlink: 'syz.3.1892': attribute type 83 has an invalid length. [ 212.954374][T12595] pim6reg1: entered promiscuous mode [ 212.986842][T12595] pim6reg1: entered allmulticast mode [ 213.024937][T12604] netlink: zone id is out of range [ 213.077218][T12614] netlink: 'syz.4.1896': attribute type 2 has an invalid length. [ 213.100441][T12614] netlink: 'syz.4.1896': attribute type 8 has an invalid length. [ 213.122700][T12614] netlink: 1148 bytes leftover after parsing attributes in process `syz.4.1896'. [ 213.178152][T12607] pim6reg: entered allmulticast mode [ 213.207238][T12278] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 213.223072][T12618] netlink: 'syz.1.1898': attribute type 4 has an invalid length. [ 213.297148][T12618] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 213.323431][T12278] veth0_vlan: entered promiscuous mode [ 213.329709][T12618] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 213.339699][T12618] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 213.363274][T12278] veth1_vlan: entered promiscuous mode [ 213.417718][T12626] netlink: 'syz.4.1900': attribute type 10 has an invalid length. [ 213.418935][T12278] veth0_macvtap: entered promiscuous mode [ 213.425678][T12626] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1900'. [ 213.440057][T12278] veth1_macvtap: entered promiscuous mode [ 213.465497][T12626] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.479366][T12626] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.490910][T12626] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.500204][T12626] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.514304][T12626] team0: Failed to send port change of device geneve0 via netlink (err -105) [ 213.539237][T12626] team0: Failed to send options change via netlink (err -105) [ 213.551435][T12626] team0: Port device geneve0 added [ 213.591137][T12278] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 213.613550][T12278] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 213.644573][T12278] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.658976][T12278] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.670464][T12278] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.691655][T12278] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.710655][T12641] netlink: 13 bytes leftover after parsing attributes in process `syz.0.1905'. [ 213.739382][T12641] xt_ecn: cannot match TCP bits for non-tcp packets [ 213.775965][ T5852] Bluetooth: hci3: command tx timeout [ 213.832429][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 213.851115][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 213.881284][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 213.904830][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 213.968861][T12654] netlink: 84 bytes leftover after parsing attributes in process `syz.3.1909'. [ 214.158799][T12665] sch_tbf: burst 21990 is lower than device lo mtu (11337746) ! [ 214.188228][T12668] netlink: 788 bytes leftover after parsing attributes in process `syz.3.1914'. [ 214.368560][T12678] syzkaller0: entered promiscuous mode [ 214.374088][T12678] syzkaller0: entered allmulticast mode [ 214.696526][T12699] x_tables: ip6_tables: MASQUERADE target: used from hooks INPUT, but only usable from POSTROUTING [ 214.790286][T12707] netlink: 'syz.4.1927': attribute type 11 has an invalid length. [ 214.894102][ T3463] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.312688][ T3463] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.685229][T12728] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1934'. [ 215.708227][ T3463] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.769083][T12731] bond0: entered promiscuous mode [ 215.780765][T12731] batadv0: entered promiscuous mode [ 215.790084][T12731] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 215.798720][T12731] Cannot create hsr debugfs directory [ 215.809539][T12731] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 215.823293][T12731] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 215.834253][T12731] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 215.849998][T12731] bond0: left promiscuous mode [ 215.858356][T12731] batadv0: left promiscuous mode [ 215.901452][ T5853] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 215.913645][ T5853] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 215.922224][ T5853] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 215.931988][ T5853] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 215.940575][ T5853] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 215.982376][ T3463] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.050788][T12728] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1934'. [ 216.264132][T12754] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1939'. [ 216.295441][ T3463] bridge_slave_1: left allmulticast mode [ 216.301155][ T3463] bridge_slave_1: left promiscuous mode [ 216.315425][ T3463] bridge0: port 2(bridge_slave_1) entered disabled state [ 216.329338][ T3463] bridge_slave_0: left allmulticast mode [ 216.346091][ T3463] bridge_slave_0: left promiscuous mode [ 216.355449][ T3463] bridge0: port 1(bridge_slave_0) entered disabled state [ 216.404717][T12760] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1939'. [ 216.414167][T12760] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1939'. [ 216.700777][ T3463] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 216.712139][ T3463] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 216.722191][ T3463] bond0 (unregistering): Released all slaves [ 216.753693][T12761] sch_tbf: burst 21990 is lower than device lo mtu (11337746) ! [ 217.182401][T12740] chnl_net:caif_netlink_parms(): no params data found [ 217.391030][ T3463] hsr_slave_0: left promiscuous mode [ 217.415975][ T3463] hsr_slave_1: left promiscuous mode [ 217.422249][ T3463] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 217.437588][ T3463] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 217.456763][T12052] page_pool_release_retry() stalled pool shutdown: id 29, 1 inflight 60 sec [ 217.471662][ T3463] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 217.495069][ T3463] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 217.554975][ T3463] veth1_macvtap: left promiscuous mode [ 217.564404][ T3463] veth0_macvtap: left promiscuous mode [ 217.571915][ T3463] veth1_vlan: left promiscuous mode [ 217.581422][ T3463] veth0_vlan: left promiscuous mode [ 218.016023][ T5852] Bluetooth: hci3: command tx timeout [ 218.024892][ T3463] team0 (unregistering): Port device team_slave_1 removed [ 218.058955][ T3463] team0 (unregistering): Port device team_slave_0 removed [ 218.484259][T12816] bridge3: entered promiscuous mode [ 218.490326][T12816] bridge3: entered allmulticast mode [ 218.498342][T12823] netlink: 'syz.3.1956': attribute type 12 has an invalid length. [ 218.570260][T12740] bridge0: port 1(bridge_slave_0) entered blocking state [ 218.577726][T12740] bridge0: port 1(bridge_slave_0) entered disabled state [ 218.584953][T12740] bridge_slave_0: entered allmulticast mode [ 218.599684][T12740] bridge_slave_0: entered promiscuous mode [ 218.617984][T12740] bridge0: port 2(bridge_slave_1) entered blocking state [ 218.642556][T12740] bridge0: port 2(bridge_slave_1) entered disabled state [ 218.663161][T12740] bridge_slave_1: entered allmulticast mode [ 218.674355][T12740] bridge_slave_1: entered promiscuous mode [ 218.830416][T12740] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 218.863861][T12740] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 219.002902][T12855] xt_nfacct: accounting object `syz1' does not exists [ 219.015248][T12856] xt_nfacct: accounting object `syz1' does not exists [ 219.033876][T12740] team0: Port device team_slave_0 added [ 219.073611][T12740] team0: Port device team_slave_1 added [ 219.094019][T12860] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1965'. [ 219.124558][T12860] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 219.201965][T12740] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 219.210011][T12740] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 219.236649][T12740] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 219.251101][T12740] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 219.258360][T12740] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 219.303859][T12740] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 219.387990][T12740] hsr_slave_0: entered promiscuous mode [ 219.417737][T12740] hsr_slave_1: entered promiscuous mode [ 219.430403][T12740] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 219.438274][T12740] Cannot create hsr debugfs directory [ 219.504662][T12880] netlink: 'syz.0.1971': attribute type 1 has an invalid length. [ 219.542150][T12880] bond6: entered promiscuous mode [ 219.547951][T12880] 8021q: adding VLAN 0 to HW filter on device bond6 [ 219.548116][T12882] netlink: 23 bytes leftover after parsing attributes in process `syz.4.1972'. [ 219.575509][T12880] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1971'. [ 220.096451][ T5852] Bluetooth: hci3: command tx timeout [ 220.138727][ T183] nci: nci_ntf_packet: unknown ntf opcode 0x206 [ 220.147696][T12926] xt_cgroup: invalid path, errno=-2 [ 220.211843][T12929] ipt_ECN: cannot use operation on non-tcp rule [ 220.822054][T12944] netlink: 'syz.3.1990': attribute type 3 has an invalid length. [ 220.831832][T12944] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1990'. [ 220.894556][T12740] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 220.994684][T12740] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 221.040823][T12740] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 221.054532][T12951] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 221.105668][T12740] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 221.128555][T12952] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1993'. [ 221.187954][T12961] netlink: 'syz.3.1995': attribute type 4 has an invalid length. [ 221.479956][T12740] 8021q: adding VLAN 0 to HW filter on device bond0 [ 221.552215][T12740] 8021q: adding VLAN 0 to HW filter on device team0 [ 221.592960][ T3463] bridge0: port 1(bridge_slave_0) entered blocking state [ 221.600144][ T3463] bridge0: port 1(bridge_slave_0) entered forwarding state [ 221.645982][T12996] tap0: tun_chr_ioctl cmd 1074025672 [ 221.660059][T12996] tap0: ignored: set checksum disabled [ 221.724270][ T1323] bridge0: port 2(bridge_slave_1) entered blocking state [ 221.731494][ T1323] bridge0: port 2(bridge_slave_1) entered forwarding state [ 221.931566][T13008] IPVS: set_ctl: invalid protocol: 29 224.0.0.1:20002 [ 222.185275][ T5852] Bluetooth: hci3: command tx timeout [ 222.420828][T13034] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2012'. [ 222.439356][T13028] sctp: [Deprecated]: syz.3.2009 (pid 13028) Use of struct sctp_assoc_value in delayed_ack socket option. [ 222.439356][T13028] Use struct sctp_sack_info instead [ 222.561764][T13038] unknown channel width for channel at 909000KHz? [ 222.590368][T12740] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 222.687158][T13042] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 222.706777][T13044] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2015'. [ 222.729060][T13044] netlink: 80 bytes leftover after parsing attributes in process `syz.4.2015'. [ 222.844139][T12740] veth0_vlan: entered promiscuous mode [ 222.858128][T12740] veth1_vlan: entered promiscuous mode [ 222.892771][T12740] veth0_macvtap: entered promiscuous mode [ 222.911115][T12740] veth1_macvtap: entered promiscuous mode [ 222.934187][T12740] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 222.962854][T12740] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 222.998984][T12740] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.018078][T12740] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.035259][T12740] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.050720][T12740] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.229052][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 223.247715][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 223.360250][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 223.389938][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 223.664328][T13085] netlink: 'syz.1.2028': attribute type 58 has an invalid length. [ 223.673604][T13085] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2028'. [ 223.832373][T13096] tipc: Resetting bearer [ 223.884687][T13096] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 223.933390][T13096] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.943613][T13096] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.952830][T13096] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.961812][T13096] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.001538][T13096] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 224.011485][T13096] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 224.020537][T13096] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 224.029487][T13096] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 224.053677][T13098] netlink: 'syz.1.2031': attribute type 29 has an invalid length. [ 224.156954][T12489] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.354329][T12489] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.749469][T12489] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.874730][T13104] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2034'. [ 225.172075][T12489] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.240672][T13125] netlink: 'syz.4.2040': attribute type 24 has an invalid length. [ 225.453883][ T5853] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 225.462443][ T5853] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 225.471452][T13134] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2045'. [ 225.483591][ T5853] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 225.492945][ T5853] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 225.511625][T13134] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2045'. [ 225.521181][ T5853] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 225.569080][T12489] bridge_slave_1: left allmulticast mode [ 225.598572][T12489] bridge_slave_1: left promiscuous mode [ 225.644485][T12489] bridge0: port 2(bridge_slave_1) entered disabled state [ 225.691312][T12489] bridge_slave_0: left allmulticast mode [ 225.706633][T12489] bridge_slave_0: left promiscuous mode [ 225.719421][T12489] bridge0: port 1(bridge_slave_0) entered disabled state [ 225.759446][T13148] x_tables: duplicate underflow at hook 3 [ 225.993489][T13159] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2053'. [ 226.072757][T13164] netlink: 'syz.3.2052': attribute type 4 has an invalid length. [ 226.129721][T13166] netlink: 'syz.3.2052': attribute type 4 has an invalid length. [ 226.171873][T12489] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 226.191730][T12489] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 226.202202][T12489] bond0 (unregistering): Released all slaves [ 226.476559][T13174] netlink: 'syz.3.2056': attribute type 1 has an invalid length. [ 226.484435][T13174] netlink: 144 bytes leftover after parsing attributes in process `syz.3.2056'. [ 226.497120][T13174] netlink: 'syz.3.2056': attribute type 1 has an invalid length. [ 226.512686][T13174] netlink: 'syz.3.2056': attribute type 2 has an invalid length. [ 226.522452][T13174] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2056'. [ 226.763884][T12489] hsr_slave_0: left promiscuous mode [ 226.772509][T12489] hsr_slave_1: left promiscuous mode [ 226.782064][T12489] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 226.789651][T12489] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 226.798254][T12489] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 226.810975][T12489] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 226.833856][T12489] veth1_macvtap: left promiscuous mode [ 226.839499][T12489] veth0_macvtap: left promiscuous mode [ 226.845466][T12489] veth1_vlan: left promiscuous mode [ 226.850806][T12489] veth0_vlan: left promiscuous mode [ 227.242392][T12489] team0 (unregistering): Port device team_slave_1 removed [ 227.277941][T12489] team0 (unregistering): Port device team_slave_0 removed [ 227.615576][ T5852] Bluetooth: hci3: command tx timeout [ 227.744621][T13213] xt_policy: too many policy elements [ 227.898444][T13221] netlink: 284 bytes leftover after parsing attributes in process `syz.0.2069'. [ 227.961439][T13227] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2070'. [ 227.976558][T13136] chnl_net:caif_netlink_parms(): no params data found [ 227.990247][T13229] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2070'. [ 228.161377][T13227] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2070'. [ 228.323101][T13136] bridge0: port 1(bridge_slave_0) entered blocking state [ 228.333589][T13136] bridge0: port 1(bridge_slave_0) entered disabled state [ 228.342413][T13136] bridge_slave_0: entered allmulticast mode [ 228.353282][T13136] bridge_slave_0: entered promiscuous mode [ 228.362967][T13248] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2075'. [ 228.392440][T13136] bridge0: port 2(bridge_slave_1) entered blocking state [ 228.405974][T13136] bridge0: port 2(bridge_slave_1) entered disabled state [ 228.413215][T13136] bridge_slave_1: entered allmulticast mode [ 228.437734][T13136] bridge_slave_1: entered promiscuous mode [ 228.498060][T13136] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 228.520174][T13136] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 228.622063][T13136] team0: Port device team_slave_0 added [ 228.729017][T13136] team0: Port device team_slave_1 added [ 228.746636][T13264] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2080'. [ 228.910993][T13136] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 228.927017][T13136] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 228.962454][T13276] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2081'. [ 228.972365][T13136] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 228.992619][T13136] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 229.000831][T13136] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 229.033042][T13136] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 229.043978][T13277] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2082'. [ 229.341098][T13287] 8021q: adding VLAN 0 to HW filter on device team0 [ 229.360048][T13287] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 229.410927][T13136] hsr_slave_0: entered promiscuous mode [ 229.430754][T13136] hsr_slave_1: entered promiscuous mode [ 229.441006][T13136] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 229.452692][T13136] Cannot create hsr debugfs directory [ 229.695337][ T5852] Bluetooth: hci3: command tx timeout [ 229.861470][T13316] tipc: Enabled bearer , priority 0 [ 229.876434][T13318] netlink: 'syz.1.2097': attribute type 6 has an invalid length. [ 230.002049][T13316] tipc: Disabling bearer [ 230.064288][T13329] tipc: Resetting bearer [ 230.158857][T13329] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.171913][T13329] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.183666][T13329] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.195942][T13329] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.269520][T13337] (unnamed net_device) (uninitialized): up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 230.605659][T13361] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 230.866448][T13136] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 230.877915][T13136] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 230.903243][T13374] netlink: 'syz.3.2112': attribute type 9 has an invalid length. [ 230.922836][T13136] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 230.936587][T13136] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 230.955649][T13377] netlink: 'syz.3.2112': attribute type 9 has an invalid length. [ 231.277571][T13136] 8021q: adding VLAN 0 to HW filter on device bond0 [ 231.319617][T13136] 8021q: adding VLAN 0 to HW filter on device team0 [ 231.347251][ T3463] bridge0: port 1(bridge_slave_0) entered blocking state [ 231.354457][ T3463] bridge0: port 1(bridge_slave_0) entered forwarding state [ 231.393426][ T3463] bridge0: port 2(bridge_slave_1) entered blocking state [ 231.400645][ T3463] bridge0: port 2(bridge_slave_1) entered forwarding state [ 231.674161][T13430] __nla_validate_parse: 6 callbacks suppressed [ 231.674176][T13430] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2127'. [ 231.690143][T13433] netlink: 'syz.1.2129': attribute type 1 has an invalid length. [ 231.709700][T13433] netlink: 'syz.1.2129': attribute type 4 has an invalid length. [ 231.734357][T13433] netlink: 188 bytes leftover after parsing attributes in process `syz.1.2129'. [ 231.746831][T13433] NCSI netlink: No device for ifindex 458760 [ 231.775522][ T5852] Bluetooth: hci3: command tx timeout [ 231.790915][T13437] netlink: 144 bytes leftover after parsing attributes in process `syz.0.2130'. [ 231.977983][T13136] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 232.108763][T13136] veth0_vlan: entered promiscuous mode [ 232.149585][T13136] veth1_vlan: entered promiscuous mode [ 232.150139][T13448] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.2134'. [ 232.277819][T13136] veth0_macvtap: entered promiscuous mode [ 232.299635][T13136] veth1_macvtap: entered promiscuous mode [ 232.358187][T13461] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2135'. [ 232.441516][T13136] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 232.500203][T13136] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 232.571710][T13136] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.597523][T13136] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.607734][T13136] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.616700][T13136] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.828543][ T1323] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 232.865284][ T1323] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 232.962481][T12496] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 232.977258][T12496] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 233.024790][T13488] netlink: 'syz.0.2143': attribute type 83 has an invalid length. [ 233.388789][T13512] xt_policy: neither incoming nor outgoing policy selected [ 233.489178][T13517] netlink: 165 bytes leftover after parsing attributes in process `syz.0.2151'. [ 233.602164][T13526] netlink: 256 bytes leftover after parsing attributes in process `syz.0.2155'. [ 233.613580][T13527] netlink: 100 bytes leftover after parsing attributes in process `syz.0.2155'. [ 233.793243][T13545] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2160'. [ 233.795335][T13540] netlink: 88 bytes leftover after parsing attributes in process `syz.0.2159'. [ 234.113336][T13561] sctp: [Deprecated]: syz.1.2165 (pid 13561) Use of int in max_burst socket option. [ 234.113336][T13561] Use struct sctp_assoc_value instead [ 234.220245][T13567] netdevsim netdevsim1: Direct firmware load for failed with error -2 [ 234.251093][T13567] netdevsim netdevsim1: Falling back to sysfs fallback for: [ 234.505052][T13584] netlink: 'syz.4.2172': attribute type 1 has an invalid length. [ 234.593518][ T13] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.644093][T13588] gretap2: entered promiscuous mode [ 235.293428][ T13] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.371190][ T13] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.419549][ T13] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.740326][ T13] bridge_slave_1: left allmulticast mode [ 235.760903][ T13] bridge_slave_1: left promiscuous mode [ 235.775326][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 235.806511][ T13] bridge_slave_0: left allmulticast mode [ 235.823256][ T13] bridge_slave_0: left promiscuous mode [ 235.839491][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 235.873878][T13619] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 235.991080][T13628] netlink: 'syz.0.2186': attribute type 1 has an invalid length. [ 236.180276][ T5853] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 236.189936][ T5853] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 236.200628][ T5853] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 236.211736][ T5853] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 236.219970][ T5853] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 236.420575][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 236.431720][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 236.442081][ T13] bond0 (unregistering): Released all slaves [ 236.805124][ T13] hsr_slave_0: left promiscuous mode [ 236.813603][ T13] hsr_slave_1: left promiscuous mode [ 236.822511][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 236.841236][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 236.850548][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 236.858273][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 236.865795][T13660] __nla_validate_parse: 10 callbacks suppressed [ 236.865811][T13660] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2195'. [ 236.894887][ T13] veth1_macvtap: left promiscuous mode [ 236.902634][ T13] veth0_macvtap: left promiscuous mode [ 236.916345][ T13] veth1_vlan: left promiscuous mode [ 236.921781][ T13] veth0_vlan: left promiscuous mode [ 237.414632][ T13] team0 (unregistering): Port device team_slave_1 removed [ 237.453517][ T13] team0 (unregistering): Port device team_slave_0 removed [ 237.779317][T13677] batadv_slave_0: entered promiscuous mode [ 238.004154][T13686] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2203'. [ 238.024079][T13686] netlink: 'syz.4.2203': attribute type 2 has an invalid length. [ 238.059737][T13686] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2203'. [ 238.078499][T13691] netlink: 96 bytes leftover after parsing attributes in process `syz.3.2202'. [ 238.088083][T13691] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2202'. [ 238.119216][T13633] chnl_net:caif_netlink_parms(): no params data found [ 238.236720][T13693] netlink: 'syz.3.2206': attribute type 1 has an invalid length. [ 238.265627][ T5853] Bluetooth: hci3: command tx timeout [ 238.272557][T13696] IPVS: set_ctl: invalid protocol: 92 172.20.20.187:20004 [ 238.324010][T13693] 8021q: adding VLAN 0 to HW filter on device bond6 [ 238.385028][T13701] macvlan4: entered promiscuous mode [ 238.390545][T13701] macvlan4: entered allmulticast mode [ 238.397384][T13701] bond6: entered promiscuous mode [ 238.403654][T13701] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 238.412601][T13701] bond6: left promiscuous mode [ 238.510080][T13633] bridge0: port 1(bridge_slave_0) entered blocking state [ 238.528028][T13633] bridge0: port 1(bridge_slave_0) entered disabled state [ 238.549427][T13633] bridge_slave_0: entered allmulticast mode [ 238.557517][T13633] bridge_slave_0: entered promiscuous mode [ 238.580396][T13633] bridge0: port 2(bridge_slave_1) entered blocking state [ 238.595359][T13633] bridge0: port 2(bridge_slave_1) entered disabled state [ 238.602617][T13633] bridge_slave_1: entered allmulticast mode [ 238.632001][T13633] bridge_slave_1: entered promiscuous mode [ 238.785454][T13725] netlink: 'syz.0.2212': attribute type 1 has an invalid length. [ 238.834884][T13633] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 238.852497][T13633] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 238.869576][T13725] netlink: 'syz.0.2212': attribute type 1 has an invalid length. [ 238.909841][T13725] netlink: 'syz.0.2212': attribute type 1 has an invalid length. [ 238.935304][T13725] netlink: 'syz.0.2212': attribute type 1 has an invalid length. [ 238.950235][T13725] netlink: 'syz.0.2212': attribute type 1 has an invalid length. [ 238.963688][T13725] netlink: 'syz.0.2212': attribute type 1 has an invalid length. [ 238.968200][T13633] team0: Port device team_slave_0 added [ 238.981962][T13725] netlink: 'syz.0.2212': attribute type 1 has an invalid length. [ 238.993557][T13633] team0: Port device team_slave_1 added [ 239.083299][T13633] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 239.090789][T13633] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 239.147667][T13633] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 239.185289][T13633] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 239.192276][T13633] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 239.261703][T13633] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 239.381776][T13746] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2220'. [ 239.412510][T13633] hsr_slave_0: entered promiscuous mode [ 239.421630][T13633] hsr_slave_1: entered promiscuous mode [ 239.439183][T13633] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 239.460700][T13633] Cannot create hsr debugfs directory [ 239.606988][T13760] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2223'. [ 239.763855][T13767] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2227'. [ 239.824976][T13769] macvtap2: entered allmulticast mode [ 239.832363][T13769] veth0_macvtap: entered allmulticast mode [ 239.968855][T13778] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2230'. [ 239.985942][T13778] gretap3: entered promiscuous mode [ 240.294903][T13633] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 240.310042][T13795] set match dimension is over the limit! [ 240.320609][T13633] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 240.335314][ T5853] Bluetooth: hci3: command tx timeout [ 240.344700][T13633] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 240.370543][T13633] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 240.403998][T13797] tipc: Enabled bearer , priority 10 [ 240.416916][T13799] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 240.564771][T13814] xt_nat: multiple ranges no longer supported [ 240.604427][T13633] 8021q: adding VLAN 0 to HW filter on device bond0 [ 240.637322][T13633] 8021q: adding VLAN 0 to HW filter on device team0 [ 240.639511][T13812] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 240.652860][T12496] bridge0: port 1(bridge_slave_0) entered blocking state [ 240.660049][T12496] bridge0: port 1(bridge_slave_0) entered forwarding state [ 240.673907][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 240.681087][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 240.710451][T13823] sch_tbf: burst 21990 is lower than device lo mtu (11337746) ! [ 240.982937][T13833] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 241.009564][T13833] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 241.098987][T13827] netlink: 'syz.0.2245': attribute type 11 has an invalid length. [ 241.120610][T13827] netlink: 'syz.0.2245': attribute type 11 has an invalid length. [ 241.142207][T13827] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2245'. [ 241.279382][T13633] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 241.353208][T13633] veth0_vlan: entered promiscuous mode [ 241.373049][T13633] veth1_vlan: entered promiscuous mode [ 241.457141][T13633] veth0_macvtap: entered promiscuous mode [ 241.488944][T13633] veth1_macvtap: entered promiscuous mode [ 241.541696][T13849] validate_nla: 61 callbacks suppressed [ 241.541715][T13849] netlink: 'syz.3.2249': attribute type 2 has an invalid length. [ 241.590836][T13633] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 241.632751][T13633] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 241.681404][T13633] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.707870][T13633] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.749403][T13633] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.760945][T13633] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.788961][T13861] ipvlan0: entered promiscuous mode [ 241.796302][T13861] ipvlan0: entered allmulticast mode [ 241.961333][T13871] tipc: Enabling of bearer rejected, failed to enable media [ 241.978609][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 241.987406][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 242.009544][T13871] x_tables: duplicate underflow at hook 1 [ 242.068504][T12491] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 242.088254][T12491] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 242.565598][T13906] netlink: 'syz.3.2265': attribute type 21 has an invalid length. [ 242.585929][T13906] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2265'. [ 242.688453][T13921] netlink: 'syz.3.2265': attribute type 21 has an invalid length. [ 242.699388][T13906] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 242.700000][T13921] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2265'. [ 242.749901][T13926] netlink: 'syz.0.2266': attribute type 1 has an invalid length. [ 242.762423][T13926] netlink: 'syz.0.2266': attribute type 1 has an invalid length. [ 242.950384][T13937] IPVS: set_ctl: invalid protocol: 135 224.0.0.1:20000 [ 242.971471][T13938] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 243.000693][T13942] x_tables: ip_tables: osf match: only valid for protocol 6 [ 243.040633][T13944] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2271'. [ 243.081145][T13946] block nbd0: NBD_DISCONNECT [ 243.093774][T13946] block nbd0: Send disconnect failed -32 [ 243.109784][T13946] block nbd0: shutting down sockets [ 243.142177][T13946] netlink: 'syz.0.2272': attribute type 1 has an invalid length. [ 243.204398][T13951] netlink: 'syz.1.2274': attribute type 5 has an invalid length. [ 243.447329][T13964] xt_l2tp: v2 sid > 0xffff: 262144 [ 243.680313][T12489] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.672764][T13996] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2287'. [ 244.739610][T12489] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.757459][T14005] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2286'. [ 244.795420][T13994] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 244.892381][T12489] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.985528][T14012] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2291'. [ 245.017208][T12489] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.049381][ T5852] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 245.058920][ T5852] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 245.067211][ T5852] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 245.077813][ T5852] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 245.086789][ T5852] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 245.356255][T14025] team0 (unregistering): Port device geneve0 removed [ 245.387375][T14030] netlink: 'syz.3.2296': attribute type 4 has an invalid length. [ 245.424212][T14030] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2296'. [ 245.447574][T14030] bridge_slave_1: left allmulticast mode [ 245.453262][T14030] bridge_slave_1: left promiscuous mode [ 245.466176][T14030] bridge0: port 2(bridge_slave_1) entered disabled state [ 245.478309][T14030] bridge_slave_0: left allmulticast mode [ 245.484129][T14030] bridge_slave_0: left promiscuous mode [ 245.492035][T14030] bridge0: port 1(bridge_slave_0) entered disabled state [ 245.601752][T12489] bridge_slave_1: left allmulticast mode [ 245.607864][T12489] bridge_slave_1: left promiscuous mode [ 245.613683][T12489] bridge0: port 2(bridge_slave_1) entered disabled state [ 245.626242][T12489] bridge_slave_0: left allmulticast mode [ 245.631977][T12489] bridge_slave_0: left promiscuous mode [ 245.641642][T12489] bridge0: port 1(bridge_slave_0) entered disabled state [ 245.979541][T12489] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 245.990611][T12489] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 246.000717][T12489] bond0 (unregistering): Released all slaves [ 246.230951][T14013] chnl_net:caif_netlink_parms(): no params data found [ 246.535875][T14067] netlink: 'syz.4.2308': attribute type 1 has an invalid length. [ 246.543740][T14067] netlink: 228 bytes leftover after parsing attributes in process `syz.4.2308'. [ 246.551147][T14074] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 246.763654][T12489] hsr_slave_0: left promiscuous mode [ 246.772768][T12489] hsr_slave_1: left promiscuous mode [ 246.812248][T12489] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 246.820492][T12489] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 246.828726][T12489] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 246.836270][T12489] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 246.863529][T12489] veth1_macvtap: left promiscuous mode [ 246.869408][T12489] veth0_macvtap: left promiscuous mode [ 246.875726][T12489] veth1_vlan: left promiscuous mode [ 246.885272][T12489] veth0_vlan: left promiscuous mode [ 247.135410][ T5853] Bluetooth: hci3: command tx timeout [ 247.442686][T12489] team0 (unregistering): Port device team_slave_1 removed [ 247.480239][T12489] team0 (unregistering): Port device team_slave_0 removed [ 247.795697][T14084] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2313'. [ 247.804850][T14013] bridge0: port 1(bridge_slave_0) entered blocking state [ 247.816977][T14013] bridge0: port 1(bridge_slave_0) entered disabled state [ 247.824253][T14013] bridge_slave_0: entered allmulticast mode [ 247.833139][T14013] bridge_slave_0: entered promiscuous mode [ 247.849265][T14013] bridge0: port 2(bridge_slave_1) entered blocking state [ 247.875190][T14013] bridge0: port 2(bridge_slave_1) entered disabled state [ 247.898026][T14013] bridge_slave_1: entered allmulticast mode [ 247.913533][T14013] bridge_slave_1: entered promiscuous mode [ 248.072874][T14013] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 248.111481][T14109] netlink: 'syz.0.2320': attribute type 1 has an invalid length. [ 248.119595][T14109] netlink: 'syz.0.2320': attribute type 1 has an invalid length. [ 248.147157][T14013] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 248.278731][T14013] team0: Port device team_slave_0 added [ 248.308864][T14013] team0: Port device team_slave_1 added [ 248.393027][T14013] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 248.408976][T14013] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 248.439894][T14013] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 248.453205][T14013] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 248.464502][T14013] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 248.498605][T14013] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 248.702757][T14013] hsr_slave_0: entered promiscuous mode [ 248.716284][T14013] hsr_slave_1: entered promiscuous mode [ 248.722541][T14013] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 248.755112][T14013] Cannot create hsr debugfs directory [ 248.887069][T14143] netlink: 830 bytes leftover after parsing attributes in process `syz.4.2329'. [ 249.143925][T14154] fq_change: 55 callbacks suppressed [ 249.143944][T14154] sch_fq: defrate 0 ignored. [ 249.225415][ T5853] Bluetooth: hci3: command tx timeout [ 249.391050][T14165] sch_tbf: burst 21990 is lower than device lo mtu (11337746) ! [ 249.584480][T14182] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2340'. [ 249.709516][T14189] netlink: 256 bytes leftover after parsing attributes in process `syz.0.2342'. [ 249.744059][ T5853] block nbd0: Receive control failed (result -32) [ 249.759453][ T5852] block nbd1: Receive control failed (result -32) [ 249.815931][T14013] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 249.836434][T14013] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 249.862488][T14013] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 249.890084][T14013] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 249.978391][T14204] netlink: 'syz.0.2344': attribute type 10 has an invalid length. [ 250.007490][T14204] veth1_vlan: entered allmulticast mode [ 250.013866][T14204] veth1_vlan: left promiscuous mode [ 250.020799][T14204] team0: Device veth1_vlan failed to register rx_handler [ 250.064185][T14013] 8021q: adding VLAN 0 to HW filter on device bond0 [ 250.100194][T14013] 8021q: adding VLAN 0 to HW filter on device team0 [ 250.116171][T12491] bridge0: port 1(bridge_slave_0) entered blocking state [ 250.123376][T12491] bridge0: port 1(bridge_slave_0) entered forwarding state [ 250.182175][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 250.189446][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 250.216580][T14214] sch_tbf: burst 21990 is lower than device lo mtu (11337746) ! [ 250.321791][T14217] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2351'. [ 250.580178][T14233] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2355'. [ 250.604995][T14233] netlink: 256 bytes leftover after parsing attributes in process `syz.1.2355'. [ 250.713395][T14240] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2358'. [ 250.754357][T14242] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 250.890625][T14013] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 251.051410][T14013] veth0_vlan: entered promiscuous mode [ 251.090109][T14013] veth1_vlan: entered promiscuous mode [ 251.143277][T14257] netlink: 9 bytes leftover after parsing attributes in process `syz.1.2365'. [ 251.164504][T14013] veth0_macvtap: entered promiscuous mode [ 251.182358][T14257] gretap0: entered promiscuous mode [ 251.199452][T14013] veth1_macvtap: entered promiscuous mode [ 251.231902][T14013] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 251.260572][T14013] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 251.287273][T14013] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.296268][ T5852] Bluetooth: hci3: command tx timeout [ 251.311905][T14013] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.324813][T14013] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.344981][T14013] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.387283][T14273] netlink: 'syz.3.2370': attribute type 10 has an invalid length. [ 251.418138][T14273] team0: Device veth0_vlan failed to register rx_handler [ 251.655811][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 251.663694][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 251.720744][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 251.729113][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 252.014670][T14306] netlink: 'syz.0.2381': attribute type 21 has an invalid length. [ 252.294402][T14328] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2391'. [ 252.471348][T14336] netdevsim netdevsim1: Direct firmware load for failed with error -2 [ 252.489720][T14336] netdevsim netdevsim1: Falling back to sysfs fallback for: [ 252.673924][T14356] netlink: 'syz.3.2399': attribute type 1 has an invalid length. [ 252.870247][T14369] __nla_validate_parse: 1 callbacks suppressed [ 252.870268][T14369] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2399'. [ 252.996303][ T13] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.932529][ T13] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.047449][T14383] x_tables: duplicate underflow at hook 2 [ 254.063819][T14380] netlink: 'syz.4.2407': attribute type 29 has an invalid length. [ 254.089958][T14380] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2407'. [ 254.100129][T14381] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 254.219235][T14388] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2408'. [ 254.271882][ T13] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.324711][T14392] bond0: entered promiscuous mode [ 254.344635][T14392] bond_slave_0: entered promiscuous mode [ 254.365529][T14392] bond_slave_1: entered promiscuous mode [ 254.374607][T14392] mac80211_hwsim hwsim5 ÿ: entered promiscuous mode [ 254.407528][T14392] bond0: left promiscuous mode [ 254.428107][T14392] bond_slave_0: left promiscuous mode [ 254.434831][T14392] bond_slave_1: left promiscuous mode [ 254.456228][T14392] mac80211_hwsim hwsim5 ÿ: left promiscuous mode [ 254.599325][ T13] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.618276][T14403] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2414'. [ 254.626114][T14406] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.2415'. [ 254.644111][ T5853] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 254.655544][ T5853] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 254.663349][ T5853] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 254.671826][ T5853] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 254.681028][ T5853] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 254.692617][T14406] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.2415'. [ 254.760661][T14406] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.2415'. [ 254.778586][T14406] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.2415'. [ 254.789160][T14406] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.2415'. [ 254.799328][T14406] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.2415'. [ 254.999619][ T13] bridge_slave_1: left allmulticast mode [ 255.008032][ T13] bridge_slave_1: left promiscuous mode [ 255.013811][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 255.023970][ T13] bridge_slave_0: left allmulticast mode [ 255.030282][ T13] bridge_slave_0: left promiscuous mode [ 255.036417][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 255.394699][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 255.406655][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 255.432024][ T13] bond0 (unregistering): Released all slaves [ 255.472569][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.516492][T14425] syzkaller1: entered promiscuous mode [ 255.522571][T14425] syzkaller1: entered allmulticast mode [ 255.699833][T14407] chnl_net:caif_netlink_parms(): no params data found [ 255.991990][T14461] xt_TCPMSS: Only works on TCP SYN packets [ 256.089723][ T13] hsr_slave_0: left promiscuous mode [ 256.108192][ T13] hsr_slave_1: left promiscuous mode [ 256.115944][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 256.124094][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 256.137527][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 256.145219][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 256.171435][ T13] veth1_macvtap: left promiscuous mode [ 256.177575][ T13] veth0_macvtap: left promiscuous mode [ 256.183182][ T13] veth1_vlan: left promiscuous mode [ 256.188665][ T13] veth0_vlan: left promiscuous mode [ 256.571242][ T13] team0 (unregistering): Port device team_slave_1 removed [ 256.606874][ T13] team0 (unregistering): Port device team_slave_0 removed [ 256.735389][ T5853] Bluetooth: hci3: command tx timeout [ 257.051530][T14407] bridge0: port 1(bridge_slave_0) entered blocking state [ 257.098654][T14407] bridge0: port 1(bridge_slave_0) entered disabled state [ 257.115427][T14407] bridge_slave_0: entered allmulticast mode [ 257.146576][T14407] bridge_slave_0: entered promiscuous mode [ 257.162819][T14407] bridge0: port 2(bridge_slave_1) entered blocking state [ 257.170702][T14407] bridge0: port 2(bridge_slave_1) entered disabled state [ 257.180492][T14407] bridge_slave_1: entered allmulticast mode [ 257.192072][T14407] bridge_slave_1: entered promiscuous mode [ 257.304081][T14407] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 257.330915][T14407] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 257.569901][T14407] team0: Port device team_slave_0 added [ 257.618892][T14407] team0: Port device team_slave_1 added [ 257.721094][T14407] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 257.734762][T14407] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 257.780403][T14407] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 257.799880][T14407] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 257.808728][T14407] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 257.836443][T14407] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 257.914381][T14524] pim6reg: entered allmulticast mode [ 258.002815][T14407] hsr_slave_0: entered promiscuous mode [ 258.013350][T14407] hsr_slave_1: entered promiscuous mode [ 258.029629][T14407] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 258.040223][T14407] Cannot create hsr debugfs directory [ 258.043789][T14528] __nla_validate_parse: 65 callbacks suppressed [ 258.043808][T14528] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2450'. [ 258.332040][T14542] netlink: 'syz.3.2454': attribute type 15 has an invalid length. [ 258.345433][T14541] xt_policy: too many policy elements [ 258.354290][T14542] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2454'. [ 258.488814][T14554] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2455'. [ 258.492976][T14555] netlink: 80 bytes leftover after parsing attributes in process `syz.0.2457'. [ 258.739532][T14564] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 258.826724][ T5853] Bluetooth: hci3: command tx timeout [ 258.904234][T14578] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.2466'. [ 259.002519][T14407] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 259.043376][T14407] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 259.082925][T14407] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 259.141750][T14407] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 259.255441][T14599] netlink: 'syz.1.2470': attribute type 10 has an invalid length. [ 259.287045][T14599] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 259.361493][T14610] ÿ: renamed from bond0 [ 259.450841][T14407] 8021q: adding VLAN 0 to HW filter on device bond0 [ 259.484004][T14407] 8021q: adding VLAN 0 to HW filter on device team0 [ 259.515686][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 259.522988][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 259.564648][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 259.571850][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 259.750851][T14620] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2476'. [ 259.780450][T14620] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2476'. [ 259.924511][T14407] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 260.067549][T14407] veth0_vlan: entered promiscuous mode [ 260.132474][T14407] veth1_vlan: entered promiscuous mode [ 260.209915][T14640] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2482'. [ 260.240041][T14642] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2483'. [ 260.314462][T14407] veth0_macvtap: entered promiscuous mode [ 260.342947][T14407] veth1_macvtap: entered promiscuous mode [ 260.400349][T14407] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 260.449497][T14646] syz_tun: entered allmulticast mode [ 260.468490][T14407] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 260.480930][T14646] syz_tun: left allmulticast mode [ 260.493171][T14650] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2486'. [ 260.510340][T14646] netlink: 'syz.1.2484': attribute type 1 has an invalid length. [ 260.563638][T14646] 8021q: adding VLAN 0 to HW filter on device bond4 [ 260.580053][T14407] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.589011][T14407] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.598481][T14407] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.607704][T14407] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.669126][T14656] 8021q: adding VLAN 0 to HW filter on device bond4 [ 260.683942][T14656] bond4: (slave vxcan1): The slave device specified does not support setting the MAC address [ 260.702504][T14656] bond4: (slave vxcan1): Error -95 calling set_mac_address [ 260.749544][T14646] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 260.831781][T14660] veth17: entered promiscuous mode [ 260.870398][T14656] vlan0: entered allmulticast mode [ 260.878403][T14674] netlink: 'syz.0.2492': attribute type 1 has an invalid length. [ 260.886705][T14656] bond4: entered allmulticast mode [ 260.892042][T14674] netlink: 'syz.0.2492': attribute type 3 has an invalid length. [ 260.901525][ T5853] Bluetooth: hci3: command tx timeout [ 261.051121][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 261.069646][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 261.182029][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 261.190674][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 261.318285][T14691] Oops: general protection fault, probably for non-canonical address 0xdffffc000000000b: 0000 [#1] SMP KASAN PTI [ 261.330224][T14691] KASAN: null-ptr-deref in range [0x0000000000000058-0x000000000000005f] [ 261.338664][T14691] CPU: 1 UID: 0 PID: 14691 Comm: kbnepd bnep0 Not tainted 6.16.0-rc5-syzkaller-00187-gb640daa2822a #0 PREEMPT(full) [ 261.350900][T14691] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 261.360976][T14691] RIP: 0010:klist_del+0x49/0x110 [ 261.365930][T14691] Code: f6 49 89 dd 49 c1 ed 03 43 80 7c 25 00 00 74 08 48 89 df e8 a9 52 be f6 4c 8b 33 49 83 e6 fe 49 8d 7e 58 48 89 f8 48 c1 e8 03 <42> 80 3c 20 00 74 05 e8 8b 52 be f6 4d 8b 7e 58 4c 89 f7 e8 1f 5b [ 261.385576][T14691] RSP: 0000:ffffc9000558f708 EFLAGS: 00010202 [ 261.391649][T14691] RAX: 000000000000000b RBX: ffff88805c65e460 RCX: ffff88807fad5a00 [ 261.399619][T14691] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000058 [ 261.407607][T14691] RBP: ffffc9000558f830 R08: ffff8880269e2693 R09: 1ffff11004d3c4d2 [ 261.415588][T14691] R10: dffffc0000000000 R11: ffffed1004d3c4d3 R12: dffffc0000000000 [ 261.423580][T14691] R13: 1ffff1100b8cbc8c R14: 0000000000000000 R15: ffff88807fb7e768 [ 261.431576][T14691] FS: 0000000000000000(0000) GS:ffff888125d1b000(0000) knlGS:0000000000000000 [ 261.440505][T14691] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 261.447091][T14691] CR2: 0000200000003ff6 CR3: 0000000079504000 CR4: 00000000003526f0 [ 261.455068][T14691] Call Trace: [ 261.458354][T14691] [ 261.461287][T14691] device_del+0x280/0x8e0 [ 261.465628][T14691] ? _raw_spin_unlock_irq+0x2e/0x50 [ 261.470840][T14691] ? pm_runtime_set_memalloc_noio+0x1f4/0x260 [ 261.476927][T14691] ? __pfx_device_del+0x10/0x10 [ 261.481797][T14691] ? netdev_unregister_kobject+0x344/0x450 [ 261.487610][T14691] unregister_netdevice_many_notify+0x1d52/0x2320 [ 261.494045][T14691] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 261.500811][T14691] ? rcu_is_watching+0x15/0xb0 [ 261.505577][T14691] ? trace_contention_end+0x39/0x120 [ 261.511655][T14691] ? __mutex_lock+0x330/0xe80 [ 261.516340][T14691] ? __lock_acquire+0xab9/0xd20 [ 261.521203][T14691] ? __lock_acquire+0xab9/0xd20 [ 261.526067][T14691] unregister_netdevice_queue+0x33c/0x380 [ 261.531804][T14691] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 261.538050][T14691] ? rtnl_net_dev_lock+0x36/0x2f0 [ 261.543078][T14691] ? rtnl_net_dev_lock+0x2de/0x2f0 [ 261.548191][T14691] unregister_netdev+0x1f/0x60 [ 261.552962][T14691] bnep_session+0x294d/0x2b40 [ 261.557654][T14691] ? trace_sched_exit_tp+0x38/0x120 [ 261.562869][T14691] ? __lock_acquire+0xab9/0xd20 [ 261.567731][T14691] ? __pfx_bnep_session+0x10/0x10 [ 261.572770][T14691] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 261.578686][T14691] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 261.585019][T14691] ? __pfx_woken_wake_function+0x10/0x10 [ 261.590669][T14691] ? __kthread_parkme+0x7b/0x200 [ 261.595612][T14691] ? __kthread_parkme+0x1a1/0x200 [ 261.600649][T14691] kthread+0x70e/0x8a0 [ 261.604723][T14691] ? __pfx_bnep_session+0x10/0x10 [ 261.609767][T14691] ? __pfx_kthread+0x10/0x10 [ 261.614380][T14691] ? _raw_spin_unlock_irq+0x23/0x50 [ 261.619588][T14691] ? lockdep_hardirqs_on+0x9c/0x150 [ 261.624811][T14691] ? __pfx_kthread+0x10/0x10 [ 261.629412][T14691] ret_from_fork+0x3fc/0x770 [ 261.634010][T14691] ? __pfx_ret_from_fork+0x10/0x10 [ 261.639123][T14691] ? __switch_to_asm+0x39/0x70 [ 261.643900][T14691] ? __switch_to_asm+0x33/0x70 [ 261.648677][T14691] ? __pfx_kthread+0x10/0x10 [ 261.653284][T14691] ret_from_fork_asm+0x1a/0x30 [ 261.658060][T14691] [ 261.661077][T14691] Modules linked in: [ 261.665467][T14691] ---[ end trace 0000000000000000 ]--- [ 261.673016][T14691] RIP: 0010:klist_del+0x49/0x110 [ 261.678065][T14691] Code: f6 49 89 dd 49 c1 ed 03 43 80 7c 25 00 00 74 08 48 89 df e8 a9 52 be f6 4c 8b 33 49 83 e6 fe 49 8d 7e 58 48 89 f8 48 c1 e8 03 <42> 80 3c 20 00 74 05 e8 8b 52 be f6 4d 8b 7e 58 4c 89 f7 e8 1f 5b [ 261.701734][T14691] RSP: 0000:ffffc9000558f708 EFLAGS: 00010202 [ 261.713632][T14691] RAX: 000000000000000b RBX: ffff88805c65e460 RCX: ffff88807fad5a00 [ 261.722133][T14691] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000058 [ 261.730308][T14691] RBP: ffffc9000558f830 R08: ffff8880269e2693 R09: 1ffff11004d3c4d2 [ 261.738628][T14691] R10: dffffc0000000000 R11: ffffed1004d3c4d3 R12: dffffc0000000000 [ 261.746668][T14691] R13: 1ffff1100b8cbc8c R14: 0000000000000000 R15: ffff88807fb7e768 [ 261.754862][T14691] FS: 0000000000000000(0000) GS:ffff888125d1b000(0000) knlGS:0000000000000000 [ 261.764008][T14691] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 261.770678][T14691] CR2: 00007f71a7775f98 CR3: 0000000079946000 CR4: 00000000003526f0 [ 261.779036][T14691] Kernel panic - not syncing: Fatal exception [ 261.785515][T14691] Kernel Offset: disabled [ 261.789843][T14691] Rebooting in 86400 seconds..