last executing test programs: 3.455585082s ago: executing program 4 (id=3233): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)={0x18, 0x140c, 0x652f64244006f219, 0x70bd2c, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x20008040}, 0x4040800) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000000)={0x4, 0xfc, 0x0, 0x4}, 0xc) connect$bt_l2cap(r0, &(0x7f0000000100)={0x1f, 0x7f}, 0xe) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYRES32=r2], 0xc4}, 0x1, 0x0, 0x0, 0x24004900}, 0x2000) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000000190001002cbd7000010000000a00005a18128612adef0d8200ff000000000ec3"], 0x24}, 0x1, 0x0, 0x0, 0xd8e5}, 0x0) socket(0x21, 0x80000, 0x4f) 2.518683177s ago: executing program 4 (id=3249): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWRULE={0x88, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x58, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x48, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_EXPR={0x24, 0x5, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0xd}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0xe}]}}}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xb0}}, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x18}}, 0x2, 0x1}}, 0x2e) ioctl$PPPIOCGMRU(r3, 0x80047453, &(0x7f0000000100)) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x114, 0x2e, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x104, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac08}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x16}}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82", @typed={0x4, 0xe9}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) 2.431479723s ago: executing program 1 (id=3250): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="580000001000010400000000000000000000ffff", @ANYRES32=0x0, @ANYBLOB="000000000000000024001280090001007866726d0000000014000280080002000000e3b60800010001000000140003"], 0x58}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x110, 0x10, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10, 0x24480}, [@IFLA_LINKINFO={0xf0, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xe0, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x19050}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x8100}, @IFLA_VLAN_EGRESS_QOS={0x4c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x10001, 0xe2f}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x5ca10, 0x8001}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x100, 0x9}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x8000}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7, 0x92}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x4}}]}, @IFLA_VLAN_ID={0x6, 0x1, 0x3}, @IFLA_VLAN_ID={0x6, 0x1, 0x4}, @IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x8100}, @IFLA_VLAN_ID={0x6, 0x1, 0x4}, @IFLA_VLAN_EGRESS_QOS={0x58, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x3, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1, 0xff}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x4, 0xc}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x4, 0x20000000}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1ff, 0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x6, 0xaf}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x5}}]}]}}}]}, 0x110}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="580000001000010400000000000000000000ffff", @ANYRES32=0x0, @ANYBLOB="000000000000000024001280090001007866726d0000000014000280080002000000e3b60800010001000000140003"], 0x58}}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x110, 0x10, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10, 0x24480}, [@IFLA_LINKINFO={0xf0, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xe0, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x19050}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x8100}, @IFLA_VLAN_EGRESS_QOS={0x4c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x10001, 0xe2f}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x5ca10, 0x8001}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x100, 0x9}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x8000}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7, 0x92}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x4}}]}, @IFLA_VLAN_ID={0x6, 0x1, 0x3}, @IFLA_VLAN_ID={0x6, 0x1, 0x4}, @IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x8100}, @IFLA_VLAN_ID={0x6, 0x1, 0x4}, @IFLA_VLAN_EGRESS_QOS={0x58, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x3, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1, 0xff}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x4, 0xc}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x4, 0x20000000}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1ff, 0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x6, 0xaf}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x5}}]}]}}}]}, 0x110}}, 0x0) (async) 2.306604551s ago: executing program 1 (id=3251): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$packet(0x11, 0x2, 0x300) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r2 = socket(0x1, 0x803, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) (async, rerun: 32) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) (async, rerun: 32) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="7fff0000000000002800128009000100766c616e000000001800028006000100340200000c0002001f0000001e00000008000500"], 0x50}}, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) (async) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="500000001000210400000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="adffa888e16000002800128009000100766c616e00000000180002800c0002000e0000000a000000060001000004000008000500", @ANYRES32=r6], 0x50}}, 0x2) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', 0x0}) (async, rerun: 64) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r8, 0x0) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) (async) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=@delchain={0x64, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0xa}}, [@TCA_RATE={0x6}, @filter_kind_options=@f_basic={{0xa}, {0x2c, 0x2, [@TCA_BASIC_EMATCHES={0x28, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x24, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x20, 0x0, 0x0, 0x0, {{}, [@TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_NFPROTO={0x5}]}}]}]}]}}]}, 0x64}}, 0x0) (async, rerun: 32) r11 = socket$inet_sctp(0x2, 0x1, 0x84) (rerun: 32) getsockopt$inet_sctp_SCTP_MAX_BURST(r11, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r8, 0x84, 0x9, &(0x7f00000001c0)={r12, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xd4}, 0x9c) (async) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r8, 0x84, 0x85, &(0x7f0000000000)={r9, @in={{0x2, 0x0, @empty}}, 0x0, 0x7ffe}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r8, 0x84, 0x9, &(0x7f0000000340)={r9, @in6={{0xa, 0x4e23, 0x5, @empty, 0x2800}}, 0x3, 0x0, 0x20000, 0x81, 0xe, 0x0, 0x4}, 0x9c) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=@newtfilter={0x4c0, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r7}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}, @filter_kind_options=@f_fw={{0x7}, {0x484, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0xa, 0x8}}, @TCA_FW_INDEV={0x14, 0x3, 'ip6erspan0\x00'}, @TCA_FW_ACT={0x4}, @TCA_FW_POLICE={0x444, 0x2, [@TCA_POLICE_TBF={0x3c, 0x1, {0xf9c9, 0xffffffffffffffff, 0xfff, 0x3, 0x3, {0x1, 0x2, 0xd, 0x8, 0xbb28, 0x4}, {0x5, 0x1, 0x3b0, 0xfffa, 0xfffd, 0x2}, 0x408c, 0xf8}}, @TCA_POLICE_RATE={0x404, 0x2, [0x7, 0x0, 0x12b, 0x38000000, 0x1, 0x5, 0xd, 0x7, 0x200, 0xc, 0xcf, 0x444, 0x5, 0x0, 0x5, 0x2, 0xb7da, 0x1, 0x2, 0x1, 0xffff118f, 0x6, 0x5, 0x2, 0x2, 0x90d, 0x1, 0x4d96, 0xfffffff8, 0x5, 0x3, 0x10, 0x7f, 0x1, 0x40, 0x4, 0x5, 0x4, 0x28, 0x2, 0x4, 0x6, 0x3, 0x5, 0xff, 0x2ff3, 0x6, 0x0, 0x1, 0x80000000, 0x9, 0x80000000, 0x9, 0x98c, 0x18, 0x96b2, 0x0, 0x1, 0x8, 0x0, 0x2, 0xffff0000, 0x7, 0x2, 0x3, 0x3, 0x2, 0x1ff, 0x9, 0x7, 0x4, 0x895, 0x80000001, 0x0, 0x7, 0x5, 0x5, 0x4, 0xff, 0x10001, 0x4, 0x4, 0x378b7874, 0xfffff6d3, 0xfffffff8, 0x0, 0x2, 0x10, 0xa, 0x5, 0x1, 0x3, 0x1, 0x80, 0x9, 0x80000001, 0x2, 0x5, 0x7, 0x4, 0x81, 0x3, 0xc, 0x7fff, 0x800, 0x9, 0x1, 0x3, 0x3, 0x3, 0x6, 0xf8, 0x8000, 0xfffff800, 0x5, 0x8, 0xec03, 0x7, 0x4f, 0x5a, 0x4, 0xd519, 0x4, 0x7, 0x80000000, 0x6, 0xe, 0x1800000, 0x9, 0x888, 0x5, 0xf31e, 0x5, 0xd6, 0x4, 0x0, 0x1, 0x8, 0xb, 0x7, 0x81, 0x1, 0x401, 0x0, 0x2, 0xe, 0x4, 0x7b7, 0x5, 0x4, 0x401, 0x7, 0x6, 0xa73, 0x1ff, 0x9, 0x0, 0x9, 0x7, 0x8e0, 0x2, 0x3ff, 0x5, 0x8, 0xd88, 0x1000, 0x5, 0x9, 0xb, 0x7, 0x2, 0xfffffff7, 0x5, 0x800, 0x8, 0xde, 0x3, 0x61fd, 0x1, 0x7fffffff, 0x8, 0x9, 0x2, 0x93e5, 0x2, 0x3, 0xffff, 0x453, 0x2, 0x32e000, 0x4, 0x40, 0xf5, 0x0, 0x7, 0x1, 0x0, 0x1, 0x0, 0x6, 0x1, 0x30, 0x1, 0x6, 0xff, 0x8d, 0x3, 0x7, 0x3ff, 0x1, 0x6, 0xaec, 0x5, 0xc53, 0x4a, 0x0, 0x3, 0x0, 0x200, 0x2, 0x18000000, 0xf62, 0x6de8, 0x8e92, 0xfffff372, 0x57e4, 0x8bf8, 0x8, 0xae, 0x0, 0x58f7, 0xf, 0x80000001, 0x1, 0x4, 0x8, 0x4, 0x80000001, 0x0, 0x5, 0xffff8001, 0x8, 0x4, 0xd, 0x7, 0x0, 0x0, 0x7, 0x5, 0x4, 0x8, 0x7, 0xb1, 0x0, 0xf6f9, 0x200]}]}, @TCA_FW_MASK={0x8, 0x5, 0x100000}, @TCA_FW_MASK={0x8, 0x5, 0x945}, @TCA_FW_ACT={0x4}, @TCA_FW_MASK={0x8, 0x5, 0x40}]}}]}, 0x4c0}, 0x1, 0xf0ffffffffffff}, 0x0) (async) r13 = socket(0x10, 0x3, 0x0) r14 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r13, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r15, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8}, {0x18, 0x2, [@TCA_RED_PARMS={0x14}]}}]}, 0x44}}, 0x0) 2.213415931s ago: executing program 1 (id=3252): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000050000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000d40)=ANY=[@ANYBLOB="1800000000000000000000000000000095000000000000005fdb2971dfa2bff372df8cdbeb318ab2bec8fc36903c0ec359ca9daf3c914019395cc154010c693709800000000000000016a85adef34bf78c76e6222337923e1bea6ef682cc4375f594425d408ccc58187feb0e3d43347f989007a7c63f6dae682acb4af936461f34a8a32a50bbbb69ec85168947b86df9f2609bf93f7a1be259621818c3c75da30000bce645451b851111dd98ac4d8da9317c2c082020e0b2d6340809000000000000008e053645cc413790faf7e229c782845b5bb774f7f154263178151ea93ff2cac4b181332c9c9a1c7d85616c8100000000000000d8300d19d585000000fc005774b56a7142047326f940e95b8489e1c5650f5c61299a295f39c88456521cffdef93e29f10f4a11f0cfbfc0ff976b20fe"], &(0x7f0000000080)='GPL\x00', 0x0, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @fallback, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1, 0x0, 0xffffffffffffffff, 0xf5010000}, 0x6d) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00'], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x2}, 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27, 0x0, 0xffffffffffffffff, 0x4b}, 0x48) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/14], 0x22) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r2, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000010000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket(0x2a, 0x2, 0x0) getsockname$packet(r4, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001000)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@newtfilter={0x40, 0x2c, 0x605, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xffe0}, {}, {0x5, 0x2}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x0, 0x6}}]}}]}, 0x40}}, 0x20004084) r6 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) r7 = socket$tipc(0x1e, 0x5, 0x0) getsockopt$TIPC_SOCK_RECVQ_DEPTH(r7, 0x10f, 0x89, &(0x7f0000000480), &(0x7f00000004c0)=0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r11 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000900)=ANY=[@ANYRES32=r10, @ANYRES32=r11, @ANYBLOB="05"], 0x10) r12 = syz_genetlink_get_family_id$team(&(0x7f0000001040), r6) sendmsg$TEAM_CMD_PORT_LIST_GET(r4, &(0x7f00000010c0)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001080)={&(0x7f0000001500)={0x4b0, r12, 0x100, 0x70bd28, 0x25dfdbfc, {}, [{{0x8, 0x1, r5}, {0x78, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}]}}, {{0x8, 0x1, r5}, {0x164, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r5}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r5}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffffffa}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}]}}, {{0x8, 0x1, r5}, {0x160, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x4e0, 0x0, 0xe9, 0xffffffff}]}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r5}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x80}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}]}}, {{0x8, 0x1, r5}, {0x140, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x1ff}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xc441}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}]}}]}, 0x4b0}, 0x1, 0x0, 0x0, 0x81}, 0x20004010) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r10}, &(0x7f00000006c0), &(0x7f0000000700)=r9}, 0x20) sendmsg$inet(r8, &(0x7f0000000f80)={0x0, 0x1f, 0x0}, 0x1) 2.174866457s ago: executing program 4 (id=3253): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000003c0)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xc, 0x80010, r2, 0x56df7000) setsockopt$ALG_SET_KEY(r1, 0x117, 0x7, &(0x7f00000000c0)="fdffffff", 0x4) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) connect$qrtr(r0, &(0x7f0000000080)={0x2a, 0xffffffff, 0xfffe}, 0xc) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000480)="b19ccccf84f531d9ec214627c11430c1", 0x10) r4 = accept(r3, 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), r4) 2.034491202s ago: executing program 4 (id=3256): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x11, &(0x7f00000000c0), &(0x7f0000000180)=0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0xfffffffffffffe9a, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="d2829c60dc386778f1a0370b8f9b8086f61e4969bfad55ecff16699e710f28795a9f84a64fb24ab982fa2ebab5a96284a1f25c1e19368c257e5eb0933b6f37d07544be54b1e5059c94fbee5b508b", @ANYRESOCT=r1, @ANYRES32], 0x28}, 0x1, 0x0, 0x0, 0x20008080}, 0x98) r2 = socket$inet_sctp(0x2, 0x1, 0x84) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r3, 0x84, 0x14, &(0x7f00000001c0)="020000000980ffff", 0x8) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'veth1_to_bond\x00', 0x0}) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000100)={r5, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x39}}, 0x10) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000540)={'bond_slave_1\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f0000000380)={'syztnl1\x00', &(0x7f0000000340)={'gre0\x00', r8, 0x40, 0x7, 0x4, 0x73e4, {{0x6, 0x4, 0x0, 0x31, 0x18, 0x64, 0x0, 0xa, 0x2f, 0x0, @empty, @broadcast, {[@ra={0x94, 0x4, 0x1}]}}}}}) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=@newtfilter={0x64, 0x2c, 0x1, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x2, 0x7}, {0xd, 0x4}, {0xfff8, 0xfff1}}, [@TCA_RATE={0x6, 0x5, {0x0, 0x9}}, @TCA_CHAIN={0x8, 0xb, 0x9}, @TCA_CHAIN={0x8}, @TCA_CHAIN={0x8, 0xb, 0x101}, @TCA_RATE={0x6, 0x5, {0x9, 0xc9}}, @TCA_RATE={0x6, 0x5, {0x7, 0x2}}, @TCA_RATE={0x6, 0x5, {0xff, 0x80}}, @TCA_CHAIN={0x8, 0xb, 0x10}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000}, 0x0) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r2, 0x84, 0xc, &(0x7f0000000040)=0x27, 0x4) r9 = socket$inet_sctp(0x2, 0x5, 0x84) r10 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r10, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xb, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="620ac4ff000000007110bd000000000095"], &(0x7f0000000480)='GPL\x00'}, 0x90) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r9, 0x84, 0x79, &(0x7f0000000000)={r11, 0xffff, 0x3}, 0x8) r12 = socket$inet6_sctp(0xa, 0x5, 0x84) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r13, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000800)={0x9c, 0xa, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0x9}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x60, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x1}, @IPSET_ATTR_CIDR2={0x5, 0x15, 0x3}, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0x5e}, @IPSET_ATTR_CIDR2={0x5, 0x15, 0xb6}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0xc53b}, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x7c71}, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0xfffffff7}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x8}]}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e24}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x4800}, 0x0) recvmsg(r12, &(0x7f0000000c00)={0x0, 0x0, 0x0}, 0x2000) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f00000001c0)={r11, @in6={{0xa, 0x4e24, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x2}}, 0x2, 0x401}, &(0x7f0000000280)=0x90) sendmsg$nl_generic(r1, &(0x7f0000000480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB="f00000003f00020027bd7000ffdbdf251200000057aad29e83d5684b5c09b651c7f0bdbca58d5f2b3f960689a7c06c91ea688ecbacaa97a5a7f06730956fbe09d7348503ddb4d480c3df6cccf3e3e0aef4e99c00bb4094656eb43ddd1d561e6d694d0356cb8cdd7110e2cf2bdae3e7deeb55795338f3d2c3c1fc2deb1632babca1a68bb313d75a0e4689f376e678da29d3eaf8ba7bdf13f443e3dc68c4c70c8b1d6a71b48117e09a4d540cac810f62d1c8785697a89d9ab06ed6a431a6af2ee7585ed2bdb40b0dad122be8b71ee2e697e94c63a92e6b6315a94749d837adc704b2f0673aeba03652222ad354b29283bd50aa8dbde90000a8c1c3b6272f688a1a4fe0087dd8475219920863e7143159e71ab4567bc357c2bd14a6d405f135d6f27be2ca61a8837a06fd7c24c51b8b1ffb00f7877ef35f433cdf87f774bcf9185ba4d82ca7cf225ab133466ccd4351efca4e6e881262199886b13d98b9b1170b7459d180c91b6eafea170b1f0f40fd615757a026efc3363c47cbf39ef9789c9c008167361a2f750bb9acedfd962cff6522813414f4c88211183516ef9eee36cdd8f1e1741f83bd5c839e52c887cc0027d0eeab35277884958b4c2da500e62206d70b36780e21c5ab338f9aba230cd7b80c284fbff1b86846b680303f25ae4e3d2638e5ed4129ef5cdfe58ebdc83e0f2c8b52d2933ea518a96b1d550e9549"], 0xf0}, 0x1, 0x0, 0x0, 0x10}, 0x4040000) 1.918820095s ago: executing program 1 (id=3258): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000001000)="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", 0x1ca}], 0x1, 0x0, 0x0, 0x81}, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x21, &(0x7f0000000540), 0x4) sendmsg$tipc(r1, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) sendmsg$tipc(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYRES8=r2], 0x7c}, 0x1, 0x0, 0x0, 0xc001}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc4c0000000c0a01010000000000008a400e13127d6f1eb900000a0000060900020073797a31000000000900010073797a310000000020000380100000800c00018006000100d17897cfc7ccaa2bbd000340000000022c0000000e0a010200000000000000000a0000000900010073797a31000000000900020073797a31000000001400000011000100000000", @ANYRESDEC=r3], 0xdc}, 0x1, 0x0, 0x0, 0x4000850}, 0x0) 1.798996569s ago: executing program 3 (id=3261): syz_emit_ethernet(0x3b6, &(0x7f0000000200)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x22}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cabf00", 0x380, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af2502"}, {0x0, 0x1, "000000050000000026000400"}, {0x0, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c41bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee96f24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x4, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483be298af1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303"}, {0x21, 0x7, "b8a3e100908f61640000000200fe80ffff00000000000000ff0bc0fe00000000008879e66485201a0015ca83747357a027450004000000"}, {0x0, 0x14, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fb632dbf04542188b196e213408c"}, {0x0, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02a326a6bce65f81ed"}]}}}}}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f00000095c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000c80)={0x14, r1, 0x1}, 0x14}}, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x200000100000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x14, 0x2, @local}, @IFA_CACHEINFO={0x14, 0x6, {0x40000000, 0xfffff001}}]}, 0x40}}, 0x0) 1.682628579s ago: executing program 4 (id=3262): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) (async) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) (async) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) (async) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) (async) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) (async) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000007110a2000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.682040588s ago: executing program 1 (id=3263): r0 = socket$inet(0x2, 0x2, 0x1) (async) unshare(0x6a040000) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x8031, 0xffffffffffffffff, 0x5cac3000) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000000)={0x1, 'sit0\x00', 0x1}, 0x18) connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r0, &(0x7f0000000540)=[{{0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000000c0)="08001497733f5d3e", 0x6c6d}], 0x5}}, {{0x0, 0x0, &(0x7f0000000440), 0x56}}], 0x2, 0x2004000) 1.179484118s ago: executing program 0 (id=3265): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x34, 0x0, 0x1, 0x70bd2b, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_RX={0x5, 0x19, 0x1}]}, 0x34}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0x5}, {0xffff, 0xffff}, {0xfff3, 0x10}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x7}]}, 0x2c}}, 0x44080) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000020000103feffffff000000000a000000000000000400010008000a000008000005001e"], 0x50}}, 0x4000850) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000006800e97800000000000000000a0000000000000008000500", @ANYRES8=r0], 0x20}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001800090400000000000000000a000000000000030000000008001e0001"], 0x24}}, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x18, 0x13, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x7}, {}, {}, [@exit, @exit, @map_fd={0x18, 0xd, 0x1, 0x0, 0x1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000240)='syzkaller\x00', 0x2, 0x29, &(0x7f0000000380)=""/41, 0x41100, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0x4, 0x3}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x4, 0x7fff, 0x5}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000440)=[0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1], &(0x7f0000000480)=[{0x2, 0x3, 0x8, 0x1}], 0x10, 0x7}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)=r4}, 0x20) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x64, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x30, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IFLA_GRE_REMOTE={0x14, 0x7, @private2}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x64}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x1, 0x1, 0x0, {0x0, 0x0, 0x0, 0x0, 0x420}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 1.122339484s ago: executing program 4 (id=3266): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x48, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newtfilter={0x2c, 0x2c, 0x2, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0xa, 0xc}, {0x4, 0x7}, {0x0, 0xc}}, [@TCA_CHAIN={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x0) 1.121315872s ago: executing program 3 (id=3267): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_buf(r0, 0x6, 0x8, &(0x7f0000000000)="6a0ea48a", 0x4) getsockopt$inet_tcp_int(r0, 0x6, 0x8, 0x0, &(0x7f0000001b80)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x3, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000630121000000000095"], &(0x7f0000000100)='GPL\x00'}, 0x90) 1.08832588s ago: executing program 2 (id=3268): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_ifreq(r0, 0x8995, &(0x7f0000000180)={'bond0\x00', @ifru_names='rose0\x00'}) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha256\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f0000000e00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000200)=""/143, 0x8f}], 0x1}}], 0x2, 0x0, 0x0) getsockopt$TIPC_NODE_RECVQ_DEPTH(r3, 0x10f, 0x83, &(0x7f0000000180), &(0x7f00000001c0)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="620ac4ff00000000711010000000000095"], &(0x7f0000000480)='GPL\x00'}, 0x90) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="b80000001900010029bd7000fedbdf25fe800000000000000000000000000017ff01000000000000000000000000000100000000000000000200000000000000", @ANYRESDEC=r3, @ANYRES32=0x0, @ANYRES8=r1], 0xb8}, 0x1, 0x0, 0x0, 0x24048050}, 0x8000) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = accept4$nfc_llcp(r3, &(0x7f00000002c0), &(0x7f0000000340)=0x60, 0x800) writev(r5, &(0x7f0000000800)=[{&(0x7f00000004c0)="390614a3ec273e7deb05df8bfde78cfdf775ed72e708e4836265f3ed94b67a68a78f7ca52896900c6ade73618ed4ecce3829e6893f09ffe06a5abb382bad6d5063cb8df5f13847170d4dfdf924a25831e5d28581aac520a3c12cbe925251dbbfad95c593d1c1d276eef6e89c5ad29ad6764c7a0e182931272fe8de4eb1d24243c5263b79aae0ecfbccd2ff98b29b7562b222b30947ccb1fd174ba9f97d3115974c69da088f0a72d79268197274833023", 0xb0}, {&(0x7f00000006c0)="c7470619e85f40214b4bb14448b7646da1d934084fbbe7422037e7ffe51a65852c9220cb6d26cfe3970099840f56416655f93e0bf8671bd8ecbd7d79a62f4d78edc3b31639eb82e64fb17e0a6f40cbd75aab1d04795e86c1bf486bcc019bcf2ff9e60e77c7aa7ddd06b27d360348ebc2ed494bc60e6a1b0380fa31220b1f38baca5bdf71c2", 0x85}, {&(0x7f0000000380)="4a668613323c47fd22e09d6cda933ebf87592d77c3c859faedbc60067d2147630989d9d09100726f", 0x28}, {&(0x7f0000000580)="6e3169339ca73b6e6d2d60770ce9773adda991c207dc295bcaef7d9b68ebc9a48538010ee2f1e5e375e314a6973df232a4cfe081fd86ee7e6f38e63b7bce4ffa655a5930c0b98c6b1edb65bc5708e37b3b9d1318c6fef8b75789e021424e4f510c466fa3664c17b6ace09395917e3be2c6ec940f4e413d32", 0x78}, {&(0x7f0000000780)="467633bd52eb27aceeb879a512467ad11fb49c436564481e7620aafbba59e56223643885e496571b12477629b9d4b3911f1fe5415f5bf8a390578310673584bf2d2b49", 0x43}], 0x5) sendmsg$IPSET_CMD_GET_BYNAME(r4, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0xe, 0x6, 0x301, 0x0, 0x0, {0x7, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x40080c1}, 0x20008850) syz_emit_ethernet(0x46, &(0x7f0000000400)={@local, @random="df00004000", @void, {@ipv4={0x800, @tcp={{0x9, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x11}, {[@ssrr={0x89, 0x7, 0xa2, [@broadcast]}, @cipso={0x86, 0x6, 0x1}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) (async) ioctl$sock_ifreq(r0, 0x8995, &(0x7f0000000180)={'bond0\x00', @ifru_names='rose0\x00'}) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) socket$alg(0x26, 0x5, 0x0) (async) bind$alg(r2, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha256\x00'}, 0x58) (async) accept4(r2, 0x0, 0x0, 0x0) (async) recvmmsg(r3, &(0x7f0000000e00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000200)=""/143, 0x8f}], 0x1}}], 0x2, 0x0, 0x0) (async) getsockopt$TIPC_NODE_RECVQ_DEPTH(r3, 0x10f, 0x83, &(0x7f0000000180), &(0x7f00000001c0)=0x4) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="620ac4ff00000000711010000000000095"], &(0x7f0000000480)='GPL\x00'}, 0x90) (async) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="b80000001900010029bd7000fedbdf25fe800000000000000000000000000017ff01000000000000000000000000000100000000000000000200000000000000", @ANYRESDEC=r3, @ANYRES32=0x0, @ANYRES8=r1], 0xb8}, 0x1, 0x0, 0x0, 0x24048050}, 0x8000) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) accept4$nfc_llcp(r3, &(0x7f00000002c0), &(0x7f0000000340)=0x60, 0x800) (async) writev(r5, &(0x7f0000000800)=[{&(0x7f00000004c0)="390614a3ec273e7deb05df8bfde78cfdf775ed72e708e4836265f3ed94b67a68a78f7ca52896900c6ade73618ed4ecce3829e6893f09ffe06a5abb382bad6d5063cb8df5f13847170d4dfdf924a25831e5d28581aac520a3c12cbe925251dbbfad95c593d1c1d276eef6e89c5ad29ad6764c7a0e182931272fe8de4eb1d24243c5263b79aae0ecfbccd2ff98b29b7562b222b30947ccb1fd174ba9f97d3115974c69da088f0a72d79268197274833023", 0xb0}, {&(0x7f00000006c0)="c7470619e85f40214b4bb14448b7646da1d934084fbbe7422037e7ffe51a65852c9220cb6d26cfe3970099840f56416655f93e0bf8671bd8ecbd7d79a62f4d78edc3b31639eb82e64fb17e0a6f40cbd75aab1d04795e86c1bf486bcc019bcf2ff9e60e77c7aa7ddd06b27d360348ebc2ed494bc60e6a1b0380fa31220b1f38baca5bdf71c2", 0x85}, {&(0x7f0000000380)="4a668613323c47fd22e09d6cda933ebf87592d77c3c859faedbc60067d2147630989d9d09100726f", 0x28}, {&(0x7f0000000580)="6e3169339ca73b6e6d2d60770ce9773adda991c207dc295bcaef7d9b68ebc9a48538010ee2f1e5e375e314a6973df232a4cfe081fd86ee7e6f38e63b7bce4ffa655a5930c0b98c6b1edb65bc5708e37b3b9d1318c6fef8b75789e021424e4f510c466fa3664c17b6ace09395917e3be2c6ec940f4e413d32", 0x78}, {&(0x7f0000000780)="467633bd52eb27aceeb879a512467ad11fb49c436564481e7620aafbba59e56223643885e496571b12477629b9d4b3911f1fe5415f5bf8a390578310673584bf2d2b49", 0x43}], 0x5) (async) sendmsg$IPSET_CMD_GET_BYNAME(r4, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0xe, 0x6, 0x301, 0x0, 0x0, {0x7, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x40080c1}, 0x20008850) (async) syz_emit_ethernet(0x46, &(0x7f0000000400)={@local, @random="df00004000", @void, {@ipv4={0x800, @tcp={{0x9, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x11}, {[@ssrr={0x89, 0x7, 0xa2, [@broadcast]}, @cipso={0x86, 0x6, 0x1}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) (async) 1.019341066s ago: executing program 3 (id=3270): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8b20, &(0x7f0000000240)={'wlan1\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x21}}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'macsec0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x1184, 0x4}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_PORT={0x6, 0x2, 0x1, 0x0, 0x4e23}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0xb, 0x803, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r5, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r6, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x800) sendmsg$nl_route_sched(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newqdisc={0x3c, 0x24, 0xe0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0xfff3, 0xd064db0e491fa98f}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_NAT={0x8, 0xb, 0x1}]}}]}, 0x3c}}, 0x4044080) bind$packet(r3, &(0x7f0000000040)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @remote}, 0x14) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r7, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000040)={0x34, r8, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x59}]}]}]}, 0x34}}, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(r5, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f0000000240)={0x68, r8, 0x2, 0x70bd26, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x5, 0x57}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa}]}, 0x68}, 0x1, 0x0, 0x0, 0x40001}, 0x20000080) sendto$inet6(r3, &(0x7f0000000800)="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", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0) 818.689684ms ago: executing program 2 (id=3271): r0 = socket$igmp(0x2, 0x3, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$nl_rdma(0x10, 0x3, 0x14) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r3 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r3, 0x0, 0x0, 0x4c000, &(0x7f0000000200)={0x11, 0x7, r2, 0x1, 0xb, 0x6, @random="db4aa3b9198e"}, 0x14) setsockopt$inet_buf(r0, 0x0, 0x29, &(0x7f0000001ec0)="823a734c4f45e4d9720d9abbe9704398", 0x10) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r4, 0x84, 0x1c, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000007c0)=ANY=[@ANYBLOB="280300002d00090027bd70000000000004000000130317"], 0x328}}, 0x84) 804.317009ms ago: executing program 0 (id=3272): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) (async) write$tun(r0, &(0x7f0000000500)={@val={0x0, 0x86dd}, @val={0x0, 0x0, 0x11, 0x800}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "ec9700", 0xf98, 0x2c, 0x0, @local, @mcast2, {[@hopopts={0x67, 0x1b1, '\x00', [@calipso={0x7, 0x20, {0x3, 0x6, 0x2, 0x80, [0xffffffff, 0x91ae, 0x2]}}, @generic={0x60, 0xd65, "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"}]}], @param_prob={0x4, 0x0, 0x0, 0x1f, {0x3, 0x6, "2863b9", 0x2c7f, 0x6c, 0x0, @mcast2, @mcast2, [@fragment={0x3a, 0x0, 0x2, 0x0, 0x0, 0x5, 0x68}, @srh={0x3a, 0x2, 0x4, 0x1, 0x8, 0x8, 0x3, [@private1={0xfc, 0x1, '\x00', 0x1}]}, @fragment={0x88, 0x0, 0x7, 0x1, 0x0, 0x3, 0x65}, @routing={0x0, 0x8, 0x1, 0xd, 0x0, [@local, @dev={0xfe, 0x80, '\x00', 0x1b}, @rand_addr=' \x01\x00', @private2]}, @dstopts={0x5c, 0x29, '\x00', [@enc_lim={0x4, 0x1, 0x2}, @enc_lim={0x4, 0x1, 0xff}, @ra={0x5, 0x2, 0xf001}, @enc_lim={0x4, 0x1, 0x8}, @generic={0x2, 0xd9, "93c2a7b2103811aad4bf3480084cff882648d94da95cf69c1f56cdc73c48b2606e42d212ad6ffc1148c67339327ad35d1207b512c69f4304b91659debf96e2fbd45eb8f36e231885e3e807c2c3f3069901a7f9508981cb5e876beb8002e3086d8270993f4b525a5f1cc62dde1e7b39fc68ddf729482f75ab54b3192c61f3c667ff7084c4f7f5fe0086f41998c79fa290e55f2128c54ece29b61a6ca740fa47ee4e373dc665708fb0a39e99494d6d2b7d798bb7550102114641eb70fb07918ff839da14c91a5c029512b45745eceb6cfb5165eef50a7f697b78"}, @enc_lim={0x4, 0x1, 0x8}, @generic={0x6, 0x17, "89627a684dc7d1814a9d1c3cd6b9047ba95a445a9315a8"}, @generic={0xe0, 0x31, "69c8e406b41599ae8828e9adc558ba6794c8b33da5b9986eae990532682b93cca3ff4b67622aa24f77ffa9c7441e694897"}, @hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}], "4ae1a92c7465a9b3"}}}}}}, 0xfce) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@restrict={0x0, 0x0, 0x0, 0x10}]}}, 0x0, 0x26}, 0x20) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@dellink={0x44, 0x10, 0xc03, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_VER={0x5}, @IFLA_GRE_REMOTE={0x8, 0x7, @loopback}]}}}]}, 0x44}}, 0x0) pipe(&(0x7f0000000080)) 781.876176ms ago: executing program 3 (id=3273): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090a010400000000000000000000000008000a40001000000900020073797a31000000000900010073797a31000000000800054000000021080003400000004008000f"], 0x74}}, 0x0) r2 = socket(0x840000000002, 0x3, 0x100) setsockopt$WPAN_SECURITY(r2, 0x0, 0x32, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r2, 0x84, 0x7, &(0x7f0000000040)={0x40}, 0x4) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) writev(r3, &(0x7f00000006c0)=[{&(0x7f0000000080)="2e9b3d0007e03dd65193dfb6c575963f86ddf06712e9001c2f8db0049d90491ceaebfd26beeef23248000000f858dbb8a19052343f", 0x35}, {&(0x7f0000000100)="051a00bf4137582c95000000000000000000", 0x12}], 0x2) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)={0x20, 0x2d, 0x1, 0x0, 0x0, "", [@nested={0x4, 0x800}, @nested={0xc, 0x1a, 0x0, 0x1, [@typed={0x8, 0x1, 0x0, 0x0, @u32=0x8}]}]}, 0x20}], 0x1}, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha20\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) r7 = accept4(r6, 0x0, 0x0, 0x0) recvmmsg(r7, &(0x7f0000000600)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000680)=""/242, 0xf2}, {&(0x7f0000001500)=""/4096, 0x1000}], 0x2}, 0xebea}], 0x1, 0x40000001, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000b40), 0x2328}}, 0x0) sendto$inet6(r0, &(0x7f0000000500)="a4", 0x34000, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) 594.64698ms ago: executing program 2 (id=3274): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) (async) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r2, &(0x7f00000002c0)={0x1f, 0x0, @any, 0xfffa}, 0xe) (async) connect$bt_l2cap(r2, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) (async) connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) (async) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="300001003f0009000000000000000000030000000400fd0015000900615e262f100d02a8e253a834e1263a7f1f000000"], 0x30}}, 0x0) 516.272535ms ago: executing program 2 (id=3275): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r2, 0x1, 0x0, 0x0, {}, [@SEG6_ATTR_SECRETLEN={0x5}, @SEG6_ATTR_HMACKEYID={0x8}]}, 0x24}}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0x890b, &(0x7f0000001480)={{0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe, 0x6, 0x0, 0xf00, 0x0, 0x3, 0x0, 0x6, 0x6, 0x1}}) 480.453949ms ago: executing program 0 (id=3276): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="3800000068000100000000000000000002000000000000000600070008000000100008800c000100000000000000000008000500", @ANYRES32=r1], 0x38}}, 0x0) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r0, 0x40047211, &(0x7f00000000c0)=0xd48ecef84b824e32) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@ipv6_newrule={0x58, 0x20, 0x1, 0x0, 0x25dfdbfb, {0xa, 0x80, 0x14, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1d}, [@FRA_SRC={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, @FRA_DST={0x14, 0x1, @loopback}, @FRA_DST={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x58}}, 0x40000) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5c00000010000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000003c0012800b000500697036746e6c0000bf90421d14000301e30a0200fc0200"/52], 0x5c}, 0x1, 0x0, 0x0, 0x20004080}, 0x0) 354.786697ms ago: executing program 3 (id=3277): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r1, {0x1, 0x6}, {0x7}, {0x3}}}, 0x24}}, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) 353.729139ms ago: executing program 0 (id=3278): r0 = accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x80000) ioctl$AUTOFS_IOC_FAIL(r0, 0x9361, 0x5) r1 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r1, 0x28, 0x2, &(0x7f0000000040)=0x3, 0x8) ioctl$BTRFS_IOC_GET_FEATURES(r1, 0x80189439, &(0x7f0000000080)) ioctl$SIOCGSTAMPNS(r1, 0x8907, &(0x7f00000000c0)) shutdown(0xffffffffffffffff, 0x1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000100)=0xffffffffffffffff, 0x4) ioctl$SIOCRSSL2CALL(0xffffffffffffffff, 0x89e2, &(0x7f0000000140)=@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000300)={&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000000180)=""/167, 0xa7, 0x0, &(0x7f0000000240)=""/174, 0xae}, &(0x7f0000000340)=0x40) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x9, 0x3, 0x2b8, 0xf8, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x220, 0xffffffff, 0xffffffff, 0x220, 0xffffffff, 0x3, &(0x7f0000000380), {[{{@ip={@rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0xff000000, 'xfrm0\x00', 'veth1_to_hsr\x00', {}, {0xff}, 0xb4, 0x1, 0x34}, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x9}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x5, 0x4, 0x1, 0x2, 0x6, 0x1], 0x5, 0x5}, {0x0, [0x3, 0x4, 0x3, 0x5, 0x1, 0x4], 0x1, 0x3}}}}, {{@ip={@remote, @empty, 0xffffffff, 0x0, 'batadv0\x00', 'xfrm0\x00', {0xff}, {0xff}, 0x8, 0x3, 0x31}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@ah={{0x30}, {[0x0, 0x7], 0x1}}, @inet=@rpfilter={{0x28}, {0xa}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x7f, [0x3, 0x0, 0x4, 0x3, 0x2, 0x1], 0x2}, {0x8cba, [0x4, 0x7, 0x4, 0x2, 0x1, 0x2], 0x2, 0x5}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x318) pipe(&(0x7f0000000700)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r5, 0x111, 0x1, 0x1, 0x4) bind$inet6(r4, &(0x7f0000000740)={0xa, 0x4e23, 0x7, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x7f}, 0x1c) connect$vsock_stream(r1, &(0x7f0000000780)={0x28, 0x0, 0x2710, @my=0x1}, 0x10) setsockopt$packet_int(r5, 0x107, 0x10, &(0x7f00000007c0)=0x7fff, 0x4) r6 = accept4$rose(r4, &(0x7f0000000800)=@short={0xb, @remote, @null, 0x1, @null}, &(0x7f0000000840)=0x1c, 0x80000) sendto$rose(r6, &(0x7f0000000880)="ad463e149dc04fa66118bb8e1d73faefa97d4b91373081a72a07f628cb8f02daee9e5f495298cf2e8ee88125f419f36b43b898c1b84148a700b9c1457f7a229c94a1fb07c0fe36591dcda9fd8571626e74f5b84d91800b4da116c5ca2ea516c54d9e85b11ad06fb6a3899d36f768ba6be8b00a93db00698bc56626b6f57986d3136135cd17f6dbaa93a7f8b5dc", 0x8d, 0x24000000, &(0x7f0000000940)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x1, @default}, 0x1c) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r4, 0x84, 0x21, &(0x7f0000000980), 0x4) setsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f00000009c0)={0x0, 0x3}, 0x8) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$TUNSETOFFLOAD(r4, 0x400454d0, 0x0) getsockopt$PNPIPE_IFINDEX(r4, 0x113, 0x2, &(0x7f0000000ac0)=0x0, &(0x7f0000000b00)=0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000c00)=@bpf_ext={0x1c, 0x8, &(0x7f0000000a00)=@raw=[@tail_call={{0x18, 0x2, 0x1, 0x0, r5}}, @func={0x85, 0x0, 0x1, 0x0, 0x7}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x9}], &(0x7f0000000a40)='GPL\x00', 0x3, 0x26, &(0x7f0000000a80)=""/38, 0x9e18a0330cfe2547, 0x2, '\x00', r7, 0x0, r4, 0x8, &(0x7f0000000b40)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000000b80)={0x4, 0xe, 0x6, 0x5}, 0x10, 0x147d6, r4, 0x0, &(0x7f0000000bc0)=[r5, r4, r4, r5, r4, r5, r5, 0x1], 0x0, 0x10, 0xf1ef}, 0x94) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000d00), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REG(r4, &(0x7f0000000ec0)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x567e4c782d5c13cd}, 0xc, &(0x7f0000000e80)={&(0x7f0000000d40)={0x138, r8, 0x8, 0x70bd28, 0x25dfdbff, {}, [@NL80211_ATTR_REG_RULES={0x118, 0x22, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x2}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x2}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x7}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x4}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0xf}, @NL80211_ATTR_DFS_CAC_TIME={0x8}]}, {0x54, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x6}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0xff}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0xef}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x80000001}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x5}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x6}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x1}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x749}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0xd}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0xf32e}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x8d}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x2}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x4}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x2}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x9}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0xfffffbaf}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x5}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x7e}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0xc}, @NL80211_ATTR_FREQ_RANGE_START={0x8}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x6}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x3}]}]}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x8}]}, 0x138}, 0x1, 0x0, 0x0, 0x4040}, 0x884) ioctl$BTRFS_IOC_FS_INFO(r2, 0x8400941f, &(0x7f0000000f00)) recvfrom$unix(r5, &(0x7f0000001300)=""/154, 0x9a, 0x40002040, 0x0, 0x0) 353.451493ms ago: executing program 2 (id=3279): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffff}, 0x6) r1 = syz_genetlink_get_family_id$gtp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$GTP_CMD_ECHOREQ(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000780)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="00022782e5ab3be7777a82ecc198000000008afaf7e07882caea8f434dd28008000800010000820003f7861817"], 0x4c}, 0x1, 0x0, 0x0, 0xc000400}, 0x4000) 224.373763ms ago: executing program 0 (id=3280): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wpan0\x00', 0x0}) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000000)={0x8}, 0x10) write(r2, &(0x7f00000000c0)="240000001e005f0214fffffffffffff8070000001d00000000000000050009000d000000", 0x24) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=@newsa={0x15c, 0x10, 0x413, 0x0, 0x0, {{@in=@multicast1, @in6=@empty, 0x0, 0x0, 0x4e24, 0x0, 0x2, 0x0, 0x20, 0x0, 0x0, 0xee00}, {@in=@multicast2, 0x4d4, 0x32}, @in=@loopback, {0xfffffffffffffffe, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x3, 0x20000000008, 0xbdf}, {0x0, 0x8, 0xcc}, {0xf6, 0xfffffffe}, 0x0, 0x0, 0xa, 0x1, 0x1}, [@algo_aead={0x5f, 0x12, {{'rfc4309(ccm(aes))\x00'}, 0x98, 0x80, "9f0e05ffa97a205ca8f86e8c52fb1b133b7675"}}, @offload={0xc}]}, 0x15c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c00000013000100e90000000000000007000000", @ANYRES32=r5, @ANYBLOB="00000000000000000c001a800800058004000880"], 0x2c}}, 0x0) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r0, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="6000005faf1866acda9b69850e492d585a866e8b4b76301a8ef864f8dcbf1681a745b391468fa0d67f8f60d534bf1bfcfa5ea61108001d6a6f1b2cf130e5e2612e10ed1387b21b1fab4cdcc453d34ca45f21ff0a9b26b69335eb2c874c228b88d8aab689bf769ca7bc556f30cbe5c74ea9ffe8962539a62b0e351f", @ANYRES16=0x0, @ANYBLOB="08002dbd7000ffdbdf252100000044002d8005000400000000000500040001000000080002000200000005000100de000000080003000100000005000100070000000800030002000000050004000100000008000300", @ANYRES32=r1, @ANYBLOB], 0x60}, 0x1, 0x0, 0x0, 0x8000}, 0x40000041) r7 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f00000002c0), r0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(r8, &(0x7f0000000640)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x14, r9, 0x300, 0x70bd26, 0x25dfdbfb, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40c0003}, 0x1) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000300)) sendmsg$NFC_CMD_DEP_LINK_UP(r0, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYRES64=0x0, @ANYRESOCT=r8, @ANYRESDEC=r9], 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x400c004) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x4) sendmsg$nl_route_sched(r7, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newtclass={0x24, 0x28, 0x400, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, r10, {0xd}, {0x8, 0xb}, {0x0, 0xfff3}}}, 0x24}}, 0x0) 147.168401ms ago: executing program 2 (id=3281): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x8, 0x2}, 0x48) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000200)={r1, &(0x7f0000000080), &(0x7f0000000000)=""/10, 0x2}, 0x20) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000480)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=@bridge_dellink={0x2c, 0x13, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r3}, [@IFLA_AF_SPEC={0xc, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x5, 0x0, 0x1, {0x4, 0x6}}]}]}, 0x2c}}, 0x0) 78.819287ms ago: executing program 1 (id=3282): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbff, 0x2ffffffff}, 0xc) r2 = accept4$nfc_llcp(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x80000) accept$nfc_llcp(r2, 0x0, &(0x7f0000000040)) recvfrom(r1, 0x0, 0x0, 0x40000020, &(0x7f00000002c0)=@l2={0x1f, 0x7bd, @none, 0xeb6}, 0x80) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c0002800500010000000000080007"], 0x98}}, 0x0) 12.067457ms ago: executing program 3 (id=3283): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r0, 0x29, 0x6, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x31f2552d984251b8, 0xffffffffffffffff, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f00000003c0)=0x2, 0x4) connect$inet6(r2, &(0x7f0000000300)={0xa, 0x3, 0x8, @loopback, 0xfffffffe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000000)=@gcm_256={{0x303}, "41328ac34a4ad2ba", "e8582491a0c4050000000000f6542a9b6800000000000000003967d2daa45b4e", "61241765", "89b06aff130000fd"}, 0x38) sendmsg$DEVLINK_CMD_TRAP_SET(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)=ANY=[], 0x14}}, 0x8000) sendmsg$inet(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@ip_tos_int={{0x14, 0x11a, 0x1, 0x7fffffff}}], 0x18}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)=ANY=[@ANYBLOB="b80000001900010029bd7000fedbdf25fe800000000000000000000000000017ff01000000000000000000000000000001000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000004000000000000000000000000000000030000000000000000000000000000000200000000000000fdffffffffffffff0000000000000000000000000000000000080000000000000600000000000000000000000000000000000000000000000100020000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x24008040}, 0x8000) unshare(0x22020600) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x7fff, 0x7}, 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000080)={r3, 0x0, 0x0, 0x4}, 0x20) syz_emit_ethernet(0x46, &(0x7f0000000400)={@local, @random="df00004000", @void, {@ipv4={0x800, @tcp={{0x9, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x11}, {[@ssrr={0x89, 0x7, 0xa2, [@broadcast]}, @cipso={0x86, 0x6, 0x1}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) r4 = socket$inet_icmp(0x2, 0x2, 0x1) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000140)={{{@in6, @in=@multicast2}}, {{@in=@broadcast}, 0x0, @in=@loopback}}, &(0x7f0000000040)=0xe8) socket$inet_mptcp(0x2, 0x1, 0x106) (async) setsockopt$inet_int(r0, 0x29, 0x6, 0x0, 0x0) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x31f2552d984251b8, 0xffffffffffffffff, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) (async) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f00000003c0)=0x2, 0x4) (async) connect$inet6(r2, &(0x7f0000000300)={0xa, 0x3, 0x8, @loopback, 0xfffffffe}, 0x1c) (async) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000540), 0x3c) (async) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000000)=@gcm_256={{0x303}, "41328ac34a4ad2ba", "e8582491a0c4050000000000f6542a9b6800000000000000003967d2daa45b4e", "61241765", "89b06aff130000fd"}, 0x38) (async) sendmsg$DEVLINK_CMD_TRAP_SET(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)=ANY=[], 0x14}}, 0x8000) (async) sendmsg$inet(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@ip_tos_int={{0x14, 0x11a, 0x1, 0x7fffffff}}], 0x18}, 0x0) (async) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)=ANY=[@ANYBLOB="b80000001900010029bd7000fedbdf25fe800000000000000000000000000017ff01000000000000000000000000000001000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000004000000000000000000000000000000030000000000000000000000000000000200000000000000fdffffffffffffff0000000000000000000000000000000000080000000000000600000000000000000000000000000000000000000000000100020000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x24008040}, 0x8000) (async) unshare(0x22020600) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x7fff, 0x7}, 0x48) (async) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000080)={r3, 0x0, 0x0, 0x4}, 0x20) (async) syz_emit_ethernet(0x46, &(0x7f0000000400)={@local, @random="df00004000", @void, {@ipv4={0x800, @tcp={{0x9, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x11}, {[@ssrr={0x89, 0x7, 0xa2, [@broadcast]}, @cipso={0x86, 0x6, 0x1}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) (async) socket$inet_icmp(0x2, 0x2, 0x1) (async) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000140)={{{@in6, @in=@multicast2}}, {{@in=@broadcast}, 0x0, @in=@loopback}}, &(0x7f0000000040)=0xe8) (async) 0s ago: executing program 0 (id=3284): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_void(r0, 0x1, 0x0, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_int(r1, 0x0, 0x18, &(0x7f0000000080)=0x1ff, 0x4) syz_emit_ethernet(0x4f, &(0x7f0000000100)={@multicast, @empty, @val={@void, {0x8100, 0x1, 0x0, 0x3}}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x3d, 0x0, 0x0, 0x0, 0x11, 0x0, @multicast2, @empty=0xe0000001}, {0x0, 0x4e20, 0x29, 0x0, @gue={{0x2, 0x1, 0x0, 0x3d}, "75c121a4dcfb43529e63a76e2adaee00"/25}}}}}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="6a0abbc2d0a6fee6a1da1600000000009500000000000000"], &(0x7f0000000480)='GPL\x00'}, 0x80) kernel console output (not intermixed with test programs): 9739) Use of int in max_burst socket option. [ 157.831236][ T9739] Use struct sctp_assoc_value instead [ 157.846071][ T9736] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 158.194835][ T9762] netlink: 'syz.3.1081': attribute type 2 has an invalid length. [ 158.906788][ T8287] wlan1: Trigger new scan to find an IBSS to join [ 159.087922][ T9798] netlink: 'syz.0.1086': attribute type 26 has an invalid length. [ 159.095866][ T9798] __nla_validate_parse: 12 callbacks suppressed [ 159.095882][ T9798] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1086'. [ 159.113336][ T9798] netlink: 'syz.0.1086': attribute type 26 has an invalid length. [ 159.123737][ T9798] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1086'. [ 159.349766][ T9803] wg2: entered promiscuous mode [ 159.356163][ T9803] wg2: entered allmulticast mode [ 159.654747][ T9822] netlink: 'syz.1.1094': attribute type 1 has an invalid length. [ 159.852334][ T9841] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1098'. [ 159.884307][ T9843] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1098'. [ 159.899511][ T9840] netlink: 'syz.1.1097': attribute type 12 has an invalid length. [ 159.969531][ T60] wlan1: Creating new IBSS network, BSSID ce:f9:5b:a9:bd:e5 [ 160.066012][ T9855] syzkaller1: entered promiscuous mode [ 160.102209][ T9855] syzkaller1: entered allmulticast mode [ 160.345228][ T9878] netlink: 'syz.1.1108': attribute type 1 has an invalid length. [ 160.379056][ T9878] netlink: 'syz.1.1108': attribute type 4 has an invalid length. [ 160.417512][ T9878] netlink: 192 bytes leftover after parsing attributes in process `syz.1.1108'. [ 160.625408][ T9898] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1114'. [ 160.635106][ T9899] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1114'. [ 160.659891][ T9898] netlink: 'syz.1.1114': attribute type 1 has an invalid length. [ 160.682232][ T9899] x_tables: duplicate underflow at hook 2 [ 160.703877][ T9902] tipc: Resetting bearer [ 160.716737][ T9898] netlink: 148 bytes leftover after parsing attributes in process `syz.1.1114'. [ 160.727136][ T9898] netlink: 59 bytes leftover after parsing attributes in process `syz.1.1114'. [ 160.809275][ T9901] tipc: Resetting bearer [ 161.287373][ T9939] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1124'. [ 161.501756][ T3517] tipc: Resetting bearer [ 161.644205][ T9969] validate_nla: 6 callbacks suppressed [ 161.644222][ T9969] netlink: 'syz.0.1131': attribute type 5 has an invalid length. [ 161.751172][ T9967] netlink: 'syz.3.1130': attribute type 1 has an invalid length. [ 161.930547][ T9982] netlink: 'syz.3.1135': attribute type 2 has an invalid length. [ 162.754594][T10035] hsr_slave_0 (unregistering): left promiscuous mode [ 162.904048][T10046] netlink: 'syz.2.1147': attribute type 1 has an invalid length. [ 162.916217][T10046] netlink: 'syz.2.1147': attribute type 2 has an invalid length. [ 163.113057][T10061] netlink: 'syz.2.1151': attribute type 1 has an invalid length. [ 163.218949][T10060] veth3: entered promiscuous mode [ 163.229308][T10060] bond4: (slave veth3): Enslaving as a backup interface with a down link [ 164.089970][T10116] netlink: 'syz.2.1164': attribute type 4 has an invalid length. [ 164.275309][T10125] __nla_validate_parse: 16 callbacks suppressed [ 164.275330][T10125] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1167'. [ 164.347497][T10128] netlink: 144 bytes leftover after parsing attributes in process `syz.1.1169'. [ 164.371621][T10128] rdma_rxe: rxe_newlink: failed to add ipvlan1 [ 165.011891][T10185] netlink: 'syz.1.1182': attribute type 11 has an invalid length. [ 165.022363][T10185] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1182'. [ 165.249277][T10196] batadv0: entered promiscuous mode [ 165.258613][T10196] bond0: entered promiscuous mode [ 165.264504][T10196] bond_slave_0: entered promiscuous mode [ 165.273918][T10200] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1187'. [ 165.293156][T10196] bond_slave_1: entered promiscuous mode [ 165.299060][T10196] dummy0: entered promiscuous mode [ 165.355271][T10196] geneve1: entered promiscuous mode [ 165.375419][T10196] bond0: left promiscuous mode [ 165.389362][T10196] bond_slave_0: left promiscuous mode [ 165.397365][T10196] bond_slave_1: left promiscuous mode [ 165.403700][T10196] dummy0: left promiscuous mode [ 165.408963][T10196] geneve1: left promiscuous mode [ 165.415263][T10196] batadv0: left promiscuous mode [ 165.513846][T10217] bridge: RTM_NEWNEIGH with unconfigured vlan 1281 on bridge_slave_0 [ 165.527369][T10219] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1193'. [ 165.547970][T10220] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1192'. [ 165.625406][T10227] 8021q: VLANs not supported on sit0 [ 165.709878][T10237] netlink: 'syz.2.1198': attribute type 11 has an invalid length. [ 165.728024][T10239] x_tables: duplicate underflow at hook 2 [ 165.736357][T10237] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1198'. [ 165.897543][T10247] vlan3: entered promiscuous mode [ 165.903919][T10247] bridge0: entered promiscuous mode [ 166.306784][T10280] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 166.473303][T10284] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1214'. [ 167.112729][T10324] netlink: 'syz.0.1226': attribute type 12 has an invalid length. [ 167.195858][T10329] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1228'. [ 167.383565][T10348] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1233'. [ 167.549342][T10367] syzkaller0: entered promiscuous mode [ 167.555215][T10367] syzkaller0: entered allmulticast mode [ 168.294767][T10380] veth3: entered allmulticast mode [ 168.310793][T10383] tipc: Resetting bearer [ 168.390955][T10385] tipc: Resetting bearer [ 168.716993][T10426] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 168.726517][T10426] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 168.782423][ T60] tipc: Resetting bearer [ 168.795212][T10434] macvtap1: entered promiscuous mode [ 168.800799][T10434] vlan0: entered promiscuous mode [ 168.806158][T10434] macvtap1: entered allmulticast mode [ 168.812336][T10434] vlan0: entered allmulticast mode [ 168.818022][T10434] veth0_vlan: entered allmulticast mode [ 169.491618][T10434] netlink: 'syz.4.1257': attribute type 1 has an invalid length. [ 169.511322][T10434] __nla_validate_parse: 4 callbacks suppressed [ 169.511338][T10434] netlink: 232 bytes leftover after parsing attributes in process `syz.4.1257'. [ 169.526968][T10434] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1257'. [ 169.616755][T10457] netlink: 'syz.2.1261': attribute type 64 has an invalid length. [ 169.630257][T10457] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1261'. [ 169.724046][T10467] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1262'. [ 169.895220][ T43] IPVS: starting estimator thread 0... [ 170.004075][T10477] IPVS: using max 28 ests per chain, 67200 per kthread [ 170.103773][T10494] netlink: 'syz.2.1270': attribute type 2 has an invalid length. [ 170.133067][T10483] team0: Port device geneve2 added [ 170.138537][ T50] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 20003 - 0 [ 170.158677][ T50] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 20003 - 0 [ 170.183108][ T50] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 20003 - 0 [ 170.215357][ T50] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 20003 - 0 [ 170.433863][T10518] netlink: 232 bytes leftover after parsing attributes in process `syz.4.1278'. [ 170.494555][T10523] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 170.566493][T10529] xt_CT: You must specify a L4 protocol and not use inversions on it [ 170.778269][T10542] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1284'. [ 170.860603][T10545] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1285'. [ 170.935001][T10550] netlink: 'syz.2.1287': attribute type 32 has an invalid length. [ 170.947515][T10550] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1287'. [ 170.986806][T10550] bond5: option coupled_control: invalid value (52) [ 170.994725][T10550] bond5 (unregistering): Released all slaves [ 171.132310][T10564] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 171.347579][T10576] syzkaller0: entered promiscuous mode [ 171.367961][T10576] syzkaller0: entered allmulticast mode [ 171.551220][T10589] netlink: 11 bytes leftover after parsing attributes in process `syz.2.1297'. [ 171.563198][T10589] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1297'. [ 171.779966][T10603] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 172.140594][T10635] netlink: 'syz.4.1309': attribute type 3 has an invalid length. [ 172.369959][T10648] netlink: 'syz.4.1314': attribute type 5 has an invalid length. [ 172.587974][T10664] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 172.677216][T10669] netlink: 'syz.2.1319': attribute type 2 has an invalid length. [ 173.017539][T10689] 8021q: adding VLAN 0 to HW filter on device bond0 [ 173.100601][T10689] 8021q: adding VLAN 0 to HW filter on device bond0 [ 173.107770][T10689] bond0: (slave vxcan3): The slave device specified does not support setting the MAC address [ 173.125036][T10703] netlink: 'syz.4.1329': attribute type 1 has an invalid length. [ 173.125232][T10689] bond0: (slave vxcan3): Error -95 calling set_mac_address [ 173.184352][T10707] netlink: 'syz.3.1330': attribute type 11 has an invalid length. [ 173.235845][T10701] syzkaller0: entered promiscuous mode [ 173.241946][T10701] syzkaller0: entered allmulticast mode [ 173.276226][T10696] tipc: Enabled bearer , priority 0 [ 173.302966][T10701] tipc: Resetting bearer [ 173.358451][T10695] tipc: Resetting bearer [ 173.412437][T10695] tipc: Disabling bearer [ 173.546812][T10723] sctp: [Deprecated]: syz.4.1333 (pid 10723) Use of struct sctp_assoc_value in delayed_ack socket option. [ 173.546812][T10723] Use struct sctp_sack_info instead [ 173.892707][T10743] openvswitch: netlink: Missing key (keys=40, expected=100) [ 174.564546][T10762] __nla_validate_parse: 26 callbacks suppressed [ 174.564566][T10762] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1342'. [ 174.621382][T10762] openvswitch: netlink: Flow actions attr not present in new flow. [ 174.682651][T10762] tipc: Enabled bearer , priority 0 [ 174.690321][T10762] syzkaller0: entered promiscuous mode [ 174.696183][T10762] syzkaller0: entered allmulticast mode [ 174.729791][T10751] tipc: Resetting bearer [ 174.789363][T10751] tipc: Disabling bearer [ 174.797204][T10778] netlink: 'syz.0.1348': attribute type 1 has an invalid length. [ 174.995258][T10789] netlink: 180 bytes leftover after parsing attributes in process `syz.4.1349'. [ 175.073738][T10790] netlink: 180 bytes leftover after parsing attributes in process `syz.4.1349'. [ 175.084650][T10789] xt_ecn: cannot match TCP bits for non-tcp packets [ 175.316587][T10806] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1353'. [ 175.359671][T10806] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1353'. [ 175.442750][T10811] syzkaller0: entered promiscuous mode [ 175.448516][T10818] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1356'. [ 175.450761][T10811] syzkaller0: entered allmulticast mode [ 175.462854][T10820] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1357'. [ 175.726631][T10837] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1362'. [ 175.752241][T10839] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1361'. [ 176.872611][T10832] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1362'. [ 177.530474][T10896] tipc: Enabling of bearer rejected, already enabled [ 177.547201][T10896] netlink: 'syz.3.1378': attribute type 1 has an invalid length. [ 177.560825][T10896] netlink: 'syz.3.1378': attribute type 2 has an invalid length. [ 177.579767][T10896] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1500) ! [ 177.677579][T10912] xt_CT: You must specify a L4 protocol and not use inversions on it [ 177.717742][T10911] tipc: Resetting bearer [ 177.886831][ T50] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 177.896770][T10923] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 177.906549][ T50] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 177.927394][ T50] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 177.939067][T10923] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 177.959325][ T50] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 178.720771][T10960] tipc: Enabled bearer , priority 0 [ 178.856209][T10960] syzkaller0: entered promiscuous mode [ 178.868019][T10960] syzkaller0: entered allmulticast mode [ 178.882320][T10960] tipc: Resetting bearer [ 178.897088][T10970] tipc: Enabling of bearer rejected, failed to enable media [ 178.933194][T10970] bridge_slave_1: left allmulticast mode [ 178.943725][T10970] bridge_slave_1: left promiscuous mode [ 178.949620][T10970] bridge0: port 2(bridge_slave_1) entered disabled state [ 179.000238][T10970] bridge_slave_0: left allmulticast mode [ 179.013220][T10970] bridge_slave_0: left promiscuous mode [ 179.031702][T10970] bridge0: port 1(bridge_slave_0) entered disabled state [ 179.191584][T10959] tipc: Resetting bearer [ 179.305175][T11000] netlink: 'syz.3.1398': attribute type 23 has an invalid length. [ 179.751685][ T43] tipc: Node number set to 2295172452 [ 180.638009][T10959] tipc: Disabling bearer [ 180.646936][T10990] tipc: Resetting bearer [ 180.700888][T10990] tipc: Resetting bearer [ 180.784738][T11026] netlink: 'syz.4.1405': attribute type 142 has an invalid length. [ 180.802878][T11028] netlink: 'syz.4.1405': attribute type 142 has an invalid length. [ 180.861809][T11033] __nla_validate_parse: 7 callbacks suppressed [ 180.861825][T11033] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1405'. [ 180.901953][T11028] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1405'. [ 180.920624][T11026] netlink: 'syz.4.1405': attribute type 1 has an invalid length. [ 180.990001][ T5833] Bluetooth: hci4: command 0x0405 tx timeout [ 181.149407][T11048] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1411'. [ 181.235934][T11054] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1413'. [ 181.321505][T11062] syzkaller0: entered promiscuous mode [ 181.327013][T11062] syzkaller0: entered allmulticast mode [ 181.417475][T11071] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 181.428182][T11069] 8021q: VLANs not supported on lo [ 181.438930][T11072] netlink: 'syz.0.1420': attribute type 10 has an invalid length. [ 181.474457][T11072] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 181.514238][T11069] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1419'. [ 181.559958][T11082] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1422'. [ 181.641078][T11086] atomic_op ffff88807fa4a998 conn xmit_atomic 0000000000000000 [ 181.654004][ T12] tipc: Resetting bearer [ 181.668590][T11089] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 181.723553][T11088] tipc: Resetting bearer [ 181.746394][T11085] tipc: Resetting bearer [ 181.750066][T11089] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1425'. [ 181.800652][T11089] netlink: 184 bytes leftover after parsing attributes in process `syz.0.1425'. [ 181.895457][T11100] netlink: 'syz.4.1429': attribute type 12 has an invalid length. [ 182.031624][T11100] bond4: option primary_reselect: invalid value (255) [ 182.063111][T11100] bond4 (unregistering): Released all slaves [ 182.225896][T11121] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1434'. [ 182.324324][T11123] tipc: Enabling of bearer rejected, already enabled [ 182.405148][T11123] tipc: Resetting bearer [ 182.422460][T11125] openvswitch: netlink: Message has 12 unknown bytes. [ 182.512666][T11134] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1439'. [ 182.523019][T11134] team0: No ports can be present during mode change [ 182.657367][T11140] can: request_module (can-proto-0) failed. [ 182.691771][ T12] tipc: Resetting bearer [ 183.084084][T11181] tipc: Resetting bearer [ 183.154590][T11180] tipc: Resetting bearer [ 183.365962][T11191] bridge0: port 2(bridge_slave_1) entered disabled state [ 183.507508][T11191] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 183.534040][T11191] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 183.823261][T11191] vlan0: left allmulticast mode [ 183.828398][T11191] veth0_vlan: left allmulticast mode [ 183.858903][T11191] vlan0: left promiscuous mode [ 183.880036][T11191] macvtap1: left promiscuous mode [ 183.919140][ T12] tipc: Resetting bearer [ 183.955707][ T50] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.989315][ T50] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.031743][ T50] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.084922][ T50] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.183876][T11222] netlink: 'syz.0.1463': attribute type 21 has an invalid length. [ 184.193995][T11222] netlink: 'syz.0.1463': attribute type 22 has an invalid length. [ 184.202365][T11222] netlink: 'syz.0.1463': attribute type 23 has an invalid length. [ 184.230266][T11222] netlink: 'syz.0.1463': attribute type 25 has an invalid length. [ 184.238106][T11222] netlink: 'syz.0.1463': attribute type 26 has an invalid length. [ 184.799874][T11254] netlink: 'syz.0.1472': attribute type 3 has an invalid length. [ 184.831077][T11254] netlink: 'syz.0.1472': attribute type 2 has an invalid length. [ 185.387420][T11267] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 185.423169][T11267] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 185.458775][T11267] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 185.601702][T11274] tipc: Trying to set illegal importance in message [ 186.117073][T11289] bond4: option min_links: invalid value (18446744073709551614) [ 186.140375][T11289] bond4: option min_links: allowed values 0 - 2147483647 [ 186.158554][T11289] bond4 (unregistering): Released all slaves [ 186.196216][T11299] netlink: 'syz.2.1487': attribute type 1 has an invalid length. [ 186.291538][T11304] __nla_validate_parse: 16 callbacks suppressed [ 186.291554][T11304] netlink: 7 bytes leftover after parsing attributes in process `syz.1.1489'. [ 186.549438][T11315] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1494'. [ 186.564085][T11313] syzkaller0: entered promiscuous mode [ 186.577607][T11313] syzkaller0: entered allmulticast mode [ 186.591555][T11329] xt_hashlimit: invalid interval [ 186.815378][T11338] netlink: 'syz.3.1501': attribute type 4 has an invalid length. [ 186.848694][T11340] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1502'. [ 186.867270][T11342] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1501'. [ 186.928372][T11342] bond0: (slave dummy0): Releasing backup interface [ 187.036644][T11356] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1506'. [ 187.073601][T11364] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1508'. [ 187.083691][T11363] netlink: 'syz.3.1509': attribute type 12 has an invalid length. [ 187.093646][T11363] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1509'. [ 187.133019][T11363] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1509'. [ 187.137377][T11368] Bluetooth: hci0: invalid length 39, exp 2 for type 29 [ 187.154921][T11368] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1507'. [ 187.503705][T11392] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1516'. [ 187.544430][T11392] bond3: option all_slaves_active: invalid value (222) [ 187.554088][T11392] bond3 (unregistering): Released all slaves [ 188.130257][T11422] sctp: [Deprecated]: syz.2.1523 (pid 11422) Use of int in maxseg socket option. [ 188.130257][T11422] Use struct sctp_assoc_value instead [ 188.319457][T11434] bridge2: entered allmulticast mode [ 188.903625][T11465] : entered promiscuous mode [ 189.945380][T11527] tipc: Enabling of bearer rejected, already enabled [ 190.117717][T11537] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 190.176926][T11537] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 190.495104][T11561] openvswitch: netlink: Flow key attr not present in new flow. [ 191.385388][T11603] sctp: [Deprecated]: syz.1.1567 (pid 11603) Use of struct sctp_assoc_value in delayed_ack socket option. [ 191.385388][T11603] Use struct sctp_sack_info instead [ 191.411613][T11603] sctp: [Deprecated]: syz.1.1567 (pid 11603) Use of struct sctp_assoc_value in delayed_ack socket option. [ 191.411613][T11603] Use struct sctp_sack_info instead [ 191.431824][T11603] __nla_validate_parse: 14 callbacks suppressed [ 191.431841][T11603] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1567'. [ 191.504745][T11606] veth0_to_team: entered promiscuous mode [ 191.511262][T11606] veth0_to_team: entered allmulticast mode [ 191.766087][T11627] !: renamed from dummy0 (while UP) [ 191.815434][T11629] tunl0: left promiscuous mode [ 191.830385][T11629] 0{X: left allmulticast mode [ 191.839996][T11629] veth0_to_bond: left allmulticast mode [ 191.899701][T11629] gretap0: left promiscuous mode [ 191.906081][T11629] gretap0: left allmulticast mode [ 191.924861][ T1145] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.936277][ T1145] netdevsim netdevsim1 eth0: unset [1, 1] type 2 family 0 port 20003 - 0 [ 191.946393][T11630] validate_nla: 2 callbacks suppressed [ 191.946408][T11630] netlink: 'syz.0.1571': attribute type 5 has an invalid length. [ 191.973645][ T1145] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.982816][ T1145] netdevsim netdevsim1 eth1: unset [1, 1] type 2 family 0 port 20003 - 0 [ 192.002703][ T1145] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.028366][ T1145] netdevsim netdevsim1 eth2: unset [1, 1] type 2 family 0 port 20003 - 0 [ 192.058077][ T1145] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.069220][ T1145] netdevsim netdevsim1 eth3: unset [1, 1] type 2 family 0 port 20003 - 0 [ 192.408596][T11657] batadv1: entered allmulticast mode [ 192.466219][T11671] netlink: 'syz.0.1588': attribute type 2 has an invalid length. [ 192.475837][T11671] netlink: 'syz.0.1588': attribute type 1 has an invalid length. [ 192.538403][T11673] bond0: (slave rose0): Error: Device can not be enslaved while up [ 192.566214][T11676] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1590'. [ 192.784554][T11676] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 192.796068][T11676] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 192.808347][T11676] bond0 (unregistering): (slave geneve1): Releasing backup interface [ 192.818210][T11676] bond0 (unregistering): Released all slaves [ 192.926778][T11692] netlink: 176 bytes leftover after parsing attributes in process `syz.2.1594'. [ 192.936783][T11692] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1594'. [ 192.956611][T11692] smc: ib device syz0 ibport 1 applied user defined pnetid SYZ0 [ 193.100028][T11703] netlink: 'syz.4.1598': attribute type 23 has an invalid length. [ 193.489508][T11728] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1605'. [ 193.574355][T11734] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1606'. [ 193.867587][T11753] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1613'. [ 193.885596][T11753] vlan2: entered allmulticast mode [ 193.893433][T11753] mac80211_hwsim hwsim5 wlan0: entered allmulticast mode [ 194.071307][T11773] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1615'. [ 194.094780][T11777] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1618'. [ 194.120527][T11777] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 194.879846][T11788] netlink: 'syz.0.1624': attribute type 1 has an invalid length. [ 194.931563][T11796] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1624'. [ 194.932121][T11788] netlink: 'syz.0.1624': attribute type 3 has an invalid length. [ 195.461336][ T5842] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 195.485032][T11832] IPv6: sit1: Disabled Multicast RS [ 195.513912][T11835] syzkaller1: entered promiscuous mode [ 195.519650][T11835] syzkaller1: entered allmulticast mode [ 195.532260][T11834] tipc: Resetting bearer [ 195.543337][T11834] tipc: Resetting bearer [ 195.551126][T11834] syzkaller0: left promiscuous mode [ 195.556366][T11834] syzkaller0: left allmulticast mode [ 195.658516][T11833] tipc: Resetting bearer [ 195.706696][ T60] tipc: Resetting bearer [ 196.168309][T11871] bond4: Unable to set up delay as MII monitoring is disabled [ 196.187330][T11871] bond4 (unregistering): Released all slaves [ 196.319208][T11884] 8021q: adding VLAN 0 to HW filter on device bond4 [ 196.348344][T11884] bond0: (slave bond4): Enslaving as an active interface with an up link [ 196.379209][T11894] netlink: 'syz.4.1648': attribute type 1 has an invalid length. [ 196.519584][T11903] syzkaller1: entered promiscuous mode [ 196.537779][T11903] syzkaller1: entered allmulticast mode [ 196.591706][T11907] __nla_validate_parse: 6 callbacks suppressed [ 196.591723][T11907] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1650'. [ 196.598572][T11910] netlink: 'syz.4.1653': attribute type 1 has an invalid length. [ 196.959550][T11927] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 197.009748][T11929] bridge0: port 1(ipvlan2) entered blocking state [ 197.023913][T11929] bridge0: port 1(ipvlan2) entered disabled state [ 197.037418][T11929] ipvlan2: entered allmulticast mode [ 197.043390][T11929] bridge0: entered allmulticast mode [ 197.055333][T11929] ipvlan2: left allmulticast mode [ 197.070857][T11929] bridge0: left allmulticast mode [ 197.071473][T11934] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1662'. [ 197.106542][T11936] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1663'. [ 197.245783][T11948] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1668'. [ 197.301378][T11947] netlink: 'syz.4.1668': attribute type 3 has an invalid length. [ 197.309142][T11947] netlink: 766 bytes leftover after parsing attributes in process `syz.4.1668'. [ 197.478518][T11961] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1672'. [ 197.490604][T11961] netlink: 80 bytes leftover after parsing attributes in process `syz.4.1672'. [ 197.691457][T11972] tipc: Resetting bearer [ 197.703400][T11970] tipc: Resetting bearer [ 197.776901][ T60] nci: nci_extract_activation_params_nfc_dep: unsupported activation_rf_tech_and_mode 0x6 [ 197.791615][T11981] netlink: 'syz.2.1676': attribute type 1 has an invalid length. [ 197.848947][T11983] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 197.891273][T11987] sctp: [Deprecated]: syz.0.1681 (pid 11987) Use of int in max_burst socket option deprecated. [ 197.891273][T11987] Use struct sctp_assoc_value instead [ 198.157066][T12004] netlink: 22 bytes leftover after parsing attributes in process `syz.4.1686'. [ 198.283966][T12012] nbd: couldn't find a device at index 0 [ 198.323813][T12016] nbd: couldn't find a device at index 0 [ 198.692240][T12036] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 198.710518][T12037] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_tx_wq": -EINTR [ 198.718723][T12050] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1700'. [ 198.875199][T12057] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1701'. [ 198.923300][ T8287] tipc: Resetting bearer [ 198.988618][T12060] tipc: Enabled bearer , priority 0 [ 199.058894][T12060] tipc: Disabling bearer [ 199.099419][T12068] vlan2: entered promiscuous mode [ 199.107903][T12068] bridge0: entered promiscuous mode [ 199.715978][T12105] tipc: Enabled bearer , priority 0 [ 199.724526][T12095] syzkaller0: entered promiscuous mode [ 199.730013][T12095] syzkaller0: entered allmulticast mode [ 199.777277][T12095] tipc: Resetting bearer [ 199.833813][T12095] tipc: Disabling bearer [ 199.974447][T12125] netlink: 'syz.1.1721': attribute type 10 has an invalid length. [ 201.542744][ T5149] Bluetooth: hci2: command 0x0406 tx timeout [ 201.548944][ T5829] Bluetooth: hci1: command 0x0406 tx timeout [ 201.549333][ T5149] Bluetooth: hci3: command 0x0406 tx timeout [ 201.744726][T12166] __nla_validate_parse: 7 callbacks suppressed [ 201.744743][T12166] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1731'. [ 201.767199][T12166] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1731'. [ 201.877638][T12176] netlink: 'syz.4.1734': attribute type 12 has an invalid length. [ 201.929707][T12176] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1734'. [ 201.943736][ T1145] wlan1: Trigger new scan to find an IBSS to join [ 202.185018][T12200] Cannot find del_set index 4 as target [ 202.284403][T12207] : renamed from hsr0 (while UP) [ 202.356413][T12215] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1742'. [ 202.399404][T12224] sctp: [Deprecated]: syz.1.1747 (pid 12224) Use of int in maxseg socket option. [ 202.399404][T12224] Use struct sctp_assoc_value instead [ 202.505560][T12231] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1749'. [ 202.524881][T12233] team0: Device vti0 is of different type [ 202.588923][T12238] syzkaller0: entered promiscuous mode [ 202.595768][T12238] syzkaller0: entered allmulticast mode [ 202.627036][T12238] xt_CT: You must specify a L4 protocol and not use inversions on it [ 202.835121][T12244] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR [ 203.408363][T12291] netlink: 14436 bytes leftover after parsing attributes in process `syz.2.1763'. [ 203.446615][T12292] Bluetooth: MGMT ver 1.23 [ 203.449966][T12291] openvswitch: netlink: Missing key (keys=40, expected=100) [ 203.562954][T12297] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1765'. [ 204.189626][T12328] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 204.204099][T12328] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 204.236664][T12328] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 204.269663][T12332] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1771'. [ 204.321354][T12342] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1771'. [ 204.358632][T12332] bond0: option xmit_hash_policy: invalid value (64) [ 204.369917][T12332] bond0 (unregistering): Released all slaves [ 204.421163][T12344] tipc: Enabled bearer , priority 0 [ 204.441296][T12344] syzkaller0: entered promiscuous mode [ 204.446806][T12344] syzkaller0: entered allmulticast mode [ 204.512436][T12344] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 204.558963][T12344] tipc: Resetting bearer [ 204.640560][T12343] tipc: Resetting bearer [ 204.706561][T12343] tipc: Disabling bearer [ 204.774668][T12363] x_tables: duplicate underflow at hook 1 [ 204.892374][T12364] veth5: entered allmulticast mode [ 204.910855][ T12] wlan1: Trigger new scan to find an IBSS to join [ 204.990330][T12376] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1783'. [ 205.183975][T12387] netlink: 'syz.4.1787': attribute type 10 has an invalid length. [ 205.196799][T12373] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 205.293644][T12373] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 205.501921][T12387] syzkaller0: entered promiscuous mode [ 205.507518][T12387] syzkaller0: entered allmulticast mode [ 205.656458][T12403] bridge0: port 1(veth0_to_bridge) entered blocking state [ 205.664612][T12403] bridge0: port 1(veth0_to_bridge) entered disabled state [ 205.672580][T12403] veth0_to_bridge: entered allmulticast mode [ 205.692492][T12403] veth0_to_bridge: entered promiscuous mode [ 205.709628][T12403] bridge0: port 1(veth0_to_bridge) entered blocking state [ 205.717155][T12403] bridge0: port 1(veth0_to_bridge) entered forwarding state [ 206.088766][T12436] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 206.281122][T12443] syzkaller0: entered promiscuous mode [ 206.286627][T12443] syzkaller0: entered allmulticast mode [ 206.310615][ T50] nci: nci_ntf_packet: unsupported ntf opcode 0xf13 [ 206.418483][T12452] bond5: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-tlb(5) [ 206.469449][T12452] bond5 (unregistering): Released all slaves [ 206.509234][T12412] SET target dimension over the limit! [ 206.623196][T12467] netlink: 'syz.0.1810': attribute type 13 has an invalid length. [ 207.056396][T12485] netlink: 'syz.0.1814': attribute type 1 has an invalid length. [ 207.085944][T12485] netlink: 'syz.0.1814': attribute type 1 has an invalid length. [ 207.178608][T12495] netlink: 'syz.4.1819': attribute type 1 has an invalid length. [ 207.244858][T12495] 8021q: adding VLAN 0 to HW filter on device bond4 [ 207.316573][T12503] bond4: (slave veth9): Enslaving as an active interface with a down link [ 207.351525][T12506] __nla_validate_parse: 59 callbacks suppressed [ 207.351544][T12506] netlink: 1 bytes leftover after parsing attributes in process `syz.3.1824'. [ 207.363197][T12495] bond4: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 207.535355][T12523] 8021q: VLANs not supported on gre0 [ 207.878725][T12547] netlink: 112 bytes leftover after parsing attributes in process `syz.3.1834'. [ 207.887224][T12551] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1837'. [ 207.941537][ T8287] wlan1: Trigger new scan to find an IBSS to join [ 208.001336][T12551] netlink: 'syz.1.1837': attribute type 1 has an invalid length. [ 208.129690][T12572] netlink: 'syz.2.1841': attribute type 1 has an invalid length. [ 208.132215][T12551] bond6: (slave gretap1): making interface the new active one [ 208.146566][T12551] bond6: (slave gretap1): Enslaving as an active interface with an up link [ 208.177182][T12572] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1841'. [ 208.374700][T12582] syzkaller1: entered promiscuous mode [ 208.380684][T12582] syzkaller1: entered allmulticast mode [ 208.401299][T12594] netlink: 'syz.4.1847': attribute type 7 has an invalid length. [ 208.429265][T12594] netlink: 'syz.4.1847': attribute type 8 has an invalid length. [ 208.439393][T12594] netlink: 'syz.4.1847': attribute type 1 has an invalid length. [ 208.464516][T12594] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1847'. [ 208.489349][T12594] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1847'. [ 208.575908][T12609] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1850'. [ 208.683785][T12603] x_tables: ip6_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT/POSTROUTING [ 208.824140][T12613] syzkaller1: entered promiscuous mode [ 208.829662][T12613] syzkaller1: entered allmulticast mode [ 208.860354][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 208.921055][T12621] tipc: Enabled bearer , priority 0 [ 208.939259][T12619] syzkaller0: entered promiscuous mode [ 208.948011][T12619] syzkaller0: entered allmulticast mode [ 209.034099][T12619] tipc: Resetting bearer [ 209.086401][T12619] tipc: Disabling bearer [ 209.233515][T12646] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1857'. [ 209.567636][T12664] netlink: 220 bytes leftover after parsing attributes in process `syz.3.1864'. [ 209.602606][T12674] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1866'. [ 209.852130][T12685] bond0: Removing last ns target with arp_interval on [ 209.970469][T12698] x_tables: duplicate underflow at hook 2 [ 210.206326][T12714] validate_nla: 4 callbacks suppressed [ 210.206342][T12714] netlink: 'syz.4.1877': attribute type 13 has an invalid length. [ 210.239630][T12714] netlink: 'syz.4.1877': attribute type 58 has an invalid length. [ 210.572442][T12719] syz.1.1880 (12719) used greatest stack depth: 17832 bytes left [ 210.637498][T12734] bond5: down delay (33554432) is not a multiple of miimon (640), value rounded to 33553920 ms [ 210.802897][ T1145] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 210.842707][ T1145] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 210.874424][T12749] netlink: 'syz.0.1886': attribute type 1 has an invalid length. [ 210.882648][ T1145] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 210.942349][T12752] netlink: 'syz.2.1887': attribute type 1 has an invalid length. [ 210.959939][T12752] netlink: 'syz.2.1887': attribute type 1 has an invalid length. [ 210.984244][T12749] 8021q: adding VLAN 0 to HW filter on device bond5 [ 211.016758][ T1145] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 211.142685][T12760] bond5: (slave geneve3): making interface the new active one [ 211.197577][T12760] bond5: (slave geneve3): Enslaving as an active interface with an up link [ 211.297833][T12752] 8021q: adding VLAN 0 to HW filter on device bond6 [ 211.311580][T12762] bond6: (slave wlan0): Enslaving as an active interface with a down link [ 211.365613][ T8287] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 211.392171][ T8287] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 211.437999][ T1161] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 211.462203][ T1161] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 211.557539][T12789] netlink: 'syz.2.1894': attribute type 3 has an invalid length. [ 212.034698][T12819] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 212.150750][T12829] openvswitch: netlink: IP tunnel dst address not specified [ 212.370853][T12839] netlink: 'syz.2.1910': attribute type 1 has an invalid length. [ 212.379357][T12841] __nla_validate_parse: 14 callbacks suppressed [ 212.379376][T12841] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1909'. [ 212.404148][T12843] xt_TCPMSS: Only works on TCP SYN packets [ 212.440409][T12841] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1909'. [ 212.464163][T12839] 8021q: adding VLAN 0 to HW filter on device bond7 [ 212.557007][T12848] bond7: (slave gretap1): making interface the new active one [ 212.599193][T12854] IPVS: ip_vs_edit_dest(): server weight less than zero [ 212.634683][T12848] bond7: (slave gretap1): Enslaving as an active interface with an up link [ 212.733942][T12866] netlink: 'syz.4.1915': attribute type 11 has an invalid length. [ 212.742224][T12859] bond7: (slave lo): Device is not bonding slave [ 212.742245][T12859] bond7: option active_slave: invalid value (lo) [ 212.757603][T12859] bond7 (unregistering): Released all slaves [ 212.888153][T12870] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1916'. [ 212.933656][T12870] netlink: 'syz.3.1916': attribute type 7 has an invalid length. [ 212.988087][T12870] netlink: 'syz.3.1916': attribute type 8 has an invalid length. [ 213.004610][T12870] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1916'. [ 213.230888][T12890] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 213.329579][T12898] netlink: 144 bytes leftover after parsing attributes in process `syz.2.1923'. [ 213.556881][T12914] sch_tbf: burst 8 is lower than device ip6tnl0 mtu (1452) ! [ 213.912339][T12931] IPVS: set_ctl: invalid protocol: 135 10.1.1.1:20004 [ 214.517047][T12949] macvlan2: entered promiscuous mode [ 214.540272][T12949] macvlan2: entered allmulticast mode [ 214.562495][T12949] bond6: entered promiscuous mode [ 214.583396][T12949] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 214.614745][T12949] bond6: left promiscuous mode [ 214.785150][T12964] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 214.818516][T12964] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 214.957647][T12971] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 215.001084][T12971] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 215.615360][T12978] tipc: Cannot configure node identity twice [ 216.176264][T12990] validate_nla: 1 callbacks suppressed [ 216.176280][T12990] netlink: 'syz.4.1952': attribute type 10 has an invalid length. [ 216.210983][T12990] veth1_macvtap: left promiscuous mode [ 216.217477][T12990] team0: Device veth1_macvtap failed to register rx_handler [ 216.243133][T12992] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1950'. [ 216.402468][T13004] tunl0: entered promiscuous mode [ 216.407683][T13004] netlink: 'syz.4.1954': attribute type 3 has an invalid length. [ 216.435010][T13004] netlink: 9 bytes leftover after parsing attributes in process `syz.4.1954'. [ 216.992596][T13028] netlink: del zone limit has 8 unknown bytes [ 217.300996][T13039] veth0: entered promiscuous mode [ 217.348623][T13039] veth0: left promiscuous mode [ 217.530536][T12884] Set syz1 is full, maxelem 65536 reached [ 217.563097][T13048] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1968'. [ 217.573684][T13048] team0: No ports can be present during mode change [ 217.756516][T13060] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1972'. [ 217.946678][T13077] netlink: 'syz.1.1978': attribute type 3 has an invalid length. [ 217.982929][T13077] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1978'. [ 218.207173][T13101] netlink: 'syz.4.1983': attribute type 11 has an invalid length. [ 218.220404][T13101] netlink: 'syz.4.1983': attribute type 11 has an invalid length. [ 218.244978][T13101] netlink: 'syz.4.1983': attribute type 11 has an invalid length. [ 218.256129][T13097] tipc: Enabled bearer , priority 0 [ 218.264172][T13101] netlink: 'syz.4.1983': attribute type 11 has an invalid length. [ 218.274846][T13097] syzkaller0: entered promiscuous mode [ 218.282002][T13097] syzkaller0: entered allmulticast mode [ 218.289383][T13101] netlink: 'syz.4.1983': attribute type 11 has an invalid length. [ 218.309142][T13101] netlink: 'syz.4.1983': attribute type 11 has an invalid length. [ 218.331187][T13097] tipc: Resetting bearer [ 218.338883][T13101] netlink: 'syz.4.1983': attribute type 11 has an invalid length. [ 218.350020][T13094] tipc: Resetting bearer [ 218.374927][T13094] tipc: Disabling bearer [ 219.204942][T13145] syzkaller0: entered promiscuous mode [ 219.210539][T13145] syzkaller0: entered allmulticast mode [ 219.222858][T13146] netlink: 220 bytes leftover after parsing attributes in process `syz.1.1996'. [ 219.234055][T13146] netlink: 92 bytes leftover after parsing attributes in process `syz.1.1996'. [ 219.467230][T13148] bond7: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 219.483233][T13161] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 219.489705][T13161] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 219.510709][T13148] bond7 (unregistering): Released all slaves [ 219.597179][T13153] C: entered promiscuous mode [ 219.602149][T13153] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 219.692533][T13172] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2006'. [ 219.859881][T13183] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2010'. [ 219.915004][T13184] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 220.084266][T13201] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2011'. [ 220.573102][T13228] bridge_slave_1: left allmulticast mode [ 220.621686][T13228] bridge_slave_1: left promiscuous mode [ 220.628723][T13228] bridge0: port 2(bridge_slave_1) entered disabled state [ 220.665826][T13228] bridge_slave_0: left allmulticast mode [ 220.688414][T13228] bridge_slave_0: left promiscuous mode [ 220.704560][T13228] bridge0: port 1(bridge_slave_0) entered disabled state [ 220.951344][T13252] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2027'. [ 221.202306][T13263] bond8 (unregistering): Released all slaves [ 221.292979][T13276] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2035'. [ 221.695110][T13307] xt_cgroup: invalid path, errno=-2 [ 222.472136][T13344] tipc: Enabled bearer , priority 0 [ 222.488014][T13344] syzkaller0: entered promiscuous mode [ 222.494098][T13344] syzkaller0: entered allmulticast mode [ 222.528946][T13344] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 222.591673][T13344] tipc: Resetting bearer [ 222.611155][T13356] __nla_validate_parse: 8 callbacks suppressed [ 222.611172][T13356] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2059'. [ 222.644509][T13343] tipc: Resetting bearer [ 222.683689][T13361] validate_nla: 30 callbacks suppressed [ 222.683706][T13361] netlink: 'syz.2.2061': attribute type 11 has an invalid length. [ 222.722467][T13343] tipc: Disabling bearer [ 222.748462][T13359] veth0: entered promiscuous mode [ 222.759647][T13353] veth0: left promiscuous mode [ 222.982214][ T52] Bluetooth: hci4: command 0x0405 tx timeout [ 223.116257][T13392] bond7: option tlb_dynamic_lb: mode dependency failed, not supported in mode broadcast(3) [ 223.182019][T13392] bond7 (unregistering): Released all slaves [ 223.271049][T13399] openvswitch: netlink: Multiple metadata blocks provided [ 223.286855][T13406] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2076'. [ 223.401236][T13408] bond0: (slave macvlan2): Error -22 calling dev_set_mtu [ 223.442377][T13409] bond0: (slave macvlan2): Error -22 calling dev_set_mtu [ 223.458259][T13412] syzkaller0: entered promiscuous mode [ 223.464097][T13412] syzkaller0: entered allmulticast mode [ 223.471710][T13412] tipc: Resetting bearer [ 223.477668][T13415] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2079'. [ 223.502538][T13415] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2079'. [ 223.557788][T13422] tipc: Enabling of bearer rejected, failed to enable media [ 223.585210][T13413] tipc: Enabled bearer , priority 0 [ 223.700623][T13413] syzkaller0: entered promiscuous mode [ 223.706266][T13413] syzkaller0: entered allmulticast mode [ 223.712710][T13413] tipc: Resetting bearer [ 223.742117][T13410] tipc: Resetting bearer [ 224.026272][T13452] netlink: 'syz.4.2090': attribute type 2 has an invalid length. [ 224.584169][ T43] tipc: Node number set to 2848678922 [ 225.371500][T13410] tipc: Disabling bearer [ 225.524613][T13485] netlink: 'syz.4.2096': attribute type 10 has an invalid length. [ 225.580732][T13489] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2098'. [ 225.722910][T13489] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2098'. [ 225.870013][T13512] xt_ecn: cannot match TCP bits for non-tcp packets [ 226.157829][T13532] bridge_slave_0: default FDB implementation only supports local addresses [ 226.188917][T13534] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2111'. [ 226.230393][T13534] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2111'. [ 226.508273][T13542] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 226.611527][T13544] netlink: 'syz.1.2113': attribute type 1 has an invalid length. [ 226.850840][T13544] 8021q: adding VLAN 0 to HW filter on device bond7 [ 226.925871][T13545] bond7: (slave veth5): Enslaving as an active interface with a down link [ 226.957642][T13547] bond7: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 227.510505][T13593] netlink: 'syz.0.2129': attribute type 1 has an invalid length. [ 227.541204][T13596] bond4: option resend_igmp: invalid value (32767) [ 227.547861][T13596] bond4: option resend_igmp: allowed values 0 - 255 [ 227.557596][T13596] bond4 (unregistering): Released all slaves [ 227.625573][T13598] xfrm1: entered allmulticast mode [ 227.675522][T13593] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2129'. [ 227.683071][T13605] 8021q: adding VLAN 0 to HW filter on device bond8 [ 227.694432][T13605] bond7: (slave bond8): making interface the new active one [ 227.706842][T13605] bond7: (slave bond8): Enslaving as an active interface with an up link [ 227.718814][T13593] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2129'. [ 227.731212][T13593] 8021q: adding VLAN 0 to HW filter on device bond7 [ 227.744047][T13612] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2132'. [ 227.844423][T13618] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2134'. [ 228.006617][T13626] netlink: 'syz.4.2137': attribute type 1 has an invalid length. [ 228.015622][T13626] netlink: 'syz.4.2137': attribute type 3 has an invalid length. [ 228.025653][T13626] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2137'. [ 228.390996][T13648] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2141'. [ 228.446310][T13651] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2142'. [ 228.854717][T13662] netlink: zone id is out of range [ 228.874387][T13662] netlink: zone id is out of range [ 228.879537][T13662] netlink: del zone limit has 8 unknown bytes [ 228.984522][T13670] netlink: 'syz.3.2148': attribute type 29 has an invalid length. [ 229.001189][T13670] netlink: 'syz.3.2148': attribute type 29 has an invalid length. [ 229.217704][T13687] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2151'. [ 229.229595][T13687] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2151'. [ 229.311022][T13693] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2153'. [ 229.333465][T13693] bridge0: port 2(vlan4) entered blocking state [ 229.339977][T13693] bridge0: port 2(vlan4) entered disabled state [ 229.347439][T13693] vlan4: entered allmulticast mode [ 229.353189][T13693] bridge0: entered allmulticast mode [ 229.363777][T13693] vlan4: left allmulticast mode [ 229.368870][T13693] bridge0: left allmulticast mode [ 229.486177][T13698] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 229.524159][ T52] Bluetooth: hci4: link tx timeout [ 229.529488][ T52] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 229.759390][T13713] syzkaller0: entered promiscuous mode [ 229.779581][T13713] syzkaller0: entered allmulticast mode [ 230.023761][T13732] syzkaller0: entered promiscuous mode [ 230.029284][T13732] syzkaller0: entered allmulticast mode [ 230.371401][T13754] netlink: 'syz.2.2168': attribute type 16 has an invalid length. [ 230.395713][T13754] netlink: 'syz.2.2168': attribute type 3 has an invalid length. [ 231.543729][ T52] Bluetooth: hci4: command 0x0405 tx timeout [ 231.718075][T13840] bridge7: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 231.783414][T13851] net veth1_virt_wifi .: renamed from virt_wifi0 [ 232.146401][T13858] lo speed is unknown, defaulting to 1000 [ 232.175620][ T5892] IPVS: starting estimator thread 0... [ 232.271050][T13867] IPVS: using max 27 ests per chain, 64800 per kthread [ 232.849888][T13895] __nla_validate_parse: 14 callbacks suppressed [ 232.849906][T13895] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2206'. [ 232.901690][T13894] vxcan1: entered allmulticast mode [ 233.092729][T13899] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2210'. [ 233.103129][T13899] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2210'. [ 233.417347][T13915] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2215'. [ 233.550312][T13915] hsr_slave_0 (unregistering): left promiscuous mode [ 233.593271][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807ae05800: rx timeout, send abort [ 233.842842][ T5892] IPVS: starting estimator thread 0... [ 233.931042][T13931] IPVS: using max 25 ests per chain, 60000 per kthread [ 234.094431][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807ae04000: rx timeout, send abort [ 234.102989][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807ae05800: abort rx timeout. Force session deactivation [ 234.451340][T13959] sctp: [Deprecated]: syz.0.2225 (pid 13959) Use of struct sctp_assoc_value in delayed_ack socket option. [ 234.451340][T13959] Use struct sctp_sack_info instead [ 234.490084][T13961] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2226'. [ 234.602755][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807ae04000: abort rx timeout. Force session deactivation [ 234.620816][T13972] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2230'. [ 234.637800][T13974] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2229'. [ 234.638216][T13968] bond5: down delay (33554432) is not a multiple of miimon (640), value rounded to 33553920 ms [ 234.658745][T13974] 8021q: VLANs not supported on sit0 [ 234.985831][T13996] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2233'. [ 235.059395][T13999] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2234'. [ 235.165557][T14004] bridge7: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 235.215179][T13999] netlink: 112 bytes leftover after parsing attributes in process `syz.4.2234'. [ 235.278230][T14009] can: request_module (can-proto-0) failed. [ 236.461264][T14086] Bluetooth: hci0: invalid length 39, exp 2 for type 22 [ 236.470943][T14086] tipc: Enabled bearer , priority 0 [ 236.502595][T14091] netlink: 'syz.0.2259': attribute type 1 has an invalid length. [ 236.515478][T14086] syzkaller0: entered promiscuous mode [ 236.521397][T14086] syzkaller0: entered allmulticast mode [ 236.550706][T14086] tipc: Resetting bearer [ 236.563389][T14085] tipc: Resetting bearer [ 236.591536][T14091] IPVS: Scheduler module ip_vs_sip not found [ 236.610007][T14085] tipc: Disabling bearer [ 236.634002][T14102] IPv6: sit1: Disabled Multicast RS [ 236.642225][T14102] sit1: entered allmulticast mode [ 236.985343][T14129] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 237.018075][T14129] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 237.147343][T14135] tipc: Resetting bearer [ 237.377097][T14136] tipc: Resetting bearer [ 237.873822][T14184] __nla_validate_parse: 11 callbacks suppressed [ 237.873841][T14184] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2278'. [ 237.891448][T14184] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2278'. [ 237.906873][T14184] netlink: 'syz.0.2278': attribute type 21 has an invalid length. [ 237.915336][T14184] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2278'. [ 237.925079][T14184] netlink: 'syz.0.2278': attribute type 5 has an invalid length. [ 237.934502][T14184] netlink: 3 bytes leftover after parsing attributes in process `syz.0.2278'. [ 238.306046][T14199] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2280'. [ 238.317253][T14199] block nbd3: Unsupported socket: should be TCP or UNIX. [ 238.344498][ T60] tipc: Resetting bearer [ 238.369013][T14207] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2280'. [ 238.462255][T14207] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2280'. [ 238.509967][T14207] bridge_slave_1: left allmulticast mode [ 238.532679][T14207] bridge_slave_1: left promiscuous mode [ 238.543509][T14207] bridge0: port 2(bridge_slave_1) entered disabled state [ 238.556072][T14207] bridge_slave_0: left allmulticast mode [ 238.576852][T14207] bridge_slave_0: left promiscuous mode [ 238.583805][T14207] bridge0: port 1(bridge_slave_0) entered disabled state [ 238.693644][T14226] syzkaller1: entered promiscuous mode [ 238.699269][T14226] syzkaller1: entered allmulticast mode [ 238.801006][T14243] netlink: 340 bytes leftover after parsing attributes in process `syz.1.2290'. [ 239.162437][T14255] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 239.961970][T14297] tipc: Enabled bearer , priority 13 [ 239.980942][T14297] syzkaller0: entered promiscuous mode [ 239.987421][T14297] syzkaller0: entered allmulticast mode [ 240.081122][T14314] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2313'. [ 240.257083][T14328] sch_tbf: burst 0 is lower than device lo mtu (82) ! [ 240.434644][T14342] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2321'. [ 240.442079][T14340] tipc: Enabling not permitted [ 240.455580][T14340] tipc: Enabling of bearer rejected, failed to enable media [ 240.715454][T14358] xt_hashlimit: max too large, truncated to 1048576 [ 240.871694][T14367] syzkaller1: entered promiscuous mode [ 240.889951][T14367] syzkaller1: entered allmulticast mode [ 240.942081][T14367] tipc: Resetting bearer [ 240.958673][T14366] tipc: Resetting bearer [ 241.262506][T14389] netlink: 'syz.1.2340': attribute type 1 has an invalid length. [ 241.301256][T14389] netlink: 'syz.1.2340': attribute type 1 has an invalid length. [ 241.318842][T14394] veth1_to_bond: entered allmulticast mode [ 241.443187][T14393] veth1_to_bond: left allmulticast mode [ 241.617642][ T1145] tipc: Resetting bearer [ 241.705847][T14423] veth0_to_bridge: left allmulticast mode [ 241.740079][T14423] veth0_to_bridge: left promiscuous mode [ 241.746509][T14423] bridge0: port 1(veth0_to_bridge) entered disabled state [ 241.794849][T14423] bond0: (slave bridge_slave_1): Releasing backup interface [ 241.826360][T14423] bond0: (slave bond_slave_0): Releasing backup interface [ 241.845204][T14423] bond0: (slave bond_slave_1): Releasing backup interface [ 241.867900][T14423] team0: Port device team_slave_0 removed [ 241.915762][T14423] team0: Port device team_slave_1 removed [ 241.923045][T14423] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 242.027731][T14441] netlink: 'syz.1.2352': attribute type 29 has an invalid length. [ 242.041664][T14441] netlink: 'syz.1.2352': attribute type 29 has an invalid length. [ 242.062064][T14441] netlink: 'syz.1.2352': attribute type 29 has an invalid length. [ 242.078076][T14441] netlink: 'syz.1.2352': attribute type 29 has an invalid length. [ 242.184858][T14453] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 242.355589][ T5892] IPVS: starting estimator thread 0... [ 242.453677][T14464] IPVS: using max 31 ests per chain, 74400 per kthread [ 242.568273][T14482] netlink: 'syz.3.2363': attribute type 3 has an invalid length. [ 242.958308][T14500] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 243.174149][T14517] __nla_validate_parse: 16 callbacks suppressed [ 243.174168][T14517] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2374'. [ 243.195755][T14517] netlink: 'syz.4.2374': attribute type 1 has an invalid length. [ 243.215659][T14520] tipc: Resetting bearer [ 243.228619][T14519] tipc: Resetting bearer [ 243.384169][T14536] Unknown options in mask b7f2 [ 243.538234][T14549] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2384'. [ 243.594976][T14549] bond4 (unregistering): Released all slaves [ 243.694972][ T1161] tipc: Resetting bearer [ 243.978596][T14573] 8021q: VLANs not supported on gre0 [ 244.414962][T14598] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2396'. [ 244.440716][T14598] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2396'. [ 244.491496][T14598] gretap2: entered promiscuous mode [ 244.501745][T14598] gretap2: entered allmulticast mode [ 244.753757][T14617] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2399'. [ 244.814153][T14617] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2399'. [ 244.861643][T14617] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2399'. [ 245.021176][T14627] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2403'. [ 245.053214][T14635] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2407'. [ 245.298587][T14656] netlink: 'syz.0.2412': attribute type 5 has an invalid length. [ 245.381315][ T52] Bluetooth: hci4: command 0x0405 tx timeout [ 245.388244][T14663] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 245.464404][T14665] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2416'. [ 245.554673][T14666] netlink: 'syz.4.2411': attribute type 10 has an invalid length. [ 245.777689][T14689] tipc: Enabling of bearer rejected, already enabled [ 245.807240][T14689] syzkaller1: entered promiscuous mode [ 245.813070][T14689] syzkaller1: entered allmulticast mode [ 245.828174][T14693] IPv6: sit1: Disabled Multicast RS [ 245.929376][T14700] netlink: 'syz.0.2428': attribute type 29 has an invalid length. [ 246.320541][T14721] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 246.395583][T14727] netlink: 'syz.4.2436': attribute type 9 has an invalid length. [ 246.443833][T14730] syzkaller1: entered promiscuous mode [ 246.449437][T14730] syzkaller1: entered allmulticast mode [ 247.056601][T14779] netlink: 'syz.2.2448': attribute type 1 has an invalid length. [ 247.289760][T14795] IPv6: NLM_F_REPLACE set, but no existing node found! [ 247.328967][T14791] netlink: 'syz.0.2454': attribute type 6 has an invalid length. [ 248.224308][T14854] tipc: Enabled bearer , priority 0 [ 248.238625][T14859] syzkaller0: entered promiscuous mode [ 248.247658][T14859] syzkaller0: entered allmulticast mode [ 248.297704][T14846] tipc: Resetting bearer [ 248.344171][T14845] tipc: Resetting bearer [ 248.432761][T14845] tipc: Disabling bearer [ 248.538115][T14874] __nla_validate_parse: 14 callbacks suppressed [ 248.538132][T14874] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2476'. [ 248.613189][T14881] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2479'. [ 248.650083][T14881] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2479'. [ 248.670733][T14881] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2479'. [ 248.710392][T14881] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2479'. [ 248.758904][T14894] netlink: 'syz.2.2480': attribute type 21 has an invalid length. [ 248.786707][T14894] netlink: 'syz.2.2480': attribute type 6 has an invalid length. [ 248.801825][T14894] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2480'. [ 248.836028][T14900] netlink: 256 bytes leftover after parsing attributes in process `syz.0.2485'. [ 248.936584][T14910] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2482'. [ 248.991134][T14913] netlink: 'syz.2.2486': attribute type 29 has an invalid length. [ 249.029344][T14913] netlink: 'syz.2.2486': attribute type 29 has an invalid length. [ 249.048508][T14913] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2486'. [ 249.331336][T14927] dvmrp0: entered allmulticast mode [ 249.338292][T14927] dvmrp0: left allmulticast mode [ 249.362380][T14927] vlan1: left allmulticast mode [ 249.370296][T14927] veth0_vlan: left allmulticast mode [ 249.376098][T14934] ip6t_srh: unknown srh invflags 4000 [ 249.390730][T14939] netlink: 'syz.0.2490': attribute type 11 has an invalid length. [ 249.413949][T14939] netlink: 228 bytes leftover after parsing attributes in process `syz.0.2490'. [ 249.546755][T14942] syzkaller0: entered promiscuous mode [ 249.563387][T14942] syzkaller0: entered allmulticast mode [ 249.662076][T14952] netlink: 'syz.1.2495': attribute type 1 has an invalid length. [ 249.761498][T14967] netlink: 'syz.1.2495': attribute type 1 has an invalid length. [ 249.770551][T14952] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR [ 250.053630][T14981] netlink: 'syz.2.2502': attribute type 10 has an invalid length. [ 250.092262][T14981] bond0: (slave geneve1): Enslaving as an active interface with an up link [ 250.105995][ T1145] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.115088][ T1145] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.124174][ T36] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.144998][ T36] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.181053][T14983] tipc: Resetting bearer [ 250.194507][T14982] tipc: Resetting bearer [ 250.356097][T15001] netlink: 'syz.0.2509': attribute type 1 has an invalid length. [ 251.141102][ T13] tipc: Resetting bearer [ 251.539989][T15079] bond0: entered allmulticast mode [ 251.672273][T15086] IPv6: sit2: Disabled Multicast RS [ 251.682456][T15086] sit2: entered allmulticast mode [ 251.755224][T15092] 8021q: adding VLAN 0 to HW filter on device bond4 [ 251.798063][T15098] bond4: (slave veth15): Enslaving as an active interface with a down link [ 251.885805][T15092] veth17: entered promiscuous mode [ 251.908866][T15092] bond4: (slave veth17): Enslaving as an active interface with a down link [ 251.963891][T15098] vlan0: entered allmulticast mode [ 251.974371][T15098] bond4: entered allmulticast mode [ 251.985027][T15098] bond4: (slave vlan0): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 252.249764][T15118] sctp: [Deprecated]: syz.0.2543 (pid 15118) Use of int in maxseg socket option. [ 252.249764][T15118] Use struct sctp_assoc_value instead [ 252.458274][T15127] validate_nla: 1 callbacks suppressed [ 252.458293][T15127] netlink: 'syz.3.2541': attribute type 8 has an invalid length. [ 252.506733][T15136] syzkaller0: entered promiscuous mode [ 252.523263][T15136] syzkaller0: entered allmulticast mode [ 252.807111][T15155] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 253.007313][T15164] netlink: 'syz.4.2556': attribute type 10 has an invalid length. [ 253.019178][T15170] nft_compat: unsupported protocol 0 [ 253.479325][T15205] netlink: 'syz.3.2567': attribute type 11 has an invalid length. [ 253.498543][T15204] gretap1: entered promiscuous mode [ 253.505127][T15204] gretap1: entered allmulticast mode [ 253.558057][T15207] tap0: tun_chr_ioctl cmd 1074025672 [ 253.565032][T15207] tap0: ignored: set checksum disabled [ 253.588120][T15207] sctp: [Deprecated]: syz.1.2568 (pid 15207) Use of int in max_burst socket option. [ 253.588120][T15207] Use struct sctp_assoc_value instead [ 253.692445][T15215] __nla_validate_parse: 17 callbacks suppressed [ 253.692461][T15215] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2569'. [ 253.779937][T15224] sctp: [Deprecated]: syz.1.2574 (pid 15224) Use of int in max_burst socket option. [ 253.779937][T15224] Use struct sctp_assoc_value instead [ 253.900968][T15235] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2577'. [ 253.944875][T15237] delete_channel: no stack [ 253.992080][T15240] netlink: 'syz.3.2579': attribute type 11 has an invalid length. [ 254.016580][T15237] lo speed is unknown, defaulting to 1000 [ 254.036969][T15240] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2579'. [ 254.061340][T15242] netlink: 'syz.2.2580': attribute type 1 has an invalid length. [ 254.074021][T15244] macvtap2: entered allmulticast mode [ 254.079540][T15244] veth0_macvtap: entered allmulticast mode [ 254.199035][T15242] 8021q: adding VLAN 0 to HW filter on device bond9 [ 254.282173][T15251] bond9: (slave bridge4): making interface the new active one [ 254.293762][T15251] bond9: (slave bridge4): Enslaving as an active interface with an up link [ 254.400277][T15242] bond9: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 254.456445][T15269] netlink: 256 bytes leftover after parsing attributes in process `syz.0.2588'. [ 254.603237][T15278] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2590'. [ 254.788059][T15284] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2593'. [ 254.816595][T15284] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2593'. [ 254.830891][T15288] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2594'. [ 254.843827][T15288] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2594'. [ 254.965424][T15293] tipc: Resetting bearer [ 255.169290][T15291] tipc: Resetting bearer [ 255.339816][ T36] tipc: Resetting bearer [ 255.646665][T15337] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2607'. [ 255.684049][T15339] netlink: 'syz.3.2606': attribute type 11 has an invalid length. [ 256.411522][T15385] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 256.714898][T15408] netlink: 'syz.1.2628': attribute type 1 has an invalid length. [ 256.724398][ T30] audit: type=1804 audit(1760901509.118:3): pid=15411 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.2629" name="/newroot/476/cgroup.controllers" dev="tmpfs" ino=2441 res=1 errno=0 [ 256.761977][ T30] audit: type=1800 audit(1760901509.148:4): pid=15411 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2629" name="cgroup.controllers" dev="tmpfs" ino=2441 res=0 errno=0 [ 257.039934][T15430] sctp: [Deprecated]: syz.2.2633 (pid 15430) Use of struct sctp_assoc_value in delayed_ack socket option. [ 257.039934][T15430] Use struct sctp_sack_info instead [ 257.078784][ T12] nci: nci_rf_discover_ntf_packet: unsupported rf_tech_and_mode 0x16 [ 258.019535][T15491] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 258.173158][T15503] lo: entered promiscuous mode [ 258.178389][T15503] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 258.207398][T15503] netlink: 'syz.1.2655': attribute type 9 has an invalid length. [ 258.544063][T15529] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 258.713412][T15536] __nla_validate_parse: 19 callbacks suppressed [ 258.713434][T15536] netlink: 148 bytes leftover after parsing attributes in process `syz.4.2663'. [ 258.921724][T15550] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2667'. [ 258.944225][T15550] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2667'. [ 258.964172][T15550] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2667'. [ 258.996067][T15545] netlink: 288 bytes leftover after parsing attributes in process `syz.2.2666'. [ 259.073605][T15558] syzkaller0: entered promiscuous mode [ 259.079116][T15558] syzkaller0: entered allmulticast mode [ 259.088484][T15564] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2670'. [ 259.091669][T15562] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2671'. [ 259.259096][T15577] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 259.306140][T15577] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 261.195480][T15601] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2681'. [ 261.212515][T15597] netlink: 64138 bytes leftover after parsing attributes in process `syz.1.2679'. [ 261.461180][T15614] ksmbd: Unknown IPC event: 3, ignore. [ 261.468794][T15612] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 329.456791][T15639] tipc: Resetting bearer [ 329.531516][T15648] netlink: 'syz.1.2688': attribute type 8 has an invalid length. [ 329.556928][T15648] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2688'. [ 329.589086][T15656] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2690'. [ 329.677231][T15638] tipc: Resetting bearer [ 329.703319][T15663] tc_dump_action: action bad kind [ 330.007559][T15678] netlink: 'syz.3.2698': attribute type 4 has an invalid length. [ 330.114542][T15685] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 330.451723][T15708] netlink: 256 bytes leftover after parsing attributes in process `syz.1.2712'. [ 330.476783][T15708] netlink: 'syz.1.2712': attribute type 1 has an invalid length. [ 330.488598][T15710] xt_cluster: you have exceeded the maximum number of cluster nodes (37482740 > 32) [ 330.507849][T15708] 8021q: adding VLAN 0 to HW filter on device bond8 [ 330.517940][T15708] netlink: 'syz.1.2712': attribute type 1 has an invalid length. [ 330.538109][ T60] tipc: Resetting bearer [ 330.669102][T15728] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2718'. [ 330.737182][T15731] netlink: 'syz.1.2719': attribute type 1 has an invalid length. [ 330.772579][T15731] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 330.979561][T15753] xt_CT: You must specify a L4 protocol and not use inversions on it [ 331.022992][T15758] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2727'. [ 331.025733][T15756] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2724'. [ 331.032892][T15755] tipc: Resetting bearer [ 331.035042][T15755] tipc: Resetting bearer [ 331.093205][T15759] xt_hashlimit: invalid rate [ 331.182537][T15747] tipc: Resetting bearer [ 331.217576][T15765] udevd[15765]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 331.228747][T15770] tipc: Enabling of bearer rejected, failed to enable media [ 331.249228][T15769] xt_l2tp: unknown flags: 10 [ 331.310038][T15661] udevd[15661]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 331.466846][T15770] syzkaller0: entered promiscuous mode [ 331.473610][T15770] syzkaller0: entered allmulticast mode [ 331.484657][T15779] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2733'. [ 331.501816][T15785] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2735'. [ 331.567633][ T13] tipc: Resetting bearer [ 331.814668][T15804] xt_TPROXY: Can be used only with -p tcp or -p udp [ 331.952733][T15807] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2739'. [ 332.004525][T15814] netlink: 'syz.1.2741': attribute type 30 has an invalid length. [ 332.026793][T15814] bond9: option arp_missed_max: invalid value (0) [ 332.034132][T15814] bond9: option arp_missed_max: allowed values 1 - 255 [ 332.042743][T15814] bond9 (unregistering): Released all slaves [ 332.275855][T15803] netlink: 'syz.2.2739': attribute type 1 has an invalid length. [ 332.297057][T15803] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2739'. [ 332.452108][T15826] tipc: Resetting bearer [ 332.900652][T15852] openvswitch: netlink: IP tunnel dst address not specified [ 332.927735][T15825] tipc: Resetting bearer [ 332.992409][T15858] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 333.049276][T15863] tipc: Resetting bearer [ 333.063122][T15863] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 333.095622][T15862] tipc: Resetting bearer [ 333.263166][T15873] tipc: Resetting bearer [ 333.304237][T15873] syzkaller0: left promiscuous mode [ 333.318587][T15872] tipc: Resetting bearer [ 333.515430][ T36] nci: nci_rf_discover_ntf_packet: unsupported rf_tech_and_mode 0x16 [ 333.630339][ T13] tipc: Resetting bearer [ 334.141370][T15931] netlink: 'syz.4.2775': attribute type 13 has an invalid length. [ 334.149312][T15931] netlink: 'syz.4.2775': attribute type 17 has an invalid length. [ 334.172849][T15931] C: left promiscuous mode [ 334.188193][T15931] tunl0: left promiscuous mode [ 334.209366][T15931] erspan0: left promiscuous mode [ 334.248397][T15931] 8021q: adding VLAN 0 to HW filter on device bond0 [ 334.256804][T15931] 8021q: adding VLAN 0 to HW filter on device team0 [ 334.497540][T15936] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 334.528151][T15931] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 334.634699][T15946] __nla_validate_parse: 8 callbacks suppressed [ 334.634717][T15946] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2782'. [ 334.760557][T15947] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2780'. [ 334.783432][T15959] netlink: 'syz.1.2784': attribute type 1 has an invalid length. [ 334.866296][T15960] bond9 (unregistering): Released all slaves [ 334.906341][T15969] netlink: 'syz.3.2786': attribute type 21 has an invalid length. [ 334.914824][T15969] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2786'. [ 334.956571][T15973] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2787'. [ 335.008241][T15973] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2787'. [ 335.027828][T15973] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2787'. [ 335.086535][T15973] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2787'. [ 335.118581][T15978] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2787'. [ 335.212428][T15990] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2794'. [ 335.275343][T15982] bond10: (slave bond_slave_1): Device is not our slave [ 335.297747][T15982] bond10: option active_slave: invalid value (bond_slave_1) [ 335.317912][T15982] bond10 (unregistering): Released all slaves [ 335.331531][T15999] Bluetooth: hci0: invalid length 0, exp 2 for type 3 [ 335.517364][T16010] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2799'. [ 335.617258][T16019] bridge0: entered promiscuous mode [ 335.708997][T16021] vlan0: entered allmulticast mode [ 335.751443][T16021] bridge_slave_0: entered allmulticast mode [ 336.044800][T16059] syzkaller0: entered promiscuous mode [ 336.054746][T16059] syzkaller0: entered allmulticast mode [ 336.942475][T16100] netlink: 'syz.0.2824': attribute type 12 has an invalid length. [ 336.961172][T16102] netlink: 'syz.0.2824': attribute type 12 has an invalid length. [ 336.969026][T16102] netlink: 'syz.0.2824': attribute type 11 has an invalid length. [ 336.995677][T16100] netlink: 'syz.0.2824': attribute type 11 has an invalid length. [ 337.062280][ T5842] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 337.078290][ T5842] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 337.087205][ T5842] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 337.095684][ T5842] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 337.103803][ T5842] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 337.254170][T16106] lo speed is unknown, defaulting to 1000 [ 337.887789][T16157] IPVS: set_ctl: invalid protocol: 29 10.1.1.2:20002 [ 337.969720][T16106] chnl_net:caif_netlink_parms(): no params data found [ 338.172453][T16163] lo speed is unknown, defaulting to 1000 [ 338.237041][T16106] bridge0: port 1(bridge_slave_0) entered blocking state [ 338.290351][T16106] bridge0: port 1(bridge_slave_0) entered disabled state [ 338.297753][T16106] bridge_slave_0: entered allmulticast mode [ 338.312847][T16106] bridge_slave_0: entered promiscuous mode [ 338.367111][T16106] bridge0: port 2(bridge_slave_1) entered blocking state [ 338.389256][T16106] bridge0: port 2(bridge_slave_1) entered disabled state [ 338.410098][T16106] bridge_slave_1: entered allmulticast mode [ 338.424613][T16106] bridge_slave_1: entered promiscuous mode [ 338.589023][T16106] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 338.615575][T16106] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 338.728240][T16106] team0: Port device team_slave_0 added [ 338.752381][T16106] team0: Port device team_slave_1 added [ 338.766522][T16212] sctp: [Deprecated]: syz.2.2854 (pid 16212) Use of int in max_burst socket option. [ 338.766522][T16212] Use struct sctp_assoc_value instead [ 338.788195][T16213] sctp: [Deprecated]: syz.2.2854 (pid 16213) Use of int in max_burst socket option. [ 338.788195][T16213] Use struct sctp_assoc_value instead [ 338.853283][T16106] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 338.872601][T16106] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 338.908499][T16106] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 338.978001][T16106] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 339.038593][T16106] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 339.066997][T16106] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 339.220359][ T5842] Bluetooth: hci5: command tx timeout [ 339.292055][T16106] hsr_slave_0: entered promiscuous mode [ 339.339685][T16106] hsr_slave_1: entered promiscuous mode [ 339.471760][T16246] tls_set_device_offload: netdev not found [ 339.686129][T16265] netlink: 'syz.4.2866': attribute type 9 has an invalid length. [ 339.843046][T16270] __nla_validate_parse: 25 callbacks suppressed [ 339.843063][T16270] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2868'. [ 339.922815][T16275] sctp: [Deprecated]: syz.2.2870 (pid 16275) Use of int in maxseg socket option. [ 339.922815][T16275] Use struct sctp_assoc_value instead [ 339.968751][T16275] netlink: 'syz.2.2870': attribute type 8 has an invalid length. [ 340.112679][T16279] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2871'. [ 340.134652][T16281] bridge_slave_0: invalid flags given to default FDB implementation [ 340.143196][T16284] IPv6: NLM_F_CREATE should be specified when creating new route [ 340.326923][T16106] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 340.340095][T16106] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.432829][T16299] netlink: 'syz.0.2879': attribute type 3 has an invalid length. [ 340.435371][T16295] netlink: 'syz.2.2876': attribute type 22 has an invalid length. [ 340.449480][T16295] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2876'. [ 340.458733][T16299] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2879'. [ 340.459895][T16301] Cannot find add_set index 80 as target [ 340.490682][T16295] netlink: 'syz.2.2876': attribute type 22 has an invalid length. [ 340.539944][T16106] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 340.543003][T16295] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2876'. [ 340.551170][T16106] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.657930][T16106] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 340.670500][T16106] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.806090][T16106] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 340.830740][T16106] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.152445][T16106] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 341.174701][T16106] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 341.197185][T16106] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 341.208278][T16340] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2888'. [ 341.219781][T16340] netlink: 'syz.0.2888': attribute type 33 has an invalid length. [ 341.224065][T16106] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 341.228909][T16340] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2888'. [ 341.300753][ T5842] Bluetooth: hci5: command tx timeout [ 341.382882][T16106] 8021q: adding VLAN 0 to HW filter on device bond0 [ 341.421986][T16353] xfrm2: entered allmulticast mode [ 341.439923][T16106] 8021q: adding VLAN 0 to HW filter on device team0 [ 341.452586][T16355] netlink: 'syz.1.2892': attribute type 21 has an invalid length. [ 341.463098][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 341.470441][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 341.482263][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 341.489431][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 341.499911][T16355] netlink: 'syz.1.2892': attribute type 6 has an invalid length. [ 341.509192][T16355] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2892'. [ 341.635292][T16363] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 341.653955][T16363] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 341.871576][T16106] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 341.881127][T16374] netem: incorrect gi model size [ 341.886453][T16374] netem: change failed [ 341.996375][T16381] xt_l2tp: v2 doesn't support IP mode [ 342.037990][T16106] veth0_vlan: entered promiscuous mode [ 342.078357][T16106] veth1_vlan: entered promiscuous mode [ 342.177060][T16106] veth0_macvtap: entered promiscuous mode [ 342.202716][T16106] veth1_macvtap: entered promiscuous mode [ 342.242856][T16106] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 342.274848][T16106] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 342.313346][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.326845][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.376719][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.398571][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.441297][T16406] netlink: 'syz.0.2904': attribute type 2 has an invalid length. [ 342.450246][T16406] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2904'. [ 342.709016][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 342.727254][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 342.783371][ T3517] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 342.799431][ T3517] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 342.951444][T16416] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2906'. [ 343.391151][T16426] netlink: 'syz.2.2908': attribute type 10 has an invalid length. [ 343.404097][ T5842] Bluetooth: hci5: command tx timeout [ 343.424795][T16426] 8021q: adding VLAN 0 to HW filter on device team0 [ 343.433707][T16426] bond0: (slave team0): Enslaving as an active interface with an up link [ 343.567118][T16428] bond1: option packets_per_slave: invalid value (18446744073709551615) [ 343.622001][T16428] bond1: option packets_per_slave: allowed values 0 - 65535 [ 343.659858][T16428] bond1 (unregistering): Released all slaves [ 344.045292][ T52] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 344.056160][ T52] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 344.066024][ T52] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 344.080705][ T52] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 344.103435][ T52] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 344.174807][T16447] lo speed is unknown, defaulting to 1000 [ 344.461728][T16467] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 344.854975][T16493] __nla_validate_parse: 6 callbacks suppressed [ 344.854992][T16493] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2929'. [ 344.855659][T16495] Bluetooth: hci0: unsupported parameter 33553 [ 344.876906][T16495] Bluetooth: hci0: invalid length 5, exp 2 for type 8 [ 345.046671][T16447] chnl_net:caif_netlink_parms(): no params data found [ 345.072768][T16502] netlink: 'syz.0.2932': attribute type 1 has an invalid length. [ 345.139570][T16502] netlink: 'syz.0.2932': attribute type 4 has an invalid length. [ 345.141838][T16509] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2934'. [ 345.416972][T15661] udevd[15661]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 345.443206][T16521] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2936'. [ 345.463888][ T5842] Bluetooth: hci5: command tx timeout [ 345.483457][T16447] bridge0: port 1(bridge_slave_0) entered blocking state [ 345.494623][T16447] bridge0: port 1(bridge_slave_0) entered disabled state [ 345.503954][T16447] bridge_slave_0: entered allmulticast mode [ 345.512108][T16447] bridge_slave_0: entered promiscuous mode [ 345.521161][T16447] bridge0: port 2(bridge_slave_1) entered blocking state [ 345.528288][T16447] bridge0: port 2(bridge_slave_1) entered disabled state [ 345.536189][T16447] bridge_slave_1: entered allmulticast mode [ 345.552304][T16447] bridge_slave_1: entered promiscuous mode [ 345.824713][T16542] veth0_to_bond: entered allmulticast mode [ 345.842642][T16549] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2941'. [ 345.947541][T16447] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 345.974616][T16447] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 345.997351][T16561] sctp: [Deprecated]: syz.4.2945 (pid 16561) Use of int in maxseg socket option. [ 345.997351][T16561] Use struct sctp_assoc_value instead [ 346.108399][T16447] team0: Port device team_slave_0 added [ 346.131566][T16447] team0: Port device team_slave_1 added [ 346.180338][ T5842] Bluetooth: hci4: command tx timeout [ 346.275134][T16447] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 346.282305][T16447] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 346.309705][T16447] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 346.310961][T16577] netlink: 'syz.2.2948': attribute type 17 has an invalid length. [ 346.325122][T16447] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 346.339787][T16447] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 346.368108][T16577] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2948'. [ 346.377918][T16447] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 346.389280][T16577] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2948'. [ 346.500471][ T5842] Bluetooth: hci0: command tx timeout [ 346.526327][T16577] gretap0: entered promiscuous mode [ 346.552453][T16577] gretap0: left promiscuous mode [ 346.570900][T16447] hsr_slave_0: entered promiscuous mode [ 346.577863][T16447] hsr_slave_1: entered promiscuous mode [ 346.585159][T16447] debugfs: 'hsr0' already exists in 'hsr' [ 346.591341][T16447] Cannot create hsr debugfs directory [ 346.591657][T16593] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2952'. [ 346.770407][T16600] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2956'. [ 346.805247][T16600] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2956'. [ 347.131284][T16625] netlink: 'syz.2.2965': attribute type 1 has an invalid length. [ 347.199405][T16625] 8021q: adding VLAN 0 to HW filter on device bond10 [ 347.411744][T16447] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 347.492118][T16641] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2967'. [ 347.504384][T16447] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 347.524407][T16447] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 347.543860][T16447] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 347.651173][T16658] tipc: Enabling of bearer rejected, failed to enable media [ 347.669370][T16658] gre1: entered promiscuous mode [ 347.674693][T16658] gre1: entered allmulticast mode [ 347.751943][T16664] syzkaller1: entered promiscuous mode [ 347.777744][T16664] syzkaller1: entered allmulticast mode [ 347.889832][T16669] bond1: option miimon: invalid value (18446744073709551585) [ 347.898006][T16669] bond1: option miimon: allowed values 0 - 2147483647 [ 347.908974][T16669] bond1 (unregistering): Released all slaves [ 348.006467][T16447] 8021q: adding VLAN 0 to HW filter on device bond0 [ 348.064395][T16447] 8021q: adding VLAN 0 to HW filter on device team0 [ 348.089411][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 348.096658][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 348.135914][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 348.143178][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 348.270826][ T5842] Bluetooth: hci4: command tx timeout [ 348.495966][T16703] xt_bpf: check failed: parse error [ 348.637944][T16447] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 348.722904][T16447] veth0_vlan: entered promiscuous mode [ 348.739694][T16447] veth1_vlan: entered promiscuous mode [ 348.787081][T16447] veth0_macvtap: entered promiscuous mode [ 348.819233][T16447] veth1_macvtap: entered promiscuous mode [ 348.852590][T16447] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 348.878705][T16447] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 348.895927][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.916354][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.927395][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.953166][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.105176][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 349.136443][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 349.196874][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 349.215591][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 349.480744][T16745] netlink: 'syz.3.2995': attribute type 1 has an invalid length. [ 350.124600][T16776] __nla_validate_parse: 11 callbacks suppressed [ 350.124620][T16776] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3004'. [ 350.174847][T16774] pim6reg1: entered promiscuous mode [ 350.216171][T16774] pim6reg1: entered allmulticast mode [ 350.344570][ T52] Bluetooth: hci4: command tx timeout [ 350.353670][ T52] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 350.365723][ T52] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 350.374494][ T52] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 350.386306][ T52] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 350.409719][T16792] netlink: 'syz.0.3010': attribute type 13 has an invalid length. [ 350.424272][ T52] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 350.511894][T16792] veth0_macvtap: left promiscuous mode [ 350.533469][T16792] macvtap0: entered allmulticast mode [ 350.564647][T16792] macvtap0: refused to change device tx_queue_len [ 350.656453][ T1145] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 350.700418][ T1145] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.769193][T16816] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3016'. [ 350.908723][T16825] netlink: 'syz.1.3018': attribute type 30 has an invalid length. [ 350.939120][T16828] netlink: 14436 bytes leftover after parsing attributes in process `syz.0.3019'. [ 350.949457][T16785] lo speed is unknown, defaulting to 1000 [ 350.959602][ T1145] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 350.970766][T16828] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 350.983124][ T1145] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.016144][T16832] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3020'. [ 351.033535][T16833] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3021'. [ 351.255766][ T1145] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 351.310522][ T1145] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.423943][ T1145] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 351.466536][ T1145] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.817169][T16875] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3028'. [ 351.873145][T16875] bridge0: entered promiscuous mode [ 351.879019][T16875] macsec1: entered promiscuous mode [ 351.879073][T16880] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3028'. [ 351.885428][T16875] macsec1: entered allmulticast mode [ 351.900349][T16875] bridge0: entered allmulticast mode [ 351.907366][T16875] bridge0: port 3(macsec1) entered blocking state [ 351.914208][T16875] bridge0: port 3(macsec1) entered disabled state [ 351.923437][T16875] bridge0: left allmulticast mode [ 351.929242][T16875] bridge0: left promiscuous mode [ 351.932515][T16884] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3029'. [ 351.987185][T16877] netlink: 'syz.3.3029': attribute type 27 has an invalid length. [ 351.995960][T16877] netlink: 'syz.3.3029': attribute type 4 has an invalid length. [ 351.999555][T16885] tipc: Enabled bearer , priority 0 [ 352.014586][T16877] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3029'. [ 352.047116][ T5892] IPVS: starting estimator thread 0... [ 352.087178][T16889] tipc: Failed to remove unknown binding: 66,1,1/0:3070344458/3070344460 [ 352.153111][T16887] IPVS: using max 31 ests per chain, 74400 per kthread [ 352.163241][T16891] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3032'. [ 352.317723][ T1145] bond7 (unregistering): (slave gretap1): Releasing active interface [ 352.412850][ T1145] bond1 (unregistering): (slave geneve2): Releasing backup interface [ 352.420707][ T52] Bluetooth: hci4: command tx timeout [ 352.440496][ T1145] bond0 (unregistering): (slave geneve1): Releasing backup interface [ 352.500317][ T52] Bluetooth: hci0: command tx timeout [ 352.682090][ T1145] bond9 (unregistering): (slave bridge4): Releasing active interface [ 352.690308][ T1145] bond9 (unregistering): (slave bridge4): the permanent HWaddr of slave - 06:c5:7e:3c:7c:f5 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 352.885772][ T1145] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 352.895958][ T1145] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 352.907085][ T1145] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 352.917125][ T1145] bond0 (unregistering): (slave team0): Releasing backup interface [ 352.928070][ T1145] bond0 (unregistering): Released all slaves [ 352.941883][ T1145] bond1 (unregistering): Released all slaves [ 352.956734][ T1145] bond2 (unregistering): (slave bond3): Releasing backup interface [ 352.965587][ T1145] bond2 (unregistering): Released all slaves [ 353.069395][ T1145] bond3 (unregistering): Released all slaves [ 353.083580][ T1145] bond4 (unregistering): (slave veth3): Releasing backup interface [ 353.093268][ T1145] bond4 (unregistering): Released all slaves [ 353.107183][ T1145] bond5 (unregistering): Released all slaves [ 353.214930][ T1145] bond6 (unregistering): (slave wlan0): Releasing active interface [ 353.229171][ T1145] bond6 (unregistering): Released all slaves [ 353.324740][ T1145] bond7 (unregistering): Released all slaves [ 353.337087][ T1145] bond8 (unregistering): Released all slaves [ 353.433679][ T1145] bond9 (unregistering): (slave veth0_to_bond): Releasing active interface [ 353.443715][ T1145] bond9 (unregistering): Released all slaves [ 353.540081][ T1145] bond10 (unregistering): Released all slaves [ 353.557119][T16879] syzkaller0: entered promiscuous mode [ 353.562896][T16879] syzkaller0: entered allmulticast mode [ 353.575294][T16885] tipc: Resetting bearer [ 353.698796][T16878] tipc: Resetting bearer [ 353.747775][T16878] tipc: Disabling bearer [ 353.802555][ T1145] tipc: Left network mode [ 354.304265][T16785] chnl_net:caif_netlink_parms(): no params data found [ 354.581770][ T52] Bluetooth: hci0: command tx timeout [ 354.676314][T16953] xt_l2tp: missing protocol rule (udp|l2tpip) [ 354.779673][T16785] bridge0: port 1(bridge_slave_0) entered blocking state [ 354.799723][T16785] bridge0: port 1(bridge_slave_0) entered disabled state [ 354.808606][T16962] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 354.825064][T16785] bridge_slave_0: entered allmulticast mode [ 354.833659][T16785] bridge_slave_0: entered promiscuous mode [ 355.057650][T16962] can: request_module (can-proto-5) failed. [ 355.089788][T16963] 8021q: adding VLAN 0 to HW filter on device bond2 [ 355.143307][T16785] bridge0: port 2(bridge_slave_1) entered blocking state [ 355.154163][T16785] bridge0: port 2(bridge_slave_1) entered disabled state [ 355.167375][T16785] bridge_slave_1: entered allmulticast mode [ 355.178896][T16785] bridge_slave_1: entered promiscuous mode [ 355.199629][T16967] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link [ 355.229364][T16978] __nla_validate_parse: 4 callbacks suppressed [ 355.229380][T16978] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3047'. [ 355.245331][ T1145] hsr_slave_1: left promiscuous mode [ 355.259931][T16978] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3047'. [ 355.271972][T16978] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3047'. [ 355.289220][T16983] netlink: 'syz.3.3050': attribute type 10 has an invalid length. [ 355.778731][ T1145] team0 (unregistering): Port device team_slave_1 removed [ 355.827053][ T1145] team0 (unregistering): Port device team_slave_0 removed [ 356.164096][ T36] smc: removing ib device syz0 [ 356.314651][T16978] gretap0: entered promiscuous mode [ 356.341860][T16978] gretap0: left promiscuous mode [ 356.407226][T16785] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 356.492300][T16785] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 356.660439][ T5842] Bluetooth: hci0: command tx timeout [ 356.699533][T17009] netlink: 'syz.0.3056': attribute type 12 has an invalid length. [ 356.828132][T16785] team0: Port device team_slave_0 added [ 356.868262][T16785] team0: Port device team_slave_1 added [ 357.163947][T16785] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 357.191027][T16785] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 357.285096][T16785] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 357.416469][T16785] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 357.433729][T16785] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 357.503094][T16785] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 357.694236][T16785] hsr_slave_0: entered promiscuous mode [ 357.715396][T16785] hsr_slave_1: entered promiscuous mode [ 357.746172][T16785] debugfs: 'hsr0' already exists in 'hsr' [ 357.758915][T16785] Cannot create hsr debugfs directory [ 358.677851][ T1145] IPVS: stop unused estimator thread 0... [ 358.740278][ T5842] Bluetooth: hci0: command 0x0419 tx timeout [ 358.744796][T16785] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 358.759920][T16785] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 358.781833][T16785] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 358.811654][T16785] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 358.967279][T16785] 8021q: adding VLAN 0 to HW filter on device bond0 [ 358.992870][T16785] 8021q: adding VLAN 0 to HW filter on device team0 [ 359.007165][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 359.014367][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 359.034107][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 359.041307][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 359.290993][T16785] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 359.348562][T16785] veth0_vlan: entered promiscuous mode [ 359.367387][T16785] veth1_vlan: entered promiscuous mode [ 359.407975][T16785] veth0_macvtap: entered promiscuous mode [ 359.424376][T16785] veth1_macvtap: entered promiscuous mode [ 359.451580][T16785] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 359.467192][T16785] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 359.487111][ T1145] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.498288][ T1145] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.513136][ T1145] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.526751][ T1145] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.613571][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 359.624171][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 359.667936][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 359.676050][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 360.820467][ T5842] Bluetooth: hci0: command 0x0419 tx timeout [ 382.758757][T17135] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3068'. [ 382.759361][T17130] Bluetooth: MGMT ver 1.23 [ 382.946952][T17138] tipc: Enabled bearer , priority 10 [ 383.358854][ T52] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 383.377984][ T52] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 383.388704][ T52] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 383.398590][ T52] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 383.408173][ T52] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 383.578269][T17148] chnl_net:caif_netlink_parms(): no params data found [ 383.671005][T17148] bridge0: port 1(bridge_slave_0) entered blocking state [ 383.679899][T17148] bridge0: port 1(bridge_slave_0) entered disabled state [ 383.688142][T17148] bridge_slave_0: entered allmulticast mode [ 383.696470][T17148] bridge_slave_0: entered promiscuous mode [ 383.704845][T17148] bridge0: port 2(bridge_slave_1) entered blocking state [ 383.712079][T17148] bridge0: port 2(bridge_slave_1) entered disabled state [ 383.719270][T17148] bridge_slave_1: entered allmulticast mode [ 383.726881][T17148] bridge_slave_1: entered promiscuous mode [ 383.756254][T17148] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 383.767870][T17148] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 383.804093][T17148] team0: Port device team_slave_0 added [ 383.812009][T17148] team0: Port device team_slave_1 added [ 383.837543][T17148] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 383.844542][T17148] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 383.871083][T17148] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 383.885310][T17148] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 383.892379][T17148] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 383.919675][T17148] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 383.966345][T17148] hsr_slave_0: entered promiscuous mode [ 383.972727][T17148] hsr_slave_1: entered promiscuous mode [ 383.978849][T17148] debugfs: 'hsr0' already exists in 'hsr' [ 383.984860][T17148] Cannot create hsr debugfs directory [ 384.098253][T17148] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.114736][T17148] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 384.192026][T17148] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.203872][T17148] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 384.268679][T17148] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.279227][T17148] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 384.343300][T17148] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.353766][T17148] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 384.455060][T17148] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 384.465134][T17148] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 384.474884][T17148] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 384.484349][T17148] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 384.553437][T17148] 8021q: adding VLAN 0 to HW filter on device bond0 [ 384.575325][T17148] 8021q: adding VLAN 0 to HW filter on device team0 [ 384.587275][ T1145] bridge0: port 1(bridge_slave_0) entered blocking state [ 384.594434][ T1145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 384.609197][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 384.616327][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 384.774937][T17148] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 384.815373][T17148] veth0_vlan: entered promiscuous mode [ 384.828278][T17148] veth1_vlan: entered promiscuous mode [ 384.853915][T17148] veth0_macvtap: entered promiscuous mode [ 384.864891][T17148] veth1_macvtap: entered promiscuous mode [ 384.884448][T17148] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 384.900627][T17148] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 384.914868][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.925047][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.935337][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.944438][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 385.007899][ T3517] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 385.024629][ T3517] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 385.052338][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 385.060465][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 385.460491][ T52] Bluetooth: hci2: command tx timeout [ 387.540576][ T52] Bluetooth: hci2: command tx timeout [ 389.630860][ T52] Bluetooth: hci2: command tx timeout [ 391.700423][ T52] Bluetooth: hci2: command tx timeout [ 409.889660][T17178] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3070'. [ 409.935481][T17183] netlink: 'syz.0.3069': attribute type 1 has an invalid length. [ 410.247332][T17201] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3079'. [ 410.558985][T17201] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 410.572764][T17201] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 410.592491][T17201] bond0 (unregistering): Released all slaves [ 410.787885][T17238] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3089'. [ 410.787885][T17236] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3089'. [ 411.010253][T17259] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0001 with DS=0x2 [ 411.014230][T17252] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3094'. [ 411.234675][T17279] xt_hashlimit: max too large, truncated to 1048576 [ 412.086128][T17298] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 412.311051][T17309] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3108'. [ 413.767227][T17305] kthread_run failed with err -4 [ 413.958689][T17325] bond1: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 413.976139][T17325] bond1 (unregistering): Released all slaves [ 414.102231][T17336] syzkaller0: entered promiscuous mode [ 414.130193][T17336] syzkaller0: entered allmulticast mode [ 414.310587][T17353] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3118'. [ 414.738013][T17366] netlink: 84 bytes leftover after parsing attributes in process `syz.0.3122'. [ 414.862210][T17368] tipc: Started in network mode [ 414.867119][T17368] tipc: Node identity a67a88e37cb4, cluster identity 4711 [ 414.898110][T17368] tipc: Enabled bearer , priority 0 [ 414.905782][T17370] syzkaller0: entered promiscuous mode [ 414.911727][T17370] syzkaller0: entered allmulticast mode [ 414.965797][T17384] openvswitch: netlink: EtherType 0 is less than min 600 [ 414.974349][T17384] tipc: Enabling of bearer rejected, failed to enable media [ 415.020796][T17387] netlink: 'syz.3.3129': attribute type 2 has an invalid length. [ 415.037884][T17387] netlink: 'syz.3.3129': attribute type 3 has an invalid length. [ 415.047235][T17387] netlink: 80 bytes leftover after parsing attributes in process `syz.3.3129'. [ 415.080732][T17370] tipc: Resetting bearer [ 415.169581][T17370] tipc: Disabling bearer [ 415.622043][T17427] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3140'. [ 415.660640][T17427] netlink: 'syz.2.3140': attribute type 1 has an invalid length. [ 415.668461][T17427] netlink: 140 bytes leftover after parsing attributes in process `syz.2.3140'. [ 415.677658][T17427] netlink: 'syz.2.3140': attribute type 1 has an invalid length. [ 415.933439][T17443] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3144'. [ 416.040853][T17451] Cannot find add_set index 0 as target [ 416.064338][T17449] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3148'. [ 416.146662][T17460] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3150'. [ 416.424071][T17479] netlink: 'syz.1.3157': attribute type 1 has an invalid length. [ 416.435385][T17479] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3157'. [ 416.454005][T17481] tipc: Started in network mode [ 416.463582][T17481] tipc: Node identity , cluster identity 4711 [ 416.470508][T17481] tipc: Failed to obtain node identity [ 416.478221][T17481] tipc: Enabling of bearer rejected, failed to enable media [ 416.509639][T17483] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 416.528686][T17484] netlink: 165 bytes leftover after parsing attributes in process `syz.4.3154'. [ 416.718057][T17483] bridge0: port 2(bridge_slave_1) entered disabled state [ 416.725775][T17483] bridge0: port 1(bridge_slave_0) entered disabled state [ 416.736503][T17498] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3161'. [ 416.843997][T17483] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 416.857785][T17483] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 416.964765][T17487] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3159'. [ 416.974966][T17488] netlink: 'syz.3.3160': attribute type 9 has an invalid length. [ 416.995254][T17503] tipc: Started in network mode [ 416.995285][T17488] netlink: 'syz.3.3160': attribute type 9 has an invalid length. [ 417.023429][T17503] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 417.045579][T17503] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 417.054940][T17503] tipc: Enabled bearer , priority 10 [ 417.134994][ T36] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 417.169115][ T36] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 417.184378][ T36] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 417.205525][ T36] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 417.257685][ T36] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 417.284468][ T36] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 417.314313][ T36] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 417.335781][ T36] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 418.055733][T17564] netlink: 'syz.2.3183': attribute type 10 has an invalid length. [ 418.077001][T17568] netlink: 'syz.2.3183': attribute type 10 has an invalid length. [ 418.087191][T17568] batadv0: entered promiscuous mode [ 418.116550][T17568] batadv0: entered allmulticast mode [ 418.130543][T17568] bridge0: port 3(batadv0) entered blocking state [ 418.147342][T17568] bridge0: port 3(batadv0) entered disabled state [ 418.170266][T17171] tipc: Node number set to 1 [ 418.183924][T17576] netlink: 'syz.3.3185': attribute type 21 has an invalid length. [ 418.203347][ T36] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 418.213010][ T36] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 418.265588][T17577] xt_l2tp: missing protocol rule (udp|l2tpip) [ 418.518397][T17593] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 418.703634][T17609] bridge2: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 418.889652][T17615] bond3: option miimon: invalid value (18446744073709551585) [ 418.898938][T17615] bond3: option miimon: allowed values 0 - 2147483647 [ 418.913095][T17615] bond3 (unregistering): Released all slaves [ 418.944862][T17621] syzkaller0: entered promiscuous mode [ 418.951215][T17621] syzkaller0: entered allmulticast mode [ 419.423032][T17650] tipc: Enabled bearer , priority 0 [ 419.447387][T17650] syzkaller0: entered promiscuous mode [ 419.469097][T17650] syzkaller0: entered allmulticast mode [ 419.521893][T17650] tipc: Resetting bearer [ 419.536725][T17648] tipc: Resetting bearer [ 419.571184][T17648] tipc: Disabling bearer [ 419.616148][T17669] gtp0: entered promiscuous mode [ 419.625969][T17669] gtp0: entered allmulticast mode [ 419.859040][T17683] 8021q: adding VLAN 0 to HW filter on device ipvlan5 [ 419.866921][T17683] bond0: (slave ipvlan5): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 419.887852][ T30] audit: type=1107 audit(1760901672.278:5): pid=17676 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='ً5%UA٠0ltݕ/ 6򊨊' [ 420.176207][T17701] __nla_validate_parse: 13 callbacks suppressed [ 420.176219][T17701] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3223'. [ 420.448908][T17711] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 420.466717][T17712] netlink: 'syz.2.3228': attribute type 11 has an invalid length. [ 420.606558][T17706] veth3: entered promiscuous mode [ 420.616044][T17725] sock: sock_set_timeout: `syz.2.3232' (pid 17725) tries to set negative timeout [ 420.793922][T17739] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3233'. [ 420.893883][T17746] validate_nla: 1 callbacks suppressed [ 420.893901][T17746] netlink: 'syz.2.3239': attribute type 29 has an invalid length. [ 420.908848][T17746] netlink: 'syz.2.3239': attribute type 29 has an invalid length. [ 420.917850][T17746] netlink: 76 bytes leftover after parsing attributes in process `syz.2.3239'. [ 421.198018][T17760] syzkaller1: entered promiscuous mode [ 421.222922][T17760] syzkaller1: entered allmulticast mode [ 421.656020][T17775] netlink: 'syz.4.3249': attribute type 1 has an invalid length. [ 421.676503][T17775] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3249'. [ 422.196339][T17800] veth1_to_bond: entered allmulticast mode [ 422.251674][T17805] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3258'. [ 422.327565][T17798] veth1_to_bond: left allmulticast mode [ 422.507365][T17811] bridge0: port 2(bridge_slave_1) entered disabled state [ 422.515180][T17811] bridge0: port 1(bridge_slave_0) entered disabled state [ 422.746334][T17811] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 422.766336][T17811] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 422.870278][ T60] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 422.964556][ T60] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 423.014549][ T60] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 423.053198][T17832] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3265'. [ 423.061839][ T60] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 423.143083][T17836] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 423.169392][T17838] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3270'. [ 423.183224][T17839] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 423.360819][T17843] netlink: 'syz.2.3271': attribute type 23 has an invalid length. [ 423.663729][ T5827] syz_tun (unregistering): left allmulticast mode [ 423.777918][ T5842] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 423.789497][ T5842] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 423.798824][ T5842] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 423.811253][ T5842] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 423.814795][T17862] x_tables: duplicate underflow at hook 3 [ 423.824671][T17863] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3277'. [ 423.835247][ T5842] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 424.043413][ T13] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 424.085775][T17874] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3282'. [ 424.166524][ T13] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 424.189502][T17876] ------------[ cut here ]------------ [ 424.195365][T17876] WARNING: CPU: 1 PID: 17876 at net/ipv4/route.c:1270 ip_rt_bug+0x2c/0x110 [ 424.204063][T17876] Modules linked in: [ 424.208262][T17876] CPU: 1 UID: 0 PID: 17876 Comm: syz.3.3283 Not tainted syzkaller #0 PREEMPT(full) [ 424.217683][T17876] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 424.227805][T17876] RIP: 0010:ip_rt_bug+0x2c/0x110 [ 424.232897][T17876] Code: 1e fa 41 57 41 56 41 55 41 54 53 48 89 d3 e8 8b dd 08 f8 66 90 e8 84 dd 08 f8 31 ff 48 89 de ba 02 00 00 00 e8 d5 0d 6f ff 90 <0f> 0b 90 31 c0 5b 41 5c 41 5d 41 5e 41 5f e9 11 9e 97 01 cc f3 0f [ 424.252807][T17876] RSP: 0018:ffffc90003eaf180 EFLAGS: 00010286 [ 424.258898][T17876] RAX: 852183d146377500 RBX: ffff888055fdc8c0 RCX: 852183d146377500 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 424.266950][T17876] RDX: 0000000000000002 RSI: ffffffff8d7e845f RDI: ffffffff8bc077e0 [ 424.274994][T17876] RBP: 0000000000000001 R08: ffffffff8f9e1377 R09: 1ffffffff1f3c26e [ 424.283168][T17876] R10: dffffc0000000000 R11: fffffbfff1f3c26f R12: dffffc0000000000 [ 424.291271][T17876] R13: dffffc0000000000 R14: ffff888055fdc8c0 R15: ffff8881462fa580 [ 424.299257][T17876] FS: 00007f56fbc066c0(0000) GS:ffff888125e0c000(0000) knlGS:0000000000000000 [ 424.308247][T17876] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 424.314879][T17876] CR2: 0000200000000180 CR3: 0000000078c94000 CR4: 00000000003526f0 [ 424.322919][T17876] Call Trace: [ 424.326211][T17876] [ 424.329147][T17876] ip_push_pending_frames+0xbe/0x150 [ 424.334506][T17876] __icmp_send+0xfc3/0x1320 [ 424.339047][T17876] ? __icmp_send+0x1b9/0x1320 [ 424.343903][T17876] ? __pfx___icmp_send+0x10/0x10 [ 424.348885][T17876] ? ip_route_input_noref+0x98/0x250 [ 424.354246][T17876] ? __pfx_ip_route_input_noref+0x10/0x10 [ 424.359993][T17876] ? tcp_v4_early_demux+0x4b3/0x9a0 [ 424.365259][T17876] ip_options_compile+0x80/0xb0 [ 424.370157][T17876] ip_rcv_finish_core+0xaa2/0x1c00 [ 424.375298][T17876] ip_rcv_finish+0x14c/0x2f0 [ 424.379912][T17876] NF_HOOK+0x30c/0x3a0 [ 424.384054][T17876] ? __pfx_ip_rcv_finish+0x10/0x10 [ 424.389179][T17876] ? NF_HOOK+0x9a/0x3a0 [ 424.393392][T17876] ? __pfx_NF_HOOK+0x10/0x10 [ 424.398258][T17876] ? ip_rcv_core+0x7f7/0xd00 [ 424.402924][T17876] ? __pfx_ip_rcv_finish+0x10/0x10 [ 424.408062][T17876] ? __pfx_ip_rcv+0x10/0x10 [ 424.412668][T17876] __netif_receive_skb+0x143/0x380 [ 424.417802][T17876] ? netif_receive_skb+0x115/0x790 [ 424.422976][T17876] netif_receive_skb+0x1cb/0x790 [ 424.427930][T17876] ? __pfx___local_bh_disable_ip+0x10/0x10 [ 424.433799][T17876] ? __pfx_netif_receive_skb+0x10/0x10 [ 424.439284][T17876] ? tun_rx_batched+0x160/0x730 [ 424.444196][T17876] tun_rx_batched+0x1b9/0x730 [ 424.448899][T17876] ? __lock_acquire+0xab9/0xd20 [ 424.453811][T17876] ? __pfx_tun_rx_batched+0x10/0x10 [ 424.459086][T17876] ? tun_get_user+0x272f/0x3e90 [ 424.464019][T17876] tun_get_user+0x2b65/0x3e90 [ 424.468724][T17876] ? tun_get_user+0x6f6/0x3e90 [ 424.473660][T17876] ? tun_get_user+0x272f/0x3e90 [ 424.478533][T17876] ? aa_file_perm+0x44d/0x1550 [ 424.483358][T17876] ? __pfx_tun_get_user+0x10/0x10 [ 424.488417][T17876] ? ref_tracker_alloc+0x318/0x460 [ 424.493573][T17876] ? __lock_acquire+0xab9/0xd20 [ 424.498499][T17876] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 424.504019][T17876] ? tun_get+0x1c/0x2f0 [ 424.508200][T17876] ? tun_get+0x1c/0x2f0 [ 424.512406][T17876] ? tun_get+0x1c/0x2f0 [ 424.516582][T17876] tun_chr_write_iter+0x113/0x200 [ 424.521673][T17876] vfs_write+0x5c9/0xb30 [ 424.525934][T17876] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 424.531532][T17876] ? __pfx_vfs_write+0x10/0x10 [ 424.536315][T17876] ? __pfx_do_futex+0x10/0x10 [ 424.541069][T17876] ? put_files_struct+0x256/0x350 [ 424.546122][T17876] ksys_write+0x145/0x250 [ 424.550513][T17876] ? __pfx_ksys_write+0x10/0x10 [ 424.555513][T17876] ? do_syscall_64+0xbe/0xfa0 [ 424.560242][T17876] do_syscall_64+0xfa/0xfa0 [ 424.564750][T17876] ? lockdep_hardirqs_on+0x9c/0x150 [ 424.569957][T17876] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 424.576114][T17876] ? clear_bhb_loop+0x60/0xb0 [ 424.581016][T17876] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 424.586917][T17876] RIP: 0033:0x7f56fad8da7f [ 424.591384][T17876] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 424.611041][T17876] RSP: 002b:00007f56fbc06000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 424.619441][T17876] RAX: ffffffffffffffda RBX: 00007f56fafe5fa0 RCX: 00007f56fad8da7f [ 424.627473][T17876] RDX: 0000000000000046 RSI: 0000200000000400 RDI: 00000000000000c8 [ 424.635574][T17876] RBP: 00007f56fae11f91 R08: 0000000000000000 R09: 0000000000000000 [ 424.643629][T17876] R10: 0000000000000046 R11: 0000000000000293 R12: 0000000000000000 [ 424.651628][T17876] R13: 00007f56fafe6038 R14: 00007f56fafe5fa0 R15: 00007ffe37e5ef48 [ 424.659602][T17876] [ 424.662650][T17876] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 424.669949][T17876] CPU: 1 UID: 0 PID: 17876 Comm: syz.3.3283 Not tainted syzkaller #0 PREEMPT(full) [ 424.679302][T17876] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 424.689344][T17876] Call Trace: [ 424.692609][T17876] [ 424.695522][T17876] dump_stack_lvl+0x99/0x250 [ 424.700096][T17876] ? __asan_memcpy+0x40/0x70 [ 424.704677][T17876] ? __pfx_dump_stack_lvl+0x10/0x10 [ 424.709940][T17876] ? __pfx__printk+0x10/0x10 [ 424.714525][T17876] vpanic+0x237/0x6d0 [ 424.718492][T17876] ? __pfx_vpanic+0x10/0x10 [ 424.722999][T17876] panic+0xb9/0xc0 [ 424.726720][T17876] ? __pfx_panic+0x10/0x10 [ 424.731138][T17876] __warn+0x31b/0x4b0 [ 424.735108][T17876] ? ip_rt_bug+0x2c/0x110 [ 424.739438][T17876] ? ip_rt_bug+0x2c/0x110 [ 424.743753][T17876] report_bug+0x2be/0x4f0 [ 424.748070][T17876] ? ip_rt_bug+0x2c/0x110 [ 424.752396][T17876] ? ip_rt_bug+0x2c/0x110 [ 424.756724][T17876] ? ip_rt_bug+0x2e/0x110 [ 424.761334][T17876] handle_bug+0x84/0x160 [ 424.765573][T17876] exc_invalid_op+0x1a/0x50 [ 424.770063][T17876] asm_exc_invalid_op+0x1a/0x20 [ 424.774900][T17876] RIP: 0010:ip_rt_bug+0x2c/0x110 [ 424.779848][T17876] Code: 1e fa 41 57 41 56 41 55 41 54 53 48 89 d3 e8 8b dd 08 f8 66 90 e8 84 dd 08 f8 31 ff 48 89 de ba 02 00 00 00 e8 d5 0d 6f ff 90 <0f> 0b 90 31 c0 5b 41 5c 41 5d 41 5e 41 5f e9 11 9e 97 01 cc f3 0f [ 424.799443][T17876] RSP: 0018:ffffc90003eaf180 EFLAGS: 00010286 [ 424.805590][T17876] RAX: 852183d146377500 RBX: ffff888055fdc8c0 RCX: 852183d146377500 [ 424.813633][T17876] RDX: 0000000000000002 RSI: ffffffff8d7e845f RDI: ffffffff8bc077e0 [ 424.821593][T17876] RBP: 0000000000000001 R08: ffffffff8f9e1377 R09: 1ffffffff1f3c26e [ 424.829555][T17876] R10: dffffc0000000000 R11: fffffbfff1f3c26f R12: dffffc0000000000 [ 424.837513][T17876] R13: dffffc0000000000 R14: ffff888055fdc8c0 R15: ffff8881462fa580 [ 424.845512][T17876] ip_push_pending_frames+0xbe/0x150 [ 424.850796][T17876] __icmp_send+0xfc3/0x1320 [ 424.855305][T17876] ? __icmp_send+0x1b9/0x1320 [ 424.859979][T17876] ? __pfx___icmp_send+0x10/0x10 [ 424.865014][T17876] ? ip_route_input_noref+0x98/0x250 [ 424.870292][T17876] ? __pfx_ip_route_input_noref+0x10/0x10 [ 424.876003][T17876] ? tcp_v4_early_demux+0x4b3/0x9a0 [ 424.881196][T17876] ip_options_compile+0x80/0xb0 [ 424.886035][T17876] ip_rcv_finish_core+0xaa2/0x1c00 [ 424.891146][T17876] ip_rcv_finish+0x14c/0x2f0 [ 424.895730][T17876] NF_HOOK+0x30c/0x3a0 [ 424.899790][T17876] ? __pfx_ip_rcv_finish+0x10/0x10 [ 424.904894][T17876] ? NF_HOOK+0x9a/0x3a0 [ 424.909065][T17876] ? __pfx_NF_HOOK+0x10/0x10 [ 424.913647][T17876] ? ip_rcv_core+0x7f7/0xd00 [ 424.918338][T17876] ? __pfx_ip_rcv_finish+0x10/0x10 [ 424.923461][T17876] ? __pfx_ip_rcv+0x10/0x10 [ 424.927974][T17876] __netif_receive_skb+0x143/0x380 [ 424.933087][T17876] ? netif_receive_skb+0x115/0x790 [ 424.938182][T17876] netif_receive_skb+0x1cb/0x790 [ 424.943196][T17876] ? __pfx___local_bh_disable_ip+0x10/0x10 [ 424.948994][T17876] ? __pfx_netif_receive_skb+0x10/0x10 [ 424.954449][T17876] ? tun_rx_batched+0x160/0x730 [ 424.959291][T17876] tun_rx_batched+0x1b9/0x730 [ 424.963970][T17876] ? __lock_acquire+0xab9/0xd20 [ 424.968820][T17876] ? __pfx_tun_rx_batched+0x10/0x10 [ 424.974071][T17876] ? tun_get_user+0x272f/0x3e90 [ 424.978921][T17876] tun_get_user+0x2b65/0x3e90 [ 424.983600][T17876] ? tun_get_user+0x6f6/0x3e90 [ 424.988350][T17876] ? tun_get_user+0x272f/0x3e90 [ 424.993197][T17876] ? aa_file_perm+0x44d/0x1550 [ 424.997948][T17876] ? __pfx_tun_get_user+0x10/0x10 [ 425.003065][T17876] ? ref_tracker_alloc+0x318/0x460 [ 425.008157][T17876] ? __lock_acquire+0xab9/0xd20 [ 425.012994][T17876] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 425.018441][T17876] ? tun_get+0x1c/0x2f0 [ 425.022591][T17876] ? tun_get+0x1c/0x2f0 [ 425.026733][T17876] ? tun_get+0x1c/0x2f0 [ 425.030884][T17876] tun_chr_write_iter+0x113/0x200 [ 425.035896][T17876] vfs_write+0x5c9/0xb30 [ 425.040131][T17876] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 425.045667][T17876] ? __pfx_vfs_write+0x10/0x10 [ 425.050418][T17876] ? __pfx_do_futex+0x10/0x10 [ 425.055078][T17876] ? put_files_struct+0x256/0x350 [ 425.060106][T17876] ksys_write+0x145/0x250 [ 425.064443][T17876] ? __pfx_ksys_write+0x10/0x10 [ 425.069286][T17876] ? do_syscall_64+0xbe/0xfa0 [ 425.073962][T17876] do_syscall_64+0xfa/0xfa0 [ 425.078455][T17876] ? lockdep_hardirqs_on+0x9c/0x150 [ 425.083640][T17876] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 425.089705][T17876] ? clear_bhb_loop+0x60/0xb0 [ 425.094375][T17876] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 425.100269][T17876] RIP: 0033:0x7f56fad8da7f [ 425.104671][T17876] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 425.124262][T17876] RSP: 002b:00007f56fbc06000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 425.132665][T17876] RAX: ffffffffffffffda RBX: 00007f56fafe5fa0 RCX: 00007f56fad8da7f [ 425.140623][T17876] RDX: 0000000000000046 RSI: 0000200000000400 RDI: 00000000000000c8 [ 425.148694][T17876] RBP: 00007f56fae11f91 R08: 0000000000000000 R09: 0000000000000000 [ 425.156647][T17876] R10: 0000000000000046 R11: 0000000000000293 R12: 0000000000000000 [ 425.164623][T17876] R13: 00007f56fafe6038 R14: 00007f56fafe5fa0 R15: 00007ffe37e5ef48 [ 425.172612][T17876] [ 425.175963][T17876] Kernel Offset: disabled [ 425.180271][T17876] Rebooting in 86400 seconds..