last executing test programs: 1m3.253896025s ago: executing program 2 (id=755): r0 = socket$netlink(0x10, 0x3, 0xf) r1 = epoll_create1(0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x2, 0x1, 0x10}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$FS_IOC_SETFLAGS(r1, 0x40088a01, &(0x7f0000000000)=0x100) r2 = epoll_create1(0x0) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r5 = socket$rds(0x15, 0x5, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) bind$rds(r5, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r5, &(0x7f0000000000)={&(0x7f0000000040)={0x2, 0x0, @private=0xa010100}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000000300)=[{&(0x7f0000002640)=""/102389, 0x18ff5}], 0x1, 0x1903d}}], 0x48}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0xa4, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x7c, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x44, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_XOR={0xc, 0x5, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "94d7"}]}, @NFTA_BITWISE_MASK={0xc, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "8a95"}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x118}}, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x9, &(0x7f0000000000)=0xff, 0x4) getsockopt$inet_tcp_int(r7, 0x6, 0x9, 0x0, &(0x7f00000002c0)) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000f1b000/0x14000)=nil, 0x14000, 0x6, 0x28011, r8, 0xc6e9f000) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@bridge_newvlan={0x28, 0x70, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r11}, [@BRIDGE_VLANDB_ENTRY={0x10, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_TUNNEL_INFO={0x4, 0x4, 0x0, 0x1, @BRIDGE_VLANDB_TINFO_ID={0x8, 0x1, 0x34000}}}]}, 0x28}}, 0x0) mmap(&(0x7f0000867000/0x2000)=nil, 0x2000, 0x0, 0x11, r8, 0xffffe000) mmap(&(0x7f0000496000/0x2000)=nil, 0x2000, 0x0, 0x12, r4, 0x0) mmap(&(0x7f0000b1a000/0x2000)=nil, 0x2000, 0xc, 0x11, r3, 0xb10e8000) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800006, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x2000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000040)={0x1}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000340)={0xa000001c}) 53.083135578s ago: executing program 2 (id=755): r0 = socket$netlink(0x10, 0x3, 0xf) r1 = epoll_create1(0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x2, 0x1, 0x10}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$FS_IOC_SETFLAGS(r1, 0x40088a01, &(0x7f0000000000)=0x100) r2 = epoll_create1(0x0) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r5 = socket$rds(0x15, 0x5, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) bind$rds(r5, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r5, &(0x7f0000000000)={&(0x7f0000000040)={0x2, 0x0, @private=0xa010100}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000000300)=[{&(0x7f0000002640)=""/102389, 0x18ff5}], 0x1, 0x1903d}}], 0x48}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0xa4, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x7c, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x44, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_XOR={0xc, 0x5, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "94d7"}]}, @NFTA_BITWISE_MASK={0xc, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "8a95"}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x118}}, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x9, &(0x7f0000000000)=0xff, 0x4) getsockopt$inet_tcp_int(r7, 0x6, 0x9, 0x0, &(0x7f00000002c0)) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000f1b000/0x14000)=nil, 0x14000, 0x6, 0x28011, r8, 0xc6e9f000) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@bridge_newvlan={0x28, 0x70, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r11}, [@BRIDGE_VLANDB_ENTRY={0x10, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_TUNNEL_INFO={0x4, 0x4, 0x0, 0x1, @BRIDGE_VLANDB_TINFO_ID={0x8, 0x1, 0x34000}}}]}, 0x28}}, 0x0) mmap(&(0x7f0000867000/0x2000)=nil, 0x2000, 0x0, 0x11, r8, 0xffffe000) mmap(&(0x7f0000496000/0x2000)=nil, 0x2000, 0x0, 0x12, r4, 0x0) mmap(&(0x7f0000b1a000/0x2000)=nil, 0x2000, 0xc, 0x11, r3, 0xb10e8000) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800006, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x2000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000040)={0x1}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000340)={0xa000001c}) 40.502267698s ago: executing program 2 (id=755): r0 = socket$netlink(0x10, 0x3, 0xf) r1 = epoll_create1(0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x2, 0x1, 0x10}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$FS_IOC_SETFLAGS(r1, 0x40088a01, &(0x7f0000000000)=0x100) r2 = epoll_create1(0x0) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r5 = socket$rds(0x15, 0x5, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) bind$rds(r5, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r5, &(0x7f0000000000)={&(0x7f0000000040)={0x2, 0x0, @private=0xa010100}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000000300)=[{&(0x7f0000002640)=""/102389, 0x18ff5}], 0x1, 0x1903d}}], 0x48}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0xa4, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x7c, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x44, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_XOR={0xc, 0x5, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "94d7"}]}, @NFTA_BITWISE_MASK={0xc, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "8a95"}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x118}}, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x9, &(0x7f0000000000)=0xff, 0x4) getsockopt$inet_tcp_int(r7, 0x6, 0x9, 0x0, &(0x7f00000002c0)) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000f1b000/0x14000)=nil, 0x14000, 0x6, 0x28011, r8, 0xc6e9f000) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@bridge_newvlan={0x28, 0x70, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r11}, [@BRIDGE_VLANDB_ENTRY={0x10, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_TUNNEL_INFO={0x4, 0x4, 0x0, 0x1, @BRIDGE_VLANDB_TINFO_ID={0x8, 0x1, 0x34000}}}]}, 0x28}}, 0x0) mmap(&(0x7f0000867000/0x2000)=nil, 0x2000, 0x0, 0x11, r8, 0xffffe000) mmap(&(0x7f0000496000/0x2000)=nil, 0x2000, 0x0, 0x12, r4, 0x0) mmap(&(0x7f0000b1a000/0x2000)=nil, 0x2000, 0xc, 0x11, r3, 0xb10e8000) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800006, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x2000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000040)={0x1}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000340)={0xa000001c}) 30.364249528s ago: executing program 2 (id=755): r0 = socket$netlink(0x10, 0x3, 0xf) r1 = epoll_create1(0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x2, 0x1, 0x10}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$FS_IOC_SETFLAGS(r1, 0x40088a01, &(0x7f0000000000)=0x100) r2 = epoll_create1(0x0) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r5 = socket$rds(0x15, 0x5, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) bind$rds(r5, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r5, &(0x7f0000000000)={&(0x7f0000000040)={0x2, 0x0, @private=0xa010100}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000000300)=[{&(0x7f0000002640)=""/102389, 0x18ff5}], 0x1, 0x1903d}}], 0x48}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0xa4, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x7c, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x44, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_XOR={0xc, 0x5, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "94d7"}]}, @NFTA_BITWISE_MASK={0xc, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "8a95"}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x118}}, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x9, &(0x7f0000000000)=0xff, 0x4) getsockopt$inet_tcp_int(r7, 0x6, 0x9, 0x0, &(0x7f00000002c0)) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000f1b000/0x14000)=nil, 0x14000, 0x6, 0x28011, r8, 0xc6e9f000) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@bridge_newvlan={0x28, 0x70, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r11}, [@BRIDGE_VLANDB_ENTRY={0x10, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_TUNNEL_INFO={0x4, 0x4, 0x0, 0x1, @BRIDGE_VLANDB_TINFO_ID={0x8, 0x1, 0x34000}}}]}, 0x28}}, 0x0) mmap(&(0x7f0000867000/0x2000)=nil, 0x2000, 0x0, 0x11, r8, 0xffffe000) mmap(&(0x7f0000496000/0x2000)=nil, 0x2000, 0x0, 0x12, r4, 0x0) mmap(&(0x7f0000b1a000/0x2000)=nil, 0x2000, 0xc, 0x11, r3, 0xb10e8000) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800006, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x2000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000040)={0x1}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000340)={0xa000001c}) 19.731820877s ago: executing program 2 (id=755): r0 = socket$netlink(0x10, 0x3, 0xf) r1 = epoll_create1(0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x2, 0x1, 0x10}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$FS_IOC_SETFLAGS(r1, 0x40088a01, &(0x7f0000000000)=0x100) r2 = epoll_create1(0x0) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r5 = socket$rds(0x15, 0x5, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) bind$rds(r5, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r5, &(0x7f0000000000)={&(0x7f0000000040)={0x2, 0x0, @private=0xa010100}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000000300)=[{&(0x7f0000002640)=""/102389, 0x18ff5}], 0x1, 0x1903d}}], 0x48}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0xa4, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x7c, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x44, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_XOR={0xc, 0x5, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "94d7"}]}, @NFTA_BITWISE_MASK={0xc, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "8a95"}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x118}}, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x9, &(0x7f0000000000)=0xff, 0x4) getsockopt$inet_tcp_int(r7, 0x6, 0x9, 0x0, &(0x7f00000002c0)) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000f1b000/0x14000)=nil, 0x14000, 0x6, 0x28011, r8, 0xc6e9f000) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@bridge_newvlan={0x28, 0x70, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r11}, [@BRIDGE_VLANDB_ENTRY={0x10, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_TUNNEL_INFO={0x4, 0x4, 0x0, 0x1, @BRIDGE_VLANDB_TINFO_ID={0x8, 0x1, 0x34000}}}]}, 0x28}}, 0x0) mmap(&(0x7f0000867000/0x2000)=nil, 0x2000, 0x0, 0x11, r8, 0xffffe000) mmap(&(0x7f0000496000/0x2000)=nil, 0x2000, 0x0, 0x12, r4, 0x0) mmap(&(0x7f0000b1a000/0x2000)=nil, 0x2000, 0xc, 0x11, r3, 0xb10e8000) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800006, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x2000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000040)={0x1}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000340)={0xa000001c}) 12.153108466s ago: executing program 0 (id=1484): r0 = socket(0x840000000002, 0x3, 0xfa) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e22, @remote}, 0x10) setsockopt$inet_int(r0, 0x0, 0x13, &(0x7f0000000080)=0x800, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@newlink={0x28, 0x10, 0x801, 0x0, 0x4, {0x0, 0x0, 0x0, 0x0, 0x4000, 0x4a080}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0xfffffffb}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x7a, &(0x7f0000000340)={r4, @in6={{0xa, 0x3, 0x0, @dev={0xfe, 0x80, '\x00', 0x36}}}}, &(0x7f0000000040)=0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000080)={r5, 0x8004}, 0xffc4) getsockopt$bt_hci(r2, 0x84, 0x7f, &(0x7f0000000080)=""/4057, &(0x7f0000000000)=0xfd9) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)=@newtfilter={0x68, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0xfff3, 0x7}, {}, {0xa, 0x1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x38, 0x2, [@TCA_CGROUP_EMATCHES={0x34, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}, @TCA_EMATCH_TREE_LIST={0x28, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x24, 0x1, 0x0, 0x0, {{0x7, 0x9, 0x4}, [@TCA_EM_IPT_MATCH_DATA={0x4}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x3}]}}]}]}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x80}, 0x40010) sendmmsg$inet(r0, &(0x7f0000005240), 0x4000095, 0x0) 11.852945188s ago: executing program 0 (id=1489): r0 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) (async) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'vxcan1\x00', 0x0}) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000280)={'gre0\x00', &(0x7f0000000300)={'syztnl0\x00', 0x0, 0x10, 0x40, 0x6, 0x8, {{0x26, 0x4, 0x2, 0x6, 0x98, 0x68, 0x0, 0x8, 0x29, 0x0, @local, @remote, {[@cipso={0x86, 0x3a, 0x2, [{0x5, 0xc, "d52957952b4dc01f1214"}, {0x0, 0xd, "f5ccf3a2c0c150e56f64c4"}, {0x6, 0xe, "b03ee092ed1a1ba4d278227e"}, {0x2, 0xd, "4213f926952f41e6198f82"}]}, @generic={0x94, 0xc, "ab51c8777328ff09a179"}, @end, @timestamp_addr={0x44, 0x14, 0x45, 0x1, 0x0, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3}, {@remote, 0x9}]}, @end, @ra={0x94, 0x4, 0x1}, @timestamp_addr={0x44, 0x24, 0xb, 0x1, 0x7, [{@multicast1, 0x1000}, {@loopback, 0x4}, {@empty, 0xff}, {@private=0xa010100}]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000440)={'syztnl2\x00', &(0x7f00000003c0)={'syztnl2\x00', 0x0, 0x2f, 0x80, 0x7, 0x4, 0x68, @local, @private2, 0x10, 0x7800, 0x2, 0x6}}) sendmsg$ETHTOOL_MSG_COALESCE_GET(r0, &(0x7f00000005c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000600)=ANY=[@ANYBLOB="d8000000", @ANYRES16=r1, @ANYBLOB="04002cbd7000fedbdf251300000054000180080003000300000008000100", @ANYRES32=r2, @ANYBLOB="14000200776c616e300000000000000000000000080003000000000008000300020000001400020064766d7270300000000000000000000008000100", @ANYRES32=r3, @ANYBLOB="1800018014000200766c616e3100000000000000000000004400018008000100", @ANYRES32=r4, @ANYBLOB="1400020070696d367265673000000000000000001400020074756e6c3000000000000000000000000800030003000000080003000000000014000180080003000300000008000100", @ANYRES32=0x0, @ANYBLOB="e5eddcfaeb225c75f33db879ca00166d1ecc18236697825f702eae7c49b8e03af76de6552c7807609ad4ea284bd35a1c2e7cbf34fa35d75bba4a46e83315e2977f9de190d9c64b1a349c57af7246f8c17bc14a6bcdd0eb695d64412cc87a15bc1c8856b09f990ecc290ee523e657130de07e6d9844957e1e1e58391e1dacc4"], 0xd8}}, 0x10) (async) r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_FIB_RESULT={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x70}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r7, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x8c, 0x0, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0xff}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x87}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x81}]}, @IPVS_CMD_ATTR_DEST={0x4c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x3}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x1ff}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x4}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x52}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xfff}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4000011}, 0x40000) ioctl$int_in(r5, 0x5421, &(0x7f0000000000)=0x7) (async) ioctl$sock_SIOCINQ(r5, 0x541b, &(0x7f00000002c0)) 11.631823748s ago: executing program 0 (id=1494): r0 = socket$inet6(0x10, 0x80000, 0xfffffff8) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="100000002d000b02d25a806f8c6394f9101a04000a", 0x15}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000380)="d80000001c0081044e81f782db44b9040a1d08030e000000e8fea4a1180022c2502346e8dc1cbeb34b7e8b15000600142603600e1208000f1000810401a80016000a0001", 0x44}], 0x1, 0x0, 0x0, 0x7400}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0, 0x0, 0x0, 0x5c8}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADD(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) close(0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010056bd7000fedbdf253a00000008000300", @ANYRES32=r4, @ANYBLOB="04005b"], 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x4810) close(0x3) syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), r1) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)={0x14, 0x3, 0x8, 0x3, 0x0, 0x0, {0x1, 0x0, 0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x24000084}, 0x84) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070020000523"], 0xfe33) r6 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r6, &(0x7f0000000000), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000200)={'vxcan1\x00', 0x0}) sendmsg$can_bcm(r6, &(0x7f0000000540)={&(0x7f0000000180)={0x1d, r7}, 0x10, &(0x7f00000001c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="01000000a7cf8dd8001800fffffffe00", @ANYRES64=0x0, @ANYRES64=0xea60, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="0000000001"], 0x80}, 0x2, 0x0, 0x0, 0x10000800}, 0x4000087) sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 11.386042544s ago: executing program 0 (id=1499): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x5c, r3, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={'\x00', '\xff\xff', @loopback}}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}]}, 0x5c}, 0x1, 0x620b}, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000240)={0x1a8, r1, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x40}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}]}, @TIPC_NLA_BEARER={0x114, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xc313}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @private=0xa010101}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x4, @mcast2, 0x8001}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @rand_addr=0x64010102}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x2, @rand_addr=' \x01\x00', 0x6}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xa}}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x8, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xe72}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xe3}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}]}, @TIPC_NLA_SOCK={0x30, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x401}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x5ccc}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xb}]}]}, @TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}]}]}, 0x1a8}, 0x1, 0x0, 0x0, 0x20048080}, 0x20008894) r4 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) socket$l2tp6(0xa, 0x2, 0x73) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)=ANY=[@ANYRES32=r6, @ANYRES32=r7, @ANYBLOB="02"], 0x10) socket$l2tp6(0xa, 0x2, 0x73) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)=ANY=[@ANYBLOB="48000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r5, @ANYBLOB="0a0001000000648a63ff"], 0x48}}, 0x0) 11.051600296s ago: executing program 0 (id=1505): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) r0 = socket(0x840000000002, 0x6, 0x80000100) setsockopt$WPAN_SECURITY(r0, 0x0, 0x31, &(0x7f0000000fc0)=0x1, 0x4) socket$inet6(0xa, 0x80803, 0x87) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000280)={0x7, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xff}, 0x6b) syz_emit_ethernet(0x5e, &(0x7f00000004c0)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd603000bb00282b00fe800000000000000000000000000000fe8000000000000000000000000000aa87"], 0x0) 10.94844478s ago: executing program 0 (id=1506): syz_emit_ethernet(0x102, &(0x7f0000000000)={@empty, @random="dc762b6555cf", @void, {@generic={0x6000, "a6818240871ff5ebb6495c5fdf6e05f51d7a77321398084a13e770dd2511ba86797168c715f3f7f6f40d36140ef225e54e706d8f9d12f7aac2445f93ed5de7bcb428e5e0f88bedf02102732398482309eb70744fe173edd003e4fe8c977c7f8f6920d3308647faf95a4f2d081d583c96daba486c736fe92b22a98b724f4e1ebbb739254f73c6bedd193fcb181cdaf5490656341ad765f4c74123a827624a53574ee66b21ce7903d99113369e1c9872f4dfbe3b7d958220df1e879e8b3a82df8af27482595208bd36f8d773285ced948bae728e18ddb3c5d5c370c9beef8906863bc8b334bb9fd7894f782cd37783de0ad607fe1c"}}}, 0x0) r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256-ce\x00'}, 0x58) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_rose_SIOCDELRT(r0, 0x890c, &(0x7f00000001c0)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x9, @default, @rose={'rose', 0x0}, 0x7, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @bcast, @default, @default, @default]}) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x20, 0x0, 0x400, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_CSA_C_OFFSETS_TX={0xa, 0xcd, [0x6, 0x1, 0x3]}]}, 0x20}, 0x1, 0x0, 0x0, 0x54}, 0x20000000) r3 = socket$netlink(0x10, 0x3, 0x5) r4 = socket$inet_sctp(0x2, 0xce7b437271c2a72, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000340), 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r3) sendmsg$NL80211_CMD_NEW_MPATH(r5, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x2c, r6, 0x20, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x4) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000500)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NOTIFY_RADAR(r5, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x38, r6, 0x8, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x1ff, 0xa}}}}, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040008}, 0x48024) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000600)={0x0, 0x4, 0x1}, &(0x7f0000000640)=0x8) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r4, 0x84, 0x71, &(0x7f0000000680)={r8, 0x2}, &(0x7f00000006c0)=0x8) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r3, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x80, 0x1, 0x8, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3f7ea13abdcc7a58}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x34, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x80000000}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0xb61}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x8001}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x2}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}]}, 0x80}}, 0x24000004) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000840)={0xfb71b2fa4dbd0bc9, @multicast2, 0x4e20, 0x2, 'lblcr\x00', 0x20, 0x15, 0x2c}, 0x2c) setsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000880)=@assoc_value={r8, 0x3ff}, 0x8) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, &(0x7f00000008c0)={0x0, 0x3}, &(0x7f0000000900)=0x8) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r3, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x38, 0x1412, 0x200, 0x70bd2a, 0x7, "", [@RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x3}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x4010) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000a40)={r3}) sendmsg$NL80211_CMD_REGISTER_FRAME(r9, &(0x7f0000000bc0)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000ac0)={0xbc, r6, 0x300, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x1, 0xe}}}}, [@NL80211_ATTR_FRAME_MATCH={0x99, 0x5b, "d3d4f6f9e1b1c3c2a23745784f28b1482a5d08caf2e3a508bd219206ecffdfa7e5c9023f083fb413b7f25a23623f888bab962c935fd4e91acc72f708d37e7f4aba9802d2b4409eb366218feb46d14096455b72df3f802a1e5c337a85103f23b8b333e504033e79ff76f8f1dde9ee026a30426841bdf7d5a8a768e1cf4f863424273554c507aaf27cf4ced573cfaea9bc8bd9e15c74"}]}, 0xbc}, 0x1, 0x0, 0x0, 0x40}, 0xc010) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f0000000cc0)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)={0x14, 0x1, 0x4, 0x301, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x4048010) ioctl$sock_proto_private(r9, 0x89ee, &(0x7f0000000d00)="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") sendto$inet6(r9, &(0x7f0000000e00)="548f9055f4413bf7a79710d745b7a98f7035b27a9948353da8795ccca3d0aa1d8be055b88482b2a36015db5c931b65d01dce24ce", 0x34, 0x8000, &(0x7f0000000e40)={0xa, 0x4e21, 0x8, @loopback}, 0x1c) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000e80)={r8, 0xffffffff}, &(0x7f0000000ec0)=0x8) accept4$rose(r0, &(0x7f0000000f00)=@full={0xb, @remote, @rose, 0x0, [@null, @rose, @rose, @default, @netrom, @netrom]}, &(0x7f0000000f40)=0x40, 0x800) getsockopt$IP6T_SO_GET_REVISION_MATCH(r9, 0x29, 0x44, &(0x7f0000000f80)={'NETMAP\x00'}, &(0x7f0000000fc0)=0x1e) 6.16320463s ago: executing program 2 (id=755): r0 = socket$netlink(0x10, 0x3, 0xf) r1 = epoll_create1(0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x2, 0x1, 0x10}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$FS_IOC_SETFLAGS(r1, 0x40088a01, &(0x7f0000000000)=0x100) r2 = epoll_create1(0x0) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r5 = socket$rds(0x15, 0x5, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) bind$rds(r5, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r5, &(0x7f0000000000)={&(0x7f0000000040)={0x2, 0x0, @private=0xa010100}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000000300)=[{&(0x7f0000002640)=""/102389, 0x18ff5}], 0x1, 0x1903d}}], 0x48}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0xa4, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x7c, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x44, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_XOR={0xc, 0x5, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "94d7"}]}, @NFTA_BITWISE_MASK={0xc, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "8a95"}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x118}}, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x9, &(0x7f0000000000)=0xff, 0x4) getsockopt$inet_tcp_int(r7, 0x6, 0x9, 0x0, &(0x7f00000002c0)) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000f1b000/0x14000)=nil, 0x14000, 0x6, 0x28011, r8, 0xc6e9f000) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@bridge_newvlan={0x28, 0x70, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r11}, [@BRIDGE_VLANDB_ENTRY={0x10, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_TUNNEL_INFO={0x4, 0x4, 0x0, 0x1, @BRIDGE_VLANDB_TINFO_ID={0x8, 0x1, 0x34000}}}]}, 0x28}}, 0x0) mmap(&(0x7f0000867000/0x2000)=nil, 0x2000, 0x0, 0x11, r8, 0xffffe000) mmap(&(0x7f0000496000/0x2000)=nil, 0x2000, 0x0, 0x12, r4, 0x0) mmap(&(0x7f0000b1a000/0x2000)=nil, 0x2000, 0xc, 0x11, r3, 0xb10e8000) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800006, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x2000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000040)={0x1}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000340)={0xa000001c}) 2.555911206s ago: executing program 4 (id=1562): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x23}}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='GPL\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffc95, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r2 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000180)={r0, r1}) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000001380)={0xffffffffffffffff}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400), r3) 2.413308268s ago: executing program 3 (id=1564): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x3, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x5, 0x2}, 0xe) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_buf(r1, 0x6, 0x1f, &(0x7f00000000c0)="b1f4b363d8d52fa2ce75cebd6334f4180ec1224205a15288523f6a0b0554fb22a3f37366e38d8c8c65774ef4364ff57631d131a86e0d115f684dd75604f6b6395b301774cddd59e4473255fb03bd8620a07fa55aed05acdbb002cff3ee2fbafe235895a4182a39e3fb03bc717709d36960ff86c00a0b29ca6b7c12753087f9080137f9a706fca7420d7b2fbba42c6520393d8040759f48356b826569a3", 0x9d) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) socket$inet6(0xa, 0x200000000003, 0x87) syz_emit_ethernet(0x4e, &(0x7f0000000200)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x15}, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "03136c", 0x18, 0x87, 0x0, @private2={0xfc, 0x2, '\x00', 0xfd}, @mcast2, {[@routing={0x67, 0x2, 0x2, 0x6c, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}]}]}}}}}, 0x0) accept4$bt_l2cap(r0, 0x0, 0x0, 0x800) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000240)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) readv(r2, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a74000000060a0904000000000000000002000000480004802c0001800e000100696d6d656469617465000002800c00028005000100c400000008000140000000c02800000000000100666c6f775f6f66666c6f6164000000000900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a"], 0x9c}}, 0x0) 2.250920826s ago: executing program 3 (id=1567): r0 = socket$inet6(0xa, 0x1, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCGDEBUG(r1, 0x80047441, &(0x7f0000000000)) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000004c0)={'ip6_vti0\x00', &(0x7f0000000740)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x3, 0x0, 0x4e, @dev={0xfe, 0x80, '\x00', 0x19}, @empty, 0x20, 0x7, 0x2, 0x80008}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000600)={'syztnl1\x00', 0x0}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x71, 0xffffffffffffffff, 0x46e4c000) connect$tipc(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r3, 0x89f1, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000000)=@ethtool_rxfh_indir={0x38}}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x1c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x1d1441, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = socket$packet(0x11, 0x3, 0x300) bind$packet(r7, &(0x7f00000002c0)={0x11, 0xf5, 0x0, 0x1, 0x1, 0x6, @multicast}, 0x14) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r9 = openat$cgroup_devices(r8, &(0x7f0000000480)='devices.deny\x00', 0x2, 0x0) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r10) sendmsg$NLBL_CIPSOV4_C_ADD(r10, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000140)={0x3c, r11, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}, @NLBL_CIPSOV4_A_MLSCATLST={0x10, 0xc, 0x0, 0x1, [{0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2}]}]}]}, 0x3c}}, 0x0) write$cgroup_devices(r9, &(0x7f0000000140)=ANY=[@ANYBLOB="62a02a3a3409776d0a89"], 0xa) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'veth0_virt_wifi\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) write$tun(r6, &(0x7f0000000600)=ANY=[@ANYBLOB="1c0000f5"], 0xfdef) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000003e000701feffffff00000000017c00000800428004000800100001800c0006000300000000000000040002808ab39416d265c1998b72273a5fdcd2de7aa9ce1f728bb579a3ce3511006f98c8c757f3738d16c3d6f79cca757169310dfb374e773c0522761d57e279ed07be1c694433e5c03f4bbf0e5398b2a15844e901b14afd6b4f07063394a87cd340a607aaa0e3bf2ea31876f56f1a277ab3aec816478f0b3705516e0b57b1dcbe3522ba0db2621f4f951f504e7aa221472bb12cb68b4e4fa709a04d302fac3d6c75f368bc8b1f9d"], 0x30}, 0x1, 0x0, 0x0, 0x4000c000}, 0xc000) 2.128026857s ago: executing program 1 (id=1568): setsockopt$CAN_RAW_RECV_OWN_MSGS(0xffffffffffffffff, 0x65, 0x4, &(0x7f0000000200)=0x3, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'macvlan0\x00'}) r0 = socket$isdn_base(0x22, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000cc0)=@delchain={0x164, 0x65, 0x2, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x8}, {0x0, 0x9}, {0x6}}, [@filter_kind_options=@f_bpf={{0x8}, {0x4}}, @filter_kind_options=@f_route={{0xa}, {0x4}}, @TCA_RATE={0x6, 0x5, {0x6, 0x22}}, @filter_kind_options=@f_route={{0xa}, {0x110, 0x2, [@TCA_ROUTE4_FROM={0x8}, @TCA_ROUTE4_IIF={0x8}, @TCA_ROUTE4_IIF={0x8}, @TCA_ROUTE4_ACT={0xa0, 0x6, [@m_vlan={0x9c, 0x13, 0x0, 0x0, {{0x9}, {0xc, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}]}, {0x65, 0x6, "4536d5ba67cb41f3417191a0b4758169ba997e9dbec50e599419b7f290f4ee70efc0bdcb1d84cd2098b9c95fa81553821d25bbee1244fda18d438c3a5d696ee14197d17ea59071f0fd93760930ba453b3e23095f617d12282ec3f8190afeb1ac2e"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3}}}}]}, @TCA_ROUTE4_POLICE={0x54, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x7ff, 0xffffffffffffffff, 0x3, 0xa, 0x6, {0x7, 0x2, 0x1, 0x9, 0x0, 0x4}, {0x10, 0x2, 0x6, 0xfffe, 0x1, 0xeaa1}, 0x6, 0x200, 0x7}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xb}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xa71}]}]}}]}, 0x164}, 0x1, 0x0, 0x0, 0x81}, 0x8000) r1 = socket(0x10, 0x803, 0x0) sendto(r1, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x3a1}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c000000100021040200"/20, @ANYRES32=0x0, @ANYRESDEC=r0], 0x4c}}, 0x20000000) 1.686253186s ago: executing program 1 (id=1569): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000580)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={r1, 0x43, 0xfffffffffffffffe}, 0x1d) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=@newsa={0x138, 0x10, 0x713, 0x40000, 0x0, {{@in=@remote, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in6=@mcast1, 0x0, 0x32}, @in=@local, {}, {0x0, 0x0, 0x0, 0xfffffffffffffffd}, {}, 0x0, 0x0, 0xa, 0x2, 0xb}, [@algo_crypt={0x48, 0x2, {{'ecb-serpent-avx\x00'}}}]}, 0x138}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="500000001000810500"/20, @ANYRES32=0x0, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100030000000c0002001c0000000f49000008000500", @ANYRES32=r4], 0x50}}, 0xc0) 1.647486596s ago: executing program 4 (id=1570): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) (async) write(r0, &(0x7f0000000000)="3b000000010006", 0x7) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x79}, [@ldst={0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd96, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 1.516165116s ago: executing program 3 (id=1571): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x41071, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000480)={0xffff1a47, 0x40000000, 0x10000, 0x9, 0x9}, 0x14) syz_emit_ethernet(0xa6, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x70, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, "ffffffffff60000000000000"}]}}}}}}, 0x0) 1.494013084s ago: executing program 4 (id=1572): sendmmsg$inet(0xffffffffffffffff, &(0x7f00000013c0)=[{{&(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10, 0x0}}], 0x1, 0x4000000) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0xffffffffffffff18, &(0x7f0000000100)=[{&(0x7f0000000000)="2f0000001c0005c5ffffff000d000000020000000b000000ec0091c913000180f0ffffeb", 0x1dd}], 0x1}, 0x0) r0 = socket(0x10, 0x80002, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="fc0000001c00071bab0925000900070007ab08000c000000f0007e93210001c000000000000000000000000000039915fa2c1ec28670e9889bb94b46fe0000000a0002", 0xff82) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000ec0)={'batadv0\x00', 0x0}) syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="1c000000192a", @ANYBLOB, @ANYRES32=r2, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r3, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) socket$inet6_sctp(0xa, 0x801, 0x84) syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) socket$inet6(0xa, 0x800000000000002, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0xb) r4 = socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000600)={0xffffffffffffffff}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r4) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r7, @ANYBLOB="1f003300d00000000802110000010802110000005050505050500000", @ANYRES8=r5], 0x3c}, 0x1, 0x0, 0x0, 0x4010}, 0x10) sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, 0x0, 0x4009000) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x3, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492856, 0x0) 1.481578875s ago: executing program 1 (id=1573): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(r1, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, &(0x7f0000000140)={0x0, 0x20}, 0x1, 0x0, 0x0, 0xc001}, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000100)=[@in={0x2, 0x4e21, @remote}, @in={0x2, 0x4e21, @remote}], 0x20) r2 = accept(r1, &(0x7f0000000000)=@rc={0x1f, @fixed}, &(0x7f0000000080)=0x80) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400020}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, 0x0, 0x1, 0x801, 0x0, 0x0, {0x0, 0x0, 0x5}, [@CTA_LABELS={0x8, 0x16, 0x1, 0x0, [0x0]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x880) 1.398438966s ago: executing program 3 (id=1574): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (async) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x2c, 0x16, 0x1, 0x0, 0x0, {0xa}, [@typed={0x4}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}]}, 0x2c}}, 0x0) (async) bind$802154_dgram(r0, &(0x7f0000001540)={0x24, @none={0x0, 0x3}}, 0x14) 1.270311279s ago: executing program 1 (id=1575): bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000500)=@base={0xe, 0x0, 0x0, 0x202000, 0x841, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) (async, rerun: 64) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001080), 0xffffffffffffffff) pipe(&(0x7f0000000040)) (async) sendmsg$TIPC_NL_BEARER_ADD(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)={0x28, r1, 0x4c1dad3e3d6a7499, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x28}}, 0x20000000) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000d08000640ffffff000800034000000038580000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000002c000380280000800800034000000002100002800c00028008000180000000000c000440001000"], 0xec}}, 0x0) 1.269992223s ago: executing program 3 (id=1576): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000611210000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x2) (async) r3 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0x5820a61ca228651, 0xfffffffe, 0x2, {0x0, 0x0, 0x0, r4, {0x0, 0x4}, {0xffff, 0xffff}, {0x0, 0x1}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x6, 0x69c, 0x400}}}}]}, 0x44}}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0x5820a61ca228651, 0xfffffffe, 0x2, {0x0, 0x0, 0x0, r4, {0x0, 0x4}, {0xffff, 0xffff}, {0x0, 0x1}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x6, 0x69c, 0x400}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000840)=@newtfilter={0x60, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xc}, {0xfffb}, {0xfff1, 0x3d}}, [@filter_kind_options=@f_bpf={{0x8}, {0x34}}]}, 0x60}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f0000000200)={'ip6_vti0\x00', r4, 0xee36adac67a6d4a7, 0xff, 0x63, 0x0, 0x4, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x7800, 0x80, 0xa5, 0x3}}) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f0000000200)={'ip6_vti0\x00', r4, 0xee36adac67a6d4a7, 0xff, 0x63, 0x0, 0x4, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x7800, 0x80, 0xa5, 0x3}}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x5, 0x0, 0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0x0, 0x0, 0x7}}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x1}}], {0x14}}, 0x70}, 0x1, 0x0, 0x0, 0x24044080}, 0x20040004) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x41, &(0x7f0000000000)=0x6076, 0x4) 1.194272886s ago: executing program 4 (id=1577): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000000)=0x2, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) ioctl$EXT4_IOC_SETFSUUID(r1, 0x4008662c, &(0x7f0000000100)={0x10, 0x0, "de5333dac3aa678aa2fe637cc8432e68"}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000140)={0x0, 0x7, 0x7, [0x3f, 0x5, 0x2, 0x1000, 0x5, 0x6, 0x8]}, &(0x7f0000000180)=0x16) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f00000001c0)={0x4, 0x4, 0x4, 0x9, r3}, &(0x7f0000000200)=0x10) r5 = socket(0x5, 0x3, 0x8000) r6 = accept$phonet_pipe(r5, &(0x7f0000000240), &(0x7f0000000280)=0x10) recvmsg$can_j1939(r5, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f00000002c0)=""/40, 0x28}, {&(0x7f0000000300)=""/185, 0xb9}, {&(0x7f00000003c0)=""/205, 0xcd}, {&(0x7f00000004c0)=""/247, 0xf7}, {&(0x7f00000005c0)=""/122, 0x7a}, {&(0x7f0000000640)=""/219, 0xdb}], 0x6, &(0x7f00000007c0)=""/31, 0x1f}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000840), r5) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000008c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(r5, &(0x7f0000000ac0)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000900)={0x150, 0x0, 0x200, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x1, 0x7f}}}}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x7}, @NL80211_ATTR_FRAME_TYPE={0x6}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x7ff}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x8001}, @NL80211_ATTR_FRAME_MATCH={0xf6, 0x5b, "5630263170d85557347e49681d6c5999b179c0037e2bad7549f8816b3ab0a6b4455fc82a3f3c0d5fe6d9b1a6d015afe57a391ac47b46204e5e98bd48ac63eec2414276b9a1bb1eb344664bc04306d9ceb8435934ec12764cd3a7bac71d3062b5f4d735bd9f4f719c1b2d3b227849f44435d7d4eb6f4f05f850766634d43e3c979c3f632452d0c7028cd605cede72cb4c7a9877d8fca6f0a263d72a4ec833ffb1dc740f1f48dd7eedb94f44bc3cffc19242a14f85af2e5e89a96c3823bccacb651a14e8b2dfb227f35dce8e20d23ce6202f9302bea1b3324fdec8356d2ff97399de3aba9a3faf86e9b7525f777aa96c22826f"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x9}]}, 0x150}, 0x1, 0x0, 0x0, 0x20000880}, 0x4841) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000b00), &(0x7f0000000b40)=0x4) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000bc0), r5) sendmsg$NL80211_CMD_JOIN_MESH(r5, &(0x7f0000000cc0)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c00)={0x44, r8, 0x100, 0x70bd27, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_TX_RATES={0x28, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x24, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}]}]}, 0x44}}, 0x4000) sendto$llc(r5, &(0x7f0000000d00)="ec367bf596c087a436", 0x9, 0x24040014, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000d40), r5) setsockopt$inet_sctp6_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f0000000d80)={0x7, 0xfff8, 0x2, 0x8000}, 0x8) sendmsg$NL80211_CMD_SET_TID_CONFIG(r5, &(0x7f0000001140)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001100)={&(0x7f0000000e00)={0x2c8, r8, 0x400, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_TID_CONFIG={0xdc, 0x11d, 0x0, 0x1, [{0x44, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x2}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xf8}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xb2}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x3b}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x3}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x7c}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xf6}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xa0}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xeb}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x89}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x1d0, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xd492}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x1ac, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x154, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xe0, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x47, 0x2, [{0x7, 0x3}, {0x1}, {0x3, 0x7}, {0x2, 0x3}, {0x1, 0x8}, {0x1, 0x7}, {0x5, 0x7}, {0x7}, {0x3, 0x1}, {0x0, 0x6}, {0x3}, {0x4, 0x1}, {0x2}, {0x6, 0x6}, {0x2, 0x8}, {0x4, 0x9}, {0x3, 0x4}, {0x5, 0x8}, {0x1, 0x1}, {0x4, 0x7}, {0x1, 0x4}, {0x3, 0x2}, {0x1, 0x5}, {0x7, 0x5}, {0x4}, {0x3, 0x2}, {0x2}, {0x4}, {0x0, 0x5}, {0x4, 0x9}, {0x2, 0x1}, {}, {0x2}, {0x0, 0x1}, {0x1, 0x8}, {0x0, 0x1}, {0x3, 0x4}, {0x2, 0x4}, {0x7, 0x7}, {0x5, 0x3}, {0x6}, {0x5, 0x6}, {0x7, 0x3}, {0x1, 0x6}, {0x2, 0xa}, {0x5, 0x5}, {0x5, 0x1}, {0x0, 0x1}, {0x5, 0x9}, {0x2}, {0x1, 0x4}, {0x1, 0x3}, {0x7, 0x6}, {0x5, 0x5}, {0x0, 0x6}, {0x0, 0x7}, {0x1, 0x4}, {0x1, 0x2}, {0x3}, {0x4, 0x9}, {0x3}, {0x3}, {0x0, 0x1}, {0x7, 0x9}, {0x2, 0x8}, {0x7, 0x6}, {0x4, 0x9}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x84, 0x0, 0x410, 0x9, 0x9, 0x3, 0x7, 0x39]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xba60, 0x0, 0x1000, 0x276d, 0x2f8, 0x0, 0x7, 0x400]}}, @NL80211_TXRATE_LEGACY={0x20, 0x1, [0x12, 0x1b, 0x12, 0xb, 0x3, 0x4, 0x6c, 0x6, 0xb, 0x30, 0x6c, 0x18, 0x6c, 0x16, 0x6c, 0x6, 0x6, 0x36, 0x24, 0x30, 0x9, 0x12, 0x1b, 0x24, 0x12, 0x0, 0x30, 0x48]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8001, 0x7, 0x4, 0x401, 0x5, 0x0, 0x9, 0x9]}}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x0, 0x19, 0x4, 0xb, 0x9e70a7ef5ce08884, 0x12, 0x24, 0x13, 0x12, 0x24, 0x30, 0x6c, 0x5, 0x24, 0x60, 0x30, 0x4, 0x1, 0x12, 0x6, 0x18, 0xc, 0x60, 0x48, 0x18]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_2GHZ={0x70, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x8, 0x2, [{0x4, 0xa}, {0x0, 0x2}, {0x5, 0xa}, {0x0, 0x1}]}, @NL80211_TXRATE_HT={0x4d, 0x2, [{0x6, 0x3}, {0x6, 0x1}, {0x4, 0x7}, {0x6, 0x1}, {0x6, 0x4}, {0x5, 0x5}, {0x1, 0x7}, {0x4, 0x3}, {0x3, 0x5}, {0x4, 0xa}, {0x2, 0x4}, {0x5, 0x9}, {0x7}, {0x1, 0x5}, {0x1, 0x1}, {0x6, 0x7}, {0x5, 0x7}, {0x6, 0x7}, {0x3, 0x1}, {0x0, 0xa}, {0x3, 0x3}, {0x3, 0x3}, {0x5, 0xa}, {0x4, 0x3}, {0x1, 0x6}, {0x4, 0x1}, {0x3, 0x9}, {0x5, 0x9}, {0x0, 0x2}, {0x5, 0x8}, {0x4, 0x7}, {0x0, 0x4}, {0x6, 0x3}, {0x7, 0x1}, {0x1, 0x4}, {0x1, 0x2}, {0x0, 0x9}, {0x4, 0xa}, {0x2, 0x5}, {0x4, 0x3}, {0x4}, {0x5, 0x8}, {0x7}, {0x2, 0x1}, {0x1, 0x5}, {0x1, 0x7}, {0x0, 0x3}, {0x2, 0x7}, {0x2, 0x2}, {0x4, 0x9}, {0x0, 0x7}, {0x7, 0x4}, {0x0, 0x16}, {0x4, 0x8}, {0x0, 0x9}, {0x1, 0x8}, {0x3, 0x1}, {0x1, 0x8}, {0x3, 0x9}, {0x2, 0x6}, {0x2}, {0x5, 0x2}, {0x0, 0x4}, {0x6, 0x9}, {0x0, 0x4}, {0x4, 0x3}, {0x3, 0x8}, {0x5, 0x6}, {0x5, 0x7}, {0x7, 0xa}, {0x4, 0x3}, {0x0, 0x7}, {0x7}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x6, 0x2, 0xc61f, 0x7, 0x5, 0x7, 0x3]}}]}]}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x87}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x2}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x8}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}]}]}]}, 0x2c8}, 0x1, 0x0, 0x0, 0x20040804}, 0x20008011) getsockopt$inet_sctp6_SCTP_NODELAY(r2, 0x84, 0x3, &(0x7f0000001180), &(0x7f00000011c0)=0x4) ioctl$F2FS_IOC_MOVE_RANGE(r6, 0xc020f509, &(0x7f0000001200)={r0, 0x5, 0x1, 0x5}) r10 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001280), r5) sendmsg$IPVS_CMD_DEL_DAEMON(r9, &(0x7f00000013c0)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001380)={&(0x7f00000012c0)={0x98, r10, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x6}]}, @IPVS_CMD_ATTR_DAEMON={0x54, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x3}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip6gre0\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x6}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x8005}, 0x20044081) getsockopt$inet_sctp6_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000001400)={r4, 0x8}, &(0x7f0000001440)=0x8) ioctl$sock_kcm_SIOCKCMCLONE(r9, 0x89e2, &(0x7f0000001480)={r6}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000001500)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER_CANCEL(r11, &(0x7f00000015c0)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001580)={&(0x7f0000001540)={0x3c, 0x0, 0x102, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xfa}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x9}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r12}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x8000) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r13, &(0x7f00000016c0)={&(0x7f0000001600)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001680)={&(0x7f0000001640)={0x40, 0x2, 0x6, 0x0, 0x0, 0x0, {0x7, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x10) 1.156239431s ago: executing program 1 (id=1578): socket$netlink(0x10, 0x3, 0x0) (async) r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000000c0)={'syztnl2\x00', &(0x7f0000000040)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0xf, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x0, 0x0, @private, @local, {[@end, @timestamp_addr={0x44, 0x24, 0x0, 0x1, 0x0, [{@multicast1}, {@loopback}, {@remote}, {@initdev={0xac, 0x1e, 0x0, 0x0}}]}]}}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000000c0)={'syztnl2\x00', &(0x7f0000000040)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0xf, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x0, 0x0, @private, @local, {[@end, @timestamp_addr={0x44, 0x24, 0x0, 0x1, 0x0, [{@multicast1}, {@loopback}, {@remote}, {@initdev={0xac, 0x1e, 0x0, 0x0}}]}]}}}}}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$sock_proto_private(r2, 0x8b20, &(0x7f0000000080)) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socket$netlink(0x10, 0x3, 0x9) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r4) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADD(r6, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000380)=ANY=[@ANYBLOB="2c00000067cd88212ddca1a854d4bbf48c9df89c8c52a8d686ba77a9ee03bd2bea389464bbcda2293052861be108cb4c89d20ef1cd3a714e7d7b7be33b1ebe24519e3db75297478a4f5c8369c4349184d010946a03cdef31fb8777c52d9e8e3a5cb04776c10a2d3aa943a1fa40eafe514fa58686a42b64ed65684b0d0a0655bad741a54cbf96b3ed0989176c0e1b8afc1dd09eea928d3a31e4053c8f3d73be437d2d42b2b5c1e0c5e1bcfb66797de5f734251429c08b28c30e26a0615c384722536161751f6bfbcfefe3830f7a927543eb388f94253af334cc840651f651ec6be533b04f675a90", @ANYRES16=r5, @ANYBLOB="01002bbd7000fcdbdf25010000000500010000000000080002000700000008000c00feffff7f"], 0x2c}, 0x1, 0x0, 0x0, 0x84}, 0x80) socket$nl_xfrm(0x10, 0x3, 0x6) (async) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000a80)=ANY=[@ANYBLOB="2c010000160001000000003202000000d20000000000000000fe8000"/57, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1414bb000000000000000000000000000000003200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b1a0000008001600000000002c001b0000000000000000000000000000000000200100000000000000000000000000010000000000000000"], 0x12c}}, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) (async) r8 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=@deltaction={0x1d4, 0x31, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@TCA_ACT_TAB={0x40, 0x1, [{0x10, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0x10, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0x4, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}]}, @TCA_ACT_TAB={0x38, 0x1, [{0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xb5}}, {0xc, 0x3, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xf}}, {0x10, 0x20, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xf}}]}, @TCA_ACT_TAB={0x5c, 0x1, [{0x10, 0x1a, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0x10, 0x19, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0x10, 0x14, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0xb, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0xc, 0x19, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}]}, @TCA_ACT_TAB={0x80, 0x1, [{0xc, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfffffff9}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0xc, 0x1a, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xb}}, {0x10, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0x10, 0x6, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0x10, 0xb, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}]}, @TCA_ACT_TAB={0x6c, 0x1, [{0xc, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0x10, 0x2, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0xc, 0x1a, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x116, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0xc, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0xc, 0x6, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}]}]}, 0x1d4}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000600)=@newtfilter={0x4c, 0x2c, 0xd27, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xfffa, 0xfff3}, {}, {0x10, 0xfff9}}, [@filter_kind_options=@f_fw={{0x7}, {0x20, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0x0, 0xffe0}}, @TCA_FW_INDEV={0x14, 0x3, 'batadv_slave_0\x00'}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x4) r9 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r9, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) sendmmsg(r9, &(0x7f00000002c0), 0x40000000000009f, 0x0) 952.190883ms ago: executing program 4 (id=1579): r0 = socket$pppl2tp(0x18, 0x1, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xe, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x53}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) ioctl$SIOCSIFMTU(r0, 0x8923, &(0x7f0000000000)={'virt_wifi0\x00', 0x7}) 88.011702ms ago: executing program 3 (id=1580): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x23}}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='GPL\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffc95, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r2 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000180)={r0, r1}) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000008fc0)=[{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000002b40)="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", 0x236}], 0x1, 0x0, 0x0, 0x20004050}], 0x1, 0x4) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400), 0xffffffffffffffff) 47.569792ms ago: executing program 1 (id=1581): syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r1, &(0x7f0000000080)=ANY=[], 0x6) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x14, 0x15, 0x301, 0x0, 0x0, {0x1}}, 0x14}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADD(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_WOWLAN(r2, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x28, r4, 0x12, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x8, 0x13}}}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x1) sendmsg$NL80211_CMD_SET_BSS(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x24, r4, 0x1, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x6}]}, 0x24}}, 0x80) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002c00)=ANY=[@ANYBLOB="bf16000000000000b70700000900f0ff4070000000000000500000000000000095000000000000002ba728041598d6fbd30cb599e8c73d24a3aa81d36bb3019c13bd23212fb56fa54f26fb0b71d0e6adfefc41d86bd917487960717142fa9ea4318123741c0a0e168c1886d0d4d94f2f4e345c652ebc1626e3a2a2ad35806150ae0209e62f51ee988e6e0dc8ce974a22a550d6fd70800c86ae3b3e05df3ceb9fc474c2a100c788b277beee1cbf9b0a4def23d410f6296b32a8343881dcc7b1b85f3c3d44aeaccd3641110bec4e90a6341965c39e4b3449abe802f5ab3e89cf6c662ed4048d3b3e22278d00031e5388ee6f867ddd58211d6ececb0cd2b6d357b8580218ce740068725837074e468ee23fd2f73902ebcfcf49822775985bf31b715f5888b2c81f96a810b946855c9fc52ac17cbc97a616811a4c2dc3470009b966abaf41939aeca3e7b00c2e9d5db7a34fe2a29ac88c360a878a2b9ab9440c1961e80477166f3f847e855cdddc941d996d61ea0ce23b37e9d21c849d1e1e53087a3b109012e3a3ecbd219265048bf5c72b7ba2806b73323301b4bc94d0e4afde44867d71049a7c89bc615e215571ac910d80a58b5169576ff9906c34d2342806960b6bcb00000000000000000000000000113ee640b9ed1e04a0bfb125204d30990361bf45ef45277a167cd2c2e6ce9138143aa5ea7ee6f7c6d8b00437e070b004c5aa90766538b4fe45a16f14b270904d36eaa87508ac6d46639b3971ac6a88dc531fcc5ffc6b76b334795d88156336a9a452a9022485bb572dacb7aa25f748bc75918a16d9d5ae21004cd799ac4951beb2c6c9b5baf60081b86cc2e31c49f4ea055fb3639036c95c69b1ae60e685d486dbd1d5e7d0daacd73acfc80b9c9c92"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r7 = socket$netlink(0x10, 0x3, 0x9) setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f00000017c0)=r6, 0x4) sendmsg$NL80211_CMD_SET_CHANNEL(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000084}, 0x20004054) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r10, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x1c, &(0x7f0000000440)=[@in6={0xa, 0x4e21, 0x81, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r10, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) r12 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$llc_int(r12, 0x10c, 0x0, &(0x7f0000000100), &(0x7f0000000140)=0x4) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f00000002c0), &(0x7f0000000300)=0x4) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000040)={r11, 0x3bce}, 0x0) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r9, 0x84, 0x5, &(0x7f0000000380)={r11, @in={{0x2, 0x4e21, @loopback}}}, 0x84) getsockopt$bt_BT_DEFER_SETUP(r8, 0x112, 0x7, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x64, 0x10, 0x1, 0x2, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x14318}, [@IFLA_MAP={0x24, 0xe, {0x59b, 0xc76b, 0x1, 0x6, 0x8a, 0x1}}, @IFLA_BROADCAST={0xa, 0x2, @local}, @IFLA_IFNAME={0x14, 0x3, 'batadv_slave_0\x00'}]}, 0x64}}, 0x0) 0s ago: executing program 4 (id=1582): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040027bd7000fbdbdf250800000008000c0002000000080004000300000008000700ac141440d5f5be3d414c24001cd72be0ec687f46a417678653a093"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4800) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_ADD(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="09180000000000000000010000000800020002000000080001"], 0x24}}, 0x0) sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="140100001f000504000000000000000005"], 0x114}], 0x1}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'bond0\x00'}) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000200)=ANY=[@ANYBLOB="480000001400b59500000000000000000a000000", @ANYRESOCT=r0, @ANYBLOB="14000200fe8000000000000000000000000000aa080009003f0c0000140001"], 0x48}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r4, &(0x7f0000000200)=[{&(0x7f0000000080)='/', 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r4, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xb, 0x8, 0x3, 0xfffffffa, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r5 = socket(0x2, 0x2, 0x0) getsockopt$inet_mreqn(r5, 0x0, 0x40, 0x0, &(0x7f0000000180)=0x54) sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0x0) sendmsg$nl_route(r0, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c0000001e00010026bd7000fddbdf2507000000", @ANYRES32=0x0, @ANYBLOB="0000000008000d0001000000060005"], 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x800) kernel console output (not intermixed with test programs): m0 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 105.322278][ T6361] geneve2: entered promiscuous mode [ 105.361002][ T6361] geneve2: entered allmulticast mode [ 105.666296][ T6399] Bluetooth: MGMT ver 1.23 [ 105.713965][ T6402] netlink: 'syz.0.146': attribute type 1 has an invalid length. [ 105.844223][ T6402] 8021q: adding VLAN 0 to HW filter on device bond1 [ 106.100189][ T6421] netlink: 'syz.2.149': attribute type 29 has an invalid length. [ 106.140666][ T6421] netlink: 8 bytes leftover after parsing attributes in process `syz.2.149'. [ 106.187908][ T6425] netlink: 'syz.2.149': attribute type 29 has an invalid length. [ 106.225867][ T6425] netlink: 8 bytes leftover after parsing attributes in process `syz.2.149'. [ 106.772910][ T6456] lo: entered promiscuous mode [ 106.790269][ T6454] lo: left promiscuous mode [ 106.935369][ T6463] netlink: 24 bytes leftover after parsing attributes in process `syz.3.159'. [ 107.077761][ T6467] netlink: 12 bytes leftover after parsing attributes in process `syz.0.161'. [ 107.180168][ T6474] netlink: 8 bytes leftover after parsing attributes in process `syz.0.161'. [ 107.276118][ T6481] raw_sendmsg: syz.0.161 forgot to set AF_INET. Fix it! [ 107.876790][ T6513] netlink: 8 bytes leftover after parsing attributes in process `syz.1.175'. [ 107.930261][ T6515] netlink: 4 bytes leftover after parsing attributes in process `syz.0.176'. [ 107.955828][ T6517] netlink: 'syz.2.177': attribute type 1 has an invalid length. [ 108.040517][ T6526] netlink: 14 bytes leftover after parsing attributes in process `syz.3.178'. [ 108.114730][ T6513] "syz.1.175" (6513) uses obsolete ecb(arc4) skcipher [ 108.164125][ T6525] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 108.347402][ T6526] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 108.377354][ T6526] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 108.393775][ T6526] bond0 (unregistering): Released all slaves [ 108.450642][ T6260] net_ratelimit: 13 callbacks suppressed [ 108.450660][ T6260] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 108.489482][ T6517] 8021q: adding VLAN 0 to HW filter on device bond1 [ 108.595608][ T6530] bond1 (unregistering): (slave ip6gretap1): Removing an active aggregator [ 108.608697][ T6530] bond1 (unregistering): (slave ip6gretap1): Releasing backup interface [ 108.626921][ T6530] bond1 (unregistering): Released all slaves [ 108.664989][ T6545] ip6t_srh: unknown srh match flags 4001 [ 108.886087][ T6548] netlink: 'syz.2.185': attribute type 1 has an invalid length. [ 108.914256][ T6548] netlink: 'syz.2.185': attribute type 2 has an invalid length. [ 108.915302][ T6552] netlink: 'syz.0.187': attribute type 30 has an invalid length. [ 108.948767][ T6552] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0) [ 108.982234][ T6552] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255 [ 109.287560][ T6568] veth1_to_team: entered promiscuous mode [ 109.373006][ T6568] veth1_to_team (unregistering): left promiscuous mode [ 109.445670][ T6568] team0: Port device team_slave_1 removed [ 109.485156][ T6577] netlink: 'syz.1.196': attribute type 8 has an invalid length. [ 109.537089][ T6579] netlink: 'syz.0.197': attribute type 1 has an invalid length. [ 109.724713][ T6588] trusted_key: syz.2.198 sent an empty control message without MSG_MORE. [ 109.748297][ T6586] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 109.888456][ T6595] netlink: 'syz.4.202': attribute type 15 has an invalid length. [ 110.333179][ T6621] __nla_validate_parse: 6 callbacks suppressed [ 110.333199][ T6621] netlink: 28 bytes leftover after parsing attributes in process `syz.3.208'. [ 110.511379][ T6631] netlink: 36 bytes leftover after parsing attributes in process `syz.0.211'. [ 110.778874][ T6643] netlink: 12 bytes leftover after parsing attributes in process `syz.2.215'. [ 110.826984][ T6643] netlink: 'syz.2.215': attribute type 2 has an invalid length. [ 110.999409][ T6651] netlink: 12 bytes leftover after parsing attributes in process `syz.1.218'. [ 111.318263][ T6668] netlink: 71 bytes leftover after parsing attributes in process `syz.0.224'. [ 111.343768][ T6669] netlink: 16 bytes leftover after parsing attributes in process `syz.1.223'. [ 111.381845][ T6669] netlink: 32 bytes leftover after parsing attributes in process `syz.1.223'. [ 111.471657][ T6678] ieee802154 phy0 wpan0: encryption failed: -22 [ 111.506522][ T6669] gretap1: entered promiscuous mode [ 111.512499][ T6669] gretap1: entered allmulticast mode [ 111.588421][ T6681] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 111.721969][ T6684] vxcan1: entered allmulticast mode [ 112.080827][ T6706] x_tables: duplicate underflow at hook 2 [ 112.097372][ T6703] netlink: 32 bytes leftover after parsing attributes in process `syz.1.235'. [ 112.112017][ T6703] netlink: 'syz.1.235': attribute type 11 has an invalid length. [ 112.142048][ T6703] netlink: 224 bytes leftover after parsing attributes in process `syz.1.235'. [ 112.169558][ T6707] syzkaller1: entered promiscuous mode [ 112.175090][ T6707] syzkaller1: entered allmulticast mode [ 112.248874][ T6711] netlink: 'syz.4.239': attribute type 1 has an invalid length. [ 112.363318][ T6711] netlink: 28 bytes leftover after parsing attributes in process `syz.4.239'. [ 112.543567][ T6720] netlink: 'syz.2.241': attribute type 1 has an invalid length. [ 112.769317][ T6720] 8021q: adding VLAN 0 to HW filter on device bond1 [ 112.862468][ T6727] bond1: (slave ip6gretap2): making interface the new active one [ 112.884171][ T6727] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 112.903673][ T6727] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 112.927924][ T6727] bond1: (slave ip6gretap2): Enslaving as an active interface with an up link [ 112.998664][ T5882] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 113.309520][ T5882] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 113.394800][ T6758] sctp: [Deprecated]: syz.1.253 (pid 6758) Use of struct sctp_assoc_value in delayed_ack socket option. [ 113.394800][ T6758] Use struct sctp_sack_info instead [ 113.538961][ T70] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 113.919786][ T12] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 114.608075][ T6260] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 114.617173][ T6260] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 114.721883][ T6796] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 114.758886][ T6802] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 114.788998][ T6802] netlink: 'syz.2.265': attribute type 4 has an invalid length. [ 115.048220][ T70] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 115.098393][ T2150] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 115.395478][ T2150] IPVS: starting estimator thread 0... [ 115.489760][ T6827] IPVS: using max 25 ests per chain, 60000 per kthread [ 116.029006][ T6844] openvswitch: netlink: Flow actions attr not present in new flow. [ 116.391296][ T6858] bond0: entered promiscuous mode [ 116.396398][ T6858] bond_slave_0: entered promiscuous mode [ 116.403582][ T6858] bond_slave_1: entered promiscuous mode [ 116.670794][ T6868] netlink: 'syz.2.288': attribute type 1 has an invalid length. [ 116.685191][ T6868] __nla_validate_parse: 5 callbacks suppressed [ 116.685208][ T6868] netlink: 24 bytes leftover after parsing attributes in process `syz.2.288'. [ 116.839411][ T6875] netlink: 12 bytes leftover after parsing attributes in process `syz.2.289'. [ 117.085247][ T6883] netlink: 8 bytes leftover after parsing attributes in process `syz.1.292'. [ 117.498600][ T6900] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.298'. [ 117.550379][ T6900] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 118.080516][ T6929] netlink: 28 bytes leftover after parsing attributes in process `syz.1.304'. [ 118.458397][ T12] ip6_tnl_xmit_ctl: 2 callbacks suppressed [ 118.458418][ T12] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 118.681129][ C1] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 119.070059][ T6956] netlink: 8 bytes leftover after parsing attributes in process `syz.2.314'. [ 119.079279][ T6956] netlink: 'syz.2.314': attribute type 30 has an invalid length. [ 119.133922][ T6956] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 119.143441][ T6956] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 119.152243][ T6956] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 119.161465][ T6956] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 119.205992][ T6956] netlink: 8 bytes leftover after parsing attributes in process `syz.2.314'. [ 119.216093][ T6956] netlink: 'syz.2.314': attribute type 30 has an invalid length. [ 119.229150][ T6964] netlink: 'syz.1.315': attribute type 1 has an invalid length. [ 119.361268][ T6964] 8021q: adding VLAN 0 to HW filter on device bond1 [ 119.447026][ T6970] bond1: (slave geneve2): making interface the new active one [ 119.472855][ T6970] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 119.597867][ T1151] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 119.790864][ T6984] sit1: entered promiscuous mode [ 119.795902][ T6984] sit1: entered allmulticast mode [ 120.002532][ T6993] netlink: 'syz.4.322': attribute type 18 has an invalid length. [ 120.126308][ T6996] pim6reg: entered allmulticast mode [ 120.179357][ T6998] netlink: 'syz.4.324': attribute type 29 has an invalid length. [ 120.641610][ T7016] netlink: 'syz.2.329': attribute type 29 has an invalid length. [ 120.656360][ T7016] netlink: 'syz.2.329': attribute type 29 has an invalid length. [ 120.667964][ T7016] netlink: 500 bytes leftover after parsing attributes in process `syz.2.329'. [ 120.677400][ T7016] unsupported nla_type 58 [ 120.755383][ T6260] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 120.899553][ T7024] netlink: 4 bytes leftover after parsing attributes in process `syz.4.332'. [ 120.915742][ T7024] netlink: 12 bytes leftover after parsing attributes in process `syz.4.332'. [ 121.234215][ T7033] vlan2: entered promiscuous mode [ 121.268673][ T7033] bridge0: entered promiscuous mode [ 121.275315][ T7033] vlan2: entered allmulticast mode [ 121.299423][ T7033] bridge0: entered allmulticast mode [ 121.720801][ T7046] __nla_validate_parse: 1 callbacks suppressed [ 121.720824][ T7046] netlink: 52 bytes leftover after parsing attributes in process `syz.2.337'. [ 121.758153][ T7046] netlink: 52 bytes leftover after parsing attributes in process `syz.2.337'. [ 121.809347][ T7046] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 121.896259][ T7046] tipc: Started in network mode [ 121.900190][ T70] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 121.907794][ T7046] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711 [ 121.921205][ T7046] tipc: Enabled bearer , priority 10 [ 121.935357][ T7052] tipc: Started in network mode [ 121.945006][ T7052] tipc: Node identity a2fdf55c6565, cluster identity 4711 [ 121.952901][ T7052] tipc: Enabled bearer , priority 0 [ 122.003349][ T7052] tipc: Disabling bearer [ 122.263091][ T6896] SET target dimension over the limit! [ 122.475440][ T7073] "syz.2.346" (7073) uses obsolete ecb(arc4) skcipher [ 122.491538][ T7074] "syz.2.346" (7074) uses obsolete ecb(arc4) skcipher [ 122.568733][ T7076] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.347'. [ 122.835695][ T7085] netlink: 8 bytes leftover after parsing attributes in process `syz.0.350'. [ 123.007436][ T7097] netlink: 'syz.1.353': attribute type 11 has an invalid length. [ 123.019049][ T13] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 123.027535][ T6685] Set syz1 is full, maxelem 65536 reached [ 123.048485][ T53] tipc: Node number set to 4269801488 [ 123.387527][ T7121] wireguard: wg1: Could not create IPv4 socket [ 123.549701][ T7134] netlink: 'syz.1.363': attribute type 12 has an invalid length. [ 123.577805][ T7134] netlink: 'syz.1.363': attribute type 29 has an invalid length. [ 123.595855][ T7134] netlink: 148 bytes leftover after parsing attributes in process `syz.1.363'. [ 123.663891][ T7134] netlink: 'syz.1.363': attribute type 2 has an invalid length. [ 123.696348][ T7134] netlink: 43 bytes leftover after parsing attributes in process `syz.1.363'. [ 123.696393][ T7136] netlink: 28 bytes leftover after parsing attributes in process `syz.1.363'. [ 123.870044][ T7145] netlink: 'syz.3.366': attribute type 1 has an invalid length. [ 124.082696][ T7157] netlink: 48 bytes leftover after parsing attributes in process `syz.3.370'. [ 124.083475][ T7156] netlink: 4 bytes leftover after parsing attributes in process `syz.0.369'. [ 124.181604][ T6260] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 124.190428][ T7161] A link change request failed with some changes committed already. Interface batadv_slave_1 may have been left with an inconsistent configuration, please check. [ 124.279737][ T7163] netlink: 32 bytes leftover after parsing attributes in process `syz.2.373'. [ 124.515843][ T7167] bond2: entered promiscuous mode [ 124.537771][ T7167] bond2: entered allmulticast mode [ 124.543351][ T7167] 8021q: adding VLAN 0 to HW filter on device bond2 [ 124.766632][ T7167] bond2 (unregistering): Released all slaves [ 124.802997][ T7166] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 124.804377][ T7187] netlink: 'syz.4.380': attribute type 12 has an invalid length. [ 125.053376][ T7207] Cannot find set identified by id 0 to match [ 125.176276][ T5880] IPVS: starting estimator thread 0... [ 125.214330][ T7212] : entered promiscuous mode [ 125.277740][ T7216] IPVS: using max 29 ests per chain, 69600 per kthread [ 125.369069][ T6260] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 125.387302][ T7224] netlink: 'syz.1.393': attribute type 4 has an invalid length. [ 125.509364][ T7228] tipc: Started in network mode [ 125.517826][ T7228] tipc: Node identity ee961ad1ba58, cluster identity 4711 [ 125.548705][ T7228] tipc: Enabled bearer , priority 0 [ 125.645226][ T7234] syzkaller0: entered promiscuous mode [ 125.668242][ T7234] syzkaller0: entered allmulticast mode [ 125.690162][ T7234] tipc: Resetting bearer [ 125.735807][ T7227] tipc: Resetting bearer [ 126.509895][ T1151] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 126.580464][ T5880] tipc: Node number set to 1422793425 [ 126.899862][ T7261] openvswitch: netlink: Missing key (keys=40, expected=80) [ 126.924809][ T7227] tipc: Disabling bearer [ 126.972653][ T7252] netlink: 'syz.0.403': attribute type 7 has an invalid length. [ 126.997809][ C1] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 127.155539][ T7268] netlink: 'syz.4.408': attribute type 1 has an invalid length. [ 127.206095][ T7272] pim6reg527: entered allmulticast mode [ 127.233641][ T7276] x_tables: unsorted underflow at hook 3 [ 127.628614][ T52] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 127.845729][ T7313] delete_channel: no stack [ 127.851119][ T7307] netlink: 'syz.1.420': attribute type 4 has an invalid length. [ 128.246303][ T7332] netlink: 'syz.2.426': attribute type 13 has an invalid length. [ 128.279647][ T7332] __nla_validate_parse: 6 callbacks suppressed [ 128.279665][ T7332] netlink: 152 bytes leftover after parsing attributes in process `syz.2.426'. [ 128.634416][ T7350] nbd: must specify at least one socket [ 128.791893][ T70] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 128.835245][ T7354] netlink: 4 bytes leftover after parsing attributes in process `syz.4.432'. [ 128.914105][ T7357] pim6reg: entered allmulticast mode [ 128.954793][ T7361] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 128.975150][ T7354] validate_nla: 1 callbacks suppressed [ 128.975168][ T7354] netlink: 'syz.4.432': attribute type 1 has an invalid length. [ 129.029204][ T7369] pim6reg: left allmulticast mode [ 129.071330][ T7377] netlink: 'syz.0.437': attribute type 10 has an invalid length. [ 129.111199][ T7377] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 129.208611][ T7380] netlink: 52 bytes leftover after parsing attributes in process `syz.1.438'. [ 129.673823][ T7406] netlink: 4 bytes leftover after parsing attributes in process `syz.2.447'. [ 129.949289][ T12] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 130.599309][ T7456] syzkaller1: entered promiscuous mode [ 130.618385][ T7456] syzkaller1: entered allmulticast mode [ 131.128953][ T70] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 131.174195][ T7485] netlink: 'syz.0.466': attribute type 4 has an invalid length. [ 131.216259][ T7489] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 131.442056][ T7502] netlink: 64 bytes leftover after parsing attributes in process `syz.4.470'. [ 131.519823][ T7508] netlink: 8 bytes leftover after parsing attributes in process `syz.2.473'. [ 131.819497][ T7521] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 131.874942][ T7526] netlink: 8 bytes leftover after parsing attributes in process `syz.0.475'. [ 131.942993][ T7521] netlink: 4 bytes leftover after parsing attributes in process `syz.0.475'. [ 132.030452][ T7529] netlink: 'syz.3.479': attribute type 2 has an invalid length. [ 132.068021][ T7530] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 132.210664][ T7547] netlink: 'syz.4.484': attribute type 18 has an invalid length. [ 132.247267][ T7547] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 132.256247][ T7547] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 132.265107][ T7547] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 132.273922][ T7547] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 132.290995][ T70] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 132.763589][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.773393][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.808164][ T7579] netlink: 4 bytes leftover after parsing attributes in process `syz.1.491'. [ 133.381713][ T7612] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.502'. [ 133.489856][ T1151] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 133.509902][ T7615] netlink: 48 bytes leftover after parsing attributes in process `syz.3.503'. [ 133.523492][ T7611] netlink: 12 bytes leftover after parsing attributes in process `syz.2.500'. [ 133.584711][ T7616] netlink: 12 bytes leftover after parsing attributes in process `syz.2.500'. [ 133.609955][ T7620] netlink: 'syz.4.505': attribute type 24 has an invalid length. [ 133.623648][ T7611] netlink: 12 bytes leftover after parsing attributes in process `syz.2.500'. [ 133.883972][ T7636] netlink: 8 bytes leftover after parsing attributes in process `syz.4.509'. [ 133.892679][ T7631] syzkaller1: entered promiscuous mode [ 133.903964][ T7631] syzkaller1: entered allmulticast mode [ 134.233789][ T7650] IPv6: Can't replace route, no match found [ 134.366294][ T7654] netlink: 56 bytes leftover after parsing attributes in process `syz.4.517'. [ 134.381691][ T7654] netlink: 8 bytes leftover after parsing attributes in process `syz.4.517'. [ 134.628097][ T1133] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 134.842190][ T7683] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.215331][ T7702] netlink: 104 bytes leftover after parsing attributes in process `syz.0.532'. [ 135.452520][ T7714] mac80211_hwsim hwsim9 wlan0: entered promiscuous mode [ 135.505133][ T7714] mac80211_hwsim hwsim9 wlan0: entered allmulticast mode [ 135.720426][ T7733] netlink: 4 bytes leftover after parsing attributes in process `syz.3.540'. [ 135.754803][ T1133] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 136.139983][ T7752] : entered promiscuous mode [ 136.409174][ T7772] netlink: 'syz.4.551': attribute type 29 has an invalid length. [ 136.444055][ T7772] netlink: 'syz.4.551': attribute type 1 has an invalid length. [ 136.908603][ T12] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 137.667258][ T7847] netlink: 'syz.4.573': attribute type 2 has an invalid length. [ 138.044376][ T70] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 138.105494][ T7872] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.426581][ T7891] __nla_validate_parse: 8 callbacks suppressed [ 138.426604][ T7891] netlink: 14 bytes leftover after parsing attributes in process `syz.1.583'. [ 138.780291][ T7910] netlink: 'syz.2.588': attribute type 1 has an invalid length. [ 138.994603][ T7918] netlink: 188 bytes leftover after parsing attributes in process `syz.2.589'. [ 139.021973][ T7891] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 139.062101][ T7891] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 139.098950][ T7891] bond0 (unregistering): Released all slaves [ 139.245222][ T12] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 139.678427][ T7945] syz_tun: entered allmulticast mode [ 139.864457][ T7943] syz_tun: left allmulticast mode [ 140.419292][ T1133] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 140.496791][ T7997] netlink: 12 bytes leftover after parsing attributes in process `syz.2.606'. [ 141.212109][ T8025] netlink: 24 bytes leftover after parsing attributes in process `syz.3.614'. [ 141.445582][ T8038] bridge3: entered promiscuous mode [ 141.577984][ T1095] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 141.709953][ T8050] netlink: 8 bytes leftover after parsing attributes in process `syz.4.622'. [ 141.735799][ T8057] (unnamed net_device) (uninitialized): Unable to set up delay as MII monitoring is disabled [ 142.173763][ T8072] netlink: 12 bytes leftover after parsing attributes in process `syz.4.628'. [ 142.423840][ T8087] netlink: 'syz.0.632': attribute type 1 has an invalid length. [ 142.479999][ T8087] netlink: 'syz.0.632': attribute type 2 has an invalid length. [ 142.631043][ T8096] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.722644][ T70] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 142.758561][ T5828] Bluetooth: hci4: command 0x0405 tx timeout [ 142.771142][ T8100] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.807231][ T8108] veth1_to_team: entered promiscuous mode [ 142.817357][ T8098] netlink: 24 bytes leftover after parsing attributes in process `syz.1.636'. [ 143.013770][ T8103] veth1_to_team (unregistering): left promiscuous mode [ 143.109117][ T8103] team0: Port device team_slave_1 removed [ 143.560262][ T8141] netlink: 24 bytes leftover after parsing attributes in process `syz.1.651'. [ 143.637842][ C1] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 143.662052][ T8144] sch_tbf: burst 88 is lower than device veth3 mtu (1514) ! [ 143.688808][ T8151] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 143.815844][ T8155] netlink: 'syz.2.656': attribute type 5 has an invalid length. [ 143.901408][ T8157] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 143.922965][ T1095] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 143.923163][ T8157] team0: Device ipvlan2 is already an upper device of the team interface [ 143.995117][ T8163] netlink: 12 bytes leftover after parsing attributes in process `syz.0.659'. [ 144.020205][ T8170] netlink: 48 bytes leftover after parsing attributes in process `syz.2.661'. [ 144.241582][ T8179] x_tables: duplicate underflow at hook 2 [ 144.246101][ T8180] netlink: 12 bytes leftover after parsing attributes in process `syz.2.665'. [ 144.491549][ T8192] Cannot find del_set index 4 as target [ 145.081886][ T1151] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 145.083749][ T8217] bridge2: entered allmulticast mode [ 145.976518][ T5880] hid-generic 0005:699A:5505.0001: unknown main item tag 0x0 [ 145.998757][ T8263] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 146.037331][ T5880] hid-generic 0005:699A:5505.0001: unknown main item tag 0x0 [ 146.060743][ T5880] hid-generic 0005:699A:5505.0001: unknown main item tag 0x0 [ 146.074194][ T5880] hid-generic 0005:699A:5505.0001: unknown main item tag 0x0 [ 146.083381][ T8263] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 146.132299][ T5880] hid-generic 0005:699A:5505.0001: unknown main item tag 0x0 [ 146.173368][ T5880] hid-generic 0005:699A:5505.0001: unknown main item tag 0x0 [ 146.222055][ T1095] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 146.237053][ T5880] hid-generic 0005:699A:5505.0001: unknown main item tag 0x1 [ 146.283287][ T5880] hid-generic 0005:699A:5505.0001: hidraw0: BLUETOOTH HID v0.8b Device [syz0] on aa:aa:aa:aa:aa:aa [ 146.372149][ T8278] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 146.431040][ T8278] netlink: 14 bytes leftover after parsing attributes in process `syz.1.688'. [ 146.539642][ T8288] IPVS: set_ctl: invalid protocol: 21 206.59.0.0:0 [ 146.922528][ T8306] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 146.961089][ T8305] netlink: 12 bytes leftover after parsing attributes in process `syz.0.692'. [ 147.378714][ T52] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 148.548041][ T8380] netlink: 12 bytes leftover after parsing attributes in process `syz.1.709'. [ 148.560095][ T6260] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 148.589782][ T8380] netlink: 48 bytes leftover after parsing attributes in process `syz.1.709'. [ 148.721687][ T8389] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 149.069451][ T8404] Unsupported ieee802154 address type: 0 [ 149.223093][ T8407] netlink: 28 bytes leftover after parsing attributes in process `syz.4.717'. [ 149.305504][ T8412] netlink: 4 bytes leftover after parsing attributes in process `syz.0.719'. [ 149.351377][ T8414] netlink: 4 bytes leftover after parsing attributes in process `syz.0.719'. [ 149.613330][ T8424] tipc: Enabling of bearer rejected, already enabled [ 149.718235][ T6260] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 149.942232][ T8440] netlink: 8 bytes leftover after parsing attributes in process `syz.0.727'. [ 149.973158][ T8440] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (64) [ 150.074819][ T8451] tipc: Enabled bearer , priority 0 [ 150.223773][ T8459] netlink: 'syz.3.734': attribute type 11 has an invalid length. [ 150.312732][ T8458] netlink: 12 bytes leftover after parsing attributes in process `syz.0.732'. [ 150.355951][ T8452] syzkaller0: entered promiscuous mode [ 150.379753][ T8452] syzkaller0: entered allmulticast mode [ 150.389477][ T8452] tipc: Resetting bearer [ 150.435747][ T8447] tipc: Resetting bearer [ 150.877847][ T52] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 151.459002][ T8477] netlink: 28 bytes leftover after parsing attributes in process `syz.3.737'. [ 151.549628][ T8447] tipc: Disabling bearer [ 151.775985][ T8483] netlink: 4 bytes leftover after parsing attributes in process `syz.2.740'. [ 151.801208][ T8483] (unnamed net_device) (uninitialized): Invalid ad_actor_system MAC address. [ 151.811943][ T8483] (unnamed net_device) (uninitialized): option ad_actor_system: invalid value (1) [ 151.825598][ T8483] netlink: 84 bytes leftover after parsing attributes in process `syz.2.740'. [ 151.866547][ T8487] netlink: 8 bytes leftover after parsing attributes in process `syz.3.741'. [ 152.018780][ T6260] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 152.332861][ T8511] netlink: 'syz.3.749': attribute type 11 has an invalid length. [ 152.717417][ T8520] veth0: entered promiscuous mode [ 152.724004][ T8520] netlink: 'syz.1.753': attribute type 21 has an invalid length. [ 152.732228][ T8520] netlink: 'syz.1.753': attribute type 4 has an invalid length. [ 152.744367][ T8520] netlink: 'syz.1.753': attribute type 5 has an invalid length. [ 152.755372][ T8520] netlink: 'syz.1.753': attribute type 21 has an invalid length. [ 152.769007][ T8520] netlink: 'syz.1.753': attribute type 4 has an invalid length. [ 152.776889][ T8520] netlink: 'syz.1.753': attribute type 5 has an invalid length. [ 152.788537][ T8519] veth0: left promiscuous mode [ 152.913850][ T8526] netlink: 'syz.4.757': attribute type 2 has an invalid length. [ 152.962919][ T6260] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 152.975719][ T6260] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.087924][ T6260] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 153.105426][ T6260] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.162679][ T52] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 153.213333][ T6260] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 153.271540][ T6260] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.405845][ T8534] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 153.469865][ T6260] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 153.487126][ T6260] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.642651][ T8549] __nla_validate_parse: 10 callbacks suppressed [ 153.642671][ T8549] netlink: 20 bytes leftover after parsing attributes in process `syz.1.763'. [ 153.697450][ T8549] netlink: 20 bytes leftover after parsing attributes in process `syz.1.763'. [ 153.742991][ T8549] netlink: 20 bytes leftover after parsing attributes in process `syz.1.763'. [ 153.812522][ T8549] netlink: 20 bytes leftover after parsing attributes in process `syz.1.763'. [ 153.837264][ T8549] netlink: 20 bytes leftover after parsing attributes in process `syz.1.763'. [ 153.874768][ T8549] netlink: 20 bytes leftover after parsing attributes in process `syz.1.763'. [ 153.892374][ T8549] netlink: 20 bytes leftover after parsing attributes in process `syz.1.763'. [ 153.905060][ T8549] netlink: 20 bytes leftover after parsing attributes in process `syz.1.763'. [ 153.980932][ T8549] netlink: 20 bytes leftover after parsing attributes in process `syz.1.763'. [ 154.028860][ T5138] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 154.042612][ T5138] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 154.052918][ T5138] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 154.070252][ T8549] netlink: 20 bytes leftover after parsing attributes in process `syz.1.763'. [ 154.104314][ T5138] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 154.113474][ T5138] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 154.221743][ T6260] bridge_slave_1: left allmulticast mode [ 154.253957][ T6260] bridge_slave_1: left promiscuous mode [ 154.286317][ T6260] bridge0: port 2(bridge_slave_1) entered disabled state [ 154.306154][ T12] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 154.754734][ T6260] bridge_slave_0: left allmulticast mode [ 154.755093][ T8587] xt_cgroup: invalid path, errno=-2 [ 154.766305][ T6260] bridge_slave_0: left promiscuous mode [ 154.767426][ T6260] bridge0: port 1(bridge_slave_0) entered disabled state [ 155.065436][ T6260] bond1 (unregistering): (slave ip6gretap2): Releasing active interface [ 155.364438][ T6260] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 155.593583][ T6260] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 155.605125][ T6260] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 155.619299][ T6260] bond0 (unregistering): Released all slaves [ 155.708802][ T6260] bond1 (unregistering): Released all slaves [ 155.742208][ T8593] netlink: 'syz.3.772': attribute type 33 has an invalid length. [ 155.950975][ T8604] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.975386][ T6260] tipc: Disabling bearer [ 155.983493][ T6260] tipc: Left network mode [ 156.197847][ T5828] Bluetooth: hci0: command tx timeout [ 156.543021][ T8639] IPVS: set_ctl: invalid protocol: 58 172.20.20.170:20002 [ 156.918186][ T6260] hsr_slave_0: left promiscuous mode [ 156.931694][ T6260] hsr_slave_1: left promiscuous mode [ 156.950445][ T6260] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 156.971839][ T6260] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 156.990877][ T6260] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 157.010176][ T6260] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 157.063019][ T6260] veth1_macvtap: left promiscuous mode [ 157.092050][ T6260] veth0_macvtap: left promiscuous mode [ 157.108658][ T6260] veth1_vlan: left promiscuous mode [ 157.127378][ T6260] veth0_vlan: left promiscuous mode [ 157.485366][ T6260] pim6reg527 (unregistering): left allmulticast mode [ 157.529684][ T6260] pimreg (unregistering): left allmulticast mode [ 158.018584][ T6260] team0 (unregistering): Port device team_slave_1 removed [ 158.072911][ T6260] team0 (unregistering): Port device team_slave_0 removed [ 158.281584][ T5828] Bluetooth: hci0: command tx timeout [ 158.408218][ T8674] netlink: 'syz.3.788': attribute type 11 has an invalid length. [ 158.427209][ T8665] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR [ 158.511835][ T8560] chnl_net:caif_netlink_parms(): no params data found [ 158.698453][ T8691] Bluetooth: MGMT ver 1.23 [ 158.704007][ T8687] Bluetooth: hci0: Opcode 0x0c03 failed: -112 [ 159.085862][ T8712] __nla_validate_parse: 31 callbacks suppressed [ 159.085881][ T8712] netlink: 28 bytes leftover after parsing attributes in process `syz.1.796'. [ 159.137170][ T8712] netlink: 32 bytes leftover after parsing attributes in process `syz.1.796'. [ 159.159894][ T8560] bridge0: port 1(bridge_slave_0) entered blocking state [ 159.192273][ T8560] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.220977][ T8560] bridge_slave_0: entered allmulticast mode [ 159.245032][ T8560] bridge_slave_0: entered promiscuous mode [ 159.322717][ T8560] bridge0: port 2(bridge_slave_1) entered blocking state [ 159.352063][ T8560] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.383826][ T8560] bridge_slave_1: entered allmulticast mode [ 159.399976][ T8560] bridge_slave_1: entered promiscuous mode [ 159.541746][ T8731] netlink: 'syz.3.801': attribute type 10 has an invalid length. [ 159.612952][ T8731] netlink: 55 bytes leftover after parsing attributes in process `syz.3.801'. [ 159.685954][ T8733] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.800'. [ 159.702372][ T8560] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 160.071611][ T8560] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 160.274894][ T8766] netlink: 'syz.4.807': attribute type 11 has an invalid length. [ 160.309260][ T8770] netlink: 20 bytes leftover after parsing attributes in process `syz.3.806'. [ 160.310609][ T8766] netlink: 224 bytes leftover after parsing attributes in process `syz.4.807'. [ 160.346152][ T8560] team0: Port device team_slave_0 added [ 160.381450][ T8560] team0: Port device team_slave_1 added [ 160.401037][ T8770] bridge0: port 2(bridge_slave_1) entered disabled state [ 160.409935][ T8770] bridge0: port 1(bridge_slave_0) entered disabled state [ 160.545796][ T8560] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 160.556636][ T8560] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 160.586027][ T8560] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 160.623295][ T8560] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 160.646354][ T8560] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 160.719025][ T8560] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 160.758579][ T5828] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 160.957410][ T8560] hsr_slave_0: entered promiscuous mode [ 160.975510][ T8560] hsr_slave_1: entered promiscuous mode [ 161.134418][ T8793] xt_ecn: cannot match TCP bits for non-tcp packets [ 161.248275][ T8793] netlink: 4 bytes leftover after parsing attributes in process `syz.1.814'. [ 161.583614][ T8805] tipc: Enabled bearer , priority 12 [ 161.685976][ T8809] netlink: 'syz.1.817': attribute type 3 has an invalid length. [ 161.702491][ T8809] netlink: 'syz.1.817': attribute type 1 has an invalid length. [ 161.830327][ T8814] netlink: 104 bytes leftover after parsing attributes in process `syz.3.821'. [ 161.852041][ T8809] netlink: 40 bytes leftover after parsing attributes in process `syz.1.817'. [ 161.907095][ T8809] bridge0: port 2(bridge_slave_1) entered disabled state [ 162.005798][ T8826] netlink: 8 bytes leftover after parsing attributes in process `syz.0.823'. [ 162.436275][ T8560] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 162.452206][ T8560] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 162.504035][ T8560] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 162.517061][ T8560] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 162.546572][ T8847] netlink: 'syz.1.830': attribute type 21 has an invalid length. [ 162.725867][ T8560] 8021q: adding VLAN 0 to HW filter on device bond0 [ 162.794911][ T8560] 8021q: adding VLAN 0 to HW filter on device team0 [ 162.825728][ T6260] bridge0: port 1(bridge_slave_0) entered blocking state [ 162.833042][ T6260] bridge0: port 1(bridge_slave_0) entered forwarding state [ 162.907420][ T6260] bridge0: port 2(bridge_slave_1) entered blocking state [ 162.914713][ T6260] bridge0: port 2(bridge_slave_1) entered forwarding state [ 163.341613][ T8881] veth0: entered promiscuous mode [ 163.373567][ T8877] xt_CT: No such helper "pptp" [ 163.384397][ T8881] geneve3: entered allmulticast mode [ 163.547870][ T8877] veth0: left promiscuous mode [ 163.783460][ T8560] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 163.894618][ T8560] veth0_vlan: entered promiscuous mode [ 164.114422][ T8560] veth1_vlan: entered promiscuous mode [ 164.235901][ T8560] veth0_macvtap: entered promiscuous mode [ 164.257343][ T8905] team0: Device vti0 is of different type [ 164.321267][ T8560] veth1_macvtap: entered promiscuous mode [ 164.376174][ T8560] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 164.472861][ T8560] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 164.525797][ T8908] __nla_validate_parse: 6 callbacks suppressed [ 164.525819][ T8908] netlink: 56 bytes leftover after parsing attributes in process `syz.3.844'. [ 164.544274][ T8560] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.577685][ T8560] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.616780][ T8560] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.640181][ T8560] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.765834][ T8919] ip6t_REJECT: ECHOREPLY is not supported [ 164.956275][ T5894] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 164.983857][ T5894] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 165.012222][ T8931] netlink: 8 bytes leftover after parsing attributes in process `syz.1.852'. [ 165.035003][ T8926] IPVS: set_ctl: invalid protocol: 44 10.1.1.2:20003 [ 165.060707][ T8931] netlink: 24 bytes leftover after parsing attributes in process `syz.1.852'. [ 165.077147][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 165.081014][ T8926] tipc: Enabled bearer , priority 0 [ 165.090267][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 165.181614][ T8934] netlink: 8 bytes leftover after parsing attributes in process `syz.3.853'. [ 165.218091][ T8926] syzkaller0: entered promiscuous mode [ 165.223645][ T8926] syzkaller0: entered allmulticast mode [ 165.251421][ T8926] tipc: Resetting bearer [ 165.432283][ T8925] tipc: Resetting bearer [ 165.438999][ T8944] af_packet: tpacket_rcv: packet too big, clamped from 80 to 4294967272. macoff=96 [ 165.532315][ T8949] netlink: 212360 bytes leftover after parsing attributes in process `syz.1.856'. [ 166.149236][ T54] tipc: Node number set to 3348690268 [ 166.378837][ T5138] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 166.390263][ T5138] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 166.411344][ T5138] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 166.423404][ T5138] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 166.435988][ T5138] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 166.792686][ T8925] tipc: Disabling bearer [ 166.816008][ T8951] netlink: 168 bytes leftover after parsing attributes in process `syz.0.859'. [ 166.974154][ T8960] netlink: 'syz.1.860': attribute type 64 has an invalid length. [ 167.037885][ T8960] netlink: 5 bytes leftover after parsing attributes in process `syz.1.860'. [ 167.083551][ T8966] xt_CT: No such helper "pptp" [ 167.203184][ T6260] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.443124][ T6260] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.799304][ T9005] netlink: 4 bytes leftover after parsing attributes in process `syz.3.868'. [ 167.851539][ T9006] netlink: 12 bytes leftover after parsing attributes in process `syz.3.868'. [ 168.191725][ T6260] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.385456][ T9028] ip6t_srh: unknown srh match flags 536B [ 168.504232][ T6260] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.518652][ T5828] Bluetooth: hci0: command tx timeout [ 168.560586][ T8953] chnl_net:caif_netlink_parms(): no params data found [ 168.870163][ T9045] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 169.036514][ T8953] bridge0: port 1(bridge_slave_0) entered blocking state [ 169.067995][ T8953] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.075302][ T8953] bridge_slave_0: entered allmulticast mode [ 169.110581][ T8953] bridge_slave_0: entered promiscuous mode [ 169.172916][ T8953] bridge0: port 2(bridge_slave_1) entered blocking state [ 169.197684][ T8953] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.215388][ T8953] bridge_slave_1: entered allmulticast mode [ 169.242249][ T8953] bridge_slave_1: entered promiscuous mode [ 169.350455][ T9062] netlink: 'syz.1.880': attribute type 1 has an invalid length. [ 169.370283][ T9062] netlink: 228 bytes leftover after parsing attributes in process `syz.1.880'. [ 169.456956][ T9059] syzkaller0: create flow: hash 1866578481 index 2 [ 169.524086][ T5894] syzkaller0: tun_net_xmit 76 [ 169.534294][ T5894] syzkaller0: tun_net_xmit 48 [ 169.548630][ T6260] bridge_slave_1: left allmulticast mode [ 169.554403][ T6260] bridge_slave_1: left promiscuous mode [ 169.558115][ T5879] syzkaller0: tun_net_xmit 76 [ 169.561075][ T6260] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.637394][ T6260] bridge_slave_0: left allmulticast mode [ 169.643602][ T6260] bridge_slave_0: left promiscuous mode [ 169.658129][ T6260] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.970945][ T6260] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 169.983285][ T6260] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 169.995548][ T6260] bond0 (unregistering): Released all slaves [ 170.016470][ T8953] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 170.094120][ T9056] syzkaller0: delete flow: hash 1866578481 index 2 [ 170.098707][ T5880] syzkaller0: tun_net_xmit 76 [ 170.454791][ T9091] netlink: 'syz.0.887': attribute type 1 has an invalid length. [ 170.462869][ T9091] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.887'. [ 170.597754][ T5828] Bluetooth: hci0: command tx timeout [ 171.361034][ T8953] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 171.586748][ T8953] team0: Port device team_slave_0 added [ 171.609110][ T8953] team0: Port device team_slave_1 added [ 171.640718][ T9100] xfrm0: entered promiscuous mode [ 171.645824][ T9100] xfrm0: entered allmulticast mode [ 171.849710][ T8953] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 171.887720][ T8953] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 171.955076][ T8953] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 171.988717][ T8953] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 171.995712][ T8953] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 172.048418][ T9122] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 172.074400][ T8953] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 172.185291][ T6260] hsr_slave_0: left promiscuous mode [ 172.192131][ T6260] hsr_slave_1: left promiscuous mode [ 172.198833][ T6260] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 172.206271][ T6260] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 172.215145][ T6260] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 172.224075][ T6260] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 172.257589][ T6260] veth1_macvtap: left promiscuous mode [ 172.277897][ T6260] veth0_macvtap: left promiscuous mode [ 172.294948][ T6260] veth1_vlan: left promiscuous mode [ 172.303995][ T6260] veth0_vlan: left promiscuous mode [ 172.679778][ T5828] Bluetooth: hci0: command tx timeout [ 172.783538][ T6260] team0 (unregistering): Port device team_slave_1 removed [ 172.820391][ T6260] team0 (unregistering): Port device team_slave_0 removed [ 173.207683][ T9136] netlink: 'syz.3.898': attribute type 1 has an invalid length. [ 173.222411][ T9136] netlink: 15 bytes leftover after parsing attributes in process `syz.3.898'. [ 173.421082][ T8953] hsr_slave_0: entered promiscuous mode [ 173.473460][ T8953] hsr_slave_1: entered promiscuous mode [ 174.425384][ T9205] netlink: 40 bytes leftover after parsing attributes in process `syz.0.920'. [ 174.463185][ T9206] unsupported nlmsg_type 40 [ 174.470328][ T9206] netlink: 'syz.4.917': attribute type 4 has an invalid length. [ 174.629973][ T9214] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 174.677066][ T9217] netlink: 'syz.0.923': attribute type 2 has an invalid length. [ 174.762455][ T5828] Bluetooth: hci0: command tx timeout [ 174.808490][ T8953] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 174.825120][ T8953] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 174.848170][ T8953] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 174.892463][ T8953] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 174.936463][ T9228] netlink: 60 bytes leftover after parsing attributes in process `syz.0.929'. [ 174.958250][ T9228] IPVS: set_ctl: invalid protocol: 33 127.0.0.1:20002 [ 174.973586][ T9231] netlink: 28 bytes leftover after parsing attributes in process `syz.1.928'. [ 175.003199][ T9231] netlink: 8 bytes leftover after parsing attributes in process `syz.1.928'. [ 175.042795][ T9233] netlink: 16 bytes leftover after parsing attributes in process `syz.1.928'. [ 175.153712][ T8953] 8021q: adding VLAN 0 to HW filter on device bond0 [ 175.207146][ T8953] 8021q: adding VLAN 0 to HW filter on device team0 [ 175.231284][ T5894] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.238523][ T5894] bridge0: port 1(bridge_slave_0) entered forwarding state [ 175.265636][ T5894] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.272906][ T5894] bridge0: port 2(bridge_slave_1) entered forwarding state [ 175.293977][ T9239] netlink: 'syz.1.931': attribute type 10 has an invalid length. [ 175.305680][ T9239] netlink: 55 bytes leftover after parsing attributes in process `syz.1.931'. [ 175.642705][ T9245] netlink: 8 bytes leftover after parsing attributes in process `syz.1.932'. [ 175.658389][ T9246] netlink: 8 bytes leftover after parsing attributes in process `syz.1.932'. [ 175.923123][ T8953] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 175.930687][ T9256] netlink: 'syz.0.936': attribute type 1 has an invalid length. [ 175.952509][ T9255] netlink: 'syz.3.935': attribute type 30 has an invalid length. [ 175.993656][ T9259] netlink: 8 bytes leftover after parsing attributes in process `syz.4.937'. [ 176.037454][ T9255] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 176.047289][ T9255] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 176.057136][ T9255] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 176.066416][ T9255] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 176.083271][ T9255] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 176.092514][ T9255] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 176.101559][ T9255] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 176.110549][ T9255] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 176.193427][ T9256] bond2: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 176.260772][ T8953] veth0_vlan: entered promiscuous mode [ 176.305332][ T8953] veth1_vlan: entered promiscuous mode [ 176.431442][ T9273] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 176.501150][ T8953] veth0_macvtap: entered promiscuous mode [ 176.508501][ T9275] netlink: 'syz.3.942': attribute type 1 has an invalid length. [ 176.524103][ T9275] netlink: 224 bytes leftover after parsing attributes in process `syz.3.942'. [ 176.558753][ T8953] veth1_macvtap: entered promiscuous mode [ 176.605075][ T9280] bridge4: entered promiscuous mode [ 176.618512][ T9280] bridge4: entered allmulticast mode [ 176.694778][ T9284] netlink: 44 bytes leftover after parsing attributes in process `syz.4.945'. [ 176.710839][ T8953] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 176.730646][ T9284] netlink: 43 bytes leftover after parsing attributes in process `syz.4.945'. [ 176.761755][ T9284] netlink: 'syz.4.945': attribute type 5 has an invalid length. [ 176.773186][ T8953] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 176.810053][ T9284] netlink: 43 bytes leftover after parsing attributes in process `syz.4.945'. [ 176.823098][ T8953] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.843644][ T9290] openvswitch: netlink: IPv6 tunnel dst address is zero [ 176.851938][ T8953] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.865179][ T8953] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.875549][ T8953] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.917833][ T9286] netlink: 'syz.4.945': attribute type 10 has an invalid length. [ 177.005109][ T9286] bond0: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 177.117408][ T9294] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 177.181166][ T9302] netlink: 100 bytes leftover after parsing attributes in process `syz.1.949'. [ 177.223883][ T9302] netlink: 16 bytes leftover after parsing attributes in process `syz.1.949'. [ 177.285832][ T5894] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 177.304158][ T5894] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 177.404303][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 177.419044][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 177.583634][ T9318] netlink: 24 bytes leftover after parsing attributes in process `syz.1.953'. [ 177.762074][ T9328] netlink: 'syz.0.956': attribute type 7 has an invalid length. [ 177.932574][ T9333] xt_l2tp: missing protocol rule (udp|l2tpip) [ 177.940294][ T9329] vxcan0: entered allmulticast mode [ 178.207203][ T9345] veth0: entered promiscuous mode [ 178.240659][ T9347] veth0: left promiscuous mode [ 178.663683][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.054175][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.224090][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.268405][ T9386] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 179.291312][ T9386] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 179.337195][ T9386] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 179.357279][ T9386] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 179.452419][ T5138] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 179.461657][ T5138] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 179.464541][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.483761][ T5138] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 179.504603][ T5138] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 179.512871][ T5138] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 179.554148][ T9396] IPVS: set_ctl: invalid protocol: 47 172.20.20.23:20001 [ 179.903667][ T9408] bridge_slave_1: left promiscuous mode [ 179.914792][ T9408] bridge0: port 2(bridge_slave_1) entered disabled state [ 179.934017][ T9408] bridge_slave_0: left allmulticast mode [ 179.942390][ T9408] bridge_slave_0: left promiscuous mode [ 179.953217][ T9408] bridge0: port 1(bridge_slave_0) entered disabled state [ 179.980948][ T9420] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 180.190684][ T9397] syzkaller0: refused to change device tx_queue_len [ 180.275605][ T9433] netlink: 'syz.3.984': attribute type 5 has an invalid length. [ 180.298042][ T12] bridge_slave_1: left allmulticast mode [ 180.320913][ T12] bridge_slave_1: left promiscuous mode [ 180.326857][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 180.388851][ T12] bridge_slave_0: left allmulticast mode [ 180.394556][ T12] bridge_slave_0: left promiscuous mode [ 180.435954][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 180.892895][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 180.904984][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 180.916645][ T12] bond0 (unregistering): Released all slaves [ 180.936719][ T9435] __nla_validate_parse: 5 callbacks suppressed [ 180.936785][ T9435] netlink: 24 bytes leftover after parsing attributes in process `syz.0.985'. [ 180.976919][ T9454] bridge0: port 3(vlan2) entered blocking state [ 181.011795][ T9454] bridge0: port 3(vlan2) entered disabled state [ 181.030048][ T9454] vlan2: entered allmulticast mode [ 181.036392][ T9454] bridge0: entered allmulticast mode [ 181.057291][ T9454] vlan2: left allmulticast mode [ 181.069453][ T9454] bridge0: left allmulticast mode [ 181.113814][ T9457] xt_CT: You must specify a L4 protocol and not use inversions on it [ 181.539331][ T9476] netlink: 252 bytes leftover after parsing attributes in process `syz.1.997'. [ 181.563384][ T5138] Bluetooth: hci0: command tx timeout [ 181.691572][ T9474] vlan2: entered allmulticast mode [ 181.697782][ T9474] gretap0: entered allmulticast mode [ 181.737286][ T9488] netlink: 580 bytes leftover after parsing attributes in process `syz.0.999'. [ 181.821779][ T12] hsr_slave_0: left promiscuous mode [ 181.865568][ T12] hsr_slave_1: left promiscuous mode [ 181.872254][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 181.888327][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 181.901968][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 181.910099][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 181.915487][ T9466] netlink: 'syz.4.992': attribute type 4 has an invalid length. [ 181.939340][ T12] veth1_macvtap: left promiscuous mode [ 181.944987][ T12] veth0_macvtap: left promiscuous mode [ 181.951083][ T12] veth1_vlan: left promiscuous mode [ 181.956445][ T12] veth0_vlan: left promiscuous mode [ 182.369888][ T9500] DRBG: could not allocate digest TFM handle: hmac(sha512) [ 182.553182][ T12] team0 (unregistering): Port device team_slave_1 removed [ 182.593756][ T12] team0 (unregistering): Port device team_slave_0 removed [ 182.976357][ T9392] chnl_net:caif_netlink_parms(): no params data found [ 183.261529][ T9522] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1004'. [ 183.271991][ T9522] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1004'. [ 183.553711][ T9539] delete_channel: no stack [ 183.566410][ T9536] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1008'. [ 183.592934][ T9392] bridge0: port 1(bridge_slave_0) entered blocking state [ 183.604809][ T9392] bridge0: port 1(bridge_slave_0) entered disabled state [ 183.614416][ T9392] bridge_slave_0: entered allmulticast mode [ 183.624577][ T9392] bridge_slave_0: entered promiscuous mode [ 183.632470][ T9543] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1008'. [ 183.642257][ T9538] (unnamed net_device) (uninitialized): option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 183.656269][ T5138] Bluetooth: hci0: command tx timeout [ 183.712738][ T9392] bridge0: port 2(bridge_slave_1) entered blocking state [ 183.737849][ T9392] bridge0: port 2(bridge_slave_1) entered disabled state [ 183.745132][ T9392] bridge_slave_1: entered allmulticast mode [ 183.760141][ T9392] bridge_slave_1: entered promiscuous mode [ 183.865037][ T9392] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 183.880686][ T9392] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 184.063316][ T9392] team0: Port device team_slave_0 added [ 184.101909][ T9392] team0: Port device team_slave_1 added [ 184.152207][ T9561] netlink: 'syz.1.1018': attribute type 5 has an invalid length. [ 184.181072][ T9561] netlink: 140 bytes leftover after parsing attributes in process `syz.1.1018'. [ 184.194258][ T9565] netlink: 'syz.1.1018': attribute type 5 has an invalid length. [ 184.207924][ T9565] netlink: 140 bytes leftover after parsing attributes in process `syz.1.1018'. [ 184.234597][ T9392] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 184.244310][ T9392] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 184.274481][ T9392] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 184.323511][ T9392] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 184.335233][ T9392] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 184.364304][ T9392] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 184.476638][ T9392] hsr_slave_0: entered promiscuous mode [ 184.499325][ T9392] hsr_slave_1: entered promiscuous mode [ 184.675081][ T9583] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1025'. [ 184.891760][ T9593] netlink: 'syz.3.1029': attribute type 11 has an invalid length. [ 185.022757][ T9596] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 185.060665][ T9599] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 185.069151][ T9599] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 185.078822][ T9599] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 185.086525][ T9599] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 185.192766][ T9609] openvswitch: netlink: Key type 198 is out of range max 32 [ 185.216583][ T9608] netlink: 'syz.0.1033': attribute type 4 has an invalid length. [ 185.258131][ T9608] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 185.482453][ T9392] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 185.497513][ T9392] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 185.511385][ T9392] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 185.534064][ T9392] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 185.676025][ T9625] netlink: 'syz.0.1038': attribute type 11 has an invalid length. [ 185.693754][ T9392] 8021q: adding VLAN 0 to HW filter on device bond0 [ 185.717794][ T5138] Bluetooth: hci0: command tx timeout [ 185.727504][ T9392] 8021q: adding VLAN 0 to HW filter on device team0 [ 185.743095][ T1095] bridge0: port 1(bridge_slave_0) entered blocking state [ 185.750359][ T1095] bridge0: port 1(bridge_slave_0) entered forwarding state [ 185.768684][ T1095] bridge0: port 2(bridge_slave_1) entered blocking state [ 185.776020][ T1095] bridge0: port 2(bridge_slave_1) entered forwarding state [ 185.993696][ T9636] netlink: 'syz.0.1041': attribute type 28 has an invalid length. [ 186.016190][ T9638] xt_hashlimit: size too large, truncated to 1048576 [ 186.016586][ T9636] netlink: 'syz.0.1041': attribute type 3 has an invalid length. [ 186.050006][ T9636] __nla_validate_parse: 6 callbacks suppressed [ 186.050027][ T9636] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1041'. [ 186.084759][ T9639] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1041'. [ 186.280282][ T9392] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 186.485012][ T9392] veth0_vlan: entered promiscuous mode [ 186.563955][ T9392] veth1_vlan: entered promiscuous mode [ 186.617419][ T6291] udevd[6291]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 186.714565][ T9392] veth0_macvtap: entered promiscuous mode [ 186.723040][ T9659] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 186.734140][ T9658] netlink: 256 bytes leftover after parsing attributes in process `syz.4.1046'. [ 186.745451][ T9392] veth1_macvtap: entered promiscuous mode [ 186.782930][ T9392] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 186.846400][ T9392] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 186.887511][ T9392] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.911609][ T9392] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.940388][ T9392] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.949497][ T9392] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.131825][ T1133] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 187.142716][ T1133] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 187.242284][ T5894] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 187.260495][ T5894] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 187.433859][ T9688] vti0: entered promiscuous mode [ 187.571849][ T9692] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1058'. [ 187.741263][ T9701] (unnamed net_device) (uninitialized): up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 187.925966][ T9714] netlink: 'syz.3.1064': attribute type 2 has an invalid length. [ 188.086211][ T9722] tipc: Enabled bearer , priority 0 [ 188.156643][ T9727] netlink: 'syz.4.1068': attribute type 1 has an invalid length. [ 188.194016][ T9729] netlink: 'syz.3.1066': attribute type 1 has an invalid length. [ 188.234949][ T9722] syzkaller0: entered promiscuous mode [ 188.256898][ T9722] syzkaller0: entered allmulticast mode [ 188.274304][ T9722] tipc: Resetting bearer [ 188.417531][ T1095] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.464008][ T9719] tipc: Resetting bearer [ 189.046140][ T9740] netlink: 'syz.1.1070': attribute type 11 has an invalid length. [ 189.067960][ T9740] netlink: 'syz.1.1070': attribute type 11 has an invalid length. [ 189.087776][ T9740] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1070'. [ 189.421827][ T5828] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 189.440393][ T5828] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 189.455057][ T5828] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 189.471329][ T5828] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 189.479491][ T5828] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 189.911822][ T9719] tipc: Disabling bearer [ 189.951940][ T1095] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.971166][ T9747] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !寿$ûÌÌULÙvy¸ÚØ¢…D£øUDŒw˜}z [ 190.209070][ T1095] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.314723][ T9766] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1076'. [ 190.378394][ T9768] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1078'. [ 190.456442][ T1095] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.706798][ T9758] netlink: 'syz.3.1074': attribute type 4 has an invalid length. [ 190.791409][ T9784] netlink: 'syz.1.1082': attribute type 10 has an invalid length. [ 190.824971][ T9784] macvlan0: entered promiscuous mode [ 190.830603][ T9784] macvlan0: entered allmulticast mode [ 191.123215][ T9793] Bluetooth: MGMT ver 1.23 [ 191.335133][ T1095] bridge_slave_1: left allmulticast mode [ 191.356188][ T1095] bridge_slave_1: left promiscuous mode [ 191.384926][ T1095] bridge0: port 2(bridge_slave_1) entered disabled state [ 191.438753][ T1095] bridge_slave_0: left allmulticast mode [ 191.444466][ T1095] bridge_slave_0: left promiscuous mode [ 191.483000][ T1095] bridge0: port 1(bridge_slave_0) entered disabled state [ 191.558101][ T5138] Bluetooth: hci0: command tx timeout [ 191.959401][ T1095] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 191.972532][ T1095] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 191.984063][ T1095] bond0 (unregistering): Released all slaves [ 192.063307][ T9750] chnl_net:caif_netlink_parms(): no params data found [ 192.354276][ T9839] netlink: 100 bytes leftover after parsing attributes in process `syz.1.1096'. [ 192.389133][ T9830] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 192.408302][ T9830] batadv0: mtu less than device minimum [ 192.415726][ T9840] netlink: 9 bytes leftover after parsing attributes in process `syz.1.1096'. [ 192.426564][ T9830] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 192.438613][ T9830] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 192.450323][ T9830] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 192.462015][ T9830] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 192.473640][ T9830] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 192.485287][ T9830] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 192.496905][ T9830] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 192.508613][ T9830] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 192.520243][ T9830] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 192.636844][ T9830] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 192.752642][ T9829] bridge_slave_0 (unregistering): left allmulticast mode [ 192.760038][ T9829] bridge_slave_0 (unregistering): left promiscuous mode [ 192.787059][ T9829] bridge0: port 1(bridge_slave_0) entered disabled state [ 192.854257][ T9840] 0·: renamed from hsr_slave_1 (while UP) [ 192.876075][ T9840] 0·: entered allmulticast mode [ 193.164279][ T9867] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1101'. [ 193.164532][ T9750] bridge0: port 1(bridge_slave_0) entered blocking state [ 193.221087][ T9750] bridge0: port 1(bridge_slave_0) entered disabled state [ 193.245545][ T9750] bridge_slave_0: entered allmulticast mode [ 193.272578][ T9750] bridge_slave_0: entered promiscuous mode [ 193.374617][ T1095] hsr_slave_0: left promiscuous mode [ 193.389520][ T1095] hsr_slave_1: left promiscuous mode [ 193.399516][ T1095] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 193.406984][ T1095] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 193.460370][ T1095] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 193.483275][ T1095] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 193.537508][ T1095] veth1_macvtap: left promiscuous mode [ 193.546051][ T1095] veth0_macvtap: left promiscuous mode [ 193.551985][ T1095] veth1_vlan: left promiscuous mode [ 193.557480][ T1095] veth0_vlan: left promiscuous mode [ 193.628178][ T9894] netlink: 'syz.4.1109': attribute type 4 has an invalid length. [ 193.638863][ T5138] Bluetooth: hci0: command tx timeout [ 194.202516][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.211791][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.339723][ T1095] team0 (unregistering): Port device team_slave_1 removed [ 194.378532][ T1095] team0 (unregistering): Port device team_slave_0 removed [ 194.727091][ T9750] bridge0: port 2(bridge_slave_1) entered blocking state [ 194.734844][ T9750] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.747321][ T9750] bridge_slave_1: entered allmulticast mode [ 194.757746][ T9750] bridge_slave_1: entered promiscuous mode [ 194.883322][ T9750] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 194.960882][ T9923] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1119'. [ 194.961976][ T9750] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 195.222331][ T9750] team0: Port device team_slave_0 added [ 195.231003][ T9936] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1124'. [ 195.289477][ T9750] team0: Port device team_slave_1 added [ 195.521180][ T9750] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 195.553609][ T9750] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 195.627649][ T9750] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 195.678245][ T9750] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 195.690243][ T9750] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 195.720773][ T5138] Bluetooth: hci0: command tx timeout [ 195.732048][ T9750] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 195.951689][ T9750] hsr_slave_0: entered promiscuous mode [ 195.966962][ T9750] hsr_slave_1: entered promiscuous mode [ 196.411490][ T9989] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1135'. [ 196.810360][T10011] netlink: 'syz.4.1142': attribute type 1 has an invalid length. [ 196.853314][T10011] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1142'. [ 197.192555][T10027] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1146'. [ 197.459389][T10035] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1149'. [ 197.489469][ T9750] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 197.522854][ T9750] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 197.571134][ T9750] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 197.621746][ T9750] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 197.665164][T10041] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1151'. [ 197.797813][ T5138] Bluetooth: hci0: command tx timeout [ 197.876957][T10049] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1155'. [ 197.912906][ T9750] 8021q: adding VLAN 0 to HW filter on device bond0 [ 197.927756][T10048] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1155'. [ 197.948670][T10051] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1156'. [ 198.005991][ T9750] 8021q: adding VLAN 0 to HW filter on device team0 [ 198.041695][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 198.048962][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 198.101651][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 198.108890][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 198.429996][T10075] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1162'. [ 198.484639][T10077] mac80211_hwsim hwsim10 ÿ: renamed from wlan1 [ 198.526801][T10071] netlink: 'syz.0.1162': attribute type 1 has an invalid length. [ 198.598232][T10071] netlink: 'syz.0.1162': attribute type 3 has an invalid length. [ 198.621295][T10071] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1162'. [ 198.903360][T10098] net_ratelimit: 13 callbacks suppressed [ 198.903381][T10098] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 199.024837][ T9750] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 199.116976][T10110] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1172'. [ 199.151509][T10110] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1172'. [ 199.176935][T10110] netlink: 31 bytes leftover after parsing attributes in process `syz.1.1172'. [ 199.190241][T10110] netlink: 'syz.1.1172': attribute type 2 has an invalid length. [ 199.208971][ T9750] veth0_vlan: entered promiscuous mode [ 199.236870][ T9750] veth1_vlan: entered promiscuous mode [ 199.289955][ T9750] veth0_macvtap: entered promiscuous mode [ 199.328492][ T9750] veth1_macvtap: entered promiscuous mode [ 199.395205][ T9750] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 199.464204][ T9750] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 199.500414][ T9750] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.527797][ T9750] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.546535][ T9750] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.577671][ T9750] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.957944][ T6260] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 199.983676][ T6260] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 200.165646][ T1095] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 200.176853][ T1095] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 200.525109][T10167] team0: No ports can be present during mode change [ 200.531717][T10169] netlink: 'syz.1.1191': attribute type 2 has an invalid length. [ 200.939457][T10188] openvswitch: netlink: Missing key (keys=40, expected=80) [ 201.337459][ T1133] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.606596][ T1133] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.776506][ T1133] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.835423][ T1133] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.947767][ T1133] bridge_slave_1: left allmulticast mode [ 201.953483][ T1133] bridge_slave_1: left promiscuous mode [ 201.961685][ T1133] bridge0: port 2(bridge_slave_1) entered disabled state [ 201.971591][ T1133] bridge_slave_0: left allmulticast mode [ 201.977270][ T1133] bridge_slave_0: left promiscuous mode [ 201.983843][ T1133] bridge0: port 1(bridge_slave_0) entered disabled state [ 202.493650][ T5828] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 202.502936][ T5828] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 202.509637][ T1133] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 202.520685][ T5828] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 202.534394][ T5828] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 202.542607][ T1133] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 202.543736][ T5828] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 202.562055][ T1133] bond0 (unregistering): Released all slaves [ 202.929707][T10246] __nla_validate_parse: 9 callbacks suppressed [ 202.929727][T10246] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1214'. [ 203.290726][T10269] netlink: 248 bytes leftover after parsing attributes in process `syz.0.1220'. [ 203.318966][ T1133] hsr_slave_0: left promiscuous mode [ 203.362142][ T1133] hsr_slave_1: left promiscuous mode [ 203.380221][ T1133] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 203.418886][ T1133] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 203.432494][T10279] netlink: 'syz.3.1223': attribute type 11 has an invalid length. [ 203.444252][ T1133] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 203.458541][ T1133] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 203.465765][T10279] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1223'. [ 203.513599][ T1133] veth1_macvtap: left promiscuous mode [ 203.529904][ T1133] veth0_macvtap: left promiscuous mode [ 203.535632][ T1133] veth1_vlan: left promiscuous mode [ 203.554361][ T1133] veth0_vlan: left promiscuous mode [ 204.081010][ T1133] team0 (unregistering): Port device team_slave_1 removed [ 204.119766][ T1133] team0 (unregistering): Port device team_slave_0 removed [ 204.600434][ T5828] Bluetooth: hci0: command tx timeout [ 204.702278][T10308] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1232'. [ 204.715733][T10308] netlink: 'syz.1.1232': attribute type 7 has an invalid length. [ 204.737871][T10310] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1232'. [ 204.737937][T10308] netlink: 'syz.1.1232': attribute type 8 has an invalid length. [ 204.814231][T10310] netlink: 'syz.1.1232': attribute type 7 has an invalid length. [ 204.852629][T10308] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1232'. [ 204.900896][T10310] netlink: 'syz.1.1232': attribute type 8 has an invalid length. [ 204.937713][T10310] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1232'. [ 205.040518][T10235] chnl_net:caif_netlink_parms(): no params data found [ 205.123399][T10331] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1231'. [ 205.134436][T10331] nbd: must specify at least one socket [ 205.580598][T10235] bridge0: port 1(bridge_slave_0) entered blocking state [ 205.595488][T10235] bridge0: port 1(bridge_slave_0) entered disabled state [ 205.604153][T10235] bridge_slave_0: entered allmulticast mode [ 205.613533][T10235] bridge_slave_0: entered promiscuous mode [ 205.647468][T10235] bridge0: port 2(bridge_slave_1) entered blocking state [ 205.657092][T10235] bridge0: port 2(bridge_slave_1) entered disabled state [ 205.673131][T10235] bridge_slave_1: entered allmulticast mode [ 205.681393][T10235] bridge_slave_1: entered promiscuous mode [ 205.829759][T10369] batman_adv: batadv0: Local translation table size (108) exceeds maximum packet size (0); Ignoring new local tt entry: 26:8c:b8:9e:14:f0 [ 205.835002][T10235] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 205.847496][T10370] xt_HMARK: spi-set and port-set can't be combined [ 205.861151][T10369] batman_adv: batadv0: Local translation table size (108) exceeds maximum packet size (0); Ignoring new local tt entry: 26:8c:b8:9e:14:f0 [ 205.887071][T10369] batman_adv: batadv0: Local translation table size (108) exceeds maximum packet size (0); Ignoring new local tt entry: 26:8c:b8:9e:14:f0 [ 205.888634][T10235] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 205.902185][T10369] batman_adv: batadv0: Local translation table size (108) exceeds maximum packet size (0); Ignoring new local tt entry: 26:8c:b8:9e:14:f0 [ 205.949487][T10369] batman_adv: batadv0: Local translation table size (108) exceeds maximum packet size (0); Ignoring new local tt entry: 26:8c:b8:9e:14:f0 [ 205.979797][T10369] batman_adv: batadv0: Local translation table size (108) exceeds maximum packet size (0); Ignoring new local tt entry: 26:8c:b8:9e:14:f0 [ 206.012506][T10369] batman_adv: batadv0: Local translation table size (108) exceeds maximum packet size (0); Ignoring new local tt entry: 26:8c:b8:9e:14:f0 [ 206.027254][T10369] batman_adv: batadv0: Local translation table size (108) exceeds maximum packet size (0); Ignoring new local tt entry: 26:8c:b8:9e:14:f0 [ 206.042161][T10369] batman_adv: batadv0: Local translation table size (108) exceeds maximum packet size (0); Ignoring new local tt entry: 26:8c:b8:9e:14:f0 [ 206.071964][T10369] batman_adv: batadv0: Local translation table size (108) exceeds maximum packet size (0); Ignoring new local tt entry: 26:8c:b8:9e:14:f0 [ 206.187219][T10235] team0: Port device team_slave_0 added [ 206.252221][T10235] team0: Port device team_slave_1 added [ 206.400457][T10235] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 206.410424][T10235] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 206.440424][T10235] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 206.491765][T10235] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 206.537142][T10235] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 206.605419][T10235] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 206.679483][ T5828] Bluetooth: hci0: command 0x041b tx timeout [ 206.812184][T10235] hsr_slave_0: entered promiscuous mode [ 206.836699][T10235] hsr_slave_1: entered promiscuous mode [ 207.890627][T10464] xt_hashlimit: overflow, try lower: 1125899906842624/8 [ 207.971210][T10235] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 207.989871][T10235] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 208.052502][T10235] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 208.100406][T10235] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 208.354185][T10235] 8021q: adding VLAN 0 to HW filter on device bond0 [ 208.391336][T10490] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1282'. [ 208.442003][T10235] 8021q: adding VLAN 0 to HW filter on device team0 [ 208.493252][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 208.500503][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 208.562972][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 208.570216][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 208.636001][T10497] : entered promiscuous mode [ 208.652507][T10497] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1286'. [ 208.705907][T10497] gretap1: entered allmulticast mode [ 208.757868][ T5138] Bluetooth: hci0: command 0x041b tx timeout [ 208.836777][T10507] netlink: 244 bytes leftover after parsing attributes in process `syz.1.1289'. [ 208.973606][T10516] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1291'. [ 209.176188][T10235] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 209.321819][T10235] veth0_vlan: entered promiscuous mode [ 209.376794][T10235] veth1_vlan: entered promiscuous mode [ 209.446455][T10235] veth0_macvtap: entered promiscuous mode [ 209.473050][T10235] veth1_macvtap: entered promiscuous mode [ 209.483718][T10533] netlink: 'syz.0.1297': attribute type 21 has an invalid length. [ 209.513546][T10235] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 209.544925][T10235] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 209.601901][T10235] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.617375][T10235] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.628639][T10539] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1299'. [ 209.649563][T10235] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.661133][T10235] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.957036][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 209.987280][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 210.066698][ T1133] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 210.082920][ T1133] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 210.295144][T10559] netlink: 'syz.4.1304': attribute type 11 has an invalid length. [ 210.306431][T10559] netlink: 'syz.4.1304': attribute type 11 has an invalid length. [ 210.317193][T10559] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1304'. [ 210.679434][T10584] x_tables: ip_tables: osf match: only valid for protocol 6 [ 210.695166][T10584] IPVS: Unknown mcast interface: pimreg0 [ 210.830242][T10592] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1314'. [ 210.918859][T10594] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.932344][T10594] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 211.007505][T10594] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.022345][T10594] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 211.067011][T10599] netlink: 'syz.3.1317': attribute type 1 has an invalid length. [ 211.104748][T10599] 8021q: adding VLAN 0 to HW filter on device bond0 [ 211.125208][T10599] bond0: (slave geneve3): making interface the new active one [ 211.136020][T10599] bond0: (slave geneve3): Enslaving as an active interface with an up link [ 211.158757][T10594] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.169473][T10594] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 211.201817][T10600] veth7: entered promiscuous mode [ 211.213113][T10600] bond0: (slave veth7): Enslaving as an active interface with a down link [ 211.234840][T10602] vlan2: entered allmulticast mode [ 211.240156][T10602] bond0: entered allmulticast mode [ 211.245384][T10602] geneve3: entered allmulticast mode [ 211.253525][T10602] bond0: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 211.330489][T10594] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.341826][T10594] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 211.476437][ T1151] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.552769][T10594] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 211.588120][T10594] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 211.614113][T10594] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 211.622619][T10594] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 211.640290][T10536] Bluetooth: hci3: command 0x0406 tx timeout [ 211.646596][T10536] Bluetooth: hci2: command 0x0406 tx timeout [ 211.654243][ T56] Bluetooth: hci1: command 0x0406 tx timeout [ 211.671013][T10594] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 211.679892][T10594] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 211.696551][T10594] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 211.704912][T10594] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 212.728539][ T1151] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.084723][ T1151] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.311347][T10631] No such timeout policy "syz1" [ 213.324552][ T1151] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.510013][T10634] can: request_module (can-proto-0) failed. [ 213.588448][ T5842] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 213.598197][ T5842] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 213.608732][ T5842] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 213.619650][ T5842] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 213.627719][ T5842] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 213.751659][ T1151] bridge_slave_1: left allmulticast mode [ 213.768082][ T1151] bridge_slave_1: left promiscuous mode [ 213.784810][ T1151] bridge0: port 2(bridge_slave_1) entered disabled state [ 213.817070][ T1151] bridge_slave_0: left allmulticast mode [ 213.830490][ T1151] bridge_slave_0: left promiscuous mode [ 213.836791][ T1151] bridge0: port 1(bridge_slave_0) entered disabled state [ 213.920782][T10656] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1329'. [ 213.975220][T10659] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1329'. [ 214.251959][ T1151] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 214.264032][ T1151] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 214.274838][ T1151] bond0 (unregistering): Released all slaves [ 214.412922][T10667] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1333'. [ 214.657096][T10678] netlink: 'syz.0.1338': attribute type 6 has an invalid length. [ 214.874454][ T1151] hsr_slave_0: left promiscuous mode [ 214.893511][ T1151] hsr_slave_1: left promiscuous mode [ 214.907211][ T1151] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 214.915931][ T1151] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 214.961216][ T1151] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 214.981112][ T1151] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 215.045227][ T1151] veth1_macvtap: left promiscuous mode [ 215.060227][ T1151] veth0_macvtap: left promiscuous mode [ 215.066099][ T1151] veth1_vlan: left promiscuous mode [ 215.072875][ T1151] veth0_vlan: left promiscuous mode [ 215.547892][ T1151] team0 (unregistering): Port device team_slave_1 removed [ 215.590351][ T1151] team0 (unregistering): Port device team_slave_0 removed [ 215.720488][ T5828] Bluetooth: hci0: command tx timeout [ 216.060416][T10703] netlink: 6 bytes leftover after parsing attributes in process `syz.0.1342'. [ 216.071014][T10703] net_ratelimit: 246 callbacks suppressed [ 216.071031][T10703] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 216.096573][T10704] 8021q: VLANs not supported on wg1 [ 216.209660][T10716] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1346'. [ 216.314367][T10639] chnl_net:caif_netlink_parms(): no params data found [ 216.395240][T10728] netlink: 'syz.1.1350': attribute type 1 has an invalid length. [ 216.552337][T10738] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1352'. [ 216.697135][T10639] bridge0: port 1(bridge_slave_0) entered blocking state [ 216.704799][T10639] bridge0: port 1(bridge_slave_0) entered disabled state [ 216.714592][T10639] bridge_slave_0: entered allmulticast mode [ 216.723154][T10639] bridge_slave_0: entered promiscuous mode [ 216.735787][T10639] bridge0: port 2(bridge_slave_1) entered blocking state [ 216.743839][T10639] bridge0: port 2(bridge_slave_1) entered disabled state [ 216.753792][T10639] bridge_slave_1: entered allmulticast mode [ 216.762665][T10639] bridge_slave_1: entered promiscuous mode [ 216.842326][T10639] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 216.864713][T10639] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 216.984199][T10639] team0: Port device team_slave_0 added [ 217.011311][T10639] team0: Port device team_slave_1 added [ 217.086241][T10639] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 217.099217][T10639] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 217.129947][T10639] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 217.143384][T10639] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 217.154487][T10639] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 217.185571][T10639] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 217.321427][T10639] hsr_slave_0: entered promiscuous mode [ 217.334141][T10639] hsr_slave_1: entered promiscuous mode [ 217.510681][T10773] netlink: 'syz.0.1363': attribute type 1 has an invalid length. [ 217.574500][T10773] 8021q: adding VLAN 0 to HW filter on device bond3 [ 217.631020][T10777] veth7: entered promiscuous mode [ 217.661816][T10777] bond3: (slave veth7): Enslaving as an active interface with a down link [ 217.797878][ T5828] Bluetooth: hci0: command tx timeout [ 217.808884][T10789] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1367'. [ 217.935022][T10797] netlink: 'syz.3.1371': attribute type 3 has an invalid length. [ 218.009220][T10801] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1372'. [ 218.021163][T10799] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 218.365292][T10825] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1379'. [ 218.704476][T10836] netlink: 'syz.0.1383': attribute type 1 has an invalid length. [ 218.712513][T10836] netlink: 228 bytes leftover after parsing attributes in process `syz.0.1383'. [ 218.856920][T10639] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 218.895113][T10639] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 218.926303][T10639] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 218.949110][T10852] __nla_validate_parse: 2 callbacks suppressed [ 218.949130][T10852] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1390'. [ 218.966562][T10639] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 219.276571][T10639] 8021q: adding VLAN 0 to HW filter on device bond0 [ 219.334675][T10639] 8021q: adding VLAN 0 to HW filter on device team0 [ 219.353293][T10871] netlink: 'syz.1.1395': attribute type 29 has an invalid length. [ 219.365297][T10871] netlink: 596 bytes leftover after parsing attributes in process `syz.1.1395'. [ 219.377347][ T5894] bridge0: port 1(bridge_slave_0) entered blocking state [ 219.384581][ T5894] bridge0: port 1(bridge_slave_0) entered forwarding state [ 219.415419][ T5894] bridge0: port 2(bridge_slave_1) entered blocking state [ 219.422701][ T5894] bridge0: port 2(bridge_slave_1) entered forwarding state [ 219.525449][T10877] xt_nat: multiple ranges no longer supported [ 219.581329][T10883] netlink: 'syz.1.1399': attribute type 2 has an invalid length. [ 219.601141][T10883] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1399'. [ 219.821356][T10891] netlink: 'syz.3.1402': attribute type 7 has an invalid length. [ 219.851086][ T2150] IPVS: starting estimator thread 0... [ 219.881021][ T5828] Bluetooth: hci0: command tx timeout [ 219.967655][T10896] IPVS: using max 29 ests per chain, 69600 per kthread [ 220.123365][T10639] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 220.261124][T10913] lo speed is unknown, defaulting to 1000 [ 220.282980][T10913] lo speed is unknown, defaulting to 1000 [ 220.291147][T10639] veth0_vlan: entered promiscuous mode [ 220.315434][T10639] veth1_vlan: entered promiscuous mode [ 220.324892][T10915] netlink: 6 bytes leftover after parsing attributes in process `syz.0.1407'. [ 220.339080][T10915] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 220.384672][T10913] lo speed is unknown, defaulting to 1000 [ 220.431092][T10639] veth0_macvtap: entered promiscuous mode [ 220.478009][T10639] veth1_macvtap: entered promiscuous mode [ 220.490007][T10913] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 220.541689][T10639] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 220.550217][T10924] netlink: 'syz.3.1408': attribute type 13 has an invalid length. [ 220.568413][T10913] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 220.581882][T10639] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 220.595281][T10639] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.605989][T10639] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.619868][T10920] netlink: 'syz.3.1408': attribute type 13 has an invalid length. [ 220.667916][T10639] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.676676][T10639] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.727206][T10913] lo speed is unknown, defaulting to 1000 [ 220.764971][T10934] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1411'. [ 220.806766][T10913] lo speed is unknown, defaulting to 1000 [ 220.835302][T10913] lo speed is unknown, defaulting to 1000 [ 220.850637][T10936] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1411'. [ 220.901147][T10913] lo speed is unknown, defaulting to 1000 [ 220.960134][T10913] lo speed is unknown, defaulting to 1000 [ 221.003252][T10940] tipc: Enabling of bearer rejected, failed to enable media [ 221.048942][T10940] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1412'. [ 221.058037][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 221.080307][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 221.196948][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 221.215946][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 221.255227][T10950] netlink: 88 bytes leftover after parsing attributes in process `syz.3.1416'. [ 221.267888][T10950] netem: invalid attributes len -24 [ 221.273651][T10950] netem: change failed [ 221.423818][T10958] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1420'. [ 221.452019][T10955] syzkaller0: entered promiscuous mode [ 221.458901][T10955] syzkaller0: entered allmulticast mode [ 221.571375][T10958] hsr_slave_1 (unregistering): left promiscuous mode [ 222.935042][T10970] netlink: 'syz.0.1423': attribute type 11 has an invalid length. [ 222.949553][T10970] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1423'. [ 223.270150][ T36] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.380187][ T5842] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 223.390964][ T5842] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 223.404281][ T5842] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 223.413433][ T5842] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 223.423235][ T5842] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 223.745639][ T36] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.869233][T10994] syzkaller0: create flow: hash 1866578481 index 2 [ 223.916898][T10982] lo speed is unknown, defaulting to 1000 [ 223.974200][ T70] syzkaller0: tun_net_xmit 76 [ 223.987973][ T70] syzkaller0: tun_net_xmit 48 [ 223.997844][ T5882] syzkaller0: tun_net_xmit 76 [ 224.005211][T10989] syzkaller0: delete flow: hash 1866578481 index 2 [ 224.050569][ T5832] syzkaller0: tun_net_xmit 76 [ 225.067379][T11030] netlink: 'syz.1.1440': attribute type 1 has an invalid length. [ 225.478634][ T5828] Bluetooth: hci0: command tx timeout [ 225.501470][ T36] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.669759][ T36] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.733078][T11047] __nla_validate_parse: 2 callbacks suppressed [ 225.733099][T11047] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1445'. [ 225.771349][T11041] bond4: entered promiscuous mode [ 225.776445][T11041] bond4: entered allmulticast mode [ 225.783903][T11041] 8021q: adding VLAN 0 to HW filter on device bond4 [ 226.318840][T10982] chnl_net:caif_netlink_parms(): no params data found [ 226.335085][ T36] bridge_slave_1: left allmulticast mode [ 226.340999][ T36] bridge_slave_1: left promiscuous mode [ 226.353174][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 226.388864][ T36] bridge_slave_0: left allmulticast mode [ 226.394580][ T36] bridge_slave_0: left promiscuous mode [ 226.396219][T11078] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 226.410013][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 226.515851][T11087] netlink: 'syz.3.1456': attribute type 1 has an invalid length. [ 226.524642][T11087] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1456'. [ 226.879170][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 226.892282][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 226.903107][ T36] bond0 (unregistering): Released all slaves [ 226.975402][T11094] netlink: 'syz.3.1459': attribute type 12 has an invalid length. [ 226.997845][T11094] netlink: 'syz.3.1459': attribute type 29 has an invalid length. [ 227.016170][T11094] netlink: 148 bytes leftover after parsing attributes in process `syz.3.1459'. [ 227.044603][T11094] netlink: 59 bytes leftover after parsing attributes in process `syz.3.1459'. [ 227.087263][T11097] sch_tbf: burst 2 is lower than device lo mtu (11337746) ! [ 227.327361][T11116] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1463'. [ 227.556010][T11138] xt_CT: You must specify a L4 protocol and not use inversions on it [ 227.564221][ T5828] Bluetooth: hci0: command tx timeout [ 227.626563][T10982] bridge0: port 1(bridge_slave_0) entered blocking state [ 227.635699][T10982] bridge0: port 1(bridge_slave_0) entered disabled state [ 227.655172][T10982] bridge_slave_0: entered allmulticast mode [ 227.674091][T10982] bridge_slave_0: entered promiscuous mode [ 227.736036][T10982] bridge0: port 2(bridge_slave_1) entered blocking state [ 227.754711][T10982] bridge0: port 2(bridge_slave_1) entered disabled state [ 227.763064][T10982] bridge_slave_1: entered allmulticast mode [ 227.791062][T10982] bridge_slave_1: entered promiscuous mode [ 227.813149][T11150] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1474'. [ 227.846695][ T36] hsr_slave_0: left promiscuous mode [ 227.861725][ T36] hsr_slave_1: left promiscuous mode [ 227.868780][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 227.876244][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 227.890648][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 227.898498][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 227.909882][T11155] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 227.964013][ T36] veth1_macvtap: left promiscuous mode [ 227.970033][ T36] veth0_macvtap: left promiscuous mode [ 227.975809][ T36] veth1_vlan: left promiscuous mode [ 227.983838][ T36] veth0_vlan: left promiscuous mode [ 228.056426][T11169] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1477'. [ 228.433732][ T36] team0 (unregistering): Port device team_slave_1 removed [ 228.476398][ T36] team0 (unregistering): Port device team_slave_0 removed [ 228.882907][T11150] veth1_vlan: entered allmulticast mode [ 228.898078][T11150] macvlan0: left promiscuous mode [ 228.907979][T11150] macvlan0: left allmulticast mode [ 228.913463][T11150] veth1_vlan: left allmulticast mode [ 228.955542][T10982] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 228.972462][T11168] sch_tbf: burst 0 is lower than device lo mtu (17233) ! [ 229.009179][T10982] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 229.144783][T10982] team0: Port device team_slave_0 added [ 229.167493][T11182] netlink: 'syz.1.1479': attribute type 1 has an invalid length. [ 229.175209][T10982] team0: Port device team_slave_1 added [ 229.319150][T11185] xt_CT: You must specify a L4 protocol and not use inversions on it [ 229.330858][T10982] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 229.350738][T10982] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 229.362885][T11187] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1483'. [ 229.378454][T10982] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 229.404198][T11187] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1483'. [ 229.439213][T10982] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 229.454362][T11187] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1483'. [ 229.454359][T10982] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 229.454434][T10982] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 229.637714][ T5828] Bluetooth: hci0: command tx timeout [ 229.672732][T10982] hsr_slave_0: entered promiscuous mode [ 229.679995][T10982] hsr_slave_1: entered promiscuous mode [ 230.394359][T11234] bridge0: port 3(batadv1) entered blocking state [ 230.424496][T11234] bridge0: port 3(batadv1) entered disabled state [ 230.435044][T11234] batadv1: entered allmulticast mode [ 230.454234][T11234] batadv1: entered promiscuous mode [ 230.461598][T11240] netlink: 'syz.4.1501': attribute type 4 has an invalid length. [ 230.679403][T10982] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 230.698873][T10982] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 230.743456][T10982] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 230.779748][T10982] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 230.878300][ T1133] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 230.888043][ T1133] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 230.983364][T10982] 8021q: adding VLAN 0 to HW filter on device bond0 [ 231.016730][T10982] 8021q: adding VLAN 0 to HW filter on device team0 [ 231.055017][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 231.062271][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 231.114661][ T70] bridge0: port 2(bridge_slave_1) entered blocking state [ 231.121915][ T70] bridge0: port 2(bridge_slave_1) entered forwarding state [ 231.286026][T11262] netlink: 'syz.1.1507': attribute type 1 has an invalid length. [ 231.368303][T11264] xt_CT: You must specify a L4 protocol and not use inversions on it [ 231.393380][T11264] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 231.518768][T11272] __nla_validate_parse: 4 callbacks suppressed [ 231.518790][T11272] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1509'. [ 231.578804][T11272] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1509'. [ 231.635896][T11279] delete_channel: no stack [ 231.644954][T11272] syz_tun: entered promiscuous mode [ 231.652315][T11272] gretap0: entered promiscuous mode [ 231.717681][ T5842] Bluetooth: hci0: command 0x0419 tx timeout [ 231.877041][ T5828] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 231.889701][ T5828] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 231.898037][ T5828] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 231.906163][ T5828] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 231.914012][ T5828] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 231.952687][T10982] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 231.981649][T11295] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 232.136009][T10982] veth0_vlan: entered promiscuous mode [ 232.174021][T11289] lo speed is unknown, defaulting to 1000 [ 232.192141][T10982] veth1_vlan: entered promiscuous mode [ 232.211267][T11309] sctp: [Deprecated]: syz.4.1518 (pid 11309) Use of struct sctp_assoc_value in delayed_ack socket option. [ 232.211267][T11309] Use struct sctp_sack_info instead [ 232.282949][T11311] netlink: 'syz.1.1519': attribute type 11 has an invalid length. [ 232.322197][T11311] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1519'. [ 232.337393][T10982] veth0_macvtap: entered promiscuous mode [ 232.373009][T11314] netlink: 88 bytes leftover after parsing attributes in process `syz.3.1520'. [ 232.400963][T10982] veth1_macvtap: entered promiscuous mode [ 232.535582][T10982] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 232.584328][T11325] netlink: 'syz.4.1521': attribute type 33 has an invalid length. [ 232.592832][T10982] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 232.597277][T10982] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.616125][T10982] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.625086][T10982] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.644301][T10982] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.654070][T11316] openvswitch: netlink: ct_state flags 0000bdd1 unsupported [ 232.674195][T11327] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1524'. [ 232.704873][T11316] lo: entered promiscuous mode [ 232.721609][T11316] tunl0: entered promiscuous mode [ 232.732891][T11316] gre0: entered promiscuous mode [ 232.759988][T11316] gretap0: entered promiscuous mode [ 232.774688][T11316] erspan0: entered promiscuous mode [ 232.787120][T11316] ip_vti0: entered promiscuous mode [ 232.819944][ T70] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 232.832661][ T70] netdevsim netdevsim0 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 232.856494][T11289] chnl_net:caif_netlink_parms(): no params data found [ 232.891624][ T70] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 232.902063][ T70] netdevsim netdevsim0 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 232.986997][ T70] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 233.000651][ T70] netdevsim netdevsim0 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 233.082911][T11339] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1525'. [ 233.123528][ T70] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 233.134817][ T70] netdevsim netdevsim0 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 233.271090][T11347] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1528'. [ 233.328873][T11289] bridge0: port 1(bridge_slave_0) entered blocking state [ 233.336352][T11289] bridge0: port 1(bridge_slave_0) entered disabled state [ 233.344167][T11289] bridge_slave_0: entered allmulticast mode [ 233.352603][T11289] bridge_slave_0: entered promiscuous mode [ 233.369026][T11289] bridge0: port 2(bridge_slave_1) entered blocking state [ 233.386600][T11289] bridge0: port 2(bridge_slave_1) entered disabled state [ 233.406917][T11289] bridge_slave_1: entered allmulticast mode [ 233.419035][T11289] bridge_slave_1: entered promiscuous mode [ 233.435036][T11354] netlink: 'syz.3.1530': attribute type 1 has an invalid length. [ 233.457141][ T1133] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 233.467191][T11354] netlink: 'syz.3.1530': attribute type 2 has an invalid length. [ 233.470203][ T1133] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 233.553675][T11361] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1532'. [ 233.573029][T11362] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1532'. [ 233.606593][T11363] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1530'. [ 233.654006][ T1133] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 233.673105][ T1133] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 233.682923][T11289] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 233.715421][ T70] batadv1: left allmulticast mode [ 233.727672][ T70] batadv1: left promiscuous mode [ 233.732936][ T70] bridge0: port 3(batadv1) entered disabled state [ 233.749497][ T70] bridge_slave_1: left allmulticast mode [ 233.755283][ T70] bridge_slave_1: left promiscuous mode [ 233.761476][ T70] bridge0: port 2(bridge_slave_1) entered disabled state [ 233.772313][ T70] bridge_slave_0: left allmulticast mode [ 233.778362][ T70] bridge_slave_0: left promiscuous mode [ 233.784220][ T70] bridge0: port 1(bridge_slave_0) entered disabled state [ 233.809547][ T5842] Bluetooth: hci0: command 0x0419 tx timeout [ 233.941862][ T70] bond2 (unregistering): (slave ip6gretap1): Releasing backup interface [ 233.962486][ T5842] Bluetooth: hci3: command tx timeout [ 234.480654][ T70] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 234.493091][ T70] bond_slave_0: left promiscuous mode [ 234.501400][ T70] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 234.510848][ T70] bond_slave_1: left promiscuous mode [ 234.518066][ T70] bond0 (unregistering): Released all slaves [ 234.627042][ T70] bond1 (unregistering): Released all slaves [ 234.643191][ T70] bond2 (unregistering): Released all slaves [ 234.762339][ T70] bond3 (unregistering): (slave veth7): Releasing active interface [ 234.772080][ T70] bond3 (unregistering): Released all slaves [ 234.865493][ T70] bond4 (unregistering): Released all slaves [ 234.885063][T11289] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 234.960704][T11373] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 234.994634][T11373] gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 235.003067][T11373] gretap2: entered promiscuous mode [ 235.016813][T11373] gretap2: entered allmulticast mode [ 235.181919][ T70] tipc: Left network mode [ 235.241773][T11289] team0: Port device team_slave_0 added [ 235.251755][T11289] team0: Port device team_slave_1 added [ 235.259554][T11378] bridge_slave_1: left promiscuous mode [ 235.265754][T11378] bridge0: port 2(bridge_slave_1) entered disabled state [ 235.285826][T11378] bridge_slave_0: left allmulticast mode [ 235.295500][T11378] bridge_slave_0: left promiscuous mode [ 235.305038][T11378] bridge0: port 1(bridge_slave_0) entered disabled state [ 235.463122][T11388] gretap0: entered promiscuous mode [ 235.528187][T11388] gretap0: left promiscuous mode [ 235.573895][T11289] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 235.591523][T11289] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 235.627321][T11289] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 235.695949][T11289] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 235.715877][T11289] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 235.782801][T11289] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 235.984266][T11289] hsr_slave_0: entered promiscuous mode [ 235.991528][T11289] hsr_slave_1: entered promiscuous mode [ 236.000453][T11289] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 236.008613][T11289] Cannot create hsr debugfs directory [ 236.051629][ T5842] Bluetooth: hci3: command tx timeout [ 236.126127][ T70] hsr_slave_0: left promiscuous mode [ 236.132165][ T70] hsr_slave_1: left promiscuous mode [ 236.138457][ T70] batman_adv: batadv0: Interface deactivated: dummy0 [ 236.145641][ T70] batman_adv: batadv0: Removing interface: dummy0 [ 236.152911][ T70] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 236.160784][ T70] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 236.176656][ T70] veth1_macvtap: left allmulticast mode [ 236.182766][ T70] veth1_macvtap: left promiscuous mode [ 236.189457][ T70] veth0_macvtap: left promiscuous mode [ 236.195092][ T70] veth1_vlan: left promiscuous mode [ 236.200550][ T70] veth0_vlan: left promiscuous mode [ 236.616863][ T70] team0 (unregistering): Port device team_slave_0 removed [ 236.817378][ T30] audit: type=1800 audit(1747344641.566:4): pid=11407 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1543" name="memory.events" dev="tmpfs" ino=1737 res=0 errno=0 [ 236.823240][T11408] __nla_validate_parse: 7 callbacks suppressed [ 236.823261][T11408] netlink: 100 bytes leftover after parsing attributes in process `syz.4.1544'. [ 237.032160][ T70] vxcan1 (unregistering): left allmulticast mode [ 237.170546][ T5828] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 237.181676][ T5828] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 237.190642][ T5828] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 237.206135][ T5828] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 237.223627][ T5828] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 237.661715][T11437] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1548'. [ 237.830400][T11446] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1550'. [ 238.117699][ T5842] Bluetooth: hci3: command tx timeout [ 238.174193][ T70] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.350526][ T70] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.497268][ T70] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.534098][T11417] chnl_net:caif_netlink_parms(): no params data found [ 238.650317][ T70] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.707585][T11289] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 238.764480][T11289] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 238.867431][T11289] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 238.922222][T11289] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 238.940457][T11482] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1559'. [ 239.062127][T11417] bridge0: port 1(bridge_slave_0) entered blocking state [ 239.069858][T11417] bridge0: port 1(bridge_slave_0) entered disabled state [ 239.077127][T11417] bridge_slave_0: entered allmulticast mode [ 239.086048][T11417] bridge_slave_0: entered promiscuous mode [ 239.134153][T11487] netlink: 'syz.1.1561': attribute type 21 has an invalid length. [ 239.135971][T11417] bridge0: port 2(bridge_slave_1) entered blocking state [ 239.154424][T11417] bridge0: port 2(bridge_slave_1) entered disabled state [ 239.163434][T11417] bridge_slave_1: entered allmulticast mode [ 239.174730][T11417] bridge_slave_1: entered promiscuous mode [ 239.186283][T11487] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1561'. [ 239.203757][T11492] RDS: rds_bind could not find a transport for ::ffff:172.30.0.4, load rds_tcp or rds_rdma? [ 239.242921][ T70] bridge_slave_1: left allmulticast mode [ 239.250053][ T70] bridge_slave_1: left promiscuous mode [ 239.257050][ T70] bridge0: port 2(bridge_slave_1) entered disabled state [ 239.273359][ T70] bridge_slave_0: left allmulticast mode [ 239.280087][ T70] bridge_slave_0: left promiscuous mode [ 239.286117][ T70] bridge0: port 1(bridge_slave_0) entered disabled state [ 239.305834][T11496] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1564'. [ 239.322991][ T5842] Bluetooth: hci0: command tx timeout [ 239.333886][T11496] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1564'. [ 239.840916][ T70] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 239.854209][ T70] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 239.865497][ T70] bond0 (unregistering): Released all slaves [ 239.916932][T11417] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 239.946588][T11417] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 240.098579][T11518] 8021q: VLANs not supported on ip6_vti0 [ 240.112177][T11417] team0: Port device team_slave_0 added [ 240.153159][T11417] team0: Port device team_slave_1 added [ 240.199879][ T5842] Bluetooth: hci3: command tx timeout [ 240.289876][T11531] Unsupported ieee802154 address type: 0 [ 240.387749][T11417] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 240.394749][T11417] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 240.446713][T11417] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 240.502249][ T70] hsr_slave_0: left promiscuous mode [ 240.514966][ T70] hsr_slave_1: left promiscuous mode [ 240.526255][ T70] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 240.536236][ T70] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 240.544541][ T70] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 240.553099][ T70] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 240.584630][ T70] veth1_macvtap: left promiscuous mode [ 240.604772][T11546] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1578'. [ 240.621236][ T70] veth0_macvtap: left promiscuous mode [ 240.626963][ T70] veth1_vlan: left promiscuous mode [ 240.633598][ T70] veth0_vlan: left promiscuous mode [ 241.081190][ T70] team0 (unregistering): Port device team_slave_1 removed [ 241.123085][ T70] team0 (unregistering): Port device team_slave_0 removed [ 241.398860][ T5842] Bluetooth: hci0: command tx timeout [ 241.473766][T11417] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 241.482798][T11417] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 241.511572][T11417] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 241.533931][T11552] net veth1_virt_wifi : renamed from virt_wifi0 [ 241.652407][ T3] slab kmalloc-512 start ffff888027084800 pointer offset 0 size 512 [ 241.665332][ T3] list_del corruption. next->prev should be ffff888032304c88, but was ffff88802cd1cc00. (next=ffff888027084800) [ 241.680329][ T3] ------------[ cut here ]------------ [ 241.685861][ T3] kernel BUG at lib/list_debug.c:67! [ 241.709650][T11558] netlink: 240 bytes leftover after parsing attributes in process `syz.4.1582'. [ 241.709874][ T3] Oops: invalid opcode: 0000 [#1] SMP KASAN PTI [ 241.719604][T11558] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1582'. [ 241.725010][ T3] CPU: 0 UID: 0 PID: 3 Comm: pool_workqueue_ Not tainted 6.15.0-rc5-syzkaller-00163-g09db7a4d287d #0 PREEMPT(full) [ 241.746124][ T3] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 241.756214][ T3] RIP: 0010:__list_del_entry_valid_or_report+0x18a/0x190 [ 241.763309][ T3] Code: 5c 85 43 fd 43 80 3c 2c 00 74 08 4c 89 ff e8 7d 55 63 fd 49 8b 56 08 48 c7 c7 80 d7 c1 8b 48 89 de 4c 89 f1 e8 e7 21 69 fc 90 <0f> 0b cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 241.783179][ T3] RSP: 0018:ffffc90000087cc0 EFLAGS: 00010246 [ 241.789256][ T3] RAX: 000000000000006d RBX: ffff888032304c88 RCX: 8f6f209347307100 [ 241.797243][ T3] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 241.805223][ T3] RBP: dffffc0000000000 R08: ffffc900000879a7 R09: 1ffff92000010f34 [ 241.813213][ T3] R10: dffffc0000000000 R11: fffff52000010f35 R12: 1ffff11004e10901 [ 241.821194][ T3] R13: dffffc0000000000 R14: ffff888027084800 R15: ffff888027084808 [ 241.829173][ T3] FS: 0000000000000000(0000) GS:ffff8881260cc000(0000) knlGS:0000000000000000 [ 241.838115][ T3] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 241.844704][ T3] CR2: 000000110c308702 CR3: 0000000067b62000 CR4: 00000000003526f0 [ 241.852681][ T3] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 241.860654][ T3] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 241.868721][ T3] Call Trace: [ 241.872003][ T3] [ 241.874943][ T3] pwq_release_workfn+0xbd/0x870 [ 241.879895][ T3] kthread_worker_fn+0x504/0xb60 [ 241.884842][ T3] ? kthread_worker_fn+0xe4/0xb60 [ 241.889866][ T3] ? __pfx_pwq_release_workfn+0x10/0x10 [ 241.895424][ T3] kthread+0x70e/0x8a0 [ 241.899510][ T3] ? __pfx_kthread_worker_fn+0x10/0x10 [ 241.904981][ T3] ? __pfx_kthread+0x10/0x10 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 241.909584][ T3] ? __pfx_kthread+0x10/0x10 [ 241.914187][ T3] ? _raw_spin_unlock_irq+0x23/0x50 [ 241.919394][ T3] ? lockdep_hardirqs_on+0x9c/0x150 [ 241.924604][ T3] ? __pfx_kthread+0x10/0x10 [ 241.929197][ T3] ret_from_fork+0x4b/0x80 [ 241.933613][ T3] ? __pfx_kthread+0x10/0x10 [ 241.938203][ T3] ret_from_fork_asm+0x1a/0x30 [ 241.942984][ T3] [ 241.946000][ T3] Modules linked in: [ 241.950391][ T3] ---[ end trace 0000000000000000 ]--- [ 241.984982][ T3] RIP: 0010:__list_del_entry_valid_or_report+0x18a/0x190 [ 241.985539][T11417] hsr_slave_0: entered promiscuous mode [ 241.992184][ T3] Code: 5c 85 43 fd 43 80 3c 2c 00 74 08 4c 89 ff e8 7d 55 63 fd 49 8b 56 08 48 c7 c7 80 d7 c1 8b 48 89 de 4c 89 f1 e8 e7 21 69 fc 90 <0f> 0b cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 242.068028][T11417] hsr_slave_1: entered promiscuous mode [ 242.078399][ T3] RSP: 0018:ffffc90000087cc0 EFLAGS: 00010246 [ 242.097422][ T3] RAX: 000000000000006d RBX: ffff888032304c88 RCX: 8f6f209347307100 [ 242.111455][ T3] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 242.140001][ T3] RBP: dffffc0000000000 R08: ffffc900000879a7 R09: 1ffff92000010f34 [ 242.148350][T11564] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1583'. [ 242.170023][ T3] R10: dffffc0000000000 R11: fffff52000010f35 R12: 1ffff11004e10901 [ 242.217630][ T3] R13: dffffc0000000000 R14: ffff888027084800 R15: ffff888027084808 [ 242.225755][ T3] FS: 0000000000000000(0000) GS:ffff8881261cc000(0000) knlGS:0000000000000000 [ 242.262879][ T3] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 242.278097][ T3] CR2: 000055adfa116000 CR3: 000000007cc42000 CR4: 00000000003526f0 [ 242.286136][ T3] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 242.348790][ T3] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 242.356838][ T3] Kernel panic - not syncing: Fatal exception [ 242.363074][ T3] Kernel Offset: disabled [ 242.367397][ T3] Rebooting in 86400 seconds..